last executing test programs: 16.512796086s ago: executing program 1 (id=2404): arch_prctl$auto_ARCH_SET_FS(0x1001, 0x9) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x0) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x6) arch_prctl$auto_ARCH_SET_FS(0x1001, 0xb) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x6) arch_prctl$auto_ARCH_SET_FS(0x1001, 0xfffffffffffffff8) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x4) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x5c06) arch_prctl$auto_ARCH_SET_FS(0x1001, 0xa3) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x9) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x400) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x2) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x5) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x6) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x16) r0 = pipe$auto(&(0x7f0000000000)) ppoll$auto(&(0x7f0000000040)={r0, 0x40, 0x101}, 0x4, &(0x7f0000000080)={0x7, 0xfffffffffffffffe}, &(0x7f00000000c0)={0x7}, 0x8) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x7fffffffffffffff) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x7) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x2) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x401) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x7) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x6) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x3) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x10) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x58e) arch_prctl$auto_ARCH_SET_FS(0x1001, 0xd9a) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x2) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x7) arch_prctl$auto_ARCH_SET_FS(0x1001, 0x3) 16.337575956s ago: executing program 1 (id=2405): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = setfsuid$auto(0xee00) r2 = setfsuid$auto(0xee01) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup$auto(0x6, 0x0) r5 = socket(0xa, 0x2, 0x88) r6 = bpf$auto(0x3, &(0x7f0000000000)=@link_update={r5, @new_prog_fd=0x4, 0x4, @old_prog_fd=r3}, 0x8) bpf$auto(0x4, &(0x7f0000000040)=@link_update={r6, @new_prog_fd=r7, 0x1, @old_prog_fd=r4}, 0x7) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) r9 = set_tid_address$auto(&(0x7f0000000180)=0x1) sendmsg$auto_NL80211_CMD_GET_COALESCE(r6, &(0x7f0000000c80)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000cc0)={0x19cc, r8, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0xc}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8001}, @NL80211_ATTR_IE_ASSOC_RESP={0x7df, 0x80, "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"}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0x9}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x11b2, 0x6e, 0x0, 0x1, [@typed={0x1004, 0x68, 0x0, 0x0, @binary="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"}, @generic="48985419c2e17786c5d3b53985e1b1cbaa08fc722239001e8262b706d0cc0c5782e6b1c197f0bdbf4418336837fc558093b6aa578052c9cf6e40e8c958fef9c0f887f628289f2ab9a4eb04abcfb473e3e36480499c2e696fabe27c1a12ae28acc7eeef0b8e3b2fabe3544202d2f9bb63d83d0bd255a47f1d7aebea771bf5623331de3d094e62cfe1921b9f874d3819ee6624c76f3ad40642d0013f31be5fca29c8241e51301b62b874208c89ecde8cb64b6d33608c80b20b1d1bd4af2730c6bb26acd650e91c85cc8878a30aca5f76a0f7d80d01e6828990cb8659c5b963ec4cdf3a7dfd30461baff434a40276fbb0046e11b20892418025b2", @generic="1236d69c6da9ff97f7d69795642b45820be7c9d625b0343db0147fe64d131ff1d00b5e93bf812458167d6a87cd3472a5dc160055c0fe6ba53269e9c042b5ced746f887c371fabbb01912cdb81e32930d791cb9d7da55cedcef433f85ec0abf336af97a7aaa90d0a7f720389720b6d26c85a63cb8eb85a3508278488f6acc6dbc63918e79ba9c53b4c92429a386", @typed={0x8, 0x111, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x17, 0x0, 0x0, @u32=0x1}, @typed={0x8, 0x13a, 0x0, 0x0, @pid=r9}, @nested={0xc, 0x68, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @u32=0x880}]}]}]}, 0x19cc}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) setresuid$auto(r1, r2, r1) clock_getres$auto(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setfsuid$auto(0x0) msgctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000200)={{0x7ff, 0xffffffffffffffff, 0xee00, 0x1, 0x1ff, 0x7, 0x9}, &(0x7f0000000180)=0x40, 0x0, 0x1, 0x0, 0x400, 0x5, 0x8000000000000005, 0x7, 0x400, 0x5, @raw=0x6, @raw=0x3}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r11, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x100}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/mem\x00', 0x402, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) write$auto(0x3, 0x0, 0xffd8) stat$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x7, 0x8000, 0xeb, 0x5, r1, 0x0, 0x0, 0x2, 0xd5f1, 0x4, 0x2, 0x8c2f, 0xfffffffffffffffe, 0x8000000000000001, 0x3ff, 0x6, 0x5}) r12 = socket(0x2c, 0x80003, 0x0) setsockopt$auto(r12, 0x11b, 0x5, 0xffffffffffffffff, 0x18) 15.455344247s ago: executing program 1 (id=2407): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r1, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(0xffffffffffffffff, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r0, &(0x7f00000001c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/163, 0x100200a3d9) socket(0x2b, 0x1, 0x0) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x2, 0x2020009, 0x4, 0x18, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xfffffffffffffffd) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x349f03, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/query\x00', 0x20600, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/sub6/info\x00', 0xa0000, 0x0) pread64$auto(r3, 0x0, 0x200000000004, 0x4) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000980)='/dev/ttye9\x00', 0x102, 0x0) sendfile$auto(r4, r2, 0x0, 0x10000) 13.460557128s ago: executing program 1 (id=2411): socket(0xa, 0x3, 0xff) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/udplite6\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000180)=""/132, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x3000, 0x0, 0x7ff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r4, 0x0, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025b870eee39d09423db29af047001a800800048004000180"], 0x20}, 0x1, 0x0, 0x0, 0x688cfcf374ddd4c2}, 0x800) 12.291078743s ago: executing program 1 (id=2415): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x1882c2, 0x78e22799f4a46f1c) flock$auto(r0, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r1, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/tty/driver/serial\x00', 0x43102, 0x0) prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) write$auto(r1, &(0x7f0000000440)='/Eev/~udio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xc5\xd1W\xbfrr\x1dh\xb3\v\x98\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x13\x10C\x13\xced\xaf\xc3\xcc\x8a#?\xc8\x1bC\x1c\xc3\xa4\xa3\xe4\x88\x11\xd0i8\x90\x85\xb5\x8b\xb7\xf6\xfc\xcdSl\xa7\xde\x96\na\xfb\r\x18\xac\f\xa9\x9d\xfbd\xecj\x99\x7f\x96\x86e\x98&{)\x8a\xa6\xc5\xb9\xd2(\xb8\xc9w\xcf\xa6\x96{`\xa9F\x87r\xef\xa7\x82$\x1dI\xb4\x04^\x9c\x02\xa0zX\xd1D\x92\xbc\x87\xe0i\xfd;\xb1E\x9f\x03\xeeY\xd3\xf1\xc5[H\x99\x85-Y\xd1e\xfbG\x96\xe7qh\xda6T\xa6L\x93\x8f\x84\xd1e-\x85', 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x8946, 0x24) 6.913997504s ago: executing program 2 (id=2433): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESHEX=r0], 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r1, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)={0x2c, r2, 0x903, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_FEC_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x880}, 0x8080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clock_settime$auto(0x14, &(0x7f0000000000)={0x8000000000000001, 0x20000000000004}) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r3, 0x40107447, &(0x7f00000002c0)={0x9, &(0x7f0000000000)={0x50, 0xf2, 0xb0}}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='T'], 0x1ac}}, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_SET_MESH(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)={0x34, r6, 0x1, 0x70bd2c, 0x25dfdbfa, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BLA_CRC={0x6, 0x22, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004014}, 0x140000e4) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0xa0801, 0x0) r9 = socketcall$auto(0x8000, 0x0) r10 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x40101, 0x0) ioctl$auto_KVM_CREATE_VM(r10, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r9) ioctl$auto_KVM_GET_MSRS(r8, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000071, 0x400, 0x2}]}) 6.907828469s ago: executing program 3 (id=2434): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) signalfd$auto(r0, &(0x7f0000000100)={0x9}, 0xf97c) bpf$auto_BPF_PROG_DETACH(0x9, &(0x7f0000000440)=@iter_create={r1, 0xfffffff7}, 0x7ff) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7e4a58eec679c659}, 0xd085) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0xc045}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x1c0, 0x4e, 0xffffffffffffffff, 0x80100001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0x400006, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40090) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x8000) r4 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x1, 0x0) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DEST(r5, &(0x7f0000004f80)={0x0, 0x0, &(0x7f0000004f40)={&(0x7f0000001c00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a95f28bd7000fcdbdf25070000000c00028008009900", @ANYRES32, @ANYBLOB="07f611dfea72e29be7d115f97dbbbc96a359fba8bb0be89883ac36bf60f226d09e9931f489967a24e94b777f7c338a01ccfcf0941c6b5b364cd4a1936a13c9432147272d948d97560c52680a005619923ecb8ff2b56d0a406ca3f7b4ba87f816696786f0e378c52306606133a5afe5340082ea09e00a0035cd0cf04ea25d7f9c90def48da71b01898c2b7d"], 0x20}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000000500)={{0x7fff, 0xee00, 0xee00, 0xc4, 0xfffeffff, 0x81, 0x1}, &(0x7f0000000200)=0xff, &(0x7f0000000240)=0x39, 0xffffffffffffffff, 0xde, 0x400, 0x300000, 0x8, 0x9, 0x4, 0x200, @raw, @inferred=0xffffffffffffffff}) r7 = setfsuid$auto(0xee00) r8 = setfsuid$auto(0xee01) setresuid$auto(r7, r8, r7) ioctl$auto(r4, 0x4018620d, 0x9) 5.221393916s ago: executing program 3 (id=2436): socket(0xa, 0x3, 0xff) r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/udplite6\x00', 0x101000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000180)=""/132, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) open_tree_attr$auto(0xffffffffffffffff, 0x0, 0x3000, 0x0, 0x7ff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xffffffff, 0x0, 0x0, 0x0, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) sysfs$auto(0x2, 0x23, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x4) rseq$auto(0x0, 0x8000, 0x0, 0x6) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r4 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r4, 0x0, 0x1) write$auto(0xffffffffffffffff, 0x0, 0x6) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) shutdown$auto(0x200000003, 0x2) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010025b870eee39d09423db29af047001a800800048004000180"], 0x20}, 0x1, 0x0, 0x0, 0x688cfcf374ddd4c2}, 0x800) 5.003224982s ago: executing program 2 (id=2437): unshare$auto(0x40000080) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) r0 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/comm\x00', 0x1, 0x0) write$auto_proc_pid_set_comm_operations_base(r0, 0x0, 0x0) mmap$auto(0xd7a, 0x2020005, 0x8, 0xeb6, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2022009, 0xfffffffffffffff7, 0x57, 0xfffffffffffffffa, 0x20000008) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x403) madvise$auto(0x0, 0x240007, 0x19) msgctl$auto(0x6, 0x944, &(0x7f0000000440)={{0xe025, 0x0, 0x0, 0xef5, 0x0, 0x5, 0x56a}, 0x0, 0x0, 0x9, 0x4, 0x541c, 0x6, 0x1, 0xfff7, 0x8, 0x7, @inferred, @raw=0xa6}) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x9}, 0x3) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000440)="661b0cbd4aeb33", 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x5}, 0x2, 0x100) mmap$auto(0x0, 0x9, 0x10001, 0x9000000eb1, 0xfffffffffffffffa, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu0/hotplug/state\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x100000001, 0x9) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r3, &(0x7f0000000200)='\xda\xc4\x10\xe4:\xb1\x81\xf1&\xd1\x17\x17\xeb\xc53\x93\xd9\x87\x7f:\x8f\xf4\xb3L\xb8\'\x96`D\xf9\xbc\x946\x89\x82\xd9\xd5\xa5\xd7m@)\xf71[B`\xe4\xd2Dt[\xecr\xeb\x1f\x7f\xffl\xde\x17\xcfY\xf7b\xd2J\x01\xd7\xcb~r:|\xb9>\xc1p+#\xe0J\xf3D\xe7\x12\xd8Nz+tt\x94\xc9 \xf9\x05\x19\xd3\x8b\x83\x8d\xd8\'\f\xfd\x14\x9d\x86\xc1a\xeb5\xaa(,\xb5\x96=\xa3\x8a\x99\xf3\xae\x88\x85\x0f\f\xbe\x9a\xce\xf2t\xb0o\x9b', 0x80000000) (fail_nth: 1) write$auto(r3, 0x0, 0x2) fdatasync$auto(0xffffffffffffffff) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r4, 0x127f, 0x0) r5 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x383101, 0x0) getsockopt$auto_SO_PEEK_OFF(r5, 0x8, 0x2a, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', &(0x7f00000001c0)=0x6) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0xc3400, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3dc) getcwd$auto(&(0x7f0000000540)='/sys/devices/\xde\xe7/xot\xfa\xec\x8f\xa4/}tate\x00X\xa0\xf7\xc7\x87\x92\xc9.2\x97R\xf4\xe6s\x00\xcf\x93\x1d\xe0K\xec\xacc$o\xf0\xa8\x93\x93\xe67U\xfb\xe1se\xfewZ\x03\x00\xaf\xc8$\x15\xc7\xd4\xcb\x92\x01\xecsP\x9aSM\xff\xf8\f\xcd3_oZ\x80\xdb\a\xbbY\xb7\xe9`\x1cV\xcdZ\xca\x89\x99#f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_uring_setup$auto(0x946, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0xd3e, 0x1, 0x948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7f, 0xd, 0x1, 0x948f, 0x1005, 0x206, 0x7, 0xfffffffffffffff6, 0x7, 0x9, 0x79d, 0x6, 0x100000000000000, 0xfffffffffffffffe, 0xf]}, 0x0) write$auto(0x3, 0x0, 0x7fffffff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unlinkat$auto(0xffffffffffffffff, 0x0, 0x200) close_range$auto(0x2, 0x8, 0x0) select$auto(0x9, 0x0, 0x0, 0x0, 0x0) 177.438117ms ago: executing program 0 (id=2451): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/fs/cifs/LinuxExtensionsEnabled\x00', 0x48041, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) futex$auto(0x0, 0x0, 0x2948, 0x0, 0x0, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000002a40)='/proc/self/uid_map\x00', 0x28400, 0x0) close_range$auto(0x2, 0x8, 0x0) eventfd$auto(0x3) socketpair$auto(0x809, 0x2, 0x9, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyd9\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) r2 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x408240, 0x0) ioctl$auto(0x3, 0x5, r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r3, 0x1, 0x1, &(0x7f00000002c0)='.*+%\x00', &(0x7f0000000300)=0xfff) write$auto(r0, 0x0, 0x6) 25.896758ms ago: executing program 0 (id=2452): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r0, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff6578d2f5f520f687f316ba7327b581cd8d58309037c0ae2c7", 0x30) fcntl$auto_F_DUPFD(r0, 0x0, r0) unshare$auto(0x40000080) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x72c, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000002f80), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000000000)={0x2c, r2, 0x5, 0x70bd2b, 0x25dfdbfd, {}, [@GTPA_LINK={0x8, 0x1, 0x5}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x80) socket(0x10, 0x2, 0x0) userfaultfd$auto(0x1) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x2, 0x801, 0x106) socket(0xa, 0x2, 0x0) socket(0xa, 0x2, 0x3a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0xffffffffffffffff, @new_prog_fd=0x4, 0x4}, 0xa3) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x0, 0xfaa1, 0x8005, &(0x7f0000000280)=0xc9e, 0x400, 0x1) madvise$auto(0xb, 0x0, 0x9) 0s ago: executing program 2 (id=2453): r0 = socket(0xa, 0x2, 0x73) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c011e78", @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYRES32=r0], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x10000, 0x0) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 903][T13778] ? xfd_validate_state+0x61/0x180 [ 552.080923][T13778] __x64_sys_unshare+0x31/0x40 [ 552.080945][T13778] do_syscall_64+0xcd/0xf80 [ 552.080968][T13778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.080983][T13778] RIP: 0033:0x7f080638f7c9 [ 552.080997][T13778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.081011][T13778] RSP: 002b:00007f08072e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 552.081026][T13778] RAX: ffffffffffffffda RBX: 00007f08065e6090 RCX: 00007f080638f7c9 [ 552.081036][T13778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 552.081045][T13778] RBP: 00007f0806413f91 R08: 0000000000000000 R09: 0000000000000000 [ 552.081054][T13778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.081063][T13778] R13: 00007f08065e6128 R14: 00007f08065e6090 R15: 00007ffd7565eec8 [ 552.081084][T13778] [ 552.082473][T13760] FAULT_INJECTION: forcing a failure. [ 552.082473][T13760] name failslab, interval 1, probability 0, space 0, times 0 [ 552.399189][T13760] CPU: 0 UID: 0 PID: 13760 Comm: syz.2.1943 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.399239][T13760] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.399250][T13760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 552.399268][T13760] Call Trace: [ 552.399278][T13760] [ 552.399290][T13760] dump_stack_lvl+0x16c/0x1f0 [ 552.399337][T13760] should_fail_ex+0x512/0x640 [ 552.399369][T13760] ? fs_reclaim_acquire+0xae/0x150 [ 552.399417][T13760] should_failslab+0xc2/0x120 [ 552.399460][T13760] kmem_cache_alloc_noprof+0x83/0x770 [ 552.399495][T13760] ? __pfx_map_id_range_down+0x10/0x10 [ 552.399535][T13760] ? security_inode_alloc+0x3b/0x2b0 [ 552.399572][T13760] ? security_inode_alloc+0x3b/0x2b0 [ 552.399601][T13760] security_inode_alloc+0x3b/0x2b0 [ 552.399633][T13760] inode_init_always_gfp+0xced/0x1040 [ 552.399681][T13760] alloc_inode+0x86/0x240 [ 552.399714][T13760] new_inode+0x22/0x1c0 [ 552.399750][T13760] debugfs_create_symlink+0xd1/0x260 [ 552.399782][T13760] ref_tracker_dir_symlink+0x255/0x3c0 [ 552.399826][T13760] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 552.399864][T13760] ? __lock_acquire+0x436/0x2890 [ 552.399923][T13760] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.399965][T13760] ? crng_make_state+0x48e/0x6c0 [ 552.400005][T13760] ? __pfx_net_ns_net_init+0x10/0x10 [ 552.400044][T13760] net_ns_net_init+0xd2/0x120 [ 552.400084][T13760] ops_init+0x1e2/0x5f0 [ 552.400126][T13760] setup_net+0x11d/0x3a0 [ 552.400168][T13760] ? __pfx_setup_net+0x10/0x10 [ 552.400204][T13760] ? lockdep_init_map_type+0x5c/0x270 [ 552.400235][T13760] ? mutex_init_lockep+0x110/0x150 [ 552.400271][T13760] copy_net_ns+0x351/0x7c0 [ 552.400316][T13760] create_new_namespaces+0x3ea/0xab0 [ 552.400365][T13760] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 552.400408][T13760] ksys_unshare+0x45b/0xa40 [ 552.400453][T13760] ? __pfx_ksys_unshare+0x10/0x10 [ 552.400498][T13760] ? xfd_validate_state+0x61/0x180 [ 552.400537][T13760] __x64_sys_unshare+0x31/0x40 [ 552.400580][T13760] do_syscall_64+0xcd/0xf80 [ 552.400624][T13760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.400654][T13760] RIP: 0033:0x7fc47298f7c9 [ 552.400678][T13760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.400706][T13760] RSP: 002b:00007fc470bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 552.400735][T13760] RAX: ffffffffffffffda RBX: 00007fc472be5fa0 RCX: 00007fc47298f7c9 [ 552.400755][T13760] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 552.400773][T13760] RBP: 00007fc472a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 552.400792][T13760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.400816][T13760] R13: 00007fc472be6038 R14: 00007fc472be5fa0 R15: 00007fff8fdd4fb8 [ 552.400857][T13760] [ 552.698088][T13760] debugfs: out of free dentries, can not create symlink 'netns-38e-4026533825-notrefcnt' [ 553.478554][T13797] zswap: compressor not available [ 555.060219][T13828] FAULT_INJECTION: forcing a failure. [ 555.060219][T13828] name failslab, interval 1, probability 0, space 0, times 0 [ 555.121675][T13828] CPU: 0 UID: 0 PID: 13828 Comm: syz.0.1959 Tainted: G U L syzkaller #0 PREEMPT(full) [ 555.121727][T13828] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 555.121739][T13828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 555.121756][T13828] Call Trace: [ 555.121766][T13828] [ 555.121778][T13828] dump_stack_lvl+0x16c/0x1f0 [ 555.121829][T13828] should_fail_ex+0x512/0x640 [ 555.121861][T13828] ? __kmalloc_noprof+0xca/0x910 [ 555.121897][T13828] should_failslab+0xc2/0x120 [ 555.121939][T13828] __kmalloc_noprof+0xeb/0x910 [ 555.121971][T13828] ? snd_midi_event_new+0xa1/0x210 [ 555.122018][T13828] ? snd_midi_event_new+0xa1/0x210 [ 555.122058][T13828] snd_midi_event_new+0xa1/0x210 [ 555.122101][T13828] snd_virmidi_output_open+0x106/0x670 [ 555.122149][T13828] open_substream+0x480/0x9d0 [ 555.122183][T13828] rawmidi_open_priv+0x543/0x6e0 [ 555.122223][T13828] snd_rawmidi_open+0x4cb/0xbf0 [ 555.122263][T13828] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 555.122298][T13828] ? __pfx_default_wake_function+0x10/0x10 [ 555.122359][T13828] ? kobject_get_unless_zero+0x156/0x1e0 [ 555.122412][T13828] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 555.122444][T13828] snd_open+0x22d/0x4c0 [ 555.122486][T13828] ? __pfx_snd_open+0x10/0x10 [ 555.122529][T13828] chrdev_open+0x234/0x6a0 [ 555.122571][T13828] ? __pfx_apparmor_file_open+0x10/0x10 [ 555.122601][T13828] ? __pfx_chrdev_open+0x10/0x10 [ 555.122646][T13828] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 555.122700][T13828] do_dentry_open+0x748/0x1590 [ 555.122738][T13828] ? __pfx_chrdev_open+0x10/0x10 [ 555.122793][T13828] vfs_open+0x82/0x3f0 [ 555.122829][T13828] path_openat+0x2078/0x3140 [ 555.122882][T13828] ? __pfx_path_openat+0x10/0x10 [ 555.122938][T13828] do_filp_open+0x20b/0x470 [ 555.122983][T13828] ? __pfx_do_filp_open+0x10/0x10 [ 555.123054][T13828] ? alloc_fd+0x471/0x7d0 [ 555.123106][T13828] do_sys_openat2+0x121/0x290 [ 555.123138][T13828] ? __pfx_do_sys_openat2+0x10/0x10 [ 555.123183][T13828] __x64_sys_openat+0x174/0x210 [ 555.123215][T13828] ? __pfx___x64_sys_openat+0x10/0x10 [ 555.123263][T13828] do_syscall_64+0xcd/0xf80 [ 555.123318][T13828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.123350][T13828] RIP: 0033:0x7f080638f7c9 [ 555.123375][T13828] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.123401][T13828] RSP: 002b:00007f0807302038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 555.123426][T13828] RAX: ffffffffffffffda RBX: 00007f08065e5fa0 RCX: 00007f080638f7c9 [ 555.123444][T13828] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 555.123460][T13828] RBP: 00007f0806413f91 R08: 0000000000000000 R09: 0000000000000000 [ 555.123476][T13828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.123492][T13828] R13: 00007f08065e6038 R14: 00007f08065e5fa0 R15: 00007ffd7565eec8 [ 555.123530][T13828] [ 556.819264][T13869] netlink: 'syz.1.1971': attribute type 1 has an invalid length. [ 558.813549][T13888] zswap: compressor not available [ 559.143706][T13899] netlink: 'syz.0.1977': attribute type 1 has an invalid length. [ 560.576494][T13929] ERROR: Out of memory at tomoyo_memory_ok. [ 560.859520][T13932] zswap: compressor not available [ 561.637510][T13964] ptrace attach of "./syz-executor exec"[13965] was attempted by "./syz-executor exec"[13964] [ 562.414454][T13974] zswap: compressor not available [ 562.789670][T13993] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 563.345054][T14007] ubi0: attaching mtd0 [ 563.356741][T14007] ubi0: scanning is finished [ 563.384468][T14007] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 563.693689][T14007] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 564.235275][T14026] ptrace attach of "./syz-executor exec"[14027] was attempted by "./syz-executor exec"[14026] [ 565.301920][T14047] zswap: compressor not available [ 567.497477][T14095] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 568.196657][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.203680][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.151880][T14127] MTRR 0 not used [ 569.545188][T14094] kexec: Could not allocate control_code_buffer [ 570.396774][T14157] zswap: compressor not available [ 570.646736][T14168] MTRR 0 not used [ 571.287040][T14188] program syz.2.2050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 572.526389][T14206] zswap: compressor not available [ 572.586298][T14216] FAULT_INJECTION: forcing a failure. [ 572.586298][T14216] name failslab, interval 1, probability 0, space 0, times 0 [ 572.602555][T14206] FAULT_INJECTION: forcing a failure. [ 572.602555][T14206] name failslab, interval 1, probability 0, space 0, times 0 [ 572.666171][T14206] CPU: 0 UID: 0 PID: 14206 Comm: syz.1.2057 Tainted: G U L syzkaller #0 PREEMPT(full) [ 572.666213][T14206] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 572.666219][T14206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 572.666229][T14206] Call Trace: [ 572.666234][T14206] [ 572.666241][T14206] dump_stack_lvl+0x16c/0x1f0 [ 572.666268][T14206] should_fail_ex+0x512/0x640 [ 572.666286][T14206] ? fs_reclaim_acquire+0xae/0x150 [ 572.666311][T14206] should_failslab+0xc2/0x120 [ 572.666335][T14206] kmem_cache_alloc_noprof+0x83/0x770 [ 572.666353][T14206] ? __pfx_map_id_range_down+0x10/0x10 [ 572.666374][T14206] ? security_inode_alloc+0x3b/0x2b0 [ 572.666393][T14206] ? security_inode_alloc+0x3b/0x2b0 [ 572.666407][T14206] security_inode_alloc+0x3b/0x2b0 [ 572.666423][T14206] inode_init_always_gfp+0xced/0x1040 [ 572.666448][T14206] alloc_inode+0x86/0x240 [ 572.666464][T14206] sock_alloc+0x40/0x280 [ 572.666486][T14206] sock_create_lite+0x82/0x120 [ 572.666508][T14206] __netlink_kernel_create+0xbd/0x750 [ 572.666530][T14206] ? __pfx___netlink_kernel_create+0x10/0x10 [ 572.666556][T14206] ? __pfx_genl_pernet_init+0x10/0x10 [ 572.666578][T14206] genl_pernet_init+0xbd/0x170 [ 572.666600][T14206] ? __pfx_genl_pernet_init+0x10/0x10 [ 572.666621][T14206] ? lockdep_init_map_type+0x5c/0x270 [ 572.666637][T14206] ? __pfx_genl_rcv+0x10/0x10 [ 572.666656][T14206] ? __pfx_genl_bind+0x10/0x10 [ 572.666676][T14206] ? __pfx_genl_unbind+0x10/0x10 [ 572.666696][T14206] ? __pfx_genl_release+0x10/0x10 [ 572.666717][T14206] ? mutex_init_lockep+0x110/0x150 [ 572.666735][T14206] ops_init+0x1e2/0x5f0 [ 572.666756][T14206] setup_net+0x11d/0x3a0 [ 572.666776][T14206] ? __pfx_setup_net+0x10/0x10 [ 572.666793][T14206] ? lockdep_init_map_type+0x5c/0x270 [ 572.666808][T14206] ? mutex_init_lockep+0x110/0x150 [ 572.666826][T14206] copy_net_ns+0x351/0x7c0 [ 572.666849][T14206] create_new_namespaces+0x3ea/0xab0 [ 572.666946][T14206] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 572.666971][T14206] ksys_unshare+0x45b/0xa40 [ 572.666995][T14206] ? __pfx_ksys_unshare+0x10/0x10 [ 572.667019][T14206] ? xfd_validate_state+0x61/0x180 [ 572.667039][T14206] __x64_sys_unshare+0x31/0x40 [ 572.667061][T14206] do_syscall_64+0xcd/0xf80 [ 572.667084][T14206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.667100][T14206] RIP: 0033:0x7f8377f8f7c9 [ 572.667114][T14206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.667128][T14206] RSP: 002b:00007f8378efa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 572.667144][T14206] RAX: ffffffffffffffda RBX: 00007f83781e5fa0 RCX: 00007f8377f8f7c9 [ 572.667154][T14206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 572.667164][T14206] RBP: 00007f8378013f91 R08: 0000000000000000 R09: 0000000000000000 [ 572.667173][T14206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.667183][T14206] R13: 00007f83781e6038 R14: 00007f83781e5fa0 R15: 00007ffda489f1d8 [ 572.667204][T14206] [ 572.672649][T14218] ptrace attach of "./syz-executor exec"[14220] was attempted by "./syz-executor exec"[14218] [ 572.673614][T14216] CPU: 0 UID: 0 PID: 14216 Comm: syz.2.2059 Tainted: G U L syzkaller #0 PREEMPT(full) [ 572.673662][T14216] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 572.673673][T14216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 572.673690][T14216] Call Trace: [ 572.673700][T14216] [ 572.673712][T14216] dump_stack_lvl+0x16c/0x1f0 [ 572.673756][T14216] should_fail_ex+0x512/0x640 [ 572.673791][T14216] ? kmem_cache_alloc_noprof+0x62/0x770 [ 572.673830][T14216] should_failslab+0xc2/0x120 [ 572.673878][T14216] kmem_cache_alloc_noprof+0x83/0x770 [ 572.673914][T14216] ? seq_open+0x55/0x170 [ 572.673951][T14216] ? __pfx_tracing_clock_show+0x10/0x10 [ 572.673981][T14216] ? seq_open+0x55/0x170 [ 572.674008][T14216] seq_open+0x55/0x170 [ 572.674037][T14216] ? __pfx_tracing_clock_show+0x10/0x10 [ 572.674067][T14216] single_open+0xfc/0x1f0 [ 572.674100][T14216] tracing_clock_open+0xa7/0x110 [ 572.674140][T14216] do_dentry_open+0x748/0x1590 [ 572.674178][T14216] ? __pfx_tracing_clock_open+0x10/0x10 [ 572.674226][T14216] vfs_open+0x82/0x3f0 [ 572.674259][T14216] path_openat+0x2078/0x3140 [ 572.674310][T14216] ? __pfx_path_openat+0x10/0x10 [ 572.674364][T14216] do_filp_open+0x20b/0x470 [ 572.674405][T14216] ? __pfx_do_filp_open+0x10/0x10 [ 572.674470][T14216] ? alloc_fd+0x471/0x7d0 [ 572.674518][T14216] do_sys_openat2+0x121/0x290 [ 572.674549][T14216] ? __pfx_do_sys_openat2+0x10/0x10 [ 572.674594][T14216] __x64_sys_openat+0x174/0x210 [ 572.674625][T14216] ? __pfx___x64_sys_openat+0x10/0x10 [ 572.674674][T14216] do_syscall_64+0xcd/0xf80 [ 572.674717][T14216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.674745][T14216] RIP: 0033:0x7fc47298f7c9 [ 572.674767][T14216] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.674794][T14216] RSP: 002b:00007fc470bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 572.674820][T14216] RAX: ffffffffffffffda RBX: 00007fc472be5fa0 RCX: 00007fc47298f7c9 [ 572.674840][T14216] RDX: 0000000000000800 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 572.674863][T14216] RBP: 00007fc472a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 572.674881][T14216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.674897][T14216] R13: 00007fc472be6038 R14: 00007fc472be5fa0 R15: 00007fff8fdd4fb8 [ 572.674934][T14216] [ 573.414076][T14226] ubi0: attaching mtd1 [ 573.437260][T14226] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 573.680843][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2063'. [ 575.099866][T14266] zswap: compressor not available [ 575.141641][T14266] FAULT_INJECTION: forcing a failure. [ 575.141641][T14266] name failslab, interval 1, probability 0, space 0, times 0 [ 575.183215][T14266] CPU: 1 UID: 0 PID: 14266 Comm: syz.1.2070 Tainted: G U L syzkaller #0 PREEMPT(full) [ 575.183263][T14266] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 575.183275][T14266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 575.183292][T14266] Call Trace: [ 575.183301][T14266] [ 575.183313][T14266] dump_stack_lvl+0x16c/0x1f0 [ 575.183359][T14266] should_fail_ex+0x512/0x640 [ 575.183398][T14266] ? kmem_cache_alloc_noprof+0x62/0x770 [ 575.183436][T14266] should_failslab+0xc2/0x120 [ 575.183476][T14266] kmem_cache_alloc_noprof+0x83/0x770 [ 575.183511][T14266] ? __proc_create+0x2c8/0x8d0 [ 575.183542][T14266] ? __proc_create+0x2c8/0x8d0 [ 575.183560][T14266] __proc_create+0x2c8/0x8d0 [ 575.183580][T14266] ? __pfx___proc_create+0x10/0x10 [ 575.183601][T14266] ? _raw_write_unlock+0x28/0x50 [ 575.183625][T14266] ? proc_register+0x559/0x8b0 [ 575.183646][T14266] proc_create_reg+0x7d/0x180 [ 575.183668][T14266] proc_create_net_data+0x8e/0x1c0 [ 575.183688][T14266] ? __pfx_proc_create_net_data+0x10/0x10 [ 575.183709][T14266] ? __pfx_uevent_net_rcv+0x10/0x10 [ 575.183725][T14266] ? ops_init+0x77/0x5f0 [ 575.183745][T14266] ? __pfx_dev_proc_net_init+0x10/0x10 [ 575.183762][T14266] dev_proc_net_init+0xf9/0x220 [ 575.183779][T14266] ops_init+0x1e2/0x5f0 [ 575.183799][T14266] setup_net+0x11d/0x3a0 [ 575.183819][T14266] ? __pfx_setup_net+0x10/0x10 [ 575.183837][T14266] ? lockdep_init_map_type+0x5c/0x270 [ 575.183852][T14266] ? mutex_init_lockep+0x110/0x150 [ 575.183877][T14266] copy_net_ns+0x351/0x7c0 [ 575.183900][T14266] create_new_namespaces+0x3ea/0xab0 [ 575.183926][T14266] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 575.183948][T14266] ksys_unshare+0x45b/0xa40 [ 575.183971][T14266] ? __pfx_ksys_unshare+0x10/0x10 [ 575.183994][T14266] ? xfd_validate_state+0x61/0x180 [ 575.184013][T14266] __x64_sys_unshare+0x31/0x40 [ 575.184035][T14266] do_syscall_64+0xcd/0xf80 [ 575.184058][T14266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.184074][T14266] RIP: 0033:0x7f8377f8f7c9 [ 575.184087][T14266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.184102][T14266] RSP: 002b:00007f8378efa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 575.184117][T14266] RAX: ffffffffffffffda RBX: 00007f83781e5fa0 RCX: 00007f8377f8f7c9 [ 575.184128][T14266] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 575.184137][T14266] RBP: 00007f8378013f91 R08: 0000000000000000 R09: 0000000000000000 [ 575.184146][T14266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.184155][T14266] R13: 00007f83781e6038 R14: 00007f83781e5fa0 R15: 00007ffda489f1d8 [ 575.184176][T14266] [ 575.942707][ T30] audit: type=1800 audit(1767149803.049:84): pid=14284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2076" name="version" dev="configfs" ino=55449 res=0 errno=0 [ 576.443708][T14295] FAULT_INJECTION: forcing a failure. [ 576.443708][T14295] name failslab, interval 1, probability 0, space 0, times 0 [ 576.457088][T14295] CPU: 0 UID: 0 PID: 14295 Comm: syz.2.2079 Tainted: G U L syzkaller #0 PREEMPT(full) [ 576.457135][T14295] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 576.457146][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 576.457164][T14295] Call Trace: [ 576.457174][T14295] [ 576.457185][T14295] dump_stack_lvl+0x16c/0x1f0 [ 576.457231][T14295] should_fail_ex+0x512/0x640 [ 576.457267][T14295] ? __kmalloc_cache_noprof+0x5f/0x800 [ 576.457303][T14295] should_failslab+0xc2/0x120 [ 576.457345][T14295] __kmalloc_cache_noprof+0x80/0x800 [ 576.457378][T14295] ? single_open+0x4d/0x1f0 [ 576.457414][T14295] ? __pfx_tracing_clock_show+0x10/0x10 [ 576.457443][T14295] ? single_open+0x4d/0x1f0 [ 576.457474][T14295] single_open+0x4d/0x1f0 [ 576.457514][T14295] tracing_clock_open+0xa7/0x110 [ 576.457556][T14295] do_dentry_open+0x748/0x1590 [ 576.457595][T14295] ? __pfx_tracing_clock_open+0x10/0x10 [ 576.457643][T14295] vfs_open+0x82/0x3f0 [ 576.457677][T14295] path_openat+0x2078/0x3140 [ 576.457729][T14295] ? __pfx_path_openat+0x10/0x10 [ 576.457784][T14295] do_filp_open+0x20b/0x470 [ 576.457826][T14295] ? __pfx_do_filp_open+0x10/0x10 [ 576.457893][T14295] ? alloc_fd+0x471/0x7d0 [ 576.457943][T14295] do_sys_openat2+0x121/0x290 [ 576.457974][T14295] ? __pfx_do_sys_openat2+0x10/0x10 [ 576.458019][T14295] __x64_sys_openat+0x174/0x210 [ 576.458052][T14295] ? __pfx___x64_sys_openat+0x10/0x10 [ 576.458098][T14295] do_syscall_64+0xcd/0xf80 [ 576.458137][T14295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.458166][T14295] RIP: 0033:0x7fc47298f7c9 [ 576.458189][T14295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.458219][T14295] RSP: 002b:00007fc470bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 576.458245][T14295] RAX: ffffffffffffffda RBX: 00007fc472be5fa0 RCX: 00007fc47298f7c9 [ 576.458264][T14295] RDX: 0000000000000800 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 576.458282][T14295] RBP: 00007fc472a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 576.458298][T14295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.458314][T14295] R13: 00007fc472be6038 R14: 00007fc472be5fa0 R15: 00007fff8fdd4fb8 [ 576.458348][T14295] [ 577.035244][T14298] Invalid ELF header magic: != ELF [ 577.909407][T14319] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2084'. [ 578.045097][T14321] ptrace attach of "./syz-executor exec"[14322] was attempted by "./syz-executor exec"[14321] [ 579.386433][T14343] ERROR: Out of memory at tomoyo_memory_ok. [ 580.236855][T14361] zswap: compressor not available [ 580.443270][T14361] FAULT_INJECTION: forcing a failure. [ 580.443270][T14361] name failslab, interval 1, probability 0, space 0, times 0 [ 580.502562][T14361] CPU: 0 UID: 0 PID: 14361 Comm: syz.3.2096 Tainted: G U L syzkaller #0 PREEMPT(full) [ 580.502613][T14361] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 580.502625][T14361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 580.502642][T14361] Call Trace: [ 580.502651][T14361] [ 580.502657][T14361] dump_stack_lvl+0x16c/0x1f0 [ 580.502684][T14361] should_fail_ex+0x512/0x640 [ 580.502702][T14361] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 580.502724][T14361] should_failslab+0xc2/0x120 [ 580.502746][T14361] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 580.502765][T14361] ? alloc_inode+0x64/0x240 [ 580.502786][T14361] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 580.502808][T14361] ? alloc_inode+0x64/0x240 [ 580.502822][T14361] alloc_inode+0x64/0x240 [ 580.502841][T14361] new_inode+0x22/0x1c0 [ 580.502859][T14361] __debugfs_create_file+0x105/0x530 [ 580.502885][T14361] debugfs_create_file_full+0x41/0x60 [ 580.502911][T14361] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 580.502930][T14361] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 580.502965][T14361] ? lockdep_init_map_type+0x5c/0x270 [ 580.502983][T14361] preinit_net.part.0+0x437/0x8f0 [ 580.503004][T14361] copy_net_ns+0x4cd/0x7c0 [ 580.503027][T14361] create_new_namespaces+0x3ea/0xab0 [ 580.503052][T14361] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 580.503080][T14361] ksys_unshare+0x45b/0xa40 [ 580.503104][T14361] ? __pfx_ksys_unshare+0x10/0x10 [ 580.503128][T14361] ? xfd_validate_state+0x61/0x180 [ 580.503150][T14361] __x64_sys_unshare+0x31/0x40 [ 580.503172][T14361] do_syscall_64+0xcd/0xf80 [ 580.503195][T14361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.503210][T14361] RIP: 0033:0x7f0898d8f7c9 [ 580.503224][T14361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.503239][T14361] RSP: 002b:00007f0899cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 580.503254][T14361] RAX: ffffffffffffffda RBX: 00007f0898fe5fa0 RCX: 00007f0898d8f7c9 [ 580.503265][T14361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 580.503274][T14361] RBP: 00007f0898e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 580.503284][T14361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.503293][T14361] R13: 00007f0898fe6038 R14: 00007f0898fe5fa0 R15: 00007ffd11439b28 [ 580.503313][T14361] [ 580.505647][T14361] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88807c462850' [ 581.398181][T14379] FAULT_INJECTION: forcing a failure. [ 581.398181][T14379] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.418186][T14379] CPU: 1 UID: 0 PID: 14379 Comm: syz.0.2101 Tainted: G U L syzkaller #0 PREEMPT(full) [ 581.418231][T14379] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 581.418242][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.418258][T14379] Call Trace: [ 581.418267][T14379] [ 581.418279][T14379] dump_stack_lvl+0x16c/0x1f0 [ 581.418321][T14379] should_fail_ex+0x512/0x640 [ 581.418356][T14379] _copy_from_user+0x2e/0xd0 [ 581.418387][T14379] get_timespec64+0x8b/0x1b0 [ 581.418415][T14379] ? __pfx_get_timespec64+0x10/0x10 [ 581.418451][T14379] __x64_sys_futex+0x288/0x4c0 [ 581.418482][T14379] ? __pfx___x64_sys_futex+0x10/0x10 [ 581.418526][T14379] do_syscall_64+0xcd/0xf80 [ 581.418567][T14379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.418594][T14379] RIP: 0033:0x7f080638f7c9 [ 581.418615][T14379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.418641][T14379] RSP: 002b:00007ffd7565f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 581.418667][T14379] RAX: ffffffffffffffda RBX: 000000000008de12 RCX: 00007f080638f7c9 [ 581.418685][T14379] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f08065e5fac [ 581.418702][T14379] RBP: 0000000000000032 R08: 00007f0807303000 R09: 000000117565f31f [ 581.418719][T14379] R10: 00007ffd7565f120 R11: 0000000000000246 R12: 00007f08065e5fac [ 581.418751][T14379] R13: 00007ffd7565f120 R14: 000000000008de44 R15: 00007ffd7565f140 [ 581.418793][T14379] [ 581.588340][T14382] FAULT_INJECTION: forcing a failure. [ 581.588340][T14382] name failslab, interval 1, probability 0, space 0, times 0 [ 581.601155][T14382] CPU: 1 UID: 0 PID: 14382 Comm: syz.2.2102 Tainted: G U L syzkaller #0 PREEMPT(full) [ 581.601181][T14382] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 581.601187][T14382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 581.601196][T14382] Call Trace: [ 581.601202][T14382] [ 581.601209][T14382] dump_stack_lvl+0x16c/0x1f0 [ 581.601235][T14382] should_fail_ex+0x512/0x640 [ 581.601253][T14382] ? __kmalloc_cache_noprof+0x5f/0x800 [ 581.601272][T14382] should_failslab+0xc2/0x120 [ 581.601295][T14382] __kmalloc_cache_noprof+0x80/0x800 [ 581.601312][T14382] ? single_open+0x4d/0x1f0 [ 581.601332][T14382] ? __pfx_tracing_clock_show+0x10/0x10 [ 581.601347][T14382] ? single_open+0x4d/0x1f0 [ 581.601362][T14382] single_open+0x4d/0x1f0 [ 581.601379][T14382] tracing_clock_open+0xa7/0x110 [ 581.601400][T14382] do_dentry_open+0x748/0x1590 [ 581.601421][T14382] ? __pfx_tracing_clock_open+0x10/0x10 [ 581.601446][T14382] vfs_open+0x82/0x3f0 [ 581.601464][T14382] path_openat+0x2078/0x3140 [ 581.601491][T14382] ? __pfx_path_openat+0x10/0x10 [ 581.601519][T14382] do_filp_open+0x20b/0x470 [ 581.601540][T14382] ? __pfx_do_filp_open+0x10/0x10 [ 581.601575][T14382] ? alloc_fd+0x471/0x7d0 [ 581.601600][T14382] do_sys_openat2+0x121/0x290 [ 581.601617][T14382] ? __pfx_do_sys_openat2+0x10/0x10 [ 581.601640][T14382] __x64_sys_openat+0x174/0x210 [ 581.601657][T14382] ? __pfx___x64_sys_openat+0x10/0x10 [ 581.601681][T14382] do_syscall_64+0xcd/0xf80 [ 581.601704][T14382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.601719][T14382] RIP: 0033:0x7fc47298f7c9 [ 581.601732][T14382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.601747][T14382] RSP: 002b:00007fc470bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 581.601762][T14382] RAX: ffffffffffffffda RBX: 00007fc472be5fa0 RCX: 00007fc47298f7c9 [ 581.601781][T14382] RDX: 0000000000000800 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 581.601791][T14382] RBP: 00007fc472a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 581.601800][T14382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.601809][T14382] R13: 00007fc472be6038 R14: 00007fc472be5fa0 R15: 00007fff8fdd4fb8 [ 581.601830][T14382] [ 582.019121][T14384] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 582.181496][T14385] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2103'. [ 582.196890][T14385] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2103'. [ 582.643444][T14380] kexec: Could not allocate control_code_buffer [ 583.722007][T14404] ima: policy update failed [ 583.730116][ T30] audit: type=1802 audit(1767149810.825:85): pid=14404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2109" res=0 errno=0 [ 583.748023][T14404] netlink: 25 bytes leftover after parsing attributes in process `syz.3.2109'. [ 583.757239][T14404] FAULT_INJECTION: forcing a failure. [ 583.757239][T14404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.789595][T14404] CPU: 1 UID: 0 PID: 14404 Comm: syz.3.2109 Tainted: G U L syzkaller #0 PREEMPT(full) [ 583.789640][T14404] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 583.789650][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 583.789665][T14404] Call Trace: [ 583.789675][T14404] [ 583.789686][T14404] dump_stack_lvl+0x16c/0x1f0 [ 583.789729][T14404] should_fail_ex+0x512/0x640 [ 583.789765][T14404] _copy_to_user+0x32/0xd0 [ 583.789804][T14404] simple_read_from_buffer+0xcb/0x170 [ 583.789844][T14404] proc_fail_nth_read+0x197/0x240 [ 583.789888][T14404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.789934][T14404] ? rw_verify_area+0xcf/0x6c0 [ 583.789968][T14404] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 583.790011][T14404] vfs_read+0x1e4/0xcf0 [ 583.790049][T14404] ? __pfx___mutex_lock+0x10/0x10 [ 583.790093][T14404] ? __pfx_vfs_read+0x10/0x10 [ 583.790139][T14404] ? __fget_files+0x20e/0x3c0 [ 583.790188][T14404] ksys_read+0x12a/0x250 [ 583.790224][T14404] ? __pfx_ksys_read+0x10/0x10 [ 583.790271][T14404] do_syscall_64+0xcd/0xf80 [ 583.790314][T14404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.790342][T14404] RIP: 0033:0x7f0898d8e1dc [ 583.790365][T14404] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 583.790389][T14404] RSP: 002b:00007f0899cc7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 583.790415][T14404] RAX: ffffffffffffffda RBX: 00007f0898fe5fa0 RCX: 00007f0898d8e1dc [ 583.790434][T14404] RDX: 000000000000000f RSI: 00007f0899cc70a0 RDI: 0000000000000003 [ 583.790451][T14404] RBP: 00007f0899cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 583.790468][T14404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.790484][T14404] R13: 00007f0898fe6038 R14: 00007f0898fe5fa0 R15: 00007ffd11439b28 [ 583.790521][T14404] [ 584.560380][T14415] ptrace attach of "./syz-executor exec"[14416] was attempted by "./syz-executor exec"[14415] [ 586.691607][T14460] FAULT_INJECTION: forcing a failure. [ 586.691607][T14460] name failslab, interval 1, probability 0, space 0, times 0 [ 586.726313][T14463] netlink: zone id is out of range [ 586.742917][T14460] CPU: 0 UID: 0 PID: 14460 Comm: syz.1.2125 Tainted: G U L syzkaller #0 PREEMPT(full) [ 586.742964][T14460] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 586.742976][T14460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 586.742991][T14460] Call Trace: [ 586.743000][T14460] [ 586.743011][T14460] dump_stack_lvl+0x16c/0x1f0 [ 586.743054][T14460] should_fail_ex+0x512/0x640 [ 586.743085][T14460] ? __kmalloc_noprof+0xca/0x910 [ 586.743121][T14460] should_failslab+0xc2/0x120 [ 586.743165][T14460] __kmalloc_noprof+0xeb/0x910 [ 586.743198][T14460] ? snd_midi_event_new+0xa1/0x210 [ 586.743246][T14460] ? snd_midi_event_new+0xa1/0x210 [ 586.743284][T14460] snd_midi_event_new+0xa1/0x210 [ 586.743327][T14460] snd_virmidi_output_open+0x106/0x670 [ 586.743379][T14460] open_substream+0x480/0x9d0 [ 586.743415][T14460] rawmidi_open_priv+0x543/0x6e0 [ 586.743457][T14460] snd_rawmidi_open+0x4cb/0xbf0 [ 586.743499][T14460] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 586.743545][T14460] ? __pfx_default_wake_function+0x10/0x10 [ 586.743599][T14460] ? kobject_get_unless_zero+0x156/0x1e0 [ 586.743650][T14460] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 586.743685][T14460] snd_open+0x22d/0x4c0 [ 586.743729][T14460] ? __pfx_snd_open+0x10/0x10 [ 586.743778][T14460] chrdev_open+0x234/0x6a0 [ 586.743823][T14460] ? __pfx_apparmor_file_open+0x10/0x10 [ 586.743854][T14460] ? __pfx_chrdev_open+0x10/0x10 [ 586.743900][T14460] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 586.743954][T14460] do_dentry_open+0x748/0x1590 [ 586.743994][T14460] ? __pfx_chrdev_open+0x10/0x10 [ 586.744059][T14460] vfs_open+0x82/0x3f0 [ 586.744095][T14460] path_openat+0x2078/0x3140 [ 586.744148][T14460] ? __pfx_path_openat+0x10/0x10 [ 586.744204][T14460] do_filp_open+0x20b/0x470 [ 586.744248][T14460] ? __pfx_do_filp_open+0x10/0x10 [ 586.744319][T14460] ? alloc_fd+0x471/0x7d0 [ 586.744372][T14460] do_sys_openat2+0x121/0x290 [ 586.744405][T14460] ? __pfx_do_sys_openat2+0x10/0x10 [ 586.744450][T14460] __x64_sys_openat+0x174/0x210 [ 586.744483][T14460] ? __pfx___x64_sys_openat+0x10/0x10 [ 586.744542][T14460] do_syscall_64+0xcd/0xf80 [ 586.744590][T14460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.744619][T14460] RIP: 0033:0x7f8377f8f7c9 [ 586.744644][T14460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.744672][T14460] RSP: 002b:00007f8378efa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 586.744701][T14460] RAX: ffffffffffffffda RBX: 00007f83781e5fa0 RCX: 00007f8377f8f7c9 [ 586.744721][T14460] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 586.744740][T14460] RBP: 00007f8378013f91 R08: 0000000000000000 R09: 0000000000000000 [ 586.744758][T14460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.744776][T14460] R13: 00007f83781e6038 R14: 00007f83781e5fa0 R15: 00007ffda489f1d8 [ 586.744816][T14460] [ 587.191543][T14470] ima: policy update failed [ 587.233107][ T30] audit: type=1802 audit(1767149814.343:86): pid=14470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2128" res=0 errno=0 [ 587.262280][T14471] ptrace attach of "./syz-executor exec"[14473] was attempted by "./syz-executor exec"[14471] [ 587.276116][T14470] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2128'. [ 588.885340][T14505] netlink: del zone limit has 4 unknown bytes [ 589.047334][T14510] MTRR 0 not used [ 589.493195][T14519] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 591.174102][T14518] kexec: Could not allocate control_code_buffer [ 591.443363][T14550] netlink: del zone limit has 4 unknown bytes [ 592.315674][T14560] zswap: compressor not available [ 592.711673][T14574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2152'. [ 592.781470][ T30] audit: type=1806 audit(1767149819.861:87): res=-12 [ 592.950025][T14586] netlink: del zone limit has 4 unknown bytes [ 595.723854][T14627] zswap: compressor not available [ 598.105269][T14662] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 599.879817][T14659] kexec: Could not allocate control_code_buffer [ 600.505867][T14709] ptrace attach of "./syz-executor exec"[14710] was attempted by "./syz-executor exec"[14709] [ 600.702170][T14719] binder: 14716:14719 unknown command 5 [ 600.714065][T14719] binder: 14716:14719 ioctl c0306201 0 returned -22 [ 600.899625][T14718] zswap: compressor not available [ 601.033251][T14718] FAULT_INJECTION: forcing a failure. [ 601.033251][T14718] name failslab, interval 1, probability 0, space 0, times 0 [ 601.049169][T14718] CPU: 0 UID: 0 PID: 14718 Comm: syz.3.2191 Tainted: G U L syzkaller #0 PREEMPT(full) [ 601.049218][T14718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 601.049229][T14718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 601.049247][T14718] Call Trace: [ 601.049257][T14718] [ 601.049269][T14718] dump_stack_lvl+0x16c/0x1f0 [ 601.049316][T14718] should_fail_ex+0x512/0x640 [ 601.049347][T14718] ? kmem_cache_alloc_noprof+0x62/0x770 [ 601.049386][T14718] ? __pfx_proc_net_ns_init+0x10/0x10 [ 601.049423][T14718] should_failslab+0xc2/0x120 [ 601.049465][T14718] kmem_cache_alloc_noprof+0x83/0x770 [ 601.049498][T14718] ? proc_net_ns_init+0x42/0x420 [ 601.049538][T14718] ? __pfx_proc_net_ns_init+0x10/0x10 [ 601.049578][T14718] ? proc_net_ns_init+0x42/0x420 [ 601.049614][T14718] proc_net_ns_init+0x42/0x420 [ 601.049653][T14718] ? __pfx_proc_net_ns_init+0x10/0x10 [ 601.049690][T14718] ops_init+0x1e2/0x5f0 [ 601.049732][T14718] setup_net+0x11d/0x3a0 [ 601.049770][T14718] ? __pfx_setup_net+0x10/0x10 [ 601.049806][T14718] ? lockdep_init_map_type+0x5c/0x270 [ 601.049837][T14718] ? mutex_init_lockep+0x110/0x150 [ 601.049881][T14718] copy_net_ns+0x351/0x7c0 [ 601.049927][T14718] create_new_namespaces+0x3ea/0xab0 [ 601.049974][T14718] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 601.050016][T14718] ksys_unshare+0x45b/0xa40 [ 601.050060][T14718] ? __pfx_ksys_unshare+0x10/0x10 [ 601.050103][T14718] ? xfd_validate_state+0x61/0x180 [ 601.050139][T14718] __x64_sys_unshare+0x31/0x40 [ 601.050179][T14718] do_syscall_64+0xcd/0xf80 [ 601.050221][T14718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.050250][T14718] RIP: 0033:0x7f0898d8f7c9 [ 601.050274][T14718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.050301][T14718] RSP: 002b:00007f0899cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 601.050328][T14718] RAX: ffffffffffffffda RBX: 00007f0898fe5fa0 RCX: 00007f0898d8f7c9 [ 601.050343][T14718] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 601.050360][T14718] RBP: 00007f0898e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 601.050378][T14718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 601.050395][T14718] R13: 00007f0898fe6038 R14: 00007f0898fe5fa0 R15: 00007ffd11439b28 [ 601.050434][T14718] [ 601.471001][T14731] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 604.144689][T14762] ptrace attach of "./syz-executor exec"[14764] was attempted by "./syz-executor exec"[14762] [ 604.332041][T14769] FAULT_INJECTION: forcing a failure. [ 604.332041][T14769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.345500][T14769] CPU: 1 UID: 0 PID: 14769 Comm: syz.2.2202 Tainted: G U L syzkaller #0 PREEMPT(full) [ 604.345527][T14769] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 604.345532][T14769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 604.345543][T14769] Call Trace: [ 604.345551][T14769] [ 604.345568][T14769] dump_stack_lvl+0x16c/0x1f0 [ 604.345616][T14769] should_fail_ex+0x512/0x640 [ 604.345651][T14769] _copy_to_user+0x32/0xd0 [ 604.345682][T14769] simple_read_from_buffer+0xcb/0x170 [ 604.345721][T14769] proc_fail_nth_read+0x197/0x240 [ 604.345764][T14769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 604.345809][T14769] ? rw_verify_area+0xcf/0x6c0 [ 604.345843][T14769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 604.345885][T14769] vfs_read+0x1e4/0xcf0 [ 604.345923][T14769] ? __pfx___mutex_lock+0x10/0x10 [ 604.345966][T14769] ? __pfx_vfs_read+0x10/0x10 [ 604.346012][T14769] ? __fget_files+0x20e/0x3c0 [ 604.346058][T14769] ksys_read+0x12a/0x250 [ 604.346094][T14769] ? __pfx_ksys_read+0x10/0x10 [ 604.346139][T14769] do_syscall_64+0xcd/0xf80 [ 604.346180][T14769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.346208][T14769] RIP: 0033:0x7fc47298e1dc [ 604.346230][T14769] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 604.346256][T14769] RSP: 002b:00007fc470bf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 604.346281][T14769] RAX: ffffffffffffffda RBX: 00007fc472be5fa0 RCX: 00007fc47298e1dc [ 604.346300][T14769] RDX: 000000000000000f RSI: 00007fc470bf60a0 RDI: 0000000000000005 [ 604.346316][T14769] RBP: 00007fc470bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 604.346333][T14769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.346352][T14769] R13: 00007fc472be6038 R14: 00007fc472be5fa0 R15: 00007fff8fdd4fb8 [ 604.346390][T14769] [ 605.691027][T14797] zswap: compressor not available [ 605.942555][T14797] FAULT_INJECTION: forcing a failure. [ 605.942555][T14797] name failslab, interval 1, probability 0, space 0, times 0 [ 606.017067][T14797] CPU: 0 UID: 0 PID: 14797 Comm: syz.2.2212 Tainted: G U L syzkaller #0 PREEMPT(full) [ 606.017121][T14797] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 606.017133][T14797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 606.017153][T14797] Call Trace: [ 606.017163][T14797] [ 606.017175][T14797] dump_stack_lvl+0x16c/0x1f0 [ 606.017223][T14797] should_fail_ex+0x512/0x640 [ 606.017255][T14797] ? kmem_cache_alloc_noprof+0x62/0x770 [ 606.017295][T14797] should_failslab+0xc2/0x120 [ 606.017337][T14797] kmem_cache_alloc_noprof+0x83/0x770 [ 606.017370][T14797] ? putname+0xf5/0x1a0 [ 606.017394][T14797] ? create_new_namespaces+0x30/0xab0 [ 606.017439][T14797] ? create_new_namespaces+0x30/0xab0 [ 606.017475][T14797] create_new_namespaces+0x30/0xab0 [ 606.017512][T14797] ? bpf_lsm_capable+0x9/0x10 [ 606.017549][T14797] ? security_capable+0x7e/0x260 [ 606.017596][T14797] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 606.017636][T14797] ksys_unshare+0x45b/0xa40 [ 606.017686][T14797] ? __pfx_ksys_unshare+0x10/0x10 [ 606.017729][T14797] ? xfd_validate_state+0x61/0x180 [ 606.017766][T14797] __x64_sys_unshare+0x31/0x40 [ 606.017807][T14797] do_syscall_64+0xcd/0xf80 [ 606.017850][T14797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.017878][T14797] RIP: 0033:0x7fc47298f7c9 [ 606.017900][T14797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.017927][T14797] RSP: 002b:00007fc470bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 606.017955][T14797] RAX: ffffffffffffffda RBX: 00007fc472be5fa0 RCX: 00007fc47298f7c9 [ 606.017974][T14797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 606.017991][T14797] RBP: 00007fc472a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 606.018009][T14797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.018026][T14797] R13: 00007fc472be6038 R14: 00007fc472be5fa0 R15: 00007fff8fdd4fb8 [ 606.018063][T14797] [ 606.287149][T14809] MTRR 0 not used [ 606.471379][T14816] ptrace attach of "./syz-executor exec"[14817] was attempted by "./syz-executor exec"[14816] [ 608.299272][T14856] zswap: compressor not available [ 608.494495][T14856] FAULT_INJECTION: forcing a failure. [ 608.494495][T14856] name failslab, interval 1, probability 0, space 0, times 0 [ 608.521874][T14856] CPU: 1 UID: 0 PID: 14856 Comm: syz.1.2224 Tainted: G U L syzkaller #0 PREEMPT(full) [ 608.521922][T14856] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 608.521933][T14856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 608.521949][T14856] Call Trace: [ 608.521956][T14856] [ 608.521963][T14856] dump_stack_lvl+0x16c/0x1f0 [ 608.521990][T14856] should_fail_ex+0x512/0x640 [ 608.522008][T14856] ? fs_reclaim_acquire+0xae/0x150 [ 608.522033][T14856] should_failslab+0xc2/0x120 [ 608.522055][T14856] kmem_cache_alloc_noprof+0x83/0x770 [ 608.522073][T14856] ? __pfx_map_id_range_down+0x10/0x10 [ 608.522094][T14856] ? security_inode_alloc+0x3b/0x2b0 [ 608.522113][T14856] ? security_inode_alloc+0x3b/0x2b0 [ 608.522127][T14856] security_inode_alloc+0x3b/0x2b0 [ 608.522143][T14856] inode_init_always_gfp+0xced/0x1040 [ 608.522176][T14856] alloc_inode+0x86/0x240 [ 608.522192][T14856] new_inode+0x22/0x1c0 [ 608.522211][T14856] __debugfs_create_file+0x105/0x530 [ 608.522239][T14856] debugfs_create_file_full+0x41/0x60 [ 608.522265][T14856] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 608.522283][T14856] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 608.522318][T14856] ? lockdep_init_map_type+0x5c/0x270 [ 608.522336][T14856] preinit_net.part.0+0x437/0x8f0 [ 608.522357][T14856] copy_net_ns+0x4cd/0x7c0 [ 608.522380][T14856] create_new_namespaces+0x3ea/0xab0 [ 608.522407][T14856] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 608.522428][T14856] ksys_unshare+0x45b/0xa40 [ 608.522451][T14856] ? __pfx_ksys_unshare+0x10/0x10 [ 608.522477][T14856] ? xfd_validate_state+0x61/0x180 [ 608.522497][T14856] __x64_sys_unshare+0x31/0x40 [ 608.522518][T14856] do_syscall_64+0xcd/0xf80 [ 608.522542][T14856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.522557][T14856] RIP: 0033:0x7f8377f8f7c9 [ 608.522569][T14856] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 608.522584][T14856] RSP: 002b:00007f8378efa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 608.522599][T14856] RAX: ffffffffffffffda RBX: 00007f83781e5fa0 RCX: 00007f8377f8f7c9 [ 608.522609][T14856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 608.522618][T14856] RBP: 00007f8378013f91 R08: 0000000000000000 R09: 0000000000000000 [ 608.522627][T14856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.522636][T14856] R13: 00007f83781e6038 R14: 00007f83781e5fa0 R15: 00007ffda489f1d8 [ 608.522657][T14856] [ 608.522696][T14856] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88807f25a850' [ 609.046272][T14879] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2230'. [ 609.091714][T14879] netlink: 274 bytes leftover after parsing attributes in process `syz.1.2230'. [ 609.146032][T14882] ptrace attach of "./syz-executor exec"[14883] was attempted by "./syz-executor exec"[14882] [ 610.183036][T14899] zswap: compressor not available [ 610.419512][T14899] FAULT_INJECTION: forcing a failure. [ 610.419512][T14899] name failslab, interval 1, probability 0, space 0, times 0 [ 610.477330][T14899] CPU: 0 UID: 0 PID: 14899 Comm: syz.2.2236 Tainted: G U L syzkaller #0 PREEMPT(full) [ 610.477359][T14899] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 610.477365][T14899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 610.477375][T14899] Call Trace: [ 610.477380][T14899] [ 610.477387][T14899] dump_stack_lvl+0x16c/0x1f0 [ 610.477413][T14899] should_fail_ex+0x512/0x640 [ 610.477430][T14899] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 610.477452][T14899] should_failslab+0xc2/0x120 [ 610.477475][T14899] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 610.477494][T14899] ? alloc_inode+0x64/0x240 [ 610.477513][T14899] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 610.477536][T14899] ? alloc_inode+0x64/0x240 [ 610.477550][T14899] alloc_inode+0x64/0x240 [ 610.477566][T14899] new_inode+0x22/0x1c0 [ 610.477584][T14899] __debugfs_create_file+0x105/0x530 [ 610.477610][T14899] debugfs_create_file_full+0x41/0x60 [ 610.477636][T14899] ref_tracker_dir_debugfs+0x19d/0x2f0 [ 610.477654][T14899] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 610.477689][T14899] ? lockdep_init_map_type+0x5c/0x270 [ 610.477715][T14899] preinit_net.part.0+0x437/0x8f0 [ 610.477737][T14899] copy_net_ns+0x4cd/0x7c0 [ 610.477760][T14899] create_new_namespaces+0x3ea/0xab0 [ 610.477786][T14899] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 610.477807][T14899] ksys_unshare+0x45b/0xa40 [ 610.477834][T14899] ? __pfx_ksys_unshare+0x10/0x10 [ 610.477857][T14899] ? xfd_validate_state+0x61/0x180 [ 610.477877][T14899] __x64_sys_unshare+0x31/0x40 [ 610.477898][T14899] do_syscall_64+0xcd/0xf80 [ 610.477922][T14899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.477937][T14899] RIP: 0033:0x7fc47298f7c9 [ 610.477951][T14899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.477965][T14899] RSP: 002b:00007fc470bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 610.477980][T14899] RAX: ffffffffffffffda RBX: 00007fc472be5fa0 RCX: 00007fc47298f7c9 [ 610.477991][T14899] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 610.478000][T14899] RBP: 00007fc472a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 610.478009][T14899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.478018][T14899] R13: 00007fc472be6038 R14: 00007fc472be5fa0 R15: 00007fff8fdd4fb8 [ 610.478039][T14899] [ 610.478046][T14899] debugfs: out of free dentries, can not create file 'net_notrefcnt@ffff88807aee0290' [ 610.968023][T14912] zswap: compressor q}¿qHvºˆ÷w‡âÎðïd´Ê¦å>ìÿÁÄ»BiÛJvSjHFªm not available [ 611.199701][T14918] zswap: compressor not available [ 611.866144][T14939] FAULT_INJECTION: forcing a failure. [ 611.866144][T14939] name fail_futex, interval 1, probability 0, space 0, times 0 [ 611.879390][T14939] CPU: 0 UID: 0 PID: 14939 Comm: syz.0.2245 Tainted: G U L syzkaller #0 PREEMPT(full) [ 611.879415][T14939] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 611.879421][T14939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 611.879430][T14939] Call Trace: [ 611.879435][T14939] [ 611.879441][T14939] dump_stack_lvl+0x16c/0x1f0 [ 611.879466][T14939] should_fail_ex+0x512/0x640 [ 611.879485][T14939] get_futex_key+0x1d0/0x15f0 [ 611.879504][T14939] ? __pfx_get_futex_key+0x10/0x10 [ 611.879526][T14939] futex_wake+0xea/0x530 [ 611.879547][T14939] ? __pfx_futex_wake+0x10/0x10 [ 611.879574][T14939] do_futex+0x1e3/0x350 [ 611.879590][T14939] ? __pfx_do_futex+0x10/0x10 [ 611.879605][T14939] ? __might_fault+0xe3/0x190 [ 611.879633][T14939] mm_release+0x24e/0x300 [ 611.879666][T14939] do_exit+0x69e/0x2bd0 [ 611.879695][T14939] ? __pfx_do_exit+0x10/0x10 [ 611.879719][T14939] ? do_raw_spin_lock+0x12c/0x2b0 [ 611.879740][T14939] ? find_held_lock+0x2b/0x80 [ 611.879761][T14939] do_group_exit+0xd3/0x2a0 [ 611.879777][T14939] get_signal+0x2671/0x26d0 [ 611.879796][T14939] ? __pfx_futex_wake+0x10/0x10 [ 611.879825][T14939] ? putname+0xf5/0x1a0 [ 611.879840][T14939] ? __pfx_get_signal+0x10/0x10 [ 611.879860][T14939] ? do_futex+0x122/0x350 [ 611.879877][T14939] arch_do_signal_or_restart+0x8f/0x7a0 [ 611.879899][T14939] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 611.879924][T14939] ? __x64_sys_openat+0x174/0x210 [ 611.879940][T14939] ? __pfx___x64_sys_futex+0x10/0x10 [ 611.879960][T14939] exit_to_user_mode_loop+0x8c/0x540 [ 611.879981][T14939] do_syscall_64+0x4ee/0xf80 [ 611.880003][T14939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.880018][T14939] RIP: 0033:0x7f080638f7c9 [ 611.880031][T14939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.880046][T14939] RSP: 002b:00007f08073020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 611.880061][T14939] RAX: 0000000000000001 RBX: 00007f08065e5fa8 RCX: 00007f080638f7c9 [ 611.880070][T14939] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f08065e5fac [ 611.880079][T14939] RBP: 00007f08065e5fa0 R08: 00007f0807303000 R09: 0000000000000000 [ 611.880089][T14939] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 611.880097][T14939] R13: 00007f08065e6038 R14: 00007ffd7565ede0 R15: 00007ffd7565eec8 [ 611.880116][T14939] [ 612.436483][T14941] zswap: compressor ûW–îë“;Å0못„?u=8å}Öƒ•L­Ö(£E‘¤¤Ö¹‰jj–8+ÕÄxp¥—Èœ‹ŒNkR³¦°¤uoêÇo‹ÿ¬<µSÔH ¾}ïEd }¡ìöP¢…8a [ 613.649216][T14976] dump_stack_lvl+0x16c/0x1f0 [ 613.649245][T14976] should_fail_ex+0x512/0x640 [ 613.649265][T14976] get_futex_key+0x1d0/0x15f0 [ 613.649284][T14976] ? __pfx_get_futex_key+0x10/0x10 [ 613.649299][T14976] ? find_held_lock+0x2b/0x80 [ 613.649325][T14976] futex_wake+0xea/0x530 [ 613.649346][T14976] ? __pfx_futex_wake+0x10/0x10 [ 613.649365][T14976] ? __pfx_vfs_writev+0x10/0x10 [ 613.649386][T14976] ? do_writev+0x218/0x340 [ 613.649408][T14976] do_futex+0x1e3/0x350 [ 613.649425][T14976] ? __pfx_do_futex+0x10/0x10 [ 613.649440][T14976] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 613.649468][T14976] __x64_sys_futex+0x1e0/0x4c0 [ 613.649486][T14976] ? fput+0x70/0xf0 [ 613.649500][T14976] ? __pfx___x64_sys_futex+0x10/0x10 [ 613.649517][T14976] ? __pfx_do_writev+0x10/0x10 [ 613.649541][T14976] do_syscall_64+0xcd/0xf80 [ 613.649567][T14976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.649582][T14976] RIP: 0033:0x7f080638f7c9 [ 613.649595][T14976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.649611][T14976] RSP: 002b:00007f08073020e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 613.649626][T14976] RAX: ffffffffffffffda RBX: 00007f08065e5fa8 RCX: 00007f080638f7c9 [ 613.649637][T14976] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f08065e5fac [ 613.649649][T14976] RBP: 00007f08065e5fa0 R08: 00007f0807303000 R09: 0000000000000000 [ 613.649658][T14976] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 613.649667][T14976] R13: 00007f08065e6038 R14: 00007ffd7565ede0 R15: 00007ffd7565eec8 [ 613.649687][T14976] [ 614.080684][T14991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2257'. [ 614.527374][T14999] FAULT_INJECTION: forcing a failure. [ 614.527374][T14999] name failslab, interval 1, probability 0, space 0, times 0 [ 614.566325][T14999] CPU: 0 UID: 0 PID: 14999 Comm: syz.3.2259 Tainted: G U L syzkaller #0 PREEMPT(full) [ 614.566352][T14999] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 614.566358][T14999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 614.566367][T14999] Call Trace: [ 614.566372][T14999] [ 614.566378][T14999] dump_stack_lvl+0x16c/0x1f0 [ 614.566404][T14999] should_fail_ex+0x512/0x640 [ 614.566420][T14999] ? kmem_cache_alloc_node_noprof+0x65/0x800 [ 614.566445][T14999] should_failslab+0xc2/0x120 [ 614.566467][T14999] kmem_cache_alloc_node_noprof+0x86/0x800 [ 614.566485][T14999] ? __alloc_skb+0x156/0x410 [ 614.566505][T14999] ? __alloc_skb+0x156/0x410 [ 614.566519][T14999] __alloc_skb+0x156/0x410 [ 614.566533][T14999] ? __alloc_skb+0x35d/0x410 [ 614.566548][T14999] ? __pfx___alloc_skb+0x10/0x10 [ 614.566572][T14999] ? __pfx___might_resched+0x10/0x10 [ 614.566593][T14999] ? __lock_acquire+0x436/0x2890 [ 614.566610][T14999] netlink_alloc_large_skb+0x69/0x140 [ 614.566632][T14999] netlink_sendmsg+0x698/0xdd0 [ 614.566655][T14999] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.566678][T14999] ? aa_sock_msg_perm.constprop.0+0x100/0x1b0 [ 614.566705][T14999] ____sys_sendmsg+0xa5d/0xc30 [ 614.566728][T14999] ? copy_msghdr_from_user+0x10a/0x160 [ 614.566746][T14999] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.566785][T14999] ___sys_sendmsg+0x134/0x1d0 [ 614.566818][T14999] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.566872][T14999] __sys_sendmsg+0x16d/0x220 [ 614.566890][T14999] ? __pfx___sys_sendmsg+0x10/0x10 [ 614.566920][T14999] do_syscall_64+0xcd/0xf80 [ 614.566943][T14999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.566958][T14999] RIP: 0033:0x7f0898d8f7c9 [ 614.566971][T14999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 614.566985][T14999] RSP: 002b:00007f0899cc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.567000][T14999] RAX: ffffffffffffffda RBX: 00007f0898fe5fa0 RCX: 00007f0898d8f7c9 [ 614.567010][T14999] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 614.567019][T14999] RBP: 00007f0899cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 614.567028][T14999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.567036][T14999] R13: 00007f0898fe6038 R14: 00007f0898fe5fa0 R15: 00007ffd11439b28 [ 614.567056][T14999] [ 615.108945][T15003] ima: policy update failed [ 615.113614][ T30] audit: type=1802 audit(1767149842.200:88): pid=15003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2260" res=0 errno=0 [ 615.334221][T15008] ima: policy update failed [ 615.343220][ T30] audit: type=1802 audit(1767149842.429:89): pid=15008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2262" res=0 errno=0 [ 615.715279][T15017] FAULT_INJECTION: forcing a failure. [ 615.715279][T15017] name fail_futex, interval 1, probability 0, space 0, times 0 [ 615.738858][T15017] CPU: 0 UID: 0 PID: 15017 Comm: syz.2.2265 Tainted: G U L syzkaller #0 PREEMPT(full) [ 615.738887][T15017] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 615.738894][T15017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 615.738903][T15017] Call Trace: [ 615.738909][T15017] [ 615.738916][T15017] dump_stack_lvl+0x16c/0x1f0 [ 615.738943][T15017] should_fail_ex+0x512/0x640 [ 615.738963][T15017] get_futex_key+0x1d0/0x15f0 [ 615.738982][T15017] ? __pfx_get_futex_key+0x10/0x10 [ 615.738997][T15017] ? find_held_lock+0x2b/0x80 [ 615.739023][T15017] futex_wake+0xea/0x530 [ 615.739045][T15017] ? __pfx_futex_wake+0x10/0x10 [ 615.739064][T15017] ? __pfx_vfs_writev+0x10/0x10 [ 615.739085][T15017] ? do_writev+0x218/0x340 [ 615.739110][T15017] do_futex+0x1e3/0x350 [ 615.739127][T15017] ? __pfx_do_futex+0x10/0x10 [ 615.739142][T15017] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 615.739172][T15017] __x64_sys_futex+0x1e0/0x4c0 [ 615.739191][T15017] ? fput+0x70/0xf0 [ 615.739205][T15017] ? __pfx___x64_sys_futex+0x10/0x10 [ 615.739222][T15017] ? __pfx_do_writev+0x10/0x10 [ 615.739246][T15017] do_syscall_64+0xcd/0xf80 [ 615.739268][T15017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.739284][T15017] RIP: 0033:0x7fc47298f7c9 [ 615.739297][T15017] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.739311][T15017] RSP: 002b:00007fc470bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 615.739325][T15017] RAX: ffffffffffffffda RBX: 00007fc472be5fa8 RCX: 00007fc47298f7c9 [ 615.739336][T15017] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc472be5fac [ 615.739345][T15017] RBP: 00007fc472be5fa0 R08: 00007fc473734000 R09: 0000000000000000 [ 615.739354][T15017] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 615.739363][T15017] R13: 00007fc472be6038 R14: 00007fff8fdd4ed0 R15: 00007fff8fdd4fb8 [ 615.739383][T15017] [ 616.024053][T15011] netlink: 'syz.0.2263': attribute type 1 has an invalid length. [ 618.198514][T15048] zswap: compressor not available [ 619.334929][T15032] kexec: Could not allocate control_code_buffer [ 619.517320][T15066] FAULT_INJECTION: forcing a failure. [ 619.517320][T15066] name fail_futex, interval 1, probability 0, space 0, times 0 [ 619.564248][T15066] CPU: 0 UID: 0 PID: 15066 Comm: syz.3.2276 Tainted: G U L syzkaller #0 PREEMPT(full) [ 619.564295][T15066] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 619.564307][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 619.564323][T15066] Call Trace: [ 619.564333][T15066] [ 619.564345][T15066] dump_stack_lvl+0x16c/0x1f0 [ 619.564391][T15066] should_fail_ex+0x512/0x640 [ 619.564426][T15066] get_futex_key+0x1d0/0x15f0 [ 619.564459][T15066] ? __pfx_get_futex_key+0x10/0x10 [ 619.564483][T15066] ? find_held_lock+0x2b/0x80 [ 619.564525][T15066] futex_wake+0xea/0x530 [ 619.564558][T15066] ? __pfx_futex_wake+0x10/0x10 [ 619.564591][T15066] ? __pfx_vfs_writev+0x10/0x10 [ 619.564629][T15066] ? do_writev+0x218/0x340 [ 619.564668][T15066] do_futex+0x1e3/0x350 [ 619.564698][T15066] ? __pfx_do_futex+0x10/0x10 [ 619.564722][T15066] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 619.564769][T15066] __x64_sys_futex+0x1e0/0x4c0 [ 619.564801][T15066] ? fput+0x70/0xf0 [ 619.564827][T15066] ? __pfx___x64_sys_futex+0x10/0x10 [ 619.564858][T15066] ? __pfx_do_writev+0x10/0x10 [ 619.564901][T15066] do_syscall_64+0xcd/0xf80 [ 619.564943][T15066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.564972][T15066] RIP: 0033:0x7f0898d8f7c9 [ 619.564995][T15066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 619.565024][T15066] RSP: 002b:00007f0899ca60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 619.565049][T15066] RAX: ffffffffffffffda RBX: 00007f0898fe6098 RCX: 00007f0898d8f7c9 [ 619.565066][T15066] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0898fe609c [ 619.565083][T15066] RBP: 00007f0898fe6090 R08: 00007f0899cc8000 R09: 0000000000000000 [ 619.565111][T15066] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 619.565128][T15066] R13: 00007f0898fe6128 R14: 00007ffd11439a40 R15: 00007ffd11439b28 [ 619.565165][T15066] [ 620.011289][T15074] MTRR 0 not used [ 620.901548][T15067] kexec: Could not allocate control_code_buffer [ 621.954787][T15084] Invalid ELF header magic: != ELF [ 622.140435][T15102] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2286'. [ 622.178440][T15102] FAULT_INJECTION: forcing a failure. [ 622.178440][T15102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.246043][T15102] CPU: 1 UID: 0 PID: 15102 Comm: syz.2.2286 Tainted: G U L syzkaller #0 PREEMPT(full) [ 622.246085][T15102] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 622.246091][T15102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 622.246100][T15102] Call Trace: [ 622.246105][T15102] [ 622.246112][T15102] dump_stack_lvl+0x16c/0x1f0 [ 622.246137][T15102] should_fail_ex+0x512/0x640 [ 622.246157][T15102] _copy_from_user+0x2e/0xd0 [ 622.246174][T15102] memdup_user_nul+0x6c/0x120 [ 622.246194][T15102] evm_write_xattrs+0x1f3/0x8d0 [ 622.246213][T15102] ? __pfx_evm_write_xattrs+0x10/0x10 [ 622.246239][T15102] ? __pfx_evm_write_xattrs+0x10/0x10 [ 622.246255][T15102] vfs_write+0x2a0/0x11d0 [ 622.246277][T15102] ? __pfx___mutex_lock+0x10/0x10 [ 622.246301][T15102] ? __pfx_vfs_write+0x10/0x10 [ 622.246326][T15102] ? __fget_files+0x20e/0x3c0 [ 622.246352][T15102] ksys_write+0x12a/0x250 [ 622.246371][T15102] ? __pfx_ksys_write+0x10/0x10 [ 622.246397][T15102] do_syscall_64+0xcd/0xf80 [ 622.246419][T15102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.246435][T15102] RIP: 0033:0x7fc47298f7c9 [ 622.246448][T15102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 622.246462][T15102] RSP: 002b:00007fc470bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 622.246476][T15102] RAX: ffffffffffffffda RBX: 00007fc472be5fa0 RCX: 00007fc47298f7c9 [ 622.246486][T15102] RDX: 000000000000001a RSI: 0000000000000000 RDI: 0000000000000005 [ 622.246495][T15102] RBP: 00007fc470bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 622.246504][T15102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.246512][T15102] R13: 00007fc472be6038 R14: 00007fc472be5fa0 R15: 00007fff8fdd4fb8 [ 622.246532][T15102] [ 622.447249][ T30] audit: type=1806 audit(1767149849.269:90): res=-14 [ 623.660791][T15133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2292'. [ 623.750454][T15123] zswap: compressor not available [ 624.025984][T15141] FAULT_INJECTION: forcing a failure. [ 624.025984][T15141] name failslab, interval 1, probability 0, space 0, times 0 [ 624.074342][T15141] CPU: 1 UID: 0 PID: 15141 Comm: syz.3.2294 Tainted: G U L syzkaller #0 PREEMPT(full) [ 624.074370][T15141] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 624.074376][T15141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 624.074385][T15141] Call Trace: [ 624.074391][T15141] [ 624.074397][T15141] dump_stack_lvl+0x16c/0x1f0 [ 624.074423][T15141] should_fail_ex+0x512/0x640 [ 624.074440][T15141] ? fs_reclaim_acquire+0xae/0x150 [ 624.074464][T15141] should_failslab+0xc2/0x120 [ 624.074486][T15141] __kmalloc_noprof+0xeb/0x910 [ 624.074502][T15141] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 624.074526][T15141] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 624.074545][T15141] tomoyo_realpath_from_path+0xc2/0x6e0 [ 624.074567][T15141] ? tomoyo_profile+0x47/0x60 [ 624.074590][T15141] tomoyo_path_number_perm+0x245/0x580 [ 624.074606][T15141] ? tomoyo_path_number_perm+0x237/0x580 [ 624.074654][T15141] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 624.074673][T15141] ? find_held_lock+0x2b/0x80 [ 624.074709][T15141] ? find_held_lock+0x2b/0x80 [ 624.074726][T15141] ? hook_file_ioctl_common+0x144/0x410 [ 624.074748][T15141] ? __fget_files+0x20e/0x3c0 [ 624.074772][T15141] security_file_ioctl+0x9b/0x240 [ 624.074791][T15141] __x64_sys_ioctl+0xb7/0x210 [ 624.074811][T15141] do_syscall_64+0xcd/0xf80 [ 624.074833][T15141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.074849][T15141] RIP: 0033:0x7f0898d8f7c9 [ 624.074862][T15141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.074876][T15141] RSP: 002b:00007f0899cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 624.074892][T15141] RAX: ffffffffffffffda RBX: 00007f0898fe5fa0 RCX: 00007f0898d8f7c9 [ 624.074902][T15141] RDX: 0000000000000038 RSI: 00000000404c534a RDI: 0000000000000003 [ 624.074911][T15141] RBP: 00007f0899cc7090 R08: 0000000000000000 R09: 0000000000000000 [ 624.074920][T15141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.074929][T15141] R13: 00007f0898fe6038 R14: 00007f0898fe5fa0 R15: 00007ffd11439b28 [ 624.074948][T15141] [ 624.074955][T15141] ERROR: Out of memory at tomoyo_realpath_from_path. [ 624.670687][T15154] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2299'. [ 624.768560][T15156] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2299'. [ 625.513634][T15168] FAULT_INJECTION: forcing a failure. [ 625.513634][T15168] name failslab, interval 1, probability 0, space 0, times 0 [ 625.578272][T15168] CPU: 0 UID: 0 PID: 15168 Comm: syz.0.2302 Tainted: G U L syzkaller #0 PREEMPT(full) [ 625.578316][T15168] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 625.578327][T15168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 625.578342][T15168] Call Trace: [ 625.578351][T15168] [ 625.578363][T15168] dump_stack_lvl+0x16c/0x1f0 [ 625.578406][T15168] should_fail_ex+0x512/0x640 [ 625.578435][T15168] ? fs_reclaim_acquire+0xae/0x150 [ 625.578477][T15168] should_failslab+0xc2/0x120 [ 625.578518][T15168] __kmalloc_noprof+0xeb/0x910 [ 625.578546][T15168] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 625.578589][T15168] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 625.578622][T15168] tomoyo_realpath_from_path+0xc2/0x6e0 [ 625.578661][T15168] ? tomoyo_profile+0x47/0x60 [ 625.578703][T15168] tomoyo_path_number_perm+0x245/0x580 [ 625.578732][T15168] ? tomoyo_path_number_perm+0x237/0x580 [ 625.578766][T15168] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 625.578806][T15168] ? find_held_lock+0x2b/0x80 [ 625.578869][T15168] ? find_held_lock+0x2b/0x80 [ 625.578902][T15168] ? hook_file_ioctl_common+0x144/0x410 [ 625.578939][T15168] ? __fget_files+0x20e/0x3c0 [ 625.578982][T15168] security_file_ioctl+0x9b/0x240 [ 625.579015][T15168] __x64_sys_ioctl+0xb7/0x210 [ 625.579049][T15168] do_syscall_64+0xcd/0xf80 [ 625.579090][T15168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.579118][T15168] RIP: 0033:0x7f080638f7c9 [ 625.579140][T15168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.579165][T15168] RSP: 002b:00007f0807302038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 625.579190][T15168] RAX: ffffffffffffffda RBX: 00007f08065e5fa0 RCX: 00007f080638f7c9 [ 625.579208][T15168] RDX: 0000000000000007 RSI: 0000000000004b44 RDI: 0000000000000004 [ 625.579224][T15168] RBP: 00007f0807302090 R08: 0000000000000000 R09: 0000000000000000 [ 625.579241][T15168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.579256][T15168] R13: 00007f08065e6038 R14: 00007f08065e5fa0 R15: 00007ffd7565eec8 [ 625.579291][T15168] [ 625.579301][T15168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 625.579978][T15172] netlink: 'syz.3.2303': attribute type 1 has an invalid length. [ 627.257483][T15198] zswap: compressor ûW–îë“;Å0못„?u=8å}Öƒ•L­Ö(£E‘¤¤Ö¹‰jj–8+ÕÄxp¥—Èœ‹ŒNkR³¦°¤uoêÇo‹ÿ¬<µSÔH ¾}ïEd }¡ìöP¢…8a [ 631.881474][T15271] dump_stack_lvl+0x16c/0x1f0 [ 631.881509][T15271] should_fail_ex+0x512/0x640 [ 631.881527][T15271] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 631.881548][T15271] should_failslab+0xc2/0x120 [ 631.881571][T15271] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 631.881589][T15271] ? __d_lookup+0x25c/0x4a0 [ 631.881607][T15271] ? __d_alloc+0x35/0xa80 [ 631.881623][T15271] ? __d_alloc+0x35/0xa80 [ 631.881636][T15271] __d_alloc+0x35/0xa80 [ 631.881651][T15271] d_alloc+0x4a/0x1e0 [ 631.881666][T15271] lookup_one_qstr_excl+0x175/0x250 [ 631.881685][T15271] start_dirop+0x59/0xb0 [ 631.881705][T15271] simple_start_creating+0xf4/0x100 [ 631.881725][T15271] ? __pfx_simple_start_creating+0x10/0x10 [ 631.881744][T15271] ? do_raw_spin_unlock+0x172/0x230 [ 631.881763][T15271] ? simple_pin_fs+0xa3/0x190 [ 631.881782][T15271] debugfs_start_creating.part.0+0x86/0x1c0 [ 631.881807][T15271] debugfs_create_symlink+0x7f/0x260 [ 631.881823][T15271] ref_tracker_dir_symlink+0x255/0x3c0 [ 631.881842][T15271] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 631.881861][T15271] ? __lock_acquire+0x436/0x2890 [ 631.881890][T15271] ? lockdep_hardirqs_on+0x7c/0x110 [ 631.881918][T15271] ? crng_make_state+0x48e/0x6c0 [ 631.881939][T15271] ? __pfx_net_ns_net_init+0x10/0x10 [ 631.881959][T15271] net_ns_net_init+0xd2/0x120 [ 631.881980][T15271] ops_init+0x1e2/0x5f0 [ 631.882001][T15271] setup_net+0x11d/0x3a0 [ 631.882021][T15271] ? __pfx_setup_net+0x10/0x10 [ 631.882038][T15271] ? lockdep_init_map_type+0x5c/0x270 [ 631.882053][T15271] ? mutex_init_lockep+0x110/0x150 [ 631.882071][T15271] copy_net_ns+0x351/0x7c0 [ 631.882094][T15271] create_new_namespaces+0x3ea/0xab0 [ 631.882119][T15271] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 631.882140][T15271] ksys_unshare+0x45b/0xa40 [ 631.882163][T15271] ? __pfx_ksys_unshare+0x10/0x10 [ 631.882185][T15271] ? xfd_validate_state+0x61/0x180 [ 631.882206][T15271] __x64_sys_unshare+0x31/0x40 [ 631.882228][T15271] do_syscall_64+0xcd/0xf80 [ 631.882250][T15271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.882266][T15271] RIP: 0033:0x7f080638f7c9 [ 631.882279][T15271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.882294][T15271] RSP: 002b:00007f0807302038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 631.882309][T15271] RAX: ffffffffffffffda RBX: 00007f08065e5fa0 RCX: 00007f080638f7c9 [ 631.882319][T15271] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 631.882329][T15271] RBP: 00007f0806413f91 R08: 0000000000000000 R09: 0000000000000000 [ 631.882338][T15271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 631.882347][T15271] R13: 00007f08065e6038 R14: 00007f08065e5fa0 R15: 00007ffd7565eec8 [ 631.882368][T15271] [ 635.132320][T12973] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 635.143570][T12973] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 635.144120][T15323] MTRR 0 not used [ 635.155351][T12973] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 635.178066][T12973] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 635.189277][T12973] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 635.611106][T15320] chnl_net:caif_netlink_parms(): no params data found [ 636.003128][T15320] bridge0: port 1(bridge_slave_0) entered blocking state [ 636.028325][T15320] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.063413][T15320] bridge_slave_0: entered allmulticast mode [ 636.088819][T15320] bridge_slave_0: entered promiscuous mode [ 636.216261][ T4035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.284430][T15320] bridge0: port 2(bridge_slave_1) entered blocking state [ 636.297668][T15335] MTRR 0 not used [ 636.349563][T15320] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.356815][T15320] bridge_slave_1: entered allmulticast mode [ 636.397735][T15320] bridge_slave_1: entered promiscuous mode [ 636.467693][ T4035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.707341][T15338] zswap: compressor not available [ 636.768948][ T4035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.810228][T15320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.861771][ T4035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.874156][T15338] FAULT_INJECTION: forcing a failure. [ 636.874156][T15338] name failslab, interval 1, probability 0, space 0, times 0 [ 636.887958][T15339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2339'. [ 636.897060][T15338] CPU: 1 UID: 0 PID: 15338 Comm: syz.3.2340 Tainted: G U L syzkaller #0 PREEMPT(full) [ 636.897101][T15338] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 636.897111][T15338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 636.897125][T15338] Call Trace: [ 636.897137][T15338] [ 636.897148][T15338] dump_stack_lvl+0x16c/0x1f0 [ 636.897186][T15338] should_fail_ex+0x512/0x640 [ 636.897213][T15338] ? kmem_cache_alloc_lru_noprof+0x66/0x770 [ 636.897247][T15338] should_failslab+0xc2/0x120 [ 636.897284][T15338] kmem_cache_alloc_lru_noprof+0x87/0x770 [ 636.897316][T15338] ? alloc_inode+0x64/0x240 [ 636.897346][T15338] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 636.897377][T15338] ? alloc_inode+0x64/0x240 [ 636.897399][T15338] alloc_inode+0x64/0x240 [ 636.897424][T15338] new_inode+0x22/0x1c0 [ 636.897450][T15338] debugfs_create_symlink+0xd1/0x260 [ 636.897474][T15338] ref_tracker_dir_symlink+0x255/0x3c0 [ 636.897506][T15338] ? __pfx_ref_tracker_dir_symlink+0x10/0x10 [ 636.897539][T15338] ? __lock_acquire+0x436/0x2890 [ 636.897591][T15338] ? lockdep_hardirqs_on+0x7c/0x110 [ 636.897638][T15338] ? crng_make_state+0x48e/0x6c0 [ 636.897681][T15338] ? __pfx_net_ns_net_init+0x10/0x10 [ 636.897715][T15338] net_ns_net_init+0x7e/0x120 [ 636.897747][T15338] ops_init+0x1e2/0x5f0 [ 636.897781][T15338] setup_net+0x11d/0x3a0 [ 636.897813][T15338] ? __pfx_setup_net+0x10/0x10 [ 636.897842][T15338] ? lockdep_init_map_type+0x5c/0x270 [ 636.897865][T15338] ? mutex_init_lockep+0x110/0x150 [ 636.897901][T15338] copy_net_ns+0x351/0x7c0 [ 636.897951][T15338] create_new_namespaces+0x3ea/0xab0 [ 636.898003][T15338] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 636.898052][T15338] ksys_unshare+0x45b/0xa40 [ 636.898105][T15338] ? __pfx_ksys_unshare+0x10/0x10 [ 636.898151][T15338] ? xfd_validate_state+0x61/0x180 [ 636.898190][T15338] __x64_sys_unshare+0x31/0x40 [ 636.898239][T15338] do_syscall_64+0xcd/0xf80 [ 636.898289][T15338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.898322][T15338] RIP: 0033:0x7f0898d8f7c9 [ 636.898347][T15338] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.898383][T15338] RSP: 002b:00007f0899cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 636.898413][T15338] RAX: ffffffffffffffda RBX: 00007f0898fe5fa0 RCX: 00007f0898d8f7c9 [ 636.898433][T15338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 636.898453][T15338] RBP: 00007f0898e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 636.898473][T15338] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.898493][T15338] R13: 00007f0898fe6038 R14: 00007f0898fe5fa0 R15: 00007ffd11439b28 [ 636.898527][T15338] [ 637.172268][T15339] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2339'. [ 637.227196][T15338] debugfs: out of free dentries, can not create symlink 'netns-473-4026533689-refcnt' [ 637.258598][T12973] Bluetooth: hci4: command tx timeout [ 637.269528][T15320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 637.361136][T15320] team0: Port device team_slave_0 added [ 637.444602][T15320] team0: Port device team_slave_1 added [ 637.670142][T15320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 637.685240][T15320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.713717][T15320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 637.853695][T15320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 637.867217][T15320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 637.917216][T15320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 638.162525][ T4035] bridge_slave_1: left allmulticast mode [ 638.177246][ T4035] bridge_slave_1: left promiscuous mode [ 638.185159][ T4035] bridge0: port 2(bridge_slave_1) entered disabled state [ 638.206333][ T4035] bridge_slave_0: left allmulticast mode [ 638.224325][ T4035] bridge_slave_0: left promiscuous mode [ 638.230370][ T4035] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.761874][T15347] zswap: compressor not available [ 638.782472][ T4035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.814328][ T4035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.839177][ T4035] bond0 (unregistering): Released all slaves [ 638.977386][ T4035] HfR: left promiscuous mode [ 639.034513][T15320] hsr_slave_0: entered promiscuous mode [ 639.055341][T15320] hsr_slave_1: entered promiscuous mode [ 639.074906][T15320] debugfs: 'hsr0' already exists in 'hsr' [ 639.088134][T15320] Cannot create hsr debugfs directory [ 639.337777][T12973] Bluetooth: hci4: command tx timeout [ 639.615121][ T4035] hsr_slave_0: left promiscuous mode [ 639.655238][ T4035] hsr_slave_1: left promiscuous mode [ 639.668073][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 639.675518][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.769090][ T4035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.787239][ T4035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.867233][ T4035] veth1_macvtap: left promiscuous mode [ 639.873227][ T4035] veth0_macvtap: left promiscuous mode [ 639.880069][ T4035] veth1_vlan: left promiscuous mode [ 639.885537][ T4035] veth0_vlan: left promiscuous mode [ 641.015500][ T4035] team0 (unregistering): Port device team_slave_1 removed [ 641.069558][ T4035] team0 (unregistering): Port device team_slave_0 removed [ 641.364671][T15380] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2346'. [ 641.428592][T12973] Bluetooth: hci4: command tx timeout [ 643.064889][T15320] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 643.113439][T15320] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 643.168359][T15320] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 643.217637][T15320] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 643.497304][T12973] Bluetooth: hci4: command tx timeout [ 643.703334][T15320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 643.758593][T15320] 8021q: adding VLAN 0 to HW filter on device team0 [ 643.793635][ T2134] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.800864][ T2134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 643.847744][ T2134] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.854942][ T2134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.744907][T15320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 644.884540][T15320] veth0_vlan: entered promiscuous mode [ 644.952598][T15320] veth1_vlan: entered promiscuous mode [ 645.015695][T15320] veth0_macvtap: entered promiscuous mode [ 645.050999][T15320] veth1_macvtap: entered promiscuous mode [ 645.123322][T15320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 645.160695][T15320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 645.212379][ T1146] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.264251][ T1146] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.320783][ T1146] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.354461][ T1146] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.797357][ T2134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 645.805208][ T2134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 646.173987][ T3426] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 646.186183][ T3426] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 647.099541][T15506] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2360'. [ 647.414850][ T30] audit: type=1804 audit(1767149874.499:92): pid=15527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2363" name="/newroot/sys/kernel/tracing/trace_marker_raw" dev="tracefs" ino=228 res=1 errno=0 [ 648.339503][T15535] zswap: compressor not available [ 648.975155][T15551] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 649.010853][T15551] FAULT_INJECTION: forcing a failure. [ 649.010853][T15551] name failslab, interval 1, probability 0, space 0, times 0 [ 649.057189][T15551] CPU: 0 UID: 0 PID: 15551 Comm: syz.0.2368 Tainted: G U L syzkaller #0 PREEMPT(full) [ 649.057238][T15551] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 649.057250][T15551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.057267][T15551] Call Trace: [ 649.057276][T15551] [ 649.057286][T15551] dump_stack_lvl+0x16c/0x1f0 [ 649.057331][T15551] should_fail_ex+0x512/0x640 [ 649.057360][T15551] ? __kmalloc_cache_noprof+0x5f/0x800 [ 649.057396][T15551] should_failslab+0xc2/0x120 [ 649.057436][T15551] __kmalloc_cache_noprof+0x80/0x800 [ 649.057469][T15551] ? get_mountpoint+0x174/0x4f0 [ 649.057516][T15551] ? get_mountpoint+0x174/0x4f0 [ 649.057548][T15551] get_mountpoint+0x174/0x4f0 [ 649.057582][T15551] attach_recursive_mnt+0x26f/0x1b30 [ 649.057622][T15551] ? __pfx_attach_recursive_mnt+0x10/0x10 [ 649.057661][T15551] ? do_raw_spin_lock+0x12c/0x2b0 [ 649.057700][T15551] ? graft_tree+0x1a2/0x240 [ 649.057723][T15551] graft_tree+0x1a2/0x240 [ 649.057751][T15551] do_add_mount+0x1e2/0x360 [ 649.057776][T15551] ? _raw_spin_unlock+0x28/0x50 [ 649.057817][T15551] finish_automount+0x534/0x9f0 [ 649.057843][T15551] ? lockdep_hardirqs_on+0x7c/0x110 [ 649.057889][T15551] ? __pfx_finish_automount+0x10/0x10 [ 649.057916][T15551] ? kfree+0x2f8/0x6e0 [ 649.057947][T15551] ? put_fs_context+0x475/0x9a0 [ 649.057983][T15551] ? __traverse_mounts+0x1c4/0x830 [ 649.058011][T15551] __traverse_mounts+0x1c4/0x830 [ 649.058046][T15551] step_into_slowpath+0x772/0xf50 [ 649.058084][T15551] ? __d_lookup+0x25c/0x4a0 [ 649.058122][T15551] ? __pfx_step_into_slowpath+0x10/0x10 [ 649.058157][T15551] ? __d_lookup+0x266/0x4a0 [ 649.058195][T15551] ? lookup_fast+0x156/0x610 [ 649.058225][T15551] ? inode_permission+0x37b/0x640 [ 649.058260][T15551] link_path_walk+0xd26/0x1c70 [ 649.058308][T15551] path_openat+0x1bd/0x3140 [ 649.058346][T15551] ? do_syscall_64+0xcd/0xf80 [ 649.058383][T15551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.058419][T15551] ? __pfx_path_openat+0x10/0x10 [ 649.058474][T15551] do_filp_open+0x20b/0x470 [ 649.058524][T15551] ? __pfx_do_filp_open+0x10/0x10 [ 649.058595][T15551] ? alloc_fd+0x471/0x7d0 [ 649.058650][T15551] do_sys_openat2+0x121/0x290 [ 649.058684][T15551] ? __pfx_do_sys_openat2+0x10/0x10 [ 649.058730][T15551] __x64_sys_openat+0x174/0x210 [ 649.058763][T15551] ? __pfx___x64_sys_openat+0x10/0x10 [ 649.058811][T15551] do_syscall_64+0xcd/0xf80 [ 649.058854][T15551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.058883][T15551] RIP: 0033:0x7f6c3438f7c9 [ 649.058907][T15551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.058936][T15551] RSP: 002b:00007f6c35180038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 649.058965][T15551] RAX: ffffffffffffffda RBX: 00007f6c345e5fa0 RCX: 00007f6c3438f7c9 [ 649.058985][T15551] RDX: 0000000000000800 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 649.059005][T15551] RBP: 00007f6c34413f91 R08: 0000000000000000 R09: 0000000000000000 [ 649.059023][T15551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.059040][T15551] R13: 00007f6c345e6038 R14: 00007f6c345e5fa0 R15: 00007ffd0cb8e8b8 [ 649.059081][T15551] [ 651.942680][T15584] FAULT_INJECTION: forcing a failure. [ 651.942680][T15584] name failslab, interval 1, probability 0, space 0, times 0 [ 651.997685][T15584] CPU: 0 UID: 0 PID: 15584 Comm: syz.2.2375 Tainted: G U L syzkaller #0 PREEMPT(full) [ 651.997737][T15584] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 651.997749][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 651.997768][T15584] Call Trace: [ 651.997777][T15584] [ 651.997789][T15584] dump_stack_lvl+0x16c/0x1f0 [ 651.997844][T15584] should_fail_ex+0x512/0x640 [ 651.997876][T15584] ? __kmalloc_cache_noprof+0x5f/0x800 [ 651.997917][T15584] should_failslab+0xc2/0x120 [ 651.997971][T15584] __kmalloc_cache_noprof+0x80/0x800 [ 651.998005][T15584] ? single_open+0x4d/0x1f0 [ 651.998042][T15584] ? __pfx_tracing_clock_show+0x10/0x10 [ 651.998071][T15584] ? single_open+0x4d/0x1f0 [ 651.998101][T15584] single_open+0x4d/0x1f0 [ 651.998134][T15584] tracing_clock_open+0xa7/0x110 [ 651.998175][T15584] do_dentry_open+0x748/0x1590 [ 651.998213][T15584] ? __pfx_tracing_clock_open+0x10/0x10 [ 651.998262][T15584] vfs_open+0x82/0x3f0 [ 651.998297][T15584] path_openat+0x2078/0x3140 [ 651.998349][T15584] ? __pfx_path_openat+0x10/0x10 [ 651.998403][T15584] do_filp_open+0x20b/0x470 [ 651.998445][T15584] ? __pfx_do_filp_open+0x10/0x10 [ 651.998513][T15584] ? alloc_fd+0x471/0x7d0 [ 651.998563][T15584] do_sys_openat2+0x121/0x290 [ 651.998595][T15584] ? __pfx_do_sys_openat2+0x10/0x10 [ 651.998641][T15584] __x64_sys_openat+0x174/0x210 [ 651.998674][T15584] ? __pfx___x64_sys_openat+0x10/0x10 [ 651.998721][T15584] do_syscall_64+0xcd/0xf80 [ 651.998765][T15584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.998794][T15584] RIP: 0033:0x7fc47298f7c9 [ 651.998818][T15584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.998846][T15584] RSP: 002b:00007fc470bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 651.998873][T15584] RAX: ffffffffffffffda RBX: 00007fc472be5fa0 RCX: 00007fc47298f7c9 [ 651.998893][T15584] RDX: 0000000000000800 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 651.998911][T15584] RBP: 00007fc472a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 651.998928][T15584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.998944][T15584] R13: 00007fc472be6038 R14: 00007fc472be5fa0 R15: 00007fff8fdd4fb8 [ 651.998990][T15584] [ 653.909616][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2383'. [ 653.921256][ T30] audit: type=1806 audit(1767149881.009:93): xattr=14 res=-22 [ 653.928995][T15615] FAULT_INJECTION: forcing a failure. [ 653.928995][T15615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.952769][T15615] CPU: 0 UID: 0 PID: 15615 Comm: syz.0.2383 Tainted: G U L syzkaller #0 PREEMPT(full) [ 653.952801][T15615] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 653.952806][T15615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 653.952815][T15615] Call Trace: [ 653.952821][T15615] [ 653.952827][T15615] dump_stack_lvl+0x16c/0x1f0 [ 653.952853][T15615] should_fail_ex+0x512/0x640 [ 653.952873][T15615] _copy_to_user+0x32/0xd0 [ 653.952890][T15615] simple_read_from_buffer+0xcb/0x170 [ 653.952912][T15615] proc_fail_nth_read+0x197/0x240 [ 653.952937][T15615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.952961][T15615] ? rw_verify_area+0xcf/0x6c0 [ 653.952979][T15615] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 653.953001][T15615] vfs_read+0x1e4/0xcf0 [ 653.953022][T15615] ? __pfx___mutex_lock+0x10/0x10 [ 653.953045][T15615] ? __pfx_vfs_read+0x10/0x10 [ 653.953069][T15615] ? __fget_files+0x20e/0x3c0 [ 653.953095][T15615] ksys_read+0x12a/0x250 [ 653.953114][T15615] ? __pfx_ksys_read+0x10/0x10 [ 653.953139][T15615] do_syscall_64+0xcd/0xf80 [ 653.953161][T15615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.953177][T15615] RIP: 0033:0x7f6c3438e1dc [ 653.953190][T15615] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 653.953204][T15615] RSP: 002b:00007f6c35180030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 653.953218][T15615] RAX: ffffffffffffffda RBX: 00007f6c345e5fa0 RCX: 00007f6c3438e1dc [ 653.953228][T15615] RDX: 000000000000000f RSI: 00007f6c351800a0 RDI: 0000000000000006 [ 653.953237][T15615] RBP: 00007f6c35180090 R08: 0000000000000000 R09: 0000000000000000 [ 653.953246][T15615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.953254][T15615] R13: 00007f6c345e6038 R14: 00007f6c345e5fa0 R15: 00007ffd0cb8e8b8 [ 653.953274][T15615] [ 654.358502][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 654.367293][T15619] FAULT_INJECTION: forcing a failure. [ 654.367293][T15619] name failslab, interval 1, probability 0, space 0, times 0 [ 654.404390][ T5841] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 654.413252][ T5841] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 654.420872][ T5841] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 654.428374][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 654.448904][T15619] CPU: 1 UID: 0 PID: 15619 Comm: syz.3.2385 Tainted: G U L syzkaller #0 PREEMPT(full) [ 654.448953][T15619] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 654.448970][T15619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 654.448986][T15619] Call Trace: [ 654.448996][T15619] [ 654.449007][T15619] dump_stack_lvl+0x16c/0x1f0 [ 654.449051][T15619] should_fail_ex+0x512/0x640 [ 654.449081][T15619] ? kmem_cache_alloc_noprof+0x62/0x770 [ 654.449116][T15619] should_failslab+0xc2/0x120 [ 654.449156][T15619] kmem_cache_alloc_noprof+0x83/0x770 [ 654.449189][T15619] ? __pfx_acct_collect+0x10/0x10 [ 654.449223][T15619] ? taskstats_exit+0x654/0xbe0 [ 654.449266][T15619] ? taskstats_exit+0x654/0xbe0 [ 654.449301][T15619] taskstats_exit+0x654/0xbe0 [ 654.449340][T15619] ? __pfx_taskstats_exit+0x10/0x10 [ 654.449377][T15619] ? exit_signals+0x388/0xb00 [ 654.449412][T15619] do_exit+0x5e4/0x2bd0 [ 654.449441][T15619] ? __pfx_do_exit+0x10/0x10 [ 654.449466][T15619] ? do_raw_spin_lock+0x12c/0x2b0 [ 654.449492][T15619] ? find_held_lock+0x2b/0x80 [ 654.449529][T15619] do_group_exit+0xd3/0x2a0 [ 654.449555][T15619] get_signal+0x2671/0x26d0 [ 654.449593][T15619] ? putname+0xf5/0x1a0 [ 654.449618][T15619] ? __pfx_get_signal+0x10/0x10 [ 654.449656][T15619] ? do_futex+0x122/0x350 [ 654.449687][T15619] arch_do_signal_or_restart+0x8f/0x7a0 [ 654.449725][T15619] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 654.449767][T15619] ? __x64_sys_openat+0x174/0x210 [ 654.449799][T15619] ? __pfx___x64_sys_futex+0x10/0x10 [ 654.449836][T15619] exit_to_user_mode_loop+0x8c/0x540 [ 654.449875][T15619] do_syscall_64+0x4ee/0xf80 [ 654.449917][T15619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.449944][T15619] RIP: 0033:0x7f0898d8f7c9 [ 654.449972][T15619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.449998][T15619] RSP: 002b:00007f0899cc70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 654.450025][T15619] RAX: fffffffffffffe00 RBX: 00007f0898fe5fa8 RCX: 00007f0898d8f7c9 [ 654.450044][T15619] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0898fe5fa8 [ 654.450061][T15619] RBP: 00007f0898fe5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 654.450079][T15619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.450094][T15619] R13: 00007f0898fe6038 R14: 00007ffd11439a40 R15: 00007ffd11439b28 [ 654.450136][T15619] [ 655.084739][T15629] bridge_slave_1: left allmulticast mode [ 655.112124][T15629] bridge_slave_1: left promiscuous mode [ 655.139734][T15629] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.215034][T15623] chnl_net:caif_netlink_parms(): no params data found [ 655.792938][T15623] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.827302][T15623] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.853219][T15623] bridge_slave_0: entered allmulticast mode [ 655.874269][T15623] bridge_slave_0: entered promiscuous mode [ 655.916368][T15623] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.937518][T15623] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.948776][T15653] netlink: 'syz.3.2390': attribute type 1 has an invalid length. [ 655.959533][T15623] bridge_slave_1: entered allmulticast mode [ 655.977778][T15623] bridge_slave_1: entered promiscuous mode [ 656.115600][T15623] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 656.139178][T15623] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 656.214850][ T2036] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.250773][T15623] team0: Port device team_slave_0 added [ 656.267969][T15623] team0: Port device team_slave_1 added [ 656.311589][T15623] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.318708][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.344880][T15623] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.392337][ T2036] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.409302][T15623] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.416395][T15623] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.445322][T15623] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.503970][ T2036] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.584401][T15623] hsr_slave_0: entered promiscuous mode [ 656.598369][T15623] hsr_slave_1: entered promiscuous mode [ 656.610447][T15623] debugfs: 'hsr0' already exists in 'hsr' [ 656.620937][T15623] Cannot create hsr debugfs directory [ 656.648828][ T2036] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.777934][ T5843] Bluetooth: hci2: command tx timeout [ 657.187065][ T2036] bridge_slave_1: left allmulticast mode [ 657.195264][ T2036] bridge_slave_1: left promiscuous mode [ 657.206960][ T2036] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.224581][ T2036] bridge_slave_0: left allmulticast mode [ 657.235663][ T2036] bridge_slave_0: left promiscuous mode [ 657.246603][ T2036] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.947705][ T2036] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 657.975373][ T2036] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 657.988876][ T2036] bond0 (unregistering): Released all slaves [ 658.110123][ T2036] ovs_: left promiscuous mode [ 658.859402][ T5843] Bluetooth: hci2: command tx timeout [ 658.943622][ T2036] hsr_slave_0: left promiscuous mode [ 658.977338][ T2036] hsr_slave_1: left promiscuous mode [ 658.983585][ T2036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 658.997348][ T2036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 659.031184][ T2036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 659.041010][ T2036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 659.102012][ T2036] veth1_macvtap: left promiscuous mode [ 659.109441][ T2036] veth0_macvtap: left promiscuous mode [ 659.181738][T15704] netlink: zone id is out of range [ 660.662239][ T2036] team0 (unregistering): Port device team_slave_1 removed [ 660.765968][ T2036] team0 (unregistering): Port device team_slave_0 removed [ 660.937363][ T5843] Bluetooth: hci2: command tx timeout [ 661.805749][T15623] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 661.962099][T15623] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 662.015015][T15623] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 662.079336][T15623] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 662.871006][T15623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 662.904728][T15623] 8021q: adding VLAN 0 to HW filter on device team0 [ 662.921792][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 662.928944][ T3426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.017316][ T5843] Bluetooth: hci2: command tx timeout [ 663.328930][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.336099][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.336985][T15767] zswap: compressor not available [ 663.669282][T15623] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 664.190909][T15623] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.382466][T15623] veth0_vlan: entered promiscuous mode [ 664.775773][T15793] netlink: 'syz.3.2414': attribute type 11 has an invalid length. [ 664.779025][T15623] veth1_vlan: entered promiscuous mode [ 664.789353][T15793] netlink: 'syz.3.2414': attribute type 11 has an invalid length. [ 664.798036][T15793] netlink: 'syz.3.2414': attribute type 11 has an invalid length. [ 664.806094][T15793] netlink: 'syz.3.2414': attribute type 11 has an invalid length. [ 664.886598][T15623] veth0_macvtap: entered promiscuous mode [ 665.025343][T15623] veth1_macvtap: entered promiscuous mode [ 665.140880][T15623] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.173869][T15623] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.216138][ T2036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.318431][ T2036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.335683][ T2036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.354710][ T2036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.521054][ T1146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.530925][T15806] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 665.540339][ T1146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.577961][ T2036] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 665.592660][ T2036] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 665.651571][T15809] FAULT_INJECTION: forcing a failure. [ 665.651571][T15809] name failslab, interval 1, probability 0, space 0, times 0 [ 665.664848][T15809] CPU: 1 UID: 0 PID: 15809 Comm: syz.2.2386 Tainted: G U L syzkaller #0 PREEMPT(full) [ 665.664894][T15809] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 665.664906][T15809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 665.664924][T15809] Call Trace: [ 665.664935][T15809] [ 665.664947][T15809] dump_stack_lvl+0x16c/0x1f0 [ 665.664991][T15809] should_fail_ex+0x512/0x640 [ 665.665021][T15809] ? __kmalloc_cache_noprof+0x5f/0x800 [ 665.665058][T15809] should_failslab+0xc2/0x120 [ 665.665102][T15809] __kmalloc_cache_noprof+0x80/0x800 [ 665.665133][T15809] ? rcu_is_watching+0x12/0xc0 [ 665.665168][T15809] ? snd_virmidi_output_open+0xc4/0x670 [ 665.665215][T15809] ? snd_virmidi_output_open+0xc4/0x670 [ 665.665254][T15809] snd_virmidi_output_open+0xc4/0x670 [ 665.665298][T15809] open_substream+0x480/0x9d0 [ 665.665328][T15809] rawmidi_open_priv+0x543/0x6e0 [ 665.665362][T15809] snd_rawmidi_open+0x4cb/0xbf0 [ 665.665397][T15809] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 665.665428][T15809] ? __pfx_default_wake_function+0x10/0x10 [ 665.665468][T15809] ? kobject_get_unless_zero+0x156/0x1e0 [ 665.665512][T15809] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 665.665541][T15809] snd_open+0x22d/0x4c0 [ 665.665578][T15809] ? __pfx_snd_open+0x10/0x10 [ 665.665615][T15809] chrdev_open+0x234/0x6a0 [ 665.665663][T15809] ? __pfx_apparmor_file_open+0x10/0x10 [ 665.665690][T15809] ? __pfx_chrdev_open+0x10/0x10 [ 665.665731][T15809] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 665.665778][T15809] do_dentry_open+0x748/0x1590 [ 665.665814][T15809] ? __pfx_chrdev_open+0x10/0x10 [ 665.665860][T15809] vfs_open+0x82/0x3f0 [ 665.665891][T15809] path_openat+0x2078/0x3140 [ 665.665938][T15809] ? __pfx_path_openat+0x10/0x10 [ 665.665987][T15809] do_filp_open+0x20b/0x470 [ 665.666025][T15809] ? __pfx_do_filp_open+0x10/0x10 [ 665.666085][T15809] ? alloc_fd+0x471/0x7d0 [ 665.666130][T15809] do_sys_openat2+0x121/0x290 [ 665.666157][T15809] ? __pfx_do_sys_openat2+0x10/0x10 [ 665.666199][T15809] __x64_sys_openat+0x174/0x210 [ 665.666227][T15809] ? __pfx___x64_sys_openat+0x10/0x10 [ 665.666270][T15809] do_syscall_64+0xcd/0xf80 [ 665.666309][T15809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.666335][T15809] RIP: 0033:0x7f48b078f7c9 [ 665.666355][T15809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 665.666379][T15809] RSP: 002b:00007f48b1578038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 665.666403][T15809] RAX: ffffffffffffffda RBX: 00007f48b09e5fa0 RCX: 00007f48b078f7c9 [ 665.666421][T15809] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 665.666439][T15809] RBP: 00007f48b0813f91 R08: 0000000000000000 R09: 0000000000000000 [ 665.666456][T15809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.666473][T15809] R13: 00007f48b09e6038 R14: 00007f48b09e5fa0 R15: 00007fff907741e8 [ 665.666508][T15809] [ 666.045448][T15811] FAULT_INJECTION: forcing a failure. [ 666.045448][T15811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.084488][T15811] CPU: 0 UID: 0 PID: 15811 Comm: syz.0.2418 Tainted: G U L syzkaller #0 PREEMPT(full) [ 666.084534][T15811] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 666.084545][T15811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 666.084561][T15811] Call Trace: [ 666.084570][T15811] [ 666.084582][T15811] dump_stack_lvl+0x16c/0x1f0 [ 666.084632][T15811] should_fail_ex+0x512/0x640 [ 666.084667][T15811] _copy_to_user+0x32/0xd0 [ 666.084700][T15811] simple_read_from_buffer+0xcb/0x170 [ 666.084740][T15811] proc_fail_nth_read+0x197/0x240 [ 666.084780][T15811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 666.084821][T15811] ? rw_verify_area+0xcf/0x6c0 [ 666.084853][T15811] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 666.084895][T15811] vfs_read+0x1e4/0xcf0 [ 666.084932][T15811] ? __pfx___mutex_lock+0x10/0x10 [ 666.084976][T15811] ? __pfx_vfs_read+0x10/0x10 [ 666.085023][T15811] ? __fget_files+0x20e/0x3c0 [ 666.085070][T15811] ksys_read+0x12a/0x250 [ 666.085106][T15811] ? __pfx_ksys_read+0x10/0x10 [ 666.085154][T15811] do_syscall_64+0xcd/0xf80 [ 666.085196][T15811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.085223][T15811] RIP: 0033:0x7f6c3438e1dc [ 666.085245][T15811] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 666.085270][T15811] RSP: 002b:00007f6c35180030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 666.085296][T15811] RAX: ffffffffffffffda RBX: 00007f6c345e5fa0 RCX: 00007f6c3438e1dc [ 666.085315][T15811] RDX: 000000000000000f RSI: 00007f6c351800a0 RDI: 0000000000000004 [ 666.085332][T15811] RBP: 00007f6c35180090 R08: 0000000000000000 R09: 0000000000000000 [ 666.085349][T15811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.085366][T15811] R13: 00007f6c345e6038 R14: 00007f6c345e5fa0 R15: 00007ffd0cb8e8b8 [ 666.085404][T15811] [ 666.544570][T15822] FAULT_INJECTION: forcing a failure. [ 666.544570][T15822] name failslab, interval 1, probability 0, space 0, times 0 [ 666.587264][T15822] CPU: 1 UID: 0 PID: 15822 Comm: syz.2.2420 Tainted: G U L syzkaller #0 PREEMPT(full) [ 666.587311][T15822] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 666.587322][T15822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 666.587339][T15822] Call Trace: [ 666.587348][T15822] [ 666.587359][T15822] dump_stack_lvl+0x16c/0x1f0 [ 666.587403][T15822] should_fail_ex+0x512/0x640 [ 666.587437][T15822] ? __kmalloc_cache_noprof+0x5f/0x800 [ 666.587473][T15822] should_failslab+0xc2/0x120 [ 666.587513][T15822] __kmalloc_cache_noprof+0x80/0x800 [ 666.587543][T15822] ? alloc_pipe_info+0x10e/0x590 [ 666.587585][T15822] ? alloc_pipe_info+0x10e/0x590 [ 666.587624][T15822] alloc_pipe_info+0x10e/0x590 [ 666.587668][T15822] splice_direct_to_actor+0x77d/0xa30 [ 666.587710][T15822] ? __lock_acquire+0x436/0x2890 [ 666.587734][T15822] ? __pfx_direct_splice_actor+0x10/0x10 [ 666.587774][T15822] ? __pfx_aa_file_perm+0x10/0x10 [ 666.587819][T15822] ? find_held_lock+0x2b/0x80 [ 666.587853][T15822] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 666.587892][T15822] ? get_pid_task+0xfc/0x250 [ 666.587927][T15822] do_splice_direct+0x174/0x240 [ 666.587967][T15822] ? __pfx_do_splice_direct+0x10/0x10 [ 666.588007][T15822] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 666.588048][T15822] ? bpf_lsm_file_permission+0x9/0x10 [ 666.588079][T15822] ? security_file_permission+0x71/0x210 [ 666.588115][T15822] ? rw_verify_area+0xcf/0x6c0 [ 666.588155][T15822] do_sendfile+0xb06/0xe50 [ 666.588198][T15822] ? __pfx_do_sendfile+0x10/0x10 [ 666.588235][T15822] ? __fget_files+0x20e/0x3c0 [ 666.588281][T15822] __x64_sys_sendfile64+0x1d8/0x220 [ 666.588307][T15822] ? ksys_write+0x1ac/0x250 [ 666.588344][T15822] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 666.588383][T15822] do_syscall_64+0xcd/0xf80 [ 666.588424][T15822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.588451][T15822] RIP: 0033:0x7f48b078f7c9 [ 666.588473][T15822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 666.588499][T15822] RSP: 002b:00007f48ae9f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 666.588526][T15822] RAX: ffffffffffffffda RBX: 00007f48b09e6180 RCX: 00007f48b078f7c9 [ 666.588545][T15822] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 666.588562][T15822] RBP: 00007f48ae9f6090 R08: 0000000000000000 R09: 0000000000000000 [ 666.588579][T15822] R10: 000000000000c3e0 R11: 0000000000000246 R12: 0000000000000001 [ 666.588596][T15822] R13: 00007f48b09e6218 R14: 00007f48b09e6180 R15: 00007fff907741e8 [ 666.588634][T15822] [ 666.909946][T15826] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 667.210738][T15630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 667.221840][T15630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 667.229904][T15630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 667.248625][T15630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 667.257505][T15630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 667.963382][T15827] chnl_net:caif_netlink_parms(): no params data found [ 668.155527][ T6235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.280182][ T6235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.302146][T15827] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.322591][T15827] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.343060][T15827] bridge_slave_0: entered allmulticast mode [ 668.366239][T15827] bridge_slave_0: entered promiscuous mode [ 668.422185][ T6235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.454352][T15827] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.469953][T15827] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.479111][T15827] bridge_slave_1: entered allmulticast mode [ 668.490085][T15827] bridge_slave_1: entered promiscuous mode [ 668.525767][ T6235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.612464][T15827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 668.630187][T15827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 668.725331][T15827] team0: Port device team_slave_0 added [ 668.760515][T15853] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 668.833919][T15827] team0: Port device team_slave_1 added [ 668.959254][T15827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 668.976494][T15827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.087247][T15827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 669.106279][T15827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 669.117292][T15827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 669.148081][T15827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 669.337637][T15630] Bluetooth: hci3: command tx timeout [ 669.954389][ T6235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 669.966299][ T6235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 669.976963][ T6235] bond0 (unregistering): Released all slaves [ 670.171695][T15827] hsr_slave_0: entered promiscuous mode [ 670.198807][T15827] hsr_slave_1: entered promiscuous mode [ 670.205169][T15827] debugfs: 'hsr0' already exists in 'hsr' [ 670.211307][T15827] Cannot create hsr debugfs directory [ 670.702045][ T6235] hsr_slave_0: left promiscuous mode [ 670.708644][ T6235] hsr_slave_1: left promiscuous mode [ 670.728084][ T6235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 670.738580][T15873] binder: BINDER_SET_CONTEXT_MGR bad uid 60928 != 0 [ 670.746038][T15873] binder: 15871:15873 ioctl 4018620d 9 returned -1 [ 670.758355][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.771224][ T6235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 670.787356][ T6235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.823147][ T6235] veth1_macvtap: left promiscuous mode [ 670.838375][ T6235] veth0_macvtap: left promiscuous mode [ 670.847744][ T6235] veth1_vlan: left promiscuous mode [ 670.857861][ T6235] veth0_vlan: left promiscuous mode [ 671.417247][T15630] Bluetooth: hci3: command tx timeout [ 671.740601][ T6235] team0 (unregistering): Port device team_slave_1 removed [ 671.774801][ T6235] team0 (unregistering): Port device team_slave_0 removed [ 672.436460][T15902] FAULT_INJECTION: forcing a failure. [ 672.436460][T15902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 672.465350][T15902] CPU: 1 UID: 0 PID: 15902 Comm: syz.2.2437 Tainted: G U L syzkaller #0 PREEMPT(full) [ 672.465396][T15902] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 672.465406][T15902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 672.465423][T15902] Call Trace: [ 672.465433][T15902] [ 672.465443][T15902] dump_stack_lvl+0x16c/0x1f0 [ 672.465487][T15902] should_fail_ex+0x512/0x640 [ 672.465523][T15902] should_fail_alloc_page+0xe7/0x130 [ 672.465566][T15902] prepare_alloc_pages+0x401/0x670 [ 672.465606][T15902] ? __lock_acquire+0x436/0x2890 [ 672.465636][T15902] __alloc_frozen_pages_noprof+0x18b/0x2430 [ 672.465672][T15902] ? __lock_acquire+0x436/0x2890 [ 672.465712][T15902] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 672.465749][T15902] ? find_held_lock+0x2b/0x80 [ 672.465784][T15902] ? is_bpf_text_address+0x8a/0x1a0 [ 672.465826][T15902] ? __lock_acquire+0x436/0x2890 [ 672.465855][T15902] ? __lock_acquire+0x436/0x2890 [ 672.465877][T15902] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 672.465918][T15902] ? policy_nodemask+0xea/0x4e0 [ 672.465961][T15902] alloc_pages_mpol+0x1fb/0x550 [ 672.466008][T15902] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 672.466058][T15902] alloc_pages_noprof+0x131/0x390 [ 672.466099][T15902] pte_alloc_one+0x1e/0x3d0 [ 672.466136][T15902] __pte_alloc+0x6d/0x3f0 [ 672.466172][T15902] ? __pfx___pte_alloc+0x10/0x10 [ 672.466217][T15902] do_anonymous_page+0x1092/0x2190 [ 672.466246][T15902] ? mtree_range_walk+0x718/0xc00 [ 672.466285][T15902] ? find_held_lock+0x2b/0x80 [ 672.466321][T15902] __handle_mm_fault+0x1ecf/0x2bb0 [ 672.466359][T15902] ? __pfx___handle_mm_fault+0x10/0x10 [ 672.466410][T15902] ? find_vma+0xbf/0x140 [ 672.466444][T15902] ? __pfx_find_vma+0x10/0x10 [ 672.466483][T15902] handle_mm_fault+0x3fe/0xad0 [ 672.466519][T15902] do_user_addr_fault+0x7a6/0x1370 [ 672.466554][T15902] ? rcu_is_watching+0x12/0xc0 [ 672.466595][T15902] exc_page_fault+0x64/0xc0 [ 672.466633][T15902] asm_exc_page_fault+0x26/0x30 [ 672.466660][T15902] RIP: 0010:fault_in_readable+0x135/0x1d0 [ 672.466695][T15902] Code: 31 07 b6 ff 48 85 db 0f 84 9c 00 00 00 e8 53 0c b6 ff 48 89 de 48 89 ef e8 58 06 b6 ff 48 39 eb 73 1d e8 3e 0c b6 ff 45 89 f7 <8a> 03 31 ff 44 89 fe 88 44 24 28 e8 cb 06 b6 ff 45 85 ff 74 a8 e8 [ 672.466721][T15902] RSP: 0018:ffffc9000455f978 EFLAGS: 00050293 [ 672.466743][T15902] RAX: 0000000000000000 RBX: 0000200000200000 RCX: ffffffff82085ea8 [ 672.466762][T15902] RDX: ffff88802606bd00 RSI: ffffffff82085eb2 RDI: 0000000000000006 [ 672.466780][T15902] RBP: 0000200000200200 R08: 0000000000000006 R09: 0000200000200200 [ 672.466798][T15902] R10: 0000200000200000 R11: ffff88802606c830 R12: 0000200000000200 [ 672.466817][T15902] R13: 0000000000200000 R14: 0000000000000000 R15: 0000000000000000 [ 672.466844][T15902] ? fault_in_readable+0x128/0x1d0 [ 672.466878][T15902] ? fault_in_readable+0x132/0x1d0 [ 672.466917][T15902] ? fault_in_readable+0x132/0x1d0 [ 672.466952][T15902] ? __pfx_fault_in_readable+0x10/0x10 [ 672.466987][T15902] ? I_BDEV+0xd/0x20 [ 672.467029][T15902] ? inode_to_bdi+0x9e/0x160 [ 672.467066][T15902] fault_in_iov_iter_readable+0x101/0x2c0 [ 672.467099][T15902] iomap_file_buffered_write+0x43c/0xab0 [ 672.467152][T15902] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 672.467189][T15902] ? inode_set_ctime_current+0x29a/0x7f0 [ 672.467253][T15902] ? __pfx_down_read+0x10/0x10 [ 672.467278][T15902] ? mnt_put_write_access_file+0xc1/0xf0 [ 672.467314][T15902] ? file_update_time_flags+0x35c/0x520 [ 672.467346][T15902] blkdev_write_iter+0x575/0xe00 [ 672.467383][T15902] vfs_write+0x7d3/0x11d0 [ 672.467421][T15902] ? __pfx_blkdev_write_iter+0x10/0x10 [ 672.467459][T15902] ? __pfx_vfs_write+0x10/0x10 [ 672.467493][T15902] ? find_held_lock+0x2b/0x80 [ 672.467550][T15902] ksys_write+0x12a/0x250 [ 672.467587][T15902] ? __pfx_ksys_write+0x10/0x10 [ 672.467635][T15902] do_syscall_64+0xcd/0xf80 [ 672.467676][T15902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 672.467703][T15902] RIP: 0033:0x7f48b078f7c9 [ 672.467725][T15902] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 672.467751][T15902] RSP: 002b:00007f48b1557038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 672.467776][T15902] RAX: ffffffffffffffda RBX: 00007f48b09e6090 RCX: 00007f48b078f7c9 [ 672.467795][T15902] RDX: 0000000080000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 672.467812][T15902] RBP: 00007f48b1557090 R08: 0000000000000000 R09: 0000000000000000 [ 672.467829][T15902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 672.467845][T15902] R13: 00007f48b09e6128 R14: 00007f48b09e6090 R15: 00007fff907741e8 [ 672.467883][T15902] [ 673.497296][T15630] Bluetooth: hci3: command tx timeout [ 673.563280][T15916] netlink: 354 bytes leftover after parsing attributes in process `syz.3.2439'. [ 673.708713][T15827] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 673.798997][T15827] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 673.941448][T15827] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 674.030604][T15827] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 674.561740][T15827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 674.653943][T15827] 8021q: adding VLAN 0 to HW filter on device team0 [ 674.732345][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 674.739559][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 674.928775][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 674.935963][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 675.578238][T15630] Bluetooth: hci3: command tx timeout [ 675.680392][T15827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 675.935251][T15827] veth0_vlan: entered promiscuous mode [ 676.003819][T15827] veth1_vlan: entered promiscuous mode [ 676.098855][T15827] veth0_macvtap: entered promiscuous mode [ 676.110249][T15827] veth1_macvtap: entered promiscuous mode [ 676.134691][T15827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 676.168568][T15827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 676.319111][ T3767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.337241][ T3767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.365490][ T3767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.404982][ T3767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 676.511615][T15977] cougar: G6 mapped to F18 [ 676.659631][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.710504][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 676.848396][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 676.870350][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 677.136324][T15988] zswap: compressor not available [ 677.375059][T15988] FAULT_INJECTION: forcing a failure. [ 677.375059][T15988] name failslab, interval 1, probability 0, space 0, times 0 [ 677.428568][T15988] CPU: 0 UID: 0 PID: 15988 Comm: syz.3.2448 Tainted: G U L syzkaller #0 PREEMPT(full) [ 677.428619][T15988] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 677.428631][T15988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 677.428648][T15988] Call Trace: [ 677.428658][T15988] [ 677.428670][T15988] dump_stack_lvl+0x16c/0x1f0 [ 677.428716][T15988] should_fail_ex+0x512/0x640 [ 677.428748][T15988] ? __kmalloc_noprof+0xca/0x910 [ 677.428784][T15988] should_failslab+0xc2/0x120 [ 677.428825][T15988] __kmalloc_noprof+0xeb/0x910 [ 677.428856][T15988] ? __register_sysctl_table+0xb3/0x1900 [ 677.428902][T15988] ? __register_sysctl_table+0xb3/0x1900 [ 677.428939][T15988] __register_sysctl_table+0xb3/0x1900 [ 677.428978][T15988] ? is_module_address+0x5f/0xf0 [ 677.429017][T15988] ? __pfx___register_sysctl_table+0x10/0x10 [ 677.429054][T15988] ? is_module_address+0x69/0xf0 [ 677.429086][T15988] ? register_net_sysctl_sz+0x222/0x450 [ 677.429118][T15988] ? __asan_memcpy+0x3c/0x60 [ 677.429153][T15988] ? __pfx_nf_lwtunnel_net_init+0x10/0x10 [ 677.429196][T15988] nf_lwtunnel_net_init+0x60/0xf0 [ 677.429240][T15988] ops_init+0x1e2/0x5f0 [ 677.429281][T15988] setup_net+0x11d/0x3a0 [ 677.429319][T15988] ? __pfx_setup_net+0x10/0x10 [ 677.429355][T15988] ? lockdep_init_map_type+0x5c/0x270 [ 677.429385][T15988] ? mutex_init_lockep+0x110/0x150 [ 677.429420][T15988] copy_net_ns+0x351/0x7c0 [ 677.429464][T15988] create_new_namespaces+0x3ea/0xab0 [ 677.429539][T15988] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 677.429589][T15988] ksys_unshare+0x45b/0xa40 [ 677.429635][T15988] ? __pfx_ksys_unshare+0x10/0x10 [ 677.429682][T15988] ? xfd_validate_state+0x61/0x180 [ 677.429719][T15988] __x64_sys_unshare+0x31/0x40 [ 677.429762][T15988] do_syscall_64+0xcd/0xf80 [ 677.429805][T15988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 677.429835][T15988] RIP: 0033:0x7f0898d8f7c9 [ 677.429857][T15988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 677.429885][T15988] RSP: 002b:00007f0899cc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 677.429913][T15988] RAX: ffffffffffffffda RBX: 00007f0898fe5fa0 RCX: 00007f0898d8f7c9 [ 677.429932][T15988] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 677.429949][T15988] RBP: 00007f0898e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 677.429968][T15988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 677.429986][T15988] R13: 00007f0898fe6038 R14: 00007f0898fe5fa0 R15: 00007ffd11439b28 [ 677.430026][T15988] [ 678.459784][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 678.470211][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 678.478082][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 678.486428][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 678.494360][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 678.633186][ T5827] ------------[ cut here ]------------ [ 678.638761][ T5827] ODEBUG: free active (active state 0) object: ffff88802d2dd460 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 678.651577][ T5827] WARNING: lib/debugobjects.c:612 at debug_print_object+0x18e/0x2a0, CPU#0: syz-executor/5827 [ 678.661924][ T5827] Modules linked in: [ 678.665839][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 678.676959][ T5827] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 678.682200][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 678.692968][ T5827] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 678.698949][ T5827] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 52 f6 df 0b 41 56 48 8b 14 dd e0 c6 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 bc 7f d6 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 678.718709][ T5827] RSP: 0018:ffffc900041df708 EFLAGS: 00010246 [ 678.725128][ T5827] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 678.733416][ T5827] RDX: ffffffff8bf2c620 RSI: ffffffff8bf2c200 RDI: ffffffff909290e0 [ 678.741703][ T5827] RBP: 0000000000000001 R08: ffff88802d2dd460 R09: ffffffff8b906c80 [ 678.749767][ T5827] R10: ffffffff9088e9d7 R11: ffff888025ebe6b0 R12: ffffffff8bf2c200 [ 678.757741][ T5827] R13: ffffffff8b906cc0 R14: ffffffff8a7e0d90 R15: ffffc900041df808 [ 678.765696][ T5827] FS: 0000000000000000(0000) GS:ffff8881248fc000(0000) knlGS:0000000000000000 [ 678.774650][ T5827] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 678.781527][ T5827] CR2: 0000000000000000 CR3: 0000000052e5a000 CR4: 00000000003526f0 [ 678.789519][ T5827] Call Trace: [ 678.792781][ T5827] [ 678.795693][ T5827] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 678.801179][ T5827] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 678.806984][ T5827] debug_check_no_obj_freed+0x4b7/0x600 [ 678.812578][ T5827] ? find_held_lock+0x2b/0x80 [ 678.817279][ T5827] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 678.824040][ T5827] ? __page_table_check_zero+0x2f2/0x4a0 [ 678.830027][ T5827] ? __pfx___page_table_check_zero+0x10/0x10 [ 678.836023][ T5827] __free_frozen_pages+0x31a/0x1170 [ 678.841303][ T5827] hci_release_dev+0x4ef/0x640 [ 678.846069][ T5827] ? __pfx_hci_release_dev+0x10/0x10 [ 678.851380][ T5827] ? rcu_is_watching+0x12/0xc0 [ 678.856150][ T5827] ? kfree+0x27d/0x6e0 [ 678.860300][ T5827] bt_host_release+0x6a/0xb0 [ 678.864889][ T5827] ? __pfx_bt_host_release+0x10/0x10 [ 678.870209][ T5827] device_release+0xa4/0x240 [ 678.874809][ T5827] kobject_put+0x1ef/0x6f0 [ 678.879276][ T5827] put_device+0x1f/0x30 [ 678.883439][ T5827] vhci_release+0x185/0x230 [ 678.887964][ T5827] ? __pfx_vhci_release+0x10/0x10 [ 678.892988][ T5827] __fput+0x402/0xb70 [ 678.896967][ T5827] task_work_run+0x150/0x240 [ 678.901593][ T5827] ? __pfx_task_work_run+0x10/0x10 [ 678.906701][ T5827] do_exit+0x87f/0x2bd0 [ 678.910893][ T5827] ? __pfx_do_exit+0x10/0x10 [ 678.915480][ T5827] ? do_raw_spin_lock+0x12c/0x2b0 [ 678.920530][ T5827] ? find_held_lock+0x2b/0x80 [ 678.925847][ T5827] do_group_exit+0xd3/0x2a0 [ 678.930682][ T5827] get_signal+0x2671/0x26d0 [ 678.935192][ T5827] ? rw_verify_area+0xcf/0x6c0 [ 678.940529][ T5827] ? vfs_read+0x23b/0xcf0 [ 678.944860][ T5827] ? __pfx_get_signal+0x10/0x10 [ 678.949933][ T5827] ? __pfx_vfs_read+0x10/0x10 [ 678.954606][ T5827] arch_do_signal_or_restart+0x8f/0x7a0 [ 678.960177][ T5827] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 678.966334][ T5827] exit_to_user_mode_loop+0x8c/0x540 [ 678.971639][ T5827] do_syscall_64+0x4ee/0xf80 [ 678.976226][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.982125][ T5827] RIP: 0033:0x7f0898d8e1dc [ 678.986525][ T5827] Code: Unable to access opcode bytes at 0x7f0898d8e1b2. [ 678.993561][ T5827] RSP: 002b:00007ffd11439e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 679.001984][ T5827] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f0898d8e1dc [ 679.009963][ T5827] RDX: 0000000000000030 RSI: 00007ffd11439f40 RDI: 00000000000000f9 [ 679.017936][ T5827] RBP: 00007ffd11439eec R08: 0000000000000000 R09: 0079746972756365 [ 679.025892][ T5827] R10: 00007f0898fb7800 R11: 0000000000000246 R12: 000000000000025a [ 679.034269][ T5827] R13: 00000000000927c0 R14: 00000000000a563a R15: 00007ffd11439f40 [ 679.042587][ T5827] [ 679.045600][ T5827] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 679.052870][ T5827] CPU: 0 UID: 0 PID: 5827 Comm: syz-executor Tainted: G U L syzkaller #0 PREEMPT(full) [ 679.063882][ T5827] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 679.069058][ T5827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 679.079097][ T5827] Call Trace: [ 679.082361][ T5827] [ 679.085279][ T5827] dump_stack_lvl+0x3d/0x1f0 [ 679.089865][ T5827] vpanic+0x640/0x6f0 [ 679.093851][ T5827] ? debug_print_object+0x18e/0x2a0 [ 679.099056][ T5827] panic+0xca/0xd0 [ 679.102771][ T5827] ? __pfx_panic+0x10/0x10 [ 679.107185][ T5827] ? check_panic_on_warn+0x1f/0xb0 [ 679.112297][ T5827] check_panic_on_warn+0xab/0xb0 [ 679.117224][ T5827] __warn+0x108/0x3c0 [ 679.121197][ T5827] __report_bug+0x2a0/0x520 [ 679.125688][ T5827] ? debug_print_object+0x18e/0x2a0 [ 679.130880][ T5827] ? __pfx___report_bug+0x10/0x10 [ 679.135906][ T5827] report_bug_entry+0xe1/0x290 [ 679.140658][ T5827] ? debug_print_object+0x19b/0x2a0 [ 679.145847][ T5827] handle_bug+0x18a/0x260 [ 679.150161][ T5827] exc_invalid_op+0x17/0x50 [ 679.154647][ T5827] asm_exc_invalid_op+0x1a/0x20 [ 679.159480][ T5827] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 679.165302][ T5827] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 52 f6 df 0b 41 56 48 8b 14 dd e0 c6 f2 8b 4c 89 e6 <67> 48 0f b9 3a 58 83 05 bc 7f d6 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 679.184898][ T5827] RSP: 0018:ffffc900041df708 EFLAGS: 00010246 [ 679.190952][ T5827] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 679.198906][ T5827] RDX: ffffffff8bf2c620 RSI: ffffffff8bf2c200 RDI: ffffffff909290e0 [ 679.206859][ T5827] RBP: 0000000000000001 R08: ffff88802d2dd460 R09: ffffffff8b906c80 [ 679.214811][ T5827] R10: ffffffff9088e9d7 R11: ffff888025ebe6b0 R12: ffffffff8bf2c200 [ 679.222768][ T5827] R13: ffffffff8b906cc0 R14: ffffffff8a7e0d90 R15: ffffc900041df808 [ 679.230728][ T5827] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 679.236192][ T5827] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 679.241643][ T5827] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 679.247447][ T5827] debug_check_no_obj_freed+0x4b7/0x600 [ 679.252985][ T5827] ? find_held_lock+0x2b/0x80 [ 679.257657][ T5827] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 679.263717][ T5827] ? __page_table_check_zero+0x2f2/0x4a0 [ 679.269352][ T5827] ? __pfx___page_table_check_zero+0x10/0x10 [ 679.275356][ T5827] __free_frozen_pages+0x31a/0x1170 [ 679.280550][ T5827] hci_release_dev+0x4ef/0x640 [ 679.285308][ T5827] ? __pfx_hci_release_dev+0x10/0x10 [ 679.290581][ T5827] ? rcu_is_watching+0x12/0xc0 [ 679.295339][ T5827] ? kfree+0x27d/0x6e0 [ 679.299396][ T5827] bt_host_release+0x6a/0xb0 [ 679.303980][ T5827] ? __pfx_bt_host_release+0x10/0x10 [ 679.309260][ T5827] device_release+0xa4/0x240 [ 679.313854][ T5827] kobject_put+0x1ef/0x6f0 [ 679.318263][ T5827] put_device+0x1f/0x30 [ 679.322409][ T5827] vhci_release+0x185/0x230 [ 679.326906][ T5827] ? __pfx_vhci_release+0x10/0x10 [ 679.331920][ T5827] __fput+0x402/0xb70 [ 679.335892][ T5827] task_work_run+0x150/0x240 [ 679.340474][ T5827] ? __pfx_task_work_run+0x10/0x10 [ 679.345578][ T5827] do_exit+0x87f/0x2bd0 [ 679.349721][ T5827] ? __pfx_do_exit+0x10/0x10 [ 679.354295][ T5827] ? do_raw_spin_lock+0x12c/0x2b0 [ 679.359306][ T5827] ? find_held_lock+0x2b/0x80 [ 679.363975][ T5827] do_group_exit+0xd3/0x2a0 [ 679.368463][ T5827] get_signal+0x2671/0x26d0 [ 679.372956][ T5827] ? rw_verify_area+0xcf/0x6c0 [ 679.377708][ T5827] ? vfs_read+0x23b/0xcf0 [ 679.382027][ T5827] ? __pfx_get_signal+0x10/0x10 [ 679.386883][ T5827] ? __pfx_vfs_read+0x10/0x10 [ 679.391549][ T5827] arch_do_signal_or_restart+0x8f/0x7a0 [ 679.397084][ T5827] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 679.403239][ T5827] exit_to_user_mode_loop+0x8c/0x540 [ 679.408518][ T5827] do_syscall_64+0x4ee/0xf80 [ 679.413099][ T5827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.418978][ T5827] RIP: 0033:0x7f0898d8e1dc [ 679.423380][ T5827] Code: Unable to access opcode bytes at 0x7f0898d8e1b2. [ 679.430380][ T5827] RSP: 002b:00007ffd11439e80 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 679.438776][ T5827] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f0898d8e1dc [ 679.446731][ T5827] RDX: 0000000000000030 RSI: 00007ffd11439f40 RDI: 00000000000000f9 [ 679.454683][ T5827] RBP: 00007ffd11439eec R08: 0000000000000000 R09: 0079746972756365 [ 679.462637][ T5827] R10: 00007f0898fb7800 R11: 0000000000000246 R12: 000000000000025a [ 679.470592][ T5827] R13: 00000000000927c0 R14: 00000000000a563a R15: 00007ffd11439f40 [ 679.478562][ T5827] [ 679.481708][ T5827] Kernel Offset: disabled [ 679.486023][ T5827] Rebooting in 86400 seconds..