last executing test programs: 7.810796587s ago: executing program 3 (id=882): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0xe8, 0x10004) map_shadow_stack$auto(0x40, 0x7, 0x1ff) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop2\x00', 0x24040, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002a40), r2) sendmsg$auto_NFSD_CMD_LISTENER_SET(r2, &(0x7f00000050c0)={0x0, 0x5c1e, &(0x7f0000005080)={&(0x7f0000002a80)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008050) ioctl$auto_BLKTRACESETUP(r1, 0xc0481273, 0x0) shmctl$auto_SHM_INFO(0x67, 0xe, 0x0) stat$auto(0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/o2cb/logmask/ERROR\x00', 0x183042, 0x0) sendfile$auto(r4, r4, 0x0, 0x8000) setfsuid$auto(0x0) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_RADIO(r0, &(0x7f00000025c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002580)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40010) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) 7.405163773s ago: executing program 3 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB="00048910", @ANYRES16=r1, @ANYBLOB="01002bbd7000fbdbdf258c000000"], 0x14}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) 7.164387176s ago: executing program 3 (id=888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000180), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="013ad7fac400f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004866520008000200", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/kexec_crash_loaded\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/140, 0x8c) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/adsp1\x00', 0x2, 0x0) prctl$auto(0x23, 0x9, 0x2008, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER2(r3, 0x80044df9, &(0x7f0000000380)="9d1762cbb7829f8d3fb18591b084d80d92343101f817b4a6e9a9877102c77979621afb68e30cd1a743be112689b11bd27219201d82d566ff59d1b9f5e0eb4d") mmap$auto(0xc8, 0xe2, 0x0, 0xeb1, r2, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) close_range$auto(r3, r2, 0xfffffffd) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48010}, 0x20004800) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone(0x20a08200, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x119280, 0x0) getpid() r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x101202, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c01, 0x0) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r8) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01032cb57000fbdbdf250a0000000500eaffffffffff0500010040020000"], 0x24}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0x78, r7, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x7}, @CTRL_ATTR_OP={0x8, 0xa, 0x2}, @CTRL_ATTR_OP={0x8, 0xa, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_NAME={0x6, 0x2, '%\x00'}, @CTRL_ATTR_OP={0x8, 0xa, 0x6}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x80}, @CTRL_ATTR_OP={0x8, 0xa, 0x7}, @CTRL_ATTR_FAMILY_NAME={0xd, 0x2, ':{}[](-@\x00'}, @CTRL_ATTR_FAMILY_NAME={0x11, 0x2, 'ovs_datapath\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4004}, 0x4000000) sendmsg$auto_OVS_DP_CMD_DEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0109080000000000002502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) 5.556718415s ago: executing program 3 (id=892): fanotify_init$auto(0x5, 0x2000000000002) open(&(0x7f0000000000)='.\x00', 0xc00, 0x409) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) r0 = getpid() process_vm_readv$auto(r0, 0x0, 0x800000000, 0x0, 0x6, 0x0) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x90200, 0x0) mmap$auto(0xfdfffffffffffffc, 0x2020009, 0xfffffffffffffe01, 0x90, 0xffffffffffffffff, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x17) socket$nl_generic(0x10, 0x3, 0x10) r1 = getpid() r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x0) fcntl$auto(0xffffffffffffffff, 0xfffff01e, r1) linkat$auto(r2, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000040)='./file0\x00', 0x3) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video67\x00', 0x8a240, 0x0) ioctl$auto(r3, 0x5646, r3) read$auto_v4l2_fops_v4l2_dev(r3, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0xfb}, 0x9, 0x0) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x18282, 0x0) read$auto(r4, 0x0, 0x39b8) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000080)=@enable_stats={0x7}, 0x6) mmap$auto(0x0, 0x4, 0x200020098, 0x11, 0xffffffffffffffff, 0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) getpid() 4.949097475s ago: executing program 1 (id=896): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f1ff27bd7000fedbdf251c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) 4.809322544s ago: executing program 1 (id=898): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffa, 0x8000000008011, r1, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000140)='/dev/binderfs/binder1\x00', 0x0, 0x0) ioctl$auto_BINDER_WRITE_READ(r2, 0xc0306201, 0x0) madvise$auto(0x0, 0x400053, 0x9) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x80102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mincore$auto(0x0, 0x5, 0x0) futex_wait$auto(0x0, 0x80000000, 0x21b1, 0x80, 0x0, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) unshare$auto(0x40000080) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0xc2f02, 0x0) mmap$auto(0xffffffffffffffff, 0x810000, 0xff8, 0x8000000008011, 0x3, 0x8000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x123002, 0x0) preadv2$auto(r3, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x18000000000000, 0x33) write$auto(r0, 0x0, 0x2) 4.270243764s ago: executing program 3 (id=901): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x2000000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, 0x0, 0x7, 0x4008) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7", 0x40000000001243}, 0x4, 0x0) socket(0x2a, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x6, 0x10, 0xf, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b3ce63f000000001000", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x4, 0x63f8}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x200000000003, 0x1ff, 0x3d7e, 0x4000, 0x1, 0x4}}, 0x96) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x8100, 0x0) 3.787309826s ago: executing program 3 (id=902): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r0, 0x0, 0xfffffdf1) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x101b00, 0x0) msgctl$auto_IPC_INFO(0x6, 0x3, 0x0) r1 = socket(0x2b, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) read$auto_vhci_fops_hci_vhci(r3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x1, 0x8, 0xffff, 0xc, 0x2, 0x2]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r1, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) r4 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/ns/cgroup\x00', 0x200000, 0x0) ioctl$auto_NS_GET_PID_IN_PIDNS(r4, 0x8004b708, &(0x7f0000000040)=0x7) write$auto(0x3, 0x0, 0x100082) fcntl$auto_F_ADD_SEALS(r0, 0x409, 0x9) linkat$auto(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) mprotect$auto(0x0, 0x8000000000000001, 0x8) 2.791675709s ago: executing program 1 (id=905): mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x21043, 0x0) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, 0x0, 0x101042, 0x0) socket(0x1d, 0x2, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) getsockopt$auto_SO_RCVPRIORITY(r1, 0x3, 0x52, &(0x7f00000000c0)='\xd8\x17\x05\v\x99W\xe2\xb7\x0e>\x98^\xbaelT0', &(0x7f0000000300)=0x4081) socketpair$auto(0x3d4, 0x7, 0x2, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/lapb0/napi_defer_hard_irqs\x00', 0x8a401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000001040)='/sys/kernel/debug/tracing/trace_marker_raw\x00', 0xc05, 0x0) writev$auto(r2, 0x0, 0x4) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x940, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0xa, 0x801, 0x84) close_range$auto(r3, 0xfffffffffffff000, 0x4000000000002) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0xc, 0xd, 0x2007d49, 0xa, 0x4, 0x0, 0xffffffff, 0x2, 0x10000000, 0x2, 0x8000000ab8, 0xfffffffffffffff7, 0x5, 0x2, 0x5363]}, 0x0) r4 = open(&(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x80400, 0xb5d1af1605322ddc) open_by_handle_at$auto(r4, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x3679) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) 2.277750201s ago: executing program 2 (id=908): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) setreuid$auto(0x4, 0x8) (async) futimesat$auto(0xda, 0x0, 0x0) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 64) ioctl$auto_UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2a, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r1) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000074fa025a0f1a61396aec4bcfcd1ee9f8b7143fc6a2731bc0192310b161219bfdcb37a967430c3f2b6fe6780922c77bde7d5f934683a9c9f83978c4abe5e4cdceb9fba4b69a303db1ffa9042fba31ce72d205f568381a1238586085b00987e9207435c4dd2bfeca0867692cb7e5e145b0485cabf32b1075977a78", @ANYRESHEX=r2, @ANYBLOB="01002abd7000fedbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x80000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) (async) close_range$auto(0x2, 0x8, 0x0) r3 = socketcall$auto(0x11, 0x0) (async, rerun: 32) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1643, 0x0) (rerun: 32) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xc008ae67, r3) (async) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/sockstat\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x594c, 0x9fffffffd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 32) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r6 = socket(0x2, 0x3, 0xc) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) ioctl$auto(0xc8, 0x801054db, r6) 1.958725381s ago: executing program 2 (id=910): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x12, 0x401, 0x8000) mprotect$auto(0x1000, 0x84a1, 0xfffffffffffffffc) ioctl$auto(0xc8, 0x801054db, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0) pkey_free$auto(0x20001) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0xe, 0x0, 0xff, "50cfeeca8e00"}) mmap$auto(0x1, 0x20009, 0x4000000000ff, 0x19, 0x6, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, 0xfdfdffffffffffff) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r4, 0x0, 0xffffff7f, 0x8000000000009) read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x4800, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/40, 0x28) close_range$auto(0x2, 0x8, 0x0) socket(0x27, 0x2, 0x4) r5 = socket(0x2, 0x3, 0xa) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r5) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="caa321ec88d857ed885d8dc951f6a6db6d15f277d6e26cb86fd4695d13ac4a9e0f3d5013ccba0859254efee3f1896bb6a2f391500459677473f8566d8816a091dbab60399e9bed57eb1c7441a3a41d3cfa3766d31aa5d49ba3114fcca9dccfa2ba68d6e50d7b985aca2576d38549bc93d8c2dde84ddcdafb85bfcb0f60a1eb5cf009541bf7d68d24802b4a0c934ddb6f778618c47ddc5984b79764cb9e3157abab", @ANYRES16=r6, @ANYBLOB="000229bd7000fbdbdf251f00000005002f010900000008006900800000000400930004004401"], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4001) connect$auto(0x3, &(0x7f0000000080)=@rc={0x1f, @none, 0xf}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto(0x3, 0x541b, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x80000, 0x0) 1.79813077s ago: executing program 1 (id=911): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r0, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(r0, 0x7, 0x7ffffffb, 0x3, 0x0, 0x3) (fail_nth: 9) io_uring_enter$auto(0x3, 0x5, 0x5f3, 0x3, 0x0, 0x2) 1.595725375s ago: executing program 2 (id=912): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x0, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYRES16=0x0, @ANYBLOB="2586f2bd7000fedbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r0 = socket(0x10, 0x2, 0x14) r1 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000000), 0x301182, 0x0) mmap$auto(0x0, 0x400008, 0xf4e4, 0x9b72, r1, 0x10000000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x15) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x41) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x40000c, 0xffffffff, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) connect$auto(r0, 0x0, 0x2050) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4, &(0x7f0000000140)={0xb00e4cd, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x7, 0x3], {0x9, 0x3, 0xff, 0x0, 0x4, 0x895, 0x8, 0x7, 0x5}, {0x2, 0x1d11, 0x54ed, 0xffffffff, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08002c000001050018001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="7f000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1200", @ANYRES32=r4, @ANYRESOCT=r3], 0x1ac}}, 0x20004884) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) setsockopt$auto_SO_TIMESTAMP_NEW(r5, 0x8, 0x3f, &(0x7f0000000440)='/sys/kern\xff\a\x00\x00ebug/z?s\x02ap/stored_pages\x00\x96@\xa6?\x9b`E\xc4]=\xa0\x84\xe6\xde\xe7\x9a\xb8\xf1\x8d\f\r}\xac\xc9\\Q\xbf\x9a s\xde\xc7\x0fq\xfe\xc8/\x1e\xcb\\\xe4\xea\x81\x9cu\xff\x1ek\xf7\xa4\xad\"\xa1\xf5\x91\x9c\xa3\x82\xc5\x8803\x90w\x1d\x9f\xe2*\xa0E<\xeba\xb5%\xaaq%*\xb3\xcd\xd6\xf0\x83\x81\xf5\x93(\xc6z\xd2\x023\tm)\xec,19b\xe3\x90\xf1=\xefZ6|\xcb\xf6\x1fGdu\xdce\xbc#\n\xdc)\x95D\xbed\x932\x86\x8a\xd0\x894%,\xf7', 0xc) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) 1.449099157s ago: executing program 0 (id=913): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x2000000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, 0x0, 0x7, 0x4008) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7", 0x40000000001243}, 0x4, 0x0) socket(0x2a, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mmap$auto(0x4, 0xca0a, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x2102, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2584, 0x0) ioctl$auto(0x3, 0x40045542, 0xb551) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0x6, 0x10, 0xf, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b3ce63f000000001000", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x4, 0x63f8}, 0xf) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@prog_fd, @target_ifindex=r3, 0x3, 0x81, @uprobe_multi={0x200000000003, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x96) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x8100, 0x0) 1.273472185s ago: executing program 2 (id=914): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x40008c4) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "787d66da4a620eab7f736e854ef61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010326bd7000ffdbdf252d"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x3f, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (fail_nth: 9) 1.252881441s ago: executing program 0 (id=915): mmap$auto(0x0, 0x20009, 0x1000, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x167f02, 0x0) socket(0x18, 0x80000, 0x0) write$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) futex$auto(0x0, 0x5, 0x1ff, 0x0, 0x0, 0xfffffffa) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000080)=@batch={0x6, 0x200, 0x2, 0x4, 0x8001, r0, 0x3, 0x17}, 0x2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x883, 0x0) mmap$auto(0x7, 0x2020009, 0xffffffff, 0xffffffffffffff14, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80202, 0x0) sendfile$auto(0xffffffffffffffff, r1, 0x0, 0x400000000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000380), r2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4000, 0x0) lsetxattr$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='/dev/swradio1\x00', &(0x7f00000002c0), 0xdc, 0x401) acct$auto(&(0x7f0000000000)='/dev/sequencer2\x00') openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x108000, 0x2, 0xa) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/swradio1\x00', 0xc0000, 0x0) ioctl$auto(r3, 0xc0205649, r3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x20681, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r4, 0x5404, 0x0) 1.0302902s ago: executing program 2 (id=916): unshare$auto(0x40000080) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) clock_getres$auto(0xfffffffd, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x41}}, 0x6a) getpid() socket(0x1e, 0x4, 0x0) dup$auto(0xffffffffffffffff) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80100, 0x0) pread64$auto(r0, 0x0, 0x6000000000, 0x100000004) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mtd0ro\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x109801, 0x0) ioctl$auto(r2, 0x9210640b, 0xffffffffffffffff) unshare$auto(0x40000080) readv$auto(0x3, 0x0, 0x1) statmount$auto(&(0x7f0000000000)={0x81, @inferred, 0x5, 0xffffffff, 0xfffffffffffffff2}, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x8000000000000000, 0x6, 0x7, 0xd, 0x5, 0x5, 0x9, 0x3, 0x8, 0x5, 0x7, 0x0, 0x9, 0x10001, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000000000000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xb6]}, 0x80000800, 0x0) mmap$auto(0xfffffffffffffffd, 0x400008, 0x1, 0x9b72, 0x2, 0xa1) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYRESOCT=r0], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 850.990134ms ago: executing program 0 (id=917): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) fcntl$auto_F_DUPFD_CLOEXEC(r0, 0x406, r0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x302, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x2200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x82, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x7) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x4b4c, r2) 762.97541ms ago: executing program 1 (id=918): openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1000, 0x84a1, 0xfffffffffffffffc) ioctl$auto(0xc8, 0x801054db, 0xffffffffffffffff) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0) pkey_free$auto(0x20001) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0xe, 0x0, 0xff, "50cfeeca8e00"}) mmap$auto(0x1, 0x20009, 0x4000000000ff, 0x19, 0x6, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_IOCTL_VMCI_GET_CONTEXT_ID(r1, 0x7b3, 0xfdfdffffffffffff) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video7\x00', 0x8a240, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2800, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20100, 0x0) pread64$auto(r3, 0x0, 0x8, 0x8000) r4 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r4, 0x0, 0xffffff7f, 0x8000000000009) read$auto_mon_fops_text_t_mon_text(r4, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x4800, 0x0) read$auto_v4l2_fops_v4l2_dev(r2, &(0x7f0000000000)=""/40, 0x28) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r5 = socket(0x2, 0x3, 0xa) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r5) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r6, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x9}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x80}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4001) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0xc, @empty}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto(0x3, 0x89e1, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/midiC2D0\x00', 0x80000, 0x0) 680.928086ms ago: executing program 0 (id=919): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x100000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/snd_hda_intel/parameters/power_save\x00', 0x80002, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r0 = socket(0xa, 0x5, 0x0) r1 = getsockopt$auto(r0, 0x84, 0x7a, 0x0, 0x0) close_range$auto(r1, r1, 0x8) ioctl$auto_SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d, 0x0}) r3 = wait4$auto(r2, 0x0, 0xcda, &(0x7f0000000380)={{0x1, 0x1}, {0xfffffffffffffffc, 0x4}, 0x5, 0x3, 0x4189, 0x8, 0x7fffffffffffffff, 0x40000000, 0x7ff, 0x2, 0x1, 0x80ac, 0x2, 0xa, 0x2, 0x9}) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000829bd7000fcdbdf250100000008000200", @ANYRES32=r3, @ANYBLOB="39573480f074dc6d287348e3adaeea0944d94cec82e3af2b626e99adbdba91c728baacf839bbfe45fc2568f4db33ca5442b67c6f144e7c7a6c6ecb5850998e3a4fbb5e9a406395317106a0af4e5051d062022f2dc05eed9b0d1ec44c2ae5f0bb2db801fd3ad4651a000000000000ee236483ed84b8daaaa0d21570582f678823b7390a3a0ae893c09ebbe2dec1e4e4c5580c16df69e486404c45d707429d457ffe68b8d432bb6af15676104e632d23c03d6ee7ef07b7f8a3c19857f2aeaf523b63f631e5e55a3c59c732fa51570d843d384e3cd96f070da15feeb7e7fc5a537b91200d9191f293c5a67e14965b1cf7"], 0x1c}}, 0x8040) capget$auto(&(0x7f0000000440)={0x9, r3}, &(0x7f0000000480)={0x6, 0xffffffc0, 0xfffffffd}) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x0, 0x2, r3, 0xc, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x89\xe8^\x98#\x86\x92\x86w\xa9>\x0e\x8f}yX\xc5\x9c\xb88\xc0\x1c\xd1\xd9\x9e\x91\b\xfc=\x18\xf9\x92\b\xa3Rgu\xf5L\x1d', 0x3ff) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) ioctl$auto(r4, 0x560a, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x48084) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, 0x0, 0x54) r5 = socket(0x2, 0x1, 0x106) bind$auto(r5, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) 290.037144ms ago: executing program 2 (id=920): mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) (async) r0 = ioctl$auto_TUNGETIFF2(0xffffffffffffffff, 0x800454d2, &(0x7f0000000140)=0xf) (async) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_VENDOR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r1, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x800000}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r3 = seccomp$auto(0x3, 0x80000, &(0x7f00000000c0)="119773ed0af0f4bfdd4228ac6b10fd68e821ca05450db035a09f83e30f93a2bbe09e76cede49c2365631a73471bc296f2d0506e8bb3c1e048b59d113b07dcc7953c0f8f3b39894") write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b3e", 0xfdef) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, 0x0, 0x400c880) (async) sysfs$auto(0x2, 0x46, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, 0x0, 0x4000084) (async) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x9, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [0x2], {0x6, 0x6, 0x8c48, 0x29d, 0x3, 0x7f, 0x3, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0xf5, 0x100000004}}) (async) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) mmap$auto(0x4, 0x4, 0x44c412e, 0x8040eb2, 0xffffffffffffffff, 0x308000020000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto_PR_TASK_PERF_EVENTS_DISABLE(0x1f, 0x5, 0x7000000000, 0x978f, 0x7) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000300), r3) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0004dbdf2505000000058539c16b64496f00020000dce80005000200ff00090009000003833e02005600000008"], 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8080) 251.347698ms ago: executing program 0 (id=921): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r0, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0xf00000000000000, 0x9}, 0x7}, 0x3, 0x0) 121.191406ms ago: executing program 1 (id=922): unshare$auto(0x40000080) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) clock_getres$auto(0xfffffffd, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x43, 0x40003}, 0x4}}, 0x6a) getpid() socket(0x1e, 0x4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) dup$auto(0xffffffffffffffff) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) pread64$auto(r0, 0x0, 0x6000000000, 0x100000004) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) (fail_nth: 9) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) process_madvise$auto(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x8000000000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8002) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) open(0x0, 0x621c2, 0x84) 0s ago: executing program 0 (id=923): sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x20, 0x0, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYRES16=0x0, @ANYBLOB="2586f2bd7000fedbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0x4080) r0 = socket(0x10, 0x2, 0x14) r1 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000000), 0x301182, 0x0) mmap$auto(0x0, 0x400008, 0xf4e4, 0x9b72, r1, 0x10000000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x15) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto(0x3, 0x541b, 0x10000000000402) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}}, 0x41) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) mmap$auto(0x0, 0x40000c, 0xffffffff, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) connect$auto(r0, 0x0, 0x2050) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x4, &(0x7f0000000140)={0xb00e4cd, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x7, 0x3], {0x9, 0x3, 0xff, 0x0, 0x4, 0x895, 0x8, 0x7, 0x5}, {0x2, 0x1d11, 0x54ed, 0xffffffff, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32=0xffffffffffffffff, @ANYBLOB="08002c000001050018001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="7f000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1200", @ANYRES32=r4, @ANYRESOCT=r3], 0x1ac}}, 0x20004884) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) setsockopt$auto_SO_TIMESTAMP_NEW(r5, 0x8, 0x3f, &(0x7f0000000440)='/sys/kern\xff\a\x00\x00ebug/z?s\x02ap/stored_pages\x00\x96@\xa6?\x9b`E\xc4]=\xa0\x84\xe6\xde\xe7\x9a\xb8\xf1\x8d\f\r}\xac\xc9\\Q\xbf\x9a s\xde\xc7\x0fq\xfe\xc8/\x1e\xcb\\\xe4\xea\x81\x9cu\xff\x1ek\xf7\xa4\xad\"\xa1\xf5\x91\x9c\xa3\x82\xc5\x8803\x90w\x1d\x9f\xe2*\xa0E<\xeba\xb5%\xaaq%*\xb3\xcd\xd6\xf0\x83\x81\xf5\x93(\xc6z\xd2\x023\tm)\xec,19b\xe3\x90\xf1=\xefZ6|\xcb\xf6\x1fGdu\xdce\xbc#\n\xdc)\x95D\xbed\x932\x86\x8a\xd0\x894%,\xf7', 0xc) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) kernel console output (not intermixed with test programs): do_syscall_64+0x115/0x840 [ 195.949376][ T7685] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.949396][ T7685] ? __pfx_path_openat+0x10/0x10 [ 195.949416][ T7685] do_file_open+0x20e/0x430 [ 195.949433][ T7685] ? __pfx_do_file_open+0x10/0x10 [ 195.949465][ T7685] ? alloc_fd+0x471/0x7a0 [ 195.949484][ T7685] ? do_getname+0x191/0x390 [ 195.949504][ T7685] do_sys_openat2+0x10f/0x1e0 [ 195.949523][ T7685] ? __pfx_do_sys_openat2+0x10/0x10 [ 195.949543][ T7685] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 195.949568][ T7685] ? __fget_files+0x21f/0x3d0 [ 195.949584][ T7685] __x64_sys_openat+0x12d/0x210 [ 195.949604][ T7685] ? __pfx___x64_sys_openat+0x10/0x10 [ 195.949623][ T7685] ? ksys_write+0x1ac/0x250 [ 195.949642][ T7685] do_syscall_64+0x115/0x840 [ 195.949654][ T7685] ? clear_bhb_loop+0x40/0x90 [ 195.949672][ T7685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.949686][ T7685] RIP: 0033:0x7f8ed999de59 [ 195.949702][ T7685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 195.949716][ T7685] RSP: 002b:00007f8eda88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 195.949731][ T7685] RAX: ffffffffffffffda RBX: 00007f8ed9c26090 RCX: 00007f8ed999de59 [ 195.949740][ T7685] RDX: 0000000000181881 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 195.949749][ T7685] RBP: 00007f8eda88d090 R08: 0000000000000000 R09: 0000000000000000 [ 195.949758][ T7685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.949766][ T7685] R13: 00007f8ed9c26128 R14: 00007f8ed9c26090 R15: 00007ffc1fa75bd8 [ 195.949785][ T7685] [ 196.728427][ T7691] netlink: 2468 bytes leftover after parsing attributes in process `syz.1.374'. [ 197.363099][ T7703] FAULT_INJECTION: forcing a failure. [ 197.363099][ T7703] name failslab, interval 1, probability 0, space 0, times 0 [ 197.402899][ T7703] CPU: 0 UID: 0 PID: 7703 Comm: syz.1.377 Not tainted syzkaller #0 PREEMPT(full) [ 197.402921][ T7703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 197.402930][ T7703] Call Trace: [ 197.402935][ T7703] [ 197.402941][ T7703] dump_stack_lvl+0x100/0x190 [ 197.402964][ T7703] should_fail_ex.cold+0x5/0xa [ 197.402982][ T7703] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 197.403013][ T7703] should_failslab+0xc2/0x120 [ 197.403036][ T7703] kmem_cache_alloc_noprof+0x91/0x6a0 [ 197.403057][ T7703] ? skb_clone+0x190/0x400 [ 197.403078][ T7703] skb_clone+0x190/0x400 [ 197.403095][ T7703] netlink_deliver_tap+0xaed/0xcc0 [ 197.403122][ T7703] netlink_unicast+0x62b/0x850 [ 197.403147][ T7703] ? __pfx_netlink_unicast+0x10/0x10 [ 197.403175][ T7703] netlink_sendmsg+0x8b0/0xda0 [ 197.403200][ T7703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.403230][ T7703] ? apparmor_socket_sendmsg+0x15b/0x270 [ 197.403249][ T7703] ____sys_sendmsg+0xa4d/0xbe0 [ 197.403270][ T7703] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.403294][ T7703] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.403324][ T7703] ___sys_sendmsg+0x190/0x1e0 [ 197.403348][ T7703] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.403369][ T7703] ? __lock_acquire+0x49f/0x1a40 [ 197.403383][ T7703] ? get_pid_task+0x106/0x250 [ 197.403423][ T7703] __sys_sendmsg+0x160/0x210 [ 197.403441][ T7703] ? __pfx___sys_sendmsg+0x10/0x10 [ 197.403469][ T7703] do_syscall_64+0x115/0x840 [ 197.403482][ T7703] ? clear_bhb_loop+0x40/0x90 [ 197.403505][ T7703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.403528][ T7703] RIP: 0033:0x7f8ed999de59 [ 197.403548][ T7703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.403564][ T7703] RSP: 002b:00007f8eda8ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.403579][ T7703] RAX: ffffffffffffffda RBX: 00007f8ed9c25fa0 RCX: 00007f8ed999de59 [ 197.403589][ T7703] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 197.403597][ T7703] RBP: 00007f8eda8ae090 R08: 0000000000000000 R09: 0000000000000000 [ 197.403606][ T7703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.403614][ T7703] R13: 00007f8ed9c26038 R14: 00007f8ed9c25fa0 R15: 00007ffc1fa75bd8 [ 197.403633][ T7703] [ 199.641679][ T7741] futex_wake_op: syz.2.383 tries to shift op by -2048; fix this program [ 199.717209][ T7741] futex_wake_op: syz.2.383 tries to shift op by -2048; fix this program [ 200.336054][ T7761] FAULT_INJECTION: forcing a failure. [ 200.336054][ T7761] name failslab, interval 1, probability 0, space 0, times 0 [ 200.422253][ T7761] CPU: 0 UID: 0 PID: 7761 Comm: syz.0.387 Not tainted syzkaller #0 PREEMPT(full) [ 200.422274][ T7761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 200.422283][ T7761] Call Trace: [ 200.422288][ T7761] [ 200.422294][ T7761] dump_stack_lvl+0x100/0x190 [ 200.422323][ T7761] should_fail_ex.cold+0x5/0xa [ 200.422344][ T7761] should_failslab+0xc2/0x120 [ 200.422366][ T7761] kmem_cache_alloc_noprof+0x91/0x6a0 [ 200.422386][ T7761] ? jbd2__journal_start+0x194/0x6a0 [ 200.422407][ T7761] jbd2__journal_start+0x194/0x6a0 [ 200.422426][ T7761] __ext4_journal_start_sb+0x367/0x670 [ 200.422447][ T7761] ? ext4_punch_hole+0x784/0x1310 [ 200.422473][ T7761] ext4_punch_hole+0x784/0x1310 [ 200.422499][ T7761] ? __pfx_ext4_punch_hole+0x10/0x10 [ 200.422520][ T7761] ? __pfx_down_write+0x10/0x10 [ 200.422535][ T7761] ? file_update_time_flags+0x373/0x500 [ 200.422557][ T7761] ext4_fallocate+0x161e/0x3c80 [ 200.422576][ T7761] ? __pfx_ext4_fallocate+0x10/0x10 [ 200.422595][ T7761] ? __pfx_ext4_fallocate+0x10/0x10 [ 200.422608][ T7761] vfs_fallocate+0x576/0x10a0 [ 200.422626][ T7761] ? __pfx_vfs_fallocate+0x10/0x10 [ 200.422639][ T7761] ? madvise_vma_behavior+0x1258/0x2240 [ 200.422662][ T7761] ? madvise_vma_behavior+0x1258/0x2240 [ 200.422688][ T7761] madvise_vma_behavior+0x909/0x2240 [ 200.422714][ T7761] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 200.422748][ T7761] ? find_vma_prev+0xd8/0x150 [ 200.422768][ T7761] ? _kstrtoull+0x13c/0x1f0 [ 200.422784][ T7761] ? __pfx_find_vma_prev+0x10/0x10 [ 200.422815][ T7761] madvise_walk_vmas+0x2fe/0xa90 [ 200.422841][ T7761] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 200.422870][ T7761] madvise_do_behavior+0x1ea/0x510 [ 200.422894][ T7761] ? __pfx_madvise_do_behavior+0x10/0x10 [ 200.422918][ T7761] ? down_read+0x13b/0x4c0 [ 200.422941][ T7761] do_madvise+0x238/0x290 [ 200.422964][ T7761] ? __pfx_do_madvise+0x10/0x10 [ 200.422990][ T7761] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 200.423023][ T7761] ? ksys_write+0x1ac/0x250 [ 200.423036][ T7761] ? __pfx_ksys_write+0x10/0x10 [ 200.423053][ T7761] __x64_sys_madvise+0xa9/0x110 [ 200.423076][ T7761] ? lockdep_hardirqs_on+0x78/0x100 [ 200.423098][ T7761] do_syscall_64+0x115/0x840 [ 200.423111][ T7761] ? clear_bhb_loop+0x40/0x90 [ 200.423129][ T7761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.423144][ T7761] RIP: 0033:0x7f56a939de59 [ 200.423156][ T7761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 200.423170][ T7761] RSP: 002b:00007f56a75b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 200.423184][ T7761] RAX: ffffffffffffffda RBX: 00007f56a9626180 RCX: 00007f56a939de59 [ 200.423194][ T7761] RDX: 0000000000000009 RSI: 0000000001fffffe RDI: 000000110c230000 [ 200.423203][ T7761] RBP: 00007f56a75b4090 R08: 0000000000000000 R09: 0000000000000000 [ 200.423211][ T7761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 200.423219][ T7761] R13: 00007f56a9626218 R14: 00007f56a9626180 R15: 00007fff69f01118 [ 200.423239][ T7761] [ 200.768139][ T7761] EXT4-fs error (device sda1) in ext4_punch_hole:4490: Out of memory [ 201.510331][ T7773] netlink: 318 bytes leftover after parsing attributes in process `syz.0.388'. [ 202.556408][ T7806] futex_wake_op: syz.2.392 tries to shift op by -2048; fix this program [ 202.965383][ T7820] FAULT_INJECTION: forcing a failure. [ 202.965383][ T7820] name failslab, interval 1, probability 0, space 0, times 0 [ 203.106941][ T7820] CPU: 0 UID: 0 PID: 7820 Comm: syz.2.396 Not tainted syzkaller #0 PREEMPT(full) [ 203.106963][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.106972][ T7820] Call Trace: [ 203.106978][ T7820] [ 203.106984][ T7820] dump_stack_lvl+0x100/0x190 [ 203.107008][ T7820] should_fail_ex.cold+0x5/0xa [ 203.107028][ T7820] should_failslab+0xc2/0x120 [ 203.107049][ T7820] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 203.107069][ T7820] ? __d_alloc+0x35/0xa50 [ 203.107088][ T7820] __d_alloc+0x35/0xa50 [ 203.107106][ T7820] d_alloc_pseudo+0x1c/0xc0 [ 203.107126][ T7820] alloc_file_pseudo+0x118/0x290 [ 203.107146][ T7820] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 203.107165][ T7820] ? alloc_fd+0x471/0x7a0 [ 203.107182][ T7820] sock_alloc_file+0x50/0x210 [ 203.107205][ T7820] __sys_socket+0x1c0/0x260 [ 203.107229][ T7820] ? __pfx___sys_socket+0x10/0x10 [ 203.107256][ T7820] __x64_sys_socket+0x72/0xb0 [ 203.107278][ T7820] ? lockdep_hardirqs_on+0x78/0x100 [ 203.107301][ T7820] do_syscall_64+0x115/0x840 [ 203.107314][ T7820] ? clear_bhb_loop+0x40/0x90 [ 203.107332][ T7820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.107347][ T7820] RIP: 0033:0x7f9b4a39de59 [ 203.107360][ T7820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.107373][ T7820] RSP: 002b:00007f9b4b249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 203.107388][ T7820] RAX: ffffffffffffffda RBX: 00007f9b4a626270 RCX: 00007f9b4a39de59 [ 203.107398][ T7820] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 203.107406][ T7820] RBP: 00007f9b4a433e6f R08: 0000000000000000 R09: 0000000000000000 [ 203.107415][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.107423][ T7820] R13: 00007f9b4a626308 R14: 00007f9b4a626270 R15: 00007ffc0b028cb8 [ 203.107441][ T7820] [ 203.772398][ T7835] FAULT_INJECTION: forcing a failure. [ 203.772398][ T7835] name failslab, interval 1, probability 0, space 0, times 0 [ 203.794710][ T7837] netlink: 28 bytes leftover after parsing attributes in process `syz.0.398'. [ 203.838103][ T7837] macvtap0: entered promiscuous mode [ 203.865785][ T7835] CPU: 0 UID: 0 PID: 7835 Comm: syz.2.399 Not tainted syzkaller #0 PREEMPT(full) [ 203.865809][ T7835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 203.865818][ T7835] Call Trace: [ 203.865825][ T7835] [ 203.865832][ T7835] dump_stack_lvl+0x100/0x190 [ 203.865856][ T7835] should_fail_ex.cold+0x5/0xa [ 203.865877][ T7835] should_failslab+0xc2/0x120 [ 203.865898][ T7835] __kmalloc_noprof+0xfc/0x820 [ 203.865917][ T7835] ? trace_kmem_cache_alloc+0xdd/0x100 [ 203.865937][ T7835] ? lsm_blob_alloc+0x68/0x90 [ 203.865962][ T7835] lsm_blob_alloc+0x68/0x90 [ 203.865984][ T7835] security_sk_alloc+0x2d/0x290 [ 203.866001][ T7835] sk_prot_alloc+0x1d1/0x2a0 [ 203.866024][ T7835] sk_alloc+0x36/0xe80 [ 203.866041][ T7835] inet6_create+0x385/0x12b0 [ 203.866065][ T7835] ? inet6_create+0x7f/0x12b0 [ 203.866088][ T7835] __sock_create+0x339/0x860 [ 203.866114][ T7835] udp_sock_create6+0xc7/0x6a0 [ 203.866134][ T7835] ? __pfx_udp_sock_create6+0x10/0x10 [ 203.866157][ T7835] ? crng_make_state+0x477/0x6c0 [ 203.866179][ T7835] ? lockdep_hardirqs_on+0x78/0x100 [ 203.866202][ T7835] ? crng_make_state+0x2b0/0x6c0 [ 203.866228][ T7835] rxrpc_open_socket+0x206/0x6e0 [ 203.866250][ T7835] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 203.866281][ T7835] ? rcu_is_watching+0x12/0xc0 [ 203.866303][ T7835] rxrpc_lookup_local+0xac7/0x1220 [ 203.866327][ T7835] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 203.866349][ T7835] ? __local_bh_enable_ip+0x9e/0x120 [ 203.866369][ T7835] rxrpc_sendmsg+0x34a/0x680 [ 203.866394][ T7835] sock_write_iter+0x53a/0x5b0 [ 203.866414][ T7835] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 203.866436][ T7835] ? __pfx_sock_write_iter+0x10/0x10 [ 203.866462][ T7835] ? bpf_lsm_file_permission+0x9/0x10 [ 203.866477][ T7835] ? security_file_permission+0x76/0x210 [ 203.866496][ T7835] ? rw_verify_area+0xce/0x6d0 [ 203.866519][ T7835] vfs_write+0x6ac/0x1050 [ 203.866534][ T7835] ? __pfx_sock_write_iter+0x10/0x10 [ 203.866564][ T7835] ? __pfx_vfs_write+0x10/0x10 [ 203.866577][ T7835] ? find_held_lock+0x2b/0x80 [ 203.866609][ T7835] ksys_write+0x1f8/0x250 [ 203.866624][ T7835] ? __pfx_ksys_write+0x10/0x10 [ 203.866644][ T7835] do_syscall_64+0x115/0x840 [ 203.866658][ T7835] ? clear_bhb_loop+0x40/0x90 [ 203.866676][ T7835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.866691][ T7835] RIP: 0033:0x7f9b4a39de59 [ 203.866705][ T7835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.866719][ T7835] RSP: 002b:00007f9b4b2ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 203.866735][ T7835] RAX: ffffffffffffffda RBX: 00007f9b4a625fa0 RCX: 00007f9b4a39de59 [ 203.866745][ T7835] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 203.866754][ T7835] RBP: 00007f9b4a433e6f R08: 0000000000000000 R09: 0000000000000000 [ 203.866763][ T7835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 203.866771][ T7835] R13: 00007f9b4a626038 R14: 00007f9b4a625fa0 R15: 00007ffc0b028cb8 [ 203.866792][ T7835] [ 203.868071][ T7837] macvtap0: entered allmulticast mode [ 204.934460][ T7800] Process accounting resumed [ 205.211594][ T7837] veth0_macvtap: entered allmulticast mode [ 205.769427][ T7854] binder: 7853:7854 ioctl c0306201 2000000000c0 returned -14 [ 205.873989][ T7854] capability: warning: `syz.0.403' uses 32-bit capabilities (legacy support in use) [ 206.635825][ T7873] [U] 0="/ [ 206.646480][ T7873] [U] [ 206.656492][ T7873] [U] EeQ@ [ 206.677033][ T7872] [U]  [ 206.833621][ T7880] FAULT_INJECTION: forcing a failure. [ 206.833621][ T7880] name failslab, interval 1, probability 0, space 0, times 0 [ 206.877624][ T7880] CPU: 0 UID: 0 PID: 7880 Comm: syz.3.410 Not tainted syzkaller #0 PREEMPT(full) [ 206.877647][ T7880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 206.877656][ T7880] Call Trace: [ 206.877661][ T7880] [ 206.877668][ T7880] dump_stack_lvl+0x100/0x190 [ 206.877692][ T7880] should_fail_ex.cold+0x5/0xa [ 206.877712][ T7880] should_failslab+0xc2/0x120 [ 206.877733][ T7880] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 206.877755][ T7880] ? __d_alloc+0x35/0xa50 [ 206.877774][ T7880] __d_alloc+0x35/0xa50 [ 206.877792][ T7880] d_alloc_pseudo+0x1c/0xc0 [ 206.877811][ T7880] alloc_file_pseudo+0x118/0x290 [ 206.877833][ T7880] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 206.877852][ T7880] ? alloc_fd+0x471/0x7a0 [ 206.877870][ T7880] sock_alloc_file+0x50/0x210 [ 206.877889][ T7880] __sys_socket+0x1c0/0x260 [ 206.877911][ T7880] ? __pfx___sys_socket+0x10/0x10 [ 206.877939][ T7880] __x64_sys_socket+0x72/0xb0 [ 206.877960][ T7880] ? lockdep_hardirqs_on+0x78/0x100 [ 206.877984][ T7880] do_syscall_64+0x115/0x840 [ 206.877996][ T7880] ? clear_bhb_loop+0x40/0x90 [ 206.878015][ T7880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.878030][ T7880] RIP: 0033:0x7f307b19de59 [ 206.878044][ T7880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 206.878058][ T7880] RSP: 002b:00007f307c02e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 206.878073][ T7880] RAX: ffffffffffffffda RBX: 00007f307b425fa0 RCX: 00007f307b19de59 [ 206.878082][ T7880] RDX: 0000000000000106 RSI: 0000000000000001 RDI: 0000000000000002 [ 206.878091][ T7880] RBP: 00007f307b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 206.878099][ T7880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.878108][ T7880] R13: 00007f307b426038 R14: 00007f307b425fa0 R15: 00007ffc4046b608 [ 206.878126][ T7880] [ 208.279208][ T7888] futex_wake_op: syz.3.412 tries to shift op by -2048; fix this program [ 208.436903][ T7896] FAULT_INJECTION: forcing a failure. [ 208.436903][ T7896] name failslab, interval 1, probability 0, space 0, times 0 [ 208.495858][ T7896] CPU: 0 UID: 0 PID: 7896 Comm: syz.2.415 Not tainted syzkaller #0 PREEMPT(full) [ 208.495890][ T7896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 208.495899][ T7896] Call Trace: [ 208.495904][ T7896] [ 208.495910][ T7896] dump_stack_lvl+0x100/0x190 [ 208.495933][ T7896] should_fail_ex.cold+0x5/0xa [ 208.495953][ T7896] should_failslab+0xc2/0x120 [ 208.495975][ T7896] kmem_cache_alloc_noprof+0x91/0x6a0 [ 208.495994][ T7896] ? trace_kmem_cache_alloc+0xdd/0x100 [ 208.496015][ T7896] ? security_file_alloc+0x34/0x2c0 [ 208.496039][ T7896] security_file_alloc+0x34/0x2c0 [ 208.496058][ T7896] init_file+0x95/0x480 [ 208.496077][ T7896] alloc_empty_file+0x79/0x1c0 [ 208.496096][ T7896] alloc_file_pseudo+0x183/0x290 [ 208.496118][ T7896] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 208.496138][ T7896] ? hugetlbfs_get_inode+0x3f5/0x700 [ 208.496156][ T7896] ? __mutex_unlock_slowpath+0x35d/0x930 [ 208.496182][ T7896] hugetlb_file_setup+0x2a8/0x5b0 [ 208.496203][ T7896] ksys_mmap_pgoff+0x242/0x610 [ 208.496233][ T7896] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 208.496252][ T7896] ? fput+0x79/0x100 [ 208.496268][ T7896] ? ksys_write+0x1ac/0x250 [ 208.496281][ T7896] ? __pfx_ksys_write+0x10/0x10 [ 208.496297][ T7896] __x64_sys_mmap+0x125/0x190 [ 208.496318][ T7896] do_syscall_64+0x115/0x840 [ 208.496331][ T7896] ? clear_bhb_loop+0x40/0x90 [ 208.496349][ T7896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.496364][ T7896] RIP: 0033:0x7f9b4a39de59 [ 208.496377][ T7896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.496390][ T7896] RSP: 002b:00007f9b4b2ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 208.496404][ T7896] RAX: ffffffffffffffda RBX: 00007f9b4a625fa0 RCX: 00007f9b4a39de59 [ 208.496414][ T7896] RDX: 0000000000000002 RSI: 0000000004000005 RDI: 0000000000000000 [ 208.496422][ T7896] RBP: 00007f9b4b2ac090 R08: ffffffffffffffff R09: 0000300000000000 [ 208.496432][ T7896] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000001 [ 208.496440][ T7896] R13: 00007f9b4a626038 R14: 00007f9b4a625fa0 R15: 00007ffc0b028cb8 [ 208.496459][ T7896] [ 208.854350][ T7902] [U] 0="/ [ 208.857783][ T7902] [U] [ 208.860673][ T7902] [U] EeQ@ [ 208.866817][ T7901] [U]  [ 209.546062][ T7926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.424'. [ 210.099454][ T7938] [U] 0="/ [ 210.122933][ T7938] [U] [ 210.133032][ T7938] [U] EeQ@ [ 210.161146][ T7936] [U]  [ 211.555721][ T7956] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 211.721863][ T7961] random: crng reseeded on system resumption [ 212.386574][ T7976] netlink: zone id is out of range [ 212.419571][ T7976] netlink: zone id is out of range [ 212.464535][ T7976] netlink: zone id is out of range [ 212.485401][ T7976] netlink: zone id is out of range [ 212.500712][ T7976] netlink: zone id is out of range [ 212.518624][ T7976] netlink: zone id is out of range [ 212.540507][ T7976] netlink: zone id is out of range [ 212.603287][ T7976] netlink: zone id is out of range [ 212.630185][ T7976] netlink: zone id is out of range [ 212.655688][ T7976] netlink: zone id is out of range [ 214.216834][ T8005] FAULT_INJECTION: forcing a failure. [ 214.216834][ T8005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.332678][ T8005] CPU: 0 UID: 0 PID: 8005 Comm: syz.2.445 Not tainted syzkaller #0 PREEMPT(full) [ 214.332701][ T8005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 214.332710][ T8005] Call Trace: [ 214.332715][ T8005] [ 214.332722][ T8005] dump_stack_lvl+0x100/0x190 [ 214.332746][ T8005] should_fail_ex.cold+0x5/0xa [ 214.332772][ T8005] strncpy_from_user+0x3b/0x2d0 [ 214.332796][ T8005] do_getname+0x78/0x390 [ 214.332818][ T8005] do_sys_openat2+0xc7/0x1e0 [ 214.332838][ T8005] ? __pfx_do_sys_openat2+0x10/0x10 [ 214.332864][ T8005] __x64_sys_openat+0x12d/0x210 [ 214.332886][ T8005] ? __pfx___x64_sys_openat+0x10/0x10 [ 214.332913][ T8005] do_syscall_64+0x115/0x840 [ 214.332926][ T8005] ? clear_bhb_loop+0x40/0x90 [ 214.332944][ T8005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.332959][ T8005] RIP: 0033:0x7f9b4a39de59 [ 214.332972][ T8005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.332988][ T8005] RSP: 002b:00007f9b4b249028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.333003][ T8005] RAX: ffffffffffffffda RBX: 00007f9b4a626270 RCX: 00007f9b4a39de59 [ 214.333013][ T8005] RDX: 0000000000088000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 214.333022][ T8005] RBP: 00007f9b4a433e6f R08: 0000000000000000 R09: 0000000000000000 [ 214.333031][ T8005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.333039][ T8005] R13: 00007f9b4a626308 R14: 00007f9b4a626270 R15: 00007ffc0b028cb8 [ 214.333058][ T8005] [ 216.195484][ T8046] netlink: 20 bytes leftover after parsing attributes in process `syz.1.455'. [ 216.470049][ T8048] FAULT_INJECTION: forcing a failure. [ 216.470049][ T8048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.790542][ T8048] CPU: 0 UID: 0 PID: 8048 Comm: syz.3.457 Not tainted syzkaller #0 PREEMPT(full) [ 216.790565][ T8048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 216.790574][ T8048] Call Trace: [ 216.790579][ T8048] [ 216.790585][ T8048] dump_stack_lvl+0x100/0x190 [ 216.790607][ T8048] should_fail_ex.cold+0x5/0xa [ 216.790628][ T8048] _copy_to_user+0x32/0xd0 [ 216.790651][ T8048] simple_read_from_buffer+0xcb/0x170 [ 216.790676][ T8048] proc_fail_nth_read+0x1af/0x230 [ 216.790697][ T8048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.790718][ T8048] ? rw_verify_area+0xce/0x6d0 [ 216.790743][ T8048] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 216.790781][ T8048] vfs_read+0x1e4/0xb40 [ 216.790795][ T8048] ? __pfx_tty_ioctl+0x10/0x10 [ 216.790815][ T8048] ? __pfx_vfs_read+0x10/0x10 [ 216.790832][ T8048] ? fd_install+0x24f/0x580 [ 216.790845][ T8048] ? hook_file_ioctl_common+0x140/0x440 [ 216.790868][ T8048] ksys_read+0x12a/0x250 [ 216.790882][ T8048] ? __pfx_ksys_read+0x10/0x10 [ 216.790895][ T8048] ? __pfx_tty_ioctl+0x10/0x10 [ 216.790917][ T8048] do_syscall_64+0x115/0x840 [ 216.790934][ T8048] ? clear_bhb_loop+0x40/0x90 [ 216.790952][ T8048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.790966][ T8048] RIP: 0033:0x7f307b15e68e [ 216.790979][ T8048] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 216.790993][ T8048] RSP: 002b:00007f307c02dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 216.791007][ T8048] RAX: ffffffffffffffda RBX: 00007f307c02e6c0 RCX: 00007f307b15e68e [ 216.791017][ T8048] RDX: 000000000000000f RSI: 00007f307c02e0a0 RDI: 0000000000000008 [ 216.791025][ T8048] RBP: 00007f307c02e090 R08: 0000000000000000 R09: 0000000000000000 [ 216.791034][ T8048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.791042][ T8048] R13: 00007f307b426038 R14: 00007f307b425fa0 R15: 00007ffc4046b608 [ 216.791061][ T8048] [ 217.361996][ T8024] Process accounting resumed [ 217.666397][ T8066] netlink: 'syz.0.461': attribute type 10 has an invalid length. [ 217.680176][ T8067] net_ratelimit: 47 callbacks suppressed [ 217.680193][ T8067] netlink: zone id is out of range [ 217.710270][ T8066] netlink: 230 bytes leftover after parsing attributes in process `syz.0.461'. [ 220.123438][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.129967][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 220.215829][ T8107] netlink: 12 bytes leftover after parsing attributes in process `syz.2.467'. [ 220.510647][ T8107] openvswitch: : Dropping previously announced user features [ 220.549935][ T8096] Process accounting paused [ 221.260811][ T8126] [U] 0="/ [ 221.300219][ T8126] [U] [ 221.338995][ T8126] [U] EeQ@ [ 221.384980][ T8125] [U]  [ 221.425824][ T8131] FAULT_INJECTION: forcing a failure. [ 221.425824][ T8131] name failslab, interval 1, probability 0, space 0, times 0 [ 221.513191][ T8131] CPU: 0 UID: 0 PID: 8131 Comm: syz.3.472 Not tainted syzkaller #0 PREEMPT(full) [ 221.513212][ T8131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 221.513222][ T8131] Call Trace: [ 221.513227][ T8131] [ 221.513232][ T8131] dump_stack_lvl+0x100/0x190 [ 221.513256][ T8131] should_fail_ex.cold+0x5/0xa [ 221.513276][ T8131] should_failslab+0xc2/0x120 [ 221.513298][ T8131] __kmalloc_noprof+0xfc/0x820 [ 221.513315][ T8131] ? rcu_is_watching+0x12/0xc0 [ 221.513334][ T8131] ? tomoyo_realpath_from_path+0xb6/0x690 [ 221.513360][ T8131] tomoyo_realpath_from_path+0xb6/0x690 [ 221.513385][ T8131] tomoyo_check_open_permission+0x2af/0x3c0 [ 221.513404][ T8131] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 221.513429][ T8131] ? hook_file_open+0x24f/0x8f0 [ 221.513461][ T8131] ? path_get+0x61/0x80 [ 221.513480][ T8131] tomoyo_file_open+0x6b/0x90 [ 221.513495][ T8131] security_file_open+0xb5/0x1e0 [ 221.513515][ T8131] do_dentry_open+0x588/0x14d0 [ 221.513535][ T8131] vfs_open+0x82/0x3f0 [ 221.513556][ T8131] path_openat+0x2873/0x4280 [ 221.513579][ T8131] ? __pfx_path_openat+0x10/0x10 [ 221.513606][ T8131] do_file_open+0x20e/0x430 [ 221.513625][ T8131] ? __pfx_do_file_open+0x10/0x10 [ 221.513654][ T8131] ? alloc_fd+0x471/0x7a0 [ 221.513671][ T8131] ? do_getname+0x191/0x390 [ 221.513691][ T8131] do_sys_openat2+0x10f/0x1e0 [ 221.513711][ T8131] ? __pfx_do_sys_openat2+0x10/0x10 [ 221.513730][ T8131] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 221.513756][ T8131] ? __fget_files+0x21f/0x3d0 [ 221.513773][ T8131] __x64_sys_openat+0x12d/0x210 [ 221.513793][ T8131] ? __pfx___x64_sys_openat+0x10/0x10 [ 221.513811][ T8131] ? ksys_write+0x1ac/0x250 [ 221.513832][ T8131] do_syscall_64+0x115/0x840 [ 221.513844][ T8131] ? clear_bhb_loop+0x40/0x90 [ 221.513862][ T8131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.513877][ T8131] RIP: 0033:0x7f307b19de59 [ 221.513890][ T8131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.513903][ T8131] RSP: 002b:00007f307c00d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 221.513918][ T8131] RAX: ffffffffffffffda RBX: 00007f307b426090 RCX: 00007f307b19de59 [ 221.513927][ T8131] RDX: 0000000000181881 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 221.513936][ T8131] RBP: 00007f307c00d090 R08: 0000000000000000 R09: 0000000000000000 [ 221.513945][ T8131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.513953][ T8131] R13: 00007f307b426128 R14: 00007f307b426090 R15: 00007ffc4046b608 [ 221.513972][ T8131] [ 222.241192][ T8141] binder: 8140:8141 ioctl c0306201 2000000000c0 returned -14 [ 222.851149][ T8131] ERROR: Out of memory at tomoyo_realpath_from_path. [ 223.678788][ T8169] futex_wake_op: syz.1.478 tries to shift op by -2048; fix this program [ 223.758773][ T8169] futex_wake_op: syz.1.478 tries to shift op by -2048; fix this program [ 224.975440][ T8196] mmap: syz.2.482 (8196) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 225.230044][ T29] audit: type=1800 audit(4294967326.250:6): pid=8198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.482" name="version" dev="configfs" ino=24669 res=0 errno=0 [ 226.930990][ T8230] [U] 0="/ [ 226.958449][ T8230] [U] [ 226.977427][ T8230] [U] EeQ@ [ 227.018359][ T8229] [U]  [ 227.437927][ T8235] [U] 0="/ [ 227.458296][ T8235] [U] [ 227.477467][ T8235] [U] EeQ@ [ 227.629227][ T8234] [U]  [ 230.161884][ T8274] FAULT_INJECTION: forcing a failure. [ 230.161884][ T8274] name fail_futex, interval 1, probability 0, space 0, times 1 [ 230.253116][ T8274] CPU: 0 UID: 0 PID: 8274 Comm: syz.2.495 Not tainted syzkaller #0 PREEMPT(full) [ 230.253139][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 230.253149][ T8274] Call Trace: [ 230.253154][ T8274] [ 230.253160][ T8274] dump_stack_lvl+0x100/0x190 [ 230.253184][ T8274] should_fail_ex.cold+0x5/0xa [ 230.253205][ T8274] get_futex_key+0x1d2/0x14f0 [ 230.253223][ T8274] ? __pfx_get_futex_key+0x10/0x10 [ 230.253282][ T8274] futex_wake+0xf4/0x5e0 [ 230.253304][ T8274] ? __pfx_futex_wake+0x10/0x10 [ 230.253323][ T8274] ? find_held_lock+0x2b/0x80 [ 230.253343][ T8274] ? udp_connect+0x4a/0x70 [ 230.253364][ T8274] ? __local_bh_enable_ip+0x9e/0x120 [ 230.253381][ T8274] ? lockdep_hardirqs_on+0x78/0x100 [ 230.253404][ T8274] ? udp_connect+0x4a/0x70 [ 230.253423][ T8274] ? __local_bh_enable_ip+0x9e/0x120 [ 230.253443][ T8274] do_futex+0x2b2/0x440 [ 230.253461][ T8274] ? __pfx_do_futex+0x10/0x10 [ 230.253478][ T8274] ? __sys_connect+0xe4/0x170 [ 230.253497][ T8274] __x64_sys_futex+0x34f/0x4d0 [ 230.253516][ T8274] ? __pfx___x64_sys_futex+0x10/0x10 [ 230.253539][ T8274] do_syscall_64+0x115/0x840 [ 230.253552][ T8274] ? clear_bhb_loop+0x40/0x90 [ 230.253572][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.253587][ T8274] RIP: 0033:0x7f9b4a39de59 [ 230.253601][ T8274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.253614][ T8274] RSP: 002b:00007f9b4b2ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 230.253629][ T8274] RAX: ffffffffffffffda RBX: 00007f9b4a625fa8 RCX: 00007f9b4a39de59 [ 230.253638][ T8274] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9b4a625fac [ 230.253647][ T8274] RBP: 00007f9b4a625fa0 R08: 0000000000000001 R09: 0000000000000000 [ 230.253656][ T8274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.253664][ T8274] R13: 00007f9b4a626038 R14: 00007ffc0b028bd0 R15: 00007ffc0b028cb8 [ 230.253683][ T8274] [ 232.256281][ T8305] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 232.299305][ T8305] netlink: 310 bytes leftover after parsing attributes in process `syz.0.502'. [ 233.198009][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.1.506'. [ 233.802605][ T8326] netlink: 28 bytes leftover after parsing attributes in process `syz.3.508'. [ 233.880229][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.923508][ T8326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.023588][ T8326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.083307][ T8326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.652728][ T8335] netlink: 342 bytes leftover after parsing attributes in process `syz.1.509'. [ 234.850389][ T8343] netlink: 342 bytes leftover after parsing attributes in process `syz.1.509'. [ 236.380139][ T8338] Process accounting paused [ 236.936054][ T8393] netlink: 342 bytes leftover after parsing attributes in process `syz.0.521'. [ 238.473285][ T8418] FAULT_INJECTION: forcing a failure. [ 238.473285][ T8418] name failslab, interval 1, probability 0, space 0, times 0 [ 238.538422][ T8418] CPU: 0 UID: 0 PID: 8418 Comm: syz.2.527 Not tainted syzkaller #0 PREEMPT(full) [ 238.538446][ T8418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 238.538459][ T8418] Call Trace: [ 238.538464][ T8418] [ 238.538471][ T8418] dump_stack_lvl+0x100/0x190 [ 238.538495][ T8418] should_fail_ex.cold+0x5/0xa [ 238.538517][ T8418] should_failslab+0xc2/0x120 [ 238.538539][ T8418] kmem_cache_alloc_noprof+0x91/0x6a0 [ 238.538558][ T8418] ? anon_vma_fork+0x8d/0x6b0 [ 238.538577][ T8418] anon_vma_fork+0x8d/0x6b0 [ 238.538592][ T8418] ? vm_area_dup+0x59d/0x8e0 [ 238.538608][ T8418] dup_mmap+0x143e/0x21b0 [ 238.538637][ T8418] ? __pfx_dup_mmap+0x10/0x10 [ 238.538658][ T8418] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 238.538684][ T8418] ? __lock_acquire+0x49f/0x1a40 [ 238.538699][ T8418] ? find_held_lock+0x2b/0x80 [ 238.538717][ T8418] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 238.538753][ T8418] copy_process+0x4588/0x8030 [ 238.538770][ T8418] ? futex_unqueue+0x133/0x2c0 [ 238.538796][ T8418] ? __pfx_copy_process+0x10/0x10 [ 238.538819][ T8418] ? _copy_from_user+0x59/0xd0 [ 238.538842][ T8418] kernel_clone+0x176/0x9d0 [ 238.538862][ T8418] ? __pfx_kernel_clone+0x10/0x10 [ 238.538891][ T8418] __do_sys_clone3+0x214/0x290 [ 238.538909][ T8418] ? __pfx___do_sys_clone3+0x10/0x10 [ 238.538936][ T8418] ? cleanup_mnt+0x263/0x450 [ 238.538984][ T8418] do_syscall_64+0x115/0x840 [ 238.538998][ T8418] ? clear_bhb_loop+0x40/0x90 [ 238.539017][ T8418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.539033][ T8418] RIP: 0033:0x7f9b4a39de59 [ 238.539046][ T8418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.539060][ T8418] RSP: 002b:00007f9b4b2abef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 238.539078][ T8418] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9b4a39de59 [ 238.539087][ T8418] RDX: 00007f9b4b2abf10 RSI: 0000000000000058 RDI: 00007f9b4b2abf10 [ 238.539096][ T8418] RBP: 00007f9b4a433e6f R08: 0000000000000000 R09: 0000000000000058 [ 238.539105][ T8418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.539114][ T8418] R13: 00007f9b4a626038 R14: 00007f9b4a625fa0 R15: 00007ffc0b028cb8 [ 238.539133][ T8418] [ 238.777967][ T8431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.528'. [ 239.160031][ T8423] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.223142][ T8439] FAULT_INJECTION: forcing a failure. [ 239.223142][ T8439] name failslab, interval 1, probability 0, space 0, times 0 [ 239.254999][ T8439] CPU: 0 UID: 0 PID: 8439 Comm: syz.2.531 Not tainted syzkaller #0 PREEMPT(full) [ 239.255022][ T8439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 239.255034][ T8439] Call Trace: [ 239.255039][ T8439] [ 239.255045][ T8439] dump_stack_lvl+0x100/0x190 [ 239.255069][ T8439] should_fail_ex.cold+0x5/0xa [ 239.255091][ T8439] should_failslab+0xc2/0x120 [ 239.255113][ T8439] __kmalloc_cache_noprof+0x91/0x6c0 [ 239.255130][ T8439] ? rfkill_fop_open+0x1cc/0x480 [ 239.255155][ T8439] rfkill_fop_open+0x1cc/0x480 [ 239.255177][ T8439] ? __pfx_rfkill_fop_open+0x10/0x10 [ 239.255200][ T8439] misc_open+0x26d/0x450 [ 239.255217][ T8439] ? __pfx_misc_open+0x10/0x10 [ 239.255231][ T8439] chrdev_open+0x234/0x6a0 [ 239.255247][ T8439] ? __pfx_apparmor_file_open+0x10/0x10 [ 239.255264][ T8439] ? __pfx_chrdev_open+0x10/0x10 [ 239.255280][ T8439] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 239.255302][ T8439] do_dentry_open+0x6ab/0x14d0 [ 239.255316][ T8439] ? __pfx_chrdev_open+0x10/0x10 [ 239.255336][ T8439] vfs_open+0x82/0x3f0 [ 239.255357][ T8439] path_openat+0x2873/0x4280 [ 239.255381][ T8439] ? __pfx_path_openat+0x10/0x10 [ 239.255409][ T8439] do_file_open+0x20e/0x430 [ 239.255427][ T8439] ? __pfx_do_file_open+0x10/0x10 [ 239.255461][ T8439] ? alloc_fd+0x471/0x7a0 [ 239.255478][ T8439] ? do_getname+0x191/0x390 [ 239.255498][ T8439] do_sys_openat2+0x10f/0x1e0 [ 239.255518][ T8439] ? __pfx_do_sys_openat2+0x10/0x10 [ 239.255537][ T8439] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 239.255567][ T8439] __x64_sys_openat+0x12d/0x210 [ 239.255587][ T8439] ? __pfx___x64_sys_openat+0x10/0x10 [ 239.255614][ T8439] do_syscall_64+0x115/0x840 [ 239.255626][ T8439] ? clear_bhb_loop+0x40/0x90 [ 239.255644][ T8439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.255659][ T8439] RIP: 0033:0x7f9b4a39de59 [ 239.255672][ T8439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.255686][ T8439] RSP: 002b:00007f9b4b2ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 239.255701][ T8439] RAX: ffffffffffffffda RBX: 00007f9b4a625fa0 RCX: 00007f9b4a39de59 [ 239.255710][ T8439] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 239.255720][ T8439] RBP: 00007f9b4a433e6f R08: 0000000000000000 R09: 0000000000000000 [ 239.255728][ T8439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.255736][ T8439] R13: 00007f9b4a626038 R14: 00007f9b4a625fa0 R15: 00007ffc0b028cb8 [ 239.255756][ T8439] [ 239.645443][ T8406] kexec: Could not allocate control_code_buffer [ 239.761800][ T8423] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.929284][ T8423] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.230115][ T8447] FAULT_INJECTION: forcing a failure. [ 240.230115][ T8447] name failslab, interval 1, probability 0, space 0, times 0 [ 240.247670][ T8423] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.289151][ T8447] CPU: 0 UID: 0 PID: 8447 Comm: syz.3.532 Not tainted syzkaller #0 PREEMPT(full) [ 240.289174][ T8447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 240.289184][ T8447] Call Trace: [ 240.289189][ T8447] [ 240.289195][ T8447] dump_stack_lvl+0x100/0x190 [ 240.289220][ T8447] should_fail_ex.cold+0x5/0xa [ 240.289242][ T8447] should_failslab+0xc2/0x120 [ 240.289275][ T8447] __kmalloc_cache_noprof+0x91/0x6c0 [ 240.289292][ T8447] ? rfkill_fop_open+0x1cc/0x480 [ 240.289319][ T8447] rfkill_fop_open+0x1cc/0x480 [ 240.289342][ T8447] ? __pfx_rfkill_fop_open+0x10/0x10 [ 240.289365][ T8447] misc_open+0x26d/0x450 [ 240.289381][ T8447] ? __pfx_misc_open+0x10/0x10 [ 240.289396][ T8447] chrdev_open+0x234/0x6a0 [ 240.289411][ T8447] ? __pfx_apparmor_file_open+0x10/0x10 [ 240.289429][ T8447] ? __pfx_chrdev_open+0x10/0x10 [ 240.289446][ T8447] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 240.289467][ T8447] do_dentry_open+0x6ab/0x14d0 [ 240.289481][ T8447] ? __pfx_chrdev_open+0x10/0x10 [ 240.289501][ T8447] vfs_open+0x82/0x3f0 [ 240.289522][ T8447] path_openat+0x2873/0x4280 [ 240.289546][ T8447] ? __pfx_path_openat+0x10/0x10 [ 240.289566][ T8447] do_file_open+0x20e/0x430 [ 240.289583][ T8447] ? __pfx_do_file_open+0x10/0x10 [ 240.289612][ T8447] ? alloc_fd+0x471/0x7a0 [ 240.289629][ T8447] ? do_getname+0x191/0x390 [ 240.289649][ T8447] do_sys_openat2+0x10f/0x1e0 [ 240.289668][ T8447] ? __pfx_do_sys_openat2+0x10/0x10 [ 240.289688][ T8447] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 240.289718][ T8447] __x64_sys_openat+0x12d/0x210 [ 240.289738][ T8447] ? __pfx___x64_sys_openat+0x10/0x10 [ 240.289765][ T8447] do_syscall_64+0x115/0x840 [ 240.289778][ T8447] ? clear_bhb_loop+0x40/0x90 [ 240.289796][ T8447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.289811][ T8447] RIP: 0033:0x7f307b19de59 [ 240.289824][ T8447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.289838][ T8447] RSP: 002b:00007f307c02e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 240.289852][ T8447] RAX: ffffffffffffffda RBX: 00007f307b425fa0 RCX: 00007f307b19de59 [ 240.289862][ T8447] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 240.289871][ T8447] RBP: 00007f307b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 240.289880][ T8447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.289888][ T8447] R13: 00007f307b426038 R14: 00007f307b425fa0 R15: 00007ffc4046b608 [ 240.289909][ T8447] [ 240.576180][ T8451] futex_wake_op: syz.0.534 tries to shift op by -2048; fix this program [ 243.750426][ T8509] FAULT_INJECTION: forcing a failure. [ 243.750426][ T8509] name failslab, interval 1, probability 0, space 0, times 0 [ 243.830146][ T8509] CPU: 0 UID: 0 PID: 8509 Comm: syz.3.546 Not tainted syzkaller #0 PREEMPT(full) [ 243.830168][ T8509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 243.830177][ T8509] Call Trace: [ 243.830182][ T8509] [ 243.830189][ T8509] dump_stack_lvl+0x100/0x190 [ 243.830212][ T8509] should_fail_ex.cold+0x5/0xa [ 243.830232][ T8509] should_failslab+0xc2/0x120 [ 243.830254][ T8509] kmem_cache_alloc_noprof+0x91/0x6a0 [ 243.830273][ T8509] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 243.830287][ T8509] ? mm_alloc+0x1b/0x60 [ 243.830307][ T8509] mm_alloc+0x1b/0x60 [ 243.830322][ T8509] alloc_bprm+0x2ba/0x9d0 [ 243.830451][ T8509] do_execveat_common.isra.0+0x19c/0x580 [ 243.830476][ T8509] ? do_getname+0x191/0x390 [ 243.830495][ T8509] __x64_sys_execve+0x93/0xd0 [ 243.830519][ T8509] do_syscall_64+0x115/0x840 [ 243.830532][ T8509] ? clear_bhb_loop+0x40/0x90 [ 243.830550][ T8509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.830565][ T8509] RIP: 0033:0x7f307b19de59 [ 243.830578][ T8509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.830591][ T8509] RSP: 002b:00007f307c02e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 243.830606][ T8509] RAX: ffffffffffffffda RBX: 00007f307b425fa0 RCX: 00007f307b19de59 [ 243.830616][ T8509] RDX: 0000200000000200 RSI: 00002000000000c0 RDI: 0000200000000040 [ 243.830625][ T8509] RBP: 00007f307c02e090 R08: 0000000000000000 R09: 0000000000000000 [ 243.830634][ T8509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.830642][ T8509] R13: 00007f307b426038 R14: 00007f307b425fa0 R15: 00007ffc4046b608 [ 243.830661][ T8509] [ 244.059678][ T8512] binder: 8511:8512 ioctl c0306201 2000000000c0 returned -14 [ 245.210004][ T8537] binder: 8536:8537 ioctl c0306201 2000000000c0 returned -14 [ 245.584785][ T8519] netlink: 346 bytes leftover after parsing attributes in process `syz.2.550'. [ 247.417055][ T8577] [U] 0="/ [ 247.450884][ T8577] [U] [ 247.471235][ T8577] [U] EeQ@ [ 247.520488][ T8574] [U]  [ 248.074641][ T8575] Process accounting paused [ 248.257244][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.569'. [ 248.528421][ T8609] FAULT_INJECTION: forcing a failure. [ 248.528421][ T8609] name failslab, interval 1, probability 0, space 0, times 0 [ 248.731863][ T8609] CPU: 0 UID: 0 PID: 8609 Comm: syz.1.570 Not tainted syzkaller #0 PREEMPT(full) [ 248.731885][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 248.731894][ T8609] Call Trace: [ 248.731899][ T8609] [ 248.731905][ T8609] dump_stack_lvl+0x100/0x190 [ 248.731929][ T8609] should_fail_ex.cold+0x5/0xa [ 248.731949][ T8609] ? __pfx_n_tty_poll+0x10/0x10 [ 248.731971][ T8609] should_failslab+0xc2/0x120 [ 248.731993][ T8609] __kmalloc_cache_noprof+0x91/0x6c0 [ 248.732009][ T8609] ? __pollwait+0x2c3/0x490 [ 248.732033][ T8609] ? __pfx___pollwait+0x10/0x10 [ 248.732054][ T8609] ? __pfx_n_tty_poll+0x10/0x10 [ 248.732075][ T8609] __pollwait+0x2c3/0x490 [ 248.732098][ T8609] ? __pfx___pollwait+0x10/0x10 [ 248.732121][ T8609] ? __pfx_n_tty_poll+0x10/0x10 [ 248.732142][ T8609] n_tty_poll+0xaf/0x860 [ 248.732166][ T8609] ? __pfx_n_tty_poll+0x10/0x10 [ 248.732187][ T8609] tty_poll+0xdc/0x140 [ 248.732203][ T8609] ? __pfx_tty_poll+0x10/0x10 [ 248.732218][ T8609] do_select+0xd54/0x1850 [ 248.732255][ T8609] ? __pfx_do_select+0x10/0x10 [ 248.732279][ T8609] ? __pfx___pollwait+0x10/0x10 [ 248.732303][ T8609] ? __pfx_pollwake+0x10/0x10 [ 248.732326][ T8609] ? __pfx_pollwake+0x10/0x10 [ 248.732349][ T8609] ? __pfx_pollwake+0x10/0x10 [ 248.732372][ T8609] ? __pfx_pollwake+0x10/0x10 [ 248.732396][ T8609] ? __pfx_pollwake+0x10/0x10 [ 248.732419][ T8609] ? __pfx_pollwake+0x10/0x10 [ 248.732442][ T8609] ? __pfx_pollwake+0x10/0x10 [ 248.732473][ T8609] ? __pfx_pollwake+0x10/0x10 [ 248.732496][ T8609] ? __pfx_pollwake+0x10/0x10 [ 248.732519][ T8609] ? find_held_lock+0x2b/0x80 [ 248.732538][ T8609] ? __might_fault+0xc5/0x140 [ 248.732554][ T8609] ? __might_fault+0xc5/0x140 [ 248.732575][ T8609] ? core_sys_select+0x55b/0xbb0 [ 248.732597][ T8609] core_sys_select+0x55b/0xbb0 [ 248.732624][ T8609] ? __pfx_core_sys_select+0x10/0x10 [ 248.732646][ T8609] ? get_pid_task+0xfc/0x250 [ 248.732669][ T8609] ? get_pid_task+0x106/0x250 [ 248.732701][ T8609] ? __pfx_vfs_write+0x10/0x10 [ 248.732715][ T8609] ? do_sys_openat2+0x159/0x1e0 [ 248.732734][ T8609] ? __pfx_do_sys_openat2+0x10/0x10 [ 248.732756][ T8609] kern_select+0x1d0/0x280 [ 248.732781][ T8609] ? __pfx_kern_select+0x10/0x10 [ 248.732806][ T8609] ? __pfx_ksys_write+0x10/0x10 [ 248.732823][ T8609] __x64_sys_select+0xbd/0x160 [ 248.732836][ T8609] ? do_syscall_64+0x90/0x840 [ 248.732849][ T8609] ? lockdep_hardirqs_on+0x78/0x100 [ 248.732872][ T8609] do_syscall_64+0x115/0x840 [ 248.732884][ T8609] ? clear_bhb_loop+0x40/0x90 [ 248.732902][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.732917][ T8609] RIP: 0033:0x7f8ed999de59 [ 248.732930][ T8609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.732943][ T8609] RSP: 002b:00007f8eda88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 248.732957][ T8609] RAX: ffffffffffffffda RBX: 00007f8ed9c26090 RCX: 00007f8ed999de59 [ 248.732967][ T8609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 248.732975][ T8609] RBP: 00007f8eda88d090 R08: 0000000000000000 R09: 0000000000000000 [ 248.732984][ T8609] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 248.732992][ T8609] R13: 00007f8ed9c26128 R14: 00007f8ed9c26090 R15: 00007ffc1fa75bd8 [ 248.733011][ T8609] [ 249.303538][ T8586] Process accounting resumed [ 249.772140][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.2.573'. [ 249.989280][ T8624] openvswitch: : Dropping previously announced user features [ 250.025536][ T8626] FAULT_INJECTION: forcing a failure. [ 250.025536][ T8626] name failslab, interval 1, probability 0, space 0, times 0 [ 250.056232][ T8626] CPU: 0 UID: 0 PID: 8626 Comm: syz.2.573 Not tainted syzkaller #0 PREEMPT(full) [ 250.056254][ T8626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 250.056264][ T8626] Call Trace: [ 250.056269][ T8626] [ 250.056275][ T8626] dump_stack_lvl+0x100/0x190 [ 250.056299][ T8626] should_fail_ex.cold+0x5/0xa [ 250.056316][ T8626] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 250.056342][ T8626] should_failslab+0xc2/0x120 [ 250.056365][ T8626] kmem_cache_alloc_noprof+0x91/0x6a0 [ 250.056385][ T8626] ? skb_clone+0x190/0x400 [ 250.056405][ T8626] skb_clone+0x190/0x400 [ 250.056423][ T8626] netlink_deliver_tap+0xaed/0xcc0 [ 250.056449][ T8626] netlink_unicast+0x6a5/0x850 [ 250.056474][ T8626] ? __pfx_netlink_unicast+0x10/0x10 [ 250.056495][ T8626] ? genl_rcv_msg+0x4be/0x800 [ 250.056515][ T8626] netlink_ack+0x655/0xb80 [ 250.056543][ T8626] netlink_rcv_skb+0x333/0x420 [ 250.056566][ T8626] ? __pfx_genl_rcv_msg+0x10/0x10 [ 250.056582][ T8626] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 250.056612][ T8626] ? netlink_deliver_tap+0x1ae/0xcc0 [ 250.056636][ T8626] genl_rcv+0x28/0x40 [ 250.056649][ T8626] netlink_unicast+0x585/0x850 [ 250.056674][ T8626] ? __pfx_netlink_unicast+0x10/0x10 [ 250.056702][ T8626] netlink_sendmsg+0x8b0/0xda0 [ 250.056728][ T8626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.056753][ T8626] ? apparmor_socket_sendmsg+0x15b/0x270 [ 250.056772][ T8626] ____sys_sendmsg+0xa4d/0xbe0 [ 250.056792][ T8626] ? __pfx_netlink_sendmsg+0x10/0x10 [ 250.056817][ T8626] ? __pfx_____sys_sendmsg+0x10/0x10 [ 250.056847][ T8626] ___sys_sendmsg+0x190/0x1e0 [ 250.056870][ T8626] ? __pfx____sys_sendmsg+0x10/0x10 [ 250.056891][ T8626] ? __lock_acquire+0x49f/0x1a40 [ 250.056906][ T8626] ? get_pid_task+0x106/0x250 [ 250.056947][ T8626] __sys_sendmsg+0x160/0x210 [ 250.056965][ T8626] ? __pfx___sys_sendmsg+0x10/0x10 [ 250.056993][ T8626] do_syscall_64+0x115/0x840 [ 250.057006][ T8626] ? clear_bhb_loop+0x40/0x90 [ 250.057024][ T8626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.057042][ T8626] RIP: 0033:0x7f9b4a39de59 [ 250.057055][ T8626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 250.057069][ T8626] RSP: 002b:00007f9b4b26a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 250.057084][ T8626] RAX: ffffffffffffffda RBX: 00007f9b4a626180 RCX: 00007f9b4a39de59 [ 250.057093][ T8626] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000007 [ 250.057102][ T8626] RBP: 00007f9b4b26a090 R08: 0000000000000000 R09: 0000000000000000 [ 250.057111][ T8626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 250.057119][ T8626] R13: 00007f9b4a626218 R14: 00007f9b4a626180 R15: 00007ffc0b028cb8 [ 250.057145][ T8626] [ 250.633230][ T8636] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5624] was attempted by ""[8636] [ 250.989130][ T29] audit: type=1800 audit(4294967351.970:7): pid=8645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.576" name="dbroot" dev="configfs" ino=27703 res=0 errno=0 [ 253.205099][ T8691] [U] 0="/ [ 253.238639][ T8691] [U] [ 253.250172][ T8694] FAULT_INJECTION: forcing a failure. [ 253.250172][ T8694] name failslab, interval 1, probability 0, space 0, times 0 [ 253.268269][ T8691] [U] EeQ@ [ 253.296313][ T8694] CPU: 0 UID: 0 PID: 8694 Comm: syz.0.584 Not tainted syzkaller #0 PREEMPT(full) [ 253.296336][ T8694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.296346][ T8694] Call Trace: [ 253.296352][ T8694] [ 253.296359][ T8694] dump_stack_lvl+0x100/0x190 [ 253.296389][ T8694] should_fail_ex.cold+0x5/0xa [ 253.296412][ T8694] should_failslab+0xc2/0x120 [ 253.296434][ T8694] __kmalloc_cache_noprof+0x91/0x6c0 [ 253.296451][ T8694] ? rfkill_fop_open+0x1cc/0x480 [ 253.296475][ T8694] rfkill_fop_open+0x1cc/0x480 [ 253.296498][ T8694] ? __pfx_rfkill_fop_open+0x10/0x10 [ 253.296520][ T8694] misc_open+0x26d/0x450 [ 253.296546][ T8694] ? __pfx_misc_open+0x10/0x10 [ 253.296563][ T8694] chrdev_open+0x234/0x6a0 [ 253.296579][ T8694] ? __pfx_apparmor_file_open+0x10/0x10 [ 253.296596][ T8694] ? __pfx_chrdev_open+0x10/0x10 [ 253.296612][ T8694] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 253.296633][ T8694] do_dentry_open+0x6ab/0x14d0 [ 253.296648][ T8694] ? __pfx_chrdev_open+0x10/0x10 [ 253.296668][ T8694] vfs_open+0x82/0x3f0 [ 253.296689][ T8694] path_openat+0x2873/0x4280 [ 253.296714][ T8694] ? __pfx_path_openat+0x10/0x10 [ 253.296735][ T8694] do_file_open+0x20e/0x430 [ 253.296757][ T8694] ? __pfx_do_file_open+0x10/0x10 [ 253.296786][ T8694] ? alloc_fd+0x471/0x7a0 [ 253.296803][ T8694] ? do_getname+0x191/0x390 [ 253.296822][ T8694] do_sys_openat2+0x10f/0x1e0 [ 253.296841][ T8694] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.296868][ T8694] __x64_sys_openat+0x12d/0x210 [ 253.296888][ T8694] ? __pfx___x64_sys_openat+0x10/0x10 [ 253.296915][ T8694] do_syscall_64+0x115/0x840 [ 253.296928][ T8694] ? clear_bhb_loop+0x40/0x90 [ 253.296946][ T8694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.296961][ T8694] RIP: 0033:0x7f56a939de59 [ 253.296976][ T8694] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.296989][ T8694] RSP: 002b:00007f56a75f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.297005][ T8694] RAX: ffffffffffffffda RBX: 00007f56a9625fa0 RCX: 00007f56a939de59 [ 253.297014][ T8694] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 253.297024][ T8694] RBP: 00007f56a9433e6f R08: 0000000000000000 R09: 0000000000000000 [ 253.297033][ T8694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.297042][ T8694] R13: 00007f56a9626038 R14: 00007f56a9625fa0 R15: 00007fff69f01118 [ 253.297063][ T8694] [ 253.551176][ T8690] [U]  [ 254.086590][ T8705] netlink: 28 bytes leftover after parsing attributes in process `syz.3.586'. [ 254.320779][ T8715] futex_wake_op: syz.0.587 tries to shift op by -2048; fix this program [ 254.362880][ T8715] futex_wake_op: syz.0.587 tries to shift op by -2048; fix this program [ 254.400595][ T8715] FAULT_INJECTION: forcing a failure. [ 254.400595][ T8715] name failslab, interval 1, probability 0, space 0, times 0 [ 254.482575][ T8715] CPU: 0 UID: 0 PID: 8715 Comm: syz.0.587 Not tainted syzkaller #0 PREEMPT(full) [ 254.482596][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 254.482607][ T8715] Call Trace: [ 254.482612][ T8715] [ 254.482618][ T8715] dump_stack_lvl+0x100/0x190 [ 254.482642][ T8715] should_fail_ex.cold+0x5/0xa [ 254.482663][ T8715] should_failslab+0xc2/0x120 [ 254.482685][ T8715] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 254.482706][ T8715] ? __kasan_kmalloc+0xaa/0xb0 [ 254.482725][ T8715] ? allocate_partition+0x1bc/0x2a0 [ 254.482750][ T8715] kstrdup+0x51/0xe0 [ 254.482768][ T8715] allocate_partition+0x1bc/0x2a0 [ 254.482789][ T8715] ? __lock_acquire+0x49f/0x1a40 [ 254.482806][ T8715] mtd_add_partition+0x1bc/0x660 [ 254.482828][ T8715] ? __pfx_mtd_add_partition+0x10/0x10 [ 254.482848][ T8715] ? __might_fault+0xc5/0x140 [ 254.482863][ T8715] ? __might_fault+0xc5/0x140 [ 254.482886][ T8715] mtdchar_blkpg_ioctl+0x207/0x250 [ 254.482907][ T8715] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 254.482945][ T8715] mtdchar_ioctl+0x1670/0x1fd0 [ 254.482972][ T8715] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 254.482995][ T8715] ? lock_acquire+0x1b9/0x370 [ 254.483014][ T8715] ? trace_contention_end+0x126/0x160 [ 254.483034][ T8715] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 254.483057][ T8715] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 254.483081][ T8715] ? __pfx___mutex_lock+0x10/0x10 [ 254.483099][ T8715] ? find_held_lock+0x2b/0x80 [ 254.483127][ T8715] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 254.483150][ T8715] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 254.483174][ T8715] __x64_sys_ioctl+0x18e/0x210 [ 254.483197][ T8715] do_syscall_64+0x115/0x840 [ 254.483209][ T8715] ? clear_bhb_loop+0x40/0x90 [ 254.483235][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.483250][ T8715] RIP: 0033:0x7f56a939de59 [ 254.483271][ T8715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.483287][ T8715] RSP: 002b:00007f56a75d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 254.483302][ T8715] RAX: ffffffffffffffda RBX: 00007f56a9626090 RCX: 00007f56a939de59 [ 254.483312][ T8715] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000005 [ 254.483320][ T8715] RBP: 00007f56a75d5090 R08: 0000000000000000 R09: 0000000000000000 [ 254.483329][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.483338][ T8715] R13: 00007f56a9626128 R14: 00007f56a9626090 R15: 00007fff69f01118 [ 254.483357][ T8715] [ 254.483373][ T8715] memory allocation error while creating partitions for "mtdram test device" [ 256.427274][ T8760] FAULT_INJECTION: forcing a failure. [ 256.427274][ T8760] name failslab, interval 1, probability 0, space 0, times 0 [ 256.480571][ T8760] CPU: 0 UID: 0 PID: 8760 Comm: syz.3.593 Not tainted syzkaller #0 PREEMPT(full) [ 256.480596][ T8760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 256.480606][ T8760] Call Trace: [ 256.480611][ T8760] [ 256.480618][ T8760] dump_stack_lvl+0x100/0x190 [ 256.480643][ T8760] should_fail_ex.cold+0x5/0xa [ 256.480664][ T8760] should_failslab+0xc2/0x120 [ 256.480687][ T8760] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 256.480707][ T8760] ? lockdep_init_map_type+0x5c/0x250 [ 256.480722][ T8760] ? __d_alloc+0x35/0xa50 [ 256.480741][ T8760] __d_alloc+0x35/0xa50 [ 256.480762][ T8760] d_alloc_pseudo+0x1c/0xc0 [ 256.480782][ T8760] alloc_file_pseudo+0x118/0x290 [ 256.480803][ T8760] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 256.480822][ T8760] ? tipc_sk_finish_conn+0x600/0x7a0 [ 256.480844][ T8760] sock_alloc_file+0x50/0x210 [ 256.480863][ T8760] __sys_socketpair+0x353/0x5b0 [ 256.480879][ T8760] ? __pfx___sys_socketpair+0x10/0x10 [ 256.480894][ T8760] ? xfd_validate_state+0x129/0x190 [ 256.480917][ T8760] __x64_sys_socketpair+0x96/0x100 [ 256.480931][ T8760] ? lockdep_hardirqs_on+0x78/0x100 [ 256.480954][ T8760] do_syscall_64+0x115/0x840 [ 256.480967][ T8760] ? clear_bhb_loop+0x40/0x90 [ 256.480984][ T8760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.480999][ T8760] RIP: 0033:0x7f307b19de59 [ 256.481013][ T8760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.481027][ T8760] RSP: 002b:00007f307c02e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 256.481042][ T8760] RAX: ffffffffffffffda RBX: 00007f307b425fa0 RCX: 00007f307b19de59 [ 256.481052][ T8760] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 256.481061][ T8760] RBP: 00007f307b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 256.481070][ T8760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.481078][ T8760] R13: 00007f307b426038 R14: 00007f307b425fa0 R15: 00007ffc4046b608 [ 256.481103][ T8760] [ 256.707834][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.714405][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.155180][ T8771] [U] 0="/ [ 257.159995][ T8771] [U] [ 257.190149][ T8771] [U] EeQ@ [ 257.210405][ T8770] [U]  [ 257.269221][ T8777] futex_wake_op: syz.2.598 tries to shift op by -2048; fix this program [ 257.322695][ T8777] futex_wake_op: syz.2.598 tries to shift op by -2048; fix this program [ 257.400506][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.0.599'. [ 257.461373][ T8784] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 257.533132][ T8784] netlink: 41 bytes leftover after parsing attributes in process `syz.0.599'. [ 257.646595][ T8792] netlink: 'syz.0.599': attribute type 1 has an invalid length. [ 257.734283][ T8788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.599'. [ 257.874690][ T8792] netlink: 41 bytes leftover after parsing attributes in process `syz.0.599'. [ 258.811268][ T8822] [U] 0="/ [ 258.830645][ T8822] [U] [ 258.840723][ T8822] [U] EeQ@ [ 259.295091][ T8821] [U]  [ 260.127519][ T8843] random: crng reseeded on system resumption [ 262.841080][ T8858] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 263.005859][ T8865] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 263.042163][ T8865] netlink: 310 bytes leftover after parsing attributes in process `syz.2.617'. [ 263.359151][ T8875] netlink: 'syz.2.619': attribute type 10 has an invalid length. [ 263.391754][ T8875] netlink: 330 bytes leftover after parsing attributes in process `syz.2.619'. [ 263.920227][ T5638] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 265.474605][ T8916] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 265.594009][ T8916] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 265.696871][ T8916] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 265.753650][ T8922] [U] 0="/ [ 265.765677][ T8922] [U] [ 265.776515][ T8922] [U] EeQ@ [ 265.803885][ T8921] [U]  [ 265.807974][ T8916] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 265.843551][ T8924] serio: Serial port pty173 [ 265.897142][ T8916] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 267.205070][ T8956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.643'. [ 267.326159][ T8924] Process accounting resumed [ 267.494757][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 267.501456][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 267.546371][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 267.624622][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 267.733049][ T8970] random: crng reseeded on system resumption [ 267.863897][ T5638] Bluetooth: hci2: command 0x0c1a tx timeout [ 268.735842][ T8991] netlink: 246 bytes leftover after parsing attributes in process `syz.2.652'. [ 269.705355][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.881637][ T9002] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 269.944643][ T5638] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.169664][ T9010] netlink: 342 bytes leftover after parsing attributes in process `syz.0.656'. [ 271.336104][ T9036] [U] 0="/ [ 271.361576][ T9036] [U] [ 271.382327][ T9036] [U] EeQ@ [ 271.425413][ T9035] [U]  [ 273.220811][ T9063] syz.3.671 uses obsolete (PF_INET,SOCK_PACKET) [ 273.264749][ T9060] FAULT_INJECTION: forcing a failure. [ 273.264749][ T9060] name failslab, interval 1, probability 0, space 0, times 0 [ 273.335465][ T9060] CPU: 0 UID: 0 PID: 9060 Comm: syz.0.669 Not tainted syzkaller #0 PREEMPT(full) [ 273.335488][ T9060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 273.335498][ T9060] Call Trace: [ 273.335504][ T9060] [ 273.335510][ T9060] dump_stack_lvl+0x100/0x190 [ 273.335535][ T9060] should_fail_ex.cold+0x5/0xa [ 273.335556][ T9060] should_failslab+0xc2/0x120 [ 273.335578][ T9060] __kmalloc_cache_noprof+0x91/0x6c0 [ 273.335594][ T9060] ? __asan_memcpy+0x3c/0x60 [ 273.335609][ T9060] ? vidtv_psi_short_event_desc_init+0xbb/0x5f0 [ 273.335630][ T9060] vidtv_psi_short_event_desc_init+0xbb/0x5f0 [ 273.335652][ T9060] vidtv_psi_desc_clone+0x33f/0x5d0 [ 273.335670][ T9060] vidtv_channel_si_init+0x76c/0x18f0 [ 273.335696][ T9060] vidtv_mux_init+0x522/0xbf0 [ 273.335719][ T9060] vidtv_start_feed+0x34e/0x500 [ 273.335742][ T9060] ? __pfx_vidtv_start_feed+0x10/0x10 [ 273.335766][ T9060] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 273.335799][ T9060] dmx_section_feed_start_filtering+0x3a8/0x660 [ 273.335822][ T9060] dvb_dmxdev_filter_start+0x767/0xdd0 [ 273.335851][ T9060] dvb_demux_do_ioctl+0xe64/0x1200 [ 273.335879][ T9060] dvb_usercopy+0x167/0x340 [ 273.335898][ T9060] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 273.335922][ T9060] ? __pfx_dvb_usercopy+0x10/0x10 [ 273.335950][ T9060] ? __fget_files+0x21f/0x3d0 [ 273.335968][ T9060] dvb_demux_ioctl+0x29/0x40 [ 273.335988][ T9060] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 273.336008][ T9060] __x64_sys_ioctl+0x18e/0x210 [ 273.336041][ T9060] do_syscall_64+0x115/0x840 [ 273.336056][ T9060] ? clear_bhb_loop+0x40/0x90 [ 273.336075][ T9060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.336090][ T9060] RIP: 0033:0x7f56a939de59 [ 273.336105][ T9060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.336120][ T9060] RSP: 002b:00007f56a75d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 273.336135][ T9060] RAX: ffffffffffffffda RBX: 00007f56a9626090 RCX: 00007f56a939de59 [ 273.336146][ T9060] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 273.336156][ T9060] RBP: 00007f56a9433e6f R08: 0000000000000000 R09: 0000000000000000 [ 273.336165][ T9060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 273.336175][ T9060] R13: 00007f56a9626128 R14: 00007f56a9626090 R15: 00007fff69f01118 [ 273.336196][ T9060] [ 279.229766][ T9108] Process accounting resumed [ 279.483120][ T9147] [U] 0="/ [ 279.512331][ T9147] [U] [ 279.530498][ T9147] [U] EeQ@ [ 279.564044][ T9146] [U]  [ 279.700997][ T9144] Process accounting paused [ 279.859312][ T9157] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 279.880206][ T9156] netlink: 28 bytes leftover after parsing attributes in process `syz.2.683'. [ 280.477605][ T5638] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 280.485386][ T5638] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 281.038933][ T9182] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by ""[9182] [ 281.161686][ T9186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.689'. [ 281.653093][ T9198] [U] 0="/ [ 281.665384][ T9198] [U] [ 281.675881][ T9198] [U] EeQ@ [ 281.699699][ T9197] [U]  [ 281.932385][ T9201] [U] 0="/ [ 281.953051][ T9201] [U] [ 281.967770][ T9201] [U] EeQ@ [ 282.014402][ T9200] [U]  [ 285.489932][ T9228] Process accounting resumed [ 286.656466][ T9301] binder: 9300:9301 ioctl c0306201 2000000000c0 returned -14 [ 286.839348][ T9302] misc userio: No port type given on /dev/userio [ 287.187656][ T9314] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 287.242826][ T9314] netlink: 310 bytes leftover after parsing attributes in process `syz.2.715'. [ 287.687488][ T9334] netlink: 'syz.0.721': attribute type 1 has an invalid length. [ 287.712711][ T9334] netlink: 13 bytes leftover after parsing attributes in process `syz.0.721'. [ 288.037799][ T9343] kafs: addr_prefs: Invalid Command [ 292.216093][ T9422] netlink: 146 bytes leftover after parsing attributes in process `syz.2.745'. [ 293.298075][ T9441] FAULT_INJECTION: forcing a failure. [ 293.298075][ T9441] name failslab, interval 1, probability 0, space 0, times 0 [ 293.406424][ T9441] CPU: 0 UID: 0 PID: 9441 Comm: syz.0.750 Not tainted syzkaller #0 PREEMPT(full) [ 293.406446][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 293.406455][ T9441] Call Trace: [ 293.406461][ T9441] [ 293.406467][ T9441] dump_stack_lvl+0x100/0x190 [ 293.406491][ T9441] should_fail_ex.cold+0x5/0xa [ 293.406512][ T9441] should_failslab+0xc2/0x120 [ 293.406533][ T9441] __kmalloc_noprof+0xfc/0x820 [ 293.406551][ T9441] ? rcu_is_watching+0x12/0xc0 [ 293.406576][ T9441] ? tomoyo_realpath_from_path+0xb6/0x690 [ 293.406602][ T9441] tomoyo_realpath_from_path+0xb6/0x690 [ 293.406627][ T9441] tomoyo_path_number_perm+0x23c/0x580 [ 293.406645][ T9441] ? tomoyo_path_number_perm+0x22e/0x580 [ 293.406663][ T9441] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 293.406688][ T9441] ? rcu_read_lock_any_held+0x6a/0xa0 [ 293.406720][ T9441] ? fd_install+0x24f/0x580 [ 293.406734][ T9441] ? hook_file_ioctl_common+0x140/0x440 [ 293.406761][ T9441] security_file_ioctl+0xd3/0x230 [ 293.406780][ T9441] __x64_sys_ioctl+0xb7/0x210 [ 293.406803][ T9441] do_syscall_64+0x115/0x840 [ 293.406819][ T9441] ? clear_bhb_loop+0x40/0x90 [ 293.406838][ T9441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.406853][ T9441] RIP: 0033:0x7f56a939de59 [ 293.406866][ T9441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.406881][ T9441] RSP: 002b:00007f56a75f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.406896][ T9441] RAX: ffffffffffffffda RBX: 00007f56a9625fa0 RCX: 00007f56a939de59 [ 293.406906][ T9441] RDX: 0000000000000000 RSI: 0000000000004b72 RDI: 0000000000000001 [ 293.406915][ T9441] RBP: 00007f56a75f6090 R08: 0000000000000000 R09: 0000000000000000 [ 293.406924][ T9441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.406933][ T9441] R13: 00007f56a9626038 R14: 00007f56a9625fa0 R15: 00007fff69f01118 [ 293.406952][ T9441] [ 293.406965][ T9441] ERROR: Out of memory at tomoyo_realpath_from_path. [ 294.327308][ T9454] FAULT_INJECTION: forcing a failure. [ 294.327308][ T9454] name failslab, interval 1, probability 0, space 0, times 0 [ 294.379670][ T9454] CPU: 0 UID: 0 PID: 9454 Comm: syz.1.753 Not tainted syzkaller #0 PREEMPT(full) [ 294.379694][ T9454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 294.379722][ T9454] Call Trace: [ 294.379730][ T9454] [ 294.379736][ T9454] dump_stack_lvl+0x100/0x190 [ 294.379761][ T9454] should_fail_ex.cold+0x5/0xa [ 294.379782][ T9454] should_failslab+0xc2/0x120 [ 294.379803][ T9454] kmem_cache_alloc_noprof+0x91/0x6a0 [ 294.379822][ T9454] ? trace_kmem_cache_alloc+0xdd/0x100 [ 294.379852][ T9454] ? security_file_alloc+0x34/0x2c0 [ 294.379876][ T9454] security_file_alloc+0x34/0x2c0 [ 294.379896][ T9454] init_file+0x95/0x480 [ 294.379915][ T9454] alloc_empty_file+0x79/0x1c0 [ 294.379934][ T9454] path_openat+0xe7/0x4280 [ 294.379949][ T9454] ? __kasan_slab_alloc+0x89/0x90 [ 294.379968][ T9454] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 294.379985][ T9454] ? do_getname+0x35/0x390 [ 294.380001][ T9454] ? do_sys_openat2+0xc7/0x1e0 [ 294.380019][ T9454] ? __x64_sys_openat+0x12d/0x210 [ 294.380037][ T9454] ? do_syscall_64+0x115/0x840 [ 294.380066][ T9454] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.380089][ T9454] ? __pfx_path_openat+0x10/0x10 [ 294.380131][ T9454] do_file_open+0x20e/0x430 [ 294.380149][ T9454] ? __pfx_do_file_open+0x10/0x10 [ 294.380179][ T9454] ? alloc_fd+0x471/0x7a0 [ 294.380196][ T9454] ? do_getname+0x191/0x390 [ 294.380217][ T9454] do_sys_openat2+0x10f/0x1e0 [ 294.380238][ T9454] ? __pfx_do_sys_openat2+0x10/0x10 [ 294.380265][ T9454] __x64_sys_openat+0x12d/0x210 [ 294.380285][ T9454] ? __pfx___x64_sys_openat+0x10/0x10 [ 294.380311][ T9454] do_syscall_64+0x115/0x840 [ 294.380324][ T9454] ? clear_bhb_loop+0x40/0x90 [ 294.380342][ T9454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.380357][ T9454] RIP: 0033:0x7f8ed999de59 [ 294.380371][ T9454] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.380398][ T9454] RSP: 002b:00007f8eda88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 294.380416][ T9454] RAX: ffffffffffffffda RBX: 00007f8ed9c26090 RCX: 00007f8ed999de59 [ 294.380427][ T9454] RDX: 0000000000088000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 294.380437][ T9454] RBP: 00007f8ed9a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 294.380446][ T9454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 294.380455][ T9454] R13: 00007f8ed9c26128 R14: 00007f8ed9c26090 R15: 00007ffc1fa75bd8 [ 294.380474][ T9454] [ 295.574585][ T9484] MTRR 1 not used [ 295.851172][ T9495] netlink: 29 bytes leftover after parsing attributes in process `syz.2.763'. [ 296.153089][ T9501] FAULT_INJECTION: forcing a failure. [ 296.153089][ T9501] name failslab, interval 1, probability 0, space 0, times 0 [ 296.167098][ T9501] CPU: 0 UID: 0 PID: 9501 Comm: syz.1.764 Not tainted syzkaller #0 PREEMPT(full) [ 296.167120][ T9501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 296.167136][ T9501] Call Trace: [ 296.167144][ T9501] [ 296.167150][ T9501] dump_stack_lvl+0x100/0x190 [ 296.167174][ T9501] should_fail_ex.cold+0x5/0xa [ 296.167195][ T9501] should_failslab+0xc2/0x120 [ 296.167217][ T9501] kmem_cache_alloc_noprof+0x91/0x6a0 [ 296.167236][ T9501] ? __pfx_stack_trace_save+0x10/0x10 [ 296.167258][ T9501] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 296.167285][ T9501] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 296.167309][ T9501] idr_get_free+0x52e/0xa00 [ 296.167338][ T9501] idr_alloc_u32+0x1ac/0x320 [ 296.167354][ T9501] ? __pfx_idr_alloc_u32+0x10/0x10 [ 296.167367][ T9501] ? do_raw_spin_lock+0x128/0x260 [ 296.167391][ T9501] l2tp_tunnel_register+0xfc/0xc10 [ 296.167414][ T9501] ? __pfx___debug_object_init+0x10/0x10 [ 296.167436][ T9501] ? sprintf+0xcc/0x100 [ 296.167467][ T9501] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 296.167489][ T9501] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 296.167504][ T9501] ? __local_bh_enable_ip+0x9e/0x120 [ 296.167521][ T9501] ? l2tp_tunnel_get+0x20c/0x490 [ 296.167540][ T9501] ? lockdep_init_map_type+0x5c/0x250 [ 296.167556][ T9501] ? lockdep_init_map_type+0x5c/0x250 [ 296.167570][ T9501] ? l2tp_tunnel_create+0x2cf/0x460 [ 296.167587][ T9501] ? l2tp_tunnel_create+0x37d/0x460 [ 296.167606][ T9501] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 296.167636][ T9501] ? __pfx_pppol2tp_tunnel_get.constprop.0+0x10/0x10 [ 296.167669][ T9501] pppol2tp_connect+0xaf0/0x1c20 [ 296.167692][ T9501] ? aa_sk_perm+0x309/0xaa0 [ 296.167710][ T9501] ? __pfx_pppol2tp_connect+0x10/0x10 [ 296.167731][ T9501] ? __pfx_tomoyo_socket_connect_permission+0x10/0x10 [ 296.167754][ T9501] ? __pfx_aa_sk_perm+0x10/0x10 [ 296.167777][ T9501] ? apparmor_socket_connect+0x100/0x1b0 [ 296.167803][ T9501] ? __pfx_pppol2tp_connect+0x10/0x10 [ 296.167823][ T9501] __sys_connect_file+0x141/0x1a0 [ 296.167841][ T9501] __sys_connect+0x141/0x170 [ 296.167856][ T9501] ? __pfx___sys_connect+0x10/0x10 [ 296.167878][ T9501] ? __pfx_ksys_write+0x10/0x10 [ 296.167895][ T9501] __x64_sys_connect+0x72/0xb0 [ 296.167909][ T9501] ? lockdep_hardirqs_on+0x78/0x100 [ 296.167932][ T9501] do_syscall_64+0x115/0x840 [ 296.167945][ T9501] ? clear_bhb_loop+0x40/0x90 [ 296.167963][ T9501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.167978][ T9501] RIP: 0033:0x7f8ed999de59 [ 296.167992][ T9501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.168006][ T9501] RSP: 002b:00007f8eda8ae028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 296.168022][ T9501] RAX: ffffffffffffffda RBX: 00007f8ed9c25fa0 RCX: 00007f8ed999de59 [ 296.168031][ T9501] RDX: 000000000000003a RSI: 0000200000000000 RDI: 0000000000000001 [ 296.168040][ T9501] RBP: 00007f8eda8ae090 R08: 0000000000000000 R09: 0000000000000000 [ 296.168049][ T9501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.168058][ T9501] R13: 00007f8ed9c26038 R14: 00007f8ed9c25fa0 R15: 00007ffc1fa75bd8 [ 296.168077][ T9501] [ 297.427975][ T9449] Process accounting paused [ 299.410682][ T9569] FAULT_INJECTION: forcing a failure. [ 299.410682][ T9569] name failslab, interval 1, probability 0, space 0, times 0 [ 299.507643][ T9569] CPU: 0 UID: 0 PID: 9569 Comm: syz.3.779 Not tainted syzkaller #0 PREEMPT(full) [ 299.507667][ T9569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 299.507687][ T9569] Call Trace: [ 299.507693][ T9569] [ 299.507699][ T9569] dump_stack_lvl+0x100/0x190 [ 299.507724][ T9569] should_fail_ex.cold+0x5/0xa [ 299.507746][ T9569] should_failslab+0xc2/0x120 [ 299.507767][ T9569] kmem_cache_alloc_noprof+0x91/0x6a0 [ 299.507787][ T9569] ? __kernfs_new_node+0xd2/0xa10 [ 299.507805][ T9569] __kernfs_new_node+0xd2/0xa10 [ 299.507823][ T9569] ? __pfx___kernfs_new_node+0x10/0x10 [ 299.507842][ T9569] ? find_held_lock+0x2b/0x80 [ 299.507861][ T9569] ? kernfs_root+0xee/0x2a0 [ 299.507882][ T9569] ? kernfs_root+0xee/0x2a0 [ 299.507908][ T9569] kernfs_new_node+0x117/0x150 [ 299.507926][ T9569] __kernfs_create_file+0x53/0x350 [ 299.507947][ T9569] sysfs_add_file_mode_ns+0x207/0x3c0 [ 299.507973][ T9569] internal_create_group+0x593/0xfb0 [ 299.507999][ T9569] ? kernfs_create_dir_ns+0x16f/0x2b0 [ 299.508015][ T9569] ? __pfx_internal_create_group+0x10/0x10 [ 299.508038][ T9569] ? sysfs_create_dir_ns+0x14c/0x2b0 [ 299.508059][ T9569] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 299.508079][ T9569] ? find_held_lock+0x2b/0x80 [ 299.508097][ T9569] ? kobject_add_internal+0x25f/0x930 [ 299.508118][ T9569] internal_create_groups+0x9d/0x150 [ 299.508143][ T9569] kobject_add_internal+0x317/0x930 [ 299.508165][ T9569] kobject_init_and_add+0x121/0x180 [ 299.508187][ T9569] ? __pfx_kobject_init_and_add+0x10/0x10 [ 299.508207][ T9569] ? __kasan_kmalloc+0xaa/0xb0 [ 299.508227][ T9569] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 299.508250][ T9569] ? rpc_sysfs_client_setup+0x112/0x310 [ 299.508273][ T9569] rpc_sysfs_client_setup+0x190/0x310 [ 299.508295][ T9569] ? __pfx_rpc_sysfs_client_setup+0x10/0x10 [ 299.508313][ T9569] ? rpc_net_ns+0xe8/0x2a0 [ 299.508336][ T9569] rpc_new_client+0x924/0x1300 [ 299.508362][ T9569] rpc_create_xprt+0xd9/0x440 [ 299.508385][ T9569] rpc_create+0x46e/0x7f0 [ 299.508408][ T9569] ? __pfx_rpc_create+0x10/0x10 [ 299.508455][ T9569] ? check_prev_add+0x354/0xe60 [ 299.508481][ T9569] rpcb_create_af_local+0x177/0x360 [ 299.508501][ T9569] ? __pfx_rpcb_create_af_local+0x10/0x10 [ 299.508529][ T9569] ? find_held_lock+0x2b/0x80 [ 299.508547][ T9569] ? rpcb_create_local+0x1da/0x270 [ 299.508565][ T9569] ? rpcb_create_local+0x1da/0x270 [ 299.508589][ T9569] rpcb_create_local+0x1ee/0x270 [ 299.508609][ T9569] svc_bind+0x1e8/0x260 [ 299.508631][ T9569] nfsd_create_serv+0x2da/0x4a0 [ 299.508650][ T9569] ? __pfx_nfsd_create_serv+0x10/0x10 [ 299.508669][ T9569] ? __nla_validate_parse+0x1e7/0x28b0 [ 299.508690][ T9569] nfsd_nl_listener_set_doit+0xdd/0x1a80 [ 299.508715][ T9569] ? rcu_is_watching+0x12/0xc0 [ 299.508734][ T9569] ? trace_kmalloc+0xeb/0x110 [ 299.508755][ T9569] ? __kasan_kmalloc+0xaa/0xb0 [ 299.508775][ T9569] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 299.508801][ T9569] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 299.508819][ T9569] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 299.508840][ T9569] genl_family_rcv_msg_doit+0x214/0x300 [ 299.508858][ T9569] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 299.508875][ T9569] ? genl_get_cmd+0x3e7/0x760 [ 299.508895][ T9569] ? bpf_lsm_capable+0x9/0x10 [ 299.508912][ T9569] ? security_capable+0x80/0x260 [ 299.508930][ T9569] genl_rcv_msg+0x560/0x800 [ 299.508948][ T9569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.508965][ T9569] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 299.508994][ T9569] netlink_rcv_skb+0x159/0x420 [ 299.509017][ T9569] ? __pfx_genl_rcv_msg+0x10/0x10 [ 299.509034][ T9569] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.509064][ T9569] ? netlink_deliver_tap+0x1ae/0xcc0 [ 299.509089][ T9569] genl_rcv+0x28/0x40 [ 299.509102][ T9569] netlink_unicast+0x585/0x850 [ 299.509127][ T9569] ? __pfx_netlink_unicast+0x10/0x10 [ 299.509155][ T9569] netlink_sendmsg+0x8b0/0xda0 [ 299.509181][ T9569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.509206][ T9569] ? apparmor_socket_sendmsg+0x15b/0x270 [ 299.509225][ T9569] ____sys_sendmsg+0xa4d/0xbe0 [ 299.509254][ T9569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.509281][ T9569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.509315][ T9569] ___sys_sendmsg+0x190/0x1e0 [ 299.509339][ T9569] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.509360][ T9569] ? __lock_acquire+0x49f/0x1a40 [ 299.509400][ T9569] __sys_sendmsg+0x160/0x210 [ 299.509418][ T9569] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.509447][ T9569] do_syscall_64+0x115/0x840 [ 299.509461][ T9569] ? clear_bhb_loop+0x40/0x90 [ 299.509480][ T9569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.509496][ T9569] RIP: 0033:0x7f307b19de59 [ 299.509511][ T9569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.509525][ T9569] RSP: 002b:00007f307bfec028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.509541][ T9569] RAX: ffffffffffffffda RBX: 00007f307b426180 RCX: 00007f307b19de59 [ 299.509552][ T9569] RDX: 0000000000048080 RSI: 0000200000003140 RDI: 0000000000000009 [ 299.509563][ T9569] RBP: 00007f307b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 299.509573][ T9569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.509582][ T9569] R13: 00007f307b426218 R14: 00007f307b426180 R15: 00007ffc4046b608 [ 299.509603][ T9569] [ 300.612551][ T9569] kobject: kobject_add_internal failed for clnt-0 (error: -12 parent: rpc-clients) [ 301.513978][ T9602] futex_wake_op: syz.3.791 tries to shift op by -2048; fix this program [ 301.569989][ T9602] futex_wake_op: syz.3.791 tries to shift op by -2048; fix this program [ 301.622756][ T9611] 0x000000000001-0x000000020000 : "" [ 301.729823][ T9611] ftl_cs: FTL header corrupt! [ 303.125518][ T9647] FAULT_INJECTION: forcing a failure. [ 303.125518][ T9647] name failslab, interval 1, probability 0, space 0, times 0 [ 303.229903][ T9647] CPU: 0 UID: 0 PID: 9647 Comm: syz.3.798 Not tainted syzkaller #0 PREEMPT(full) [ 303.229926][ T9647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 303.229936][ T9647] Call Trace: [ 303.229942][ T9647] [ 303.229948][ T9647] dump_stack_lvl+0x100/0x190 [ 303.229972][ T9647] should_fail_ex.cold+0x5/0xa [ 303.229993][ T9647] should_failslab+0xc2/0x120 [ 303.230015][ T9647] __kmalloc_cache_noprof+0x91/0x6c0 [ 303.230031][ T9647] ? vidtv_psi_network_name_desc_init+0x183/0x310 [ 303.230048][ T9647] ? vidtv_psi_service_list_desc_init+0x52/0x550 [ 303.230068][ T9647] vidtv_psi_service_list_desc_init+0x52/0x550 [ 303.230090][ T9647] vidtv_psi_nit_table_init+0x39a/0x5f0 [ 303.230116][ T9647] vidtv_channel_si_init+0xccf/0x18f0 [ 303.230142][ T9647] vidtv_mux_init+0x522/0xbf0 [ 303.230164][ T9647] vidtv_start_feed+0x34e/0x500 [ 303.230188][ T9647] ? __pfx_vidtv_start_feed+0x10/0x10 [ 303.230211][ T9647] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 303.230245][ T9647] dmx_section_feed_start_filtering+0x3a8/0x660 [ 303.230268][ T9647] dvb_dmxdev_filter_start+0x767/0xdd0 [ 303.230297][ T9647] dvb_demux_do_ioctl+0xe64/0x1200 [ 303.230325][ T9647] dvb_usercopy+0x167/0x340 [ 303.230345][ T9647] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 303.230368][ T9647] ? __pfx_dvb_usercopy+0x10/0x10 [ 303.230395][ T9647] ? __fget_files+0x21f/0x3d0 [ 303.230414][ T9647] dvb_demux_ioctl+0x29/0x40 [ 303.230433][ T9647] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 303.230454][ T9647] __x64_sys_ioctl+0x18e/0x210 [ 303.230476][ T9647] do_syscall_64+0x115/0x840 [ 303.230490][ T9647] ? clear_bhb_loop+0x40/0x90 [ 303.230509][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.230525][ T9647] RIP: 0033:0x7f307b19de59 [ 303.230539][ T9647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 303.230553][ T9647] RSP: 002b:00007f307c00d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 303.230568][ T9647] RAX: ffffffffffffffda RBX: 00007f307b426090 RCX: 00007f307b19de59 [ 303.230579][ T9647] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 303.230589][ T9647] RBP: 00007f307b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 303.230598][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.230607][ T9647] R13: 00007f307b426128 R14: 00007f307b426090 R15: 00007ffc4046b608 [ 303.230628][ T9647] [ 304.129506][ T9659] [U] 0="/ [ 304.158441][ T9659] [U] [ 304.175497][ T9659] [U] EeQ@ [ 304.215647][ T9658] [U]  [ 304.423523][ T9664] FAULT_INJECTION: forcing a failure. [ 304.423523][ T9664] name failslab, interval 1, probability 0, space 0, times 0 [ 304.512444][ T9664] CPU: 0 UID: 0 PID: 9664 Comm: syz.0.803 Not tainted syzkaller #0 PREEMPT(full) [ 304.512466][ T9664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 304.512476][ T9664] Call Trace: [ 304.512482][ T9664] [ 304.512488][ T9664] dump_stack_lvl+0x100/0x190 [ 304.512512][ T9664] should_fail_ex.cold+0x5/0xa [ 304.512534][ T9664] should_failslab+0xc2/0x120 [ 304.512556][ T9664] __kmalloc_cache_noprof+0x91/0x6c0 [ 304.512572][ T9664] ? rfkill_fop_open+0x1cc/0x480 [ 304.512597][ T9664] rfkill_fop_open+0x1cc/0x480 [ 304.512619][ T9664] ? __pfx_rfkill_fop_open+0x10/0x10 [ 304.512649][ T9664] misc_open+0x26d/0x450 [ 304.512666][ T9664] ? __pfx_misc_open+0x10/0x10 [ 304.512681][ T9664] chrdev_open+0x234/0x6a0 [ 304.512698][ T9664] ? __pfx_apparmor_file_open+0x10/0x10 [ 304.512715][ T9664] ? __pfx_chrdev_open+0x10/0x10 [ 304.512731][ T9664] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 304.512752][ T9664] do_dentry_open+0x6ab/0x14d0 [ 304.512767][ T9664] ? __pfx_chrdev_open+0x10/0x10 [ 304.512786][ T9664] vfs_open+0x82/0x3f0 [ 304.512814][ T9664] path_openat+0x2873/0x4280 [ 304.512840][ T9664] ? __pfx_path_openat+0x10/0x10 [ 304.512861][ T9664] do_file_open+0x20e/0x430 [ 304.512878][ T9664] ? __pfx_do_file_open+0x10/0x10 [ 304.512908][ T9664] ? alloc_fd+0x471/0x7a0 [ 304.512926][ T9664] ? do_getname+0x191/0x390 [ 304.512947][ T9664] do_sys_openat2+0x10f/0x1e0 [ 304.512966][ T9664] ? __pfx_do_sys_openat2+0x10/0x10 [ 304.512987][ T9664] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.513017][ T9664] __x64_sys_openat+0x12d/0x210 [ 304.513037][ T9664] ? __pfx___x64_sys_openat+0x10/0x10 [ 304.513064][ T9664] do_syscall_64+0x115/0x840 [ 304.513077][ T9664] ? clear_bhb_loop+0x40/0x90 [ 304.513095][ T9664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.513111][ T9664] RIP: 0033:0x7f56a939de59 [ 304.513125][ T9664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.513139][ T9664] RSP: 002b:00007f56a75f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 304.513155][ T9664] RAX: ffffffffffffffda RBX: 00007f56a9625fa0 RCX: 00007f56a939de59 [ 304.513165][ T9664] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 304.513175][ T9664] RBP: 00007f56a9433e6f R08: 0000000000000000 R09: 0000000000000000 [ 304.513184][ T9664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.513193][ T9664] R13: 00007f56a9626038 R14: 00007f56a9625fa0 R15: 00007fff69f01118 [ 304.513214][ T9664] [ 305.559996][ T9684] FAULT_INJECTION: forcing a failure. [ 305.559996][ T9684] name failslab, interval 1, probability 0, space 0, times 0 [ 305.652781][ T9684] CPU: 0 UID: 0 PID: 9684 Comm: syz.3.807 Not tainted syzkaller #0 PREEMPT(full) [ 305.652803][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.652813][ T9684] Call Trace: [ 305.652818][ T9684] [ 305.652824][ T9684] dump_stack_lvl+0x100/0x190 [ 305.652848][ T9684] should_fail_ex.cold+0x5/0xa [ 305.652869][ T9684] should_failslab+0xc2/0x120 [ 305.652891][ T9684] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 305.652911][ T9684] ? __alloc_skb+0x5b7/0x710 [ 305.652927][ T9684] ? __alloc_skb+0x140/0x710 [ 305.652946][ T9684] __alloc_skb+0x140/0x710 [ 305.652960][ T9684] ? __alloc_skb+0x5b7/0x710 [ 305.652975][ T9684] ? __pfx___alloc_skb+0x10/0x10 [ 305.652997][ T9684] netlink_alloc_large_skb+0x69/0x150 [ 305.653022][ T9684] netlink_sendmsg+0x680/0xda0 [ 305.653048][ T9684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.653074][ T9684] ? apparmor_socket_sendmsg+0x15b/0x270 [ 305.653092][ T9684] ____sys_sendmsg+0xa4d/0xbe0 [ 305.653113][ T9684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.653137][ T9684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.653161][ T9684] ? rcu_is_watching+0x12/0xc0 [ 305.653180][ T9684] ? ___sys_sendmsg+0x19d/0x1e0 [ 305.653200][ T9684] ? kfree+0x1e5/0x6c0 [ 305.653217][ T9684] ___sys_sendmsg+0x190/0x1e0 [ 305.653240][ T9684] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.653279][ T9684] ? __pfx___might_resched+0x10/0x10 [ 305.653306][ T9684] __sys_sendmmsg+0x20c/0x440 [ 305.653327][ T9684] ? __pfx___sys_sendmmsg+0x10/0x10 [ 305.653344][ T9684] ? ksys_write+0x190/0x250 [ 305.653371][ T9684] ? fput+0x79/0x100 [ 305.653388][ T9684] ? ksys_write+0x1ac/0x250 [ 305.653402][ T9684] ? __pfx_ksys_write+0x10/0x10 [ 305.653418][ T9684] __x64_sys_sendmmsg+0x9c/0x100 [ 305.653436][ T9684] ? lockdep_hardirqs_on+0x78/0x100 [ 305.653459][ T9684] do_syscall_64+0x115/0x840 [ 305.653472][ T9684] ? clear_bhb_loop+0x40/0x90 [ 305.653490][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.653505][ T9684] RIP: 0033:0x7f307b19de59 [ 305.653518][ T9684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.653533][ T9684] RSP: 002b:00007f307c02e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 305.653547][ T9684] RAX: ffffffffffffffda RBX: 00007f307b425fa0 RCX: 00007f307b19de59 [ 305.653557][ T9684] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000002 [ 305.653566][ T9684] RBP: 00007f307c02e090 R08: 0000000000000000 R09: 0000000000000000 [ 305.653575][ T9684] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 305.653584][ T9684] R13: 00007f307b426038 R14: 00007f307b425fa0 R15: 00007ffc4046b608 [ 305.653603][ T9684] [ 306.009655][ T9689] binder: 9688:9689 ioctl c0306201 2000000000c0 returned -14 [ 307.172863][ T9713] futex_wake_op: syz.3.815 tries to shift op by -2048; fix this program [ 307.214038][ T9713] futex_wake_op: syz.3.815 tries to shift op by -2048; fix this program [ 307.379622][ T9716] FAULT_INJECTION: forcing a failure. [ 307.379622][ T9716] name fail_futex, interval 1, probability 0, space 0, times 0 [ 307.392789][ T9716] CPU: 0 UID: 0 PID: 9716 Comm: syz.3.815 Not tainted syzkaller #0 PREEMPT(full) [ 307.392811][ T9716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.392821][ T9716] Call Trace: [ 307.392826][ T9716] [ 307.392832][ T9716] dump_stack_lvl+0x100/0x190 [ 307.392860][ T9716] should_fail_ex.cold+0x5/0xa [ 307.392881][ T9716] should_fail_futex+0x4c/0x60 [ 307.392904][ T9716] futex_lock_pi_atomic+0xe7/0xaf0 [ 307.392927][ T9716] futex_lock_pi+0x278/0x7f0 [ 307.392951][ T9716] ? __pfx_futex_lock_pi+0x10/0x10 [ 307.392972][ T9716] ? __pfx___futex_wait+0x10/0x10 [ 307.392991][ T9716] ? __pfx_try_to_wake_up+0x10/0x10 [ 307.393024][ T9716] ? __pfx_futex_wake_mark+0x10/0x10 [ 307.393048][ T9716] ? rcu_read_lock_any_held+0x6a/0xa0 [ 307.393068][ T9716] ? find_held_lock+0x2b/0x80 [ 307.393086][ T9716] ? ksys_write+0x190/0x250 [ 307.393102][ T9716] do_futex+0x371/0x440 [ 307.393120][ T9716] ? __pfx_do_futex+0x10/0x10 [ 307.393137][ T9716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 307.393164][ T9716] __x64_sys_futex+0x34f/0x4d0 [ 307.393183][ T9716] ? __pfx___x64_sys_futex+0x10/0x10 [ 307.393207][ T9716] do_syscall_64+0x115/0x840 [ 307.393221][ T9716] ? clear_bhb_loop+0x40/0x90 [ 307.393240][ T9716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.393255][ T9716] RIP: 0033:0x7f307b19de59 [ 307.393269][ T9716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.393284][ T9716] RSP: 002b:00007f307bfec028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 307.393298][ T9716] RAX: ffffffffffffffda RBX: 00007f307b426180 RCX: 00007f307b19de59 [ 307.393308][ T9716] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 307.393317][ T9716] RBP: 00007f307b233e6f R08: 0000000000000000 R09: 000000008000fff5 [ 307.393327][ T9716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.393337][ T9716] R13: 00007f307b426218 R14: 00007f307b426180 R15: 00007ffc4046b608 [ 307.393357][ T9716] [ 308.149005][ T29] audit: type=1800 audit(4294967409.160:8): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.819" name="dbroot" dev="configfs" ino=35573 res=0 errno=0 [ 308.320748][ T9727] random: crng reseeded on system resumption [ 309.310278][ T9733] Process accounting paused [ 309.619597][ T9754] FAULT_INJECTION: forcing a failure. [ 309.619597][ T9754] name failslab, interval 1, probability 0, space 0, times 0 [ 309.663619][ T9754] CPU: 0 UID: 0 PID: 9754 Comm: syz.3.823 Not tainted syzkaller #0 PREEMPT(full) [ 309.663642][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 309.663652][ T9754] Call Trace: [ 309.663657][ T9754] [ 309.663664][ T9754] dump_stack_lvl+0x100/0x190 [ 309.663694][ T9754] should_fail_ex.cold+0x5/0xa [ 309.663718][ T9754] should_failslab+0xc2/0x120 [ 309.663742][ T9754] __kmalloc_cache_noprof+0x91/0x6c0 [ 309.663757][ T9754] ? __kasan_kmalloc+0xaa/0xb0 [ 309.663776][ T9754] ? vidtv_psi_network_name_desc_init+0x68/0x310 [ 309.663798][ T9754] vidtv_psi_network_name_desc_init+0x68/0x310 [ 309.663816][ T9754] vidtv_psi_nit_table_init+0x291/0x5f0 [ 309.663837][ T9754] vidtv_channel_si_init+0xccf/0x18f0 [ 309.663863][ T9754] vidtv_mux_init+0x522/0xbf0 [ 309.663886][ T9754] vidtv_start_feed+0x34e/0x500 [ 309.663914][ T9754] ? __pfx_vidtv_start_feed+0x10/0x10 [ 309.663938][ T9754] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 309.663971][ T9754] dmx_section_feed_start_filtering+0x3a8/0x660 [ 309.663994][ T9754] dvb_dmxdev_filter_start+0x767/0xdd0 [ 309.664022][ T9754] dvb_demux_do_ioctl+0xe64/0x1200 [ 309.664051][ T9754] dvb_usercopy+0x167/0x340 [ 309.664071][ T9754] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 309.664094][ T9754] ? __pfx_dvb_usercopy+0x10/0x10 [ 309.664121][ T9754] ? __fget_files+0x21f/0x3d0 [ 309.664139][ T9754] dvb_demux_ioctl+0x29/0x40 [ 309.664159][ T9754] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 309.664180][ T9754] __x64_sys_ioctl+0x18e/0x210 [ 309.664204][ T9754] do_syscall_64+0x115/0x840 [ 309.664218][ T9754] ? clear_bhb_loop+0x40/0x90 [ 309.664236][ T9754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.664252][ T9754] RIP: 0033:0x7f307b19de59 [ 309.664266][ T9754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.664280][ T9754] RSP: 002b:00007f307c00d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 309.664296][ T9754] RAX: ffffffffffffffda RBX: 00007f307b426090 RCX: 00007f307b19de59 [ 309.664310][ T9754] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 309.664318][ T9754] RBP: 00007f307b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 309.664327][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.664336][ T9754] R13: 00007f307b426128 R14: 00007f307b426090 R15: 00007ffc4046b608 [ 309.664357][ T9754] [ 309.951764][ T9685] Process accounting resumed [ 310.595232][ T9775] FAULT_INJECTION: forcing a failure. [ 310.595232][ T9775] name failslab, interval 1, probability 0, space 0, times 0 [ 310.723224][ T9779] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 310.742993][ T9775] CPU: 0 UID: 0 PID: 9775 Comm: syz.1.829 Not tainted syzkaller #0 PREEMPT(full) [ 310.743017][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 310.743027][ T9775] Call Trace: [ 310.743041][ T9775] [ 310.743047][ T9775] dump_stack_lvl+0x100/0x190 [ 310.743072][ T9775] should_fail_ex.cold+0x5/0xa [ 310.743094][ T9775] should_failslab+0xc2/0x120 [ 310.743116][ T9775] __kmalloc_cache_noprof+0x91/0x6c0 [ 310.743133][ T9775] ? rfkill_fop_open+0x1cc/0x480 [ 310.743158][ T9775] rfkill_fop_open+0x1cc/0x480 [ 310.743181][ T9775] ? __pfx_rfkill_fop_open+0x10/0x10 [ 310.743204][ T9775] misc_open+0x26d/0x450 [ 310.743222][ T9775] ? __pfx_misc_open+0x10/0x10 [ 310.743237][ T9775] chrdev_open+0x234/0x6a0 [ 310.743252][ T9775] ? __pfx_apparmor_file_open+0x10/0x10 [ 310.743269][ T9775] ? __pfx_chrdev_open+0x10/0x10 [ 310.743286][ T9775] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 310.743307][ T9775] do_dentry_open+0x6ab/0x14d0 [ 310.743322][ T9775] ? __pfx_chrdev_open+0x10/0x10 [ 310.743343][ T9775] vfs_open+0x82/0x3f0 [ 310.743364][ T9775] path_openat+0x2873/0x4280 [ 310.743388][ T9775] ? __pfx_path_openat+0x10/0x10 [ 310.743409][ T9775] do_file_open+0x20e/0x430 [ 310.743426][ T9775] ? __pfx_do_file_open+0x10/0x10 [ 310.743455][ T9775] ? alloc_fd+0x471/0x7a0 [ 310.743472][ T9775] ? do_getname+0x191/0x390 [ 310.743492][ T9775] do_sys_openat2+0x10f/0x1e0 [ 310.743512][ T9775] ? __pfx_do_sys_openat2+0x10/0x10 [ 310.743532][ T9775] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 310.743562][ T9775] __x64_sys_openat+0x12d/0x210 [ 310.743583][ T9775] ? __pfx___x64_sys_openat+0x10/0x10 [ 310.743610][ T9775] do_syscall_64+0x115/0x840 [ 310.743623][ T9775] ? clear_bhb_loop+0x40/0x90 [ 310.743641][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.743657][ T9775] RIP: 0033:0x7f8ed999de59 [ 310.743670][ T9775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.743685][ T9775] RSP: 002b:00007f8eda8ae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 310.743700][ T9775] RAX: ffffffffffffffda RBX: 00007f8ed9c25fa0 RCX: 00007f8ed999de59 [ 310.743710][ T9775] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 310.743719][ T9775] RBP: 00007f8ed9a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 310.743728][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.743738][ T9775] R13: 00007f8ed9c26038 R14: 00007f8ed9c25fa0 R15: 00007ffc1fa75bd8 [ 310.743758][ T9775] [ 311.017547][ T9779] netlink: 310 bytes leftover after parsing attributes in process `syz.3.830'. [ 311.284895][ T9798] netlink: 29 bytes leftover after parsing attributes in process `syz.2.834'. [ 311.409566][ T9802] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5625] was attempted by ""[9802] [ 312.850919][ T9827] FAULT_INJECTION: forcing a failure. [ 312.850919][ T9827] name failslab, interval 1, probability 0, space 0, times 0 [ 312.893186][ T9827] CPU: 0 UID: 0 PID: 9827 Comm: syz.3.839 Not tainted syzkaller #0 PREEMPT(full) [ 312.893211][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.893221][ T9827] Call Trace: [ 312.893226][ T9827] [ 312.893233][ T9827] dump_stack_lvl+0x100/0x190 [ 312.893258][ T9827] should_fail_ex.cold+0x5/0xa [ 312.893279][ T9827] should_failslab+0xc2/0x120 [ 312.893311][ T9827] __kmalloc_cache_noprof+0x91/0x6c0 [ 312.893338][ T9827] ? vidtv_channel_si_init+0xa43/0x18f0 [ 312.893363][ T9827] vidtv_channel_si_init+0xa43/0x18f0 [ 312.893389][ T9827] vidtv_mux_init+0x522/0xbf0 [ 312.893412][ T9827] vidtv_start_feed+0x34e/0x500 [ 312.893437][ T9827] ? __pfx_vidtv_start_feed+0x10/0x10 [ 312.893461][ T9827] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 312.893494][ T9827] dmx_section_feed_start_filtering+0x3a8/0x660 [ 312.893516][ T9827] dvb_dmxdev_filter_start+0x767/0xdd0 [ 312.893545][ T9827] dvb_demux_do_ioctl+0xe64/0x1200 [ 312.893574][ T9827] dvb_usercopy+0x167/0x340 [ 312.893594][ T9827] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 312.893617][ T9827] ? __pfx_dvb_usercopy+0x10/0x10 [ 312.893645][ T9827] ? __fget_files+0x21f/0x3d0 [ 312.893663][ T9827] dvb_demux_ioctl+0x29/0x40 [ 312.893683][ T9827] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 312.893703][ T9827] __x64_sys_ioctl+0x18e/0x210 [ 312.893726][ T9827] do_syscall_64+0x115/0x840 [ 312.893743][ T9827] ? clear_bhb_loop+0x40/0x90 [ 312.893763][ T9827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.893779][ T9827] RIP: 0033:0x7f307b19de59 [ 312.893794][ T9827] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.893808][ T9827] RSP: 002b:00007f307c00d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 312.893823][ T9827] RAX: ffffffffffffffda RBX: 00007f307b426090 RCX: 00007f307b19de59 [ 312.893833][ T9827] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 312.893843][ T9827] RBP: 00007f307b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 312.893853][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 312.893868][ T9827] R13: 00007f307b426128 R14: 00007f307b426090 R15: 00007ffc4046b608 [ 312.893888][ T9827] [ 313.353264][ T9834] binder: 9833:9834 ioctl c0306201 2000000000c0 returned -14 [ 313.636742][ T9838] FAULT_INJECTION: forcing a failure. [ 313.636742][ T9838] name failslab, interval 1, probability 0, space 0, times 0 [ 313.691663][ T9838] CPU: 0 UID: 0 PID: 9838 Comm: syz.2.843 Not tainted syzkaller #0 PREEMPT(full) [ 313.691687][ T9838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 313.691696][ T9838] Call Trace: [ 313.691702][ T9838] [ 313.691709][ T9838] dump_stack_lvl+0x100/0x190 [ 313.691734][ T9838] should_fail_ex.cold+0x5/0xa [ 313.691758][ T9838] should_failslab+0xc2/0x120 [ 313.691780][ T9838] kmem_cache_alloc_noprof+0x91/0x6a0 [ 313.691801][ T9838] ? __mpol_dup+0x74/0x390 [ 313.691818][ T9838] __mpol_dup+0x74/0x390 [ 313.691831][ T9838] ? __pfx___mpol_dup+0x10/0x10 [ 313.691856][ T9838] mbind_range+0x2ad/0x550 [ 313.691873][ T9838] do_mbind+0x7dc/0xfd0 [ 313.691894][ T9838] ? __pfx_do_mbind+0x10/0x10 [ 313.691909][ T9838] ? find_held_lock+0x2b/0x80 [ 313.691930][ T9838] ? ksys_write+0x190/0x250 [ 313.691951][ T9838] ? __pfx_get_nodes+0x10/0x10 [ 313.691975][ T9838] kernel_mbind+0x1b7/0x200 [ 313.691991][ T9838] ? __pfx_kernel_mbind+0x10/0x10 [ 313.692012][ T9838] do_syscall_64+0x115/0x840 [ 313.692026][ T9838] ? clear_bhb_loop+0x40/0x90 [ 313.692044][ T9838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.692059][ T9838] RIP: 0033:0x7f9b4a39de59 [ 313.692072][ T9838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.692087][ T9838] RSP: 002b:00007f9b4b28b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 313.692102][ T9838] RAX: ffffffffffffffda RBX: 00007f9b4a626090 RCX: 00007f9b4a39de59 [ 313.692113][ T9838] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 313.692122][ T9838] RBP: 00007f9b4a433e6f R08: 000000000000000b R09: 0000000000000002 [ 313.692130][ T9838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.692139][ T9838] R13: 00007f9b4a626128 R14: 00007f9b4a626090 R15: 00007ffc0b028cb8 [ 313.692159][ T9838] [ 314.508643][ T9838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.843'. [ 314.569180][ T9838] openvswitch: : Dropping previously announced user features [ 314.733913][ T9852] FAULT_INJECTION: forcing a failure. [ 314.733913][ T9852] name failslab, interval 1, probability 0, space 0, times 0 [ 314.783351][ T9852] CPU: 0 UID: 0 PID: 9852 Comm: syz.3.846 Not tainted syzkaller #0 PREEMPT(full) [ 314.783375][ T9852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.783385][ T9852] Call Trace: [ 314.783391][ T9852] [ 314.783397][ T9852] dump_stack_lvl+0x100/0x190 [ 314.783421][ T9852] should_fail_ex.cold+0x5/0xa [ 314.783443][ T9852] should_failslab+0xc2/0x120 [ 314.783466][ T9852] __kmalloc_cache_noprof+0x91/0x6c0 [ 314.783483][ T9852] ? rfkill_fop_open+0x1cc/0x480 [ 314.783507][ T9852] rfkill_fop_open+0x1cc/0x480 [ 314.783530][ T9852] ? __pfx_rfkill_fop_open+0x10/0x10 [ 314.783552][ T9852] misc_open+0x26d/0x450 [ 314.783568][ T9852] ? __pfx_misc_open+0x10/0x10 [ 314.783583][ T9852] chrdev_open+0x234/0x6a0 [ 314.783599][ T9852] ? __pfx_apparmor_file_open+0x10/0x10 [ 314.783616][ T9852] ? __pfx_chrdev_open+0x10/0x10 [ 314.783632][ T9852] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 314.783654][ T9852] do_dentry_open+0x6ab/0x14d0 [ 314.783669][ T9852] ? __pfx_chrdev_open+0x10/0x10 [ 314.783689][ T9852] vfs_open+0x82/0x3f0 [ 314.783710][ T9852] path_openat+0x2873/0x4280 [ 314.783736][ T9852] ? __pfx_path_openat+0x10/0x10 [ 314.783757][ T9852] do_file_open+0x20e/0x430 [ 314.783774][ T9852] ? __pfx_do_file_open+0x10/0x10 [ 314.783812][ T9852] ? alloc_fd+0x471/0x7a0 [ 314.783829][ T9852] ? do_getname+0x191/0x390 [ 314.783849][ T9852] do_sys_openat2+0x10f/0x1e0 [ 314.783869][ T9852] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.783889][ T9852] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 314.783918][ T9852] __x64_sys_openat+0x12d/0x210 [ 314.783938][ T9852] ? __pfx___x64_sys_openat+0x10/0x10 [ 314.783966][ T9852] do_syscall_64+0x115/0x840 [ 314.783979][ T9852] ? clear_bhb_loop+0x40/0x90 [ 314.783997][ T9852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.784012][ T9852] RIP: 0033:0x7f307b19de59 [ 314.784027][ T9852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.784041][ T9852] RSP: 002b:00007f307c02e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.784057][ T9852] RAX: ffffffffffffffda RBX: 00007f307b425fa0 RCX: 00007f307b19de59 [ 314.784068][ T9852] RDX: 0000000000002502 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 314.784078][ T9852] RBP: 00007f307b233e6f R08: 0000000000000000 R09: 0000000000000000 [ 314.784088][ T9852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.784097][ T9852] R13: 00007f307b426038 R14: 00007f307b425fa0 R15: 00007ffc4046b608 [ 314.784117][ T9852] [ 315.296456][ T9862] netlink: 146 bytes leftover after parsing attributes in process `syz.2.850'. [ 315.399651][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.2.850'. [ 315.691048][ T9868] Process accounting paused [ 315.892336][ T9879] [U] 0="/ [ 315.907384][ T9879] [U] [ 315.918816][ T9879] [U] EeQ@ [ 315.934087][ T9878] [U]  [ 316.523502][ T9891] netlink: 12 bytes leftover after parsing attributes in process `syz.1.856'. [ 317.228898][ T9911] netlink: 186 bytes leftover after parsing attributes in process `syz.0.860'. [ 317.700827][ T9918] dlm: non-version read from control device 2147479540 [ 317.949339][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.956126][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.964558][ T29] audit: type=1804 audit(4294967418.980:9): pid=9913 uid=2 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.862" name="/newroot/225/file0" dev="tmpfs" ino=1165 res=1 errno=0 [ 318.029947][ T29] audit: type=1804 audit(4294967419.020:10): pid=9916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.862" name="/newroot/225/file0" dev="tmpfs" ino=1165 res=1 errno=0 [ 318.886811][ T9945] netlink: 29 bytes leftover after parsing attributes in process `syz.3.869'. [ 319.275832][ T29] audit: type=1326 audit(4294967420.300:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.1.870" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ed999de59 code=0x0 [ 320.141360][ T9956] FAULT_INJECTION: forcing a failure. [ 320.141360][ T9956] name failslab, interval 1, probability 0, space 0, times 0 [ 320.237413][ T9956] CPU: 0 UID: 0 PID: 9956 Comm: syz.3.873 Not tainted syzkaller #0 PREEMPT(full) [ 320.237436][ T9956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.237446][ T9956] Call Trace: [ 320.237451][ T9956] [ 320.237457][ T9956] dump_stack_lvl+0x100/0x190 [ 320.237481][ T9956] should_fail_ex.cold+0x5/0xa [ 320.237503][ T9956] should_failslab+0xc2/0x120 [ 320.237527][ T9956] kmem_cache_alloc_noprof+0x91/0x6a0 [ 320.237546][ T9956] ? copy_process+0x2f38/0x8030 [ 320.237566][ T9956] ? copy_process+0x2f80/0x8030 [ 320.237587][ T9956] copy_process+0x2f80/0x8030 [ 320.237604][ T9956] ? futex_unqueue+0x133/0x2c0 [ 320.237630][ T9956] ? __pfx_copy_process+0x10/0x10 [ 320.237653][ T9956] ? _copy_from_user+0x59/0xd0 [ 320.237676][ T9956] kernel_clone+0x176/0x9d0 [ 320.237695][ T9956] ? __pfx_kernel_clone+0x10/0x10 [ 320.237731][ T9956] __do_sys_clone3+0x214/0x290 [ 320.237750][ T9956] ? __pfx___do_sys_clone3+0x10/0x10 [ 320.237778][ T9956] ? cleanup_mnt+0x263/0x450 [ 320.237815][ T9956] do_syscall_64+0x115/0x840 [ 320.237828][ T9956] ? clear_bhb_loop+0x40/0x90 [ 320.237846][ T9956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.237861][ T9956] RIP: 0033:0x7f307b19de59 [ 320.237875][ T9956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.237889][ T9956] RSP: 002b:00007f307c02def8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 320.237904][ T9956] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f307b19de59 [ 320.237914][ T9956] RDX: 00007f307c02df10 RSI: 0000000000000058 RDI: 00007f307c02df10 [ 320.237923][ T9956] RBP: 00007f307b233e6f R08: 0000000000000000 R09: 0000000000000058 [ 320.237932][ T9956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.237941][ T9956] R13: 00007f307b426038 R14: 00007f307b425fa0 R15: 00007ffc4046b608 [ 320.237959][ T9956] [ 321.099082][ T9974] [U] 0="/ [ 321.121928][ T9974] [U] [ 321.133388][ T9974] [U] EeQ@ [ 321.165206][ T9973] [U]  [ 321.822490][ T9989] [U] 0="/ [ 321.846364][ T9989] [U] [ 321.881135][ T9989] [U] EeQ@ [ 321.955560][ T9986] [U]  [ 322.859653][T10013] [U] 0="/ [ 322.878126][T10013] [U] [ 322.890210][T10013] [U] EeQ@ [ 322.903066][T10014] HfR: entered promiscuous mode [ 322.924778][T10009] [U]  [ 323.202900][T10014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 323.217597][T10025] FAULT_INJECTION: forcing a failure. [ 323.217597][T10025] name failslab, interval 1, probability 0, space 0, times 0 [ 323.296857][T10025] CPU: 0 UID: 0 PID: 10025 Comm: syz.1.890 Not tainted syzkaller #0 PREEMPT(full) [ 323.296881][T10025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.296890][T10025] Call Trace: [ 323.296896][T10025] [ 323.296902][T10025] dump_stack_lvl+0x100/0x190 [ 323.296937][T10025] should_fail_ex.cold+0x5/0xa [ 323.296958][T10025] should_failslab+0xc2/0x120 [ 323.296981][T10025] __kmalloc_cache_noprof+0x91/0x6c0 [ 323.296996][T10025] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 323.297011][T10025] ? vidtv_psi_sdt_service_init+0x52/0x200 [ 323.297034][T10025] vidtv_psi_sdt_service_init+0x52/0x200 [ 323.297053][T10025] vidtv_channel_si_init+0x5d4/0x18f0 [ 323.297079][T10025] vidtv_mux_init+0x522/0xbf0 [ 323.297101][T10025] vidtv_start_feed+0x34e/0x500 [ 323.297126][T10025] ? __pfx_vidtv_start_feed+0x10/0x10 [ 323.297156][T10025] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 323.297190][T10025] dmx_section_feed_start_filtering+0x3a8/0x660 [ 323.297213][T10025] dvb_dmxdev_filter_start+0x767/0xdd0 [ 323.297243][T10025] dvb_demux_do_ioctl+0xe64/0x1200 [ 323.297272][T10025] dvb_usercopy+0x167/0x340 [ 323.297291][T10025] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 323.297321][T10025] ? __pfx_dvb_usercopy+0x10/0x10 [ 323.297349][T10025] ? __fget_files+0x21f/0x3d0 [ 323.297368][T10025] dvb_demux_ioctl+0x29/0x40 [ 323.297388][T10025] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 323.297409][T10025] __x64_sys_ioctl+0x18e/0x210 [ 323.297436][T10025] do_syscall_64+0x115/0x840 [ 323.297449][T10025] ? clear_bhb_loop+0x40/0x90 [ 323.297467][T10025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.297482][T10025] RIP: 0033:0x7f8ed999de59 [ 323.297497][T10025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.297511][T10025] RSP: 002b:00007f8eda88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 323.297526][T10025] RAX: ffffffffffffffda RBX: 00007f8ed9c26090 RCX: 00007f8ed999de59 [ 323.297535][T10025] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 323.297545][T10025] RBP: 00007f8ed9a33e6f R08: 0000000000000000 R09: 0000000000000000 [ 323.297554][T10025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.297563][T10025] R13: 00007f8ed9c26128 R14: 00007f8ed9c26090 R15: 00007ffc1fa75bd8 [ 323.297584][T10025] [ 323.719318][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.3.888'. [ 323.728634][T10018] HfR: left promiscuous mode [ 324.500932][T10038] vivid-015: ================= START STATUS ================= [ 324.559734][T10038] vivid-015: Test Pattern: 75% Colorbar [ 324.600239][T10038] vivid-015: Fill Percentage of Frame: 100 [ 324.660650][T10038] vivid-015: Horizontal Movement: No Movement [ 324.730663][T10038] vivid-015: Vertical Movement: No Movement [ 324.780493][T10038] vivid-015: OSD Text Mode: All [ 324.821878][T10038] vivid-015: Show Border: false [ 324.840467][T10038] vivid-015: Show Square: false [ 324.849558][T10046] binder: 10045:10046 ioctl c0306201 2000000000c0 returned -14 [ 324.864681][T10038] vivid-015: Sensor Flipped Horizontally: false [ 324.881322][T10038] vivid-015: Sensor Flipped Vertically: false [ 324.911797][T10038] vivid-015: Insert SAV Code in Image: false [ 324.936220][T10038] vivid-015: Insert EAV Code in Image: false [ 324.967741][T10038] vivid-015: Insert Video Guard Band: false [ 324.992075][T10038] vivid-015: Reduced Framerate: false [ 325.021644][T10038] vivid-015: HDMI 015-0 Is Connected To: Test Pattern Generator [ 325.045978][T10038] vivid-015: S-Video 015-0 Is Connected To: Test Pattern Generator [ 325.077853][T10038] vivid-015: Enable Capture Cropping: true [ 325.099660][T10038] vivid-015: Enable Capture Composing: true [ 325.109338][T10038] vivid-015: Enable Capture Scaler: true [ 325.120486][T10038] vivid-015: Timestamp Source: End of Frame [ 325.126761][T10038] vivid-015: Colorspace: sRGB [ 325.131655][T10038] vivid-015: Transfer Function: Default [ 325.137680][T10038] vivid-015: Y'CbCr Encoding: Default [ 325.143557][T10038] vivid-015: HSV Encoding: Hue 0-179 [ 325.151083][T10038] vivid-015: Quantization: Default [ 325.156722][T10038] vivid-015: Apply Alpha To Red Only: false [ 325.166846][T10038] vivid-015: Standard Aspect Ratio: 4x3 [ 325.172557][T10038] vivid-015: DV Timings Signal Mode: Current DV Timings inactive [ 325.180950][T10038] vivid-015: DV Timings: 640x480p59 inactive [ 325.187432][T10038] vivid-015: DV Timings Aspect Ratio: Source Width x Height [ 325.195315][T10038] vivid-015: Maximum EDID Blocks: 2 [ 325.200666][T10038] vivid-015: Limited RGB Range (16-235): false [ 325.213645][T10038] vivid-015: Rx RGB Quantization Range: Automatic [ 325.231132][T10038] vivid-015: Power Present: 0x00000001 [ 325.242016][T10038] tpg source WxH: 320x240 (Y'CbCr) [ 325.265729][T10037] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 325.283104][T10038] tpg field: 1 [ 325.290915][T10038] tpg crop: (0,0)/320x240 [ 325.300704][T10037] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 325.319483][T10038] tpg compose: (0,0)/320x240 [ 325.329764][T10037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 325.344498][T10038] tpg colorspace: 8 [ 325.352645][T10038] tpg transfer function: 0/0 [ 325.378316][T10038] tpg Y'CbCr encoding: 0/0 [ 325.400509][T10038] tpg quantization: 0/0 [ 325.421379][T10038] tpg RGB range: 0/2 [ 325.442419][T10038] vivid-015: ================== END STATUS ================== [ 325.551294][T10060] FAULT_INJECTION: forcing a failure. [ 325.551294][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 325.586258][T10059] [U] 0="/ [ 325.600191][T10059] [U] [ 325.611491][T10059] [U] EeQ@ [ 325.619138][T10060] CPU: 0 UID: 0 PID: 10060 Comm: syz.0.900 Not tainted syzkaller #0 PREEMPT(full) [ 325.619161][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 325.619170][T10060] Call Trace: [ 325.619176][T10060] [ 325.619182][T10060] dump_stack_lvl+0x100/0x190 [ 325.619206][T10060] should_fail_ex.cold+0x5/0xa [ 325.619228][T10060] should_failslab+0xc2/0x120 [ 325.619249][T10060] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 325.619269][T10060] ? __d_alloc+0x35/0xa50 [ 325.619289][T10060] __d_alloc+0x35/0xa50 [ 325.619311][T10060] d_alloc+0x4a/0x1e0 [ 325.619329][T10060] lookup_one_qstr_excl+0x171/0x250 [ 325.619351][T10060] start_dirop+0x59/0xb0 [ 325.619374][T10060] simple_start_creating+0xf9/0x110 [ 325.619389][T10060] ? __pfx_simple_start_creating+0x10/0x10 [ 325.619404][T10060] ? mntput+0x70/0xa0 [ 325.619426][T10060] ? simple_pin_fs+0xa3/0x190 [ 325.619448][T10060] debugfs_start_creating.part.0+0x82/0x170 [ 325.619470][T10060] __debugfs_create_file+0xb3/0x4f0 [ 325.619493][T10060] debugfs_create_file_full+0x41/0x60 [ 325.619515][T10060] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 325.619540][T10060] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 325.619562][T10060] ? ida_alloc_range+0x70d/0x830 [ 325.619600][T10060] ? kasan_save_track+0x14/0x30 [ 325.619620][T10060] ? __kasan_kmalloc+0xaa/0xb0 [ 325.619640][T10060] ? lockdep_init_map_type+0x5c/0x250 [ 325.619658][T10060] preinit_net.part.0+0x252/0x920 [ 325.619679][T10060] copy_net_ns+0x339/0x7c0 [ 325.619700][T10060] create_new_namespaces+0x3ea/0xac0 [ 325.619725][T10060] unshare_nsproxy_namespaces+0xf2/0x220 [ 325.619756][T10060] ksys_unshare+0x438/0xab0 [ 325.619778][T10060] ? __pfx_ksys_unshare+0x10/0x10 [ 325.619805][T10060] __x64_sys_unshare+0x31/0x40 [ 325.619826][T10060] do_syscall_64+0x115/0x840 [ 325.619839][T10060] ? clear_bhb_loop+0x40/0x90 [ 325.619857][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.619873][T10060] RIP: 0033:0x7f56a939de59 [ 325.619887][T10060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 325.619901][T10060] RSP: 002b:00007f56a75f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 325.619916][T10060] RAX: ffffffffffffffda RBX: 00007f56a9625fa0 RCX: 00007f56a939de59 [ 325.619926][T10060] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 325.619936][T10060] RBP: 00007f56a9433e6f R08: 0000000000000000 R09: 0000000000000000 [ 325.619946][T10060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 325.619955][T10060] R13: 00007f56a9626038 R14: 00007f56a9625fa0 R15: 00007fff69f01118 [ 325.619976][T10060] [ 326.194415][T10057] [U]  [ 326.475604][T10075] FAULT_INJECTION: forcing a failure. [ 326.475604][T10075] name failslab, interval 1, probability 0, space 0, times 0 [ 326.503960][T10075] CPU: 0 UID: 0 PID: 10075 Comm: syz.2.904 Not tainted syzkaller #0 PREEMPT(full) [ 326.503984][T10075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.503994][T10075] Call Trace: [ 326.503999][T10075] [ 326.504005][T10075] dump_stack_lvl+0x100/0x190 [ 326.504030][T10075] should_fail_ex.cold+0x5/0xa [ 326.504052][T10075] should_failslab+0xc2/0x120 [ 326.504077][T10075] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 326.504097][T10075] ? __kasan_kmalloc+0xaa/0xb0 [ 326.504116][T10075] ? vidtv_psi_short_event_desc_init+0x1bf/0x5f0 [ 326.504137][T10075] kstrdup+0x51/0xe0 [ 326.504155][T10075] vidtv_psi_short_event_desc_init+0x1bf/0x5f0 [ 326.504176][T10075] vidtv_psi_desc_clone+0x33f/0x5d0 [ 326.504194][T10075] vidtv_channel_si_init+0x76c/0x18f0 [ 326.504221][T10075] vidtv_mux_init+0x522/0xbf0 [ 326.504243][T10075] vidtv_start_feed+0x34e/0x500 [ 326.504266][T10075] ? __pfx_vidtv_start_feed+0x10/0x10 [ 326.504290][T10075] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 326.504329][T10075] dmx_section_feed_start_filtering+0x3a8/0x660 [ 326.504353][T10075] dvb_dmxdev_filter_start+0x767/0xdd0 [ 326.504382][T10075] dvb_demux_do_ioctl+0xe64/0x1200 [ 326.504411][T10075] dvb_usercopy+0x167/0x340 [ 326.504432][T10075] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 326.504455][T10075] ? __pfx_dvb_usercopy+0x10/0x10 [ 326.504483][T10075] ? __fget_files+0x21f/0x3d0 [ 326.504502][T10075] dvb_demux_ioctl+0x29/0x40 [ 326.504521][T10075] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 326.504542][T10075] __x64_sys_ioctl+0x18e/0x210 [ 326.504571][T10075] do_syscall_64+0x115/0x840 [ 326.504585][T10075] ? clear_bhb_loop+0x40/0x90 [ 326.504605][T10075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.504621][T10075] RIP: 0033:0x7f9b4a39de59 [ 326.504635][T10075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.504649][T10075] RSP: 002b:00007f9b4b28b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.504664][T10075] RAX: ffffffffffffffda RBX: 00007f9b4a626090 RCX: 00007f9b4a39de59 [ 326.504674][T10075] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000003 [ 326.504683][T10075] RBP: 00007f9b4a433e6f R08: 0000000000000000 R09: 0000000000000000 [ 326.504693][T10075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 326.504702][T10075] R13: 00007f9b4a626128 R14: 00007f9b4a626090 R15: 00007ffc0b028cb8 [ 326.504723][T10075] [ 326.852992][ T5638] Bluetooth: hci0: command 0x0c1a tx timeout [ 327.375626][ T5638] Bluetooth: hci1: command 0x0c1a tx timeout [ 327.409904][T10086] binder: 10085:10086 ioctl c0306201 2000000000c0 returned -14 [ 327.430374][ T5638] Bluetooth: hci2: command 0x0c1a tx timeout [ 327.977766][T10098] netlink: 16 bytes leftover after parsing attributes in process `syz.0.909'. [ 328.388959][T10114] netlink: 29 bytes leftover after parsing attributes in process `syz.2.912'. [ 328.979737][T10129] futex_wake_op: syz.2.916 tries to shift op by -2048; fix this program [ 329.062547][T10129] futex_wake_op: syz.2.916 tries to shift op by -2048; fix this program [ 329.624056][ T5638] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 329.937760][T10152] futex_wake_op: syz.1.922 tries to shift op by -2048; fix this program [ 329.938036][T10152] futex_wake_op: syz.1.922 tries to shift op by -2048; fix this program [ 329.938763][T10152] 0x000000000001-0x000000020000 : "" [ 329.938857][T10152] FAULT_INJECTION: forcing a failure. [ 329.938857][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 329.938884][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.1.922 Not tainted syzkaller #0 PREEMPT(full) [ 329.938901][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.938910][T10152] Call Trace: [ 329.938915][T10152] [ 329.938921][T10152] dump_stack_lvl+0x100/0x190 [ 329.938947][T10152] should_fail_ex.cold+0x5/0xa [ 329.938968][T10152] should_failslab+0xc2/0x120 [ 329.938989][T10152] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 329.939010][T10152] ? kernel_text_address+0x8d/0x100 [ 329.939034][T10152] ? kstrdup_const+0x63/0x80 [ 329.939055][T10152] kstrdup+0x51/0xe0 [ 329.939073][T10152] kstrdup_const+0x63/0x80 [ 329.939090][T10152] __kernfs_new_node+0x9b/0xa10 [ 329.939105][T10152] ? stack_trace_save+0x8e/0xc0 [ 329.939130][T10152] ? __pfx_stack_trace_save+0x10/0x10 [ 329.939150][T10152] ? __pfx___kernfs_new_node+0x10/0x10 [ 329.939170][T10152] ? find_held_lock+0x2b/0x80 [ 329.939188][T10152] ? kernfs_root+0xee/0x2a0 [ 329.939210][T10152] ? kernfs_root+0xee/0x2a0 [ 329.939236][T10152] kernfs_create_dir_ns+0xa6/0x2b0 [ 329.939255][T10152] sysfs_create_dir_ns+0x13a/0x2b0 [ 329.939278][T10152] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 329.939312][T10152] ? find_held_lock+0x2b/0x80 [ 329.939339][T10152] ? kobject_add_internal+0x25f/0x930 [ 329.939359][T10152] ? kobject_add_internal+0x25f/0x930 [ 329.939378][T10152] ? class_dir_child_ns_type+0xd/0x60 [ 329.939403][T10152] kobject_add_internal+0x2c8/0x930 [ 329.939425][T10152] kobject_add+0x16a/0x1e0 [ 329.939443][T10152] ? __pfx_kobject_add+0x10/0x10 [ 329.939462][T10152] ? get_device_parent+0x1b3/0x4c0 [ 329.939482][T10152] ? kobject_put+0xb9/0x640 [ 329.939500][T10152] ? device_add+0xc4d/0x1970 [ 329.939524][T10152] device_add+0x294/0x1970 [ 329.939546][T10152] ? lockdep_init_map_type+0x5c/0x250 [ 329.939562][T10152] ? __pfx_device_add+0x10/0x10 [ 329.939583][T10152] ? lockdep_init_map_type+0x5c/0x250 [ 329.939598][T10152] ? __init_waitqueue_head+0xca/0x150 [ 329.939619][T10152] add_mtd_device+0x928/0x17a0 [ 329.939655][T10152] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 329.939680][T10152] ? __pfx_add_mtd_device+0x10/0x10 [ 329.939704][T10152] mtd_add_partition+0x30a/0x660 [ 329.939726][T10152] ? __pfx_mtd_add_partition+0x10/0x10 [ 329.939746][T10152] ? __might_fault+0xc5/0x140 [ 329.939761][T10152] ? __might_fault+0xc5/0x140 [ 329.939784][T10152] mtdchar_blkpg_ioctl+0x207/0x250 [ 329.939806][T10152] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 329.939844][T10152] mtdchar_ioctl+0x1670/0x1fd0 [ 329.939869][T10152] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 329.939892][T10152] ? lock_acquire+0x1b9/0x370 [ 329.939911][T10152] ? trace_contention_end+0x126/0x160 [ 329.939928][T10152] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 329.939952][T10152] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 329.939974][T10152] ? __pfx___mutex_lock+0x10/0x10 [ 329.939991][T10152] ? find_held_lock+0x2b/0x80 [ 329.940020][T10152] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 329.940042][T10152] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 329.940078][T10152] __x64_sys_ioctl+0x18e/0x210 [ 329.940101][T10152] do_syscall_64+0x115/0x840 [ 329.940121][T10152] ? clear_bhb_loop+0x40/0x90 [ 329.940143][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.940158][T10152] RIP: 0033:0x7f8ed999de59 [ 329.940173][T10152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.940188][T10152] RSP: 002b:00007f8eda88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.940203][T10152] RAX: ffffffffffffffda RBX: 00007f8ed9c26090 RCX: 00007f8ed999de59 [ 329.940213][T10152] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000005 [ 329.940222][T10152] RBP: 00007f8eda88d090 R08: 0000000000000000 R09: 0000000000000000 [ 329.940231][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.940239][T10152] R13: 00007f8ed9c26128 R14: 00007f8ed9c26090 R15: 00007ffc1fa75bd8 [ 329.940260][T10152] [ 329.942655][T10067] Process accounting resumed [ 329.968454][T10152] kobject: kobject_add_internal failed for mtd6 (error: -12 parent: mtd) [ 329.968976][T10152] ------------[ cut here ]------------ [ 329.968986][T10152] !list_empty(&mtd->part.node) [ 329.968996][T10152] WARNING: drivers/mtd/mtdpart.c:38 at release_mtd_partition+0x71/0x90, CPU#0: syz.1.922/10152 [ 329.969036][T10152] Modules linked in: [ 329.969062][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.1.922 Not tainted syzkaller #0 PREEMPT(full) [ 329.969080][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.969095][T10152] RIP: 0010:release_mtd_partition+0x71/0x90 [ 329.969128][T10152] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 ff 38 ce fb 48 89 df 5b 5d e9 f5 38 ce fb e8 50 db 6a fb 90 <0f> 0b 90 eb c2 e8 45 54 da fb eb db 48 89 ef e8 3b 54 da fb eb a5 [ 329.969148][T10152] RSP: 0018:ffffc9000504f818 EFLAGS: 00010293 [ 329.969162][T10152] RAX: 0000000000000000 RBX: ffff88807bfec000 RCX: ffffffff8b953207 [ 329.969172][T10152] RDX: ffff888025f7dd00 RSI: ffffffff869e00f0 RDI: ffff88807bfec000 [ 329.969183][T10152] RBP: ffff88807bfec6a8 R08: 0000000000000001 R09: 0000000000000001 [ 329.969193][T10152] R10: 0000000000000006 R11: ffffffff81000130 R12: 0000000000000000 [ 329.969203][T10152] R13: dffffc0000000000 R14: ffff88802a7d89c0 R15: 0000000000000000 [ 329.969213][T10152] FS: 00007f8eda88d6c0(0000) GS:ffff8881242e7000(0000) knlGS:0000000000000000 [ 329.969229][T10152] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 329.969240][T10152] CR2: 00007f56a9627dac CR3: 0000000077008000 CR4: 00000000003526f0 [ 329.969250][T10152] Call Trace: [ 329.969256][T10152] [ 329.969264][T10152] mtd_release+0xa0/0xd0 [ 329.969288][T10152] ? __pfx_mtd_release+0x10/0x10 [ 329.969310][T10152] device_release+0xd2/0x270 [ 329.969327][T10152] kobject_put+0x1f7/0x640 [ 329.969349][T10152] put_device+0x1f/0x30 [ 329.969363][T10152] add_mtd_device+0xbd7/0x17a0 [ 329.969386][T10152] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 329.969412][T10152] ? __pfx_add_mtd_device+0x10/0x10 [ 329.969436][T10152] mtd_add_partition+0x30a/0x660 [ 329.969460][T10152] ? __pfx_mtd_add_partition+0x10/0x10 [ 329.969480][T10152] ? __might_fault+0xc5/0x140 [ 329.969497][T10152] ? __might_fault+0xc5/0x140 [ 329.969528][T10152] mtdchar_blkpg_ioctl+0x207/0x250 [ 329.969551][T10152] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 329.969667][T10152] mtdchar_ioctl+0x1670/0x1fd0 [ 329.969694][T10152] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 329.969718][T10152] ? lock_acquire+0x1b9/0x370 [ 329.969739][T10152] ? trace_contention_end+0x126/0x160 [ 329.969757][T10152] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 329.969781][T10152] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 329.969805][T10152] ? __pfx___mutex_lock+0x10/0x10 [ 329.969823][T10152] ? find_held_lock+0x2b/0x80 [ 329.969852][T10152] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 329.969876][T10152] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 329.969909][T10152] __x64_sys_ioctl+0x18e/0x210 [ 329.969958][T10152] do_syscall_64+0x115/0x840 [ 329.969973][T10152] ? clear_bhb_loop+0x40/0x90 [ 329.969992][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.970008][T10152] RIP: 0033:0x7f8ed999de59 [ 329.970023][T10152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.970037][T10152] RSP: 002b:00007f8eda88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.970053][T10152] RAX: ffffffffffffffda RBX: 00007f8ed9c26090 RCX: 00007f8ed999de59 [ 329.970064][T10152] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000005 [ 329.970074][T10152] RBP: 00007f8eda88d090 R08: 0000000000000000 R09: 0000000000000000 [ 329.970084][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.970094][T10152] R13: 00007f8ed9c26128 R14: 00007f8ed9c26090 R15: 00007ffc1fa75bd8 [ 329.970114][T10152] [ 329.970128][T10152] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 329.970138][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.1.922 Not tainted syzkaller #0 PREEMPT(full) [ 329.970156][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.970165][T10152] Call Trace: [ 329.970170][T10152] [ 329.970176][T10152] dump_stack_lvl+0x100/0x190 [ 329.970196][T10152] vpanic+0x552/0x970 [ 329.970211][T10152] ? __pfx_vpanic+0x10/0x10 [ 329.970230][T10152] panic+0xd1/0xe0 [ 329.970244][T10152] ? __pfx_panic+0x10/0x10 [ 329.970264][T10152] ? check_panic_on_warn+0x1f/0x90 [ 329.970289][T10152] check_panic_on_warn.cold+0x19/0x34 [ 329.970305][T10152] ? release_mtd_partition+0x71/0x90 [ 329.970325][T10152] __warn.cold+0x191/0x318 [ 329.970342][T10152] __report_bug+0x30f/0x440 [ 329.970365][T10152] ? release_mtd_partition+0x71/0x90 [ 329.970388][T10152] ? __pfx___report_bug+0x10/0x10 [ 329.970417][T10152] ? delete_node+0x20a/0x8f0 [ 329.970439][T10152] ? release_mtd_partition+0x71/0x90 [ 329.970461][T10152] report_bug+0xb2/0x220 [ 329.970483][T10152] ? release_mtd_partition+0x71/0x90 [ 329.970505][T10152] handle_bug+0x16a/0x2a0 [ 329.970522][T10152] exc_invalid_op+0x17/0x50 [ 329.970538][T10152] asm_exc_invalid_op+0x1a/0x20 [ 329.970552][T10152] RIP: 0010:release_mtd_partition+0x71/0x90 [ 329.970574][T10152] Code: 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1e 48 8b 7b 38 e8 ff 38 ce fb 48 89 df 5b 5d e9 f5 38 ce fb e8 50 db 6a fb 90 <0f> 0b 90 eb c2 e8 45 54 da fb eb db 48 89 ef e8 3b 54 da fb eb a5 [ 329.970594][T10152] RSP: 0018:ffffc9000504f818 EFLAGS: 00010293 [ 329.970606][T10152] RAX: 0000000000000000 RBX: ffff88807bfec000 RCX: ffffffff8b953207 [ 329.970616][T10152] RDX: ffff888025f7dd00 RSI: ffffffff869e00f0 RDI: ffff88807bfec000 [ 329.970626][T10152] RBP: ffff88807bfec6a8 R08: 0000000000000001 R09: 0000000000000001 [ 329.970635][T10152] R10: 0000000000000006 R11: ffffffff81000130 R12: 0000000000000000 [ 329.970645][T10152] R13: dffffc0000000000 R14: ffff88802a7d89c0 R15: 0000000000000000 [ 329.970657][T10152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.970674][T10152] ? delete_node+0x417/0x8f0 [ 329.970694][T10152] ? release_mtd_partition+0x70/0x90 [ 329.970718][T10152] ? release_mtd_partition+0x70/0x90 [ 329.970738][T10152] mtd_release+0xa0/0xd0 [ 329.970760][T10152] ? __pfx_mtd_release+0x10/0x10 [ 329.970781][T10152] device_release+0xd2/0x270 [ 329.970797][T10152] kobject_put+0x1f7/0x640 [ 329.970817][T10152] put_device+0x1f/0x30 [ 329.970831][T10152] add_mtd_device+0xbd7/0x17a0 [ 329.970852][T10152] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 329.970878][T10152] ? __pfx_add_mtd_device+0x10/0x10 [ 329.970901][T10152] mtd_add_partition+0x30a/0x660 [ 329.970923][T10152] ? __pfx_mtd_add_partition+0x10/0x10 [ 329.970944][T10152] ? __might_fault+0xc5/0x140 [ 329.970959][T10152] ? __might_fault+0xc5/0x140 [ 329.970982][T10152] mtdchar_blkpg_ioctl+0x207/0x250 [ 329.971004][T10152] ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10 [ 329.971041][T10152] mtdchar_ioctl+0x1670/0x1fd0 [ 329.971066][T10152] ? __pfx_mtdchar_ioctl+0x10/0x10 [ 329.971090][T10152] ? lock_acquire+0x1b9/0x370 [ 329.971108][T10152] ? trace_contention_end+0x126/0x160 [ 329.971125][T10152] ? mtdchar_unlocked_ioctl+0xa2/0xf0 [ 329.971149][T10152] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 329.971172][T10152] ? __pfx___mutex_lock+0x10/0x10 [ 329.971189][T10152] ? find_held_lock+0x2b/0x80 [ 329.971217][T10152] mtdchar_unlocked_ioctl+0xb0/0xf0 [ 329.971239][T10152] ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10 [ 329.971263][T10152] __x64_sys_ioctl+0x18e/0x210 [ 329.971286][T10152] do_syscall_64+0x115/0x840 [ 329.971299][T10152] ? clear_bhb_loop+0x40/0x90 [ 329.971317][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.971332][T10152] RIP: 0033:0x7f8ed999de59 [ 329.971343][T10152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.971357][T10152] RSP: 002b:00007f8eda88d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 329.971378][T10152] RAX: ffffffffffffffda RBX: 00007f8ed9c26090 RCX: 00007f8ed999de59 [ 329.971392][T10152] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000005 [ 329.971402][T10152] RBP: 00007f8eda88d090 R08: 0000000000000000 R09: 0000000000000000 [ 329.971411][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.971420][T10152] R13: 00007f8ed9c26128 R14: 00007f8ed9c26090 R15: 00007ffc1fa75bd8 [ 329.971440][T10152] [ 329.971510][T10152] Kernel Offset: disabled