last executing test programs: 11m16.627415201s ago: executing program 3 (id=6511): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_adjustment\x00', 0x168040, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) dup2$auto(r0, r1) 11m15.289612474s ago: executing program 3 (id=6517): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) 11m14.592357931s ago: executing program 3 (id=6519): mmap$auto(0x0, 0x2000c, 0xdf, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) 11m13.571397946s ago: executing program 3 (id=6523): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 11m12.718296858s ago: executing program 3 (id=6528): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0x29, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b62, r0) r2 = socket(0x11, 0x3, 0x80000000) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x8) 11m10.047362183s ago: executing program 3 (id=6542): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 11m9.082068489s ago: executing program 32 (id=6542): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x21}}, 0x40) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) 11.805865634s ago: executing program 1 (id=9115): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2d, 0x2, 0x0) socket(0xa, 0x3, 0x100) socket(0x2, 0x5, 0x0) socket(0x2, 0x5, 0x84) socketpair$auto(0x8, 0x7, 0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TCFLSH2(r0, 0x8925, 0x0) 10.128902794s ago: executing program 2 (id=9121): mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) getcwd$auto(0x0, 0xffffffffffffffff) fanotify_init$auto(0xc00, 0x2000000000002) r0 = open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0xe6e) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20600, 0x0) 9.003344693s ago: executing program 2 (id=9124): r0 = socket(0xa, 0x5, 0x84) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x20}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4138ae84, &(0x7f0000000180)={0x7}) 8.320209585s ago: executing program 2 (id=9125): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) lstat$auto(0x0, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2, 0x4, 0x8000000a041000a, 0x40000402, 0x10000, 0x8, 0xffffffff80000000, 0xe0, 0x6, 0x240000100103}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r0 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 7.746902667s ago: executing program 0 (id=9126): mmap$auto(0x0, 0x2020009, 0x3, 0xef1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0xc) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/ad_actor_sys_prio\x00', 0x942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x541c, r1) 7.73648546s ago: executing program 1 (id=9127): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0x1ff, 0x7, 0x3f, 0x7, 0x1ffe0, 0x7, 0x3, 0x2, 0xd, 0x3, 0x6, 0x4, 0x8b4, 0x9, 0x4, 0x10003, 0x7, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x7, 0x0, 0x0, 0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffe]}, 0x8, 0xd) socket(0xa, 0x5, 0x84) r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x101b00, 0x0) ioctl$auto_RNDADDTOENTCNT2(r0, 0x40045201, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21002, 0xfffffffffffffffb, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xff) 7.287233274s ago: executing program 2 (id=9128): openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) io_uring_setup$auto(0x401, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2717, 0xfffffffffffffffc, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x403c6f2b, 0x0) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x0, 0x0) 7.284722884s ago: executing program 4 (id=9137): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) listmount$auto(0x0, 0x0, 0xf423c, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r0, 0x0, 0xfffffdf1) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) getcwd$auto(0x0, 0xffffffffffffffff) r1 = inotify_init1$auto(0x3000000000000) unshare$auto(0x40000080) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) rename$auto(0x0, 0x0) mount$auto(0x0, 0x0, 0x0, 0x7, 0x0) inotify_add_watch$auto(r1, 0x0, 0x20000e6e) 6.053552527s ago: executing program 1 (id=9129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'xfrm0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r3) read$auto(r3, &(0x7f0000000040)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0005"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 6.052831464s ago: executing program 0 (id=9130): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000680)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.215515792s ago: executing program 1 (id=9132): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) getsockname$auto(0xffffffffffffffff, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0x13c, 0x0, 0x0, 0xd}, 0x5af}, 0x40, 0x100) 4.83260238s ago: executing program 1 (id=9133): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x84, 0x17, 0x0, 0x70ed581b) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) write$auto(r0, 0x0, 0xfffffdf1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) linkat$auto(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) read$auto_snd_timer_f_ops_timer(r0, &(0x7f0000000000)=""/208, 0xd0) close_range$auto(0x2, 0x8, 0x0) 4.764346629s ago: executing program 0 (id=9134): mmap$auto(0x5, 0x100000000000e983, 0x3, 0xeb4, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) close_range$auto(0x2, 0x8, 0x0) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) msgctl$auto(0xb, 0x80000001, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) pread64$auto(r0, 0x0, 0x8, 0xfffd) 3.018685106s ago: executing program 0 (id=9135): r0 = socket(0xa, 0x5, 0x84) sendmsg$auto_NETDEV_CMD_QSTATS_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0], 0x20}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4138ae84, &(0x7f0000000180)={0x7}) 3.018499028s ago: executing program 2 (id=9136): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_set_self_attr$auto(0x7, &(0x7f0000000000)={0x102, 0x585, 0x20000000000, 0x28, "100832c8acae39f049d50ad8eb3eea1cbb950cfb17e4c1e5adbff7117e987f031501a55d4ab94486"}, 0x20, 0x12000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x200, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 3.018361422s ago: executing program 4 (id=9138): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1d, 0x3, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x0) setsockopt$auto(r0, 0x65, 0x5, 0x0, 0x800) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, 0x0, 0x4000804) socket(0xa, 0x5, 0x0) socketpair$auto(0x8001, 0x5, 0x5, 0x0) mmap$auto(0x1, 0x8000, 0x1ff, 0x18, 0xffffffffffffffff, 0x2) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x20000094) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd13/queue/rotational\x00', 0x10b142, 0x0) sendfile$auto(r1, r1, 0x0, 0x2f2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0880, 0x0) 2.303101182s ago: executing program 4 (id=9139): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) shmctl$auto_IPC_SET(0x6, 0x1, &(0x7f00000003c0)={{0x5, 0x0, 0x0, 0x2f1e, 0x100, 0x5, 0x5}, 0x0, 0x400, 0x4, 0x9, @raw=0x1, @inferred, 0xb95d, 0x0, 0x0, &(0x7f00000004c0)="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"}) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x9, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f0000000240)={0xdd}) 1.941523261s ago: executing program 0 (id=9140): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010337bd7000ffdbdf25100000000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x80000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1.393251945s ago: executing program 4 (id=9141): msgctl$auto_IPC_RMID(0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x100, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) 1.370100981s ago: executing program 0 (id=9142): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/bus/usb/drivers/ALi m5602/new_id\x00', 0x1f0083, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f00000000c0), 0x1000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/pci0000:00/0000:00:01.3/local_cpulist\x00', 0x100, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x60000, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x9, 0x1, 0xbc3, 0x800, 0x3, 0x97c, 0xffff, 0x400000000003, 0x6, 0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x9, 0xffffffffffffff81, 0x8]}, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) 752.753335ms ago: executing program 4 (id=9143): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x2) fdatasync$auto(0xffffffffffffffff) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) ioctl$auto_FS_IOC_RESVSP(r0, 0x40305828, 0x6) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_dma_heap_fops_dma_heap(0xffffffffffffffff, 0xffffffffffdffe00, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/io\x00', 0x30000, 0x0) getsockopt$auto_SO_PEEK_OFF(r1, 0x8000800, 0x2a, &(0x7f00000000c0)='/dev/snd/controlC2\x00', &(0x7f0000000100)=0xffff) capget$auto(0x0, 0xfffffffffffffffe) 340.862185ms ago: executing program 4 (id=9144): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) r1 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x24, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x108) 340.678494ms ago: executing program 2 (id=9145): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/fs/cifs/open_files\x00', 0xd00, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x7ff, &(0x7f0000000000)="27c2afced1ba09d463134c74d41ad8b7e455c6616636a461636ab88c934d8ea703b7e977da82e36504c017be5967e15b9b4452f41acc34a2") r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) write$auto(0x0, 0x0, 0x0) sendmsg$auto_OVS_METER_CMD_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000003200)={&(0x7f0000000300)={0x2c, r2, 0x159198c6007aa95d, 0x70bd29, 0x25dfdbfc, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_BANDS={0x9, 0x4, 0x0, 0x1, [@generic="ac00fc008f"]}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x214000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000180)=""/249, 0xf9) 0s ago: executing program 1 (id=9146): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x8000000000007}, 0x5) kernel console output (not intermixed with test programs): ] [ 1183.845979][T27410] netlink: 25 bytes leftover after parsing attributes in process `syz.1.7971'. [ 1183.914161][T27408] [U] [ 1183.916913][T27408] [U] [ 1183.919638][T27408] [U] [ 1183.922348][T27408] [U] [ 1184.043160][T27408] [U] [ 1184.045919][T27408] [U] [ 1184.048633][T27408] [U] [ 1184.051341][T27408] [U] [ 1184.107984][T27408] [U] [ 1184.110743][T27408] [U] [ 1184.113456][T27408] [U] [ 1184.116166][T27408] [U] [ 1184.204188][T27408] [U] [ 1184.206948][T27408] [U] [ 1184.209741][T27408] [U] [ 1184.212467][T27408] [U] [ 1184.286714][T27413] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7972'. [ 1184.314226][T27408] [U] [ 1184.937428][T27413]  (unregistering): Port device team_slave_0 removed [ 1185.081934][T27413]  (unregistering): Port device team_slave_1 removed [ 1185.146810][T27425] FAULT_INJECTION: forcing a failure. [ 1185.146810][T27425] name failslab, interval 1, probability 0, space 0, times 0 [ 1185.330403][T27425] CPU: 0 UID: 0 PID: 27425 Comm: syz.0.7975 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1185.330459][T27425] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1185.330475][T27425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1185.330490][T27425] Call Trace: [ 1185.330499][T27425] [ 1185.330509][T27425] dump_stack_lvl+0x100/0x190 [ 1185.330553][T27425] should_fail_ex.cold+0x5/0xa [ 1185.330583][T27425] should_failslab+0xc2/0x120 [ 1185.330609][T27425] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1185.330643][T27425] ? snd_seq_queue_alloc+0x56/0x590 [ 1185.330676][T27425] snd_seq_queue_alloc+0x56/0x590 [ 1185.330707][T27425] snd_seq_ioctl_create_queue+0xa9/0x370 [ 1185.330744][T27425] call_seq_client_ctl+0xa3/0x130 [ 1185.330782][T27425] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1185.330819][T27425] alloc_seq_queue+0xdb/0x180 [ 1185.330857][T27425] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1185.330911][T27425] ? mark_held_locks+0x40/0x70 [ 1185.330942][T27425] ? _raw_spin_unlock_irq+0x23/0x50 [ 1185.330970][T27425] ? lockdep_hardirqs_on+0x78/0x100 [ 1185.331004][T27425] snd_seq_oss_open+0x2b2/0xa10 [ 1185.331047][T27425] odev_open+0x79/0xc0 [ 1185.331080][T27425] ? __pfx_odev_open+0x10/0x10 [ 1185.331115][T27425] soundcore_open+0x2e3/0x5a0 [ 1185.331155][T27425] ? __pfx_soundcore_open+0x10/0x10 [ 1185.331192][T27425] chrdev_open+0x234/0x6a0 [ 1185.331225][T27425] ? __pfx_apparmor_file_open+0x10/0x10 [ 1185.331264][T27425] ? __pfx_chrdev_open+0x10/0x10 [ 1185.331291][T27425] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1185.331324][T27425] do_dentry_open+0x6d8/0x1660 [ 1185.331349][T27425] ? __pfx_chrdev_open+0x10/0x10 [ 1185.331381][T27425] vfs_open+0x82/0x3f0 [ 1185.331416][T27425] path_openat+0x208c/0x31a0 [ 1185.331456][T27425] ? __pfx_path_openat+0x10/0x10 [ 1185.331493][T27425] do_file_open+0x20e/0x430 [ 1185.331520][T27425] ? __pfx_do_file_open+0x10/0x10 [ 1185.331567][T27425] ? alloc_fd+0x476/0x790 [ 1185.331594][T27425] ? do_getname+0x191/0x390 [ 1185.331628][T27425] do_sys_openat2+0x10d/0x1e0 [ 1185.331661][T27425] ? __pfx_do_sys_openat2+0x10/0x10 [ 1185.331696][T27425] ? __fget_files+0x21f/0x3d0 [ 1185.331725][T27425] __x64_sys_openat+0x12d/0x210 [ 1185.331759][T27425] ? __pfx___x64_sys_openat+0x10/0x10 [ 1185.331804][T27425] do_syscall_64+0x106/0xf80 [ 1185.331833][T27425] ? clear_bhb_loop+0x40/0x90 [ 1185.331864][T27425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1185.331890][T27425] RIP: 0033:0x7fe5e5f9c799 [ 1185.331910][T27425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1185.331937][T27425] RSP: 002b:00007fe5e6dd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1185.331961][T27425] RAX: ffffffffffffffda RBX: 00007fe5e6215fa0 RCX: 00007fe5e5f9c799 [ 1185.331978][T27425] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1185.331995][T27425] RBP: 00007fe5e6032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1185.332012][T27425] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1185.332027][T27425] R13: 00007fe5e6216038 R14: 00007fe5e6215fa0 R15: 00007ffd97028558 [ 1185.332060][T27425] [ 1186.070470][T27425] Process accounting paused [ 1187.418734][T27435] netlink: 266 bytes leftover after parsing attributes in process `syz.1.7979'. [ 1187.536308][T27435] IPv6: NLM_F_CREATE should be specified when creating new route [ 1189.070316][T27456] kvm_intel: kvm [27455]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfffffffffffffffe [ 1190.758749][T27480] netlink: 'syz.4.7999': attribute type 7 has an invalid length. [ 1190.837722][T27480] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7999'. [ 1191.204695][T27475] zswap: compressor not available [ 1191.267263][T27482] block2mtd: Using custom MTD label '' for dev [ 1191.354000][T27482] block2mtd: error: cannot open device [ 1192.545322][T27510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1192.637309][T27510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8010'. [ 1192.694809][T27505] sp0: Synchronizing with TNC [ 1192.874376][T27514] QAT: Device 250 not found [ 1193.382679][T27519] FAULT_INJECTION: forcing a failure. [ 1193.382679][T27519] name failslab, interval 1, probability 0, space 0, times 0 [ 1193.473738][T27519] CPU: 0 UID: 0 PID: 27519 Comm: syz.1.8016 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1193.473798][T27519] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1193.473814][T27519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1193.473830][T27519] Call Trace: [ 1193.473839][T27519] [ 1193.473849][T27519] dump_stack_lvl+0x100/0x190 [ 1193.473892][T27519] should_fail_ex.cold+0x5/0xa [ 1193.473922][T27519] should_failslab+0xc2/0x120 [ 1193.473949][T27519] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1193.473988][T27519] ? dup_fd+0x4d/0xd10 [ 1193.474011][T27519] ? do_futex+0x192/0x350 [ 1193.474055][T27519] dup_fd+0x4d/0xd10 [ 1193.474078][T27519] ? bpf_lsm_capable+0x9/0x10 [ 1193.474104][T27519] ? security_capable+0x80/0x260 [ 1193.474146][T27519] __x64_sys_close_range+0x405/0x5d0 [ 1193.474177][T27519] ? __pfx___x64_sys_close_range+0x10/0x10 [ 1193.474213][T27519] do_syscall_64+0x106/0xf80 [ 1193.474244][T27519] ? clear_bhb_loop+0x40/0x90 [ 1193.474275][T27519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1193.474301][T27519] RIP: 0033:0x7fedb899c799 [ 1193.474322][T27519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1193.474348][T27519] RSP: 002b:00007fedb6bf6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1193.474372][T27519] RAX: ffffffffffffffda RBX: 00007fedb8c15fa0 RCX: 00007fedb899c799 [ 1193.474390][T27519] RDX: 0000000000000002 RSI: fffffffffffff001 RDI: 0000000000000000 [ 1193.474406][T27519] RBP: 00007fedb8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1193.474422][T27519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1193.474437][T27519] R13: 00007fedb8c16038 R14: 00007fedb8c15fa0 R15: 00007fff8bbe9108 [ 1193.474468][T27519] [ 1194.044367][T27528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8017'. [ 1194.087804][T27528] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8017'. [ 1194.270046][T27523] zswap: compressor 000 not available [ 1194.939894][T27538] random: crng reseeded on system resumption [ 1197.076037][T27564] netlink: 342 bytes leftover after parsing attributes in process `syz.0.8029'. [ 1197.918489][T27569] zswap: compressor û not available [ 1198.822158][T27597] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1198.976761][T27576] Process accounting resumed [ 1200.259247][T27613] FAULT_INJECTION: forcing a failure. [ 1200.259247][T27613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1200.329168][T27613] CPU: 0 UID: 0 PID: 27613 Comm: syz.1.8044 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1200.329223][T27613] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1200.329238][T27613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1200.329254][T27613] Call Trace: [ 1200.329263][T27613] [ 1200.329274][T27613] dump_stack_lvl+0x100/0x190 [ 1200.329320][T27613] should_fail_ex.cold+0x5/0xa [ 1200.329346][T27613] ? prepare_alloc_pages+0x16d/0x5f0 [ 1200.329385][T27613] should_fail_alloc_page+0xeb/0x140 [ 1200.329421][T27613] prepare_alloc_pages+0x1f0/0x5f0 [ 1200.329450][T27613] ? workingset_test_recent+0x42d/0xe90 [ 1200.329495][T27613] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1200.329540][T27613] ? workingset_test_recent+0x143/0xe90 [ 1200.329582][T27613] ? local_lock_release+0x99/0x130 [ 1200.329615][T27613] ? __lock_acquire+0x4a5/0x2630 [ 1200.329649][T27613] ? mod_memcg_lruvec_state+0x1a6/0x630 [ 1200.329689][T27613] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1200.329740][T27613] ? __lock_acquire+0x4a5/0x2630 [ 1200.329782][T27613] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1200.329828][T27613] ? policy_nodemask+0xed/0x4f0 [ 1200.329856][T27613] alloc_pages_mpol+0x1fb/0x550 [ 1200.329886][T27613] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1200.329913][T27613] ? swap_entry_swapped+0x1ff/0x2b0 [ 1200.329938][T27613] ? __pfx_swap_entry_swapped+0x10/0x10 [ 1200.329968][T27613] folio_alloc_mpol_noprof+0x36/0x340 [ 1200.330001][T27613] swap_cache_alloc_folio+0x1a8/0x300 [ 1200.330040][T27613] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 1200.330076][T27613] ? __pfx_get_swap_device+0x10/0x10 [ 1200.330103][T27613] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1200.330150][T27613] read_swap_cache_async+0xd9/0x480 [ 1200.330189][T27613] ? __pfx_read_swap_cache_async+0x10/0x10 [ 1200.330226][T27613] ? find_held_lock+0x2b/0x80 [ 1200.330249][T27613] ? find_held_lock+0x2b/0x80 [ 1200.330278][T27613] ? swapin_walk_pmd_entry+0x2d9/0x640 [ 1200.330306][T27613] ? swapin_walk_pmd_entry+0x2d9/0x640 [ 1200.330340][T27613] swapin_walk_pmd_entry+0x2fd/0x640 [ 1200.330374][T27613] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 1200.330405][T27613] ? __lock_acquire+0x4a5/0x2630 [ 1200.330446][T27613] ? tomoyo_path_perm+0x29c/0x460 [ 1200.330488][T27613] ? kasan_save_stack+0x3f/0x50 [ 1200.330527][T27613] ? kasan_save_stack+0x30/0x50 [ 1200.330567][T27613] ? __pfx_swapin_walk_pmd_entry+0x10/0x10 [ 1200.330598][T27613] walk_pgd_range+0xc04/0x1eb0 [ 1200.330656][T27613] ? __pfx_walk_pgd_range+0x10/0x10 [ 1200.330704][T27613] __walk_page_range+0x163/0x820 [ 1200.330757][T27613] walk_page_range_vma_unsafe+0x209/0x8f0 [ 1200.330803][T27613] ? __pfx_walk_page_range_vma_unsafe+0x10/0x10 [ 1200.330846][T27613] ? lock_acquire+0x1cf/0x380 [ 1200.330879][T27613] ? finish_task_switch.isra.0+0x200/0xb80 [ 1200.330908][T27613] ? rcu_is_watching+0x12/0xc0 [ 1200.330951][T27613] walk_page_range_vma+0x63/0x90 [ 1200.330994][T27613] madvise_vma_behavior+0x1e14/0x3050 [ 1200.331029][T27613] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1200.331059][T27613] ? mas_prev_setup.constprop.0+0xb6/0x9c0 [ 1200.331097][T27613] ? mas_prev+0x9b/0xf0 [ 1200.331129][T27613] ? __pfx_mas_prev+0x10/0x10 [ 1200.331169][T27613] ? find_vma_prev+0xd8/0x150 [ 1200.331195][T27613] ? futex_unqueue+0x133/0x2c0 [ 1200.331226][T27613] ? __pfx_find_vma_prev+0x10/0x10 [ 1200.331262][T27613] ? __futex_wait+0x256/0x300 [ 1200.331307][T27613] madvise_walk_vmas+0x2fe/0xa90 [ 1200.331341][T27613] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1200.331380][T27613] madvise_do_behavior+0x1ea/0x510 [ 1200.331419][T27613] ? __pfx_madvise_do_behavior+0x10/0x10 [ 1200.331451][T27613] ? down_read+0x13b/0x460 [ 1200.331500][T27613] do_madvise+0x195/0x240 [ 1200.331529][T27613] ? __pfx_do_madvise+0x10/0x10 [ 1200.331558][T27613] ? do_futex+0x192/0x350 [ 1200.331596][T27613] ? __fget_files+0x21f/0x3d0 [ 1200.331639][T27613] __x64_sys_madvise+0xa9/0x110 [ 1200.331669][T27613] ? lockdep_hardirqs_on+0x78/0x100 [ 1200.331700][T27613] do_syscall_64+0x106/0xf80 [ 1200.331729][T27613] ? clear_bhb_loop+0x40/0x90 [ 1200.331761][T27613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.331788][T27613] RIP: 0033:0x7fedb899c799 [ 1200.331809][T27613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1200.331834][T27613] RSP: 002b:00007fedb6bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1200.331858][T27613] RAX: ffffffffffffffda RBX: 00007fedb8c15fa0 RCX: 00007fedb899c799 [ 1200.331875][T27613] RDX: 0000000100000003 RSI: 0000000001010001 RDI: 0000000000000000 [ 1200.331891][T27613] RBP: 00007fedb8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1200.331907][T27613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1200.331923][T27613] R13: 00007fedb8c16038 R14: 00007fedb8c15fa0 R15: 00007fff8bbe9108 [ 1200.331955][T27613] [ 1202.814788][T27632] netlink: 330 bytes leftover after parsing attributes in process `syz.4.8050'. [ 1204.769210][T27657] netlink: 342 bytes leftover after parsing attributes in process `syz.4.8060'. [ 1204.833965][T27657] netlink: 302 bytes leftover after parsing attributes in process `syz.4.8060'. [ 1204.860678][T27658] FAULT_INJECTION: forcing a failure. [ 1204.860678][T27658] name failslab, interval 1, probability 0, space 0, times 0 [ 1204.943688][T27658] CPU: 0 UID: 0 PID: 27658 Comm: syz.1.8059 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1204.943744][T27658] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1204.943759][T27658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1204.943775][T27658] Call Trace: [ 1204.943784][T27658] [ 1204.943794][T27658] dump_stack_lvl+0x100/0x190 [ 1204.943838][T27658] should_fail_ex.cold+0x5/0xa [ 1204.943868][T27658] ? tracepoint_add_func+0x2c5/0xf30 [ 1204.943892][T27658] should_failslab+0xc2/0x120 [ 1204.943919][T27658] __kmalloc_noprof+0xe0/0x850 [ 1204.943962][T27658] ? __pfx_trace_event_raw_event_nfs4_rename+0x10/0x10 [ 1204.944030][T27658] tracepoint_add_func+0x2c5/0xf30 [ 1204.944054][T27658] ? __pfx_trace_event_raw_event_nfs4_rename+0x10/0x10 [ 1204.944089][T27658] ? __pfx_trace_event_raw_event_nfs4_rename+0x10/0x10 [ 1204.944117][T27658] tracepoint_probe_register+0xc4/0x110 [ 1204.944154][T27658] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1204.944180][T27658] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1204.944218][T27658] ? __pfx_trace_event_raw_event_nfs4_rename+0x10/0x10 [ 1204.944247][T27658] ? __pfx_probe_sched_switch+0x10/0x10 [ 1204.944272][T27658] ? __lock_acquire+0x4a5/0x2630 [ 1204.944311][T27658] trace_event_reg+0x209/0x350 [ 1204.944351][T27658] __ftrace_event_enable_disable+0x211/0x6f0 [ 1204.944382][T27658] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1204.944421][T27658] ftrace_set_clr_event+0x16e/0x330 [ 1204.944456][T27658] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1204.944488][T27658] ? trace_get_user+0x3ae/0xa70 [ 1204.944522][T27658] ftrace_event_write+0x259/0x2c0 [ 1204.944555][T27658] ? __pfx_ftrace_event_write+0x10/0x10 [ 1204.944600][T27658] vfs_write+0x2aa/0x1070 [ 1204.944642][T27658] ? __pfx_ftrace_event_write+0x10/0x10 [ 1204.944678][T27658] ? __pfx_vfs_write+0x10/0x10 [ 1204.944735][T27658] ? __fget_files+0x215/0x3d0 [ 1204.944765][T27658] ? __fget_files+0x21f/0x3d0 [ 1204.944796][T27658] ksys_write+0x12a/0x250 [ 1204.944819][T27658] ? __pfx_ksys_write+0x10/0x10 [ 1204.944851][T27658] do_syscall_64+0x106/0xf80 [ 1204.944881][T27658] ? clear_bhb_loop+0x40/0x90 [ 1204.944913][T27658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.944939][T27658] RIP: 0033:0x7fedb899c799 [ 1204.944960][T27658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1204.944986][T27658] RSP: 002b:00007fedb6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1204.945010][T27658] RAX: ffffffffffffffda RBX: 00007fedb8c15fa0 RCX: 00007fedb899c799 [ 1204.945027][T27658] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 1204.945043][T27658] RBP: 00007fedb8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1204.945059][T27658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1204.945075][T27658] R13: 00007fedb8c16038 R14: 00007fedb8c15fa0 R15: 00007fff8bbe9108 [ 1204.945108][T27658] [ 1206.811208][T27658] event trace: Could not enable event nfs4_rename [ 1207.402230][T27683] netlink: 342 bytes leftover after parsing attributes in process `syz.1.8068'. [ 1208.114895][T27696] ERROR: Out of memory at tomoyo_memory_ok. [ 1209.255575][T27701] zswap: compressor not available [ 1212.662741][T27747] bridge0: port 3(veth0_to_bridge) entered blocking state [ 1212.718341][T27747] bridge0: port 3(veth0_to_bridge) entered disabled state [ 1212.774853][T27747] veth0_to_bridge: entered allmulticast mode [ 1212.828961][T27747] veth0_to_bridge: entered promiscuous mode [ 1214.612722][T27779] netlink: 334 bytes leftover after parsing attributes in process `syz.1.8103'. [ 1215.034472][T27788] ERROR: Out of memory at tomoyo_memory_ok. [ 1217.230738][T27801] Process accounting resumed [ 1217.953455][T27825] FAULT_INJECTION: forcing a failure. [ 1217.953455][T27825] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.151141][T27825] CPU: 0 UID: 0 PID: 27825 Comm: syz.0.8118 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1218.151197][T27825] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1218.151215][T27825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1218.151231][T27825] Call Trace: [ 1218.151240][T27825] [ 1218.151250][T27825] dump_stack_lvl+0x100/0x190 [ 1218.151294][T27825] should_fail_ex.cold+0x5/0xa [ 1218.151323][T27825] ? ima_alloc_init_template+0x19d/0x6d0 [ 1218.151362][T27825] should_failslab+0xc2/0x120 [ 1218.151390][T27825] __kmalloc_noprof+0xe0/0x850 [ 1218.151429][T27825] ? take_dentry_name_snapshot+0x30b/0x7c0 [ 1218.151468][T27825] ima_alloc_init_template+0x19d/0x6d0 [ 1218.151508][T27825] ? take_dentry_name_snapshot+0x310/0x7c0 [ 1218.151547][T27825] ima_store_measurement+0x1e3/0x5b0 [ 1218.151589][T27825] ? __pfx_ima_store_measurement+0x10/0x10 [ 1218.151641][T27825] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1218.151680][T27825] process_measurement+0x19cc/0x2350 [ 1218.151724][T27825] ? stack_trace_save+0x8e/0xc0 [ 1218.151749][T27825] ? __pfx_process_measurement+0x10/0x10 [ 1218.151785][T27825] ? __lock_acquire+0x4a5/0x2630 [ 1218.151817][T27825] ? __kasan_slab_alloc+0x89/0x90 [ 1218.151839][T27825] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1218.151878][T27825] ? init_file+0x95/0x480 [ 1218.151907][T27825] ? alloc_empty_file+0x73/0x1c0 [ 1218.151936][T27825] ? alloc_file_pseudo+0x13a/0x230 [ 1218.151967][T27825] ? ksys_mmap_pgoff+0x232/0x650 [ 1218.151991][T27825] ? __x64_sys_mmap+0x125/0x190 [ 1218.152028][T27825] ? do_syscall_64+0x106/0xf80 [ 1218.152086][T27825] ? __pfx_aa_file_perm+0x10/0x10 [ 1218.152132][T27825] ima_file_mmap+0x1c4/0x1f0 [ 1218.152169][T27825] ? __pfx_ima_file_mmap+0x10/0x10 [ 1218.152212][T27825] security_mmap_file+0x278/0x9b0 [ 1218.152240][T27825] vm_mmap_pgoff+0xec/0x470 [ 1218.152272][T27825] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1218.152298][T27825] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1218.152332][T27825] ? hugetlbfs_get_inode+0x36e/0x750 [ 1218.152404][T27825] ksys_mmap_pgoff+0x273/0x650 [ 1218.152432][T27825] ? __x64_sys_futex+0x358/0x4d0 [ 1218.152466][T27825] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1218.152493][T27825] ? xfd_validate_state+0x129/0x190 [ 1218.152536][T27825] __x64_sys_mmap+0x125/0x190 [ 1218.152581][T27825] do_syscall_64+0x106/0xf80 [ 1218.152614][T27825] ? clear_bhb_loop+0x40/0x90 [ 1218.152646][T27825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.152672][T27825] RIP: 0033:0x7fe5e5f9c799 [ 1218.152694][T27825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.152719][T27825] RSP: 002b:00007fe5e6d90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1218.152744][T27825] RAX: ffffffffffffffda RBX: 00007fe5e6216180 RCX: 00007fe5e5f9c799 [ 1218.152762][T27825] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 1218.152778][T27825] RBP: 00007fe5e6032bd9 R08: ffffffffffffffff R09: 0000300000020000 [ 1218.152795][T27825] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 1218.152811][T27825] R13: 00007fe5e6216218 R14: 00007fe5e6216180 R15: 00007ffd97028558 [ 1218.152843][T27825] [ 1219.013647][T27833] netlink: 342 bytes leftover after parsing attributes in process `syz.2.8121'. [ 1219.451210][T27840] netlink: 326 bytes leftover after parsing attributes in process `syz.2.8123'. [ 1219.799276][T27843] FAULT_INJECTION: forcing a failure. [ 1219.799276][T27843] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1219.863333][T27843] CPU: 0 UID: 0 PID: 27843 Comm: syz.4.8124 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1219.863388][T27843] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1219.863403][T27843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1219.863419][T27843] Call Trace: [ 1219.863428][T27843] [ 1219.863437][T27843] dump_stack_lvl+0x100/0x190 [ 1219.863481][T27843] should_fail_ex.cold+0x5/0xa [ 1219.863511][T27843] get_futex_key+0x1d2/0x1620 [ 1219.863546][T27843] ? __pfx_get_futex_key+0x10/0x10 [ 1219.863582][T27843] ? __cgroup_account_cputime+0xd5/0x130 [ 1219.863615][T27843] futex_wait_setup+0x83/0x510 [ 1219.863662][T27843] __futex_wait+0x19f/0x300 [ 1219.863703][T27843] ? __pfx___futex_wait+0x10/0x10 [ 1219.863741][T27843] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1219.863769][T27843] ? lockdep_hardirqs_on+0x78/0x100 [ 1219.863803][T27843] ? __pfx_futex_wake_mark+0x10/0x10 [ 1219.863847][T27843] ? find_held_lock+0x2b/0x80 [ 1219.863870][T27843] ? futex_wake+0x456/0x530 [ 1219.863919][T27843] futex_wait+0xed/0x380 [ 1219.863966][T27843] ? __pfx_futex_wait+0x10/0x10 [ 1219.864015][T27843] ? proc_id_connector+0x2ed/0x650 [ 1219.864122][T27843] do_futex+0x1ef/0x350 [ 1219.864155][T27843] ? __pfx_do_futex+0x10/0x10 [ 1219.864188][T27843] ? find_held_lock+0x2b/0x80 [ 1219.864216][T27843] __x64_sys_futex+0x34f/0x4d0 [ 1219.864254][T27843] ? __pfx___x64_sys_futex+0x10/0x10 [ 1219.864298][T27843] do_syscall_64+0x106/0xf80 [ 1219.864329][T27843] ? clear_bhb_loop+0x40/0x90 [ 1219.864360][T27843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.864386][T27843] RIP: 0033:0x7f5f0259c799 [ 1219.864407][T27843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.864432][T27843] RSP: 002b:00007f5f034740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1219.864455][T27843] RAX: ffffffffffffffda RBX: 00007f5f02815fa8 RCX: 00007f5f0259c799 [ 1219.864472][T27843] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f5f02815fa8 [ 1219.864487][T27843] RBP: 00007f5f02815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.864503][T27843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.864518][T27843] R13: 00007f5f02816038 R14: 00007ffe327058e0 R15: 00007ffe327059c8 [ 1219.864551][T27843] [ 1220.343328][T27850] netlink: 186 bytes leftover after parsing attributes in process `syz.4.8127'. [ 1220.374310][T27835] mkiss: ax0: crc mode is auto. [ 1220.389124][ T29] audit: type=1804 audit(1772819846.716:26): pid=27825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.0.8118" name="anon_hugepage" dev="hugetlbfs" ino=587498 res=0 errno=0 [ 1221.363245][T27862] sp0: Synchronizing with TNC [ 1222.111597][T27878] netlink: 338 bytes leftover after parsing attributes in process `syz.1.8135'. [ 1222.812385][T27886] netlink: 338 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1222.879794][T27886] netlink: 338 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1222.957868][T27887] netlink: 170 bytes leftover after parsing attributes in process `syz.0.8140'. [ 1223.862621][T27898] FAULT_INJECTION: forcing a failure. [ 1223.862621][T27898] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.989448][T27898] CPU: 0 UID: 0 PID: 27898 Comm: syz.0.8145 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1223.989502][T27898] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1223.989516][T27898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1223.989532][T27898] Call Trace: [ 1223.989540][T27898] [ 1223.989550][T27898] dump_stack_lvl+0x100/0x190 [ 1223.989593][T27898] should_fail_ex.cold+0x5/0xa [ 1223.989622][T27898] ? tracepoint_add_func+0x2c5/0xf30 [ 1223.989645][T27898] should_failslab+0xc2/0x120 [ 1223.989671][T27898] __kmalloc_noprof+0xe0/0x850 [ 1223.989712][T27898] ? __pfx_trace_event_raw_event_nfs4_inode_event+0x10/0x10 [ 1223.989756][T27898] tracepoint_add_func+0x2c5/0xf30 [ 1223.989779][T27898] ? __pfx_trace_event_raw_event_nfs4_inode_event+0x10/0x10 [ 1223.989828][T27898] ? __pfx_trace_event_raw_event_nfs4_inode_event+0x10/0x10 [ 1223.989872][T27898] tracepoint_probe_register+0xc4/0x110 [ 1223.989898][T27898] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1223.989923][T27898] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1223.989955][T27898] ? __pfx_trace_event_raw_event_nfs4_inode_event+0x10/0x10 [ 1223.989998][T27898] ? __pfx_probe_sched_switch+0x10/0x10 [ 1223.990033][T27898] ? __lock_acquire+0x4a5/0x2630 [ 1223.990071][T27898] trace_event_reg+0x209/0x350 [ 1223.990109][T27898] __ftrace_event_enable_disable+0x211/0x6f0 [ 1223.990139][T27898] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 1223.990176][T27898] ftrace_set_clr_event+0x16e/0x330 [ 1223.990210][T27898] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 1223.990241][T27898] ? trace_get_user+0x3ae/0xa70 [ 1223.990274][T27898] ftrace_event_write+0x259/0x2c0 [ 1223.990306][T27898] ? __pfx_ftrace_event_write+0x10/0x10 [ 1223.990351][T27898] vfs_write+0x2aa/0x1070 [ 1223.990392][T27898] ? __pfx_ftrace_event_write+0x10/0x10 [ 1223.990427][T27898] ? __pfx_vfs_write+0x10/0x10 [ 1223.990466][T27898] ? __fget_files+0x215/0x3d0 [ 1223.990495][T27898] ? __fget_files+0x21f/0x3d0 [ 1223.990525][T27898] ksys_write+0x12a/0x250 [ 1223.990547][T27898] ? __pfx_ksys_write+0x10/0x10 [ 1223.990578][T27898] do_syscall_64+0x106/0xf80 [ 1223.990606][T27898] ? clear_bhb_loop+0x40/0x90 [ 1223.990637][T27898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.990663][T27898] RIP: 0033:0x7fe5e5f9c799 [ 1223.990682][T27898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.990708][T27898] RSP: 002b:00007fe5e6dd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1223.990730][T27898] RAX: ffffffffffffffda RBX: 00007fe5e6215fa0 RCX: 00007fe5e5f9c799 [ 1223.990748][T27898] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000005 [ 1223.990762][T27898] RBP: 00007fe5e6032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1223.990778][T27898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1223.990793][T27898] R13: 00007fe5e6216038 R14: 00007fe5e6215fa0 R15: 00007ffd97028558 [ 1223.990826][T27898] [ 1223.990839][T27898] event trace: Could not enable event nfs4_access [ 1226.260388][T27928] netlink: 202 bytes leftover after parsing attributes in process `syz.0.8156'. [ 1226.761620][T27941] FAULT_INJECTION: forcing a failure. [ 1226.761620][T27941] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.832230][T27941] CPU: 0 UID: 0 PID: 27941 Comm: syz.4.8161 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1226.832288][T27941] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1226.832303][T27941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1226.832319][T27941] Call Trace: [ 1226.832328][T27941] [ 1226.832338][T27941] dump_stack_lvl+0x100/0x190 [ 1226.832382][T27941] should_fail_ex.cold+0x5/0xa [ 1226.832412][T27941] should_failslab+0xc2/0x120 [ 1226.832438][T27941] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1226.832471][T27941] ? sctp_add_bind_addr+0xae/0x3e0 [ 1226.832580][T27941] ? __sctp_v6_cmp_addr+0x206/0x530 [ 1226.832634][T27941] sctp_add_bind_addr+0xae/0x3e0 [ 1226.832663][T27941] sctp_copy_local_addr_list+0x349/0x550 [ 1226.832728][T27941] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1226.832764][T27941] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 1226.832814][T27941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1226.832861][T27941] sctp_bind_addr_copy+0xe0/0x530 [ 1226.832896][T27941] sctp_connect_new_asoc+0x1c9/0x770 [ 1226.832938][T27941] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1226.832988][T27941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1226.833039][T27941] __sctp_connect+0x3e7/0xc70 [ 1226.833085][T27941] ? __pfx___sctp_connect+0x10/0x10 [ 1226.833126][T27941] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1226.833166][T27941] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1226.833211][T27941] ? __pfx_sctp_inet_connect+0x10/0x10 [ 1226.833251][T27941] sctp_inet_connect+0x15f/0x220 [ 1226.833292][T27941] __sys_connect_file+0x141/0x1a0 [ 1226.833324][T27941] __sys_connect+0x141/0x170 [ 1226.833350][T27941] ? __pfx___sys_connect+0x10/0x10 [ 1226.833396][T27941] __x64_sys_connect+0x72/0xb0 [ 1226.833422][T27941] ? lockdep_hardirqs_on+0x78/0x100 [ 1226.833454][T27941] do_syscall_64+0x106/0xf80 [ 1226.833484][T27941] ? clear_bhb_loop+0x40/0x90 [ 1226.833516][T27941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.833544][T27941] RIP: 0033:0x7f5f0259c799 [ 1226.833566][T27941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.833594][T27941] RSP: 002b:00007f5f03474028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1226.833620][T27941] RAX: ffffffffffffffda RBX: 00007f5f02815fa0 RCX: 00007f5f0259c799 [ 1226.833638][T27941] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 1226.833656][T27941] RBP: 00007f5f02632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1226.833674][T27941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.833691][T27941] R13: 00007f5f02816038 R14: 00007f5f02815fa0 R15: 00007ffe327059c8 [ 1226.833725][T27941] [ 1227.569885][T27948] netlink: 334 bytes leftover after parsing attributes in process `syz.1.8163'. [ 1227.796532][T27956] netlink: 138 bytes leftover after parsing attributes in process `syz.1.8166'. [ 1234.910340][T28059] FAULT_INJECTION: forcing a failure. [ 1234.910340][T28059] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1235.003194][T28059] CPU: 0 UID: 8 PID: 28059 Comm: syz.0.8199 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1235.003246][T28059] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1235.003259][T28059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1235.003274][T28059] Call Trace: [ 1235.003282][T28059] [ 1235.003291][T28059] dump_stack_lvl+0x100/0x190 [ 1235.003332][T28059] should_fail_ex.cold+0x5/0xa [ 1235.003360][T28059] get_futex_key+0x1d2/0x1620 [ 1235.003392][T28059] ? __pfx_get_futex_key+0x10/0x10 [ 1235.003418][T28059] ? lock_acquire+0x1cf/0x380 [ 1235.003458][T28059] futex_wake+0xea/0x530 [ 1235.003496][T28059] ? __pfx_futex_wake+0x10/0x10 [ 1235.003532][T28059] ? exit_mm_release+0x19/0x30 [ 1235.003569][T28059] do_futex+0x32b/0x350 [ 1235.003600][T28059] ? __pfx_do_futex+0x10/0x10 [ 1235.003629][T28059] ? __might_fault+0xc5/0x140 [ 1235.003679][T28059] mm_release+0x24a/0x2f0 [ 1235.003703][T28059] do_exit+0x704/0x2b60 [ 1235.003739][T28059] ? __pfx_do_exit+0x10/0x10 [ 1235.003770][T28059] ? do_raw_spin_lock+0x128/0x260 [ 1235.003804][T28059] ? find_held_lock+0x2b/0x80 [ 1235.003825][T28059] ? get_signal+0x7e0/0x21e0 [ 1235.003852][T28059] do_group_exit+0xd5/0x2a0 [ 1235.003886][T28059] get_signal+0x1ec7/0x21e0 [ 1235.003922][T28059] ? __pfx_get_signal+0x10/0x10 [ 1235.003948][T28059] ? do_futex+0x192/0x350 [ 1235.003981][T28059] arch_do_signal_or_restart+0x91/0x770 [ 1235.004013][T28059] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1235.004051][T28059] ? __pfx___x64_sys_futex+0x10/0x10 [ 1235.004089][T28059] exit_to_user_mode_loop+0x86/0x4a0 [ 1235.004124][T28059] do_syscall_64+0x668/0xf80 [ 1235.004153][T28059] ? clear_bhb_loop+0x40/0x90 [ 1235.004182][T28059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.004208][T28059] RIP: 0033:0x7fe5e5f9c799 [ 1235.004227][T28059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1235.004251][T28059] RSP: 002b:00007fe5e6dd20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1235.004273][T28059] RAX: fffffffffffffe00 RBX: 00007fe5e6215fa8 RCX: 00007fe5e5f9c799 [ 1235.004289][T28059] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe5e6215fa8 [ 1235.004304][T28059] RBP: 00007fe5e6215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1235.004318][T28059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1235.004332][T28059] R13: 00007fe5e6216038 R14: 00007ffd97028470 R15: 00007ffd97028558 [ 1235.004363][T28059] [ 1237.873829][T28082] FAULT_INJECTION: forcing a failure. [ 1237.873829][T28082] name failslab, interval 1, probability 0, space 0, times 0 [ 1237.956462][T28082] CPU: 0 UID: 0 PID: 28082 Comm: syz.0.8206 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1237.956514][T28082] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1237.956528][T28082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1237.956543][T28082] Call Trace: [ 1237.956550][T28082] [ 1237.956559][T28082] dump_stack_lvl+0x100/0x190 [ 1237.956611][T28082] should_fail_ex.cold+0x5/0xa [ 1237.956639][T28082] should_failslab+0xc2/0x120 [ 1237.956664][T28082] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1237.956700][T28082] ? taskstats_exit+0x650/0xbd0 [ 1237.956743][T28082] taskstats_exit+0x650/0xbd0 [ 1237.956782][T28082] ? __pfx_acct_update_integrals+0x10/0x10 [ 1237.956822][T28082] ? __pfx_taskstats_exit+0x10/0x10 [ 1237.956862][T28082] ? rcu_read_lock_any_held+0x6a/0xa0 [ 1237.956902][T28082] ? exit_signals+0x395/0xaf0 [ 1237.956929][T28082] do_exit+0x659/0x2b60 [ 1237.956965][T28082] ? __pfx_do_exit+0x10/0x10 [ 1237.956999][T28082] ? do_raw_spin_lock+0x128/0x260 [ 1237.957034][T28082] ? find_held_lock+0x2b/0x80 [ 1237.957055][T28082] ? get_signal+0x7e0/0x21e0 [ 1237.957082][T28082] do_group_exit+0xd5/0x2a0 [ 1237.957116][T28082] get_signal+0x1ec7/0x21e0 [ 1237.957151][T28082] ? __pfx_get_signal+0x10/0x10 [ 1237.957177][T28082] ? do_futex+0x192/0x350 [ 1237.957212][T28082] arch_do_signal_or_restart+0x91/0x770 [ 1237.957243][T28082] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1237.957280][T28082] ? __pfx___x64_sys_futex+0x10/0x10 [ 1237.957319][T28082] exit_to_user_mode_loop+0x86/0x4a0 [ 1237.957352][T28082] do_syscall_64+0x668/0xf80 [ 1237.957382][T28082] ? clear_bhb_loop+0x40/0x90 [ 1237.957411][T28082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.957436][T28082] RIP: 0033:0x7fe5e5f9c799 [ 1237.957456][T28082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.957480][T28082] RSP: 002b:00007fe5e6db10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1237.957504][T28082] RAX: fffffffffffffe00 RBX: 00007fe5e6216098 RCX: 00007fe5e5f9c799 [ 1237.957520][T28082] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe5e6216098 [ 1237.957536][T28082] RBP: 00007fe5e6216090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.957551][T28082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1237.957566][T28082] R13: 00007fe5e6216128 R14: 00007ffd97028470 R15: 00007ffd97028558 [ 1237.957602][T28082] [ 1238.691183][T28099] serio: Serial port pty6 [ 1239.177722][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.184896][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.445050][T28129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8220'. [ 1240.532278][T28129] veth1_vlan: entered allmulticast mode [ 1244.417950][T28175] FAULT_INJECTION: forcing a failure. [ 1244.417950][T28175] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.544679][T28175] CPU: 0 UID: 0 PID: 28175 Comm: syz.4.8234 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1244.544734][T28175] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1244.544749][T28175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1244.544765][T28175] Call Trace: [ 1244.544773][T28175] [ 1244.544783][T28175] dump_stack_lvl+0x100/0x190 [ 1244.544827][T28175] should_fail_ex.cold+0x5/0xa [ 1244.544872][T28175] should_failslab+0xc2/0x120 [ 1244.544899][T28175] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1244.544937][T28175] ? alloc_empty_file+0x55/0x1c0 [ 1244.544975][T28175] alloc_empty_file+0x55/0x1c0 [ 1244.545007][T28175] alloc_file_pseudo+0x13a/0x230 [ 1244.545040][T28175] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1244.545073][T28175] ? alloc_fd+0x476/0x790 [ 1244.545101][T28175] sock_alloc_file+0x50/0x210 [ 1244.545137][T28175] __sys_socket+0x1c0/0x260 [ 1244.545177][T28175] ? __pfx___sys_socket+0x10/0x10 [ 1244.545225][T28175] __x64_sys_socket+0x72/0xb0 [ 1244.545265][T28175] ? lockdep_hardirqs_on+0x78/0x100 [ 1244.545296][T28175] do_syscall_64+0x106/0xf80 [ 1244.545325][T28175] ? clear_bhb_loop+0x40/0x90 [ 1244.545356][T28175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.545382][T28175] RIP: 0033:0x7f5f0259c799 [ 1244.545402][T28175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.545427][T28175] RSP: 002b:00007f5f03453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1244.545451][T28175] RAX: ffffffffffffffda RBX: 00007f5f02816090 RCX: 00007f5f0259c799 [ 1244.545468][T28175] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 1244.545483][T28175] RBP: 00007f5f02632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1244.545499][T28175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1244.545514][T28175] R13: 00007f5f02816128 R14: 00007f5f02816090 R15: 00007ffe327059c8 [ 1244.545546][T28175] [ 1245.467971][T28183] Loading of unsigned module is rejected [ 1247.594101][T28194] Process accounting paused [ 1248.743531][T28215] netlink: 338 bytes leftover after parsing attributes in process `syz.2.8249'. [ 1248.801640][T28215] team_slave_0: entered allmulticast mode [ 1250.127325][T28228] netlink: 20 bytes leftover after parsing attributes in process `syz.2.8254'. [ 1252.263596][T28249] netlink: 342 bytes leftover after parsing attributes in process `syz.0.8262'. [ 1252.485205][T28247] sp0: Synchronizing with TNC [ 1252.581976][T28253] sp0: Found TNC [ 1255.795721][T28278] netlink: 330 bytes leftover after parsing attributes in process `syz.4.8268'. [ 1256.513619][T28283] page: refcount:9 mapcount:8 mapping:0000000000000000 index:0x7f0b2c010 pfn:0x78000 [ 1256.644457][T28283] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1256.880272][T28283] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1257.032131][T28283] raw: 00000007f0b2c010 0000000000000000 0000000900000007 0000000000000000 [ 1257.089990][T28283] page dumped because: unmovable page [ 1257.230504][T28283] page_owner tracks the page as allocated [ 1257.242185][ T5180] ERROR: Out of memory at tomoyo_memory_ok. [ 1257.292312][T28283] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 12426, tgid 12426 (syz-executor), ts 322100324978, free_ts 321985891667 [ 1257.612178][T28283] post_alloc_hook+0x153/0x170 [ 1257.686071][T28283] get_page_from_freelist+0x111d/0x3140 [ 1257.733564][T28283] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1257.739622][T28283] alloc_pages_mpol+0x1fb/0x550 [ 1257.910999][T28283] alloc_pages_noprof+0x131/0x390 [ 1258.032155][T28283] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 1258.038127][T28283] vmalloc_user_noprof+0x9e/0xe0 [ 1258.170936][T28283] kcov_ioctl+0x4c/0x720 [ 1258.251100][T28283] __x64_sys_ioctl+0x18e/0x210 [ 1258.355965][T28283] do_syscall_64+0x106/0xf80 [ 1258.360639][T28283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.493837][T28283] page last free pid 5825 tgid 5825 stack trace: [ 1258.602499][T28283] __free_frozen_pages+0x7e1/0x10d0 [ 1258.607777][T28283] vfree.part.0+0x12b/0x9d0 [ 1258.743609][T28283] vfree+0x55/0x80 [ 1258.747437][T28283] kcov_close+0x34/0x60 [ 1258.855937][T28283] __fput+0x3ff/0xb40 [ 1258.859987][T28283] task_work_run+0x150/0x240 [ 1258.987496][T28283] do_exit+0x8b8/0x2b60 [ 1259.051344][T28283] do_group_exit+0xd5/0x2a0 [ 1259.106258][T28283] __x64_sys_exit_group+0x3e/0x50 [ 1259.185425][T28283] x64_sys_call+0x102c/0x1530 [ 1259.252140][T28283] do_syscall_64+0x106/0xf80 [ 1259.304725][T28283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.725328][T28301] netlink: 330 bytes leftover after parsing attributes in process `syz.0.8276'. [ 1261.141835][T28311] random: crng reseeded on system resumption [ 1262.499123][T28326] FAULT_INJECTION: forcing a failure. [ 1262.499123][T28326] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1262.643232][T28326] CPU: 0 UID: 0 PID: 28326 Comm: syz.1.8285 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1262.643289][T28326] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1262.643304][T28326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1262.643320][T28326] Call Trace: [ 1262.643328][T28326] [ 1262.643338][T28326] dump_stack_lvl+0x100/0x190 [ 1262.643397][T28326] should_fail_ex.cold+0x5/0xa [ 1262.643422][T28326] ? fs_reclaim_acquire+0x70/0x100 [ 1262.643454][T28326] should_fail_alloc_page+0xeb/0x140 [ 1262.643483][T28326] prepare_alloc_pages+0x1f0/0x5f0 [ 1262.643517][T28326] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1262.643560][T28326] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1262.643600][T28326] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1262.643661][T28326] ? stack_trace_save+0x8e/0xc0 [ 1262.643686][T28326] ? __pfx_stack_trace_save+0x10/0x10 [ 1262.643712][T28326] ? stack_depot_save_flags+0x27/0x9d0 [ 1262.643746][T28326] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1262.643786][T28326] ? __lock_acquire+0x4a5/0x2630 [ 1262.643817][T28326] ? relay_open_buf.part.0+0x91/0xb70 [ 1262.643854][T28326] ? blk_trace_setup_prepare+0x35c/0x6c0 [ 1262.643886][T28326] ? blk_trace_setup+0x217/0x440 [ 1262.643918][T28326] ? blk_trace_ioctl+0x245/0x320 [ 1262.643952][T28326] ? blkdev_ioctl+0x17c/0x6f0 [ 1262.643982][T28326] ? __x64_sys_ioctl+0x18e/0x210 [ 1262.644016][T28326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1262.644064][T28326] ? find_held_lock+0x2b/0x80 [ 1262.644087][T28326] ? rcu_read_unlock+0x17/0x60 [ 1262.644114][T28326] ? rcu_read_unlock+0x17/0x60 [ 1262.644143][T28326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1262.644188][T28326] ? policy_nodemask+0xed/0x4f0 [ 1262.644216][T28326] alloc_pages_mpol+0x1fb/0x550 [ 1262.644244][T28326] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1262.644272][T28326] ? __kmalloc_large_node_noprof+0x5d/0x70 [ 1262.644304][T28326] ? __kvmalloc_node_noprof+0x6af/0xa00 [ 1262.644344][T28326] ? relay_open_buf.part.0+0x199/0xb70 [ 1262.644384][T28326] alloc_pages_noprof+0x131/0x390 [ 1262.644413][T28326] relay_open_buf.part.0+0x261/0xb70 [ 1262.644460][T28326] relay_open+0x7b9/0xa00 [ 1262.644500][T28326] blk_trace_setup_prepare+0x35c/0x6c0 [ 1262.644537][T28326] blk_trace_setup+0x217/0x440 [ 1262.644576][T28326] ? __pfx_blk_trace_setup+0x10/0x10 [ 1262.644623][T28326] ? __pfx_vsnprintf+0x10/0x10 [ 1262.644670][T28326] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1262.644715][T28326] ? do_vfs_ioctl+0x226/0x13e0 [ 1262.644754][T28326] blk_trace_ioctl+0x245/0x320 [ 1262.644792][T28326] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 1262.644833][T28326] ? find_held_lock+0x2b/0x80 [ 1262.644856][T28326] ? __fget_files+0x215/0x3d0 [ 1262.644878][T28326] ? hook_file_ioctl_common+0x146/0x410 [ 1262.644924][T28326] blkdev_ioctl+0x17c/0x6f0 [ 1262.644955][T28326] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1262.644990][T28326] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1262.645023][T28326] __x64_sys_ioctl+0x18e/0x210 [ 1262.645061][T28326] do_syscall_64+0x106/0xf80 [ 1262.645092][T28326] ? clear_bhb_loop+0x40/0x90 [ 1262.645123][T28326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.645150][T28326] RIP: 0033:0x7fedb899c799 [ 1262.645171][T28326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.645196][T28326] RSP: 002b:00007fedb6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1262.645221][T28326] RAX: ffffffffffffffda RBX: 00007fedb8c15fa0 RCX: 00007fedb899c799 [ 1262.645238][T28326] RDX: 0000200000000240 RSI: 00000000c0481273 RDI: 0000000000000008 [ 1262.645255][T28326] RBP: 00007fedb8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1262.645271][T28326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1262.645286][T28326] R13: 00007fedb8c16038 R14: 00007fedb8c15fa0 R15: 00007fff8bbe9108 [ 1262.645318][T28326] [ 1266.621746][T28362] netlink: 338 bytes leftover after parsing attributes in process `syz.0.8298'. [ 1267.428079][T28365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8299'. [ 1267.527100][T28369] netlink: 'syz.0.8299': attribute type 1 has an invalid length. [ 1267.534874][T28369] netlink: 13 bytes leftover after parsing attributes in process `syz.0.8299'. [ 1268.021315][T28372] netlink: 62 bytes leftover after parsing attributes in process `syz.4.8301'. [ 1268.677541][T28377] FAULT_INJECTION: forcing a failure. [ 1268.677541][T28377] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.726585][T28370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8300'. [ 1268.932727][T28377] CPU: 0 UID: 0 PID: 28377 Comm: syz.0.8302 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1268.932781][T28377] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1268.932796][T28377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1268.932812][T28377] Call Trace: [ 1268.932820][T28377] [ 1268.932830][T28377] dump_stack_lvl+0x100/0x190 [ 1268.932874][T28377] should_fail_ex.cold+0x5/0xa [ 1268.932903][T28377] ? lsm_blob_alloc+0x68/0x90 [ 1268.932938][T28377] should_failslab+0xc2/0x120 [ 1268.932965][T28377] __kmalloc_noprof+0xe0/0x850 [ 1268.933003][T28377] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1268.933036][T28377] lsm_blob_alloc+0x68/0x90 [ 1268.933067][T28377] security_prepare_creds+0x2d/0x290 [ 1268.933098][T28377] prepare_creds+0x5d6/0x950 [ 1268.933139][T28377] __do_sys_capset+0x270/0x460 [ 1268.933163][T28377] ? __pfx___do_sys_capset+0x10/0x10 [ 1268.933190][T28377] ? __x64_sys_futex+0x358/0x4d0 [ 1268.933224][T28377] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1268.933251][T28377] ? xfd_validate_state+0x129/0x190 [ 1268.933298][T28377] do_syscall_64+0x106/0xf80 [ 1268.933329][T28377] ? clear_bhb_loop+0x40/0x90 [ 1268.933359][T28377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.933385][T28377] RIP: 0033:0x7fe5e5f9c799 [ 1268.933405][T28377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.933430][T28377] RSP: 002b:00007fe5e6db1028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 1268.933454][T28377] RAX: ffffffffffffffda RBX: 00007fe5e6216090 RCX: 00007fe5e5f9c799 [ 1268.933472][T28377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 1268.933487][T28377] RBP: 00007fe5e6032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1268.933503][T28377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1268.933518][T28377] R13: 00007fe5e6216128 R14: 00007fe5e6216090 R15: 00007ffd97028558 [ 1268.933550][T28377] [ 1272.446962][T28413] netlink: 'syz.2.8315': attribute type 33 has an invalid length. [ 1272.489369][T28413] netlink: 322 bytes leftover after parsing attributes in process `syz.2.8315'. [ 1277.065736][T28473] netlink: 246 bytes leftover after parsing attributes in process `syz.2.8337'. [ 1278.869780][T28484] Process accounting resumed [ 1279.523962][T28501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8346'. [ 1279.841928][T28501] team0 (unregistering): Port device team_slave_0 removed [ 1280.028919][T28501] team0 (unregistering): Port device team_slave_1 removed [ 1280.657600][T28510] netlink: 266 bytes leftover after parsing attributes in process `syz.1.8349'. [ 1281.829234][T28526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8356'. [ 1286.160727][T28567] netlink: 186 bytes leftover after parsing attributes in process `syz.0.8369'. [ 1291.530011][T28603] [U]  [ 1291.532878][T28603] [U] [ 1291.535595][T28603] [U] [ 1291.538325][T28603] [U] [ 1291.794458][T28603] [U] [ 1291.797216][T28603] [U] [ 1291.799933][T28603] [U] [ 1291.802642][T28603] [U] [ 1292.108392][T28603] [U] [ 1298.621547][T28684] syz.4.8399 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1298.702814][T28716] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8410'. [ 1299.815085][T17018] Bluetooth: hci0: unexpected event 0x09 length: 435 > 3 [ 1300.609644][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.627190][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.874415][T28762] netlink: 330 bytes leftover after parsing attributes in process `syz.2.8423'. [ 1310.603583][T28846] Process accounting paused [ 1311.108534][T28869] netlink: 'syz.2.8458': attribute type 1 has an invalid length. [ 1311.171240][T28869] netlink: 330 bytes leftover after parsing attributes in process `syz.2.8458'. [ 1312.474937][T28875] netlink: 18 bytes leftover after parsing attributes in process `syz.4.8459'. [ 1312.798792][T28886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1312.922156][T28886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1313.239070][T28892] FAULT_INJECTION: forcing a failure. [ 1313.239070][T28892] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.389722][T28894] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8465'. [ 1313.427232][T28892] CPU: 0 UID: 0 PID: 28892 Comm: syz.1.8464 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1313.427287][T28892] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1313.427302][T28892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1313.427323][T28892] Call Trace: [ 1313.427331][T28892] [ 1313.427341][T28892] dump_stack_lvl+0x100/0x190 [ 1313.427385][T28892] should_fail_ex.cold+0x5/0xa [ 1313.427415][T28892] should_failslab+0xc2/0x120 [ 1313.427441][T28892] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1313.427480][T28892] ? acpi_ut_create_generic_state+0x61/0xc0 [ 1313.427530][T28892] acpi_ut_create_generic_state+0x61/0xc0 [ 1313.427571][T28892] acpi_ds_scope_stack_push+0x70/0x790 [ 1313.427618][T28892] acpi_ds_init_aml_walk+0x2d8/0x680 [ 1313.427664][T28892] acpi_ds_call_control_method+0x3a2/0xab0 [ 1313.427707][T28892] acpi_ps_parse_aml+0xacd/0x1120 [ 1313.427755][T28892] acpi_ps_execute_method+0x5c4/0xe90 [ 1313.427789][T28892] acpi_ns_evaluate+0x640/0x1670 [ 1313.427825][T28892] acpi_evaluate_object+0x420/0xe00 [ 1313.427862][T28892] ? kasan_save_stack+0x30/0x50 [ 1313.427900][T28892] ? kasan_save_track+0x14/0x30 [ 1313.427944][T28892] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1313.427992][T28892] acpi_evaluate_integer+0xdf/0x220 [ 1313.428026][T28892] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1313.428071][T28892] ? __pfx_status_show+0x10/0x10 [ 1313.428108][T28892] status_show+0xa0/0x120 [ 1313.428145][T28892] ? __pfx_status_show+0x10/0x10 [ 1313.428190][T28892] dev_attr_show+0x52/0xa0 [ 1313.428215][T28892] ? __pfx_dev_attr_show+0x10/0x10 [ 1313.428239][T28892] sysfs_kf_seq_show+0x217/0x3a0 [ 1313.428282][T28892] seq_read_iter+0x32f/0x1270 [ 1313.428339][T28892] kernfs_fop_read_iter+0x46c/0x610 [ 1313.428368][T28892] ? rw_verify_area+0xce/0x6d0 [ 1313.428405][T28892] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1313.428435][T28892] vfs_read+0x825/0xb30 [ 1313.428479][T28892] ? __pfx_vfs_read+0x10/0x10 [ 1313.428539][T28892] ksys_read+0x12a/0x250 [ 1313.428579][T28892] ? __pfx_ksys_read+0x10/0x10 [ 1313.428628][T28892] do_syscall_64+0x106/0xf80 [ 1313.428659][T28892] ? clear_bhb_loop+0x40/0x90 [ 1313.428691][T28892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.428717][T28892] RIP: 0033:0x7fedb899c799 [ 1313.428738][T28892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.428764][T28892] RSP: 002b:00007fedb6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1313.428788][T28892] RAX: ffffffffffffffda RBX: 00007fedb8c15fa0 RCX: 00007fedb899c799 [ 1313.428805][T28892] RDX: 000000000000007a RSI: 0000200000000140 RDI: 0000000000000005 [ 1313.428822][T28892] RBP: 00007fedb8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1313.428838][T28892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1313.428854][T28892] R13: 00007fedb8c16038 R14: 00007fedb8c15fa0 R15: 00007fff8bbe9108 [ 1313.428887][T28892] [ 1314.049084][T28894] bridge_slave_1: left allmulticast mode [ 1314.082131][T28894] bridge_slave_1: left promiscuous mode [ 1314.114595][T28894] bridge0: port 2(bridge_slave_1) entered disabled state [ 1314.346002][T28901] FAULT_INJECTION: forcing a failure. [ 1314.346002][T28901] name failslab, interval 1, probability 0, space 0, times 0 [ 1314.449395][T28901] CPU: 0 UID: 0 PID: 28901 Comm: syz.0.8467 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1314.449460][T28901] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1314.449475][T28901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1314.449491][T28901] Call Trace: [ 1314.449500][T28901] [ 1314.449509][T28901] dump_stack_lvl+0x100/0x190 [ 1314.449552][T28901] should_fail_ex.cold+0x5/0xa [ 1314.449581][T28901] ? process_preds+0x4c2/0x1d90 [ 1314.449619][T28901] should_failslab+0xc2/0x120 [ 1314.449645][T28901] __kmalloc_noprof+0xe0/0x850 [ 1314.449690][T28901] process_preds+0x4c2/0x1d90 [ 1314.449734][T28901] ? create_filter_start.constprop.0+0x134/0x310 [ 1314.449778][T28901] create_filter+0x140/0x210 [ 1314.449818][T28901] ? __pfx_create_filter+0x10/0x10 [ 1314.449859][T28901] ? find_held_lock+0x2b/0x80 [ 1314.449887][T28901] apply_event_filter+0x220/0x500 [ 1314.449927][T28901] ? __pfx_apply_event_filter+0x10/0x10 [ 1314.449976][T28901] event_filter_write+0x16d/0x290 [ 1314.450007][T28901] vfs_write+0x2aa/0x1070 [ 1314.450049][T28901] ? __pfx_event_filter_write+0x10/0x10 [ 1314.450081][T28901] ? __pfx_vfs_write+0x10/0x10 [ 1314.450120][T28901] ? __fget_files+0x215/0x3d0 [ 1314.450151][T28901] ? __fget_files+0x21f/0x3d0 [ 1314.450182][T28901] ksys_write+0x12a/0x250 [ 1314.450205][T28901] ? __pfx_ksys_write+0x10/0x10 [ 1314.450236][T28901] do_syscall_64+0x106/0xf80 [ 1314.450267][T28901] ? clear_bhb_loop+0x40/0x90 [ 1314.450298][T28901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1314.450324][T28901] RIP: 0033:0x7fe5e5f9c799 [ 1314.450345][T28901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1314.450370][T28901] RSP: 002b:00007fe5e6dd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1314.450394][T28901] RAX: ffffffffffffffda RBX: 00007fe5e6215fa0 RCX: 00007fe5e5f9c799 [ 1314.450412][T28901] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1314.450428][T28901] RBP: 00007fe5e6032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1314.450450][T28901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1314.450466][T28901] R13: 00007fe5e6216038 R14: 00007fe5e6215fa0 R15: 00007ffd97028558 [ 1314.450499][T28901] [ 1316.341007][T28894] bridge_slave_0: left allmulticast mode [ 1316.451923][T28894] bridge_slave_0: left promiscuous mode [ 1316.537056][T28894] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.609840][T28892] ACPI Error: ffff88802d414000 walk still has a scope list (20251212/dswstate-694) [ 1317.760893][T28892] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 1318.586395][T28930] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8479'. [ 1320.393857][T28945] netlink: 54 bytes leftover after parsing attributes in process `syz.4.8483'. [ 1320.822956][T28953] netlink: 330 bytes leftover after parsing attributes in process `syz.4.8485'. [ 1323.915581][T28969] FAULT_INJECTION: forcing a failure. [ 1323.915581][T28969] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.045392][T28969] CPU: 0 UID: 0 PID: 28969 Comm: syz.4.8491 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1324.045447][T28969] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1324.045462][T28969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1324.045477][T28969] Call Trace: [ 1324.045486][T28969] [ 1324.045497][T28969] dump_stack_lvl+0x100/0x190 [ 1324.045548][T28969] should_fail_ex.cold+0x5/0xa [ 1324.045579][T28969] should_failslab+0xc2/0x120 [ 1324.045606][T28969] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1324.045646][T28969] ? __kernfs_new_node+0xd2/0x960 [ 1324.045689][T28969] __kernfs_new_node+0xd2/0x960 [ 1324.045729][T28969] ? __pfx___kernfs_new_node+0x10/0x10 [ 1324.045771][T28969] ? find_held_lock+0x2b/0x80 [ 1324.045796][T28969] ? kernfs_root+0xee/0x2a0 [ 1324.045830][T28969] ? kernfs_root+0xee/0x2a0 [ 1324.045871][T28969] kernfs_new_node+0x11b/0x1a0 [ 1324.045915][T28969] __kernfs_create_file+0x53/0x350 [ 1324.045948][T28969] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1324.045989][T28969] internal_create_group+0x593/0xf40 [ 1324.046033][T28969] ? __pfx_internal_create_group+0x10/0x10 [ 1324.046075][T28969] ? kernfs_create_link+0x1bd/0x240 [ 1324.046108][T28969] internal_create_groups+0x9d/0x150 [ 1324.046148][T28969] device_add+0xf5b/0x1950 [ 1324.046177][T28969] ? __pfx_device_add+0x10/0x10 [ 1324.046201][T28969] ? lockdep_init_map_type+0x5c/0x250 [ 1324.046235][T28969] ? __init_waitqueue_head+0xca/0x150 [ 1324.046280][T28969] wakeup_source_device_create+0x243/0x2e0 [ 1324.046325][T28969] wakeup_source_sysfs_add+0x1c/0x90 [ 1324.046367][T28969] wakeup_source_register+0x154/0x3e0 [ 1324.046405][T28969] device_wakeup_enable+0xce/0x2e0 [ 1324.046448][T28969] device_set_wakeup_enable+0xfb/0x120 [ 1324.046487][T28969] usb_hcd_submit_urb+0x770/0x2150 [ 1324.046624][T28969] usb_submit_urb+0x8aa/0x1910 [ 1324.046654][T28969] ? __init_swait_queue_head+0xca/0x150 [ 1324.046696][T28969] usbfs_start_wait_urb+0x127/0x3d0 [ 1324.046752][T28969] ? __pfx_usbfs_start_wait_urb+0x10/0x10 [ 1324.046808][T28969] do_proc_control+0x7e1/0xe50 [ 1324.046854][T28969] ? __pfx_do_proc_control+0x10/0x10 [ 1324.046903][T28969] usbdev_ioctl+0x1a28/0x3aa0 [ 1324.046947][T28969] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1324.046994][T28969] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1324.047043][T28969] ? do_vfs_ioctl+0x226/0x13e0 [ 1324.047092][T28969] ? find_held_lock+0x2b/0x80 [ 1324.047114][T28969] ? __fget_files+0x215/0x3d0 [ 1324.047137][T28969] ? hook_file_ioctl_common+0x146/0x410 [ 1324.047186][T28969] ? __fget_files+0x21f/0x3d0 [ 1324.047214][T28969] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1324.047256][T28969] __x64_sys_ioctl+0x18e/0x210 [ 1324.047294][T28969] do_syscall_64+0x106/0xf80 [ 1324.047326][T28969] ? clear_bhb_loop+0x40/0x90 [ 1324.047358][T28969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.047385][T28969] RIP: 0033:0x7f5f0259c799 [ 1324.047406][T28969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.047431][T28969] RSP: 002b:00007f5f03474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1324.047455][T28969] RAX: ffffffffffffffda RBX: 00007f5f02815fa0 RCX: 00007f5f0259c799 [ 1324.047472][T28969] RDX: 0000200000000000 RSI: 00000000c0185500 RDI: 0000000000000006 [ 1324.047488][T28969] RBP: 00007f5f02632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1324.047504][T28969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.047524][T28969] R13: 00007f5f02816038 R14: 00007f5f02815fa0 R15: 00007ffe327059c8 [ 1324.047556][T28969] [ 1328.144425][T29000] netlink: 226 bytes leftover after parsing attributes in process `syz.1.8503'. [ 1328.218601][T29000] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8503'. [ 1328.326066][T29000] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1329.622033][T29017] input: 00 [ 1329.622033][T29017] as /devices/virtual/input/input23 [ 1329.672462][T29017] FAULT_INJECTION: forcing a failure. [ 1329.672462][T29017] name failslab, interval 1, probability 0, space 0, times 0 [ 1329.750406][T29017] CPU: 0 UID: 0 PID: 29017 Comm: syz.1.8507 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1329.750461][T29017] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1329.750476][T29017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1329.750492][T29017] Call Trace: [ 1329.750500][T29017] [ 1329.750510][T29017] dump_stack_lvl+0x100/0x190 [ 1329.750555][T29017] should_fail_ex.cold+0x5/0xa [ 1329.750585][T29017] should_failslab+0xc2/0x120 [ 1329.750611][T29017] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1329.750649][T29017] ? __kernfs_new_node+0xd2/0x960 [ 1329.750691][T29017] __kernfs_new_node+0xd2/0x960 [ 1329.750731][T29017] ? __pfx___kernfs_new_node+0x10/0x10 [ 1329.750774][T29017] ? find_held_lock+0x2b/0x80 [ 1329.750797][T29017] ? kernfs_root+0xee/0x2a0 [ 1329.750831][T29017] ? kernfs_root+0xee/0x2a0 [ 1329.750873][T29017] kernfs_new_node+0x11b/0x1a0 [ 1329.750918][T29017] kernfs_create_dir_ns+0x4c/0x1a0 [ 1329.750963][T29017] internal_create_group+0x36f/0xf40 [ 1329.751006][T29017] ? kernfs_add_one+0x214/0x850 [ 1329.751047][T29017] ? __pfx_internal_create_group+0x10/0x10 [ 1329.751088][T29017] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1329.751221][T29017] ? bus_to_subsys+0x114/0x150 [ 1329.751254][T29017] dpm_sysfs_add+0x80/0x280 [ 1329.751330][T29017] device_add+0x9ef/0x1950 [ 1329.751357][T29017] ? __pfx_device_add+0x10/0x10 [ 1329.751390][T29017] ? kobject_get+0xbb/0x150 [ 1329.751428][T29017] cdev_device_add+0x12b/0x270 [ 1329.751457][T29017] evdev_connect+0x3a8/0x4b0 [ 1329.751499][T29017] input_attach_handler.isra.0+0x177/0x1e0 [ 1329.751536][T29017] input_register_device.cold+0x139/0x375 [ 1329.751574][T29017] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 1329.751619][T29017] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1329.751656][T29017] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1329.751706][T29017] ? find_held_lock+0x2b/0x80 [ 1329.751729][T29017] ? __fget_files+0x215/0x3d0 [ 1329.751766][T29017] ? __pfx_uinput_ioctl+0x10/0x10 [ 1329.751809][T29017] __x64_sys_ioctl+0x18e/0x210 [ 1329.751848][T29017] do_syscall_64+0x106/0xf80 [ 1329.751877][T29017] ? clear_bhb_loop+0x40/0x90 [ 1329.751908][T29017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1329.751934][T29017] RIP: 0033:0x7fedb899c799 [ 1329.751957][T29017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1329.751982][T29017] RSP: 002b:00007fedb6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1329.752006][T29017] RAX: ffffffffffffffda RBX: 00007fedb8c15fa0 RCX: 00007fedb899c799 [ 1329.752023][T29017] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 1329.752039][T29017] RBP: 00007fedb8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1329.752055][T29017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1329.752071][T29017] R13: 00007fedb8c16038 R14: 00007fedb8c15fa0 R15: 00007fff8bbe9108 [ 1329.752104][T29017] [ 1331.378939][T29028] syz.4.8511 (29028) used greatest stack depth: 19672 bytes left [ 1331.662800][T29017] input: failed to attach handler evdev to device input23, error: -12 [ 1333.088567][T29045] vivid-007: ================= START STATUS ================= [ 1333.138863][T29045] vivid-007: Generate PTS: true [ 1333.161878][T29045] vivid-007: Generate SCR: true [ 1333.227133][T29045] tpg source WxH: 320x240 (Y'CbCr) [ 1333.309619][T29045] tpg field: 1 [ 1333.398496][T29045] tpg crop: (0,0)/320x240 [ 1333.402879][T29045] tpg compose: (0,0)/320x240 [ 1333.407501][T29045] tpg colorspace: 8 [ 1333.626064][T29045] tpg transfer function: 0/0 [ 1333.675250][T29045] tpg Y'CbCr encoding: 0/0 [ 1333.727544][T29045] tpg quantization: 0/0 [ 1333.790161][T29045] tpg RGB range: 0/2 [ 1333.848786][T29045] vivid-007: ================== END STATUS ================== [ 1336.329656][T29084] netlink: 118 bytes leftover after parsing attributes in process `syz.4.8527'. [ 1337.868229][T29107] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8536'. [ 1338.191127][T29111] netlink: 'syz.1.8537': attribute type 27 has an invalid length. [ 1338.242530][T29111] netlink: 146 bytes leftover after parsing attributes in process `syz.1.8537'. [ 1340.698047][T29121] Process accounting resumed [ 1344.315948][T29163] FAULT_INJECTION: forcing a failure. [ 1344.315948][T29163] name failslab, interval 1, probability 0, space 0, times 0 [ 1344.506295][T29163] CPU: 0 UID: 0 PID: 29163 Comm: syz.4.8553 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1344.506352][T29163] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1344.506367][T29163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1344.506383][T29163] Call Trace: [ 1344.506391][T29163] [ 1344.506401][T29163] dump_stack_lvl+0x100/0x190 [ 1344.506444][T29163] should_fail_ex.cold+0x5/0xa [ 1344.506473][T29163] should_failslab+0xc2/0x120 [ 1344.506500][T29163] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1344.506540][T29163] ? __alloc_skb+0x140/0x710 [ 1344.506574][T29163] __alloc_skb+0x140/0x710 [ 1344.506600][T29163] ? __alloc_skb+0x5b7/0x710 [ 1344.506627][T29163] ? __pfx___alloc_skb+0x10/0x10 [ 1344.506656][T29163] ? aa_label_sk_perm+0x194/0x5f0 [ 1344.506686][T29163] alloc_skb_with_frags+0xe0/0x810 [ 1344.506723][T29163] ? __lock_acquire+0x4a5/0x2630 [ 1344.506758][T29163] sock_alloc_send_pskb+0x801/0x980 [ 1344.506794][T29163] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1344.506822][T29163] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1344.506854][T29163] ? finish_task_switch.isra.0+0x205/0xb80 [ 1344.506899][T29163] caif_stream_sendmsg+0x446/0x800 [ 1344.506940][T29163] ? __pfx_caif_stream_sendmsg+0x10/0x10 [ 1344.506972][T29163] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1344.507012][T29163] sock_write_iter+0x524/0x5a0 [ 1344.507053][T29163] ? __pfx_caif_stream_sendmsg+0x10/0x10 [ 1344.507083][T29163] ? __pfx_sock_write_iter+0x10/0x10 [ 1344.507139][T29163] do_iter_readv_writev+0x6ee/0x920 [ 1344.507182][T29163] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1344.507225][T29163] ? bpf_lsm_file_permission+0x9/0x10 [ 1344.507265][T29163] ? security_file_permission+0x76/0x210 [ 1344.507293][T29163] ? rw_verify_area+0xce/0x6d0 [ 1344.507332][T29163] vfs_writev+0x360/0xe10 [ 1344.507378][T29163] ? __pfx_vfs_writev+0x10/0x10 [ 1344.507436][T29163] ? __fget_files+0x21f/0x3d0 [ 1344.507466][T29163] ? do_writev+0x28a/0x340 [ 1344.507502][T29163] do_writev+0x28a/0x340 [ 1344.507540][T29163] ? __pfx_do_writev+0x10/0x10 [ 1344.507586][T29163] do_syscall_64+0x106/0xf80 [ 1344.507616][T29163] ? clear_bhb_loop+0x40/0x90 [ 1344.507647][T29163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1344.507672][T29163] RIP: 0033:0x7f5f0259c799 [ 1344.507693][T29163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1344.507719][T29163] RSP: 002b:00007f5f03474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1344.507743][T29163] RAX: ffffffffffffffda RBX: 00007f5f02815fa0 RCX: 00007f5f0259c799 [ 1344.507762][T29163] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1344.507778][T29163] RBP: 00007f5f02632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1344.507794][T29163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1344.507810][T29163] R13: 00007f5f02816038 R14: 00007f5f02815fa0 R15: 00007ffe327059c8 [ 1344.507842][T29163] [ 1349.898251][T29198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8560'. [ 1349.997184][T29198] netlink: 13 bytes leftover after parsing attributes in process `syz.0.8560'. [ 1354.075234][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8569'. [ 1354.132199][T29248] netlink: 'syz.1.8569': attribute type 1 has an invalid length. [ 1354.180853][T29248] netlink: 13 bytes leftover after parsing attributes in process `syz.1.8569'. [ 1355.851942][T29258] sp0: Synchronizing with TNC [ 1355.867866][T29261] FAULT_INJECTION: forcing a failure. [ 1355.867866][T29261] name failslab, interval 1, probability 0, space 0, times 0 [ 1355.986081][T29261] CPU: 0 UID: 0 PID: 29261 Comm: syz.0.8574 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1355.986135][T29261] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1355.986150][T29261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1355.986170][T29261] Call Trace: [ 1355.986178][T29261] [ 1355.986188][T29261] dump_stack_lvl+0x100/0x190 [ 1355.986232][T29261] should_fail_ex.cold+0x5/0xa [ 1355.986261][T29261] should_failslab+0xc2/0x120 [ 1355.986288][T29261] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1355.986328][T29261] ? __kernfs_new_node+0xd2/0x960 [ 1355.986370][T29261] __kernfs_new_node+0xd2/0x960 [ 1355.986409][T29261] ? __pfx___kernfs_new_node+0x10/0x10 [ 1355.986453][T29261] ? find_held_lock+0x2b/0x80 [ 1355.986477][T29261] ? kernfs_root+0xee/0x2a0 [ 1355.986510][T29261] ? kernfs_root+0xee/0x2a0 [ 1355.986552][T29261] kernfs_new_node+0x11b/0x1a0 [ 1355.986597][T29261] __kernfs_create_file+0x53/0x350 [ 1355.986630][T29261] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1355.986671][T29261] internal_create_group+0x593/0xf40 [ 1355.986715][T29261] ? __pfx_internal_create_group+0x10/0x10 [ 1355.986758][T29261] ? kernfs_create_link+0x1bd/0x240 [ 1355.986792][T29261] internal_create_groups+0x9d/0x150 [ 1355.986832][T29261] device_add+0x71a/0x1950 [ 1355.986857][T29261] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1355.986900][T29261] ? __pfx_device_add+0x10/0x10 [ 1355.986925][T29261] ? lockdep_init_map_type+0x5c/0x250 [ 1355.986959][T29261] ? __init_waitqueue_head+0xca/0x150 [ 1355.987005][T29261] netdev_register_kobject+0x1a9/0x3d0 [ 1355.987056][T29261] register_netdevice+0x12e0/0x2210 [ 1355.987100][T29261] ? __pfx_register_netdevice+0x10/0x10 [ 1355.987143][T29261] internal_dev_create+0x2d3/0x520 [ 1355.987242][T29261] ovs_vport_add+0x147/0x4d0 [ 1355.987274][T29261] new_vport+0x16/0x1d0 [ 1355.987347][T29261] ovs_dp_cmd_new+0x65d/0xdf0 [ 1355.987379][T29261] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1355.987411][T29261] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1a0/0x280 [ 1355.987454][T29261] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1355.987501][T29261] genl_family_rcv_msg_doit+0x214/0x300 [ 1355.987544][T29261] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1355.987583][T29261] ? genl_get_cmd+0x3ef/0x720 [ 1355.987626][T29261] ? bpf_lsm_capable+0x9/0x10 [ 1355.987652][T29261] ? security_capable+0x80/0x260 [ 1355.987689][T29261] ? ns_capable+0xd2/0xf0 [ 1355.987716][T29261] genl_rcv_msg+0x560/0x800 [ 1355.987758][T29261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1355.987798][T29261] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1355.987825][T29261] ? __lock_acquire+0x4a5/0x2630 [ 1355.987863][T29261] netlink_rcv_skb+0x159/0x420 [ 1355.987897][T29261] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1355.987938][T29261] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1355.987985][T29261] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1355.988022][T29261] genl_rcv+0x28/0x40 [ 1355.988062][T29261] netlink_unicast+0x5aa/0x870 [ 1355.988100][T29261] ? __pfx_netlink_unicast+0x10/0x10 [ 1355.988147][T29261] netlink_sendmsg+0x8b0/0xda0 [ 1355.988186][T29261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1355.988220][T29261] ? __import_iovec+0x1d2/0x640 [ 1355.988249][T29261] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1355.988291][T29261] ____sys_sendmsg+0x9e1/0xb70 [ 1355.988329][T29261] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1355.988366][T29261] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1355.988410][T29261] ? try_to_wake_up+0x644/0x1a80 [ 1355.988441][T29261] ___sys_sendmsg+0x190/0x1e0 [ 1355.988483][T29261] ? __pfx____sys_sendmsg+0x10/0x10 [ 1355.988523][T29261] ? futex_private_hash_put+0x107/0x1c0 [ 1355.988587][T29261] __sys_sendmsg+0x170/0x220 [ 1355.988618][T29261] ? __pfx___sys_sendmsg+0x10/0x10 [ 1355.988649][T29261] ? __x64_sys_futex+0x34f/0x4d0 [ 1355.988699][T29261] do_syscall_64+0x106/0xf80 [ 1355.988730][T29261] ? clear_bhb_loop+0x40/0x90 [ 1355.988761][T29261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.988788][T29261] RIP: 0033:0x7fe5e5f9c799 [ 1355.988809][T29261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.988839][T29261] RSP: 002b:00007fe5e6dd2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1355.988864][T29261] RAX: ffffffffffffffda RBX: 00007fe5e6215fa0 RCX: 00007fe5e5f9c799 [ 1355.988882][T29261] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000007 [ 1355.988898][T29261] RBP: 00007fe5e6032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1355.988914][T29261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.988929][T29261] R13: 00007fe5e6216038 R14: 00007fe5e6215fa0 R15: 00007ffd97028558 [ 1355.988962][T29261] [ 1362.113155][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.119479][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1363.028464][T29324] netlink: 'syz.4.8593': attribute type 10 has an invalid length. [ 1363.174662][T29324] netlink: 230 bytes leftover after parsing attributes in process `syz.4.8593'. [ 1363.407609][T29324] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 1364.809200][T29346] Loading of unsigned module is rejected [ 1365.467770][T29343] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1367.377378][T29365] netlink: 194 bytes leftover after parsing attributes in process `syz.4.8607'. [ 1367.897669][T29369] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8608'. [ 1367.989797][T29369] netlink: 354 bytes leftover after parsing attributes in process `syz.1.8608'. [ 1368.455779][T29378] netlink: 'syz.1.8613': attribute type 1 has an invalid length. [ 1368.511294][T29378] netlink: 'syz.1.8613': attribute type 6 has an invalid length. [ 1369.095569][T29388] netlink: 186 bytes leftover after parsing attributes in process `syz.0.8622'. [ 1371.208295][T29394] Process accounting paused [ 1374.228000][T29438] netlink: 338 bytes leftover after parsing attributes in process `syz.0.8629'. [ 1374.514349][T29440] netlink: 330 bytes leftover after parsing attributes in process `syz.1.8631'. [ 1374.780937][T29438] team_slave_0: entered allmulticast mode [ 1377.551412][T29471] netlink: 186 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1377.640887][T29471] netlink: 186 bytes leftover after parsing attributes in process `syz.1.8649'. [ 1382.994023][T29502] FAULT_INJECTION: forcing a failure. [ 1382.994023][T29502] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.994075][T29502] CPU: 0 UID: 0 PID: 29502 Comm: syz.1.8658 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1382.994131][T29502] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1382.994145][T29502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1382.994161][T29502] Call Trace: [ 1382.994169][T29502] [ 1382.994178][T29502] dump_stack_lvl+0x100/0x190 [ 1382.994221][T29502] should_fail_ex.cold+0x5/0xa [ 1382.994251][T29502] should_failslab+0xc2/0x120 [ 1382.994277][T29502] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1382.994310][T29502] ? tomoyo_init_log+0x1a0/0x20c0 [ 1382.994344][T29502] tomoyo_init_log+0x1a0/0x20c0 [ 1382.994372][T29502] ? __pfx_format_decode+0x10/0x10 [ 1382.994417][T29502] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1382.994465][T29502] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1382.994501][T29502] tomoyo_write_log2+0x2ed/0xbc0 [ 1382.994534][T29502] tomoyo_supervisor+0x15e/0x1340 [ 1382.994573][T29502] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1382.994620][T29502] ? kasan_quarantine_put+0x104/0x240 [ 1382.994662][T29502] ? tomoyo_check_path_acl+0x141/0x210 [ 1382.994703][T29502] ? tomoyo_check_acl+0x1f7/0x410 [ 1382.994752][T29502] tomoyo_path_permission+0x270/0x3b0 [ 1382.994796][T29502] tomoyo_check_open_permission+0x34d/0x3c0 [ 1382.994840][T29502] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1382.994912][T29502] ? do_raw_spin_lock+0x128/0x260 [ 1382.994952][T29502] ? path_get+0x61/0x80 [ 1382.994983][T29502] tomoyo_file_open+0x6b/0x90 [ 1382.995018][T29502] security_file_open+0xb5/0x1e0 [ 1382.995046][T29502] do_dentry_open+0x5aa/0x1660 [ 1382.995073][T29502] ? security_inode_permission+0xbf/0x250 [ 1382.995120][T29502] vfs_open+0x82/0x3f0 [ 1382.995154][T29502] path_openat+0x208c/0x31a0 [ 1382.995190][T29502] ? __pfx_path_openat+0x10/0x10 [ 1382.995227][T29502] do_file_open+0x20e/0x430 [ 1382.995255][T29502] ? __pfx_do_file_open+0x10/0x10 [ 1382.995302][T29502] ? alloc_fd+0x476/0x790 [ 1382.995330][T29502] ? do_getname+0x191/0x390 [ 1382.995364][T29502] do_sys_openat2+0x10d/0x1e0 [ 1382.995397][T29502] ? __pfx_do_sys_openat2+0x10/0x10 [ 1382.995433][T29502] ? __fget_files+0x21f/0x3d0 [ 1382.995462][T29502] __x64_sys_openat+0x12d/0x210 [ 1382.995497][T29502] ? __pfx___x64_sys_openat+0x10/0x10 [ 1382.995542][T29502] do_syscall_64+0x106/0xf80 [ 1382.995572][T29502] ? clear_bhb_loop+0x40/0x90 [ 1382.995603][T29502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.995629][T29502] RIP: 0033:0x7fedb899c799 [ 1382.995650][T29502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1382.995676][T29502] RSP: 002b:00007fedb6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1382.995700][T29502] RAX: ffffffffffffffda RBX: 00007fedb8c15fa0 RCX: 00007fedb899c799 [ 1382.995717][T29502] RDX: 0000000000101901 RSI: 0000200000002c00 RDI: ffffffffffffff9c [ 1382.995739][T29502] RBP: 00007fedb8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1382.995755][T29502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.995770][T29502] R13: 00007fedb8c16038 R14: 00007fedb8c15fa0 R15: 00007fff8bbe9108 [ 1382.995802][T29502] [ 1385.067848][T29519] netlink: 330 bytes leftover after parsing attributes in process `syz.1.8653'. [ 1385.613359][T29524] netlink: 342 bytes leftover after parsing attributes in process `syz.4.8654'. [ 1385.651206][T29524] netlink: 274 bytes leftover after parsing attributes in process `syz.4.8654'. [ 1391.459202][T29559] FAULT_INJECTION: forcing a failure. [ 1391.459202][T29559] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.613393][T29559] CPU: 0 UID: 0 PID: 29559 Comm: syz.1.8668 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1391.613448][T29559] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1391.613464][T29559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1391.613479][T29559] Call Trace: [ 1391.613488][T29559] [ 1391.613498][T29559] dump_stack_lvl+0x100/0x190 [ 1391.613542][T29559] should_fail_ex.cold+0x5/0xa [ 1391.613571][T29559] should_failslab+0xc2/0x120 [ 1391.613597][T29559] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1391.613631][T29559] ? sctp_auth_shkey_create+0x9e/0x210 [ 1391.613671][T29559] sctp_auth_shkey_create+0x9e/0x210 [ 1391.613704][T29559] sctp_endpoint_new+0x589/0xb20 [ 1391.613739][T29559] ? __pfx_sctp_endpoint_new+0x10/0x10 [ 1391.613776][T29559] ? lockdep_init_map_type+0x5c/0x250 [ 1391.613809][T29559] ? lockdep_init_map_type+0x5c/0x250 [ 1391.613847][T29559] sctp_init_sock+0xe2b/0x1300 [ 1391.613878][T29559] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 1391.613910][T29559] sctp_v6_init_sock+0x16/0x70 [ 1391.613939][T29559] ? __pfx_sctp_v6_init_sock+0x10/0x10 [ 1391.613970][T29559] inet6_create+0xb21/0x12b0 [ 1391.614004][T29559] ? inet6_create+0x7f/0x12b0 [ 1391.614038][T29559] __sock_create+0x339/0x860 [ 1391.614084][T29559] __sys_socket+0x14d/0x260 [ 1391.614125][T29559] ? __pfx___sys_socket+0x10/0x10 [ 1391.614181][T29559] __x64_sys_socket+0x72/0xb0 [ 1391.614221][T29559] ? lockdep_hardirqs_on+0x78/0x100 [ 1391.614253][T29559] do_syscall_64+0x106/0xf80 [ 1391.614283][T29559] ? clear_bhb_loop+0x40/0x90 [ 1391.614314][T29559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.614341][T29559] RIP: 0033:0x7fedb899c799 [ 1391.614361][T29559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1391.614387][T29559] RSP: 002b:00007fedb6bd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1391.614411][T29559] RAX: ffffffffffffffda RBX: 00007fedb8c16090 RCX: 00007fedb899c799 [ 1391.614432][T29559] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 1391.614448][T29559] RBP: 00007fedb8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1391.614464][T29559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.614480][T29559] R13: 00007fedb8c16128 R14: 00007fedb8c16090 R15: 00007fff8bbe9108 [ 1391.614511][T29559] [ 1393.131443][T29565] ubi0: attaching mtd0 [ 1393.137165][T29565] ubi0: scanning is finished [ 1393.252914][T29567] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8671'. [ 1393.358564][T29565] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1394.620137][T29565] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1396.480044][T29584] page: refcount:9 mapcount:8 mapping:0000000000000000 index:0x7f0b2c010 pfn:0x78000 [ 1396.740147][T29584] flags: 0xfff18000000210(dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1396.911841][T29584] raw: 00fff18000000210 0000000000000000 dead000000000122 0000000000000000 [ 1397.131156][T29584] raw: 00000007f0b2c010 0000000000000000 0000000900000007 0000000000000000 [ 1397.310479][T29584] page dumped because: unmovable page [ 1397.518362][T29584] page_owner tracks the page as allocated [ 1397.655994][T29584] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 12426, tgid 12426 (syz-executor), ts 322100324978, free_ts 321985891667 [ 1398.087233][T29584] post_alloc_hook+0x153/0x170 [ 1398.143123][T29584] get_page_from_freelist+0x111d/0x3140 [ 1398.253134][T29584] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1398.364117][T29584] alloc_pages_mpol+0x1fb/0x550 [ 1398.463800][T29584] alloc_pages_noprof+0x131/0x390 [ 1398.554531][T29584] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 1398.657028][T29584] vmalloc_user_noprof+0x9e/0xe0 [ 1398.744532][T29584] kcov_ioctl+0x4c/0x720 [ 1398.822254][T29584] __x64_sys_ioctl+0x18e/0x210 [ 1398.905921][T29584] do_syscall_64+0x106/0xf80 [ 1399.045065][T29584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.102373][T29584] page last free pid 5825 tgid 5825 stack trace: [ 1399.201114][T29584] __free_frozen_pages+0x7e1/0x10d0 [ 1399.324312][T29584] vfree.part.0+0x12b/0x9d0 [ 1399.328918][T29584] vfree+0x55/0x80 [ 1399.436411][T29584] kcov_close+0x34/0x60 [ 1399.504021][T29584] __fput+0x3ff/0xb40 [ 1399.621576][T29584] task_work_run+0x150/0x240 [ 1399.626267][T29584] do_exit+0x8b8/0x2b60 [ 1399.630453][T29584] do_group_exit+0xd5/0x2a0 [ 1399.801872][T29584] __x64_sys_exit_group+0x3e/0x50 [ 1399.912179][T29584] x64_sys_call+0x102c/0x1530 [ 1399.951508][T29584] do_syscall_64+0x106/0xf80 [ 1400.040014][T29584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1400.971841][T29609] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 1401.452082][T29615] Process accounting resumed [ 1403.734249][T29644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8694'. [ 1403.794457][T29645] futex_wake_op: syz.2.8693 tries to shift op by -2048; fix this program [ 1403.814573][T29646] netlink: 25 bytes leftover after parsing attributes in process `syz.1.8694'. [ 1403.862298][T29640] page: refcount:9 mapcount:8 mapping:0000000000000000 index:0x7f0b2c010 pfn:0x78000 [ 1403.984801][T29645] futex_wake_op: syz.2.8693 tries to shift op by -2048; fix this program [ 1404.014190][T29640] flags: 0xfff18000000210(dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1404.156153][T29640] raw: 00fff18000000210 0000000000000000 dead000000000122 0000000000000000 [ 1404.318838][T29640] raw: 00000007f0b2c010 0000000000000000 0000000900000007 0000000000000000 [ 1404.396145][T29640] page dumped because: unmovable page [ 1404.544063][T29640] page_owner tracks the page as allocated [ 1404.654070][T29640] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x29c2(GFP_NOWAIT|__GFP_HIGHMEM|__GFP_IO|__GFP_FS|__GFP_ZERO), pid 12426, tgid 12426 (syz-executor), ts 322100324978, free_ts 321985891667 [ 1404.903063][T29640] post_alloc_hook+0x153/0x170 [ 1404.979636][T29640] get_page_from_freelist+0x111d/0x3140 [ 1405.081728][T29640] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 1405.217455][T29640] alloc_pages_mpol+0x1fb/0x550 [ 1405.222489][T29640] alloc_pages_noprof+0x131/0x390 [ 1405.339777][T29640] __vmalloc_node_range_noprof+0xe5c/0x1530 [ 1405.474688][T29640] vmalloc_user_noprof+0x9e/0xe0 [ 1405.504039][T29640] kcov_ioctl+0x4c/0x720 [ 1405.558167][T29640] __x64_sys_ioctl+0x18e/0x210 [ 1405.659272][T29640] do_syscall_64+0x106/0xf80 [ 1405.663941][T29640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.764937][T29640] page last free pid 5825 tgid 5825 stack trace: [ 1405.771498][T29640] __free_frozen_pages+0x7e1/0x10d0 [ 1405.919456][T29640] vfree.part.0+0x12b/0x9d0 [ 1405.924155][T29640] vfree+0x55/0x80 [ 1406.046035][T29640] kcov_close+0x34/0x60 [ 1406.050288][T29640] __fput+0x3ff/0xb40 [ 1406.136228][T29640] task_work_run+0x150/0x240 [ 1406.179837][T29640] do_exit+0x8b8/0x2b60 [ 1406.233928][T29640] do_group_exit+0xd5/0x2a0 [ 1406.311972][T29640] __x64_sys_exit_group+0x3e/0x50 [ 1406.372575][T29640] x64_sys_call+0x102c/0x1530 [ 1406.418778][T29640] do_syscall_64+0x106/0xf80 [ 1406.485026][T29640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.215231][T29665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8700'. [ 1408.336015][T17018] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1413.199596][T29702] netlink: 252 bytes leftover after parsing attributes in process `syz.1.8711'. [ 1413.204180][T29702] netlink: 252 bytes leftover after parsing attributes in process `syz.1.8711'. [ 1414.342275][T29712] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8717'. [ 1417.939490][T29740] netlink: 338 bytes leftover after parsing attributes in process `syz.2.8723'. [ 1418.720590][T29748] netlink: 354 bytes leftover after parsing attributes in process `syz.1.8724'. [ 1420.003148][T29758] netlink: 326 bytes leftover after parsing attributes in process `syz.4.8729'. [ 1420.071945][T29758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1420.079239][T29758] IPv6: NLM_F_CREATE should be set when creating new route [ 1420.086516][T29758] IPv6: NLM_F_CREATE should be set when creating new route [ 1423.378204][T29788] ima: policy update failed [ 1423.382933][ T29] audit: type=1802 audit(4294967406.310:27): pid=29788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.8739" res=0 errno=0 [ 1423.549489][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.555943][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.091562][T29803] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8743'. [ 1424.237154][T29803] veth0_macvtap: left promiscuous mode [ 1424.351675][T29803] macvtap0: entered promiscuous mode [ 1424.364358][T29803] macvtap0: entered allmulticast mode [ 1424.536238][ T29] audit: type=1326 audit(4294967407.469:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29805 comm="syz.2.8745" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5a899c799 code=0x0 [ 1425.925407][T29829] netlink: 62 bytes leftover after parsing attributes in process `syz.2.8753'. [ 1426.795454][T29837] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8756'. [ 1427.495745][T29851] netlink: 'syz.0.8760': attribute type 33 has an invalid length. [ 1427.503601][T29851] netlink: 322 bytes leftover after parsing attributes in process `syz.0.8760'. [ 1430.918788][T29883] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8769'. [ 1431.450277][T29891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8773'. [ 1431.549623][T29891] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8773'. [ 1432.987733][T29898] Process accounting paused [ 1433.496781][T29912] zswap: compressor not available [ 1434.441171][T29935] netlink: 'syz.1.8784': attribute type 33 has an invalid length. [ 1434.592207][T29935] netlink: 322 bytes leftover after parsing attributes in process `syz.1.8784'. [ 1435.355371][T29947] netlink: 50 bytes leftover after parsing attributes in process `syz.0.8791'. [ 1438.800451][T29990] FAULT_INJECTION: forcing a failure. [ 1438.800451][T29990] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1438.971319][T29990] CPU: 0 UID: 0 PID: 29990 Comm: syz.0.8806 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1438.971375][T29990] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1438.971391][T29990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1438.971407][T29990] Call Trace: [ 1438.971416][T29990] [ 1438.971426][T29990] dump_stack_lvl+0x100/0x190 [ 1438.971473][T29990] should_fail_ex.cold+0x5/0xa [ 1438.971499][T29990] ? prepare_alloc_pages+0x16d/0x5f0 [ 1438.971532][T29990] should_fail_alloc_page+0xeb/0x140 [ 1438.971562][T29990] prepare_alloc_pages+0x1f0/0x5f0 [ 1438.971596][T29990] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1438.971635][T29990] ? buffer_subbuf_size_write+0x182/0x280 [ 1438.971679][T29990] ? do_writev+0x13e/0x340 [ 1438.971716][T29990] ? do_syscall_64+0x106/0xf80 [ 1438.971748][T29990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.971790][T29990] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1438.971849][T29990] ? rcu_is_watching+0x12/0xc0 [ 1438.971889][T29990] ? trace_kmalloc+0x101/0x130 [ 1438.971915][T29990] ? __kasan_kmalloc+0xaa/0xb0 [ 1438.971960][T29990] __alloc_pages_noprof+0xb/0x1b0 [ 1438.971998][T29990] alloc_cpu_data+0x60/0x130 [ 1438.972030][T29990] __rb_allocate_pages+0x6a5/0xf50 [ 1438.972074][T29990] ring_buffer_subbuf_order_set+0x3ef/0x18c0 [ 1438.972119][T29990] ? tracing_stop_tr+0xf6/0x210 [ 1438.972164][T29990] ? __pfx_ring_buffer_subbuf_order_set+0x10/0x10 [ 1438.972201][T29990] ? __pfx___might_resched+0x10/0x10 [ 1438.972240][T29990] ? iovec_from_user+0xda/0x140 [ 1438.972279][T29990] buffer_subbuf_size_write+0x182/0x280 [ 1438.972323][T29990] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 1438.972369][T29990] ? iov_iter_advance+0xac/0x6d0 [ 1438.972413][T29990] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 1438.972455][T29990] vfs_writev+0x5ea/0xe10 [ 1438.972492][T29990] ? rcu_is_watching+0x12/0xc0 [ 1438.972537][T29990] ? __pfx_vfs_writev+0x10/0x10 [ 1438.972574][T29990] ? fdget_pos+0x2aa/0x380 [ 1438.972621][T29990] ? __fget_files+0x21f/0x3d0 [ 1438.972652][T29990] ? do_writev+0x13e/0x340 [ 1438.972688][T29990] do_writev+0x13e/0x340 [ 1438.972727][T29990] ? __pfx_do_writev+0x10/0x10 [ 1438.972774][T29990] do_syscall_64+0x106/0xf80 [ 1438.972804][T29990] ? clear_bhb_loop+0x40/0x90 [ 1438.972835][T29990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.972885][T29990] RIP: 0033:0x7fe5e5f9c799 [ 1438.972907][T29990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.972932][T29990] RSP: 002b:00007fe5e6dd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1438.972956][T29990] RAX: ffffffffffffffda RBX: 00007fe5e6215fa0 RCX: 00007fe5e5f9c799 [ 1438.972974][T29990] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000005 [ 1438.972991][T29990] RBP: 00007fe5e6032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1438.973007][T29990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1438.973022][T29990] R13: 00007fe5e6216038 R14: 00007fe5e6215fa0 R15: 00007ffd97028558 [ 1438.973055][T29990] [ 1439.291860][T29992] netlink: 50 bytes leftover after parsing attributes in process `syz.1.8805'. [ 1440.224615][T30004] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8812'. [ 1440.330246][T30005] FAULT_INJECTION: forcing a failure. [ 1440.330246][T30005] name failslab, interval 1, probability 0, space 0, times 0 [ 1440.541448][T30005] CPU: 0 UID: 0 PID: 30005 Comm: syz.1.8810 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1440.541504][T30005] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1440.541519][T30005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1440.541535][T30005] Call Trace: [ 1440.541544][T30005] [ 1440.541554][T30005] dump_stack_lvl+0x100/0x190 [ 1440.541598][T30005] should_fail_ex.cold+0x5/0xa [ 1440.541628][T30005] ? lsm_blob_alloc+0x68/0x90 [ 1440.541658][T30005] should_failslab+0xc2/0x120 [ 1440.541686][T30005] __kmalloc_noprof+0xe0/0x850 [ 1440.541723][T30005] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1440.541755][T30005] lsm_blob_alloc+0x68/0x90 [ 1440.541787][T30005] security_prepare_creds+0x2d/0x290 [ 1440.541818][T30005] prepare_creds+0x5d6/0x950 [ 1440.541859][T30005] __do_sys_capset+0x270/0x460 [ 1440.541883][T30005] ? __pfx___do_sys_capset+0x10/0x10 [ 1440.541910][T30005] ? __x64_sys_futex+0x358/0x4d0 [ 1440.541945][T30005] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1440.541972][T30005] ? xfd_validate_state+0x129/0x190 [ 1440.542020][T30005] do_syscall_64+0x106/0xf80 [ 1440.542050][T30005] ? clear_bhb_loop+0x40/0x90 [ 1440.542082][T30005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1440.542108][T30005] RIP: 0033:0x7fedb899c799 [ 1440.542137][T30005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1440.542163][T30005] RSP: 002b:00007fedb6bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000007e [ 1440.542187][T30005] RAX: ffffffffffffffda RBX: 00007fedb8c16180 RCX: 00007fedb899c799 [ 1440.542204][T30005] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 1440.542221][T30005] RBP: 00007fedb8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1440.542237][T30005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1440.542253][T30005] R13: 00007fedb8c16218 R14: 00007fedb8c16180 R15: 00007fff8bbe9108 [ 1440.542285][T30005] [ 1441.808241][T30004] team0 (unregistering): Port device team_slave_0 removed [ 1441.943203][T30004] team0 (unregistering): Port device team_slave_1 removed [ 1445.137150][T30037] netlink: 50 bytes leftover after parsing attributes in process `syz.4.8821'. [ 1446.158395][T30054] netlink: 13 bytes leftover after parsing attributes in process `syz.2.8828'. [ 1446.241366][T30048] netlink: 186 bytes leftover after parsing attributes in process `syz.4.8826'. [ 1447.592916][T30050] ERROR: Out of memory at tomoyo_memory_ok. [ 1448.157877][T30068] FAULT_INJECTION: forcing a failure. [ 1448.157877][T30068] name failslab, interval 1, probability 0, space 0, times 0 [ 1448.243587][T30068] CPU: 0 UID: 0 PID: 30068 Comm: syz.4.8836 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1448.243645][T30068] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1448.243660][T30068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1448.243676][T30068] Call Trace: [ 1448.243685][T30068] [ 1448.243695][T30068] dump_stack_lvl+0x100/0x190 [ 1448.243739][T30068] should_fail_ex.cold+0x5/0xa [ 1448.243768][T30068] should_failslab+0xc2/0x120 [ 1448.243794][T30068] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1448.243834][T30068] ? __kernfs_new_node+0xd2/0x960 [ 1448.243876][T30068] __kernfs_new_node+0xd2/0x960 [ 1448.243915][T30068] ? __pfx___kernfs_new_node+0x10/0x10 [ 1448.243958][T30068] ? find_held_lock+0x2b/0x80 [ 1448.243983][T30068] ? kernfs_root+0xee/0x2a0 [ 1448.244017][T30068] ? kernfs_root+0xee/0x2a0 [ 1448.244058][T30068] kernfs_new_node+0x11b/0x1a0 [ 1448.244103][T30068] __kernfs_create_file+0x53/0x350 [ 1448.244135][T30068] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1448.244176][T30068] internal_create_group+0x593/0xf40 [ 1448.244220][T30068] ? __pfx_internal_create_group+0x10/0x10 [ 1448.244263][T30068] ? kernfs_create_link+0x1bd/0x240 [ 1448.244296][T30068] internal_create_groups+0x9d/0x150 [ 1448.244336][T30068] device_add+0x71a/0x1950 [ 1448.244363][T30068] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1448.244405][T30068] ? __pfx_device_add+0x10/0x10 [ 1448.244429][T30068] ? lockdep_init_map_type+0x5c/0x250 [ 1448.244463][T30068] ? __init_waitqueue_head+0xca/0x150 [ 1448.244509][T30068] netdev_register_kobject+0x1a9/0x3d0 [ 1448.244560][T30068] register_netdevice+0x12e0/0x2210 [ 1448.244601][T30068] ? __pfx_register_netdevice+0x10/0x10 [ 1448.244642][T30068] __tun_chr_ioctl+0x1ded/0x47c0 [ 1448.244776][T30068] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1448.244818][T30068] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1448.244859][T30068] ? hook_file_ioctl_common+0x146/0x410 [ 1448.244908][T30068] ? __fget_files+0x21f/0x3d0 [ 1448.244936][T30068] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1448.244975][T30068] __x64_sys_ioctl+0x18e/0x210 [ 1448.245014][T30068] do_syscall_64+0x106/0xf80 [ 1448.245045][T30068] ? clear_bhb_loop+0x40/0x90 [ 1448.245077][T30068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1448.245104][T30068] RIP: 0033:0x7f5f0259c799 [ 1448.245126][T30068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1448.245152][T30068] RSP: 002b:00007f5f03474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1448.245176][T30068] RAX: ffffffffffffffda RBX: 00007f5f02815fa0 RCX: 00007f5f0259c799 [ 1448.245193][T30068] RDX: 0000000000000038 RSI: 00000000400454ca RDI: 0000000000000003 [ 1448.245209][T30068] RBP: 00007f5f02632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1448.245225][T30068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1448.245241][T30068] R13: 00007f5f02816038 R14: 00007f5f02815fa0 R15: 00007ffe327059c8 [ 1448.245274][T30068] [ 1450.934553][T30113] netlink: 334 bytes leftover after parsing attributes in process `syz.4.8854'. [ 1452.757025][T30135] FAULT_INJECTION: forcing a failure. [ 1452.757025][T30135] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.995501][T30135] CPU: 0 UID: 0 PID: 30135 Comm: syz.1.8861 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1452.995557][T30135] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1452.995572][T30135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1452.995588][T30135] Call Trace: [ 1452.995596][T30135] [ 1452.995607][T30135] dump_stack_lvl+0x100/0x190 [ 1452.995651][T30135] should_fail_ex.cold+0x5/0xa [ 1452.995681][T30135] should_failslab+0xc2/0x120 [ 1452.995707][T30135] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1452.995743][T30135] ? ima_calc_file_hash_tfm+0x236/0x350 [ 1452.995782][T30135] ? sha256_init+0xd/0xc0 [ 1452.995920][T30135] ima_calc_file_hash_tfm+0x236/0x350 [ 1452.995960][T30135] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 1452.996031][T30135] ? stack_trace_save+0x8e/0xc0 [ 1452.996054][T30135] ? look_up_lock_class+0x64/0x120 [ 1452.996087][T30135] ? ima_alloc_tfm+0x21a/0x2e0 [ 1452.996121][T30135] ? generic_fillattr+0x6c9/0x940 [ 1452.996160][T30135] ima_calc_file_hash+0x18c/0x480 [ 1452.996202][T30135] ima_collect_measurement+0x887/0xa40 [ 1452.996241][T30135] ? ima_file_mmap+0x1c4/0x1f0 [ 1452.996282][T30135] ? __pfx_ima_collect_measurement+0x10/0x10 [ 1452.996323][T30135] ? lock_acquire+0x1cf/0x380 [ 1452.996369][T30135] ? process_measurement+0x5ab/0x2350 [ 1452.996405][T30135] ? is_bad_inode+0xd/0x40 [ 1452.996441][T30135] ? xattr_resolve_name+0x27d/0x3f0 [ 1452.996486][T30135] ? vfs_getxattr_alloc+0xec/0x350 [ 1452.996517][T30135] ? ima_get_hash_algo+0x22d/0x400 [ 1452.996550][T30135] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 1452.996588][T30135] ? process_measurement+0xdfe/0x2350 [ 1452.996622][T30135] process_measurement+0xdfe/0x2350 [ 1452.996664][T30135] ? stack_trace_save+0x8e/0xc0 [ 1452.996688][T30135] ? __pfx_process_measurement+0x10/0x10 [ 1452.996724][T30135] ? __lock_acquire+0x4a5/0x2630 [ 1452.996755][T30135] ? __kasan_slab_alloc+0x89/0x90 [ 1452.996779][T30135] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1452.996817][T30135] ? init_file+0x95/0x480 [ 1452.996843][T30135] ? alloc_empty_file+0x73/0x1c0 [ 1452.996873][T30135] ? alloc_file_pseudo+0x13a/0x230 [ 1452.996903][T30135] ? ksys_mmap_pgoff+0x232/0x650 [ 1452.996928][T30135] ? __x64_sys_mmap+0x125/0x190 [ 1452.996963][T30135] ? do_syscall_64+0x106/0xf80 [ 1452.997020][T30135] ? __pfx_aa_file_perm+0x10/0x10 [ 1452.997059][T30135] ima_file_mmap+0x1c4/0x1f0 [ 1452.997100][T30135] ? __pfx_ima_file_mmap+0x10/0x10 [ 1452.997143][T30135] security_mmap_file+0x278/0x9b0 [ 1452.997175][T30135] vm_mmap_pgoff+0xec/0x470 [ 1452.997207][T30135] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1452.997233][T30135] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1452.997267][T30135] ? hugetlbfs_get_inode+0x36e/0x750 [ 1452.997303][T30135] ksys_mmap_pgoff+0x273/0x650 [ 1452.997330][T30135] ? __x64_sys_futex+0x358/0x4d0 [ 1452.997364][T30135] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1452.997390][T30135] ? xfd_validate_state+0x129/0x190 [ 1452.997432][T30135] __x64_sys_mmap+0x125/0x190 [ 1452.997472][T30135] do_syscall_64+0x106/0xf80 [ 1452.997502][T30135] ? clear_bhb_loop+0x40/0x90 [ 1452.997533][T30135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.997559][T30135] RIP: 0033:0x7fedb899c799 [ 1452.997580][T30135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1452.997605][T30135] RSP: 002b:00007fedb6bb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1452.997629][T30135] RAX: ffffffffffffffda RBX: 00007fedb8c16180 RCX: 00007fedb899c799 [ 1452.997647][T30135] RDX: 0000000000009c0f RSI: 000000000000000c RDI: 0000000000000000 [ 1452.997663][T30135] RBP: 00007fedb8a32bd9 R08: ffffffffffffffff R09: 0000300000020000 [ 1452.997681][T30135] R10: 0000000000044eb2 R11: 0000000000000246 R12: 0000000000000000 [ 1452.997697][T30135] R13: 00007fedb8c16218 R14: 00007fedb8c16180 R15: 00007fff8bbe9108 [ 1452.997730][T30135] [ 1454.120184][ T29] audit: type=1800 audit(4294967436.853:29): pid=30135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8861" name="anon_hugepage" dev="hugetlbfs" ino=711560 res=0 errno=0 [ 1456.585684][T30161] zswap: compressor  not available [ 1457.286569][T30177] netlink: 'syz.2.8875': attribute type 28 has an invalid length. [ 1457.347144][T30177] netlink: 'syz.2.8875': attribute type 3 has an invalid length. [ 1457.403217][T30177] netlink: 306 bytes leftover after parsing attributes in process `syz.2.8875'. [ 1458.175218][T30194] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8882'. [ 1458.730518][T30201] netlink: 330 bytes leftover after parsing attributes in process `syz.4.8883'. [ 1464.164632][T30248] Process accounting resumed [ 1465.185279][T17018] Bluetooth: hci2: unexpected subevent 0x18 length: 123 > 19 [ 1465.192871][T17018] Bluetooth: hci2: Unable to find connection for dst f9:56:cc:cc:70:a9 sid 0x00 [ 1465.209678][T30287] binder: 30286:30287 ioctl c0306201 200000000000 returned -11 [ 1467.654735][T30326] netlink: 342 bytes leftover after parsing attributes in process `syz.2.8926'. [ 1469.978150][T30355] netlink: 'syz.4.8936': attribute type 1 has an invalid length. [ 1470.083654][T30355] netlink: 330 bytes leftover after parsing attributes in process `syz.4.8936'. [ 1471.956192][T30373] netlink: 18 bytes leftover after parsing attributes in process `syz.1.8944'. [ 1472.529552][T30386] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8946'. [ 1472.979641][T30392] netlink: 'syz.2.8957': attribute type 10 has an invalid length. [ 1473.092627][T30392] netlink: 230 bytes leftover after parsing attributes in process `syz.2.8957'. [ 1473.668261][T30402] FAULT_INJECTION: forcing a failure. [ 1473.668261][T30402] name failslab, interval 1, probability 0, space 0, times 0 [ 1473.894827][T30402] CPU: 0 UID: 0 PID: 30402 Comm: syz.4.8952 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1473.894882][T30402] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1473.894897][T30402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1473.894914][T30402] Call Trace: [ 1473.894922][T30402] [ 1473.894933][T30402] dump_stack_lvl+0x100/0x190 [ 1473.894976][T30402] should_fail_ex.cold+0x5/0xa [ 1473.895006][T30402] ? process_preds+0x4c2/0x1d90 [ 1473.895043][T30402] should_failslab+0xc2/0x120 [ 1473.895069][T30402] __kmalloc_noprof+0xe0/0x850 [ 1473.895115][T30402] process_preds+0x4c2/0x1d90 [ 1473.895159][T30402] ? create_filter_start.constprop.0+0x134/0x310 [ 1473.895203][T30402] create_filter+0x140/0x210 [ 1473.895243][T30402] ? __pfx_create_filter+0x10/0x10 [ 1473.895284][T30402] ? find_held_lock+0x2b/0x80 [ 1473.895312][T30402] apply_event_filter+0x220/0x500 [ 1473.895353][T30402] ? __pfx_apply_event_filter+0x10/0x10 [ 1473.895402][T30402] event_filter_write+0x16d/0x290 [ 1473.895440][T30402] vfs_write+0x2aa/0x1070 [ 1473.895483][T30402] ? __pfx_event_filter_write+0x10/0x10 [ 1473.895515][T30402] ? __pfx_vfs_write+0x10/0x10 [ 1473.895556][T30402] ? __fget_files+0x215/0x3d0 [ 1473.895586][T30402] ? __fget_files+0x21f/0x3d0 [ 1473.895618][T30402] ksys_write+0x12a/0x250 [ 1473.895641][T30402] ? __pfx_ksys_write+0x10/0x10 [ 1473.895672][T30402] do_syscall_64+0x106/0xf80 [ 1473.895704][T30402] ? clear_bhb_loop+0x40/0x90 [ 1473.895735][T30402] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1473.895761][T30402] RIP: 0033:0x7f5f0259c799 [ 1473.895782][T30402] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1473.895807][T30402] RSP: 002b:00007f5f03474028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1473.895831][T30402] RAX: ffffffffffffffda RBX: 00007f5f02815fa0 RCX: 00007f5f0259c799 [ 1473.895852][T30402] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1473.895868][T30402] RBP: 00007f5f02632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1473.895884][T30402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1473.895900][T30402] R13: 00007f5f02816038 R14: 00007f5f02815fa0 R15: 00007ffe327059c8 [ 1473.895933][T30402] [ 1474.650402][T30412] futex_wake_op: syz.2.8956 tries to shift op by -2048; fix this program [ 1474.872056][T30418] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8959'. [ 1474.951468][T30418] bridge_slave_1: left allmulticast mode [ 1474.957372][T30418] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.282540][T30418] bridge_slave_0: left allmulticast mode [ 1476.293393][T30418] bridge_slave_0: left promiscuous mode [ 1476.299156][T30418] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.169848][T30436] netlink: 246 bytes leftover after parsing attributes in process `syz.0.8963'. [ 1480.831131][T30464] netlink: 342 bytes leftover after parsing attributes in process `syz.2.8974'. [ 1481.043236][T30468] FAULT_INJECTION: forcing a failure. [ 1481.043236][T30468] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.140282][T30468] CPU: 0 UID: 0 PID: 30468 Comm: syz.1.8977 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1481.140337][T30468] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1481.140352][T30468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1481.140368][T30468] Call Trace: [ 1481.140377][T30468] [ 1481.140388][T30468] dump_stack_lvl+0x100/0x190 [ 1481.140440][T30468] should_fail_ex.cold+0x5/0xa [ 1481.140470][T30468] should_failslab+0xc2/0x120 [ 1481.140496][T30468] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1481.140543][T30468] ? __kernfs_new_node+0xd2/0x960 [ 1481.140585][T30468] __kernfs_new_node+0xd2/0x960 [ 1481.140625][T30468] ? __pfx___kernfs_new_node+0x10/0x10 [ 1481.140668][T30468] ? find_held_lock+0x2b/0x80 [ 1481.140691][T30468] ? kernfs_root+0xee/0x2a0 [ 1481.140724][T30468] ? kernfs_root+0xee/0x2a0 [ 1481.140766][T30468] kernfs_new_node+0x11b/0x1a0 [ 1481.140810][T30468] __kernfs_create_file+0x53/0x350 [ 1481.140849][T30468] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1481.140890][T30468] internal_create_group+0x593/0xf40 [ 1481.140934][T30468] ? __pfx_internal_create_group+0x10/0x10 [ 1481.140976][T30468] ? kernfs_create_link+0x1bd/0x240 [ 1481.141009][T30468] internal_create_groups+0x9d/0x150 [ 1481.141049][T30468] device_add+0xf5b/0x1950 [ 1481.141076][T30468] ? __pfx_device_add+0x10/0x10 [ 1481.141100][T30468] ? lockdep_init_map_type+0x5c/0x250 [ 1481.141134][T30468] ? __init_waitqueue_head+0xca/0x150 [ 1481.141179][T30468] wakeup_source_device_create+0x243/0x2e0 [ 1481.141224][T30468] wakeup_source_sysfs_add+0x1c/0x90 [ 1481.141266][T30468] wakeup_source_register+0x154/0x3e0 [ 1481.141307][T30468] device_wakeup_enable+0xce/0x2e0 [ 1481.141346][T30468] device_set_wakeup_enable+0xfb/0x120 [ 1481.141385][T30468] usb_hcd_submit_urb+0x770/0x2150 [ 1481.141434][T30468] usb_submit_urb+0x8aa/0x1910 [ 1481.141464][T30468] ? __init_swait_queue_head+0xca/0x150 [ 1481.141505][T30468] usbfs_start_wait_urb+0x127/0x3d0 [ 1481.141551][T30468] ? __pfx_usbfs_start_wait_urb+0x10/0x10 [ 1481.141607][T30468] do_proc_control+0x7e1/0xe50 [ 1481.141652][T30468] ? __pfx_do_proc_control+0x10/0x10 [ 1481.141702][T30468] usbdev_ioctl+0x1a28/0x3aa0 [ 1481.141746][T30468] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1481.141793][T30468] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1481.141838][T30468] ? do_vfs_ioctl+0x226/0x13e0 [ 1481.141885][T30468] ? find_held_lock+0x2b/0x80 [ 1481.141908][T30468] ? __fget_files+0x215/0x3d0 [ 1481.141929][T30468] ? hook_file_ioctl_common+0x146/0x410 [ 1481.141978][T30468] ? __fget_files+0x21f/0x3d0 [ 1481.142006][T30468] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1481.142048][T30468] __x64_sys_ioctl+0x18e/0x210 [ 1481.142086][T30468] do_syscall_64+0x106/0xf80 [ 1481.142116][T30468] ? clear_bhb_loop+0x40/0x90 [ 1481.142149][T30468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.142176][T30468] RIP: 0033:0x7fedb899c799 [ 1481.142196][T30468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.142221][T30468] RSP: 002b:00007fedb6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1481.142246][T30468] RAX: ffffffffffffffda RBX: 00007fedb8c15fa0 RCX: 00007fedb899c799 [ 1481.142264][T30468] RDX: 0000200000000000 RSI: 00000000c0185500 RDI: 0000000000000006 [ 1481.142279][T30468] RBP: 00007fedb8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1481.142296][T30468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.142312][T30468] R13: 00007fedb8c16038 R14: 00007fedb8c15fa0 R15: 00007fff8bbe9108 [ 1481.142345][T30468] [ 1482.278069][T30477] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8979'. [ 1482.564035][T30480] futex_wake_op: syz.0.8981 tries to shift op by -2048; fix this program [ 1482.594056][T30480] futex_wake_op: syz.0.8981 tries to shift op by -2048; fix this program [ 1482.638444][T30480] 0x000000000001-0x000000020000 : "" [ 1482.700564][T30480] ftl_cs: FTL header corrupt! [ 1483.105949][T30493] ERROR: Out of memory at tomoyo_memory_ok. [ 1484.545665][T30512] netlink: 226 bytes leftover after parsing attributes in process `syz.0.8987'. [ 1484.603629][T30512] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8987'. [ 1484.670738][T30512] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1485.000586][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.006920][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1488.703998][T30539] netlink: 258 bytes leftover after parsing attributes in process `syz.2.8997'. [ 1489.092461][T30548] FAULT_INJECTION: forcing a failure. [ 1489.092461][T30548] name failslab, interval 1, probability 0, space 0, times 0 [ 1489.191088][T30548] CPU: 0 UID: 0 PID: 30548 Comm: syz.0.8998 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1489.191144][T30548] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1489.191159][T30548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1489.191183][T30548] Call Trace: [ 1489.191192][T30548] [ 1489.191201][T30548] dump_stack_lvl+0x100/0x190 [ 1489.191246][T30548] should_fail_ex.cold+0x5/0xa [ 1489.191276][T30548] should_failslab+0xc2/0x120 [ 1489.191303][T30548] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1489.191341][T30548] ? __kernfs_new_node+0xd2/0x960 [ 1489.191383][T30548] __kernfs_new_node+0xd2/0x960 [ 1489.191425][T30548] ? __pfx___kernfs_new_node+0x10/0x10 [ 1489.191467][T30548] ? find_held_lock+0x2b/0x80 [ 1489.191491][T30548] ? kernfs_root+0xee/0x2a0 [ 1489.191525][T30548] ? kernfs_root+0xee/0x2a0 [ 1489.191565][T30548] kernfs_new_node+0x11b/0x1a0 [ 1489.191610][T30548] __kernfs_create_file+0x53/0x350 [ 1489.191642][T30548] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1489.191683][T30548] internal_create_group+0x593/0xf40 [ 1489.191727][T30548] ? __pfx_internal_create_group+0x10/0x10 [ 1489.191769][T30548] ? kernfs_create_link+0x1bd/0x240 [ 1489.191802][T30548] internal_create_groups+0x9d/0x150 [ 1489.191843][T30548] device_add+0xf5b/0x1950 [ 1489.191870][T30548] ? __pfx_device_add+0x10/0x10 [ 1489.191894][T30548] ? lockdep_init_map_type+0x5c/0x250 [ 1489.191928][T30548] ? __init_waitqueue_head+0xca/0x150 [ 1489.191973][T30548] wakeup_source_device_create+0x243/0x2e0 [ 1489.192019][T30548] wakeup_source_sysfs_add+0x1c/0x90 [ 1489.192061][T30548] wakeup_source_register+0x154/0x3e0 [ 1489.192098][T30548] device_wakeup_enable+0xce/0x2e0 [ 1489.192137][T30548] device_set_wakeup_enable+0xfb/0x120 [ 1489.192181][T30548] usb_hcd_submit_urb+0x770/0x2150 [ 1489.192230][T30548] usb_submit_urb+0x8aa/0x1910 [ 1489.192260][T30548] ? __init_swait_queue_head+0xca/0x150 [ 1489.192302][T30548] usbfs_start_wait_urb+0x127/0x3d0 [ 1489.192341][T30548] ? __pfx_usbfs_start_wait_urb+0x10/0x10 [ 1489.192396][T30548] do_proc_control+0x7e1/0xe50 [ 1489.192441][T30548] ? __pfx_do_proc_control+0x10/0x10 [ 1489.192491][T30548] usbdev_ioctl+0x1a28/0x3aa0 [ 1489.192536][T30548] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1489.192582][T30548] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1489.192627][T30548] ? do_vfs_ioctl+0x226/0x13e0 [ 1489.192675][T30548] ? find_held_lock+0x2b/0x80 [ 1489.192698][T30548] ? __fget_files+0x215/0x3d0 [ 1489.192719][T30548] ? hook_file_ioctl_common+0x146/0x410 [ 1489.192768][T30548] ? __fget_files+0x21f/0x3d0 [ 1489.192795][T30548] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1489.192838][T30548] __x64_sys_ioctl+0x18e/0x210 [ 1489.192877][T30548] do_syscall_64+0x106/0xf80 [ 1489.192907][T30548] ? clear_bhb_loop+0x40/0x90 [ 1489.192939][T30548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.192965][T30548] RIP: 0033:0x7fe5e5f9c799 [ 1489.192986][T30548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1489.193011][T30548] RSP: 002b:00007fe5e6dd2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1489.193036][T30548] RAX: ffffffffffffffda RBX: 00007fe5e6215fa0 RCX: 00007fe5e5f9c799 [ 1489.193053][T30548] RDX: 0000200000000000 RSI: 00000000c0185500 RDI: 0000000000000006 [ 1489.193070][T30548] RBP: 00007fe5e6032bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1489.193086][T30548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1489.193102][T30548] R13: 00007fe5e6216038 R14: 00007fe5e6215fa0 R15: 00007ffd97028558 [ 1489.193134][T30548] [ 1490.233771][T30555] netlink: 226 bytes leftover after parsing attributes in process `syz.2.9000'. [ 1490.260632][T30555] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9000'. [ 1490.289899][T30555] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 1493.408345][T30592] netlink: 504 bytes leftover after parsing attributes in process `syz.0.9023'. [ 1493.973291][T30597] futex_wake_op: syz.1.9014 tries to shift op by -2048; fix this program [ 1494.115093][T30600] 0x000000000001-0x000000020000 : "" [ 1494.181391][T30597] futex_wake_op: syz.1.9014 tries to shift op by -2048; fix this program [ 1494.340331][T30600] ftl_cs: FTL header corrupt! [ 1494.486649][T30599] Process accounting paused [ 1494.491421][T30588] bond0: option all_slaves_active: invalid value () [ 1494.528653][T30602] ERROR: Out of memory at tomoyo_memory_ok. [ 1498.069707][T30625] netlink: 342 bytes leftover after parsing attributes in process `syz.4.9021'. [ 1499.570589][T30642] netlink: 17 bytes leftover after parsing attributes in process `syz.1.9031'. [ 1501.340492][T30657] vivid-007: ================= START STATUS ================= [ 1501.381113][T30657] vivid-007: Generate PTS: true [ 1501.386041][T30657] vivid-007: Generate SCR: true [ 1501.458936][T30657] tpg source WxH: 320x240 (Y'CbCr) [ 1501.506318][T30657] tpg field: 1 [ 1501.548309][T30657] tpg crop: (0,0)/320x240 [ 1501.570267][T30657] tpg compose: (0,0)/320x240 [ 1501.574912][T30657] tpg colorspace: 8 [ 1501.578725][T30657] tpg transfer function: 0/0 [ 1501.732108][T30657] tpg Y'CbCr encoding: 0/0 [ 1501.777399][T30657] tpg quantization: 0/0 [ 1501.886331][T30657] tpg RGB range: 0/2 [ 1501.971630][T30657] vivid-007: ================== END STATUS ================== [ 1502.819763][T30671] netlink: 342 bytes leftover after parsing attributes in process `syz.1.9046'. [ 1504.960318][T30693] futex_wake_op: syz.4.9043 tries to shift op by -2048; fix this program [ 1505.138989][T30694] 0x000000000001-0x000000020000 : "" [ 1505.250492][T30693] futex_wake_op: syz.4.9043 tries to shift op by -2048; fix this program [ 1505.372099][T30694] ftl_cs: FTL header corrupt! [ 1505.666724][T30695] ERROR: Out of memory at tomoyo_memory_ok. [ 1509.795747][T30724] netlink: 186 bytes leftover after parsing attributes in process `syz.1.9053'. [ 1513.501440][T30758] netlink: 246 bytes leftover after parsing attributes in process `syz.2.9063'. [ 1514.026786][T30765] FAULT_INJECTION: forcing a failure. [ 1514.026786][T30765] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.341352][T30765] CPU: 0 UID: 0 PID: 30765 Comm: syz.1.9065 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1514.341407][T30765] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1514.341423][T30765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1514.341438][T30765] Call Trace: [ 1514.341447][T30765] [ 1514.341457][T30765] dump_stack_lvl+0x100/0x190 [ 1514.341500][T30765] should_fail_ex.cold+0x5/0xa [ 1514.341529][T30765] should_failslab+0xc2/0x120 [ 1514.341557][T30765] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1514.341597][T30765] ? __alloc_skb+0x140/0x710 [ 1514.341631][T30765] __alloc_skb+0x140/0x710 [ 1514.341657][T30765] ? __alloc_skb+0x5b7/0x710 [ 1514.341684][T30765] ? __pfx___alloc_skb+0x10/0x10 [ 1514.341714][T30765] ? aa_label_sk_perm+0x194/0x5f0 [ 1514.341743][T30765] alloc_skb_with_frags+0xe0/0x810 [ 1514.341781][T30765] ? __lock_acquire+0x4a5/0x2630 [ 1514.341815][T30765] sock_alloc_send_pskb+0x801/0x980 [ 1514.341852][T30765] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1514.341881][T30765] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1514.341913][T30765] ? finish_task_switch.isra.0+0x205/0xb80 [ 1514.341947][T30765] caif_stream_sendmsg+0x446/0x800 [ 1514.341987][T30765] ? __pfx_caif_stream_sendmsg+0x10/0x10 [ 1514.342018][T30765] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1514.342059][T30765] sock_write_iter+0x524/0x5a0 [ 1514.342098][T30765] ? __pfx_caif_stream_sendmsg+0x10/0x10 [ 1514.342128][T30765] ? __pfx_sock_write_iter+0x10/0x10 [ 1514.342184][T30765] do_iter_readv_writev+0x6ee/0x920 [ 1514.342233][T30765] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1514.342277][T30765] ? bpf_lsm_file_permission+0x9/0x10 [ 1514.342319][T30765] ? security_file_permission+0x76/0x210 [ 1514.342348][T30765] ? rw_verify_area+0xce/0x6d0 [ 1514.342389][T30765] vfs_writev+0x360/0xe10 [ 1514.342435][T30765] ? __pfx_vfs_writev+0x10/0x10 [ 1514.342494][T30765] ? __fget_files+0x21f/0x3d0 [ 1514.342524][T30765] ? do_writev+0x28a/0x340 [ 1514.342561][T30765] do_writev+0x28a/0x340 [ 1514.342600][T30765] ? __pfx_do_writev+0x10/0x10 [ 1514.342646][T30765] do_syscall_64+0x106/0xf80 [ 1514.342677][T30765] ? clear_bhb_loop+0x40/0x90 [ 1514.342708][T30765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.342735][T30765] RIP: 0033:0x7fedb899c799 [ 1514.342755][T30765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1514.342781][T30765] RSP: 002b:00007fedb6bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1514.342806][T30765] RAX: ffffffffffffffda RBX: 00007fedb8c15fa0 RCX: 00007fedb899c799 [ 1514.342823][T30765] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1514.342839][T30765] RBP: 00007fedb8a32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1514.342855][T30765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1514.342871][T30765] R13: 00007fedb8c16038 R14: 00007fedb8c15fa0 R15: 00007fff8bbe9108 [ 1514.342903][T30765] [ 1516.710675][T30783] netlink: 50 bytes leftover after parsing attributes in process `syz.2.9068'. [ 1519.547973][T30831] vivid-007: ================= START STATUS ================= [ 1519.646514][T30831] vivid-007: Enable Output Cropping: true grabbed [ 1519.783625][T30831] vivid-007: Enable Output Composing: true grabbed [ 1519.895905][T30831] vivid-007: Enable Output Scaler: true grabbed [ 1520.025401][T30831] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 1520.130928][T30831] vivid-007: Transmit Mode: HDMI grabbed [ 1520.268524][T30831] vivid-007: Hotplug Present: 0x00000000 [ 1520.422634][T30831] vivid-007: RxSense Present: 0x00000000 [ 1520.502290][T30831] vivid-007: EDID Present: 0x00000000 [ 1520.601665][T30831] vivid-007: ================== END STATUS ================== [ 1520.612199][T30842] netlink: 50 bytes leftover after parsing attributes in process `syz.0.9083'. [ 1522.857301][ T5589] ERROR: Out of memory at tomoyo_memory_ok. [ 1523.620541][T30879] bond0: option all_slaves_active: invalid value () [ 1524.133700][T30895] ERROR: Out of memory at tomoyo_memory_ok. [ 1524.375276][T30898] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9097'. [ 1524.470412][T30898] netlink: 13 bytes leftover after parsing attributes in process `syz.2.9097'. [ 1525.074545][T30905] Process accounting resumed [ 1527.533597][T30936] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9108'. [ 1527.637922][T30939] netlink: 13 bytes leftover after parsing attributes in process `syz.4.9108'. [ 1529.815826][T30958] zswap: compressor û not available [ 1529.903440][T30967] netlink: 194 bytes leftover after parsing attributes in process `syz.0.9118'. [ 1530.435150][T30959] sp0: Synchronizing with TNC [ 1530.932193][T30978] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9120'. [ 1531.001762][T30979] netlink: 'syz.0.9122': attribute type 1 has an invalid length. [ 1531.110608][T30979] netlink: 'syz.0.9122': attribute type 6 has an invalid length. [ 1533.099275][T30993] netlink: 186 bytes leftover after parsing attributes in process `syz.2.9125'. [ 1535.189870][T31017] netlink: 194 bytes leftover after parsing attributes in process `syz.1.9129'. [ 1535.429590][T31019] ERROR: Out of memory at tomoyo_memory_ok. [ 1539.113162][T31044] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9140'. [ 1539.175217][T31045] netlink: 'syz.0.9140': attribute type 1 has an invalid length. [ 1539.241422][T31045] netlink: 13 bytes leftover after parsing attributes in process `syz.0.9140'. [ 1539.340844][T31035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9136'. [ 1541.147731][T31059] [ 1541.150111][T31059] ====================================================== [ 1541.157131][T31059] WARNING: possible circular locking dependency detected [ 1541.164166][T31059] syzkaller #0 Tainted: G U W L XTNJ [ 1541.170148][T31059] ------------------------------------------------------ [ 1541.177163][T31059] syz.4.9144/31059 is trying to acquire lock: [ 1541.183228][T31059] ffff8880576296e8 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 1541.194768][T31059] [ 1541.194768][T31059] but task is already holding lock: [ 1541.202135][T31059] ffff8880576227e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 1541.211232][T31059] [ 1541.211232][T31059] which lock already depends on the new lock. [ 1541.211232][T31059] [ 1541.221632][T31059] [ 1541.221632][T31059] the existing dependency chain (in reverse order) is: [ 1541.230644][T31059] [ 1541.230644][T31059] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1541.238487][T31059] lock_sock_nested+0x41/0xf0 [ 1541.243703][T31059] smc_listen_out+0x1f5/0x4b0 [ 1541.248910][T31059] smc_listen_work+0x4c2/0x50e0 [ 1541.254300][T31059] process_one_work+0x9d7/0x1920 [ 1541.259799][T31059] worker_thread+0x5da/0xe40 [ 1541.264930][T31059] kthread+0x370/0x450 [ 1541.269535][T31059] ret_from_fork+0x754/0xd80 [ 1541.274668][T31059] ret_from_fork_asm+0x1a/0x30 [ 1541.279966][T31059] [ 1541.279966][T31059] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1541.290163][T31059] __lock_acquire+0x14b8/0x2630 [ 1541.295580][T31059] lock_acquire+0x1cf/0x380 [ 1541.300649][T31059] __flush_work+0x4de/0xcb0 [ 1541.305715][T31059] cancel_work_sync+0xd1/0xf0 [ 1541.311404][T31059] smc_clcsock_release+0x5f/0xe0 [ 1541.316899][T31059] __smc_release+0x5c2/0x880 [ 1541.322055][T31059] smc_close_non_accepted+0xda/0x200 [ 1541.327899][T31059] smc_close_active+0x4ff/0x1070 [ 1541.333456][T31059] __smc_release+0x634/0x880 [ 1541.338623][T31059] smc_release+0x1fc/0x620 [ 1541.343604][T31059] __sock_release+0xb3/0x260 [ 1541.348743][T31059] sock_close+0x1c/0x30 [ 1541.353452][T31059] __fput+0x3ff/0xb40 [ 1541.357994][T31059] task_work_run+0x150/0x240 [ 1541.363148][T31059] exit_to_user_mode_loop+0x100/0x4a0 [ 1541.369076][T31059] do_syscall_64+0x668/0xf80 [ 1541.374217][T31059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.380672][T31059] [ 1541.380672][T31059] other info that might help us debug this: [ 1541.380672][T31059] [ 1541.390991][T31059] Possible unsafe locking scenario: [ 1541.390991][T31059] [ 1541.398447][T31059] CPU0 CPU1 [ 1541.403813][T31059] ---- ---- [ 1541.409191][T31059] lock(sk_lock-AF_SMC/1); [ 1541.413727][T31059] lock((work_completion)(&new_smc->smc_listen_work)); [ 1541.423213][T31059] lock(sk_lock-AF_SMC/1); [ 1541.430275][T31059] lock((work_completion)(&new_smc->smc_listen_work)); [ 1541.437237][T31059] [ 1541.437237][T31059] *** DEADLOCK *** [ 1541.437237][T31059] [ 1541.445397][T31059] 3 locks held by syz.4.9144/31059: [ 1541.450606][T31059] #0: ffff88803ac26988 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1541.461187][T31059] #1: ffff8880576227e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 1541.470641][T31059] #2: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 1541.479820][T31059] [ 1541.479820][T31059] stack backtrace: [ 1541.485738][T31059] CPU: 0 UID: 0 PID: 31059 Comm: syz.4.9144 Tainted: G U W L XTNJ syzkaller #0 PREEMPT(full) [ 1541.485785][T31059] Tainted: [U]=USER, [W]=WARN, [L]=SOFTLOCKUP, [X]=AUX, [T]=RANDSTRUCT, [N]=TEST, [J]=FWCTL [ 1541.485799][T31059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1541.485813][T31059] Call Trace: [ 1541.485823][T31059] [ 1541.485833][T31059] dump_stack_lvl+0x100/0x190 [ 1541.485868][T31059] print_circular_bug.cold+0x178/0x1c7 [ 1541.485906][T31059] check_noncircular+0x146/0x160 [ 1541.485937][T31059] __lock_acquire+0x14b8/0x2630 [ 1541.485971][T31059] lock_acquire+0x1cf/0x380 [ 1541.486003][T31059] ? __flush_work+0x4ca/0xcb0 [ 1541.486039][T31059] ? mark_held_locks+0x40/0x70 [ 1541.486067][T31059] ? __flush_work+0x4ca/0xcb0 [ 1541.486101][T31059] __flush_work+0x4de/0xcb0 [ 1541.486133][T31059] ? __flush_work+0x4ca/0xcb0 [ 1541.486168][T31059] ? __pfx___flush_work+0x10/0x10 [ 1541.486204][T31059] ? __pfx_wq_barrier_func+0x10/0x10 [ 1541.486234][T31059] ? __pfx___might_resched+0x10/0x10 [ 1541.486271][T31059] cancel_work_sync+0xd1/0xf0 [ 1541.486294][T31059] smc_clcsock_release+0x5f/0xe0 [ 1541.486319][T31059] __smc_release+0x5c2/0x880 [ 1541.486358][T31059] ? __pfx_sock_def_readable+0x10/0x10 [ 1541.486383][T31059] smc_close_non_accepted+0xda/0x200 [ 1541.486408][T31059] smc_close_active+0x4ff/0x1070 [ 1541.486434][T31059] __smc_release+0x634/0x880 [ 1541.486472][T31059] smc_release+0x1fc/0x620 [ 1541.486510][T31059] __sock_release+0xb3/0x260 [ 1541.486539][T31059] ? __pfx_sock_close+0x10/0x10 [ 1541.486569][T31059] sock_close+0x1c/0x30 [ 1541.486597][T31059] __fput+0x3ff/0xb40 [ 1541.486627][T31059] task_work_run+0x150/0x240 [ 1541.486660][T31059] ? __pfx_task_work_run+0x10/0x10 [ 1541.486697][T31059] exit_to_user_mode_loop+0x100/0x4a0 [ 1541.486730][T31059] do_syscall_64+0x668/0xf80 [ 1541.486758][T31059] ? clear_bhb_loop+0x40/0x90 [ 1541.486786][T31059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.486810][T31059] RIP: 0033:0x7f5f0259c799 [ 1541.486834][T31059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1541.486857][T31059] RSP: 002b:00007ffe32705b28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1541.486879][T31059] RAX: 0000000000000000 RBX: 00007ffe32705c10 RCX: 00007f5f0259c799 [ 1541.486895][T31059] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1541.486910][T31059] RBP: 0000000000178094 R08: 0000000000000001 R09: 0000000000000000 [ 1541.486925][T31059] R10: 0000001b2e120000 R11: 0000000000000246 R12: 00007ffe32705c50 [ 1541.486940][T31059] R13: 00007f5f02815fac R14: 00000000001782ca R15: 00007f5f02815fa0 [ 1541.486962][T31059] [ 1546.434229][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.441168][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.572147][T31070] ERROR: Out of memory at tomoyo_memory_ok.