last executing test programs: 2m54.382225839s ago: executing program 3 (id=549): timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x2}, &(0x7f00000003c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10) sendto$inet(r1, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd03b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) r2 = fcntl$dupfd(r1, 0x406, r1) sendmmsg$inet(r2, &(0x7f0000006ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)="90", 0x1}], 0x1, &(0x7f0000000340)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}], 0x18}}], 0x1, 0x20008004) 2m52.764916895s ago: executing program 3 (id=554): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}}, 0x50}}, 0x0) 2m52.558885333s ago: executing program 3 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x29}, @NFTA_SET_DATA_TYPE={0x8}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4004}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x4}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xdc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2m52.344025905s ago: executing program 3 (id=561): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}, 0xfffffdef}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6, 0x1}]}}}], 0x18}}], 0x2, 0x0) 2m52.251448251s ago: executing program 3 (id=564): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$TCSETS(r0, 0x89f2, &(0x7f0000000100)={0x3, 0xa, 0x0, 0x401, 0x7, "bb40af00008000"}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@delpolicy={0x64, 0x14, 0x1, 0x70bd2a, 0x47, {{@in=@private=0xa010102, @in=@multicast1, 0x4e21, 0x4, 0x4e23, 0x3, 0x2, 0x20, 0xe0, 0x84}, 0x6e6bb8}, [@XFRMA_IF_ID={0x8, 0x1f, 0x2}, @mark={0xc, 0x15, {0x35075b}}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000884}, 0x4048010) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000140)=0x6, 0x4) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000100)={{0x6, @loopback, 0x15, 0x0, 'rr\x00', 0xe, 0x0, 0x46}, {@multicast1, 0x4908, 0x0, 0x1}}, 0x44) 2m52.089782517s ago: executing program 3 (id=566): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x1a, &(0x7f0000000100)=0x4, 0x3) 2m36.8365046s ago: executing program 32 (id=566): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_int(r0, 0x0, 0x1a, &(0x7f0000000100)=0x4, 0x3) 2.136470888s ago: executing program 1 (id=2562): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00%\x00', 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) 1.764478658s ago: executing program 1 (id=2567): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x640100fd}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0xffffffffffffffa8, &(0x7f0000000040)={0x1}) 1.633329451s ago: executing program 2 (id=2569): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='raid1', 0x5) 1.483370696s ago: executing program 2 (id=2572): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.437480925s ago: executing program 0 (id=2573): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='net/if_inet6\x00') preadv(r0, &(0x7f0000000080)=[{&(0x7f00000008c0)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 1.308827086s ago: executing program 4 (id=2574): r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$CEC_TRANSMIT(r0, 0xc0386105, 0x0) 1.308587627s ago: executing program 0 (id=2575): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00%\x00', 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) 1.243229304s ago: executing program 2 (id=2576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[], 0xc8}}, 0x0) 1.178656741s ago: executing program 2 (id=2577): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './cgroup.cpu/cgroup.procs\x00'}, 0x6e) kexec_load(0x0, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200000000}], 0x0) kexec_load(0x100000000, 0x0, 0x0, 0x0) socket(0x15, 0x5, 0x0) 1.163347044s ago: executing program 4 (id=2578): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='fd/3\x00') preadv(r0, &(0x7f0000002b40)=[{&(0x7f0000000200)=""/237, 0xed}], 0x1, 0xf, 0x94b8) 984.040183ms ago: executing program 4 (id=2579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='10000', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0xc0100, 0x10) fsopen(&(0x7f0000000080)='autofs\x00', 0x0) 950.834403ms ago: executing program 0 (id=2580): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='raid1', 0x5) 892.40574ms ago: executing program 4 (id=2581): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='raid0', 0x5) 784.773359ms ago: executing program 0 (id=2582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) 784.279651ms ago: executing program 1 (id=2583): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x34, 0x30, 0x37, 0x30, 0x64, 0x30, 0x30, 0x6c, 0x35, 0x30, 0x34, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x33}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000880)={'fscrypt:', @auto=[0x34, 0x39, 0x64, 0x65, 0x64, 0x66, 0x36, 0x38, 0x36, 0x62, 0x37, 0x31, 0x8, 0x34, 0x62, 0x34]}, &(0x7f00000008c0)={0x0, "83be91e3956f7eeab185c5532a737cbf86a019abc3c6c5b882e77c6b66c6d809ae8c0052697af3e28ee0d067c73f9e8f2c1af82447d244584968c7ffb982e9b4", 0x1e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x61, 0x30, 0x35, 0x30, 0x63, 0x30, 0x30, 0x30, 0x61, 0x30, 0x30, 0x66, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112234445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233405566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x33, 0x0, 0x63, 0x30, 0x34, 0x65, 0x37, 0x39, 0x63, 0x61, 0x32, 0x31, 0x30, 0x63, 0x62]}, &(0x7f0000000780)={0x0, "fe1b5c4bf346207d87478c27b86bb51289055bc124bb60432572800f18aa4fd90aabed9d0fe61c88c11301a15ee3f0f5cdf737eba09fed73da1807ecb5b00d17", 0x24}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000600), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x62, 0x37, 0x35, 0x38, 0x30, 0x30, 0x30, 0x62, 0x30, 0x42f52c3b5ed60cc6, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa91ccddeeff", 0x13}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @desc1}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x27}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x62, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x66, 0x32, 0x64, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778999aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x6f, 0x30, 0x50, 0x30, 0x8, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000940)={'fscrypt:', @auto=[0x30, 0x58425c31ab49815a, 0x30, 0x30, 0x30, 0x30, 0x35, 0x65, 0x67, 0x36, 0x33, 0x33, 0x33, 0x30, 0x30, 0x33]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112200080000778899aabbccddeeff00aabbccddeeff00112233445566778899aabbccddeeff00", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x0, 0x30, 0x62, 0x30, 0x30, 0x36, 0x30]}, &(0x7f0000000100)={0x0, "00ccddeeff00112233446b66778899aabbefddeeff0011221301006624d099aabbccddeeff001122334455ff0f0000aabbccddeeff00", 0x3f}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x15}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc2}, &(0x7f0000000300)={0x0, "bd79659c024f48b5e34a802d41dfdc553eea39517e4be298a5e6c7c1934111314bd6d38465a2326646832764d1609201f568517d108fe44375613ec929462ced", 0x15}, 0x48, r0) add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)='D', 0x1, r0) 667.429601ms ago: executing program 0 (id=2584): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 619.798769ms ago: executing program 1 (id=2585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=ANY=[@ANYBLOB], 0xc8}}, 0x0) 551.474458ms ago: executing program 4 (id=2586): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0xc0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x0, 0x5, 0xfffffffffffffffc, 0xffffffff, 0xbf4, 0xfff, 0x808000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 468.286316ms ago: executing program 0 (id=2587): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000380)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, &(0x7f00000002c0)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) r3 = socket(0x2, 0x80805, 0x0) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r4, &(0x7f0000000400)="0000000009020900010100803212010002000000402505a0a4000100000001", 0x1f) socket$inet6(0xa, 0x1, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f00000000c0)='memory.pressure\x00', 0x2, 0x0) read(r7, &(0x7f0000000100)=""/43, 0x2b) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/instances/inst1\x00', 0x1ff) 431.496386ms ago: executing program 1 (id=2588): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20a40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xb1Yg\x00\x00\x00\x00%\x00', 0x2) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d6}, 0x24000010) 275.885011ms ago: executing program 4 (id=2589): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000000)={0x0, 0x400fe, 0x1a, 0x5, 0x200, &(0x7f0000000640)="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"}) syz_open_dev$tty1(0xc, 0x4, 0x3) 191.026193ms ago: executing program 2 (id=2590): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='raid1', 0x5) 53.354527ms ago: executing program 1 (id=2591): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @rand_addr=0x640100fd}, 0x10) ptrace(0x10, r0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0xffffffffffffffa8, &(0x7f0000000040)={0x1}) 0s ago: executing program 2 (id=2592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [], {0x14}}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): 61][ T9367] dump_stack_lvl+0xe8/0x150 [ 226.624193][ T9367] should_fail_ex+0x3eb/0x540 [ 226.624219][ T9367] should_failslab+0xa8/0x100 [ 226.624244][ T9367] __kmalloc_cache_noprof+0x9e/0x600 [ 226.624274][ T9367] ? __se_sys_fspick+0x203/0x3c0 [ 226.624293][ T9367] ? __se_sys_fspick+0x203/0x3c0 [ 226.624317][ T9367] __se_sys_fspick+0x203/0x3c0 [ 226.624335][ T9367] ? __pfx___se_sys_fspick+0x10/0x10 [ 226.624370][ T9367] do_syscall_64+0x166/0x520 [ 226.624386][ T9367] ? trace_irq_disable+0x3b/0x140 [ 226.624408][ T9367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.624425][ T9367] ? clear_bhb_loop+0x70/0xc0 [ 226.624444][ T9367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.624460][ T9367] RIP: 0033:0x7fc30c79e159 [ 226.624475][ T9367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.624490][ T9367] RSP: 002b:00007fc30d598028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 226.624508][ T9367] RAX: ffffffffffffffda RBX: 00007fc30ca25fa0 RCX: 00007fc30c79e159 [ 226.624520][ T9367] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 226.624531][ T9367] RBP: 00007fc30c83503b R08: 0000000000000000 R09: 0000000000000000 [ 226.624540][ T9367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.624550][ T9367] R13: 00007fc30ca26038 R14: 00007fc30ca25fa0 R15: 00007ffd784e1d38 [ 226.624577][ T9367] [ 227.093346][ T9372] FAULT_INJECTION: forcing a failure. [ 227.093346][ T9372] name fail_futex, interval 1, probability 0, space 0, times 0 [ 227.093377][ T9372] CPU: 1 UID: 0 PID: 9372 Comm: syz.0.1402 Not tainted syzkaller #0 PREEMPT(full) [ 227.093400][ T9372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.093412][ T9372] Call Trace: [ 227.093420][ T9372] [ 227.093428][ T9372] dump_stack_lvl+0xe8/0x150 [ 227.093457][ T9372] should_fail_ex+0x3eb/0x540 [ 227.093483][ T9372] get_futex_key+0x1b4/0x1580 [ 227.093516][ T9372] ? __pfx_futex_wake_mark+0x10/0x10 [ 227.093545][ T9372] ? __pfx_get_futex_key+0x10/0x10 [ 227.093580][ T9372] futex_wake+0x119/0x5f0 [ 227.093607][ T9372] ? __pfx_futex_wake+0x10/0x10 [ 227.093645][ T9372] do_futex+0x458/0x4e0 [ 227.093670][ T9372] ? __pfx_do_futex+0x10/0x10 [ 227.093698][ T9372] __se_sys_futex+0x3a8/0x450 [ 227.093724][ T9372] ? __fget_files+0x2a/0x420 [ 227.093748][ T9372] ? __pfx___se_sys_futex+0x10/0x10 [ 227.093766][ T9372] ? __fget_files+0x2a/0x420 [ 227.093785][ T9372] ? rcu_is_watching+0x16/0xb0 [ 227.093808][ T9372] ? __x64_sys_futex+0x21/0xf0 [ 227.093831][ T9372] do_syscall_64+0x166/0x520 [ 227.093849][ T9372] ? trace_irq_disable+0x3b/0x140 [ 227.093877][ T9372] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.093898][ T9372] ? clear_bhb_loop+0x70/0xc0 [ 227.093919][ T9372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.093936][ T9372] RIP: 0033:0x7f719f79e159 [ 227.093954][ T9372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.093970][ T9372] RSP: 002b:00007f719d9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 227.093991][ T9372] RAX: ffffffffffffffda RBX: 00007f719fa25fa8 RCX: 00007f719f79e159 [ 227.094006][ T9372] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f719fa25fac [ 227.094020][ T9372] RBP: 00007f719fa25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 227.094034][ T9372] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 227.094047][ T9372] R13: 00007f719fa26038 R14: 00007ffdec2d8720 R15: 00007ffdec2d8808 [ 227.094076][ T9372] [ 228.129972][ T9418] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 228.357949][ T9429] overlayfs: failed to resolve 'xino=auto': -2 [ 228.647124][ T9438] team0: No ports can be present during mode change [ 229.551031][ T9477] process 'syz.2.1448' launched './file1' with NULL argv: empty string added [ 229.600027][ T9479] FAULT_INJECTION: forcing a failure. [ 229.600027][ T9479] name failslab, interval 1, probability 0, space 0, times 0 [ 229.600060][ T9479] CPU: 0 UID: 0 PID: 9479 Comm: syz.4.1449 Not tainted syzkaller #0 PREEMPT(full) [ 229.600084][ T9479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 229.600096][ T9479] Call Trace: [ 229.600104][ T9479] [ 229.600113][ T9479] dump_stack_lvl+0xe8/0x150 [ 229.600146][ T9479] should_fail_ex+0x3eb/0x540 [ 229.600174][ T9479] should_failslab+0xa8/0x100 [ 229.600196][ T9479] ? alloc_empty_file+0x5b/0x1d0 [ 229.600219][ T9479] kmem_cache_alloc_noprof+0x9c/0x600 [ 229.600247][ T9479] ? stack_depot_save_flags+0x33/0x7f0 [ 229.600271][ T9479] ? alloc_empty_file+0x5b/0x1d0 [ 229.600294][ T9479] ? kmem_cache_alloc_noprof+0x151/0x600 [ 229.600323][ T9479] alloc_empty_file+0x5b/0x1d0 [ 229.600347][ T9479] path_openat+0x9d/0x1e40 [ 229.600381][ T9479] ? __lock_acquire+0x747/0x2de0 [ 229.600419][ T9479] do_file_open+0x23e/0x4a0 [ 229.600453][ T9479] ? __pfx_do_file_open+0x10/0x10 [ 229.600501][ T9479] ? _raw_spin_unlock+0x28/0x50 [ 229.600528][ T9479] ? alloc_fd+0x651/0x6c0 [ 229.600560][ T9479] do_sys_openat2+0x115/0x200 [ 229.600584][ T9479] ? __se_sys_futex+0x3a8/0x450 [ 229.600606][ T9479] ? __pfx_do_sys_openat2+0x10/0x10 [ 229.600633][ T9479] ? rcu_is_watching+0x16/0xb0 [ 229.600658][ T9479] __x64_sys_openat+0x138/0x170 [ 229.600694][ T9479] do_syscall_64+0x166/0x520 [ 229.600713][ T9479] ? trace_irq_disable+0x3b/0x140 [ 229.600741][ T9479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.600762][ T9479] ? clear_bhb_loop+0x70/0xc0 [ 229.600787][ T9479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.600807][ T9479] RIP: 0033:0x7fc30c79e159 [ 229.600826][ T9479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.600843][ T9479] RSP: 002b:00007fc30d598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 229.600865][ T9479] RAX: ffffffffffffffda RBX: 00007fc30ca25fa0 RCX: 00007fc30c79e159 [ 229.600880][ T9479] RDX: 0000000000000481 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 229.600894][ T9479] RBP: 00007fc30c83503b R08: 0000000000000000 R09: 0000000000000000 [ 229.600906][ T9479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 229.600918][ T9479] R13: 00007fc30ca26038 R14: 00007fc30ca25fa0 R15: 00007ffd784e1d38 [ 229.600946][ T9479] [ 230.400821][ T9519] overlayfs: upper fs does not support file handles, falling back to index=off. [ 230.406653][ T9519] evm: overlay not supported [ 231.115573][ T9543] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 231.115723][ T9543] block device autoloading is deprecated and will be removed. [ 231.196336][ T9546] FAULT_INJECTION: forcing a failure. [ 231.196336][ T9546] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 231.196367][ T9546] CPU: 0 UID: 0 PID: 9546 Comm: syz.0.1479 Not tainted syzkaller #0 PREEMPT(full) [ 231.196390][ T9546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.196402][ T9546] Call Trace: [ 231.196410][ T9546] [ 231.196419][ T9546] dump_stack_lvl+0xe8/0x150 [ 231.196450][ T9546] should_fail_ex+0x3eb/0x540 [ 231.196479][ T9546] prepare_alloc_pages+0x21e/0x5f0 [ 231.196517][ T9546] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 231.196551][ T9546] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 231.196608][ T9546] alloc_pages_mpol+0x21e/0x390 [ 231.196639][ T9546] alloc_pages_noprof+0xb1/0x2b0 [ 231.196663][ T9546] pte_alloc_one+0x22/0x370 [ 231.196687][ T9546] __pte_alloc+0x25/0x1a0 [ 231.196720][ T9546] do_pte_missing+0x2db7/0x34b0 [ 231.196752][ T9546] ? do_raw_spin_unlock+0xf5/0x200 [ 231.196780][ T9546] ? __pmd_alloc+0x40a/0x5c0 [ 231.196807][ T9546] handle_mm_fault+0x1a53/0x3750 [ 231.196841][ T9546] ? handle_mm_fault+0xf1/0x3750 [ 231.196875][ T9546] ? __pfx_handle_mm_fault+0x10/0x10 [ 231.196916][ T9546] ? lock_mm_and_find_vma+0xa7/0x340 [ 231.196945][ T9546] do_user_addr_fault+0x7f6/0x1480 [ 231.196985][ T9546] exc_page_fault+0x6a/0xc0 [ 231.197015][ T9546] asm_exc_page_fault+0x26/0x30 [ 231.197035][ T9546] RIP: 0010:strncpy_from_user+0xb7/0x2c0 [ 231.197057][ T9546] Code: 00 00 4c 89 f6 e8 c9 e4 a1 fc 49 83 fe 07 0f 86 9d 00 00 00 4c 89 24 24 4c 89 74 24 08 48 c7 c5 f8 ff ff ff 45 31 ff 49 89 dc <4e> 8b 34 3b 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 06 4d 89 f5 49 [ 231.197073][ T9546] RSP: 0018:ffffc9000cfcfe30 EFLAGS: 00050246 [ 231.197092][ T9546] RAX: ffffffff852625e7 RBX: 0000000000000000 RCX: ffff88807857ddc0 [ 231.197106][ T9546] RDX: 0000000000000002 RSI: 00000000000000a8 RDI: 0000000000000007 [ 231.197118][ T9546] RBP: fffffffffffffff8 R08: ffff888077fefdbf R09: 1ffff1100effdfb7 [ 231.197133][ T9546] R10: dffffc0000000000 R11: ffffed100effdfb8 R12: 0000000000000000 [ 231.197147][ T9546] R13: 0000000000000000 R14: 00000000000000a8 R15: 0000000000000000 [ 231.197166][ T9546] ? strncpy_from_user+0x97/0x2c0 [ 231.197198][ T9546] do_getname+0x77/0x250 [ 231.197223][ T9546] __se_sys_linkat+0x3a/0x2d0 [ 231.197248][ T9546] do_syscall_64+0x166/0x520 [ 231.197266][ T9546] ? trace_irq_disable+0x3b/0x140 [ 231.197294][ T9546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.197315][ T9546] ? clear_bhb_loop+0x70/0xc0 [ 231.197340][ T9546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.197359][ T9546] RIP: 0033:0x7f719f79e159 [ 231.197376][ T9546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.197392][ T9546] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000109 [ 231.197412][ T9546] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 231.197426][ T9546] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 231.197437][ T9546] RBP: 00007f719f83503b R08: 0000000000001000 R09: 0000000000000000 [ 231.197450][ T9546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.197462][ T9546] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 231.197491][ T9546] [ 231.794241][ T9566] FAULT_INJECTION: forcing a failure. [ 231.794241][ T9566] name failslab, interval 1, probability 0, space 0, times 0 [ 231.794270][ T9566] CPU: 1 UID: 0 PID: 9566 Comm: syz.2.1488 Not tainted syzkaller #0 PREEMPT(full) [ 231.794291][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 231.794301][ T9566] Call Trace: [ 231.794308][ T9566] [ 231.794317][ T9566] dump_stack_lvl+0xe8/0x150 [ 231.794352][ T9566] should_fail_ex+0x3eb/0x540 [ 231.794378][ T9566] should_failslab+0xa8/0x100 [ 231.794402][ T9566] __kmalloc_noprof+0xf9/0x710 [ 231.794428][ T9566] ? rcu_is_watching+0x16/0xb0 [ 231.794458][ T9566] ? tomoyo_realpath_from_path+0xef/0x640 [ 231.794483][ T9566] ? tomoyo_realpath_from_path+0xef/0x640 [ 231.794516][ T9566] tomoyo_realpath_from_path+0xef/0x640 [ 231.794554][ T9566] tomoyo_check_open_permission+0x229/0x470 [ 231.794577][ T9566] ? tomoyo_check_open_permission+0x1d3/0x470 [ 231.794598][ T9566] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 231.794620][ T9566] ? __asan_memset+0x22/0x50 [ 231.794653][ T9566] ? lockdep_hardirqs_on+0x7b/0x110 [ 231.794705][ T9566] ? tomoyo_file_open+0x163/0x220 [ 231.794731][ T9566] ? devcgroup_check_permission+0x31/0x8f0 [ 231.794763][ T9566] security_file_open+0xa9/0x240 [ 231.794784][ T9566] do_dentry_open+0x495/0x1360 [ 231.794816][ T9566] vfs_open_consume+0x4a/0x350 [ 231.794836][ T9566] ? path_openat+0x14bb/0x1e40 [ 231.794867][ T9566] path_openat+0x14d7/0x1e40 [ 231.794914][ T9566] do_file_open+0x23e/0x4a0 [ 231.794947][ T9566] ? __pfx_do_file_open+0x10/0x10 [ 231.794998][ T9566] ? _raw_spin_unlock+0x28/0x50 [ 231.795023][ T9566] ? alloc_fd+0x651/0x6c0 [ 231.795060][ T9566] do_sys_openat2+0x115/0x200 [ 231.795083][ T9566] ? __se_sys_futex+0x3a8/0x450 [ 231.795105][ T9566] ? __pfx_do_sys_openat2+0x10/0x10 [ 231.795133][ T9566] ? rcu_is_watching+0x16/0xb0 [ 231.795157][ T9566] __x64_sys_openat+0x138/0x170 [ 231.795185][ T9566] do_syscall_64+0x166/0x520 [ 231.795203][ T9566] ? trace_irq_disable+0x3b/0x140 [ 231.795231][ T9566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.795251][ T9566] ? clear_bhb_loop+0x70/0xc0 [ 231.795276][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.795296][ T9566] RIP: 0033:0x7f73add9e159 [ 231.795314][ T9566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 231.795331][ T9566] RSP: 002b:00007f73aece7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 231.795353][ T9566] RAX: ffffffffffffffda RBX: 00007f73ae025fa0 RCX: 00007f73add9e159 [ 231.795367][ T9566] RDX: 0000000000000002 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 231.795381][ T9566] RBP: 00007f73ade3503b R08: 0000000000000000 R09: 0000000000000000 [ 231.795393][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.795405][ T9566] R13: 00007f73ae026038 R14: 00007f73ae025fa0 R15: 00007ffd3d33b298 [ 231.795434][ T9566] [ 231.795459][ T9566] ERROR: Out of memory at tomoyo_realpath_from_path. [ 232.538446][ T9588] FAULT_INJECTION: forcing a failure. [ 232.538446][ T9588] name fail_futex, interval 1, probability 0, space 0, times 0 [ 232.538478][ T9588] CPU: 1 UID: 0 PID: 9588 Comm: syz.4.1496 Not tainted syzkaller #0 PREEMPT(full) [ 232.538502][ T9588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.538515][ T9588] Call Trace: [ 232.538523][ T9588] [ 232.538531][ T9588] dump_stack_lvl+0xe8/0x150 [ 232.538564][ T9588] should_fail_ex+0x3eb/0x540 [ 232.538591][ T9588] get_futex_key+0x1b4/0x1580 [ 232.538635][ T9588] ? __pfx_get_futex_key+0x10/0x10 [ 232.538670][ T9588] ? __pfx_direct_splice_actor+0x10/0x10 [ 232.538697][ T9588] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 232.538731][ T9588] futex_wake+0x119/0x5f0 [ 232.538758][ T9588] ? __pfx_futex_wake+0x10/0x10 [ 232.538783][ T9588] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 232.538822][ T9588] do_futex+0x458/0x4e0 [ 232.538848][ T9588] ? __pfx_do_futex+0x10/0x10 [ 232.538869][ T9588] ? __pfx_do_sendfile+0x10/0x10 [ 232.538897][ T9588] __se_sys_futex+0x3a8/0x450 [ 232.538925][ T9588] ? __pfx___se_sys_futex+0x10/0x10 [ 232.538946][ T9588] ? rcu_is_watching+0x16/0xb0 [ 232.538972][ T9588] ? __x64_sys_futex+0x21/0xf0 [ 232.538996][ T9588] do_syscall_64+0x166/0x520 [ 232.539015][ T9588] ? trace_irq_disable+0x3b/0x140 [ 232.539043][ T9588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.539062][ T9588] ? clear_bhb_loop+0x70/0xc0 [ 232.539140][ T9588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.539161][ T9588] RIP: 0033:0x7fc30c79e159 [ 232.539180][ T9588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.539197][ T9588] RSP: 002b:00007fc30d5980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 232.539220][ T9588] RAX: ffffffffffffffda RBX: 00007fc30ca25fa8 RCX: 00007fc30c79e159 [ 232.539235][ T9588] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc30ca25fac [ 232.539248][ T9588] RBP: 00007fc30ca25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 232.539261][ T9588] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 232.539275][ T9588] R13: 00007fc30ca26038 R14: 00007ffd784e1c50 R15: 00007ffd784e1d38 [ 232.539306][ T9588] [ 232.794314][ T30] audit: type=1326 audit(1789211952.109:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1499" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719f79e159 code=0x7ffc0000 [ 232.795662][ T30] audit: type=1326 audit(1789211952.109:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1499" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719f79e159 code=0x7ffc0000 [ 232.807079][ T30] audit: type=1326 audit(1789211952.119:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1499" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f719f79e159 code=0x7ffc0000 [ 232.807128][ T30] audit: type=1326 audit(1789211952.119:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1499" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719f79e159 code=0x7ffc0000 [ 232.809593][ T30] audit: type=1326 audit(1789211952.119:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1499" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719f79e159 code=0x7ffc0000 [ 232.816461][ T30] audit: type=1326 audit(1789211952.129:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1499" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f719f79e159 code=0x7ffc0000 [ 232.816508][ T30] audit: type=1326 audit(1789211952.129:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1499" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719f79e159 code=0x7ffc0000 [ 232.816546][ T30] audit: type=1326 audit(1789211952.129:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9593 comm="syz.0.1499" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719f79e159 code=0x7ffc0000 [ 234.141857][ T9639] FAULT_INJECTION: forcing a failure. [ 234.141857][ T9639] name failslab, interval 1, probability 0, space 0, times 0 [ 234.141890][ T9639] CPU: 0 UID: 0 PID: 9639 Comm: syz.0.1519 Not tainted syzkaller #0 PREEMPT(full) [ 234.141913][ T9639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 234.141926][ T9639] Call Trace: [ 234.141934][ T9639] [ 234.141943][ T9639] dump_stack_lvl+0xe8/0x150 [ 234.141977][ T9639] should_fail_ex+0x3eb/0x540 [ 234.142004][ T9639] should_failslab+0xa8/0x100 [ 234.142026][ T9639] ? do_getname+0x2e/0x250 [ 234.142048][ T9639] kmem_cache_alloc_noprof+0x9c/0x600 [ 234.142074][ T9639] ? do_futex+0x3e7/0x4e0 [ 234.142095][ T9639] ? do_getname+0x2e/0x250 [ 234.142121][ T9639] do_getname+0x2e/0x250 [ 234.142140][ T9639] ? getname_flags+0x11/0x20 [ 234.142164][ T9639] do_sys_openat2+0xcc/0x200 [ 234.142186][ T9639] ? __se_sys_futex+0x3a8/0x450 [ 234.142208][ T9639] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.142236][ T9639] ? rcu_is_watching+0x16/0xb0 [ 234.142259][ T9639] __x64_sys_openat+0x138/0x170 [ 234.142287][ T9639] do_syscall_64+0x166/0x520 [ 234.142305][ T9639] ? trace_irq_disable+0x3b/0x140 [ 234.142341][ T9639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.142361][ T9639] ? clear_bhb_loop+0x70/0xc0 [ 234.142386][ T9639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.142405][ T9639] RIP: 0033:0x7f719f79e159 [ 234.142423][ T9639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.142439][ T9639] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 234.142459][ T9639] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 234.142474][ T9639] RDX: 0000000000000002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 234.142487][ T9639] RBP: 00007f719f83503b R08: 0000000000000000 R09: 0000000000000000 [ 234.142498][ T9639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.142509][ T9639] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 234.142536][ T9639] [ 235.854618][ T9703] FAULT_INJECTION: forcing a failure. [ 235.854618][ T9703] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 235.854651][ T9703] CPU: 0 UID: 0 PID: 9703 Comm: syz.4.1547 Not tainted syzkaller #0 PREEMPT(full) [ 235.854673][ T9703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 235.854685][ T9703] Call Trace: [ 235.854693][ T9703] [ 235.854701][ T9703] dump_stack_lvl+0xe8/0x150 [ 235.854733][ T9703] should_fail_ex+0x3eb/0x540 [ 235.854761][ T9703] prepare_alloc_pages+0x21e/0x5f0 [ 235.854798][ T9703] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 235.854833][ T9703] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 235.854879][ T9703] __alloc_pages_noprof+0x10/0x100 [ 235.854911][ T9703] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 235.854944][ T9703] ? copy_splice_read+0x16f/0xaa0 [ 235.854967][ T9703] ? copy_splice_read+0x16f/0xaa0 [ 235.854996][ T9703] copy_splice_read+0x19f/0xaa0 [ 235.855024][ T9703] ? __pfx_iter_file_splice_write+0x10/0x10 [ 235.855052][ T9703] ? __pfx_copy_splice_read+0x10/0x10 [ 235.855073][ T9703] ? trace_kmalloc+0x2a/0xf0 [ 235.855101][ T9703] ? register_lock_class+0x31/0x2e0 [ 235.855138][ T9703] ? file_end_write+0xd8/0x220 [ 235.855163][ T9703] ? direct_splice_actor+0x10c/0x160 [ 235.855191][ T9703] ? __pfx_copy_splice_read+0x10/0x10 [ 235.855214][ T9703] splice_direct_to_actor+0x48b/0xcb0 [ 235.855259][ T9703] ? __pfx_direct_splice_actor+0x10/0x10 [ 235.855286][ T9703] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 235.855325][ T9703] do_splice_direct+0x195/0x290 [ 235.855355][ T9703] ? __pfx_do_splice_direct+0x10/0x10 [ 235.855382][ T9703] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 235.855412][ T9703] ? bpf_lsm_file_permission+0x9/0x20 [ 235.855433][ T9703] ? security_file_permission+0x75/0x260 [ 235.855461][ T9703] ? rw_verify_area+0x203/0x4c0 [ 235.855489][ T9703] do_sendfile+0x52e/0x7c0 [ 235.855517][ T9703] ? __pfx_do_sendfile+0x10/0x10 [ 235.855543][ T9703] ? __se_sys_futex+0x3a8/0x450 [ 235.855567][ T9703] __se_sys_sendfile64+0x144/0x1a0 [ 235.855588][ T9703] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 235.855615][ T9703] do_syscall_64+0x166/0x520 [ 235.855634][ T9703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.855653][ T9703] ? clear_bhb_loop+0x70/0xc0 [ 235.855675][ T9703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.855695][ T9703] RIP: 0033:0x7fc30c79e159 [ 235.855714][ T9703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 235.855730][ T9703] RSP: 002b:00007fc30d598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 235.855752][ T9703] RAX: ffffffffffffffda RBX: 00007fc30ca25fa0 RCX: 00007fc30c79e159 [ 235.855766][ T9703] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 235.855778][ T9703] RBP: 00007fc30c83503b R08: 0000000000000000 R09: 0000000000000000 [ 235.855790][ T9703] R10: 0000000000800007 R11: 0000000000000246 R12: 0000000000000000 [ 235.855803][ T9703] R13: 00007fc30ca26038 R14: 00007fc30ca25fa0 R15: 00007ffd784e1d38 [ 235.855833][ T9703] [ 236.682532][ T9736] FAULT_INJECTION: forcing a failure. [ 236.682532][ T9736] name failslab, interval 1, probability 0, space 0, times 0 [ 236.682562][ T9736] CPU: 0 UID: 0 PID: 9736 Comm: syz.2.1558 Not tainted syzkaller #0 PREEMPT(full) [ 236.682586][ T9736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 236.682604][ T9736] Call Trace: [ 236.682612][ T9736] [ 236.682621][ T9736] dump_stack_lvl+0xe8/0x150 [ 236.682653][ T9736] should_fail_ex+0x3eb/0x540 [ 236.682680][ T9736] should_failslab+0xa8/0x100 [ 236.682703][ T9736] __kmalloc_noprof+0xf9/0x710 [ 236.682730][ T9736] ? iter_file_splice_write+0x1ea/0x1240 [ 236.682756][ T9736] ? iter_file_splice_write+0x1ea/0x1240 [ 236.682788][ T9736] iter_file_splice_write+0x1ea/0x1240 [ 236.682814][ T9736] ? lockdep_hardirqs_on+0x7b/0x110 [ 236.682847][ T9736] ? kfree+0x1c5/0x650 [ 236.682870][ T9736] ? copy_splice_read+0x92a/0xaa0 [ 236.682899][ T9736] ? copy_splice_read+0x92a/0xaa0 [ 236.682930][ T9736] ? __pfx_iter_file_splice_write+0x10/0x10 [ 236.682958][ T9736] ? __pfx_copy_splice_read+0x10/0x10 [ 236.682978][ T9736] ? trace_kmalloc+0x2a/0xf0 [ 236.683006][ T9736] ? register_lock_class+0x31/0x2e0 [ 236.683034][ T9736] ? __pfx_iter_file_splice_write+0x10/0x10 [ 236.683061][ T9736] direct_splice_actor+0x101/0x160 [ 236.683092][ T9736] splice_direct_to_actor+0x57b/0xcb0 [ 236.683132][ T9736] ? __pfx_direct_splice_actor+0x10/0x10 [ 236.683157][ T9736] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 236.683191][ T9736] do_splice_direct+0x195/0x290 [ 236.683220][ T9736] ? __pfx_do_splice_direct+0x10/0x10 [ 236.683248][ T9736] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 236.683277][ T9736] ? bpf_lsm_file_permission+0x9/0x20 [ 236.683300][ T9736] ? security_file_permission+0x75/0x260 [ 236.683330][ T9736] ? rw_verify_area+0x203/0x4c0 [ 236.683359][ T9736] do_sendfile+0x52e/0x7c0 [ 236.683385][ T9736] ? __pfx_do_sendfile+0x10/0x10 [ 236.683410][ T9736] ? __se_sys_futex+0x3a8/0x450 [ 236.683443][ T9736] __se_sys_sendfile64+0x144/0x1a0 [ 236.683466][ T9736] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 236.683494][ T9736] do_syscall_64+0x166/0x520 [ 236.683512][ T9736] ? trace_irq_disable+0x3b/0x140 [ 236.683538][ T9736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.683558][ T9736] ? clear_bhb_loop+0x70/0xc0 [ 236.683581][ T9736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.683601][ T9736] RIP: 0033:0x7f73add9e159 [ 236.683620][ T9736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.683637][ T9736] RSP: 002b:00007f73aece7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 236.683658][ T9736] RAX: ffffffffffffffda RBX: 00007f73ae025fa0 RCX: 00007f73add9e159 [ 236.683672][ T9736] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 236.683682][ T9736] RBP: 00007f73ade3503b R08: 0000000000000000 R09: 0000000000000000 [ 236.683695][ T9736] R10: 0000000000800007 R11: 0000000000000246 R12: 0000000000000000 [ 236.683707][ T9736] R13: 00007f73ae026038 R14: 00007f73ae025fa0 R15: 00007ffd3d33b298 [ 236.683737][ T9736] [ 237.515206][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1572'. [ 237.515234][ T9761] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1572'. [ 237.525923][ T9765] FAULT_INJECTION: forcing a failure. [ 237.525923][ T9765] name failslab, interval 1, probability 0, space 0, times 0 [ 237.525953][ T9765] CPU: 0 UID: 0 PID: 9765 Comm: syz.0.1571 Not tainted syzkaller #0 PREEMPT(full) [ 237.525976][ T9765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.525988][ T9765] Call Trace: [ 237.525996][ T9765] [ 237.526004][ T9765] dump_stack_lvl+0xe8/0x150 [ 237.526034][ T9765] should_fail_ex+0x3eb/0x540 [ 237.526061][ T9765] should_failslab+0xa8/0x100 [ 237.526085][ T9765] __kmalloc_noprof+0xf9/0x710 [ 237.526113][ T9765] ? iter_file_splice_write+0x1ea/0x1240 [ 237.526139][ T9765] ? iter_file_splice_write+0x1ea/0x1240 [ 237.526171][ T9765] iter_file_splice_write+0x1ea/0x1240 [ 237.526197][ T9765] ? lockdep_hardirqs_on+0x7b/0x110 [ 237.526227][ T9765] ? kfree+0x1c5/0x650 [ 237.526248][ T9765] ? copy_splice_read+0x92a/0xaa0 [ 237.526274][ T9765] ? copy_splice_read+0x92a/0xaa0 [ 237.526305][ T9765] ? __pfx_iter_file_splice_write+0x10/0x10 [ 237.526334][ T9765] ? __pfx_copy_splice_read+0x10/0x10 [ 237.526364][ T9765] ? trace_kmalloc+0x2a/0xf0 [ 237.526395][ T9765] ? register_lock_class+0x31/0x2e0 [ 237.526426][ T9765] ? __pfx_iter_file_splice_write+0x10/0x10 [ 237.526453][ T9765] direct_splice_actor+0x101/0x160 [ 237.526482][ T9765] splice_direct_to_actor+0x57b/0xcb0 [ 237.526521][ T9765] ? __pfx_direct_splice_actor+0x10/0x10 [ 237.526547][ T9765] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 237.526581][ T9765] do_splice_direct+0x195/0x290 [ 237.526609][ T9765] ? __pfx_do_splice_direct+0x10/0x10 [ 237.526636][ T9765] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 237.526664][ T9765] ? bpf_lsm_file_permission+0x9/0x20 [ 237.526684][ T9765] ? security_file_permission+0x75/0x260 [ 237.526714][ T9765] ? rw_verify_area+0x203/0x4c0 [ 237.526741][ T9765] do_sendfile+0x52e/0x7c0 [ 237.526768][ T9765] ? __pfx_do_sendfile+0x10/0x10 [ 237.526794][ T9765] ? __se_sys_futex+0x3a8/0x450 [ 237.526819][ T9765] __se_sys_sendfile64+0x144/0x1a0 [ 237.526840][ T9765] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 237.526867][ T9765] do_syscall_64+0x166/0x520 [ 237.526885][ T9765] ? trace_irq_disable+0x3b/0x140 [ 237.526912][ T9765] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.526932][ T9765] ? clear_bhb_loop+0x70/0xc0 [ 237.526955][ T9765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.526974][ T9765] RIP: 0033:0x7f719f79e159 [ 237.526994][ T9765] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 237.527010][ T9765] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 237.527030][ T9765] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 237.527045][ T9765] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 237.527056][ T9765] RBP: 00007f719f83503b R08: 0000000000000000 R09: 0000000000000000 [ 237.527068][ T9765] R10: 0000000000800007 R11: 0000000000000246 R12: 0000000000000000 [ 237.527080][ T9765] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 237.527111][ T9765] [ 240.280994][ T9880] FAULT_INJECTION: forcing a failure. [ 240.280994][ T9880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.281026][ T9880] CPU: 1 UID: 0 PID: 9880 Comm: syz.2.1624 Not tainted syzkaller #0 PREEMPT(full) [ 240.281048][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 240.281059][ T9880] Call Trace: [ 240.281066][ T9880] [ 240.281076][ T9880] dump_stack_lvl+0xe8/0x150 [ 240.281108][ T9880] should_fail_ex+0x3eb/0x540 [ 240.281134][ T9880] _copy_from_user+0x2d/0xb0 [ 240.281161][ T9880] do_tcp_getsockopt+0x22c/0x2b50 [ 240.281193][ T9880] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 240.281216][ T9880] ? sock_recv_errqueue+0x570/0x5e0 [ 240.281247][ T9880] ? lock_acquire+0x115/0x350 [ 240.281276][ T9880] ? futex_unqueue+0x22/0x240 [ 240.281296][ T9880] ? begin_current_label_crit_section+0x299/0x830 [ 240.281325][ T9880] ? __pfx_begin_current_label_crit_section+0x10/0x10 [ 240.281348][ T9880] ? futex_unqueue+0x22/0x240 [ 240.281367][ T9880] ? futex_unqueue+0x22/0x240 [ 240.281384][ T9880] ? futex_unqueue+0x22/0x240 [ 240.281410][ T9880] ? aa_inet_opt_perm+0x94d/0xcd0 [ 240.281432][ T9880] ? init_file+0x90/0x2b0 [ 240.281452][ T9880] ? alloc_empty_file+0x74/0x1d0 [ 240.281475][ T9880] ? alloc_file_pseudo+0x110/0x1e0 [ 240.281505][ T9880] ? __lock_acquire+0x747/0x2de0 [ 240.281544][ T9880] ? futex_hash+0x4e/0x2b0 [ 240.281575][ T9880] ? futex_hash+0x4e/0x2b0 [ 240.281604][ T9880] ? futex_hash+0x275/0x2b0 [ 240.281638][ T9880] ? lock_acquire+0x115/0x350 [ 240.281677][ T9880] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 240.281713][ T9880] tcp_getsockopt+0x83/0x130 [ 240.281736][ T9880] ? sock_recv_errqueue+0x570/0x5e0 [ 240.281763][ T9880] ? sock_recv_errqueue+0x570/0x5e0 [ 240.281791][ T9880] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 240.281818][ T9880] do_sock_getsockopt+0x51d/0x7e0 [ 240.281843][ T9880] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 240.281877][ T9880] ? __fget_files+0x3a2/0x420 [ 240.281903][ T9880] ? __fget_files+0x2a/0x420 [ 240.281936][ T9880] __x64_sys_getsockopt+0x1a4/0x240 [ 240.281966][ T9880] do_syscall_64+0x166/0x520 [ 240.281985][ T9880] ? trace_irq_disable+0x3b/0x140 [ 240.282013][ T9880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.282034][ T9880] ? clear_bhb_loop+0x70/0xc0 [ 240.282060][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.282081][ T9880] RIP: 0033:0x7f73add9e159 [ 240.282101][ T9880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.282119][ T9880] RSP: 002b:00007f73aece7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 240.282142][ T9880] RAX: ffffffffffffffda RBX: 00007f73ae025fa0 RCX: 00007f73add9e159 [ 240.282159][ T9880] RDX: 000000000000001e RSI: 0000000000000006 RDI: 0000000000000006 [ 240.282172][ T9880] RBP: 00007f73ade3503b R08: 0000200000000a00 R09: 0000000000000000 [ 240.282186][ T9880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.282198][ T9880] R13: 00007f73ae026038 R14: 00007f73ae025fa0 R15: 00007ffd3d33b298 [ 240.282227][ T9880] [ 241.021422][ T9887] infiniband syz0: set active [ 241.024764][ T9887] infiniband syz0: added veth0_virt_wifi [ 241.069099][ T9887] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 241.069148][ T9887] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 241.069185][ T9887] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 241.166560][ T9887] RDS/IB: syz0: added [ 241.171560][ T9887] smc: adding ib device syz0 with port count 1 [ 241.171700][ T9887] smc: ib device syz0 port 1 has no pnetid [ 242.736059][ T9956] FAULT_INJECTION: forcing a failure. [ 242.736059][ T9956] name failslab, interval 1, probability 0, space 0, times 0 [ 242.736091][ T9956] CPU: 0 UID: 0 PID: 9956 Comm: syz.0.1659 Not tainted syzkaller #0 PREEMPT(full) [ 242.736114][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.736126][ T9956] Call Trace: [ 242.736134][ T9956] [ 242.736143][ T9956] dump_stack_lvl+0xe8/0x150 [ 242.736175][ T9956] should_fail_ex+0x3eb/0x540 [ 242.736203][ T9956] should_failslab+0xa8/0x100 [ 242.736228][ T9956] __kmalloc_cache_noprof+0x9e/0x600 [ 242.736257][ T9956] ? do_eventfd+0x79/0x2a0 [ 242.736284][ T9956] ? do_eventfd+0x79/0x2a0 [ 242.736315][ T9956] do_eventfd+0x79/0x2a0 [ 242.736344][ T9956] __x64_sys_eventfd2+0x5a/0x70 [ 242.736372][ T9956] do_syscall_64+0x166/0x520 [ 242.736395][ T9956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.736416][ T9956] ? clear_bhb_loop+0x70/0xc0 [ 242.736440][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.736460][ T9956] RIP: 0033:0x7f719f79e159 [ 242.736487][ T9956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.736505][ T9956] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 242.736528][ T9956] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 242.736543][ T9956] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 242.736556][ T9956] RBP: 00007f719f83503b R08: 0000000000000000 R09: 0000000000000000 [ 242.736569][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 242.736582][ T9956] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 242.736614][ T9956] [ 243.588175][ T9998] FAULT_INJECTION: forcing a failure. [ 243.588175][ T9998] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.588208][ T9998] CPU: 1 UID: 0 PID: 9998 Comm: syz.0.1679 Not tainted syzkaller #0 PREEMPT(full) [ 243.588233][ T9998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 243.588246][ T9998] Call Trace: [ 243.588255][ T9998] [ 243.588263][ T9998] dump_stack_lvl+0xe8/0x150 [ 243.588297][ T9998] should_fail_ex+0x3eb/0x540 [ 243.588325][ T9998] _copy_from_user+0x2d/0xb0 [ 243.588352][ T9998] __se_sys_openat2+0x14a/0x2d0 [ 243.588379][ T9998] ? __pfx___se_sys_openat2+0x10/0x10 [ 243.588418][ T9998] do_syscall_64+0x166/0x520 [ 243.588436][ T9998] ? trace_irq_disable+0x3b/0x140 [ 243.588465][ T9998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.588486][ T9998] ? clear_bhb_loop+0x70/0xc0 [ 243.588511][ T9998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.588532][ T9998] RIP: 0033:0x7f719f79e159 [ 243.588551][ T9998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.588569][ T9998] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b5 [ 243.588591][ T9998] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 243.588607][ T9998] RDX: 00002000000000c0 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 243.588621][ T9998] RBP: 00007f719f83503b R08: 0000000000000000 R09: 0000000000000000 [ 243.588634][ T9998] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000000 [ 243.588647][ T9998] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 243.588681][ T9998] [ 244.167698][T10021] FAULT_INJECTION: forcing a failure. [ 244.167698][T10021] name failslab, interval 1, probability 0, space 0, times 0 [ 244.167733][T10021] CPU: 1 UID: 0 PID: 10021 Comm: syz.4.1688 Not tainted syzkaller #0 PREEMPT(full) [ 244.167758][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 244.167771][T10021] Call Trace: [ 244.167780][T10021] [ 244.167789][T10021] dump_stack_lvl+0xe8/0x150 [ 244.167843][T10021] should_fail_ex+0x3eb/0x540 [ 244.167872][T10021] should_failslab+0xa8/0x100 [ 244.167895][T10021] ? skb_clone+0x212/0x3a0 [ 244.167919][T10021] kmem_cache_alloc_noprof+0x9c/0x600 [ 244.167957][T10021] ? skb_clone+0x212/0x3a0 [ 244.167986][T10021] skb_clone+0x212/0x3a0 [ 244.168013][T10021] __netlink_deliver_tap+0x413/0x860 [ 244.168050][T10021] ? netlink_deliver_tap+0x2e/0x1b0 [ 244.168077][T10021] netlink_deliver_tap+0x19c/0x1b0 [ 244.168104][T10021] netlink_sendskb+0x68/0x140 [ 244.168129][T10021] ctrl_getfamily+0x4c8/0x5c0 [ 244.168160][T10021] ? __pfx_ctrl_getfamily+0x10/0x10 [ 244.168190][T10021] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 244.168218][T10021] genl_family_rcv_msg_doit+0x233/0x340 [ 244.168257][T10021] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 244.168299][T10021] ? __dev_queue_xmit+0x29b/0x3820 [ 244.168333][T10021] genl_rcv_msg+0x614/0x7a0 [ 244.168366][T10021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.168397][T10021] ? __pfx_ctrl_getfamily+0x10/0x10 [ 244.168434][T10021] ? __asan_memcpy+0x40/0x70 [ 244.168460][T10021] ? __skb_clone+0x5c/0x6c0 [ 244.168490][T10021] netlink_rcv_skb+0x226/0x4a0 [ 244.168517][T10021] ? __pfx_genl_rcv_msg+0x10/0x10 [ 244.168550][T10021] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 244.168591][T10021] ? down_read+0x2b9/0x320 [ 244.168617][T10021] genl_rcv+0x28/0x40 [ 244.168646][T10021] netlink_unicast+0x7bd/0x940 [ 244.168680][T10021] netlink_sendmsg+0x7c3/0xae0 [ 244.168713][T10021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.168748][T10021] ? apparmor_socket_sendmsg+0x98/0x360 [ 244.168772][T10021] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.168797][T10021] sock_sendmsg_nosec+0x13a/0x180 [ 244.168828][T10021] __sys_sendto+0x408/0x5a0 [ 244.168855][T10021] ? __pfx___sys_sendto+0x10/0x10 [ 244.168904][T10021] ? rcu_is_watching+0x16/0xb0 [ 244.168938][T10021] __x64_sys_sendto+0xde/0x100 [ 244.168963][T10021] do_syscall_64+0x166/0x520 [ 244.168982][T10021] ? trace_irq_disable+0x3b/0x140 [ 244.169011][T10021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.169032][T10021] ? clear_bhb_loop+0x70/0xc0 [ 244.169059][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.169079][T10021] RIP: 0033:0x7fc30c75e98e [ 244.169100][T10021] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 244.169117][T10021] RSP: 002b:00007fc30d596e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 244.169140][T10021] RAX: ffffffffffffffda RBX: 00007fc30d5986c0 RCX: 00007fc30c75e98e [ 244.169155][T10021] RDX: 0000000000000020 RSI: 00007fc30d597000 RDI: 0000000000000005 [ 244.169168][T10021] RBP: 0000000000000000 R08: 00007fc30d596f04 R09: 000000000000000c [ 244.169182][T10021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 244.169194][T10021] R13: 00007fc30d596f58 R14: 00007fc30d597000 R15: 0000000000000000 [ 244.169226][T10021] [ 244.561018][T10029] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 245.743621][T10071] loop7: detected capacity change from 0 to 7 [ 245.773446][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.773650][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.791220][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.791301][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.807948][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.808017][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.819378][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.819453][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.819628][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.819683][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.819836][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.819890][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.820143][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.820250][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.820347][T10071] ldm_validate_partition_table(): Disk read failed. [ 245.820606][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.820664][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.820814][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.820868][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.821023][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 245.821090][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 245.821283][T10071] Dev loop7: unable to read RDB block 0 [ 245.826046][T10071] loop7: unable to read partition table [ 245.826247][T10071] loop7: partition table beyond EOD, truncated [ 245.826277][T10071] loop_reread_partitions: partition scan of loop7 (úùƒå¡™jÌ–ãßÔ 8½?ã}X‹%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQýŠ5) failed (rc=-5) [ 246.283417][T10081] sock: sock_set_timeout: `syz.2.1716' (pid 10081) tries to set negative timeout [ 247.269270][T10120] FAULT_INJECTION: forcing a failure. [ 247.269270][T10120] name failslab, interval 1, probability 0, space 0, times 0 [ 247.269302][T10120] CPU: 1 UID: 0 PID: 10120 Comm: syz.4.1734 Not tainted syzkaller #0 PREEMPT(full) [ 247.269326][T10120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.269339][T10120] Call Trace: [ 247.269346][T10120] [ 247.269355][T10120] dump_stack_lvl+0xe8/0x150 [ 247.269388][T10120] should_fail_ex+0x3eb/0x540 [ 247.269416][T10120] should_failslab+0xa8/0x100 [ 247.269440][T10120] __kmalloc_noprof+0xf9/0x710 [ 247.269469][T10120] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 247.269500][T10120] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 247.269537][T10120] __memcg_list_lru_alloc+0x1d9/0x760 [ 247.269573][T10120] ? xa_load+0x60/0x210 [ 247.269603][T10120] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 247.269651][T10120] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 247.269685][T10120] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 247.269731][T10120] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 247.269760][T10120] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 247.269787][T10120] ? proc_alloc_inode+0x2a/0xc0 [ 247.269816][T10120] ? proc_alloc_inode+0x2a/0xc0 [ 247.269854][T10120] ? __pfx_proc_alloc_inode+0x10/0x10 [ 247.269881][T10120] proc_alloc_inode+0x2a/0xc0 [ 247.269910][T10120] alloc_inode+0x6a/0x1b0 [ 247.269934][T10120] new_inode+0x1f/0x170 [ 247.269956][T10120] ? proc_get_inode+0x1a/0x6a0 [ 247.269978][T10120] proc_get_inode+0x22/0x6a0 [ 247.269995][T10120] ? proc_fill_super+0x525/0x760 [ 247.270019][T10120] proc_fill_super+0x53e/0x760 [ 247.270041][T10120] ? __pfx_proc_fill_super+0x10/0x10 [ 247.270064][T10120] get_tree_nodev+0xbb/0x150 [ 247.270094][T10120] vfs_get_tree+0x92/0x2a0 [ 247.270119][T10120] vfs_cmd_create+0xa2/0x200 [ 247.270143][T10120] __se_sys_fsconfig+0x6b9/0x810 [ 247.270172][T10120] ? __pfx___se_sys_fsconfig+0x10/0x10 [ 247.270196][T10120] ? rcu_is_watching+0x16/0xb0 [ 247.270225][T10120] ? __x64_sys_fsconfig+0x20/0xc0 [ 247.270249][T10120] do_syscall_64+0x166/0x520 [ 247.270267][T10120] ? trace_irq_disable+0x3b/0x140 [ 247.270295][T10120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.270317][T10120] ? clear_bhb_loop+0x70/0xc0 [ 247.270343][T10120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.270363][T10120] RIP: 0033:0x7fc30c79e159 [ 247.270382][T10120] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.270401][T10120] RSP: 002b:00007fc30d598028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 247.270429][T10120] RAX: ffffffffffffffda RBX: 00007fc30ca25fa0 RCX: 00007fc30c79e159 [ 247.270445][T10120] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 247.270458][T10120] RBP: 00007fc30c83503b R08: 0000000000000000 R09: 0000000000000000 [ 247.270472][T10120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.270484][T10120] R13: 00007fc30ca26038 R14: 00007fc30ca25fa0 R15: 00007ffd784e1d38 [ 247.270517][T10120] [ 247.277646][T10120] proc_fill_super: get root inode failed [ 248.535896][T10156] FAULT_INJECTION: forcing a failure. [ 248.535896][T10156] name failslab, interval 1, probability 0, space 0, times 0 [ 248.535928][T10156] CPU: 1 UID: 0 PID: 10156 Comm: syz.0.1751 Not tainted syzkaller #0 PREEMPT(full) [ 248.535953][T10156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.535966][T10156] Call Trace: [ 248.535974][T10156] [ 248.535984][T10156] dump_stack_lvl+0xe8/0x150 [ 248.536025][T10156] should_fail_ex+0x3eb/0x540 [ 248.536053][T10156] should_failslab+0xa8/0x100 [ 248.536079][T10156] __kmalloc_noprof+0xf9/0x710 [ 248.536106][T10156] ? rcu_is_watching+0x16/0xb0 [ 248.536128][T10156] ? tomoyo_realpath_from_path+0xef/0x640 [ 248.536154][T10156] ? tomoyo_realpath_from_path+0xef/0x640 [ 248.536186][T10156] tomoyo_realpath_from_path+0xef/0x640 [ 248.536220][T10156] ? tomoyo_path_number_perm+0x219/0x5f0 [ 248.536242][T10156] tomoyo_path_number_perm+0x246/0x5f0 [ 248.536266][T10156] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 248.536288][T10156] ? __lock_acquire+0x747/0x2de0 [ 248.536319][T10156] ? __seccomp_filter+0xafb/0x1de0 [ 248.536350][T10156] ? hook_file_ioctl+0x1f2/0x600 [ 248.536392][T10156] ? __fget_files+0x2a/0x420 [ 248.536420][T10156] ? __fget_files+0x2a/0x420 [ 248.536444][T10156] ? __fget_files+0x3a2/0x420 [ 248.536468][T10156] ? __fget_files+0x2a/0x420 [ 248.536499][T10156] security_file_ioctl+0xc3/0x2a0 [ 248.536528][T10156] __se_sys_ioctl+0x47/0x170 [ 248.536560][T10156] do_syscall_64+0x166/0x520 [ 248.536577][T10156] ? trace_irq_disable+0x3b/0x140 [ 248.536605][T10156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.536625][T10156] ? clear_bhb_loop+0x70/0xc0 [ 248.536649][T10156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.536671][T10156] RIP: 0033:0x7f719f79e159 [ 248.536692][T10156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.536710][T10156] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.536731][T10156] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 248.536745][T10156] RDX: 0000200000000040 RSI: 00000000c0184800 RDI: 0000000000000003 [ 248.536759][T10156] RBP: 00007f719f83503b R08: 0000000000000000 R09: 0000000000000000 [ 248.536772][T10156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.536785][T10156] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 248.536819][T10156] [ 248.536855][T10156] ERROR: Out of memory at tomoyo_realpath_from_path. [ 249.285044][T10183] syzkaller0: entered promiscuous mode [ 249.285070][T10183] syzkaller0: entered allmulticast mode [ 250.414382][T10220] device-mapper: ioctl: Invalid ioctl structure: name myp, dev f801 [ 254.105115][ T30] audit: type=1326 audit(1789211973.419:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.2.1815" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 254.105421][ T30] audit: type=1326 audit(1789211973.419:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.2.1815" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 254.106632][ T30] audit: type=1326 audit(1789211973.419:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.2.1815" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 254.186789][ T30] audit: type=1326 audit(1789211973.499:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.2.1815" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 254.213056][ T30] audit: type=1326 audit(1789211973.529:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.2.1815" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 254.213266][ T30] audit: type=1326 audit(1789211973.529:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10308 comm="syz.2.1815" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 255.471214][T10344] FAULT_INJECTION: forcing a failure. [ 255.471214][T10344] name failslab, interval 1, probability 0, space 0, times 0 [ 255.471244][T10344] CPU: 1 UID: 0 PID: 10344 Comm: syz.4.1829 Not tainted syzkaller #0 PREEMPT(full) [ 255.471266][T10344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 255.471279][T10344] Call Trace: [ 255.471287][T10344] [ 255.471296][T10344] dump_stack_lvl+0xe8/0x150 [ 255.471328][T10344] should_fail_ex+0x3eb/0x540 [ 255.471355][T10344] should_failslab+0xa8/0x100 [ 255.471377][T10344] ? security_inode_alloc+0x39/0x310 [ 255.471401][T10344] kmem_cache_alloc_noprof+0x9c/0x600 [ 255.471431][T10344] ? __pfx_make_kgid+0x10/0x10 [ 255.471455][T10344] ? security_inode_alloc+0x39/0x310 [ 255.471485][T10344] security_inode_alloc+0x39/0x310 [ 255.471512][T10344] inode_init_always_gfp+0x97e/0xd30 [ 255.471542][T10344] ? __pfx_sock_alloc_inode+0x10/0x10 [ 255.471568][T10344] alloc_inode+0x82/0x1b0 [ 255.471590][T10344] do_accept+0x13e/0x730 [ 255.471624][T10344] ? __pfx_do_accept+0x10/0x10 [ 255.471671][T10344] __sys_accept4+0x139/0x230 [ 255.471702][T10344] ? __pfx___sys_accept4+0x10/0x10 [ 255.471744][T10344] __x64_sys_accept+0x7d/0x90 [ 255.471777][T10344] do_syscall_64+0x166/0x520 [ 255.471797][T10344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.471817][T10344] ? clear_bhb_loop+0x70/0xc0 [ 255.471842][T10344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.471862][T10344] RIP: 0033:0x7fc30c79e159 [ 255.471892][T10344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.471913][T10344] RSP: 002b:00007fc30d598028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 255.471937][T10344] RAX: ffffffffffffffda RBX: 00007fc30ca25fa0 RCX: 00007fc30c79e159 [ 255.471952][T10344] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 255.471965][T10344] RBP: 00007fc30c83503b R08: 0000000000000000 R09: 0000000000000000 [ 255.471979][T10344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.471992][T10344] R13: 00007fc30ca26038 R14: 00007fc30ca25fa0 R15: 00007ffd784e1d38 [ 255.472023][T10344] [ 255.769245][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.769303][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.101026][T10390] sctp: [Deprecated]: syz.0.1850 (pid 10390) Use of int in max_burst socket option deprecated. [ 257.101026][T10390] Use struct sctp_assoc_value instead [ 257.196117][T10394] FAULT_INJECTION: forcing a failure. [ 257.196117][T10394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.196149][T10394] CPU: 0 UID: 0 PID: 10394 Comm: syz.0.1852 Not tainted syzkaller #0 PREEMPT(full) [ 257.196173][T10394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.196207][T10394] Call Trace: [ 257.196216][T10394] [ 257.196225][T10394] dump_stack_lvl+0xe8/0x150 [ 257.196260][T10394] should_fail_ex+0x3eb/0x540 [ 257.196288][T10394] prepare_alloc_pages+0x21e/0x5f0 [ 257.196326][T10394] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 257.196362][T10394] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 257.196393][T10394] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 257.196426][T10394] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 257.196469][T10394] __alloc_pages_noprof+0x10/0x100 [ 257.196501][T10394] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 257.196539][T10394] ? alloc_pages_noprof+0x140/0x2b0 [ 257.196567][T10394] __kasan_populate_vmalloc+0xb7/0x1c0 [ 257.196604][T10394] alloc_vmap_area+0xd10/0x1410 [ 257.196643][T10394] ? __pfx_alloc_vmap_area+0x10/0x10 [ 257.196665][T10394] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 257.196703][T10394] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 257.196731][T10394] ? __get_vm_area_node+0x155/0x2f0 [ 257.196762][T10394] __get_vm_area_node+0x200/0x2f0 [ 257.196797][T10394] __vmalloc_node_range_noprof+0x340/0x1690 [ 257.196825][T10394] ? copy_process+0x81b/0x43e0 [ 257.196878][T10394] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.196905][T10394] ? dup_task_struct+0x52/0xa00 [ 257.196925][T10394] ? trace_kmem_cache_alloc+0x29/0xe0 [ 257.196948][T10394] ? memcpy_and_pad+0x48/0x80 [ 257.196978][T10394] __vmalloc_node_noprof+0xc2/0x100 [ 257.197002][T10394] ? copy_process+0x81b/0x43e0 [ 257.197019][T10394] ? copy_process+0x81b/0x43e0 [ 257.197040][T10394] dup_task_struct+0x2c6/0xa00 [ 257.197069][T10394] copy_process+0x81b/0x43e0 [ 257.197112][T10394] ? rcu_is_watching+0x16/0xb0 [ 257.197135][T10394] ? __pfx_copy_process+0x10/0x10 [ 257.197165][T10394] ? mutex_init_lockdep+0xdf/0x110 [ 257.197188][T10394] vhost_task_create+0x1f9/0x380 [ 257.197216][T10394] ? __pfx_vhost_run_work_list+0x10/0x10 [ 257.197239][T10394] ? __pfx_vhost_worker_killed+0x10/0x10 [ 257.197260][T10394] ? __pfx_vhost_task_create+0x10/0x10 [ 257.197291][T10394] ? __pfx_vhost_task_fn+0x10/0x10 [ 257.197332][T10394] ? snprintf+0xe8/0x140 [ 257.197361][T10394] vhost_task_worker_create+0x94/0x290 [ 257.197386][T10394] ? __pfx_snprintf+0x10/0x10 [ 257.197411][T10394] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 257.197441][T10394] ? mutex_init_lockdep+0xdf/0x110 [ 257.197465][T10394] vhost_worker_create+0x245/0x310 [ 257.197495][T10394] ? trace_kmalloc+0x2a/0xf0 [ 257.197525][T10394] ? __pfx_vhost_worker_create+0x10/0x10 [ 257.197557][T10394] ? __kmalloc_noprof+0x1a6/0x710 [ 257.197584][T10394] ? vhost_dev_set_owner+0x316/0xb00 [ 257.197622][T10394] vhost_dev_set_owner+0x716/0xb00 [ 257.197668][T10394] vhost_net_ioctl+0x8fd/0x17d0 [ 257.197705][T10394] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 257.197731][T10394] ? __fget_files+0x2a/0x420 [ 257.197761][T10394] ? __fget_files+0x2a/0x420 [ 257.197785][T10394] ? __fget_files+0x3a2/0x420 [ 257.197810][T10394] ? __fget_files+0x2a/0x420 [ 257.197839][T10394] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.197864][T10394] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 257.197885][T10394] __se_sys_ioctl+0xfc/0x170 [ 257.197919][T10394] do_syscall_64+0x166/0x520 [ 257.197937][T10394] ? trace_irq_disable+0x3b/0x140 [ 257.197966][T10394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.197987][T10394] ? clear_bhb_loop+0x70/0xc0 [ 257.198012][T10394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.198033][T10394] RIP: 0033:0x7f719f79e159 [ 257.198052][T10394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.198071][T10394] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.198095][T10394] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 257.198110][T10394] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000004 [ 257.198124][T10394] RBP: 00007f719f83503b R08: 0000000000000000 R09: 0000000000000000 [ 257.198138][T10394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.198150][T10394] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 257.198183][T10394] [ 257.318819][T10394] syz.0.1852: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 257.319035][T10394] CPU: 0 UID: 0 PID: 10394 Comm: syz.0.1852 Not tainted syzkaller #0 PREEMPT(full) [ 257.319060][T10394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.319074][T10394] Call Trace: [ 257.319082][T10394] [ 257.319091][T10394] dump_stack_lvl+0xe8/0x150 [ 257.319129][T10394] warn_alloc+0x24d/0x270 [ 257.319161][T10394] ? lockdep_hardirqs_on+0x7b/0x110 [ 257.319253][T10394] ? __pfx_warn_alloc+0x10/0x10 [ 257.319282][T10394] ? kfree+0x1c5/0x650 [ 257.319313][T10394] ? __get_vm_area_node+0x219/0x2f0 [ 257.319347][T10394] __vmalloc_node_range_noprof+0x368/0x1690 [ 257.319410][T10394] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.319435][T10394] ? dup_task_struct+0x52/0xa00 [ 257.319454][T10394] ? trace_kmem_cache_alloc+0x29/0xe0 [ 257.319480][T10394] ? memcpy_and_pad+0x48/0x80 [ 257.319512][T10394] __vmalloc_node_noprof+0xc2/0x100 [ 257.319538][T10394] ? copy_process+0x81b/0x43e0 [ 257.319556][T10394] ? copy_process+0x81b/0x43e0 [ 257.319579][T10394] dup_task_struct+0x2c6/0xa00 [ 257.319613][T10394] copy_process+0x81b/0x43e0 [ 257.319658][T10394] ? rcu_is_watching+0x16/0xb0 [ 257.319681][T10394] ? __pfx_copy_process+0x10/0x10 [ 257.319708][T10394] ? mutex_init_lockdep+0xdf/0x110 [ 257.319731][T10394] vhost_task_create+0x1f9/0x380 [ 257.319760][T10394] ? __pfx_vhost_run_work_list+0x10/0x10 [ 257.319782][T10394] ? __pfx_vhost_worker_killed+0x10/0x10 [ 257.319804][T10394] ? __pfx_vhost_task_create+0x10/0x10 [ 257.319838][T10394] ? __pfx_vhost_task_fn+0x10/0x10 [ 257.319874][T10394] ? snprintf+0xe8/0x140 [ 257.319903][T10394] vhost_task_worker_create+0x94/0x290 [ 257.319927][T10394] ? __pfx_snprintf+0x10/0x10 [ 257.319952][T10394] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 257.319982][T10394] ? mutex_init_lockdep+0xdf/0x110 [ 257.320006][T10394] vhost_worker_create+0x245/0x310 [ 257.320035][T10394] ? trace_kmalloc+0x2a/0xf0 [ 257.320063][T10394] ? __pfx_vhost_worker_create+0x10/0x10 [ 257.320095][T10394] ? __kmalloc_noprof+0x1a6/0x710 [ 257.320121][T10394] ? vhost_dev_set_owner+0x316/0xb00 [ 257.320158][T10394] vhost_dev_set_owner+0x716/0xb00 [ 257.320217][T10394] vhost_net_ioctl+0x8fd/0x17d0 [ 257.320247][T10394] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 257.320271][T10394] ? __fget_files+0x2a/0x420 [ 257.320301][T10394] ? __fget_files+0x2a/0x420 [ 257.320324][T10394] ? __fget_files+0x3a2/0x420 [ 257.320348][T10394] ? __fget_files+0x2a/0x420 [ 257.320375][T10394] ? bpf_lsm_file_ioctl+0x9/0x20 [ 257.320400][T10394] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 257.320420][T10394] __se_sys_ioctl+0xfc/0x170 [ 257.320454][T10394] do_syscall_64+0x166/0x520 [ 257.320471][T10394] ? trace_irq_disable+0x3b/0x140 [ 257.320499][T10394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.320521][T10394] ? clear_bhb_loop+0x70/0xc0 [ 257.320543][T10394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.320563][T10394] RIP: 0033:0x7f719f79e159 [ 257.320583][T10394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.320600][T10394] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.320623][T10394] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 257.320639][T10394] RDX: 0000000000000000 RSI: 000040000000af01 RDI: 0000000000000004 [ 257.320653][T10394] RBP: 00007f719f83503b R08: 0000000000000000 R09: 0000000000000000 [ 257.320666][T10394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.320678][T10394] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 257.320710][T10394] [ 257.373870][T10398] FAULT_INJECTION: forcing a failure. [ 257.373870][T10398] name fail_futex, interval 1, probability 0, space 0, times 0 [ 257.373901][T10398] CPU: 1 UID: 0 PID: 10398 Comm: syz.2.1853 Not tainted syzkaller #0 PREEMPT(full) [ 257.373924][T10398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 257.373938][T10398] Call Trace: [ 257.373946][T10398] [ 257.373955][T10398] dump_stack_lvl+0xe8/0x150 [ 257.373986][T10398] should_fail_ex+0x3eb/0x540 [ 257.374014][T10398] get_futex_key+0x1b4/0x1580 [ 257.374046][T10398] ? __lock_acquire+0x747/0x2de0 [ 257.374079][T10398] ? kasan_save_track+0x3e/0x80 [ 257.374108][T10398] ? __kasan_slab_free+0x5c/0x80 [ 257.374127][T10398] ? kmem_cache_free+0x182/0x650 [ 257.374158][T10398] ? __pfx_get_futex_key+0x10/0x10 [ 257.374199][T10398] futex_wake+0x119/0x5f0 [ 257.374229][T10398] ? __pfx_futex_wake+0x10/0x10 [ 257.374269][T10398] do_futex+0x458/0x4e0 [ 257.374295][T10398] ? __pfx_do_futex+0x10/0x10 [ 257.374314][T10398] ? kmem_cache_free+0x182/0x650 [ 257.374351][T10398] __se_sys_futex+0x3a8/0x450 [ 257.374379][T10398] ? __pfx___se_sys_futex+0x10/0x10 [ 257.374400][T10398] ? rcu_is_watching+0x16/0xb0 [ 257.374426][T10398] ? __x64_sys_futex+0x21/0xf0 [ 257.374450][T10398] do_syscall_64+0x166/0x520 [ 257.374470][T10398] ? trace_irq_disable+0x3b/0x140 [ 257.374497][T10398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.374517][T10398] ? clear_bhb_loop+0x70/0xc0 [ 257.374544][T10398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.374565][T10398] RIP: 0033:0x7f73add9e159 [ 257.374583][T10398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 257.374600][T10398] RSP: 002b:00007f73aece70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 257.374621][T10398] RAX: ffffffffffffffda RBX: 00007f73ae025fa8 RCX: 00007f73add9e159 [ 257.374636][T10398] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f73ae025fac [ 257.374649][T10398] RBP: 00007f73ae025fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 257.374662][T10398] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 257.374683][T10398] R13: 00007f73ae026038 R14: 00007ffd3d33b1b0 R15: 00007ffd3d33b298 [ 257.374713][T10398] [ 257.386502][T10394] Mem-Info: [ 257.386518][T10394] active_anon:25150 inactive_anon:0 isolated_anon:0 [ 257.386518][T10394] active_file:33 inactive_file:18972 isolated_file:0 [ 257.386518][T10394] unevictable:0 dirty:71 writeback:0 [ 257.386518][T10394] slab_reclaimable:10537 slab_unreclaimable:94871 [ 257.386518][T10394] mapped:27486 shmem:19851 pagetables:1327 [ 257.386518][T10394] sec_pagetables:0 bounce:0 [ 257.386518][T10394] kernel_misc_reclaimable:0 [ 257.386518][T10394] free:1340771 free_pcp:12359 free_cma:0 [ 257.386577][T10394] Node 0 active_anon:100600kB inactive_anon:0kB active_file:132kB inactive_file:75748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:109944kB dirty:280kB writeback:0kB shmem:79404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12004kB pagetables:5192kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 257.386635][T10394] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:116kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 257.386693][T10394] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.386754][T10394] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 257.386790][T10394] Node 0 DMA32 free:1414436kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:100600kB inactive_anon:0kB active_file:132kB inactive_file:75748kB unevictable:0kB writepending:280kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:49432kB local_pcp:31500kB free_cma:0kB [ 257.386852][T10394] lowmem_reserve[]: 0 0 1 1 1 [ 257.386886][T10394] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 257.387036][T10394] lowmem_reserve[]: 0 0 0 0 0 [ 257.387071][T10394] Node 1 Normal free:3933288kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:140kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 257.387132][T10394] lowmem_reserve[]: 0 0 0 0 0 [ 257.387188][T10394] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 257.387334][T10394] Node 0 DMA32: 297*4kB (UE) 37*8kB (ME) 26*16kB (E) 9*32kB (UE) 4*64kB (UE) 150*128kB (UME) 242*256kB (UM) 199*512kB (UM) 84*1024kB (UME) 28*2048kB (UME) 265*4096kB (UM) = 1414284kB [ 257.387491][T10394] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 257.387586][T10394] Node 1 Normal: 4*4kB (UM) 3*8kB (UM) 6*16kB (UM) 15*32kB (UM) 8*64kB (UM) 6*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 958*4096kB (M) = 3933288kB [ 257.387744][T10394] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.387761][T10394] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.387777][T10394] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 257.387794][T10394] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 257.387810][T10394] 38849 total pagecache pages [ 257.387821][T10394] 0 pages in swap cache [ 257.387828][T10394] Free swap = 124996kB [ 257.387835][T10394] Total swap = 124996kB [ 257.387843][T10394] 2097051 pages RAM [ 257.387850][T10394] 0 pages HighMem/MovableOnly [ 257.387857][T10394] 429554 pages reserved [ 257.387863][T10394] 0 pages cma reserved [ 258.708559][T10426] FAULT_INJECTION: forcing a failure. [ 258.708559][T10426] name failslab, interval 1, probability 0, space 0, times 0 [ 258.708595][T10426] CPU: 1 UID: 0 PID: 10426 Comm: syz.4.1866 Not tainted syzkaller #0 PREEMPT(full) [ 258.708619][T10426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 258.708633][T10426] Call Trace: [ 258.708641][T10426] [ 258.708650][T10426] dump_stack_lvl+0xe8/0x150 [ 258.708684][T10426] should_fail_ex+0x3eb/0x540 [ 258.708712][T10426] should_failslab+0xa8/0x100 [ 258.708733][T10426] ? do_getname+0x2e/0x250 [ 258.708756][T10426] kmem_cache_alloc_noprof+0x9c/0x600 [ 258.708784][T10426] ? do_futex+0x3e7/0x4e0 [ 258.708807][T10426] ? do_getname+0x2e/0x250 [ 258.708834][T10426] do_getname+0x2e/0x250 [ 258.708854][T10426] ? getname_flags+0x11/0x20 [ 258.708879][T10426] do_sys_openat2+0xcc/0x200 [ 258.708902][T10426] ? __se_sys_futex+0x3a8/0x450 [ 258.708925][T10426] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.708953][T10426] ? rcu_is_watching+0x16/0xb0 [ 258.708979][T10426] __x64_sys_openat+0x138/0x170 [ 258.709006][T10426] do_syscall_64+0x166/0x520 [ 258.709025][T10426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.709046][T10426] ? clear_bhb_loop+0x70/0xc0 [ 258.709071][T10426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.709092][T10426] RIP: 0033:0x7fc30c79e159 [ 258.709118][T10426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.709136][T10426] RSP: 002b:00007fc30d598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 258.709160][T10426] RAX: ffffffffffffffda RBX: 00007fc30ca25fa0 RCX: 00007fc30c79e159 [ 258.709176][T10426] RDX: 0000000000103902 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 258.709191][T10426] RBP: 00007fc30c83503b R08: 0000000000000000 R09: 0000000000000000 [ 258.709204][T10426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.709217][T10426] R13: 00007fc30ca26038 R14: 00007fc30ca25fa0 R15: 00007ffd784e1d38 [ 258.709249][T10426] [ 259.208444][T10451] FAULT_INJECTION: forcing a failure. [ 259.208444][T10451] name failslab, interval 1, probability 0, space 0, times 0 [ 259.208477][T10451] CPU: 0 UID: 0 PID: 10451 Comm: syz.2.1878 Not tainted syzkaller #0 PREEMPT(full) [ 259.208500][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.208514][T10451] Call Trace: [ 259.208522][T10451] [ 259.208531][T10451] dump_stack_lvl+0xe8/0x150 [ 259.208562][T10451] should_fail_ex+0x3eb/0x540 [ 259.208590][T10451] should_failslab+0xa8/0x100 [ 259.208612][T10451] ? do_getname+0x2e/0x250 [ 259.208635][T10451] kmem_cache_alloc_noprof+0x9c/0x600 [ 259.208659][T10451] ? do_futex+0x3e7/0x4e0 [ 259.208680][T10451] ? do_getname+0x2e/0x250 [ 259.208712][T10451] do_getname+0x2e/0x250 [ 259.208732][T10451] ? getname_flags+0x11/0x20 [ 259.208756][T10451] do_sys_openat2+0xcc/0x200 [ 259.208778][T10451] ? __se_sys_futex+0x3a8/0x450 [ 259.208801][T10451] ? __pfx_do_sys_openat2+0x10/0x10 [ 259.208827][T10451] ? rcu_is_watching+0x16/0xb0 [ 259.208849][T10451] __x64_sys_openat+0x138/0x170 [ 259.208876][T10451] do_syscall_64+0x166/0x520 [ 259.208894][T10451] ? trace_irq_disable+0x3b/0x140 [ 259.208921][T10451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.208941][T10451] ? clear_bhb_loop+0x70/0xc0 [ 259.208966][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.208985][T10451] RIP: 0033:0x7f73add9e159 [ 259.209004][T10451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 259.209021][T10451] RSP: 002b:00007f73aece7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 259.209044][T10451] RAX: ffffffffffffffda RBX: 00007f73ae025fa0 RCX: 00007f73add9e159 [ 259.209059][T10451] RDX: 0000000000103902 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 259.209073][T10451] RBP: 00007f73ade3503b R08: 0000000000000000 R09: 0000000000000000 [ 259.209086][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.209098][T10451] R13: 00007f73ae026038 R14: 00007f73ae025fa0 R15: 00007ffd3d33b298 [ 259.209129][T10451] [ 260.205993][T10483] FAULT_INJECTION: forcing a failure. [ 260.205993][T10483] name failslab, interval 1, probability 0, space 0, times 0 [ 260.206034][T10483] CPU: 1 UID: 0 PID: 10483 Comm: syz.0.1891 Not tainted syzkaller #0 PREEMPT(full) [ 260.206056][T10483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.206069][T10483] Call Trace: [ 260.206077][T10483] [ 260.206086][T10483] dump_stack_lvl+0xe8/0x150 [ 260.206119][T10483] should_fail_ex+0x3eb/0x540 [ 260.206147][T10483] should_failslab+0xa8/0x100 [ 260.206170][T10483] ? do_getname+0x2e/0x250 [ 260.206192][T10483] kmem_cache_alloc_noprof+0x9c/0x600 [ 260.206219][T10483] ? do_futex+0x3e7/0x4e0 [ 260.206241][T10483] ? do_getname+0x2e/0x250 [ 260.206268][T10483] do_getname+0x2e/0x250 [ 260.206288][T10483] ? getname_flags+0x11/0x20 [ 260.206312][T10483] do_sys_openat2+0xcc/0x200 [ 260.206335][T10483] ? __se_sys_futex+0x3a8/0x450 [ 260.206357][T10483] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.206385][T10483] ? rcu_is_watching+0x16/0xb0 [ 260.206409][T10483] __x64_sys_openat+0x138/0x170 [ 260.206437][T10483] do_syscall_64+0x166/0x520 [ 260.206456][T10483] ? trace_irq_disable+0x3b/0x140 [ 260.206483][T10483] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.206504][T10483] ? clear_bhb_loop+0x70/0xc0 [ 260.206524][T10483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.206545][T10483] RIP: 0033:0x7f719f79e159 [ 260.206564][T10483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.206582][T10483] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.206604][T10483] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 260.206619][T10483] RDX: 0000000000103902 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 260.206633][T10483] RBP: 00007f719f83503b R08: 0000000000000000 R09: 0000000000000000 [ 260.206645][T10483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.206657][T10483] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 260.206686][T10483] [ 260.732025][T10506] FAULT_INJECTION: forcing a failure. [ 260.732025][T10506] name failslab, interval 1, probability 0, space 0, times 0 [ 260.732056][T10506] CPU: 0 UID: 0 PID: 10506 Comm: syz.4.1902 Not tainted syzkaller #0 PREEMPT(full) [ 260.732080][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.732093][T10506] Call Trace: [ 260.732101][T10506] [ 260.732110][T10506] dump_stack_lvl+0xe8/0x150 [ 260.732142][T10506] should_fail_ex+0x3eb/0x540 [ 260.732170][T10506] should_failslab+0xa8/0x100 [ 260.732192][T10506] ? do_getname+0x2e/0x250 [ 260.732214][T10506] kmem_cache_alloc_noprof+0x9c/0x600 [ 260.732243][T10506] ? do_futex+0x3e7/0x4e0 [ 260.732265][T10506] ? do_getname+0x2e/0x250 [ 260.732292][T10506] do_getname+0x2e/0x250 [ 260.732313][T10506] ? getname_flags+0x11/0x20 [ 260.732337][T10506] do_sys_openat2+0xcc/0x200 [ 260.732360][T10506] ? __se_sys_futex+0x3a8/0x450 [ 260.732383][T10506] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.732410][T10506] ? rcu_is_watching+0x16/0xb0 [ 260.732435][T10506] __x64_sys_openat+0x138/0x170 [ 260.732469][T10506] do_syscall_64+0x166/0x520 [ 260.732489][T10506] ? trace_irq_disable+0x3b/0x140 [ 260.732518][T10506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.732538][T10506] ? clear_bhb_loop+0x70/0xc0 [ 260.732563][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.732583][T10506] RIP: 0033:0x7fc30c79e159 [ 260.732601][T10506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.732618][T10506] RSP: 002b:00007fc30d598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 260.732639][T10506] RAX: ffffffffffffffda RBX: 00007fc30ca25fa0 RCX: 00007fc30c79e159 [ 260.732654][T10506] RDX: 0000000000103902 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 260.732668][T10506] RBP: 00007fc30c83503b R08: 0000000000000000 R09: 0000000000000000 [ 260.732682][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.732694][T10506] R13: 00007fc30ca26038 R14: 00007fc30ca25fa0 R15: 00007ffd784e1d38 [ 260.732725][T10506] [ 262.091349][T10565] FAULT_INJECTION: forcing a failure. [ 262.091349][T10565] name fail_futex, interval 1, probability 0, space 0, times 0 [ 262.091381][T10565] CPU: 1 UID: 60929 PID: 10565 Comm: syz.4.1929 Not tainted syzkaller #0 PREEMPT(full) [ 262.091413][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.091425][T10565] Call Trace: [ 262.091433][T10565] [ 262.091441][T10565] dump_stack_lvl+0xe8/0x150 [ 262.091473][T10565] should_fail_ex+0x3eb/0x540 [ 262.091500][T10565] get_futex_key+0x1b4/0x1580 [ 262.091535][T10565] ? __mutex_trylock_common+0x15f/0x270 [ 262.091563][T10565] ? __pfx_get_futex_key+0x10/0x10 [ 262.091591][T10565] ? alloc_ucounts+0xaa/0x4b0 [ 262.091616][T10565] ? set_cred_ucounts+0x10d/0x1c0 [ 262.091644][T10565] ? __sys_setuid+0x2b2/0x560 [ 262.091664][T10565] ? do_syscall_64+0x166/0x520 [ 262.091682][T10565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.091712][T10565] futex_wake+0x119/0x5f0 [ 262.091737][T10565] ? __lock_acquire+0x747/0x2de0 [ 262.091770][T10565] ? __pfx_futex_wake+0x10/0x10 [ 262.091804][T10565] ? proc_id_connector+0x194/0x670 [ 262.091829][T10565] do_futex+0x458/0x4e0 [ 262.091849][T10565] ? lock_acquire+0x115/0x350 [ 262.091880][T10565] ? __pfx_do_futex+0x10/0x10 [ 262.091900][T10565] ? dec_rlimit_ucounts+0x15a/0x180 [ 262.091933][T10565] __se_sys_futex+0x3a8/0x450 [ 262.091961][T10565] ? __pfx___se_sys_futex+0x10/0x10 [ 262.091991][T10565] ? __x64_sys_futex+0x21/0xf0 [ 262.092016][T10565] do_syscall_64+0x166/0x520 [ 262.092033][T10565] ? trace_irq_disable+0x3b/0x140 [ 262.092061][T10565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.092081][T10565] ? clear_bhb_loop+0x70/0xc0 [ 262.092105][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.092125][T10565] RIP: 0033:0x7fc30c79e159 [ 262.092144][T10565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.092161][T10565] RSP: 002b:00007fc30d5980e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 262.092187][T10565] RAX: ffffffffffffffda RBX: 00007fc30ca25fa8 RCX: 00007fc30c79e159 [ 262.092202][T10565] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc30ca25fac [ 262.092215][T10565] RBP: 00007fc30ca25fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 262.092229][T10565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.092242][T10565] R13: 00007fc30ca26038 R14: 00007ffd784e1c50 R15: 00007ffd784e1d38 [ 262.092269][T10565] [ 262.500538][T10576] FAULT_INJECTION: forcing a failure. [ 262.500538][T10576] name failslab, interval 1, probability 0, space 0, times 0 [ 262.500573][T10576] CPU: 1 UID: 0 PID: 10576 Comm: syz.4.1934 Not tainted syzkaller #0 PREEMPT(full) [ 262.500597][T10576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 262.500611][T10576] Call Trace: [ 262.500619][T10576] [ 262.500628][T10576] dump_stack_lvl+0xe8/0x150 [ 262.500662][T10576] should_fail_ex+0x3eb/0x540 [ 262.500690][T10576] should_failslab+0xa8/0x100 [ 262.500713][T10576] ? do_getname+0x2e/0x250 [ 262.500735][T10576] kmem_cache_alloc_noprof+0x9c/0x600 [ 262.500764][T10576] ? do_futex+0x3e7/0x4e0 [ 262.500785][T10576] ? do_getname+0x2e/0x250 [ 262.500813][T10576] do_getname+0x2e/0x250 [ 262.500833][T10576] ? getname_flags+0x11/0x20 [ 262.500856][T10576] do_sys_openat2+0xcc/0x200 [ 262.500878][T10576] ? __se_sys_futex+0x3a8/0x450 [ 262.500901][T10576] ? __pfx_do_sys_openat2+0x10/0x10 [ 262.500929][T10576] ? rcu_is_watching+0x16/0xb0 [ 262.500953][T10576] __x64_sys_openat+0x138/0x170 [ 262.500981][T10576] do_syscall_64+0x166/0x520 [ 262.501001][T10576] ? trace_irq_disable+0x3b/0x140 [ 262.501029][T10576] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.501051][T10576] ? clear_bhb_loop+0x70/0xc0 [ 262.501075][T10576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.501096][T10576] RIP: 0033:0x7fc30c79e159 [ 262.501116][T10576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.501133][T10576] RSP: 002b:00007fc30d598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 262.501156][T10576] RAX: ffffffffffffffda RBX: 00007fc30ca25fa0 RCX: 00007fc30c79e159 [ 262.501172][T10576] RDX: 0000000000103902 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 262.501186][T10576] RBP: 00007fc30c83503b R08: 0000000000000000 R09: 0000000000000000 [ 262.501199][T10576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.501212][T10576] R13: 00007fc30ca26038 R14: 00007fc30ca25fa0 R15: 00007ffd784e1d38 [ 262.501243][T10576] [ 263.289222][T10605] FAULT_INJECTION: forcing a failure. [ 263.289222][T10605] name failslab, interval 1, probability 0, space 0, times 0 [ 263.289252][T10605] CPU: 1 UID: 0 PID: 10605 Comm: syz.0.1945 Not tainted syzkaller #0 PREEMPT(full) [ 263.289265][T10605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.289272][T10605] Call Trace: [ 263.289277][T10605] [ 263.289282][T10605] dump_stack_lvl+0xe8/0x150 [ 263.289309][T10605] should_fail_ex+0x3eb/0x540 [ 263.289325][T10605] should_failslab+0xa8/0x100 [ 263.289338][T10605] ? do_getname+0x2e/0x250 [ 263.289350][T10605] kmem_cache_alloc_noprof+0x9c/0x600 [ 263.289366][T10605] ? do_futex+0x3e7/0x4e0 [ 263.289378][T10605] ? do_getname+0x2e/0x250 [ 263.289393][T10605] do_getname+0x2e/0x250 [ 263.289403][T10605] ? getname_flags+0x11/0x20 [ 263.289416][T10605] do_sys_openat2+0xcc/0x200 [ 263.289429][T10605] ? __se_sys_futex+0x3a8/0x450 [ 263.289444][T10605] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.289456][T10605] ? ksys_write+0x242/0x270 [ 263.289470][T10605] ? __pfx___se_sys_futex+0x10/0x10 [ 263.289482][T10605] ? __pfx_ksys_write+0x10/0x10 [ 263.289498][T10605] __x64_sys_openat+0x138/0x170 [ 263.289512][T10605] do_syscall_64+0x166/0x520 [ 263.289523][T10605] ? trace_irq_disable+0x3b/0x140 [ 263.289549][T10605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.289570][T10605] ? clear_bhb_loop+0x70/0xc0 [ 263.289592][T10605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.289613][T10605] RIP: 0033:0x7f719f79e159 [ 263.289627][T10605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.289637][T10605] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.289649][T10605] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 263.289657][T10605] RDX: 0000000000103902 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 263.289664][T10605] RBP: 00007f719f83503b R08: 0000000000000000 R09: 0000000000000000 [ 263.289671][T10605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.289678][T10605] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 263.289694][T10605] [ 263.842199][T10628] futex_wake_op: syz.1.1956 tries to shift op by 144; fix this program [ 263.989141][ T30] audit: type=1326 audit(1789211983.309:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.2.1959" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 263.989380][ T30] audit: type=1326 audit(1789211983.309:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.2.1959" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 263.989505][ T30] audit: type=1326 audit(1789211983.309:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.2.1959" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 263.989802][ T30] audit: type=1326 audit(1789211983.309:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.2.1959" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 263.989936][ T30] audit: type=1326 audit(1789211983.309:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.2.1959" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 263.992513][ T30] audit: type=1326 audit(1789211983.309:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.2.1959" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 263.993033][ T30] audit: type=1326 audit(1789211983.309:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.2.1959" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 263.993234][ T30] audit: type=1326 audit(1789211983.309:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.2.1959" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 263.993539][ T30] audit: type=1326 audit(1789211983.309:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.2.1959" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 263.994098][ T30] audit: type=1326 audit(1789211983.309:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10633 comm="syz.2.1959" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73add9e159 code=0x7ffc0000 [ 264.609118][T10643] FAULT_INJECTION: forcing a failure. [ 264.609118][T10643] name failslab, interval 1, probability 0, space 0, times 0 [ 264.609149][T10643] CPU: 1 UID: 0 PID: 10643 Comm: syz.0.1963 Not tainted syzkaller #0 PREEMPT(full) [ 264.609169][T10643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 264.609181][T10643] Call Trace: [ 264.609189][T10643] [ 264.609198][T10643] dump_stack_lvl+0xe8/0x150 [ 264.609231][T10643] should_fail_ex+0x3eb/0x540 [ 264.609259][T10643] should_failslab+0xa8/0x100 [ 264.609280][T10643] ? do_getname+0x2e/0x250 [ 264.609297][T10643] kmem_cache_alloc_noprof+0x9c/0x600 [ 264.609313][T10643] ? do_futex+0x3e7/0x4e0 [ 264.609325][T10643] ? do_getname+0x2e/0x250 [ 264.609339][T10643] do_getname+0x2e/0x250 [ 264.609349][T10643] ? getname_flags+0x11/0x20 [ 264.609362][T10643] do_sys_openat2+0xcc/0x200 [ 264.609374][T10643] ? __se_sys_futex+0x3a8/0x450 [ 264.609386][T10643] ? __pfx_do_sys_openat2+0x10/0x10 [ 264.609399][T10643] ? ksys_write+0x242/0x270 [ 264.609413][T10643] ? __pfx___se_sys_futex+0x10/0x10 [ 264.609425][T10643] ? __pfx_ksys_write+0x10/0x10 [ 264.609441][T10643] __x64_sys_openat+0x138/0x170 [ 264.609455][T10643] do_syscall_64+0x166/0x520 [ 264.609466][T10643] ? trace_irq_disable+0x3b/0x140 [ 264.609482][T10643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.609494][T10643] ? clear_bhb_loop+0x70/0xc0 [ 264.609507][T10643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.609518][T10643] RIP: 0033:0x7f719f79e159 [ 264.609529][T10643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.609539][T10643] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 264.609551][T10643] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 264.609559][T10643] RDX: 0000000000103902 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 264.609567][T10643] RBP: 00007f719f83503b R08: 0000000000000000 R09: 0000000000000000 [ 264.609574][T10643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 264.609580][T10643] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 264.609598][T10643] PÚÿÿÿ-A~Ï$[ 265.081616][T10661] FAULT_INJECTION: forcing a failure. [ 265.081616][T10661] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.081646][T10661] CPU: 0 UID: 0 PID: 10661 Comm: syz.2.1972 Not tainted syzkaller #0 PREEMPT(full) [ 265.081667][T10661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 265.081679][T10661] Call Trace: [ 265.081687][T10661] [ 265.081696][T10661] dump_stack_lvl+0xe8/0x150 [ 265.081727][T10661] should_fail_ex+0x3eb/0x540 [ 265.081754][T10661] strncpy_from_user+0x36/0x2c0 [ 265.081780][T10661] do_getname+0x77/0x250 [ 265.081805][T10661] do_sys_openat2+0xcc/0x200 [ 265.081829][T10661] ? __se_sys_futex+0x3a8/0x450 [ 265.081853][T10661] ? __pfx_do_sys_openat2+0x10/0x10 [ 265.081882][T10661] ? rcu_is_watching+0x16/0xb0 [ 265.081907][T10661] __x64_sys_openat+0x138/0x170 [ 265.081935][T10661] do_syscall_64+0x166/0x520 [ 265.081955][T10661] ? trace_irq_disable+0x3b/0x140 [ 265.081982][T10661] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.082003][T10661] ? clear_bhb_loop+0x70/0xc0 [ 265.082028][T10661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.082049][T10661] RIP: 0033:0x7f73add9e159 [ 265.082067][T10661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.082085][T10661] RSP: 002b:00007f73aece7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 265.082107][T10661] RAX: ffffffffffffffda RBX: 00007f73ae025fa0 RCX: 00007f73add9e159 [ 265.082123][T10661] RDX: 0000000000103902 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 265.082138][T10661] RBP: 00007f73ade3503b R08: 0000000000000000 R09: 0000000000000000 [ 265.082152][T10661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.082164][T10661] R13: 00007f73ae026038 R14: 00007f73ae025fa0 R15: 00007ffd3d33b298 [ 265.082198][T10661] [ 268.970563][T10766] netlink: 'syz.1.2017': attribute type 4 has an invalid length. [ 269.620783][T10781] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 271.830964][T10841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2049'. [ 271.830992][T10841] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2049'. [ 272.433115][T10867] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 272.433247][T10867] overlayfs: failed to clone lowerpath [ 272.696622][T10877] futex_wake_op: syz.2.2066 tries to shift op by 144; fix this program [ 273.006617][T10888] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 273.006641][T10888] syzkaller1: group set to 0 [ 273.247148][T10898] FAULT_INJECTION: forcing a failure. [ 273.247148][T10898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.247181][T10898] CPU: 0 UID: 0 PID: 10898 Comm: syz.0.2075 Not tainted syzkaller #0 PREEMPT(full) [ 273.247205][T10898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 273.247218][T10898] Call Trace: [ 273.247226][T10898] [ 273.247235][T10898] dump_stack_lvl+0xe8/0x150 [ 273.247266][T10898] should_fail_ex+0x3eb/0x540 [ 273.247294][T10898] _copy_from_user+0x2d/0xb0 [ 273.247322][T10898] memdup_user+0x5e/0xd0 [ 273.247352][T10898] strndup_user+0x68/0xd0 [ 273.247384][T10898] __se_sys_request_key+0x1c4/0x350 [ 273.247416][T10898] ? __pfx___se_sys_request_key+0x10/0x10 [ 273.247456][T10898] do_syscall_64+0x166/0x520 [ 273.247475][T10898] ? trace_irq_disable+0x3b/0x140 [ 273.247503][T10898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.247524][T10898] ? clear_bhb_loop+0x70/0xc0 [ 273.247548][T10898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.247568][T10898] RIP: 0033:0x7f719f79e159 [ 273.247583][T10898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.247600][T10898] RSP: 002b:00007f719d9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 273.247623][T10898] RAX: ffffffffffffffda RBX: 00007f719fa25fa0 RCX: 00007f719f79e159 [ 273.247638][T10898] RDX: 0000200000000800 RSI: 00002000000007c0 RDI: 0000200000000780 [ 273.247652][T10898] RBP: 00007f719f83503b R08: 0000000000000000 R09: 0000000000000000 [ 273.247665][T10898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.247677][T10898] R13: 00007f719fa26038 R14: 00007f719fa25fa0 R15: 00007ffdec2d8808 [ 273.247704][T10898] [ 273.590754][T10908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2079'. [ 273.591902][T10908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2079'. [ 273.592887][T10908] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2079'. [ 274.888266][T10946] netlink: 'syz.2.2092': attribute type 3 has an invalid length. [ 274.888290][T10946] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2092'. [ 277.761309][T11019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2122'. [ 277.763945][T11019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2122'. [ 277.764425][T11019] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2122'. [ 277.891838][T11028] netlink: 'syz.2.2124': attribute type 10 has an invalid length. [ 277.893618][T11028] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 278.065476][T11034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2128'. [ 278.081650][T11034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2128'. [ 278.087763][T11034] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2128'. [ 278.410104][T11049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2133'. [ 278.415400][T11049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2133'. [ 278.416202][T11049] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2133'. [ 278.600082][T11063] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2147'. [ 280.551019][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 280.551038][ T30] audit: type=1326 audit(1789211999.869:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.4.2174" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 280.551082][ T30] audit: type=1326 audit(1789211999.869:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.4.2174" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 280.554581][ T30] audit: type=1326 audit(1789211999.869:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.4.2174" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 280.554627][ T30] audit: type=1326 audit(1789211999.869:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.4.2174" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 280.554818][ T30] audit: type=1326 audit(1789211999.869:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.4.2174" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 280.555013][ T30] audit: type=1326 audit(1789211999.869:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.4.2174" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 280.555608][ T30] audit: type=1326 audit(1789211999.869:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.4.2174" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 280.556779][ T30] audit: type=1326 audit(1789211999.869:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.4.2174" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 280.556821][ T30] audit: type=1326 audit(1789211999.869:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.4.2174" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 280.670189][ T30] audit: type=1326 audit(1789211999.989:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11148 comm="syz.4.2174" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 283.305157][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 283.311708][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 283.317768][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 283.330507][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 283.338531][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 283.950081][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.290344][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.428140][ T13] team0: Port device netdevsim1 removed [ 284.429315][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.634589][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.192039][ T13] bridge_slave_1: left allmulticast mode [ 285.192067][ T13] bridge_slave_1: left promiscuous mode [ 285.192303][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.225101][ T13] bridge_slave_0: left allmulticast mode [ 285.225128][ T13] bridge_slave_0: left promiscuous mode [ 285.225357][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.447856][ T8146] Bluetooth: hci2: command tx timeout [ 285.632421][T11311] sctp: [Deprecated]: syz.2.2232 (pid 11311) Use of int in max_burst socket option deprecated. [ 285.632421][T11311] Use struct sctp_assoc_value instead [ 285.765897][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.807155][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.813331][ T13] bond0 (unregistering): Released all slaves [ 286.479407][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 287.231173][ T13] hsr_slave_0: left promiscuous mode [ 287.248904][ T13] hsr_slave_1: left promiscuous mode [ 287.249817][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.249838][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.255476][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.255497][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.305257][ T13] veth1_macvtap: left promiscuous mode [ 287.305297][ T13] veth0_macvtap: left promiscuous mode [ 287.305394][ T13] veth1_vlan: left promiscuous mode [ 287.305452][ T13] veth0_vlan: left promiscuous mode [ 287.527163][ T8146] Bluetooth: hci2: command tx timeout [ 288.128803][ T13] team0 (unregistering): Port device team_slave_1 removed [ 288.146367][ T13] team0 (unregistering): Port device team_slave_0 removed [ 288.564527][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 288.603056][T11249] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.613398][T11249] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.613641][T11249] bridge_slave_0: entered allmulticast mode [ 288.624528][T11249] bridge_slave_0: entered promiscuous mode [ 288.637698][T11249] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.637795][T11249] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.637933][T11249] bridge_slave_1: entered allmulticast mode [ 288.644796][T11249] bridge_slave_1: entered promiscuous mode [ 288.814112][T11249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.825251][T11249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.990446][T11249] team0: Port device team_slave_0 added [ 289.001624][T11249] team0: Port device team_slave_1 added [ 289.132435][T11249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.132455][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.132481][T11249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.143599][T11249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.143617][T11249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.143643][T11249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.174156][ T13] IPVS: stop unused estimator thread 0... [ 289.432836][T11249] hsr_slave_0: entered promiscuous mode [ 289.439760][T11249] hsr_slave_1: entered promiscuous mode [ 289.443915][T11249] debugfs: 'hsr0' already exists in 'hsr' [ 289.444795][T11249] Cannot create hsr debugfs directory [ 289.618741][ T8146] Bluetooth: hci2: command tx timeout [ 289.700894][ T5278] 8021q: adding VLAN 0 to HW filter on device eth7 [ 290.854468][T11249] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.866823][T11249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 290.870055][T11249] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.891283][T11249] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.894672][T11249] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.910468][T11249] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.913387][T11249] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.939714][T11249] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 291.252128][T11249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.333204][T11249] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.358397][ T1095] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.359789][ T1095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.406156][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.406284][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.687344][ T8146] Bluetooth: hci2: command tx timeout [ 292.622911][T11249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 292.724186][T11249] veth0_vlan: entered promiscuous mode [ 292.772620][T11249] veth1_vlan: entered promiscuous mode [ 292.906016][T11249] veth0_macvtap: entered promiscuous mode [ 292.924761][T11249] veth1_macvtap: entered promiscuous mode [ 293.010554][T11249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.033227][T11249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.168650][ T1095] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.169077][ T1095] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.169980][ T1095] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.170019][ T1095] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.397677][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.397699][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.512079][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.512101][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.687272][ T8146] Bluetooth: hci4: command 0x0406 tx timeout [ 294.137253][ T8146] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.139838][ T8146] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.141536][ T8146] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.152539][ T8146] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.167150][ T8146] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.247168][ T52] Bluetooth: hci0: command tx timeout [ 296.519001][T11587] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.519237][T11587] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.519372][T11587] bridge_slave_0: entered allmulticast mode [ 296.521084][T11587] bridge_slave_0: entered promiscuous mode [ 296.552984][T11587] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.553150][T11587] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.553287][T11587] bridge_slave_1: entered allmulticast mode [ 296.555196][T11587] bridge_slave_1: entered promiscuous mode [ 296.640960][T11587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.644966][T11587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.645008][ T30] kauditd_printk_skb: 73 callbacks suppressed [ 296.645022][ T30] audit: type=1326 audit(1789212015.959:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.4.2305" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 296.645139][ T30] audit: type=1326 audit(1789212015.959:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.4.2305" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 296.656608][ T30] audit: type=1326 audit(1789212015.969:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.4.2305" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 296.656655][ T30] audit: type=1326 audit(1789212015.969:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.4.2305" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 296.666009][ T30] audit: type=1326 audit(1789212015.969:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.4.2305" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 296.666059][ T30] audit: type=1326 audit(1789212015.969:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.4.2305" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 296.666098][ T30] audit: type=1326 audit(1789212015.969:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.4.2305" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 296.666139][ T30] audit: type=1326 audit(1789212015.969:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.4.2305" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 296.666178][ T30] audit: type=1326 audit(1789212015.969:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11667 comm="syz.4.2305" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fc30c79e159 code=0x7ffc0000 [ 296.749308][T11587] team0: Port device team_slave_0 added [ 296.769066][T11587] team0: Port device team_slave_1 added [ 296.879094][T11587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.879116][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.879166][T11587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.882565][T11587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.882581][T11587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 296.882607][T11587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.062213][T11587] hsr_slave_0: entered promiscuous mode [ 297.063488][T11587] hsr_slave_1: entered promiscuous mode [ 297.067647][T11587] debugfs: 'hsr0' already exists in 'hsr' [ 297.067667][T11587] Cannot create hsr debugfs directory [ 297.464160][T11587] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.538457][T11587] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.628838][T11587] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.815378][T11587] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.192998][T11587] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 298.197538][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 298.198911][T11587] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 298.209759][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 298.211413][T11587] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 298.237225][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 298.240452][T11587] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 298.251628][T11587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 298.331000][ T52] Bluetooth: hci0: command tx timeout [ 298.479200][T11587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.532872][T11587] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.548945][ T3792] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.549036][ T3792] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.559559][ T3792] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.559656][ T3792] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.547795][T11587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.674954][T11587] veth0_vlan: entered promiscuous mode [ 299.696431][T11587] veth1_vlan: entered promiscuous mode [ 299.774505][T11587] veth0_macvtap: entered promiscuous mode [ 299.800849][T11587] veth1_macvtap: entered promiscuous mode [ 299.829911][T11587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.841527][T11587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.892703][ T3792] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.892748][ T3792] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.892781][ T3792] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.892812][ T3792] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.036738][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.036759][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.111122][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.111143][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.416988][ T52] Bluetooth: hci0: command tx timeout [ 302.487645][ T52] Bluetooth: hci0: command tx timeout [ 304.310128][T11859] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 304.571204][T11868] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 304.823266][T11882] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 305.064224][T11882] md/raid1:md0: active with 1 out of 1 mirrors [ 305.661792][T11915] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 305.965834][T11930] faux_driver vgem: [drm] Unknown color mode 265; guessing buffer size. [ 306.003092][T11931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 306.185313][T11941] netlink: 'syz.4.2397': attribute type 1 has an invalid length. [ 306.185334][T11941] __nla_validate_parse: 5 callbacks suppressed [ 306.185345][T11941] netlink: 228 bytes leftover after parsing attributes in process `syz.4.2397'. [ 306.337048][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 306.467246][ T9] usb 3-1: device descriptor read/64, error -71 [ 306.707112][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 306.837044][ T9] usb 3-1: device descriptor read/64, error -71 [ 306.947331][ T9] usb usb3-port1: attempt power cycle [ 307.287374][ T9] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 307.308578][ T9] usb 3-1: device descriptor read/8, error -71 [ 307.431021][T11970] usb usb1: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 307.431039][T11970] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 307.547224][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 307.575733][ T9] usb 3-1: device descriptor read/8, error -71 [ 307.679087][ T9] usb usb3-port1: unable to enumerate USB device [ 308.937094][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 309.106326][T12015] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2425'. [ 309.112277][ T9] usb 1-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 309.114761][ T9] usb 1-1: config 1 has an invalid interface number: 3 but max is 0 [ 309.114786][ T9] usb 1-1: config 1 has no interface number 0 [ 309.117246][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.117269][ T9] usb 1-1: Product: syz [ 309.117283][ T9] usb 1-1: Manufacturer: syz [ 309.117296][ T9] usb 1-1: SerialNumber: syz [ 309.171191][ T9] usb 1-1: 3:1 : does not exist [ 309.171216][ T9] usb 1-1: 3:2 : does not exist [ 309.782795][T12038] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2436'. [ 309.944826][ T9] usb 1-1: USB disconnect, device number 3 [ 310.679419][T12063] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2445'. [ 311.456589][T12084] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 311.634283][T12084] md: md0: raid1 would not accept array [ 312.320947][T12116] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 312.320976][T12116] rust_binder: Read failure Err(EFAULT) in pid:136 [ 312.324637][T12116] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 312.375345][T12116] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 312.375363][T12116] rust_binder: Read failure Err(EFAULT) in pid:136 [ 312.388862][T12116] rust_binder: 12115:12116 got transaction with invalid offset [ 312.388990][T12116] rust_binder: Failure in copy_transaction_data: EINVAL [ 312.389037][T12116] rust_binder: 12115:12116 transaction call to 12115:0 failed EINVAL, code 0 size 112-24 [ 312.390601][ T1217] rust_binder: 12115: undelivered TRANSACTION_ERROR: 29201 [ 312.442192][T12116] syz.0.2467 (12116) used greatest stack depth: 11936 bytes left [ 314.505467][T12181] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 315.697046][ T43] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 315.777496][ T8146] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.782705][ T8146] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.783410][ T8146] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.785960][ T8146] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.786521][ T8146] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.847728][ T43] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 315.848843][ T43] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 315.848867][ T43] usb 5-1: config 1 has no interface number 0 [ 315.851125][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.851149][ T43] usb 5-1: Product: syz [ 315.851163][ T43] usb 5-1: Manufacturer: syz [ 315.851177][ T43] usb 5-1: SerialNumber: syz [ 315.922435][ T43] usb 5-1: 3:1 : does not exist [ 315.922459][ T43] usb 5-1: 3:2 : does not exist [ 316.088846][T11934] bridge0: port 3(syz_tun) entered disabled state [ 316.176126][T11934] syz_tun (unregistering): left allmulticast mode [ 316.176159][T11934] syz_tun (unregistering): left promiscuous mode [ 316.176271][T11934] bridge0: port 3(syz_tun) entered disabled state [ 316.400012][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.483550][T12253] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 316.580482][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.682219][T12253] md: md0: raid1 would not accept array [ 316.684628][T12255] md: could not open device unknown-block(1,0). [ 316.725253][ T13] team0: Port device netdevsim1 removed [ 316.734094][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.894955][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.173615][ T13] bridge_slave_1: left allmulticast mode [ 317.173642][ T13] bridge_slave_1: left promiscuous mode [ 317.173844][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.198392][ T13] bridge_slave_0: left allmulticast mode [ 317.198420][ T13] bridge_slave_0: left promiscuous mode [ 317.198621][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.215326][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.215384][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.752770][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.770985][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.788058][ T13] bond0 (unregistering): Released all slaves [ 317.849568][ T52] Bluetooth: hci3: command tx timeout [ 318.529643][ T5278] 8021q: adding VLAN 0 to HW filter on device eth5 [ 318.748780][ T13] hsr_slave_0: left promiscuous mode [ 318.752125][ T13] hsr_slave_1: left promiscuous mode [ 318.755143][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.755165][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 318.778037][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.778060][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.820507][ T13] veth1_macvtap: left promiscuous mode [ 318.820544][ T13] veth0_macvtap: left promiscuous mode [ 318.820659][ T13] veth1_vlan: left promiscuous mode [ 318.820717][ T13] veth0_vlan: left promiscuous mode [ 319.308381][ T13] team0 (unregistering): Port device team_slave_1 removed [ 319.325951][ T13] team0 (unregistering): Port device team_slave_0 removed [ 319.450078][ T5278] 8021q: adding VLAN 0 to HW filter on device eth6 [ 319.509110][T12234] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.509214][T12234] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.509403][T12234] bridge_slave_0: entered allmulticast mode [ 319.512725][T12234] bridge_slave_0: entered promiscuous mode [ 319.540577][T12234] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.540682][T12234] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.540815][T12234] bridge_slave_1: entered allmulticast mode [ 319.543501][T12234] bridge_slave_1: entered promiscuous mode [ 319.592915][T12234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.596254][T12234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.652823][T12234] team0: Port device team_slave_0 added [ 319.664205][T12234] team0: Port device team_slave_1 added [ 319.706333][T12234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.706369][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.706390][T12234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.754430][T12234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.754447][T12234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.754475][T12234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.928112][ T52] Bluetooth: hci3: command tx timeout [ 319.935973][T12234] hsr_slave_0: entered promiscuous mode [ 319.952795][T12234] hsr_slave_1: entered promiscuous mode [ 321.018298][T12234] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.023115][T12234] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.024284][T12234] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.030236][T12234] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.031344][T12234] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.071694][T12234] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.073440][T12234] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.079959][T12234] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 321.209417][T12234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 321.230829][T12234] 8021q: adding VLAN 0 to HW filter on device team0 [ 321.238198][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.238314][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 321.247834][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.247982][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 321.290265][ T43] usb 5-1: USB disconnect, device number 2 [ 321.454852][T10783] udevd[10783]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.3/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 322.008640][ T52] Bluetooth: hci3: command tx timeout [ 322.170282][T12234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 322.274280][T12234] veth0_vlan: entered promiscuous mode [ 322.301147][T12234] veth1_vlan: entered promiscuous mode [ 322.351740][T12234] veth0_macvtap: entered promiscuous mode [ 322.363210][T12234] veth1_macvtap: entered promiscuous mode [ 322.387900][T12234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 322.406052][T12234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.487926][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.487969][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.487997][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.499189][ T1095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.634941][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.634964][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.700558][ T3792] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.700578][ T3792] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.906898][T12513] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 324.087713][ T52] Bluetooth: hci3: command tx timeout [ 324.439346][T12541] 9pnet_virtio: no channels available for device syz [ 325.220537][T12570] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 325.220568][T12570] gadgetfs gadget.0: probe with driver gadgetfs failed with error -12 [ 325.346079][T12570] udc dummy_udc.1: failed to start USB Gadget filesystem: -12 [ 325.346111][T12570] gadgetfs gadget.1: probe with driver gadgetfs failed with error -12 [ 325.346373][T12570] ================================================================== [ 325.346384][T12570] BUG: KASAN: slab-use-after-free in gadgetfs_bind+0xd8/0xad0 [ 325.346418][T12570] Write of size 8 at addr ffff88807ec748c0 by task syz.0.2587/12570 [ 325.346434][T12570] [ 325.346452][T ** replaying previous printk message ** [ 325.346452][T12570] CPU: 0 UID: 0 PID: 12570 Comm: syz.0.2587 Not tainted syzkaller #0 PREEMPT(full) [ 325.346476][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.346492][T12570] Call Trace: [ 325.346504][T12570] [ 325.346513][T12570] dump_stack_lvl+0xe8/0x150 [ 325.346539][T12570] print_address_description+0x55/0x1e0 [ 325.346567][T12570] ? gadgetfs_bind+0xd8/0xad0 [ 325.346594][T12570] print_report+0x58/0x70 [ 325.346619][T12570] kasan_report+0x117/0x150 [ 325.346641][T12570] ? gadgetfs_bind+0xd8/0xad0 [ 325.346672][T12570] gadgetfs_bind+0xd8/0xad0 [ 325.346702][T12570] ? kernfs_put+0x7b9/0x820 [ 325.346732][T12570] ? __pfx_gadgetfs_bind+0x10/0x10 [ 325.346760][T12570] gadget_bind_driver+0x2ca/0x9e0 [ 325.346790][T12570] ? __pfx_gadget_bind_driver+0x10/0x10 [ 325.346815][T12570] really_probe+0x254/0xae0 [ 325.346843][T12570] __driver_probe_device+0x1e8/0x360 [ 325.346870][T12570] driver_probe_device+0x4f/0x240 [ 325.346897][T12570] __driver_attach+0x339/0x600 [ 325.346925][T12570] bus_for_each_dev+0x23b/0x2c0 [ 325.346940][T12570] ? __pfx___driver_attach+0x10/0x10 [ 325.346961][T12570] ? __pfx_bus_for_each_dev+0x10/0x10 [ 325.346986][T12570] ? do_raw_spin_unlock+0xf5/0x200 [ 325.347011][T12570] bus_add_driver+0x345/0x670 [ 325.347034][T12570] driver_register+0x23a/0x320 [ 325.347062][T12570] usb_gadget_register_driver_owner+0xf9/0x270 [ 325.347090][T12570] dev_config+0xe3c/0x12a0 [ 325.347121][T12570] ? __pfx_dev_config+0x10/0x10 [ 325.347151][T12570] ? __pfx_dev_config+0x10/0x10 [ 325.347177][T12570] vfs_write+0x296/0xba0 [ 325.347206][T12570] ? __pfx_vfs_write+0x10/0x10 [ 325.347232][T12570] ? __fget_files+0x2a/0x420 [ 325.347258][T12570] ? __fget_files+0x3a2/0x420 [ 325.347281][T12570] ? __fget_files+0x2a/0x420 [ 325.347311][T12570] ksys_write+0x150/0x270 [ 325.347338][T12570] ? __pfx_ksys_write+0x10/0x10 [ 325.347368][T12570] do_syscall_64+0x166/0x520 [ 325.347387][T12570] ? trace_irq_disable+0x3b/0x140 [ 325.347414][T12570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.347434][T12570] ? clear_bhb_loop+0x70/0xc0 [ 325.347456][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.347474][T12570] RIP: 0033:0x7f8d25d9e159 [ 325.347493][T12570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.347510][T12570] RSP: 002b:00007f8d23ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 325.347532][T12570] RAX: ffffffffffffffda RBX: 00007f8d26025fa0 RCX: 00007f8d25d9e159 [ 325.347548][T12570] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 325.347561][T12570] RBP: 00007f8d25e3503b R08: 0000000000000000 R09: 0000000000000000 [ 325.347574][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.347586][T12570] R13: 00007f8d26026038 R14: 00007f8d26025fa0 R15: 00007ffc2a35baa8 [ 325.347608][T12570] [ 325.347616][T12570] [ 325.347627][T12570] Allocated by task 5614: [ 325.347637][T12570] kasan_save_track+0x3e/0x80 [ 325.347666][T12570] __kasan_kmalloc+0x93/0xb0 [ 325.347682][T12570] __kmalloc_cache_noprof+0x31c/0x600 [ 325.347708][T12570] gadgetfs_fill_super+0x27b/0x790 [ 325.347732][T12570] get_tree_single+0xc0/0x150 [ 325.347755][T12570] vfs_get_tree+0x92/0x2a0 [ 325.347779][T12570] do_new_mount+0x319/0xdc0 [ 325.347799][T12570] __se_sys_mount+0x31d/0x420 [ 325.347819][T12570] do_syscall_64+0x166/0x520 [ 325.347835][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.347852][T12570] [ 325.347857][T12570] Freed by task 12570: [ 325.347866][T12570] kasan_save_track+0x3e/0x80 [ 325.347891][T12570] kasan_save_free_info+0x40/0x50 [ 325.347914][T12570] __kasan_slab_free+0x5c/0x80 [ 325.347930][T12570] kfree+0x1c5/0x650 [ 325.347950][T12570] gadgetfs_bind+0x93c/0xad0 [ 325.347981][T12570] gadget_bind_driver+0x2ca/0x9e0 [ 325.348004][T12570] really_probe+0x254/0xae0 [ 325.348025][T12570] __driver_probe_device+0x1e8/0x360 [ 325.348045][T12570] driver_probe_device+0x4f/0x240 [ 325.348066][T12570] __driver_attach+0x339/0x600 [ 325.348086][T12570] bus_for_each_dev+0x23b/0x2c0 [ 325.348100][T12570] bus_add_driver+0x345/0x670 [ 325.348115][T12570] driver_register+0x23a/0x320 [ 325.348140][T12570] usb_gadget_register_driver_owner+0xf9/0x270 [ 325.348163][T12570] dev_config+0xe3c/0x12a0 [ 325.348186][T12570] vfs_write+0x296/0xba0 [ 325.348209][T12570] ksys_write+0x150/0x270 [ 325.348232][T12570] do_syscall_64+0x166/0x520 [ 325.348247][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.348264][T12570] [ 325.348269][T12570] The buggy address belongs to the object at ffff88807ec74800 [ 325.348269][T12570] which belongs to the cache kmalloc-1k of size 1024 [ 325.348286][T12570] The buggy address is located 192 bytes inside of [ 325.348286][T12570] freed 1024-byte region [ffff88807ec74800, ffff88807ec74c00) [ 325.348307][T12570] [ 325.348312][T12570] The buggy address belongs to the physical page: [ 325.348328][T12570] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807ec77000 pfn:0x7ec70 [ 325.348348][T12570] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 325.348364][T12570] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 325.348383][T12570] page_type: f5(slab) [ 325.348402][T12570] raw: 00fff00000000240 ffff88813ff1adc0 ffffea0001dad210 ffffea0001dbe210 [ 325.348420][T12570] raw: ffff88807ec77000 000000000010000d 00000000f5000000 0000000000000000 [ 325.348439][T12570] head: 00fff00000000240 ffff88813ff1adc0 ffffea0001dad210 ffffea0001dbe210 [ 325.348456][T12570] head: ffff88807ec77000 000000000010000d 00000000f5000000 0000000000000000 [ 325.348472][T12570] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 325.348490][T12570] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 325.348500][T12570] page dumped because: kasan: bad access detected [ 325.348515][T12570] page_owner tracks the page as allocated [ 325.348522][T12570] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5614, tgid 5614 (syz-executor), ts 73766771846 [ 325.348553][T12570] post_alloc_hook+0x1f9/0x250 [ 325.348578][T12570] get_page_from_freelist+0x2209/0x2280 [ 325.348605][T12570] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 325.348633][T12570] allocate_slab+0x7d/0x620 [ 325.348652][T12570] refill_objects+0x2d5/0x350 [ 325.348671][T12570] __pcs_replace_empty_main+0x2c8/0x6c0 [ 325.348690][T12570] __kmalloc_noprof+0x476/0x710 [ 325.348714][T12570] ieee802_11_parse_elems_full+0x14b/0x2de0 [ 325.348736][T12570] ieee80211_inform_bss+0x163/0x10d0 [ 325.348753][T12570] cfg80211_inform_single_bss_data+0xd9c/0x1be0 [ 325.348774][T12570] cfg80211_inform_bss_data+0x263/0x3cc0 [ 325.348794][T12570] cfg80211_inform_bss_frame_data+0x3c7/0x840 [ 325.348815][T12570] ieee80211_bss_info_update+0x791/0xa50 [ 325.348831][T12570] ieee80211_scan_rx+0x552/0xa40 [ 325.348847][T12570] ieee80211_rx_list+0x2d0e/0x3b00 [ 325.348866][T12570] ieee80211_rx_napi+0x1ad/0x3d0 [ 325.348884][T12570] page last free pid 4990 tgid 4990 ts 42803607408 stack trace: [ 325.348898][T12570] __free_frozen_pages+0xc93/0xd90 [ 325.348921][T12570] __slab_free+0x274/0x2c0 [ 325.348945][T12570] qlist_free_all+0x99/0x100 [ 325.348980][T12570] kasan_quarantine_reduce+0x148/0x160 [ 325.349006][T12570] __kasan_slab_alloc+0x22/0x80 [ 325.349023][T12570] __kmalloc_noprof+0x302/0x710 [ 325.349048][T12570] tomoyo_encode+0x2ad/0x570 [ 325.349069][T12570] tomoyo_realpath_from_path+0x5fa/0x640 [ 325.349092][T12570] tomoyo_check_open_permission+0x229/0x470 [ 325.349110][T12570] security_file_open+0xa9/0x240 [ 325.349126][T12570] do_dentry_open+0x495/0x1360 [ 325.349143][T12570] vfs_open_consume+0x4a/0x350 [ 325.349161][T12570] path_openat+0x14d7/0x1e40 [ 325.349186][T12570] do_file_open+0x23e/0x4a0 [ 325.349210][T12570] do_sys_openat2+0x115/0x200 [ 325.349228][T12570] __x64_sys_openat+0x138/0x170 [ 325.349247][T12570] [ 325.349252][T12570] Memory state around the buggy address: [ 325.349263][T12570] ffff88807ec74780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 325.349276][T12570] ffff88807ec74800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.349290][T12570] >ffff88807ec74880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.349300][T12570] ^ [ 325.349311][T12570] ffff88807ec74900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.349325][T12570] ffff88807ec74980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.349334][T12570] ================================================================== [ 325.397048][T12570] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 326.226792][T12570] CPU: 0 UID: 0 PID: 12570 Comm: syz.0.2587 Not tainted syzkaller #0 PREEMPT(full) [ 326.236152][T12570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 326.246197][T12570] Call Trace: [ 326.249556][T12570] [ 326.252495][T12570] vpanic+0x56d/0xa70 [ 326.256484][T12570] ? __pfx_vpanic+0x10/0x10 [ 326.260985][T12570] panic+0xc5/0xd0 [ 326.264706][T12570] ? __pfx_panic+0x10/0x10 [ 326.269120][T12570] ? preempt_schedule_thunk+0x16/0x40 [ 326.274494][T12570] ? gadgetfs_bind+0xd8/0xad0 [ 326.279167][T12570] ? preempt_schedule_thunk+0x16/0x40 [ 326.284540][T12570] ? gadgetfs_bind+0xd8/0xad0 [ 326.289218][T12570] check_panic_on_warn+0x89/0xb0 [ 326.294169][T12570] ? gadgetfs_bind+0xd8/0xad0 [ 326.298845][T12570] end_report+0x73/0x170 [ 326.303079][T12570] ? gadgetfs_bind+0xd8/0xad0 [ 326.307749][T12570] kasan_report+0x128/0x150 [ 326.312247][T12570] ? gadgetfs_bind+0xd8/0xad0 [ 326.316955][T12570] gadgetfs_bind+0xd8/0xad0 [ 326.321482][T12570] ? kernfs_put+0x7b9/0x820 [ 326.325984][T12570] ? __pfx_gadgetfs_bind+0x10/0x10 [ 326.331088][T12570] gadget_bind_driver+0x2ca/0x9e0 [ 326.336111][T12570] ? __pfx_gadget_bind_driver+0x10/0x10 [ 326.341650][T12570] really_probe+0x254/0xae0 [ 326.346151][T12570] __driver_probe_device+0x1e8/0x360 [ 326.351429][T12570] driver_probe_device+0x4f/0x240 [ 326.356450][T12570] __driver_attach+0x339/0x600 [ 326.361234][T12570] bus_for_each_dev+0x23b/0x2c0 [ 326.366074][T12570] ? __pfx___driver_attach+0x10/0x10 [ 326.371349][T12570] ? __pfx_bus_for_each_dev+0x10/0x10 [ 326.376715][T12570] ? do_raw_spin_unlock+0xf5/0x200 [ 326.381819][T12570] bus_add_driver+0x345/0x670 [ 326.386488][T12570] driver_register+0x23a/0x320 [ 326.391257][T12570] usb_gadget_register_driver_owner+0xf9/0x270 [ 326.397412][T12570] dev_config+0xe3c/0x12a0 [ 326.401825][T12570] ? __pfx_dev_config+0x10/0x10 [ 326.406669][T12570] ? __pfx_dev_config+0x10/0x10 [ 326.411516][T12570] vfs_write+0x296/0xba0 [ 326.415759][T12570] ? __pfx_vfs_write+0x10/0x10 [ 326.420514][T12570] ? __fget_files+0x2a/0x420 [ 326.425096][T12570] ? __fget_files+0x3a2/0x420 [ 326.429762][T12570] ? __fget_files+0x2a/0x420 [ 326.434352][T12570] ksys_write+0x150/0x270 [ 326.438677][T12570] ? __pfx_ksys_write+0x10/0x10 [ 326.443526][T12570] do_syscall_64+0x166/0x520 [ 326.448106][T12570] ? trace_irq_disable+0x3b/0x140 [ 326.453128][T12570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.459183][T12570] ? clear_bhb_loop+0x70/0xc0 [ 326.463852][T12570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.469733][T12570] RIP: 0033:0x7f8d25d9e159 [ 326.474140][T12570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.493738][T12570] RSP: 002b:00007f8d23ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.502155][T12570] RAX: ffffffffffffffda RBX: 00007f8d26025fa0 RCX: 00007f8d25d9e159 [ 326.510121][T12570] RDX: 000000000000001f RSI: 0000200000000400 RDI: 0000000000000008 [ 326.518083][T12570] RBP: 00007f8d25e3503b R08: 0000000000000000 R09: 0000000000000000 [ 326.526043][T12570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.533997][T12570] R13: 00007f8d26026038 R14: 00007f8d26025fa0 R15: 00007ffc2a35baa8 [ 326.541988][T12570] [ 326.545277][T12570] Kernel Offset: disabled [ 326.549592][T12570] Rebooting in 86400 seconds..