last executing test programs: 5.824435129s ago: executing program 1 (id=3011): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) ioctl$auto_XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000380), 0x20000, 0x0) r2 = socket(0x28, 0x5, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_STOP_AP(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x1c, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004010}, 0x4008000) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x2, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) tgkill$auto_SIGCONT(0x0, 0x0, 0x12) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8, 0x0) 5.729627848s ago: executing program 0 (id=3013): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x40000, 0x0) capget$auto(&(0x7f0000000080)={0x33, 0xffffffffffffffff}, &(0x7f00000000c0)={0xffffffff, 0x9}) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000100)={"692641ca759b4378c7e234fe5ae24df20955ff438bcb14ab40696024ed812995", 0x80, 0x7, 0xca, 0x5, 0x1, r1}) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x3c, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x448040, 0x0) 4.771658787s ago: executing program 1 (id=3018): openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/setgroups\x00', 0x40, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x3, 0xffffffffeffffffe, 0x1, 0x6, 0x50b301a, 0x2c, 0x2c, 0x0, 0x3}) setrlimit$auto(0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/cpu/hotplug/states\x00', 0x8800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/18, 0x12) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r2, 0x0, 0x10007c) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0x801, &(0x7f0000000000)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) sendmsg$auto_NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000023b5bb3f66f3ee1400306b0dc49bee2bcd5b768473c71bfc4c0f4ca38b3446c2c9fa5cfdcbe011a677907cc3ddecfb2178d20600000000000000", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fddbdf251400000006001a01faff00000500200104000000"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x810) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) madvise$auto(0x0, 0x2003ec, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000002a40)='/proc/self/uid_map\x00', 0x28400, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) read$auto_usbdev_file_operations_usb(r4, &(0x7f0000000180)=""/38, 0x26) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', 0x181880, 0x18) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x101202, 0x0) sendfile$auto(r5, 0x3, 0x0, 0xd) 4.262128322s ago: executing program 3 (id=3019): r0 = socket(0x1d, 0x2, 0x6) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(r0, &(0x7f0000000040)=@can={0x1d, r2, 0xfd}, 0x6a) close_range$auto(0x2, 0x8, 0x0) 4.157832537s ago: executing program 0 (id=3021): close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x2a2d01, 0x150) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) ioctl$auto(r0, 0x2400000, 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/default/ignore_routes_with_linkdown\x00', 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 4.117168721s ago: executing program 3 (id=3022): r0 = socket(0xa, 0x802, 0x3a) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x406, 0x0) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r1, 0xa, 0x0, 0x0) setsockopt$auto(r0, 0x29, 0x21, 0x0, 0x18000113) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, "ede41b087481e75e592316ed5089f6f63b404f907f6cb57712b8d5003ecf9cbb50"}, 0x38}, 0x1, 0x0, 0x0, 0x12}, 0x2000c006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0203, 0x0) ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0x7fffffffffffffff) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) socket(0x2, 0x1, 0x0) getsockopt$auto(0x4, 0x200000000, 0x15, 0xfffffffffffffffc, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000001c0)="31dfed4fd0c2d7561a8bbe7ab920978c1b2dcb7bc5698487563592a62ef2934904bc0fc6dc32fdab3337cd58ae16a91a6dac75bc3621c11894ced44fd3d877f63aa56478fd9e9861f07300dad62e6c4726b4450d19e73abdee40f059c93dc188122895972e8dc6856a1e9032df7fc67e8db71f7d4a9485a68f386f57ff607ecb8c4b8744f60c65a54ae8fb79b7552d7d9196e5ab4305ed0a4e4c67c367d78e1f7e1f37b50adefe71e47f4106635609309da1c5729bfae5b3fb8ffeb0b634187a02c86189d16b4a6ed4abaaa6c1eff69772095300", 0xd4) 3.815323966s ago: executing program 3 (id=3024): r0 = socket(0xa, 0x5, 0x0) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r0, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) close_range$auto(0x2, 0x8, 0x0) 3.349472181s ago: executing program 1 (id=3026): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) write$auto(0x3, 0x0, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/block/parameters/events_dfl_poll_msecs\x00', 0x80002, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) socket(0x11, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000003a872e5b218e033a6c9680040e2cf5114a2930213c3d28ff62e9a7949efffd83cec5894c7849f608afa185c68ff0a8df85743537285f4afec3b3ebcfaf513fdfd175cc65f911c69ca5476fe7d013840c3ab3caeaf439860cfcd97e5e4e1f5272ec9a0fd79e045f2cca6df2f36004a038d4dc626e", @ANYRES16=r4, @ANYBLOB="00022abd7000fcdbdf2512000000080009000600000008000600c30b00000800090000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40840}, 0x4800) socket(0x2c, 0x3, 0x0) socket(0x11, 0x80000, 0x73) close_range$auto(r2, r0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u50x0}) r4 = prctl$auto(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x0, &(0x7f0000000180)=0xfffffff9) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) writev$auto(r5, &(0x7f0000000040)={&(0x7f00000002c0), 0x4e}, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r6 = socket(0x29, 0x2, 0x0) r7 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r7, 0x0, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r7, &(0x7f0000000040)={{0x0, 0x1, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r6, 0x8970, 0x24) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r4, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x14, r1, 0x20c, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008040}, 0x20004000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) 3.195241273s ago: executing program 0 (id=3028): socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x22a01, 0x0) getpid() unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sched_setscheduler$auto(0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="09032abd7000fedbdf251900000067a5db095262b3a087d4cca14eda7a22e18e6a3ccfac03837419120d3baf683ce4fd95039b74b3156ccc89f8461c1f28d0346aae631558c4c6d3a2d18d426c9dddb49c0bf6f09e444e5e0ad7f74158fa48f18603a0869a55c77e608a37390622a4d2d16084ae97eab7614654c26760298b3d4602c2b8850c6fd5e839958f53a3f21d3642a4aac9278697364303d5b1a14921f41c137495a332944c16493dc52fa3ebfc5a05f8c50e32dbff859fb6942a13e2920035a79e150d47399d7bce5de6c4"], 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) sendmsg$auto_NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) close_range$auto(r1, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(r3, 0x0, 0x101d1, 0x3ffffd, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) setgroups$auto(0x0, 0x0) setresgid$auto(0x8, 0x40000402, 0xf4) chmod$auto(&(0x7f0000000000)='.\x00', 0xfffb) setresuid$auto(0xd48d, 0xdc, 0x10) 3.118242673s ago: executing program 2 (id=3029): r0 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r0, 0x29, 0x21, 0x0, 0x18000113) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, "ede41b087481e75e592316ed5089f6f63b404f907f6cb57712b8d5003ecf9cbb50"}, 0x38}, 0x1, 0x0, 0x0, 0x12}, 0x2000c006) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0203, 0x0) ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0x7fffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)='5', 0x1) 2.992715894s ago: executing program 1 (id=3030): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x40000, 0x0) capget$auto(&(0x7f0000000080)={0x33, 0xffffffffffffffff}, &(0x7f00000000c0)={0xffffffff, 0x9}) ioctl$auto_BLKTRACESETUP2(r0, 0xc0481273, &(0x7f0000000100)={"692641ca759b4378c7e234fe5ae24df20955ff438bcb14ab40696024ed812995", 0x80, 0x7, 0xca, 0x5, 0x1, r1}) write$auto(0xca, &(0x7f0000000140)='\x04\x0e\x06\xd5\x89|d\v\x00\x00@\x00\x81\x00\x00\x00\xf6\xf5\x00\xdf\xff\x00', 0x10) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) sysfs$auto(0x2, 0x3c, 0x0) fsopen$auto(0x0, 0x1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x448040, 0x0) 2.835958591s ago: executing program 2 (id=3031): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="2f212cbd7010ca705d845526cc0008000380", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) (fail_nth: 3) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8810) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) 2.546196627s ago: executing program 2 (id=3032): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socketcall$auto(0xa, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) ioctl$auto(0x3, 0xae41, r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x400000000000401, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket(0x2, 0x1, 0x0) socket(0x2, 0x5, 0x0) epoll_create$auto(0x63) capset$auto(0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) epoll_ctl$auto(r2, 0x6, r3, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) unlink$auto(&(0x7f0000000080)='./file0\x00') 2.522736339s ago: executing program 0 (id=3033): r0 = socket(0xa, 0x802, 0x3a) setsockopt$auto(r0, 0x29, 0x21, 0x0, 0x18000113) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x38, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, "ede41b087481e75e592316ed5089f6f63b404f907f6cb57712b8d5003ecf9cbb50"}, 0x38}, 0x1, 0x0, 0x0, 0x12}, 0x2000c006) (fail_nth: 3) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa0203, 0x0) ioctl$auto_FIONREAD(0xffffffffffffffff, 0x541b, 0x7fffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)='5', 0x1) 2.417100614s ago: executing program 3 (id=3034): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x121602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x80, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4604, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/kernel/cad_pid\x00', 0x242, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) write$auto(r2, 0x0, 0x40100000a3d9) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000080)) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000)='-7', 0xfffffc49) mmap$auto_snd_pcm_f_ops_pcm(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000003, 0x8010, 0xffffffffffffffff, 0xfffffffffffffffc) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400008, 0x800000e3, 0x9b71, r0, 0x8000) 2.174461255s ago: executing program 2 (id=3035): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x200007, 0x8) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x20200, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)={0x780, 0x0, 0x4, 0x4070bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x769, 0x3, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="94aec91d7127b0187b358bf012ea3fa85e5dfb5696fa9a381344040d45085a8a69adc822fc599870c78bc48a261e88c2a8e4252f5b6377ca9894d967bd8b9851c65c955619334a13fa37f8c8f55e0adcef5041", @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cae6daa2115d5475b94546c1a59eb39aa676883a2aa6b28fb3062af542826e47735db20ad80a46b2bedeb92ba49415782c2be5e23a00749d7d5984cb2ea98aec410d3937eff248eb127beba633e6ba620688ef86fbda6596882640df248bcfad5c84ade6a9c8107745e7f4916025aaaa278c6c4553ac98a49d6f97a073288f824e828ba570fd93804c341cab6751e8e9022b70b6cf6ee367a5d79157bed4df7f15d1b07c73864e8cc252d672e4a54f46aa28f0b2de5621025ed47436d20b3e393a1b6f2ff6168339708b", @nested={0x62c, 0x49, 0x0, 0x1, [@nested={0x4, 0x23}, @nested={0x624, 0x36, 0x0, 0x1, [@nested={0x8e, 0xb8, 0x0, 0x1, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x6e}, @nested={0x4, 0x85}, @generic="7b2876790de819996d0bae314ac3b6988f4d1cc8ba44ffff000000000000c6608e2e7da2e2829c490a9e589e926aa4bc18efa0d44f083ad4797904f5ad5091e8cefb93264a2f17c4390f340e429362a9406e793e452a51aaa5e12aa5376ad64a84a1fb9b47e2345dff0000000000"]}, @nested={0x58f, 0x29, 0x0, 0x1, [@typed={0x8, 0x163, 0x0, 0x0, @uid}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0x53d}, @generic="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"]}]}]}]}]}, 0x780}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) (fail_nth: 3) madvise$auto(0x0, 0x200204, 0x15) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0x9, 0x15) madvise$auto(0x6abb, 0x8000000000000001, 0x9) 1.598049203s ago: executing program 0 (id=3036): syz_clone3(&(0x7f00000011c0)={0x10000, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100), {0x1e}, &(0x7f0000000140)=""/51, 0x33, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=[0xffffffffffffffff], 0x1}, 0x58) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) eventfd$auto(0x8c) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd13\x00', 0x14f602, 0x0) close_range$auto(0x2, 0x8, 0x0) adjtimex$auto(0x0) ioctl$auto(0x3, 0x4040ae79, r1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xc040aed4, 0x38) waitid$auto(0x2, r0, &(0x7f0000001240)={@_si_pad}, 0x1, &(0x7f0000001380)={{0x7, 0x100}, {0x7, 0x7c86}, 0xfffffffffffff801, 0x8, 0xfffffffffffffffb, 0xffffffff00000000, 0x6, 0x1, 0x1b84e235, 0x5, 0x1, 0x5, 0x8, 0x1, 0x1, 0x9}) r3 = openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000000000), 0x20140, 0x0) ioctl$auto_IOCTL_STOP_ACCEL_DEV(r3, 0x40096101, &(0x7f0000000040)={@config_section=0x0, 0xf6}) 561.931272ms ago: executing program 1 (id=3037): close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x2a2d01, 0x150) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) ioctl$auto(r0, 0x2400000, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 561.593976ms ago: executing program 2 (id=3038): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x200007, 0x8) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x20200, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)={0x780, 0x0, 0x4, 0x4070bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x769, 0x3, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="94aec91d7127b0187b358bf012ea3fa85e5dfb5696fa9a381344040d45085a8a69adc822fc599870c78bc48a261e88c2a8e4252f5b6377ca9894d967bd8b9851c65c955619334a13fa37f8c8f55e0adcef5041", @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cae6daa2115d5475b94546c1a59eb39aa676883a2aa6b28fb3062af542826e47735db20ad80a46b2bedeb92ba49415782c2be5e23a00749d7d5984cb2ea98aec410d3937eff248eb127beba633e6ba620688ef86fbda6596882640df248bcfad5c84ade6a9c8107745e7f4916025aaaa278c6c4553ac98a49d6f97a073288f824e828ba570fd93804c341cab6751e8e9022b70b6cf6ee367a5d79157bed4df7f15d1b07c73864e8cc252d672e4a54f46aa28f0b2de5621025ed47436d20b3e393a1b6f2ff6168339708b", @nested={0x62c, 0x49, 0x0, 0x1, [@nested={0x4, 0x23}, @nested={0x624, 0x36, 0x0, 0x1, [@nested={0x8e, 0xb8, 0x0, 0x1, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x6e}, @nested={0x4, 0x85}, @generic="7b2876790de819996d0bae314ac3b6988f4d1cc8ba44ffff000000000000c6608e2e7da2e2829c490a9e589e926aa4bc18efa0d44f083ad4797904f5ad5091e8cefb93264a2f17c4390f340e429362a9406e793e452a51aaa5e12aa5376ad64a84a1fb9b47e2345dff0000000000"]}, @nested={0x58f, 0x29, 0x0, 0x1, [@typed={0x8, 0x163, 0x0, 0x0, @uid}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0x53d}, @generic="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"]}]}]}]}]}, 0x780}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) madvise$auto(0x0, 0x200204, 0x15) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0x9, 0x15) (fail_nth: 3) madvise$auto(0x6abb, 0x8000000000000001, 0x9) 237.011402ms ago: executing program 1 (id=3039): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0x200007, 0x8) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000380), 0x20200, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)={0x780, 0x0, 0x4, 0x4070bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x769, 0x3, 0x0, 0x1, [@typed={0x14, 0x53, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @generic="94aec91d7127b0187b358bf012ea3fa85e5dfb5696fa9a381344040d45085a8a69adc822fc599870c78bc48a261e88c2a8e4252f5b6377ca9894d967bd8b9851c65c955619334a13fa37f8c8f55e0adcef5041", @typed={0x8, 0xa9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @generic="cae6daa2115d5475b94546c1a59eb39aa676883a2aa6b28fb3062af542826e47735db20ad80a46b2bedeb92ba49415782c2be5e23a00749d7d5984cb2ea98aec410d3937eff248eb127beba633e6ba620688ef86fbda6596882640df248bcfad5c84ade6a9c8107745e7f4916025aaaa278c6c4553ac98a49d6f97a073288f824e828ba570fd93804c341cab6751e8e9022b70b6cf6ee367a5d79157bed4df7f15d1b07c73864e8cc252d672e4a54f46aa28f0b2de5621025ed47436d20b3e393a1b6f2ff6168339708b", @nested={0x62c, 0x49, 0x0, 0x1, [@nested={0x4, 0x23}, @nested={0x624, 0x36, 0x0, 0x1, [@nested={0x8e, 0xb8, 0x0, 0x1, [@typed={0x14, 0xfd, 0x0, 0x0, @ipv6=@private1}, @nested={0x4, 0x6e}, @nested={0x4, 0x85}, @generic="7b2876790de819996d0bae314ac3b6988f4d1cc8ba44ffff000000000000c6608e2e7da2e2829c490a9e589e926aa4bc18efa0d44f083ad4797904f5ad5091e8cefb93264a2f17c4390f340e429362a9406e793e452a51aaa5e12aa5376ad64a84a1fb9b47e2345dff0000000000"]}, @nested={0x58f, 0x29, 0x0, 0x1, [@typed={0x8, 0x163, 0x0, 0x0, @uid}, @typed={0x8, 0xc, 0x0, 0x0, @u32=0x53d}, @generic="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"]}]}]}]}]}, 0x780}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x2, 0x8}, 0x800}, 0x10a, 0x8, 0x0) madvise$auto(0x0, 0x200204, 0x15) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0x9, 0x15) madvise$auto(0x6abb, 0x8000000000000001, 0x9) 236.618792ms ago: executing program 2 (id=3040): r0 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000140), 0x40000, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) timer_create$auto(0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0040, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) (async, rerun: 32) write$auto(r1, &(0x7f0000000040)=' 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1198.748115][T22163] RSP: 002b:00007fdf41a3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 1198.748188][T22163] RAX: ffffffffffffffda RBX: 00007fdf40e15fa0 RCX: 00007fdf40b9cdd9 [ 1198.748207][T22163] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000200000000100 [ 1198.748225][T22163] RBP: 00007fdf41a3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1198.748242][T22163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1198.748260][T22163] R13: 00007fdf40e16038 R14: 00007fdf40e15fa0 R15: 00007ffd8f1c28b8 [ 1198.748301][T22163] [ 1199.295874][T22154] ubi0: attaching mtd0 [ 1199.363774][T22154] ubi0: scanning is finished [ 1199.376198][T22154] ubi0: empty MTD device detected [ 1199.531866][T22175] FAULT_INJECTION: forcing a failure. [ 1199.531866][T22175] name failslab, interval 1, probability 0, space 0, times 0 [ 1199.638610][T22175] CPU: 1 UID: 0 PID: 22175 Comm: syz.1.2703 Not tainted syzkaller #0 PREEMPT(full) [ 1199.638656][T22175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1199.638675][T22175] Call Trace: [ 1199.638685][T22175] [ 1199.638697][T22175] dump_stack_lvl+0x100/0x190 [ 1199.638738][T22175] should_fail_ex.cold+0x5/0xa [ 1199.638777][T22175] ? sk_prot_alloc+0x10b/0x2a0 [ 1199.638829][T22175] should_failslab+0xc2/0x120 [ 1199.638865][T22175] __kmalloc_noprof+0xe0/0x850 [ 1199.638920][T22175] sk_prot_alloc+0x10b/0x2a0 [ 1199.638964][T22175] sk_alloc+0x36/0xe80 [ 1199.639013][T22175] packet_create+0x127/0x8e0 [ 1199.639054][T22175] __sock_create+0x339/0x860 [ 1199.639102][T22175] __sys_socket+0x14d/0x260 [ 1199.639143][T22175] ? __pfx___sys_socket+0x10/0x10 [ 1199.639191][T22175] ? ksys_write+0x1ac/0x250 [ 1199.639234][T22175] __x64_sys_socket+0x72/0xb0 [ 1199.639273][T22175] ? lockdep_hardirqs_on+0x78/0x100 [ 1199.639312][T22175] do_syscall_64+0x10b/0xf80 [ 1199.639347][T22175] ? clear_bhb_loop+0x40/0x90 [ 1199.639387][T22175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1199.639419][T22175] RIP: 0033:0x7fdf40b9cdd9 [ 1199.639444][T22175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1199.639472][T22175] RSP: 002b:00007fdf41a1b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1199.639501][T22175] RAX: ffffffffffffffda RBX: 00007fdf40e16090 RCX: 00007fdf40b9cdd9 [ 1199.639521][T22175] RDX: 0000000000000300 RSI: 0000000000080003 RDI: 0000000000000011 [ 1199.639540][T22175] RBP: 00007fdf40c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1199.639558][T22175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1199.639574][T22175] R13: 00007fdf40e16128 R14: 00007fdf40e16090 R15: 00007ffd8f1c28b8 [ 1199.639612][T22175] [ 1200.154301][T22154] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 1201.168485][T22210] block2mtd: illegal erase size [ 1201.184267][T22206] netlink: 206 bytes leftover after parsing attributes in process `syz.0.2712'. [ 1202.247494][T22231] FAULT_INJECTION: forcing a failure. [ 1202.247494][T22231] name failslab, interval 1, probability 0, space 0, times 0 [ 1202.281869][T22231] CPU: 1 UID: 0 PID: 22231 Comm: syz.3.2719 Not tainted syzkaller #0 PREEMPT(full) [ 1202.281894][T22231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1202.281905][T22231] Call Trace: [ 1202.281912][T22231] [ 1202.281919][T22231] dump_stack_lvl+0x100/0x190 [ 1202.281945][T22231] should_fail_ex.cold+0x5/0xa [ 1202.281969][T22231] should_failslab+0xc2/0x120 [ 1202.281991][T22231] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1202.282020][T22231] ? vm_area_alloc+0x1f/0x160 [ 1202.282046][T22231] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1202.282076][T22231] vm_area_alloc+0x1f/0x160 [ 1202.282110][T22231] __mmap_region+0x104d/0x2da0 [ 1202.282143][T22231] ? __pfx___mmap_region+0x10/0x10 [ 1202.282176][T22231] ? find_held_lock+0x2b/0x80 [ 1202.282199][T22231] ? process_measurement+0x4c8/0x2350 [ 1202.282226][T22231] ? process_measurement+0x4c8/0x2350 [ 1202.282261][T22231] ? process_measurement+0x1f4/0x2350 [ 1202.282290][T22231] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1202.282309][T22231] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1202.282339][T22231] ? __lock_acquire+0x4a5/0x2630 [ 1202.282367][T22231] ? find_held_lock+0x2b/0x80 [ 1202.282390][T22231] ? is_bpf_text_address+0x8a/0x1a0 [ 1202.282448][T22231] ? __pfx__kstrtoull+0x10/0x10 [ 1202.282477][T22231] mmap_region+0x35d/0x620 [ 1202.282494][T22231] ? rcu_is_watching+0x12/0xc0 [ 1202.282516][T22231] ? __pfx_mmap_region+0x10/0x10 [ 1202.282535][T22231] ? cap_mmap_addr+0x4b/0x120 [ 1202.282561][T22231] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1202.282578][T22231] ? security_mmap_addr+0x71/0x1e0 [ 1202.282598][T22231] ? __get_unmapped_area+0x255/0x3e0 [ 1202.282624][T22231] do_mmap+0xc63/0x12f0 [ 1202.282650][T22231] ? __pfx_do_mmap+0x10/0x10 [ 1202.282673][T22231] ? __pfx_down_write_killable+0x10/0x10 [ 1202.282704][T22231] vm_mmap_pgoff+0x29e/0x470 [ 1202.282731][T22231] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1202.282757][T22231] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1202.282782][T22231] ? __fget_files+0x215/0x3d0 [ 1202.282804][T22231] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1202.282833][T22231] ksys_mmap_pgoff+0xe4/0x610 [ 1202.282862][T22231] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1202.282893][T22231] ? fput+0x79/0x100 [ 1202.282930][T22231] ? ksys_write+0x1ac/0x250 [ 1202.282959][T22231] ? __pfx_ksys_write+0x10/0x10 [ 1202.282982][T22231] __x64_sys_mmap+0x125/0x190 [ 1202.283005][T22231] do_syscall_64+0x10b/0xf80 [ 1202.283026][T22231] ? clear_bhb_loop+0x40/0x90 [ 1202.283054][T22231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1202.283083][T22231] RIP: 0033:0x7faa78d9cdd9 [ 1202.283114][T22231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1202.283140][T22231] RSP: 002b:00007faa79cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1202.283163][T22231] RAX: ffffffffffffffda RBX: 00007faa79015fa0 RCX: 00007faa78d9cdd9 [ 1202.283175][T22231] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1202.283186][T22231] RBP: 00007faa79cde090 R08: 0000000000000002 R09: 0000000000008000 [ 1202.283197][T22231] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 1202.283208][T22231] R13: 00007faa79016038 R14: 00007faa79015fa0 R15: 00007ffd0625d638 [ 1202.283231][T22231] [ 1202.781097][T18476] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 1203.659385][T22243] FAULT_INJECTION: forcing a failure. [ 1203.659385][T22243] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.683107][T22243] CPU: 0 UID: 0 PID: 22243 Comm: syz.0.2721 Not tainted syzkaller #0 PREEMPT(full) [ 1203.683147][T22243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1203.683162][T22243] Call Trace: [ 1203.683172][T22243] [ 1203.683183][T22243] dump_stack_lvl+0x100/0x190 [ 1203.683222][T22243] should_fail_ex.cold+0x5/0xa [ 1203.683259][T22243] ? tomoyo_encode2+0xfb/0x3c0 [ 1203.683292][T22243] should_failslab+0xc2/0x120 [ 1203.683326][T22243] __kmalloc_noprof+0xe0/0x850 [ 1203.683371][T22243] ? d_absolute_path+0x136/0x1b0 [ 1203.683424][T22243] tomoyo_encode2+0xfb/0x3c0 [ 1203.683466][T22243] tomoyo_encode+0x29/0x50 [ 1203.683500][T22243] tomoyo_realpath_from_path+0x18c/0x690 [ 1203.683544][T22243] tomoyo_path_number_perm+0x23c/0x580 [ 1203.683572][T22243] ? tomoyo_path_number_perm+0x22e/0x580 [ 1203.683604][T22243] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1203.683675][T22243] ? find_held_lock+0x2b/0x80 [ 1203.683712][T22243] ? __fget_files+0x215/0x3d0 [ 1203.683743][T22243] ? hook_file_ioctl_common+0x149/0x410 [ 1203.683777][T22243] ? __fget_files+0x215/0x3d0 [ 1203.683817][T22243] ? __fget_files+0x21f/0x3d0 [ 1203.683857][T22243] security_file_ioctl+0xd3/0x230 [ 1203.683898][T22243] __x64_sys_ioctl+0xb7/0x210 [ 1203.683931][T22243] do_syscall_64+0x10b/0xf80 [ 1203.683965][T22243] ? clear_bhb_loop+0x40/0x90 [ 1203.684002][T22243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.684033][T22243] RIP: 0033:0x7f98c3d9cdd9 [ 1203.684058][T22243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.684085][T22243] RSP: 002b:00007f98c4c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1203.684114][T22243] RAX: ffffffffffffffda RBX: 00007f98c4015fa0 RCX: 00007f98c3d9cdd9 [ 1203.684132][T22243] RDX: 0000200000000300 RSI: 00000000802c550a RDI: 0000000000000003 [ 1203.684150][T22243] RBP: 00007f98c4c21090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.684167][T22243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.684184][T22243] R13: 00007f98c4016038 R14: 00007f98c4015fa0 R15: 00007ffd31b40468 [ 1203.684224][T22243] [ 1203.685921][T22243] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1203.846359][T22248] FAULT_INJECTION: forcing a failure. [ 1203.846359][T22248] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.977514][T22248] CPU: 1 UID: 0 PID: 22248 Comm: syz.3.2724 Not tainted syzkaller #0 PREEMPT(full) [ 1203.977555][T22248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1203.977572][T22248] Call Trace: [ 1203.977581][T22248] [ 1203.977592][T22248] dump_stack_lvl+0x100/0x190 [ 1203.977631][T22248] should_fail_ex.cold+0x5/0xa [ 1203.977667][T22248] ? tomoyo_encode2+0xfb/0x3c0 [ 1203.977699][T22248] should_failslab+0xc2/0x120 [ 1203.977732][T22248] __kmalloc_noprof+0xe0/0x850 [ 1203.977776][T22248] ? d_absolute_path+0x136/0x1b0 [ 1203.977827][T22248] tomoyo_encode2+0xfb/0x3c0 [ 1203.977867][T22248] tomoyo_encode+0x29/0x50 [ 1203.977899][T22248] tomoyo_realpath_from_path+0x18c/0x690 [ 1203.977943][T22248] tomoyo_path_number_perm+0x23c/0x580 [ 1203.977971][T22248] ? tomoyo_path_number_perm+0x22e/0x580 [ 1203.978003][T22248] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1203.978073][T22248] ? find_held_lock+0x2b/0x80 [ 1203.978109][T22248] ? __fget_files+0x215/0x3d0 [ 1203.978148][T22248] ? hook_file_ioctl_common+0x149/0x410 [ 1203.978176][T22248] ? __fget_files+0x215/0x3d0 [ 1203.978214][T22248] ? __fget_files+0x21f/0x3d0 [ 1203.978254][T22248] security_file_ioctl+0xd3/0x230 [ 1203.978290][T22248] __x64_sys_ioctl+0xb7/0x210 [ 1203.978320][T22248] do_syscall_64+0x10b/0xf80 [ 1203.978353][T22248] ? clear_bhb_loop+0x40/0x90 [ 1203.978388][T22248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.978417][T22248] RIP: 0033:0x7faa78d9cdd9 [ 1203.978441][T22248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.978466][T22248] RSP: 002b:00007faa79cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1203.978494][T22248] RAX: ffffffffffffffda RBX: 00007faa79015fa0 RCX: 00007faa78d9cdd9 [ 1203.978513][T22248] RDX: 0000000000000000 RSI: 00000000c0046209 RDI: 0000000000000003 [ 1203.978530][T22248] RBP: 00007faa79cde090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.978547][T22248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.978564][T22248] R13: 00007faa79016038 R14: 00007faa79015fa0 R15: 00007ffd0625d638 [ 1203.978604][T22248] [ 1204.233800][T22248] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1204.260937][T22248] binder: 22247:22248 ioctl c0046209 0 returned -22 [ 1205.334594][T22268] vivid-007: ================= START STATUS ================= [ 1205.379955][T22268] vivid-007: Generate PTS: true [ 1205.405393][T22268] vivid-007: Generate SCR: true [ 1205.426891][T22268] tpg source WxH: 320x240 (Y'CbCr) [ 1205.440718][T22268] tpg field: 1 [ 1205.454346][T22268] tpg crop: (0,0)/320x240 [ 1205.476179][T22268] tpg compose: (0,0)/320x240 [ 1205.489110][T22271] FAULT_INJECTION: forcing a failure. [ 1205.489110][T22271] name failslab, interval 1, probability 0, space 0, times 0 [ 1205.516187][T22273] FAULT_INJECTION: forcing a failure. [ 1205.516187][T22273] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1205.521033][T22268] tpg colorspace: 8 [ 1205.544423][T22273] CPU: 1 UID: 0 PID: 22273 Comm: syz.3.2731 Not tainted syzkaller #0 PREEMPT(full) [ 1205.544462][T22273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1205.544477][T22273] Call Trace: [ 1205.544485][T22273] [ 1205.544497][T22273] dump_stack_lvl+0x100/0x190 [ 1205.544536][T22273] should_fail_ex.cold+0x5/0xa [ 1205.544575][T22273] _copy_to_iter+0x1f3/0x1720 [ 1205.544630][T22273] ? __pfx__copy_to_iter+0x10/0x10 [ 1205.544675][T22273] ? kernfs_seq_stop+0xcd/0x120 [ 1205.544723][T22273] ? kernfs_put_active+0x93/0xe0 [ 1205.544763][T22273] seq_read_iter+0xdab/0x1270 [ 1205.544812][T22273] kernfs_fop_read_iter+0x46c/0x610 [ 1205.544855][T22273] ? rw_verify_area+0xce/0x6d0 [ 1205.544892][T22273] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1205.544936][T22273] vfs_read+0x825/0xb30 [ 1205.544973][T22273] ? __pfx_vfs_read+0x10/0x10 [ 1205.545032][T22273] ksys_read+0x12a/0x250 [ 1205.545064][T22273] ? __pfx_ksys_read+0x10/0x10 [ 1205.545099][T22273] ? rcu_is_watching+0x12/0xc0 [ 1205.545137][T22273] do_syscall_64+0x10b/0xf80 [ 1205.545167][T22273] ? clear_bhb_loop+0x40/0x90 [ 1205.545205][T22273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.545234][T22273] RIP: 0033:0x7faa78d9cdd9 [ 1205.545258][T22273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.545285][T22273] RSP: 002b:00007faa79cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1205.545313][T22273] RAX: ffffffffffffffda RBX: 00007faa79015fa0 RCX: 00007faa78d9cdd9 [ 1205.545332][T22273] RDX: 0000000000000005 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1205.545349][T22273] RBP: 00007faa79cde090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.545366][T22273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.545383][T22273] R13: 00007faa79016038 R14: 00007faa79015fa0 R15: 00007ffd0625d638 [ 1205.545425][T22273] [ 1205.863980][T22268] tpg transfer function: 0/0 [ 1205.888384][T22268] tpg Y'CbCr encoding: 0/0 [ 1205.906060][T22271] CPU: 0 UID: 0 PID: 22271 Comm: syz.1.2730 Not tainted syzkaller #0 PREEMPT(full) [ 1205.906102][T22271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1205.906119][T22271] Call Trace: [ 1205.906139][T22271] [ 1205.906150][T22271] dump_stack_lvl+0x100/0x190 [ 1205.906190][T22271] should_fail_ex.cold+0x5/0xa [ 1205.906227][T22271] ? lsm_blob_alloc+0x68/0x90 [ 1205.906263][T22271] should_failslab+0xc2/0x120 [ 1205.906297][T22271] __kmalloc_noprof+0xe0/0x850 [ 1205.906341][T22271] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1205.906383][T22271] lsm_blob_alloc+0x68/0x90 [ 1205.906421][T22271] security_prepare_creds+0x2d/0x290 [ 1205.906459][T22271] prepare_creds+0x5d6/0x950 [ 1205.906495][T22271] __do_sys_landlock_restrict_self+0x14c/0x9e0 [ 1205.906540][T22271] ? rcu_is_watching+0x12/0xc0 [ 1205.906581][T22271] do_syscall_64+0x10b/0xf80 [ 1205.906616][T22271] ? clear_bhb_loop+0x40/0x90 [ 1205.906653][T22271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1205.906684][T22271] RIP: 0033:0x7fdf40b9cdd9 [ 1205.906709][T22271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1205.906736][T22271] RSP: 002b:00007fdf419fa028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1205.906764][T22271] RAX: ffffffffffffffda RBX: 00007fdf40e16180 RCX: 00007fdf40b9cdd9 [ 1205.906784][T22271] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000000 [ 1205.906801][T22271] RBP: 00007fdf419fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1205.906819][T22271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1205.906836][T22271] R13: 00007fdf40e16218 R14: 00007fdf40e16180 R15: 00007ffd8f1c28b8 [ 1205.906876][T22271] [ 1205.907062][T22268] tpg quantization: 0/0 [ 1206.106834][T22268] tpg RGB range: 0/2 [ 1206.128412][T22268] vivid-007: ================== END STATUS ================== [ 1206.148143][T22276] vivid-007: ================= START STATUS ================= [ 1206.182161][T22276] vivid-007: Generate PTS: true [ 1206.202128][T22276] vivid-007: Generate SCR: true [ 1206.223272][T22276] tpg source WxH: 320x240 (Y'CbCr) [ 1206.252829][T22276] tpg field: 1 [ 1206.284453][T22276] tpg crop: (0,0)/320x240 [ 1206.310268][T22276] tpg compose: (0,0)/320x240 [ 1206.339291][T22276] tpg colorspace: 8 [ 1206.354672][T22276] tpg transfer function: 0/0 [ 1206.363588][T22276] tpg Y'CbCr encoding: 0/0 [ 1206.375575][T22276] tpg quantization: 0/0 [ 1206.385707][T22276] tpg RGB range: 0/2 [ 1206.394524][T22276] vivid-007: ================== END STATUS ================== [ 1206.406049][T22281] vivid-007: ================= START STATUS ================= [ 1206.430640][T22281] vivid-007: Generate PTS: true [ 1206.446308][T22281] vivid-007: Generate SCR: true [ 1206.463127][T22281] tpg source WxH: 320x240 (Y'CbCr) [ 1206.471695][T22281] tpg field: 1 [ 1206.475471][T22281] tpg crop: (0,0)/320x240 [ 1206.544360][T22281] tpg compose: (0,0)/320x240 [ 1206.549315][T22281] tpg colorspace: 8 [ 1206.559239][T22281] tpg transfer function: 0/0 [ 1206.582139][T22281] tpg Y'CbCr encoding: 0/0 [ 1206.602001][T22281] tpg quantization: 0/0 [ 1206.620258][T22281] tpg RGB range: 0/2 [ 1206.636014][T22281] vivid-007: ================== END STATUS ================== [ 1206.765274][T18476] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1206.985612][T22288] capability: warning: `syz.0.2734' uses 32-bit capabilities (legacy support in use) [ 1208.024394][T22310] ubi0: attaching mtd0 [ 1208.069582][T22310] ubi0: scanning is finished [ 1208.384354][T22310] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1208.435042][T22319] block2mtd: illegal erase size [ 1208.440506][T22310] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1208.482235][T22310] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1208.518208][T22310] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1208.569900][T22310] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1208.646381][T22310] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1208.723914][T22310] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1613767876 [ 1208.868568][T22310] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1208.959062][T22317] ubi0: background thread "ubi_bgt0d" started, PID 22317 [ 1208.993858][T22312] ubi0: detaching mtd0 [ 1209.056097][T22312] ubi0: mtd0 is detached [ 1210.391913][T18476] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1210.485329][T22352] FAULT_INJECTION: forcing a failure. [ 1210.485329][T22352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1210.558366][T22352] CPU: 1 UID: 0 PID: 22352 Comm: syz.0.2751 Not tainted syzkaller #0 PREEMPT(full) [ 1210.558404][T22352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1210.558418][T22352] Call Trace: [ 1210.558427][T22352] [ 1210.558436][T22352] dump_stack_lvl+0x100/0x190 [ 1210.558470][T22352] should_fail_ex.cold+0x5/0xa [ 1210.558503][T22352] _copy_to_user+0x32/0xd0 [ 1210.558544][T22352] simple_read_from_buffer+0xcb/0x170 [ 1210.558576][T22352] proc_fail_nth_read+0x1af/0x230 [ 1210.558613][T22352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1210.558654][T22352] ? rw_verify_area+0xce/0x6d0 [ 1210.558677][T22352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1210.558714][T22352] vfs_read+0x1e4/0xb30 [ 1210.558765][T22352] ? __pfx_vfs_read+0x10/0x10 [ 1210.558791][T22352] ? __fget_files+0x215/0x3d0 [ 1210.558827][T22352] ? __fget_files+0x21f/0x3d0 [ 1210.558873][T22352] ksys_read+0x12a/0x250 [ 1210.558899][T22352] ? __pfx_ksys_read+0x10/0x10 [ 1210.558928][T22352] ? rcu_is_watching+0x12/0xc0 [ 1210.558962][T22352] do_syscall_64+0x10b/0xf80 [ 1210.558992][T22352] ? clear_bhb_loop+0x40/0x90 [ 1210.559022][T22352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1210.559047][T22352] RIP: 0033:0x7f98c3d5d60e [ 1210.559068][T22352] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1210.559092][T22352] RSP: 002b:00007f98c4c20fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1210.559116][T22352] RAX: ffffffffffffffda RBX: 00007f98c4c216c0 RCX: 00007f98c3d5d60e [ 1210.559132][T22352] RDX: 000000000000000f RSI: 00007f98c4c210a0 RDI: 0000000000000009 [ 1210.559145][T22352] RBP: 00007f98c4c21090 R08: 0000000000000000 R09: 0000000000000000 [ 1210.559159][T22352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1210.559171][T22352] R13: 00007f98c4016038 R14: 00007f98c4015fa0 R15: 00007ffd31b40468 [ 1210.559203][T22352] [ 1211.194494][T22359] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2752'. “ÇIãjníüú¡9»_UÏ´îVQ8Àñj@:Un M½×%U¬x[ 1213.812168][T22405] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2762'. [ 1215.927359][T22431] block2mtd: illegal erase size [ 1217.013061][T22450] random: crng reseeded on system resumption [ 1217.350186][T22452] zswap: compressor not available [ 1217.390695][T22461] [U] ^R [ 1217.945128][T22467] FAULT_INJECTION: forcing a failure. [ 1217.945128][T22467] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.042862][T22467] CPU: 1 UID: 0 PID: 22467 Comm: syz.0.2776 Not tainted syzkaller #0 PREEMPT(full) [ 1218.042903][T22467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1218.042920][T22467] Call Trace: [ 1218.042930][T22467] [ 1218.042940][T22467] dump_stack_lvl+0x100/0x190 [ 1218.042984][T22467] should_fail_ex.cold+0x5/0xa [ 1218.043021][T22467] ? do_handle_open+0x57d/0xce0 [ 1218.043060][T22467] should_failslab+0xc2/0x120 [ 1218.043092][T22467] __kmalloc_noprof+0xe0/0x850 [ 1218.043134][T22467] ? bpf_lsm_capable+0x9/0x10 [ 1218.043165][T22467] ? security_capable+0x80/0x260 [ 1218.043211][T22467] do_handle_open+0x57d/0xce0 [ 1218.043250][T22467] ? __fget_files+0x21f/0x3d0 [ 1218.043285][T22467] ? __pfx_do_handle_open+0x10/0x10 [ 1218.043333][T22467] ? ksys_write+0x1ac/0x250 [ 1218.043377][T22467] ? do_syscall_64+0x10b/0xf80 [ 1218.043410][T22467] do_syscall_64+0x10b/0xf80 [ 1218.043440][T22467] ? clear_bhb_loop+0x40/0x90 [ 1218.043473][T22467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.043502][T22467] RIP: 0033:0x7f98c3d9cdd9 [ 1218.043525][T22467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.043550][T22467] RSP: 002b:00007f98c4c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 1218.043576][T22467] RAX: ffffffffffffffda RBX: 00007f98c4015fa0 RCX: 00007f98c3d9cdd9 [ 1218.043594][T22467] RDX: 0000000000000006 RSI: 0000200000001280 RDI: 0000000000000003 [ 1218.043610][T22467] RBP: 00007f98c4c21090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.043627][T22467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.043643][T22467] R13: 00007f98c4016038 R14: 00007f98c4015fa0 R15: 00007ffd31b40468 [ 1218.043681][T22467] [ 1218.478722][T18476] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1220.121222][T22491] can: request_module (can-proto-0) failed. [ 1221.134770][T22509] [U] ^R [ 1221.768521][T22522] [U] ^R [ 1221.973275][T22528] block2mtd: illegal erase size [ 1222.819633][T22538] block2mtd: illegal erase size [ 1223.258607][T22545] block2mtd: illegal erase size [ 1223.352381][T22545] FAULT_INJECTION: forcing a failure. [ 1223.352381][T22545] name failslab, interval 1, probability 0, space 0, times 0 [ 1223.387591][T22545] CPU: 1 UID: 0 PID: 22545 Comm: syz.2.2793 Not tainted syzkaller #0 PREEMPT(full) [ 1223.387629][T22545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1223.387644][T22545] Call Trace: [ 1223.387653][T22545] [ 1223.387663][T22545] dump_stack_lvl+0x100/0x190 [ 1223.387701][T22545] should_fail_ex.cold+0x5/0xa [ 1223.387736][T22545] ? alloc_pipe_info+0x1ec/0x590 [ 1223.387770][T22545] should_failslab+0xc2/0x120 [ 1223.387804][T22545] __kmalloc_noprof+0xe0/0x850 [ 1223.387857][T22545] alloc_pipe_info+0x1ec/0x590 [ 1223.387897][T22545] splice_direct_to_actor+0x78f/0xa30 [ 1223.387937][T22545] ? __lock_acquire+0x4a5/0x2630 [ 1223.387961][T22545] ? __pfx_direct_splice_actor+0x10/0x10 [ 1223.388011][T22545] ? __pfx_aa_file_perm+0x10/0x10 [ 1223.388048][T22545] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1223.388093][T22545] do_splice_direct+0x174/0x240 [ 1223.388128][T22545] ? __pfx_do_splice_direct+0x10/0x10 [ 1223.388162][T22545] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1223.388195][T22545] ? bpf_lsm_file_permission+0x9/0x10 [ 1223.388222][T22545] ? security_file_permission+0x76/0x210 [ 1223.388279][T22545] ? rw_verify_area+0xce/0x6d0 [ 1223.388311][T22545] do_sendfile+0xadc/0xe20 [ 1223.388351][T22545] ? __pfx_do_sendfile+0x10/0x10 [ 1223.388382][T22545] ? __fget_files+0x21f/0x3d0 [ 1223.388422][T22545] __x64_sys_sendfile64+0x1d8/0x220 [ 1223.388454][T22545] ? ksys_write+0x1ac/0x250 [ 1223.388488][T22545] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1223.388527][T22545] ? rcu_is_watching+0x12/0xc0 [ 1223.388562][T22545] do_syscall_64+0x10b/0xf80 [ 1223.388595][T22545] ? clear_bhb_loop+0x40/0x90 [ 1223.388630][T22545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1223.388659][T22545] RIP: 0033:0x7fb69ad9cdd9 [ 1223.388683][T22545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1223.388709][T22545] RSP: 002b:00007fb69bc63028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1223.388736][T22545] RAX: ffffffffffffffda RBX: 00007fb69b016090 RCX: 00007fb69ad9cdd9 [ 1223.388754][T22545] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1223.388769][T22545] RBP: 00007fb69bc63090 R08: 0000000000000000 R09: 0000000000000000 [ 1223.388786][T22545] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1223.388803][T22545] R13: 00007fb69b016128 R14: 00007fb69b016090 R15: 00007fffa3579a68 [ 1223.388841][T22545] [ 1224.409103][T22544] binder: 22543:22544 ioctl c00c620f 200000000080 returned -22 [ 1224.749286][T22559] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input89 [ 1225.541341][T22575] smpboot: CPU 1 is now offline [ 1226.133014][T22576] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1226.180952][T22576] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1226.238672][T22576] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1226.256588][T22589] netlink: 330 bytes leftover after parsing attributes in process `syz.1.2800'. [ 1226.279848][T22576] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1226.689255][T22599] block2mtd: illegal erase size [ 1226.923676][T22603] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input90 [ 1227.044542][T22604] FAULT_INJECTION: forcing a failure. [ 1227.044542][T22604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1227.155065][T22604] CPU: 0 UID: 0 PID: 22604 Comm: syz.0.2803 Not tainted syzkaller #0 PREEMPT(full) [ 1227.155090][T22604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1227.155101][T22604] Call Trace: [ 1227.155107][T22604] [ 1227.155113][T22604] dump_stack_lvl+0x100/0x190 [ 1227.155138][T22604] should_fail_ex.cold+0x5/0xa [ 1227.155161][T22604] _copy_from_user+0x2e/0xd0 [ 1227.155193][T22604] input_event_from_user+0xb9/0x290 [ 1227.155213][T22604] ? __pfx_input_event_from_user+0x10/0x10 [ 1227.155239][T22604] uinput_write+0xb9f/0xf60 [ 1227.155264][T22604] ? __pfx_uinput_write+0x10/0x10 [ 1227.155288][T22604] ? bpf_lsm_file_permission+0x9/0x10 [ 1227.155305][T22604] ? security_file_permission+0x76/0x210 [ 1227.155327][T22604] ? rw_verify_area+0xce/0x6d0 [ 1227.155346][T22604] ? __pfx_uinput_write+0x10/0x10 [ 1227.155366][T22604] vfs_writev+0x5ea/0xe10 [ 1227.155391][T22604] ? __pfx_vfs_writev+0x10/0x10 [ 1227.155410][T22604] ? find_held_lock+0x2b/0x80 [ 1227.155433][T22604] ? ksys_write+0x190/0x250 [ 1227.155465][T22604] ? __fget_files+0x21f/0x3d0 [ 1227.155492][T22604] ? do_writev+0x28a/0x340 [ 1227.155509][T22604] do_writev+0x28a/0x340 [ 1227.155528][T22604] ? __pfx_do_writev+0x10/0x10 [ 1227.155549][T22604] ? rcu_is_watching+0x12/0xc0 [ 1227.155574][T22604] do_syscall_64+0x10b/0xf80 [ 1227.155596][T22604] ? clear_bhb_loop+0x40/0x90 [ 1227.155618][T22604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1227.155637][T22604] RIP: 0033:0x7f98c3d9cdd9 [ 1227.155653][T22604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1227.155675][T22604] RSP: 002b:00007f98c4bdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1227.155700][T22604] RAX: ffffffffffffffda RBX: 00007f98c4016180 RCX: 00007f98c3d9cdd9 [ 1227.155711][T22604] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000003 [ 1227.155722][T22604] RBP: 00007f98c4bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1227.155732][T22604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1227.155743][T22604] R13: 00007f98c4016218 R14: 00007f98c4016180 R15: 00007ffd31b40468 [ 1227.155766][T22604] [ 1228.199081][T18476] Bluetooth: hci0: command 0x0c1a tx timeout [ 1228.205216][T14772] Bluetooth: hci4: command 0x0c1a tx timeout [ 1228.278424][T14772] Bluetooth: hci1: command 0x0c1a tx timeout [ 1228.359452][T14772] Bluetooth: hci3: command 0x0c1a tx timeout [ 1228.693263][T22613] vivid-007: ================= START STATUS ================= [ 1228.790390][T22613] vivid-007: Generate PTS: true [ 1228.877307][T22613] vivid-007: Generate SCR: true [ 1228.934734][T22613] tpg source WxH: 320x240 (Y'CbCr) [ 1228.975774][T22613] tpg field: 1 [ 1229.013671][T22613] tpg crop: (0,0)/320x240 [ 1229.063196][T22613] tpg compose: (0,0)/320x240 [ 1229.125463][T22613] tpg colorspace: 8 [ 1229.131480][T22619] [U] ^R [ 1229.178111][T22613] tpg transfer function: 0/0 [ 1229.235045][T22613] tpg Y'CbCr encoding: 0/0 [ 1229.281944][T22613] tpg quantization: 0/0 [ 1229.336965][T22613] tpg RGB range: 0/2 [ 1229.393217][T22613] vivid-007: ================== END STATUS ================== [ 1229.428780][T22629] FAULT_INJECTION: forcing a failure. [ 1229.428780][T22629] name failslab, interval 1, probability 0, space 0, times 0 [ 1229.485046][T22629] CPU: 0 UID: 0 PID: 22629 Comm: syz.0.2810 Not tainted syzkaller #0 PREEMPT(full) [ 1229.485071][T22629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1229.485081][T22629] Call Trace: [ 1229.485087][T22629] [ 1229.485094][T22629] dump_stack_lvl+0x100/0x190 [ 1229.485119][T22629] should_fail_ex.cold+0x5/0xa [ 1229.485143][T22629] should_failslab+0xc2/0x120 [ 1229.485164][T22629] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1229.485194][T22629] ? security_inode_alloc+0x3b/0x2c0 [ 1229.485223][T22629] ? lockdep_init_map_type+0x5c/0x250 [ 1229.485244][T22629] security_inode_alloc+0x3b/0x2c0 [ 1229.485274][T22629] inode_init_always_gfp+0xcc0/0x1000 [ 1229.485301][T22629] alloc_inode+0x8e/0x250 [ 1229.485329][T22629] sock_alloc+0x44/0x280 [ 1229.485348][T22629] ? security_socket_create+0x7f/0x250 [ 1229.485377][T22629] __sock_create+0xc2/0x860 [ 1229.485404][T22629] __sys_socket+0x14d/0x260 [ 1229.485428][T22629] ? fput+0x79/0x100 [ 1229.485452][T22629] ? __pfx___sys_socket+0x10/0x10 [ 1229.485476][T22629] ? ksys_write+0x1ac/0x250 [ 1229.485500][T22629] ? __pfx_ksys_write+0x10/0x10 [ 1229.485525][T22629] __x64_sys_socket+0x72/0xb0 [ 1229.485549][T22629] ? lockdep_hardirqs_on+0x78/0x100 [ 1229.485572][T22629] do_syscall_64+0x10b/0xf80 [ 1229.485594][T22629] ? clear_bhb_loop+0x40/0x90 [ 1229.485616][T22629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1229.485635][T22629] RIP: 0033:0x7f98c3d9cdd9 [ 1229.485662][T22629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1229.485680][T22629] RSP: 002b:00007f98c4c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1229.485698][T22629] RAX: ffffffffffffffda RBX: 00007f98c4015fa0 RCX: 00007f98c3d9cdd9 [ 1229.485710][T22629] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 000000000000000a [ 1229.485720][T22629] RBP: 00007f98c4c21090 R08: 0000000000000000 R09: 0000000000000000 [ 1229.485730][T22629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1229.485741][T22629] R13: 00007f98c4016038 R14: 00007f98c4015fa0 R15: 00007ffd31b40468 [ 1229.485763][T22629] [ 1229.485795][T22629] socket: no more sockets [ 1229.966788][T22634] usb usb4: usbfs: process 22634 (syz.2.2811) did not claim interface 0 before use [ 1230.284027][T14772] Bluetooth: hci4: command 0x0c1a tx timeout [ 1231.057275][T22656] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input91 [ 1231.156111][T22658] FAULT_INJECTION: forcing a failure. [ 1231.156111][T22658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1231.301790][T22650] FAULT_INJECTION: forcing a failure. [ 1231.301790][T22650] name failslab, interval 1, probability 0, space 0, times 0 [ 1231.315901][T22658] CPU: 0 UID: 0 PID: 22658 Comm: syz.2.2816 Not tainted syzkaller #0 PREEMPT(full) [ 1231.315926][T22658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1231.315937][T22658] Call Trace: [ 1231.315943][T22658] [ 1231.315950][T22658] dump_stack_lvl+0x100/0x190 [ 1231.315974][T22658] should_fail_ex.cold+0x5/0xa [ 1231.315998][T22658] _copy_from_user+0x2e/0xd0 [ 1231.316029][T22658] input_event_from_user+0xb9/0x290 [ 1231.316049][T22658] ? __pfx_input_event_from_user+0x10/0x10 [ 1231.316074][T22658] uinput_write+0xb9f/0xf60 [ 1231.316100][T22658] ? __pfx_uinput_write+0x10/0x10 [ 1231.316123][T22658] ? bpf_lsm_file_permission+0x9/0x10 [ 1231.316141][T22658] ? security_file_permission+0x76/0x210 [ 1231.316163][T22658] ? rw_verify_area+0xce/0x6d0 [ 1231.316182][T22658] ? __pfx_uinput_write+0x10/0x10 [ 1231.316202][T22658] vfs_writev+0x5ea/0xe10 [ 1231.316227][T22658] ? __pfx_vfs_writev+0x10/0x10 [ 1231.316246][T22658] ? find_held_lock+0x2b/0x80 [ 1231.316270][T22658] ? ksys_write+0x190/0x250 [ 1231.316302][T22658] ? __fget_files+0x21f/0x3d0 [ 1231.316328][T22658] ? do_writev+0x28a/0x340 [ 1231.316346][T22658] do_writev+0x28a/0x340 [ 1231.316365][T22658] ? __pfx_do_writev+0x10/0x10 [ 1231.316385][T22658] ? rcu_is_watching+0x12/0xc0 [ 1231.316410][T22658] do_syscall_64+0x10b/0xf80 [ 1231.316432][T22658] ? clear_bhb_loop+0x40/0x90 [ 1231.316455][T22658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.316473][T22658] RIP: 0033:0x7fb69ad9cdd9 [ 1231.316489][T22658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.316507][T22658] RSP: 002b:00007fb69bc42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1231.316525][T22658] RAX: ffffffffffffffda RBX: 00007fb69b016180 RCX: 00007fb69ad9cdd9 [ 1231.316536][T22658] RDX: 0000000000000009 RSI: 0000200000000340 RDI: 0000000000000003 [ 1231.316547][T22658] RBP: 00007fb69bc42090 R08: 0000000000000000 R09: 0000000000000000 [ 1231.316557][T22658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1231.316567][T22658] R13: 00007fb69b016218 R14: 00007fb69b016180 R15: 00007fffa3579a68 [ 1231.316590][T22658] [ 1231.797312][T22650] CPU: 0 UID: 0 PID: 22650 Comm: syz.0.2814 Not tainted syzkaller #0 PREEMPT(full) [ 1231.797337][T22650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1231.797348][T22650] Call Trace: [ 1231.797354][T22650] [ 1231.797361][T22650] dump_stack_lvl+0x100/0x190 [ 1231.797386][T22650] should_fail_ex.cold+0x5/0xa [ 1231.797410][T22650] should_failslab+0xc2/0x120 [ 1231.797431][T22650] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1231.797457][T22650] ? io_wq_create+0x6a/0x9a0 [ 1231.797476][T22650] ? lockdep_hardirqs_on+0x78/0x100 [ 1231.797501][T22650] io_wq_create+0x6a/0x9a0 [ 1231.797521][T22650] io_uring_alloc_task_context+0x2d9/0x51f [ 1231.797554][T22650] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 1231.797592][T22650] __io_uring_add_tctx_node.cold+0x15/0x1a1 [ 1231.797625][T22650] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1231.797654][T22650] ? __fget_files+0x21f/0x3d0 [ 1231.797678][T22650] __io_uring_add_tctx_node_from_submit+0x89/0x130 [ 1231.797709][T22650] __do_sys_io_uring_enter+0x1656/0x1b50 [ 1231.797734][T22650] ? __fget_files+0x21f/0x3d0 [ 1231.797754][T22650] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 1231.797778][T22650] ? fput+0x79/0x100 [ 1231.797802][T22650] ? ksys_write+0x1ac/0x250 [ 1231.797822][T22650] ? __pfx_ksys_write+0x10/0x10 [ 1231.797845][T22650] ? rcu_is_watching+0x12/0xc0 [ 1231.797870][T22650] do_syscall_64+0x10b/0xf80 [ 1231.797891][T22650] ? clear_bhb_loop+0x40/0x90 [ 1231.797921][T22650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.797940][T22650] RIP: 0033:0x7f98c3d9cdd9 [ 1231.797956][T22650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1231.797974][T22650] RSP: 002b:00007f98c4c00028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1231.797992][T22650] RAX: ffffffffffffffda RBX: 00007f98c4016090 RCX: 00007f98c3d9cdd9 [ 1231.798004][T22650] RDX: 0000000080000001 RSI: 0000000000000a84 RDI: 0000000000000003 [ 1231.798015][T22650] RBP: 00007f98c4c00090 R08: 0000000000000000 R09: 0000000000000046 [ 1231.798026][T22650] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 1231.798036][T22650] R13: 00007f98c4016128 R14: 00007f98c4016090 R15: 00007ffd31b40468 [ 1231.798057][T22650] [ 1232.200324][T22666] vivid-007: ================= START STATUS ================= [ 1232.208115][T22666] vivid-007: Generate PTS: true [ 1232.213167][T22666] vivid-007: Generate SCR: true [ 1232.218034][T22666] tpg source WxH: 320x240 (Y'CbCr) [ 1232.223267][T22666] tpg field: 1 [ 1232.226645][T22666] tpg crop: (0,0)/320x240 [ 1232.231170][T22666] tpg compose: (0,0)/320x240 [ 1232.235759][T22666] tpg colorspace: 8 [ 1232.239760][T22666] tpg transfer function: 0/0 [ 1232.244471][T22666] tpg Y'CbCr encoding: 0/0 [ 1232.249009][T22666] tpg quantization: 0/0 [ 1232.255355][T22666] tpg RGB range: 0/2 [ 1232.265425][T22666] vivid-007: ================== END STATUS ================== [ 1232.455618][T14772] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1232.526937][T22672] FAULT_INJECTION: forcing a failure. [ 1232.526937][T22672] name failslab, interval 1, probability 0, space 0, times 0 [ 1232.624711][T22672] CPU: 0 UID: 0 PID: 22672 Comm: syz.3.2822 Not tainted syzkaller #0 PREEMPT(full) [ 1232.624739][T22672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1232.624749][T22672] Call Trace: [ 1232.624756][T22672] [ 1232.624763][T22672] dump_stack_lvl+0x100/0x190 [ 1232.624788][T22672] should_fail_ex.cold+0x5/0xa [ 1232.624812][T22672] ? tomoyo_encode2+0xfb/0x3c0 [ 1232.624833][T22672] should_failslab+0xc2/0x120 [ 1232.624855][T22672] __kmalloc_noprof+0xe0/0x850 [ 1232.624888][T22672] ? d_absolute_path+0x136/0x1b0 [ 1232.624922][T22672] tomoyo_encode2+0xfb/0x3c0 [ 1232.624948][T22672] tomoyo_encode+0x29/0x50 [ 1232.624969][T22672] tomoyo_realpath_from_path+0x18c/0x690 [ 1232.624997][T22672] tomoyo_path_number_perm+0x23c/0x580 [ 1232.625015][T22672] ? tomoyo_path_number_perm+0x22e/0x580 [ 1232.625034][T22672] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1232.625075][T22672] ? find_held_lock+0x2b/0x80 [ 1232.625099][T22672] ? __fget_files+0x215/0x3d0 [ 1232.625119][T22672] ? hook_file_ioctl_common+0x149/0x410 [ 1232.625137][T22672] ? __fget_files+0x215/0x3d0 [ 1232.625161][T22672] ? __fget_files+0x21f/0x3d0 [ 1232.625185][T22672] security_file_ioctl+0xd3/0x230 [ 1232.625205][T22672] __x64_sys_ioctl+0xb7/0x210 [ 1232.625225][T22672] do_syscall_64+0x10b/0xf80 [ 1232.625247][T22672] ? clear_bhb_loop+0x40/0x90 [ 1232.625270][T22672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1232.625289][T22672] RIP: 0033:0x7faa78d9cdd9 [ 1232.625304][T22672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1232.625322][T22672] RSP: 002b:00007faa79cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1232.625341][T22672] RAX: ffffffffffffffda RBX: 00007faa79015fa0 RCX: 00007faa78d9cdd9 [ 1232.625352][T22672] RDX: 0000000000000000 RSI: 0000000080084503 RDI: 0000000000000003 [ 1232.625363][T22672] RBP: 00007faa79cde090 R08: 0000000000000000 R09: 0000000000000000 [ 1232.625373][T22672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1232.625383][T22672] R13: 00007faa79016038 R14: 00007faa79015fa0 R15: 00007ffd0625d638 [ 1232.625406][T22672] [ 1232.625451][T22672] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1233.011671][T22679] [U] ^R [ 1233.483381][T22685] FAULT_INJECTION: forcing a failure. [ 1233.483381][T22685] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1233.541629][T22685] CPU: 0 UID: 0 PID: 22685 Comm: syz.2.2826 Not tainted syzkaller #0 PREEMPT(full) [ 1233.541657][T22685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1233.541668][T22685] Call Trace: [ 1233.541674][T22685] [ 1233.541681][T22685] dump_stack_lvl+0x100/0x190 [ 1233.541707][T22685] should_fail_ex.cold+0x5/0xa [ 1233.541738][T22685] _copy_from_user+0x2e/0xd0 [ 1233.541769][T22685] copy_msghdr_from_user+0x9f/0x4f0 [ 1233.541796][T22685] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1233.541825][T22685] ? __pfx__kstrtoull+0x10/0x10 [ 1233.541851][T22685] ___sys_sendmsg+0x106/0x1e0 [ 1233.541877][T22685] ? __pfx____sys_sendmsg+0x10/0x10 [ 1233.541911][T22685] ? find_held_lock+0x2b/0x80 [ 1233.541949][T22685] __sys_sendmmsg+0x205/0x430 [ 1233.541969][T22685] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1233.541994][T22685] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1233.542027][T22685] ? fput+0x79/0x100 [ 1233.542052][T22685] ? ksys_write+0x1ac/0x250 [ 1233.542072][T22685] ? __pfx_ksys_write+0x10/0x10 [ 1233.542096][T22685] __x64_sys_sendmmsg+0x9c/0x100 [ 1233.542114][T22685] ? lockdep_hardirqs_on+0x78/0x100 [ 1233.542136][T22685] do_syscall_64+0x10b/0xf80 [ 1233.542157][T22685] ? clear_bhb_loop+0x40/0x90 [ 1233.542179][T22685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.542198][T22685] RIP: 0033:0x7fb69ad9cdd9 [ 1233.542214][T22685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.542231][T22685] RSP: 002b:00007fb69bc84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1233.542249][T22685] RAX: ffffffffffffffda RBX: 00007fb69b015fa0 RCX: 00007fb69ad9cdd9 [ 1233.542261][T22685] RDX: 0000000000000002 RSI: 0000200000000400 RDI: 0000000000000012 [ 1233.542272][T22685] RBP: 00007fb69bc84090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.542282][T22685] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 1233.542293][T22685] R13: 00007fb69b016038 R14: 00007fb69b015fa0 R15: 00007fffa3579a68 [ 1233.542314][T22685] [ 1233.875114][T22689] vivid-007: ================= START STATUS ================= [ 1233.885788][T22689] vivid-007: Generate PTS: true [ 1233.890791][T22689] vivid-007: Generate SCR: true [ 1233.895708][T22689] tpg source WxH: 320x240 (Y'CbCr) [ 1233.901021][T22689] tpg field: 1 [ 1233.904453][T22689] tpg crop: (0,0)/320x240 [ 1233.908835][T22689] tpg compose: (0,0)/320x240 [ 1233.913427][T22689] tpg colorspace: 8 [ 1233.919130][T22689] tpg transfer function: 0/0 [ 1233.923773][T22689] tpg Y'CbCr encoding: 0/0 [ 1233.928400][T22689] tpg quantization: 0/0 [ 1233.932568][T22689] tpg RGB range: 0/2 [ 1233.936542][T22689] vivid-007: ================== END STATUS ================== [ 1234.057680][T22697] block2mtd: illegal erase size [ 1235.128436][T22717] [U] ^R [ 1235.606258][T22732] vivid-007: ================= START STATUS ================= [ 1235.643277][T22732] vivid-007: Generate PTS: true [ 1235.666310][T22732] vivid-007: Generate SCR: true [ 1235.689391][T22731] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input92 [ 1235.708840][T22732] tpg source WxH: 320x240 (Y'CbCr) [ 1235.720583][T22732] tpg field: 1 [ 1235.733456][T22732] tpg crop: (0,0)/320x240 [ 1235.756374][T22732] tpg compose: (0,0)/320x240 [ 1235.821927][T22732] tpg colorspace: 8 [ 1235.838865][T22740] FAULT_INJECTION: forcing a failure. [ 1235.838865][T22740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1235.875081][T22732] tpg transfer function: 0/0 [ 1235.884280][T22729] random: crng reseeded on system resumption [ 1235.896004][T22732] tpg Y'CbCr encoding: 0/0 [ 1235.907878][T22740] CPU: 0 UID: 0 PID: 22740 Comm: syz.3.2841 Not tainted syzkaller #0 PREEMPT(full) [ 1235.907905][T22740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1235.907915][T22740] Call Trace: [ 1235.907922][T22740] [ 1235.907929][T22740] dump_stack_lvl+0x100/0x190 [ 1235.907954][T22740] should_fail_ex.cold+0x5/0xa [ 1235.907978][T22740] _copy_to_user+0x32/0xd0 [ 1235.908009][T22740] simple_read_from_buffer+0xcb/0x170 [ 1235.908032][T22740] proc_fail_nth_read+0x1af/0x230 [ 1235.908062][T22740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1235.908092][T22740] ? rw_verify_area+0xce/0x6d0 [ 1235.908110][T22740] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1235.908139][T22740] vfs_read+0x1e4/0xb30 [ 1235.908161][T22740] ? __pfx_vfs_read+0x10/0x10 [ 1235.908180][T22740] ? __fget_files+0x215/0x3d0 [ 1235.908206][T22740] ? __fget_files+0x21f/0x3d0 [ 1235.908232][T22740] ksys_read+0x12a/0x250 [ 1235.908256][T22740] ? __pfx_ksys_read+0x10/0x10 [ 1235.908278][T22740] ? rcu_is_watching+0x12/0xc0 [ 1235.908303][T22740] do_syscall_64+0x10b/0xf80 [ 1235.908326][T22740] ? clear_bhb_loop+0x40/0x90 [ 1235.908348][T22740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1235.908367][T22740] RIP: 0033:0x7faa78d5d60e [ 1235.908383][T22740] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1235.908401][T22740] RSP: 002b:00007faa79cddfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1235.908419][T22740] RAX: ffffffffffffffda RBX: 00007faa79cde6c0 RCX: 00007faa78d5d60e [ 1235.908430][T22740] RDX: 000000000000000f RSI: 00007faa79cde0a0 RDI: 0000000000000004 [ 1235.908440][T22740] RBP: 00007faa79cde090 R08: 0000000000000000 R09: 0000000000000000 [ 1235.908451][T22740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1235.908461][T22740] R13: 00007faa79016038 R14: 00007faa79015fa0 R15: 00007ffd0625d638 [ 1235.908483][T22740] [ 1236.099975][T22732] tpg quantization: 0/0 [ 1236.105626][T22732] tpg RGB range: 0/2 [ 1236.109740][T22732] vivid-007: ================== END STATUS ================== [ 1236.577120][T22751] block2mtd: illegal erase size [ 1236.619747][T22736] syz.2.2838 (22736) used greatest stack depth: 19720 bytes left [ 1236.775917][T22758] FAULT_INJECTION: forcing a failure. [ 1236.775917][T22758] name failslab, interval 1, probability 0, space 0, times 0 [ 1236.843050][T22758] CPU: 0 UID: 0 PID: 22758 Comm: syz.2.2846 Not tainted syzkaller #0 PREEMPT(full) [ 1236.843075][T22758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1236.843087][T22758] Call Trace: [ 1236.843093][T22758] [ 1236.843100][T22758] dump_stack_lvl+0x100/0x190 [ 1236.843125][T22758] should_fail_ex.cold+0x5/0xa [ 1236.843148][T22758] should_failslab+0xc2/0x120 [ 1236.843170][T22758] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1236.843199][T22758] ? mas_preallocate+0x1105/0x14a0 [ 1236.843230][T22758] mas_preallocate+0x1105/0x14a0 [ 1236.843260][T22758] ? __pfx_mas_preallocate+0x10/0x10 [ 1236.843291][T22758] ? vm_area_alloc+0x1f/0x160 [ 1236.843319][T22758] ? lockdep_init_map_type+0x5c/0x250 [ 1236.843339][T22758] __mmap_region+0x124a/0x2da0 [ 1236.843369][T22758] ? kasan_save_stack+0x30/0x50 [ 1236.843387][T22758] ? __pfx___mmap_region+0x10/0x10 [ 1236.843420][T22758] ? __lock_acquire+0x4a5/0x2630 [ 1236.843438][T22758] ? rcu_is_watching+0x12/0xc0 [ 1236.843459][T22758] ? trace_pelt_se_tp+0x13b/0x190 [ 1236.843486][T22758] ? __lock_acquire+0x4a5/0x2630 [ 1236.843503][T22758] ? do_raw_spin_unlock+0x145/0x1e0 [ 1236.843524][T22758] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1236.843556][T22758] ? rcu_is_watching+0x12/0xc0 [ 1236.843587][T22758] ? rcu_is_watching+0x12/0xc0 [ 1236.843608][T22758] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1236.843633][T22758] ? lockdep_hardirqs_on+0x78/0x100 [ 1236.843687][T22758] ? futex_unqueue+0x133/0x2c0 [ 1236.843713][T22758] mmap_region+0x35d/0x620 [ 1236.843730][T22758] ? rcu_is_watching+0x12/0xc0 [ 1236.843751][T22758] ? __pfx_mmap_region+0x10/0x10 [ 1236.843768][T22758] ? apparmor_capable+0x1d7/0x4d0 [ 1236.843799][T22758] ? bpf_lsm_capable+0x9/0x10 [ 1236.843819][T22758] ? security_capable+0x80/0x260 [ 1236.843848][T22758] do_mmap+0xc63/0x12f0 [ 1236.843875][T22758] ? __pfx_do_mmap+0x10/0x10 [ 1236.843897][T22758] ? __pfx_down_write_killable+0x10/0x10 [ 1236.843928][T22758] vm_mmap_pgoff+0x29e/0x470 [ 1236.843955][T22758] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1236.843979][T22758] ? do_futex+0x192/0x350 [ 1236.843998][T22758] ? __pfx_do_futex+0x10/0x10 [ 1236.844015][T22758] ? __fget_files+0x215/0x3d0 [ 1236.844039][T22758] ksys_mmap_pgoff+0xe4/0x610 [ 1236.844061][T22758] ? __x64_sys_futex+0x358/0x4d0 [ 1236.844081][T22758] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1236.844102][T22758] ? xfd_validate_state+0x129/0x190 [ 1236.844125][T22758] __x64_sys_mmap+0x125/0x190 [ 1236.844147][T22758] do_syscall_64+0x10b/0xf80 [ 1236.844168][T22758] ? clear_bhb_loop+0x40/0x90 [ 1236.844225][T22758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.844244][T22758] RIP: 0033:0x7fb69ad9cdd9 [ 1236.844261][T22758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.844278][T22758] RSP: 002b:00007fb69bc84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1236.844296][T22758] RAX: ffffffffffffffda RBX: 00007fb69b015fa0 RCX: 00007fb69ad9cdd9 [ 1236.844308][T22758] RDX: 000000000000000b RSI: 0000000000000003 RDI: 0000000000000000 [ 1236.844319][T22758] RBP: 00007fb69ae32d69 R08: 0000000004008df3 R09: 0000000000000000 [ 1236.844330][T22758] R10: 0000000000003132 R11: 0000000000000246 R12: 0000000000000000 [ 1236.844340][T22758] R13: 00007fb69b016038 R14: 00007fb69b015fa0 R15: 00007fffa3579a68 [ 1236.844363][T22758] [ 1237.792112][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.802834][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 1237.925032][T22762] [U] ^R [ 1238.437223][T22779] vivid-007: ================= START STATUS ================= [ 1238.471959][T22779] vivid-007: Generate PTS: true [ 1238.500702][T22779] vivid-007: Generate SCR: true [ 1238.546417][T22779] tpg source WxH: 320x240 (Y'CbCr) [ 1238.605754][T22779] tpg field: 1 [ 1238.667539][T22779] tpg crop: (0,0)/320x240 [ 1238.706489][T22779] tpg compose: (0,0)/320x240 [ 1238.740785][T22779] tpg colorspace: 8 [ 1238.751853][T22779] tpg transfer function: 0/0 [ 1238.783805][T22779] tpg Y'CbCr encoding: 0/0 [ 1238.813307][T22779] tpg quantization: 0/0 [ 1238.836385][T22779] tpg RGB range: 0/2 [ 1238.863005][T22779] vivid-007: ================== END STATUS ================== [ 1239.599639][T22804] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input93 [ 1240.065174][T22819] [U] ^R [ 1240.597617][T22828] FAULT_INJECTION: forcing a failure. [ 1240.597617][T22828] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1240.661659][T22828] CPU: 0 UID: 0 PID: 22828 Comm: syz.1.2862 Not tainted syzkaller #0 PREEMPT(full) [ 1240.661700][T22828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1240.661711][T22828] Call Trace: [ 1240.661717][T22828] [ 1240.661724][T22828] dump_stack_lvl+0x100/0x190 [ 1240.661750][T22828] should_fail_ex.cold+0x5/0xa [ 1240.661771][T22828] ? prepare_alloc_pages+0x16d/0x5f0 [ 1240.661796][T22828] should_fail_alloc_page+0xeb/0x140 [ 1240.661820][T22828] prepare_alloc_pages+0x1f0/0x5f0 [ 1240.661846][T22828] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1240.661881][T22828] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1240.661900][T22828] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1240.661924][T22828] ? __lock_acquire+0x4a5/0x2630 [ 1240.661942][T22828] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1240.661976][T22828] ? __lock_acquire+0x4a5/0x2630 [ 1240.662000][T22828] ? vma_is_special_huge+0x23f/0x2d0 [ 1240.662021][T22828] ? __pfx_vma_is_special_huge+0x10/0x10 [ 1240.662042][T22828] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1240.662071][T22828] ? policy_nodemask+0xed/0x4f0 [ 1240.662094][T22828] alloc_pages_mpol+0x1fb/0x540 [ 1240.662116][T22828] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1240.662140][T22828] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1240.662168][T22828] alloc_pages_noprof+0x1a/0x160 [ 1240.662192][T22828] __pmd_alloc+0x3b/0x950 [ 1240.662219][T22828] __handle_mm_fault+0xa9c/0x2a00 [ 1240.662250][T22828] ? mt_find+0x45e/0x8e0 [ 1240.662275][T22828] ? __pfx___handle_mm_fault+0x10/0x10 [ 1240.662301][T22828] ? __pfx_mt_find+0x10/0x10 [ 1240.662337][T22828] ? find_vma+0xbf/0x140 [ 1240.662356][T22828] ? __pfx_find_vma+0x10/0x10 [ 1240.662378][T22828] handle_mm_fault+0x36d/0xa20 [ 1240.662410][T22828] do_user_addr_fault+0x74c/0x12f0 [ 1240.662437][T22828] ? trace_page_fault_kernel+0x7a/0x200 [ 1240.662461][T22828] exc_page_fault+0x6f/0xd0 [ 1240.662484][T22828] asm_exc_page_fault+0x26/0x30 [ 1240.662502][T22828] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 1240.662532][T22828] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 1240.662550][T22828] RSP: 0018:ffffc90004587db0 EFLAGS: 00050212 [ 1240.662565][T22828] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 1240.662576][T22828] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90004587e00 [ 1240.662587][T22828] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff520008b0fc1 [ 1240.662605][T22828] R10: ffffc90004587e0f R11: 0000000000000000 R12: 0000000000000000 [ 1240.662615][T22828] R13: ffffc90004587e00 R14: dffffc0000000000 R15: 0000000000000023 [ 1240.662637][T22828] _copy_from_user+0x98/0xd0 [ 1240.662672][T22828] get_timespec64+0x8b/0x1b0 [ 1240.662700][T22828] ? __pfx_get_timespec64+0x10/0x10 [ 1240.662745][T22828] __x64_sys_nanosleep+0xbe/0x2a0 [ 1240.662771][T22828] ? __pfx___x64_sys_nanosleep+0x10/0x10 [ 1240.662797][T22828] ? rcu_is_watching+0x12/0xc0 [ 1240.662822][T22828] do_syscall_64+0x10b/0xf80 [ 1240.662844][T22828] ? clear_bhb_loop+0x40/0x90 [ 1240.662866][T22828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.662884][T22828] RIP: 0033:0x7fdf40b9cdd9 [ 1240.662899][T22828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.662915][T22828] RSP: 002b:00007fdf41a3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 1240.662932][T22828] RAX: ffffffffffffffda RBX: 00007fdf40e15fa0 RCX: 00007fdf40b9cdd9 [ 1240.662942][T22828] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1240.662953][T22828] RBP: 00007fdf41a3c090 R08: 0000000000000000 R09: 0000000000000000 [ 1240.662963][T22828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1240.662973][T22828] R13: 00007fdf40e16038 R14: 00007fdf40e15fa0 R15: 00007ffd8f1c28b8 [ 1240.662996][T22828] [ 1241.063284][T22830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2863'. [ 1241.177509][T22834] vivid-007: ================= START STATUS ================= [ 1241.185379][T22834] vivid-007: Generate PTS: true [ 1241.191635][T22834] vivid-007: Generate SCR: true [ 1241.197567][T22834] tpg source WxH: 320x240 (Y'CbCr) [ 1241.203396][T22834] tpg field: 1 [ 1241.206776][T22834] tpg crop: (0,0)/320x240 [ 1241.211168][T22834] tpg compose: (0,0)/320x240 [ 1241.215956][T22834] tpg colorspace: 8 [ 1241.219866][T22834] tpg transfer function: 0/0 [ 1241.224647][T22834] tpg Y'CbCr encoding: 0/0 [ 1241.229170][T22834] tpg quantization: 0/0 [ 1241.233539][T22834] tpg RGB range: 0/2 [ 1241.237441][T22834] vivid-007: ================== END STATUS ================== [ 1241.507281][T22845] block2mtd: illegal erase size [ 1242.193717][T22857] can: request_module (can-proto-0) failed. [ 1242.393296][T22866] vhci_hcd vhci_hcd.2: default hub control req: 2709 v0002 i0002 l8 [ 1242.652798][T22865] random: crng reseeded on system resumption [ 1243.174195][T14772] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1243.320489][T22875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2875'. [ 1244.628959][T22908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2885'. [ 1244.826557][T22910] FAULT_INJECTION: forcing a failure. [ 1244.826557][T22910] name failslab, interval 1, probability 0, space 0, times 0 [ 1244.893015][T22910] CPU: 0 UID: 0 PID: 22910 Comm: syz.3.2886 Not tainted syzkaller #0 PREEMPT(full) [ 1244.893044][T22910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1244.893054][T22910] Call Trace: [ 1244.893061][T22910] [ 1244.893068][T22910] dump_stack_lvl+0x100/0x190 [ 1244.893093][T22910] should_fail_ex.cold+0x5/0xa [ 1244.893117][T22910] ? tracepoint_add_func+0x3a8/0x1150 [ 1244.893143][T22910] should_failslab+0xc2/0x120 [ 1244.893165][T22910] __kmalloc_noprof+0xe0/0x850 [ 1244.893198][T22910] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1244.893227][T22910] tracepoint_add_func+0x3a8/0x1150 [ 1244.893253][T22910] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1244.893287][T22910] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1244.893315][T22910] tracepoint_probe_register+0xc4/0x110 [ 1244.893344][T22910] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 1244.893373][T22910] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 1244.893403][T22910] ? update_last_data+0xaa/0x540 [ 1244.893425][T22910] tracing_start_sched_switch+0xaf/0x170 [ 1244.893453][T22910] __ftrace_event_enable_disable+0x557/0x6f0 [ 1244.893486][T22910] event_enable_write+0x262/0x340 [ 1244.893514][T22910] ? __pfx_event_enable_write+0x10/0x10 [ 1244.893549][T22910] vfs_write+0x2aa/0x1070 [ 1244.893571][T22910] ? __pfx_event_enable_write+0x10/0x10 [ 1244.893601][T22910] ? __pfx_vfs_write+0x10/0x10 [ 1244.893627][T22910] ? __fget_files+0x215/0x3d0 [ 1244.893653][T22910] ? __fget_files+0x21f/0x3d0 [ 1244.893681][T22910] ksys_write+0x12a/0x250 [ 1244.893701][T22910] ? __pfx_ksys_write+0x10/0x10 [ 1244.893724][T22910] ? rcu_is_watching+0x12/0xc0 [ 1244.893750][T22910] do_syscall_64+0x10b/0xf80 [ 1244.893773][T22910] ? clear_bhb_loop+0x40/0x90 [ 1244.893795][T22910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1244.893814][T22910] RIP: 0033:0x7faa78d9cdd9 [ 1244.893830][T22910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1244.893847][T22910] RSP: 002b:00007faa79cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1244.893865][T22910] RAX: ffffffffffffffda RBX: 00007faa79015fa0 RCX: 00007faa78d9cdd9 [ 1244.893877][T22910] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1244.893887][T22910] RBP: 00007faa79cde090 R08: 0000000000000000 R09: 0000000000000000 [ 1244.893898][T22910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1244.893908][T22910] R13: 00007faa79016038 R14: 00007faa79015fa0 R15: 00007ffd0625d638 [ 1244.893932][T22910] [ 1244.893940][T22910] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 1245.295117][T22917] vivid-007: ================= START STATUS ================= [ 1245.321545][T22917] vivid-007: Generate PTS: true [ 1245.340662][T22917] vivid-007: Generate SCR: true [ 1245.355634][T22917] tpg source WxH: 320x240 (Y'CbCr) [ 1245.374258][T22917] tpg field: 1 [ 1245.387936][T22917] tpg crop: (0,0)/320x240 [ 1245.396602][T22914] [U] ^R [ 1245.403556][T22917] tpg compose: (0,0)/320x240 [ 1245.412837][T22917] tpg colorspace: 8 [ 1245.424194][T22917] tpg transfer function: 0/0 [ 1245.444487][T22917] tpg Y'CbCr encoding: 0/0 [ 1245.458811][T22917] tpg quantization: 0/0 [ 1245.465745][T22917] tpg RGB range: 0/2 [ 1245.477123][T22917] vivid-007: ================== END STATUS ================== [ 1245.819102][T22931] futex_wake_op: syz.2.2892 tries to shift op by -2048; fix this program [ 1246.010582][T14772] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1246.301767][T22943] FAULT_INJECTION: forcing a failure. [ 1246.301767][T22943] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1246.377102][T22943] CPU: 0 UID: 0 PID: 22943 Comm: syz.0.2896 Not tainted syzkaller #0 PREEMPT(full) [ 1246.377127][T22943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1246.377138][T22943] Call Trace: [ 1246.377145][T22943] [ 1246.377152][T22943] dump_stack_lvl+0x100/0x190 [ 1246.377177][T22943] should_fail_ex.cold+0x5/0xa [ 1246.377197][T22943] ? prepare_alloc_pages+0x16d/0x5f0 [ 1246.377224][T22943] should_fail_alloc_page+0xeb/0x140 [ 1246.377247][T22943] prepare_alloc_pages+0x1f0/0x5f0 [ 1246.377271][T22943] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 1246.377293][T22943] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1246.377327][T22943] ? register_lock_class+0x40/0x560 [ 1246.377349][T22943] ? find_held_lock+0x2b/0x80 [ 1246.377372][T22943] ? ima_match_policy+0x8c4/0x2350 [ 1246.377390][T22943] ? ima_match_policy+0x8c4/0x2350 [ 1246.377412][T22943] ? __lock_acquire+0x4a5/0x2630 [ 1246.377430][T22943] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1246.377472][T22943] ? __pfx___might_resched+0x10/0x10 [ 1246.377494][T22943] ? vma_is_special_huge+0x23f/0x2d0 [ 1246.377515][T22943] ? __pfx_vma_is_special_huge+0x10/0x10 [ 1246.377536][T22943] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1246.377565][T22943] ? policy_nodemask+0xed/0x4f0 [ 1246.377588][T22943] alloc_pages_mpol+0x1fb/0x540 [ 1246.377610][T22943] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1246.377634][T22943] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1246.377662][T22943] alloc_pages_noprof+0x1a/0x160 [ 1246.377694][T22943] __pmd_alloc+0x3b/0x950 [ 1246.377719][T22943] __handle_mm_fault+0xa9c/0x2a00 [ 1246.377751][T22943] ? mt_find+0x45e/0x8e0 [ 1246.377777][T22943] ? __pfx___handle_mm_fault+0x10/0x10 [ 1246.377803][T22943] ? __pfx_mt_find+0x10/0x10 [ 1246.377839][T22943] ? find_vma+0xbf/0x140 [ 1246.377858][T22943] ? __pfx_find_vma+0x10/0x10 [ 1246.377880][T22943] handle_mm_fault+0x36d/0xa20 [ 1246.377912][T22943] do_user_addr_fault+0x74c/0x12f0 [ 1246.377939][T22943] ? trace_page_fault_kernel+0x7a/0x200 [ 1246.377962][T22943] exc_page_fault+0x6f/0xd0 [ 1246.377986][T22943] asm_exc_page_fault+0x26/0x30 [ 1246.378003][T22943] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 1246.378034][T22943] Code: e9 84 9b 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f [ 1246.378051][T22943] RSP: 0018:ffffc90005f47b38 EFLAGS: 00050202 [ 1246.378066][T22943] RAX: 0000000000000031 RBX: 0000000000000002 RCX: 0000000000000002 [ 1246.378078][T22943] RDX: 0000000000000001 RSI: ffffc90005f47bd8 RDI: 0000000000000000 [ 1246.378088][T22943] RBP: 0000000000000000 R08: 0000000000000000 R09: fffff52000be8f7b [ 1246.378099][T22943] R10: 0000000000000001 R11: 0000000000000000 R12: ffffc90005f47bd8 [ 1246.378110][T22943] R13: 0000000000000002 R14: 00007ffffffff000 R15: 0000000000000000 [ 1246.378132][T22943] _copy_to_user+0xa4/0xd0 [ 1246.378164][T22943] simple_read_from_buffer+0xcb/0x170 [ 1246.378188][T22943] event_enable_read+0x3e6/0x530 [ 1246.378208][T22943] ? __pfx_event_enable_read+0x10/0x10 [ 1246.378230][T22943] ? rw_verify_area+0xce/0x6d0 [ 1246.378252][T22943] ? __pfx_event_enable_read+0x10/0x10 [ 1246.378271][T22943] vfs_readv+0x5d8/0x8d0 [ 1246.378296][T22943] ? __pfx_vfs_readv+0x10/0x10 [ 1246.378315][T22943] ? find_held_lock+0x2b/0x80 [ 1246.378338][T22943] ? ksys_write+0x190/0x250 [ 1246.378371][T22943] ? __fget_files+0x21f/0x3d0 [ 1246.378397][T22943] ? do_readv+0x13e/0x340 [ 1246.378414][T22943] do_readv+0x13e/0x340 [ 1246.378433][T22943] ? __pfx_do_readv+0x10/0x10 [ 1246.378453][T22943] ? rcu_is_watching+0x12/0xc0 [ 1246.378479][T22943] do_syscall_64+0x10b/0xf80 [ 1246.378500][T22943] ? clear_bhb_loop+0x40/0x90 [ 1246.378523][T22943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1246.378541][T22943] RIP: 0033:0x7f98c3d9cdd9 [ 1246.378575][T22943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1246.378591][T22943] RSP: 002b:00007f98c4c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1246.378607][T22943] RAX: ffffffffffffffda RBX: 00007f98c4015fa0 RCX: 00007f98c3d9cdd9 [ 1246.378618][T22943] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 1246.378628][T22943] RBP: 00007f98c4c21090 R08: 0000000000000000 R09: 0000000000000000 [ 1246.378639][T22943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1246.378652][T22943] R13: 00007f98c4016038 R14: 00007f98c4015fa0 R15: 00007ffd31b40468 [ 1246.378681][T22943] [ 1247.697227][T22958] block2mtd: illegal erase size [ 1248.859856][T14772] Bluetooth: hci1: unexpected event for opcode 0x7c89 [ 1248.945037][T22979] FAULT_INJECTION: forcing a failure. [ 1248.945037][T22979] name failslab, interval 1, probability 0, space 0, times 0 [ 1249.078742][T22979] CPU: 0 UID: 0 PID: 22979 Comm: syz.1.2905 Not tainted syzkaller #0 PREEMPT(full) [ 1249.078770][T22979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1249.078781][T22979] Call Trace: [ 1249.078786][T22979] [ 1249.078793][T22979] dump_stack_lvl+0x100/0x190 [ 1249.078823][T22979] should_fail_ex.cold+0x5/0xa [ 1249.078850][T22979] should_failslab+0xc2/0x120 [ 1249.078872][T22979] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1249.078901][T22979] ? vm_area_alloc+0x1f/0x160 [ 1249.078928][T22979] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1249.078958][T22979] vm_area_alloc+0x1f/0x160 [ 1249.078984][T22979] __mmap_region+0x104d/0x2da0 [ 1249.079017][T22979] ? __pfx___mmap_region+0x10/0x10 [ 1249.079050][T22979] ? find_held_lock+0x2b/0x80 [ 1249.079074][T22979] ? process_measurement+0x4c8/0x2350 [ 1249.079107][T22979] ? process_measurement+0x4c8/0x2350 [ 1249.079142][T22979] ? process_measurement+0x1f4/0x2350 [ 1249.079172][T22979] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1249.079191][T22979] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1249.079221][T22979] ? __lock_acquire+0x4a5/0x2630 [ 1249.079250][T22979] ? find_held_lock+0x2b/0x80 [ 1249.079273][T22979] ? is_bpf_text_address+0x8a/0x1a0 [ 1249.079333][T22979] mmap_region+0x527/0x620 [ 1249.079352][T22979] ? __pfx_mmap_region+0x10/0x10 [ 1249.079371][T22979] ? cap_mmap_addr+0x4b/0x120 [ 1249.079397][T22979] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1249.079414][T22979] ? security_mmap_addr+0x71/0x1e0 [ 1249.079435][T22979] ? __get_unmapped_area+0x255/0x3e0 [ 1249.079460][T22979] do_mmap+0xc63/0x12f0 [ 1249.079486][T22979] ? __pfx_do_mmap+0x10/0x10 [ 1249.079508][T22979] ? __pfx_down_write_killable+0x10/0x10 [ 1249.079541][T22979] vm_mmap_pgoff+0x29e/0x470 [ 1249.079568][T22979] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1249.079597][T22979] ? __fget_files+0x215/0x3d0 [ 1249.079622][T22979] ? __fget_files+0x21f/0x3d0 [ 1249.079646][T22979] ksys_mmap_pgoff+0x3cb/0x610 [ 1249.079670][T22979] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1249.079691][T22979] ? fput+0x79/0x100 [ 1249.079716][T22979] ? ksys_write+0x1ac/0x250 [ 1249.079735][T22979] ? __pfx_ksys_write+0x10/0x10 [ 1249.079758][T22979] __x64_sys_mmap+0x125/0x190 [ 1249.079782][T22979] do_syscall_64+0x10b/0xf80 [ 1249.079803][T22979] ? clear_bhb_loop+0x40/0x90 [ 1249.079826][T22979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.079845][T22979] RIP: 0033:0x7fdf40b9cdd9 [ 1249.079861][T22979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.079878][T22979] RSP: 002b:00007fdf41a3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1249.079896][T22979] RAX: ffffffffffffffda RBX: 00007fdf40e15fa0 RCX: 00007fdf40b9cdd9 [ 1249.079908][T22979] RDX: 0000000000000ffa RSI: 0000000000005810 RDI: 0000000000000000 [ 1249.079918][T22979] RBP: 00007fdf41a3c090 R08: 0000000000000003 R09: 0000000000000000 [ 1249.079929][T22979] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 1249.079939][T22979] R13: 00007fdf40e16038 R14: 00007fdf40e15fa0 R15: 00007ffd8f1c28b8 [ 1249.079962][T22979] [ 1249.769574][T22991] futex_wake_op: syz.0.2908 tries to shift op by -2048; fix this program [ 1249.856313][T22994] FAULT_INJECTION: forcing a failure. [ 1249.856313][T22994] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1249.908490][T22994] CPU: 0 UID: 0 PID: 22994 Comm: syz.0.2908 Not tainted syzkaller #0 PREEMPT(full) [ 1249.908517][T22994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1249.908528][T22994] Call Trace: [ 1249.908534][T22994] [ 1249.908541][T22994] dump_stack_lvl+0x100/0x190 [ 1249.908566][T22994] should_fail_ex.cold+0x5/0xa [ 1249.908590][T22994] _copy_from_iter+0x1f4/0x1690 [ 1249.908613][T22994] ? __pfx__copy_from_iter+0x10/0x10 [ 1249.908650][T22994] ? rcu_is_watching+0x12/0xc0 [ 1249.908673][T22994] ? trace_kmalloc+0xe3/0x110 [ 1249.908694][T22994] ? __kasan_kmalloc+0xaa/0xb0 [ 1249.908712][T22994] ? __kmalloc_noprof+0x320/0x850 [ 1249.908746][T22994] kernfs_fop_write_iter+0x186/0x5f0 [ 1249.908775][T22994] vfs_write+0x6ac/0x1070 [ 1249.908797][T22994] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1249.908826][T22994] ? __pfx_vfs_write+0x10/0x10 [ 1249.908859][T22994] ksys_write+0x12a/0x250 [ 1249.908880][T22994] ? __pfx_ksys_write+0x10/0x10 [ 1249.908902][T22994] ? rcu_is_watching+0x12/0xc0 [ 1249.908927][T22994] do_syscall_64+0x10b/0xf80 [ 1249.908949][T22994] ? clear_bhb_loop+0x40/0x90 [ 1249.908971][T22994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1249.908991][T22994] RIP: 0033:0x7f98c3d9cdd9 [ 1249.909007][T22994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1249.909025][T22994] RSP: 002b:00007f98c4bdf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1249.909043][T22994] RAX: ffffffffffffffda RBX: 00007f98c4016180 RCX: 00007f98c3d9cdd9 [ 1249.909056][T22994] RDX: 0000000000000005 RSI: 0000200000000180 RDI: 0000000000000009 [ 1249.909067][T22994] RBP: 00007f98c4bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 1249.909078][T22994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1249.909088][T22994] R13: 00007f98c4016218 R14: 00007f98c4016180 R15: 00007ffd31b40468 [ 1249.909111][T22994] [ 1251.350322][T14772] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1251.377572][T23033] vivid-007: ================= START STATUS ================= [ 1251.392677][T23027] [U] ^R [ 1251.412832][T23033] vivid-007: Generate PTS: true [ 1251.437214][T23033] vivid-007: Generate SCR: true [ 1251.472381][T23033] tpg source WxH: 320x240 (Y'CbCr) [ 1251.501710][T23033] tpg field: 1 [ 1251.557623][T23033] tpg crop: (0,0)/320x240 [ 1251.590143][T23033] tpg compose: (0,0)/320x240 [ 1251.613000][T23033] tpg colorspace: 8 [ 1251.630262][T23033] tpg transfer function: 0/0 [ 1251.647483][T23033] tpg Y'CbCr encoding: 0/0 [ 1251.670170][T23033] tpg quantization: 0/0 [ 1251.686107][T23033] tpg RGB range: 0/2 [ 1251.699720][T23033] vivid-007: ================== END STATUS ================== [ 1251.723229][T23039] vivid-007: ================= START STATUS ================= [ 1251.747559][T23039] vivid-007: Generate PTS: true [ 1251.764334][T23039] vivid-007: Generate SCR: true [ 1251.782890][T23039] tpg source WxH: 320x240 (Y'CbCr) [ 1251.801895][T23039] tpg field: 1 [ 1251.811294][T23039] tpg crop: (0,0)/320x240 [ 1251.825934][T23039] tpg compose: (0,0)/320x240 [ 1251.843815][T23039] tpg colorspace: 8 [ 1251.856108][T23039] tpg transfer function: 0/0 [ 1251.871344][T23039] tpg Y'CbCr encoding: 0/0 [ 1251.892470][T23039] tpg quantization: 0/0 [ 1251.907455][T23039] tpg RGB range: 0/2 [ 1251.922976][T23039] vivid-007: ================== END STATUS ================== [ 1252.478501][T23054] bridge0: port 3(geneve1) entered blocking state [ 1252.478940][T23054] bridge0: port 3(geneve1) entered disabled state [ 1252.479077][T23054] geneve1: entered allmulticast mode [ 1252.510472][T23054] geneve1: entered promiscuous mode [ 1252.510915][T23054] bridge0: port 3(geneve1) entered blocking state [ 1252.510980][T23054] bridge0: port 3(geneve1) entered forwarding state [ 1253.236204][T23060] binder: 23049:23060 ioctl c00c620f 2000000001c0 returned -22 [ 1254.777858][T23106] FAULT_INJECTION: forcing a failure. [ 1254.777858][T23106] name failslab, interval 1, probability 0, space 0, times 0 [ 1254.913333][T23106] CPU: 0 UID: 0 PID: 23106 Comm: syz.0.2931 Not tainted syzkaller #0 PREEMPT(full) [ 1254.913362][T23106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1254.913373][T23106] Call Trace: [ 1254.913380][T23106] [ 1254.913387][T23106] dump_stack_lvl+0x100/0x190 [ 1254.913412][T23106] should_fail_ex.cold+0x5/0xa [ 1254.913436][T23106] ? alloc_pipe_info+0x1ec/0x590 [ 1254.913459][T23106] should_failslab+0xc2/0x120 [ 1254.913480][T23106] __kmalloc_noprof+0xe0/0x850 [ 1254.913515][T23106] alloc_pipe_info+0x1ec/0x590 [ 1254.913540][T23106] splice_direct_to_actor+0x78f/0xa30 [ 1254.913573][T23106] ? __lock_acquire+0x4a5/0x2630 [ 1254.913590][T23106] ? __pfx_direct_splice_actor+0x10/0x10 [ 1254.913614][T23106] ? __pfx_aa_file_perm+0x10/0x10 [ 1254.913639][T23106] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1254.913669][T23106] do_splice_direct+0x174/0x240 [ 1254.913693][T23106] ? __pfx_do_splice_direct+0x10/0x10 [ 1254.913717][T23106] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1254.913743][T23106] ? rw_verify_area+0xce/0x6d0 [ 1254.913763][T23106] do_sendfile+0xadc/0xe20 [ 1254.913786][T23106] ? __pfx_do_sendfile+0x10/0x10 [ 1254.913806][T23106] ? __fget_files+0x21f/0x3d0 [ 1254.913834][T23106] __x64_sys_sendfile64+0x1d8/0x220 [ 1254.913859][T23106] ? ksys_write+0x1ac/0x250 [ 1254.913879][T23106] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1254.913907][T23106] ? rcu_is_watching+0x12/0xc0 [ 1254.913932][T23106] do_syscall_64+0x10b/0xf80 [ 1254.913955][T23106] ? clear_bhb_loop+0x40/0x90 [ 1254.913981][T23106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1254.914001][T23106] RIP: 0033:0x7f98c3d9cdd9 [ 1254.914017][T23106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1254.914035][T23106] RSP: 002b:00007f98c4bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1254.914053][T23106] RAX: ffffffffffffffda RBX: 00007f98c4016270 RCX: 00007f98c3d9cdd9 [ 1254.914065][T23106] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 1254.914076][T23106] RBP: 00007f98c4bbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1254.914087][T23106] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1254.914098][T23106] R13: 00007f98c4016308 R14: 00007f98c4016270 R15: 00007ffd31b40468 [ 1254.914120][T23106] [ 1257.189740][T23156] [U] ^R [ 1257.355975][T23163] FAULT_INJECTION: forcing a failure. [ 1257.355975][T23163] name failslab, interval 1, probability 0, space 0, times 0 [ 1257.433955][T23163] CPU: 0 UID: 0 PID: 23163 Comm: syz.3.2945 Not tainted syzkaller #0 PREEMPT(full) [ 1257.433983][T23163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1257.433994][T23163] Call Trace: [ 1257.434001][T23163] [ 1257.434009][T23163] dump_stack_lvl+0x100/0x190 [ 1257.434035][T23163] should_fail_ex.cold+0x5/0xa [ 1257.434059][T23163] should_failslab+0xc2/0x120 [ 1257.434082][T23163] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1257.434112][T23163] ? alloc_empty_file+0x5b/0x1c0 [ 1257.434139][T23163] ? __pfx_stack_trace_save+0x10/0x10 [ 1257.434170][T23163] alloc_empty_file+0x5b/0x1c0 [ 1257.434198][T23163] path_openat+0xe8/0x31a0 [ 1257.434220][T23163] ? kasan_save_stack+0x3f/0x50 [ 1257.434238][T23163] ? kasan_save_stack+0x30/0x50 [ 1257.434254][T23163] ? kasan_save_track+0x14/0x30 [ 1257.434271][T23163] ? __kasan_slab_alloc+0x89/0x90 [ 1257.434289][T23163] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1257.434318][T23163] ? do_getname+0x35/0x390 [ 1257.434344][T23163] ? do_sys_openat2+0xc5/0x1e0 [ 1257.434372][T23163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.434394][T23163] ? __pfx_path_openat+0x10/0x10 [ 1257.434429][T23163] do_file_open+0x20e/0x430 [ 1257.434455][T23163] ? __pfx_do_file_open+0x10/0x10 [ 1257.434493][T23163] ? alloc_fd+0x476/0x790 [ 1257.434518][T23163] ? do_getname+0x191/0x390 [ 1257.434547][T23163] do_sys_openat2+0x10d/0x1e0 [ 1257.434582][T23163] ? __pfx_do_sys_openat2+0x10/0x10 [ 1257.434609][T23163] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1257.434638][T23163] ? __fget_files+0x21f/0x3d0 [ 1257.434663][T23163] __x64_sys_openat+0x12d/0x210 [ 1257.434693][T23163] ? __pfx___x64_sys_openat+0x10/0x10 [ 1257.434721][T23163] ? ksys_write+0x1ac/0x250 [ 1257.434744][T23163] ? rcu_is_watching+0x12/0xc0 [ 1257.434770][T23163] do_syscall_64+0x10b/0xf80 [ 1257.434792][T23163] ? clear_bhb_loop+0x40/0x90 [ 1257.434815][T23163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1257.434834][T23163] RIP: 0033:0x7faa78d9cdd9 [ 1257.434850][T23163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1257.434868][T23163] RSP: 002b:00007faa79cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1257.434887][T23163] RAX: ffffffffffffffda RBX: 00007faa79015fa0 RCX: 00007faa78d9cdd9 [ 1257.434899][T23163] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 1257.434910][T23163] RBP: 00007faa79cde090 R08: 0000000000000000 R09: 0000000000000000 [ 1257.434921][T23163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1257.434932][T23163] R13: 00007faa79016038 R14: 00007faa79015fa0 R15: 00007ffd0625d638 [ 1257.434955][T23163] [ 1258.174169][T23178] FAULT_INJECTION: forcing a failure. [ 1258.174169][T23178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1258.194767][T23177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2949'. [ 1258.242124][T23178] CPU: 0 UID: 0 PID: 23178 Comm: syz.3.2950 Not tainted syzkaller #0 PREEMPT(full) [ 1258.242150][T23178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1258.242161][T23178] Call Trace: [ 1258.242168][T23178] [ 1258.242176][T23178] dump_stack_lvl+0x100/0x190 [ 1258.242201][T23178] should_fail_ex.cold+0x5/0xa [ 1258.242225][T23178] _copy_from_iter+0x1f4/0x1690 [ 1258.242246][T23178] ? __asan_memset+0x23/0x50 [ 1258.242274][T23178] ? __pfx__copy_from_iter+0x10/0x10 [ 1258.242305][T23178] ? __pfx___alloc_skb+0x10/0x10 [ 1258.242343][T23178] netlink_sendmsg+0x808/0xda0 [ 1258.242371][T23178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1258.242395][T23178] ? __import_iovec+0x1d2/0x640 [ 1258.242414][T23178] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1258.242446][T23178] ____sys_sendmsg+0x9e1/0xb70 [ 1258.242468][T23178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1258.242501][T23178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1258.242534][T23178] ___sys_sendmsg+0x190/0x1e0 [ 1258.242561][T23178] ? __pfx____sys_sendmsg+0x10/0x10 [ 1258.242610][T23178] __sys_sendmsg+0x170/0x220 [ 1258.242629][T23178] ? __pfx___sys_sendmsg+0x10/0x10 [ 1258.242656][T23178] ? rcu_is_watching+0x12/0xc0 [ 1258.242683][T23178] do_syscall_64+0x10b/0xf80 [ 1258.242705][T23178] ? clear_bhb_loop+0x40/0x90 [ 1258.242728][T23178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.242747][T23178] RIP: 0033:0x7faa78d9cdd9 [ 1258.242764][T23178] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1258.242781][T23178] RSP: 002b:00007faa79cde028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1258.242804][T23178] RAX: ffffffffffffffda RBX: 00007faa79015fa0 RCX: 00007faa78d9cdd9 [ 1258.242817][T23178] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000003 [ 1258.242828][T23178] RBP: 00007faa79cde090 R08: 0000000000000000 R09: 0000000000000000 [ 1258.242839][T23178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1258.242849][T23178] R13: 00007faa79016038 R14: 00007faa79015fa0 R15: 00007ffd0625d638 [ 1258.242872][T23178] [ 1258.757432][T23197] [U] ^R [ 1258.877636][T23202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'. [ 1258.976721][T23203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'. [ 1259.806612][T23228] FAULT_INJECTION: forcing a failure. [ 1259.806612][T23228] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1259.878352][T23228] CPU: 0 UID: 0 PID: 23228 Comm: syz.1.2964 Not tainted syzkaller #0 PREEMPT(full) [ 1259.878381][T23228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1259.878392][T23228] Call Trace: [ 1259.878398][T23228] [ 1259.878406][T23228] dump_stack_lvl+0x100/0x190 [ 1259.878430][T23228] should_fail_ex.cold+0x5/0xa [ 1259.878455][T23228] _copy_from_user+0x2e/0xd0 [ 1259.878504][T23228] copy_clone_args_from_user+0x152/0x7d0 [ 1259.878529][T23228] ? find_held_lock+0x2b/0x80 [ 1259.878553][T23228] ? get_pid_task+0xfc/0x250 [ 1259.878588][T23228] ? get_pid_task+0xfc/0x250 [ 1259.878616][T23228] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1259.878646][T23228] ? find_held_lock+0x2b/0x80 [ 1259.878675][T23228] __do_sys_clone3+0xbf/0x290 [ 1259.878702][T23228] ? __pfx___do_sys_clone3+0x10/0x10 [ 1259.878739][T23228] ? __fget_files+0x21f/0x3d0 [ 1259.878771][T23228] ? rcu_is_watching+0x12/0xc0 [ 1259.878796][T23228] do_syscall_64+0x10b/0xf80 [ 1259.878819][T23228] ? clear_bhb_loop+0x40/0x90 [ 1259.878842][T23228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.878862][T23228] RIP: 0033:0x7fdf40b9cdd9 [ 1259.878878][T23228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1259.878896][T23228] RSP: 002b:00007fdf41a3bef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1259.878914][T23228] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fdf40b9cdd9 [ 1259.878926][T23228] RDX: 00007fdf41a3bf10 RSI: 0000000000000058 RDI: 00007fdf41a3bf10 [ 1259.878937][T23228] RBP: 00007fdf41a3c090 R08: 0000000000000000 R09: 0000000000000058 [ 1259.878949][T23228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1259.878959][T23228] R13: 00007fdf40e16038 R14: 00007fdf40e15fa0 R15: 00007ffd8f1c28b8 [ 1259.878982][T23228] [ 1260.293877][T23239] FAULT_INJECTION: forcing a failure. [ 1260.293877][T23239] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.351014][T23239] CPU: 0 UID: 0 PID: 23239 Comm: syz.0.2967 Not tainted syzkaller #0 PREEMPT(full) [ 1260.351043][T23239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1260.351054][T23239] Call Trace: [ 1260.351060][T23239] [ 1260.351069][T23239] dump_stack_lvl+0x100/0x190 [ 1260.351095][T23239] should_fail_ex.cold+0x5/0xa [ 1260.351119][T23239] should_failslab+0xc2/0x120 [ 1260.351141][T23239] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1260.351171][T23239] ? alloc_empty_file+0x5b/0x1c0 [ 1260.351198][T23239] ? __pfx_stack_trace_save+0x10/0x10 [ 1260.351227][T23239] alloc_empty_file+0x5b/0x1c0 [ 1260.351255][T23239] path_openat+0xe8/0x31a0 [ 1260.351277][T23239] ? kasan_save_stack+0x3f/0x50 [ 1260.351294][T23239] ? kasan_save_stack+0x30/0x50 [ 1260.351310][T23239] ? kasan_save_track+0x14/0x30 [ 1260.351327][T23239] ? __kasan_slab_alloc+0x89/0x90 [ 1260.351345][T23239] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1260.351374][T23239] ? do_getname+0x35/0x390 [ 1260.351399][T23239] ? do_sys_openat2+0xc5/0x1e0 [ 1260.351427][T23239] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.351449][T23239] ? __pfx_path_openat+0x10/0x10 [ 1260.351480][T23239] do_file_open+0x20e/0x430 [ 1260.351511][T23239] ? __pfx_do_file_open+0x10/0x10 [ 1260.351549][T23239] ? alloc_fd+0x476/0x790 [ 1260.351573][T23239] ? do_getname+0x191/0x390 [ 1260.351601][T23239] do_sys_openat2+0x10d/0x1e0 [ 1260.351630][T23239] ? __pfx_do_sys_openat2+0x10/0x10 [ 1260.351657][T23239] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1260.351685][T23239] ? __fget_files+0x21f/0x3d0 [ 1260.351709][T23239] __x64_sys_openat+0x12d/0x210 [ 1260.351739][T23239] ? __pfx___x64_sys_openat+0x10/0x10 [ 1260.351767][T23239] ? ksys_write+0x1ac/0x250 [ 1260.351791][T23239] ? rcu_is_watching+0x12/0xc0 [ 1260.351816][T23239] do_syscall_64+0x10b/0xf80 [ 1260.351838][T23239] ? clear_bhb_loop+0x40/0x90 [ 1260.351860][T23239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.351880][T23239] RIP: 0033:0x7f98c3d9cdd9 [ 1260.351897][T23239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1260.351915][T23239] RSP: 002b:00007f98c4c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1260.351933][T23239] RAX: ffffffffffffffda RBX: 00007f98c4015fa0 RCX: 00007f98c3d9cdd9 [ 1260.351945][T23239] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1260.351957][T23239] RBP: 00007f98c4c21090 R08: 0000000000000000 R09: 0000000000000000 [ 1260.351968][T23239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1260.351979][T23239] R13: 00007f98c4016038 R14: 00007f98c4015fa0 R15: 00007ffd31b40468 [ 1260.352001][T23239] [ 1260.857016][T23244] [U] ^R [ 1260.908237][T23246] block2mtd: illegal erase size [ 1261.314001][T23251] vivid-007: ================= START STATUS ================= [ 1261.352286][T23251] vivid-007: Generate PTS: true [ 1261.381924][T23251] vivid-007: Generate SCR: true [ 1261.409291][T23258] FAULT_INJECTION: forcing a failure. [ 1261.409291][T23258] name failslab, interval 1, probability 0, space 0, times 0 [ 1261.425600][T23251] tpg source WxH: 320x240 (Y'CbCr) [ 1261.442604][T23251] tpg field: 1 [ 1261.470503][T23251] tpg crop: (0,0)/320x240 [ 1261.475632][T23258] CPU: 0 UID: 0 PID: 23258 Comm: syz.3.2974 Not tainted syzkaller #0 PREEMPT(full) [ 1261.475659][T23258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1261.475670][T23258] Call Trace: [ 1261.475677][T23258] [ 1261.475684][T23258] dump_stack_lvl+0x100/0x190 [ 1261.475709][T23258] should_fail_ex.cold+0x5/0xa [ 1261.475733][T23258] should_failslab+0xc2/0x120 [ 1261.475755][T23258] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1261.475787][T23258] ? alloc_vmap_area+0x640/0x2b70 [ 1261.475812][T23258] alloc_vmap_area+0x640/0x2b70 [ 1261.475841][T23258] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1261.475868][T23258] __get_vm_area_node+0x1ca/0x330 [ 1261.475896][T23258] __vmalloc_node_range_noprof+0x228/0x1630 [ 1261.475922][T23258] ? kernel_clone+0x12e/0x9c0 [ 1261.475954][T23258] ? kernel_clone+0x12e/0x9c0 [ 1261.475986][T23258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1261.476017][T23258] ? rcu_is_watching+0x12/0xc0 [ 1261.476040][T23258] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1261.476064][T23258] ? kernel_clone+0x12e/0x9c0 [ 1261.476089][T23258] __vmalloc_node_noprof+0xad/0xf0 [ 1261.476118][T23258] ? kernel_clone+0x12e/0x9c0 [ 1261.476146][T23258] copy_process+0x7fb/0x7fa0 [ 1261.476173][T23258] ? __lock_acquire+0x4a5/0x2630 [ 1261.476199][T23258] ? __pfx_copy_process+0x10/0x10 [ 1261.476226][T23258] ? find_held_lock+0x2b/0x80 [ 1261.476259][T23258] kernel_clone+0x12e/0x9c0 [ 1261.476284][T23258] ? find_held_lock+0x2b/0x80 [ 1261.476309][T23258] ? __pfx_kernel_clone+0x10/0x10 [ 1261.476343][T23258] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1261.476371][T23258] __do_sys_clone+0xd9/0x120 [ 1261.476398][T23258] ? __pfx___do_sys_clone+0x10/0x10 [ 1261.476433][T23258] ? ksys_write+0x1ac/0x250 [ 1261.476455][T23258] ? __pfx_ksys_write+0x10/0x10 [ 1261.476477][T23258] ? rcu_is_watching+0x12/0xc0 [ 1261.476502][T23258] do_syscall_64+0x10b/0xf80 [ 1261.476525][T23258] ? clear_bhb_loop+0x40/0x90 [ 1261.476560][T23258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.476580][T23258] RIP: 0033:0x7faa78d9cdd9 [ 1261.476597][T23258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.476615][T23258] RSP: 002b:00007faa79cddfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1261.476636][T23258] RAX: ffffffffffffffda RBX: 00007faa79015fa0 RCX: 00007faa78d9cdd9 [ 1261.476649][T23258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1261.476659][T23258] RBP: 00007faa79cde090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.476670][T23258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1261.476681][T23258] R13: 00007faa79016038 R14: 00007faa79015fa0 R15: 00007ffd0625d638 [ 1261.476704][T23258] [ 1261.751524][T23258] syz.3.2974: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1261.770708][T23258] CPU: 0 UID: 0 PID: 23258 Comm: syz.3.2974 Not tainted syzkaller #0 PREEMPT(full) [ 1261.770735][T23258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1261.770746][T23258] Call Trace: [ 1261.770753][T23258] [ 1261.770760][T23258] dump_stack_lvl+0x100/0x190 [ 1261.770786][T23258] warn_alloc.cold+0x95/0x1c1 [ 1261.770806][T23258] ? __pfx_warn_alloc+0x10/0x10 [ 1261.770836][T23258] ? lockdep_hardirqs_on+0x78/0x100 [ 1261.770861][T23258] ? __get_vm_area_node+0x2c5/0x330 [ 1261.770888][T23258] ? __get_vm_area_node+0x208/0x330 [ 1261.770915][T23258] __vmalloc_node_range_noprof+0xccd/0x1630 [ 1261.770948][T23258] ? kernel_clone+0x12e/0x9c0 [ 1261.770987][T23258] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1261.771023][T23258] ? rcu_is_watching+0x12/0xc0 [ 1261.771046][T23258] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1261.771070][T23258] ? kernel_clone+0x12e/0x9c0 [ 1261.771095][T23258] __vmalloc_node_noprof+0xad/0xf0 [ 1261.771120][T23258] ? kernel_clone+0x12e/0x9c0 [ 1261.771149][T23258] copy_process+0x7fb/0x7fa0 [ 1261.771176][T23258] ? __lock_acquire+0x4a5/0x2630 [ 1261.771202][T23258] ? __pfx_copy_process+0x10/0x10 [ 1261.771229][T23258] ? find_held_lock+0x2b/0x80 [ 1261.771261][T23258] kernel_clone+0x12e/0x9c0 [ 1261.771286][T23258] ? find_held_lock+0x2b/0x80 [ 1261.771311][T23258] ? __pfx_kernel_clone+0x10/0x10 [ 1261.771346][T23258] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1261.771373][T23258] __do_sys_clone+0xd9/0x120 [ 1261.771399][T23258] ? __pfx___do_sys_clone+0x10/0x10 [ 1261.771434][T23258] ? ksys_write+0x1ac/0x250 [ 1261.771455][T23258] ? __pfx_ksys_write+0x10/0x10 [ 1261.771478][T23258] ? rcu_is_watching+0x12/0xc0 [ 1261.771504][T23258] do_syscall_64+0x10b/0xf80 [ 1261.771531][T23258] ? clear_bhb_loop+0x40/0x90 [ 1261.771554][T23258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1261.771573][T23258] RIP: 0033:0x7faa78d9cdd9 [ 1261.771590][T23258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1261.771608][T23258] RSP: 002b:00007faa79cddfd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1261.771626][T23258] RAX: ffffffffffffffda RBX: 00007faa79015fa0 RCX: 00007faa78d9cdd9 [ 1261.771638][T23258] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1261.771649][T23258] RBP: 00007faa79cde090 R08: 0000000000000000 R09: 0000000000000000 [ 1261.771659][T23258] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 1261.771670][T23258] R13: 00007faa79016038 R14: 00007faa79015fa0 R15: 00007ffd0625d638 [ 1261.771693][T23258] [ 1261.772462][T23258] Mem-Info: [ 1262.033229][T23258] active_anon:7370 inactive_anon:9 isolated_anon:0 [ 1262.033229][T23258] active_file:17565 inactive_file:43585 isolated_file:0 [ 1262.033229][T23258] unevictable:768 dirty:108 writeback:32 [ 1262.033229][T23258] slab_reclaimable:11685 slab_unreclaimable:91962 [ 1262.033229][T23258] mapped:27958 shmem:1288 pagetables:1119 [ 1262.033229][T23258] sec_pagetables:0 bounce:0 [ 1262.033229][T23258] kernel_misc_reclaimable:0 [ 1262.033229][T23258] free:1321235 free_pcp:12311 free_cma:0 [ 1262.088675][T23251] tpg compose: (0,0)/320x240 [ 1262.097584][T23251] tpg colorspace: 8 [ 1262.105446][T23251] tpg transfer function: 0/0 [ 1262.115701][T23251] tpg Y'CbCr encoding: 0/0 [ 1262.125816][T23251] tpg quantization: 0/0 [ 1262.135930][T23251] tpg RGB range: 0/2 [ 1262.141618][T23251] vivid-007: ================== END STATUS ================== [ 1262.165168][T23258] Node 0 active_anon:29324kB inactive_anon:36kB active_file:70204kB inactive_file:170428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111832kB dirty:468kB writeback:0kB shmem:3616kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10944kB pagetables:4328kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1262.254403][T23258] Node 1 active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1262.328595][T23258] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.366951][T23258] lowmem_reserve[]: 0 2477 2479 2479 2479 [ 1262.385477][T23258] Node 0 DMA32 free:1342932kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29508kB inactive_anon:36kB active_file:70248kB inactive_file:170428kB unevictable:1536kB writepending:468kB zspages:8kB present:3129332kB managed:2537436kB mlocked:0kB bounce:0kB free_pcp:41224kB local_pcp:41224kB free_cma:0kB [ 1262.435394][T23266] sg_write: data in/out 131052/209 bytes for SCSI command 0x67-- guessing data in; [ 1262.435394][T23266] program syz.1.2976 not setting count and/or reply_len properly [ 1262.491699][T23258] lowmem_reserve[]: 0 0 1 1 1 [ 1262.505010][T23258] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1262.567191][T23258] lowmem_reserve[]: 0 0 0 0 0 [ 1262.582895][T23258] Node 1 Normal free:3930140kB boost:0kB min:55828kB low:69784kB high:83740kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:56kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:8256kB local_pcp:8256kB free_cma:0kB [ 1262.651867][T23258] lowmem_reserve[]: 0 0 0 0 0 [ 1262.666050][T23258] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1262.731377][T23258] Node 0 DMA32: 11461*4kB (UME) 6444*8kB (UME) 3406*16kB (UME) 1122*32kB (UM) 483*64kB (UM) 325*128kB (UME) 207*256kB (UME) 123*512kB (UM) 50*1024kB (UME) 5*2048kB (UM) 221*4096kB (UM) = 1342932kB [ 1262.805489][T23258] Node 0 Normal: 2*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1262.847238][T23258] Node 1 Normal: 5*4kB (U) 9*8kB (UM) 10*16kB (U) 3*32kB (UM) 7*64kB (U) 4*128kB (U) 3*256kB (UM) 2*512kB (UM) 1*1024kB (U) 1*2048kB (M) 958*4096kB (UM) = 3930140kB [ 1262.906800][T23258] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1262.943398][T23258] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1262.980106][T23258] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1263.010708][T23258] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1263.031057][T23282] FAULT_INJECTION: forcing a failure. [ 1263.031057][T23282] name failslab, interval 1, probability 0, space 0, times 0 [ 1263.049597][T23258] 61556 total pagecache pages [ 1263.062782][T23258] 0 pages in swap cache [ 1263.072679][T23282] CPU: 0 UID: 0 PID: 23282 Comm: syz.2.2979 Not tainted syzkaller #0 PREEMPT(full) [ 1263.072704][T23282] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1263.072715][T23282] Call Trace: [ 1263.072722][T23282] [ 1263.072729][T23282] dump_stack_lvl+0x100/0x190 [ 1263.072755][T23282] should_fail_ex.cold+0x5/0xa [ 1263.072786][T23282] should_failslab+0xc2/0x120 [ 1263.072809][T23282] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1263.072843][T23282] ? security_inode_alloc+0x3b/0x2c0 [ 1263.072874][T23282] ? lockdep_init_map_type+0x5c/0x250 [ 1263.072896][T23282] security_inode_alloc+0x3b/0x2c0 [ 1263.072933][T23282] inode_init_always_gfp+0xcc0/0x1000 [ 1263.072963][T23282] alloc_inode+0x8e/0x250 [ 1263.072992][T23282] sock_alloc+0x44/0x280 [ 1263.073011][T23282] ? security_socket_create+0x7f/0x250 [ 1263.073041][T23282] __sock_create+0xc2/0x860 [ 1263.073070][T23282] mptcp_subflow_create_socket+0xec/0xa30 [ 1263.073103][T23282] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1263.073140][T23282] __mptcp_nmpc_sk+0x17f/0x880 [ 1263.073159][T23282] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1263.073180][T23282] ? __local_bh_enable_ip+0x9e/0x120 [ 1263.073209][T23282] mptcp_setsockopt+0x15b9/0x3370 [ 1263.073241][T23282] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1263.073270][T23282] ? find_held_lock+0x2b/0x80 [ 1263.073304][T23282] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1263.073331][T23282] ? sock_common_setsockopt+0x2e/0xf0 [ 1263.073353][T23282] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1263.073378][T23282] do_sock_setsockopt+0xf3/0x1d0 [ 1263.073403][T23282] __sys_setsockopt+0x119/0x190 [ 1263.073438][T23282] __x64_sys_setsockopt+0xbd/0x160 [ 1263.073468][T23282] ? do_syscall_64+0x90/0xf80 [ 1263.073500][T23282] ? lockdep_hardirqs_on+0x78/0x100 [ 1263.073523][T23282] do_syscall_64+0x10b/0xf80 [ 1263.073544][T23282] ? clear_bhb_loop+0x40/0x90 [ 1263.073568][T23282] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1263.073588][T23282] RIP: 0033:0x7fb69ad9cdd9 [ 1263.073605][T23282] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1263.073623][T23282] RSP: 002b:00007fb69bc84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1263.073642][T23282] RAX: ffffffffffffffda RBX: 00007fb69b015fa0 RCX: 00007fb69ad9cdd9 [ 1263.073654][T23282] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000003 [ 1263.073665][T23282] RBP: 00007fb69bc84090 R08: 0000000000000009 R09: 0000000000000000 [ 1263.073676][T23282] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1263.073687][T23282] R13: 00007fb69b016038 R14: 00007fb69b015fa0 R15: 00007fffa3579a68 [ 1263.073711][T23282] [ 1263.073808][T23282] socket: no more sockets [ 1263.401691][T23258] Free swap = 124988kB [ 1263.414562][T23258] Total swap = 124996kB [ 1263.424997][T23258] 2097051 pages RAM [ 1263.438337][T23258] 0 pages HighMem/MovableOnly [ 1263.456310][T23258] 430801 pages reserved [ 1263.464666][T23258] 0 pages cma reserved [ 1264.282086][T14772] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1264.506128][T23306] block2mtd: illegal erase size [ 1265.436862][T23317] FAULT_INJECTION: forcing a failure. [ 1265.436862][T23317] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1265.507123][T23317] CPU: 0 UID: 0 PID: 23317 Comm: syz.0.2987 Not tainted syzkaller #0 PREEMPT(full) [ 1265.507152][T23317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1265.507163][T23317] Call Trace: [ 1265.507170][T23317] [ 1265.507178][T23317] dump_stack_lvl+0x100/0x190 [ 1265.507204][T23317] should_fail_ex.cold+0x5/0xa [ 1265.507224][T23317] ? prepare_alloc_pages+0x16d/0x5f0 [ 1265.507252][T23317] should_fail_alloc_page+0xeb/0x140 [ 1265.507276][T23317] prepare_alloc_pages+0x1f0/0x5f0 [ 1265.507304][T23317] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1265.507341][T23317] ? find_held_lock+0x2b/0x80 [ 1265.507366][T23317] ? is_bpf_text_address+0x8a/0x1a0 [ 1265.507392][T23317] ? is_bpf_text_address+0x8a/0x1a0 [ 1265.507418][T23317] ? bpf_ksym_find+0x124/0x1c0 [ 1265.507438][T23317] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1265.507467][T23317] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1265.507498][T23317] ? kernel_text_address+0x8d/0x100 [ 1265.507518][T23317] ? __kernel_text_address+0xd/0x30 [ 1265.507545][T23317] ? unwind_get_return_address+0x59/0xa0 [ 1265.507571][T23317] ? arch_stack_walk+0xa6/0xf0 [ 1265.507603][T23317] ? vma_is_special_huge+0x23f/0x2d0 [ 1265.507625][T23317] ? __pfx_vma_is_special_huge+0x10/0x10 [ 1265.507647][T23317] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1265.507676][T23317] ? policy_nodemask+0xed/0x4f0 [ 1265.507700][T23317] alloc_pages_mpol+0x1fb/0x540 [ 1265.507723][T23317] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1265.507748][T23317] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1265.507777][T23317] alloc_pages_noprof+0x1a/0x160 [ 1265.507803][T23317] __pmd_alloc+0x3b/0x950 [ 1265.507830][T23317] __handle_mm_fault+0xa9c/0x2a00 [ 1265.507862][T23317] ? mt_find+0x45e/0x8e0 [ 1265.507889][T23317] ? __pfx___handle_mm_fault+0x10/0x10 [ 1265.507915][T23317] ? __pfx_mt_find+0x10/0x10 [ 1265.507953][T23317] ? find_vma+0xbf/0x140 [ 1265.507973][T23317] ? __pfx_find_vma+0x10/0x10 [ 1265.507996][T23317] handle_mm_fault+0x36d/0xa20 [ 1265.508028][T23317] do_user_addr_fault+0x74c/0x12f0 [ 1265.508055][T23317] ? trace_page_fault_kernel+0x7a/0x200 [ 1265.508079][T23317] exc_page_fault+0x6f/0xd0 [ 1265.508103][T23317] asm_exc_page_fault+0x26/0x30 [ 1265.508126][T23317] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1265.508157][T23317] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 1265.508175][T23317] RSP: 0018:ffffc90007767940 EFLAGS: 00050246 [ 1265.508192][T23317] RAX: ea600008ffff000a RBX: 0000000000000008 RCX: 0000000000000008 [ 1265.508204][T23317] RDX: 0000000000000001 RSI: ffff8880335ea35e RDI: 0000000000000000 [ 1265.508215][T23317] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed10066bd46c [ 1265.508226][T23317] R10: ffff8880335ea365 R11: 0000000000000000 R12: ffff8880335ea35e [ 1265.508237][T23317] R13: 0000000000000008 R14: 00007ffffffff000 R15: 0000000000000000 [ 1265.508260][T23317] _copy_to_user+0xa4/0xd0 [ 1265.508293][T23317] sctp_getsockopt+0x3522/0x7090 [ 1265.508319][T23317] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1265.508339][T23317] ? __lock_acquire+0x4a5/0x2630 [ 1265.508359][T23317] ? __pfx_sctp_getsockopt+0x10/0x10 [ 1265.508385][T23317] ? __lock_acquire+0x4a5/0x2630 [ 1265.508414][T23317] ? find_held_lock+0x2b/0x80 [ 1265.508438][T23317] ? __might_fault+0xc5/0x140 [ 1265.508466][T23317] ? __might_fault+0xc5/0x140 [ 1265.508502][T23317] ? _copy_from_user+0x59/0xd0 [ 1265.508532][T23317] ? copy_from_sockptr_offset.constprop.0+0xe2/0x150 [ 1265.508564][T23317] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 1265.508594][T23317] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1265.508619][T23317] do_sock_getsockopt+0x50a/0x6e0 [ 1265.508642][T23317] ? __lock_acquire+0x4a5/0x2630 [ 1265.508662][T23317] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1265.508685][T23317] ? find_held_lock+0x2b/0x80 [ 1265.508709][T23317] ? ksys_write+0x190/0x250 [ 1265.508735][T23317] ? find_held_lock+0x2b/0x80 [ 1265.508766][T23317] ? __fget_files+0x21f/0x3d0 [ 1265.508793][T23317] __sys_getsockopt+0x133/0x1d0 [ 1265.508813][T23317] ? __pfx_ksys_write+0x10/0x10 [ 1265.508838][T23317] ? __x64_sys_getsockopt+0xbd/0x160 [ 1265.508854][T23317] __x64_sys_getsockopt+0xbd/0x160 [ 1265.508871][T23317] ? do_syscall_64+0x90/0xf80 [ 1265.508893][T23317] ? lockdep_hardirqs_on+0x78/0x100 [ 1265.508916][T23317] do_syscall_64+0x10b/0xf80 [ 1265.508938][T23317] ? clear_bhb_loop+0x40/0x90 [ 1265.508961][T23317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.508980][T23317] RIP: 0033:0x7f98c3d9cdd9 [ 1265.508996][T23317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1265.509013][T23317] RSP: 002b:00007f98c4c21028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1265.509030][T23317] RAX: ffffffffffffffda RBX: 00007f98c4015fa0 RCX: 00007f98c3d9cdd9 [ 1265.509041][T23317] RDX: 0000000000000002 RSI: 0000000000000084 RDI: 0000000000000003 [ 1265.509053][T23317] RBP: 00007f98c4c21090 R08: 0000200000000080 R09: 0000000000000000 [ 1265.509064][T23317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.509075][T23317] R13: 00007f98c4016038 R14: 00007f98c4015fa0 R15: 00007ffd31b40468 [ 1265.509098][T23317] [ 1266.272865][ T30] audit: type=1800 audit(1777380507.714:695): pid=23324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2989" name="discovery_nqn" dev="configfs" ino=89645 res=0 errno=0 [ 1267.186291][T14772] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 1267.423929][T23355] vivid-007: ================= START STATUS ================= [ 1267.449002][T23355] vivid-007: Generate PTS: true [ 1267.465370][T23355] vivid-007: Generate SCR: true [ 1267.484572][T23355] tpg source WxH: 320x240 (Y'CbCr) [ 1267.503953][T23355] tpg field: 1 [ 1267.519241][T23355] tpg crop: (0,0)/320x240 [ 1267.535377][T23355] tpg compose: (0,0)/320x240 [ 1267.550109][T23355] tpg colorspace: 8 [ 1267.587393][T23355] tpg transfer function: 0/0 [ 1267.603265][T23355] tpg Y'CbCr encoding: 0/0 [ 1267.621383][T23355] tpg quantization: 0/0 [ 1267.634627][T23355] tpg RGB range: 0/2 [ 1267.652503][T23355] vivid-007: ================== END STATUS ================== [ 1267.889521][T23364] FAULT_INJECTION: forcing a failure. [ 1267.889521][T23364] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.953419][T23364] CPU: 0 UID: 0 PID: 23364 Comm: syz.1.3001 Not tainted syzkaller #0 PREEMPT(full) [ 1267.953448][T23364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1267.953459][T23364] Call Trace: [ 1267.953466][T23364] [ 1267.953473][T23364] dump_stack_lvl+0x100/0x190 [ 1267.953499][T23364] should_fail_ex.cold+0x5/0xa [ 1267.953524][T23364] should_failslab+0xc2/0x120 [ 1267.953546][T23364] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1267.953582][T23364] ? __pmd_alloc+0xbf/0x950 [ 1267.953611][T23364] __pmd_alloc+0xbf/0x950 [ 1267.953636][T23364] __handle_mm_fault+0xa9c/0x2a00 [ 1267.953669][T23364] ? mt_find+0x45e/0x8e0 [ 1267.953695][T23364] ? __pfx___handle_mm_fault+0x10/0x10 [ 1267.953722][T23364] ? __pfx_mt_find+0x10/0x10 [ 1267.953758][T23364] ? find_vma+0xbf/0x140 [ 1267.953778][T23364] ? __pfx_find_vma+0x10/0x10 [ 1267.953800][T23364] handle_mm_fault+0x36d/0xa20 [ 1267.953833][T23364] do_user_addr_fault+0x74c/0x12f0 [ 1267.953859][T23364] ? trace_page_fault_kernel+0x7a/0x200 [ 1267.953883][T23364] exc_page_fault+0x6f/0xd0 [ 1267.953906][T23364] asm_exc_page_fault+0x26/0x30 [ 1267.953925][T23364] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 1267.953959][T23364] Code: c4 10 e9 84 9b 04 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 [ 1267.953978][T23364] RSP: 0018:ffffc90007657ce0 EFLAGS: 00050202 [ 1267.953994][T23364] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1267.954006][T23364] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90007657d80 [ 1267.954017][T23364] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000ecafb0 [ 1267.954028][T23364] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1267.954039][T23364] R13: ffffc90007657d80 R14: 0000000000000019 R15: ffff888032ff40ec [ 1267.954062][T23364] _copy_from_user+0x98/0xd0 [ 1267.954094][T23364] mptcp_setsockopt+0x11c9/0x3370 [ 1267.954127][T23364] ? __pfx_mptcp_setsockopt+0x10/0x10 [ 1267.954160][T23364] ? aa_sock_opt_perm+0xfe/0x1b0 [ 1267.954186][T23364] ? sock_common_setsockopt+0x2e/0xf0 [ 1267.954208][T23364] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1267.954234][T23364] do_sock_setsockopt+0xf3/0x1d0 [ 1267.954259][T23364] __sys_setsockopt+0x119/0x190 [ 1267.954294][T23364] __x64_sys_setsockopt+0xbd/0x160 [ 1267.954324][T23364] ? do_syscall_64+0x90/0xf80 [ 1267.954346][T23364] ? lockdep_hardirqs_on+0x78/0x100 [ 1267.954368][T23364] do_syscall_64+0x10b/0xf80 [ 1267.954390][T23364] ? clear_bhb_loop+0x40/0x90 [ 1267.954413][T23364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.954432][T23364] RIP: 0033:0x7fdf40b9cdd9 [ 1267.954447][T23364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.954465][T23364] RSP: 002b:00007fdf41a3c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1267.954481][T23364] RAX: ffffffffffffffda RBX: 00007fdf40e15fa0 RCX: 00007fdf40b9cdd9 [ 1267.954493][T23364] RDX: 0000000000000019 RSI: 0000000000000006 RDI: 0000000000000003 [ 1267.954504][T23364] RBP: 00007fdf41a3c090 R08: 0000000000000004 R09: 0000000000000000 [ 1267.954515][T23364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.954526][T23364] R13: 00007fdf40e16038 R14: 00007fdf40e15fa0 R15: 00007ffd8f1c28b8 [ 1267.954550][T23364] [ 1268.483810][T23371] FAULT_INJECTION: forcing a failure. [ 1268.483810][T23371] name failslab, interval 1, probability 0, space 0, times 0 [ 1268.496722][T23371] CPU: 0 UID: 0 PID: 23371 Comm: syz.3.3005 Not tainted syzkaller #0 PREEMPT(full) [ 1268.496751][T23371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1268.496762][T23371] Call Trace: [ 1268.496771][T23371] [ 1268.496780][T23371] dump_stack_lvl+0x100/0x190 [ 1268.496808][T23371] should_fail_ex.cold+0x5/0xa [ 1268.496833][T23371] ? sk_prot_alloc+0x10b/0x2a0 [ 1268.496854][T23371] should_failslab+0xc2/0x120 [ 1268.496878][T23371] __kmalloc_noprof+0xe0/0x850 [ 1268.496913][T23371] sk_prot_alloc+0x10b/0x2a0 [ 1268.496937][T23371] sk_alloc+0x36/0xe80 [ 1268.496968][T23371] __netlink_create+0x5e/0x2c0 [ 1268.496987][T23371] ? __wake_up+0x3f/0x60 [ 1268.497015][T23371] netlink_create+0x298/0x610 [ 1268.497036][T23371] ? __pfx_genl_bind+0x10/0x10 [ 1268.497060][T23371] ? __pfx_genl_unbind+0x10/0x10 [ 1268.497084][T23371] ? __pfx_genl_release+0x10/0x10 [ 1268.497113][T23371] __sock_create+0x339/0x860 [ 1268.497141][T23371] __sys_socket+0x14d/0x260 [ 1268.497166][T23371] ? fput+0x79/0x100 [ 1268.497191][T23371] ? __pfx___sys_socket+0x10/0x10 [ 1268.497215][T23371] ? ksys_write+0x1ac/0x250 [ 1268.497236][T23371] ? __pfx_ksys_write+0x10/0x10 [ 1268.497261][T23371] __x64_sys_socket+0x72/0xb0 [ 1268.497286][T23371] ? lockdep_hardirqs_on+0x78/0x100 [ 1268.497310][T23371] do_syscall_64+0x10b/0xf80 [ 1268.497332][T23371] ? clear_bhb_loop+0x40/0x90 [ 1268.497355][T23371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.497375][T23371] RIP: 0033:0x7faa78d9e647 [ 1268.497394][T23371] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1268.497412][T23371] RSP: 002b:00007faa79cdcf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1268.497431][T23371] RAX: ffffffffffffffda RBX: 00007faa79015fa0 RCX: 00007faa78d9e647 [ 1268.497443][T23371] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1268.497454][T23371] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1268.497466][T23371] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000001 [ 1268.497477][T23371] R13: 00007faa79016038 R14: 00007faa79015fa0 R15: 00007ffd0625d638 [ 1268.497499][T23371] [ 1268.965933][T23381] sg_write: process 650 (syz.0.3004) changed security contexts after opening file descriptor, this is not allowed. [ 1269.178065][T23393] vivid-007: ================= START STATUS ================= [ 1269.207242][T23393] vivid-007: Generate PTS: true [ 1269.221055][T23393] vivid-007: Generate SCR: true [ 1269.237871][T23393] tpg source WxH: 320x240 (Y'CbCr) [ 1269.267050][T23393] tpg field: 1 [ 1269.361441][T23393] tpg crop: (0,0)/320x240 [ 1269.389521][T23393] tpg compose: (0,0)/320x240 [ 1269.427977][T23393] tpg colorspace: 8 [ 1269.460179][T23393] tpg transfer function: 0/0 [ 1269.476497][T23393] tpg Y'CbCr encoding: 0/0 [ 1269.511409][T23393] tpg quantization: 0/0 [ 1269.524866][T23393] tpg RGB range: 0/2 [ 1269.547386][T23393] vivid-007: ================== END STATUS ================== [ 1269.871085][T14772] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 1270.285510][T23415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3014'. [ 1270.635617][T23432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3017'. [ 1271.427584][T23445] vivid-007: ================= START STATUS ================= [ 1271.483062][T23445] vivid-007: Generate PTS: true [ 1271.513420][T23445] vivid-007: Generate SCR: true [ 1271.568096][T23445] tpg source WxH: 320x240 (Y'CbCr) [ 1271.597510][T23445] tpg field: 1 [ 1271.604120][T23451] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1271.627937][T23445] tpg crop: (0,0)/320x240 [ 1271.643309][T23445] tpg compose: (0,0)/320x240 [ 1271.665307][T23445] tpg colorspace: 8 [ 1271.692341][T23445] tpg transfer function: 0/0 [ 1271.713337][T23445] tpg Y'CbCr encoding: 0/0 [ 1271.722116][T23436] FAULT_INJECTION: forcing a failure. [ 1271.722116][T23436] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.752031][T23445] tpg quantization: 0/0 [ 1271.767728][T23445] tpg RGB range: 0/2 [ 1271.783517][T23445] vivid-007: ================== END STATUS ================== [ 1271.794896][T23436] CPU: 0 UID: 0 PID: 23436 Comm: syz.1.3018 Not tainted syzkaller #0 PREEMPT(full) [ 1271.794924][T23436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1271.794935][T23436] Call Trace: [ 1271.794942][T23436] [ 1271.794950][T23436] dump_stack_lvl+0x100/0x190 [ 1271.794976][T23436] should_fail_ex.cold+0x5/0xa [ 1271.795000][T23436] should_failslab+0xc2/0x120 [ 1271.795023][T23436] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1271.795052][T23436] ? __mpol_dup+0x74/0x390 [ 1271.795081][T23436] __mpol_dup+0x74/0x390 [ 1271.795105][T23436] ? __pfx___mpol_dup+0x10/0x10 [ 1271.795128][T23436] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 1271.795156][T23436] ? sp_alloc+0x27/0x160 [ 1271.795184][T23436] sp_alloc+0x4d/0x160 [ 1271.795208][T23436] mpol_set_shared_policy+0xa5/0x890 [ 1271.795239][T23436] ? __pfx_shmem_set_policy+0x10/0x10 [ 1271.795262][T23436] mbind_range+0x339/0x550 [ 1271.795289][T23436] do_mbind+0x7dc/0xfd0 [ 1271.795318][T23436] ? __might_fault+0xc5/0x140 [ 1271.795346][T23436] ? __pfx_do_mbind+0x10/0x10 [ 1271.795375][T23436] ? _copy_from_user+0x59/0xd0 [ 1271.795410][T23436] ? __pfx_get_nodes+0x10/0x10 [ 1271.795434][T23436] kernel_mbind+0x1b7/0x200 [ 1271.795470][T23436] ? __pfx_kernel_mbind+0x10/0x10 [ 1271.795497][T23436] ? rcu_is_watching+0x12/0xc0 [ 1271.795523][T23436] do_syscall_64+0x10b/0xf80 [ 1271.795546][T23436] ? clear_bhb_loop+0x40/0x90 [ 1271.795569][T23436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.795589][T23436] RIP: 0033:0x7fdf40b9cdd9 [ 1271.795606][T23436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.795624][T23436] RSP: 002b:00007fdf41a3c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 1271.795642][T23436] RAX: ffffffffffffffda RBX: 00007fdf40e15fa0 RCX: 00007fdf40b9cdd9 [ 1271.795655][T23436] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 1271.795666][T23436] RBP: 00007fdf40c32d69 R08: 0000000000000003 R09: 0000000000000003 [ 1271.795677][T23436] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 1271.795688][T23436] R13: 00007fdf40e16038 R14: 00007fdf40e15fa0 R15: 00007ffd8f1c28b8 [ 1271.795711][T23436] [ 1272.551809][T14772] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 1273.120896][T23488] FAULT_INJECTION: forcing a failure. [ 1273.120896][T23488] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.299188][T23488] CPU: 0 UID: 0 PID: 23488 Comm: syz.0.3033 Not tainted syzkaller #0 PREEMPT(full) [ 1273.299217][T23488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1273.299228][T23488] Call Trace: [ 1273.299234][T23488] [ 1273.299242][T23488] dump_stack_lvl+0x100/0x190 [ 1273.299268][T23488] should_fail_ex.cold+0x5/0xa [ 1273.299293][T23488] _copy_to_user+0x32/0xd0 [ 1273.299326][T23488] simple_read_from_buffer+0xcb/0x170 [ 1273.299349][T23488] proc_fail_nth_read+0x1af/0x230 [ 1273.299379][T23488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1273.299411][T23488] ? rw_verify_area+0xce/0x6d0 [ 1273.299429][T23488] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1273.299458][T23488] vfs_read+0x1e4/0xb30 [ 1273.299481][T23488] ? __pfx_vfs_read+0x10/0x10 [ 1273.299508][T23488] ? __fget_files+0x215/0x3d0 [ 1273.299534][T23488] ? __fget_files+0x21f/0x3d0 [ 1273.299561][T23488] ksys_read+0x12a/0x250 [ 1273.299581][T23488] ? __pfx_ksys_read+0x10/0x10 [ 1273.299604][T23488] ? rcu_is_watching+0x12/0xc0 [ 1273.299629][T23488] do_syscall_64+0x10b/0xf80 [ 1273.299653][T23488] ? clear_bhb_loop+0x40/0x90 [ 1273.299676][T23488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.299695][T23488] RIP: 0033:0x7f98c3d5d60e [ 1273.299712][T23488] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1273.299730][T23488] RSP: 002b:00007f98c4c20fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1273.299749][T23488] RAX: ffffffffffffffda RBX: 00007f98c4c216c0 RCX: 00007f98c3d5d60e [ 1273.299761][T23488] RDX: 000000000000000f RSI: 00007f98c4c210a0 RDI: 0000000000000004 [ 1273.299772][T23488] RBP: 00007f98c4c21090 R08: 0000000000000000 R09: 0000000000000000 [ 1273.299783][T23488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.299794][T23488] R13: 00007f98c4016038 R14: 00007f98c4015fa0 R15: 00007ffd31b40468 [ 1273.299817][T23488] [ 1273.951256][T23507] QAT: Device 246 not found [ 1274.016403][T23500] FAULT_INJECTION: forcing a failure. [ 1274.016403][T23500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1274.050411][T23500] CPU: 0 UID: 0 PID: 23500 Comm: syz.2.3035 Not tainted syzkaller #0 PREEMPT(full) [ 1274.050439][T23500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1274.050451][T23500] Call Trace: [ 1274.050457][T23500] [ 1274.050471][T23500] dump_stack_lvl+0x100/0x190 [ 1274.050497][T23500] should_fail_ex.cold+0x5/0xa [ 1274.050517][T23500] ? prepare_alloc_pages+0x16d/0x5f0 [ 1274.050543][T23500] should_fail_alloc_page+0xeb/0x140 [ 1274.050568][T23500] prepare_alloc_pages+0x1f0/0x5f0 [ 1274.050592][T23500] ? __lock_acquire+0x4a5/0x2630 [ 1274.050612][T23500] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1274.050649][T23500] ? __lock_acquire+0x4a5/0x2630 [ 1274.050669][T23500] ? __lock_acquire+0x4a5/0x2630 [ 1274.050686][T23500] ? lock_acquire+0x1b1/0x370 [ 1274.050703][T23500] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1274.050745][T23500] ? unwind_next_frame+0x3be/0x2090 [ 1274.050773][T23500] ? unwind_next_frame+0x3be/0x2090 [ 1274.050801][T23500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1274.050831][T23500] ? policy_nodemask+0xed/0x4f0 [ 1274.050854][T23500] alloc_pages_mpol+0x1fb/0x540 [ 1274.050877][T23500] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1274.050899][T23500] ? update_cfs_rq_load_avg+0x51/0x550 [ 1274.050931][T23500] folio_alloc_mpol_noprof+0x36/0x260 [ 1274.050959][T23500] shmem_alloc_folio+0x135/0x160 [ 1274.050986][T23500] shmem_alloc_and_add_folio+0x371/0xd40 [ 1274.051023][T23500] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1274.051056][T23500] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 1274.051093][T23500] shmem_get_folio_gfp+0x6ab/0x1900 [ 1274.051130][T23500] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1274.051167][T23500] shmem_fault+0x1f9/0xa20 [ 1274.051184][T23500] ? __lock_acquire+0x4a5/0x2630 [ 1274.051202][T23500] ? __pfx_shmem_fault+0x10/0x10 [ 1274.051244][T23500] ? __pfx_filemap_map_pages+0x10/0x10 [ 1274.051274][T23500] __do_fault+0x10b/0x440 [ 1274.051292][T23500] ? find_held_lock+0x2b/0x80 [ 1274.051318][T23500] do_fault+0x2db/0x1750 [ 1274.051345][T23500] __handle_mm_fault+0x187d/0x2a00 [ 1274.051377][T23500] ? mt_find+0x45e/0x8e0 [ 1274.051403][T23500] ? __pfx___handle_mm_fault+0x10/0x10 [ 1274.051430][T23500] ? __pfx_mt_find+0x10/0x10 [ 1274.051471][T23500] ? find_vma+0xbf/0x140 [ 1274.051491][T23500] ? __pfx_find_vma+0x10/0x10 [ 1274.051514][T23500] handle_mm_fault+0x36d/0xa20 [ 1274.051546][T23500] do_user_addr_fault+0x74c/0x12f0 [ 1274.051576][T23500] ? trace_page_fault_kernel+0x7a/0x200 [ 1274.051601][T23500] exc_page_fault+0x6f/0xd0 [ 1274.051624][T23500] asm_exc_page_fault+0x26/0x30 [ 1274.051643][T23500] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 1274.051673][T23500] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 1274.051691][T23500] RSP: 0018:ffffc90007047680 EFLAGS: 00050212 [ 1274.051707][T23500] RAX: 0100000200000024 RBX: 0000000000000024 RCX: 0000000000000024 [ 1274.051719][T23500] RDX: 0000000000000001 RSI: ffff888079bf0340 RDI: 0000000000000000 [ 1274.051731][T23500] RBP: ffffc90007047bb0 R08: 0000000000000000 R09: ffffed100f37e06c [ 1274.051743][T23500] R10: ffff888079bf0363 R11: 0000000000000000 R12: ffff888079bf0340 [ 1274.051754][T23500] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000024 [ 1274.051776][T23500] _copy_to_iter+0x4c5/0x1720 [ 1274.051811][T23500] ? __pfx__copy_to_iter+0x10/0x10 [ 1274.051840][T23500] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 1274.051864][T23500] ? __skb_recv_datagram+0x1b2/0x220 [ 1274.051896][T23500] simple_copy_to_iter+0x46/0x90 [ 1274.051923][T23500] __skb_datagram_iter+0x129/0x900 [ 1274.051948][T23500] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1274.051981][T23500] skb_copy_datagram_iter+0xa5/0x270 [ 1274.052007][T23500] ? aa_sk_perm+0x309/0xaa0 [ 1274.052028][T23500] netlink_recvmsg+0x27e/0xa90 [ 1274.052053][T23500] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1274.052075][T23500] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1274.052106][T23500] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1274.052135][T23500] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1274.052159][T23500] sock_recvmsg+0x1a4/0x1f0 [ 1274.052183][T23500] ____sys_recvmsg+0x218/0x640 [ 1274.052211][T23500] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1274.052243][T23500] ? __lock_acquire+0x4a5/0x2630 [ 1274.052265][T23500] ___sys_recvmsg+0x16a/0x1a0 [ 1274.052291][T23500] ? __pfx____sys_recvmsg+0x10/0x10 [ 1274.052319][T23500] ? find_held_lock+0x2b/0x80 [ 1274.052358][T23500] do_recvmmsg+0x301/0x760 [ 1274.052386][T23500] ? __pfx_do_recvmmsg+0x10/0x10 [ 1274.052411][T23500] ? ksys_write+0x190/0x250 [ 1274.052436][T23500] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1274.052460][T23500] ? kernel_write+0x6b3/0x6c0 [ 1274.052492][T23500] ? __fget_files+0x21f/0x3d0 [ 1274.052519][T23500] __x64_sys_recvmmsg+0x22a/0x280 [ 1274.052541][T23500] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1274.052563][T23500] ? rcu_is_watching+0x12/0xc0 [ 1274.052589][T23500] do_syscall_64+0x10b/0xf80 [ 1274.052611][T23500] ? clear_bhb_loop+0x40/0x90 [ 1274.052634][T23500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.052653][T23500] RIP: 0033:0x7fb69ad9cdd9 [ 1274.052668][T23500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1274.052686][T23500] RSP: 002b:00007fb69bc84028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1274.052703][T23500] RAX: ffffffffffffffda RBX: 00007fb69b015fa0 RCX: 00007fb69ad9cdd9 [ 1274.052715][T23500] RDX: 000000000000010a RSI: 0000200000000140 RDI: 0000000000000004 [ 1274.052726][T23500] RBP: 00007fb69bc84090 R08: 0000000000000000 R09: 0000000000000000 [ 1274.052737][T23500] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 1274.052748][T23500] R13: 00007fb69b016038 R14: 00007fb69b015fa0 R15: 00007fffa3579a68 [ 1274.052773][T23500] [ 1275.098555][T23513] vivid-007: ================= START STATUS ================= [ 1275.106253][T23513] vivid-007: Generate PTS: true [ 1275.111197][T23513] vivid-007: Generate SCR: true [ 1275.116079][T23513] tpg source WxH: 320x240 (Y'CbCr) [ 1275.121236][T23513] tpg field: 1 [ 1275.124718][T23513] tpg crop: (0,0)/320x240 [ 1275.129098][T23513] tpg compose: (0,0)/320x240 [ 1275.133685][T23513] tpg colorspace: 8 [ 1275.137572][T23513] tpg transfer function: 0/0 [ 1275.142201][T23513] tpg Y'CbCr encoding: 0/0 [ 1275.146609][T23513] tpg quantization: 0/0 [ 1275.150810][T23513] tpg RGB range: 0/2 [ 1275.154697][T23513] vivid-007: ================== END STATUS ================== [ 1275.433170][T23517] ------------[ cut here ]------------ [ 1275.439062][T23517] IS_ERR(old) [ 1275.439077][T23517] WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x837/0xd10, CPU#0: syz.2.3040/23517 [ 1275.454993][T23517] Modules linked in: [ 1275.459244][T23517] CPU: 0 UID: 0 PID: 23517 Comm: syz.2.3040 Not tainted syzkaller #0 PREEMPT(full) [ 1275.469044][T23517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1275.479501][T23517] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 1275.486425][T23517] Code: 09 e8 5d 23 fe ff 48 8d 73 f0 48 c7 c2 90 a3 09 82 48 c7 c7 80 2f 87 8e e8 e6 2f e2 ff eb ba bb fe ff ff ff e8 3a 23 fe ff 90 <0f> 0b 90 eb ac e8 2f 23 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 1275.507070][T23517] RSP: 0018:ffffc900070678a8 EFLAGS: 00010293 [ 1275.513955][T23517] RAX: 0000000000000000 RBX: 00000000fffffffe RCX: ffffffff8209b1fa [ 1275.522143][T23517] RDX: ffff8880333abd80 RSI: ffffffff8209b486 RDI: ffff8880333abd80 [ 1275.530880][T23517] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1275.539014][T23517] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff821008c0 [ 1275.547054][T23517] R13: 0000000000000302 R14: 0000000000000002 R15: ffffffff8e9a8dc0 [ 1275.555101][T23517] FS: 00007fb69bc846c0(0000) GS:ffff888124380000(0000) knlGS:0000000000000000 [ 1275.564204][T23517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1275.570843][T23517] CR2: 00007fc33c3be4f0 CR3: 000000007c4c0000 CR4: 00000000003526f0 [ 1275.578918][T23517] Call Trace: [ 1275.582224][T23517] [ 1275.585175][T23517] tracing_stop_cmdline_record+0x66/0xa0 [ 1275.590868][T23517] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 1275.597792][T23517] ftrace_event_set_open+0x224/0x380 [ 1275.603914][T23517] do_dentry_open+0x6d8/0x1660 [ 1275.609134][T23517] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 1275.615145][T23517] vfs_open+0x82/0x3f0 [ 1275.619266][T23517] path_openat+0x208c/0x31a0 [ 1275.623967][T23517] ? __pfx_path_openat+0x10/0x10 [ 1275.628951][T23517] do_file_open+0x20e/0x430 [ 1275.633473][T23517] ? __pfx_do_file_open+0x10/0x10 [ 1275.638604][T23517] ? alloc_fd+0x476/0x790 [ 1275.642946][T23517] ? do_getname+0x191/0x390 [ 1275.647547][T23517] do_sys_openat2+0x10d/0x1e0 [ 1275.652267][T23517] ? __pfx_do_sys_openat2+0x10/0x10 [ 1275.657480][T23517] ? rcu_is_watching+0x12/0xc0 [ 1275.662376][T23517] __x64_sys_openat+0x12d/0x210 [ 1275.667244][T23517] ? __pfx___x64_sys_openat+0x10/0x10 [ 1275.672759][T23517] ? rcu_is_watching+0x12/0xc0 [ 1275.677631][T23517] do_syscall_64+0x10b/0xf80 [ 1275.682256][T23517] ? clear_bhb_loop+0x40/0x90 [ 1275.686962][T23517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1275.692895][T23517] RIP: 0033:0x7fb69ad9cdd9 [ 1275.698211][T23517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1275.718708][T23517] RSP: 002b:00007fb69bc84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1275.727220][T23517] RAX: ffffffffffffffda RBX: 00007fb69b015fa0 RCX: 00007fb69ad9cdd9 [ 1275.735232][T23517] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1275.743327][T23517] RBP: 00007fb69ae32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1275.751339][T23517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1275.759421][T23517] R13: 00007fb69b016038 R14: 00007fb69b015fa0 R15: 00007fffa3579a68 [ 1275.767436][T23517] [ 1275.770660][T23517] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1275.778160][T23517] CPU: 0 UID: 0 PID: 23517 Comm: syz.2.3040 Not tainted syzkaller #0 PREEMPT(full) [ 1275.787638][T23517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1275.797709][T23517] Call Trace: [ 1275.801011][T23517] [ 1275.803957][T23517] dump_stack_lvl+0x100/0x190 [ 1275.808647][T23517] vpanic+0x552/0x970 [ 1275.812659][T23517] ? __pfx_vpanic+0x10/0x10 [ 1275.817198][T23517] panic+0xd1/0xe0 [ 1275.821103][T23517] ? __pfx_panic+0x10/0x10 [ 1275.825544][T23517] ? check_panic_on_warn+0x1f/0x90 [ 1275.830753][T23517] check_panic_on_warn.cold+0x19/0x34 [ 1275.836326][T23517] ? tracepoint_probe_unregister+0x837/0xd10 [ 1275.842341][T23517] __warn.cold+0x191/0x328 [ 1275.846776][T23517] __report_bug+0x296/0x3d0 [ 1275.851298][T23517] ? tracepoint_probe_unregister+0x837/0xd10 [ 1275.857293][T23517] ? __pfx___report_bug+0x10/0x10 [ 1275.862339][T23517] ? rcu_is_watching+0x12/0xc0 [ 1275.867199][T23517] ? trace_contention_end+0x122/0x170 [ 1275.872667][T23517] ? __mutex_lock+0x26d/0x1b10 [ 1275.877439][T23517] ? tracepoint_probe_unregister+0x31/0xd10 [ 1275.883451][T23517] ? rcu_is_watching+0x12/0xc0 [ 1275.888333][T23517] ? tracepoint_probe_unregister+0x837/0xd10 [ 1275.894326][T23517] report_bug+0xb2/0x220 [ 1275.898574][T23517] ? tracepoint_probe_unregister+0x837/0xd10 [ 1275.904566][T23517] handle_bug+0x16a/0x2a0 [ 1275.908910][T23517] exc_invalid_op+0x17/0x50 [ 1275.913959][T23517] asm_exc_invalid_op+0x1a/0x20 [ 1275.918825][T23517] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 1275.925689][T23517] Code: 09 e8 5d 23 fe ff 48 8d 73 f0 48 c7 c2 90 a3 09 82 48 c7 c7 80 2f 87 8e e8 e6 2f e2 ff eb ba bb fe ff ff ff e8 3a 23 fe ff 90 <0f> 0b 90 eb ac e8 2f 23 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 1275.945509][T23517] RSP: 0018:ffffc900070678a8 EFLAGS: 00010293 [ 1275.951586][T23517] RAX: 0000000000000000 RBX: 00000000fffffffe RCX: ffffffff8209b1fa [ 1275.959558][T23517] RDX: ffff8880333abd80 RSI: ffffffff8209b486 RDI: ffff8880333abd80 [ 1275.967636][T23517] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 1275.975713][T23517] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff821008c0 [ 1275.983788][T23517] R13: 0000000000000302 R14: 0000000000000002 R15: ffffffff8e9a8dc0 [ 1275.991777][T23517] ? __pfx_probe_sched_switch+0x10/0x10 [ 1275.997349][T23517] ? tracepoint_probe_unregister+0x5aa/0xd10 [ 1276.003340][T23517] ? tracepoint_probe_unregister+0x836/0xd10 [ 1276.009333][T23517] ? tracepoint_probe_unregister+0x836/0xd10 [ 1276.015344][T23517] tracing_stop_cmdline_record+0x66/0xa0 [ 1276.021011][T23517] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 1276.027004][T23517] ftrace_event_set_open+0x224/0x380 [ 1276.032313][T23517] do_dentry_open+0x6d8/0x1660 [ 1276.037086][T23517] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 1276.042930][T23517] vfs_open+0x82/0x3f0 [ 1276.047116][T23517] path_openat+0x208c/0x31a0 [ 1276.051763][T23517] ? __pfx_path_openat+0x10/0x10 [ 1276.056716][T23517] do_file_open+0x20e/0x430 [ 1276.061326][T23517] ? __pfx_do_file_open+0x10/0x10 [ 1276.066374][T23517] ? alloc_fd+0x476/0x790 [ 1276.070745][T23517] ? do_getname+0x191/0x390 [ 1276.075273][T23517] do_sys_openat2+0x10d/0x1e0 [ 1276.079980][T23517] ? __pfx_do_sys_openat2+0x10/0x10 [ 1276.085226][T23517] ? rcu_is_watching+0x12/0xc0 [ 1276.090128][T23517] __x64_sys_openat+0x12d/0x210 [ 1276.095024][T23517] ? __pfx___x64_sys_openat+0x10/0x10 [ 1276.100507][T23517] ? rcu_is_watching+0x12/0xc0 [ 1276.105283][T23517] do_syscall_64+0x10b/0xf80 [ 1276.110072][T23517] ? clear_bhb_loop+0x40/0x90 [ 1276.114774][T23517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.120764][T23517] RIP: 0033:0x7fb69ad9cdd9 [ 1276.125188][T23517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1276.144991][T23517] RSP: 002b:00007fb69bc84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1276.153460][T23517] RAX: ffffffffffffffda RBX: 00007fb69b015fa0 RCX: 00007fb69ad9cdd9 [ 1276.161548][T23517] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 1276.169610][T23517] RBP: 00007fb69ae32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1276.177586][T23517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.185555][T23517] R13: 00007fb69b016038 R14: 00007fb69b015fa0 R15: 00007fffa3579a68 [ 1276.193540][T23517] [ 1276.196619][T23517] Kernel Offset: disabled [ 1276.200943][T23517] Rebooting in 86400 seconds..