last executing test programs: 10.514875747s ago: executing program 1 (id=930): mmap$auto(0x0, 0x2020006, 0x3, 0x2000000100000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r1 = socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x401, 0x0) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shmctl$auto_SHM_STAT(0x3, 0xd, &(0x7f0000000300)={{0xf, 0xee00, 0x0, 0xffff, 0x26ab1215, 0x0, 0xba}, 0x81, 0x8, 0xa, 0xa7a, @raw=0x6, @inferred, 0x3, 0x0, &(0x7f0000000100)="02ce3358094ac65445fd291ebb3e010de60f3246467701732de5b6c2dd9ab27ce42bf5f43269627423a6cfbe0866122999cc6bd41b32610f724e22c8190f117bab11673182a52bea663139da36914a228d6fe9a3cabfba0cf56b11415278ea6dd360f3f7a02d8bea4f63dd92221f52ae85adccbe5ed7cc3291431881089f51bab19c500ecdda678f713b3a3432c1e5ec1dd81d376e849b4c01324210435f6aeec75fdf9c6ffa9021317162c5825000e4ac0b202032b3487e8a1738f5abffc2c004453a08c0316d0d1e941fe5be", &(0x7f0000000280)="31955288e54fcca0b5f34033c5fce352341ee0308dc2f30c1a8b9054b2d76c174c78b96b9ac22cdc0aec4768b6dd3d510bfc36a9ca7ed617d794055bb095939e8071e6418d173c368d1b42d41f1676554a99d526ffce75332cf5fa94cf18fe4368e026685524abddcd01bbaf72b305511a46143aa3"}) msgctl$auto_IPC_SET(0x7, 0x1, &(0x7f0000000400)={{0x28403f56, 0xee01, 0xee01, 0x4, 0xffffffff, 0x5a400000, 0x10}, &(0x7f0000000380)=0x8, &(0x7f00000003c0)=0x2, 0x4, 0x3591, 0x2, 0x8001, 0x8000000000000001, 0x7, 0x7f, 0xfffe, @inferred=0xffffffffffffffff, @raw=0x7ff}) setresuid$auto(0x0, r2, r3) r4 = socket(0xa, 0x3, 0x3a) close$auto(r4) io_uring_setup$auto(0x7a527d95, 0x0) io_uring_register$auto(r4, 0x8, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = open(0x0, 0x4603, 0x56) getdents$auto(r5, 0x0, 0x400018) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/5/node\x00', 0x4764c3, 0x0) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x801, 0x4f46, 0x6) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/ext4/sda1/sra_exceeded_retry_limit\x00', 0x103080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000003800)=""/168, 0xa8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) 7.663847218s ago: executing program 0 (id=938): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/010/001\x00', 0x12b901, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/025/001\x00', 0x8901, 0x0) ioctl$auto(r0, 0x5522, r0) ioctl$auto(r0, 0x5521, 0xffffffffffffffff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nbd0\x00', 0x24000, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000884) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio4\x00', 0x55fa40, 0x0) ioctl$auto(r1, 0x5646, r1) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000280)=""/40, 0x28) ioctl$auto(r1, 0x2400000, 0xffffffffffffffff) futex$auto(0x0, 0x4f549, 0xc, 0x0, 0x0, 0x404) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14fa02, 0x0) socket(0x18, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r2, 0x0, 0xfffffdf1) linkat$auto(r2, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r2, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, &(0x7f00000000c0)) mprotect$auto(0x0, 0x8000000000000001, 0x8) msync$auto(0x8000000000000000, 0x81, 0x0) prctl$auto(0x4, 0x1, 0x0, 0x9, 0x0) unshare$auto(0x40000080) 6.851972432s ago: executing program 1 (id=942): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC2\x00', 0x80, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x62, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x3b1c41, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xb4, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x2}, @NL80211_ATTR_SUPPORTED_SELECTORS={0x7e, 0x14e, "14e3b4f7fbaa862504dc161d58d52f2aa639a67232fb2e40df67f0ab937a702af91f78d1d9ee6b888cbd9e199ae49dd71ef43aa5737e9f61ecec96d86396764ed146a5d0ebaf5c134a302bf78d44c946a5dc64bc1e370563ead9a041ebaf62386a95d4b84541b5338186e5b2605ca2efadb84e51f1d42cb62403"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000f4631104cf7613538c899adb1c2a4cbae37647a7c7d294d8544a4a21ed5eb9f1509acd8afa3f69584964c76e81713971c54374af351bf4e188a5e7790a0018fc0baed3fec514a1736063ec6b30a5189db72237907f0f4507000000ecb210d4d2dfb96c6b8f7cddde10636c02f71d16275a7781361e2e7f1d4e20b83363ad403d29c490193ee6caa03bf391ff5ffadca7734c5e74a96efc8d2f07b03522f14cedd9f9d79491579cb6dd752e260890d7e28f3e68247c724cc924fb85e00fb939caf1ec1c22c9db80a8aa308930e5e47f23981b482ba02fa8", @ANYRES16=0x0, @ANYBLOB="f9af2ceb1ab9d7c881605a5ab7446f0e0f11da4efa56390b28131d2d58fd57cc6dad0f5c07d601e9f13f2245af0547e3746b6952d24f13ade0b5f14aef3a4478073bd8872ca5f612b2199a6647dd2414fa"], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x2) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x01\x00\xb6', 0x7f) unshare$auto(0x40000080) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\b\'\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) timer_create$auto(0x803, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) preadv2$auto(r3, &(0x7f00000000c0)={0x0, 0x80000000009}, 0x3, 0x5, 0x7f, 0xffff) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r4) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SG_SET_TIMEOUT2(r0, 0x2201, &(0x7f0000000180)="7c27d4e03dd688590b2521a86c994d288eb55520d71dbe73eead7786853bf0e77848132503a9a4626a76aad049e88591405a57ae419c15112846070e106bd21eb21c211230f83146813f7b3d8f53cb12bbe95a29539f0b7670cbdef4924dba8fe1ed41050fa313720eb121b15938ca8ac2fda9b21f12d1c3668c153c2c597ee66cd6528eb94320807c1beec5e7b8edd8666aaeab842ddf718c3d674fd479d3b4724aac82a8d6") 5.920325252s ago: executing program 3 (id=944): r0 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/dri/vkms/encoder-0/bridges\x00', 0x400, 0x0) setregid$auto(0xffffffffffffffff, 0xfffe) setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$auto(0x80000001, 0x0, 0x2, 0xeb1, r0, 0x8) r1 = openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cpu/0/cpuid\x00', 0x800, 0x0) close_range$auto(r1, r1, 0x20000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x50) socket(0xa, 0x5, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) prlimit64$auto(0x0, 0xa3d, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r2, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x60000, 0x0) mmap$auto(0x4, 0xffff800000000000, 0xffff, 0x100000000040eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x102020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getdents64$auto(0xffffffffffffffff, &(0x7f0000000ac0)={0x5, 0x2, 0x5, 0x10, "5fd42d2266a8a18d1c1de1e81b17ef92fcc21928e7d6a0536f96e09d86aa0325b8315e496588603dfa2eb3c790aa0bb7ded07c016c319a10bf1bce5ae65da02347cfad43ea6334ea7fe1eaf8fa7df21ecfedc214f70172787d7291c1042456d02c20a4fe2e0a2ddc46349489ef00d348e9beaf500ad464c86dcc8769507f8d677bdc7fcce0bd9407ad41e290391c685095eb9e8ae3c49d2b32f3184e8e2ddb381fc50901b4480c8c2735dcfa6c2f2ef92391c9d60a03399da809d257ed50f8d5623ed9bd8949d63f9f5fc26a48955da87393227f92b0ec705599a4d5c2dc05dd6ca0e02c41ecfbce2a27e1fd6b46d05e01c26094c2403512113ceb4ebce2e8a23b4520628270632fc81909efe27cce404503bac907b3a198b9fb74826df86e22650150b4f532f64fc8254415111d5e46d553d0addbb478c2c968a08a88e924275947e9fc3728303269c4439412a5fbed2dd80bf64ae14715f26549e1aa62888201330ecee58c30fabb928d6ce6ec89effc0610c62688d16afe59f0366ab90e4f3d9879be1f79c2a3f648e69e89fce1f2ea3f40a439e33ee847265150acf0c33d83b1ca194b23b0dacdbcf92e6213f9c5a6582e7518efe5e8cca2025b4f487e6f3641d350318c7f1b94fc75d7c2c90de480d391230a8dba0a892c4d9f1828b40e06ff528e2a6b0021595f7594cabfc6b955b4b62eee54e2e96fa18f6c6273c2293888a76c1f7e5424e927b1b6eb31fe427573fc96de81575db6d8003d110f5654b293d4ee17bbff61b283bd7982e5e4d291537f3f0a76fce8371ce794c0f016ee762b0b6cb72ab8b385e1617a117ac72cc6f807020e951ce80fc58c89fb48ff5bc15bfa729eec6f6333d44d65f899f585441a5cf6a485e0a0919c301316e91241215b4f764e87c5cc98b22081e17671ed1fb999e5efb98a81bec5a2ccfc291f29c297832a086dcdbec9321f4bce9f0f932b46c6c11abe9c2d4d5f7dfd52b9e326e64b575c8046cb2c1d612cf15c2391682ee692dd249554ece71c65c6574f3089c1009f71e19f94684b6bbd87bb80784afaa58a3652c896331472ae04c2a5f8e67f5eb56a76fbe10a1e4c9bfb9b916ce5ba015fb26f581bfd2dbc7e9f06e40661814e3086e0b4c1f7bc794248d26eb7c9e8d412679e042c54fb5659805688c25172727fc02c06452710181a53db904f18b0d6bfcdaced3dc9f0712f1e5cfa1d0271e65b8a7371c5e50219b46e06ca89455e7c2501254084285ea757ba5d66bc5a8694cf51289bd5a8c5d6b141307530e895f1082b2bc7498e34393da96b059dca3409b5d00d20ecf4460259b571f7174d01cd8ece0c4f83c0231313c9ae572110c63a14ac4e4ab958c0dacb63eadca9e02cf7117ee451b0ca860e9896ab6a72ce00a7a4b157e7384b35cebbeec238411bc901a5d8541f87dc8e9cbc69777ebefcfcc4bed55902a264ef0ea01017bc6a9e3eadd4ce5a5ce3aead20a7eb441a00a2278e52903eee74b0f9a393406914c8873412713b139abe4a240a185a71877dbec93a633dd29e2685b471eb233f1c41180528a06e150fefb4c89f857dc69dba87a05743df4c011226f0a1271b4f5b3d92756e7d390bcace7bbd0256c67e5d1f3bd8336a3dbd24a236ac1c20da9f42384dad06d4dac824840dc5ad6a71314763a714a05ec056e47bcf7096b34f24323163c33b0bc4662a08fbb9d28c55fe7152d9a9fb402dba7cb3b79571780b62a3dc662b2230b9312eea4af4f0ede14dfc1eca3b7c6d6005a91e497da68f790c1c589188998c946be168f710d89ab718e26103b34d2cad4622de510eade88b088611e942c286d894f630f0c36c0bf3cafbe251ea950954152689010fd912040ed6822f89b96c762693db5bcc5f6aea8f9a9d8a87d48352daa80209b6e191d3dbead277635371b50569d23af86276adc93703c077bb93176af6190e01649b200e32837489000ab23868ff40e26f412eff56bcbee1a6f45dedcdc28bf4004b293436260710eb9a0841e9799e8c059c76626293abc02dc700e00d4c9426e0014502805f137ed46e0aad93ad6b409fb410494134a34a1ec57e362b0f0b156e41931f87b7b155cefd656d3ea4115eec2bd6721efe63fbfa74585407d7b020a5311e567de5b3bc44a899284f385282ba50fa7eaae78c9a3e6a9ab457d5affa6a8e0cae302f62d1411b39fdcae30164217696e22a96d823566ed5234d4ef0ca8ed0f6cf73dc0f48fc13eea6c5f00f0fa770be6e80a583d72e6bc35d5fdf1129874e2d23d1b6668b2cacd872628490a5724b095199e6ce3b2229cab8a8cdc14999738e6a34d6416d4b8aed744da4c62fa94fe03b0fd5aa02db9049a1ac18f9e376afab43c8ddf1d153e107f7ab17e6960c5bbcb0b1f4f04273296ca7676e2d0f7729dc93a47a99d4619cdc0fd0c21434ab5dc7e2bc08006bc1b3bb0cbfba9e0d68bb046b86d4aa11c757d14905a6cd0e6b34bff03ec390e4bf0bba8a1075512d7fc7cb18ab6cac69cfd53c7dd9149d5e8b176366ba25f9541a04fe7da31ea8e93609752cb00eaac8a602d0c5bd538e8187c08c7e0109d85e116ed6b5b0817873dc2cd939bf90c1fa530fa0040e9842e1b8701df3ee3e188cb65c1998c40f6db69e207cdac6122d1c63c2d6a4c657f0e9c43e670f84d569b3b8daf3fb51b3923e8dfd538f63822891c2fabdc0e898902e548c3d8a4d85c1d7779f9f13fd4eb4a041ad5eb6bd3e5e636e52b6dd7c08e5584e613f45e05265c554a6bcb0f9b5cdc727e036a683295843b3282ed679a267908625f2149664f154677906d229dec379d0cc6cfa663192007573eb230cff9c0d4e96ba5b2845b6500524459e0b919bcd599569f51746d37b7ec74da303ae0257caf6292eac56"}, 0x1) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) unshare$auto(0x40000080) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000005440)='/dev/snd/controlC1\x00', 0x2000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, 0xfffffffffffffffd) ioctl$auto(0xffffffffffffffff, 0x5429, 0xffffffffffffffff) 4.586067413s ago: executing program 2 (id=945): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x4a000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/loop9/queue/nr_requests\x00', 0xa022, 0x0) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x380, 0x0) socket(0x2, 0x1, 0x106) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_DOWN(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="f0000000", @ANYRES16=r3, @ANYBLOB="27042dbd7000ffdbdf2503000000d9001900b4243dcee1d914347b3f4fadbb6890628b68058b39d5d828eba613099b8d93dad56c8d6cbf0a6d69141f95f0728e7e360a7b17f7c58a0700000052a973ecb8973e5a5f74d1c7c1e59094a68cc652026131e8b4ebe650f4fa9594274fb697889465f8d4a8d9afb52560305baebaa7f626f0cd512e22f40f36260cb513074bf3ab275a8babea71cae36b8946f0c7cfd88accfc3a4e1f3ee6a6878a394b84968c78c1312b902b94303410af727b8f5aa422b6bac21b0a84b15af5e2f4e17a3a4bfa198949950dcc05b278cc3dc9b40a39000000000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x40000}, 0x400c844) sendmsg$auto_NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="03042bbd7000fdcedf381c00000005f70900030000000500100010000000"], 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x1) socket(0xa, 0x801, 0x84) shutdown$auto(0x200000003, 0x2) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) close_range$auto(r0, r0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi2\x00', 0xa200, 0x0) mprotect$auto(0x200000000000, 0x806121, 0x8) settimeofday$auto(&(0x7f0000000180)={0x100000001, 0x1}, 0x0) mmap$auto(0x2, 0x2000c, 0x4000000000e0, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setuid$auto(0x800000000008) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec18\x00', 0x900, 0x0) 4.497758572s ago: executing program 1 (id=946): r0 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x1ff) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x8000000000001, 0x7) write$auto(r1, 0x0, 0x100000a3d9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:352/strict_limit\x00', 0x100b02, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c00, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x23, 0x3, 0x200) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x156) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x3, 0x3b) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) 4.387464156s ago: executing program 0 (id=947): syz_clone3(&(0x7f0000000700)={0x100, 0x0, 0x0, 0x0, {0x1}, &(0x7f0000000640), 0x0, 0x0, 0x0}, 0x58) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000040)={0x3, 0x7, 0xfffffffffffffffa, 0x76e8, 0x4, 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={r0, 0x4, 0x81fd, 0x8, 0x0, 0xc, 0xe3, 0x7, 0x9}, 0x6f4) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) pwrite64$auto(r1, &(0x7f0000000040)='+\x00', 0xfdef, 0x1ff) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x40, 0x0, 0x3) bpf$auto(0x1342fd2d, 0x0, 0x5) mmap$auto(0x0, 0x20009, 0x4, 0x11, 0x401, 0x6) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = epoll_create$auto(0x87ffffd) epoll_ctl$auto(r4, 0x1, r3, 0x0) futex$auto(&(0x7f0000001d40)=0x7fffffff, 0x8, 0x5, 0x0, 0x0, 0x6) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) select$auto(0x5, &(0x7f0000000080)={[0x20000009, 0xfffffffffffffffc, 0x200, 0x5, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0x6, 0x1]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b71, 0xffffffffffffffff, 0x3) syz_clone3(&(0x7f0000000400)={0x100200, 0x0, 0x0, 0x0, {0x38}, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[0x0, 0x0], 0x2}, 0x58) madvise$auto(0x0, 0x2003f2, 0x15) 3.851150038s ago: executing program 3 (id=948): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x260300, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x621c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x1000000, 0x3}, 0xc) ppoll$auto(&(0x7f00000000c0)={r3, 0x7, 0xa}, 0xffffff05, &(0x7f0000000180)={0x8, 0x8}, &(0x7f0000000280)={0x3f13}, 0x8) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000080)={0xc0dc, 0x6, 0x4}) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) getsockopt$auto_SO_SNDBUF(r2, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0004, 0x14) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0xffffffffffffffff, &(0x7f0000000500)=0xffff, 0xa, 0x3) ioctl$auto(0x3, 0x402c542b, 0x38) 3.676810594s ago: executing program 2 (id=949): r0 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Virtual-1/edid_override\x00', 0xc0a82, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x1ff) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x8000000000001, 0x7) write$auto(r1, 0x0, 0x100000a3d9) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/bdi/43:352/strict_limit\x00', 0x100b02, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c00, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x23, 0x3, 0x200) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x156) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x3, 0x3b) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x0) 3.665364163s ago: executing program 1 (id=950): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x260300, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x621c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x1000000, 0x3}, 0xc) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000080)={0xc0dc, 0x6, 0x4}) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) getsockopt$auto_SO_SNDBUF(r2, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0004, 0x14) madvise$auto(0x900, 0x200007, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0xffffffffffffffff, &(0x7f0000000500)=0xffff, 0xa, 0x3) ioctl$auto(0x3, 0x402c542b, 0x38) 3.481245694s ago: executing program 0 (id=951): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto_SO_CNX_ADVICE(0xffffffffffffffff, 0x7, 0x35, &(0x7f0000000200)='/dev/audio\x00', 0x3) r0 = socket(0x2, 0x80002, 0x73) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000240)='/proc/stat\x00', 0x2200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r1) sendmsg$auto_TIPC_NL_MEDIA_SET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x20, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @ipv4=@multicast1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) setsockopt$auto(0x3, 0x0, 0x2b, 0x0, 0x108) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/rxrpc/calls\x00', 0x42000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f00000002c0)=""/84, 0x54) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4008019}, 0x28000) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r4, 0x64cd, r4) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x40, &(0x7f00000001c0)={0x1200, 0x5, 0x10000, 0x9, 0x5b77b906, 0x0, 0xffffffffffffffff, [0xcfe, 0xe5d, 0x5], {0x8001, 0x38, 0x9, 0x4, 0x4, 0x3, 0x3ff, 0x3, 0xffff}, {0x20000000, 0x9, 0x7, 0x2, 0x2, 0xffff13a7, 0x0, 0x449e, 0x1}}) r7 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r7, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x2, 0xc, 0x5a}) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) sendmsg$auto_SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000380)={0x14, r6, 0x10, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r5, 0xc004500a, &(0x7f0000000000)) close_range$auto(0x2, 0x8000, 0x0) 2.546141429s ago: executing program 0 (id=952): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) write$auto_sg_fops_sg(r0, &(0x7f0000001380)="4a0200000000040000899edb615550fd8c44924d87f0010047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ed6", 0x2e) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) recvfrom$auto(0xffffffffffffffff, 0x0, 0xde, 0x8, 0x0, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_int=0x9, @inferred, 0x1, @_sigev_thread={0x0, 0x0}}, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0x2, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x401}}, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)={0x14, r1, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfd3f9}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/scsi/sg/debug\x00', 0x2000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/7/wakeup\x00', 0xa0440, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r4, 0xae03, 0x42) ioctl$auto_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, 0x0) 2.351799922s ago: executing program 0 (id=953): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop6\x00', 0x101202, 0x0) r1 = ioctl$auto_TUNSETVNETHDRSZ2(0xffffffffffffffff, 0x400454d8, &(0x7f00000000c0)=0x200) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = pidfd_open$auto(0x1, 0x0) quotactl_fd$auto(r6, 0x2, 0x0, 0x0) keyctl$auto(0x12, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) setresuid$auto(r1, r2, r1) 1.121103693s ago: executing program 2 (id=959): r0 = open(&(0x7f0000000040)='./file0\x00', 0x22200, 0x0) r1 = fcntl$auto(r0, 0x400, 0x1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mlock$auto(0x7c88, 0x7fff) setsockopt$auto_SO_SNDBUF(r2, 0x2, 0x7, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0xeda5, 0xc86) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) ioctl$auto_BINDER_FREEZE(r3, 0x400c620e, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0xb213, 0x2c, 0x800}) sendmmsg$auto(r4, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000080)={0x0, 0x5e0}, 0x1, 0x0, 0x8, 0x3}, 0x6}, 0x2, 0x100) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) prctl$auto_PR_GET_TSC(0x19, 0xa, 0x0, 0x0, 0xd) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000280), r1) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, r5, 0x321, 0x70bd2c, 0x25dfdb7d}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8800) shmctl$auto_IPC_INFO(0x9, 0x3, &(0x7f00000001c0)={{0x7a4, 0xee00, 0x0, 0x4, 0xa0b7, 0x8995, 0x4}, 0x1, 0x5, 0x8, 0x5, @inferred, @inferred, 0xe508, 0x0, &(0x7f00000000c0)="56273b34ad9c74b5d6a423c37f2baf8f39d11d4ecef68975ca323d4111c6566b94810003aa2f93b4e0fdfdfa67dd1fc0ef6704a8d82c0ac861110cd8f4acaf8b8da40ec7ac479b7f9d7defc56b97757cc27375a8cbed4481f4197218", &(0x7f0000000140)="d98c3980a6e6a3d474c84dd63dcd51b8e69f2ad3cf3bc797935ded868252e8e6daeb02c32d98bbd97ddc65ed6f10e4455085113f12e97fed757cd486ee2404ab6f19a82d8da19fc564d7bc0b07f4254be278de"}) sendmsg$auto_NL80211_CMD_GET_MPP(r0, &(0x7f0000001c00)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001bc0)={&(0x7f0000000840)={0x137c, r5, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_EHT_CAPABILITY={0xba, 0x136, "1d4e9cf524d9f122face7721cbf9bf9898521f4bfe272e296884e796ea331d02f17d4478a19f3bb8d6e3a2b62608a5f552f0f32687ea2fd30ad03ec4c52fdadcba0d9ebf0784a4f3d46f800078c34c280237d12b093583ee794d5963fd2f6745418404f3d5ac279f2cf34e1342cc579bc8280a1564e6ef33c15e7ba51168a1235bcc970f7a1a7fd689af1fec7b4e51c259e8b3932ced022ac0de1011a2c65dc7f9671e05a170b9232e2618ef0cda415f76ef54aec35e"}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0xddd}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x78334544}, @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x5}, @NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@typed={0x4, 0xe1}, @typed={0x8, 0x6c, 0x0, 0x0, @ipv4=@remote}]}, @NL80211_ATTR_SCAN_SUPP_RATES={0x123f, 0x7d, 0x0, 0x1, [@generic="da9efaa5be1d1f3c847653bd776914eaae39b35d09de970ffb1c848110c3aacaef1e79bb9007819d73b47aa4c508e994ba3bd343879a9b9ac7c997690c79c62d591e912d94", @typed={0x8, 0x152, 0x0, 0x0, @uid=r6}, @nested={0x1004, 0x9, 0x0, 0x1, [@generic="ac5823de922a42ecc572c06f061f301c75b11bcef27ebf5c685e1ba03e881ed6bdfe7dc163b9f0ef6009ce80bc015df03bc340e722301bc08f83eaed82d150acf6c25385a0d179614e1fe1604afde85b4cc96804eae6ef1b1bf3d89a4f35033e01b7e7f07044a5e235212303a4fb1a8281b943d4cc784c4c293607738394f2ab03ede9d973b3d335bca516a993457f81cf76c1988c8aca07cb0e65d07137d3d411aca9cce7c5b32a7874f4148a0890a1233de0021a83987b6f4ce3721b5f11beb296eaa38b5e2d20d9444c5f5593a90bc20f3388c6a03f2884cf4e6cd31ed09ad3186209537a20b56b76bfd61565ff873c0a3f76b7b1c512448766ee32c6b8be18cd0e9a6b9e506ee0adc00995409e3928764742584dbb4a6e62e575eaaae53806096b56a2360559f70325e538a894989deb579c53914eb518a21ceafbcec1c2837ce3bc7dab35485a81f67a3dd2543f4becbe93957094fba479ad5ff12abac3937906c0bba059fb47c80bd9cef61ff7eb8457dbb185c8f4a4171e1ddcef430953e8dbfb2c41e0ccff458ece8eac9b3bb12f2abc246dbdb19319fc3ee5c7f21bf6854d65bb5009f5b75a4736edbf06c95e8677dc0929d77a81e30975148db3bf35d71edd0015ea759a303c4a76c3383ec97bf8fbaf6453d9d065d2f06e1d3ff0a641acb0788c0bd79e0092c2e17ce9bdde540d7b7b6bb6748ff7b0407cfc08d4fc055815b384027ef9e3b23abe6e8e505176ba941cbd873749cbb084362efc78b704db35b16832009af3742587d32ad2ae82ddf245c63bb1c810ac5373d9475afd74a763a348b699979081262b51d2a423e43323030ef4d30e4693b508b35000986eca50bdd75c596e65e9b37f22472f74ae47f93e7afdc15a62694962edcdddf56846bb95a17429fd7297da1f39e07fcd94cffe2c4801704fe93311a0de5891fd05b4ca8e9ecf0cd0757a463bcd233fe55e8a374baa6c24e890f5976cf1fd08814577e721af0c0c9ca4e6ad712f0f347979aceb564c6113aba2a3c0de696e3c2bb2546bae829a0f7fe70f6636ed9e0f6668d9393a4293d6e503d004fab550fb698821f5412f962ee8830c3a490d9d2b11dc0772994b0072cbdc55cd99d02d41e73b1946f34add607b962b0617df3abe87ea8da2d5f191b6d0e8604743586dfeea108c316c667ca72888e7c1b8726184653cea5e15695afa21fe7eb4ede40feb71317e9fc2537dd581cf5029f5a7ed7876e0b1229e7822cbbc54dad35e645b4d38e005e92f44d4f4c58048a1f1f6856bc84c04994ce4578ccc1a5d93a8e1fc63fbb0504daa61915bf2466370e3f41ea47ebb98493b239973867ed46b71f590b7b8eb1f45d8a4a6b3edf36ac38e8ce8e88cd821286ceaa3b024bac1c39db438631d5574d92c361860593970326c7aa4206b566f79d96c342d297c25f42e28099595b3cd958944374b312d3abec3007eae82e1642a1e18aa1712f2f821c7fccdd30330ba088783c09ba20727cc90d20ef6bcdf37c9ab4624adc64e87992357d0e100349b052ee1c830b763ab42c32d154b52f78c089c23da0b9fd8c964bdc1465d89be529ee318e854ded4393c227b3461612cc69b5c498bc6a032538657f11fa47d5215628bd079bcbf307962a6883709d016d34ab06bf59d0571d3bb7b395182df70b0a8e1037eef1d4d4089e47b851f472fd4545b9f359fa285fb6c2333f4b613480c5621977c08d96f31548eb9240565ffe45dc0d5660015563cccb15b69dd51d294b7cae113a122bb94e0fc7d3306f8ec53a0212ea6684a8c4a1010c50ca1252021fd17a87805a2a3c361c15168eff31feb183ff66920dc26c4a6afc10800f4f9c886da2a2546bcf9a06a50d731464cb01c1054e9976c3d46c80636ff0e3aa9114be64c4556a394d5b4bd86c2673649da6dd648c2b7ad338767a5f814297fd474eccd383352c38fab1212715bed58399130ebe9e48bb33134a1d20c4fbc1b9d7b73b9e53aaa075ccc386a6592b0a68f0af5eb541d8749a51f78bdba1487211a5c4740b02c121d26ec338c2ddcbdb7bfcacfc6123cfea0ed9b022d6df466f751c6ce96a8d874b76ef2aef11310ac6b96c46baace4363395cb44290b8e9065de66be914a195ca2b805ef82ec336c6322a566ce19c226edfbb804f3dc1f9e12fb64839fe02b38998aeaefc2e052f698a5dbd6a5c21b11cfe83770e3557520921da1265c4bde6a9561346ea533297aa95d8152235707dda49007dbc3d1f893a4e9cc18948476d49f0a5ae783481da1f7a91188a255280737f20bac9e3e69057fcea166ff71a7f0de9db6d452ba677c3ab60399f0be5e24a65b588ccd90f3e2ff188f49ab86eaa7f2dbb580032a51b4679fbd4441e0009e87055e3655bc23573b1da2a1023cc1c4d3ead51623cebd060da19a664e4648b38b1f5ef50f14e733947751168b2defa91dc7427d824a9a255c82418622be0339e15e9c27806e332b529beac27f77b4700226ad516e819eff3d674b9b6997f9632cf9d5419736714b9a6a3daff4ee41a118b2dfc0a34b84719285e8a9d959d38532b1eaa1a2061f9e57cd369148bf49db9f66db5cb9dee7c586f21bf70269a23e6bfad50129bae9c74fb686dcded17841ffd05955eb9bb538f323bf062ab76eed6947cf0bf89f98d7c449ab216a1cdca851622e31c8b354e7f4b1cd62fafed83a0e910a014f5ecaf77b8a529bf79350a28065e55f21db040857ba1a404eea10616bc74845f3632b455ef8a46ba916456ad7d460aa0ec1e296cbc8b480058e584ca81c614f65a51144f344e06739c17b64ec75c0702c14c3bcb73d9a5fc529669aec21116fae57466bef24397d247658a3bfbe1222dde9893d94434b3977b140291a642e393d1fda0110d33bbf967c691b459bbd1e0464f25cb787172a0118ae3baff272f2978281e3f6bef2c21456d11efc21ecc9b2d310e657c413e13e2cf57d715aaaf458486f4d93eda0ad412bb644f671da57fd5d275cf9e52d44e690f8564da7e54d220b39c82467b74ee645e00878442791ec4b96317d902040f3753eac8088e311873de3e6f5a5d819aed9596dab330faf3468c96454fcec75e30f6105329841b9311a6eb8f213d2aed4c5cebf6bc6aedb8e011512ee707156c0c11d8d6cd370fed877c752557d3fb3f1ad8f36ea5ef0b3f9dd115bfb06ded12597e621b034f29e111ff7c2c5467735d6bfc15976a1a12489f00badfb9c688b6d2514dfb91de477def140b44b46e45d6639762403ff7a4207ea15d7a2bb397a05df2fe42a9490cc22fba896c4089d9247e0c1cc02f260054d31a7de76383515702790c27d98497d27e60e737232868358f2acf7942ebc1985e7479cb4df790a453a9ee34edbb3619e6ea8c1c727951223383211091d788898b67ccc5e0d1180a8b9db22ca52e5c9a80be9fdfea43169003d50ce036bd59ce07ef36ad901acea735117b5587044296a2e30092adbd9bb575b4150d58bee2d44e64361dca119fd6643a327f73ac2a77b26d8e96c8991eb739d697eef9b1539b22d6fcc0412d02aa2d9e78dd7e4603002c4c48cd64d92c664763a7687a594246915285f8cef96c62ff7112d20bee7a487b5356a96a0080191a29ffcb419b7f349c1881c7d0fc6f9dbce862e30653eeff7192f191c8322734b71440c69fb14bcd0f6a86fc46e6862bbbe8baded14520e5c839d8702afb5599bd8db50809fbb1756a12392b6cd7c0e34a91bc76bb257e9295fe8686fe09f1f86ae55d47f0be9c7d680bb5048de41962ad163e2038c10100b2aaa737b40df35e789d8d744a71ca8acc8e231b202957f95f5bad228be502de54fcc974879beee0629a61e3732d83186918b29fe4810b04c4fb18f08cad910388ebe77c993fff043565c1b7c2edcbee3015856899cda9560a249f9f7c2acac6796146561ec3c7f03fc4782c0d79394a8dc392989b2c385c5d58b7d1ed95ec53ed7de1a635f9e6b8beeb67cf3df8a75a5acc813db17f6c8d2af200cd02518907b1113dd89bcb3c8a76af5607d312938bd18752a1feb64480b319304416c9925dcd8b97da63b944f128d17f25f9e38ec0e682189236b2b128eb0b8846e75079a18a7657ed9ab1ae237badd2fb6d6045fd33f279b23a96a94fea69280690fc81cb37f178f68e6708986ec9d66d473815d41b2f910bbb0665f5d884c566f9e14448eab3c64744895fe6242fd5ef0d4c7e6153cec7166c183f428951ce4e9faa466a02f534241836a43e88e50caac714371c6b54b0c84db2498ba1e79166e61e884caccff56fabaf5dad2b1604d55dd6f9d2b6af0ed770ec6afd01bb1a00315010dc2d8d553f5636e1ae117265108fcf6a3ab8239aacb7d4cf4bf2f16adb7c677059c7e8634ad7cf36a663c2e1f97f56ecacddadd27f059e766a28ef8cd44ed613c0d81a54b77b2b1c8ce45b82aa9d580f24af528365d3cf1b43623ba38a14732c09133d2b8392b7cccc52ead6cae2668415b90b3d27ea094f6a0cdd91d94f5b5fb790248442e462ca60632a30c8b8dcc99036bdedbedc1493c48129a8a7b2671edd0df4a0bb06109f22828d8cce62ab57af5a23df321f046da978e0a690148cde1460d955c6205d10aa28e698be0d3b27af75b8fac20932985155c606446bc815e9c6128c64d54010c1292e5cdcd8b0a954dad0eb159902a9bd08d8398fbb60b54ece7f2396725fcccd97629e8d2db56879f5e02c3ac1613ba6a92963f2be20d3f3259fa033ebb7d904b0b3a82dc84756a06e4c50fc18812540ca03615e24491d660d2303f042cd8eb52ea11c994d8821a0836ab3f0e3b38879e49c2c6f4089acfda191f9b85eba87da2eca0ae183bbcd86d6957bdc02fe44f7be52b7d91b6b6e3627f7e4d9f32693c61962e564ece3e7313ee2c683f828e37e7a946e46914a39971ccd9851772005bb95004fa18a412704602686d66eb8398a2e0bd4741fdc4ce225b11179e4cd28e8574adc13f15a891207d98b8f5cc9adfb1450ed29bb8e075fa0edae882912ca071b2b344d7c809d3119571d476b3a36e946ee9555be1cf89308a0182f9ff8e9cdedddc846dc3ac1081c969690afb2a1561e66b13d37741f6b6f2a05457065a0c38bb6d32b06f53d3e47d667ede535437aec421a8e4c5093037063bcfcac752e5157cfd9bf351d1bd3151cfa74ddadca8f7148a14eea5d644e2ed9aa0927c56299ec4aadbc3fabc465203c3eb18d2d057acb99a58649f414956f39df53ac38a5a8b9a04c373008184be3f977e9776990bcb6a636333b00a3bf4b929941ae14b5c7d9fc3f0c9fa06fe9ea9f336b21936467f7398b6315b74a3b428ca9188e3a848c7504d5b6dba4f205ed63d9fb83333734c6e8242b6f511119368b1b6ff2272a10254418a505851f3d1d8eac8b9cbcd64b31c3d3e7b59a5eaa25b91324580a5db877d3bcf70116cb53b7e7d338340ca261ae936edcd3ba4e22e2715cb6edc05cc93cb724be795f23942469ec0e7709b7f58a92fa3ff41cdf0350d33a3d2ef6f76ca9481ef23ff5a56ed45b7955ff5533372a905f941fea6be95339b36dd3aa7b62f210d5cf0352d7592f5b146b6a626b0cc3503c6cdc129eea05c06f2a686732b62e74c66ece9f9482e1c035f8d4d2796fab1afe70804d6e266fe7eabab7051fbf5dd24084bc5ca1272afe837df5378e9964056b7f954c9e107be3589125a96e9232011b0f1ee33e20d0bd68ab17d23243df2dddf12249da19fdd13ccc2217fa5196ac4c100f56824ffcfd0e1498d5a5a4a5948ba9ef3f1c3b0bb5e024ab"]}, @generic="5e28dd9fbed1ac8f82dc91958bc34b47dbd44df8f004c961b7055cf5f9ac8aa75f365dcc55fb6d01b9809abb711a29e0e04c80bec382d2f116204211d220bfdf77bf914df85b6d1aa57864e03d5b3e9edc0e3789ae0fed8b184ee8232115f2d73bcee1f388", @generic="622075009ac8a34e0d4322be468334a085d00b26f7c2977b43621a50e6c06dae555face21ff8480312be62a204e69ebce16e0323d03f85da338e9c2184426a5cc86782959007ff202ae220abcf00d407aa4357d07be312c1aa2b59b2be4cb994e6bf2b233a2cd78864033278ad59b01015e4bc7bebe32b640dfa3a95bd1374bbb335b3d3b0f7cde08710b315cde2963ebd284d9d7fa1e4a02b4a5f2906da3e2101b70f096fa5d7e37a157318e14a7ac51dbc601d0b8f9902227fc653e654ddc4e5eb3c91bbe1d1b616", @nested={0xb9, 0xdf, 0x0, 0x1, [@generic="32cfe6656bbedb522e5e8dd3f68e4296f3a795121e3c73b16e9272b0d51d57111736a0f3da8b4096e225bf25f04ad1b483cfabf61d03d5f9dca0b7237c3f3d51ed62c76c66b7e2af7042188e8700b189bcd66f5f411da0bafbaadd4c56198b67163a420864d0765f60f4bc36a13a4e619e19f91ef98675bdf5d82f73e3e487a0ddce247cba7ada2b153f720cae6494cb207e9ebcca43b77fbce3fd4ef2e151aff345560397b55a6e8ea8e5e75d2c2606e29ce55b68"]}]}, @NL80211_ATTR_FTM_RESPONDER={0x40, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x3b, 0x3, "529ce4b2da3fcc651334f4b7e701840c643678e86fa4e933d047aa26a23b71c0e6025d5394e99fb326ddf0eea3fc386d8b246b5ae051b7"}]}]}, 0x137c}, 0x1, 0x0, 0x0, 0x40}, 0x20000010) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x303f81, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 409.246108ms ago: executing program 2 (id=960): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x9, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="06000000c50396eefe5f22d54b76a4b051502938afb2f21adb2dcc3265de692e3f29ebb908c158b32bf9e3f4765b3439a30fde1d8a1d06f29bb8ab930681846ebd7a0e16c1e7e9eeab9833de0a", @ANYRES16=r2, @ANYBLOB="080028bd7000ffdbdf2526000000050030018100000004004a010800ef0003000000"], 0x28}, 0x1, 0x0, 0x0, 0x20040881}, 0x4000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r3, 0x4b64, 0xffffffffffffffff) r4 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x50, 0x5, 0x10001, 0x5, 0x0, 0x8, 0x7fffffffffffffff}}) io_uring_register$auto(r4, 0x6, 0x0, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 351.963451ms ago: executing program 1 (id=961): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mq_timedsend$auto(r0, &(0x7f0000000080)='/dev/snd/seq\x00', 0x5, 0x9a, &(0x7f0000000100)={0x4, 0xb0}) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bd0100709d0100", @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf250300000004000800100003800c000c8008000800", @ANYRES32=0x0, @ANYBLOB="12000100898771f1c19f17790485908286dd000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x50}, 0xc800) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x20008, 0x4000400000df, 0xeb1, 0x401, 0x8000) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket(0x6, 0xa, 0x4) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="20062abd7000fddbdf25020000006d"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x80) r4 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mount$auto(&(0x7f0000000000)='veth0_macvtap\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) io_uring_setup$auto(0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r7 = open(0x0, 0x163340, 0x6a) socket(0xa, 0x2, 0x88) r8 = ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(r4, 0xc038586b, &(0x7f0000003040)={r7, &(0x7f00000004c0)="b22a9437f1ae0023a24a45d666b592f352e680b2d4d7e3af61f94d2fd48f2a1cf6a25bab9659d80b3953f460077e6c50ee212653a9e6268974b51d04730297ec", 0x80000001, &(0x7f0000001fc0)="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", 0x5, &(0x7f0000002fc0)="1e6d677fbf69fd7f024399affa64f03177117750ae30cedd", &(0x7f0000003000)=0x5}) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000480), r8) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @local, 0x1}, 0x55) sendmsg$auto_NL80211_CMD_SET_REG(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000001980)=ANY=[@ANYBLOB="000635796712b8a994f60000", @ANYRES16=r6, @ANYBLOB="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"], 0x5fc}, 0x1, 0x0, 0x0, 0x4000800}, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000380)={[0x8000000000001fe, 0x2000000000a, 0x4, 0x8000, 0xfff, 0x3, 0xfc, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff7e, 0x4]}, 0x0) 252.009196ms ago: executing program 0 (id=962): mmap$auto(0xfffffffffffffffc, 0x40000400008, 0xdc, 0x9b72, 0x2, 0x8000) (async, rerun: 32) sendmsg$auto_NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000001980)=ANY=[@ANYBLOB="2003", @ANYRES16, @ANYBLOB="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", @ANYRES32], 0x920}, 0x1, 0x0, 0x0, 0xc080}, 0x1) (async, rerun: 32) r0 = socket(0xa, 0x1, 0x100) (async, rerun: 32) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x3, 0x100) (async) unshare$auto(0x40000080) (async) socket(0xa, 0x5, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x802, 0x0) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) write$auto(r0, &(0x7f0000000380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9cJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\x00\b\x00\x00\x00\x00\x00\x00\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbd\xd8\xf0\xd1\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\x1e=J\x05W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2u\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9m\xcen\r\xde\x9e\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8a\xd9E\xd9\rX7m\x89o\xcf\xf2G\xf0\b\xf1H\xfdQ\xcd\xf0\x86{\x96\x9f9\xb6\xa1\x04\xa8\xb6\xaf\xad%\xc1H\xa4\xce\x81#?\xb0\xb5N\xf8\xe3\x93g\x8dH\xa3\xec;\xf6\f\x9d\xef\xff1m\xae%dJ1G\x1f\xdc\xd5d:\xf5h\x06\xf0\x00\x8a\xbb?\x87\xdd>\x880I\xd0-@F6\xe4\xed\x11\x9d\xd6\x9f\x84\xa0\xb2\xe9\x1bu\xfec\x9a\xc0\x98\xe5\x95\xa6\x96$\xe0\xfe\xf4\x0f\xf52\xa4\x0e\xb9\x8dw\xc5\xd0\xe9\xd1\x7f\xfb{\xfbp=G\xa4\xce\xa4\xbbx8M-\x05v\xf6\x8f\xb4\xa6\xa3\xd7\xde\xe7\xeaU\xfe\x8fI\v*\x819Y\x1e\xb0x\xa3qv\x10\xcd\xf9K\x1f\xb2\xcc\xc8\xc83\x8c\xb9\xd5;\xb6\xd8\x1a\xeebq\xdc\xf9J\x1e\xe7\x1dG\x8b@\xd1g\xae\x91\xa7/|\x17;\xe6\x18\x89\xc2\n\x0e\x04\x99\xcc\xe6E\x0ek\xe6\xde\x92\x8d\\\x8c\xa3\xd0jj\xd6>@\x0e\xc7V\xad\xe2#\xaa\x94/\xc06\x12\x02\x823\x06\xce\xc6\xa7\xa4!;\x90\xb5O9O3\x8b\xddS\xdb\xe9f\x150\xc051\x85#c\f:\x94.\'\x9a\x06\x97e06\x05\xc3\xe3\xa8;\xce\xcd\r\xa7L_\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc6\x95j\x05\x17\x0e\xef`\x15N\xe9\xe8\x15\xc3\'}s\xce', 0x100000a3d9) (async, rerun: 32) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) (async, rerun: 32) socket(0x2, 0x3, 0xa) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd9, 0x948b, 0x3, 0x35f4da0a, 0x4, 0x3, 0x62, 0x80000002, 0x7, 0xffffffffffffffff, 0x9, 0x3, 0xa]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x1000, 0x3, 0x95f4da0a, 0xffffffffffffffff, 0x3, 0x8062, 0x80000001, 0x800, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffe]}, 0x0) (async) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x20400, 0x0) ioctl$auto_TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000140)=0xbc) select$auto(0x5, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000001ff, 0x4, 0xd, 0x9, 0x3, 0x3, 0x1000000015f4da0a, 0x4, 0x3, 0x62, 0x180000023, 0xe, 0x6d3e, 0xd, 0xd, 0x1]}, 0x0) r3 = openat$auto_stats_fops_(0xffffffffffffff9c, 0x0, 0x40002, 0x0) read$auto_stats_fops_(r3, 0x0, 0x0) unshare$auto(0x3) (async, rerun: 64) socket(0x10, 0x2, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x770, 0xfffffffe, 0x8, 0x4, 0x4005, 0x0, 0x5, 0x400, 0x3, 0x9, 0x6, 0x6, 0x4, 0x11ffffffffffb, 0xb2, 0x2, 0x6, 0x10, 0x80, 0x7ff, 0x8000, 0x1, 0x1, 0x202, 0x9, 0xbca7, 0x4, 0x0, 0x0, 0x0, 0x694, [0x2, 0x6, 0x0, 0x5, 0x0, 0x0, 0x20000000000, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffc01, 0x7fffffff, 0xfffffbfffffffffb, 0x0, 0x9, 0x2000000, 0xfffffffffffffffe, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x1, 0x0, 0x7fffffff, 0x101, 0x0, 0x20000000000000, 0x0, 0x1000000000000200, 0x0, 0x400, 0x96, 0x5, 0x4, 0xe17, 0x0, 0x6]}, 0x1fe, 0x1) (async, rerun: 64) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) (rerun: 64) ioctl$auto__ctl_fops_dm_ioctl(r4, 0xfffffffffffffd03, &(0x7f00000001c0)) (async) openat$auto_fops_u8_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/nfcsim/nfc1/dropframe\x00', 0x131000, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) 118.263846ms ago: executing program 3 (id=963): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000040)={0x0, 0x80000003}, 0x6, 0xffffffffffffffff, 0x8000000000000, 0x2f) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x260300, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) r3 = open(&(0x7f0000000000)='./file0\x00', 0x621c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x1000000, 0x3}, 0xc) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000080)={0xc0dc, 0x6, 0x4}) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_seg6(0x0, 0xffffffffffffffff) getsockopt$auto_SO_SNDBUF(r2, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0004, 0x14) madvise$auto(0x104000, 0x200007, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0xffffffffffffffff, &(0x7f0000000500)=0xffff, 0xa, 0x3) ioctl$auto(0x3, 0x402c542b, 0x38) 0s ago: executing program 2 (id=964): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64"}) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5429, 0x0) process_mrelease$auto(0xffffffffffffffff, 0xa) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r1, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x4000, 0x0) symlink$auto(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000005e00)='/sys/power/suspend_stats/last_failed_step\x00', 0xa8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000005e40)=""/115, 0x73) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x100000000000029, 0x0) fsopen$auto(0x0, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) kernel console output (not intermixed with test programs): 180.897974][ T7698] RDX: 0000000000000fec RSI: 0000200000001080 RDI: 0000000000000005 [ 180.897992][ T7698] RBP: 00007feb82a27090 R08: 0000000000000000 R09: 0000000000000000 [ 180.898008][ T7698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.898025][ T7698] R13: 00007feb81e16128 R14: 00007feb81e16090 R15: 00007ffc6fb012d8 [ 180.898065][ T7698] [ 182.090066][ T7707] futex_wake_op: syz.1.406 tries to shift op by -2048; fix this program [ 182.104592][ T7707] futex_wake_op: syz.1.406 tries to shift op by -2048; fix this program [ 182.212457][ T7707] 0x000000000001-0x000000020000 : "" [ 182.252093][ T7707] ftl_cs: FTL header corrupt! [ 182.800110][ T7737] bond0: invalid ARP target specified [ 182.879887][ T7737] netlink: 28 bytes leftover after parsing attributes in process `syz.2.414'. [ 182.952925][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.973611][ T7737] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.020597][ T7737] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.057286][ T7737] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.234930][ T5824] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 184.143741][ T7759] netlink: 'syz.0.419': attribute type 4 has an invalid length. [ 184.151582][ T7759] netlink: 62 bytes leftover after parsing attributes in process `syz.0.419'. [ 185.260357][ T7788] FAULT_INJECTION: forcing a failure. [ 185.260357][ T7788] name failslab, interval 1, probability 0, space 0, times 0 [ 185.317209][ T7788] CPU: 0 UID: 0 PID: 7788 Comm: syz.0.426 Tainted: G I syzkaller #0 PREEMPT(full) [ 185.317254][ T7788] Tainted: [I]=FIRMWARE_WORKAROUND [ 185.317265][ T7788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.317280][ T7788] Call Trace: [ 185.317289][ T7788] [ 185.317299][ T7788] dump_stack_lvl+0x100/0x190 [ 185.317345][ T7788] should_fail_ex.cold+0x5/0xa [ 185.317377][ T7788] should_failslab+0xc2/0x120 [ 185.317407][ T7788] __kvmalloc_node_noprof+0xfa/0xa00 [ 185.317433][ T7788] ? seq_read_iter+0x819/0x1270 [ 185.317484][ T7788] seq_read_iter+0x819/0x1270 [ 185.317528][ T7788] ? aa_file_perm+0x7f3/0x14d0 [ 185.317579][ T7788] seq_read+0x33b/0x4c0 [ 185.317622][ T7788] ? __pfx_seq_read+0x10/0x10 [ 185.317691][ T7788] ? __pfx_seq_read+0x10/0x10 [ 185.317734][ T7788] proc_reg_read+0x240/0x330 [ 185.317777][ T7788] ? __pfx_proc_reg_read+0x10/0x10 [ 185.317821][ T7788] vfs_read+0x1e4/0xb30 [ 185.317854][ T7788] ? __pfx_vfs_read+0x10/0x10 [ 185.317880][ T7788] ? __fget_files+0x215/0x3d0 [ 185.317918][ T7788] ? __fget_files+0x21f/0x3d0 [ 185.317958][ T7788] ksys_read+0x12a/0x250 [ 185.317985][ T7788] ? __pfx_ksys_read+0x10/0x10 [ 185.318024][ T7788] do_syscall_64+0x106/0xf80 [ 185.318053][ T7788] ? clear_bhb_loop+0x40/0x90 [ 185.318095][ T7788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.318124][ T7788] RIP: 0033:0x7feb81b9c819 [ 185.318147][ T7788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.318174][ T7788] RSP: 002b:00007feb82a48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 185.318201][ T7788] RAX: ffffffffffffffda RBX: 00007feb81e15fa0 RCX: 00007feb81b9c819 [ 185.318220][ T7788] RDX: 000000000000009e RSI: 0000200000000080 RDI: 0000000000000003 [ 185.318241][ T7788] RBP: 00007feb82a48090 R08: 0000000000000000 R09: 0000000000000000 [ 185.318258][ T7788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.318274][ T7788] R13: 00007feb81e16038 R14: 00007feb81e15fa0 R15: 00007ffc6fb012d8 [ 185.318314][ T7788] [ 185.826133][ T7800] FAULT_INJECTION: forcing a failure. [ 185.826133][ T7800] name failslab, interval 1, probability 0, space 0, times 0 [ 185.872450][ T7800] CPU: 1 UID: 0 PID: 7800 Comm: syz.1.430 Tainted: G I syzkaller #0 PREEMPT(full) [ 185.872499][ T7800] Tainted: [I]=FIRMWARE_WORKAROUND [ 185.872509][ T7800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 185.872525][ T7800] Call Trace: [ 185.872535][ T7800] [ 185.872545][ T7800] dump_stack_lvl+0x100/0x190 [ 185.872593][ T7800] should_fail_ex.cold+0x5/0xa [ 185.872626][ T7800] should_failslab+0xc2/0x120 [ 185.872656][ T7800] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 185.872703][ T7800] ? __d_alloc+0x34/0xa80 [ 185.872746][ T7800] __d_alloc+0x34/0xa80 [ 185.872784][ T7800] d_alloc+0x4a/0x1e0 [ 185.872821][ T7800] lookup_one_qstr_excl+0x175/0x250 [ 185.872865][ T7800] start_dirop+0x59/0xb0 [ 185.872893][ T7800] simple_start_creating+0xf9/0x110 [ 185.872920][ T7800] ? __pfx_simple_start_creating+0x10/0x10 [ 185.872947][ T7800] ? mntput+0x70/0xa0 [ 185.872971][ T7800] ? simple_pin_fs+0xa3/0x190 [ 185.873009][ T7800] debugfs_start_creating.part.0+0x82/0x170 [ 185.873044][ T7800] __debugfs_create_file+0xb3/0x4f0 [ 185.873080][ T7800] debugfs_create_file_full+0x41/0x60 [ 185.873126][ T7800] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 185.873168][ T7800] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 185.873207][ T7800] ? find_held_lock+0x2b/0x80 [ 185.873261][ T7800] ? lockdep_init_map_type+0x5c/0x250 [ 185.873299][ T7800] preinit_net.part.0+0x437/0x8f0 [ 185.873327][ T7800] copy_net_ns+0x339/0x7c0 [ 185.873360][ T7800] create_new_namespaces+0x3ea/0xac0 [ 185.873395][ T7800] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 185.873429][ T7800] ksys_unshare+0x473/0xad0 [ 185.873468][ T7800] ? __pfx_ksys_unshare+0x10/0x10 [ 185.873517][ T7800] __x64_sys_unshare+0x31/0x40 [ 185.873553][ T7800] do_syscall_64+0x106/0xf80 [ 185.873581][ T7800] ? clear_bhb_loop+0x40/0x90 [ 185.873617][ T7800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.873646][ T7800] RIP: 0033:0x7f72d419c819 [ 185.873670][ T7800] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.873698][ T7800] RSP: 002b:00007f72d23cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 185.873725][ T7800] RAX: ffffffffffffffda RBX: 00007f72d4416090 RCX: 00007f72d419c819 [ 185.873744][ T7800] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 185.873762][ T7800] RBP: 00007f72d4232c91 R08: 0000000000000000 R09: 0000000000000000 [ 185.873779][ T7800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.873797][ T7800] R13: 00007f72d4416128 R14: 00007f72d4416090 R15: 00007fff42115bd8 [ 185.873836][ T7800] [ 186.266697][ T7805] capability: warning: `syz.0.431' uses 32-bit capabilities (legacy support in use) [ 186.326545][ T7811] random: crng reseeded on system resumption [ 187.696084][ T7846] sd 0:0:1:0: PR command failed: 1026 [ 187.701577][ T7846] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 187.787447][ T7846] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 187.869003][ T5824] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 188.396827][ T7865] &#$@\]\-: entered promiscuous mode [ 188.656754][ T7865] zswap: compressor not available [ 191.060640][ T5825] bridge0: port 3(syz_tun) entered disabled state [ 191.096546][ T5825] syz_tun (unregistering): left allmulticast mode [ 191.163324][ T5825] syz_tun (unregistering): left promiscuous mode [ 191.201311][ T5825] bridge0: port 3(syz_tun) entered disabled state [ 191.626747][ T6857] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.778609][ T6857] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.000659][ T7931] program syz.2.457 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.047106][ T6857] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.301433][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 192.315231][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 192.323073][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 192.331632][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 192.340107][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 192.368280][ T6857] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.913048][ T7976] FAULT_INJECTION: forcing a failure. [ 192.913048][ T7976] name failslab, interval 1, probability 0, space 0, times 0 [ 192.930509][ T7976] CPU: 0 UID: 0 PID: 7976 Comm: syz.0.468 Tainted: G I syzkaller #0 PREEMPT(full) [ 192.930556][ T7976] Tainted: [I]=FIRMWARE_WORKAROUND [ 192.930568][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 192.930585][ T7976] Call Trace: [ 192.930593][ T7976] [ 192.930605][ T7976] dump_stack_lvl+0x100/0x190 [ 192.930655][ T7976] should_fail_ex.cold+0x5/0xa [ 192.930693][ T7976] should_failslab+0xc2/0x120 [ 192.930727][ T7976] __kmalloc_cache_noprof+0x7a/0x6f0 [ 192.930775][ T7976] ? io_uring_alloc_task_context+0x1a6/0x54b [ 192.930830][ T7976] ? __percpu_counter_init_many+0x2c1/0x3b0 [ 192.930875][ T7976] io_uring_alloc_task_context+0x1a6/0x54b [ 192.930923][ T7976] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 192.931049][ T7976] ? alloc_file_pseudo+0x1a5/0x230 [ 192.931095][ T7976] __io_uring_add_tctx_node.cold+0x10/0x195 [ 192.931141][ T7976] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 192.931178][ T7976] ? __anon_inode_getfile+0x17c/0x280 [ 192.931217][ T7976] io_uring_setup.cold+0x1a83/0x1d79 [ 192.931267][ T7976] ? __pfx_io_uring_setup+0x10/0x10 [ 192.931315][ T7976] ? __pfx_do_futex+0x10/0x10 [ 192.931370][ T7976] ? xfd_validate_state+0x129/0x190 [ 192.931420][ T7976] __x64_sys_io_uring_setup+0xc2/0x170 [ 192.931465][ T7976] do_syscall_64+0x106/0xf80 [ 192.931494][ T7976] ? clear_bhb_loop+0x40/0x90 [ 192.931527][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.931553][ T7976] RIP: 0033:0x7feb81b9c819 [ 192.931575][ T7976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.931601][ T7976] RSP: 002b:00007feb82a48028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 192.931625][ T7976] RAX: ffffffffffffffda RBX: 00007feb81e15fa0 RCX: 00007feb81b9c819 [ 192.931644][ T7976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 192.931658][ T7976] RBP: 00007feb81c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 192.931675][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.931692][ T7976] R13: 00007feb81e16038 R14: 00007feb81e15fa0 R15: 00007ffc6fb012d8 [ 192.931728][ T7976] [ 193.159579][ T7976] random: crng reseeded on system resumption [ 193.176784][ T6857] bridge_slave_1: left allmulticast mode [ 193.202563][ T6857] bridge_slave_1: left promiscuous mode [ 193.209945][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.243651][ T6857] bridge_slave_0: left allmulticast mode [ 193.249539][ T6857] bridge_slave_0: left promiscuous mode [ 193.260193][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.723804][ T6857] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.749183][ T6857] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.777839][ T6857] bond0 (unregistering): Released all slaves [ 193.922949][ T6857] &#$@\]\-: left promiscuous mode [ 194.400423][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.406836][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.406879][ T51] Bluetooth: hci1: command tx timeout [ 194.454641][ T7965] chnl_net:caif_netlink_parms(): no params data found [ 194.655433][ T6857] hsr_slave_0: left promiscuous mode [ 194.673602][ T6857] hsr_slave_1: left promiscuous mode [ 194.695124][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.702670][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.721597][ T6857] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.740921][ T6857] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.774872][ T6857] veth1_macvtap: left promiscuous mode [ 194.780788][ T6857] veth0_macvtap: left promiscuous mode [ 194.804908][ T6857] veth1_vlan: left promiscuous mode [ 194.810488][ T6857] veth0_vlan: left promiscuous mode [ 195.118935][ T6857] team0 (unregistering): Port device team_slave_1 removed [ 195.141486][ T6857] team0 (unregistering): Port device team_slave_0 removed [ 195.593180][ T7965] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.614866][ T7965] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.622313][ T7965] bridge_slave_0: entered allmulticast mode [ 195.656383][ T7965] bridge_slave_0: entered promiscuous mode [ 195.746648][ T7965] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.793411][ T7965] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.826664][ T7965] bridge_slave_1: entered allmulticast mode [ 195.845013][ T7965] bridge_slave_1: entered promiscuous mode [ 196.049480][ T7965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.117290][ T7965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.258232][ T7965] team0: Port device team_slave_0 added [ 196.294859][ T7965] team0: Port device team_slave_1 added [ 196.475090][ T51] Bluetooth: hci1: command tx timeout [ 196.489128][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.496272][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.522367][ T7965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.537592][ T7965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.555007][ T7965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 196.591937][ T7965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.818916][ T8049] FAULT_INJECTION: forcing a failure. [ 196.818916][ T8049] name failslab, interval 1, probability 0, space 0, times 0 [ 196.872193][ T8049] CPU: 1 UID: 0 PID: 8049 Comm: syz.0.477 Tainted: G I syzkaller #0 PREEMPT(full) [ 196.872241][ T8049] Tainted: [I]=FIRMWARE_WORKAROUND [ 196.872251][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 196.872268][ T8049] Call Trace: [ 196.872277][ T8049] [ 196.872287][ T8049] dump_stack_lvl+0x100/0x190 [ 196.872334][ T8049] should_fail_ex.cold+0x5/0xa [ 196.872367][ T8049] should_failslab+0xc2/0x120 [ 196.872400][ T8049] __kmalloc_node_noprof+0xe6/0x850 [ 196.872443][ T8049] ? user_buffer_init+0x2a1/0x6d0 [ 196.872495][ T8049] user_buffer_init+0x2a1/0x6d0 [ 196.872542][ T8049] tracing_mark_open+0x1b7/0x240 [ 196.872569][ T8049] do_dentry_open+0x6d8/0x1660 [ 196.872598][ T8049] ? __pfx_tracing_mark_open+0x10/0x10 [ 196.872637][ T8049] vfs_open+0x82/0x3f0 [ 196.872689][ T8049] path_openat+0x208c/0x31a0 [ 196.872735][ T8049] ? __pfx_path_openat+0x10/0x10 [ 196.872781][ T8049] do_file_open+0x20e/0x430 [ 196.872817][ T8049] ? __pfx_do_file_open+0x10/0x10 [ 196.872876][ T8049] ? alloc_fd+0x476/0x790 [ 196.872911][ T8049] ? do_getname+0x191/0x390 [ 196.872960][ T8049] do_sys_openat2+0x10d/0x1e0 [ 196.873002][ T8049] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.873044][ T8049] ? __fget_files+0x21f/0x3d0 [ 196.873082][ T8049] __x64_sys_openat+0x12d/0x210 [ 196.873122][ T8049] ? __pfx___x64_sys_openat+0x10/0x10 [ 196.873177][ T8049] do_syscall_64+0x106/0xf80 [ 196.873206][ T8049] ? clear_bhb_loop+0x40/0x90 [ 196.873241][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.873272][ T8049] RIP: 0033:0x7feb81b9c819 [ 196.873296][ T8049] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.873326][ T8049] RSP: 002b:00007feb82a48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 196.873352][ T8049] RAX: ffffffffffffffda RBX: 00007feb81e15fa0 RCX: 00007feb81b9c819 [ 196.873372][ T8049] RDX: 00000000000c8401 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 196.873391][ T8049] RBP: 00007feb81c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 196.873408][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.873425][ T8049] R13: 00007feb81e16038 R14: 00007feb81e15fa0 R15: 00007ffc6fb012d8 [ 196.873463][ T8049] [ 197.379922][ T7965] hsr_slave_0: entered promiscuous mode [ 197.425800][ T7965] hsr_slave_1: entered promiscuous mode [ 197.432284][ T7965] debugfs: 'hsr0' already exists in 'hsr' [ 197.512927][ T7965] Cannot create hsr debugfs directory [ 197.712659][ T8063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.479'. [ 197.724469][ T8063] netlink: 5 bytes leftover after parsing attributes in process `syz.2.479'. [ 198.327243][ T8082] FAULT_INJECTION: forcing a failure. [ 198.327243][ T8082] name failslab, interval 1, probability 0, space 0, times 0 [ 198.366696][ T8082] CPU: 1 UID: 0 PID: 8082 Comm: syz.2.483 Tainted: G I syzkaller #0 PREEMPT(full) [ 198.366740][ T8082] Tainted: [I]=FIRMWARE_WORKAROUND [ 198.366749][ T8082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 198.366765][ T8082] Call Trace: [ 198.366775][ T8082] [ 198.366786][ T8082] dump_stack_lvl+0x100/0x190 [ 198.366833][ T8082] should_fail_ex.cold+0x5/0xa [ 198.366866][ T8082] should_failslab+0xc2/0x120 [ 198.366899][ T8082] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 198.366945][ T8082] ? __d_alloc+0x34/0xa80 [ 198.366977][ T8082] ? __pfx_stack_trace_save+0x10/0x10 [ 198.367013][ T8082] __d_alloc+0x34/0xa80 [ 198.367051][ T8082] d_alloc_parallel+0x111/0x14e0 [ 198.367105][ T8082] ? find_held_lock+0x2b/0x80 [ 198.367133][ T8082] ? __d_lookup+0x25c/0x4a0 [ 198.367175][ T8082] ? __pfx_d_alloc_parallel+0x10/0x10 [ 198.367222][ T8082] ? __d_lookup+0x266/0x4a0 [ 198.367273][ T8082] lookup_open.isra.0+0x57c/0x11b0 [ 198.367325][ T8082] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 198.367376][ T8082] ? __pfx___might_resched+0x10/0x10 [ 198.367419][ T8082] ? mnt_get_write_access+0x52/0x2f0 [ 198.367467][ T8082] ? __pfx_down_write+0x10/0x10 [ 198.367507][ T8082] ? mnt_get_write_access+0x1e9/0x2f0 [ 198.367556][ T8082] path_openat+0x2291/0x31a0 [ 198.367593][ T8082] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 198.367627][ T8082] ? __pfx_path_openat+0x10/0x10 [ 198.367672][ T8082] do_file_open+0x20e/0x430 [ 198.367707][ T8082] ? __pfx_do_file_open+0x10/0x10 [ 198.367765][ T8082] ? _raw_spin_unlock+0x28/0x50 [ 198.367807][ T8082] ? alloc_fd+0x476/0x790 [ 198.367847][ T8082] do_sys_openat2+0x10d/0x1e0 [ 198.367887][ T8082] ? __pfx_do_sys_openat2+0x10/0x10 [ 198.367941][ T8082] __x64_sys_open+0xfe/0x1d0 [ 198.367979][ T8082] ? __pfx___x64_sys_open+0x10/0x10 [ 198.368032][ T8082] do_syscall_64+0x106/0xf80 [ 198.368060][ T8082] ? clear_bhb_loop+0x40/0x90 [ 198.368095][ T8082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.368125][ T8082] RIP: 0033:0x7fbfc9f9c819 [ 198.368148][ T8082] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.368175][ T8082] RSP: 002b:00007fbfcaee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 198.368202][ T8082] RAX: ffffffffffffffda RBX: 00007fbfca216180 RCX: 00007fbfc9f9c819 [ 198.368221][ T8082] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 198.368238][ T8082] RBP: 00007fbfca032c91 R08: 0000000000000000 R09: 0000000000000000 [ 198.368256][ T8082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.368272][ T8082] R13: 00007fbfca216218 R14: 00007fbfca216180 R15: 00007ffc36e59ca8 [ 198.368312][ T8082] [ 198.725111][ T51] Bluetooth: hci1: command tx timeout [ 199.799886][ T7965] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 199.824623][ T7965] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 199.854548][ T7965] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 199.867000][ T7965] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.338457][ T7965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.593074][ T7965] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.688318][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.695492][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.740313][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.747577][ T6857] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.794656][ T51] Bluetooth: hci1: command tx timeout [ 201.077481][ T8127] Process accounting resumed [ 201.271849][ T8147] futex_wake_op: syz.0.489 tries to shift op by -2048; fix this program [ 201.314212][ T8147] 0x000000000001-0x00000fef3b86 : "" [ 201.344585][ T8147] mtd: partition "" extends beyond the end of device "mtdram test device" -- size truncated to 0x1ffff [ 201.358224][ T7965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.399668][ T8147] ftl_cs: FTL header corrupt! [ 201.519849][ T7965] veth0_vlan: entered promiscuous mode [ 201.559702][ T7965] veth1_vlan: entered promiscuous mode [ 201.600046][ T7965] veth0_macvtap: entered promiscuous mode [ 201.634051][ T7965] veth1_macvtap: entered promiscuous mode [ 201.816999][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.883067][ T7965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.993325][ T153] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.042847][ T153] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.153153][ T153] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.182923][ T153] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.384037][ T8173] bridge0: port 2(gretap0) entered blocking state [ 202.410294][ T8173] bridge0: port 2(gretap0) entered disabled state [ 202.431619][ T8173] gretap0: entered allmulticast mode [ 202.451226][ T8173] gretap0: entered promiscuous mode [ 202.457755][ T8173] bridge0: port 2(gretap0) entered blocking state [ 202.464546][ T8173] bridge0: port 2(gretap0) entered forwarding state [ 202.799095][ T8188] [ 202.841238][ T6857] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.869503][ T6857] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.202148][ T6860] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.238648][ T6860] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.319490][ T8199] vivid-007: ================= START STATUS ================= [ 203.363530][ T8199] vivid-007: Generate PTS: true [ 203.392308][ T8199] vivid-007: Generate SCR: true [ 203.430539][ T8199] tpg source WxH: 320x240 (Y'CbCr) [ 203.465793][ T8199] tpg field: 1 [ 203.474358][ T8199] tpg crop: (0,0)/320x240 [ 203.487429][ T8199] tpg compose: (0,0)/320x240 [ 203.514500][ T8199] tpg colorspace: 8 [ 203.518367][ T8199] tpg transfer function: 0/0 [ 203.522974][ T8199] tpg Y'CbCr encoding: 0/0 [ 203.577224][ T8199] tpg quantization: 0/0 [ 203.581438][ T8199] tpg RGB range: 0/2 [ 203.604565][ T8199] vivid-007: ================== END STATUS ================== [ 203.689877][ T8212] loop6: detected capacity change from 0 to 8 [ 205.158154][ T8248] zswap: compressor not available [ 205.586052][ T8288] FAULT_INJECTION: forcing a failure. [ 205.586052][ T8288] name failslab, interval 1, probability 0, space 0, times 0 [ 205.668500][ T8288] CPU: 1 UID: 0 PID: 8288 Comm: syz.3.511 Tainted: G I syzkaller #0 PREEMPT(full) [ 205.668551][ T8288] Tainted: [I]=FIRMWARE_WORKAROUND [ 205.668562][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 205.668580][ T8288] Call Trace: [ 205.668590][ T8288] [ 205.668601][ T8288] dump_stack_lvl+0x100/0x190 [ 205.668677][ T8288] should_fail_ex.cold+0x5/0xa [ 205.668714][ T8288] should_failslab+0xc2/0x120 [ 205.668748][ T8288] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 205.668795][ T8288] ? __d_alloc+0x34/0xa80 [ 205.668829][ T8288] ? __pfx_stack_trace_save+0x10/0x10 [ 205.668867][ T8288] __d_alloc+0x34/0xa80 [ 205.668905][ T8288] d_alloc_parallel+0x111/0x14e0 [ 205.668960][ T8288] ? find_held_lock+0x2b/0x80 [ 205.668989][ T8288] ? __d_lookup+0x25c/0x4a0 [ 205.669032][ T8288] ? __pfx_d_alloc_parallel+0x10/0x10 [ 205.669081][ T8288] ? __d_lookup+0x266/0x4a0 [ 205.669133][ T8288] lookup_open.isra.0+0x57c/0x11b0 [ 205.669187][ T8288] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 205.669240][ T8288] ? __pfx___might_resched+0x10/0x10 [ 205.669284][ T8288] ? mnt_get_write_access+0x52/0x2f0 [ 205.669333][ T8288] ? __pfx_down_write+0x10/0x10 [ 205.669366][ T8288] ? mnt_get_write_access+0x1e9/0x2f0 [ 205.669413][ T8288] path_openat+0x2291/0x31a0 [ 205.669453][ T8288] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 205.669488][ T8288] ? __pfx_path_openat+0x10/0x10 [ 205.669530][ T8288] do_file_open+0x20e/0x430 [ 205.669562][ T8288] ? __pfx_do_file_open+0x10/0x10 [ 205.669618][ T8288] ? _raw_spin_unlock+0x28/0x50 [ 205.669668][ T8288] ? alloc_fd+0x476/0x790 [ 205.669710][ T8288] do_sys_openat2+0x10d/0x1e0 [ 205.669753][ T8288] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.669809][ T8288] __x64_sys_open+0xfe/0x1d0 [ 205.669850][ T8288] ? __pfx___x64_sys_open+0x10/0x10 [ 205.669906][ T8288] do_syscall_64+0x106/0xf80 [ 205.669935][ T8288] ? clear_bhb_loop+0x40/0x90 [ 205.669971][ T8288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.670002][ T8288] RIP: 0033:0x7f007919c819 [ 205.670026][ T8288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.670055][ T8288] RSP: 002b:00007f0079f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 205.670083][ T8288] RAX: ffffffffffffffda RBX: 00007f0079416180 RCX: 00007f007919c819 [ 205.670103][ T8288] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 205.670121][ T8288] RBP: 00007f0079232c91 R08: 0000000000000000 R09: 0000000000000000 [ 205.670139][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.670157][ T8288] R13: 00007f0079416218 R14: 00007f0079416180 R15: 00007fff6422b958 [ 205.670199][ T8288] [ 206.720368][ T5829] Bluetooth: hci2: command 0x0406 tx timeout [ 206.720437][ T5835] Bluetooth: hci0: command 0x0406 tx timeout [ 206.732845][ T5824] Bluetooth: hci3: command 0x0406 tx timeout [ 207.581298][ T8315] netlink: 122 bytes leftover after parsing attributes in process `syz.2.517'. [ 208.258281][ T8333] futex_wake_op: syz.0.523 tries to shift op by -2048; fix this program [ 208.273195][ T8333] futex_wake_op: syz.0.523 tries to shift op by -2048; fix this program [ 208.294488][ T8333] 0x000000000001-0x000000020000 : "" [ 208.347556][ T8336] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 208.364448][ T8337] Unable to find swap-space signature [ 208.388088][ T8340] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 208.453648][ T8333] ftl_cs: FTL header corrupt! [ 208.736424][ T8336] ima: policy update failed [ 208.766282][ T29] audit: type=1802 audit(1775280377.217:4): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.524" res=0 errno=0 [ 210.487330][ T8389] futex_wake_op: syz.1.535 tries to shift op by -2048; fix this program [ 210.497030][ T8389] futex_wake_op: syz.1.535 tries to shift op by -2048; fix this program [ 210.544990][ T8389] 0x000000000001-0x000000020000 : "" [ 210.587943][ T8389] ftl_cs: FTL header corrupt! [ 211.371466][ T8409] futex_wake_op: syz.2.540 tries to shift op by -2048; fix this program [ 211.530349][ T8409] futex_wake_op: syz.2.540 tries to shift op by -2048; fix this program [ 212.451976][ T8441] FAULT_INJECTION: forcing a failure. [ 212.451976][ T8441] name failslab, interval 1, probability 0, space 0, times 0 [ 212.491497][ T8442] futex_wake_op: syz.1.546 tries to shift op by -2048; fix this program [ 212.504046][ T8442] futex_wake_op: syz.1.546 tries to shift op by -2048; fix this program [ 212.517695][ T8441] CPU: 1 UID: 0 PID: 8441 Comm: syz.0.545 Tainted: G I syzkaller #0 PREEMPT(full) [ 212.517742][ T8441] Tainted: [I]=FIRMWARE_WORKAROUND [ 212.517753][ T8441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 212.517812][ T8441] Call Trace: [ 212.517821][ T8441] [ 212.517832][ T8441] dump_stack_lvl+0x100/0x190 [ 212.517883][ T8441] should_fail_ex.cold+0x5/0xa [ 212.517918][ T8441] ? tomoyo_realpath_from_path+0xb6/0x690 [ 212.517960][ T8441] should_failslab+0xc2/0x120 [ 212.517995][ T8441] __kmalloc_noprof+0xe0/0x850 [ 212.518049][ T8441] tomoyo_realpath_from_path+0xb6/0x690 [ 212.518101][ T8441] tomoyo_path_number_perm+0x23c/0x580 [ 212.518136][ T8441] ? tomoyo_path_number_perm+0x22e/0x580 [ 212.518175][ T8441] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.518250][ T8441] ? find_held_lock+0x2b/0x80 [ 212.518279][ T8441] ? current_check_access_path+0x281/0x460 [ 212.518322][ T8441] ? __pfx_current_check_access_path+0x10/0x10 [ 212.518366][ T8441] ? d_alloc_parallel+0x864/0x14e0 [ 212.518416][ T8441] tomoyo_path_mknod+0x164/0x190 [ 212.518444][ T8441] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 212.518470][ T8441] ? find_held_lock+0x2b/0x80 [ 212.518500][ T8441] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.518536][ T8441] security_path_mknod+0x161/0x300 [ 212.518581][ T8441] may_o_create+0x30/0x3a0 [ 212.518625][ T8441] lookup_open.isra.0+0xa0d/0x11b0 [ 212.518677][ T8441] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 212.518730][ T8441] ? __pfx___might_resched+0x10/0x10 [ 212.518779][ T8441] ? mnt_get_write_access+0x52/0x2f0 [ 212.518828][ T8441] ? __pfx_down_write+0x10/0x10 [ 212.518859][ T8441] ? mnt_get_write_access+0x1e9/0x2f0 [ 212.518907][ T8441] path_openat+0x2291/0x31a0 [ 212.518946][ T8441] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 212.518983][ T8441] ? __pfx_path_openat+0x10/0x10 [ 212.519030][ T8441] do_file_open+0x20e/0x430 [ 212.519065][ T8441] ? __pfx_do_file_open+0x10/0x10 [ 212.519125][ T8441] ? _raw_spin_unlock+0x28/0x50 [ 212.519166][ T8441] ? alloc_fd+0x476/0x790 [ 212.519207][ T8441] do_sys_openat2+0x10d/0x1e0 [ 212.519247][ T8441] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.519301][ T8441] __x64_sys_open+0xfe/0x1d0 [ 212.519336][ T8441] ? __pfx___x64_sys_open+0x10/0x10 [ 212.519384][ T8441] do_syscall_64+0x106/0xf80 [ 212.519410][ T8441] ? clear_bhb_loop+0x40/0x90 [ 212.519444][ T8441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.519473][ T8441] RIP: 0033:0x7feb81b9c819 [ 212.519497][ T8441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.519525][ T8441] RSP: 002b:00007feb82a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 212.519552][ T8441] RAX: ffffffffffffffda RBX: 00007feb81e16180 RCX: 00007feb81b9c819 [ 212.519571][ T8441] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 212.519589][ T8441] RBP: 00007feb81c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 212.519607][ T8441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.519623][ T8441] R13: 00007feb81e16218 R14: 00007feb81e16180 R15: 00007ffc6fb012d8 [ 212.519663][ T8441] [ 212.519674][ T8441] ERROR: Out of memory at tomoyo_realpath_from_path. [ 212.860434][ T8442] 0x000000000001-0x000000020000 : "" [ 212.871203][ T8442] ftl_cs: FTL header corrupt! [ 213.820867][ T8458] __vm_enough_memory: pid: 8458, comm: syz.3.550, bytes: 4398046511104 not enough memory for the allocation [ 214.758454][ T8480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 214.770970][ T8481] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'. [ 216.355543][ T8510] futex_wake_op: syz.0.559 tries to shift op by -2048; fix this program [ 216.367551][ T8510] futex_wake_op: syz.0.559 tries to shift op by -2048; fix this program [ 216.418705][ T8510] 0x000000000001-0x000000020000 : "" [ 216.437715][ T8510] ftl_cs: FTL header corrupt! [ 216.992036][ T8526] netlink: 36 bytes leftover after parsing attributes in process `syz.2.564'. [ 217.905956][ T8546] netlink: 21 bytes leftover after parsing attributes in process `syz.2.569'. [ 218.155002][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 218.619033][ T8562] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 218.957568][ T8570] Unable to find swap-space signature [ 220.142039][ T8617] futex_wake_op: syz.1.586 tries to shift op by -2048; fix this program [ 220.150638][ T8617] futex_wake_op: syz.1.586 tries to shift op by -2048; fix this program [ 220.160415][ T8617] 0x000000000001-0x000000020000 : "" [ 220.202411][ T8617] ftl_cs: FTL header corrupt! [ 220.647957][ T8625] FAULT_INJECTION: forcing a failure. [ 220.647957][ T8625] name failslab, interval 1, probability 0, space 0, times 0 [ 220.732619][ T8625] CPU: 0 UID: 0 PID: 8625 Comm: syz.0.587 Tainted: G I syzkaller #0 PREEMPT(full) [ 220.732669][ T8625] Tainted: [I]=FIRMWARE_WORKAROUND [ 220.732680][ T8625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 220.732697][ T8625] Call Trace: [ 220.732706][ T8625] [ 220.732716][ T8625] dump_stack_lvl+0x100/0x190 [ 220.732766][ T8625] should_fail_ex.cold+0x5/0xa [ 220.732796][ T8625] should_failslab+0xc2/0x120 [ 220.732833][ T8625] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 220.732875][ T8625] ? __d_alloc+0x34/0xa80 [ 220.732906][ T8625] ? __pfx_stack_trace_save+0x10/0x10 [ 220.732940][ T8625] __d_alloc+0x34/0xa80 [ 220.732977][ T8625] d_alloc_parallel+0x111/0x14e0 [ 220.733028][ T8625] ? find_held_lock+0x2b/0x80 [ 220.733055][ T8625] ? __d_lookup+0x25c/0x4a0 [ 220.733092][ T8625] ? __pfx_d_alloc_parallel+0x10/0x10 [ 220.733137][ T8625] ? __d_lookup+0x266/0x4a0 [ 220.733188][ T8625] lookup_open.isra.0+0x57c/0x11b0 [ 220.733241][ T8625] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 220.733294][ T8625] ? __pfx___might_resched+0x10/0x10 [ 220.733337][ T8625] ? mnt_get_write_access+0x52/0x2f0 [ 220.733384][ T8625] ? __pfx_down_write+0x10/0x10 [ 220.733415][ T8625] ? mnt_get_write_access+0x1e9/0x2f0 [ 220.733460][ T8625] path_openat+0x2291/0x31a0 [ 220.733492][ T8625] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 220.733523][ T8625] ? __pfx_path_openat+0x10/0x10 [ 220.733567][ T8625] do_file_open+0x20e/0x430 [ 220.733602][ T8625] ? __pfx_do_file_open+0x10/0x10 [ 220.733659][ T8625] ? _raw_spin_unlock+0x28/0x50 [ 220.733700][ T8625] ? alloc_fd+0x476/0x790 [ 220.733740][ T8625] do_sys_openat2+0x10d/0x1e0 [ 220.733780][ T8625] ? __pfx_do_sys_openat2+0x10/0x10 [ 220.733845][ T8625] __x64_sys_open+0xfe/0x1d0 [ 220.733884][ T8625] ? __pfx___x64_sys_open+0x10/0x10 [ 220.733938][ T8625] do_syscall_64+0x106/0xf80 [ 220.733964][ T8625] ? clear_bhb_loop+0x40/0x90 [ 220.733999][ T8625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.734028][ T8625] RIP: 0033:0x7feb81b9c819 [ 220.734052][ T8625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.734078][ T8625] RSP: 002b:00007feb82a48028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 220.734105][ T8625] RAX: ffffffffffffffda RBX: 00007feb81e15fa0 RCX: 00007feb81b9c819 [ 220.734125][ T8625] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 220.734143][ T8625] RBP: 00007feb81c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 220.734162][ T8625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.734178][ T8625] R13: 00007feb81e16038 R14: 00007feb81e15fa0 R15: 00007ffc6fb012d8 [ 220.734217][ T8625] [ 221.291254][ T8640] FAULT_INJECTION: forcing a failure. [ 221.291254][ T8640] name failslab, interval 1, probability 0, space 0, times 0 [ 221.353161][ T8640] CPU: 0 UID: 0 PID: 8640 Comm: syz.3.588 Tainted: G I syzkaller #0 PREEMPT(full) [ 221.353207][ T8640] Tainted: [I]=FIRMWARE_WORKAROUND [ 221.353218][ T8640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 221.353234][ T8640] Call Trace: [ 221.353245][ T8640] [ 221.353256][ T8640] dump_stack_lvl+0x100/0x190 [ 221.353306][ T8640] should_fail_ex.cold+0x5/0xa [ 221.353340][ T8640] ? tomoyo_realpath_from_path+0xb6/0x690 [ 221.353368][ T8640] should_failslab+0xc2/0x120 [ 221.353386][ T8640] __kmalloc_noprof+0xe0/0x850 [ 221.353423][ T8640] tomoyo_realpath_from_path+0xb6/0x690 [ 221.353450][ T8640] tomoyo_path_number_perm+0x23c/0x580 [ 221.353468][ T8640] ? tomoyo_path_number_perm+0x22e/0x580 [ 221.353487][ T8640] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 221.353525][ T8640] ? find_held_lock+0x2b/0x80 [ 221.353540][ T8640] ? current_check_access_path+0x281/0x460 [ 221.353562][ T8640] ? __pfx_current_check_access_path+0x10/0x10 [ 221.353583][ T8640] ? d_alloc_parallel+0x864/0x14e0 [ 221.353608][ T8640] tomoyo_path_mknod+0x164/0x190 [ 221.353623][ T8640] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 221.353636][ T8640] ? find_held_lock+0x2b/0x80 [ 221.353654][ T8640] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.353673][ T8640] security_path_mknod+0x161/0x300 [ 221.353696][ T8640] may_o_create+0x30/0x3a0 [ 221.353718][ T8640] lookup_open.isra.0+0xa0d/0x11b0 [ 221.353744][ T8640] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 221.353770][ T8640] ? __pfx___might_resched+0x10/0x10 [ 221.353792][ T8640] ? mnt_get_write_access+0x52/0x2f0 [ 221.353816][ T8640] ? __pfx_down_write+0x10/0x10 [ 221.353833][ T8640] ? mnt_get_write_access+0x1e9/0x2f0 [ 221.353856][ T8640] path_openat+0x2291/0x31a0 [ 221.353876][ T8640] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 221.353894][ T8640] ? __pfx_path_openat+0x10/0x10 [ 221.353917][ T8640] do_file_open+0x20e/0x430 [ 221.353934][ T8640] ? __pfx_do_file_open+0x10/0x10 [ 221.353964][ T8640] ? _raw_spin_unlock+0x28/0x50 [ 221.353985][ T8640] ? alloc_fd+0x476/0x790 [ 221.354006][ T8640] do_sys_openat2+0x10d/0x1e0 [ 221.354027][ T8640] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.354054][ T8640] __x64_sys_open+0xfe/0x1d0 [ 221.354074][ T8640] ? __pfx___x64_sys_open+0x10/0x10 [ 221.354101][ T8640] do_syscall_64+0x106/0xf80 [ 221.354115][ T8640] ? clear_bhb_loop+0x40/0x90 [ 221.354133][ T8640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.354148][ T8640] RIP: 0033:0x7f007919c819 [ 221.354162][ T8640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.354177][ T8640] RSP: 002b:00007f0079f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 221.354192][ T8640] RAX: ffffffffffffffda RBX: 00007f0079416180 RCX: 00007f007919c819 [ 221.354202][ T8640] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 221.354211][ T8640] RBP: 00007f0079232c91 R08: 0000000000000000 R09: 0000000000000000 [ 221.354220][ T8640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.354230][ T8640] R13: 00007f0079416218 R14: 00007f0079416180 R15: 00007fff6422b958 [ 221.354259][ T8640] [ 221.760431][ T8640] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.802719][ T8645] netlink: 'syz.1.590': attribute type 1 has an invalid length. [ 221.901254][ T8645] netlink: 33 bytes leftover after parsing attributes in process `syz.1.590'. [ 222.144517][ T29] audit: type=1800 audit(2147483649.590:5): pid=8651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.592" name="lu_gp_id" dev="configfs" ino=24907 res=0 errno=0 [ 222.169954][ T8651] FAULT_INJECTION: forcing a failure. [ 222.169954][ T8651] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 222.185466][ T8651] CPU: 1 UID: 0 PID: 8651 Comm: syz.3.592 Tainted: G I syzkaller #0 PREEMPT(full) [ 222.185513][ T8651] Tainted: [I]=FIRMWARE_WORKAROUND [ 222.185524][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 222.185539][ T8651] Call Trace: [ 222.185548][ T8651] [ 222.185559][ T8651] dump_stack_lvl+0x100/0x190 [ 222.185604][ T8651] should_fail_ex.cold+0x5/0xa [ 222.185631][ T8651] ? prepare_alloc_pages+0x16d/0x5f0 [ 222.185666][ T8651] should_fail_alloc_page+0xeb/0x140 [ 222.185697][ T8651] prepare_alloc_pages+0x1f0/0x5f0 [ 222.185733][ T8651] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 222.185774][ T8651] ? __print_lock_name+0x61/0x80 [ 222.185799][ T8651] ? is_bpf_text_address+0x8a/0x1a0 [ 222.185836][ T8651] ? is_bpf_text_address+0x8a/0x1a0 [ 222.185879][ T8651] ? bpf_ksym_find+0x124/0x1c0 [ 222.185913][ T8651] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 222.185946][ T8651] ? is_bpf_text_address+0x94/0x1a0 [ 222.185990][ T8651] ? kernel_text_address+0x8d/0x100 [ 222.186032][ T8651] ? __kernel_text_address+0xd/0x30 [ 222.186071][ T8651] ? unwind_get_return_address+0x59/0xa0 [ 222.186104][ T8651] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 222.186166][ T8651] ? __pfx_stack_trace_save+0x10/0x10 [ 222.186194][ T8651] ? stack_depot_save_flags+0x27/0x9d0 [ 222.186232][ T8651] ? stack_trace_save+0x8e/0xc0 [ 222.186261][ T8651] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 222.186291][ T8651] ? policy_nodemask+0xed/0x4f0 [ 222.186334][ T8651] alloc_pages_mpol+0x1fb/0x550 [ 222.186368][ T8651] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 222.186406][ T8651] alloc_pages_noprof+0x136/0x390 [ 222.186440][ T8651] kimage_alloc_pages+0x72/0x380 [ 222.186471][ T8651] kimage_alloc_control_pages+0x157/0xa20 [ 222.186511][ T8651] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 222.186551][ T8651] do_kexec_load+0x275/0x810 [ 222.186583][ T8651] ? __pfx_do_kexec_load+0x10/0x10 [ 222.186617][ T8651] ? _copy_from_user+0x59/0xd0 [ 222.186654][ T8651] __x64_sys_kexec_load+0x1bf/0x230 [ 222.186687][ T8651] do_syscall_64+0x106/0xf80 [ 222.186714][ T8651] ? clear_bhb_loop+0x40/0x90 [ 222.186751][ T8651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.186782][ T8651] RIP: 0033:0x7f007919c819 [ 222.186805][ T8651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.186841][ T8651] RSP: 002b:00007f0079fd4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 222.186869][ T8651] RAX: ffffffffffffffda RBX: 00007f0079415fa0 RCX: 00007f007919c819 [ 222.186888][ T8651] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 0000000000000001 [ 222.186904][ T8651] RBP: 00007f0079232c91 R08: 0000000000000000 R09: 0000000000000000 [ 222.186921][ T8651] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 222.186937][ T8651] R13: 00007f0079416038 R14: 00007f0079415fa0 R15: 00007fff6422b958 [ 222.186975][ T8651] [ 222.187100][ T8651] kexec: Could not allocate control_code_buffer [ 222.639641][ T8649] zswap: compressor not available [ 222.802482][ T8669] nvme_fabrics: missing parameter 'transport=%s' [ 222.809793][ T8669] nvme_fabrics: missing parameter 'nqn=%s' [ 223.878342][ T8694] netlink: 'syz.2.600': attribute type 1 has an invalid length. [ 223.892985][ T8694] netlink: 9 bytes leftover after parsing attributes in process `syz.2.600'. [ 224.533622][ T51] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 224.696820][ T8709] libceph: secret too big 125 [ 225.058503][ T51] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 225.058557][ T51] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 225.074574][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 225.074604][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x34 [ 225.081649][ T51] Bluetooth: hci3: Unknown advertising packet type: 0x54 [ 225.089279][ T51] Bluetooth: hci3: adv larger than maximum supported [ 225.096724][ T51] Bluetooth: hci3: Malformed LE Event: 0x0d [ 226.215625][ T8765] sd 0:0:1:0: PR command failed: 1026 [ 226.284607][ T8765] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 226.393078][ T8765] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 227.378121][ T8741] NFSD: Failed to start, no listeners configured. [ 227.457754][ T8805] FAULT_INJECTION: forcing a failure. [ 227.457754][ T8805] name failslab, interval 1, probability 0, space 0, times 0 [ 227.594456][ T8805] CPU: 0 UID: 0 PID: 8805 Comm: syz.1.619 Tainted: G I syzkaller #0 PREEMPT(full) [ 227.594502][ T8805] Tainted: [I]=FIRMWARE_WORKAROUND [ 227.594512][ T8805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 227.594530][ T8805] Call Trace: [ 227.594540][ T8805] [ 227.594551][ T8805] dump_stack_lvl+0x100/0x190 [ 227.594603][ T8805] should_fail_ex.cold+0x5/0xa [ 227.594647][ T8805] should_failslab+0xc2/0x120 [ 227.594680][ T8805] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 227.594723][ T8805] ? __d_alloc+0x34/0xa80 [ 227.594756][ T8805] ? __pfx_stack_trace_save+0x10/0x10 [ 227.594791][ T8805] __d_alloc+0x34/0xa80 [ 227.594828][ T8805] d_alloc_parallel+0x111/0x14e0 [ 227.594879][ T8805] ? find_held_lock+0x2b/0x80 [ 227.594906][ T8805] ? __d_lookup+0x25c/0x4a0 [ 227.594948][ T8805] ? __pfx_d_alloc_parallel+0x10/0x10 [ 227.594995][ T8805] ? __d_lookup+0x266/0x4a0 [ 227.595046][ T8805] lookup_open.isra.0+0x57c/0x11b0 [ 227.595099][ T8805] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 227.595149][ T8805] ? __pfx___might_resched+0x10/0x10 [ 227.595191][ T8805] ? mnt_get_write_access+0x52/0x2f0 [ 227.595239][ T8805] ? __pfx_down_write+0x10/0x10 [ 227.595271][ T8805] ? mnt_get_write_access+0x1e9/0x2f0 [ 227.595318][ T8805] path_openat+0x2291/0x31a0 [ 227.595357][ T8805] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 227.595393][ T8805] ? __pfx_path_openat+0x10/0x10 [ 227.595437][ T8805] do_file_open+0x20e/0x430 [ 227.595472][ T8805] ? __pfx_do_file_open+0x10/0x10 [ 227.595531][ T8805] ? _raw_spin_unlock+0x28/0x50 [ 227.595573][ T8805] ? alloc_fd+0x476/0x790 [ 227.595621][ T8805] do_sys_openat2+0x10d/0x1e0 [ 227.595663][ T8805] ? __pfx_do_sys_openat2+0x10/0x10 [ 227.595713][ T8805] __x64_sys_open+0xfe/0x1d0 [ 227.595750][ T8805] ? __pfx___x64_sys_open+0x10/0x10 [ 227.595803][ T8805] do_syscall_64+0x106/0xf80 [ 227.595827][ T8805] ? clear_bhb_loop+0x40/0x90 [ 227.595857][ T8805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.595884][ T8805] RIP: 0033:0x7f19e759c819 [ 227.595909][ T8805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.595936][ T8805] RSP: 002b:00007f19e57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 227.595962][ T8805] RAX: ffffffffffffffda RBX: 00007f19e7816180 RCX: 00007f19e759c819 [ 227.595981][ T8805] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 227.596008][ T8805] RBP: 00007f19e7632c91 R08: 0000000000000000 R09: 0000000000000000 [ 227.596025][ T8805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.596043][ T8805] R13: 00007f19e7816218 R14: 00007f19e7816180 R15: 00007ffc6e796b58 [ 227.596083][ T8805] [ 227.963273][ T8809] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 228.626365][ T8822] futex_wake_op: syz.2.622 tries to shift op by -2048; fix this program [ 228.693458][ T8822] futex_wake_op: syz.2.622 tries to shift op by -2048; fix this program [ 228.714946][ T8822] 0x000000000001-0x000000020000 : "" [ 228.796533][ T8822] ftl_cs: FTL header corrupt! [ 230.841961][ T8860] futex_wake_op: syz.3.632 tries to shift op by -2048; fix this program [ 230.882558][ T8860] futex_wake_op: syz.3.632 tries to shift op by -2048; fix this program [ 231.162099][ T8860] 0x000000000001-0x000000020000 : "" [ 231.219606][ T8860] ftl_cs: FTL header corrupt! [ 231.298508][ T8865] Process accounting paused [ 232.122916][ T8883] zswap: compressor not available [ 232.707860][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 233.362800][ T29] audit: type=1800 audit(2147483660.810:6): pid=8921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.644" name="discovery_nqn" dev="configfs" ino=26365 res=0 errno=0 [ 233.602842][ T8917] block2mtd: illegal erase size [ 233.990531][ T8931] FAULT_INJECTION: forcing a failure. [ 233.990531][ T8931] name failslab, interval 1, probability 0, space 0, times 0 [ 234.045124][ T8931] CPU: 0 UID: 0 PID: 8931 Comm: syz.0.647 Tainted: G I syzkaller #0 PREEMPT(full) [ 234.045167][ T8931] Tainted: [I]=FIRMWARE_WORKAROUND [ 234.045177][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 234.045192][ T8931] Call Trace: [ 234.045200][ T8931] [ 234.045211][ T8931] dump_stack_lvl+0x100/0x190 [ 234.045257][ T8931] should_fail_ex.cold+0x5/0xa [ 234.045291][ T8931] ? kobject_get_path+0xcf/0x2c0 [ 234.045322][ T8931] should_failslab+0xc2/0x120 [ 234.045352][ T8931] __kmalloc_noprof+0xe0/0x850 [ 234.045402][ T8931] kobject_get_path+0xcf/0x2c0 [ 234.045444][ T8931] kobject_uevent_env+0x287/0x18b0 [ 234.045484][ T8931] ? kvm_uevent_notify_change.part.0+0x321/0x450 [ 234.045522][ T8931] ? kfree+0x1f6/0x6b0 [ 234.045565][ T8931] kvm_uevent_notify_change.part.0+0x3a6/0x450 [ 234.045604][ T8931] ? __pfx_kvm_vm_release+0x10/0x10 [ 234.045636][ T8931] kvm_put_kvm+0xe4/0xb10 [ 234.045666][ T8931] ? lockdep_hardirqs_on+0x78/0x100 [ 234.045695][ T8931] ? _raw_spin_unlock_irq+0x2e/0x50 [ 234.045739][ T8931] ? __pfx_kvm_vm_release+0x10/0x10 [ 234.045771][ T8931] kvm_vm_release+0x3c/0x50 [ 234.045798][ T8931] __fput+0x3ff/0xb40 [ 234.045839][ T8931] task_work_run+0x150/0x240 [ 234.045880][ T8931] ? __pfx_task_work_run+0x10/0x10 [ 234.045938][ T8931] exit_to_user_mode_loop+0x100/0x4a0 [ 234.045980][ T8931] do_syscall_64+0x668/0xf80 [ 234.046007][ T8931] ? clear_bhb_loop+0x40/0x90 [ 234.046040][ T8931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.046069][ T8931] RIP: 0033:0x7feb81b9c819 [ 234.046092][ T8931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.046119][ T8931] RSP: 002b:00007feb82a48028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 234.046146][ T8931] RAX: 0000000000000000 RBX: 00007feb81e15fa0 RCX: 00007feb81b9c819 [ 234.046166][ T8931] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 234.046183][ T8931] RBP: 00007feb81c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 234.046200][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.046217][ T8931] R13: 00007feb81e16038 R14: 00007feb81e15fa0 R15: 00007ffc6fb012d8 [ 234.046253][ T8931] [ 234.499506][ T8944] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 234.968904][ T8969] FAULT_INJECTION: forcing a failure. [ 234.968904][ T8969] name failslab, interval 1, probability 0, space 0, times 0 [ 234.985886][ T8969] CPU: 0 UID: 0 PID: 8969 Comm: syz.2.654 Tainted: G I syzkaller #0 PREEMPT(full) [ 234.985928][ T8969] Tainted: [I]=FIRMWARE_WORKAROUND [ 234.985938][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 234.985955][ T8969] Call Trace: [ 234.985964][ T8969] [ 234.985975][ T8969] dump_stack_lvl+0x100/0x190 [ 234.986024][ T8969] should_fail_ex.cold+0x5/0xa [ 234.986065][ T8969] ? tomoyo_realpath_from_path+0xb6/0x690 [ 234.986106][ T8969] should_failslab+0xc2/0x120 [ 234.986138][ T8969] __kmalloc_noprof+0xe0/0x850 [ 234.986191][ T8969] tomoyo_realpath_from_path+0xb6/0x690 [ 234.986242][ T8969] tomoyo_path_number_perm+0x23c/0x580 [ 234.986277][ T8969] ? tomoyo_path_number_perm+0x22e/0x580 [ 234.986313][ T8969] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 234.986382][ T8969] ? find_held_lock+0x2b/0x80 [ 234.986407][ T8969] ? current_check_access_path+0x281/0x460 [ 234.986449][ T8969] ? __pfx_current_check_access_path+0x10/0x10 [ 234.986493][ T8969] ? d_alloc_parallel+0x864/0x14e0 [ 234.986540][ T8969] tomoyo_path_mknod+0x164/0x190 [ 234.986568][ T8969] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 234.986593][ T8969] ? find_held_lock+0x2b/0x80 [ 234.986620][ T8969] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 234.986657][ T8969] security_path_mknod+0x161/0x300 [ 234.986700][ T8969] may_o_create+0x30/0x3a0 [ 234.986743][ T8969] lookup_open.isra.0+0xa0d/0x11b0 [ 234.986794][ T8969] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 234.986844][ T8969] ? __pfx___might_resched+0x10/0x10 [ 234.986887][ T8969] ? mnt_get_write_access+0x52/0x2f0 [ 234.986935][ T8969] ? __pfx_down_write+0x10/0x10 [ 234.986968][ T8969] ? mnt_get_write_access+0x1e9/0x2f0 [ 234.987010][ T8969] path_openat+0x2291/0x31a0 [ 234.987055][ T8969] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 234.987090][ T8969] ? __pfx_path_openat+0x10/0x10 [ 234.987137][ T8969] do_file_open+0x20e/0x430 [ 234.987170][ T8969] ? __pfx_do_file_open+0x10/0x10 [ 234.987230][ T8969] ? _raw_spin_unlock+0x28/0x50 [ 234.987270][ T8969] ? alloc_fd+0x476/0x790 [ 234.987311][ T8969] do_sys_openat2+0x10d/0x1e0 [ 234.987349][ T8969] ? __pfx_do_sys_openat2+0x10/0x10 [ 234.987390][ T8969] __x64_sys_open+0xfe/0x1d0 [ 234.987427][ T8969] ? __pfx___x64_sys_open+0x10/0x10 [ 234.987481][ T8969] do_syscall_64+0x106/0xf80 [ 234.987508][ T8969] ? clear_bhb_loop+0x40/0x90 [ 234.987544][ T8969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.987573][ T8969] RIP: 0033:0x7fbfc9f9c819 [ 234.987596][ T8969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 234.987621][ T8969] RSP: 002b:00007fbfcaee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 234.987648][ T8969] RAX: ffffffffffffffda RBX: 00007fbfca216180 RCX: 00007fbfc9f9c819 [ 234.987666][ T8969] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 234.987682][ T8969] RBP: 00007fbfca032c91 R08: 0000000000000000 R09: 0000000000000000 [ 234.987699][ T8969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 234.987715][ T8969] R13: 00007fbfca216218 R14: 00007fbfca216180 R15: 00007ffc36e59ca8 [ 234.987755][ T8969] [ 234.987766][ T8969] ERROR: Out of memory at tomoyo_realpath_from_path. [ 236.017544][ T9000] netlink: 'syz.0.665': attribute type 12 has an invalid length. [ 236.607162][ T9017] FAULT_INJECTION: forcing a failure. [ 236.607162][ T9017] name failslab, interval 1, probability 0, space 0, times 0 [ 236.645437][ T9017] CPU: 1 UID: 0 PID: 9017 Comm: syz.1.669 Tainted: G I syzkaller #0 PREEMPT(full) [ 236.645483][ T9017] Tainted: [I]=FIRMWARE_WORKAROUND [ 236.645494][ T9017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 236.645521][ T9017] Call Trace: [ 236.645531][ T9017] [ 236.645542][ T9017] dump_stack_lvl+0x100/0x190 [ 236.645596][ T9017] should_fail_ex.cold+0x5/0xa [ 236.645633][ T9017] should_failslab+0xc2/0x120 [ 236.645671][ T9017] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 236.645721][ T9017] ? __d_alloc+0x34/0xa80 [ 236.645754][ T9017] ? __pfx_stack_trace_save+0x10/0x10 [ 236.645792][ T9017] __d_alloc+0x34/0xa80 [ 236.645832][ T9017] d_alloc_parallel+0x111/0x14e0 [ 236.645887][ T9017] ? find_held_lock+0x2b/0x80 [ 236.645916][ T9017] ? __d_lookup+0x25c/0x4a0 [ 236.645959][ T9017] ? __pfx_d_alloc_parallel+0x10/0x10 [ 236.646008][ T9017] ? __d_lookup+0x266/0x4a0 [ 236.646061][ T9017] lookup_open.isra.0+0x57c/0x11b0 [ 236.646114][ T9017] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 236.646167][ T9017] ? __pfx___might_resched+0x10/0x10 [ 236.646210][ T9017] ? mnt_get_write_access+0x52/0x2f0 [ 236.646260][ T9017] ? __pfx_down_write+0x10/0x10 [ 236.646293][ T9017] ? mnt_get_write_access+0x1e9/0x2f0 [ 236.646341][ T9017] path_openat+0x2291/0x31a0 [ 236.646381][ T9017] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 236.646418][ T9017] ? __pfx_path_openat+0x10/0x10 [ 236.646466][ T9017] do_file_open+0x20e/0x430 [ 236.646508][ T9017] ? __pfx_do_file_open+0x10/0x10 [ 236.646578][ T9017] ? _raw_spin_unlock+0x28/0x50 [ 236.646630][ T9017] ? alloc_fd+0x476/0x790 [ 236.646675][ T9017] do_sys_openat2+0x10d/0x1e0 [ 236.646717][ T9017] ? __pfx_do_sys_openat2+0x10/0x10 [ 236.646771][ T9017] __x64_sys_open+0xfe/0x1d0 [ 236.646812][ T9017] ? __pfx___x64_sys_open+0x10/0x10 [ 236.646868][ T9017] do_syscall_64+0x106/0xf80 [ 236.646896][ T9017] ? clear_bhb_loop+0x40/0x90 [ 236.646932][ T9017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.646962][ T9017] RIP: 0033:0x7f19e759c819 [ 236.646988][ T9017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.647017][ T9017] RSP: 002b:00007f19e57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 236.647046][ T9017] RAX: ffffffffffffffda RBX: 00007f19e7816180 RCX: 00007f19e759c819 [ 236.647066][ T9017] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 236.647086][ T9017] RBP: 00007f19e7632c91 R08: 0000000000000000 R09: 0000000000000000 [ 236.647105][ T9017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.647123][ T9017] R13: 00007f19e7816218 R14: 00007f19e7816180 R15: 00007ffc6e796b58 [ 236.647163][ T9017] [ 239.924535][ T9065] sd 0:0:1:0: PR command failed: 1026 [ 239.930004][ T9065] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 239.975364][ T9065] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 245.181827][ T9187] netlink: 20 bytes leftover after parsing attributes in process `syz.0.703'. [ 246.434056][ T9222] futex_wake_op: syz.0.709 tries to shift op by -2048; fix this program [ 246.485585][ T9222] futex_wake_op: syz.0.709 tries to shift op by -2048; fix this program [ 246.519839][ T9222] 0x000000000001-0x000000020000 : "" [ 246.570799][ T9227] FAULT_INJECTION: forcing a failure. [ 246.570799][ T9227] name failslab, interval 1, probability 0, space 0, times 0 [ 246.592103][ T9222] ftl_cs: FTL header corrupt! [ 246.713632][ T9227] CPU: 1 UID: 0 PID: 9227 Comm: syz.3.710 Tainted: G I syzkaller #0 PREEMPT(full) [ 246.713683][ T9227] Tainted: [I]=FIRMWARE_WORKAROUND [ 246.713694][ T9227] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 246.713714][ T9227] Call Trace: [ 246.713724][ T9227] [ 246.713735][ T9227] dump_stack_lvl+0x100/0x190 [ 246.713786][ T9227] should_fail_ex.cold+0x5/0xa [ 246.713822][ T9227] should_failslab+0xc2/0x120 [ 246.713856][ T9227] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 246.713900][ T9227] ? __d_alloc+0x34/0xa80 [ 246.713933][ T9227] ? __pfx_stack_trace_save+0x10/0x10 [ 246.713971][ T9227] __d_alloc+0x34/0xa80 [ 246.714009][ T9227] d_alloc_parallel+0x111/0x14e0 [ 246.714063][ T9227] ? find_held_lock+0x2b/0x80 [ 246.714092][ T9227] ? __d_lookup+0x25c/0x4a0 [ 246.714134][ T9227] ? __pfx_d_alloc_parallel+0x10/0x10 [ 246.714183][ T9227] ? __d_lookup+0x266/0x4a0 [ 246.714228][ T9227] lookup_open.isra.0+0x57c/0x11b0 [ 246.714280][ T9227] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 246.714338][ T9227] ? __pfx___might_resched+0x10/0x10 [ 246.714383][ T9227] ? mnt_get_write_access+0x52/0x2f0 [ 246.714428][ T9227] ? __pfx_down_write+0x10/0x10 [ 246.714460][ T9227] ? mnt_get_write_access+0x1e9/0x2f0 [ 246.714506][ T9227] path_openat+0x2291/0x31a0 [ 246.714545][ T9227] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 246.714574][ T9227] ? __pfx_path_openat+0x10/0x10 [ 246.714618][ T9227] do_file_open+0x20e/0x430 [ 246.714653][ T9227] ? __pfx_do_file_open+0x10/0x10 [ 246.714710][ T9227] ? _raw_spin_unlock+0x28/0x50 [ 246.714752][ T9227] ? alloc_fd+0x476/0x790 [ 246.714791][ T9227] do_sys_openat2+0x10d/0x1e0 [ 246.714830][ T9227] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.714884][ T9227] __x64_sys_open+0xfe/0x1d0 [ 246.714922][ T9227] ? __pfx___x64_sys_open+0x10/0x10 [ 246.714978][ T9227] do_syscall_64+0x106/0xf80 [ 246.715006][ T9227] ? clear_bhb_loop+0x40/0x90 [ 246.715043][ T9227] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.715072][ T9227] RIP: 0033:0x7f007919c819 [ 246.715098][ T9227] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.715127][ T9227] RSP: 002b:00007f0079f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 246.715163][ T9227] RAX: ffffffffffffffda RBX: 00007f0079416180 RCX: 00007f007919c819 [ 246.715182][ T9227] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 246.715201][ T9227] RBP: 00007f0079232c91 R08: 0000000000000000 R09: 0000000000000000 [ 246.715219][ T9227] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.715237][ T9227] R13: 00007f0079416218 R14: 00007f0079416180 R15: 00007fff6422b958 [ 246.715277][ T9227] [ 247.690352][ T9239] FAULT_INJECTION: forcing a failure. [ 247.690352][ T9239] name failslab, interval 1, probability 0, space 0, times 0 [ 247.703393][ T9239] CPU: 0 UID: 0 PID: 9239 Comm: syz.1.712 Tainted: G I syzkaller #0 PREEMPT(full) [ 247.703418][ T9239] Tainted: [I]=FIRMWARE_WORKAROUND [ 247.703424][ T9239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 247.703433][ T9239] Call Trace: [ 247.703438][ T9239] [ 247.703444][ T9239] dump_stack_lvl+0x100/0x190 [ 247.703473][ T9239] should_fail_ex.cold+0x5/0xa [ 247.703495][ T9239] should_failslab+0xc2/0x120 [ 247.703513][ T9239] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 247.703535][ T9239] ? sk_prot_alloc+0x60/0x2a0 [ 247.703557][ T9239] sk_prot_alloc+0x60/0x2a0 [ 247.703575][ T9239] sk_alloc+0x36/0xe80 [ 247.703597][ T9239] rds_create+0x9e/0x5f0 [ 247.703617][ T9239] __sock_create+0x339/0x860 [ 247.703639][ T9239] __sys_socket+0x14d/0x260 [ 247.703657][ T9239] ? __pfx___sys_socket+0x10/0x10 [ 247.703681][ T9239] __x64_sys_socket+0x72/0xb0 [ 247.703700][ T9239] ? lockdep_hardirqs_on+0x78/0x100 [ 247.703715][ T9239] do_syscall_64+0x106/0xf80 [ 247.703729][ T9239] ? clear_bhb_loop+0x40/0x90 [ 247.703747][ T9239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.703762][ T9239] RIP: 0033:0x7f19e759c819 [ 247.703775][ T9239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.703789][ T9239] RSP: 002b:00007f19e83a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 247.703803][ T9239] RAX: ffffffffffffffda RBX: 00007f19e7815fa0 RCX: 00007f19e759c819 [ 247.703813][ T9239] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 247.703821][ T9239] RBP: 00007f19e7632c91 R08: 0000000000000000 R09: 0000000000000000 [ 247.703830][ T9239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.703839][ T9239] R13: 00007f19e7816038 R14: 00007f19e7815fa0 R15: 00007ffc6e796b58 [ 247.703858][ T9239] [ 248.985775][ T9270] bond0: invalid ARP target specified [ 249.113313][ T9274] ptrace attach of "./syz-executor exec"[7965] was attempted by "./syz-executor exec"[9274] [ 250.607796][ T9313] zswap: compressor not available [ 250.614258][ T9314] zswap: compressor not available [ 250.821939][ T9329] futex_wake_op: syz.0.724 tries to shift op by -2048; fix this program [ 250.854980][ T9329] futex_wake_op: syz.0.724 tries to shift op by -2048; fix this program [ 250.863780][ T9307] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.879618][ T9331] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 250.889546][ T9331] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 250.914066][ T9307] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 250.946594][ T9307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 250.968425][ T9327] 0x000000000001-0x000000020000 : "" [ 250.977558][ T9307] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 251.007782][ T9327] ftl_cs: FTL header corrupt! [ 251.028717][ T9307] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.075560][ T9307] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 251.190310][ T9307] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 251.287047][ T9307] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.315603][ T9307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 251.366020][ T9307] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 251.455145][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 252.559908][ T9372] vivid-007: ================= START STATUS ================= [ 252.568223][ T9372] vivid-007: Generate PTS: true [ 252.573221][ T9372] vivid-007: Generate SCR: true [ 252.605691][ T9372] tpg source WxH: 320x240 (Y'CbCr) [ 252.610861][ T9372] tpg field: 1 [ 252.614750][ T9372] tpg crop: (0,0)/320x240 [ 252.627233][ T9372] tpg compose: (0,0)/320x240 [ 252.631896][ T9372] tpg colorspace: 8 [ 252.636379][ T9372] tpg transfer function: 0/0 [ 252.645585][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 252.651761][ T9372] tpg Y'CbCr encoding: 0/0 [ 252.656814][ T9372] tpg quantization: 0/0 [ 252.661023][ T9372] tpg RGB range: 0/2 [ 252.665033][ T9372] vivid-007: ================== END STATUS ================== [ 252.957060][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 253.045844][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 253.247690][ T9384] futex_wake_op: syz.3.736 tries to shift op by -2048; fix this program [ 253.265985][ T9384] futex_wake_op: syz.3.736 tries to shift op by -2048; fix this program [ 253.295014][ T9384] 0x000000000001-0x000000020000 : "" [ 253.303547][ T9384] ftl_cs: FTL header corrupt! [ 253.357052][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 254.716608][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 255.036804][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 255.116835][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 255.316555][ T9382] kexec: Could not allocate control_code_buffer [ 255.437045][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 255.841389][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.848019][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.830735][ T9455] FAULT_INJECTION: forcing a failure. [ 256.830735][ T9455] name failslab, interval 1, probability 0, space 0, times 0 [ 256.881157][ T9455] CPU: 0 UID: 0 PID: 9455 Comm: syz.2.749 Tainted: G I syzkaller #0 PREEMPT(full) [ 256.881203][ T9455] Tainted: [I]=FIRMWARE_WORKAROUND [ 256.881214][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 256.881231][ T9455] Call Trace: [ 256.881240][ T9455] [ 256.881250][ T9455] dump_stack_lvl+0x100/0x190 [ 256.881300][ T9455] should_fail_ex.cold+0x5/0xa [ 256.881336][ T9455] should_failslab+0xc2/0x120 [ 256.881368][ T9455] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 256.881414][ T9455] ? __d_alloc+0x34/0xa80 [ 256.881445][ T9455] ? __pfx_stack_trace_save+0x10/0x10 [ 256.881481][ T9455] __d_alloc+0x34/0xa80 [ 256.881519][ T9455] d_alloc_parallel+0x111/0x14e0 [ 256.881571][ T9455] ? find_held_lock+0x2b/0x80 [ 256.881598][ T9455] ? __d_lookup+0x25c/0x4a0 [ 256.881637][ T9455] ? __pfx_d_alloc_parallel+0x10/0x10 [ 256.881683][ T9455] ? __d_lookup+0x266/0x4a0 [ 256.881731][ T9455] lookup_open.isra.0+0x57c/0x11b0 [ 256.881781][ T9455] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 256.881829][ T9455] ? __pfx___might_resched+0x10/0x10 [ 256.881871][ T9455] ? mnt_get_write_access+0x52/0x2f0 [ 256.881918][ T9455] ? __pfx_down_write+0x10/0x10 [ 256.881949][ T9455] ? mnt_get_write_access+0x1e9/0x2f0 [ 256.881995][ T9455] path_openat+0x2291/0x31a0 [ 256.882033][ T9455] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 256.882068][ T9455] ? __pfx_path_openat+0x10/0x10 [ 256.882123][ T9455] do_file_open+0x20e/0x430 [ 256.882159][ T9455] ? __pfx_do_file_open+0x10/0x10 [ 256.882218][ T9455] ? _raw_spin_unlock+0x28/0x50 [ 256.882257][ T9455] ? alloc_fd+0x476/0x790 [ 256.882296][ T9455] do_sys_openat2+0x10d/0x1e0 [ 256.882334][ T9455] ? __pfx_do_sys_openat2+0x10/0x10 [ 256.882375][ T9455] ? __x64_sys_close_range+0x2d9/0x5d0 [ 256.882416][ T9455] __x64_sys_open+0xfe/0x1d0 [ 256.882454][ T9455] ? __pfx___x64_sys_open+0x10/0x10 [ 256.882505][ T9455] do_syscall_64+0x106/0xf80 [ 256.882533][ T9455] ? clear_bhb_loop+0x40/0x90 [ 256.882568][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.882597][ T9455] RIP: 0033:0x7fbfc9f9c819 [ 256.882621][ T9455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.882647][ T9455] RSP: 002b:00007fbfcaf08028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 256.882675][ T9455] RAX: ffffffffffffffda RBX: 00007fbfca216090 RCX: 00007fbfc9f9c819 [ 256.882694][ T9455] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 256.882710][ T9455] RBP: 00007fbfca032c91 R08: 0000000000000000 R09: 0000000000000000 [ 256.882727][ T9455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.882743][ T9455] R13: 00007fbfca216128 R14: 00007fbfca216090 R15: 00007ffc36e59ca8 [ 256.882781][ T9455] [ 257.198212][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 257.528125][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 258.105286][ T9481] netlink: 25 bytes leftover after parsing attributes in process `syz.3.760'. [ 258.405891][ T29] audit: type=1800 audit(2147484708.859:7): pid=9491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.761" name="dbroot" dev="configfs" ino=29181 res=0 errno=0 [ 258.878763][ T9496] FAULT_INJECTION: forcing a failure. [ 258.878763][ T9496] name failslab, interval 1, probability 0, space 0, times 0 [ 258.892215][ T9496] CPU: 1 UID: 0 PID: 9496 Comm: syz.1.763 Tainted: G I syzkaller #0 PREEMPT(full) [ 258.892262][ T9496] Tainted: [I]=FIRMWARE_WORKAROUND [ 258.892273][ T9496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 258.892290][ T9496] Call Trace: [ 258.892300][ T9496] [ 258.892311][ T9496] dump_stack_lvl+0x100/0x190 [ 258.892360][ T9496] should_fail_ex.cold+0x5/0xa [ 258.892396][ T9496] ? tomoyo_realpath_from_path+0xb6/0x690 [ 258.892439][ T9496] should_failslab+0xc2/0x120 [ 258.892472][ T9496] __kmalloc_noprof+0xe0/0x850 [ 258.892526][ T9496] tomoyo_realpath_from_path+0xb6/0x690 [ 258.892575][ T9496] tomoyo_path_number_perm+0x23c/0x580 [ 258.892610][ T9496] ? tomoyo_path_number_perm+0x22e/0x580 [ 258.892648][ T9496] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 258.892722][ T9496] ? find_held_lock+0x2b/0x80 [ 258.892750][ T9496] ? current_check_access_path+0x281/0x460 [ 258.892794][ T9496] ? __pfx_current_check_access_path+0x10/0x10 [ 258.892836][ T9496] ? d_alloc_parallel+0x864/0x14e0 [ 258.892885][ T9496] tomoyo_path_mknod+0x164/0x190 [ 258.892913][ T9496] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 258.892939][ T9496] ? find_held_lock+0x2b/0x80 [ 258.892970][ T9496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.893007][ T9496] security_path_mknod+0x161/0x300 [ 258.893051][ T9496] may_o_create+0x30/0x3a0 [ 258.893103][ T9496] lookup_open.isra.0+0xa0d/0x11b0 [ 258.893157][ T9496] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 258.893213][ T9496] ? __pfx___might_resched+0x10/0x10 [ 258.893257][ T9496] ? mnt_get_write_access+0x52/0x2f0 [ 258.893305][ T9496] ? __pfx_down_write+0x10/0x10 [ 258.893338][ T9496] ? mnt_get_write_access+0x1e9/0x2f0 [ 258.893385][ T9496] path_openat+0x2291/0x31a0 [ 258.893424][ T9496] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 258.893459][ T9496] ? __pfx_path_openat+0x10/0x10 [ 258.893506][ T9496] do_file_open+0x20e/0x430 [ 258.893540][ T9496] ? __pfx_do_file_open+0x10/0x10 [ 258.893594][ T9496] ? _raw_spin_unlock+0x28/0x50 [ 258.893630][ T9496] ? alloc_fd+0x476/0x790 [ 258.893667][ T9496] do_sys_openat2+0x10d/0x1e0 [ 258.893703][ T9496] ? __pfx_do_sys_openat2+0x10/0x10 [ 258.893738][ T9496] ? __pfx_sched_clock_cpu+0x10/0x10 [ 258.893783][ T9496] __x64_sys_open+0xfe/0x1d0 [ 258.893819][ T9496] ? __pfx___x64_sys_open+0x10/0x10 [ 258.893863][ T9496] do_syscall_64+0x106/0xf80 [ 258.893886][ T9496] ? clear_bhb_loop+0x40/0x90 [ 258.893919][ T9496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.893947][ T9496] RIP: 0033:0x7f19e759c819 [ 258.893972][ T9496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 258.894000][ T9496] RSP: 002b:00007f19e8387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 258.894028][ T9496] RAX: ffffffffffffffda RBX: 00007f19e7816090 RCX: 00007f19e759c819 [ 258.894048][ T9496] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 258.894066][ T9496] RBP: 00007f19e7632c91 R08: 0000000000000000 R09: 0000000000000000 [ 258.894092][ T9496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.894110][ T9496] R13: 00007f19e7816128 R14: 00007f19e7816090 R15: 00007ffc6e796b58 [ 258.894150][ T9496] [ 258.895257][ T9496] ERROR: Out of memory at tomoyo_realpath_from_path. [ 259.271418][ T9488] db_root: cannot open: 0 [ 260.187016][ T9515] netlink: 98 bytes leftover after parsing attributes in process `syz.1.769'. [ 260.461072][ T9532] FAULT_INJECTION: forcing a failure. [ 260.461072][ T9532] name failslab, interval 1, probability 0, space 0, times 0 [ 260.492389][ T9532] CPU: 0 UID: 0 PID: 9532 Comm: syz.1.773 Tainted: G I syzkaller #0 PREEMPT(full) [ 260.492416][ T9532] Tainted: [I]=FIRMWARE_WORKAROUND [ 260.492422][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 260.492432][ T9532] Call Trace: [ 260.492438][ T9532] [ 260.492444][ T9532] dump_stack_lvl+0x100/0x190 [ 260.492472][ T9532] should_fail_ex.cold+0x5/0xa [ 260.492491][ T9532] ? tomoyo_realpath_from_path+0xb6/0x690 [ 260.492513][ T9532] should_failslab+0xc2/0x120 [ 260.492530][ T9532] __kmalloc_noprof+0xe0/0x850 [ 260.492558][ T9532] tomoyo_realpath_from_path+0xb6/0x690 [ 260.492584][ T9532] tomoyo_path_number_perm+0x23c/0x580 [ 260.492611][ T9532] ? tomoyo_path_number_perm+0x22e/0x580 [ 260.492631][ T9532] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 260.492651][ T9532] ? find_held_lock+0x2b/0x80 [ 260.492684][ T9532] ? find_held_lock+0x2b/0x80 [ 260.492699][ T9532] ? current_check_access_path+0x281/0x460 [ 260.492721][ T9532] ? __pfx_current_check_access_path+0x10/0x10 [ 260.492742][ T9532] ? d_alloc_parallel+0x864/0x14e0 [ 260.492768][ T9532] tomoyo_path_mknod+0x164/0x190 [ 260.492782][ T9532] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 260.492796][ T9532] ? find_held_lock+0x2b/0x80 [ 260.492811][ T9532] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 260.492829][ T9532] security_path_mknod+0x161/0x300 [ 260.492855][ T9532] may_o_create+0x30/0x3a0 [ 260.492878][ T9532] lookup_open.isra.0+0xa0d/0x11b0 [ 260.492905][ T9532] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 260.492931][ T9532] ? __pfx___might_resched+0x10/0x10 [ 260.492952][ T9532] ? mnt_get_write_access+0x52/0x2f0 [ 260.492976][ T9532] ? __pfx_down_write+0x10/0x10 [ 260.492993][ T9532] ? mnt_get_write_access+0x1e9/0x2f0 [ 260.493016][ T9532] path_openat+0x2291/0x31a0 [ 260.493036][ T9532] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 260.493054][ T9532] ? __pfx_path_openat+0x10/0x10 [ 260.493078][ T9532] do_file_open+0x20e/0x430 [ 260.493097][ T9532] ? __pfx_do_file_open+0x10/0x10 [ 260.493127][ T9532] ? _raw_spin_unlock+0x28/0x50 [ 260.493148][ T9532] ? alloc_fd+0x476/0x790 [ 260.493169][ T9532] do_sys_openat2+0x10d/0x1e0 [ 260.493190][ T9532] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.493218][ T9532] __x64_sys_open+0xfe/0x1d0 [ 260.493238][ T9532] ? __pfx___x64_sys_open+0x10/0x10 [ 260.493266][ T9532] do_syscall_64+0x106/0xf80 [ 260.493280][ T9532] ? clear_bhb_loop+0x40/0x90 [ 260.493298][ T9532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.493313][ T9532] RIP: 0033:0x7f19e759c819 [ 260.493327][ T9532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.493341][ T9532] RSP: 002b:00007f19e57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 260.493356][ T9532] RAX: ffffffffffffffda RBX: 00007f19e7816180 RCX: 00007f19e759c819 [ 260.493367][ T9532] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 260.493376][ T9532] RBP: 00007f19e7632c91 R08: 0000000000000000 R09: 0000000000000000 [ 260.493386][ T9532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.493395][ T9532] R13: 00007f19e7816218 R14: 00007f19e7816180 R15: 00007ffc6e796b58 [ 260.493416][ T9532] [ 260.493423][ T9532] ERROR: Out of memory at tomoyo_realpath_from_path. [ 261.006868][ T9534] input: jJǸ-9%vJ86 as /devices/virtual/input/input10 [ 261.557264][ T9552] FAULT_INJECTION: forcing a failure. [ 261.557264][ T9552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.571001][ T9552] CPU: 1 UID: 0 PID: 9552 Comm: syz.1.778 Tainted: G I syzkaller #0 PREEMPT(full) [ 261.571040][ T9552] Tainted: [I]=FIRMWARE_WORKAROUND [ 261.571050][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 261.571064][ T9552] Call Trace: [ 261.571075][ T9552] [ 261.571083][ T9552] dump_stack_lvl+0x100/0x190 [ 261.571111][ T9552] should_fail_ex.cold+0x5/0xa [ 261.571129][ T9552] _copy_to_iter+0x5a4/0x1720 [ 261.571153][ T9552] ? __pfx__copy_to_iter+0x10/0x10 [ 261.571174][ T9552] ? traverse.part.0.constprop.0+0x2c5/0x650 [ 261.571209][ T9552] seq_read_iter+0x691/0x1270 [ 261.571232][ T9552] ? __pfx__kstrtoull+0x10/0x10 [ 261.571262][ T9552] seq_read+0x33b/0x4c0 [ 261.571285][ T9552] ? __pfx_seq_read+0x10/0x10 [ 261.571306][ T9552] ? __pfx___might_resched+0x10/0x10 [ 261.571330][ T9552] ? iovec_from_user+0xda/0x140 [ 261.571358][ T9552] ? rw_verify_area+0xce/0x6d0 [ 261.571381][ T9552] ? __pfx_seq_read+0x10/0x10 [ 261.571403][ T9552] vfs_readv+0x5d8/0x8d0 [ 261.571470][ T9552] ? __pfx_vfs_readv+0x10/0x10 [ 261.571494][ T9552] ? find_held_lock+0x2b/0x80 [ 261.571519][ T9552] ? __fget_files+0x21f/0x3d0 [ 261.571540][ T9552] ? do_preadv+0x1ac/0x270 [ 261.571560][ T9552] do_preadv+0x1ac/0x270 [ 261.571584][ T9552] ? __pfx_do_preadv+0x10/0x10 [ 261.571612][ T9552] do_syscall_64+0x106/0xf80 [ 261.571627][ T9552] ? clear_bhb_loop+0x40/0x90 [ 261.571646][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.571661][ T9552] RIP: 0033:0x7f19e759c819 [ 261.571675][ T9552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.571692][ T9552] RSP: 002b:00007f19e83a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 261.571706][ T9552] RAX: ffffffffffffffda RBX: 00007f19e7815fa0 RCX: 00007f19e759c819 [ 261.571715][ T9552] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 261.571724][ T9552] RBP: 00007f19e83a8090 R08: 0000000000000005 R09: 0000000000000000 [ 261.571733][ T9552] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 261.571741][ T9552] R13: 00007f19e7816038 R14: 00007f19e7815fa0 R15: 00007ffc6e796b58 [ 261.571760][ T9552] [ 262.746373][ T9520] Process accounting resumed [ 263.435098][ T9568] netlink: 334 bytes leftover after parsing attributes in process `syz.1.782'. [ 263.974477][ T9575] futex_wake_op: syz.0.783 tries to shift op by -2048; fix this program [ 263.991398][ T9575] futex_wake_op: syz.0.783 tries to shift op by -2048; fix this program [ 264.017620][ T9575] 0x000000000001-0x000000020000 : "" [ 264.092527][ T9575] ftl_cs: FTL header corrupt! [ 264.581653][ T51] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 265.096482][ T9593] zswap: compressor not available [ 265.605962][ T9611] Invalid ELF header magic: != ELF [ 265.864650][ T9620] netlink: 'syz.1.793': attribute type 1 has an invalid length. [ 265.873224][ T9620] netlink: 9 bytes leftover after parsing attributes in process `syz.1.793'. [ 266.432254][ T9631] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 266.520195][ T9636] futex_wake_op: syz.2.797 tries to shift op by -2048; fix this program [ 266.557400][ T9636] futex_wake_op: syz.2.797 tries to shift op by -2048; fix this program [ 266.575388][ T9636] 0x000000000001-0x000000020000 : "" [ 266.621690][ T9636] ftl_cs: FTL header corrupt! [ 266.983282][ T9635] FAULT_INJECTION: forcing a failure. [ 266.983282][ T9635] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.002849][ T9635] CPU: 0 UID: 0 PID: 9635 Comm: syz.2.797 Tainted: G I syzkaller #0 PREEMPT(full) [ 267.002874][ T9635] Tainted: [I]=FIRMWARE_WORKAROUND [ 267.002879][ T9635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 267.002890][ T9635] Call Trace: [ 267.002898][ T9635] [ 267.002904][ T9635] dump_stack_lvl+0x100/0x190 [ 267.002931][ T9635] should_fail_ex.cold+0x5/0xa [ 267.002950][ T9635] _copy_to_user+0x32/0xd0 [ 267.002971][ T9635] simple_read_from_buffer+0xcb/0x170 [ 267.003003][ T9635] proc_fail_nth_read+0x1af/0x230 [ 267.003023][ T9635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.003043][ T9635] ? rw_verify_area+0xce/0x6d0 [ 267.003065][ T9635] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 267.003084][ T9635] vfs_read+0x1e4/0xb30 [ 267.003101][ T9635] ? __pfx_vfs_read+0x10/0x10 [ 267.003114][ T9635] ? __fget_files+0x215/0x3d0 [ 267.003133][ T9635] ? __fget_files+0x21f/0x3d0 [ 267.003153][ T9635] ksys_read+0x12a/0x250 [ 267.003167][ T9635] ? __pfx_ksys_read+0x10/0x10 [ 267.003187][ T9635] do_syscall_64+0x106/0xf80 [ 267.003202][ T9635] ? clear_bhb_loop+0x40/0x90 [ 267.003220][ T9635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.003235][ T9635] RIP: 0033:0x7fbfc9f5d04e [ 267.003248][ T9635] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.003262][ T9635] RSP: 002b:00007fbfcaf28fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 267.003276][ T9635] RAX: ffffffffffffffda RBX: 00007fbfcaf296c0 RCX: 00007fbfc9f5d04e [ 267.003286][ T9635] RDX: 000000000000000f RSI: 00007fbfcaf290a0 RDI: 0000000000000008 [ 267.003295][ T9635] RBP: 00007fbfcaf29090 R08: 0000000000000000 R09: 0000000000000000 [ 267.003303][ T9635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.003311][ T9635] R13: 00007fbfca216038 R14: 00007fbfca215fa0 R15: 00007ffc36e59ca8 [ 267.003331][ T9635] [ 267.637387][ T9648] netlink: 342 bytes leftover after parsing attributes in process `syz.2.798'. [ 267.857696][ T9651] ptp ptp0: new virtual clock ptp1 [ 267.870394][ T9651] ptp ptp0: guarantee physical clock free running [ 267.885804][ T9651] ptp ptp0: delete virtual clock ptp1 [ 268.002903][ T9651] ptp ptp0: only physical clock in use now [ 268.734855][ T9674] netlink: 'syz.0.804': attribute type 1 has an invalid length. [ 268.742546][ T9674] netlink: 9 bytes leftover after parsing attributes in process `syz.0.804'. [ 269.229209][ T9701] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 269.928906][ T9715] ptrace attach of "./syz-executor exec"[7965] was attempted by "./syz-executor exec"[9715] [ 270.331832][ T9724] program syz.3.813 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 270.391243][ T9724] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 270.770537][ T9741] netlink: 'syz.3.815': attribute type 1 has an invalid length. [ 270.824846][ T9741] netlink: 9 bytes leftover after parsing attributes in process `syz.3.815'. [ 270.867680][ T9749] futex_wake_op: syz.0.817 tries to shift op by -2048; fix this program [ 270.903588][ T9749] futex_wake_op: syz.0.817 tries to shift op by -2048; fix this program [ 270.953952][ T9749] 0x000000000001-0x000000020000 : "" [ 271.093749][ T9749] ftl_cs: FTL header corrupt! [ 271.419006][ T9774] ubi0: attaching mtd0 [ 271.438103][ T9774] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 272.983695][ T9902] netlink: 'syz.0.828': attribute type 1 has an invalid length. [ 273.005839][ T9902] netlink: 9 bytes leftover after parsing attributes in process `syz.0.828'. [ 273.272443][ T51] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 273.895215][ T9935] FAULT_INJECTION: forcing a failure. [ 273.895215][ T9935] name failslab, interval 1, probability 0, space 0, times 0 [ 273.910175][ T9935] CPU: 0 UID: 0 PID: 9935 Comm: syz.1.833 Tainted: G I syzkaller #0 PREEMPT(full) [ 273.910218][ T9935] Tainted: [I]=FIRMWARE_WORKAROUND [ 273.910228][ T9935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 273.910243][ T9935] Call Trace: [ 273.910251][ T9935] [ 273.910261][ T9935] dump_stack_lvl+0x100/0x190 [ 273.910305][ T9935] should_fail_ex.cold+0x5/0xa [ 273.910335][ T9935] ? iovec_from_user+0x8d/0x140 [ 273.910369][ T9935] should_failslab+0xc2/0x120 [ 273.910400][ T9935] __kmalloc_noprof+0xe0/0x850 [ 273.910450][ T9935] iovec_from_user+0x8d/0x140 [ 273.910489][ T9935] __import_iovec+0x81/0x640 [ 273.910531][ T9935] import_iovec+0x82/0xb0 [ 273.910569][ T9935] copy_msghdr_from_user+0x2ed/0x4f0 [ 273.910607][ T9935] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 273.910649][ T9935] ? rcu_is_watching+0x12/0xc0 [ 273.910691][ T9935] ? ___sys_sendmsg+0x19d/0x1e0 [ 273.910723][ T9935] ? kfree+0x2ec/0x6b0 [ 273.910765][ T9935] ___sys_sendmsg+0x106/0x1e0 [ 273.910802][ T9935] ? __pfx____sys_sendmsg+0x10/0x10 [ 273.910871][ T9935] ? __pfx___might_resched+0x10/0x10 [ 273.910922][ T9935] __sys_sendmmsg+0x205/0x430 [ 273.910955][ T9935] ? __pfx___sys_sendmmsg+0x10/0x10 [ 273.911005][ T9935] ? __pfx_do_futex+0x10/0x10 [ 273.911058][ T9935] ? __sys_socket+0xac/0x260 [ 273.911096][ T9935] ? xfd_validate_state+0x129/0x190 [ 273.911149][ T9935] __x64_sys_sendmmsg+0x9c/0x100 [ 273.911175][ T9935] ? lockdep_hardirqs_on+0x78/0x100 [ 273.911206][ T9935] do_syscall_64+0x106/0xf80 [ 273.911233][ T9935] ? clear_bhb_loop+0x40/0x90 [ 273.911270][ T9935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.911301][ T9935] RIP: 0033:0x7f19e759c819 [ 273.911325][ T9935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.911352][ T9935] RSP: 002b:00007f19e8387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 273.911379][ T9935] RAX: ffffffffffffffda RBX: 00007f19e7816090 RCX: 00007f19e759c819 [ 273.911399][ T9935] RDX: 0000000000000063 RSI: 00002000000001c0 RDI: 0000000000000009 [ 273.911417][ T9935] RBP: 00007f19e7632c91 R08: 0000000000000000 R09: 0000000000000000 [ 273.911434][ T9935] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 273.911451][ T9935] R13: 00007f19e7816128 R14: 00007f19e7816090 R15: 00007ffc6e796b58 [ 273.911488][ T9935] [ 274.406121][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.0.834'. [ 274.474977][ T9949] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 274.484474][ T9945] netlink: 'syz.0.834': attribute type 1 has an invalid length. [ 274.522869][ T9949] netlink: 342 bytes leftover after parsing attributes in process `syz.0.834'. [ 274.537106][ T9945] netlink: 342 bytes leftover after parsing attributes in process `syz.0.834'. [ 275.289561][ T9996] futex_wake_op: syz.3.836 tries to shift op by -2048; fix this program [ 275.317931][ T9996] futex_wake_op: syz.3.836 tries to shift op by -2048; fix this program [ 275.381422][ T9996] 0x000000000001-0x000000020000 : "" [ 275.426577][ T9996] ftl_cs: FTL header corrupt! [ 275.944561][ T9991] kexec: Could not allocate control_code_buffer [ 277.749344][T10118] FAULT_INJECTION: forcing a failure. [ 277.749344][T10118] name failslab, interval 1, probability 0, space 0, times 0 [ 277.763061][T10118] CPU: 0 UID: 0 PID: 10118 Comm: syz.1.847 Tainted: G I syzkaller #0 PREEMPT(full) [ 277.763110][T10118] Tainted: [I]=FIRMWARE_WORKAROUND [ 277.763122][T10118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 277.763138][T10118] Call Trace: [ 277.763147][T10118] [ 277.763158][T10118] dump_stack_lvl+0x100/0x190 [ 277.763211][T10118] should_fail_ex.cold+0x5/0xa [ 277.763245][T10118] should_failslab+0xc2/0x120 [ 277.763279][T10118] __kmalloc_cache_noprof+0x7a/0x6f0 [ 277.763318][T10118] ? tipc_nametbl_insert_publ+0x5a/0x1570 [ 277.763360][T10118] tipc_nametbl_insert_publ+0x5a/0x1570 [ 277.763395][T10118] ? do_raw_spin_lock+0x128/0x260 [ 277.763438][T10118] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 277.763499][T10118] tipc_nametbl_publish+0x137/0x260 [ 277.763539][T10118] tipc_sk_publish+0x1d8/0x430 [ 277.763575][T10118] ? __pfx_tipc_sk_publish+0x10/0x10 [ 277.763613][T10118] ? __local_bh_enable_ip+0x9e/0x120 [ 277.763647][T10118] tipc_sk_bind+0x16f/0x380 [ 277.763683][T10118] tipc_bind+0x18d/0x280 [ 277.763719][T10118] __sys_bind+0x1a9/0x260 [ 277.763760][T10118] ? __pfx___sys_bind+0x10/0x10 [ 277.763824][T10118] __x64_sys_bind+0x72/0xb0 [ 277.763861][T10118] ? lockdep_hardirqs_on+0x78/0x100 [ 277.763891][T10118] do_syscall_64+0x106/0xf80 [ 277.763919][T10118] ? clear_bhb_loop+0x40/0x90 [ 277.763954][T10118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.763984][T10118] RIP: 0033:0x7f19e759c819 [ 277.764008][T10118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.764037][T10118] RSP: 002b:00007f19e83a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 277.764065][T10118] RAX: ffffffffffffffda RBX: 00007f19e7815fa0 RCX: 00007f19e759c819 [ 277.764084][T10118] RDX: 0000000000000066 RSI: 0000200000000040 RDI: 0000000000000002 [ 277.764102][T10118] RBP: 00007f19e7632c91 R08: 0000000000000000 R09: 0000000000000000 [ 277.764120][T10118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.764137][T10118] R13: 00007f19e7816038 R14: 00007f19e7815fa0 R15: 00007ffc6e796b58 [ 277.764176][T10118] [ 278.322987][T10125] futex_wake_op: syz.1.849 tries to shift op by -2048; fix this program [ 278.331717][T10125] futex_wake_op: syz.1.849 tries to shift op by -2048; fix this program [ 278.465581][T10133] 0x000000000001-0x000000020000 : "" [ 278.625985][T10133] ftl_cs: FTL header corrupt! [ 280.467058][T10225] futex_wake_op: syz.1.855 tries to shift op by -2048; fix this program [ 280.481030][T10225] futex_wake_op: syz.1.855 tries to shift op by -2048; fix this program [ 280.531597][T10225] 0x000000000001-0x000000020000 : "" [ 280.594784][T10225] ftl_cs: FTL header corrupt! [ 281.144623][T10266] futex_wake_op: syz.3.856 tries to shift op by -2048; fix this program [ 281.179606][T10266] futex_wake_op: syz.3.856 tries to shift op by -2048; fix this program [ 281.265762][T10266] 0x000000000001-0x000000020000 : "" [ 281.359590][T10266] ftl_cs: FTL header corrupt! [ 282.770728][ T5834] Bluetooth: hci2: unexpected event 0x01 length: 124 > 1 [ 283.140330][T10391] futex_wake_op: syz.1.862 tries to shift op by -2048; fix this program [ 283.190286][T10391] futex_wake_op: syz.1.862 tries to shift op by -2048; fix this program [ 283.217718][T10391] 0x000000000001-0x000000020000 : "" [ 283.306579][T10391] ftl_cs: FTL header corrupt! [ 283.698565][T10418] FAULT_INJECTION: forcing a failure. [ 283.698565][T10418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.742604][T10418] CPU: 0 UID: 0 PID: 10418 Comm: syz.2.864 Tainted: G I syzkaller #0 PREEMPT(full) [ 283.742646][T10418] Tainted: [I]=FIRMWARE_WORKAROUND [ 283.742654][T10418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 283.742667][T10418] Call Trace: [ 283.742676][T10418] [ 283.742685][T10418] dump_stack_lvl+0x100/0x190 [ 283.742731][T10418] should_fail_ex.cold+0x5/0xa [ 283.742764][T10418] _copy_to_user+0x32/0xd0 [ 283.742799][T10418] simple_read_from_buffer+0xcb/0x170 [ 283.742846][T10418] proc_fail_nth_read+0x1af/0x230 [ 283.742883][T10418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.742920][T10418] ? rw_verify_area+0xce/0x6d0 [ 283.742960][T10418] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.742996][T10418] vfs_read+0x1e4/0xb30 [ 283.743036][T10418] ? __pfx_vfs_read+0x10/0x10 [ 283.743062][T10418] ? __fget_files+0x215/0x3d0 [ 283.743099][T10418] ? __fget_files+0x21f/0x3d0 [ 283.743138][T10418] ksys_read+0x12a/0x250 [ 283.743165][T10418] ? __pfx_ksys_read+0x10/0x10 [ 283.743202][T10418] do_syscall_64+0x106/0xf80 [ 283.743230][T10418] ? clear_bhb_loop+0x40/0x90 [ 283.743264][T10418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.743294][T10418] RIP: 0033:0x7fbfc9f5d04e [ 283.743316][T10418] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 283.743342][T10418] RSP: 002b:00007fbfcaf07fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.743369][T10418] RAX: ffffffffffffffda RBX: 00007fbfcaf086c0 RCX: 00007fbfc9f5d04e [ 283.743388][T10418] RDX: 000000000000000f RSI: 00007fbfcaf080a0 RDI: 0000000000000002 [ 283.743404][T10418] RBP: 00007fbfcaf08090 R08: 0000000000000000 R09: 0000000000000000 [ 283.743421][T10418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.743438][T10418] R13: 00007fbfca216128 R14: 00007fbfca216090 R15: 00007ffc36e59ca8 [ 283.743476][T10418] [ 285.420253][T10520] FAULT_INJECTION: forcing a failure. [ 285.420253][T10520] name failslab, interval 1, probability 0, space 0, times 0 [ 285.450083][T10520] CPU: 0 UID: 0 PID: 10520 Comm: syz.3.871 Tainted: G I syzkaller #0 PREEMPT(full) [ 285.450117][T10520] Tainted: [I]=FIRMWARE_WORKAROUND [ 285.450123][T10520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 285.450132][T10520] Call Trace: [ 285.450138][T10520] [ 285.450144][T10520] dump_stack_lvl+0x100/0x190 [ 285.450173][T10520] should_fail_ex.cold+0x5/0xa [ 285.450191][T10520] ? tomoyo_realpath_from_path+0xb6/0x690 [ 285.450213][T10520] should_failslab+0xc2/0x120 [ 285.450230][T10520] __kmalloc_noprof+0xe0/0x850 [ 285.450258][T10520] tomoyo_realpath_from_path+0xb6/0x690 [ 285.450284][T10520] tomoyo_path_number_perm+0x23c/0x580 [ 285.450302][T10520] ? tomoyo_path_number_perm+0x22e/0x580 [ 285.450321][T10520] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 285.450359][T10520] ? find_held_lock+0x2b/0x80 [ 285.450373][T10520] ? current_check_access_path+0x281/0x460 [ 285.450395][T10520] ? __pfx_current_check_access_path+0x10/0x10 [ 285.450416][T10520] ? d_alloc_parallel+0x864/0x14e0 [ 285.450442][T10520] tomoyo_path_mknod+0x164/0x190 [ 285.450456][T10520] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 285.450469][T10520] ? find_held_lock+0x2b/0x80 [ 285.450484][T10520] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 285.450503][T10520] security_path_mknod+0x161/0x300 [ 285.450533][T10520] may_o_create+0x30/0x3a0 [ 285.450558][T10520] lookup_open.isra.0+0xa0d/0x11b0 [ 285.450587][T10520] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 285.450613][T10520] ? __pfx___might_resched+0x10/0x10 [ 285.450635][T10520] ? mnt_get_write_access+0x52/0x2f0 [ 285.450659][T10520] ? __pfx_down_write+0x10/0x10 [ 285.450675][T10520] ? mnt_get_write_access+0x1e9/0x2f0 [ 285.450699][T10520] path_openat+0x2291/0x31a0 [ 285.450718][T10520] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 285.450737][T10520] ? __pfx_path_openat+0x10/0x10 [ 285.450761][T10520] do_file_open+0x20e/0x430 [ 285.450782][T10520] ? __pfx_do_file_open+0x10/0x10 [ 285.450826][T10520] ? _raw_spin_unlock+0x28/0x50 [ 285.450864][T10520] ? alloc_fd+0x476/0x790 [ 285.450901][T10520] do_sys_openat2+0x10d/0x1e0 [ 285.450937][T10520] ? __pfx_do_sys_openat2+0x10/0x10 [ 285.450989][T10520] __x64_sys_open+0xfe/0x1d0 [ 285.451029][T10520] ? __pfx___x64_sys_open+0x10/0x10 [ 285.451084][T10520] do_syscall_64+0x106/0xf80 [ 285.451113][T10520] ? clear_bhb_loop+0x40/0x90 [ 285.451147][T10520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 285.451178][T10520] RIP: 0033:0x7f007919c819 [ 285.451203][T10520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 285.451231][T10520] RSP: 002b:00007f0079f92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 285.451258][T10520] RAX: ffffffffffffffda RBX: 00007f0079416180 RCX: 00007f007919c819 [ 285.451278][T10520] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 285.451296][T10520] RBP: 00007f0079232c91 R08: 0000000000000000 R09: 0000000000000000 [ 285.451314][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 285.451332][T10520] R13: 00007f0079416218 R14: 00007f0079416180 R15: 00007fff6422b958 [ 285.451369][T10520] [ 285.773291][T10520] ERROR: Out of memory at tomoyo_realpath_from_path. [ 286.156996][T10513] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 286.197063][T10513] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 286.248486][T10513] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 286.280424][T10513] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 286.322287][T10513] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 287.554701][T10644] zswap: compressor not available [ 288.058980][T10670] ubi0: attaching mtd0 [ 288.125716][T10670] ubi0 error: ubi_attach_mtd_dev: bad VID header (63) or data offsets (127) [ 288.173474][ T5834] Bluetooth: hci0: command 0x0406 tx timeout [ 288.253434][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 288.259617][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 288.348281][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout syzkaller syzkaller login: [ 288.975069][T10701] nbd: must specify an index to disconnect [ 289.351731][T10718] netlink: zone id is out of range [ 289.382854][T10718] netlink: zone id is out of range [ 289.401713][T10718] netlink: zone id is out of range [ 289.454767][T10718] netlink: zone id is out of range [ 289.460059][T10718] netlink: zone id is out of range [ 289.543473][T10718] netlink: zone id is out of range [ 289.573139][T10718] netlink: zone id is out of range [ 289.659610][T10718] netlink: zone id is out of range [ 289.691495][T10718] netlink: zone id is out of range [ 289.770383][T10718] netlink: set zone limit has 8 unknown bytes [ 289.895568][T10735] FAULT_INJECTION: forcing a failure. [ 289.895568][T10735] name failslab, interval 1, probability 0, space 0, times 0 [ 290.014421][T10735] CPU: 0 UID: 0 PID: 10735 Comm: syz.2.884 Tainted: G I L syzkaller #0 PREEMPT(full) [ 290.014472][T10735] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 290.014488][T10735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 290.014506][T10735] Call Trace: [ 290.014514][T10735] [ 290.014525][T10735] dump_stack_lvl+0x100/0x190 [ 290.014575][T10735] should_fail_ex.cold+0x5/0xa [ 290.014614][T10735] ? tomoyo_realpath_from_path+0xb6/0x690 [ 290.014658][T10735] should_failslab+0xc2/0x120 [ 290.014689][T10735] __kmalloc_noprof+0xe0/0x850 [ 290.014742][T10735] tomoyo_realpath_from_path+0xb6/0x690 [ 290.014794][T10735] tomoyo_path_number_perm+0x23c/0x580 [ 290.014829][T10735] ? tomoyo_path_number_perm+0x22e/0x580 [ 290.014869][T10735] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 290.014908][T10735] ? find_held_lock+0x2b/0x80 [ 290.014971][T10735] ? find_held_lock+0x2b/0x80 [ 290.015002][T10735] ? current_check_access_path+0x281/0x460 [ 290.015055][T10735] ? __pfx_current_check_access_path+0x10/0x10 [ 290.015100][T10735] ? d_alloc_parallel+0x864/0x14e0 [ 290.015147][T10735] tomoyo_path_mknod+0x164/0x190 [ 290.015176][T10735] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 290.015202][T10735] ? find_held_lock+0x2b/0x80 [ 290.015232][T10735] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 290.015268][T10735] security_path_mknod+0x161/0x300 [ 290.015314][T10735] may_o_create+0x30/0x3a0 [ 290.015359][T10735] lookup_open.isra.0+0xa0d/0x11b0 [ 290.015411][T10735] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 290.015463][T10735] ? __pfx___might_resched+0x10/0x10 [ 290.015506][T10735] ? mnt_get_write_access+0x52/0x2f0 [ 290.015555][T10735] ? __pfx_down_write+0x10/0x10 [ 290.015588][T10735] ? mnt_get_write_access+0x1e9/0x2f0 [ 290.015635][T10735] path_openat+0x2291/0x31a0 [ 290.015672][T10735] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 290.015706][T10735] ? __pfx_path_openat+0x10/0x10 [ 290.015752][T10735] do_file_open+0x20e/0x430 [ 290.015787][T10735] ? __pfx_do_file_open+0x10/0x10 [ 290.015846][T10735] ? _raw_spin_unlock+0x28/0x50 [ 290.015888][T10735] ? alloc_fd+0x476/0x790 [ 290.015927][T10735] do_sys_openat2+0x10d/0x1e0 [ 290.015965][T10735] ? __pfx_do_sys_openat2+0x10/0x10 [ 290.016023][T10735] __x64_sys_open+0xfe/0x1d0 [ 290.016063][T10735] ? __pfx___x64_sys_open+0x10/0x10 [ 290.016113][T10735] do_syscall_64+0x106/0xf80 [ 290.016140][T10735] ? clear_bhb_loop+0x40/0x90 [ 290.016175][T10735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.016203][T10735] RIP: 0033:0x7fbfc9f9c819 [ 290.016227][T10735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 290.016254][T10735] RSP: 002b:00007fbfcaee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 290.016281][T10735] RAX: ffffffffffffffda RBX: 00007fbfca216180 RCX: 00007fbfc9f9c819 [ 290.016299][T10735] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 290.016318][T10735] RBP: 00007fbfca032c91 R08: 0000000000000000 R09: 0000000000000000 [ 290.016335][T10735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.016351][T10735] R13: 00007fbfca216218 R14: 00007fbfca216180 R15: 00007ffc36e59ca8 [ 290.016390][T10735] [ 290.342044][T10735] ERROR: Out of memory at tomoyo_realpath_from_path. [ 290.374450][ T5834] Bluetooth: hci3: command 0x0406 tx timeout [ 292.499016][T10831] FAULT_INJECTION: forcing a failure. [ 292.499016][T10831] name failslab, interval 1, probability 0, space 0, times 0 [ 292.535619][T10831] CPU: 1 UID: 0 PID: 10831 Comm: syz.0.892 Tainted: G I L syzkaller #0 PREEMPT(full) [ 292.535669][T10831] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 292.535681][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 292.535697][T10831] Call Trace: [ 292.535707][T10831] [ 292.535717][T10831] dump_stack_lvl+0x100/0x190 [ 292.535766][T10831] should_fail_ex.cold+0x5/0xa [ 292.535799][T10831] should_failslab+0xc2/0x120 [ 292.535830][T10831] __kmalloc_cache_noprof+0x7a/0x6f0 [ 292.535869][T10831] ? io_wq_create+0x6a/0x9a0 [ 292.535914][T10831] io_wq_create+0x6a/0x9a0 [ 292.535955][T10831] io_uring_alloc_task_context+0x2db/0x54b [ 292.536004][T10831] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 292.536051][T10831] ? alloc_file_pseudo+0x1a5/0x230 [ 292.536094][T10831] __io_uring_add_tctx_node.cold+0x10/0x195 [ 292.536139][T10831] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 292.536174][T10831] ? __anon_inode_getfile+0x17c/0x280 [ 292.536212][T10831] io_uring_setup.cold+0x1a83/0x1d79 [ 292.536260][T10831] ? __pfx_io_uring_setup+0x10/0x10 [ 292.536307][T10831] ? __pfx_do_futex+0x10/0x10 [ 292.536360][T10831] ? xfd_validate_state+0x129/0x190 [ 292.536408][T10831] __x64_sys_io_uring_setup+0xc2/0x170 [ 292.536448][T10831] do_syscall_64+0x106/0xf80 [ 292.536477][T10831] ? clear_bhb_loop+0x40/0x90 [ 292.536511][T10831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.536538][T10831] RIP: 0033:0x7feb81b9c819 [ 292.536561][T10831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.536587][T10831] RSP: 002b:00007feb82a48028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 292.536624][T10831] RAX: ffffffffffffffda RBX: 00007feb81e15fa0 RCX: 00007feb81b9c819 [ 292.536643][T10831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 292.536660][T10831] RBP: 00007feb81c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 292.536677][T10831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.536694][T10831] R13: 00007feb81e16038 R14: 00007feb81e15fa0 R15: 00007ffc6fb012d8 [ 292.536732][T10831] [ 292.789391][T10834] Process accounting paused [ 294.787850][ T5834] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 295.693454][T10953] FAULT_INJECTION: forcing a failure. [ 295.693454][T10953] name fail_futex, interval 1, probability 0, space 0, times 0 [ 295.817415][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 295.907191][T10953] CPU: 1 UID: 0 PID: 10953 Comm: syz.0.900 Tainted: G I L syzkaller #0 PREEMPT(full) [ 295.907238][T10953] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 295.907249][T10953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 295.907261][T10953] Call Trace: [ 295.907267][T10953] [ 295.907273][T10953] dump_stack_lvl+0x100/0x190 [ 295.907309][T10953] should_fail_ex.cold+0x5/0xa [ 295.907329][T10953] get_futex_key+0x1d2/0x1620 [ 295.907350][T10953] ? __pfx_get_futex_key+0x10/0x10 [ 295.907371][T10953] ? is_bpf_text_address+0x94/0x1a0 [ 295.907395][T10953] ? kernel_text_address+0x8d/0x100 [ 295.907418][T10953] ? __kernel_text_address+0xd/0x30 [ 295.907439][T10953] ? unwind_get_return_address+0x59/0xa0 [ 295.907456][T10953] ? arch_stack_walk+0xa6/0xf0 [ 295.907473][T10953] futex_wait_setup+0x83/0x510 [ 295.907501][T10953] __futex_wait+0x19f/0x300 [ 295.907525][T10953] ? __pfx___futex_wait+0x10/0x10 [ 295.907554][T10953] ? __pfx_futex_wake_mark+0x10/0x10 [ 295.907579][T10953] ? futex_hash+0x2c5/0x380 [ 295.907601][T10953] futex_wait+0xed/0x380 [ 295.907624][T10953] ? __pfx_futex_wait+0x10/0x10 [ 295.907656][T10953] do_futex+0x1ef/0x350 [ 295.907676][T10953] ? __pfx_do_futex+0x10/0x10 [ 295.907700][T10953] __x64_sys_futex+0x34f/0x4d0 [ 295.907722][T10953] ? __pfx___x64_sys_futex+0x10/0x10 [ 295.907740][T10953] ? set_cred_ucounts+0x10f/0x200 [ 295.907769][T10953] do_syscall_64+0x106/0xf80 [ 295.907784][T10953] ? clear_bhb_loop+0x40/0x90 [ 295.907802][T10953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.907817][T10953] RIP: 0033:0x7feb81b9c819 [ 295.907831][T10953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.907845][T10953] RSP: 002b:00007feb82a480e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 295.907860][T10953] RAX: ffffffffffffffda RBX: 00007feb81e15fa8 RCX: 00007feb81b9c819 [ 295.907869][T10953] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007feb81e15fa8 [ 295.907878][T10953] RBP: 00007feb81e15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 295.907886][T10953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.907895][T10953] R13: 00007feb81e16038 R14: 00007ffc6fb011f0 R15: 00007ffc6fb012d8 [ 295.907914][T10953] [ 296.242290][T10934] program syz.2.899 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 297.019174][T10994] futex_wake_op: syz.0.902 tries to shift op by -2048; fix this program [ 297.058148][T10994] futex_wake_op: syz.0.902 tries to shift op by -2048; fix this program [ 297.089654][T10994] 0x000000000001-0x000000020000 : "" [ 297.107898][T10994] ftl_cs: FTL header corrupt! [ 299.635474][T11086] futex_wake_op: syz.2.907 tries to shift op by -2048; fix this program [ 299.660308][T11086] futex_wake_op: syz.2.907 tries to shift op by -2048; fix this program [ 299.670977][T11086] 0x000000000001-0x000000020000 : "" [ 299.758233][T11086] ftl_cs: FTL header corrupt! [ 300.694520][T11145] futex_wake_op: syz.0.910 tries to shift op by -2048; fix this program [ 300.725924][T11145] futex_wake_op: syz.0.910 tries to shift op by -2048; fix this program [ 300.763786][T11145] 0x000000000001-0x000000020000 : "" [ 300.835854][T11145] ftl_cs: FTL header corrupt! [ 301.592488][T11196] program syz.2.912 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 303.547370][T11363] futex_wake_op: syz.0.916 tries to shift op by -2048; fix this program [ 303.562795][T11363] 0x000000000001-0x000000020000 : "" [ 303.583876][T11363] ftl_cs: FTL header corrupt! [ 304.074412][T11402] futex_wake_op: syz.1.917 tries to shift op by -2048; fix this program [ 304.142257][T11402] futex_wake_op: syz.1.917 tries to shift op by -2048; fix this program [ 304.199449][T11405] 0x000000000001-0x000000020000 : "" [ 304.232193][T11405] ftl_cs: FTL header corrupt! [ 304.378179][T11415] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 304.838391][T11460] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 304.838391][T11460] M' is too long [ 304.897101][T11460] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 304.897101][T11460] W ' is too long [ 305.938268][T11517] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 305.982857][T11517] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 306.378677][T11528] futex_wake_op: syz.0.929 tries to shift op by -2048; fix this program [ 306.392736][T11528] futex_wake_op: syz.0.929 tries to shift op by -2048; fix this program [ 306.483580][T11528] 0x000000000001-0x000000020000 : "" [ 306.542827][T11528] ftl_cs: FTL header corrupt! [ 308.928514][T11629] Unable to find swap-space signature [ 309.473052][T11649] binder: 11643:11649 ioctl c0306201 2000000000c0 returned -14 [ 311.077832][ T51] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 311.085737][ T51] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 311.151626][ T5834] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 311.160674][ T5834] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 311.170099][ T5834] CPU: 1 UID: 0 PID: 5834 Comm: kworker/u9:5 Tainted: G I L syzkaller #0 PREEMPT(full) [ 311.170146][ T5834] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 311.170156][ T5834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 311.170181][ T5834] Workqueue: hci1 hci_rx_work [ 311.170221][ T5834] Call Trace: [ 311.170230][ T5834] [ 311.170239][ T5834] dump_stack_lvl+0x100/0x190 [ 311.170284][ T5834] sysfs_warn_dup.cold+0x1c/0x28 [ 311.170321][ T5834] sysfs_create_dir_ns+0x24b/0x2b0 [ 311.170369][ T5834] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 311.170449][ T5834] ? find_held_lock+0x2b/0x80 [ 311.170480][ T5834] ? kobject_add_internal+0x25f/0x930 [ 311.170518][ T5834] ? kobject_add_internal+0x25f/0x930 [ 311.170558][ T5834] ? do_raw_spin_unlock+0x145/0x1e0 [ 311.170607][ T5834] kobject_add_internal+0x2c8/0x930 [ 311.170649][ T5834] kobject_add+0x16a/0x1e0 [ 311.170682][ T5834] ? __pfx_kobject_add+0x10/0x10 [ 311.170713][ T5834] ? class_to_subsys+0x10f/0x150 [ 311.170758][ T5834] ? kobject_put+0xb9/0x640 [ 311.170789][ T5834] ? _raw_spin_unlock+0x28/0x50 [ 311.170842][ T5834] device_add+0x294/0x1950 [ 311.170879][ T5834] ? __pfx_dev_set_name+0x10/0x10 [ 311.170922][ T5834] ? __pfx_device_add+0x10/0x10 [ 311.170961][ T5834] ? mgmt_send_event_skb+0x2fb/0x460 [ 311.171012][ T5834] hci_conn_add_sysfs+0x1a3/0x260 [ 311.171060][ T5834] le_conn_complete_evt+0x11eb/0x1f60 [ 311.171111][ T5834] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 311.171149][ T5834] ? __pfx_bt_warn+0x10/0x10 [ 311.171191][ T5834] hci_le_conn_complete_evt+0x23c/0x3a0 [ 311.171234][ T5834] ? skb_pull_data+0x15f/0x1e0 [ 311.171274][ T5834] hci_le_meta_evt+0x34a/0x5f0 [ 311.171319][ T5834] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 311.171366][ T5834] hci_event_packet+0x51c/0xcd0 [ 311.171414][ T5834] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 311.171459][ T5834] ? __pfx_hci_event_packet+0x10/0x10 [ 311.171506][ T5834] ? kcov_remote_start+0x374/0x660 [ 311.171535][ T5834] ? lockdep_hardirqs_on+0x78/0x100 [ 311.171572][ T5834] hci_rx_work+0x451/0xfc0 [ 311.171619][ T5834] process_one_work+0xa23/0x19a0 [ 311.171676][ T5834] ? __pfx_process_one_work+0x10/0x10 [ 311.171729][ T5834] ? __pfx_hci_rx_work+0x10/0x10 [ 311.171772][ T5834] worker_thread+0x5ef/0xe50 [ 311.171826][ T5834] ? kthread+0x13a/0x450 [ 311.171861][ T5834] ? __pfx_worker_thread+0x10/0x10 [ 311.171899][ T5834] kthread+0x370/0x450 [ 311.171936][ T5834] ? __pfx_kthread+0x10/0x10 [ 311.171976][ T5834] ret_from_fork+0x754/0xd80 [ 311.172021][ T5834] ? __pfx_ret_from_fork+0x10/0x10 [ 311.172067][ T5834] ? __switch_to+0x7b4/0x1120 [ 311.172100][ T5834] ? __pfx_kthread+0x10/0x10 [ 311.172138][ T5834] ret_from_fork_asm+0x1a/0x30 [ 311.172192][ T5834] [ 311.172228][ T5834] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 311.455475][ T5834] Bluetooth: hci1: failed to register connection device [ 313.082961][T11886] FAULT_INJECTION: forcing a failure. [ 313.082961][T11886] name failslab, interval 1, probability 0, space 0, times 0 [ 313.114133][T11886] CPU: 1 UID: 0 PID: 11886 Comm: syz.1.946 Tainted: G I L syzkaller #0 PREEMPT(full) [ 313.114181][T11886] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 313.114192][T11886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 313.114207][T11886] Call Trace: [ 313.114216][T11886] [ 313.114225][T11886] dump_stack_lvl+0x100/0x190 [ 313.114272][T11886] should_fail_ex.cold+0x5/0xa [ 313.114305][T11886] should_failslab+0xc2/0x120 [ 313.114338][T11886] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 313.114383][T11886] ? __d_alloc+0x34/0xa80 [ 313.114415][T11886] ? __pfx_stack_trace_save+0x10/0x10 [ 313.114451][T11886] __d_alloc+0x34/0xa80 [ 313.114489][T11886] d_alloc_parallel+0x111/0x14e0 [ 313.114545][T11886] ? find_held_lock+0x2b/0x80 [ 313.114573][T11886] ? __d_lookup+0x25c/0x4a0 [ 313.114615][T11886] ? __pfx_d_alloc_parallel+0x10/0x10 [ 313.114663][T11886] ? __d_lookup+0x266/0x4a0 [ 313.114714][T11886] lookup_open.isra.0+0x57c/0x11b0 [ 313.114767][T11886] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 313.114819][T11886] ? __pfx___might_resched+0x10/0x10 [ 313.114862][T11886] ? mnt_get_write_access+0x52/0x2f0 [ 313.114910][T11886] ? __pfx_down_write+0x10/0x10 [ 313.114943][T11886] ? mnt_get_write_access+0x1e9/0x2f0 [ 313.114990][T11886] path_openat+0x2291/0x31a0 [ 313.115027][T11886] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 313.115069][T11886] ? __pfx_path_openat+0x10/0x10 [ 313.115115][T11886] do_file_open+0x20e/0x430 [ 313.115152][T11886] ? __pfx_do_file_open+0x10/0x10 [ 313.115207][T11886] ? _raw_spin_unlock+0x28/0x50 [ 313.115245][T11886] ? alloc_fd+0x476/0x790 [ 313.115283][T11886] do_sys_openat2+0x10d/0x1e0 [ 313.115321][T11886] ? __pfx_do_sys_openat2+0x10/0x10 [ 313.115374][T11886] __x64_sys_open+0xfe/0x1d0 [ 313.115411][T11886] ? __pfx___x64_sys_open+0x10/0x10 [ 313.115465][T11886] do_syscall_64+0x106/0xf80 [ 313.115491][T11886] ? clear_bhb_loop+0x40/0x90 [ 313.115525][T11886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.115555][T11886] RIP: 0033:0x7f19e759c819 [ 313.115578][T11886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.115606][T11886] RSP: 002b:00007f19e57f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 313.115635][T11886] RAX: ffffffffffffffda RBX: 00007f19e7816180 RCX: 00007f19e759c819 [ 313.115654][T11886] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 313.115672][T11886] RBP: 00007f19e7632c91 R08: 0000000000000000 R09: 0000000000000000 [ 313.115688][T11886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.115705][T11886] R13: 00007f19e7816218 R14: 00007f19e7816180 R15: 00007ffc6e796b58 [ 313.115737][T11886] [ 313.465993][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 313.893497][T11916] futex_wake_op: syz.3.948 tries to shift op by -2048; fix this program [ 313.906261][T11916] futex_wake_op: syz.3.948 tries to shift op by -2048; fix this program [ 314.001400][T11936] futex_wake_op: syz.1.950 tries to shift op by -2048; fix this program [ 314.044915][T11936] futex_wake_op: syz.1.950 tries to shift op by -2048; fix this program [ 314.076060][T11936] 0x000000000001-0x000000020000 : "" [ 314.131216][T11936] ftl_cs: FTL header corrupt! [ 314.164693][T11946] FAULT_INJECTION: forcing a failure. [ 314.164693][T11946] name failslab, interval 1, probability 0, space 0, times 0 [ 314.250348][T11946] CPU: 0 UID: 0 PID: 11946 Comm: syz.2.949 Tainted: G I L syzkaller #0 PREEMPT(full) [ 314.250402][T11946] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 314.250415][T11946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 314.250433][T11946] Call Trace: [ 314.250443][T11946] [ 314.250454][T11946] dump_stack_lvl+0x100/0x190 [ 314.250506][T11946] should_fail_ex.cold+0x5/0xa [ 314.250541][T11946] ? tomoyo_realpath_from_path+0xb6/0x690 [ 314.250582][T11946] should_failslab+0xc2/0x120 [ 314.250616][T11946] __kmalloc_noprof+0xe0/0x850 [ 314.250670][T11946] tomoyo_realpath_from_path+0xb6/0x690 [ 314.250721][T11946] tomoyo_path_number_perm+0x23c/0x580 [ 314.250756][T11946] ? tomoyo_path_number_perm+0x22e/0x580 [ 314.250795][T11946] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 314.250872][T11946] ? find_held_lock+0x2b/0x80 [ 314.250900][T11946] ? current_check_access_path+0x281/0x460 [ 314.250943][T11946] ? __pfx_current_check_access_path+0x10/0x10 [ 314.250987][T11946] ? d_alloc_parallel+0x864/0x14e0 [ 314.251049][T11946] tomoyo_path_mknod+0x164/0x190 [ 314.251078][T11946] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 314.251104][T11946] ? find_held_lock+0x2b/0x80 [ 314.251136][T11946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 314.251175][T11946] security_path_mknod+0x161/0x300 [ 314.251218][T11946] may_o_create+0x30/0x3a0 [ 314.251263][T11946] lookup_open.isra.0+0xa0d/0x11b0 [ 314.251316][T11946] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 314.251369][T11946] ? __pfx___might_resched+0x10/0x10 [ 314.251412][T11946] ? mnt_get_write_access+0x52/0x2f0 [ 314.251458][T11946] ? __pfx_down_write+0x10/0x10 [ 314.251490][T11946] ? mnt_get_write_access+0x1e9/0x2f0 [ 314.251532][T11946] path_openat+0x2291/0x31a0 [ 314.251569][T11946] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 314.251603][T11946] ? __pfx_path_openat+0x10/0x10 [ 314.251650][T11946] do_file_open+0x20e/0x430 [ 314.251686][T11946] ? __pfx_do_file_open+0x10/0x10 [ 314.251747][T11946] ? _raw_spin_unlock+0x28/0x50 [ 314.251790][T11946] ? alloc_fd+0x476/0x790 [ 314.251830][T11946] do_sys_openat2+0x10d/0x1e0 [ 314.251869][T11946] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.251921][T11946] __x64_sys_open+0xfe/0x1d0 [ 314.251955][T11946] ? __pfx___x64_sys_open+0x10/0x10 [ 314.252005][T11946] do_syscall_64+0x106/0xf80 [ 314.252042][T11946] ? clear_bhb_loop+0x40/0x90 [ 314.252078][T11946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.252108][T11946] RIP: 0033:0x7fbfc9f9c819 [ 314.252131][T11946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.252160][T11946] RSP: 002b:00007fbfcaee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 314.252186][T11946] RAX: ffffffffffffffda RBX: 00007fbfca216180 RCX: 00007fbfc9f9c819 [ 314.252205][T11946] RDX: 0000000000000156 RSI: 0000000000022240 RDI: 0000200000000800 [ 314.252221][T11946] RBP: 00007fbfca032c91 R08: 0000000000000000 R09: 0000000000000000 [ 314.252238][T11946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.252252][T11946] R13: 00007fbfca216218 R14: 00007fbfca216180 R15: 00007ffc36e59ca8 [ 314.252290][T11946] [ 314.252315][T11946] ERROR: Out of memory at tomoyo_realpath_from_path. [ 315.192208][T12001] FAULT_INJECTION: forcing a failure. [ 315.192208][T12001] name failslab, interval 1, probability 0, space 0, times 0 [ 315.206557][T12001] CPU: 0 UID: 0 PID: 12001 Comm: syz.3.954 Tainted: G I L syzkaller #0 PREEMPT(full) [ 315.206587][T12001] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 315.206594][T12001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 315.206604][T12001] Call Trace: [ 315.206611][T12001] [ 315.206618][T12001] dump_stack_lvl+0x100/0x190 [ 315.206646][T12001] should_fail_ex.cold+0x5/0xa [ 315.206666][T12001] should_failslab+0xc2/0x120 [ 315.206684][T12001] __kmalloc_cache_noprof+0x7a/0x6f0 [ 315.206704][T12001] ? sc_common_open+0x46/0x200 [ 315.206724][T12001] ? __pfx___debugfs_file_get+0x10/0x10 [ 315.206745][T12001] ? find_held_lock+0x2b/0x80 [ 315.206777][T12001] ? __pfx_stats_fop_open+0x10/0x10 [ 315.206808][T12001] sc_common_open+0x46/0x200 [ 315.206854][T12001] full_proxy_open_regular+0x1b6/0x370 [ 315.206872][T12001] do_dentry_open+0x6d8/0x1660 [ 315.206888][T12001] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 315.206911][T12001] vfs_open+0x82/0x3f0 [ 315.206933][T12001] path_openat+0x208c/0x31a0 [ 315.206955][T12001] ? __pfx_path_openat+0x10/0x10 [ 315.206978][T12001] do_file_open+0x20e/0x430 [ 315.206996][T12001] ? __pfx_do_file_open+0x10/0x10 [ 315.207026][T12001] ? alloc_fd+0x476/0x790 [ 315.207045][T12001] ? do_getname+0x191/0x390 [ 315.207081][T12001] do_sys_openat2+0x10d/0x1e0 [ 315.207115][T12001] ? __pfx_do_sys_openat2+0x10/0x10 [ 315.207160][T12001] ? __fget_files+0x21f/0x3d0 [ 315.207183][T12001] __x64_sys_openat+0x12d/0x210 [ 315.207206][T12001] ? __pfx___x64_sys_openat+0x10/0x10 [ 315.207235][T12001] do_syscall_64+0x106/0xf80 [ 315.207250][T12001] ? clear_bhb_loop+0x40/0x90 [ 315.207269][T12001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.207285][T12001] RIP: 0033:0x7f007919c819 [ 315.207299][T12001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.207313][T12001] RSP: 002b:00007f0079fd4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 315.207328][T12001] RAX: ffffffffffffffda RBX: 00007f0079415fa0 RCX: 00007f007919c819 [ 315.207339][T12001] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 315.207349][T12001] RBP: 00007f0079232c91 R08: 0000000000000000 R09: 0000000000000000 [ 315.207358][T12001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.207367][T12001] R13: 00007f0079416038 R14: 00007f0079415fa0 R15: 00007fff6422b958 [ 315.207387][T12001] [ 315.549436][ T5834] Bluetooth: hci1: command 0x0c1a tx timeout [ 316.495646][T12062] FAULT_INJECTION: forcing a failure. [ 316.495646][T12062] name fail_futex, interval 1, probability 0, space 0, times 0 [ 316.518126][T12062] CPU: 0 UID: 8 PID: 12062 Comm: syz.1.958 Tainted: G I L syzkaller #0 PREEMPT(full) [ 316.518174][T12062] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 316.518185][T12062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 316.518203][T12062] Call Trace: [ 316.518212][T12062] [ 316.518223][T12062] dump_stack_lvl+0x100/0x190 [ 316.518273][T12062] should_fail_ex.cold+0x5/0xa [ 316.518307][T12062] get_futex_key+0x1d2/0x1620 [ 316.518347][T12062] ? __pfx_get_futex_key+0x10/0x10 [ 316.518397][T12062] futex_wait_setup+0x83/0x510 [ 316.518451][T12062] __futex_wait+0x19f/0x300 [ 316.518499][T12062] ? __pfx___futex_wait+0x10/0x10 [ 316.518545][T12062] ? __pfx_futex_wake_mark+0x10/0x10 [ 316.518589][T12062] ? futex_hash+0x2c5/0x380 [ 316.518640][T12062] futex_wait+0xed/0x380 [ 316.518681][T12062] ? __pfx_futex_wait+0x10/0x10 [ 316.518742][T12062] do_futex+0x1ef/0x350 [ 316.518781][T12062] ? __pfx_do_futex+0x10/0x10 [ 316.518817][T12062] ? do_raw_spin_lock+0x128/0x260 [ 316.518858][T12062] ? find_held_lock+0x2b/0x80 [ 316.518886][T12062] ? __x64_sys_close_range+0x2d9/0x5d0 [ 316.518934][T12062] __x64_sys_futex+0x34f/0x4d0 [ 316.518978][T12062] ? __pfx___x64_sys_futex+0x10/0x10 [ 316.519029][T12062] do_syscall_64+0x106/0xf80 [ 316.519059][T12062] ? clear_bhb_loop+0x40/0x90 [ 316.519095][T12062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.519124][T12062] RIP: 0033:0x7f19e759c819 [ 316.519149][T12062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 316.519178][T12062] RSP: 002b:00007f19e57f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 316.519206][T12062] RAX: ffffffffffffffda RBX: 00007f19e7816188 RCX: 00007f19e759c819 [ 316.519226][T12062] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f19e7816188 [ 316.519244][T12062] RBP: 00007f19e7816180 R08: 0000000000000000 R09: 0000000000000000 [ 316.519261][T12062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.519278][T12062] R13: 00007f19e7816218 R14: 00007ffc6e796a70 R15: 00007ffc6e796b58 [ 316.519316][T12062] [ 316.524931][T12065] binder: 12056:12065 ioctl 400c620e 2000000001c0 returned -22 [ 317.313320][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.328008][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.533840][T12138] futex_wake_op: syz.3.963 tries to shift op by -2048; fix this program [ 317.588999][T12138] futex_wake_op: syz.3.963 tries to shift op by -2048; fix this program [ 317.645350][T12144] 0x000000000001-0x000000020000 : "" [ 317.760559][T12144] ftl_cs: FTL header corrupt! [ 318.035977][T12123] ================================================================== [ 318.035996][T12123] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 318.036025][T12123] Write of size 8 at addr ffffc90003fb96e0 by task syz.0.962/12123 [ 318.036038][T12123] [ 318.036048][T12123] CPU: 0 UID: 0 PID: 12123 Comm: syz.0.962 Tainted: G I L syzkaller #0 PREEMPT(full) [ 318.036070][T12123] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 318.036077][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 318.036085][T12123] Call Trace: [ 318.036093][T12123] [ 318.036101][T12123] dump_stack_lvl+0x100/0x190 [ 318.036139][T12123] print_report+0x156/0x4c9 [ 318.036174][T12123] ? _raw_spin_lock_irqsave+0x52/0x60 [ 318.036214][T12123] ? __virt_addr_valid+0x81/0x620 [ 318.036250][T12123] ? sys_imageblit+0x19fb/0x1d60 [ 318.036290][T12123] kasan_report+0xdf/0x1e0 [ 318.036321][T12123] ? sys_imageblit+0x19fb/0x1d60 [ 318.036366][T12123] sys_imageblit+0x19fb/0x1d60 [ 318.036409][T12123] ? __pfx_sys_imageblit+0x10/0x10 [ 318.036449][T12123] ? desc_read_finalized_seq+0x131/0x1d0 [ 318.036495][T12123] ? __asan_memcpy+0x3c/0x60 [ 318.036533][T12123] ? desc_read+0x2e1/0x380 [ 318.036568][T12123] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 318.036601][T12123] soft_cursor+0x524/0xa10 [ 318.036639][T12123] ? fb_get_color_depth+0x120/0x250 [ 318.036673][T12123] bit_cursor+0xe58/0x16f0 [ 318.036711][T12123] ? __pfx_bit_cursor+0x10/0x10 [ 318.036749][T12123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.036779][T12123] ? get_color+0x1da/0x450 [ 318.036806][T12123] ? __pfx_bit_cursor+0x10/0x10 [ 318.036844][T12123] fbcon_cursor+0x43c/0x5e0 [ 318.036874][T12123] ? mark_lock+0x9f0/0xa20 [ 318.036907][T12123] hide_cursor+0x87/0x230 [ 318.036942][T12123] do_con_write+0x23fe/0x8540 [ 318.036966][T12123] ? __lock_acquire+0x4a5/0x2630 [ 318.037006][T12123] ? lock_acquire+0x1cf/0x380 [ 318.037038][T12123] ? __pfx_do_con_write+0x10/0x10 [ 318.037052][T12123] ? rcu_is_watching+0x12/0xc0 [ 318.037075][T12123] ? trace_contention_end+0x140/0x180 [ 318.037096][T12123] ? __mutex_lock+0x26a/0x1b90 [ 318.037112][T12123] ? __pfx_con_put_char+0x10/0x10 [ 318.037125][T12123] con_put_char+0x73/0xa0 [ 318.037137][T12123] ? __pfx_con_put_char+0x10/0x10 [ 318.037150][T12123] ? __pfx___mutex_lock+0x10/0x10 [ 318.037165][T12123] ? __mutex_unlock_slowpath+0x15c/0x790 [ 318.037181][T12123] tty_put_char+0xbe/0x160 [ 318.037200][T12123] ? __pfx_tty_put_char+0x10/0x10 [ 318.037218][T12123] ? mark_held_locks+0x40/0x70 [ 318.037236][T12123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.037251][T12123] do_output_char+0x155/0x850 [ 318.037268][T12123] n_tty_write+0x528/0x12d0 [ 318.037288][T12123] ? __pfx_n_tty_write+0x10/0x10 [ 318.037305][T12123] ? __pfx_woken_wake_function+0x10/0x10 [ 318.037328][T12123] ? __pfx___might_resched+0x10/0x10 [ 318.037350][T12123] ? __pfx_n_tty_write+0x10/0x10 [ 318.037366][T12123] file_tty_write.isra.0+0x4d2/0x890 [ 318.037391][T12123] redirected_tty_write+0xd4/0x120 [ 318.037414][T12123] vfs_write+0x6ac/0x1070 [ 318.037428][T12123] ? __pfx_redirected_tty_write+0x10/0x10 [ 318.037452][T12123] ? __pfx_vfs_write+0x10/0x10 [ 318.037465][T12123] ? find_held_lock+0x2b/0x80 [ 318.037484][T12123] ksys_write+0x12a/0x250 [ 318.037504][T12123] ? __pfx_ksys_write+0x10/0x10 [ 318.037520][T12123] do_syscall_64+0x106/0xf80 [ 318.037534][T12123] ? clear_bhb_loop+0x40/0x90 [ 318.037550][T12123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.037565][T12123] RIP: 0033:0x7feb81b9c819 [ 318.037577][T12123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.037592][T12123] RSP: 002b:00007feb82a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.037606][T12123] RAX: ffffffffffffffda RBX: 00007feb81e16180 RCX: 00007feb81b9c819 [ 318.037616][T12123] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000f [ 318.037626][T12123] RBP: 00007feb81c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 318.037635][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.037643][T12123] R13: 00007feb81e16218 R14: 00007feb81e16180 R15: 00007ffc6fb012d8 [ 318.037657][T12123] [ 318.037662][T12123] [ 318.037666][T12123] The buggy address belongs to a vmalloc virtual mapping [ 318.037677][T12123] Memory state around the buggy address: [ 318.037685][T12123] ffffc90003fb9580: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 318.037701][T12123] ffffc90003fb9600: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 318.037710][T12123] >ffffc90003fb9680: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 318.037718][T12123] ^ [ 318.037727][T12123] ffffc90003fb9700: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 318.037737][T12123] ffffc90003fb9780: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 318.037747][T12123] ================================================================== [ 318.040623][T12123] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 318.040649][T12123] CPU: 0 UID: 0 PID: 12123 Comm: syz.0.962 Tainted: G I L syzkaller #0 PREEMPT(full) [ 318.040683][T12123] Tainted: [I]=FIRMWARE_WORKAROUND, [L]=SOFTLOCKUP [ 318.040689][T12123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 318.040698][T12123] Call Trace: [ 318.040703][T12123] [ 318.040709][T12123] dump_stack_lvl+0x100/0x190 [ 318.040734][T12123] vpanic+0x552/0x970 [ 318.040755][T12123] ? __pfx_vpanic+0x10/0x10 [ 318.040779][T12123] ? sys_imageblit+0x19fb/0x1d60 [ 318.040801][T12123] panic+0xd1/0xe0 [ 318.040814][T12123] ? __pfx_panic+0x10/0x10 [ 318.040828][T12123] ? sys_imageblit+0x19fb/0x1d60 [ 318.040850][T12123] ? preempt_schedule_common+0x42/0xc0 [ 318.040879][T12123] ? check_panic_on_warn+0x1f/0x90 [ 318.040902][T12123] check_panic_on_warn.cold+0x19/0x34 [ 318.040917][T12123] end_report.part.0+0x3a/0x90 [ 318.040940][T12123] kasan_report.cold+0xe/0x18 [ 318.040961][T12123] ? sys_imageblit+0x19fb/0x1d60 [ 318.040988][T12123] sys_imageblit+0x19fb/0x1d60 [ 318.041013][T12123] ? __pfx_sys_imageblit+0x10/0x10 [ 318.041034][T12123] ? desc_read_finalized_seq+0x131/0x1d0 [ 318.041054][T12123] ? __asan_memcpy+0x3c/0x60 [ 318.041075][T12123] ? desc_read+0x2e1/0x380 [ 318.041094][T12123] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 318.041112][T12123] soft_cursor+0x524/0xa10 [ 318.041133][T12123] ? fb_get_color_depth+0x120/0x250 [ 318.041151][T12123] bit_cursor+0xe58/0x16f0 [ 318.041171][T12123] ? __pfx_bit_cursor+0x10/0x10 [ 318.041192][T12123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.041208][T12123] ? get_color+0x1da/0x450 [ 318.041223][T12123] ? __pfx_bit_cursor+0x10/0x10 [ 318.041241][T12123] fbcon_cursor+0x43c/0x5e0 [ 318.041257][T12123] ? mark_lock+0x9f0/0xa20 [ 318.041276][T12123] hide_cursor+0x87/0x230 [ 318.041296][T12123] do_con_write+0x23fe/0x8540 [ 318.041309][T12123] ? __lock_acquire+0x4a5/0x2630 [ 318.041330][T12123] ? lock_acquire+0x1cf/0x380 [ 318.041349][T12123] ? __pfx_do_con_write+0x10/0x10 [ 318.041362][T12123] ? rcu_is_watching+0x12/0xc0 [ 318.041385][T12123] ? trace_contention_end+0x140/0x180 [ 318.041406][T12123] ? __mutex_lock+0x26a/0x1b90 [ 318.041421][T12123] ? __pfx_con_put_char+0x10/0x10 [ 318.041434][T12123] con_put_char+0x73/0xa0 [ 318.041447][T12123] ? __pfx_con_put_char+0x10/0x10 [ 318.041460][T12123] ? __pfx___mutex_lock+0x10/0x10 [ 318.041475][T12123] ? __mutex_unlock_slowpath+0x15c/0x790 [ 318.041501][T12123] tty_put_char+0xbe/0x160 [ 318.041521][T12123] ? __pfx_tty_put_char+0x10/0x10 [ 318.041540][T12123] ? mark_held_locks+0x40/0x70 [ 318.041558][T12123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 318.041573][T12123] do_output_char+0x155/0x850 [ 318.041589][T12123] n_tty_write+0x528/0x12d0 [ 318.041609][T12123] ? __pfx_n_tty_write+0x10/0x10 [ 318.041626][T12123] ? __pfx_woken_wake_function+0x10/0x10 [ 318.041650][T12123] ? __pfx___might_resched+0x10/0x10 [ 318.041677][T12123] ? __pfx_n_tty_write+0x10/0x10 [ 318.041707][T12123] file_tty_write.isra.0+0x4d2/0x890 [ 318.041751][T12123] redirected_tty_write+0xd4/0x120 [ 318.041780][T12123] vfs_write+0x6ac/0x1070 [ 318.041795][T12123] ? __pfx_redirected_tty_write+0x10/0x10 [ 318.041819][T12123] ? __pfx_vfs_write+0x10/0x10 [ 318.041831][T12123] ? find_held_lock+0x2b/0x80 [ 318.041850][T12123] ksys_write+0x12a/0x250 [ 318.041865][T12123] ? __pfx_ksys_write+0x10/0x10 [ 318.041881][T12123] do_syscall_64+0x106/0xf80 [ 318.041895][T12123] ? clear_bhb_loop+0x40/0x90 [ 318.041912][T12123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.041927][T12123] RIP: 0033:0x7feb81b9c819 [ 318.041939][T12123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.041954][T12123] RSP: 002b:00007feb82a06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.041969][T12123] RAX: ffffffffffffffda RBX: 00007feb81e16180 RCX: 00007feb81b9c819 [ 318.041979][T12123] RDX: 000000000000fdef RSI: 0000200000000000 RDI: 000000000000000f [ 318.041988][T12123] RBP: 00007feb81c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 318.041997][T12123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.042006][T12123] R13: 00007feb81e16218 R14: 00007feb81e16180 R15: 00007ffc6fb012d8 [ 318.042020][T12123] [ 318.042373][T12123] Kernel Offset: disabled