Warning: Permanently added '10.128.0.181' (ED25519) to the list of known hosts. 2026/01/08 09:18:02 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 48.059838][ T28] audit: type=1400 audit(1767863883.753:106): avc: denied { unlink } for pid=404 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.116374][ T404] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.177670][ T28] audit: type=1400 audit(1767863884.863:107): avc: denied { create } for pid=448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.259280][ T28] audit: type=1401 audit(1767863884.903:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 49.399186][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.406513][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.414334][ T451] device bridge_slave_0 entered promiscuous mode [ 49.421799][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.429354][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.436901][ T451] device bridge_slave_1 entered promiscuous mode [ 49.539158][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.546872][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.554730][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.562172][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.595190][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.603204][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.610699][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.630417][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.639591][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.647708][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.654966][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.662453][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.671452][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.678558][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.686119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.694263][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.703848][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.712372][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.719913][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.727861][ T451] device veth0_vlan entered promiscuous mode [ 49.738073][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2026/01/08 09:18:05 executed programs: 0 [ 49.747563][ T451] device veth1_macvtap entered promiscuous mode [ 49.757353][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.767922][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.885541][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.892765][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.900650][ T473] device bridge_slave_0 entered promiscuous mode [ 49.907596][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.915138][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.922959][ T473] device bridge_slave_1 entered promiscuous mode [ 50.070118][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.077526][ T477] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.085482][ T477] device bridge_slave_0 entered promiscuous mode [ 50.093898][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.101302][ T477] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.108772][ T477] device bridge_slave_1 entered promiscuous mode [ 50.156862][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.164025][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.172259][ T480] device bridge_slave_0 entered promiscuous mode [ 50.199740][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.206875][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.214458][ T480] device bridge_slave_1 entered promiscuous mode [ 50.225716][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.233279][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.241213][ T478] device bridge_slave_0 entered promiscuous mode [ 50.248161][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.255884][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.263986][ T478] device bridge_slave_1 entered promiscuous mode [ 50.285692][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.294119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.332146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.340680][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.348936][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.356259][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.364220][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.380825][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.389431][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.397655][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.404814][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.429963][ T479] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.437210][ T479] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.445215][ T479] device bridge_slave_0 entered promiscuous mode [ 50.452437][ T479] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.459506][ T479] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.466965][ T479] device bridge_slave_1 entered promiscuous mode [ 50.571308][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.579715][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.587876][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.596130][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.654516][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.690150][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.698228][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.706363][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.718751][ T473] device veth0_vlan entered promiscuous mode [ 50.765333][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.777244][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.786339][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.793580][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.801249][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.811993][ T473] device veth1_macvtap entered promiscuous mode [ 50.822038][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.850763][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.858414][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.866968][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.875527][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.882586][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.890316][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.897789][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.906097][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.913244][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.920777][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.928960][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.936459][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.944177][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.952571][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.959634][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.967389][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.975728][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.983221][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.991055][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.999498][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.006929][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.014591][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.023150][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.030344][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.038605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.048026][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.056840][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.065233][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.075146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.084261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.120348][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.129133][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.137497][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.146448][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.155971][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.164103][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.173859][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.182253][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.190857][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.200346][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.208539][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.217216][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.225995][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.234661][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.258057][ T478] device veth0_vlan entered promiscuous mode [ 51.271939][ T479] device veth0_vlan entered promiscuous mode [ 51.279795][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.288285][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.296948][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.305372][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.313560][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.322187][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.330785][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.338779][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.347454][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.356087][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.364422][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.372101][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.379909][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.387616][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.422915][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.431113][ T28] audit: type=1400 audit(1767863887.113:109): avc: denied { bpf } for pid=527 comm="syz.0.17" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.452063][ T528] FAULT_INJECTION: forcing a failure. [ 51.452063][ T528] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 51.453058][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.474276][ T28] audit: type=1400 audit(1767863887.113:110): avc: denied { map_create } for pid=527 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.474970][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.494255][ T528] CPU: 1 PID: 528 Comm: syz.0.17 Not tainted syzkaller #0 [ 51.502287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.509336][ T528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.509367][ T528] Call Trace: [ 51.509373][ T528] [ 51.509380][ T528] __dump_stack+0x21/0x24 [ 51.509411][ T528] dump_stack_lvl+0xee/0x150 [ 51.509427][ T528] ? __cfi_dump_stack_lvl+0x8/0x8 [ 51.509446][ T528] dump_stack+0x15/0x24 [ 51.509462][ T528] should_fail_ex+0x3d4/0x520 [ 51.509482][ T528] should_fail+0xb/0x10 [ 51.509499][ T528] should_fail_usercopy+0x1a/0x20 [ 51.509518][ T528] _copy_to_user+0x1e/0x90 [ 51.509537][ T528] simple_read_from_buffer+0xe9/0x160 [ 51.509555][ T528] proc_fail_nth_read+0x19a/0x210 [ 51.509572][ T528] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.509589][ T528] ? security_file_permission+0x94/0xb0 [ 51.518464][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.527640][ T528] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.527666][ T528] vfs_read+0x26e/0x8c0 [ 51.527686][ T528] ? __cfi_vfs_read+0x10/0x10 [ 51.532303][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.533989][ T528] ? __kasan_check_write+0x14/0x20 [ 51.538914][ T28] audit: type=1400 audit(1767863887.113:111): avc: denied { map_read map_write } for pid=527 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.543048][ T528] ? mutex_lock+0x8d/0x1a0 [ 51.543075][ T528] ? __cfi_mutex_lock+0x10/0x10 [ 51.543094][ T528] ? __fdget_pos+0x2cd/0x380 [ 51.543109][ T528] ? ksys_read+0x71/0x240 [ 51.548820][ T28] audit: type=1400 audit(1767863887.123:112): avc: denied { prog_load } for pid=527 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.552500][ T528] ksys_read+0x140/0x240 [ 51.552522][ T528] ? __cfi_ksys_read+0x10/0x10 [ 51.552535][ T528] ? fpregs_restore_userregs+0x128/0x260 [ 51.552553][ T528] __x64_sys_read+0x7b/0x90 [ 51.552566][ T528] x64_sys_call+0x2f/0x9a0 [ 51.557647][ T28] audit: type=1400 audit(1767863887.123:113): avc: denied { perfmon } for pid=527 comm="syz.0.17" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 51.561444][ T528] do_syscall_64+0x4c/0xa0 [ 51.561464][ T528] ? clear_bhb_loop+0x30/0x80 [ 51.561484][ T528] ? clear_bhb_loop+0x30/0x80 [ 51.566916][ T28] audit: type=1400 audit(1767863887.123:114): avc: denied { prog_run } for pid=527 comm="syz.0.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 51.571179][ T528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.571205][ T528] RIP: 0033:0x7f032cf8e15c [ 51.571229][ T528] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 51.582716][ T480] device veth0_vlan entered promiscuous mode [ 51.587134][ T528] RSP: 002b:00007f032de0c030 EFLAGS: 00000246 [ 51.604333][ T480] device veth1_macvtap entered promiscuous mode [ 51.606500][ T528] ORIG_RAX: 0000000000000000 [ 51.817584][ T528] RAX: ffffffffffffffda RBX: 00007f032d1e5fa0 RCX: 00007f032cf8e15c [ 51.825541][ T528] RDX: 000000000000000f RSI: 00007f032de0c0a0 RDI: 0000000000000006 [ 51.833633][ T528] RBP: 00007f032de0c090 R08: 0000000000000000 R09: 0000000000000000 [ 51.841821][ T528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 51.849790][ T528] R13: 00007f032d1e6038 R14: 00007f032d1e5fa0 R15: 00007ffc75870758 [ 51.857962][ T528] [ 51.867091][ T478] device veth1_macvtap entered promiscuous mode [ 51.878115][ T530] FAULT_INJECTION: forcing a failure. [ 51.878115][ T530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 51.891476][ T530] CPU: 0 PID: 530 Comm: syz.0.22 Not tainted syzkaller #0 [ 51.898779][ T530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.908917][ T530] Call Trace: [ 51.912278][ T530] [ 51.915369][ T530] __dump_stack+0x21/0x24 [ 51.919699][ T530] dump_stack_lvl+0xee/0x150 [ 51.924674][ T530] ? __cfi_dump_stack_lvl+0x8/0x8 [ 51.929682][ T530] dump_stack+0x15/0x24 [ 51.933823][ T530] should_fail_ex+0x3d4/0x520 [ 51.938660][ T530] should_fail+0xb/0x10 [ 51.942822][ T530] should_fail_usercopy+0x1a/0x20 [ 51.948017][ T530] _copy_to_user+0x1e/0x90 [ 51.952610][ T530] simple_read_from_buffer+0xe9/0x160 [ 51.957995][ T530] proc_fail_nth_read+0x19a/0x210 [ 51.963012][ T530] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.968632][ T530] ? security_file_permission+0x94/0xb0 [ 51.974183][ T530] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 51.979742][ T530] vfs_read+0x26e/0x8c0 [ 51.983930][ T530] ? __cfi_vfs_read+0x10/0x10 [ 51.988670][ T530] ? __kasan_check_write+0x14/0x20 [ 51.993772][ T530] ? mutex_lock+0x8d/0x1a0 [ 51.998267][ T530] ? __cfi_mutex_lock+0x10/0x10 [ 52.003192][ T530] ? __fdget_pos+0x2cd/0x380 [ 52.007961][ T530] ? ksys_read+0x71/0x240 [ 52.012366][ T530] ksys_read+0x140/0x240 [ 52.016607][ T530] ? __cfi_ksys_read+0x10/0x10 [ 52.021350][ T530] ? fput+0x15b/0x1a0 [ 52.025320][ T530] ? debug_smp_processor_id+0x17/0x20 [ 52.030677][ T530] __x64_sys_read+0x7b/0x90 [ 52.035165][ T530] x64_sys_call+0x2f/0x9a0 [ 52.039575][ T530] do_syscall_64+0x4c/0xa0 [ 52.044007][ T530] ? clear_bhb_loop+0x30/0x80 [ 52.048791][ T530] ? clear_bhb_loop+0x30/0x80 [ 52.053555][ T530] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.059446][ T530] RIP: 0033:0x7f032cf8e15c [ 52.063934][ T530] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.083875][ T530] RSP: 002b:00007f032de0c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.092491][ T530] RAX: ffffffffffffffda RBX: 00007f032d1e5fa0 RCX: 00007f032cf8e15c [ 52.100825][ T530] RDX: 000000000000000f RSI: 00007f032de0c0a0 RDI: 0000000000000006 [ 52.110119][ T530] RBP: 00007f032de0c090 R08: 0000000000000000 R09: 0000000000000000 [ 52.119583][ T530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.129130][ T530] R13: 00007f032d1e6038 R14: 00007f032d1e5fa0 R15: 00007ffc75870758 [ 52.137392][ T530] [ 52.143839][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.153041][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 52.162783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.173398][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.173450][ T532] FAULT_INJECTION: forcing a failure. [ 52.173450][ T532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.181696][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.194932][ T532] CPU: 1 PID: 532 Comm: syz.0.23 Not tainted syzkaller #0 [ 52.203651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.209898][ T532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.209918][ T532] Call Trace: [ 52.209924][ T532] [ 52.209932][ T532] __dump_stack+0x21/0x24 [ 52.209961][ T532] dump_stack_lvl+0xee/0x150 [ 52.209976][ T532] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.209991][ T532] dump_stack+0x15/0x24 [ 52.210004][ T532] should_fail_ex+0x3d4/0x520 [ 52.210024][ T532] should_fail+0xb/0x10 [ 52.210044][ T532] should_fail_usercopy+0x1a/0x20 [ 52.210060][ T532] _copy_to_user+0x1e/0x90 [ 52.210078][ T532] simple_read_from_buffer+0xe9/0x160 [ 52.219318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.229565][ T532] proc_fail_nth_read+0x19a/0x210 [ 52.229603][ T532] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.229618][ T532] ? security_file_permission+0x94/0xb0 [ 52.229635][ T532] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.229648][ T532] vfs_read+0x26e/0x8c0 [ 52.229670][ T532] ? __cfi_vfs_read+0x10/0x10 [ 52.229688][ T532] ? __kasan_check_write+0x14/0x20 [ 52.229702][ T532] ? mutex_lock+0x8d/0x1a0 [ 52.229720][ T532] ? __cfi_mutex_lock+0x10/0x10 [ 52.229738][ T532] ? __fdget_pos+0x2cd/0x380 [ 52.234066][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.236023][ T532] ? ksys_read+0x71/0x240 [ 52.241214][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.245367][ T532] ksys_read+0x140/0x240 [ 52.250998][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.254893][ T532] ? __cfi_ksys_read+0x10/0x10 [ 52.260362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.263977][ T532] ? fput+0x15b/0x1a0 [ 52.269540][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.273660][ T532] ? debug_smp_processor_id+0x17/0x20 [ 52.287277][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.287677][ T532] __x64_sys_read+0x7b/0x90 [ 52.293430][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.298522][ T532] x64_sys_call+0x2f/0x9a0 [ 52.426485][ T532] do_syscall_64+0x4c/0xa0 [ 52.430996][ T532] ? clear_bhb_loop+0x30/0x80 [ 52.435688][ T532] ? clear_bhb_loop+0x30/0x80 [ 52.440460][ T532] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.446518][ T532] RIP: 0033:0x7f032cf8e15c [ 52.450919][ T532] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.470865][ T532] RSP: 002b:00007f032de0c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.479304][ T532] RAX: ffffffffffffffda RBX: 00007f032d1e5fa0 RCX: 00007f032cf8e15c [ 52.487397][ T532] RDX: 000000000000000f RSI: 00007f032de0c0a0 RDI: 0000000000000006 [ 52.495450][ T532] RBP: 00007f032de0c090 R08: 0000000000000000 R09: 0000000000000000 [ 52.503940][ T532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.511916][ T532] R13: 00007f032d1e6038 R14: 00007f032d1e5fa0 R15: 00007ffc75870758 [ 52.519978][ T532] [ 52.530325][ T479] device veth1_macvtap entered promiscuous mode [ 52.550239][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.561177][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.571278][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.580069][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.589210][ T535] FAULT_INJECTION: forcing a failure. [ 52.589210][ T535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.593731][ T477] device veth0_vlan entered promiscuous mode [ 52.604079][ T535] CPU: 1 PID: 535 Comm: syz.0.24 Not tainted syzkaller #0 [ 52.615609][ T535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.625930][ T535] Call Trace: [ 52.629299][ T535] [ 52.632243][ T535] __dump_stack+0x21/0x24 [ 52.637111][ T535] dump_stack_lvl+0xee/0x150 [ 52.641941][ T535] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.647079][ T535] dump_stack+0x15/0x24 [ 52.651230][ T535] should_fail_ex+0x3d4/0x520 [ 52.655986][ T535] should_fail+0xb/0x10 [ 52.660213][ T535] should_fail_usercopy+0x1a/0x20 [ 52.665516][ T535] _copy_to_user+0x1e/0x90 [ 52.670204][ T535] simple_read_from_buffer+0xe9/0x160 [ 52.675657][ T535] proc_fail_nth_read+0x19a/0x210 [ 52.680940][ T535] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.686574][ T535] ? security_file_permission+0x94/0xb0 [ 52.692194][ T535] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.697921][ T535] vfs_read+0x26e/0x8c0 [ 52.702296][ T535] ? __cfi_vfs_read+0x10/0x10 [ 52.707090][ T535] ? __kasan_check_write+0x14/0x20 [ 52.712277][ T535] ? mutex_lock+0x8d/0x1a0 [ 52.716739][ T535] ? __cfi_mutex_lock+0x10/0x10 [ 52.721575][ T535] ? __fdget_pos+0x2cd/0x380 [ 52.726341][ T535] ? ksys_read+0x71/0x240 [ 52.730661][ T535] ksys_read+0x140/0x240 [ 52.734920][ T535] ? __cfi_ksys_read+0x10/0x10 [ 52.740280][ T535] ? fpregs_restore_userregs+0x128/0x260 [ 52.746336][ T535] __x64_sys_read+0x7b/0x90 [ 52.751526][ T535] x64_sys_call+0x2f/0x9a0 [ 52.756032][ T535] do_syscall_64+0x4c/0xa0 [ 52.760458][ T535] ? clear_bhb_loop+0x30/0x80 [ 52.765132][ T535] ? clear_bhb_loop+0x30/0x80 [ 52.769963][ T535] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.775962][ T535] RIP: 0033:0x7f032cf8e15c [ 52.780395][ T535] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 52.800341][ T535] RSP: 002b:00007f032de0c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 52.808984][ T535] RAX: ffffffffffffffda RBX: 00007f032d1e5fa0 RCX: 00007f032cf8e15c [ 52.818009][ T535] RDX: 000000000000000f RSI: 00007f032de0c0a0 RDI: 0000000000000006 [ 52.826716][ T535] RBP: 00007f032de0c090 R08: 0000000000000000 R09: 0000000000000000 [ 52.835293][ T535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.843986][ T535] R13: 00007f032d1e6038 R14: 00007f032d1e5fa0 R15: 00007ffc75870758 [ 52.852387][ T535] [ 52.856952][ T537] FAULT_INJECTION: forcing a failure. [ 52.856952][ T537] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 52.870344][ T537] CPU: 0 PID: 537 Comm: syz.2.19 Not tainted syzkaller #0 [ 52.877764][ T537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 52.888073][ T537] Call Trace: [ 52.891337][ T537] [ 52.894338][ T537] __dump_stack+0x21/0x24 [ 52.898667][ T537] dump_stack_lvl+0xee/0x150 [ 52.903251][ T537] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.908363][ T537] dump_stack+0x15/0x24 [ 52.912791][ T537] should_fail_ex+0x3d4/0x520 [ 52.917972][ T537] should_fail+0xb/0x10 [ 52.922832][ T537] should_fail_usercopy+0x1a/0x20 [ 52.927966][ T537] _copy_to_user+0x1e/0x90 [ 52.932473][ T537] simple_read_from_buffer+0xe9/0x160 [ 52.937930][ T537] proc_fail_nth_read+0x19a/0x210 [ 52.943048][ T537] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.948606][ T537] ? security_file_permission+0x94/0xb0 [ 52.954263][ T537] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 52.960254][ T537] vfs_read+0x26e/0x8c0 [ 52.964512][ T537] ? __cfi_vfs_read+0x10/0x10 [ 52.969252][ T537] ? __kasan_check_write+0x14/0x20 [ 52.974765][ T537] ? mutex_lock+0x8d/0x1a0 [ 52.979762][ T537] ? __cfi_mutex_lock+0x10/0x10 [ 52.984622][ T537] ? __fdget_pos+0x2cd/0x380 [ 52.989433][ T537] ? ksys_read+0x71/0x240 [ 52.993864][ T537] ksys_read+0x140/0x240 [ 52.998097][ T537] ? __cfi_ksys_read+0x10/0x10 [ 53.002847][ T537] ? fput+0x15b/0x1a0 [ 53.006910][ T537] ? debug_smp_processor_id+0x17/0x20 [ 53.012354][ T537] __x64_sys_read+0x7b/0x90 [ 53.016930][ T537] x64_sys_call+0x2f/0x9a0 [ 53.021551][ T537] do_syscall_64+0x4c/0xa0 [ 53.026007][ T537] ? clear_bhb_loop+0x30/0x80 [ 53.030863][ T537] ? clear_bhb_loop+0x30/0x80 [ 53.035615][ T537] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.041604][ T537] RIP: 0033:0x7f007e18e15c [ 53.046006][ T537] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.066394][ T537] RSP: 002b:00007f007efc9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.075242][ T537] RAX: ffffffffffffffda RBX: 00007f007e3e5fa0 RCX: 00007f007e18e15c [ 53.083512][ T537] RDX: 000000000000000f RSI: 00007f007efc90a0 RDI: 0000000000000006 [ 53.091579][ T537] RBP: 00007f007efc9090 R08: 0000000000000000 R09: 0000000000000000 [ 53.099733][ T537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.108400][ T537] R13: 00007f007e3e6038 R14: 00007f007e3e5fa0 R15: 00007ffc01252b98 [ 53.116543][ T537] [ 53.127273][ T539] FAULT_INJECTION: forcing a failure. [ 53.127273][ T539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 53.147042][ T539] CPU: 1 PID: 539 Comm: syz.0.25 Not tainted syzkaller #0 [ 53.154196][ T539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.164619][ T539] Call Trace: [ 53.168078][ T539] [ 53.171135][ T539] __dump_stack+0x21/0x24 [ 53.175837][ T539] dump_stack_lvl+0xee/0x150 [ 53.180687][ T539] ? __cfi_dump_stack_lvl+0x8/0x8 [ 53.185747][ T539] dump_stack+0x15/0x24 [ 53.190285][ T539] should_fail_ex+0x3d4/0x520 [ 53.195002][ T539] should_fail+0xb/0x10 [ 53.199255][ T539] should_fail_usercopy+0x1a/0x20 [ 53.204577][ T539] _copy_to_user+0x1e/0x90 [ 53.209108][ T539] simple_read_from_buffer+0xe9/0x160 [ 53.214735][ T539] proc_fail_nth_read+0x19a/0x210 [ 53.220382][ T539] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 53.226300][ T539] ? security_file_permission+0x94/0xb0 [ 53.231934][ T539] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 53.237872][ T539] vfs_read+0x26e/0x8c0 [ 53.242116][ T539] ? __cfi_vfs_read+0x10/0x10 [ 53.246966][ T539] ? __kasan_check_write+0x14/0x20 [ 53.252157][ T539] ? mutex_lock+0x8d/0x1a0 [ 53.256656][ T539] ? __cfi_mutex_lock+0x10/0x10 [ 53.261772][ T539] ? __fdget_pos+0x2cd/0x380 [ 53.266777][ T539] ? ksys_read+0x71/0x240 [ 53.271370][ T539] ksys_read+0x140/0x240 [ 53.275746][ T539] ? __cfi_ksys_read+0x10/0x10 [ 53.280668][ T539] ? fput+0x15b/0x1a0 [ 53.284929][ T539] ? debug_smp_processor_id+0x17/0x20 [ 53.290722][ T539] __x64_sys_read+0x7b/0x90 [ 53.295294][ T539] x64_sys_call+0x2f/0x9a0 [ 53.299796][ T539] do_syscall_64+0x4c/0xa0 [ 53.304303][ T539] ? clear_bhb_loop+0x30/0x80 [ 53.309062][ T539] ? clear_bhb_loop+0x30/0x80 [ 53.313847][ T539] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.319728][ T539] RIP: 0033:0x7f032cf8e15c [ 53.324219][ T539] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 53.344329][ T539] RSP: 002b:00007f032de0c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 53.352917][ T539] RAX: ffffffffffffffda RBX: 00007f032d1e5fa0 RCX: 00007f032cf8e15c [ 53.361067][ T539] RDX: 000000000000000f RSI: 00007f032de0c0a0 RDI: 0000000000000006 [ 53.369288][ T539] RBP: 00007f032de0c090 R08: 0000000000000000 R09: 0000000000000000 [ 53.377332][ T539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.385636][ T539] R13: 00007f032d1e6038 R14: 00007f032d1e5fa0 R15: 00007ffc75870758 [ 53.393968][ T539] [ 53.399825][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.409794][ T543] FAULT_INJECTION: forcing a failure. [ 53.409794][ T543] name failslab, interval 1, probability 0, space 0, times 1 [ 53.420826][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.423936][ T543] CPU: 0 PID: 543 Comm: syz.0.27 Not tainted syzkaller #0 [ 53.431857][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.437490][ T543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.437501][ T543] Call Trace: [ 53.446831][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.456447][ T543] [ 53.456463][ T543] __dump_stack+0x21/0x24 [ 53.456486][ T543] dump_stack_lvl+0xee/0x150 [ 53.456501][ T543] ? __cfi_dump_stack_lvl+0x8/0x8 [ 53.456516][ T543] ? unwind_get_return_address+0x4d/0x90 [ 53.456533][ T543] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 53.460817][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.468557][ T543] dump_stack+0x15/0x24 [ 53.468582][ T543] should_fail_ex+0x3d4/0x520 [ 53.472254][ T533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.476182][ T543] __should_failslab+0xac/0xf0 [ 53.476208][ T543] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 53.489265][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.491814][ T543] should_failslab+0x9/0x20 [ 53.491838][ T543] __kmem_cache_alloc_node+0x3d/0x2c0 [ 53.498797][ T324] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.506315][ T543] ? __cfi_mutex_lock+0x10/0x10 [ 53.506344][ T543] ? delete_node+0x3e6/0xa60 [ 53.506362][ T543] ? tracepoint_probe_unregister+0x1e6/0x8b0 [ 53.517949][ T477] device veth1_macvtap entered promiscuous mode [ 53.523466][ T543] __kmalloc+0xa1/0x1e0 [ 53.523496][ T543] ? __cfi___bpf_trace_tlb_flush+0x10/0x10 [ 53.523515][ T543] tracepoint_probe_unregister+0x1e6/0x8b0 [ 53.523534][ T543] bpf_probe_unregister+0x61/0x70 [ 53.602469][ T543] bpf_raw_tp_link_release+0x63/0x90 [ 53.608109][ T543] bpf_link_free+0x13a/0x390 [ 53.612873][ T543] ? bpf_link_put_deferred+0x20/0x20 [ 53.618336][ T543] bpf_link_release+0x15f/0x170 [ 53.623366][ T543] ? __cfi_bpf_link_release+0x10/0x10 [ 53.628734][ T543] __fput+0x1fc/0x8f0 [ 53.632707][ T543] ____fput+0x15/0x20 [ 53.636683][ T543] task_work_run+0x1db/0x240 [ 53.641269][ T543] ? __cfi_task_work_run+0x10/0x10 [ 53.646563][ T543] ? fput+0x15b/0x1a0 [ 53.650651][ T543] exit_to_user_mode_loop+0x9b/0xb0 [ 53.655928][ T543] exit_to_user_mode_prepare+0x87/0xd0 [ 53.661473][ T543] syscall_exit_to_user_mode+0x1a/0x30 [ 53.667180][ T543] do_syscall_64+0x58/0xa0 [ 53.671682][ T543] ? clear_bhb_loop+0x30/0x80 [ 53.676449][ T543] ? clear_bhb_loop+0x30/0x80 [ 53.681417][ T543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.687432][ T543] RIP: 0033:0x7f032cf8f749 [ 53.691856][ T543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 53.712216][ T543] RSP: 002b:00007f032de0c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 53.720808][ T543] RAX: 0000000000000000 RBX: 00007f032d1e5fa0 RCX: 00007f032cf8f749 [ 53.728883][ T543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 53.736853][ T543] RBP: 00007f032de0c090 R08: 0000000000000000 R09: 0000000000000000 [ 53.745170][ T543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 53.753483][ T543] R13: 00007f032d1e6038 R14: 00007f032d1e5fa0 R15: 00007ffc75870758 [ 53.761453][ T543] [ 53.766075][ T543] CFI failure at __traceiter_tlb_flush+0x80/0xd0 (target: tp_stub_func+0x0/0x10; expected type: 0x205553a5) [ 53.777704][ T543] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 53.784049][ T543] CPU: 1 PID: 543 Comm: syz.0.27 Not tainted syzkaller #0 [ 53.791139][ T543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 53.801169][ T543] RIP: 0010:__traceiter_tlb_flush+0x80/0xd0 [ 53.807157][ T543] Code: 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 48 62 07 00 49 8b 7c 24 08 44 89 f6 48 8b 55 d0 41 ba 5b ac aa df 44 03 53 fc 74 02 <0f> 0b ff d3 49 83 c7 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 53.826980][ T543] RSP: 0018:ffffc90002c078e8 EFLAGS: 00010093 [ 53.833132][ T543] RAX: 1ffff110234db2a6 RBX: ffffffff81714650 RCX: ffff888108dfd100 [ 53.841094][ T543] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffc90000a2b000 [ 53.849141][ T543] RBP: ffffc90002c07918 R08: dffffc0000000000 R09: fffff5200057dced [ 53.857291][ T543] R10: 0000000084eb1367 R11: 1ffff9200057dcec R12: ffff88811a6d9528 [ 53.865559][ T543] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811a6d9528 [ 53.873727][ T543] FS: 00007f032de0c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 53.883114][ T543] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.890054][ T543] CR2: 000000c006df5000 CR3: 000000011560f000 CR4: 00000000003506a0 [ 53.898125][ T543] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.906172][ T543] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.914179][ T543] Call Trace: [ 53.917719][ T543] [ 53.920925][ T543] switch_mm_irqs_off+0x61f/0x980 [ 53.925961][ T543] __schedule+0x9eb/0x14e0 [ 53.930364][ T543] ? plist_add+0x3e8/0x470 [ 53.934892][ T543] ? __sched_text_start+0x8/0x8 [ 53.940024][ T543] ? __cfi___futex_queue+0x10/0x10 [ 53.945154][ T543] ? futex_wait_setup+0x1b0/0x240 [ 53.950292][ T543] schedule+0xbd/0x170 [ 53.954568][ T543] futex_wait_queue+0xf5/0x230 [ 53.959329][ T543] futex_wait+0x1a3/0x750 [ 53.963754][ T543] ? wake_up_q+0x105/0x1b0 [ 53.968187][ T543] ? __cfi_futex_wait+0x10/0x10 [ 53.973126][ T543] ? __cfi_futex_wake+0x10/0x10 [ 53.977998][ T543] ? __cfi_call_rcu+0x10/0x10 [ 53.982688][ T543] ? security_file_free+0xd8/0xf0 [ 53.987735][ T543] do_futex+0x2dc/0x420 [ 53.991899][ T543] ? percpu_counter_add_batch+0x13c/0x160 [ 53.997628][ T543] ? __cfi_do_futex+0x10/0x10 [ 54.002315][ T543] __se_sys_futex+0x273/0x2e0 [ 54.007016][ T543] ? __x64_sys_futex+0x100/0x100 [ 54.011945][ T543] ? __cfi_mem_cgroup_handle_over_high+0x10/0x10 [ 54.018257][ T543] ? fput+0x15b/0x1a0 [ 54.022457][ T543] __x64_sys_futex+0xe5/0x100 [ 54.027302][ T543] x64_sys_call+0x7ec/0x9a0 [ 54.031821][ T543] do_syscall_64+0x4c/0xa0 [ 54.036231][ T543] ? clear_bhb_loop+0x30/0x80 [ 54.040983][ T543] ? clear_bhb_loop+0x30/0x80 [ 54.045643][ T543] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.051987][ T543] RIP: 0033:0x7f032cf8f749 [ 54.056387][ T543] Code: Unable to access opcode bytes at 0x7f032cf8f71f. [ 54.064009][ T543] RSP: 002b:00007f032de0c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 54.073485][ T543] RAX: ffffffffffffffda RBX: 00007f032d1e5fa8 RCX: 00007f032cf8f749 [ 54.081841][ T543] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f032d1e5fa8 [ 54.090420][ T543] RBP: 00007f032d1e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 54.098374][ T543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.106944][ T543] R13: 00007f032d1e6038 R14: 00007ffc75870670 R15: 00007ffc75870758 [ 54.115331][ T543] [ 54.118825][ T543] Modules linked in: [ 54.122913][ T543] ---[ end trace 0000000000000000 ]--- [ 54.128714][ T543] RIP: 0010:__traceiter_tlb_flush+0x80/0xd0 [ 54.134879][ T543] Code: 89 f8 48 c1 e8 03 42 80 3c 28 00 74 05 e8 48 62 07 00 49 8b 7c 24 08 44 89 f6 48 8b 55 d0 41 ba 5b ac aa df 44 03 53 fc 74 02 <0f> 0b ff d3 49 83 c7 18 4c 89 f8 48 c1 e8 03 42 80 3c 28 00 74 08 [ 54.154958][ T543] RSP: 0018:ffffc90002c078e8 EFLAGS: 00010093 [ 54.161119][ T543] RAX: 1ffff110234db2a6 RBX: ffffffff81714650 RCX: ffff888108dfd100 [ 54.169191][ T543] RDX: ffffffffffffffff RSI: 0000000000000000 RDI: ffffc90000a2b000 [ 54.177273][ T543] RBP: ffffc90002c07918 R08: dffffc0000000000 R09: fffff5200057dced [ 54.185528][ T543] R10: 0000000084eb1367 R11: 1ffff9200057dcec R12: ffff88811a6d9528 [ 54.193524][ T543] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88811a6d9528 [ 54.201586][ T543] FS: 00007f032de0c6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 54.210706][ T543] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.217452][ T543] CR2: 000000c006df5000 CR3: 000000011560f000 CR4: 00000000003506a0 [ 54.225585][ T543] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.233641][ T543] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.242042][ T543] Kernel panic - not syncing: Fatal exception [ 55.390435][ T543] Shutting down cpus with NMI [ 55.395796][ T543] Kernel Offset: disabled [ 55.400195][ T543] Rebooting in 86400 seconds..