last executing test programs: 4m47.594362915s ago: executing program 0 (id=1267): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r2, 0x40086602, &(0x7f0000000100)) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) execveat$auto(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) mbind$auto(0xffffffffffffff00, 0xff, 0x9, &(0x7f0000000040)=0x100, 0x3, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 4m45.710806572s ago: executing program 0 (id=1274): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/bus/pci/drivers/c3xxx/uevent\x00', 0x402300, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYBLOB='N\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x4007) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/rc_rateidx_mcs_mask_2ghz\x00', 0x88000, 0x0) mmap$auto(0x0, 0x400008, 0x200, 0x3a, 0xffffffffffffffff, 0x3) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) sysfs$auto(0x2, 0x10000000000002c, 0x0) r0 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x149942, 0x0) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) write$auto_uhid_fops_uhid(r0, 0x0, 0x0) memfd_create$auto(&(0x7f0000000100)='l2tp\x00', 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) prctl$auto(0x59616d61, 0x1, 0x1, 0xfffffffffffffffb, 0xffffffffffffffe5) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000380), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_settime$auto(0x14, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf25040000002d0011009b"], 0x44}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x0, 0x29}, 0x20100007}, 0x3, 0x0) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r2) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000280), r2) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x5}, 0x2000801) 4m43.782441313s ago: executing program 0 (id=1282): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x6, 0x1b, 0xfffffffffffffffc, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer1\x00', 0x180, 0x0) ioctl$auto_OSS_ALSAEMULVER(r2, 0x40086602, &(0x7f0000000100)) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) execveat$auto(r3, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x10000) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/pci/rescan\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000200)='5', 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)) mbind$auto(0xffffffffffffff00, 0xff, 0x9, &(0x7f0000000040)=0x100, 0x3, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8001, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) msync$auto(0x1ffff000, 0x1800000ff000000, 0x400000004) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) 4m41.681270638s ago: executing program 0 (id=1286): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000180)='0[+[\x00\xcf\xe2\x9b\xefH\xab\xcf\xd0\x85\x0261z\x90\xd27\x8a\x97\xa7\xe5\xd3a\xe4BQ', 0x2) (fail_nth: 2) 4m41.248310382s ago: executing program 0 (id=1287): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000180)='0[+[\x00\xcf\xe2\x9b\xefH\xab\xcf\xd0\x85\x0261z\x90\xd27\x8a\x97\xa7\xe5\xd3a\xe4BQ', 0x2) 4m39.934300476s ago: executing program 0 (id=1292): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyte\x00', 0x0, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20ebf, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x9) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/ip6tnl0/statistics/collisions\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 4m24.736930695s ago: executing program 32 (id=1292): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r2, 0x5425, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyte\x00', 0x0, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20ebf, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x9) bind$auto(0x3, &(0x7f0000000000)=@nl=@kern={0x10, 0x0, 0x24, 0x400000}, 0x68) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/ip6tnl0/statistics/collisions\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 7.931599006s ago: executing program 1 (id=2203): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000000000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4) r0 = socketpair$auto(0x1, 0x5, 0x8, 0x0) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0x800000000000eb1, r0, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80003, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) socket(0x29, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) accept4$auto(0xffffffffffffffff, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0x8000}, &(0x7f0000000100)=0xfff, 0x6) r2 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) sendmmsg$auto(r1, 0x0, 0x7, 0x20000002) setsockopt$auto(0x3, 0x9, 0x2f, 0x0, 0x9) setsockopt$auto(r2, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) acct$auto(&(0x7f0000000140)='/dev/ptmx\x00') recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = memfd_create$auto(0x0, 0x5) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r5, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000180)=""/197, 0xc5) landlock_restrict_self$auto(r5, 0x1) 6.421268578s ago: executing program 1 (id=2211): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x59, &(0x7f0000000100)={0x0, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0xe63c, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x8000c, 0x100000000}}) r2 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r2, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffbfffd}, 0xffff}, 0x4000, 0x20000043) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'vlan0\x00', 0x0}) bpf$auto_BPF_LINK_UPDATE(0x1d, &(0x7f0000000240)=@bpf_attr_3={0x5, 0x5, 0x5, 0x8, 0xfffffffa, 0x5, 0x4, 0xff, 0x6, "8a8b4d0283682dd9de14ee7442ef0296", r3, 0x24a, r2, 0xd52, 0x7, 0xfffffc01, 0xb, 0x5, 0x150b, 0x6, @attach_prog_fd=r1, 0x1, 0x101, 0x49d, 0x2, 0x3, r0, r2}, 0x68e) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) capset$auto(0x0, 0x0) acct$auto(&(0x7f0000000100)='./cgroup/cgroup.subtree_control\x00') write$auto(0xffffffffffffffff, 0x0, 0x8000007f) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ram8\x00', 0x16fa02, 0x0) sendfile$auto(0x3, r4, 0x0, 0x400000000006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/kernel/task_delayacct\x00', 0x80282, 0x0) select$auto(0x4, 0x0, 0x0, &(0x7f0000000300)={[0x1ff, 0x7, 0xed40, 0x1, 0x7, 0x1000000000000004, 0x15f4da0a, 0x4000000400039, 0x3, 0x2bffffffffffffe, 0x80000002, 0x7a142c64, 0x6d3c, 0x5, 0x80, 0xfb]}, 0x0) shutdown$auto(0x200000003, 0x2) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) 5.2547189s ago: executing program 1 (id=2215): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r2) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x8dff, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0002, 0x19) 5.149768944s ago: executing program 4 (id=2216): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) semget$auto(0x0, 0x2e4a, 0x8000) unshare$auto(0x40000080) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x2a, 0x5, 0x6) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdir$auto(0x0, 0x7f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x40, 0x0) select$auto(0xb, 0x0, 0x0, &(0x7f0000000240)={[0x10000000000001ff, 0x8001, 0xff1, 0x20, 0x12, 0x100000000000004, 0x3c2a19d5, 0xa2f9, 0x1, 0x9, 0x8, 0x3, 0x1, 0x5, 0xa, 0x5]}, 0x0) unshare$auto(0x40000080) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/cgroup\x00') poll$auto(&(0x7f0000000340)={r2, 0x5, 0x3}, 0x4, 0x101) mlock$auto(0x7c88, 0x7fff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write$auto(r3, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r4, 0x0, 0x28, 0x0, 0xc) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000100), 0x1b3c80, 0x0) unshare$auto(0x81) socket$nl_generic(0x10, 0x3, 0x10) 3.688055339s ago: executing program 4 (id=2219): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000001df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x106) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x4f, 0x20000000007, 0x3, 0x1000000000000bc3, 0x800, 0x3, 0xff, 0x10001, 0x400000000003, 0x1, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x80000000, 0x9, 0xffffdfffffffff7d, 0x4]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.269982768s ago: executing program 2 (id=2222): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x0, 0xd, 0x5, 0xebd, 0x401, 0xffffffff) lseek$auto(0x3, 0x2000000000000000, 0x1) write$auto(0x3, 0x0, 0xfdef) munmap$auto(0x8000, 0xffffffff) 3.227860965s ago: executing program 3 (id=2223): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0xee01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) unshare$auto(0x40000080) acct$auto(&(0x7f0000000100)='/dev/sequencer2\x00') socket(0xa, 0x3, 0x3b) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) r0 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x17, r0, 0x4, r0}, 0x10) bpf$auto(0x3, &(0x7f0000000140)=@raw_tracepoint={0x7, r1, 0x0, 0xf}, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x128008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) shmget$auto(0x0, 0x7b, 0x100) madvise$auto(0x108000, 0x2, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x2) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r2, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r2, 0xc0045405, &(0x7f0000000140)) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0) mbind$auto(0x0, 0x2091d1, 0x1, 0x0, 0x6, 0x2) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) r3 = ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f0000000080)=0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x0, 0xd, 0x5, 0xebd, 0x401, 0xffffffff) 2.650550822s ago: executing program 1 (id=2224): futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000140)={0x0, 0xfff0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='r\x02', 0x2fb) 2.559070348s ago: executing program 1 (id=2225): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x560a, r1) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x48084) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x5, 0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x80000, 0x0) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) unshare$auto(0x40000080) clock_nanosleep$auto(0x2, 0x6, &(0x7f0000000840)={0x0, 0xc025}, 0x0) close_range$auto(0x2, 0x8, 0xf5) close_range$auto(0x0, 0xfffffffffffff000, 0xfffffff7) 2.425126212s ago: executing program 2 (id=2226): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) 2.408041861s ago: executing program 3 (id=2227): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) futex_waitv$auto(&(0x7f0000000000)={0x7f00, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) close_range$auto(0x2, 0x8, 0x0) mprotect$auto(0x1000, 0x401000, 0x4) mmap$auto(0x4, 0xa00006, 0x2, 0x100000000040eb1, 0x602, 0x300000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) read$auto(r0, 0x0, 0x100000001) sendfile$auto(0x1, 0x3, 0x0, 0x74c) 2.232507391s ago: executing program 2 (id=2228): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) futex_waitv$auto(&(0x7f0000000000)={0x0, 0x7e4, 0x2}, 0x1, 0x0, 0x0, 0x623d) close_range$auto(0x2, 0x8, 0xef8) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) preadv$auto(0xffffffffffffffff, 0x0, 0xc, 0x9, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, 0x0, 0xc4142, 0x0) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/netfs/requests\x00', 0x40080, 0x0) pread64$auto(r2, 0x0, 0x8100100041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x2, 0x8, 0xf8, @_rt={0xffffffffffffffff, 0x0, @sival_ptr=&(0x7f0000000280)="79ca6170c72c9b5affac767c0127e58e38f3f407303ed544651fc514ea2bf3a8d8ec1b5efc99d62cbb8043d4582607afd440f400a4fdcd74a0d6cc759ee437d05a5a149e70f79615cb36ed421aea340b2fe6"}}}, 0x20f5, &(0x7f0000000440)={{0x0, 0x7e}, {0x8, 0x2}, 0xc2, 0xfffffffffffffff1, 0x80000001, 0x8000000000000001, 0x1, 0x3, 0x3, 0x501, 0xfff, 0x0, 0x3, 0x3, 0x10, 0xfffffffffffffffb}) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) setresuid$auto(0x2, 0x7, 0x8080) clock_settime$auto(0x0, &(0x7f0000000000)={0x100000000, 0x3b9ac9ff}) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) socket(0x2c, 0x80003, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mseal$auto(0x1ffff000, 0xfffffffffffefff3, 0x0) 2.221061011s ago: executing program 4 (id=2229): connect$auto(0xffffffffffffffff, &(0x7f0000000040)=@nfc={0x27, 0x0, 0xffffffffffffffff, 0x5}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xaaf, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto_MADV_GUARD_REMOVE(0x0, 0x4, 0x67) r0 = socket(0x29, 0x2, 0x0) setsockopt$auto(r0, 0x119, 0xfffffffe, 0x0, 0x8) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) preadv2$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x80000000009}, 0x6, 0xffffffffffffffff, 0x3ffff, 0x2e) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r3) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0002, 0x19) renameat$auto(r4, 0x0, r4, 0x0) socket(0x2c, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2.211301674s ago: executing program 3 (id=2230): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x3800, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r1, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x15}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771fdc19f1779048590822ad9"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) 2.040134942s ago: executing program 3 (id=2231): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x2, 0x0) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\xf5\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\t\x00\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00\r\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x22a02, 0x0) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x10000000000000, 0x0, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_BLKPG(r1, 0x1269, 0x300000000000000) mmap$auto_mtd_fops_mtdchar(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000009, 0x12, r1, 0xe93) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/video21\x00', 0x80202, 0x0) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) read$auto_proc_pid_smaps_operations_internal(r2, &(0x7f00000002c0)=""/190, 0xfffffe39) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3c, 0x200001000) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) socket(0x2, 0x3, 0x100) unshare$auto(0x40000080) socket(0x10, 0x2, 0x0) mmap$auto(0x1, 0x20000000400008, 0x9, 0x9b72, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xabf, 0x40000000000a5, 0x80008000) set_tid_address$auto(0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000002280), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r3, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000002340)=ANY=[@ANYBLOB="9e6bfc85", @ANYRES16=r4, @ANYBLOB="01082abd7000fcdbdf2502000000100002800c000100d70b4d9343ea1b1208000100", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4040005}, 0x40) 1.551587472s ago: executing program 1 (id=2232): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) pwritev$auto(r0, &(0x7f0000000140)={0x0, 0x400000000001}, 0x5, 0x5, 0xd3b8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyu3\x00', 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x89f0, r2) read$auto(r1, 0x0, 0x20) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000000380)="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") madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = prctl$auto(0xbb, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x3, 0x20009, 0x4000000000df, 0x14, r3, 0x8000) madvise$auto(0xfe7, 0x9, 0x3) mmap$auto(0x0, 0x4020009, 0xdb, 0x11, 0xffffffffffffffff, 0xffffffffffdfff46) sendmmsg$auto(r3, &(0x7f0000000340)={{&(0x7f0000000080), 0xffff, &(0x7f0000000200)={&(0x7f0000000140)="4e86ca323f00b93bbd82191134ac5c581f748988610f877b5b2a0705f1ffd8d115d350e68fadb3ebc2a10a65ebdb75894c430d4d5cbdb8fcd64ac8a8d7a9a4ff1165c506", 0x7}, 0x1, &(0x7f0000000240), 0x22a, 0x1}, 0x3}, 0x6, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r5, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DMABUF_FD={0x8}, @NETDEV_A_DMABUF_QUEUES={0xc, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0xfffffff9}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x400d0}, 0x44892) r7 = open(0x0, 0x595002, 0x408) write$auto(r7, 0x0, 0xfffffdf1) pwrite64$auto(r7, 0x0, 0x32e, 0x8) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mprotect$auto(0x0, 0x8000000000000001, 0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x6c01c2, 0x0) 1.020783834s ago: executing program 4 (id=2233): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) mmap$auto(0x0, 0x9, 0x2, 0x40eb2, 0x401, 0x300000000000) write$auto(0x3, 0x0, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x109c02, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000080), 0x6b5701, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) socket$nl_generic(0x10, 0x3, 0x10) read$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0xc}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000001a80), 0x1140, 0x0) ioctl$auto_PPPIOCATTACH(r3, 0x4004743d, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) r4 = socket(0x1d, 0x2, 0x7) getsockopt$auto_SO_ERROR(r4, 0x190, 0x4, 0x0, 0x0) 735.725776ms ago: executing program 2 (id=2234): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) epoll_create$auto(0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) close_range$auto(0x2, 0x8, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) 453.686415ms ago: executing program 4 (id=2235): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) io_uring_setup$auto(0xa, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) mprotect$auto(0x7f, 0x6, 0x7) mprotect$auto(0x0, 0x806121, 0x6) 343.701281ms ago: executing program 3 (id=2236): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000000000008000) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r0, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) 258.023271ms ago: executing program 2 (id=2237): r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) setreuid$auto(0x0, 0x20000000004) syz_clone3(&(0x7f0000000300)={0x193104480, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, &(0x7f0000000800)=[0x0], 0x1, {r0}}, 0x58) 175.130147ms ago: executing program 3 (id=2238): mmap$auto(0x0, 0x428, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) io_uring_setup$auto(0x7, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x181902, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000180), 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x1, 0x106) setsockopt$auto(r0, 0x6, 0xd, 0x0, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nbd5\x00', 0x26000, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={"ef65ce6c00cf81000000ffffffffffffff291d000000000700000000000300", 0x3ff, 0x408, 0xfff, 0x400004, 0x200000000040000d}) ioctl$auto_BLKTRACETEARDOWN(r2, 0x1276, 0x0) r3 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x121002, 0x0) read$auto_transaction_log_fops_(r3, &(0x7f0000000100)=""/3, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sysfs$auto(0x2, 0x23, 0x0) r4 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r4, 0x0, 0x4) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) 85.311038ms ago: executing program 2 (id=2239): r0 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @multicast2}, 0x54) prctl$auto(0x42, 0x2, 0x0, 0x1, 0x7fffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0x3, 0x4, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7073000000001400000008000300", @ANYRES32=r4], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r6, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11) getsockopt$auto_SO_DEBUG(r6, 0x1, 0x1, &(0x7f0000000100)='},:\xa8.!/\x00', &(0x7f00000001c0)) r7 = getpid() r8 = setfsuid$auto(0xee01) setresuid$auto(0x0, r8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000003400)={0x254c, r2, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_CQM={0x13cf, 0x5e, 0x0, 0x1, [@generic="0c7bca135190d9ab29869a42a0b8325aa184c13dcbfd025d00ce8ed964bdba50d3a0f412d7599356c5cc79a20da377aeb1c5b355822032de3d90830dafdf0c7f4785afd7a4ddbc4f102acc38e4e0478378f772678789afbfb2b15a1981a23266e0a0305af035d9a33b727ce5cf6b552ee7c1eda2698bc7bebb3fdc0e1e1e25b3bbd518f759148dc552077bbed05c7f9269886acddc5aec0cdf01bca8b73b7e39383e06b2ffd7172d5dd4f6cc016638e6d69f27b839076e", @typed={0x5, 0xd0, 0x0, 0x0, @str='\x00'}, @nested={0xc, 0x145, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x1170, 0xdd, 0x0, 0x1, [@nested={0xe7, 0x7, 0x0, 0x1, [@generic, @typed={0x5, 0xe3, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0x12}, @nested={0x4, 0x8e}, @nested={0x4, 0x78}, @generic="fdd14b6f3f67f52ac70cd3a0b09f6ed1d80788aac5b4248441b7081ebdb145ea201961f9bdf743c7cafe8146264c5cdce7529cff00acd3abda64f1b1459508141b39cb98362564ace699738544c92ab758e3e7c5e4dceaa8eeb6f2c71178e9d6509c47caf05d9fd9e3ce4136269fa1ee71c73cea1c7112222b1f1fca031a52b6d4c9a598f06502b57afb0f74af133368a2683ac3d6b859aed10612fb6f412d0c377569fe70931c4773eadc3e5f7c0dfd94ac1e4523aab56060c77adfb0420c122fd65e4725f6a2", @nested={0x4, 0xa0}, @nested={0x4, 0x114}]}, @nested={0x1081, 0xb1, 0x0, 0x1, [@generic="86bae2de73f360da665edf5dfb24a81ec6664fd5a0f2a3ad895b91efef76550597ca419ac3c7acfe50f81d898b160c4d29f575c963c267e398", @typed={0x4, 0x169}, @typed={0x1004, 0x154, 0x0, 0x0, @binary="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"}, @typed={0x31, 0x10c, 0x0, 0x0, @binary="79ce34636872e544fa63c0787401223fd61bcb03f77cef9e657402ffb34498efc69ad42768a7e266a15ca2a2eb"}, @typed={0x8, 0x15b, 0x0, 0x0, @fd=r0}]}]}, @generic="4bc98ff6060fa8803f6bacd38b74435e9f1fdd268bd8cc61943babf798ed624082e62c7dac1f3e8b3262969620fd4f754e298b812b782c1df85a140ee85a41de83aa7d7b043ddd390aee173c1323ebf04590c5661dcda6e0d4344bc95e4bdd42201e31f6d33a42bcef591902d1445e7683d9be73a816e5982382b75a5da56e38b9841a397881de96201be18d7897af5ab2619b0b99526d39467eef2c5ab6bfae458a068b7a58e6917480875234f77b517a95cf924dc0ffec6cc8f4ca4689", @generic="a628948c7a1e2e056a527b0dfa36b28f18abe1527d8e6ccfceffff4bcb81b8895328329cbf360938b2dd30306bad7ed61a33bbcda7fbd8d568c61be4e204369afb563b49f34b897af9c6a6e82fd748c47bd71b6ea3f5797c4859c0c22a1d8f44c97cd017820f005ba1a3088f6debaca719ace433ee08ed36bc8a0ab6a37e7a4527018645c2a135e9a39e924155021d2da840fa0c90bd1d7a4dc883b5dcd3da7ad50b1279c247835ee799b7f72d7b783199985a1fc822c045f662eb7090b5cd947b7b20d2c02f69d61eb2647d6b65facf0000"]}, @NL80211_ATTR_CSA_IES={0x1128, 0xb9, 0x0, 0x1, [@nested={0x109d, 0x1f, 0x0, 0x1, [@generic="83762722cf3353b0cf177f0dacf2316636b2de6efe30116667f43b2d2ef5d4e77bf9d46456813e521ed1d5b66aae0cbee315d7bc133fd792d5d466190dc13abcda0d28221a46b5bedf6bc29b466f5d38ab9d364b26615e7c8dd485c253871192bb377f1c56f0e4cf8ecaba8f76b983e8760d1a4c7cc67bdb744f66e2e23b1afff0af49896d71a69b76ab4f025c41157da0925ee3cf09efdff0", @nested={0x4, 0x149}, @generic="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"]}, @nested={0x7c, 0xa6, 0x0, 0x1, [@generic="5a285b156f94665f1b967a257c1172d57974f133342edeb71c8389c0ae9da533cba7c9371cc32efe6b8e69f44a737ff4a95178b8db73e7d6a53e24bde27d58b33b75f243f586bc5688495dc162e43913cb060a6fd34347c0cc28ad4c9aa54d2cc4fa5214a446744a9859c9fb0965b8b52c0a33e233dceb84"]}, @typed={0x8, 0x77, 0x0, 0x0, @pid=r7}]}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x29, 0xba, "8a9740d55adcaefe50b1797cb10892da185b79bad7aa34bb51f0dc0fdd6ee03d6375f9a0d8"}, @NL80211_ATTR_KEY_DATA={0x14, 0x7, "9238fbc3514aef7e368d78f2f326c8bd"}]}, 0x254c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) setgroups$auto(0xe32, 0x0) 0s ago: executing program 4 (id=2240): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card1/pcm0p/sub4/status\x00', 0x41a842, 0x0) unshare$auto(0x40000080) mmap$auto(0x2, 0x402000b, 0xdf, 0xeb1, r0, 0x8000) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1ac}}, 0x40000) recvmmsg$auto(r1, 0x0, 0x5, 0x10, 0x0) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/platform/dummy_hcd.5/usb6/bMaxPower\x00', 0x80, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mq_getsetattr$auto(0x3, 0x0, &(0x7f0000000100)={0x8, 0x8, 0x2, 0x1}) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x403c6f2b, 0x0) pread64$auto(r0, 0x0, 0x100006, 0xc982) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x1, 0x0, 0x0, 0x0, 0x42) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x9, 0x4000000000df, 0xeb1, 0x401, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000300)=@bpf_attr_5={@target_ifindex=r6, r4, 0x8000, 0x2, 0xffffffffffffffff, @relative_fd=r4, 0x6}, 0xf) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xf) bpf$auto(0x8, &(0x7f0000000440)=@query={@target_fd, 0x8, 0x7, 0x6, 0x0, @prog_cnt, 0x0, 0x8ba0, 0x277, 0xa}, 0xf) kernel console output (not intermixed with test programs): 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.308421][T13237] RSP: 002b:00007f0224c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 509.308436][T13237] RAX: ffffffffffffffda RBX: 00007f0224015fa0 RCX: 00007f0223d9ce59 [ 509.308447][T13237] RDX: 000000000000003a RSI: 0000000000000003 RDI: 000000000000000a [ 509.308456][T13237] RBP: 00007f0223e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 509.308465][T13237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.308474][T13237] R13: 00007f0224016038 R14: 00007f0224015fa0 R15: 00007ffeebb99c88 [ 509.308504][T13237] [ 510.077289][ T5645] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 510.259913][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 514.110436][ T5650] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 515.008924][T13326] netlink: 62 bytes leftover after parsing attributes in process `syz.4.1454'. [ 515.065200][T13329] syz_tun: tun_chr_ioctl cmd 2148553947 [ 515.948653][ T5645] Bluetooth: hci3: unexpected subevent 0x0c length: 118 > 5 [ 516.033655][ T5645] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 516.579475][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 522.819533][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 524.076188][T13500] hub 1-0:1.0: USB hub found [ 524.108969][T13496] FAULT_INJECTION: forcing a failure. [ 524.108969][T13496] name fail_futex, interval 1, probability 0, space 0, times 0 [ 524.149568][T13500] hub 1-0:1.0: 1 port detected [ 524.187682][T13496] CPU: 0 UID: 0 PID: 13496 Comm: syz.1.1491 Not tainted syzkaller #0 PREEMPT(full) [ 524.187704][T13496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 524.187714][T13496] Call Trace: [ 524.187719][T13496] [ 524.187725][T13496] dump_stack_lvl+0x100/0x190 [ 524.187755][T13496] should_fail_ex.cold+0x5/0xa [ 524.187771][T13496] ? rcu_is_watching+0x12/0xc0 [ 524.187791][T13496] get_futex_key+0x1d2/0x1510 [ 524.187817][T13496] ? __pfx_get_futex_key+0x10/0x10 [ 524.187846][T13496] futex_wait_setup+0x83/0x510 [ 524.187870][T13496] __futex_wait+0x19f/0x300 [ 524.187890][T13496] ? __pfx___futex_wait+0x10/0x10 [ 524.187911][T13496] ? __pfx_futex_wake_mark+0x10/0x10 [ 524.187933][T13496] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 524.187948][T13496] ? __hrtimer_setup+0x208/0x330 [ 524.187964][T13496] ? ktime_add_safe+0x60/0x70 [ 524.187981][T13496] futex_wait+0xe6/0x370 [ 524.188000][T13496] ? __pfx_futex_wait+0x10/0x10 [ 524.188021][T13496] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 524.188042][T13496] do_futex+0x1ef/0x350 [ 524.188058][T13496] ? __pfx_do_futex+0x10/0x10 [ 524.188076][T13496] ? ktime_get+0x22c/0x320 [ 524.188096][T13496] ? lockdep_hardirqs_on+0x78/0x100 [ 524.188120][T13496] __x64_sys_futex+0x34f/0x4d0 [ 524.188139][T13496] ? __pfx___x64_sys_futex+0x10/0x10 [ 524.188158][T13496] ? rcu_is_watching+0x12/0xc0 [ 524.188177][T13496] do_syscall_64+0x115/0x840 [ 524.188197][T13496] ? clear_bhb_loop+0x40/0x90 [ 524.188215][T13496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.188231][T13496] RIP: 0033:0x7f0223d9ce59 [ 524.188244][T13496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.188260][T13496] RSP: 002b:00007ffeebb99de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 524.188275][T13496] RAX: ffffffffffffffda RBX: 000000000007ff25 RCX: 00007f0223d9ce59 [ 524.188285][T13496] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0224015fac [ 524.188294][T13496] RBP: 0000000000000032 R08: 0000000000000001 R09: 0000000000000000 [ 524.188303][T13496] R10: 00007ffeebb99ef0 R11: 0000000000000246 R12: 00007ffeebb99f10 [ 524.188312][T13496] R13: 00007f0224015fac R14: 000000000007ff57 R15: 00007ffeebb99ef0 [ 524.188332][T13496] [ 528.506655][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 529.076350][ T57] tipc: Subscription rejected, illegal request [ 529.868813][T13606] FAULT_INJECTION: forcing a failure. [ 529.868813][T13606] name failslab, interval 1, probability 0, space 0, times 0 [ 529.907137][T13606] CPU: 0 UID: 0 PID: 13606 Comm: syz.1.1514 Not tainted syzkaller #0 PREEMPT(full) [ 529.907161][T13606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 529.907171][T13606] Call Trace: [ 529.907177][T13606] [ 529.907183][T13606] dump_stack_lvl+0x100/0x190 [ 529.907214][T13606] should_fail_ex.cold+0x5/0xa [ 529.907236][T13606] should_failslab+0xc2/0x120 [ 529.907255][T13606] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 529.907272][T13606] ? vidtv_psi_short_event_desc_init+0x312/0x5f0 [ 529.907299][T13606] kstrdup+0x51/0xe0 [ 529.907316][T13606] vidtv_psi_short_event_desc_init+0x312/0x5f0 [ 529.907339][T13606] vidtv_psi_desc_clone+0x33f/0x5d0 [ 529.907360][T13606] vidtv_channel_si_init+0x76c/0x18f0 [ 529.907389][T13606] vidtv_mux_init+0x526/0xbf0 [ 529.907413][T13606] vidtv_start_feed+0x34e/0x500 [ 529.907430][T13606] ? __pfx_vidtv_start_feed+0x10/0x10 [ 529.907448][T13606] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 529.907475][T13606] dmx_section_feed_start_filtering+0x3a8/0x660 [ 529.907501][T13606] dvb_dmxdev_filter_start+0x767/0xdd0 [ 529.907524][T13606] dvb_demux_do_ioctl+0xe64/0x1200 [ 529.907546][T13606] dvb_usercopy+0x167/0x340 [ 529.907568][T13606] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 529.907586][T13606] ? __pfx_dvb_usercopy+0x10/0x10 [ 529.907617][T13606] ? __fget_files+0x21f/0x3d0 [ 529.907638][T13606] dvb_demux_ioctl+0x29/0x40 [ 529.907652][T13606] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 529.907667][T13606] __x64_sys_ioctl+0x18e/0x210 [ 529.907684][T13606] do_syscall_64+0x115/0x840 [ 529.907705][T13606] ? clear_bhb_loop+0x40/0x90 [ 529.907724][T13606] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.907740][T13606] RIP: 0033:0x7f0223d9ce59 [ 529.907754][T13606] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.907768][T13606] RSP: 002b:00007f0224c54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.907783][T13606] RAX: ffffffffffffffda RBX: 00007f0224016090 RCX: 00007f0223d9ce59 [ 529.907793][T13606] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 529.907802][T13606] RBP: 00007f0223e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 529.907812][T13606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.907820][T13606] R13: 00007f0224016128 R14: 00007f0224016090 R15: 00007ffeebb99c88 [ 529.907840][T13606] [ 530.675304][T13614] FAULT_INJECTION: forcing a failure. [ 530.675304][T13614] name failslab, interval 1, probability 0, space 0, times 0 [ 530.725956][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1517'. [ 530.780525][T13614] CPU: 0 UID: 0 PID: 13614 Comm: syz.3.1516 Not tainted syzkaller #0 PREEMPT(full) [ 530.780549][T13614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 530.780559][T13614] Call Trace: [ 530.780565][T13614] [ 530.780572][T13614] dump_stack_lvl+0x100/0x190 [ 530.780604][T13614] should_fail_ex.cold+0x5/0xa [ 530.780624][T13614] ? tracepoint_add_func+0x3a8/0x1150 [ 530.780645][T13614] should_failslab+0xc2/0x120 [ 530.780663][T13614] __kmalloc_noprof+0xe0/0x850 [ 530.780690][T13614] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 530.780708][T13614] tracepoint_add_func+0x3a8/0x1150 [ 530.780728][T13614] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 530.780750][T13614] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 530.780767][T13614] tracepoint_probe_register+0xc4/0x110 [ 530.780789][T13614] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 530.780820][T13614] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 530.780843][T13614] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 530.780861][T13614] ? __pfx_probe_sched_switch+0x10/0x10 [ 530.780888][T13614] trace_event_reg+0x209/0x350 [ 530.780908][T13614] __ftrace_event_enable_disable+0x211/0x6f0 [ 530.780935][T13614] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 530.780965][T13614] ftrace_set_clr_event+0x1b7/0x3f0 [ 530.780983][T13614] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 530.781000][T13614] ? trace_get_user+0x3ae/0xa70 [ 530.781026][T13614] ftrace_event_write+0x259/0x2c0 [ 530.781043][T13614] ? __pfx_ftrace_event_write+0x10/0x10 [ 530.781068][T13614] vfs_write+0x2aa/0x1070 [ 530.781086][T13614] ? __pfx_ftrace_event_write+0x10/0x10 [ 530.781105][T13614] ? __pfx_vfs_write+0x10/0x10 [ 530.781122][T13614] ? __fget_files+0x215/0x3d0 [ 530.781144][T13614] ? __fget_files+0x21f/0x3d0 [ 530.781166][T13614] ksys_write+0x12a/0x250 [ 530.781184][T13614] ? __pfx_ksys_write+0x10/0x10 [ 530.781202][T13614] ? rcu_is_watching+0x12/0xc0 [ 530.781222][T13614] do_syscall_64+0x115/0x840 [ 530.781242][T13614] ? clear_bhb_loop+0x40/0x90 [ 530.781260][T13614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.781276][T13614] RIP: 0033:0x7fef8bf9ce59 [ 530.781290][T13614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.781306][T13614] RSP: 002b:00007fef8ce77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 530.781321][T13614] RAX: ffffffffffffffda RBX: 00007fef8c215fa0 RCX: 00007fef8bf9ce59 [ 530.781332][T13614] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 530.781342][T13614] RBP: 00007fef8c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 530.781351][T13614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.781360][T13614] R13: 00007fef8c216038 R14: 00007fef8c215fa0 R15: 00007ffc8118b608 [ 530.781381][T13614] [ 530.781391][T13614] event trace: Could not enable event nfsd_file_open [ 531.884938][T10113] tipc: Subscription rejected, illegal request [ 534.038948][T13681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1531'. [ 534.352554][T13680] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 536.980344][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 537.183125][T13736] FAULT_INJECTION: forcing a failure. [ 537.183125][T13736] name failslab, interval 1, probability 0, space 0, times 0 [ 537.233735][T13736] CPU: 0 UID: 0 PID: 13736 Comm: syz.1.1541 Not tainted syzkaller #0 PREEMPT(full) [ 537.233759][T13736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 537.233769][T13736] Call Trace: [ 537.233774][T13736] [ 537.233781][T13736] dump_stack_lvl+0x100/0x190 [ 537.233811][T13736] should_fail_ex.cold+0x5/0xa [ 537.233832][T13736] ? tracepoint_add_func+0x3a8/0x1150 [ 537.233852][T13736] should_failslab+0xc2/0x120 [ 537.233870][T13736] __kmalloc_noprof+0xe0/0x850 [ 537.233897][T13736] ? __pfx_trace_event_raw_event_nfsd_file_acquire+0x10/0x10 [ 537.233916][T13736] tracepoint_add_func+0x3a8/0x1150 [ 537.233936][T13736] ? __pfx_trace_event_raw_event_nfsd_file_acquire+0x10/0x10 [ 537.233959][T13736] ? __pfx_trace_event_raw_event_nfsd_file_acquire+0x10/0x10 [ 537.233977][T13736] tracepoint_probe_register+0xc4/0x110 [ 537.234004][T13736] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 537.234026][T13736] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 537.234048][T13736] ? __pfx_trace_event_raw_event_nfsd_file_acquire+0x10/0x10 [ 537.234066][T13736] ? __pfx_probe_sched_switch+0x10/0x10 [ 537.234089][T13736] ? __lock_acquire+0x4a5/0x2630 [ 537.234115][T13736] trace_event_reg+0x209/0x350 [ 537.234136][T13736] __ftrace_event_enable_disable+0x211/0x6f0 [ 537.234161][T13736] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 537.234191][T13736] ftrace_set_clr_event+0x1b7/0x3f0 [ 537.234209][T13736] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 537.234225][T13736] ? trace_get_user+0x3ae/0xa70 [ 537.234252][T13736] ftrace_event_write+0x259/0x2c0 [ 537.234269][T13736] ? __pfx_ftrace_event_write+0x10/0x10 [ 537.234293][T13736] vfs_write+0x2aa/0x1070 [ 537.234312][T13736] ? __pfx_ftrace_event_write+0x10/0x10 [ 537.234330][T13736] ? __pfx_vfs_write+0x10/0x10 [ 537.234346][T13736] ? __fget_files+0x215/0x3d0 [ 537.234368][T13736] ? __fget_files+0x21f/0x3d0 [ 537.234390][T13736] ksys_write+0x12a/0x250 [ 537.234407][T13736] ? __pfx_ksys_write+0x10/0x10 [ 537.234426][T13736] ? rcu_is_watching+0x12/0xc0 [ 537.234446][T13736] do_syscall_64+0x115/0x840 [ 537.234466][T13736] ? clear_bhb_loop+0x40/0x90 [ 537.234484][T13736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.234500][T13736] RIP: 0033:0x7f0223d9ce59 [ 537.234513][T13736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.234527][T13736] RSP: 002b:00007f0224c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 537.234542][T13736] RAX: ffffffffffffffda RBX: 00007f0224015fa0 RCX: 00007f0223d9ce59 [ 537.234553][T13736] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 537.234562][T13736] RBP: 00007f0223e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 537.234579][T13736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.234589][T13736] R13: 00007f0224016038 R14: 00007f0224015fa0 R15: 00007ffeebb99c88 [ 537.234610][T13736] [ 537.524551][T13736] event trace: Could not enable event nfsd_file_acquire [ 540.262568][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 544.690526][T13842] FAULT_INJECTION: forcing a failure. [ 544.690526][T13842] name failslab, interval 1, probability 0, space 0, times 0 [ 544.805100][T13842] CPU: 0 UID: 0 PID: 13842 Comm: syz.2.1561 Not tainted syzkaller #0 PREEMPT(full) [ 544.805123][T13842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 544.805133][T13842] Call Trace: [ 544.805139][T13842] [ 544.805145][T13842] dump_stack_lvl+0x100/0x190 [ 544.805175][T13842] should_fail_ex.cold+0x5/0xa [ 544.805196][T13842] should_failslab+0xc2/0x120 [ 544.805214][T13842] __kmalloc_cache_noprof+0x7a/0x6f0 [ 544.805235][T13842] ? vidtv_psi_eit_event_init+0xe1/0x400 [ 544.805258][T13842] ? __kmalloc_node_track_caller_noprof+0x321/0x850 [ 544.805277][T13842] vidtv_psi_eit_event_init+0xe1/0x400 [ 544.805299][T13842] ? __pfx_vidtv_psi_eit_event_init+0x10/0x10 [ 544.805326][T13842] ? vidtv_psi_desc_clone+0x358/0x5d0 [ 544.805348][T13842] vidtv_channel_si_init+0x845/0x18f0 [ 544.805376][T13842] vidtv_mux_init+0x526/0xbf0 [ 544.805400][T13842] vidtv_start_feed+0x34e/0x500 [ 544.805417][T13842] ? __pfx_vidtv_start_feed+0x10/0x10 [ 544.805435][T13842] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 544.805462][T13842] dmx_section_feed_start_filtering+0x3a8/0x660 [ 544.805497][T13842] dvb_dmxdev_filter_start+0x767/0xdd0 [ 544.805520][T13842] dvb_demux_do_ioctl+0xe64/0x1200 [ 544.805544][T13842] dvb_usercopy+0x167/0x340 [ 544.805566][T13842] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 544.805585][T13842] ? __pfx_dvb_usercopy+0x10/0x10 [ 544.805619][T13842] ? __fget_files+0x21f/0x3d0 [ 544.805641][T13842] dvb_demux_ioctl+0x29/0x40 [ 544.805655][T13842] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 544.805671][T13842] __x64_sys_ioctl+0x18e/0x210 [ 544.805687][T13842] do_syscall_64+0x115/0x840 [ 544.805714][T13842] ? clear_bhb_loop+0x40/0x90 [ 544.805733][T13842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.805749][T13842] RIP: 0033:0x7f3a50f9ce59 [ 544.805763][T13842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.805779][T13842] RSP: 002b:00007f3a51e85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.805794][T13842] RAX: ffffffffffffffda RBX: 00007f3a51216090 RCX: 00007f3a50f9ce59 [ 544.805804][T13842] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 544.805814][T13842] RBP: 00007f3a51032d6f R08: 0000000000000000 R09: 0000000000000000 [ 544.805823][T13842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.805833][T13842] R13: 00007f3a51216128 R14: 00007f3a51216090 R15: 00007ffe3e8a8858 [ 544.805854][T13842] [ 546.627246][T13872] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1568'. [ 549.220924][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 549.755938][T13919] blktrace: Concurrent blktraces are not allowed on nbd5 [ 550.000375][T13920] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'. [ 555.220245][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 556.500203][T14019] kexec: Could not allocate control_code_buffer [ 559.440974][T14075] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1608'. [ 559.591363][T14075] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 559.654206][T14075] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 559.703194][T14075] bond0 (unregistering): Released all slaves [ 559.941763][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 560.675633][T14091] ubi0: attaching mtd0 [ 560.697606][T14091] ubi0: scanning is finished [ 560.736645][T14091] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 560.872549][T14096] FAULT_INJECTION: forcing a failure. [ 560.872549][T14096] name failslab, interval 1, probability 0, space 0, times 0 [ 560.885157][T14096] CPU: 0 UID: 0 PID: 14096 Comm: syz.1.1614 Not tainted syzkaller #0 PREEMPT(full) [ 560.885177][T14096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 560.885186][T14096] Call Trace: [ 560.885192][T14096] [ 560.885198][T14096] dump_stack_lvl+0x100/0x190 [ 560.885227][T14096] should_fail_ex.cold+0x5/0xa [ 560.885247][T14096] should_failslab+0xc2/0x120 [ 560.885266][T14096] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 560.885290][T14096] ? __send_signal_locked+0x155/0x12d0 [ 560.885309][T14096] __send_signal_locked+0x155/0x12d0 [ 560.885328][T14096] do_notify_parent+0xf05/0x10b0 [ 560.885345][T14096] ? __pfx_do_notify_parent+0x10/0x10 [ 560.885361][T14096] ? do_raw_spin_lock+0x128/0x260 [ 560.885379][T14096] ? __wake_up+0x3f/0x60 [ 560.885401][T14096] ? release_task+0xc29/0x1ab0 [ 560.885427][T14096] release_task+0x1560/0x1ab0 [ 560.885454][T14096] ? __pfx_release_task+0x10/0x10 [ 560.885475][T14096] ? do_raw_spin_lock+0x128/0x260 [ 560.885492][T14096] ? find_held_lock+0x2b/0x80 [ 560.885510][T14096] ? __wake_up+0x3f/0x60 [ 560.885534][T14096] ? __wake_up+0x3f/0x60 [ 560.885556][T14096] ? rcu_is_watching+0x12/0xc0 [ 560.885576][T14096] do_exit+0x13b5/0x2af0 [ 560.885601][T14096] ? __pfx_do_exit+0x10/0x10 [ 560.885622][T14096] ? do_raw_spin_lock+0x128/0x260 [ 560.885638][T14096] ? find_held_lock+0x2b/0x80 [ 560.885655][T14096] ? get_signal+0x7e5/0x2210 [ 560.885675][T14096] do_group_exit+0xd5/0x2a0 [ 560.885698][T14096] get_signal+0x20ff/0x2210 [ 560.885723][T14096] ? __pfx_get_signal+0x10/0x10 [ 560.885742][T14096] ? do_futex+0x192/0x350 [ 560.885759][T14096] arch_do_signal_or_restart+0x91/0x7a0 [ 560.885783][T14096] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 560.885811][T14096] ? rcu_is_watching+0x12/0xc0 [ 560.885831][T14096] exit_to_user_mode_loop+0x98/0x670 [ 560.885855][T14096] ? rcu_is_watching+0x12/0xc0 [ 560.885873][T14096] do_syscall_64+0x652/0x840 [ 560.885895][T14096] ? clear_bhb_loop+0x40/0x90 [ 560.885913][T14096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 560.885928][T14096] RIP: 0033:0x7f0223d9ce59 [ 560.885941][T14096] Code: Unable to access opcode bytes at 0x7f0223d9ce2f. [ 560.885948][T14096] RSP: 002b:00007f0224c750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 560.885962][T14096] RAX: 0000000000000001 RBX: 00007f0224015fa8 RCX: 00007f0223d9ce59 [ 560.885972][T14096] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0224015fac [ 560.885982][T14096] RBP: 00007f0224015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 560.885991][T14096] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000000 [ 560.886000][T14096] R13: 00007f0224016038 R14: 00007ffeebb99ba0 R15: 00007ffeebb99c88 [ 560.886019][T14096] [ 561.372584][T14091] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 561.813132][T14116] FAULT_INJECTION: forcing a failure. [ 561.813132][T14116] name failslab, interval 1, probability 0, space 0, times 0 [ 561.877113][T14116] CPU: 0 UID: 0 PID: 14116 Comm: syz.3.1617 Not tainted syzkaller #0 PREEMPT(full) [ 561.877138][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 561.877147][T14116] Call Trace: [ 561.877153][T14116] [ 561.877160][T14116] dump_stack_lvl+0x100/0x190 [ 561.877191][T14116] should_fail_ex.cold+0x5/0xa [ 561.877211][T14116] should_failslab+0xc2/0x120 [ 561.877230][T14116] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 561.877257][T14116] ? alloc_empty_file+0x5b/0x1c0 [ 561.877283][T14116] alloc_empty_file+0x5b/0x1c0 [ 561.877306][T14116] alloc_file_pseudo+0x13a/0x230 [ 561.877330][T14116] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 561.877352][T14116] ? alloc_fd+0x476/0x790 [ 561.877373][T14116] sock_alloc_file+0x50/0x210 [ 561.877391][T14116] __sys_socket+0x1c0/0x260 [ 561.877419][T14116] ? exc_page_fault+0x6f/0xd0 [ 561.877440][T14116] ? __pfx___sys_socket+0x10/0x10 [ 561.877466][T14116] __x64_sys_socket+0x72/0xb0 [ 561.877486][T14116] ? lockdep_hardirqs_on+0x78/0x100 [ 561.877506][T14116] do_syscall_64+0x115/0x840 [ 561.877527][T14116] ? clear_bhb_loop+0x40/0x90 [ 561.877545][T14116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.877561][T14116] RIP: 0033:0x7fef8bf9e6c7 [ 561.877574][T14116] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.877589][T14116] RSP: 002b:00007fef8ce33f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 561.877604][T14116] RAX: ffffffffffffffda RBX: 00007fef8c216180 RCX: 00007fef8bf9e6c7 [ 561.877615][T14116] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 561.877624][T14116] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 561.877633][T14116] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 561.877642][T14116] R13: 00007fef8c216218 R14: 00007fef8c216180 R15: 00007ffc8118b608 [ 561.877661][T14116] [ 563.063039][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.069422][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.263174][T14146] hub 1-0:1.0: USB hub found [ 564.363494][T14146] hub 1-0:1.0: 1 port detected [ 568.962698][T14242] syz.4.1643 (14242): attempted to duplicate a private mapping with mremap. This is not supported. [ 572.110550][ T5650] Bluetooth: hci1: unexpected event 0x3e length: 358 > 260 [ 572.110574][ T5650] Bluetooth: hci1: unexpected subevent 0x1b length: 357 > 260 [ 572.125619][ T5650] Bluetooth: hci1: Malformed LE Event: 0x1b [ 574.615129][T14348] netlink: 'syz.4.1669': attribute type 3 has an invalid length. [ 575.656003][T14375] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1672'. [ 577.273108][T14394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1676'. [ 577.445350][T14395] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1676'. [ 577.595323][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 577.601953][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 577.664780][T14398] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1676'. [ 578.924074][T14429] netlink: 'syz.3.1685': attribute type 2 has an invalid length. [ 578.955336][T14429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 581.299935][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 583.091564][T14470] block2mtd: illegal erase size [ 583.721254][T14486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1696'. [ 584.956461][T14506] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1702'. [ 585.026776][T14506] nbd: illegal input index -1467868383 [ 588.425479][T14583] syz_tun: tun_chr_ioctl cmd 2148553947 [ 589.541021][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 593.660322][T14666] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1736'. [ 594.285262][T14675] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 596.865951][T14722] aoe: could not set interface list: too many interfaces [ 597.052352][T14728] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 597.118031][T14728] CPU: 0 UID: 0 PID: 14728 Comm: syz.2.1751 Not tainted syzkaller #0 PREEMPT(full) [ 597.118052][T14728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 597.118062][T14728] Call Trace: [ 597.118067][T14728] [ 597.118074][T14728] dump_stack_lvl+0x100/0x190 [ 597.118106][T14728] sysfs_warn_dup.cold+0x1c/0x28 [ 597.118128][T14728] sysfs_do_create_link_sd+0x113/0x140 [ 597.118147][T14728] sysfs_create_link+0x61/0xc0 [ 597.118163][T14728] device_add+0x675/0x1950 [ 597.118183][T14728] ? __pfx_device_add+0x10/0x10 [ 597.118199][T14728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 597.118225][T14728] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 597.118254][T14728] wiphy_register+0x1edd/0x2d90 [ 597.118273][T14728] ? __rtnl_unlock+0xb9/0xf0 [ 597.118296][T14728] ? __pfx_wiphy_register+0x10/0x10 [ 597.118315][T14728] ? __asan_memset+0x23/0x50 [ 597.118339][T14728] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 597.118371][T14728] ieee80211_register_hw+0x3055/0x4570 [ 597.118405][T14728] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 597.118428][T14728] ? __pfx___debug_object_init+0x10/0x10 [ 597.118451][T14728] ? find_held_lock+0x2b/0x80 [ 597.118471][T14728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 597.118493][T14728] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 597.118517][T14728] ? __hrtimer_setup+0x208/0x330 [ 597.118534][T14728] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 597.118567][T14728] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 597.118589][T14728] ? __asan_memcpy+0x3c/0x60 [ 597.118613][T14728] hwsim_new_radio_nl+0xc5f/0x1370 [ 597.118632][T14728] ? rcu_is_watching+0x12/0xc0 [ 597.118699][T14728] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 597.118724][T14728] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 597.118748][T14728] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 597.118776][T14728] genl_family_rcv_msg_doit+0x214/0x300 [ 597.118801][T14728] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 597.118823][T14728] ? genl_get_cmd+0x3e7/0x760 [ 597.118849][T14728] ? bpf_lsm_capable+0x9/0x10 [ 597.118865][T14728] ? security_capable+0x80/0x260 [ 597.118881][T14728] ? ns_capable+0xd2/0xf0 [ 597.118899][T14728] genl_rcv_msg+0x560/0x800 [ 597.118924][T14728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.118947][T14728] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 597.118973][T14728] netlink_rcv_skb+0x159/0x420 [ 597.118993][T14728] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.119016][T14728] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.119044][T14728] ? netlink_deliver_tap+0x1ae/0xcc0 [ 597.119066][T14728] genl_rcv+0x28/0x40 [ 597.119085][T14728] netlink_unicast+0x585/0x850 [ 597.119108][T14728] ? __pfx_netlink_unicast+0x10/0x10 [ 597.119133][T14728] netlink_sendmsg+0x8b0/0xda0 [ 597.119156][T14728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.119175][T14728] ? __import_iovec+0x1d2/0x640 [ 597.119199][T14728] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 597.119218][T14728] ____sys_sendmsg+0x9e1/0xb70 [ 597.119236][T14728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.119258][T14728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.119276][T14728] ? preempt_schedule_thunk+0x16/0x30 [ 597.119302][T14728] ? try_to_wake_up+0x5f6/0x1900 [ 597.119325][T14728] ___sys_sendmsg+0x190/0x1e0 [ 597.119347][T14728] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.119367][T14728] ? futex_private_hash_put+0x107/0x1c0 [ 597.119414][T14728] __sys_sendmsg+0x170/0x220 [ 597.119430][T14728] ? __pfx___sys_sendmsg+0x10/0x10 [ 597.119445][T14728] ? __x64_sys_futex+0x34f/0x4d0 [ 597.119468][T14728] ? rcu_is_watching+0x12/0xc0 [ 597.119487][T14728] do_syscall_64+0x115/0x840 [ 597.119522][T14728] ? clear_bhb_loop+0x40/0x90 [ 597.119541][T14728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.119556][T14728] RIP: 0033:0x7f3a50f9ce59 [ 597.119569][T14728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.119584][T14728] RSP: 002b:00007f3a51ea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.119599][T14728] RAX: ffffffffffffffda RBX: 00007f3a51215fa0 RCX: 00007f3a50f9ce59 [ 597.119609][T14728] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 597.119619][T14728] RBP: 00007f3a51032d6f R08: 0000000000000000 R09: 0000000000000000 [ 597.119628][T14728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.119641][T14728] R13: 00007f3a51216038 R14: 00007f3a51215fa0 R15: 00007ffe3e8a8858 [ 597.119661][T14728] [ 597.952745][T14735] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 597.961633][T14735] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 597.970160][T14735] memcg:ffff88802c4b8401 [ 597.974400][T14735] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 597.981968][T14735] page_type: f5(slab) [ 597.985933][T14735] raw: 00fff00000000040 ffff88801ce90640 dead000000000100 dead000000000122 [ 597.994553][T14735] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff88802c4b8401 [ 598.013081][T14735] head: 00fff00000000040 ffff88801ce90640 dead000000000100 dead000000000122 [ 598.038195][T14735] head: 0000000000000000 0000000800150015 00000000f5000000 ffff88802c4b8401 [ 598.066747][T14735] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 598.085525][T14735] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 598.112550][T14735] page dumped because: unmovable page [ 598.124244][T14735] page_owner tracks the page as allocated [ 598.135900][T14735] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5010, tgid 5010 (udevadm), ts 30472973913, free_ts 24604054076 [ 598.162615][T14735] post_alloc_hook+0xfd/0x120 [ 598.167449][T14735] get_page_from_freelist+0x11a6/0x3410 [ 598.173228][T14735] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 598.179291][T14735] new_slab+0xa6/0x6c0 [ 598.183431][T14735] refill_objects+0x277/0x420 [ 598.188179][T14735] __pcs_replace_empty_main+0x375/0x650 [ 598.193811][T14735] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 598.199767][T14735] __d_alloc+0x34/0xa40 [ 598.204861][T14735] d_alloc_parallel+0x111/0x14e0 [ 598.210504][T14735] __lookup_slow+0x193/0x460 [ 598.215212][T14735] lookup_slow+0x50/0x70 [ 598.219534][T14735] path_lookupat+0x5e8/0xc40 [ 598.226162][T14735] filename_lookup+0x202/0x590 [ 598.231715][T14735] vfs_statx+0xff/0x3f0 [ 598.235971][T14735] vfs_fstatat+0x77/0xe0 [ 598.240338][T14735] __do_sys_newfstatat+0x9d/0x120 [ 598.246017][T14735] page last free pid 1 tgid 1 stack trace: [ 598.252449][T14735] __free_frozen_pages+0x794/0x10a0 [ 598.257754][T14735] free_contig_range+0xda/0x140 syzkaller syzkaller log[ 598.265036][T14735] destroy_args+0xa8/0x7a0 in: [ 598.270246][T14735] debug_vm_pgtable+0x1d69/0x3490 [ 598.275495][T14735] do_one_initcall+0x121/0x750 [ 598.282081][T14735] kernel_init_freeable+0x6ea/0x7b0 [ 598.288201][T14735] kernel_init+0x1f/0x1e0 [ 598.292896][T14735] ret_from_fork+0x72b/0xd50 [ 598.297659][T14735] ret_from_fork_asm+0x1a/0x30 [ 598.303494][T14735] FAULT_INJECTION: forcing a failure. [ 598.303494][T14735] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.318859][T14735] CPU: 0 UID: 0 PID: 14735 Comm: syz.4.1753 Not tainted syzkaller #0 PREEMPT(full) [ 598.318879][T14735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.318889][T14735] Call Trace: [ 598.318895][T14735] [ 598.318901][T14735] dump_stack_lvl+0x100/0x190 [ 598.318930][T14735] should_fail_ex.cold+0x5/0xa [ 598.318949][T14735] _copy_to_user+0x32/0xd0 [ 598.318972][T14735] simple_read_from_buffer+0xcb/0x170 [ 598.318991][T14735] proc_fail_nth_read+0x1af/0x230 [ 598.319015][T14735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.319040][T14735] ? rw_verify_area+0xce/0x6d0 [ 598.319055][T14735] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 598.319078][T14735] vfs_read+0x1e4/0xb30 [ 598.319097][T14735] ? __pfx_vfs_read+0x10/0x10 [ 598.319117][T14735] ? __fget_files+0x215/0x3d0 [ 598.319139][T14735] ? __fget_files+0x21f/0x3d0 [ 598.319161][T14735] ksys_read+0x12a/0x250 [ 598.319178][T14735] ? __pfx_ksys_read+0x10/0x10 [ 598.319196][T14735] ? rcu_is_watching+0x12/0xc0 [ 598.319215][T14735] do_syscall_64+0x115/0x840 [ 598.319236][T14735] ? clear_bhb_loop+0x40/0x90 [ 598.319254][T14735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.319270][T14735] RIP: 0033:0x7f7aa5f5d68e [ 598.319283][T14735] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 598.319297][T14735] RSP: 002b:00007f7aa6d9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.319312][T14735] RAX: ffffffffffffffda RBX: 00007f7aa6d9b6c0 RCX: 00007f7aa5f5d68e [ 598.319322][T14735] RDX: 000000000000000f RSI: 00007f7aa6d9b0a0 RDI: 0000000000000004 [ 598.319331][T14735] RBP: 00007f7aa6d9b090 R08: 0000000000000000 R09: 0000000000000000 [ 598.319341][T14735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.319350][T14735] R13: 00007f7aa6216038 R14: 00007f7aa6215fa0 R15: 00007ffdee0f5258 [ 598.319369][T14735] [ 598.740892][T14739] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 598.789318][T14739] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 598.839359][T14739] memcg:ffff88802c4b8401 [ 598.881701][T14739] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 598.939247][T14739] page_type: f5(slab) [ 598.951673][T14739] raw: 00fff00000000040 ffff88801ce90640 dead000000000100 dead000000000122 [ 598.997700][T14739] raw: 0000000000000000 0000000800150015 00000000f5000000 ffff88802c4b8401 [ 599.049168][T14739] head: 00fff00000000040 ffff88801ce90640 dead000000000100 dead000000000122 [ 599.072074][T14739] head: 0000000000000000 0000000800150015 00000000f5000000 ffff88802c4b8401 [ 599.107216][T14739] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 599.149269][T14739] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 599.165915][T14739] page dumped because: unmovable page [ 599.189848][T14739] page_owner tracks the page as allocated [ 599.216805][T14739] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5010, tgid 5010 (udevadm), ts 30472973913, free_ts 24604054076 [ 599.329082][T14739] post_alloc_hook+0xfd/0x120 [ 599.345633][T14739] get_page_from_freelist+0x11a6/0x3410 [ 599.367711][T14739] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 599.390254][T14739] new_slab+0xa6/0x6c0 [ 599.404709][T14739] refill_objects+0x277/0x420 [ 599.422564][T14739] __pcs_replace_empty_main+0x375/0x650 [ 599.440328][T14739] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 599.467084][T14739] __d_alloc+0x34/0xa40 [ 599.487718][T14739] d_alloc_parallel+0x111/0x14e0 [ 599.511500][T14739] __lookup_slow+0x193/0x460 [ 599.529975][T14739] lookup_slow+0x50/0x70 [ 599.554482][T14739] path_lookupat+0x5e8/0xc40 [ 599.572900][T14739] filename_lookup+0x202/0x590 [ 599.584322][T14739] vfs_statx+0xff/0x3f0 [ 599.597444][T14739] vfs_fstatat+0x77/0xe0 [ 599.610959][T14739] __do_sys_newfstatat+0x9d/0x120 [ 599.628435][T14739] page last free pid 1 tgid 1 stack trace: [ 599.648879][T14739] __free_frozen_pages+0x794/0x10a0 [ 599.665553][T14739] free_contig_range+0xda/0x140 [ 599.685066][T14739] destroy_args+0xa8/0x7a0 [ 599.707553][T14739] debug_vm_pgtable+0x1d69/0x3490 [ 599.725192][T14739] do_one_initcall+0x121/0x750 [ 599.743354][T14739] kernel_init_freeable+0x6ea/0x7b0 [ 599.758185][T14739] kernel_init+0x1f/0x1e0 [ 599.768392][T14739] ret_from_fork+0x72b/0xd50 [ 599.778882][T14739] ret_from_fork_asm+0x1a/0x30 [ 600.985926][ T4949] Bluetooth: hci4: command 0x0406 tx timeout [ 603.699462][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 604.920054][T14842] aoe: could not set interface list: too many interfaces [ 605.845885][T14860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1781'. [ 606.763881][T14885] vivid-007: ================= START STATUS ================= [ 606.812011][T14885] vivid-007: Enable Output Cropping: true grabbed [ 606.867123][T14885] vivid-007: Enable Output Composing: true grabbed [ 606.917277][T14885] vivid-007: Enable Output Scaler: true grabbed [ 606.970626][T14885] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 607.038366][T14885] vivid-007: Transmit Mode: HDMI grabbed [ 607.068884][T14885] vivid-007: Hotplug Present: 0x00000000 [ 607.095699][T14885] vivid-007: RxSense Present: 0x00000000 [ 607.127292][T14885] vivid-007: EDID Present: 0x00000000 [ 607.153764][T14885] vivid-007: ================== END STATUS ================== [ 609.502338][T14926] FAULT_INJECTION: forcing a failure. [ 609.502338][T14926] name failslab, interval 1, probability 0, space 0, times 0 [ 609.589874][T14926] CPU: 0 UID: 0 PID: 14926 Comm: syz.3.1794 Not tainted syzkaller #0 PREEMPT(full) [ 609.589896][T14926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 609.589906][T14926] Call Trace: [ 609.589911][T14926] [ 609.589918][T14926] dump_stack_lvl+0x100/0x190 [ 609.589956][T14926] should_fail_ex.cold+0x5/0xa [ 609.589976][T14926] ? tomoyo_realpath_from_path+0xb6/0x690 [ 609.589998][T14926] should_failslab+0xc2/0x120 [ 609.590017][T14926] __kmalloc_noprof+0xe0/0x850 [ 609.590039][T14926] ? kfree+0x1dd/0x6c0 [ 609.590062][T14926] tomoyo_realpath_from_path+0xb6/0x690 [ 609.590088][T14926] tomoyo_path_number_perm+0x23c/0x580 [ 609.590106][T14926] ? tomoyo_path_number_perm+0x22e/0x580 [ 609.590125][T14926] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 609.590162][T14926] ? find_held_lock+0x2b/0x80 [ 609.590180][T14926] ? __fget_files+0x215/0x3d0 [ 609.590197][T14926] ? hook_file_ioctl_common+0x149/0x410 [ 609.590215][T14926] ? __fget_files+0x215/0x3d0 [ 609.590235][T14926] ? __fget_files+0x21f/0x3d0 [ 609.590256][T14926] security_file_ioctl+0xd3/0x230 [ 609.590275][T14926] __x64_sys_ioctl+0xb7/0x210 [ 609.590292][T14926] do_syscall_64+0x115/0x840 [ 609.590313][T14926] ? clear_bhb_loop+0x40/0x90 [ 609.590331][T14926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.590347][T14926] RIP: 0033:0x7fef8bf9ce59 [ 609.590360][T14926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.590375][T14926] RSP: 002b:00007fef8ce56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.590390][T14926] RAX: ffffffffffffffda RBX: 00007fef8c216090 RCX: 00007fef8bf9ce59 [ 609.590400][T14926] RDX: 0000200000000040 RSI: 00000000000089fc RDI: 0000000000000006 [ 609.590409][T14926] RBP: 00007fef8ce56090 R08: 0000000000000000 R09: 0000000000000000 [ 609.590419][T14926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.590428][T14926] R13: 00007fef8c216128 R14: 00007fef8c216090 R15: 00007ffc8118b608 [ 609.590447][T14926] [ 609.590454][T14926] ERROR: Out of memory at tomoyo_realpath_from_path. [ 610.961020][T14937] syz_tun: tun_chr_ioctl cmd 4294967290 [ 611.354966][T14939] aoe: could not set interface list: too many interfaces [ 611.906778][T14954] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 613.223409][T14963] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1799'. [ 614.218567][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 614.225709][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 615.453088][T15003] NFSD: Failed to start, no listeners configured. [ 616.687836][T15028] blktrace: Concurrent blktraces are not allowed on nbd5 [ 619.460387][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 619.779376][ T4949] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 619.816846][T15074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1817'. [ 620.035205][T15074] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 620.098693][T15074] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 620.136303][T15074] bond0 (unregistering): Released all slaves [ 620.502305][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 620.510083][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 622.177687][T15108] ubi0: attaching mtd0 [ 622.206613][T15108] ubi0: scanning is finished [ 622.273405][T15108] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 622.623589][T15108] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 624.507503][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.514001][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.390844][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1830'. [ 626.048929][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 626.059090][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.822607][ T4949] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 627.339682][ T4949] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 628.167579][T15210] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 628.774799][T15206] FAULT_INJECTION: forcing a failure. [ 628.774799][T15206] name failslab, interval 1, probability 0, space 0, times 0 [ 628.874909][T15206] CPU: 0 UID: 0 PID: 15206 Comm: syz.3.1841 Not tainted syzkaller #0 PREEMPT(full) [ 628.874934][T15206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 628.874945][T15206] Call Trace: [ 628.874950][T15206] [ 628.874958][T15206] dump_stack_lvl+0x100/0x190 [ 628.874990][T15206] should_fail_ex.cold+0x5/0xa [ 628.875012][T15206] should_failslab+0xc2/0x120 [ 628.875036][T15206] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 628.875064][T15206] ? __d_alloc+0x34/0xa40 [ 628.875083][T15206] ? __kasan_kmalloc+0xaa/0xb0 [ 628.875108][T15206] __d_alloc+0x34/0xa40 [ 628.875140][T15206] d_alloc_pseudo+0x1c/0xc0 [ 628.875164][T15206] alloc_file_pseudo+0xcf/0x230 [ 628.875189][T15206] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 628.875216][T15206] ? alloc_fd+0x476/0x790 [ 628.875240][T15206] sock_alloc_file+0x50/0x210 [ 628.875260][T15206] __sys_socket+0x1c0/0x260 [ 628.875282][T15206] ? __pfx___sys_socket+0x10/0x10 [ 628.875302][T15206] ? exit_to_user_mode_loop+0xf3/0x670 [ 628.875332][T15206] __x64_sys_socket+0x72/0xb0 [ 628.875352][T15206] ? lockdep_hardirqs_on+0x78/0x100 [ 628.875373][T15206] do_syscall_64+0x115/0x840 [ 628.875393][T15206] ? clear_bhb_loop+0x40/0x90 [ 628.875422][T15206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.875439][T15206] RIP: 0033:0x7fef8bf9ce59 [ 628.875453][T15206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.875468][T15206] RSP: 002b:00007fef8ce56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 628.875485][T15206] RAX: ffffffffffffffda RBX: 00007fef8c216090 RCX: 00007fef8bf9ce59 [ 628.875495][T15206] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000000a [ 628.875504][T15206] RBP: 00007fef8c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 628.875514][T15206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.875524][T15206] R13: 00007fef8c216128 R14: 00007fef8c216090 R15: 00007ffc8118b608 [ 628.875544][T15206] [ 632.064406][ T4949] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 632.225888][T15258] futex_wake_op: syz.1.1852 tries to shift op by -2048; fix this program [ 632.350115][T15258] futex_wake_op: syz.1.1852 tries to shift op by -2048; fix this program [ 639.870941][ T5650] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 639.916962][ T4949] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 640.417400][T15370] futex_wake_op: syz.3.1870 tries to shift op by -2048; fix this program [ 640.481159][T15370] futex_wake_op: syz.3.1870 tries to shift op by -2048; fix this program [ 647.539291][ T4949] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 648.821295][ T5650] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 650.431881][T15527] vivid-011: ================= START STATUS ================= [ 650.472745][T15527] vivid-011: Radio HW Seek Mode: Bounded [ 650.501665][T15527] vivid-011: Radio Programmable HW Seek: false [ 650.547624][T15527] vivid-011: RDS Rx I/O Mode: Block I/O [ 650.592358][T15527] vivid-011: Generate RBDS Instead of RDS: false [ 650.637874][T15527] vivid-011: RDS Reception: true [ 650.671648][T15527] vivid-011: RDS Program Type: 0 inactive [ 650.716917][T15527] vivid-011: RDS PS Name: inactive [ 650.744932][T15527] vivid-011: RDS Radio Text: inactive [ 650.785808][T15527] vivid-011: RDS Traffic Announcement: false inactive [ 650.827106][T15527] vivid-011: RDS Traffic Program: false inactive [ 650.869622][T15527] vivid-011: RDS Music: false inactive [ 650.907995][T15527] vivid-011: ================== END STATUS ================== [ 651.490894][T15543] FAULT_INJECTION: forcing a failure. [ 651.490894][T15543] name failslab, interval 1, probability 0, space 0, times 0 [ 651.605600][T15543] CPU: 0 UID: 0 PID: 15543 Comm: syz.2.1898 Not tainted syzkaller #0 PREEMPT(full) [ 651.605624][T15543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 651.605635][T15543] Call Trace: [ 651.605641][T15543] [ 651.605647][T15543] dump_stack_lvl+0x100/0x190 [ 651.605678][T15543] should_fail_ex.cold+0x5/0xa [ 651.605698][T15543] should_failslab+0xc2/0x120 [ 651.605717][T15543] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 651.605739][T15543] ? __proc_create+0x2cb/0x8c0 [ 651.605763][T15543] __proc_create+0x2cb/0x8c0 [ 651.605782][T15543] ? __pfx___proc_create+0x10/0x10 [ 651.605803][T15543] ? __pfx___netlink_kernel_create+0x10/0x10 [ 651.605828][T15543] proc_create_reg+0x75/0x170 [ 651.605849][T15543] proc_create_net_data+0x8e/0x1c0 [ 651.605870][T15543] ? __pfx_proc_create_net_data+0x10/0x10 [ 651.605889][T15543] ? __pfx_uevent_net_rcv+0x10/0x10 [ 651.605906][T15543] ? __kmalloc_noprof+0x320/0x850 [ 651.605931][T15543] ? __pfx_proto_init_net+0x10/0x10 [ 651.605952][T15543] proto_init_net+0x53/0x80 [ 651.605975][T15543] ops_init+0x1e2/0x5f0 [ 651.605994][T15543] setup_net+0x118/0x3a0 [ 651.606011][T15543] ? __pfx_setup_net+0x10/0x10 [ 651.606028][T15543] ? mutex_init_lockdep+0xf1/0x120 [ 651.606050][T15543] copy_net_ns+0x46f/0x7c0 [ 651.606070][T15543] create_new_namespaces+0x3ea/0xac0 [ 651.606093][T15543] unshare_nsproxy_namespaces+0xf2/0x220 [ 651.606113][T15543] ksys_unshare+0x438/0xab0 [ 651.606135][T15543] ? __pfx_ksys_unshare+0x10/0x10 [ 651.606154][T15543] ? xfd_validate_state+0x129/0x190 [ 651.606169][T15543] ? exit_to_user_mode_loop+0xf3/0x670 [ 651.606198][T15543] __x64_sys_unshare+0x31/0x40 [ 651.606219][T15543] do_syscall_64+0x115/0x840 [ 651.606238][T15543] ? clear_bhb_loop+0x40/0x90 [ 651.606257][T15543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.606272][T15543] RIP: 0033:0x7f3a50f9ce59 [ 651.606286][T15543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.606302][T15543] RSP: 002b:00007f3a51e85028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 651.606317][T15543] RAX: ffffffffffffffda RBX: 00007f3a51216090 RCX: 00007f3a50f9ce59 [ 651.606328][T15543] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 651.606338][T15543] RBP: 00007f3a51032d6f R08: 0000000000000000 R09: 0000000000000000 [ 651.606347][T15543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.606356][T15543] R13: 00007f3a51216128 R14: 00007f3a51216090 R15: 00007ffe3e8a8858 [ 651.606378][T15543] [ 652.990221][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 653.001517][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 663.346622][ T30] audit: type=1800 audit(1843104919.760:7): pid=15713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1925" name="dbroot" dev="configfs" ino=56878 res=0 errno=0 [ 663.618293][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 663.628376][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 664.047792][T15729] FAULT_INJECTION: forcing a failure. [ 664.047792][T15729] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 664.141529][T15729] CPU: 0 UID: 0 PID: 15729 Comm: syz.1.1931 Not tainted syzkaller #0 PREEMPT(full) [ 664.141552][T15729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.141561][T15729] Call Trace: [ 664.141567][T15729] [ 664.141573][T15729] dump_stack_lvl+0x100/0x190 [ 664.141604][T15729] should_fail_ex.cold+0x5/0xa [ 664.141620][T15729] ? prepare_alloc_pages+0x16d/0x5f0 [ 664.141642][T15729] should_fail_alloc_page+0xeb/0x140 [ 664.141662][T15729] prepare_alloc_pages+0x1f0/0x5f0 [ 664.141684][T15729] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 664.141712][T15729] ? __lock_acquire+0x4a5/0x2630 [ 664.141736][T15729] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 664.141758][T15729] ? is_bpf_text_address+0x94/0x1a0 [ 664.141781][T15729] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 664.141810][T15729] ? rcu_is_watching+0x12/0xc0 [ 664.141830][T15729] ? __mutex_lock+0x26d/0x1b10 [ 664.141852][T15729] ? anon_pipe_write+0x15b/0x18c0 [ 664.141872][T15729] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 664.141895][T15729] ? policy_nodemask+0xed/0x4f0 [ 664.141915][T15729] alloc_pages_mpol+0x1fb/0x540 [ 664.141934][T15729] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 664.141956][T15729] alloc_pages_noprof+0x1a/0x160 [ 664.141977][T15729] anon_pipe_write+0xacb/0x18c0 [ 664.142002][T15729] ? __pfx_anon_pipe_write+0x10/0x10 [ 664.142022][T15729] ? apparmor_file_permission+0x13f/0x1c0 [ 664.142042][T15729] ? bpf_lsm_file_permission+0x9/0x10 [ 664.142056][T15729] ? security_file_permission+0x76/0x210 [ 664.142077][T15729] ? rw_verify_area+0xce/0x6d0 [ 664.142094][T15729] vfs_write+0x6ac/0x1070 [ 664.142112][T15729] ? __pfx_anon_pipe_write+0x10/0x10 [ 664.142132][T15729] ? __pfx_vfs_write+0x10/0x10 [ 664.142147][T15729] ? find_held_lock+0x2b/0x80 [ 664.142177][T15729] ksys_write+0x1f8/0x250 [ 664.142194][T15729] ? __pfx_ksys_write+0x10/0x10 [ 664.142212][T15729] ? rcu_is_watching+0x12/0xc0 [ 664.142232][T15729] do_syscall_64+0x115/0x840 [ 664.142253][T15729] ? clear_bhb_loop+0x40/0x90 [ 664.142271][T15729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.142287][T15729] RIP: 0033:0x7f0223d9ce59 [ 664.142299][T15729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.142317][T15729] RSP: 002b:00007f0224c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 664.142332][T15729] RAX: ffffffffffffffda RBX: 00007f0224015fa0 RCX: 00007f0223d9ce59 [ 664.142342][T15729] RDX: 000000000200ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 664.142351][T15729] RBP: 00007f0224c75090 R08: 0000000000000000 R09: 0000000000000000 [ 664.142360][T15729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.142369][T15729] R13: 00007f0224016038 R14: 00007f0224015fa0 R15: 00007ffeebb99c88 [ 664.142389][T15729] [ 664.427425][T15733] netlink: 'syz.3.1932': attribute type 9 has an invalid length. [ 664.915089][T15747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1936'. [ 665.117565][T15751] FAULT_INJECTION: forcing a failure. [ 665.117565][T15751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 665.159623][T15751] CPU: 0 UID: 0 PID: 15751 Comm: syz.1.1937 Not tainted syzkaller #0 PREEMPT(full) [ 665.159646][T15751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 665.159655][T15751] Call Trace: [ 665.159661][T15751] [ 665.159667][T15751] dump_stack_lvl+0x100/0x190 [ 665.159697][T15751] should_fail_ex.cold+0x5/0xa [ 665.159717][T15751] _copy_to_user+0x32/0xd0 [ 665.159739][T15751] simple_read_from_buffer+0xcb/0x170 [ 665.159759][T15751] proc_fail_nth_read+0x1af/0x230 [ 665.159783][T15751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.159807][T15751] ? rw_verify_area+0xce/0x6d0 [ 665.159822][T15751] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 665.159845][T15751] vfs_read+0x1e4/0xb30 [ 665.159865][T15751] ? __pfx_vfs_read+0x10/0x10 [ 665.159881][T15751] ? __fget_files+0x215/0x3d0 [ 665.159902][T15751] ? __fget_files+0x21f/0x3d0 [ 665.159925][T15751] ksys_read+0x12a/0x250 [ 665.159941][T15751] ? __pfx_ksys_read+0x10/0x10 [ 665.159960][T15751] ? rcu_is_watching+0x12/0xc0 [ 665.159980][T15751] do_syscall_64+0x115/0x840 [ 665.160001][T15751] ? clear_bhb_loop+0x40/0x90 [ 665.160020][T15751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.160035][T15751] RIP: 0033:0x7f0223d5d68e [ 665.160049][T15751] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 665.160064][T15751] RSP: 002b:00007f0224c74fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 665.160079][T15751] RAX: ffffffffffffffda RBX: 00007f0224c756c0 RCX: 00007f0223d5d68e [ 665.160089][T15751] RDX: 000000000000000f RSI: 00007f0224c750a0 RDI: 0000000000000004 [ 665.160097][T15751] RBP: 00007f0224c75090 R08: 0000000000000000 R09: 0000000000000000 [ 665.160106][T15751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 665.160115][T15751] R13: 00007f0224016038 R14: 00007f0224015fa0 R15: 00007ffeebb99c88 [ 665.160137][T15751] [ 665.613950][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 665.620440][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 666.596228][T15781] program syz.2.1945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 667.718332][T15803] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1951'. [ 669.108810][T15836] hub 1-0:1.0: USB hub found [ 669.136825][T15836] hub 1-0:1.0: 1 port detected [ 669.717259][T15854] FAULT_INJECTION: forcing a failure. [ 669.717259][T15854] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 669.831723][T15854] CPU: 0 UID: 0 PID: 15854 Comm: syz.2.1962 Not tainted syzkaller #0 PREEMPT(full) [ 669.831746][T15854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 669.831755][T15854] Call Trace: [ 669.831760][T15854] [ 669.831767][T15854] dump_stack_lvl+0x100/0x190 [ 669.831798][T15854] should_fail_ex.cold+0x5/0xa [ 669.831815][T15854] ? prepare_alloc_pages+0x16d/0x5f0 [ 669.831836][T15854] should_fail_alloc_page+0xeb/0x140 [ 669.831856][T15854] prepare_alloc_pages+0x1f0/0x5f0 [ 669.831878][T15854] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 669.831903][T15854] ? __lock_acquire+0x4a5/0x2630 [ 669.831927][T15854] ? do_raw_spin_unlock+0x145/0x1e0 [ 669.831945][T15854] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 669.831972][T15854] ? debug_object_assert_init+0x1c4/0x300 [ 669.831997][T15854] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 669.832024][T15854] ? __lock_acquire+0x4a5/0x2630 [ 669.832047][T15854] ? __lock_acquire+0x4a5/0x2630 [ 669.832068][T15854] ? __css_rstat_updated+0x1ce/0x5a0 [ 669.832097][T15854] ? lock_acquire+0x1b1/0x370 [ 669.832119][T15854] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 669.832142][T15854] ? policy_nodemask+0xed/0x4f0 [ 669.832162][T15854] alloc_pages_mpol+0x1fb/0x540 [ 669.832180][T15854] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 669.832200][T15854] ? __lock_acquire+0x4a5/0x2630 [ 669.832225][T15854] folio_alloc_mpol_noprof+0x36/0x260 [ 669.832247][T15854] vma_alloc_folio_noprof+0xed/0x1d0 [ 669.832267][T15854] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 669.832293][T15854] do_anonymous_page+0xb46/0x2050 [ 669.832317][T15854] ? rcu_read_unlock+0x2d/0xb0 [ 669.832344][T15854] __handle_mm_fault+0x1d2c/0x2a00 [ 669.832369][T15854] ? mt_find+0x45e/0x8e0 [ 669.832392][T15854] ? __pfx___handle_mm_fault+0x10/0x10 [ 669.832413][T15854] ? __pfx_mt_find+0x10/0x10 [ 669.832444][T15854] ? find_vma+0xbf/0x140 [ 669.832460][T15854] ? __pfx_find_vma+0x10/0x10 [ 669.832478][T15854] handle_mm_fault+0x37b/0xa30 [ 669.832503][T15854] do_user_addr_fault+0x74c/0x12f0 [ 669.832524][T15854] ? trace_page_fault_kernel+0x7a/0x200 [ 669.832542][T15854] exc_page_fault+0x6f/0xd0 [ 669.832564][T15854] asm_exc_page_fault+0x26/0x30 [ 669.832579][T15854] RIP: 0010:__put_user_8+0xd/0x20 [ 669.832599][T15854] Code: 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 [ 669.832614][T15854] RSP: 0018:ffffc90004c2fbc0 EFLAGS: 00050206 [ 669.832627][T15854] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000003000 [ 669.832636][T15854] RDX: ffff88802fb8dd00 RSI: ffffffff8257f671 RDI: ffffffff8c1c4380 [ 669.832646][T15854] RBP: 00000000011fc010 R08: 0000000000000001 R09: 00000000000001c5 [ 669.832655][T15854] R10: 0000000000000200 R11: 0000000000000000 R12: 00000000000007fe [ 669.832664][T15854] R13: 0000000000003000 R14: 0000000000000001 R15: 0000000000000000 [ 669.832679][T15854] ? __might_fault+0x111/0x140 [ 669.832704][T15854] kpage_read.isra.0+0x124/0x2b0 [ 669.832728][T15854] ? __pfx_kpagecount_read+0x10/0x10 [ 669.832752][T15854] proc_reg_read+0x120/0x330 [ 669.832772][T15854] ? __pfx_proc_reg_read+0x10/0x10 [ 669.832789][T15854] vfs_readv+0x5d8/0x8d0 [ 669.832811][T15854] ? __pfx_vfs_readv+0x10/0x10 [ 669.832827][T15854] ? find_held_lock+0x2b/0x80 [ 669.832845][T15854] ? ksys_write+0x190/0x250 [ 669.832872][T15854] ? __fget_files+0x21f/0x3d0 [ 669.832895][T15854] ? do_readv+0x13e/0x340 [ 669.832912][T15854] do_readv+0x13e/0x340 [ 669.832928][T15854] ? __pfx_do_readv+0x10/0x10 [ 669.832945][T15854] ? rcu_is_watching+0x12/0xc0 [ 669.832971][T15854] do_syscall_64+0x115/0x840 [ 669.832990][T15854] ? clear_bhb_loop+0x40/0x90 [ 669.833008][T15854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.833024][T15854] RIP: 0033:0x7f3a50f9ce59 [ 669.833036][T15854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.833050][T15854] RSP: 002b:00007f3a51ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 669.833064][T15854] RAX: ffffffffffffffda RBX: 00007f3a51215fa0 RCX: 00007f3a50f9ce59 [ 669.833074][T15854] RDX: 0000000100000007 RSI: 00002000000001c0 RDI: 0000000000000003 [ 669.833083][T15854] RBP: 00007f3a51ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 669.833092][T15854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 669.833101][T15854] R13: 00007f3a51216038 R14: 00007f3a51215fa0 R15: 00007ffe3e8a8858 [ 669.833121][T15854] [ 670.984098][T15870] FAULT_INJECTION: forcing a failure. [ 670.984098][T15870] name fail_futex, interval 1, probability 0, space 0, times 0 [ 671.029957][T15870] CPU: 0 UID: 0 PID: 15870 Comm: syz.1.1964 Not tainted syzkaller #0 PREEMPT(full) [ 671.029982][T15870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 671.029992][T15870] Call Trace: [ 671.029998][T15870] [ 671.030004][T15870] dump_stack_lvl+0x100/0x190 [ 671.030036][T15870] should_fail_ex.cold+0x5/0xa [ 671.030055][T15870] get_futex_key+0x1d2/0x1510 [ 671.030082][T15870] ? __pfx_get_futex_key+0x10/0x10 [ 671.030112][T15870] futex_wake+0xea/0x530 [ 671.030130][T15870] ? rcu_is_watching+0x12/0xc0 [ 671.030147][T15870] ? __pfx_futex_wake+0x10/0x10 [ 671.030167][T15870] ? putname+0xb1/0x110 [ 671.030186][T15870] ? kmem_cache_free+0x127/0x6c0 [ 671.030212][T15870] do_futex+0x32b/0x350 [ 671.030227][T15870] ? __pfx_do_futex+0x10/0x10 [ 671.030241][T15870] ? __pfx_do_sys_openat2+0x10/0x10 [ 671.030265][T15870] ? __fget_files+0x21f/0x3d0 [ 671.030284][T15870] __x64_sys_futex+0x34f/0x4d0 [ 671.030300][T15870] ? __x64_sys_openat+0x12d/0x210 [ 671.030322][T15870] ? __pfx___x64_sys_futex+0x10/0x10 [ 671.030341][T15870] ? rcu_is_watching+0x12/0xc0 [ 671.030360][T15870] do_syscall_64+0x115/0x840 [ 671.030380][T15870] ? clear_bhb_loop+0x40/0x90 [ 671.030398][T15870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 671.030414][T15870] RIP: 0033:0x7f0223d9ce59 [ 671.030428][T15870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 671.030444][T15870] RSP: 002b:00007f0224c750e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 671.030458][T15870] RAX: ffffffffffffffda RBX: 00007f0224015fa8 RCX: 00007f0223d9ce59 [ 671.030469][T15870] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0224015fac [ 671.030478][T15870] RBP: 00007f0224015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 671.030487][T15870] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 671.030496][T15870] R13: 00007f0224016038 R14: 00007ffeebb99ba0 R15: 00007ffeebb99c88 [ 671.030515][T15870] [ 672.202463][ T5650] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 672.210032][ T5650] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 672.286932][T15897] hub 1-0:1.0: USB hub found [ 672.307678][T15897] hub 1-0:1.0: 1 port detected [ 673.591541][T15919] FAULT_INJECTION: forcing a failure. [ 673.591541][T15919] name failslab, interval 1, probability 0, space 0, times 0 [ 673.643955][T15919] CPU: 0 UID: 0 PID: 15919 Comm: syz.3.1976 Not tainted syzkaller #0 PREEMPT(full) [ 673.643979][T15919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 673.643989][T15919] Call Trace: [ 673.643995][T15919] [ 673.644002][T15919] dump_stack_lvl+0x100/0x190 [ 673.644034][T15919] should_fail_ex.cold+0x5/0xa [ 673.644053][T15919] ? tracepoint_add_func+0x3a8/0x1150 [ 673.644074][T15919] should_failslab+0xc2/0x120 [ 673.644092][T15919] __kmalloc_noprof+0xe0/0x850 [ 673.644119][T15919] ? __pfx_trace_event_raw_event_nfsd_file_is_cached+0x10/0x10 [ 673.644139][T15919] tracepoint_add_func+0x3a8/0x1150 [ 673.644167][T15919] ? __pfx_trace_event_raw_event_nfsd_file_is_cached+0x10/0x10 [ 673.644190][T15919] ? __pfx_trace_event_raw_event_nfsd_file_is_cached+0x10/0x10 [ 673.644210][T15919] tracepoint_probe_register+0xc4/0x110 [ 673.644239][T15919] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 673.644261][T15919] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 673.644283][T15919] ? __pfx_trace_event_raw_event_nfsd_file_is_cached+0x10/0x10 [ 673.644303][T15919] ? __pfx_probe_sched_switch+0x10/0x10 [ 673.644325][T15919] ? __lock_acquire+0x4a5/0x2630 [ 673.644351][T15919] trace_event_reg+0x209/0x350 [ 673.644372][T15919] __ftrace_event_enable_disable+0x211/0x6f0 [ 673.644397][T15919] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 673.644427][T15919] ftrace_set_clr_event+0x1b7/0x3f0 [ 673.644445][T15919] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 673.644461][T15919] ? trace_get_user+0x3ae/0xa70 [ 673.644487][T15919] ftrace_event_write+0x259/0x2c0 [ 673.644504][T15919] ? __pfx_ftrace_event_write+0x10/0x10 [ 673.644528][T15919] vfs_write+0x2aa/0x1070 [ 673.644546][T15919] ? __pfx_ftrace_event_write+0x10/0x10 [ 673.644565][T15919] ? __pfx_vfs_write+0x10/0x10 [ 673.644581][T15919] ? __fget_files+0x215/0x3d0 [ 673.644603][T15919] ? __fget_files+0x21f/0x3d0 [ 673.644626][T15919] ksys_write+0x12a/0x250 [ 673.644643][T15919] ? __pfx_ksys_write+0x10/0x10 [ 673.644662][T15919] ? rcu_is_watching+0x12/0xc0 [ 673.644688][T15919] do_syscall_64+0x115/0x840 [ 673.644712][T15919] ? clear_bhb_loop+0x40/0x90 [ 673.644730][T15919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.644746][T15919] RIP: 0033:0x7fef8bf9ce59 [ 673.644760][T15919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.644775][T15919] RSP: 002b:00007fef8ce77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 673.644790][T15919] RAX: ffffffffffffffda RBX: 00007fef8c215fa0 RCX: 00007fef8bf9ce59 [ 673.644801][T15919] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 673.644810][T15919] RBP: 00007fef8c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 673.644820][T15919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.644829][T15919] R13: 00007fef8c216038 R14: 00007fef8c215fa0 R15: 00007ffc8118b608 [ 673.644850][T15919] [ 673.934393][T15919] event trace: Could not enable event nfsd_file_is_cached [ 674.244791][T15924] FAULT_INJECTION: forcing a failure. [ 674.244791][T15924] name failslab, interval 1, probability 0, space 0, times 0 [ 674.269960][T15924] CPU: 0 UID: 0 PID: 15924 Comm: syz.4.1977 Not tainted syzkaller #0 PREEMPT(full) [ 674.269983][T15924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 674.269994][T15924] Call Trace: [ 674.269999][T15924] [ 674.270005][T15924] dump_stack_lvl+0x100/0x190 [ 674.270037][T15924] should_fail_ex.cold+0x5/0xa [ 674.270057][T15924] ? tracepoint_add_func+0x3a8/0x1150 [ 674.270078][T15924] should_failslab+0xc2/0x120 [ 674.270096][T15924] __kmalloc_noprof+0xe0/0x850 [ 674.270122][T15924] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 674.270141][T15924] tracepoint_add_func+0x3a8/0x1150 [ 674.270160][T15924] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 674.270182][T15924] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 674.270199][T15924] tracepoint_probe_register+0xc4/0x110 [ 674.270221][T15924] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 674.270248][T15924] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 674.270271][T15924] ? __pfx_trace_event_raw_event_nfsd_file_open_class+0x10/0x10 [ 674.270289][T15924] ? __pfx_probe_sched_switch+0x10/0x10 [ 674.270316][T15924] trace_event_reg+0x209/0x350 [ 674.270337][T15924] __ftrace_event_enable_disable+0x211/0x6f0 [ 674.270362][T15924] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 674.270393][T15924] ftrace_set_clr_event+0x1b7/0x3f0 [ 674.270411][T15924] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 674.270428][T15924] ? trace_get_user+0x3ae/0xa70 [ 674.270455][T15924] ftrace_event_write+0x259/0x2c0 [ 674.270472][T15924] ? __pfx_ftrace_event_write+0x10/0x10 [ 674.270497][T15924] vfs_write+0x2aa/0x1070 [ 674.270516][T15924] ? __pfx_ftrace_event_write+0x10/0x10 [ 674.270534][T15924] ? __pfx_vfs_write+0x10/0x10 [ 674.270550][T15924] ? __fget_files+0x215/0x3d0 [ 674.270573][T15924] ? __fget_files+0x21f/0x3d0 [ 674.270595][T15924] ksys_write+0x12a/0x250 [ 674.270620][T15924] ? __pfx_ksys_write+0x10/0x10 [ 674.270639][T15924] ? rcu_is_watching+0x12/0xc0 [ 674.270659][T15924] do_syscall_64+0x115/0x840 [ 674.270680][T15924] ? clear_bhb_loop+0x40/0x90 [ 674.270699][T15924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.270715][T15924] RIP: 0033:0x7f7aa5f9ce59 [ 674.270728][T15924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.270743][T15924] RSP: 002b:00007f7aa6d9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 674.270759][T15924] RAX: ffffffffffffffda RBX: 00007f7aa6215fa0 RCX: 00007f7aa5f9ce59 [ 674.270770][T15924] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 674.270779][T15924] RBP: 00007f7aa6032d6f R08: 0000000000000000 R09: 0000000000000000 [ 674.270789][T15924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.270798][T15924] R13: 00007f7aa6216038 R14: 00007f7aa6215fa0 R15: 00007ffdee0f5258 [ 674.270818][T15924] [ 674.272342][T15894] Process accounting resumed [ 674.579043][T15924] event trace: Could not enable event nfsd_file_open [ 675.357108][T15942] FAULT_INJECTION: forcing a failure. [ 675.357108][T15942] name failslab, interval 1, probability 0, space 0, times 0 [ 675.422604][T15942] CPU: 0 UID: 0 PID: 15942 Comm: syz.4.1981 Not tainted syzkaller #0 PREEMPT(full) [ 675.422627][T15942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.422636][T15942] Call Trace: [ 675.422642][T15942] [ 675.422648][T15942] dump_stack_lvl+0x100/0x190 [ 675.422678][T15942] should_fail_ex.cold+0x5/0xa [ 675.422698][T15942] ? trace_parser_get_init+0x30/0xc0 [ 675.422719][T15942] should_failslab+0xc2/0x120 [ 675.422738][T15942] __kmalloc_noprof+0xe0/0x850 [ 675.422766][T15942] trace_parser_get_init+0x30/0xc0 [ 675.422787][T15942] ? tracing_update_buffers+0x81/0xf0 [ 675.422805][T15942] ftrace_event_write+0x177/0x2c0 [ 675.422822][T15942] ? __pfx_ftrace_event_write+0x10/0x10 [ 675.422846][T15942] vfs_write+0x2aa/0x1070 [ 675.422865][T15942] ? __pfx_ftrace_event_write+0x10/0x10 [ 675.422883][T15942] ? __pfx_vfs_write+0x10/0x10 [ 675.422900][T15942] ? __fget_files+0x215/0x3d0 [ 675.422922][T15942] ? __fget_files+0x21f/0x3d0 [ 675.422944][T15942] ksys_write+0x12a/0x250 [ 675.422961][T15942] ? __pfx_ksys_write+0x10/0x10 [ 675.422980][T15942] ? rcu_is_watching+0x12/0xc0 [ 675.423000][T15942] do_syscall_64+0x115/0x840 [ 675.423022][T15942] ? clear_bhb_loop+0x40/0x90 [ 675.423040][T15942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.423055][T15942] RIP: 0033:0x7f7aa5f9ce59 [ 675.423068][T15942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.423083][T15942] RSP: 002b:00007f7aa6d9b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 675.423098][T15942] RAX: ffffffffffffffda RBX: 00007f7aa6215fa0 RCX: 00007f7aa5f9ce59 [ 675.423108][T15942] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 675.423117][T15942] RBP: 00007f7aa6d9b090 R08: 0000000000000000 R09: 0000000000000000 [ 675.423126][T15942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 675.423135][T15942] R13: 00007f7aa6216038 R14: 00007f7aa6215fa0 R15: 00007ffdee0f5258 [ 675.423154][T15942] [ 676.143079][T15953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1982'. [ 678.630699][T16007] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1994'. [ 679.069450][T15975] Process accounting resumed [ 681.837876][T16057] ERROR: Out of memory at tomoyo_memory_ok. [ 681.948276][T16057] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /sbin/start-stop-daemon /usr/sbin/sshd /usr/libexec/sshd-session /bin/sh /root/ci-qemu-gce-upstream-auto/syz-executor /root/ci-qemu-gce-upstream-auto/syz-executor /newroot/524/file0' not defined. [ 682.321956][T16072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2006'. [ 682.420990][T16072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.517352][T16072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.575617][T16072] bond0 (unregistering): Released all slaves [ 682.761413][T16076] hub 1-0:1.0: USB hub found [ 682.811647][T16076] hub 1-0:1.0: 1 port detected [ 683.234211][T16092] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2012'. [ 683.344707][T16095] random: crng reseeded on system resumption [ 684.211315][T16114] FAULT_INJECTION: forcing a failure. [ 684.211315][T16114] name failslab, interval 1, probability 0, space 0, times 0 [ 684.393262][T16114] CPU: 0 UID: 0 PID: 16114 Comm: syz.3.2016 Not tainted syzkaller #0 PREEMPT(full) [ 684.393287][T16114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 684.393296][T16114] Call Trace: [ 684.393302][T16114] [ 684.393309][T16114] dump_stack_lvl+0x100/0x190 [ 684.393341][T16114] should_fail_ex.cold+0x5/0xa [ 684.393363][T16114] should_failslab+0xc2/0x120 [ 684.393380][T16114] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 684.393405][T16114] ? create_new_namespaces+0x30/0xac0 [ 684.393427][T16114] ? rcu_is_watching+0x12/0xc0 [ 684.393447][T16114] create_new_namespaces+0x30/0xac0 [ 684.393465][T16114] ? bpf_lsm_capable+0x9/0x10 [ 684.393482][T16114] ? security_capable+0x80/0x260 [ 684.393499][T16114] unshare_nsproxy_namespaces+0xf2/0x220 [ 684.393520][T16114] ksys_unshare+0x438/0xab0 [ 684.393542][T16114] ? __pfx_ksys_unshare+0x10/0x10 [ 684.393562][T16114] ? xfd_validate_state+0x129/0x190 [ 684.393584][T16114] __x64_sys_unshare+0x31/0x40 [ 684.393604][T16114] do_syscall_64+0x115/0x840 [ 684.393625][T16114] ? clear_bhb_loop+0x40/0x90 [ 684.393644][T16114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.393660][T16114] RIP: 0033:0x7fef8bf9ce59 [ 684.393674][T16114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 684.393689][T16114] RSP: 002b:00007fef8cdf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 684.393704][T16114] RAX: ffffffffffffffda RBX: 00007fef8c216360 RCX: 00007fef8bf9ce59 [ 684.393714][T16114] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 684.393724][T16114] RBP: 00007fef8c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 684.393733][T16114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 684.393742][T16114] R13: 00007fef8c2163f8 R14: 00007fef8c216360 R15: 00007ffc8118b608 [ 684.393762][T16114] [ 684.790868][T16131] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2018'. [ 684.992024][T16131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 685.025648][T16131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 685.057755][T16131] bond0 (unregistering): Released all slaves [ 685.944129][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.950513][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.460101][T16171] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2026'. [ 688.555680][T16170] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2026'. [ 688.645438][T16158] Process accounting resumed [ 694.042007][T16251] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2040'. [ 694.578565][T16255] netlink: 186 bytes leftover after parsing attributes in process `syz.1.2041'. [ 694.898193][T16261] usbcore.quirks: string doesn't fit in 127 chars. [ 694.935106][T16261] FAULT_INJECTION: forcing a failure. [ 694.935106][T16261] name failslab, interval 1, probability 0, space 0, times 0 [ 694.998850][T16261] CPU: 0 UID: 0 PID: 16261 Comm: syz.1.2042 Not tainted syzkaller #0 PREEMPT(full) [ 694.998875][T16261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 694.998884][T16261] Call Trace: [ 694.998890][T16261] [ 694.998897][T16261] dump_stack_lvl+0x100/0x190 [ 694.998927][T16261] should_fail_ex.cold+0x5/0xa [ 694.998948][T16261] should_failslab+0xc2/0x120 [ 694.998967][T16261] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 694.998984][T16261] ? vidtv_psi_service_desc_init+0x38d/0x4c0 [ 694.999015][T16261] kstrdup+0x51/0xe0 [ 694.999033][T16261] vidtv_psi_service_desc_init+0x38d/0x4c0 [ 694.999057][T16261] vidtv_channel_s302m_init+0x15b/0x9b0 [ 694.999080][T16261] ? trace_kmalloc+0xe3/0x110 [ 694.999097][T16261] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 694.999127][T16261] ? __asan_memcpy+0x3c/0x60 [ 694.999150][T16261] vidtv_channels_init+0x4c/0xb0 [ 694.999171][T16261] vidtv_mux_init+0x9df/0xbf0 [ 694.999195][T16261] vidtv_start_feed+0x34e/0x500 [ 694.999213][T16261] ? __pfx_vidtv_start_feed+0x10/0x10 [ 694.999230][T16261] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 694.999257][T16261] dmx_section_feed_start_filtering+0x3a8/0x660 [ 694.999284][T16261] dvb_dmxdev_filter_start+0x767/0xdd0 [ 694.999307][T16261] dvb_demux_do_ioctl+0xe64/0x1200 [ 694.999329][T16261] dvb_usercopy+0x167/0x340 [ 694.999351][T16261] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 694.999368][T16261] ? __pfx_dvb_usercopy+0x10/0x10 [ 694.999399][T16261] ? __fget_files+0x21f/0x3d0 [ 694.999420][T16261] dvb_demux_ioctl+0x29/0x40 [ 694.999434][T16261] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 694.999449][T16261] __x64_sys_ioctl+0x18e/0x210 [ 694.999466][T16261] do_syscall_64+0x115/0x840 [ 694.999486][T16261] ? clear_bhb_loop+0x40/0x90 [ 694.999504][T16261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.999520][T16261] RIP: 0033:0x7f0223d9ce59 [ 694.999538][T16261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.999554][T16261] RSP: 002b:00007f0224c54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.999570][T16261] RAX: ffffffffffffffda RBX: 00007f0224016090 RCX: 00007f0223d9ce59 [ 694.999582][T16261] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 694.999592][T16261] RBP: 00007f0223e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 694.999601][T16261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.999611][T16261] R13: 00007f0224016128 R14: 00007f0224016090 R15: 00007ffeebb99c88 [ 694.999632][T16261] [ 695.555577][ T4949] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 697.510245][T16292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2050'. [ 698.834631][T16320] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2057'. [ 699.823794][T16348] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2061'. [ 700.450645][T16322] Process accounting resumed [ 700.484398][T16358] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 702.346368][T16404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2071'. [ 703.866893][T16427] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2075'. [ 705.347141][T16448] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2077'. [ 705.482519][T16443] Process accounting paused [ 705.797385][T16455] FAULT_INJECTION: forcing a failure. [ 705.797385][T16455] name failslab, interval 1, probability 0, space 0, times 0 [ 705.875909][T16455] CPU: 0 UID: 0 PID: 16455 Comm: syz.1.2080 Not tainted syzkaller #0 PREEMPT(full) [ 705.875933][T16455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 705.875943][T16455] Call Trace: [ 705.875949][T16455] [ 705.875955][T16455] dump_stack_lvl+0x100/0x190 [ 705.875987][T16455] should_fail_ex.cold+0x5/0xa [ 705.876008][T16455] should_failslab+0xc2/0x120 [ 705.876027][T16455] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 705.876050][T16455] ? __d_alloc+0x34/0xa40 [ 705.876070][T16455] ? security_inode_alloc+0xcf/0x2c0 [ 705.876090][T16455] __d_alloc+0x34/0xa40 [ 705.876108][T16455] ? __ns_ref_active_get+0x9f/0x1b0 [ 705.876131][T16455] path_from_stashed+0x427/0x750 [ 705.876164][T16455] ns_get_path+0x60/0x80 [ 705.876184][T16455] proc_ns_get_link+0x121/0x230 [ 705.876202][T16455] ? __pfx_proc_ns_get_link+0x10/0x10 [ 705.876222][T16455] ? atime_needs_update+0x8b/0x6b0 [ 705.876239][T16455] pick_link+0xd17/0x13c0 [ 705.876254][T16455] ? __pfx_proc_ns_get_link+0x10/0x10 [ 705.876273][T16455] step_into_slowpath+0x9ba/0xf90 [ 705.876293][T16455] ? __pfx_step_into_slowpath+0x10/0x10 [ 705.876308][T16455] ? find_held_lock+0x2b/0x80 [ 705.876332][T16455] path_openat+0xf95/0x31a0 [ 705.876357][T16455] ? __pfx_path_openat+0x10/0x10 [ 705.876383][T16455] do_file_open+0x20e/0x430 [ 705.876403][T16455] ? __pfx_do_file_open+0x10/0x10 [ 705.876474][T16455] ? alloc_fd+0x476/0x790 [ 705.876497][T16455] ? do_getname+0x191/0x390 [ 705.876521][T16455] do_sys_openat2+0x10d/0x1e0 [ 705.876546][T16455] ? __pfx_do_sys_openat2+0x10/0x10 [ 705.876571][T16455] ? __fget_files+0x21f/0x3d0 [ 705.876593][T16455] __x64_sys_openat+0x12d/0x210 [ 705.876619][T16455] ? __pfx___x64_sys_openat+0x10/0x10 [ 705.876645][T16455] ? rcu_is_watching+0x12/0xc0 [ 705.876665][T16455] do_syscall_64+0x115/0x840 [ 705.876686][T16455] ? clear_bhb_loop+0x40/0x90 [ 705.876705][T16455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 705.876721][T16455] RIP: 0033:0x7f0223d5d68e [ 705.876735][T16455] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 705.876750][T16455] RSP: 002b:00007f0224c74ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 705.876766][T16455] RAX: ffffffffffffffda RBX: 00007f0224c756c0 RCX: 00007f0223d5d68e [ 705.876777][T16455] RDX: 0000000000000002 RSI: 00007f0224c74f90 RDI: ffffffffffffff9c [ 705.876787][T16455] RBP: 00007f0223e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 705.876797][T16455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 705.876807][T16455] R13: 00007f0224016038 R14: 00007f0224015fa0 R15: 00007ffeebb99c88 [ 705.876827][T16455] [ 707.044911][T16453] kexec: Could not allocate control_code_buffer [ 707.682480][T16486] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2086'. [ 708.526317][T16499] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2088'. [ 709.312777][T16514] Process accounting paused [ 709.699644][ T4949] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 710.245489][T16530] ubi0: attaching mtd0 [ 710.266202][T16530] ubi0: scanning is finished [ 710.292124][T16530] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 710.404955][T16533] input: jJǸ-9%vJ86 as /devices/virtual/input/input16 [ 710.457635][T16530] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 710.866443][T10102] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.498077][T16559] FAULT_INJECTION: forcing a failure. [ 711.498077][T16559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 711.536589][T16559] CPU: 0 UID: 0 PID: 16559 Comm: syz.4.2098 Not tainted syzkaller #0 PREEMPT(full) [ 711.536611][T16559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 711.536621][T16559] Call Trace: [ 711.536627][T16559] [ 711.536633][T16559] dump_stack_lvl+0x100/0x190 [ 711.536662][T16559] should_fail_ex.cold+0x5/0xa [ 711.536682][T16559] _copy_from_iter+0x1f4/0x1690 [ 711.536705][T16559] ? rcu_is_watching+0x12/0xc0 [ 711.536722][T16559] ? trace_kmem_cache_alloc+0xd5/0x100 [ 711.536740][T16559] ? __kasan_slab_alloc+0x89/0x90 [ 711.536757][T16559] ? __pfx__copy_from_iter+0x10/0x10 [ 711.536784][T16559] ? __asan_memset+0x23/0x50 [ 711.536807][T16559] ? __build_skb_around+0x278/0x390 [ 711.536830][T16559] ? is_vmalloc_addr+0x86/0xa0 [ 711.536854][T16559] netlink_sendmsg+0x808/0xda0 [ 711.536879][T16559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.536897][T16559] ? __import_iovec+0x1d2/0x640 [ 711.536920][T16559] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 711.536938][T16559] ____sys_sendmsg+0x9e1/0xb70 [ 711.536957][T16559] ? __pfx_netlink_sendmsg+0x10/0x10 [ 711.536978][T16559] ? __pfx_____sys_sendmsg+0x10/0x10 [ 711.537000][T16559] ? __pfx__kstrtoull+0x10/0x10 [ 711.537019][T16559] ___sys_sendmsg+0x190/0x1e0 [ 711.537041][T16559] ? __pfx____sys_sendmsg+0x10/0x10 [ 711.537070][T16559] ? find_held_lock+0x2b/0x80 [ 711.537100][T16559] __sys_sendmmsg+0x205/0x430 [ 711.537118][T16559] ? __pfx___sys_sendmmsg+0x10/0x10 [ 711.537140][T16559] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 711.537171][T16559] ? fput+0x79/0x100 [ 711.537192][T16559] ? ksys_write+0x1ac/0x250 [ 711.537208][T16559] ? __pfx_ksys_write+0x10/0x10 [ 711.537228][T16559] __x64_sys_sendmmsg+0x9c/0x100 [ 711.537243][T16559] ? lockdep_hardirqs_on+0x78/0x100 [ 711.537264][T16559] do_syscall_64+0x115/0x840 [ 711.537285][T16559] ? clear_bhb_loop+0x40/0x90 [ 711.537303][T16559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.537319][T16559] RIP: 0033:0x7f7aa5f9ce59 [ 711.537332][T16559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.537347][T16559] RSP: 002b:00007f7aa6d7a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 711.537362][T16559] RAX: ffffffffffffffda RBX: 00007f7aa6216090 RCX: 00007f7aa5f9ce59 [ 711.537372][T16559] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 711.537382][T16559] RBP: 00007f7aa6d7a090 R08: 0000000000000000 R09: 0000000000000000 [ 711.537391][T16559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 711.537400][T16559] R13: 00007f7aa6216128 R14: 00007f7aa6216090 R15: 00007ffdee0f5258 [ 711.537419][T16559] [ 712.202886][T16569] ERROR: Out of memory at tomoyo_memory_ok. [ 712.237275][T16558] debugfs: '11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' already exists in 'ieee80211' syzkaller syzkaller login: [ 714.174095][T16612] FAULT_INJECTION: forcing a failure. [ 714.174095][T16612] name failslab, interval 1, probability 0, space 0, times 0 [ 714.260333][T16612] CPU: 0 UID: 0 PID: 16612 Comm: syz.3.2108 Not tainted syzkaller #0 PREEMPT(full) [ 714.260360][T16612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 714.260370][T16612] Call Trace: [ 714.260375][T16612] [ 714.260382][T16612] dump_stack_lvl+0x100/0x190 [ 714.260411][T16612] should_fail_ex.cold+0x5/0xa [ 714.260432][T16612] should_failslab+0xc2/0x120 [ 714.260451][T16612] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 714.260474][T16612] ? flock_lock_inode+0xcdc/0x11c0 [ 714.260494][T16612] ? locks_get_lock_context+0x34f/0x620 [ 714.260513][T16612] flock_lock_inode+0xcdc/0x11c0 [ 714.260544][T16612] ? __pfx_flock_lock_inode+0x10/0x10 [ 714.260564][T16612] ? __pfx___might_resched+0x10/0x10 [ 714.260584][T16612] locks_lock_inode_wait+0x119/0x490 [ 714.260605][T16612] ? __pfx_locks_lock_inode_wait+0x10/0x10 [ 714.260630][T16612] ? apparmor_file_lock+0x161/0x1f0 [ 714.260652][T16612] __do_sys_flock+0x462/0x4d0 [ 714.260673][T16612] ? __pfx___do_sys_flock+0x10/0x10 [ 714.260691][T16612] ? kernel_write+0x683/0x6c0 [ 714.260720][T16612] ? ksys_write+0x1ac/0x250 [ 714.260738][T16612] ? __pfx_ksys_write+0x10/0x10 [ 714.260756][T16612] ? rcu_is_watching+0x12/0xc0 [ 714.260776][T16612] do_syscall_64+0x115/0x840 [ 714.260797][T16612] ? clear_bhb_loop+0x40/0x90 [ 714.260815][T16612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 714.260831][T16612] RIP: 0033:0x7fef8bf9ce59 [ 714.260844][T16612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 714.260859][T16612] RSP: 002b:00007fef8ce77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 714.260874][T16612] RAX: ffffffffffffffda RBX: 00007fef8c215fa0 RCX: 00007fef8bf9ce59 [ 714.260884][T16612] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004 [ 714.260893][T16612] RBP: 00007fef8ce77090 R08: 0000000000000000 R09: 0000000000000000 [ 714.260902][T16612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 714.260911][T16612] R13: 00007fef8c216038 R14: 00007fef8c215fa0 R15: 00007ffc8118b608 [ 714.260930][T16612] [ 714.894562][ T30] audit: type=1800 audit(1843104971.250:8): pid=16632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2114" name="dbroot" dev="configfs" ino=61616 res=0 errno=0 [ 714.919232][T16635] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2113'. [ 716.022209][T16661] HfR: entered promiscuous mode syzkaller syzkaller login: [ 717.032420][T16672] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 717.122065][T16672] CPU: 0 UID: 0 PID: 16672 Comm: syz.1.2121 Not tainted syzkaller #0 PREEMPT(full) [ 717.122089][T16672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 717.122099][T16672] Call Trace: [ 717.122105][T16672] [ 717.122111][T16672] dump_stack_lvl+0x100/0x190 [ 717.122143][T16672] sysfs_warn_dup.cold+0x1c/0x28 [ 717.122166][T16672] sysfs_do_create_link_sd+0x113/0x140 [ 717.122186][T16672] sysfs_create_link+0x61/0xc0 [ 717.122202][T16672] device_add+0x675/0x1950 [ 717.122221][T16672] ? __pfx_device_add+0x10/0x10 [ 717.122237][T16672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 717.122260][T16672] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 717.122294][T16672] wiphy_register+0x1edd/0x2d90 [ 717.122314][T16672] ? __rtnl_unlock+0xb9/0xf0 [ 717.122339][T16672] ? __pfx_wiphy_register+0x10/0x10 [ 717.122358][T16672] ? __asan_memset+0x23/0x50 [ 717.122381][T16672] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 717.122412][T16672] ieee80211_register_hw+0x3055/0x4570 [ 717.122444][T16672] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 717.122466][T16672] ? __pfx___debug_object_init+0x10/0x10 [ 717.122490][T16672] ? find_held_lock+0x2b/0x80 [ 717.122510][T16672] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 717.122531][T16672] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 717.122555][T16672] ? __hrtimer_setup+0x208/0x330 [ 717.122573][T16672] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 717.122605][T16672] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 717.122626][T16672] ? __asan_memcpy+0x3c/0x60 [ 717.122650][T16672] hwsim_new_radio_nl+0xc5f/0x1370 [ 717.122668][T16672] ? rcu_is_watching+0x12/0xc0 [ 717.122687][T16672] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 717.122711][T16672] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 717.122734][T16672] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 717.122761][T16672] genl_family_rcv_msg_doit+0x214/0x300 [ 717.122785][T16672] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 717.122807][T16672] ? genl_get_cmd+0x3e7/0x760 [ 717.122833][T16672] ? bpf_lsm_capable+0x9/0x10 [ 717.122849][T16672] ? security_capable+0x80/0x260 [ 717.122865][T16672] ? ns_capable+0xd2/0xf0 [ 717.122884][T16672] genl_rcv_msg+0x560/0x800 [ 717.122907][T16672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.122930][T16672] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 717.122959][T16672] netlink_rcv_skb+0x159/0x420 [ 717.122979][T16672] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.123001][T16672] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.123029][T16672] ? netlink_deliver_tap+0x1ae/0xcc0 [ 717.123052][T16672] genl_rcv+0x28/0x40 [ 717.123072][T16672] netlink_unicast+0x585/0x850 [ 717.123094][T16672] ? __pfx_netlink_unicast+0x10/0x10 [ 717.123120][T16672] netlink_sendmsg+0x8b0/0xda0 [ 717.123143][T16672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.123162][T16672] ? __import_iovec+0x1d2/0x640 [ 717.123184][T16672] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 717.123203][T16672] ____sys_sendmsg+0x9e1/0xb70 [ 717.123222][T16672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.123243][T16672] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.123267][T16672] ? __pfx_futex_wake_mark+0x10/0x10 [ 717.123294][T16672] ___sys_sendmsg+0x190/0x1e0 [ 717.123317][T16672] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.123363][T16672] __sys_sendmsg+0x170/0x220 [ 717.123381][T16672] ? __pfx___sys_sendmsg+0x10/0x10 [ 717.123397][T16672] ? __x64_sys_futex+0x34f/0x4d0 [ 717.123421][T16672] ? rcu_is_watching+0x12/0xc0 [ 717.123441][T16672] do_syscall_64+0x115/0x840 [ 717.123461][T16672] ? clear_bhb_loop+0x40/0x90 [ 717.123480][T16672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.123496][T16672] RIP: 0033:0x7f0223d9ce59 [ 717.123511][T16672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.123525][T16672] RSP: 002b:00007f0224c75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.123541][T16672] RAX: ffffffffffffffda RBX: 00007f0224015fa0 RCX: 00007f0223d9ce59 [ 717.123552][T16672] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 717.123562][T16672] RBP: 00007f0223e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 717.123572][T16672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.123581][T16672] R13: 00007f0224016038 R14: 00007f0224015fa0 R15: 00007ffeebb99c88 [ 717.123602][T16672] [ 717.549950][T16676] sysfs: cannot create duplicate filename '/class/ieee80211/11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 717.561099][T16676] CPU: 0 UID: 0 PID: 16676 Comm: syz.1.2121 Not tainted syzkaller #0 PREEMPT(full) [ 717.561121][T16676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 717.561130][T16676] Call Trace: [ 717.561137][T16676] [ 717.561144][T16676] dump_stack_lvl+0x100/0x190 [ 717.561175][T16676] sysfs_warn_dup.cold+0x1c/0x28 [ 717.561197][T16676] sysfs_do_create_link_sd+0x113/0x140 [ 717.561217][T16676] sysfs_create_link+0x61/0xc0 [ 717.561233][T16676] device_add+0x675/0x1950 [ 717.561259][T16676] ? __pfx_device_add+0x10/0x10 [ 717.561275][T16676] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 717.561299][T16676] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 717.561328][T16676] wiphy_register+0x1edd/0x2d90 [ 717.561346][T16676] ? __rtnl_unlock+0xb9/0xf0 [ 717.561371][T16676] ? __pfx_wiphy_register+0x10/0x10 [ 717.561390][T16676] ? __asan_memset+0x23/0x50 [ 717.561413][T16676] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 717.561445][T16676] ieee80211_register_hw+0x3055/0x4570 [ 717.561477][T16676] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 717.561499][T16676] ? __pfx___debug_object_init+0x10/0x10 [ 717.561523][T16676] ? find_held_lock+0x2b/0x80 [ 717.561542][T16676] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 717.561563][T16676] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 717.561587][T16676] ? __hrtimer_setup+0x208/0x330 [ 717.561605][T16676] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 717.561637][T16676] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 717.561658][T16676] ? __asan_memcpy+0x3c/0x60 [ 717.561682][T16676] hwsim_new_radio_nl+0xc5f/0x1370 [ 717.561701][T16676] ? rcu_is_watching+0x12/0xc0 [ 717.561718][T16676] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 717.561743][T16676] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 717.561767][T16676] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 717.561794][T16676] genl_family_rcv_msg_doit+0x214/0x300 [ 717.561818][T16676] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 717.561840][T16676] ? genl_get_cmd+0x3e7/0x760 [ 717.561865][T16676] ? bpf_lsm_capable+0x9/0x10 [ 717.561880][T16676] ? security_capable+0x80/0x260 [ 717.561896][T16676] ? ns_capable+0xd2/0xf0 [ 717.561915][T16676] genl_rcv_msg+0x560/0x800 [ 717.561939][T16676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.561961][T16676] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 717.561987][T16676] netlink_rcv_skb+0x159/0x420 [ 717.562006][T16676] ? __pfx_genl_rcv_msg+0x10/0x10 [ 717.562029][T16676] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.562057][T16676] ? netlink_deliver_tap+0x1ae/0xcc0 [ 717.562078][T16676] genl_rcv+0x28/0x40 [ 717.562097][T16676] netlink_unicast+0x585/0x850 [ 717.562120][T16676] ? __pfx_netlink_unicast+0x10/0x10 [ 717.562145][T16676] netlink_sendmsg+0x8b0/0xda0 [ 717.562168][T16676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.562186][T16676] ? __import_iovec+0x1d2/0x640 [ 717.562209][T16676] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 717.562228][T16676] ____sys_sendmsg+0x9e1/0xb70 [ 717.562247][T16676] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.562276][T16676] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.562300][T16676] ? rcu_is_watching+0x12/0xc0 [ 717.562316][T16676] ? ___sys_sendmsg+0x19d/0x1e0 [ 717.562336][T16676] ? kfree+0x1dd/0x6c0 [ 717.562361][T16676] ___sys_sendmsg+0x190/0x1e0 [ 717.562383][T16676] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.562421][T16676] ? __pfx___might_resched+0x10/0x10 [ 717.562442][T16676] __sys_sendmmsg+0x205/0x430 [ 717.562461][T16676] ? __pfx___sys_sendmmsg+0x10/0x10 [ 717.562492][T16676] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 717.562515][T16676] ? kcov_ioctl+0x16a/0x720 [ 717.562538][T16676] __x64_sys_sendmmsg+0x9c/0x100 [ 717.562554][T16676] ? lockdep_hardirqs_on+0x78/0x100 [ 717.562575][T16676] do_syscall_64+0x115/0x840 [ 717.562596][T16676] ? clear_bhb_loop+0x40/0x90 [ 717.562614][T16676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.562630][T16676] RIP: 0033:0x7f0223d9ce59 [ 717.562644][T16676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.562660][T16676] RSP: 002b:00007f0224c54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 717.562675][T16676] RAX: ffffffffffffffda RBX: 00007f0224016090 RCX: 00007f0223d9ce59 [ 717.562686][T16676] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 717.562696][T16676] RBP: 00007f0223e32d6f R08: 0000000000000000 R09: 0000000000000000 [ 717.562705][T16676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.562714][T16676] R13: 00007f0224016128 R14: 00007f0224016090 R15: 00007ffeebb99c88 [ 717.562735][T16676] syzkaller syzkaller login: [ 718.851816][T16706] FAULT_INJECTION: forcing a failure. [ 718.851816][T16706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 718.877049][T16706] CPU: 0 UID: 0 PID: 16706 Comm: syz.2.2129 Not tainted syzkaller #0 PREEMPT(full) [ 718.877071][T16706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 718.877081][T16706] Call Trace: [ 718.877086][T16706] [ 718.877092][T16706] dump_stack_lvl+0x100/0x190 [ 718.877123][T16706] should_fail_ex.cold+0x5/0xa [ 718.877150][T16706] _copy_from_iter+0x1f4/0x1690 [ 718.877174][T16706] ? kmalloc_reserve+0xf9/0x350 [ 718.877195][T16706] ? __pfx__copy_from_iter+0x10/0x10 [ 718.877219][T16706] ? alloc_pages_noprof+0xf9/0x160 [ 718.877240][T16706] ? skb_page_frag_refill+0x309/0x4b0 [ 718.877264][T16706] ? sk_page_frag_refill+0x6c/0x340 [ 718.877288][T16706] kcm_sendmsg+0x1447/0x3120 [ 718.877310][T16706] ? __lock_acquire+0x3c0/0x2630 [ 718.877344][T16706] ? __pfx_kcm_sendmsg+0x10/0x10 [ 718.877362][T16706] ? __import_iovec+0x1d2/0x640 [ 718.877384][T16706] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 718.877403][T16706] ____sys_sendmsg+0x9e1/0xb70 [ 718.877423][T16706] ? __pfx_kcm_sendmsg+0x10/0x10 [ 718.877444][T16706] ? __pfx_____sys_sendmsg+0x10/0x10 [ 718.877462][T16706] ? preempt_schedule_thunk+0x16/0x30 [ 718.877487][T16706] ? try_to_wake_up+0x5f6/0x1900 [ 718.877509][T16706] ___sys_sendmsg+0x190/0x1e0 [ 718.877531][T16706] ? __pfx____sys_sendmsg+0x10/0x10 [ 718.877551][T16706] ? futex_private_hash_put+0x107/0x1c0 [ 718.877597][T16706] __sys_sendmsg+0x170/0x220 [ 718.877612][T16706] ? __pfx___sys_sendmsg+0x10/0x10 [ 718.877628][T16706] ? __x64_sys_futex+0x34f/0x4d0 [ 718.877651][T16706] ? rcu_is_watching+0x12/0xc0 [ 718.877670][T16706] do_syscall_64+0x115/0x840 [ 718.877691][T16706] ? clear_bhb_loop+0x40/0x90 [ 718.877710][T16706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 718.877726][T16706] RIP: 0033:0x7f3a50f9ce59 [ 718.877738][T16706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 718.877753][T16706] RSP: 002b:00007f3a51e85028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 718.877769][T16706] RAX: ffffffffffffffda RBX: 00007f3a51216090 RCX: 00007f3a50f9ce59 [ 718.877779][T16706] RDX: 0000000000000001 RSI: 0000200000000ac0 RDI: 0000000000000008 [ 718.877788][T16706] RBP: 00007f3a51032d6f R08: 0000000000000000 R09: 0000000000000000 [ 718.877798][T16706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 718.877806][T16706] R13: 00007f3a51216128 R14: 00007f3a51216090 R15: 00007ffe3e8a8858 [ 718.877826][T16706] [ 719.156902][T16677] Invalid ELF header magic: != ELF [ 719.582660][T16716] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5632] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16716] [ 719.710459][T16724] FAULT_INJECTION: forcing a failure. [ 719.710459][T16724] name failslab, interval 1, probability 0, space 0, times 0 [ 719.777788][T16724] CPU: 0 UID: 0 PID: 16724 Comm: syz.3.2136 Not tainted syzkaller #0 PREEMPT(full) [ 719.777811][T16724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 719.777821][T16724] Call Trace: [ 719.777828][T16724] [ 719.777835][T16724] dump_stack_lvl+0x100/0x190 [ 719.777866][T16724] should_fail_ex.cold+0x5/0xa [ 719.777886][T16724] should_failslab+0xc2/0x120 [ 719.777905][T16724] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 719.777923][T16724] ? vidtv_psi_short_event_desc_init+0x1bf/0x5f0 [ 719.777947][T16724] kstrdup+0x51/0xe0 [ 719.777964][T16724] vidtv_psi_short_event_desc_init+0x1bf/0x5f0 [ 719.777988][T16724] vidtv_channel_s302m_init+0x4fd/0x9b0 [ 719.778010][T16724] ? trace_kmalloc+0xe3/0x110 [ 719.778028][T16724] ? __pfx_vidtv_channel_s302m_init+0x10/0x10 [ 719.778054][T16724] ? __asan_memcpy+0x3c/0x60 [ 719.778078][T16724] vidtv_channels_init+0x4c/0xb0 [ 719.778099][T16724] vidtv_mux_init+0x9df/0xbf0 [ 719.778123][T16724] vidtv_start_feed+0x34e/0x500 [ 719.778140][T16724] ? __pfx_vidtv_start_feed+0x10/0x10 [ 719.778158][T16724] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 719.778185][T16724] dmx_section_feed_start_filtering+0x3a8/0x660 [ 719.778211][T16724] dvb_dmxdev_filter_start+0x767/0xdd0 [ 719.778234][T16724] dvb_demux_do_ioctl+0xe64/0x1200 [ 719.778256][T16724] dvb_usercopy+0x167/0x340 [ 719.778279][T16724] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 719.778302][T16724] ? __pfx_dvb_usercopy+0x10/0x10 [ 719.778334][T16724] ? __fget_files+0x21f/0x3d0 [ 719.778356][T16724] dvb_demux_ioctl+0x29/0x40 [ 719.778371][T16724] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 719.778386][T16724] __x64_sys_ioctl+0x18e/0x210 [ 719.778413][T16724] do_syscall_64+0x115/0x840 [ 719.778434][T16724] ? clear_bhb_loop+0x40/0x90 [ 719.778453][T16724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.778469][T16724] RIP: 0033:0x7fef8bf9ce59 [ 719.778483][T16724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.778498][T16724] RSP: 002b:00007fef8ce56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 719.778513][T16724] RAX: ffffffffffffffda RBX: 00007fef8c216090 RCX: 00007fef8bf9ce59 [ 719.778523][T16724] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000006 [ 719.778533][T16724] RBP: 00007fef8c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 719.778542][T16724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.778551][T16724] R13: 00007fef8c216128 R14: 00007fef8c216090 R15: 00007ffc8118b608 [ 719.778572][T16724] [ 720.866569][T16745] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2137'. [ 722.510314][T16785] ERROR: Out of memory at tomoyo_memory_ok. [ 723.604627][T16805] FAULT_INJECTION: forcing a failure. [ 723.604627][T16805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 723.684625][T16805] CPU: 0 UID: 0 PID: 16805 Comm: syz.4.2154 Not tainted syzkaller #0 PREEMPT(full) [ 723.684647][T16805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 723.684657][T16805] Call Trace: [ 723.684663][T16805] [ 723.684669][T16805] dump_stack_lvl+0x100/0x190 [ 723.684700][T16805] should_fail_ex.cold+0x5/0xa [ 723.684720][T16805] _copy_to_user+0x32/0xd0 [ 723.684743][T16805] simple_read_from_buffer+0xcb/0x170 [ 723.684771][T16805] proc_fail_nth_read+0x1af/0x230 [ 723.684796][T16805] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 723.684828][T16805] ? rw_verify_area+0xce/0x6d0 [ 723.684843][T16805] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 723.684866][T16805] vfs_read+0x1e4/0xb30 [ 723.684885][T16805] ? __pfx_vfs_read+0x10/0x10 [ 723.684901][T16805] ? __fget_files+0x215/0x3d0 [ 723.684926][T16805] ? __fget_files+0x21f/0x3d0 [ 723.684949][T16805] ksys_read+0x12a/0x250 [ 723.684966][T16805] ? __pfx_ksys_read+0x10/0x10 [ 723.684981][T16805] ? _raw_read_unlock+0x28/0x50 [ 723.685003][T16805] ? rcu_is_watching+0x12/0xc0 [ 723.685023][T16805] do_syscall_64+0x115/0x840 [ 723.685042][T16805] ? clear_bhb_loop+0x40/0x90 [ 723.685061][T16805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.685076][T16805] RIP: 0033:0x7f7aa5f5d68e [ 723.685089][T16805] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 723.685103][T16805] RSP: 002b:00007f7aa6d9afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 723.685118][T16805] RAX: ffffffffffffffda RBX: 00007f7aa6d9b6c0 RCX: 00007f7aa5f5d68e [ 723.685128][T16805] RDX: 000000000000000f RSI: 00007f7aa6d9b0a0 RDI: 0000000000000003 [ 723.685137][T16805] RBP: 00007f7aa6d9b090 R08: 0000000000000000 R09: 0000000000000000 [ 723.685146][T16805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 723.685155][T16805] R13: 00007f7aa6216038 R14: 00007f7aa6215fa0 R15: 00007ffdee0f5258 [ 723.685175][T16805] [ 723.687644][T16810] FAULT_INJECTION: forcing a failure. [ 723.687644][T16810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.105012][T16811] netlink: 588 bytes leftover after parsing attributes in process `syz.2.2156'. [ 724.141350][T16811] tc_dump_action: action bad kind [ 724.174547][ T4949] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 724.833953][T16826] FAULT_INJECTION: forcing a failure. [ 724.833953][T16826] name failslab, interval 1, probability 0, space 0, times 0 [ 724.867225][T16810] CPU: 0 UID: 0 PID: 16810 Comm: syz.1.2155 Not tainted syzkaller #0 PREEMPT(full) [ 724.867248][T16810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 724.867258][T16810] Call Trace: [ 724.867264][T16810] [ 724.867270][T16810] dump_stack_lvl+0x100/0x190 [ 724.867300][T16810] should_fail_ex.cold+0x5/0xa [ 724.867320][T16810] strncpy_from_user+0x3b/0x2d0 [ 724.867344][T16810] do_getname+0x78/0x390 [ 724.867368][T16810] __x64_sys_rename+0x57/0xb0 [ 724.867390][T16810] do_syscall_64+0x115/0x840 [ 724.867411][T16810] ? clear_bhb_loop+0x40/0x90 [ 724.867429][T16810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.867445][T16810] RIP: 0033:0x7f0223d9ce59 [ 724.867458][T16810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 724.867472][T16810] RSP: 002b:00007f0224c54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 724.867488][T16810] RAX: ffffffffffffffda RBX: 00007f0224016090 RCX: 00007f0223d9ce59 [ 724.867498][T16810] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000480 [ 724.867507][T16810] RBP: 00007f0224c54090 R08: 0000000000000000 R09: 0000000000000000 [ 724.867516][T16810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.867525][T16810] R13: 00007f0224016128 R14: 00007f0224016090 R15: 00007ffeebb99c88 [ 724.867544][T16810] [ 725.221193][T16826] CPU: 0 UID: 0 PID: 16826 Comm: syz.3.2160 Not tainted syzkaller #0 PREEMPT(full) [ 725.221218][T16826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 725.221228][T16826] Call Trace: [ 725.221234][T16826] [ 725.221240][T16826] dump_stack_lvl+0x100/0x190 [ 725.221272][T16826] should_fail_ex.cold+0x5/0xa [ 725.221291][T16826] should_failslab+0xc2/0x120 [ 725.221310][T16826] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 725.221335][T16826] ? blk_alloc_queue+0x31/0x790 [ 725.221359][T16826] blk_alloc_queue+0x31/0x790 [ 725.221382][T16826] blk_mq_alloc_queue+0x174/0x290 [ 725.221398][T16826] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 725.221424][T16826] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 725.221445][T16826] __blk_mq_alloc_disk+0x29/0x120 [ 725.221462][T16826] loop_add+0x498/0xb60 [ 725.221483][T16826] ? __pfx_loop_add+0x10/0x10 [ 725.221514][T16826] ? find_held_lock+0x2b/0x80 [ 725.221533][T16826] ? __fget_files+0x215/0x3d0 [ 725.221552][T16826] loop_control_ioctl+0xae/0x620 [ 725.221573][T16826] ? __pfx_loop_control_ioctl+0x10/0x10 [ 725.221596][T16826] ? __pfx_loop_control_ioctl+0x10/0x10 [ 725.221617][T16826] __x64_sys_ioctl+0x18e/0x210 [ 725.221634][T16826] do_syscall_64+0x115/0x840 [ 725.221654][T16826] ? clear_bhb_loop+0x40/0x90 [ 725.221679][T16826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 725.221696][T16826] RIP: 0033:0x7fef8bf9ce59 [ 725.221710][T16826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 725.221726][T16826] RSP: 002b:00007fef8ce56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 725.221741][T16826] RAX: ffffffffffffffda RBX: 00007fef8c216090 RCX: 00007fef8bf9ce59 [ 725.221751][T16826] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 725.221761][T16826] RBP: 00007fef8c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 725.221770][T16826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 725.221779][T16826] R13: 00007fef8c216128 R14: 00007fef8c216090 R15: 00007ffc8118b608 [ 725.221799][T16826] [ 725.663704][T16840] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2162'. [ 726.205009][T16854] FAULT_INJECTION: forcing a failure. [ 726.205009][T16854] name failslab, interval 1, probability 0, space 0, times 0 [ 726.263455][T16854] CPU: 0 UID: 0 PID: 16854 Comm: syz.3.2166 Not tainted syzkaller #0 PREEMPT(full) [ 726.263477][T16854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 726.263487][T16854] Call Trace: [ 726.263493][T16854] [ 726.263499][T16854] dump_stack_lvl+0x100/0x190 [ 726.263532][T16854] should_fail_ex.cold+0x5/0xa [ 726.263552][T16854] ? tomoyo_encode2+0xfb/0x3c0 [ 726.263580][T16854] should_failslab+0xc2/0x120 [ 726.263599][T16854] __kmalloc_noprof+0xe0/0x850 [ 726.263622][T16854] ? d_absolute_path+0x136/0x1b0 [ 726.263640][T16854] tomoyo_encode2+0xfb/0x3c0 [ 726.263664][T16854] tomoyo_encode+0x29/0x50 [ 726.263683][T16854] tomoyo_realpath_from_path+0x18c/0x690 [ 726.263709][T16854] tomoyo_path_number_perm+0x23c/0x580 [ 726.263727][T16854] ? tomoyo_path_number_perm+0x22e/0x580 [ 726.263746][T16854] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 726.263783][T16854] ? find_held_lock+0x2b/0x80 [ 726.263802][T16854] ? __fget_files+0x215/0x3d0 [ 726.263818][T16854] ? hook_file_ioctl_common+0x149/0x410 [ 726.263836][T16854] ? __fget_files+0x215/0x3d0 [ 726.263856][T16854] ? __fget_files+0x21f/0x3d0 [ 726.263876][T16854] security_file_ioctl+0xd3/0x230 [ 726.263895][T16854] __x64_sys_ioctl+0xb7/0x210 [ 726.263912][T16854] do_syscall_64+0x115/0x840 [ 726.263932][T16854] ? clear_bhb_loop+0x40/0x90 [ 726.263951][T16854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.263966][T16854] RIP: 0033:0x7fef8bf9ce59 [ 726.263980][T16854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.263995][T16854] RSP: 002b:00007fef8ce77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 726.264010][T16854] RAX: ffffffffffffffda RBX: 00007fef8c215fa0 RCX: 00007fef8bf9ce59 [ 726.264020][T16854] RDX: 0000200000000540 RSI: 00000000400445a0 RDI: 0000000000000003 [ 726.264029][T16854] RBP: 00007fef8ce77090 R08: 0000000000000000 R09: 0000000000000000 [ 726.264039][T16854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 726.264048][T16854] R13: 00007fef8c216038 R14: 00007fef8c215fa0 R15: 00007ffc8118b608 [ 726.264068][T16854] [ 726.264099][T16854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 726.906296][T16861] netlink: 'syz.2.2167': attribute type 22 has an invalid length. [ 726.935192][T16861] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2167'. [ 727.060530][T16863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2167'. [ 727.127837][T16863] macvlan0: entered promiscuous mode [ 727.156401][T16863] macvlan0: entered allmulticast mode [ 727.211229][T16863] veth1_vlan: entered allmulticast mode [ 727.691338][T16879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2171'. [ 728.062057][T16886] random: crng reseeded on system resumption [ 729.561805][T16937] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2182'. [ 730.002971][T16948] aoe: skb alloc failure [ 730.038569][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 730.046322][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 731.395220][T16981] netlink: 146 bytes leftover after parsing attributes in process `syz.4.2189'. [ 732.751332][T17011] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2193'. [ 732.935252][T17017] FAULT_INJECTION: forcing a failure. [ 732.935252][T17017] name fail_futex, interval 1, probability 0, space 0, times 0 [ 733.025470][T17017] CPU: 0 UID: 0 PID: 17017 Comm: syz.1.2194 Not tainted syzkaller #0 PREEMPT(full) [ 733.025494][T17017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 733.025504][T17017] Call Trace: [ 733.025510][T17017] [ 733.025516][T17017] dump_stack_lvl+0x100/0x190 [ 733.025547][T17017] should_fail_ex.cold+0x5/0xa [ 733.025568][T17017] get_futex_key+0x1d2/0x1510 [ 733.025595][T17017] ? __pfx_get_futex_key+0x10/0x10 [ 733.025621][T17017] ? find_held_lock+0x2b/0x80 [ 733.025643][T17017] futex_wait_setup+0x83/0x510 [ 733.025666][T17017] __futex_wait+0x19f/0x300 [ 733.025686][T17017] ? __pfx___futex_wait+0x10/0x10 [ 733.025708][T17017] ? __pfx_futex_wake_mark+0x10/0x10 [ 733.025728][T17017] ? futex_hash+0x2ad/0x370 [ 733.025756][T17017] ? futex_hash+0x141/0x370 [ 733.025780][T17017] futex_wait+0xe6/0x370 [ 733.025799][T17017] ? __pfx_futex_wait+0x10/0x10 [ 733.025827][T17017] do_futex+0x1ef/0x350 [ 733.025843][T17017] ? __pfx_do_futex+0x10/0x10 [ 733.025859][T17017] ? fput+0x79/0x100 [ 733.025879][T17017] ? __sys_sendmsg+0x18f/0x220 [ 733.025897][T17017] __x64_sys_futex+0x34f/0x4d0 [ 733.025915][T17017] ? __pfx___x64_sys_futex+0x10/0x10 [ 733.025934][T17017] ? rcu_is_watching+0x12/0xc0 [ 733.025954][T17017] do_syscall_64+0x115/0x840 [ 733.025974][T17017] ? clear_bhb_loop+0x40/0x90 [ 733.025993][T17017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.026008][T17017] RIP: 0033:0x7f0223d9ce59 [ 733.026021][T17017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.026045][T17017] RSP: 002b:00007f0224c540e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 733.026060][T17017] RAX: ffffffffffffffda RBX: 00007f0224016098 RCX: 00007f0223d9ce59 [ 733.026072][T17017] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0224016098 [ 733.026082][T17017] RBP: 00007f0224016090 R08: 0000000000000000 R09: 0000000000000000 [ 733.026091][T17017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.026101][T17017] R13: 00007f0224016128 R14: 00007ffeebb99ba0 R15: 00007ffeebb99c88 [ 733.026121][T17017] [ 734.226018][T17055] ERROR: Out of memory at tomoyo_memory_ok. [ 734.294225][T17056] hub 1-0:1.0: USB hub found [ 734.322580][T17056] hub 1-0:1.0: 1 port detected [ 734.573958][T17062] futex_wake_op: syz.2.2204 tries to shift op by -2048; fix this program [ 734.874990][T17068] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2205'. [ 735.402778][T17072] block loop4: the capability attribute has been deprecated. [ 735.937607][T17089] FAULT_INJECTION: forcing a failure. [ 735.937607][T17089] name failslab, interval 1, probability 0, space 0, times 0 [ 736.006077][T17089] CPU: 0 UID: 0 PID: 17089 Comm: syz.3.2212 Not tainted syzkaller #0 PREEMPT(full) [ 736.006102][T17089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 736.006113][T17089] Call Trace: [ 736.006119][T17089] [ 736.006126][T17089] dump_stack_lvl+0x100/0x190 [ 736.006158][T17089] should_fail_ex.cold+0x5/0xa [ 736.006178][T17089] ? tracepoint_add_func+0x3a8/0x1150 [ 736.006200][T17089] should_failslab+0xc2/0x120 [ 736.006218][T17089] __kmalloc_noprof+0xe0/0x850 [ 736.006244][T17089] ? __pfx_trace_event_raw_event_nfsd_file_acquire+0x10/0x10 [ 736.006263][T17089] tracepoint_add_func+0x3a8/0x1150 [ 736.006283][T17089] ? __pfx_trace_event_raw_event_nfsd_file_acquire+0x10/0x10 [ 736.006305][T17089] ? __pfx_trace_event_raw_event_nfsd_file_acquire+0x10/0x10 [ 736.006324][T17089] tracepoint_probe_register+0xc4/0x110 [ 736.006348][T17089] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 736.006371][T17089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 736.006393][T17089] ? __pfx_trace_event_raw_event_nfsd_file_acquire+0x10/0x10 [ 736.006412][T17089] ? __pfx_probe_sched_switch+0x10/0x10 [ 736.006435][T17089] ? __lock_acquire+0x4a5/0x2630 [ 736.006460][T17089] trace_event_reg+0x209/0x350 [ 736.006481][T17089] __ftrace_event_enable_disable+0x211/0x6f0 [ 736.006507][T17089] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 736.006537][T17089] ftrace_set_clr_event+0x1b7/0x3f0 [ 736.006556][T17089] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 736.006572][T17089] ? trace_get_user+0x3ae/0xa70 [ 736.006599][T17089] ftrace_event_write+0x259/0x2c0 [ 736.006616][T17089] ? __pfx_ftrace_event_write+0x10/0x10 [ 736.006641][T17089] vfs_write+0x2aa/0x1070 [ 736.006660][T17089] ? __pfx_ftrace_event_write+0x10/0x10 [ 736.006679][T17089] ? __pfx_vfs_write+0x10/0x10 [ 736.006695][T17089] ? __fget_files+0x215/0x3d0 [ 736.006718][T17089] ? __fget_files+0x21f/0x3d0 [ 736.006741][T17089] ksys_write+0x12a/0x250 [ 736.006758][T17089] ? __pfx_ksys_write+0x10/0x10 [ 736.006777][T17089] ? rcu_is_watching+0x12/0xc0 [ 736.006804][T17089] do_syscall_64+0x115/0x840 [ 736.006825][T17089] ? clear_bhb_loop+0x40/0x90 [ 736.006844][T17089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.006860][T17089] RIP: 0033:0x7fef8bf9ce59 [ 736.006874][T17089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.006889][T17089] RSP: 002b:00007fef8ce77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 736.006908][T17089] RAX: ffffffffffffffda RBX: 00007fef8c215fa0 RCX: 00007fef8bf9ce59 [ 736.006918][T17089] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 736.006928][T17089] RBP: 00007fef8c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 736.006937][T17089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 736.006946][T17089] R13: 00007fef8c216038 R14: 00007fef8c215fa0 R15: 00007ffc8118b608 [ 736.006967][T17089] [ 736.295214][T17089] event trace: Could not enable event nfsd_file_acquire [ 736.607265][T17093] bond0: invalid ARP target specified [ 736.641632][ T5640] Process accounting resumed [ 736.721790][T17097] syz_tun: tun_chr_ioctl cmd 2147767521 [ 736.730696][T17085] Process accounting resumed [ 737.444361][T17097] FAULT_INJECTION: forcing a failure. [ 737.444361][T17097] name failslab, interval 1, probability 0, space 0, times 0 [ 737.521129][T17097] CPU: 0 UID: 0 PID: 17097 Comm: syz.3.2214 Not tainted syzkaller #0 PREEMPT(full) [ 737.521156][T17097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 737.521166][T17097] Call Trace: [ 737.521172][T17097] [ 737.521179][T17097] dump_stack_lvl+0x100/0x190 [ 737.521211][T17097] should_fail_ex.cold+0x5/0xa [ 737.521231][T17097] should_failslab+0xc2/0x120 [ 737.521249][T17097] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 737.521274][T17097] ? __d_alloc+0x34/0xa40 [ 737.521297][T17097] __d_alloc+0x34/0xa40 [ 737.521315][T17097] ? __pfx_stack_trace_save+0x10/0x10 [ 737.521337][T17097] d_alloc_parallel+0x111/0x14e0 [ 737.521354][T17097] ? kasan_save_stack+0x3f/0x50 [ 737.521369][T17097] ? kasan_save_stack+0x30/0x50 [ 737.521383][T17097] ? kasan_save_free_info+0x3b/0x70 [ 737.521404][T17097] ? link_path_walk+0x161f/0x1cc0 [ 737.521422][T17097] ? __pfx_d_alloc_parallel+0x10/0x10 [ 737.521439][T17097] ? lockdep_init_map_type+0x5c/0x250 [ 737.521463][T17097] ? lockdep_init_map_type+0x5c/0x250 [ 737.521489][T17097] __lookup_slow+0x193/0x460 [ 737.521512][T17097] ? __pfx___lookup_slow+0x10/0x10 [ 737.521549][T17097] lookup_slow+0x50/0x70 [ 737.521571][T17097] link_path_walk+0x1377/0x1cc0 [ 737.521594][T17097] path_openat+0x1be/0x31a0 [ 737.521611][T17097] ? kasan_save_stack+0x3f/0x50 [ 737.521625][T17097] ? kasan_save_stack+0x30/0x50 [ 737.521639][T17097] ? kasan_save_track+0x14/0x30 [ 737.521653][T17097] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 737.521680][T17097] ? __pfx_path_openat+0x10/0x10 [ 737.521706][T17097] do_file_open+0x20e/0x430 [ 737.521734][T17097] ? __pfx_do_file_open+0x10/0x10 [ 737.521760][T17097] ? __pfx_kfree_link+0x10/0x10 [ 737.521781][T17097] ? alloc_fd+0x476/0x790 [ 737.521802][T17097] ? do_getname+0x191/0x390 [ 737.521826][T17097] do_sys_openat2+0x10d/0x1e0 [ 737.521848][T17097] ? __pfx_do_sys_openat2+0x10/0x10 [ 737.521872][T17097] ? ksys_semctl.constprop.0+0x14e/0x2e0 [ 737.521894][T17097] __x64_sys_openat+0x12d/0x210 [ 737.521918][T17097] ? __pfx___x64_sys_openat+0x10/0x10 [ 737.521943][T17097] ? rcu_is_watching+0x12/0xc0 [ 737.521964][T17097] do_syscall_64+0x115/0x840 [ 737.521984][T17097] ? clear_bhb_loop+0x40/0x90 [ 737.522003][T17097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.522020][T17097] RIP: 0033:0x7fef8bf5d68e [ 737.522033][T17097] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 737.522049][T17097] RSP: 002b:00007fef8ce76ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 737.522064][T17097] RAX: ffffffffffffffda RBX: 00007fef8ce776c0 RCX: 00007fef8bf5d68e [ 737.522075][T17097] RDX: 0000000000000002 RSI: 00007fef8ce76f90 RDI: ffffffffffffff9c [ 737.522085][T17097] RBP: 00007fef8c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 737.522094][T17097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 737.522104][T17097] R13: 00007fef8c216038 R14: 00007fef8c215fa0 R15: 00007ffc8118b608 [ 737.522125][T17097] [ 737.829374][T17116] FAULT_INJECTION: forcing a failure. [ 737.829374][T17116] name failslab, interval 1, probability 0, space 0, times 0 [ 737.842479][T17116] CPU: 0 UID: 0 PID: 17116 Comm: syz.2.2218 Not tainted syzkaller #0 PREEMPT(full) [ 737.842501][T17116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 737.842510][T17116] Call Trace: [ 737.842516][T17116] [ 737.842523][T17116] dump_stack_lvl+0x100/0x190 [ 737.842553][T17116] should_fail_ex.cold+0x5/0xa [ 737.842573][T17116] ? tracepoint_add_func+0x3a8/0x1150 [ 737.842594][T17116] should_failslab+0xc2/0x120 [ 737.842613][T17116] __kmalloc_noprof+0xe0/0x850 [ 737.842640][T17116] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 737.842662][T17116] tracepoint_add_func+0x3a8/0x1150 [ 737.842682][T17116] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 737.842708][T17116] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 737.842730][T17116] tracepoint_probe_register+0xc4/0x110 [ 737.842759][T17116] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 737.842781][T17116] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 737.842803][T17116] ? __lock_acquire+0x4a5/0x2630 [ 737.842831][T17116] tracing_start_sched_switch+0xaf/0x170 [ 737.842853][T17116] __ftrace_event_enable_disable+0x557/0x6f0 [ 737.842878][T17116] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 737.842909][T17116] ftrace_set_clr_event+0x1b7/0x3f0 [ 737.842927][T17116] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 737.842943][T17116] ? trace_get_user+0x3ae/0xa70 [ 737.842970][T17116] ftrace_event_write+0x259/0x2c0 [ 737.842988][T17116] ? __pfx_ftrace_event_write+0x10/0x10 [ 737.843012][T17116] vfs_write+0x2aa/0x1070 [ 737.843031][T17116] ? __pfx_ftrace_event_write+0x10/0x10 [ 737.843049][T17116] ? __pfx_vfs_write+0x10/0x10 [ 737.843066][T17116] ? __fget_files+0x215/0x3d0 [ 737.843088][T17116] ? __fget_files+0x21f/0x3d0 [ 737.843112][T17116] ksys_write+0x12a/0x250 [ 737.843128][T17116] ? __pfx_ksys_write+0x10/0x10 [ 737.843148][T17116] ? rcu_is_watching+0x12/0xc0 [ 737.843168][T17116] do_syscall_64+0x115/0x840 [ 737.843189][T17116] ? clear_bhb_loop+0x40/0x90 [ 737.843208][T17116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.843224][T17116] RIP: 0033:0x7f3a50f9ce59 [ 737.843237][T17116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.843252][T17116] RSP: 002b:00007f3a51ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 737.843271][T17116] RAX: ffffffffffffffda RBX: 00007f3a51215fa0 RCX: 00007f3a50f9ce59 [ 737.843281][T17116] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000006 [ 737.843290][T17116] RBP: 00007f3a51ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 737.843299][T17116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.843307][T17116] R13: 00007f3a51216038 R14: 00007f3a51215fa0 R15: 00007ffe3e8a8858 [ 737.843328][T17116] [ 737.843335][T17116] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 742.129387][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2239'. [ 742.143713][T17199] ------------[ cut here ]------------ [ 742.150129][T17199] IS_ERR(old) [ 742.150146][T17199] WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x837/0xd10, CPU#0: syz.3.2238/17199 [ 742.165708][T17199] Modules linked in: [ 742.170748][T17199] CPU: 0 UID: 0 PID: 17199 Comm: syz.3.2238 Not tainted syzkaller #0 PREEMPT(full) [ 742.181218][T17199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 742.191998][T17199] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 742.199254][T17199] Code: cc e8 4d 23 fe ff 48 8d 73 f0 48 c7 c2 20 c8 09 82 48 c7 c7 00 31 87 8e e8 b6 24 e2 ff eb ba bb fe ff ff ff e8 2a 23 fe ff 90 <0f> 0b 90 eb ac e8 1f 23 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 742.219063][T17199] RSP: 0018:ffffc90002ee78b0 EFLAGS: 00010287 [ 742.225209][T17199] RAX: 0000000000048433 RBX: 00000000fffffffe RCX: ffffc9000ea41000 [ 742.233176][T17199] RDX: 0000000000080000 RSI: ffffffff8209d916 RDI: ffff88801bf0be00 [ 742.241214][T17199] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 742.249475][T17199] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82102f10 [ 742.258952][T17199] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8ec49200 [ 742.267430][T17199] FS: 00007fef8ce566c0(0000) GS:ffff88812438a000(0000) knlGS:0000000000000000 [ 742.277388][T17199] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 742.284569][T17199] CR2: 0000001b34ffaff8 CR3: 00000000679ac000 CR4: 00000000003526f0 [ 742.292586][T17199] Call Trace: [ 742.295886][T17199] [ 742.298813][T17199] tracing_stop_cmdline_record+0x66/0xa0 [ 742.304444][T17199] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 742.310463][T17199] ftrace_event_set_open+0x224/0x380 [ 742.315790][T17199] do_dentry_open+0x6ab/0x14d0 [ 742.320543][T17199] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 742.326458][T17199] vfs_open+0x82/0x3f0 [ 742.330530][T17199] path_openat+0x208c/0x31a0 [ 742.335235][T17199] ? __pfx_path_openat+0x10/0x10 [ 742.340168][T17199] do_file_open+0x20e/0x430 [ 742.344674][T17199] ? __pfx_do_file_open+0x10/0x10 [ 742.349753][T17199] ? alloc_fd+0x476/0x790 [ 742.354076][T17199] ? do_getname+0x191/0x390 [ 742.358606][T17199] do_sys_openat2+0x10d/0x1e0 [ 742.363276][T17199] ? __pfx_do_sys_openat2+0x10/0x10 [ 742.368502][T17199] __x64_sys_openat+0x12d/0x210 [ 742.373360][T17199] ? __pfx___x64_sys_openat+0x10/0x10 [ 742.379660][T17199] ? rcu_is_watching+0x12/0xc0 [ 742.384421][T17199] do_syscall_64+0x115/0x840 [ 742.389617][T17199] ? clear_bhb_loop+0x40/0x90 [ 742.394305][T17199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.400227][T17199] RIP: 0033:0x7fef8bf9ce59 [ 742.404627][T17199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.424819][T17199] RSP: 002b:00007fef8ce56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 742.433244][T17199] RAX: ffffffffffffffda RBX: 00007fef8c216090 RCX: 00007fef8bf9ce59 [ 742.441263][T17199] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 742.449240][T17199] RBP: 00007fef8c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 742.457233][T17199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.465239][T17199] R13: 00007fef8c216128 R14: 00007fef8c216090 R15: 00007ffc8118b608 [ 742.473207][T17199] [ 742.476265][T17199] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 742.483566][T17199] CPU: 0 UID: 0 PID: 17199 Comm: syz.3.2238 Not tainted syzkaller #0 PREEMPT(full) [ 742.492946][T17199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 742.502980][T17199] Call Trace: [ 742.506247][T17199] [ 742.509160][T17199] dump_stack_lvl+0x100/0x190 [ 742.513834][T17199] vpanic+0x552/0x970 [ 742.517838][T17199] ? __pfx_vpanic+0x10/0x10 [ 742.522330][T17199] panic+0xd1/0xe0 [ 742.526053][T17199] ? __pfx_panic+0x10/0x10 [ 742.530476][T17199] check_panic_on_warn.cold+0x19/0x34 [ 742.535846][T17199] ? tracepoint_probe_unregister+0x837/0xd10 [ 742.541824][T17199] __warn.cold+0x191/0x328 [ 742.546230][T17199] __report_bug+0x296/0x3d0 [ 742.550751][T17199] ? tracepoint_probe_unregister+0x837/0xd10 [ 742.556734][T17199] ? __pfx___report_bug+0x10/0x10 [ 742.561765][T17199] ? rcu_is_watching+0x12/0xc0 [ 742.566516][T17199] ? trace_contention_end+0x122/0x170 [ 742.571872][T17199] ? __mutex_lock+0x26d/0x1b10 [ 742.576625][T17199] ? tracepoint_probe_unregister+0x31/0xd10 [ 742.582506][T17199] ? rcu_is_watching+0x12/0xc0 [ 742.587252][T17199] ? trace_contention_end+0x122/0x170 [ 742.592607][T17199] ? tracepoint_probe_unregister+0x837/0xd10 [ 742.598577][T17199] report_bug+0xb2/0x220 [ 742.602806][T17199] ? tracepoint_probe_unregister+0x837/0xd10 [ 742.608772][T17199] handle_bug+0x16a/0x2a0 [ 742.613083][T17199] exc_invalid_op+0x17/0x50 [ 742.617569][T17199] asm_exc_invalid_op+0x1a/0x20 [ 742.622403][T17199] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 742.628992][T17199] Code: cc e8 4d 23 fe ff 48 8d 73 f0 48 c7 c2 20 c8 09 82 48 c7 c7 00 31 87 8e e8 b6 24 e2 ff eb ba bb fe ff ff ff e8 2a 23 fe ff 90 <0f> 0b 90 eb ac e8 1f 23 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 742.648594][T17199] RSP: 0018:ffffc90002ee78b0 EFLAGS: 00010287 [ 742.654649][T17199] RAX: 0000000000048433 RBX: 00000000fffffffe RCX: ffffc9000ea41000 [ 742.662611][T17199] RDX: 0000000000080000 RSI: ffffffff8209d916 RDI: ffff88801bf0be00 [ 742.670572][T17199] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 742.678534][T17199] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82102f10 [ 742.686491][T17199] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8ec49200 [ 742.694461][T17199] ? __pfx_probe_sched_switch+0x10/0x10 [ 742.700012][T17199] ? tracepoint_probe_unregister+0x836/0xd10 [ 742.705995][T17199] tracing_stop_cmdline_record+0x66/0xa0 [ 742.711621][T17199] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 742.717604][T17199] ftrace_event_set_open+0x224/0x380 [ 742.722883][T17199] do_dentry_open+0x6ab/0x14d0 [ 742.727635][T17199] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 742.733445][T17199] vfs_open+0x82/0x3f0 [ 742.737523][T17199] path_openat+0x208c/0x31a0 [ 742.742123][T17199] ? __pfx_path_openat+0x10/0x10 [ 742.747073][T17199] do_file_open+0x20e/0x430 [ 742.751584][T17199] ? __pfx_do_file_open+0x10/0x10 [ 742.756616][T17199] ? alloc_fd+0x476/0x790 [ 742.760938][T17199] ? do_getname+0x191/0x390 [ 742.765873][T17199] do_sys_openat2+0x10d/0x1e0 [ 742.770547][T17199] ? __pfx_do_sys_openat2+0x10/0x10 [ 742.775747][T17199] __x64_sys_openat+0x12d/0x210 [ 742.780589][T17199] ? __pfx___x64_sys_openat+0x10/0x10 [ 742.785956][T17199] ? rcu_is_watching+0x12/0xc0 [ 742.790708][T17199] do_syscall_64+0x115/0x840 [ 742.795287][T17199] ? clear_bhb_loop+0x40/0x90 [ 742.799956][T17199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.805834][T17199] RIP: 0033:0x7fef8bf9ce59 [ 742.810233][T17199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.829836][T17199] RSP: 002b:00007fef8ce56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 742.838245][T17199] RAX: ffffffffffffffda RBX: 00007fef8c216090 RCX: 00007fef8bf9ce59 [ 742.846205][T17199] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 742.854168][T17199] RBP: 00007fef8c032d6f R08: 0000000000000000 R09: 0000000000000000 [ 742.862127][T17199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.870095][T17199] R13: 00007fef8c216128 R14: 00007fef8c216090 R15: 00007ffc8118b608 [ 742.878074][T17199] [ 742.881139][T17199] Kernel Offset: disabled [ 742.885458][T17199] Rebooting in 86400 seconds..