last executing test programs: 6.950682685s ago: executing program 0 (id=5125): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto(0x3, 0x0, 0x1f40) read$auto(0x4, 0x0, 0xfdef) 5.452640022s ago: executing program 0 (id=5131): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2506, &(0x7f00000002c0)={0x0, 0xae}, 0x5, 0x0, 0x3, 0x3a32182}, 0x4}, 0x3, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) 4.479509134s ago: executing program 2 (id=5137): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0xf7374674b920089e) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10000, 0x0) r1 = socket(0x29, 0x2, 0x0) ioctl$auto(r1, 0x8993, 0x24) 3.971197832s ago: executing program 2 (id=5139): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000500)={0x7, 0x0, [{0x40000073, 0x2, 0x6}]}) 3.327512565s ago: executing program 0 (id=5142): sendmsg$auto_WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x14, 0x0, 0x21, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x80) r0 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) write$auto(r0, &(0x7f0000000000)='-\x00', 0xfdef) 3.171192792s ago: executing program 2 (id=5143): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) getrandom$auto(0x0, 0x6000000, 0x3) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) 3.009412865s ago: executing program 1 (id=5144): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000040), 0xffffffff}, 0x6, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) 2.807268738s ago: executing program 0 (id=5145): mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1100af"], 0x1ac}, 0x1, 0x0, 0x0, 0x26004814}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.461626455s ago: executing program 3 (id=5147): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x3) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x8000) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) unshare$auto(0x8000400) 2.460948306s ago: executing program 1 (id=5155): mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x7, 0x3) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 2.26378148s ago: executing program 1 (id=5148): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x403, 0x8000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x16, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x400000, 0x0, 0x1]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 2.179127648s ago: executing program 0 (id=5149): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x23, 0x0, 0x9) read$auto(0x3, 0x0, 0x80) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 1.818503226s ago: executing program 2 (id=5150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000040), r0) setsockopt$auto(0x3, 0x1, 0x34, 0x0, 0x4) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x4, 0x7ff) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x4, 0x3, r2, 0x8000000009, 0x800002) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000002900)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd700000dcdf250100000008000500010000001400020077673000"], 0x30}}, 0xc0) 1.698203299s ago: executing program 1 (id=5151): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff034}}) write$auto(r0, 0x0, 0x6) 1.396270196s ago: executing program 3 (id=5152): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) io_uring_setup$auto(0x1, 0x0) fcntl$auto(0x8000000000000001, 0x24, 0x4) 1.124195988s ago: executing program 3 (id=5153): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x5, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f0000000000), 0x2) 909.159603ms ago: executing program 2 (id=5154): openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) 880.781587ms ago: executing program 1 (id=5156): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) 857.490146ms ago: executing program 3 (id=5157): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}}, 0xf7374674b920089e) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10000, 0x0) ioctl$auto(r0, 0x8924, 0x24) 550.623153ms ago: executing program 1 (id=5158): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf25150000000500120010000000080027000c000000380b2b80330b248004008080ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b98186d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec9904006d80460a8e80b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3fde23606aa3e80e4d0644fef266741cf5f2879924594cd388ed548e2dea74f9d72af19edad4a810af64d79eaa131b2afaca3f428fd83499d9c7a99dfd9a24cbd9bf5b0f0446521fcf1f416f83791795dc86d63c7a05e38c547e208be35b17fb8aa1fa57ea4ac59aac09a5bfb9f08a6d02e58d5040324f4241a9eb63d5a1e48cff0ed3e97c4af9506ca950ce9d115d242277c614a27a77df014ced1df35f069b42113bc6bf5427f9c1ba6924ec8bafc11ba6d9303461e92e3c3e1b4d5b2954d259654ee2bab0385e3b106c4a93525200ce6e3f1e9f6d4b87b61583abced950ff97dade7ebde309c78d4f1ddbff5cb5c3fd141cbb4e56a97183f705019716cf6d6f300c9677b6f14b2b8d708b675b5c4f2357d9c22dd6bba1195ba295a5f713ac28f043cc671fc7b43fb9b40bf17766c79d698dd68d0e385e926971a18a3c3687c3c8202b806432be62b3030a2c9e31da55a6cd98165f7439f9a09508b8c4b9c5ea32aaf1f7c4246ea8700aaccaf476d9cd5e3b2340d17f13ba40c8fdaf4aa4c4b8763fd86d35bda9aab03e3a252d7e4aea01cdad1fad040b29a9e92ee1fd8c010c30b4cc69917cee531e42efa59c735fe8159a292f57fa7a4600e6833032846d87a515d9803770eb4db6712bce7b51fc2f0eff8a292023a8c7c1544c6e53012f9fe13aa8caf795caccfa4ff2321116a86938e2b782e7a57fe5cbff8df11b0bc86d691a7a8df0cc9486c4898e8bafd0b374798ecdba9af994890465f435d5e6408dd9ddd96df1673098864522e964b565d69882198a999ee41c980dafdf3538400c81ad57dc970a72b75d75850913452021a4dfe885342c4e5c33dbcd801b10866908de67b13c5dc4fb51dce74dae4c4c27413c00b50c8e18d1dcfe28974fee5df4cefd05f7e8e21e8881ef7300ca75af8ef7c8cfa0a1cf8771444e3bd449f957fa4500c1f371ccc31a7b196ca809935887d26d3ed24d2dc16c83aa263abd880df1d27d8463e4f29673fbb0a073caaf975314f5660bdf89c285291a46ddb2f8410b02e86bc522808052288fe16dbb7733976605ed2342c69717ba18334138bc68c994ffa20bbad1672a4ee0dc19a0ec177f36995edc671ef8d29211e4b7d0723a18c36c398df2e924a4f55ef95687e6a4aebcf86d36a9791d561c2203fc4a545d30a5173ffc84612c333a73fd0c84f92554294cfbbe86088e79bc6f1c9bc880b4502e4b47af767f47dbccbf4318ec6a33ee42cafc3e6ced6720adf772de614a754c7b0d93208cb0bdd285e8ff9ffe078bb782a57a14204784880a3379af47423967bf134933d350324a845e7aca06245efec7dd272177bbb663bf83c23161cf7d8b32d45502f6bbc6416720652aa197556c3cf5be55e2f8ace74ce95feb288f681d92ed529bb9892472c3633f744bfde252c8b00808d92daa2a3b4771eee9cc83745c326f8ea02119b55a99bddfc498948e53ce2efa0635276810d2211e9e0e63bc850029865d525cbf43cde05009dca149084d9569a1abb0e5f941bd5c67a77685e965b354dc744617960e642512f2cd86236c9a1938f4e799cc0e09beb23791f446e822b86518185d668e7e93daec7b1a9f53034aeabc7c7bf52deefbf5e2a90b085c41c0f528ff2cf81dbc1c28ed95ad75fd65c0e0d793d7111dce84883cbf60cd55e025b824d84e141d54da72111ea2fed1fd8f3c9cf47763ee47a7988d5021ac661641ee95ea9c9d57dd2f8e537f3cb71830a6c1608dadf6beb7339961811f8da34f8fb7b5190f9c146942fda73801812ed6bffa1a60c80e5fd6528e045b40fa78c10f37797d93f827539aa389d59c48254397ff7b72325465d18b04acac619d9d5f80d46b57d28a76fbe83203ecacb91328b145ebbe356178a1eb1c09101fe785c98aab93485ae7b4217412b7ea31fdd965eaaf78d3ab4eec8bc689062b738c002fd94f9cd18bbc5285c57854f9092e85d90ec205f43fcc9d27cd6041fb73ed3164e7f2cb3ea694b89a1879f8cbcdbffdab4b277d0fa3dba5061952d266b2f3821f79cd2b3bf107c6250e711c9ddba407c9ed323d2dfda23d5a4088f8199d1cbb311a1b051da8d792299f471f0ca7fd7925695acaf01e7ad022d96dfb30e66d551fb37522baf2ea71cc5a6416124ee2138c3f2fb5cca4b71eb9d3571deebc898b62406f416caa3fcd732f9661548d8b7ec74bc94d9dcc92b0048abc2b358c0007a905c9513affbd873a368e0b5872a2f4cdc4bb8602ad3ec77cba3e150c8993f5fc88ac7e6b2642f4660486d5823482aae8f90ee7913abdb064398cebe5946c2920d7d99935571f9b1eeb4529373538e699dda91425660a1010a4cf7e9a10713f57fa1d601467ec51ad5153bd94582320ff55380ca7efefacf62f822b948cb3b93f68978f248639c51ac97e3f56bcca9990839ee01df9773b22cf261310d4b3c6b03ef54a9a848c10d1252d0412a8f01ff61bd6978112d6b69e2f71e02a04f43f3a1a8259f7e83c26fc5bc703a8b6d3d325f08b08f9dc10b8f654871386ef94d2493463f7f3d0b20bf93be475b0ed9e870aaedd63b8d08877651bace68300e3a1b0a5d1a3da2b246fef82de3b57eca440ae7a7656ff31ae74cad3a80f1ae615f2747589d4859ec1981a6a5176168db86ab5f6930d4679762956e408d2268cad53aa10727c8b8952114b17c352782dc9afc120535bcb99bcf1161397f19ac4d288677e48f0e6bfdcf5f852a8bc1b432399f0ade5db9585e09e4cc96a63dd7bddecbbaae880678f94111108d76c5d825629a3eee16b2a6362c59ba3cf99a2e2bcfa62d010706bca5c0d009b141f1c3f6a9cc58234f97a5721a3ee31772877ffda5507f8e7053e15cb60df08184dbdd9f2af7a618781fdd39d32404f3e2dc6ac48f35ce31bc70a019235b7776114ef2ae75ebf7b7191e5a61e1c5c82340e12dd98cf9125a3fb1c8062a206ac2aa98e708a190b1b70d1c2450b47394d8e1f21c541b3f4139d2159e9a37acf2ee9ba5e0cf99221a43b46793cad7b7b71784032a0092abb25380fa77646f948ed456d6fa1fb749f736e10491e39569c073308ee782562a59a719e4b8910f737a41ee0644db9905d22f44bae257749b03667b535af492012ad1c50f1d88a46a2c3aeeca86026c6e5ca8289bb153ff85aade4bd00b9bb87017d7816c24a0e71b0d0dcf6dedbc956c81bf445d665da7cb1c009be2f8d7eb286e2e2595166b8df0541ff0b80ab20d9ba30058ef52dc2c1905133bcca7193320811e0bc083798b80bce7e84ea9135d976fbc339b0814cb4f4dd9a71f9a2f1a78da4c60c1671b6ef41798646a702fd9eeb67bd250df336f0c1889c54be82bfc4238d6568ca0e7bf7a3005126d605a867b47f2c96fd6a92a9cf463270a9e2df32c6959c2f272b48a6b76fe7393dc12713c99888e0d03ffdac04f5d3c87e5343bc1a6127484b6d7e18e97a329ae582b8c3dd1be170cff9fdebcadfb339c67a303e15d6f779da6fbd91b401ac8e32fe1a0f16b5aa52ca7801d12aaba5c57945b3d0e768370e031d268b101df06ceaca597ca754d933b08f3b248548d267cbb16430c5110cdaf5b36bc2cf6a7c24f143277f606cbe77ef320505986fa5dc876e87ec74a2c06d0e893ed3da67cd814f209b3720e98d1b2f6afd245bcb682167978b98b9976c2ef41"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 257.795842ms ago: executing program 3 (id=5159): r0 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) 188.817804ms ago: executing program 0 (id=5160): mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) read$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare$auto(0x6c000000) 155.467858ms ago: executing program 2 (id=5161): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x84) 0s ago: executing program 3 (id=5162): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000500)={0x7, 0x0, [{0x40000090, 0x2, 0x6}]}) kernel console output (not intermixed with test programs): 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.886243][T14583] RSP: 002b:00007fbef31a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 405.886277][T14583] RAX: ffffffffffffffda RBX: 00007fbef2615fa0 RCX: 00007fbef239c799 [ 405.886298][T14583] RDX: 0000000000143283 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 405.886319][T14583] RBP: 00007fbef2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 405.886349][T14583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.886370][T14583] R13: 00007fbef2616038 R14: 00007fbef2615fa0 R15: 00007ffcefd031e8 [ 405.886417][T14583] [ 405.886431][T14583] ERROR: Out of memory at tomoyo_realpath_from_path. [ 408.864937][T14626] netlink: zone id is out of range [ 408.870164][T14626] netlink: zone id is out of range [ 408.944024][T14630] netlink: zone id is out of range [ 408.965016][T14626] netlink: zone id is out of range [ 408.980694][T14632] netlink: zone id is out of range [ 408.999723][T14630] netlink: zone id is out of range [ 409.005365][T14632] netlink: zone id is out of range [ 409.016635][T14630] netlink: zone id is out of range [ 409.031819][T14632] netlink: zone id is out of range [ 409.053909][T14630] netlink: zone id is out of range [ 414.055153][T14752] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3503'. [ 415.485988][T14784] vhci_hcd vhci_hcd.2: invalid port number 111 [ 415.492563][T14784] vhci_hcd vhci_hcd.2: default hub control req: a356 va1b7 i006f l230 [ 415.504375][T14784] mmap: syz.0.3515 (14784) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 417.366570][T14825] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3530'. [ 418.116478][T14840] vhci_hcd vhci_hcd.2: invalid port number 111 [ 418.122880][T14840] vhci_hcd vhci_hcd.2: default hub control req: a356 va1b7 i006f l230 [ 421.859844][T14915] FAULT_INJECTION: forcing a failure. [ 421.859844][T14915] name failslab, interval 1, probability 0, space 0, times 0 [ 422.112346][T14915] CPU: 0 UID: 0 PID: 14915 Comm: syz.0.3558 Tainted: G L syzkaller #0 PREEMPT(full) [ 422.112400][T14915] Tainted: [L]=SOFTLOCKUP [ 422.112413][T14915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 422.112432][T14915] Call Trace: [ 422.112442][T14915] [ 422.112455][T14915] dump_stack_lvl+0x100/0x190 [ 422.112516][T14915] should_fail_ex.cold+0x5/0xa [ 422.112557][T14915] should_failslab+0xc2/0x120 [ 422.112597][T14915] __kmalloc_cache_noprof+0x7a/0x6f0 [ 422.112645][T14915] ? nci_allocate_device+0x105/0x410 [ 422.112707][T14915] nci_allocate_device+0x105/0x410 [ 422.112752][T14915] virtual_ncidev_open+0x6f/0x220 [ 422.112805][T14915] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 422.112856][T14915] misc_open+0x26d/0x450 [ 422.112897][T14915] ? __pfx_misc_open+0x10/0x10 [ 422.112945][T14915] chrdev_open+0x234/0x6a0 [ 422.112982][T14915] ? __pfx_apparmor_file_open+0x10/0x10 [ 422.113018][T14915] ? __pfx_chrdev_open+0x10/0x10 [ 422.113067][T14915] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 422.113116][T14915] do_dentry_open+0x6d8/0x1660 [ 422.113152][T14915] ? __pfx_chrdev_open+0x10/0x10 [ 422.113201][T14915] vfs_open+0x82/0x3f0 [ 422.113246][T14915] path_openat+0x208c/0x31a0 [ 422.113288][T14915] ? __pfx_path_openat+0x10/0x10 [ 422.113332][T14915] do_file_open+0x20e/0x430 [ 422.113365][T14915] ? __pfx_do_file_open+0x10/0x10 [ 422.113459][T14915] ? alloc_fd+0x476/0x790 [ 422.113494][T14915] ? do_getname+0x191/0x390 [ 422.113536][T14915] do_sys_openat2+0x10d/0x1e0 [ 422.113598][T14915] ? __pfx_do_sys_openat2+0x10/0x10 [ 422.113642][T14915] ? __fget_files+0x21f/0x3d0 [ 422.113685][T14915] __x64_sys_openat+0x12d/0x210 [ 422.113727][T14915] ? __pfx___x64_sys_openat+0x10/0x10 [ 422.113781][T14915] do_syscall_64+0x106/0xf80 [ 422.113825][T14915] ? clear_bhb_loop+0x40/0x90 [ 422.113861][T14915] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.113891][T14915] RIP: 0033:0x7fbef239c799 [ 422.113914][T14915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 422.113943][T14915] RSP: 002b:00007fbef31a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 422.113971][T14915] RAX: ffffffffffffffda RBX: 00007fbef2615fa0 RCX: 00007fbef239c799 [ 422.113989][T14915] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 422.114007][T14915] RBP: 00007fbef2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 422.114025][T14915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.114041][T14915] R13: 00007fbef2616038 R14: 00007fbef2615fa0 R15: 00007ffcefd031e8 [ 422.114078][T14915] [ 423.331689][T14933] vhci_hcd vhci_hcd.2: invalid port number 111 [ 423.350842][T14933] vhci_hcd vhci_hcd.2: default hub control req: a356 va1b7 i006f l230 [ 423.742561][T14944] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3565'. [ 424.263302][T14955] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3569'. [ 424.956785][T14972] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3576'. [ 425.798070][T14995] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3584'. [ 427.827231][T15031] FAULT_INJECTION: forcing a failure. [ 427.827231][T15031] name failslab, interval 1, probability 0, space 0, times 0 [ 427.922429][T15031] CPU: 0 UID: 0 PID: 15031 Comm: syz.1.3597 Tainted: G L syzkaller #0 PREEMPT(full) [ 427.922484][T15031] Tainted: [L]=SOFTLOCKUP [ 427.922496][T15031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 427.922515][T15031] Call Trace: [ 427.922526][T15031] [ 427.922539][T15031] dump_stack_lvl+0x100/0x190 [ 427.922599][T15031] should_fail_ex.cold+0x5/0xa [ 427.922641][T15031] should_failslab+0xc2/0x120 [ 427.922679][T15031] __kmalloc_cache_noprof+0x7a/0x6f0 [ 427.922726][T15031] ? snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 427.922782][T15031] snd_pcm_oss_change_params_locked+0x211/0x39f0 [ 427.922839][T15031] ? __mutex_lock+0x26a/0x1b90 [ 427.922896][T15031] ? snd_pcm_oss_sync+0x243/0x840 [ 427.922940][T15031] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 427.922992][T15031] ? __pfx___mutex_lock+0x10/0x10 [ 427.923053][T15031] ? __fsnotify_parent+0x2b4/0xca0 [ 427.923110][T15031] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 427.923158][T15031] snd_pcm_oss_sync+0x265/0x840 [ 427.923209][T15031] snd_pcm_oss_release+0x238/0x300 [ 427.923253][T15031] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 427.923299][T15031] __fput+0x3ff/0xb40 [ 427.923351][T15031] task_work_run+0x150/0x240 [ 427.923410][T15031] ? __pfx_task_work_run+0x10/0x10 [ 427.923473][T15031] exit_to_user_mode_loop+0x100/0x4a0 [ 427.923525][T15031] do_syscall_64+0x668/0xf80 [ 427.923577][T15031] ? clear_bhb_loop+0x40/0x90 [ 427.923619][T15031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.923654][T15031] RIP: 0033:0x7fe758b9c799 [ 427.923681][T15031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.923715][T15031] RSP: 002b:00007fe759a97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 427.923748][T15031] RAX: 0000000000000000 RBX: 00007fe758e15fa0 RCX: 00007fe758b9c799 [ 427.923769][T15031] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 427.923788][T15031] RBP: 00007fe758c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 427.923808][T15031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.923827][T15031] R13: 00007fe758e16038 R14: 00007fe758e15fa0 R15: 00007ffdc40890d8 [ 427.923871][T15031] [ 430.282085][ T5824] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 430.282130][ T5824] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 430.297111][ T5824] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 430.297273][ T5824] Bluetooth: hci2: Unknown advertising packet type: 0x14 [ 430.305869][ T5824] Bluetooth: hci2: Unknown advertising packet type: 0x14 [ 430.313821][ T5824] Bluetooth: hci2: Unknown advertising packet type: 0x14 [ 430.321127][ T5824] Bluetooth: hci2: Unknown advertising packet type: 0x72 [ 430.328233][ T5824] Bluetooth: hci2: Unknown advertising packet type: 0x14 [ 430.335562][ T5824] Bluetooth: hci2: Malformed LE Event: 0x0d [ 431.304706][T15091] netlink: 206 bytes leftover after parsing attributes in process `syz.1.3621'. [ 431.700851][T15099] FAULT_INJECTION: forcing a failure. [ 431.700851][T15099] name failslab, interval 1, probability 0, space 0, times 0 [ 431.749463][T15099] CPU: 1 UID: 0 PID: 15099 Comm: syz.0.3626 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.749528][T15099] Tainted: [L]=SOFTLOCKUP [ 431.749539][T15099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.749560][T15099] Call Trace: [ 431.749571][T15099] [ 431.749584][T15099] dump_stack_lvl+0x100/0x190 [ 431.749645][T15099] should_fail_ex.cold+0x5/0xa [ 431.749688][T15099] should_failslab+0xc2/0x120 [ 431.749725][T15099] __kmalloc_cache_noprof+0x7a/0x6f0 [ 431.749775][T15099] ? sctp_add_bind_addr+0xae/0x3e0 [ 431.749939][T15099] ? __pfx_sctp_get_port_local+0x10/0x10 [ 431.750010][T15099] sctp_add_bind_addr+0xae/0x3e0 [ 431.750064][T15099] sctp_do_bind+0x36c/0x760 [ 431.750111][T15099] sctp_connect_new_asoc+0x5e7/0x770 [ 431.750154][T15099] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 431.750199][T15099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 431.750245][T15099] __sctp_connect+0x3e7/0xc70 [ 431.750294][T15099] ? __pfx___sctp_connect+0x10/0x10 [ 431.750337][T15099] ? __pfx_sctp_inet_connect+0x10/0x10 [ 431.750378][T15099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 431.750416][T15099] ? __pfx_sctp_inet_connect+0x10/0x10 [ 431.750453][T15099] sctp_inet_connect+0x15f/0x220 [ 431.750495][T15099] __sys_connect_file+0x141/0x1a0 [ 431.750547][T15099] __sys_connect+0x141/0x170 [ 431.750593][T15099] ? __pfx___sys_connect+0x10/0x10 [ 431.750668][T15099] __x64_sys_connect+0x72/0xb0 [ 431.750712][T15099] ? lockdep_hardirqs_on+0x78/0x100 [ 431.750766][T15099] do_syscall_64+0x106/0xf80 [ 431.750817][T15099] ? clear_bhb_loop+0x40/0x90 [ 431.750859][T15099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.750899][T15099] RIP: 0033:0x7fbef239c799 [ 431.750926][T15099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.750958][T15099] RSP: 002b:00007fbef31a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 431.750995][T15099] RAX: ffffffffffffffda RBX: 00007fbef2615fa0 RCX: 00007fbef239c799 [ 431.751018][T15099] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 431.751038][T15099] RBP: 00007fbef2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 431.751057][T15099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.751077][T15099] R13: 00007fbef2616038 R14: 00007fbef2615fa0 R15: 00007ffcefd031e8 [ 431.751119][T15099] [ 433.794949][T15139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3641'. [ 434.063445][T15146] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3643'. [ 434.732515][T15165] FAULT_INJECTION: forcing a failure. [ 434.732515][T15165] name failslab, interval 1, probability 0, space 0, times 0 [ 434.793132][T15165] CPU: 1 UID: 0 PID: 15165 Comm: syz.2.3652 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.793187][T15165] Tainted: [L]=SOFTLOCKUP [ 434.793198][T15165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.793218][T15165] Call Trace: [ 434.793228][T15165] [ 434.793242][T15165] dump_stack_lvl+0x100/0x190 [ 434.793299][T15165] should_fail_ex.cold+0x5/0xa [ 434.793339][T15165] should_failslab+0xc2/0x120 [ 434.793378][T15165] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 434.793430][T15165] ? security_inode_alloc+0x3b/0x2c0 [ 434.793468][T15165] ? lockdep_init_map_type+0x5c/0x250 [ 434.793522][T15165] security_inode_alloc+0x3b/0x2c0 [ 434.793562][T15165] inode_init_always_gfp+0xced/0x1040 [ 434.793606][T15165] alloc_inode+0x8e/0x250 [ 434.793668][T15165] path_from_stashed+0x25b/0x750 [ 434.793707][T15165] ? do_raw_spin_unlock+0x145/0x1e0 [ 434.793769][T15165] ns_get_path+0x60/0x80 [ 434.793805][T15165] proc_ns_get_link+0x121/0x230 [ 434.793905][T15165] ? __pfx_proc_ns_get_link+0x10/0x10 [ 434.793959][T15165] ? atime_needs_update+0x8b/0x6b0 [ 434.794014][T15165] pick_link+0xd17/0x13c0 [ 434.794064][T15165] ? __pfx_proc_ns_get_link+0x10/0x10 [ 434.794117][T15165] step_into_slowpath+0x9ba/0xf90 [ 434.794189][T15165] ? __pfx_step_into_slowpath+0x10/0x10 [ 434.794245][T15165] ? find_held_lock+0x2b/0x80 [ 434.794295][T15165] path_openat+0xf95/0x31a0 [ 434.794347][T15165] ? __pfx_path_openat+0x10/0x10 [ 434.794401][T15165] do_file_open+0x20e/0x430 [ 434.794442][T15165] ? __pfx_do_file_open+0x10/0x10 [ 434.794509][T15165] ? alloc_fd+0x476/0x790 [ 434.794549][T15165] ? do_getname+0x191/0x390 [ 434.794599][T15165] do_sys_openat2+0x10d/0x1e0 [ 434.794655][T15165] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.794718][T15165] __x64_sys_openat+0x12d/0x210 [ 434.794768][T15165] ? __pfx___x64_sys_openat+0x10/0x10 [ 434.794822][T15165] ? do_user_addr_fault+0x8d6/0x12f0 [ 434.794866][T15165] do_syscall_64+0x106/0xf80 [ 434.794919][T15165] ? clear_bhb_loop+0x40/0x90 [ 434.794961][T15165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.794996][T15165] RIP: 0033:0x7fd7f175cfce [ 434.795025][T15165] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.795058][T15165] RSP: 002b:00007fd7f26b9ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 434.795090][T15165] RAX: ffffffffffffffda RBX: 00007fd7f26ba6c0 RCX: 00007fd7f175cfce [ 434.795113][T15165] RDX: 0000000000000002 RSI: 00007fd7f26b9f90 RDI: ffffffffffffff9c [ 434.795136][T15165] RBP: 00007fd7f1832c99 R08: 0000000000000000 R09: 0000000000000000 [ 434.795157][T15165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.795177][T15165] R13: 00007fd7f1a16038 R14: 00007fd7f1a15fa0 R15: 00007ffc978336f8 [ 434.795221][T15165] [ 436.728321][T15199] futex_wake_op: syz.0.3664 tries to shift op by -2048; fix this program [ 436.741356][T15199] 0x000400000001-0x00042af548d0 : "" [ 436.746711][T15199] mtd: partition "" is out of reach -- disabled [ 436.787972][T15199] ftl_cs: FTL header not found. [ 438.031645][T15214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3670'. [ 438.251533][ T5824] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 439.195581][T15238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3681'. [ 439.228608][T15238] netlink: 354 bytes leftover after parsing attributes in process `syz.0.3681'. [ 439.337541][T15242] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3680'. [ 439.813034][T15253] sctp: [Deprecated]: syz.2.3685 (pid 15253) Use of struct sctp_assoc_value in delayed_ack socket option. [ 439.813034][T15253] Use struct sctp_sack_info instead [ 440.071856][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.079147][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.218549][T15270] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3692'. [ 440.647571][T15274] FAULT_INJECTION: forcing a failure. [ 440.647571][T15274] name failslab, interval 1, probability 0, space 0, times 0 [ 440.694373][T15274] CPU: 1 UID: 0 PID: 15274 Comm: syz.3.3694 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.694426][T15274] Tainted: [L]=SOFTLOCKUP [ 440.694448][T15274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.694469][T15274] Call Trace: [ 440.694480][T15274] [ 440.694493][T15274] dump_stack_lvl+0x100/0x190 [ 440.694552][T15274] should_fail_ex.cold+0x5/0xa [ 440.694593][T15274] ? lsm_blob_alloc+0x68/0x90 [ 440.694643][T15274] should_failslab+0xc2/0x120 [ 440.694683][T15274] __kmalloc_noprof+0xe0/0x850 [ 440.694737][T15274] ? trace_kmem_cache_alloc+0xf3/0x120 [ 440.694783][T15274] lsm_blob_alloc+0x68/0x90 [ 440.694833][T15274] security_prepare_creds+0x2d/0x290 [ 440.694883][T15274] prepare_creds+0x5d6/0x950 [ 440.694940][T15274] __sys_setfsgid+0xe3/0x3b0 [ 440.694981][T15274] do_syscall_64+0x106/0xf80 [ 440.695033][T15274] ? clear_bhb_loop+0x40/0x90 [ 440.695076][T15274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.695111][T15274] RIP: 0033:0x7f5b9bb9c799 [ 440.695138][T15274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.695171][T15274] RSP: 002b:00007f5b99df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 440.695204][T15274] RAX: ffffffffffffffda RBX: 00007f5b9be15fa0 RCX: 00007f5b9bb9c799 [ 440.695226][T15274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 440.695245][T15274] RBP: 00007f5b9bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 440.695268][T15274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.695287][T15274] R13: 00007f5b9be16038 R14: 00007f5b9be15fa0 R15: 00007ffe18dfea78 [ 440.695331][T15274] [ 441.132579][T15279] netlink: 'syz.3.3696': attribute type 2 has an invalid length. [ 441.784824][T15288] sd 0:0:1:0: PR command failed: 1026 [ 441.811153][T15288] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 441.831097][T15288] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 441.866494][T15292] device-mapper: ioctl: device name cannot contain '/' [ 442.082697][T15294] ubi0: attaching mtd0 [ 442.090449][T15294] ubi0: scanning is finished [ 442.096927][T15294] ubi0: empty MTD device detected [ 442.127135][T15296] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3702'. [ 442.241557][T15299] FAULT_INJECTION: forcing a failure. [ 442.241557][T15299] name failslab, interval 1, probability 0, space 0, times 0 [ 442.301098][T15299] CPU: 1 UID: 0 PID: 15299 Comm: syz.0.3704 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.301155][T15299] Tainted: [L]=SOFTLOCKUP [ 442.301167][T15299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 442.301197][T15299] Call Trace: [ 442.301208][T15299] [ 442.301222][T15299] dump_stack_lvl+0x100/0x190 [ 442.301283][T15299] should_fail_ex.cold+0x5/0xa [ 442.301326][T15299] ? tomoyo_open_control+0x618/0xa20 [ 442.301378][T15299] should_failslab+0xc2/0x120 [ 442.301416][T15299] __kmalloc_noprof+0xe0/0x850 [ 442.301466][T15299] ? lockdep_init_map_type+0x5c/0x250 [ 442.301518][T15299] tomoyo_open_control+0x618/0xa20 [ 442.301581][T15299] do_dentry_open+0x6d8/0x1660 [ 442.301617][T15299] ? __pfx_tomoyo_open+0x10/0x10 [ 442.301672][T15299] vfs_open+0x82/0x3f0 [ 442.301722][T15299] path_openat+0x208c/0x31a0 [ 442.301773][T15299] ? __pfx_path_openat+0x10/0x10 [ 442.301824][T15299] do_file_open+0x20e/0x430 [ 442.301866][T15299] ? __pfx_do_file_open+0x10/0x10 [ 442.301933][T15299] ? alloc_fd+0x476/0x790 [ 442.301973][T15299] ? do_getname+0x191/0x390 [ 442.302023][T15299] do_sys_openat2+0x10d/0x1e0 [ 442.302071][T15299] ? __pfx_do_sys_openat2+0x10/0x10 [ 442.302123][T15299] ? __fget_files+0x21f/0x3d0 [ 442.302166][T15299] __x64_sys_openat+0x12d/0x210 [ 442.302225][T15299] ? __pfx___x64_sys_openat+0x10/0x10 [ 442.302290][T15299] do_syscall_64+0x106/0xf80 [ 442.302343][T15299] ? clear_bhb_loop+0x40/0x90 [ 442.302387][T15299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.302424][T15299] RIP: 0033:0x7fbef239c799 [ 442.302453][T15299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.302488][T15299] RSP: 002b:00007fbef31a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 442.302522][T15299] RAX: ffffffffffffffda RBX: 00007fbef2615fa0 RCX: 00007fbef239c799 [ 442.302544][T15299] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 442.302567][T15299] RBP: 00007fbef2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 442.302588][T15299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.302609][T15299] R13: 00007fbef2616038 R14: 00007fbef2615fa0 R15: 00007ffcefd031e8 [ 442.302654][T15299] [ 442.689959][T15294] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 442.781405][T15294] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 442.830092][T15294] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 442.881037][T15294] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 442.888495][T15294] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 442.896586][T15294] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 442.907663][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 442.958440][T15294] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1024510257 [ 442.977404][T15312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3707'. [ 443.041120][T15294] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 443.076455][T15307] ubi0: background thread "ubi_bgt0d" started, PID 15307 [ 443.108206][T15297] ubi0: detaching mtd0 [ 443.189496][T15297] ubi0: mtd0 is detached [ 444.124788][T15333] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3715'. [ 446.640829][T15396] netlink: 302 bytes leftover after parsing attributes in process `syz.1.3738'. [ 447.640691][ T5824] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 449.458109][T15446] netlink: 'syz.3.3752': attribute type 4 has an invalid length. [ 450.299819][T15453] netlink: 'syz.1.3755': attribute type 1 has an invalid length. [ 450.314041][T15453] netlink: 322 bytes leftover after parsing attributes in process `syz.1.3755'. [ 450.371463][T15453] netlink: 'syz.1.3755': attribute type 1 has an invalid length. [ 450.379281][T15453] netlink: 322 bytes leftover after parsing attributes in process `syz.1.3755'. [ 454.915900][T15505] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3773'. [ 456.493098][T15523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3779'. [ 456.681595][T15521] FAULT_INJECTION: forcing a failure. [ 456.681595][T15521] name fail_futex, interval 1, probability 0, space 0, times 0 [ 456.696109][T15521] CPU: 1 UID: 0 PID: 15521 Comm: syz.1.3778 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.696164][T15521] Tainted: [L]=SOFTLOCKUP [ 456.696176][T15521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.696197][T15521] Call Trace: [ 456.696208][T15521] [ 456.696220][T15521] dump_stack_lvl+0x100/0x190 [ 456.696281][T15521] should_fail_ex.cold+0x5/0xa [ 456.696325][T15521] should_fail_futex+0x4c/0x60 [ 456.696369][T15521] futex_lock_pi_atomic+0xe7/0xaf0 [ 456.696434][T15521] futex_lock_pi+0x246/0x7b0 [ 456.696503][T15521] ? __pfx_futex_lock_pi+0x10/0x10 [ 456.696561][T15521] ? __pfx___futex_wait+0x10/0x10 [ 456.696617][T15521] ? lockdep_hardirqs_on+0x78/0x100 [ 456.696708][T15521] ? __pfx_futex_wake_mark+0x10/0x10 [ 456.696785][T15521] ? ksys_write+0x190/0x250 [ 456.696816][T15521] ? ksys_write+0x190/0x250 [ 456.696857][T15521] do_futex+0x18a/0x350 [ 456.696901][T15521] ? __pfx_do_futex+0x10/0x10 [ 456.696958][T15521] __x64_sys_futex+0x34f/0x4d0 [ 456.697010][T15521] ? __pfx___x64_sys_futex+0x10/0x10 [ 456.697073][T15521] do_syscall_64+0x106/0xf80 [ 456.697124][T15521] ? clear_bhb_loop+0x40/0x90 [ 456.697165][T15521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.697199][T15521] RIP: 0033:0x7fe758b9c799 [ 456.697226][T15521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.697259][T15521] RSP: 002b:00007fe759a76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 456.697291][T15521] RAX: ffffffffffffffda RBX: 00007fe758e16090 RCX: 00007fe758b9c799 [ 456.697312][T15521] RDX: 0000000000000001 RSI: 0000000000000006 RDI: 0000000000000000 [ 456.697332][T15521] RBP: 00007fe758c32c99 R08: 0000000000000000 R09: 00000000fffffffa [ 456.697353][T15521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.697373][T15521] R13: 00007fe758e16128 R14: 00007fe758e16090 R15: 00007ffdc40890d8 [ 456.697417][T15521] [ 456.937839][T15529] ACPI: button: Initial lid state set to 'ignore' [ 457.121553][T15530] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3781'. [ 457.182968][T15536] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3781'. [ 457.782874][T15547] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3789'. [ 458.064290][T15550] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3790'. [ 458.117301][T15550] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3790'. [ 461.668602][T15599] FAULT_INJECTION: forcing a failure. [ 461.668602][T15599] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 461.721067][T15599] CPU: 1 UID: 0 PID: 15599 Comm: syz.1.3808 Tainted: G L syzkaller #0 PREEMPT(full) [ 461.721122][T15599] Tainted: [L]=SOFTLOCKUP [ 461.721134][T15599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 461.721154][T15599] Call Trace: [ 461.721165][T15599] [ 461.721177][T15599] dump_stack_lvl+0x100/0x190 [ 461.721237][T15599] should_fail_ex.cold+0x5/0xa [ 461.721272][T15599] ? prepare_alloc_pages+0x16d/0x5f0 [ 461.721319][T15599] should_fail_alloc_page+0xeb/0x140 [ 461.721360][T15599] prepare_alloc_pages+0x1f0/0x5f0 [ 461.721410][T15599] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 461.721473][T15599] ? rcu_is_watching+0x12/0xc0 [ 461.721534][T15599] ? __lock_acquire+0x4a5/0x2630 [ 461.721583][T15599] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 461.721657][T15599] ? page_ref_add_unless.constprop.0+0x118/0x390 [ 461.721707][T15599] ? find_held_lock+0x2b/0x80 [ 461.721748][T15599] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 461.721787][T15599] ? policy_nodemask+0xed/0x4f0 [ 461.721828][T15599] alloc_pages_mpol+0x1fb/0x550 [ 461.721877][T15599] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 461.721917][T15599] ? page_table_check_set+0x4a9/0xa10 [ 461.721961][T15599] folio_alloc_mpol_noprof+0x36/0x340 [ 461.722010][T15599] vma_alloc_folio_noprof+0xed/0x1d0 [ 461.722056][T15599] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 461.722099][T15599] ? rcu_read_unlock+0x2d/0xb0 [ 461.722150][T15599] ? rcu_read_unlock+0x2d/0xb0 [ 461.722199][T15599] ? __lock_acquire+0x4a5/0x2630 [ 461.722250][T15599] do_wp_page+0x1eef/0x4f00 [ 461.722304][T15599] ? __pfx_do_wp_page+0x10/0x10 [ 461.722350][T15599] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 461.722416][T15599] __handle_mm_fault+0x1ac8/0x2b60 [ 461.722473][T15599] ? reacquire_held_locks+0xce/0x1e0 [ 461.722520][T15599] ? __pfx___handle_mm_fault+0x10/0x10 [ 461.722577][T15599] ? lock_vma_under_rcu+0x17c/0x590 [ 461.722650][T15599] handle_mm_fault+0x36d/0xa20 [ 461.722710][T15599] do_user_addr_fault+0x5a3/0x12f0 [ 461.722759][T15599] exc_page_fault+0x6f/0xd0 [ 461.722812][T15599] asm_exc_page_fault+0x26/0x30 [ 461.722857][T15599] RIP: 0033:0x7fe758b5c585 [ 461.722885][T15599] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 461.722921][T15599] RSP: 002b:00007fe759a95de0 EFLAGS: 00010293 [ 461.722948][T15599] RAX: 0000000000000008 RBX: 00007fe759947e20 RCX: 0000000000000000 [ 461.722971][T15599] RDX: 0000000000000000 RSI: 00007fe758c4fde6 RDI: 00007fe759947e20 [ 461.722992][T15599] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 461.723013][T15599] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe758c4fa53 [ 461.723034][T15599] R13: ffffffffffffffe8 R14: 0000000000000020 R15: 00007fe758c4fde6 [ 461.723079][T15599] [ 461.723478][T15599] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 462.477546][T15608] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3812'. [ 462.493730][T15607] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3811'. [ 462.671370][T15610] netlink: 350 bytes leftover after parsing attributes in process `syz.1.3813'. [ 463.153808][ T30] audit: type=1804 audit(2147502156.524:24): pid=15621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3818" name=2F6E6577726F6F742F3534322F50524F46494C455F56455253494F4E3D32303135303530350A302D434F4D4D454E543D0A302D505245464552454E43453D7B206D61785F61756469745F6C6F673D3332206D61785F6C6561726E696E675F656E7472793D3634207D0A302D434F4E4649473D7B206D6F64653D6C6561726E696E67206772616E745F6C6F673D6E6F2072656A6563745F6C6F673D796573207D0A dev="tmpfs" ino=2761 res=1 errno=0 [ 463.856424][T15632] netlink: 330 bytes leftover after parsing attributes in process `syz.1.3822'. [ 463.870272][T15634] FAULT_INJECTION: forcing a failure. [ 463.870272][T15634] name failslab, interval 1, probability 0, space 0, times 0 [ 463.913478][T15634] CPU: 1 UID: 0 PID: 15634 Comm: syz.0.3823 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.913532][T15634] Tainted: [L]=SOFTLOCKUP [ 463.913544][T15634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 463.913564][T15634] Call Trace: [ 463.913575][T15634] [ 463.913588][T15634] dump_stack_lvl+0x100/0x190 [ 463.913659][T15634] should_fail_ex.cold+0x5/0xa [ 463.913699][T15634] should_failslab+0xc2/0x120 [ 463.913738][T15634] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 463.913792][T15634] ? security_inode_alloc+0x3b/0x2c0 [ 463.913830][T15634] ? lockdep_init_map_type+0x5c/0x250 [ 463.913885][T15634] security_inode_alloc+0x3b/0x2c0 [ 463.913925][T15634] inode_init_always_gfp+0xced/0x1040 [ 463.913970][T15634] alloc_inode+0x8e/0x250 [ 463.914018][T15634] new_inode+0x22/0x1c0 [ 463.914070][T15634] shmem_get_inode+0x212/0x1040 [ 463.914123][T15634] ? __pfx_shmem_get_inode+0x10/0x10 [ 463.914187][T15634] __shmem_file_setup+0x184/0x490 [ 463.914239][T15634] ? __pfx___shmem_file_setup+0x10/0x10 [ 463.914291][T15634] ? do_raw_spin_lock+0x128/0x260 [ 463.914343][T15634] ? find_held_lock+0x2b/0x80 [ 463.914376][T15634] ? alloc_fd+0x476/0x790 [ 463.914410][T15634] ? alloc_fd+0x476/0x790 [ 463.914448][T15634] memfd_alloc_file+0x247/0x620 [ 463.914496][T15634] ? _raw_spin_unlock+0x28/0x50 [ 463.914546][T15634] ? __pfx_memfd_alloc_file+0x10/0x10 [ 463.914607][T15634] __do_sys_memfd_create+0x236/0x3d0 [ 463.914671][T15634] do_syscall_64+0x106/0xf80 [ 463.914723][T15634] ? clear_bhb_loop+0x40/0x90 [ 463.914765][T15634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.914802][T15634] RIP: 0033:0x7fbef239c799 [ 463.914830][T15634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.914865][T15634] RSP: 002b:00007fbef31a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 463.914899][T15634] RAX: ffffffffffffffda RBX: 00007fbef2615fa0 RCX: 00007fbef239c799 [ 463.914921][T15634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 463.914942][T15634] RBP: 00007fbef2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 463.914962][T15634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.914981][T15634] R13: 00007fbef2616038 R14: 00007fbef2615fa0 R15: 00007ffcefd031e8 [ 463.915026][T15634] [ 465.050710][T15651] zswap: compressor not available [ 465.481785][T15664] Console: switching to colour VGA+ 80x25 [ 470.072253][T15742] net_ratelimit: 35 callbacks suppressed [ 470.072297][T15742] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 470.085061][T15742] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 470.621698][T15756] netlink: 350 bytes leftover after parsing attributes in process `syz.0.3871'. [ 471.724245][T15789] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3884'. [ 471.865456][T15792] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3884'. [ 472.054453][T15781] zswap: compressor not available [ 472.145540][ T5824] block nbd0: Receive control failed (result -32) [ 472.199815][T15795] netlink: 334 bytes leftover after parsing attributes in process `syz.1.3887'. [ 473.642196][T15821] random: crng reseeded on system resumption [ 474.279868][T15828] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3897'. [ 477.292057][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3914'. [ 477.987528][T15894] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3916'. [ 478.662217][T15910] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3922'. [ 479.075980][T15907] zswap: compressor not available [ 479.095023][T15919] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3923'. [ 479.689435][T15923] zswap: compressor not available [ 481.965252][ T5824] block nbd1: Receive control failed (result -32) [ 482.032827][T15975] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3939'. [ 482.088660][T15977] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3938'. [ 482.206506][T15979] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3938'. [ 482.782097][T15992] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3945'. [ 482.829261][T15980] netlink: 74 bytes leftover after parsing attributes in process `syz.0.3940'. [ 483.014397][T15997] random: crng reseeded on system resumption [ 483.035159][T15995] sctp: [Deprecated]: syz.3.3946 (pid 15995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 483.035159][T15995] Use struct sctp_sack_info instead [ 484.231264][T16021] block nbd2: Unsupported socket: should be TCP or UNIX. [ 484.653392][T16024] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3955'. [ 485.605352][T16036] netlink: 342 bytes leftover after parsing attributes in process `syz.3.3958'. [ 486.496022][T16046] netlink: 350 bytes leftover after parsing attributes in process `syz.1.3962'. [ 486.712295][T16051] FAULT_INJECTION: forcing a failure. [ 486.712295][T16051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 486.753920][T16051] CPU: 1 UID: 0 PID: 16051 Comm: syz.1.3964 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.753974][T16051] Tainted: [L]=SOFTLOCKUP [ 486.753986][T16051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.754007][T16051] Call Trace: [ 486.754018][T16051] [ 486.754030][T16051] dump_stack_lvl+0x100/0x190 [ 486.754094][T16051] should_fail_ex.cold+0x5/0xa [ 486.754130][T16051] ? prepare_alloc_pages+0x16d/0x5f0 [ 486.754177][T16051] should_fail_alloc_page+0xeb/0x140 [ 486.754220][T16051] prepare_alloc_pages+0x1f0/0x5f0 [ 486.754269][T16051] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 486.754333][T16051] ? __lock_acquire+0x4a5/0x2630 [ 486.754392][T16051] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 486.754451][T16051] ? do_raw_spin_lock+0x128/0x260 [ 486.754505][T16051] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 486.754557][T16051] ? find_held_lock+0x2b/0x80 [ 486.754601][T16051] ? __lock_acquire+0x4a5/0x2630 [ 486.754656][T16051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 486.754694][T16051] ? policy_nodemask+0xed/0x4f0 [ 486.754745][T16051] alloc_pages_mpol+0x1fb/0x550 [ 486.754782][T16051] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 486.754820][T16051] ? __lock_acquire+0x4a5/0x2630 [ 486.754870][T16051] folio_alloc_mpol_noprof+0x36/0x340 [ 486.754914][T16051] shmem_alloc_folio+0x135/0x160 [ 486.754960][T16051] shmem_alloc_and_add_folio+0x371/0xd40 [ 486.755022][T16051] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 486.755078][T16051] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 486.755140][T16051] shmem_get_folio_gfp+0x6ab/0x1900 [ 486.755203][T16051] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 486.755259][T16051] ? __pfx_stack_trace_save+0x10/0x10 [ 486.755327][T16051] shmem_fault+0x1f9/0xa20 [ 486.755380][T16051] ? __lock_acquire+0x4a5/0x2630 [ 486.755440][T16051] ? __pfx_shmem_fault+0x10/0x10 [ 486.755490][T16051] ? __lock_acquire+0x4a5/0x2630 [ 486.755553][T16051] ? __pfx_filemap_map_pages+0x10/0x10 [ 486.755604][T16051] __do_fault+0x10d/0x550 [ 486.755644][T16051] ? __pfx_filemap_map_pages+0x10/0x10 [ 486.755696][T16051] do_fault+0xabb/0x1990 [ 486.755753][T16051] __handle_mm_fault+0x180f/0x2b60 [ 486.755809][T16051] ? mt_find+0x45e/0x8e0 [ 486.755846][T16051] ? __pfx___handle_mm_fault+0x10/0x10 [ 486.755893][T16051] ? __pfx_mt_find+0x10/0x10 [ 486.755946][T16051] ? find_vma+0xbf/0x140 [ 486.755980][T16051] ? __pfx_find_vma+0x10/0x10 [ 486.756019][T16051] handle_mm_fault+0x36d/0xa20 [ 486.756078][T16051] do_user_addr_fault+0x74c/0x12f0 [ 486.756127][T16051] exc_page_fault+0x6f/0xd0 [ 486.756181][T16051] asm_exc_page_fault+0x26/0x30 [ 486.756217][T16051] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 486.756261][T16051] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 486.756296][T16051] RSP: 0018:ffffc90006897a40 EFLAGS: 00050206 [ 486.756324][T16051] RAX: 0000000000000001 RBX: ffff88807d696000 RCX: 0000000000001000 [ 486.756345][T16051] RDX: 0000000000000001 RSI: 0000000000004000 RDI: ffff88807d696000 [ 486.756367][T16051] RBP: 0000000000004000 R08: 0000000000000001 R09: ffffed100fad2dff [ 486.756388][T16051] R10: ffff88807d696fff R11: 0000000000000000 R12: ffffc90006897d80 [ 486.756410][T16051] R13: 0000000000004000 R14: 0000000000001000 R15: 0000000000000000 [ 486.756452][T16051] _copy_from_iter+0x355/0x1690 [ 486.756506][T16051] ? policy_nodemask+0xed/0x4f0 [ 486.756541][T16051] ? __pfx__copy_from_iter+0x10/0x10 [ 486.756586][T16051] ? alloc_pages_mpol+0x25a/0x550 [ 486.756627][T16051] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 486.756674][T16051] copy_page_from_iter+0xde/0x180 [ 486.756733][T16051] anon_pipe_write+0xae4/0x1d40 [ 486.756788][T16051] ? __pfx_anon_pipe_write+0x10/0x10 [ 486.756828][T16051] ? apparmor_file_permission+0x13f/0x1c0 [ 486.756872][T16051] ? bpf_lsm_file_permission+0x9/0x10 [ 486.756904][T16051] ? security_file_permission+0x76/0x210 [ 486.756951][T16051] ? rw_verify_area+0xce/0x6d0 [ 486.757005][T16051] vfs_write+0x6ac/0x1070 [ 486.757040][T16051] ? __pfx_anon_pipe_write+0x10/0x10 [ 486.757080][T16051] ? __pfx_vfs_write+0x10/0x10 [ 486.757112][T16051] ? find_held_lock+0x2b/0x80 [ 486.757173][T16051] ksys_write+0x1f8/0x250 [ 486.757205][T16051] ? __pfx_ksys_write+0x10/0x10 [ 486.757251][T16051] do_syscall_64+0x106/0xf80 [ 486.757302][T16051] ? clear_bhb_loop+0x40/0x90 [ 486.757344][T16051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.757379][T16051] RIP: 0033:0x7fe758b9c799 [ 486.757407][T16051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.757441][T16051] RSP: 002b:00007fe759a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.757472][T16051] RAX: ffffffffffffffda RBX: 00007fe758e15fa0 RCX: 00007fe758b9c799 [ 486.757494][T16051] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 486.757515][T16051] RBP: 00007fe758c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 486.757534][T16051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.757553][T16051] R13: 00007fe758e16038 R14: 00007fe758e15fa0 R15: 00007ffdc40890d8 [ 486.757597][T16051] [ 489.879922][T16076] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3975'. [ 491.443936][T16101] FAULT_INJECTION: forcing a failure. [ 491.443936][T16101] name failslab, interval 1, probability 0, space 0, times 0 [ 491.478104][T16101] CPU: 0 UID: 0 PID: 16101 Comm: syz.1.3983 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.478168][T16101] Tainted: [L]=SOFTLOCKUP [ 491.478180][T16101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 491.478200][T16101] Call Trace: [ 491.478211][T16101] [ 491.478223][T16101] dump_stack_lvl+0x100/0x190 [ 491.478282][T16101] should_fail_ex.cold+0x5/0xa [ 491.478324][T16101] ? sk_prot_alloc+0x10b/0x2a0 [ 491.478361][T16101] should_failslab+0xc2/0x120 [ 491.478400][T16101] __kmalloc_noprof+0xe0/0x850 [ 491.478463][T16101] sk_prot_alloc+0x10b/0x2a0 [ 491.478503][T16101] sk_alloc+0x36/0xe80 [ 491.478550][T16101] caif_create+0x10b/0x430 [ 491.478701][T16101] __sock_create+0x339/0x860 [ 491.478749][T16101] __sys_socket+0x14d/0x260 [ 491.478791][T16101] ? __pfx___sys_socket+0x10/0x10 [ 491.478845][T16101] __x64_sys_socket+0x72/0xb0 [ 491.478885][T16101] ? lockdep_hardirqs_on+0x78/0x100 [ 491.478939][T16101] do_syscall_64+0x106/0xf80 [ 491.478992][T16101] ? clear_bhb_loop+0x40/0x90 [ 491.479035][T16101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.479071][T16101] RIP: 0033:0x7fe758b9c799 [ 491.479099][T16101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.479134][T16101] RSP: 002b:00007fe759a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 491.479181][T16101] RAX: ffffffffffffffda RBX: 00007fe758e15fa0 RCX: 00007fe758b9c799 [ 491.479207][T16101] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000025 [ 491.479228][T16101] RBP: 00007fe758c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 491.479249][T16101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.479269][T16101] R13: 00007fe758e16038 R14: 00007fe758e15fa0 R15: 00007ffdc40890d8 [ 491.479315][T16101] [ 492.081811][T16108] netlink: 74 bytes leftover after parsing attributes in process `syz.3.3986'. [ 493.788658][ T30] audit: type=1800 audit(2147502187.154:25): pid=16148 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.4000" name="dbroot" dev="configfs" ino=106354 res=0 errno=0 [ 495.824980][T16189] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 497.747796][T16217] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4026'. [ 498.636885][T16228] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4031'. [ 498.650189][T16228] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4031'. [ 499.008354][T16233] nvme_fcloop: unknown parameter or missing value '7=";&L=j"Yq'R"' [ 501.509461][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.528144][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.954365][T16291] netlink: 'syz.0.4053': attribute type 4 has an invalid length. [ 502.982621][T16291] netlink: 314 bytes leftover after parsing attributes in process `syz.0.4053'. [ 504.992865][T16319] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 505.284077][T16322] pim6reg: entered allmulticast mode [ 507.053232][T16352] nvme_fabrics: missing parameter 'transport=%s' [ 507.070315][T16352] nvme_fabrics: missing parameter 'nqn=%s' [ 507.918878][T16361] pim6reg: entered allmulticast mode [ 509.046047][T16383] input: f as /devices/virtual/input/input13 [ 509.420491][T16395] input: f as /devices/virtual/input/input14 [ 510.555373][T16409] veth1_to_batadv: entered promiscuous mode [ 510.585293][T16408] veth1_to_batadv: left promiscuous mode [ 511.179262][T16421] netlink: 330 bytes leftover after parsing attributes in process `syz.3.4097'. [ 514.353166][T16493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4123'. [ 514.369793][T16493] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.386802][T16493] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.420758][T16493] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.438682][T16493] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.219008][T16559] netlink: 'syz.1.4142': attribute type 1 has an invalid length. [ 519.523769][T16597] FAULT_INJECTION: forcing a failure. [ 519.523769][T16597] name failslab, interval 1, probability 0, space 0, times 0 [ 519.628597][T16597] CPU: 1 UID: 0 PID: 16597 Comm: syz.1.4155 Tainted: G L syzkaller #0 PREEMPT(full) [ 519.628680][T16597] Tainted: [L]=SOFTLOCKUP [ 519.628696][T16597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 519.628718][T16597] Call Trace: [ 519.628728][T16597] [ 519.628740][T16597] dump_stack_lvl+0x100/0x190 [ 519.628802][T16597] should_fail_ex.cold+0x5/0xa [ 519.628844][T16597] should_failslab+0xc2/0x120 [ 519.628883][T16597] __kmalloc_cache_noprof+0x7a/0x6f0 [ 519.628930][T16597] ? landlock_init_hierarchy_log+0xa9/0x820 [ 519.628990][T16597] landlock_init_hierarchy_log+0xa9/0x820 [ 519.629052][T16597] landlock_merge_ruleset+0x67b/0x830 [ 519.629092][T16597] ? prepare_creds+0x5ee/0x950 [ 519.629151][T16597] __do_sys_landlock_restrict_self+0x2a6/0x9e0 [ 519.629207][T16597] do_syscall_64+0x106/0xf80 [ 519.629262][T16597] ? clear_bhb_loop+0x40/0x90 [ 519.629305][T16597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.629340][T16597] RIP: 0033:0x7fe758b9c799 [ 519.629368][T16597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.629402][T16597] RSP: 002b:00007fe759a76028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 519.629435][T16597] RAX: ffffffffffffffda RBX: 00007fe758e16090 RCX: 00007fe758b9c799 [ 519.629457][T16597] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000003 [ 519.629477][T16597] RBP: 00007fe758c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 519.629497][T16597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 519.629516][T16597] R13: 00007fe758e16128 R14: 00007fe758e16090 R15: 00007ffdc40890d8 [ 519.629559][T16597] [ 520.247426][T16609] FAULT_INJECTION: forcing a failure. [ 520.247426][T16609] name failslab, interval 1, probability 0, space 0, times 0 [ 520.293807][T16609] CPU: 1 UID: 0 PID: 16609 Comm: syz.2.4160 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.293859][T16609] Tainted: [L]=SOFTLOCKUP [ 520.293871][T16609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.293891][T16609] Call Trace: [ 520.293901][T16609] [ 520.293914][T16609] dump_stack_lvl+0x100/0x190 [ 520.293973][T16609] should_fail_ex.cold+0x5/0xa [ 520.294015][T16609] should_failslab+0xc2/0x120 [ 520.294054][T16609] __kmalloc_cache_noprof+0x7a/0x6f0 [ 520.294104][T16609] ? __do_sys_fanotify_init+0x690/0xe50 [ 520.294170][T16609] __do_sys_fanotify_init+0x690/0xe50 [ 520.294233][T16609] do_syscall_64+0x106/0xf80 [ 520.294296][T16609] ? clear_bhb_loop+0x40/0x90 [ 520.294338][T16609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.294375][T16609] RIP: 0033:0x7fd7f179c799 [ 520.294402][T16609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.294436][T16609] RSP: 002b:00007fd7f26ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 520.294469][T16609] RAX: ffffffffffffffda RBX: 00007fd7f1a15fa0 RCX: 00007fd7f179c799 [ 520.294492][T16609] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 520.294513][T16609] RBP: 00007fd7f1832c99 R08: 0000000000000000 R09: 0000000000000000 [ 520.294533][T16609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.294552][T16609] R13: 00007fd7f1a16038 R14: 00007fd7f1a15fa0 R15: 00007ffc978336f8 [ 520.294596][T16609] [ 520.744079][T16607] zswap: compressor not available [ 522.539952][T16636] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input15 [ 524.480285][T16669] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 525.211379][T16686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4187'. [ 526.271588][T16698] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4191'. [ 526.294664][T16698] openvswitch: netlink: IP tunnel dst address not specified [ 526.936825][T16710] netlink: 326 bytes leftover after parsing attributes in process `syz.1.4194'. [ 527.107798][T16713] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4196'. [ 527.239486][T16715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4197'. [ 527.521893][T16722] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4200'. [ 527.734853][T16722] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 527.784047][T16722] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 527.808257][T16722] bond0 (unregistering): Released all slaves [ 528.373502][T16729] zswap: compressor not available [ 530.876753][T16788] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4221'. [ 532.813833][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4229'. [ 534.174232][T16825] FAULT_INJECTION: forcing a failure. [ 534.174232][T16825] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 534.229137][T16825] CPU: 1 UID: 0 PID: 16825 Comm: syz.2.4234 Tainted: G L syzkaller #0 PREEMPT(full) [ 534.229192][T16825] Tainted: [L]=SOFTLOCKUP [ 534.229203][T16825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 534.229224][T16825] Call Trace: [ 534.229234][T16825] [ 534.229246][T16825] dump_stack_lvl+0x100/0x190 [ 534.229308][T16825] should_fail_ex.cold+0x5/0xa [ 534.229343][T16825] ? prepare_alloc_pages+0x16d/0x5f0 [ 534.229390][T16825] should_fail_alloc_page+0xeb/0x140 [ 534.229433][T16825] prepare_alloc_pages+0x1f0/0x5f0 [ 534.229474][T16825] ? arch_stack_walk+0xa6/0xf0 [ 534.229545][T16825] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 534.229612][T16825] ? stack_trace_save+0x8e/0xc0 [ 534.229650][T16825] ? __pfx_stack_trace_save+0x10/0x10 [ 534.229687][T16825] ? stack_depot_save_flags+0x27/0x9d0 [ 534.229805][T16825] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 534.229860][T16825] ? kasan_save_stack+0x3f/0x50 [ 534.229927][T16825] ? kasan_save_stack+0x30/0x50 [ 534.229979][T16825] ? kasan_save_track+0x14/0x30 [ 534.230011][T16825] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 534.230066][T16825] ? move_page_tables+0x3224/0x4500 [ 534.230117][T16825] ? copy_vma_and_data+0x25c/0x7c0 [ 534.230167][T16825] ? move_vma+0x51b/0x1890 [ 534.230214][T16825] ? mremap_to+0x1b7/0x450 [ 534.230263][T16825] ? do_mremap+0xb76/0x2130 [ 534.230312][T16825] ? __do_sys_mremap+0x126/0x170 [ 534.230363][T16825] ? do_syscall_64+0x106/0xf80 [ 534.230415][T16825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.230471][T16825] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 534.230510][T16825] ? policy_nodemask+0xed/0x4f0 [ 534.230553][T16825] alloc_pages_mpol+0x1fb/0x550 [ 534.230594][T16825] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 534.230645][T16825] alloc_pages_noprof+0x131/0x390 [ 534.230687][T16825] pte_alloc_one+0x1c/0x3d0 [ 534.230728][T16825] __pte_alloc+0x6d/0x3e0 [ 534.230765][T16825] ? __pfx___pte_alloc+0x10/0x10 [ 534.230804][T16825] ? _raw_spin_unlock+0x28/0x50 [ 534.230855][T16825] ? __pmd_alloc+0x3fb/0x950 [ 534.230906][T16825] move_page_tables+0x257e/0x4500 [ 534.230960][T16825] ? __pfx_copy_vma+0x10/0x10 [ 534.231026][T16825] ? __pfx_move_page_tables+0x10/0x10 [ 534.231091][T16825] ? finish_task_switch.isra.0+0x200/0xb80 [ 534.231131][T16825] copy_vma_and_data+0x25c/0x7c0 [ 534.231181][T16825] ? __pfx_copy_vma_and_data+0x10/0x10 [ 534.231240][T16825] ? __vma_start_write+0x17f/0x280 [ 534.231280][T16825] ? __pfx___vma_start_write+0x10/0x10 [ 534.231330][T16825] move_vma+0x51b/0x1890 [ 534.231380][T16825] ? __pfx_move_vma+0x10/0x10 [ 534.231431][T16825] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 534.231467][T16825] ? cap_mmap_addr+0x4b/0x120 [ 534.231531][T16825] ? bpf_lsm_mmap_addr+0x9/0x30 [ 534.231564][T16825] ? security_mmap_addr+0x71/0x1e0 [ 534.231610][T16825] ? __get_unmapped_area+0x255/0x3e0 [ 534.231655][T16825] ? vrm_set_new_addr+0x204/0x290 [ 534.231710][T16825] mremap_to+0x1b7/0x450 [ 534.231764][T16825] do_mremap+0xb76/0x2130 [ 534.231831][T16825] ? __pfx_do_mremap+0x10/0x10 [ 534.231893][T16825] ? ksys_write+0x190/0x250 [ 534.231949][T16825] __do_sys_mremap+0x126/0x170 [ 534.232001][T16825] ? __pfx___do_sys_mremap+0x10/0x10 [ 534.232066][T16825] ? __x64_sys_futex+0x34f/0x4d0 [ 534.232141][T16825] do_syscall_64+0x106/0xf80 [ 534.232194][T16825] ? clear_bhb_loop+0x40/0x90 [ 534.232238][T16825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.232273][T16825] RIP: 0033:0x7fd7f179c799 [ 534.232301][T16825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.232336][T16825] RSP: 002b:00007fd7f26ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 534.232370][T16825] RAX: ffffffffffffffda RBX: 00007fd7f1a15fa0 RCX: 00007fd7f179c799 [ 534.232394][T16825] RDX: 0000000000000004 RSI: 0000000000000004 RDI: 0000200000000000 [ 534.232413][T16825] RBP: 00007fd7f1832c99 R08: 0000000100000000 R09: 0000000000000000 [ 534.232433][T16825] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 534.232453][T16825] R13: 00007fd7f1a16038 R14: 00007fd7f1a15fa0 R15: 00007ffc978336f8 [ 534.232498][T16825] [ 536.834730][T16873] FAULT_INJECTION: forcing a failure. [ 536.834730][T16873] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 536.908933][T16873] CPU: 1 UID: 0 PID: 16873 Comm: syz.0.4251 Tainted: G L syzkaller #0 PREEMPT(full) [ 536.908988][T16873] Tainted: [L]=SOFTLOCKUP [ 536.909000][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 536.909020][T16873] Call Trace: [ 536.909031][T16873] [ 536.909044][T16873] dump_stack_lvl+0x100/0x190 [ 536.909106][T16873] should_fail_ex.cold+0x5/0xa [ 536.909150][T16873] ? prepare_alloc_pages+0x16d/0x5f0 [ 536.909196][T16873] should_fail_alloc_page+0xeb/0x140 [ 536.909238][T16873] prepare_alloc_pages+0x1f0/0x5f0 [ 536.909288][T16873] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 536.909349][T16873] ? rcu_is_watching+0x12/0xc0 [ 536.909405][T16873] ? trace_mm_page_alloc+0x17a/0x1d0 [ 536.909446][T16873] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 536.909508][T16873] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 536.909565][T16873] ? stack_trace_save+0x8e/0xc0 [ 536.909605][T16873] ? stack_depot_save_flags+0x27/0x9d0 [ 536.909650][T16873] ? is_bpf_text_address+0x8a/0x1a0 [ 536.909737][T16873] ? is_bpf_text_address+0x8a/0x1a0 [ 536.909798][T16873] ? kasan_save_stack+0x3f/0x50 [ 536.909854][T16873] ? kasan_save_track+0x14/0x30 [ 536.909885][T16873] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 536.909944][T16873] ? alloc_vmap_area+0x186c/0x2bd0 [ 536.909978][T16873] ? __get_vm_area_node+0x1ca/0x330 [ 536.910017][T16873] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 536.910062][T16873] ? __kvmalloc_node_noprof+0x3de/0xa00 [ 536.910118][T16873] ? __do_sys_listmount+0x289/0xee0 [ 536.910180][T16873] ? do_syscall_64+0x106/0xf80 [ 536.910235][T16873] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.910285][T16873] alloc_pages_bulk_noprof+0x782/0x1490 [ 536.910357][T16873] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 536.910431][T16873] ? alloc_pages_noprof+0x233/0x390 [ 536.910474][T16873] __kasan_populate_vmalloc+0xf0/0x210 [ 536.910548][T16873] alloc_vmap_area+0x95d/0x2bd0 [ 536.910604][T16873] ? __pfx_alloc_vmap_area+0x10/0x10 [ 536.910655][T16873] __get_vm_area_node+0x1ca/0x330 [ 536.910706][T16873] __vmalloc_node_range_noprof+0x213/0x1530 [ 536.910753][T16873] ? __do_sys_listmount+0x289/0xee0 [ 536.910809][T16873] ? try_to_wake_up+0x644/0x1a80 [ 536.910851][T16873] ? __do_sys_listmount+0x289/0xee0 [ 536.910912][T16873] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 536.910964][T16873] ? rcu_is_watching+0x12/0xc0 [ 536.911026][T16873] __kvmalloc_node_noprof+0x3de/0xa00 [ 536.911084][T16873] ? __do_sys_listmount+0x289/0xee0 [ 536.911145][T16873] ? __do_sys_listmount+0x289/0xee0 [ 536.911190][T16873] ? _copy_from_user+0x59/0xd0 [ 536.911228][T16873] ? copy_mnt_id_req+0x1b1/0x350 [ 536.911270][T16873] __do_sys_listmount+0x289/0xee0 [ 536.911315][T16873] ? __pfx_do_futex+0x10/0x10 [ 536.911357][T16873] ? __fget_files+0x21f/0x3d0 [ 536.911386][T16873] ? __pfx___do_sys_listmount+0x10/0x10 [ 536.911453][T16873] do_syscall_64+0x106/0xf80 [ 536.911496][T16873] ? clear_bhb_loop+0x40/0x90 [ 536.911531][T16873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.911560][T16873] RIP: 0033:0x7fbef239c799 [ 536.911585][T16873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.911613][T16873] RSP: 002b:00007fbef31a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 536.911641][T16873] RAX: ffffffffffffffda RBX: 00007fbef2615fa0 RCX: 00007fbef239c799 [ 536.911660][T16873] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000000 [ 536.911677][T16873] RBP: 00007fbef2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 536.911694][T16873] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 536.911711][T16873] R13: 00007fbef2616038 R14: 00007fbef2615fa0 R15: 00007ffcefd031e8 [ 536.911747][T16873] [ 537.447624][T16873] syz.0.4251: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 537.521087][T16873] CPU: 0 UID: 0 PID: 16873 Comm: syz.0.4251 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.521141][T16873] Tainted: [L]=SOFTLOCKUP [ 537.521153][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.521173][T16873] Call Trace: [ 537.521183][T16873] [ 537.521196][T16873] dump_stack_lvl+0x100/0x190 [ 537.521255][T16873] warn_alloc.cold+0x95/0x1c1 [ 537.521314][T16873] ? __pfx_warn_alloc+0x10/0x10 [ 537.521364][T16873] ? lockdep_hardirqs_on+0x78/0x100 [ 537.521423][T16873] ? __get_vm_area_node+0x2c5/0x330 [ 537.521474][T16873] ? __get_vm_area_node+0x208/0x330 [ 537.521523][T16873] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 537.521571][T16873] ? try_to_wake_up+0x644/0x1a80 [ 537.521612][T16873] ? __do_sys_listmount+0x289/0xee0 [ 537.521681][T16873] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 537.521737][T16873] ? rcu_is_watching+0x12/0xc0 [ 537.521802][T16873] __kvmalloc_node_noprof+0x3de/0xa00 [ 537.521861][T16873] ? __do_sys_listmount+0x289/0xee0 [ 537.521916][T16873] ? __do_sys_listmount+0x289/0xee0 [ 537.521969][T16873] ? _copy_from_user+0x59/0xd0 [ 537.522012][T16873] ? copy_mnt_id_req+0x1b1/0x350 [ 537.522072][T16873] __do_sys_listmount+0x289/0xee0 [ 537.522133][T16873] ? __pfx_do_futex+0x10/0x10 [ 537.522183][T16873] ? __fget_files+0x21f/0x3d0 [ 537.522218][T16873] ? __pfx___do_sys_listmount+0x10/0x10 [ 537.522302][T16873] do_syscall_64+0x106/0xf80 [ 537.522354][T16873] ? clear_bhb_loop+0x40/0x90 [ 537.522397][T16873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.522433][T16873] RIP: 0033:0x7fbef239c799 [ 537.522461][T16873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.522496][T16873] RSP: 002b:00007fbef31a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 537.522530][T16873] RAX: ffffffffffffffda RBX: 00007fbef2615fa0 RCX: 00007fbef239c799 [ 537.522552][T16873] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000000 [ 537.522573][T16873] RBP: 00007fbef2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 537.522593][T16873] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 537.522613][T16873] R13: 00007fbef2616038 R14: 00007fbef2615fa0 R15: 00007ffcefd031e8 [ 537.522657][T16873] [ 537.522786][T16873] Mem-Info: [ 537.996739][T16873] active_anon:18136 inactive_anon:4 isolated_anon:0 [ 537.996739][T16873] active_file:10160 inactive_file:48773 isolated_file:0 [ 537.996739][T16873] unevictable:768 dirty:582 writeback:0 [ 537.996739][T16873] slab_reclaimable:14691 slab_unreclaimable:91026 [ 537.996739][T16873] mapped:24651 shmem:4356 pagetables:1178 [ 537.996739][T16873] sec_pagetables:0 bounce:0 [ 537.996739][T16873] kernel_misc_reclaimable:0 [ 537.996739][T16873] free:1310105 free_pcp:10414 free_cma:0 [ 538.101401][T16873] Node 0 active_anon:63072kB inactive_anon:16kB active_file:40640kB inactive_file:194888kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98604kB dirty:2328kB writeback:0kB shmem:5896kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10944kB pagetables:4584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.134081][T16873] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 538.172656][T16873] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 538.312683][T16873] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 538.318560][T16873] Node 0 DMA32 free:1296956kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:64072kB inactive_anon:16kB active_file:40640kB inactive_file:194888kB unevictable:1536kB writepending:2328kB zspages:768kB present:3129332kB managed:2537344kB mlocked:0kB bounce:0kB free_pcp:38492kB local_pcp:19552kB free_cma:0kB [ 538.396857][T16889] netlink: 'syz.3.4255': attribute type 1 has an invalid length. [ 538.444410][T16873] lowmem_reserve[]: 0 0 1 1 1 [ 538.453073][T16873] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:4kB free_cma:0kB [ 538.490108][T16873] lowmem_reserve[]: 0 0 0 0 0 [ 538.519879][T16873] Node 1 Normal free:3935712kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4096kB local_pcp:4096kB free_cma:0kB [ 538.553366][T16873] lowmem_reserve[]: 0 0 0 0 0 [ 538.558181][T16873] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 538.580771][T16873] Node 0 DMA32: 2681*4kB (UME) 2964*8kB (UME) 1531*16kB (UME) 1543*32kB (UME) 543*64kB (UME) 322*128kB (UME) 221*256kB (UME) 82*512kB (UME) 48*1024kB (UME) 5*2048kB (UME) 233*4096kB (UM) = 1296596kB [ 538.602842][T16873] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 538.618037][T16873] Node 1 Normal: 2*4kB (U) 3*8kB (UM) 10*16kB (UM) 13*32kB (UM) 6*64kB (UM) 4*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 3*2048kB (UM) 958*4096kB (M) = 3935712kB [ 538.664352][T16873] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 538.726403][T16873] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 538.749807][T16873] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 538.779341][T16873] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 538.813766][T16873] 60809 total pagecache pages [ 538.818601][T16873] 23 pages in swap cache [ 538.854514][T16873] Free swap = 124480kB [ 538.858742][T16873] Total swap = 124996kB [ 538.891054][T16873] 2097051 pages RAM [ 538.934196][T16873] 0 pages HighMem/MovableOnly [ 538.943091][T16873] 430836 pages reserved [ 538.975124][T16873] 0 pages cma reserved [ 539.010632][T16896] ERROR: Out of memory at tomoyo_memory_ok. [ 539.046833][T16896] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/syz-executor /root/syz-executor /newroot/607/:,' not defined. [ 540.357453][T16929] netlink: 346 bytes leftover after parsing attributes in process `syz.1.4273'. [ 540.701894][T16939] random: crng reseeded on system resumption [ 541.249876][T16953] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4284'. [ 543.035997][T16984] netlink: 326 bytes leftover after parsing attributes in process `syz.3.4294'. [ 543.901758][T17007] netlink: 'syz.0.4304': attribute type 15 has an invalid length. [ 543.931572][T17007] netlink: 186 bytes leftover after parsing attributes in process `syz.0.4304'. [ 544.095726][T17004] nvme_fabrics: missing parameter 'transport=%s' [ 544.110831][T17004] nvme_fabrics: missing parameter 'nqn=%s' [ 544.379432][T17008] nvme_fabrics: missing parameter 'transport=%s' [ 544.395202][T17008] nvme_fabrics: missing parameter 'nqn=%s' [ 544.410429][T17019] random: crng reseeded on system resumption [ 545.083844][T17035] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4314'. [ 546.363241][T17052] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4320'. [ 547.135430][T17069] futex_wake_op: syz.0.4326 tries to shift op by -2048; fix this program [ 547.779996][T17081] kvm: user requested TSC rate below hardware speed [ 548.269041][T17088] netlink: 354 bytes leftover after parsing attributes in process `syz.2.4334'. [ 548.519139][T17094] netlink: 326 bytes leftover after parsing attributes in process `syz.2.4337'. [ 549.005469][T17109] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4343'. [ 549.563786][T17121] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4347'. [ 550.489086][T17131] FAULT_INJECTION: forcing a failure. [ 550.489086][T17131] name failslab, interval 1, probability 0, space 0, times 0 [ 550.513646][T17131] CPU: 0 UID: 0 PID: 17131 Comm: syz.2.4351 Tainted: G L syzkaller #0 PREEMPT(full) [ 550.513702][T17131] Tainted: [L]=SOFTLOCKUP [ 550.513715][T17131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 550.513736][T17131] Call Trace: [ 550.513747][T17131] [ 550.513759][T17131] dump_stack_lvl+0x100/0x190 [ 550.513821][T17131] should_fail_ex.cold+0x5/0xa [ 550.513865][T17131] should_failslab+0xc2/0x120 [ 550.513904][T17131] __kmalloc_cache_noprof+0x7a/0x6f0 [ 550.513952][T17131] ? snd_pcm_oss_open+0x5e5/0x1390 [ 550.513993][T17131] ? rcu_is_watching+0x12/0xc0 [ 550.514055][T17131] snd_pcm_oss_open+0x5e5/0x1390 [ 550.514097][T17131] ? kasan_quarantine_put+0x104/0x240 [ 550.514166][T17131] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 550.514210][T17131] ? __lock_acquire+0x4a5/0x2630 [ 550.514259][T17131] ? __pfx_default_wake_function+0x10/0x10 [ 550.514300][T17131] ? __lock_acquire+0x4a5/0x2630 [ 550.514357][T17131] ? do_raw_spin_lock+0x128/0x260 [ 550.514412][T17131] ? soundcore_open+0x231/0x5a0 [ 550.514453][T17131] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 550.514497][T17131] soundcore_open+0x2e3/0x5a0 [ 550.514546][T17131] ? __pfx_soundcore_open+0x10/0x10 [ 550.514582][T17131] chrdev_open+0x234/0x6a0 [ 550.514619][T17131] ? __pfx_apparmor_file_open+0x10/0x10 [ 550.514668][T17131] ? __pfx_chrdev_open+0x10/0x10 [ 550.514707][T17131] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 550.514754][T17131] do_dentry_open+0x6d8/0x1660 [ 550.514789][T17131] ? __pfx_chrdev_open+0x10/0x10 [ 550.514834][T17131] vfs_open+0x82/0x3f0 [ 550.514883][T17131] path_openat+0x208c/0x31a0 [ 550.514933][T17131] ? __pfx_path_openat+0x10/0x10 [ 550.514985][T17131] do_file_open+0x20e/0x430 [ 550.515044][T17131] ? __pfx_do_file_open+0x10/0x10 [ 550.515114][T17131] ? alloc_fd+0x476/0x790 [ 550.515153][T17131] ? do_getname+0x191/0x390 [ 550.515203][T17131] do_sys_openat2+0x10d/0x1e0 [ 550.515251][T17131] ? __pfx_do_sys_openat2+0x10/0x10 [ 550.515313][T17131] ? __fget_files+0x21f/0x3d0 [ 550.515356][T17131] __x64_sys_openat+0x12d/0x210 [ 550.515404][T17131] ? __pfx___x64_sys_openat+0x10/0x10 [ 550.515468][T17131] do_syscall_64+0x106/0xf80 [ 550.515526][T17131] ? clear_bhb_loop+0x40/0x90 [ 550.515569][T17131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.515604][T17131] RIP: 0033:0x7fd7f179c799 [ 550.515632][T17131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 550.515667][T17131] RSP: 002b:00007fd7f26ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 550.515699][T17131] RAX: ffffffffffffffda RBX: 00007fd7f1a15fa0 RCX: 00007fd7f179c799 [ 550.515719][T17131] RDX: 0000000000020342 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 550.515740][T17131] RBP: 00007fd7f1832c99 R08: 0000000000000000 R09: 0000000000000000 [ 550.515758][T17131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 550.515777][T17131] R13: 00007fd7f1a16038 R14: 00007fd7f1a15fa0 R15: 00007ffc978336f8 [ 550.515819][T17131] [ 551.092644][T17139] phram: not enough arguments [ 551.650829][T17150] raw_sendmsg: syz.1.4360 forgot to set AF_INET. Fix it! [ 552.626556][T17179] FAULT_INJECTION: forcing a failure. [ 552.626556][T17179] name failslab, interval 1, probability 0, space 0, times 0 [ 552.652273][T17179] CPU: 0 UID: 0 PID: 17179 Comm: syz.3.4370 Tainted: G L syzkaller #0 PREEMPT(full) [ 552.652326][T17179] Tainted: [L]=SOFTLOCKUP [ 552.652340][T17179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 552.652361][T17179] Call Trace: [ 552.652373][T17179] [ 552.652386][T17179] dump_stack_lvl+0x100/0x190 [ 552.652448][T17179] should_fail_ex.cold+0x5/0xa [ 552.652491][T17179] should_failslab+0xc2/0x120 [ 552.652529][T17179] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 552.652581][T17179] ? sk_prot_alloc+0x60/0x2a0 [ 552.652627][T17179] sk_prot_alloc+0x60/0x2a0 [ 552.652666][T17179] sk_alloc+0x36/0xe80 [ 552.652723][T17179] kcm_create+0xfc/0x6a0 [ 552.652881][T17179] __sock_create+0x339/0x860 [ 552.652930][T17179] __sys_socket+0x14d/0x260 [ 552.652974][T17179] ? __pfx___sys_socket+0x10/0x10 [ 552.653028][T17179] __x64_sys_socket+0x72/0xb0 [ 552.653068][T17179] ? lockdep_hardirqs_on+0x78/0x100 [ 552.653121][T17179] do_syscall_64+0x106/0xf80 [ 552.653173][T17179] ? clear_bhb_loop+0x40/0x90 [ 552.653221][T17179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.653257][T17179] RIP: 0033:0x7f5b9bb9c799 [ 552.653284][T17179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.653317][T17179] RSP: 002b:00007f5b99df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 552.653349][T17179] RAX: ffffffffffffffda RBX: 00007f5b9be15fa0 RCX: 00007f5b9bb9c799 [ 552.653371][T17179] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000029 [ 552.653391][T17179] RBP: 00007f5b9bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 552.653411][T17179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.653430][T17179] R13: 00007f5b9be16038 R14: 00007f5b9be15fa0 R15: 00007ffe18dfea78 [ 552.653474][T17179] [ 553.000186][T17182] FAULT_INJECTION: forcing a failure. [ 553.000186][T17182] name failslab, interval 1, probability 0, space 0, times 0 [ 553.013367][T17182] CPU: 0 UID: 0 PID: 17182 Comm: syz.1.4371 Tainted: G L syzkaller #0 PREEMPT(full) [ 553.013419][T17182] Tainted: [L]=SOFTLOCKUP [ 553.013442][T17182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 553.013462][T17182] Call Trace: [ 553.013473][T17182] [ 553.013485][T17182] dump_stack_lvl+0x100/0x190 [ 553.013563][T17182] should_fail_ex.cold+0x5/0xa [ 553.013605][T17182] ? snd_midi_event_new+0xa1/0x210 [ 553.013722][T17182] should_failslab+0xc2/0x120 [ 553.013761][T17182] __kmalloc_noprof+0xe0/0x850 [ 553.013822][T17182] snd_midi_event_new+0xa1/0x210 [ 553.013859][T17182] snd_virmidi_output_open+0x106/0x670 [ 553.013901][T17182] open_substream+0x480/0x9e0 [ 553.013949][T17182] rawmidi_open_priv+0x595/0x6f0 [ 553.014003][T17182] snd_rawmidi_open+0x4c9/0xba0 [ 553.014058][T17182] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 553.014108][T17182] ? __pfx_default_wake_function+0x10/0x10 [ 553.014150][T17182] ? kobject_get_unless_zero+0x156/0x200 [ 553.014190][T17182] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 553.014246][T17182] snd_open+0x22d/0x4c0 [ 553.014283][T17182] ? __pfx_snd_open+0x10/0x10 [ 553.014318][T17182] chrdev_open+0x234/0x6a0 [ 553.014353][T17182] ? __pfx_apparmor_file_open+0x10/0x10 [ 553.014388][T17182] ? __pfx_chrdev_open+0x10/0x10 [ 553.014426][T17182] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 553.014471][T17182] do_dentry_open+0x6d8/0x1660 [ 553.014504][T17182] ? __pfx_chrdev_open+0x10/0x10 [ 553.014567][T17182] vfs_open+0x82/0x3f0 [ 553.014617][T17182] path_openat+0x208c/0x31a0 [ 553.014670][T17182] ? __pfx_path_openat+0x10/0x10 [ 553.014724][T17182] do_file_open+0x20e/0x430 [ 553.014767][T17182] ? __pfx_do_file_open+0x10/0x10 [ 553.014835][T17182] ? alloc_fd+0x476/0x790 [ 553.014875][T17182] ? do_getname+0x191/0x390 [ 553.014924][T17182] do_sys_openat2+0x10d/0x1e0 [ 553.014971][T17182] ? __pfx_do_sys_openat2+0x10/0x10 [ 553.015021][T17182] ? __fget_files+0x21f/0x3d0 [ 553.015063][T17182] __x64_sys_openat+0x12d/0x210 [ 553.015112][T17182] ? __pfx___x64_sys_openat+0x10/0x10 [ 553.015176][T17182] do_syscall_64+0x106/0xf80 [ 553.015236][T17182] ? clear_bhb_loop+0x40/0x90 [ 553.015279][T17182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.015315][T17182] RIP: 0033:0x7fe758b9c799 [ 553.015343][T17182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 553.015377][T17182] RSP: 002b:00007fe759a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 553.015423][T17182] RAX: ffffffffffffffda RBX: 00007fe758e15fa0 RCX: 00007fe758b9c799 [ 553.015445][T17182] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 553.015485][T17182] RBP: 00007fe758c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 553.015505][T17182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 553.015526][T17182] R13: 00007fe758e16038 R14: 00007fe758e15fa0 R15: 00007ffdc40890d8 [ 553.015571][T17182] [ 554.874653][T17215] FAULT_INJECTION: forcing a failure. [ 554.874653][T17215] name failslab, interval 1, probability 0, space 0, times 0 [ 554.910433][T17215] CPU: 0 UID: 0 PID: 17215 Comm: syz.2.4384 Tainted: G L syzkaller #0 PREEMPT(full) [ 554.910488][T17215] Tainted: [L]=SOFTLOCKUP [ 554.910500][T17215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 554.910520][T17215] Call Trace: [ 554.910531][T17215] [ 554.910543][T17215] dump_stack_lvl+0x100/0x190 [ 554.910602][T17215] should_fail_ex.cold+0x5/0xa [ 554.910643][T17215] should_failslab+0xc2/0x120 [ 554.910680][T17215] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 554.910734][T17215] ? posix_lock_inode+0x5b2/0x2440 [ 554.910771][T17215] ? lockdep_init_map_type+0x5c/0x250 [ 554.910842][T17215] posix_lock_inode+0x5b2/0x2440 [ 554.910902][T17215] ? __pfx_posix_lock_inode+0x10/0x10 [ 554.910958][T17215] vfs_lock_file+0xfb/0x150 [ 554.910998][T17215] fcntl_setlk+0x782/0xe40 [ 554.911041][T17215] ? __pfx_fcntl_setlk+0x10/0x10 [ 554.911087][T17215] ? __might_fault+0xc5/0x140 [ 554.911138][T17215] ? __might_fault+0xc5/0x140 [ 554.911206][T17215] do_fcntl+0xf39/0x1670 [ 554.911254][T17215] ? __pfx_do_fcntl+0x10/0x10 [ 554.911304][T17215] ? __fget_files+0x215/0x3d0 [ 554.911348][T17215] ? tomoyo_file_fcntl+0x6c/0xc0 [ 554.911410][T17215] __x64_sys_fcntl+0x163/0x200 [ 554.911463][T17215] do_syscall_64+0x106/0xf80 [ 554.911516][T17215] ? clear_bhb_loop+0x40/0x90 [ 554.911559][T17215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.911594][T17215] RIP: 0033:0x7fd7f179c799 [ 554.911623][T17215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 554.911656][T17215] RSP: 002b:00007fd7f26ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 554.911689][T17215] RAX: ffffffffffffffda RBX: 00007fd7f1a15fa0 RCX: 00007fd7f179c799 [ 554.911712][T17215] RDX: 000000000000000d RSI: 0000000000000026 RDI: 0000000000000003 [ 554.911732][T17215] RBP: 00007fd7f1832c99 R08: 0000000000000000 R09: 0000000000000000 [ 554.911759][T17215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.911777][T17215] R13: 00007fd7f1a16038 R14: 00007fd7f1a15fa0 R15: 00007ffc978336f8 [ 554.911816][T17215] [ 555.752441][T17229] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4389'. [ 556.059485][T17228] zswap: compressor not available [ 558.138718][T17284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4411'. [ 558.428913][T17293] ERROR: Out of memory at tomoyo_memory_ok. [ 558.458515][T17290] ERROR: Out of memory at tomoyo_memory_ok. [ 558.494095][T17284] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4411'. [ 559.386164][T17317] block nbd8: shutting down sockets [ 562.211065][T17370] random: crng reseeded on system resumption [ 562.323624][ T30] audit: type=1804 audit(2147502255.694:26): pid=17361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4440" name="/newroot/669/file0" dev="tmpfs" ino=3420 res=1 errno=0 [ 562.393295][T17373] Unrecognized hibernate image header format! [ 562.408880][ T30] audit: type=1804 audit(2147502255.764:27): pid=17364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4440" name="/newroot/669/file0" dev="tmpfs" ino=3420 res=1 errno=0 [ 562.490958][T17373] PM: hibernation: Image mismatch: architecture specific data [ 562.948689][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.959443][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.502607][T17392] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4450'. [ 564.533857][T17405] FAULT_INJECTION: forcing a failure. [ 564.533857][T17405] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 564.568700][T17405] CPU: 1 UID: 0 PID: 17405 Comm: syz.0.4454 Tainted: G L syzkaller #0 PREEMPT(full) [ 564.568756][T17405] Tainted: [L]=SOFTLOCKUP [ 564.568768][T17405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 564.568787][T17405] Call Trace: [ 564.568798][T17405] [ 564.568811][T17405] dump_stack_lvl+0x100/0x190 [ 564.568871][T17405] should_fail_ex.cold+0x5/0xa [ 564.568905][T17405] ? prepare_alloc_pages+0x16d/0x5f0 [ 564.568950][T17405] should_fail_alloc_page+0xeb/0x140 [ 564.568991][T17405] prepare_alloc_pages+0x1f0/0x5f0 [ 564.569038][T17405] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 564.569113][T17405] ? stack_trace_save+0x8e/0xc0 [ 564.569148][T17405] ? __pfx_stack_trace_save+0x10/0x10 [ 564.569193][T17405] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 564.569248][T17405] ? stack_depot_save_flags+0x27/0x9d0 [ 564.569302][T17405] ? kasan_save_stack+0x3f/0x50 [ 564.569357][T17405] ? kasan_save_stack+0x30/0x50 [ 564.569408][T17405] ? kasan_save_track+0x14/0x30 [ 564.569439][T17405] ? __kasan_kmalloc+0xaa/0xb0 [ 564.569497][T17405] ? do_file_open+0x20e/0x430 [ 564.569533][T17405] ? do_sys_openat2+0x10d/0x1e0 [ 564.569578][T17405] ? __x64_sys_openat+0x12d/0x210 [ 564.569626][T17405] ? do_syscall_64+0x106/0xf80 [ 564.569678][T17405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.569722][T17405] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 564.569761][T17405] ? policy_nodemask+0xed/0x4f0 [ 564.569803][T17405] alloc_pages_mpol+0x1fb/0x550 [ 564.569844][T17405] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 564.569894][T17405] alloc_pages_noprof+0x131/0x390 [ 564.569936][T17405] get_zeroed_page_noprof+0x18/0xb0 [ 564.569977][T17405] mon_alloc_buff+0xce/0x1b0 [ 564.570122][T17405] ? kasan_save_track+0x14/0x30 [ 564.570158][T17405] mon_bin_open+0x207/0x470 [ 564.570210][T17405] ? __pfx_mon_bin_open+0x10/0x10 [ 564.570251][T17405] chrdev_open+0x234/0x6a0 [ 564.570291][T17405] ? __pfx_chrdev_open+0x10/0x10 [ 564.570332][T17405] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 564.570380][T17405] do_dentry_open+0x6d8/0x1660 [ 564.570415][T17405] ? __pfx_chrdev_open+0x10/0x10 [ 564.570462][T17405] vfs_open+0x82/0x3f0 [ 564.570511][T17405] path_openat+0x208c/0x31a0 [ 564.570564][T17405] ? __pfx_path_openat+0x10/0x10 [ 564.570618][T17405] do_file_open+0x20e/0x430 [ 564.570661][T17405] ? __pfx_do_file_open+0x10/0x10 [ 564.570729][T17405] ? alloc_fd+0x476/0x790 [ 564.570770][T17405] ? do_getname+0x191/0x390 [ 564.570819][T17405] do_sys_openat2+0x10d/0x1e0 [ 564.570870][T17405] ? __pfx_do_sys_openat2+0x10/0x10 [ 564.570923][T17405] ? __fget_files+0x21f/0x3d0 [ 564.570966][T17405] __x64_sys_openat+0x12d/0x210 [ 564.571015][T17405] ? __pfx___x64_sys_openat+0x10/0x10 [ 564.571080][T17405] do_syscall_64+0x106/0xf80 [ 564.571133][T17405] ? clear_bhb_loop+0x40/0x90 [ 564.571187][T17405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.571222][T17405] RIP: 0033:0x7fbef239c799 [ 564.571250][T17405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 564.571283][T17405] RSP: 002b:00007fbef31a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 564.571317][T17405] RAX: ffffffffffffffda RBX: 00007fbef2615fa0 RCX: 00007fbef239c799 [ 564.571339][T17405] RDX: 0000000000002040 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 564.571362][T17405] RBP: 00007fbef2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 564.571382][T17405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.571403][T17405] R13: 00007fbef2616038 R14: 00007fbef2615fa0 R15: 00007ffcefd031e8 [ 564.571448][T17405] [ 565.122755][T17407] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4455'. [ 565.491187][T17412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4455'. [ 566.268573][T17427] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4464'. [ 576.223778][T17593] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 576.265040][T17593] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 576.740067][T17606] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4527'. [ 577.070309][T17612] synth uevent: /module/drm_display_helper: unknown uevent action string [ 577.317869][T17621] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 579.189166][ T5824] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 581.827863][T17704] FAULT_INJECTION: forcing a failure. [ 581.827863][T17704] name failslab, interval 1, probability 0, space 0, times 0 [ 581.876105][T17704] CPU: 1 UID: 0 PID: 17704 Comm: syz.0.4565 Tainted: G L syzkaller #0 PREEMPT(full) [ 581.876160][T17704] Tainted: [L]=SOFTLOCKUP [ 581.876172][T17704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 581.876193][T17704] Call Trace: [ 581.876204][T17704] [ 581.876217][T17704] dump_stack_lvl+0x100/0x190 [ 581.876276][T17704] should_fail_ex.cold+0x5/0xa [ 581.876317][T17704] should_failslab+0xc2/0x120 [ 581.876356][T17704] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 581.876418][T17704] ? security_inode_alloc+0x3b/0x2c0 [ 581.876455][T17704] ? lockdep_init_map_type+0x5c/0x250 [ 581.876511][T17704] security_inode_alloc+0x3b/0x2c0 [ 581.876549][T17704] inode_init_always_gfp+0xced/0x1040 [ 581.876594][T17704] alloc_inode+0x8e/0x250 [ 581.876644][T17704] new_inode+0x22/0x1c0 [ 581.876696][T17704] proc_pid_make_inode+0x22/0x160 [ 581.876762][T17704] proc_ns_dir_lookup+0x25b/0x390 [ 581.876821][T17704] lookup_open.isra.0+0x631/0x11b0 [ 581.876885][T17704] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 581.876962][T17704] ? mnt_get_write_access+0x1e9/0x2f0 [ 581.877018][T17704] path_openat+0xa98/0x31a0 [ 581.877069][T17704] ? __pfx_path_openat+0x10/0x10 [ 581.877125][T17704] do_file_open+0x20e/0x430 [ 581.877166][T17704] ? __pfx_do_file_open+0x10/0x10 [ 581.877220][T17704] ? __pfx_kfree_link+0x10/0x10 [ 581.877283][T17704] ? alloc_fd+0x476/0x790 [ 581.877323][T17704] ? do_getname+0x191/0x390 [ 581.877372][T17704] do_sys_openat2+0x10d/0x1e0 [ 581.877421][T17704] ? __pfx_do_sys_openat2+0x10/0x10 [ 581.877485][T17704] __x64_sys_openat+0x12d/0x210 [ 581.877535][T17704] ? __pfx___x64_sys_openat+0x10/0x10 [ 581.877587][T17704] ? do_user_addr_fault+0x8d6/0x12f0 [ 581.877632][T17704] do_syscall_64+0x106/0xf80 [ 581.877685][T17704] ? clear_bhb_loop+0x40/0x90 [ 581.877736][T17704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.877773][T17704] RIP: 0033:0x7fbef235cfce [ 581.877802][T17704] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 581.877836][T17704] RSP: 002b:00007fbef31a6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.877870][T17704] RAX: ffffffffffffffda RBX: 00007fbef31a76c0 RCX: 00007fbef235cfce [ 581.877893][T17704] RDX: 0000000000000002 RSI: 00007fbef31a6f90 RDI: ffffffffffffff9c [ 581.877915][T17704] RBP: 00007fbef2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 581.877937][T17704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.877958][T17704] R13: 00007fbef2616038 R14: 00007fbef2615fa0 R15: 00007ffcefd031e8 [ 581.878005][T17704] [ 582.968560][T17730] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4575'. [ 583.292034][T17736] netlink: 504 bytes leftover after parsing attributes in process `syz.3.4578'. [ 583.734049][T17747] FAULT_INJECTION: forcing a failure. [ 583.734049][T17747] name failslab, interval 1, probability 0, space 0, times 0 [ 583.831471][T17747] CPU: 1 UID: 0 PID: 17747 Comm: syz.0.4582 Tainted: G L syzkaller #0 PREEMPT(full) [ 583.831535][T17747] Tainted: [L]=SOFTLOCKUP [ 583.831547][T17747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 583.831574][T17747] Call Trace: [ 583.831585][T17747] [ 583.831597][T17747] dump_stack_lvl+0x100/0x190 [ 583.831658][T17747] should_fail_ex.cold+0x5/0xa [ 583.831699][T17747] ? lsm_blob_alloc+0x68/0x90 [ 583.831749][T17747] should_failslab+0xc2/0x120 [ 583.831788][T17747] __kmalloc_noprof+0xe0/0x850 [ 583.831843][T17747] ? trace_kmalloc+0x101/0x130 [ 583.831887][T17747] lsm_blob_alloc+0x68/0x90 [ 583.831946][T17747] security_sk_alloc+0x2d/0x290 [ 583.831983][T17747] sk_prot_alloc+0x12a/0x2a0 [ 583.832024][T17747] sk_alloc+0x36/0xe80 [ 583.832073][T17747] __netlink_create+0x5e/0x2c0 [ 583.832118][T17747] ? __wake_up+0x3f/0x60 [ 583.832160][T17747] netlink_create+0x293/0x610 [ 583.832210][T17747] ? __pfx_genl_bind+0x10/0x10 [ 583.832241][T17747] ? __pfx_genl_unbind+0x10/0x10 [ 583.832274][T17747] ? __pfx_genl_release+0x10/0x10 [ 583.832313][T17747] __sock_create+0x339/0x860 [ 583.832362][T17747] __sys_socket+0x14d/0x260 [ 583.832405][T17747] ? __pfx___sys_socket+0x10/0x10 [ 583.832461][T17747] __x64_sys_socket+0x72/0xb0 [ 583.832502][T17747] ? lockdep_hardirqs_on+0x78/0x100 [ 583.832556][T17747] do_syscall_64+0x106/0xf80 [ 583.832608][T17747] ? clear_bhb_loop+0x40/0x90 [ 583.832651][T17747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.832687][T17747] RIP: 0033:0x7fbef239c799 [ 583.832715][T17747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.832749][T17747] RSP: 002b:00007fbef31a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 583.832781][T17747] RAX: ffffffffffffffda RBX: 00007fbef2615fa0 RCX: 00007fbef239c799 [ 583.832803][T17747] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 583.832823][T17747] RBP: 00007fbef2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 583.832843][T17747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 583.832862][T17747] R13: 00007fbef2616038 R14: 00007fbef2615fa0 R15: 00007ffcefd031e8 [ 583.832914][T17747] [ 585.780766][T17777] ubi0: attaching mtd0 [ 585.803436][T17777] ubi0: scanning is finished [ 585.808168][T17777] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 586.033799][T17777] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 586.312035][T17785] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4596'. [ 588.814489][T17831] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4613'. [ 591.851640][T17857] FAULT_INJECTION: forcing a failure. [ 591.851640][T17857] name failslab, interval 1, probability 0, space 0, times 0 [ 591.931592][T17857] CPU: 1 UID: 0 PID: 17857 Comm: syz.1.4623 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.931664][T17857] Tainted: [L]=SOFTLOCKUP [ 591.931676][T17857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.931695][T17857] Call Trace: [ 591.931706][T17857] [ 591.931718][T17857] dump_stack_lvl+0x100/0x190 [ 591.931777][T17857] should_fail_ex.cold+0x5/0xa [ 591.931818][T17857] ? __seq_open_private+0x22/0xd0 [ 591.931869][T17857] should_failslab+0xc2/0x120 [ 591.931907][T17857] __kmalloc_noprof+0xe0/0x850 [ 591.931970][T17857] ? __pfx_stats_fop_open+0x10/0x10 [ 591.932100][T17857] __seq_open_private+0x22/0xd0 [ 591.932156][T17857] sc_common_open+0x6b/0x200 [ 591.932202][T17857] full_proxy_open_regular+0x1b6/0x370 [ 591.932290][T17857] do_dentry_open+0x6d8/0x1660 [ 591.932325][T17857] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 591.932400][T17857] vfs_open+0x82/0x3f0 [ 591.932450][T17857] path_openat+0x208c/0x31a0 [ 591.932503][T17857] ? __pfx_path_openat+0x10/0x10 [ 591.932556][T17857] do_file_open+0x20e/0x430 [ 591.932597][T17857] ? __pfx_do_file_open+0x10/0x10 [ 591.932670][T17857] ? alloc_fd+0x476/0x790 [ 591.932713][T17857] ? do_getname+0x191/0x390 [ 591.932763][T17857] do_sys_openat2+0x10d/0x1e0 [ 591.932812][T17857] ? __pfx_do_sys_openat2+0x10/0x10 [ 591.932861][T17857] ? __fget_files+0x21f/0x3d0 [ 591.932906][T17857] __x64_sys_openat+0x12d/0x210 [ 591.932957][T17857] ? __pfx___x64_sys_openat+0x10/0x10 [ 591.933022][T17857] do_syscall_64+0x106/0xf80 [ 591.933076][T17857] ? clear_bhb_loop+0x40/0x90 [ 591.933121][T17857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.933158][T17857] RIP: 0033:0x7fe758b9c799 [ 591.933186][T17857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.933222][T17857] RSP: 002b:00007fe759a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 591.933255][T17857] RAX: ffffffffffffffda RBX: 00007fe758e15fa0 RCX: 00007fe758b9c799 [ 591.933278][T17857] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 591.933301][T17857] RBP: 00007fe758c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 591.933322][T17857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.933342][T17857] R13: 00007fe758e16038 R14: 00007fe758e15fa0 R15: 00007ffdc40890d8 [ 591.933398][T17857] [ 594.059598][T17877] [U] 0="/ [ 594.067061][T17877] [U] [ 594.069907][T17877] [U] EeQ@ [ 594.082680][T17876] [U]  [ 597.017652][T17911] netlink: 146 bytes leftover after parsing attributes in process `syz.0.4647'. [ 600.013614][T17955] netlink: 146 bytes leftover after parsing attributes in process `syz.0.4668'. [ 600.793629][T17972] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4669'. [ 600.832821][T17972] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4669'. [ 601.275349][T17979] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4671'. [ 601.445049][T17984] netlink: 334 bytes leftover after parsing attributes in process `syz.1.4673'. [ 603.088132][T18010] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4682'. [ 607.668421][T18079] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4703'. [ 607.818594][T18079] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4703'. [ 608.253421][T18083] syz.1.4704 (18083) used greatest stack depth: 17352 bytes left [ 613.905253][T18182] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 614.985138][T18199] [U] [ 616.720280][T18236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4742'. [ 616.763223][T18236] netlink: 'syz.0.4742': attribute type 7 has an invalid length. [ 620.347130][T18293] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 620.414537][T18293] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 620.441345][T18293] memcg:ffff8880792db201 [ 620.460959][T18293] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 620.478711][T18293] page_type: f5(slab) [ 620.489918][T18293] raw: 00fff00000000040 ffff88801ce8f8c0 dead000000000100 dead000000000122 [ 620.512502][T18293] raw: 0000000000000000 0000000800190019 00000000f5000000 ffff8880792db201 [ 620.606900][T18293] head: 00fff00000000040 ffff88801ce8f8c0 dead000000000100 dead000000000122 [ 620.683380][T18293] head: 0000000000000000 0000000800190019 00000000f5000000 ffff8880792db201 [ 620.749655][T18293] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 620.833994][T18293] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 620.930393][T18293] page dumped because: unmovable page [ 620.979258][T18293] page_owner tracks the page as allocated [ 620.988857][ T5175] ERROR: Out of memory at tomoyo_memory_ok. [ 621.071383][T18293] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5203, tgid 5203 (udevd), ts 51963818244, free_ts 30596099410 [ 621.231006][T18293] post_alloc_hook+0x153/0x170 [ 621.235896][T18293] get_page_from_freelist+0x111d/0x3140 [ 621.296520][T18293] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 621.330931][T18293] new_slab+0xa6/0x6b0 [ 621.343094][T18293] refill_objects+0x26b/0x400 [ 621.351220][T18293] __pcs_replace_empty_main+0x1ab/0x660 [ 621.356867][T18293] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 621.389732][T18301] ERROR: Out of memory at tomoyo_memory_ok. [ 621.420993][T18293] alloc_inode+0x183/0x250 [ 621.425521][T18293] create_pipe_files+0x4c/0x970 [ 621.475334][T18293] do_pipe2+0xbd/0x1e0 [ 621.479499][T18293] __x64_sys_pipe2+0x54/0x80 [ 621.516592][T18293] do_syscall_64+0x106/0xf80 [ 621.536952][T18293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.567389][T18293] page last free pid 1 tgid 1 stack trace: [ 621.614505][T18293] __free_frozen_pages+0x7e1/0x10d0 [ 621.619812][T18293] free_contig_range+0xde/0x1d0 [ 621.664457][T18293] destroy_args+0xa8/0x7a0 [ 621.679346][T18293] debug_vm_pgtable+0x1b66/0x34c0 [ 621.724795][T18293] do_one_initcall+0x11d/0x760 [ 621.762353][T18293] kernel_init_freeable+0x6e5/0x7a0 [ 621.793989][T18293] kernel_init+0x1f/0x1e0 [ 621.801337][T18293] ret_from_fork+0x754/0xd80 [ 621.823550][T18293] ret_from_fork_asm+0x1a/0x30 [ 624.208820][ T5824] Bluetooth: hci1: Malformed LE Event: 0x0b [ 624.391464][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.399639][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.927220][T18372] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4789'. [ 625.981253][T18372] netlink: 13 bytes leftover after parsing attributes in process `syz.0.4789'. [ 627.155602][T18405] sg_write: data in/out 65500/90 bytes for SCSI command 0x0-- guessing data in; [ 627.155602][T18405] program syz.2.4802 not setting count and/or reply_len properly [ 628.137722][T18427] netlink: 198 bytes leftover after parsing attributes in process `syz.2.4809'. [ 628.929939][T18439] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4815'. [ 630.821208][T18473] netlink: 146 bytes leftover after parsing attributes in process `syz.0.4828'. [ 631.468167][T18492] netlink: 350 bytes leftover after parsing attributes in process `syz.3.4835'. [ 632.055708][T18504] ERROR: Out of memory at tomoyo_memory_ok. [ 633.997482][T18536] netlink: 'syz.3.4852': attribute type 21 has an invalid length. [ 634.032477][T18536] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4852'. [ 634.512546][T18548] netlink: 'syz.2.4857': attribute type 19 has an invalid length. [ 634.551144][T18548] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4857'. [ 634.950735][T18559] binder: 18558:18559 ioctl c0306201 2000000000c0 returned -14 [ 635.215493][T18566] MTRR 3 not used [ 638.199076][T18624] FAULT_INJECTION: forcing a failure. [ 638.199076][T18624] name failslab, interval 1, probability 0, space 0, times 0 [ 638.250276][T18624] CPU: 1 UID: 0 PID: 18624 Comm: syz.3.4883 Tainted: G L syzkaller #0 PREEMPT(full) [ 638.250331][T18624] Tainted: [L]=SOFTLOCKUP [ 638.250343][T18624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 638.250363][T18624] Call Trace: [ 638.250374][T18624] [ 638.250387][T18624] dump_stack_lvl+0x100/0x190 [ 638.250448][T18624] should_fail_ex.cold+0x5/0xa [ 638.250491][T18624] should_failslab+0xc2/0x120 [ 638.250531][T18624] __kvmalloc_node_noprof+0xfa/0xa00 [ 638.250591][T18624] ? v4l2_ctrl_new+0x4a6/0x23a0 [ 638.250736][T18624] ? register_lock_class+0x40/0x560 [ 638.250795][T18624] v4l2_ctrl_new+0x4a6/0x23a0 [ 638.250848][T18624] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 638.250882][T18624] ? lock_acquire+0x1cf/0x380 [ 638.250935][T18624] ? rcu_is_watching+0x12/0xc0 [ 638.250993][T18624] v4l2_ctrl_new_std+0x1bb/0x290 [ 638.251040][T18624] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 638.251084][T18624] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 638.251145][T18624] ? __asan_memset+0x23/0x50 [ 638.251196][T18624] ? __asan_memcpy+0x3c/0x60 [ 638.251245][T18624] ? find_ref+0x209/0x420 [ 638.251278][T18624] handler_new_ref+0x82f/0xc60 [ 638.251324][T18624] v4l2_ctrl_new+0xe67/0x23a0 [ 638.251373][T18624] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 638.251427][T18624] v4l2_ctrl_new_std+0x1bb/0x290 [ 638.251475][T18624] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 638.251515][T18624] ? trace_kmalloc+0x101/0x130 [ 638.251551][T18624] ? __kasan_kmalloc+0xaa/0xb0 [ 638.251609][T18624] ? v4l2_ctrl_handler_init_class+0x201/0x350 [ 638.251733][T18624] ? lockdep_set_lock_cmp_fn+0xa0/0xe0 [ 638.251787][T18624] ? media_request_object_init+0x105/0x180 [ 638.251893][T18624] vim2m_open+0x140/0x830 [ 638.251998][T18624] v4l2_open+0x1d2/0x490 [ 638.252055][T18624] ? __pfx_v4l2_open+0x10/0x10 [ 638.252089][T18624] chrdev_open+0x234/0x6a0 [ 638.252126][T18624] ? __pfx_apparmor_file_open+0x10/0x10 [ 638.252166][T18624] ? __pfx_chrdev_open+0x10/0x10 [ 638.252207][T18624] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 638.252255][T18624] do_dentry_open+0x6d8/0x1660 [ 638.252290][T18624] ? __pfx_chrdev_open+0x10/0x10 [ 638.252334][T18624] vfs_open+0x82/0x3f0 [ 638.252385][T18624] path_openat+0x208c/0x31a0 [ 638.252437][T18624] ? __pfx_path_openat+0x10/0x10 [ 638.252491][T18624] do_file_open+0x20e/0x430 [ 638.252533][T18624] ? __pfx_do_file_open+0x10/0x10 [ 638.252602][T18624] ? alloc_fd+0x476/0x790 [ 638.252643][T18624] ? do_getname+0x191/0x390 [ 638.252692][T18624] do_sys_openat2+0x10d/0x1e0 [ 638.252745][T18624] ? __pfx_do_sys_openat2+0x10/0x10 [ 638.252807][T18624] __x64_sys_openat+0x12d/0x210 [ 638.252855][T18624] ? __pfx___x64_sys_openat+0x10/0x10 [ 638.252917][T18624] do_syscall_64+0x106/0xf80 [ 638.252968][T18624] ? clear_bhb_loop+0x40/0x90 [ 638.253009][T18624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.253043][T18624] RIP: 0033:0x7f5b9bb9c799 [ 638.253070][T18624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.253103][T18624] RSP: 002b:00007f5b99df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 638.253136][T18624] RAX: ffffffffffffffda RBX: 00007f5b9be15fa0 RCX: 00007f5b9bb9c799 [ 638.253157][T18624] RDX: 000000000002aa01 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 638.253176][T18624] RBP: 00007f5b9bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 638.253195][T18624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.253214][T18624] R13: 00007f5b9be16038 R14: 00007f5b9be15fa0 R15: 00007ffe18dfea78 [ 638.253257][T18624] [ 639.748179][T18653] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 641.312434][T18684] netlink: 330 bytes leftover after parsing attributes in process `syz.1.4906'. [ 641.350950][T18684] IPv6: NLM_F_CREATE should be specified when creating new route [ 641.772587][T18688] zswap: compressor not available [ 643.818269][T18732] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4923'. [ 643.986147][T18728] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4922'. [ 644.012764][T18736] netlink: 'syz.0.4924': attribute type 4 has an invalid length. [ 644.602801][T18743] netlink: 146 bytes leftover after parsing attributes in process `syz.2.4928'. [ 644.643083][T18748] netlink: 'syz.3.4929': attribute type 64 has an invalid length. [ 644.664624][T18748] netlink: 74 bytes leftover after parsing attributes in process `syz.3.4929'. [ 644.972499][T18753] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.030970][T18751] netlink: 346 bytes leftover after parsing attributes in process `syz.3.4931'. [ 645.117379][T18757] FAULT_INJECTION: forcing a failure. [ 645.117379][T18757] name failslab, interval 1, probability 0, space 0, times 0 [ 645.168937][T18757] CPU: 0 UID: 0 PID: 18757 Comm: syz.2.4933 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.168991][T18757] Tainted: [L]=SOFTLOCKUP [ 645.169003][T18757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 645.169023][T18757] Call Trace: [ 645.169034][T18757] [ 645.169047][T18757] dump_stack_lvl+0x100/0x190 [ 645.169107][T18757] should_fail_ex.cold+0x5/0xa [ 645.169150][T18757] should_failslab+0xc2/0x120 [ 645.169190][T18757] __kmalloc_cache_noprof+0x7a/0x6f0 [ 645.169240][T18757] ? kobject_create_and_add+0x46/0xc0 [ 645.169292][T18757] kobject_create_and_add+0x46/0xc0 [ 645.169335][T18757] __add_disk+0x66f/0xe40 [ 645.169448][T18757] ? find_held_lock+0x2b/0x80 [ 645.169488][T18757] add_disk_fwnode+0x3d4/0x5c0 [ 645.169530][T18757] zram_add+0x4d2/0x610 [ 645.169659][T18757] ? __pfx_zram_add+0x10/0x10 [ 645.169735][T18757] ? find_held_lock+0x2b/0x80 [ 645.169769][T18757] ? sysfs_file_kobj+0xe4/0x290 [ 645.169822][T18757] ? __pfx_hot_add_show+0x10/0x10 [ 645.169877][T18757] hot_add_show+0x21/0x80 [ 645.169935][T18757] class_attr_show+0x72/0xa0 [ 645.170040][T18757] ? __pfx_class_attr_show+0x10/0x10 [ 645.170081][T18757] sysfs_kf_seq_show+0x217/0x3a0 [ 645.170136][T18757] seq_read_iter+0x32f/0x1270 [ 645.170215][T18757] kernfs_fop_read_iter+0x46c/0x610 [ 645.170258][T18757] ? rw_verify_area+0xce/0x6d0 [ 645.170311][T18757] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 645.170355][T18757] vfs_read+0x825/0xb30 [ 645.170394][T18757] ? __pfx_vfs_read+0x10/0x10 [ 645.170457][T18757] ksys_read+0x12a/0x250 [ 645.170491][T18757] ? __pfx_ksys_read+0x10/0x10 [ 645.170537][T18757] do_syscall_64+0x106/0xf80 [ 645.170591][T18757] ? clear_bhb_loop+0x40/0x90 [ 645.170636][T18757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.170672][T18757] RIP: 0033:0x7fd7f179c799 [ 645.170701][T18757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.170735][T18757] RSP: 002b:00007fd7f26ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 645.170768][T18757] RAX: ffffffffffffffda RBX: 00007fd7f1a15fa0 RCX: 00007fd7f179c799 [ 645.170811][T18757] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000005 [ 645.170833][T18757] RBP: 00007fd7f1832c99 R08: 0000000000000000 R09: 0000000000000000 [ 645.170854][T18757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.170873][T18757] R13: 00007fd7f1a16038 R14: 00007fd7f1a15fa0 R15: 00007ffc978336f8 [ 645.170945][T18757] [ 646.424666][T18787] netlink: 326 bytes leftover after parsing attributes in process `syz.1.4944'. [ 647.508673][T18814] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4956'. [ 648.173406][T18823] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4958'. [ 648.592050][T18836] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4961'. [ 649.209973][T18840] netlink: 'syz.2.4963': attribute type 33 has an invalid length. [ 649.237778][T18840] netlink: 322 bytes leftover after parsing attributes in process `syz.2.4963'. [ 649.962372][T18860] netlink: 'syz.2.4971': attribute type 14 has an invalid length. [ 649.970407][T18860] netlink: 330 bytes leftover after parsing attributes in process `syz.2.4971'. [ 650.208693][T18855] bond0: (slave ): Enslaving as an active interface with an up link [ 650.803630][T18877] FAULT_INJECTION: forcing a failure. [ 650.803630][T18877] name failslab, interval 1, probability 0, space 0, times 0 [ 650.898496][T18877] CPU: 0 UID: 0 PID: 18877 Comm: syz.1.4978 Tainted: G L syzkaller #0 PREEMPT(full) [ 650.898551][T18877] Tainted: [L]=SOFTLOCKUP [ 650.898563][T18877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.898583][T18877] Call Trace: [ 650.898593][T18877] [ 650.898605][T18877] dump_stack_lvl+0x100/0x190 [ 650.898668][T18877] should_fail_ex.cold+0x5/0xa [ 650.898710][T18877] should_failslab+0xc2/0x120 [ 650.898747][T18877] __kmalloc_cache_noprof+0x7a/0x6f0 [ 650.898793][T18877] ? drm_file_alloc+0x74/0xb40 [ 650.898847][T18877] drm_file_alloc+0x74/0xb40 [ 650.898898][T18877] drm_open_helper+0x1fc/0x540 [ 650.898949][T18877] drm_open+0x1a0/0x3e0 [ 650.898992][T18877] ? __pfx_drm_open+0x10/0x10 [ 650.899036][T18877] drm_stub_open+0x20f/0x380 [ 650.899082][T18877] ? __pfx_drm_stub_open+0x10/0x10 [ 650.899127][T18877] chrdev_open+0x234/0x6a0 [ 650.899160][T18877] ? __pfx_apparmor_file_open+0x10/0x10 [ 650.899210][T18877] ? __pfx_chrdev_open+0x10/0x10 [ 650.899250][T18877] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 650.899298][T18877] do_dentry_open+0x6d8/0x1660 [ 650.899333][T18877] ? __pfx_chrdev_open+0x10/0x10 [ 650.899380][T18877] vfs_open+0x82/0x3f0 [ 650.899429][T18877] path_openat+0x208c/0x31a0 [ 650.899480][T18877] ? __pfx_path_openat+0x10/0x10 [ 650.899532][T18877] do_file_open+0x20e/0x430 [ 650.899572][T18877] ? __pfx_do_file_open+0x10/0x10 [ 650.899638][T18877] ? alloc_fd+0x476/0x790 [ 650.899679][T18877] ? do_getname+0x191/0x390 [ 650.899729][T18877] do_sys_openat2+0x10d/0x1e0 [ 650.899776][T18877] ? __pfx_do_sys_openat2+0x10/0x10 [ 650.899825][T18877] ? __fget_files+0x21f/0x3d0 [ 650.899867][T18877] __x64_sys_openat+0x12d/0x210 [ 650.899918][T18877] ? __pfx___x64_sys_openat+0x10/0x10 [ 650.899982][T18877] do_syscall_64+0x106/0xf80 [ 650.900033][T18877] ? clear_bhb_loop+0x40/0x90 [ 650.900074][T18877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.900108][T18877] RIP: 0033:0x7fe758b9c799 [ 650.900135][T18877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.900178][T18877] RSP: 002b:00007fe759a97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 650.900212][T18877] RAX: ffffffffffffffda RBX: 00007fe758e15fa0 RCX: 00007fe758b9c799 [ 650.900234][T18877] RDX: 0000000000129800 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 650.900256][T18877] RBP: 00007fe758c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 650.900277][T18877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 650.900296][T18877] R13: 00007fe758e16038 R14: 00007fe758e15fa0 R15: 00007ffdc40890d8 [ 650.900337][T18877] [ 651.825108][T18896] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4984'. [ 653.466229][T18926] FAULT_INJECTION: forcing a failure. [ 653.466229][T18926] name failslab, interval 1, probability 0, space 0, times 0 [ 653.543978][T18926] CPU: 0 UID: 0 PID: 18926 Comm: syz.3.4998 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.544029][T18926] Tainted: [L]=SOFTLOCKUP [ 653.544040][T18926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.544058][T18926] Call Trace: [ 653.544068][T18926] [ 653.544079][T18926] dump_stack_lvl+0x100/0x190 [ 653.544133][T18926] should_fail_ex.cold+0x5/0xa [ 653.544170][T18926] should_failslab+0xc2/0x120 [ 653.544202][T18926] __kmalloc_cache_node_noprof+0x7d/0x770 [ 653.544251][T18926] ? __alloc_workqueue+0x711/0x1880 [ 653.544286][T18926] ? lockdep_init_map_type+0x5c/0x250 [ 653.544331][T18926] __alloc_workqueue+0x711/0x1880 [ 653.544378][T18926] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 653.544426][T18926] alloc_workqueue_noprof+0xd2/0x200 [ 653.544464][T18926] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 653.544511][T18926] ? __pfx___debug_object_init+0x10/0x10 [ 653.544551][T18926] nci_register_device+0x21e/0xb80 [ 653.544590][T18926] ? __pfx_nci_register_device+0x10/0x10 [ 653.544630][T18926] ? lockdep_init_map_type+0x5c/0x250 [ 653.544675][T18926] virtual_ncidev_open+0x141/0x220 [ 653.544718][T18926] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 653.544760][T18926] misc_open+0x26d/0x450 [ 653.544795][T18926] ? __pfx_misc_open+0x10/0x10 [ 653.544827][T18926] chrdev_open+0x234/0x6a0 [ 653.544866][T18926] ? __pfx_apparmor_file_open+0x10/0x10 [ 653.544896][T18926] ? __pfx_chrdev_open+0x10/0x10 [ 653.544928][T18926] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 653.544968][T18926] do_dentry_open+0x6d8/0x1660 [ 653.544998][T18926] ? __pfx_chrdev_open+0x10/0x10 [ 653.545037][T18926] vfs_open+0x82/0x3f0 [ 653.545078][T18926] path_openat+0x208c/0x31a0 [ 653.545121][T18926] ? __pfx_path_openat+0x10/0x10 [ 653.545163][T18926] do_file_open+0x20e/0x430 [ 653.545197][T18926] ? __pfx_do_file_open+0x10/0x10 [ 653.545253][T18926] ? alloc_fd+0x476/0x790 [ 653.545286][T18926] ? do_getname+0x191/0x390 [ 653.545325][T18926] do_sys_openat2+0x10d/0x1e0 [ 653.545366][T18926] ? __pfx_do_sys_openat2+0x10/0x10 [ 653.545407][T18926] ? __fget_files+0x21f/0x3d0 [ 653.545442][T18926] __x64_sys_openat+0x12d/0x210 [ 653.545481][T18926] ? __pfx___x64_sys_openat+0x10/0x10 [ 653.545536][T18926] do_syscall_64+0x106/0xf80 [ 653.545577][T18926] ? clear_bhb_loop+0x40/0x90 [ 653.545611][T18926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.545640][T18926] RIP: 0033:0x7f5b9bb9c799 [ 653.545665][T18926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.545694][T18926] RSP: 002b:00007f5b99df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 653.545723][T18926] RAX: ffffffffffffffda RBX: 00007f5b9be15fa0 RCX: 00007f5b9bb9c799 [ 653.545742][T18926] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 653.545761][T18926] RBP: 00007f5b9bc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 653.545779][T18926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.545796][T18926] R13: 00007f5b9be16038 R14: 00007f5b9be15fa0 R15: 00007ffe18dfea78 [ 653.545834][T18926] [ 654.540874][T18943] netlink: 338 bytes leftover after parsing attributes in process `syz.2.5002'. [ 654.975288][T18937] ERROR: Out of memory at tomoyo_memory_ok. [ 656.101253][T18971] netlink: 334 bytes leftover after parsing attributes in process `syz.3.5014'. [ 659.854026][T19045] FAULT_INJECTION: forcing a failure. [ 659.854026][T19045] name failslab, interval 1, probability 0, space 0, times 0 [ 659.867823][T19045] CPU: 0 UID: 0 PID: 19045 Comm: syz.1.5042 Tainted: G L syzkaller #0 PREEMPT(full) [ 659.867886][T19045] Tainted: [L]=SOFTLOCKUP [ 659.867899][T19045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 659.867919][T19045] Call Trace: [ 659.867930][T19045] [ 659.867942][T19045] dump_stack_lvl+0x100/0x190 [ 659.868005][T19045] should_fail_ex.cold+0x5/0xa [ 659.868047][T19045] should_failslab+0xc2/0x120 [ 659.868084][T19045] __kmalloc_cache_noprof+0x7a/0x6f0 [ 659.868130][T19045] ? __v4l2_subdev_state_alloc+0x53/0x410 [ 659.868182][T19045] __v4l2_subdev_state_alloc+0x53/0x410 [ 659.868230][T19045] subdev_open+0xa6/0x510 [ 659.868275][T19045] v4l2_open+0x1d2/0x490 [ 659.868307][T19045] ? __pfx_v4l2_open+0x10/0x10 [ 659.868340][T19045] chrdev_open+0x234/0x6a0 [ 659.868376][T19045] ? __pfx_apparmor_file_open+0x10/0x10 [ 659.868412][T19045] ? __pfx_chrdev_open+0x10/0x10 [ 659.868453][T19045] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 659.868499][T19045] do_dentry_open+0x6d8/0x1660 [ 659.868534][T19045] ? __pfx_chrdev_open+0x10/0x10 [ 659.868592][T19045] vfs_open+0x82/0x3f0 [ 659.868644][T19045] path_openat+0x208c/0x31a0 [ 659.868690][T19045] ? futex_unqueue+0x13d/0x2c0 [ 659.868734][T19045] ? stack_depot_save_flags+0x27/0x9d0 [ 659.868781][T19045] ? __pfx_path_openat+0x10/0x10 [ 659.868823][T19045] ? kasan_save_stack+0x3f/0x50 [ 659.868876][T19045] ? kasan_save_stack+0x30/0x50 [ 659.868930][T19045] ? kasan_save_track+0x14/0x30 [ 659.868959][T19045] ? __kasan_slab_alloc+0x89/0x90 [ 659.869008][T19045] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 659.869064][T19045] ? do_getname+0x35/0x390 [ 659.869111][T19045] do_file_open+0x20e/0x430 [ 659.869152][T19045] ? __pfx_do_file_open+0x10/0x10 [ 659.869224][T19045] ? find_held_lock+0x2b/0x80 [ 659.869259][T19045] ? __might_fault+0xc5/0x140 [ 659.869310][T19045] ? __might_fault+0xc5/0x140 [ 659.869366][T19045] file_open_name+0x198/0x3b0 [ 659.869413][T19045] ? __pfx_file_open_name+0x10/0x10 [ 659.869471][T19045] ? do_getname+0x191/0x390 [ 659.869522][T19045] acct_on+0xa4/0x9e0 [ 659.869577][T19045] ? __pfx_acct_on+0x10/0x10 [ 659.869639][T19045] ? bpf_lsm_capable+0x9/0x10 [ 659.869678][T19045] ? security_capable+0x80/0x260 [ 659.869739][T19045] __x64_sys_acct+0x81/0x1e0 [ 659.869788][T19045] ? lockdep_hardirqs_on+0x78/0x100 [ 659.869841][T19045] do_syscall_64+0x106/0xf80 [ 659.869889][T19045] ? clear_bhb_loop+0x40/0x90 [ 659.869931][T19045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.869967][T19045] RIP: 0033:0x7fe758b9c799 [ 659.869995][T19045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.870031][T19045] RSP: 002b:00007fe759a97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 659.870066][T19045] RAX: ffffffffffffffda RBX: 00007fe758e15fa0 RCX: 00007fe758b9c799 [ 659.870088][T19045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000100 [ 659.870109][T19045] RBP: 00007fe758c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 659.870128][T19045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 659.870147][T19045] R13: 00007fe758e16038 R14: 00007fe758e15fa0 R15: 00007ffdc40890d8 [ 659.870191][T19045] [ 660.438224][T19039] netlink: 334 bytes leftover after parsing attributes in process `syz.3.5040'. [ 661.912672][T19087] FAULT_INJECTION: forcing a failure. [ 661.912672][T19087] name failslab, interval 1, probability 0, space 0, times 0 [ 661.969364][T19087] CPU: 1 UID: 0 PID: 19087 Comm: syz.1.5052 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.969424][T19087] Tainted: [L]=SOFTLOCKUP [ 661.969437][T19087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 661.969458][T19087] Call Trace: [ 661.969468][T19087] [ 661.969481][T19087] dump_stack_lvl+0x100/0x190 [ 661.969542][T19087] should_fail_ex.cold+0x5/0xa [ 661.969585][T19087] should_failslab+0xc2/0x120 [ 661.969624][T19087] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 661.969679][T19087] ? security_file_alloc+0x34/0x2c0 [ 661.969725][T19087] ? trace_kmem_cache_alloc+0xf3/0x120 [ 661.969782][T19087] security_file_alloc+0x34/0x2c0 [ 661.969827][T19087] init_file+0x95/0x480 [ 661.969868][T19087] alloc_empty_file+0x73/0x1c0 [ 661.969913][T19087] alloc_file_pseudo+0x13a/0x230 [ 661.969960][T19087] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 661.970014][T19087] ? inode_init_always_gfp+0xd0e/0x1040 [ 661.970066][T19087] sock_alloc_file+0x50/0x210 [ 661.970203][T19087] do_accept+0x242/0x530 [ 661.970247][T19087] ? 0xffffffff81000000 [ 661.970273][T19087] ? do_raw_spin_lock+0x128/0x260 [ 661.970327][T19087] ? __pfx_do_accept+0x10/0x10 [ 661.970395][T19087] ? 0xffffffff81000000 [ 661.970418][T19087] __sys_accept4+0x108/0x200 [ 661.970465][T19087] ? __pfx___sys_accept4+0x10/0x10 [ 661.970521][T19087] __x64_sys_accept+0x74/0xb0 [ 661.970566][T19087] ? lockdep_hardirqs_on+0x78/0x100 [ 661.970622][T19087] do_syscall_64+0x106/0xf80 [ 661.970673][T19087] ? clear_bhb_loop+0x40/0x90 [ 661.970717][T19087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.970762][T19087] RIP: 0033:0x7fe758b9c799 [ 661.970789][T19087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.970822][T19087] RSP: 002b:00007fe759a97028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 661.970854][T19087] RAX: ffffffffffffffda RBX: 00007fe758e15fa0 RCX: 00007fe758b9c799 [ 661.970875][T19087] RDX: ffffffff81000000 RSI: ffffffffffffffff RDI: 0000000000000003 [ 661.970896][T19087] RBP: 00007fe758c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 661.970915][T19087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.970935][T19087] R13: 00007fe758e16038 R14: 00007fe758e15fa0 R15: 00007ffdc40890d8 [ 661.970969][T19087] ? 0xffffffff81000000 [ 661.971002][T19087] [ 663.475805][T19129] futex_wake_op: syz.3.5064 tries to shift op by -2048; fix this program [ 663.511200][T19129] futex_wake_op: syz.3.5064 tries to shift op by -2048; fix this program [ 664.182019][T19144] netlink: 25 bytes leftover after parsing attributes in process `syz.3.5068'. [ 665.997000][T19161] Process accounting resumed [ 666.775359][T19181] netlink: 'syz.0.5081': attribute type 4 has an invalid length. [ 667.929185][T19201] FAULT_INJECTION: forcing a failure. [ 667.929185][T19201] name failslab, interval 1, probability 0, space 0, times 0 [ 668.036103][T19201] CPU: 1 UID: 0 PID: 19201 Comm: syz.0.5088 Tainted: G L syzkaller #0 PREEMPT(full) [ 668.036161][T19201] Tainted: [L]=SOFTLOCKUP [ 668.036174][T19201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 668.036200][T19201] Call Trace: [ 668.036212][T19201] [ 668.036226][T19201] dump_stack_lvl+0x100/0x190 [ 668.036289][T19201] should_fail_ex.cold+0x5/0xa [ 668.036332][T19201] should_failslab+0xc2/0x120 [ 668.036372][T19201] __kmalloc_node_noprof+0xe6/0x850 [ 668.036426][T19201] ? user_buffer_init+0x2a1/0x6d0 [ 668.036499][T19201] user_buffer_init+0x2a1/0x6d0 [ 668.036562][T19201] tracing_mark_open+0x1b7/0x240 [ 668.036623][T19201] do_dentry_open+0x6d8/0x1660 [ 668.036660][T19201] ? __pfx_tracing_mark_open+0x10/0x10 [ 668.036730][T19201] vfs_open+0x82/0x3f0 [ 668.036782][T19201] path_openat+0x208c/0x31a0 [ 668.036835][T19201] ? __pfx_path_openat+0x10/0x10 [ 668.036890][T19201] do_file_open+0x20e/0x430 [ 668.036933][T19201] ? __pfx_do_file_open+0x10/0x10 [ 668.037003][T19201] ? alloc_fd+0x476/0x790 [ 668.037045][T19201] ? do_getname+0x191/0x390 [ 668.037096][T19201] do_sys_openat2+0x10d/0x1e0 [ 668.037143][T19201] ? __pfx_do_sys_openat2+0x10/0x10 [ 668.037208][T19201] __x64_sys_openat+0x12d/0x210 [ 668.037260][T19201] ? __pfx___x64_sys_openat+0x10/0x10 [ 668.037327][T19201] do_syscall_64+0x106/0xf80 [ 668.037382][T19201] ? clear_bhb_loop+0x40/0x90 [ 668.037427][T19201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 668.037463][T19201] RIP: 0033:0x7fbef239c799 [ 668.037501][T19201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 668.037538][T19201] RSP: 002b:00007fbef31a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 668.037573][T19201] RAX: ffffffffffffffda RBX: 00007fbef2615fa0 RCX: 00007fbef239c799 [ 668.037597][T19201] RDX: 0000000000000043 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 668.037621][T19201] RBP: 00007fbef2432c99 R08: 0000000000000000 R09: 0000000000000000 [ 668.037643][T19201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 668.037664][T19201] R13: 00007fbef2616038 R14: 00007fbef2615fa0 R15: 00007ffcefd031e8 [ 668.037710][T19201] [ 669.064815][T19227] netlink: 'syz.3.5095': attribute type 27 has an invalid length. [ 669.111141][T19227] netlink: 334 bytes leftover after parsing attributes in process `syz.3.5095'. [ 671.570939][T19275] netlink: 334 bytes leftover after parsing attributes in process `syz.3.5103'. [ 671.812311][T19253] ERROR: Out of memory at tomoyo_memory_ok. [ 674.851893][T19313] netlink: 342 bytes leftover after parsing attributes in process `syz.2.5117'. [ 678.119211][T19347] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5130'. [ 678.423276][T19353] FAULT_INJECTION: forcing a failure. [ 678.423276][T19353] name failslab, interval 1, probability 0, space 0, times 0 [ 678.472071][T19353] CPU: 0 UID: 0 PID: 19353 Comm: syz.1.5133 Tainted: G L syzkaller #0 PREEMPT(full) [ 678.472131][T19353] Tainted: [L]=SOFTLOCKUP [ 678.472144][T19353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.472165][T19353] Call Trace: [ 678.472177][T19353] [ 678.472190][T19353] dump_stack_lvl+0x100/0x190 [ 678.472250][T19353] should_fail_ex.cold+0x5/0xa [ 678.472293][T19353] ? drm_atomic_state_init+0x190/0x490 [ 678.472431][T19353] should_failslab+0xc2/0x120 [ 678.472472][T19353] __kmalloc_noprof+0xe0/0x850 [ 678.472537][T19353] drm_atomic_state_init+0x190/0x490 [ 678.472582][T19353] ? kasan_save_track+0x14/0x30 [ 678.472621][T19353] drm_atomic_state_alloc+0xd3/0x120 [ 678.472669][T19353] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 678.472764][T19353] ? trace_contention_end+0x140/0x180 [ 678.472816][T19353] ? __mutex_lock+0x26a/0x1b90 [ 678.472876][T19353] ? __mutex_lock+0x26a/0x1b90 [ 678.472931][T19353] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 678.472985][T19353] ? drm_master_internal_acquire+0x21/0x80 [ 678.473077][T19353] drm_client_modeset_commit_locked+0x14d/0x580 [ 678.473140][T19353] drm_client_modeset_commit+0x4f/0x80 [ 678.473194][T19353] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 678.473312][T19353] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 678.473371][T19353] drm_fbdev_client_restore+0x1b/0x30 [ 678.473437][T19353] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 678.473480][T19353] drm_client_dev_restore+0x205/0x2a0 [ 678.473541][T19353] drm_release+0x2c6/0x360 [ 678.473590][T19353] ? __pfx_drm_release+0x10/0x10 [ 678.473639][T19353] __fput+0x3ff/0xb40 [ 678.473694][T19353] task_work_run+0x150/0x240 [ 678.473757][T19353] ? __pfx_task_work_run+0x10/0x10 [ 678.473826][T19353] exit_to_user_mode_loop+0x100/0x4a0 [ 678.473879][T19353] do_syscall_64+0x668/0xf80 [ 678.473932][T19353] ? clear_bhb_loop+0x40/0x90 [ 678.473977][T19353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.474014][T19353] RIP: 0033:0x7fe758b9c799 [ 678.474046][T19353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.474081][T19353] RSP: 002b:00007fe759a97028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 678.474116][T19353] RAX: 0000000000000000 RBX: 00007fe758e15fa0 RCX: 00007fe758b9c799 [ 678.474138][T19353] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 678.474159][T19353] RBP: 00007fe758c32c99 R08: 0000000000000000 R09: 0000000000000000 [ 678.474180][T19353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 678.474202][T19353] R13: 00007fe758e16038 R14: 00007fe758e15fa0 R15: 00007ffdc40890d8 [ 678.474249][T19353] [ 680.573491][T19381] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5142'. [ 680.614260][T19381] netlink: 25 bytes leftover after parsing attributes in process `syz.0.5142'. [ 681.063731][T19388] netlink: 342 bytes leftover after parsing attributes in process `syz.3.5146'. [ 681.543995][T19400] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5148'. [ 683.625021][T19431] ================================================================== [ 683.625056][T19431] BUG: KASAN: slab-out-of-bounds in fbcon_prepare_logo+0x94e/0xc60 [ 683.625160][T19431] Read of size 8 at addr ffff888025f9e5e8 by task syz.2.5161/19431 [ 683.625191][T19431] [ 683.625212][T19431] CPU: 1 UID: 0 PID: 19431 Comm: syz.2.5161 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.625263][T19431] Tainted: [L]=SOFTLOCKUP [ 683.625277][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.625298][T19431] Call Trace: [ 683.625310][T19431] [ 683.625324][T19431] dump_stack_lvl+0x100/0x190 [ 683.625379][T19431] print_report+0x156/0x4c9 [ 683.625430][T19431] ? __virt_addr_valid+0x81/0x620 [ 683.625478][T19431] ? __phys_addr+0xe8/0x180 [ 683.625525][T19431] ? fbcon_prepare_logo+0x94e/0xc60 [ 683.625562][T19431] kasan_report+0xdf/0x1e0 [ 683.625602][T19431] ? fbcon_prepare_logo+0x94e/0xc60 [ 683.625646][T19431] kasan_check_range+0x10f/0x1e0 [ 683.625690][T19431] __asan_memcpy+0x23/0x60 [ 683.625742][T19431] fbcon_prepare_logo+0x94e/0xc60 [ 683.625790][T19431] fbcon_init+0x10a0/0x1820 [ 683.625833][T19431] visual_init+0x320/0x620 [ 683.625919][T19431] do_bind_con_driver.isra.0+0x636/0x9c0 [ 683.625976][T19431] store_bind+0x609/0x730 [ 683.626029][T19431] ? __pfx_store_bind+0x10/0x10 [ 683.626093][T19431] dev_attr_store+0x58/0x80 [ 683.626177][T19431] ? __pfx_dev_attr_store+0x10/0x10 [ 683.626220][T19431] sysfs_kf_write+0xf2/0x150 [ 683.626266][T19431] kernfs_fop_write_iter+0x3e0/0x5f0 [ 683.626304][T19431] ? __pfx_sysfs_kf_write+0x10/0x10 [ 683.626350][T19431] vfs_write+0x6ac/0x1070 [ 683.626383][T19431] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 683.626426][T19431] ? __pfx_vfs_write+0x10/0x10 [ 683.626474][T19431] ksys_write+0x12a/0x250 [ 683.626507][T19431] ? __pfx_ksys_write+0x10/0x10 [ 683.626548][T19431] do_syscall_64+0x106/0xf80 [ 683.626601][T19431] ? clear_bhb_loop+0x40/0x90 [ 683.626641][T19431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.626676][T19431] RIP: 0033:0x7fd7f179c799 [ 683.626704][T19431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.626740][T19431] RSP: 002b:00007fd7f26ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 683.626775][T19431] RAX: ffffffffffffffda RBX: 00007fd7f1a15fa0 RCX: 00007fd7f179c799 [ 683.626798][T19431] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000003 [ 683.626820][T19431] RBP: 00007fd7f1832c99 R08: 0000000000000000 R09: 0000000000000000 [ 683.626842][T19431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.626863][T19431] R13: 00007fd7f1a16038 R14: 00007fd7f1a15fa0 R15: 00007ffc978336f8 [ 683.626899][T19431] [ 683.626912][T19431] [ 683.626922][T19431] Allocated by task 19430: [ 683.626940][T19431] kasan_save_stack+0x30/0x50 [ 683.626996][T19431] kasan_save_track+0x14/0x30 [ 683.627025][T19431] __kasan_kmalloc+0xaa/0xb0 [ 683.627076][T19431] __kmalloc_noprof+0x301/0x850 [ 683.627128][T19431] security_inode_init_security+0x113/0x370 [ 683.627192][T19431] shmem_symlink+0x15f/0xa00 [ 683.627245][T19431] vfs_symlink+0x178/0x4d0 [ 683.627290][T19431] filename_symlinkat+0x2a6/0x560 [ 683.627331][T19431] __x64_sys_symlinkat+0x9c/0xe0 [ 683.627371][T19431] do_syscall_64+0x106/0xf80 [ 683.627422][T19431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.627458][T19431] [ 683.627466][T19431] Freed by task 19430: [ 683.627483][T19431] kasan_save_stack+0x30/0x50 [ 683.627537][T19431] kasan_save_track+0x14/0x30 [ 683.627566][T19431] kasan_save_free_info+0x3b/0x70 [ 683.627610][T19431] __kasan_slab_free+0x5f/0x80 [ 683.627642][T19431] kfree+0x1f6/0x6b0 [ 683.627683][T19431] security_inode_init_security+0x2bf/0x370 [ 683.627737][T19431] shmem_symlink+0x15f/0xa00 [ 683.627789][T19431] vfs_symlink+0x178/0x4d0 [ 683.627835][T19431] filename_symlinkat+0x2a6/0x560 [ 683.627875][T19431] __x64_sys_symlinkat+0x9c/0xe0 [ 683.627916][T19431] do_syscall_64+0x106/0xf80 [ 683.627966][T19431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.628001][T19431] [ 683.628010][T19431] The buggy address belongs to the object at ffff888025f9e580 [ 683.628010][T19431] which belongs to the cache kmalloc-64 of size 64 [ 683.628040][T19431] The buggy address is located 40 bytes to the right of [ 683.628040][T19431] allocated 64-byte region [ffff888025f9e580, ffff888025f9e5c0) [ 683.628077][T19431] [ 683.628086][T19431] The buggy address belongs to the physical page: [ 683.628102][T19431] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888025f9e780 pfn:0x25f9e [ 683.628143][T19431] flags: 0xfff00000000200(workingset|node=0|zone=1|lastcpupid=0x7ff) [ 683.628176][T19431] page_type: f5(slab) [ 683.628205][T19431] raw: 00fff00000000200 ffff88813fe398c0 ffffea0001cdee90 ffffea0001e54fd0 [ 683.628239][T19431] raw: ffff888025f9e780 000000080020001b 00000000f5000000 0000000000000000 [ 683.628260][T19431] page dumped because: kasan: bad access detected [ 683.628278][T19431] page_owner tracks the page as allocated [ 683.628291][T19431] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 152, tgid 152 (kworker/u8:7), ts 6062537052, free_ts 6061064391 [ 683.628351][T19431] post_alloc_hook+0x153/0x170 [ 683.628398][T19431] get_page_from_freelist+0x111d/0x3140 [ 683.628448][T19431] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 683.628501][T19431] new_slab+0xa6/0x6b0 [ 683.628542][T19431] refill_objects+0x26b/0x400 [ 683.628588][T19431] __pcs_replace_empty_main+0x1ab/0x660 [ 683.628640][T19431] __kmalloc_noprof+0x688/0x850 [ 683.628691][T19431] lsm_blob_alloc+0x68/0x90 [ 683.628738][T19431] security_task_alloc+0x2a/0x260 [ 683.628782][T19431] copy_process+0x258f/0x7a40 [ 683.628821][T19431] kernel_clone+0xfc/0x9a0 [ 683.628859][T19431] user_mode_thread+0xcc/0x110 [ 683.628898][T19431] call_usermodehelper_exec_work+0xcb/0x180 [ 683.628954][T19431] process_one_work+0xa23/0x19a0 [ 683.629004][T19431] worker_thread+0x5ef/0xe50 [ 683.629052][T19431] kthread+0x370/0x450 [ 683.629097][T19431] page last free pid 152 tgid 152 stack trace: [ 683.629117][T19431] __free_frozen_pages+0x7e1/0x10d0 [ 683.629171][T19431] __kasan_populate_vmalloc+0x1ea/0x210 [ 683.629223][T19431] alloc_vmap_area+0x95d/0x2bd0 [ 683.629258][T19431] __get_vm_area_node+0x1ca/0x330 [ 683.629295][T19431] __vmalloc_node_range_noprof+0x213/0x1530 [ 683.629339][T19431] __vmalloc_node_noprof+0xad/0xf0 [ 683.629380][T19431] copy_process+0x5ec/0x7a40 [ 683.629418][T19431] kernel_clone+0xfc/0x9a0 [ 683.629457][T19431] user_mode_thread+0xcc/0x110 [ 683.629497][T19431] call_usermodehelper_exec_work+0xcb/0x180 [ 683.629554][T19431] process_one_work+0xa23/0x19a0 [ 683.629604][T19431] worker_thread+0x5ef/0xe50 [ 683.629652][T19431] kthread+0x370/0x450 [ 683.629697][T19431] ret_from_fork+0x754/0xd80 [ 683.629748][T19431] ret_from_fork_asm+0x1a/0x30 [ 683.629786][T19431] [ 683.629795][T19431] Memory state around the buggy address: [ 683.629813][T19431] ffff888025f9e480: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 683.629840][T19431] ffff888025f9e500: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 683.629867][T19431] >ffff888025f9e580: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 683.629888][T19431] ^ [ 683.629910][T19431] ffff888025f9e600: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 683.629936][T19431] ffff888025f9e680: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 683.629957][T19431] ================================================================== [ 683.629979][T19431] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 683.630006][T19431] CPU: 1 UID: 0 PID: 19431 Comm: syz.2.5161 Tainted: G L syzkaller #0 PREEMPT(full) [ 683.630057][T19431] Tainted: [L]=SOFTLOCKUP [ 683.630071][T19431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 683.630093][T19431] Call Trace: [ 683.630105][T19431] [ 683.630118][T19431] dump_stack_lvl+0x100/0x190 [ 683.630182][T19431] vpanic+0x552/0x970 [ 683.630214][T19431] ? __pfx_vpanic+0x10/0x10 [ 683.630247][T19431] ? __pfx_vprintk_emit+0x10/0x10 [ 683.630287][T19431] ? fbcon_prepare_logo+0x94e/0xc60 [ 683.630327][T19431] panic+0xd1/0xe0 [ 683.630358][T19431] ? __pfx_panic+0x10/0x10 [ 683.630397][T19431] ? fbcon_prepare_logo+0x94e/0xc60 [ 683.630439][T19431] check_panic_on_warn.cold+0x19/0x34 [ 683.630476][T19431] end_report.part.0+0x3a/0x90 [ 683.630524][T19431] kasan_report.cold+0xe/0x18 [ 683.630571][T19431] ? fbcon_prepare_logo+0x94e/0xc60 [ 683.630614][T19431] kasan_check_range+0x10f/0x1e0 [ 683.630659][T19431] __asan_memcpy+0x23/0x60 [ 683.630707][T19431] fbcon_prepare_logo+0x94e/0xc60 [ 683.630754][T19431] fbcon_init+0x10a0/0x1820 [ 683.630802][T19431] visual_init+0x320/0x620 [ 683.630845][T19431] do_bind_con_driver.isra.0+0x636/0x9c0 [ 683.630898][T19431] store_bind+0x609/0x730 [ 683.630949][T19431] ? __pfx_store_bind+0x10/0x10 [ 683.630995][T19431] dev_attr_store+0x58/0x80 [ 683.631037][T19431] ? __pfx_dev_attr_store+0x10/0x10 [ 683.631079][T19431] sysfs_kf_write+0xf2/0x150 [ 683.631123][T19431] kernfs_fop_write_iter+0x3e0/0x5f0 [ 683.631169][T19431] ? __pfx_sysfs_kf_write+0x10/0x10 [ 683.631215][T19431] vfs_write+0x6ac/0x1070 [ 683.631248][T19431] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 683.631290][T19431] ? __pfx_vfs_write+0x10/0x10 [ 683.631337][T19431] ksys_write+0x12a/0x250 [ 683.631371][T19431] ? __pfx_ksys_write+0x10/0x10 [ 683.631411][T19431] do_syscall_64+0x106/0xf80 [ 683.631463][T19431] ? clear_bhb_loop+0x40/0x90 [ 683.631504][T19431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 683.631540][T19431] RIP: 0033:0x7fd7f179c799 [ 683.631568][T19431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 683.631605][T19431] RSP: 002b:00007fd7f26ba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 683.631641][T19431] RAX: ffffffffffffffda RBX: 00007fd7f1a15fa0 RCX: 00007fd7f179c799 [ 683.631665][T19431] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000003 [ 683.631688][T19431] RBP: 00007fd7f1832c99 R08: 0000000000000000 R09: 0000000000000000 [ 683.631711][T19431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 683.631733][T19431] R13: 00007fd7f1a16038 R14: 00007fd7f1a15fa0 R15: 00007ffc978336f8 [ 683.631767][T19431] [ 683.632400][T19431] Kernel Offset: disabled