last executing test programs: 8.661793255s ago: executing program 3 (id=1147): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x28, 0x801, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x2000, 0x0) socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 7.410293204s ago: executing program 3 (id=1150): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x28, 0x801, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x5, 0x0) socket(0xa, 0x80803, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x2000, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 7.346303324s ago: executing program 1 (id=1157): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0xfdef) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x5609, r1) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x141000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x6, 0x0, 0x800000001, 0x0, 0x7, 0xa505}, 0x4}, 0x2, 0x4048) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x42041, 0x0) 6.374493181s ago: executing program 1 (id=1151): unshare$auto(0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto_PR_SCHED_CORE_GET(0x476, 0x0, 0x0, 0x5, 0x7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x100000, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f0000000140)={{0x10001, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x3, 0x6}, 0x5, 0x9, 0x1, 0x9, @inferred, @inferred, 0x0, 0x0, &(0x7f0000000000)="a92cc5b95cbadeeec0c80a78f129b552aff38f501076b376c850e3181d7ab078b9c2a74d949545259b5a23079c5ddb423ec48eaac2ce48768e1ea76aa84b74416a50", &(0x7f0000000100)="899f6eff00"}) msgctl$auto_IPC_SET(0x7f7, 0x1, &(0x7f0000000240)={{0xffc, 0xee00, 0xee01, 0x8, 0x40, 0x81, 0x786}, &(0x7f00000001c0)=0x54, &(0x7f0000000200)=0x53, 0x100, 0x5, 0xd48b, 0x4053, 0x3, 0xffff, 0xc, 0xff, @raw=0x4}) setregid$auto(r5, r6) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) 6.372267452s ago: executing program 3 (id=1152): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000340)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xf2b0dd16cfb63227}, 0x800) mmap$auto(0xffffffffffffffff, 0x20005, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020008, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket(0x29, 0x2, 0x0) mmap$auto(0x0, 0x100, 0x0, 0x13, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x300000000000) socket(0x2, 0x1, 0x106) connect$auto(0x3, 0x0, 0x54) ioprio_set$auto(0x3, 0x0, 0x4b34) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x1000000, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x8000000000002000, 0x100000004, 0x8000100000000, 0x0, 0xffd, 0x2) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) 6.371240347s ago: executing program 0 (id=1160): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x5609, r1) 6.202688743s ago: executing program 0 (id=1153): mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x4006b) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS0\x00', 0x101e81, 0x0) write$auto_tty_fops_tty_io(r2, &(0x7f0000000680)="1f9319c707498de36a6eedfcfaa139bb5f55cf18b4ee56510d38c0f1006a40000000000000003a556e204dbdd72555ac78", 0x31) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) ioctl$auto_I2C_SMBUS(r1, 0x720, &(0x7f0000000080)) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) bind$auto(0xffffffffffffffff, 0x0, 0x9) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x7f, &(0x7f0000000000)='\xc8\xfdV%\r\x80\\\xf7\\\x00', &(0x7f0000000040)=0x1004) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) listen$auto(0x3, 0x81) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) 4.798809768s ago: executing program 0 (id=1155): syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) mq_notify$auto(0xffffffffffffffff, &(0x7f00000000c0)={@sival_ptr=0x0, @inferred, 0x2, @_tid}) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0xa00, 0x0) r1 = pipe2$auto(0x0, 0x0) open_tree_attr$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x4) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400b, r2, [], {0x6, 0x6, 0x8c48, 0x29a, 0x9, 0x80, 0x104, 0x6, 0x4}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x24, 0xfe000000, 0x8, 0x3}}) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_FREESP(r1, 0x4030580b, &(0x7f0000000100)={0x6a6e, 0x2, 0x0, 0x5f6, 0x1, 0x0}) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x7, 0x4) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x200948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x6, 0x8000001f, 0x8, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto(0x3, 0x8905, 0x38) madvise$auto(0x0, 0x2003f2, 0x15) 4.511076275s ago: executing program 1 (id=1156): mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.369602882s ago: executing program 1 (id=1158): mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000280)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xd3, 0x0) statfs$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000200)={0x1, 0x180000000000000, 0x10000, 0x7ff, 0x36d, 0x9, 0x56bb, {[0x2c81, 0x3]}, 0x10001, 0x8, 0x8, [0x6, 0x3, 0x6, 0x9]}) r0 = socket(0x10, 0x2, 0x14) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x680, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x3981, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20000045}, 0x24000044) write$auto(r0, &(0x7f0000000100)='\x00', 0xfffffffffffffffa) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) memfd_secret$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x17, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0x1, &(0x7f0000000000)='-\x00', &(0x7f0000000040), 0x0) setrlimit$auto(0x7ffb, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x39b8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) 3.670044153s ago: executing program 2 (id=1159): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r1 = socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x670, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x80}, @NL80211_ATTR_BEACON_TAIL={0x635, 0xf, "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"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xf}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "9ec4bcd1ba"}]}, 0x670}, 0x1, 0x0, 0x0, 0x4000010}, 0x814) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x7fff) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x710f}, 0x5) rseq$auto(&(0x7f00000001c0)={0x0, 0x9, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4fad3b3291bdf5db06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20ae47a2ef6e39524926d9568641fd03ae1cf8d48fcdf548bc1f60448"}, 0x9, 0x3, 0x2af3) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) prctl$auto_PR_SET_MM_ENV_END(0xfffffffa, 0xb, 0xffffffffffffffff, 0x79, 0x5) ioctl$auto_SCSI_IOCTL_SYNC(r2, 0x4, &(0x7f00000002c0)="1eb94217c6d41e9960eae19a5f4ee0c3f4a7120ff61d9c69b411b8d1ebccac754ce19831a08bf0120e3900e3b40c1f7981ebbb9d8aad62d2a89f34c4095dc6335a926e6fe9e2d427400b42cbc11b006b4c11c0d7553f692a8e5ebb59f47bc2d1a5084ad5d2aef3ed3aa1e6ca7da230df7684d5813b32decf0ab22819a92390bcb7c5d1b0a28160034fe2fccb35c1f0d6ea7b103dddcec8fdd3b249b8c1da5329a6e91bcac251b9bb58f9b1807ba5710b7d8e301acfe84edb30fd94c2ae7ec3") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) get_robust_list$auto(0x1, 0x0, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r5, 0x40047459, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 2.244409636s ago: executing program 3 (id=1161): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x42041, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x5}, 0xa) 2.107065121s ago: executing program 3 (id=1162): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000180)={0x6, 0x7, 0xa5e7, 0x10000, 0x3, 0x8000000000000000, 0x10, 0x5, 0x10003, 0x1ff, 0x5185}, 0x3ff) r2 = prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x424102, 0x0) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000000000)) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS2\x00', 0x101000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'ip6_vti0\x00'}) sendmsg$auto_NETDEV_CMD_DEV_GET(r2, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$auto_TIOCMSET2(r4, 0x5418, &(0x7f00000001c0)="6ab1") madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400004, 0x603b, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) close_range$auto(0xffffffffffffffff, r2, 0x3) mmap$auto(0x1, 0x10000002, 0x2, 0x11, r2, 0x847) close_range$auto(r2, r3, 0x10) pipe$auto(0x0) tee$auto(0x2000000000000, 0x3, 0x402, 0xd) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd11\x00', 0x1eb742, 0x0) 1.99397855s ago: executing program 2 (id=1163): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x5609, r1) 1.852478047s ago: executing program 2 (id=1164): fsetxattr$auto(0x1, &(0x7f0000000000)='%\x175\xc0\x8d\xbb\x04\xb3\x97\xd8\xf4\xf6', 0x0, 0x0, 0x2) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0x2001, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC0\x00', 0x8100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, 0x0, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x1f00) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fd, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) 1.561460063s ago: executing program 2 (id=1165): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r1 = socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x670, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x80}, @NL80211_ATTR_BEACON_TAIL={0x635, 0xf, "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"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xf}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "9ec4bcd1ba"}]}, 0x670}, 0x1, 0x0, 0x0, 0x4000010}, 0x814) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x7fff) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x710f}, 0x5) rseq$auto(&(0x7f00000001c0)={0x0, 0x9, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4fad3b3291bdf5db06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20ae47a2ef6e39524926d9568641fd03ae1cf8d48fcdf548bc1f60448"}, 0x9, 0x3, 0x2af3) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) prctl$auto_PR_SET_MM_ENV_END(0xfffffffa, 0xb, 0xffffffffffffffff, 0x79, 0x5) ioctl$auto_SCSI_IOCTL_SYNC(r2, 0x4, &(0x7f00000002c0)="1eb94217c6d41e9960eae19a5f4ee0c3f4a7120ff61d9c69b411b8d1ebccac754ce19831a08bf0120e3900e3b40c1f7981ebbb9d8aad62d2a89f34c4095dc6335a926e6fe9e2d427400b42cbc11b006b4c11c0d7553f692a8e5ebb59f47bc2d1a5084ad5d2aef3ed3aa1e6ca7da230df7684d5813b32decf0ab22819a92390bcb7c5d1b0a28160034fe2fccb35c1f0d6ea7b103dddcec8fdd3b249b8c1da5329a6e91bcac251b9bb58f9b1807ba5710b7d8e301acfe84edb30fd94c2ae7ec3") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r5, 0x40047459, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 758.227241ms ago: executing program 0 (id=1166): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) socket(0x28, 0x801, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x2, 0x5, 0x0) socket(0xa, 0x80803, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = epoll_create$auto(0x8800001) epoll_ctl$auto(r1, 0x1, r0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000026d00)='/dev/dri/card0\x00', 0x2000, 0x0) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) 492.765972ms ago: executing program 1 (id=1167): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0x9, 0x393df0b1, 0x2, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x15, 0x2, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x204080, 0x0) write$auto(r2, 0x0, 0x100000a3d9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/rpc/nfs4.nametoid/channel\x00', 0x8200, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) pivot_root$auto(0x0, &(0x7f00000004c0)='/\x00\xf5\xdf\xeb\xa1\xb1\xccYE\x92\x0e\xf1\xb6?S\xad\xdeiN\xc0\xb6\xa7>\x95\x1e\xdd\x03;t}\"\x01\xbf\an4>j<\xcb\xe0n\xa1\xae\xf7;\xf5\tJ\xb0\x95\xd5\x96\xae(\xd2\x06\xa7\xc2o\xe25\x8b\xe4\xac\x87\x98NAe\xf0\xf1\xd9\xd36\x98\x86\xca\xf6\xf8\xd0/\x1f\xb3\xe4N\xc0\x06\'\x11\x8a\xe108N/\xcc\x1f\xa9\xd0\xac\xf2\xf5\x90\xbbO\xcc\xa9qH\x00[\x86o\xf4\xaf\x93\x14\xbf|@\xb6E\xd5\xa7\xa9^\x84\x19\xca\x84\\\xb9u8\xa4\f\x7f\xa1Vh\xdc\'\x0e\xf6\xd9;\xcf@\xea\xde\xa0\xa8\xea\xef\xfcK5\x87Z\xc1\xccOx\x8bn\x1b\x93@o\xf7\xe30\x90\b\aQ_\xb9\x9dO\xab\xea \x88\xdc\xda>\xdc.O.\xc8\xe2\x04D\xc6\x14A\x7f\x000\xdd*\a\vX\xb0\x8bI\xd0K)u\x13{-\x02\xb2B\xabd[\xdd\xdc\x10M\x9c\x88a\xfd\xa1\x12\xeb\xe0O\xf8\xbf37e\x1e\xf1@\xe3\xae\xe4\xef\xbd|D\x1e;3\x99g\xd8\xf5\xf3\xe0\x96D\x93\x93\x86m\xa0Fn;\xff\xc3}\xb8\xcd\x0f0F\x96\x98\xd0\x19\xf5\xdf\xf1B\x17_t\xe4|i\xcd\x81|w\xfcNc\xdd\xb8\xdbQ\x0fb}c`=F\x91_\xbd+E\b\x14\x848\xe3\xee/\xe37\xcb\x00\xd7\xe0\x8f\xb2\xffU\xa3\n\xb3PW\x11\xe1\xdd\x05\x86\x9c\xcf\xfe\xfapL\xb2\x05\x82\xf4\xf2v\xe8\x83\xc9*M\x90\xa6P\x98\xb1\x94\x84\xb7\x00\xf2\xf0#\xd4\xe4\xe2\xaa~\x1d\xbc \xa2y\xae@\xab\x1d\xd8pBg\xbb\xa8|g\xc70.\x04\"\ff\xb0\xc6umooMT\xa8\xd3\x97 ?\xf1\x80\x01\x80\x10\xe9\x84Ff\xd4WU\xc41\xc3}\x03\xdc\'\xdd\xecJ\x97\xdb\xed\rr\xb6-$\x8b\xc5i\xe3\x113\x89M\xe4\xd7\x1dX\xc9\x15\x00\xd7j1t\\ \x88>s\xb5\x83\xf3\xef\x05\xb8+Y\x04{\x9a\x8e|\xfd\x92\xfb\xd1\"\x85\xb1\xf4*=\xee{\x7fS%;\xfd\xc0,\xa7\x973\xdc\x7f/B\xd8pe!\xd8sl\x15g\xd5\x05\x8eRQ\nm\xaa\xf2N\x1d\xda\xeb\xe3\x06\xd1at\xd9\xd5\xb2\xcb\xf5\x83\x84\x1eF\xab\x00\x8f\xa4\xb3\xd6\xaf\xcee3s\t\xf5\xcc*\xff\xf5\xf2\x98\x89T\x80\xa8\xae\x1e0\xe5\xa6\xc9.\v}\xa3\vi\x06e\xbd\xa1u\xc5_B\x8a\xe2@sF\xfd\xa9\x8f\x11\xdc\xbe\rjrb\x8a\xa6\x0f\xb3Zq\xf2\xce\xbc\xf3X\xcc\a\xe8v\xdb\xa0\x1cb>}4\x99(\xb8D\x15\xb8\xc9U\x14\xd6r\xc9\x81\xbbI\xc9+^\x00\xf6\xb5\xd9\x1e\x89G?/\xc5\x86\xd0\xab\xb3\xfd\xc9?\xa7B\x1b\xdc\xff\xab\xb6~\x96\xd6\x9f\x1d\xfb\xa1dg\x9d\x8d]\xdek\x9c0\xea\xb3\nV\x1d\x10g\xaa\xf9\xf0\xc9\n\x8c\xf25G\x9c\x19\xe5\xd8\xa3\xee\x11\x12f\xd5o\x00\xeaY\n\xe0\x9f\r\xd4\x8e9G\x01\x04\xb2j\xbfYX\x9a)OQ\xedk\xb9\x85\x03c\xf3\x80\x10eG(\x94m81PL\x8d\xa47\x1a\x16\x11\xcd\xcdf\x15\r\x19\xc3\x90\xbe\x12\x85V\xeb\x8d\x97\xf0\x9c!\x86:\xe8\x8b\xa7@l', 0x3) getpid() r5 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0xc1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r5, 0x0) r6 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x364f9cefc8a0a83, 0x0) ioctl$auto_tracing_buffers_fops_trace(r6, 0x5220, 0x0) 15.661738ms ago: executing program 0 (id=1172): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r1 = socket(0x10, 0x2, 0x14) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x670, r3, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_MLO_LINK_DISABLED={0x4}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x80}, @NL80211_ATTR_BEACON_TAIL={0x635, 0xf, "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"}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0xf}, @NL80211_ATTR_KEY_SEQ={0x9, 0xa, "9ec4bcd1ba"}]}, 0x670}, 0x1, 0x0, 0x0, 0x4000010}, 0x814) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x7fff) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x710f}, 0x5) rseq$auto(&(0x7f00000001c0)={0x0, 0x9, 0x8, 0x40, 0xffffffff, 0x9, "a9eed30cbb2c0849b3157ba08888c3532e0dbf956402dc8dd9dccd220b1fb1fcb36ff6173cf33067700dc3eb1080682265a526d30fad7da27dce3d089fa1355feb736ff7172207c37add21d90a42dbb6fe006b5d23f9d4719b20b59183bbdccee121f275b50ac4fad3b3291bdf5db06cb73d067f728bc6c12ecbdac81b36b3a18535f8e20ae47a2ef6e39524926d9568641fd03ae1cf8d48fcdf548bc1f60448"}, 0x9, 0x3, 0x2af3) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) prctl$auto_PR_SET_MM_ENV_END(0xfffffffa, 0xb, 0xffffffffffffffff, 0x79, 0x5) ioctl$auto_SCSI_IOCTL_SYNC(r2, 0x4, &(0x7f00000002c0)="1eb94217c6d41e9960eae19a5f4ee0c3f4a7120ff61d9c69b411b8d1ebccac754ce19831a08bf0120e3900e3b40c1f7981ebbb9d8aad62d2a89f34c4095dc6335a926e6fe9e2d427400b42cbc11b006b4c11c0d7553f692a8e5ebb59f47bc2d1a5084ad5d2aef3ed3aa1e6ca7da230df7684d5813b32decf0ab22819a92390bcb7c5d1b0a28160034fe2fccb35c1f0d6ea7b103dddcec8fdd3b249b8c1da5329a6e91bcac251b9bb58f9b1807ba5710b7d8e301acfe84edb30fd94c2ae7ec3") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) get_robust_list$auto(0x1, 0x0, 0x0) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x8006, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) ioctl$auto_PPPIOCSFLAGS(r5, 0x40047459, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 0s ago: executing program 2 (id=1173): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x54, 0x0) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/prev\x00', 0x101002, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) mount$auto(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0xb, 0x0) write$auto_proc_pid_attr_operations_base(r0, &(0x7f0000000000)="e065b5d69eb41c5a77c3ca821edfc08707747e7e7a7929d402833ce89a459419346ca8ed8ab17b141dee5cdd72a11e31faa8fe8d826c27114a417acc88ee0b8ebdb9f9a5f5c9d5829482fca65166cc36fccc68c01f1080ea93d1da85e9d19de049151638533d972700db14d1d580a3cf7edeca6f9f6683577933364726910776f1c785616dd1bedad0649942c085d90535fcf3c17aa86841cea027ebf7a7c28ffc5e44b768a503e878825e2cc2c88367c5e4a9a3332330b34ce8781c884a7d3f8f6c9b34cb339c7738c94d081f66e92116e7c818e7be9e78cb85365530cc7811fa2a95925763215f7073d49638b701440ee49c51f211", 0xf6) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r1, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x22, 0x0, [{0xc1, 0x1, 0x2}]}) preadv$auto(r0, &(0x7f0000000180)={0x0, 0x8}, 0x8, 0x6, 0x9f4b) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000840)='./cgroup.cpu/memory.stat\x00', 0x80200, 0x0) pread64$auto(r3, 0x0, 0x6, 0x40008) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000240)=""/118, 0x76) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) io_uring_setup$auto(0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) kernel console output (not intermixed with test programs): : syz.0.334 tries to shift op by -2048; fix this program [ 207.571477][ T7591] futex_wake_op: syz.0.334 tries to shift op by -2048; fix this program [ 207.584785][ T7591] 0x000000000001-0x000000020000 : "" [ 207.636871][ T7591] ftl_cs: FTL header corrupt! [ 209.250376][ T30] audit: type=1800 audit(4294967331.770:6): pid=7623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.339" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 209.690599][ T7634] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 209.720404][ T30] audit: type=1800 audit(4294967332.390:7): pid=7633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.342" name="dbroot" dev="configfs" ino=20087 res=0 errno=0 [ 209.759940][ T7630] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 212.149215][ T7652] kexec: Could not allocate control_code_buffer [ 212.160145][ T7676] netlink: 504 bytes leftover after parsing attributes in process `syz.2.349'. [ 212.516176][ T7674] netlink: 350 bytes leftover after parsing attributes in process `syz.2.349'. [ 214.114141][ T7701] netlink: 342 bytes leftover after parsing attributes in process `syz.1.354'. [ 214.169761][ T7701] FAULT_INJECTION: forcing a failure. [ 214.169761][ T7701] name failslab, interval 1, probability 0, space 0, times 0 [ 214.187586][ T7701] CPU: 0 UID: 0 PID: 7701 Comm: syz.1.354 Not tainted syzkaller #0 PREEMPT(full) [ 214.187627][ T7701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 214.187643][ T7701] Call Trace: [ 214.187652][ T7701] [ 214.187664][ T7701] dump_stack_lvl+0x100/0x190 [ 214.187724][ T7701] should_fail_ex.cold+0x5/0xa [ 214.187754][ T7701] should_failslab+0xc2/0x120 [ 214.187773][ T7701] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 214.187800][ T7701] ? __d_alloc+0x34/0xa80 [ 214.187819][ T7701] ? security_inode_alloc+0xcf/0x2c0 [ 214.187840][ T7701] __d_alloc+0x34/0xa80 [ 214.187858][ T7701] ? __ns_ref_active_get+0x9f/0x1b0 [ 214.187882][ T7701] path_from_stashed+0x427/0x750 [ 214.187900][ T7701] ? do_raw_spin_unlock+0x145/0x1e0 [ 214.187931][ T7701] ns_get_path+0x60/0x80 [ 214.187949][ T7701] proc_ns_get_link+0x121/0x230 [ 214.187974][ T7701] ? __pfx_proc_ns_get_link+0x10/0x10 [ 214.188001][ T7701] ? atime_needs_update+0x8b/0x6b0 [ 214.188028][ T7701] pick_link+0xd17/0x13c0 [ 214.188052][ T7701] ? __pfx_proc_ns_get_link+0x10/0x10 [ 214.188079][ T7701] step_into_slowpath+0x9ba/0xf90 [ 214.188110][ T7701] ? __pfx_step_into_slowpath+0x10/0x10 [ 214.188136][ T7701] ? find_held_lock+0x2b/0x80 [ 214.188160][ T7701] path_openat+0xf95/0x31a0 [ 214.188185][ T7701] ? __pfx_path_openat+0x10/0x10 [ 214.188213][ T7701] do_file_open+0x20e/0x430 [ 214.188233][ T7701] ? __pfx_do_file_open+0x10/0x10 [ 214.188267][ T7701] ? alloc_fd+0x476/0x790 [ 214.188286][ T7701] ? do_getname+0x191/0x390 [ 214.188310][ T7701] do_sys_openat2+0x10d/0x1e0 [ 214.188332][ T7701] ? __pfx_do_sys_openat2+0x10/0x10 [ 214.188364][ T7701] __x64_sys_openat+0x12d/0x210 [ 214.188388][ T7701] ? __pfx___x64_sys_openat+0x10/0x10 [ 214.188425][ T7701] do_syscall_64+0x106/0xf80 [ 214.188450][ T7701] ? clear_bhb_loop+0x40/0x90 [ 214.188472][ T7701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.188490][ T7701] RIP: 0033:0x7fbad275cfce [ 214.188505][ T7701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 214.188522][ T7701] RSP: 002b:00007fbad3623ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 214.188540][ T7701] RAX: ffffffffffffffda RBX: 00007fbad36246c0 RCX: 00007fbad275cfce [ 214.188551][ T7701] RDX: 0000000000000002 RSI: 00007fbad3623f90 RDI: ffffffffffffff9c [ 214.188562][ T7701] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 214.188572][ T7701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.188582][ T7701] R13: 00007fbad2a16038 R14: 00007fbad2a15fa0 R15: 00007ffc0949bf08 [ 214.188605][ T7701] [ 214.508803][ T7701] tipc: Started in network mode [ 214.530077][ T7701] tipc: Node identity ee00, cluster identity 4711 [ 214.555312][ T7701] tipc: Node number set to 60928 [ 217.456456][ T7755] zswap: compressor not available [ 217.781114][ T7766] FAULT_INJECTION: forcing a failure. [ 217.781114][ T7766] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 217.794922][ T7766] CPU: 1 UID: 0 PID: 7766 Comm: syz.1.367 Not tainted syzkaller #0 PREEMPT(full) [ 217.794948][ T7766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 217.794959][ T7766] Call Trace: [ 217.794966][ T7766] [ 217.794974][ T7766] dump_stack_lvl+0x100/0x190 [ 217.795005][ T7766] should_fail_ex.cold+0x5/0xa [ 217.795022][ T7766] ? prepare_alloc_pages+0x16d/0x5f0 [ 217.795045][ T7766] should_fail_alloc_page+0xeb/0x140 [ 217.795065][ T7766] prepare_alloc_pages+0x1f0/0x5f0 [ 217.795085][ T7766] ? debug_check_no_obj_freed+0x31f/0x630 [ 217.795106][ T7766] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 217.795137][ T7766] ? lock_acquire+0x1cf/0x380 [ 217.795160][ T7766] ? find_held_lock+0x2b/0x80 [ 217.795175][ T7766] ? free_unref_folios+0xd3f/0x1790 [ 217.795200][ T7766] ? free_unref_folios+0xd3f/0x1790 [ 217.795228][ T7766] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 217.795267][ T7766] ? lock_acquire+0x1cf/0x380 [ 217.795289][ T7766] ? find_held_lock+0x2b/0x80 [ 217.795305][ T7766] ? page_table_check_set+0x49a/0xa10 [ 217.795322][ T7766] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 217.795352][ T7766] ? policy_nodemask+0xed/0x4f0 [ 217.795372][ T7766] alloc_pages_mpol+0x1fb/0x550 [ 217.795399][ T7766] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 217.795424][ T7766] folio_alloc_mpol_noprof+0x36/0x340 [ 217.795447][ T7766] vma_alloc_folio_noprof+0xed/0x1d0 [ 217.795469][ T7766] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 217.795497][ T7766] do_anonymous_page+0xb3a/0x1fb0 [ 217.795529][ T7766] __handle_mm_fault+0x1d42/0x2b60 [ 217.795560][ T7766] ? __pfx___handle_mm_fault+0x10/0x10 [ 217.795592][ T7766] ? pte_offset_map_lock+0x174/0x320 [ 217.795610][ T7766] ? find_held_lock+0x2b/0x80 [ 217.795633][ T7766] ? follow_page_pte+0x5b3/0x1400 [ 217.795656][ T7766] handle_mm_fault+0x36d/0xa20 [ 217.795686][ T7766] __get_user_pages+0xf9c/0x34d0 [ 217.795714][ T7766] ? __pfx___get_user_pages+0x10/0x10 [ 217.795741][ T7766] populate_vma_page_range+0x267/0x3f0 [ 217.795765][ T7766] ? __pfx_populate_vma_page_range+0x10/0x10 [ 217.795787][ T7766] ? __pfx_find_vma_intersection+0x10/0x10 [ 217.795808][ T7766] ? do_mmap+0x93f/0x12f0 [ 217.795829][ T7766] __mm_populate+0x107/0x3a0 [ 217.795851][ T7766] ? __pfx___mm_populate+0x10/0x10 [ 217.795875][ T7766] ? up_write+0x290/0x4f0 [ 217.795902][ T7766] vm_mmap_pgoff+0x37f/0x470 [ 217.795924][ T7766] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 217.795946][ T7766] ? do_futex+0x192/0x350 [ 217.795969][ T7766] ? __pfx_do_futex+0x10/0x10 [ 217.795990][ T7766] ? __pfx_do_sys_openat2+0x10/0x10 [ 217.796016][ T7766] ksys_mmap_pgoff+0xe1/0x650 [ 217.796035][ T7766] ? __x64_sys_futex+0x34f/0x4d0 [ 217.796057][ T7766] ? __x64_sys_futex+0x358/0x4d0 [ 217.796080][ T7766] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 217.796099][ T7766] ? xfd_validate_state+0x129/0x190 [ 217.796128][ T7766] __x64_sys_mmap+0x125/0x190 [ 217.796162][ T7766] do_syscall_64+0x106/0xf80 [ 217.796187][ T7766] ? clear_bhb_loop+0x40/0x90 [ 217.796210][ T7766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.796229][ T7766] RIP: 0033:0x7fbad279c799 [ 217.796246][ T7766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.796263][ T7766] RSP: 002b:00007fbad3603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 217.796280][ T7766] RAX: ffffffffffffffda RBX: 00007fbad2a16090 RCX: 00007fbad279c799 [ 217.796291][ T7766] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 217.796301][ T7766] RBP: 00007fbad2832c99 R08: 0000000000000002 R09: 0000000000008000 [ 217.796311][ T7766] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 217.796321][ T7766] R13: 00007fbad2a16128 R14: 00007fbad2a16090 R15: 00007ffc0949bf08 [ 217.796345][ T7766] [ 219.354877][ T7794] hugetlbfs: syz.0.373 (7794): Using mlock ulimits for SHM_HUGETLB is obsolete [ 220.953827][ T7822] Invalid ELF header magic: != ELF [ 226.199188][ T7902] futex_wake_op: syz.2.394 tries to shift op by -2048; fix this program [ 226.207839][ T7902] futex_wake_op: syz.2.394 tries to shift op by -2048; fix this program [ 226.270651][ T7902] 0x000000000001-0x000000020000 : "" [ 226.352352][ T7902] ftl_cs: FTL header corrupt! [ 227.202644][ T7929] FAULT_INJECTION: forcing a failure. [ 227.202644][ T7929] name failslab, interval 1, probability 0, space 0, times 0 [ 227.215732][ T7929] CPU: 1 UID: 0 PID: 7929 Comm: syz.1.399 Not tainted syzkaller #0 PREEMPT(full) [ 227.215775][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 227.215793][ T7929] Call Trace: [ 227.215802][ T7929] [ 227.215814][ T7929] dump_stack_lvl+0x100/0x190 [ 227.215865][ T7929] should_fail_ex.cold+0x5/0xa [ 227.215900][ T7929] ? lsm_blob_alloc+0x68/0x90 [ 227.215941][ T7929] should_failslab+0xc2/0x120 [ 227.215973][ T7929] __kmalloc_noprof+0xe0/0x850 [ 227.216018][ T7929] ? trace_kmem_cache_alloc+0xf3/0x120 [ 227.216058][ T7929] lsm_blob_alloc+0x68/0x90 [ 227.216100][ T7929] security_sk_alloc+0x2d/0x290 [ 227.216130][ T7929] sk_prot_alloc+0x1d1/0x2a0 [ 227.216164][ T7929] sk_alloc+0x36/0xe80 [ 227.216205][ T7929] unix_create1+0xa6/0x700 [ 227.216255][ T7929] unix_create+0x145/0x270 [ 227.216304][ T7929] __sock_create+0x339/0x860 [ 227.216344][ T7929] __sys_socketpair+0x261/0x5b0 [ 227.216381][ T7929] ? __pfx___sys_socketpair+0x10/0x10 [ 227.216416][ T7929] ? __pfx___x64_sys_futex+0x10/0x10 [ 227.216457][ T7929] ? __pfx_do_writev+0x10/0x10 [ 227.216507][ T7929] __x64_sys_socketpair+0x96/0x100 [ 227.216540][ T7929] ? lockdep_hardirqs_on+0x78/0x100 [ 227.216589][ T7929] do_syscall_64+0x106/0xf80 [ 227.216629][ T7929] ? clear_bhb_loop+0x40/0x90 [ 227.216666][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.216696][ T7929] RIP: 0033:0x7fbad279c799 [ 227.216721][ T7929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.216748][ T7929] RSP: 002b:00007fbad3624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 227.216777][ T7929] RAX: ffffffffffffffda RBX: 00007fbad2a15fa0 RCX: 00007fbad279c799 [ 227.216797][ T7929] RDX: 8000000000000000 RSI: 0000000000000002 RDI: 0000000000000001 [ 227.216814][ T7929] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 227.216831][ T7929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.216849][ T7929] R13: 00007fbad2a16038 R14: 00007fbad2a15fa0 R15: 00007ffc0949bf08 [ 227.216890][ T7929] [ 228.283726][ T7943] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 228.436324][ T7943] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 229.562050][ T7959] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 229.834342][ T7961] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 230.636892][ T7961] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input13 [ 230.785491][ T7960] program syz.2.405 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 230.935017][ T7967] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 230.978787][ T7967] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 231.012486][ T7967] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 231.035108][ T7967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 231.773963][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 232.528153][ T8006] vivid-007: ================= START STATUS ================= [ 232.622222][ T8006] vivid-007: Generate PTS: true [ 232.630249][ T8006] vivid-007: Generate SCR: true [ 232.682839][ T8006] tpg source WxH: 320x240 (Y'CbCr) [ 232.689966][ T8006] tpg field: 1 [ 232.695461][ T8006] tpg crop: (0,0)/320x240 [ 232.703357][ T8006] tpg compose: (0,0)/320x240 [ 232.736576][ T8006] tpg colorspace: 8 [ 232.741198][ T8006] tpg transfer function: 0/0 [ 232.746827][ T8006] tpg Y'CbCr encoding: 0/0 [ 232.752391][ T8006] tpg quantization: 0/0 [ 232.827156][ T8006] tpg RGB range: 0/2 [ 232.831560][ T8006] vivid-007: ================== END STATUS ================== [ 233.053733][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 233.059847][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 233.065951][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 233.095746][ T8017] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 233.170518][ T8017] FAULT_INJECTION: forcing a failure. [ 233.170518][ T8017] name failslab, interval 1, probability 0, space 0, times 0 [ 233.219206][ T8017] CPU: 1 UID: 0 PID: 8017 Comm: syz.0.418 Not tainted syzkaller #0 PREEMPT(full) [ 233.219240][ T8017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 233.219251][ T8017] Call Trace: [ 233.219258][ T8017] [ 233.219266][ T8017] dump_stack_lvl+0x100/0x190 [ 233.219297][ T8017] should_fail_ex.cold+0x5/0xa [ 233.219319][ T8017] should_failslab+0xc2/0x120 [ 233.219338][ T8017] __kmalloc_node_noprof+0xe6/0x850 [ 233.219364][ T8017] ? __rb_allocate_pages+0x589/0xf50 [ 233.219395][ T8017] __rb_allocate_pages+0x589/0xf50 [ 233.219427][ T8017] ring_buffer_subbuf_order_set+0x3ef/0x18c0 [ 233.219459][ T8017] ? tracing_stop_tr+0xf6/0x210 [ 233.219486][ T8017] ? __pfx_ring_buffer_subbuf_order_set+0x10/0x10 [ 233.219515][ T8017] ? __pfx___might_resched+0x10/0x10 [ 233.219541][ T8017] ? iovec_from_user+0xda/0x140 [ 233.219567][ T8017] buffer_subbuf_size_write+0x182/0x280 [ 233.219585][ T8017] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 233.219621][ T8017] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 233.219649][ T8017] vfs_writev+0x5ea/0xe10 [ 233.219675][ T8017] ? rcu_is_watching+0x12/0xc0 [ 233.219707][ T8017] ? __pfx_vfs_writev+0x10/0x10 [ 233.219733][ T8017] ? fdget_pos+0x2aa/0x380 [ 233.219775][ T8017] ? __fget_files+0x21f/0x3d0 [ 233.219797][ T8017] ? do_writev+0x13e/0x340 [ 233.219822][ T8017] do_writev+0x13e/0x340 [ 233.219858][ T8017] ? __pfx_do_writev+0x10/0x10 [ 233.219911][ T8017] do_syscall_64+0x106/0xf80 [ 233.219947][ T8017] ? clear_bhb_loop+0x40/0x90 [ 233.219969][ T8017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.219988][ T8017] RIP: 0033:0x7f1dd459c799 [ 233.220004][ T8017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.220021][ T8017] RSP: 002b:00007f1dd53e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 233.220039][ T8017] RAX: ffffffffffffffda RBX: 00007f1dd4815fa0 RCX: 00007f1dd459c799 [ 233.220050][ T8017] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000009 [ 233.220060][ T8017] RBP: 00007f1dd4632c99 R08: 0000000000000000 R09: 0000000000000000 [ 233.220070][ T8017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.220080][ T8017] R13: 00007f1dd4816038 R14: 00007f1dd4815fa0 R15: 00007ffc3b06fed8 [ 233.220104][ T8017] [ 236.331160][ T8075] FAULT_INJECTION: forcing a failure. [ 236.331160][ T8075] name failslab, interval 1, probability 0, space 0, times 0 [ 236.371860][ T8075] CPU: 0 UID: 0 PID: 8075 Comm: syz.3.428 Not tainted syzkaller #0 PREEMPT(full) [ 236.371900][ T8075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.371916][ T8075] Call Trace: [ 236.371926][ T8075] [ 236.371937][ T8075] dump_stack_lvl+0x100/0x190 [ 236.371986][ T8075] should_fail_ex.cold+0x5/0xa [ 236.372022][ T8075] should_failslab+0xc2/0x120 [ 236.372055][ T8075] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 236.372099][ T8075] ? alloc_inode+0x183/0x250 [ 236.372158][ T8075] alloc_inode+0x183/0x250 [ 236.372198][ T8075] new_inode+0x22/0x1c0 [ 236.372233][ T8075] ? dput.part.0+0xdd/0x570 [ 236.372273][ T8075] simple_fill_super+0x2d9/0x680 [ 236.372309][ T8075] ? __pfx_nfsd_fill_super+0x10/0x10 [ 236.372342][ T8075] nfsd_fill_super+0x98/0x560 [ 236.372371][ T8075] ? __pfx_set_anon_super_fc+0x10/0x10 [ 236.372414][ T8075] ? __pfx_nfsd_fill_super+0x10/0x10 [ 236.372444][ T8075] get_tree_keyed+0x10e/0x1d0 [ 236.372491][ T8075] vfs_get_tree+0x92/0x320 [ 236.372531][ T8075] path_mount+0x7d0/0x23d0 [ 236.372569][ T8075] ? __pfx_path_mount+0x10/0x10 [ 236.372600][ T8075] ? lockdep_hardirqs_on+0x78/0x100 [ 236.372644][ T8075] ? putname+0xb1/0x110 [ 236.372672][ T8075] ? kmem_cache_free+0x124/0x6a0 [ 236.372725][ T8075] ? __x64_sys_mount+0x293/0x310 [ 236.372757][ T8075] __x64_sys_mount+0x293/0x310 [ 236.372800][ T8075] ? __pfx___x64_sys_mount+0x10/0x10 [ 236.372846][ T8075] do_syscall_64+0x106/0xf80 [ 236.372885][ T8075] ? clear_bhb_loop+0x40/0x90 [ 236.372923][ T8075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.372953][ T8075] RIP: 0033:0x7f50f999c799 [ 236.372977][ T8075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.373004][ T8075] RSP: 002b:00007f50fa8c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 236.373030][ T8075] RAX: ffffffffffffffda RBX: 00007f50f9c16090 RCX: 00007f50f999c799 [ 236.373049][ T8075] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 236.373067][ T8075] RBP: 00007f50f9a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 236.373083][ T8075] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 236.373100][ T8075] R13: 00007f50f9c16128 R14: 00007f50f9c16090 R15: 00007fffa59b6508 [ 236.373140][ T8075] [ 236.622582][ T8069] FAULT_INJECTION: forcing a failure. [ 236.622582][ T8069] name failslab, interval 1, probability 0, space 0, times 0 [ 236.635324][ T8069] CPU: 0 UID: 0 PID: 8069 Comm: syz.0.427 Not tainted syzkaller #0 PREEMPT(full) [ 236.635349][ T8069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 236.635359][ T8069] Call Trace: [ 236.635366][ T8069] [ 236.635373][ T8069] dump_stack_lvl+0x100/0x190 [ 236.635404][ T8069] should_fail_ex.cold+0x5/0xa [ 236.635426][ T8069] should_failslab+0xc2/0x120 [ 236.635446][ T8069] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 236.635476][ T8069] ? sctp_sysctl_net_register+0x30/0x200 [ 236.635505][ T8069] ? __pfx_sctp_defaults_init+0x10/0x10 [ 236.635530][ T8069] kmemdup_noprof+0x29/0x60 [ 236.635559][ T8069] sctp_sysctl_net_register+0x30/0x200 [ 236.635586][ T8069] ? __pfx_sctp_defaults_init+0x10/0x10 [ 236.635618][ T8069] sctp_defaults_init+0x6d2/0xd90 [ 236.635644][ T8069] ? __pfx_sctp_defaults_init+0x10/0x10 [ 236.635669][ T8069] ops_init+0x1e2/0x5f0 [ 236.635698][ T8069] setup_net+0x118/0x3a0 [ 236.635725][ T8069] ? __pfx_setup_net+0x10/0x10 [ 236.635749][ T8069] ? lockdep_init_map_type+0x5c/0x250 [ 236.635773][ T8069] ? mutex_init_lockep+0x110/0x150 [ 236.635800][ T8069] copy_net_ns+0x46f/0x7c0 [ 236.635819][ T8069] create_new_namespaces+0x3ea/0xac0 [ 236.635843][ T8069] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 236.635864][ T8069] ksys_unshare+0x473/0xad0 [ 236.635887][ T8069] ? __pfx_ksys_unshare+0x10/0x10 [ 236.635917][ T8069] __x64_sys_unshare+0x31/0x40 [ 236.635939][ T8069] do_syscall_64+0x106/0xf80 [ 236.635963][ T8069] ? clear_bhb_loop+0x40/0x90 [ 236.635985][ T8069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.636003][ T8069] RIP: 0033:0x7f1dd459c799 [ 236.636018][ T8069] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.636034][ T8069] RSP: 002b:00007f1dd53e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 236.636051][ T8069] RAX: ffffffffffffffda RBX: 00007f1dd4815fa0 RCX: 00007f1dd459c799 [ 236.636062][ T8069] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 236.636072][ T8069] RBP: 00007f1dd4632c99 R08: 0000000000000000 R09: 0000000000000000 [ 236.636082][ T8069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.636092][ T8069] R13: 00007f1dd4816038 R14: 00007f1dd4815fa0 R15: 00007ffc3b06fed8 [ 236.636114][ T8069] [ 239.009923][ T8121] FAULT_INJECTION: forcing a failure. [ 239.009923][ T8121] name failslab, interval 1, probability 0, space 0, times 0 [ 239.054771][ T8121] CPU: 1 UID: 0 PID: 8121 Comm: syz.2.436 Not tainted syzkaller #0 PREEMPT(full) [ 239.054811][ T8121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 239.054827][ T8121] Call Trace: [ 239.054845][ T8121] [ 239.054857][ T8121] dump_stack_lvl+0x100/0x190 [ 239.054907][ T8121] should_fail_ex.cold+0x5/0xa [ 239.054940][ T8121] should_failslab+0xc2/0x120 [ 239.054960][ T8121] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 239.054987][ T8121] ? alloc_inode+0x183/0x250 [ 239.055009][ T8121] ? stashed_dentry_get+0x10a/0x2c0 [ 239.055027][ T8121] ? stashed_dentry_get+0x10a/0x2c0 [ 239.055048][ T8121] alloc_inode+0x183/0x250 [ 239.055072][ T8121] path_from_stashed+0x25b/0x750 [ 239.055096][ T8121] pidfs_alloc_file+0xf8/0x290 [ 239.055124][ T8121] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 239.055158][ T8121] pidfd_prepare+0x123/0x200 [ 239.055181][ T8121] __x64_sys_pidfd_open+0x105/0x1a0 [ 239.055206][ T8121] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 239.055237][ T8121] do_syscall_64+0x106/0xf80 [ 239.055261][ T8121] ? clear_bhb_loop+0x40/0x90 [ 239.055284][ T8121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.055302][ T8121] RIP: 0033:0x7f995299c799 [ 239.055318][ T8121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.055334][ T8121] RSP: 002b:00007f9953926028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 239.055352][ T8121] RAX: ffffffffffffffda RBX: 00007f9952c15fa0 RCX: 00007f995299c799 [ 239.055363][ T8121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 239.055373][ T8121] RBP: 00007f9952a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 239.055383][ T8121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.055392][ T8121] R13: 00007f9952c16038 R14: 00007f9952c15fa0 R15: 00007fff081a99e8 [ 239.055418][ T8121] [ 239.441334][ T8124] ======================================================= [ 239.441334][ T8124] WARNING: The mand mount option has been deprecated and [ 239.441334][ T8124] and is ignored by this kernel. Remove the mand [ 239.441334][ T8124] option from the mount to silence this warning. [ 239.441334][ T8124] ======================================================= [ 240.529575][ T8125] kexec: Could not allocate control_code_buffer [ 240.850031][ T8141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.439'. [ 240.866286][ T8141] netlink: 'syz.2.439': attribute type 1 has an invalid length. [ 240.875419][ T8141] netlink: 5 bytes leftover after parsing attributes in process `syz.2.439'. [ 241.304494][ T5829] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 241.474505][ T8151] ERROR: Out of memory at tomoyo_memory_ok. [ 251.281409][ T8345] Console: switching to colour frame buffer device 128x48 [ 251.858637][ T5829] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 252.800309][ T8372] vivid-007: ================= START STATUS ================= [ 252.815339][ T8372] vivid-007: Generate PTS: true [ 252.820378][ T8372] vivid-007: Generate SCR: true [ 252.836290][ T8372] tpg source WxH: 320x240 (Y'CbCr) [ 252.856383][ T8372] tpg field: 1 [ 252.871871][ T8372] tpg crop: (0,0)/320x240 [ 252.886677][ T8372] tpg compose: (0,0)/320x240 [ 252.900523][ T8372] tpg colorspace: 8 [ 252.924427][ T8372] tpg transfer function: 0/0 [ 252.946330][ T8372] tpg Y'CbCr encoding: 0/0 [ 252.974340][ T8372] tpg quantization: 0/0 [ 253.005195][ T8372] tpg RGB range: 0/2 [ 253.041877][ T8372] vivid-007: ================== END STATUS ================== [ 253.836207][ T8397] FAULT_INJECTION: forcing a failure. [ 253.836207][ T8397] name failslab, interval 1, probability 0, space 0, times 0 [ 253.890371][ T8397] CPU: 0 UID: 0 PID: 8397 Comm: syz.3.481 Not tainted syzkaller #0 PREEMPT(full) [ 253.890400][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 253.890410][ T8397] Call Trace: [ 253.890416][ T8397] [ 253.890424][ T8397] dump_stack_lvl+0x100/0x190 [ 253.890455][ T8397] should_fail_ex.cold+0x5/0xa [ 253.890476][ T8397] should_failslab+0xc2/0x120 [ 253.890496][ T8397] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 253.890522][ T8397] ? alloc_empty_file_noaccount+0x23/0xd0 [ 253.890550][ T8397] alloc_empty_file_noaccount+0x23/0xd0 [ 253.890574][ T8397] alloc_file_pseudo_noaccount+0x13a/0x230 [ 253.890599][ T8397] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 253.890627][ T8397] ? iput+0x3a/0x40 [ 253.890651][ T8397] bdev_file_open_by_dev+0x13a/0x210 [ 253.890678][ T8397] blkdev_bszset+0x170/0x240 [ 253.890703][ T8397] ? __pfx_blkdev_bszset+0x10/0x10 [ 253.890728][ T8397] ? find_held_lock+0x2b/0x80 [ 253.890751][ T8397] ? __fget_files+0x215/0x3d0 [ 253.890766][ T8397] ? hook_file_ioctl_common+0x146/0x410 [ 253.890789][ T8397] blkdev_ioctl+0x513/0x6f0 [ 253.890814][ T8397] ? __pfx_blkdev_ioctl+0x10/0x10 [ 253.890841][ T8397] ? __pfx_blkdev_ioctl+0x10/0x10 [ 253.890867][ T8397] __x64_sys_ioctl+0x18e/0x210 [ 253.890894][ T8397] do_syscall_64+0x106/0xf80 [ 253.890919][ T8397] ? clear_bhb_loop+0x40/0x90 [ 253.890941][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.890959][ T8397] RIP: 0033:0x7f50f999c799 [ 253.890974][ T8397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.890990][ T8397] RSP: 002b:00007f50fa8e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 253.891008][ T8397] RAX: ffffffffffffffda RBX: 00007f50f9c15fa0 RCX: 00007f50f999c799 [ 253.891019][ T8397] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000004 [ 253.891030][ T8397] RBP: 00007f50f9a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 253.891040][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.891050][ T8397] R13: 00007f50f9c16038 R14: 00007f50f9c15fa0 R15: 00007fffa59b6508 [ 253.891073][ T8397] [ 254.718165][ T8401] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 254.725279][ T8401] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 254.731309][ T8401] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 254.763876][ T8401] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 254.810505][ T8406] netlink: 'syz.3.483': attribute type 4 has an invalid length. [ 254.873393][ T8406] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 255.863693][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.873353][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.105423][ T30] audit: type=1804 audit(4294967378.780:8): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.486" name=2F6E6577726F6F742F3132372F22050820 dev="tmpfs" ino=682 res=1 errno=0 [ 256.140557][ T30] audit: type=1800 audit(4294967378.780:9): pid=8419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.486" name=22050820 dev="tmpfs" ino=682 res=0 errno=0 [ 256.573308][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 256.813355][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.813416][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 256.819410][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 259.798010][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.499'. [ 261.808791][ T8524] FAULT_INJECTION: forcing a failure. [ 261.808791][ T8524] name failslab, interval 1, probability 0, space 0, times 0 [ 261.853312][ T8524] CPU: 0 UID: 0 PID: 8524 Comm: syz.1.506 Not tainted syzkaller #0 PREEMPT(full) [ 261.853353][ T8524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 261.853380][ T8524] Call Trace: [ 261.853390][ T8524] [ 261.853402][ T8524] dump_stack_lvl+0x100/0x190 [ 261.853455][ T8524] should_fail_ex.cold+0x5/0xa [ 261.853489][ T8524] should_failslab+0xc2/0x120 [ 261.853521][ T8524] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 261.853563][ T8524] ? alloc_inode+0x183/0x250 [ 261.853601][ T8524] ? stashed_dentry_get+0x10a/0x2c0 [ 261.853629][ T8524] ? stashed_dentry_get+0x10a/0x2c0 [ 261.853664][ T8524] alloc_inode+0x183/0x250 [ 261.853702][ T8524] path_from_stashed+0x25b/0x750 [ 261.853741][ T8524] pidfs_alloc_file+0xf8/0x290 [ 261.853789][ T8524] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 261.853844][ T8524] pidfd_prepare+0x123/0x200 [ 261.853883][ T8524] __x64_sys_pidfd_open+0x105/0x1a0 [ 261.853927][ T8524] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 261.853980][ T8524] do_syscall_64+0x106/0xf80 [ 261.854021][ T8524] ? clear_bhb_loop+0x40/0x90 [ 261.854059][ T8524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.854089][ T8524] RIP: 0033:0x7fbad279c799 [ 261.854115][ T8524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.854143][ T8524] RSP: 002b:00007fbad3624028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 261.854171][ T8524] RAX: ffffffffffffffda RBX: 00007fbad2a15fa0 RCX: 00007fbad279c799 [ 261.854190][ T8524] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 261.854207][ T8524] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 261.854224][ T8524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.854258][ T8524] R13: 00007fbad2a16038 R14: 00007fbad2a15fa0 R15: 00007ffc0949bf08 [ 261.854299][ T8524] [ 263.781279][ T8526] kexec: Could not allocate control_code_buffer [ 264.587716][ T5909] usb usb40-port2: attempt power cycle [ 265.184486][ T5909] usb usb40-port2: unable to enumerate USB device [ 267.958221][ T8593] FAULT_INJECTION: forcing a failure. [ 267.958221][ T8593] name failslab, interval 1, probability 0, space 0, times 0 [ 268.000048][ T8593] CPU: 1 UID: 0 PID: 8593 Comm: syz.3.519 Not tainted syzkaller #0 PREEMPT(full) [ 268.000085][ T8593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 268.000096][ T8593] Call Trace: [ 268.000102][ T8593] [ 268.000109][ T8593] dump_stack_lvl+0x100/0x190 [ 268.000141][ T8593] should_fail_ex.cold+0x5/0xa [ 268.000162][ T8593] should_failslab+0xc2/0x120 [ 268.000182][ T8593] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 268.000210][ T8593] ? alloc_inode+0x183/0x250 [ 268.000232][ T8593] ? stashed_dentry_get+0x10a/0x2c0 [ 268.000250][ T8593] ? stashed_dentry_get+0x10a/0x2c0 [ 268.000272][ T8593] alloc_inode+0x183/0x250 [ 268.000295][ T8593] path_from_stashed+0x25b/0x750 [ 268.000319][ T8593] pidfs_alloc_file+0xf8/0x290 [ 268.000347][ T8593] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 268.000380][ T8593] pidfd_prepare+0x123/0x200 [ 268.000402][ T8593] __x64_sys_pidfd_open+0x105/0x1a0 [ 268.000434][ T8593] ? __pfx___x64_sys_pidfd_open+0x10/0x10 [ 268.000465][ T8593] do_syscall_64+0x106/0xf80 [ 268.000490][ T8593] ? clear_bhb_loop+0x40/0x90 [ 268.000511][ T8593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.000529][ T8593] RIP: 0033:0x7f50f999c799 [ 268.000544][ T8593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.000561][ T8593] RSP: 002b:00007f50fa8e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b2 [ 268.000578][ T8593] RAX: ffffffffffffffda RBX: 00007f50f9c15fa0 RCX: 00007f50f999c799 [ 268.000589][ T8593] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 268.000599][ T8593] RBP: 00007f50f9a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 268.000609][ T8593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.000619][ T8593] R13: 00007f50f9c16038 R14: 00007f50f9c15fa0 R15: 00007fffa59b6508 [ 268.000642][ T8593] [ 269.582155][ T8605] kexec: Could not allocate control_code_buffer [ 269.623119][ T8609] FAULT_INJECTION: forcing a failure. [ 269.623119][ T8609] name failslab, interval 1, probability 0, space 0, times 0 [ 269.667188][ T8609] CPU: 0 UID: 0 PID: 8609 Comm: syz.2.521 Not tainted syzkaller #0 PREEMPT(full) [ 269.667214][ T8609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 269.667225][ T8609] Call Trace: [ 269.667231][ T8609] [ 269.667238][ T8609] dump_stack_lvl+0x100/0x190 [ 269.667270][ T8609] should_fail_ex.cold+0x5/0xa [ 269.667290][ T8609] should_failslab+0xc2/0x120 [ 269.667310][ T8609] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 269.667336][ T8609] ? __proc_create+0x2cb/0x8c0 [ 269.667368][ T8609] __proc_create+0x2cb/0x8c0 [ 269.667398][ T8609] ? __pfx___proc_create+0x10/0x10 [ 269.667429][ T8609] ? _raw_write_unlock+0x28/0x50 [ 269.667452][ T8609] ? proc_register+0x559/0x8a0 [ 269.667471][ T8609] proc_create_reg+0x75/0x170 [ 269.667490][ T8609] proc_create_net_data+0x8e/0x1c0 [ 269.667507][ T8609] ? __pfx_proc_create_net_data+0x10/0x10 [ 269.667523][ T8609] ? net_generic+0xea/0x2a0 [ 269.667547][ T8609] ? __pfx_vlan_init_net+0x10/0x10 [ 269.667572][ T8609] vlan_proc_init+0xe6/0x160 [ 269.667595][ T8609] ops_init+0x1e2/0x5f0 [ 269.667633][ T8609] setup_net+0x118/0x3a0 [ 269.667660][ T8609] ? __pfx_setup_net+0x10/0x10 [ 269.667686][ T8609] ? lockdep_init_map_type+0x5c/0x250 [ 269.667711][ T8609] ? mutex_init_lockep+0x110/0x150 [ 269.667739][ T8609] copy_net_ns+0x46f/0x7c0 [ 269.667758][ T8609] create_new_namespaces+0x3ea/0xac0 [ 269.667783][ T8609] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 269.667804][ T8609] ksys_unshare+0x473/0xad0 [ 269.667828][ T8609] ? __pfx_ksys_unshare+0x10/0x10 [ 269.667859][ T8609] __x64_sys_unshare+0x31/0x40 [ 269.667881][ T8609] do_syscall_64+0x106/0xf80 [ 269.667904][ T8609] ? clear_bhb_loop+0x40/0x90 [ 269.667926][ T8609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.667952][ T8609] RIP: 0033:0x7f995299c799 [ 269.667967][ T8609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.667983][ T8609] RSP: 002b:00007f9953926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 269.668001][ T8609] RAX: ffffffffffffffda RBX: 00007f9952c15fa0 RCX: 00007f995299c799 [ 269.668013][ T8609] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 269.668023][ T8609] RBP: 00007f9952a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 269.668034][ T8609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.668044][ T8609] R13: 00007f9952c16038 R14: 00007f9952c15fa0 R15: 00007fff081a99e8 [ 269.668066][ T8609] [ 269.668075][ T8609] 8021q: can't create entry in proc filesystem! [ 270.019295][ T30] audit: type=1800 audit(4294967392.680:10): pid=8614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.522" name="dbroot" dev="configfs" ino=27730 res=0 errno=0 [ 271.929603][ T8631] FAULT_INJECTION: forcing a failure. [ 271.929603][ T8631] name failslab, interval 1, probability 0, space 0, times 0 [ 271.979073][ T8631] CPU: 1 UID: 0 PID: 8631 Comm: syz.3.524 Not tainted syzkaller #0 PREEMPT(full) [ 271.979117][ T8631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 271.979135][ T8631] Call Trace: [ 271.979145][ T8631] [ 271.979157][ T8631] dump_stack_lvl+0x100/0x190 [ 271.979210][ T8631] should_fail_ex.cold+0x5/0xa [ 271.979245][ T8631] should_failslab+0xc2/0x120 [ 271.979278][ T8631] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 271.979321][ T8631] ? proc_alloc_inode+0x25/0x200 [ 271.979368][ T8631] ? __pfx_proc_alloc_inode+0x10/0x10 [ 271.979413][ T8631] proc_alloc_inode+0x25/0x200 [ 271.979453][ T8631] alloc_inode+0x68/0x250 [ 271.979492][ T8631] new_inode+0x22/0x1c0 [ 271.979537][ T8631] proc_pid_make_inode+0x22/0x160 [ 271.979582][ T8631] proc_pident_instantiate+0x85/0x310 [ 271.979641][ T8631] proc_pident_lookup+0x1e3/0x270 [ 271.979691][ T8631] lookup_open.isra.0+0x631/0x11b0 [ 271.979741][ T8631] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 271.979795][ T8631] ? __pfx___might_resched+0x10/0x10 [ 271.979839][ T8631] ? mnt_get_write_access+0x52/0x2f0 [ 271.979889][ T8631] ? __pfx_down_write+0x10/0x10 [ 271.979934][ T8631] ? mnt_get_write_access+0x1e9/0x2f0 [ 271.979982][ T8631] path_openat+0x2291/0x31a0 [ 271.980029][ T8631] ? __pfx_path_openat+0x10/0x10 [ 271.980078][ T8631] do_file_open+0x20e/0x430 [ 271.980113][ T8631] ? __pfx_do_file_open+0x10/0x10 [ 271.980161][ T8631] ? __pfx_kfree_link+0x10/0x10 [ 271.980216][ T8631] ? alloc_fd+0x476/0x790 [ 271.980251][ T8631] ? do_getname+0x191/0x390 [ 271.980293][ T8631] do_sys_openat2+0x10d/0x1e0 [ 271.980336][ T8631] ? __pfx_do_sys_openat2+0x10/0x10 [ 271.980377][ T8631] ? __fget_files+0x21f/0x3d0 [ 271.980415][ T8631] __x64_sys_openat+0x12d/0x210 [ 271.980451][ T8631] ? __pfx___x64_sys_openat+0x10/0x10 [ 271.980508][ T8631] do_syscall_64+0x106/0xf80 [ 271.980546][ T8631] ? clear_bhb_loop+0x40/0x90 [ 271.980580][ T8631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.980621][ T8631] RIP: 0033:0x7f50f999c799 [ 271.980645][ T8631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.980662][ T8631] RSP: 002b:00007f50fa8a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 271.980681][ T8631] RAX: ffffffffffffffda RBX: 00007f50f9c16180 RCX: 00007f50f999c799 [ 271.980692][ T8631] RDX: 0000000000000840 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 271.980702][ T8631] RBP: 00007f50f9a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 271.980712][ T8631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.980722][ T8631] R13: 00007f50f9c16218 R14: 00007f50f9c16180 R15: 00007fffa59b6508 [ 271.980745][ T8631] [ 278.365278][ T8689] program syz.0.531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 284.423346][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 284.852000][ T8827] vivid-007: ================= START STATUS ================= [ 284.869289][ T8827] vivid-007: Generate PTS: true [ 284.904585][ T8827] vivid-007: Generate SCR: true [ 284.928286][ T8827] tpg source WxH: 320x240 (Y'CbCr) [ 284.961214][ T8827] tpg field: 1 [ 284.974048][ T8827] tpg crop: (0,0)/320x240 [ 285.012831][ T8827] tpg compose: (0,0)/320x240 [ 285.092177][ T8827] tpg colorspace: 8 [ 285.119540][ T8827] tpg transfer function: 0/0 [ 285.203124][ T8827] tpg Y'CbCr encoding: 0/0 [ 285.265523][ T8827] tpg quantization: 0/0 [ 285.430324][ T8827] tpg RGB range: 0/2 [ 285.458352][ T8827] vivid-007: ================== END STATUS ================== [ 288.917280][ T8892] netlink: 'syz.1.566': attribute type 4 has an invalid length. [ 288.953305][ T8892] netlink: 'syz.1.566': attribute type 1 has an invalid length. [ 289.282098][ T30] audit: type=1800 audit(4294967411.890:11): pid=8895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.567" name="dbroot" dev="configfs" ino=28422 res=0 errno=0 [ 291.110115][ T8912] vivid-007: ================= START STATUS ================= [ 291.184276][ T8912] vivid-007: Generate PTS: true [ 291.200141][ T8912] vivid-007: Generate SCR: true [ 291.217718][ T8912] tpg source WxH: 320x240 (Y'CbCr) [ 291.222870][ T8912] tpg field: 1 [ 291.255859][ T8912] tpg crop: (0,0)/320x240 [ 291.296853][ T8912] tpg compose: (0,0)/320x240 [ 291.301479][ T8912] tpg colorspace: 8 [ 291.354681][ T8912] tpg transfer function: 0/0 [ 291.359317][ T8912] tpg Y'CbCr encoding: 0/0 [ 291.383377][ T8912] tpg quantization: 0/0 [ 291.423322][ T8912] tpg RGB range: 0/2 [ 291.427258][ T8912] vivid-007: ================== END STATUS ================== [ 293.906963][ T8968] netlink: 28 bytes leftover after parsing attributes in process `syz.2.576'. [ 293.936891][ T8968] ipvlan0: entered promiscuous mode [ 293.967919][ T8968] ipvlan0: entered allmulticast mode [ 294.013568][ T8968] veth0_vlan: entered allmulticast mode [ 294.164780][ T24] usb usb40-port2: attempt power cycle [ 294.794078][ T24] usb usb40-port2: unable to enumerate USB device [ 295.863536][ T5831] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 296.516234][ T8986] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 296.555403][ T8986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 296.563322][ T8986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 296.571088][ T8986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 296.733885][ T5145] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 296.921887][ T8999] netlink: 'syz.2.582': attribute type 4 has an invalid length. [ 296.921935][ T8999] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 297.034590][ T30] audit: type=1807 audit(4294967419.700:12): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 297.062503][ T8995] ima: policy update failed [ 297.083254][ T30] audit: type=1802 audit(4294967419.700:13): pid=8998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.584" res=0 errno=0 [ 297.193344][ T30] audit: type=1802 audit(4294967419.740:14): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.584" res=0 errno=0 [ 298.333353][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 298.595596][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 298.595644][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 298.601658][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 299.295720][ T9026] kvm: kvm [9025]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000085) [ 301.868682][ T9055] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 301.938126][ T9055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 301.976426][ T9055] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 301.993994][ T9055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 302.725465][ T24] usb usb40-port2: attempt power cycle [ 303.393114][ T24] usb usb40-port2: unable to enumerate USB device [ 303.773506][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 303.933456][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 304.013527][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 304.013538][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 306.124652][ T9120] blktrace: Concurrent blktraces are not allowed on loop2 [ 309.453074][ T5824] usb usb40-port2: attempt power cycle [ 310.028099][ T5824] usb usb40-port2: unable to enumerate USB device [ 312.103375][ T5145] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 315.340739][ T9214] program syz.2.620 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 315.358887][ T9238] blktrace: Concurrent blktraces are not allowed on loop2 [ 317.000699][ T5824] usb usb40-port2: attempt power cycle [ 317.296987][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.303357][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.724167][ T5824] usb usb40-port2: unable to enumerate USB device [ 319.453553][ T5145] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 326.604677][ T9400] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 327.456750][ T9410] netlink: 93 bytes leftover after parsing attributes in process `syz.3.653'. [ 327.500002][ T9413] netlink: 93 bytes leftover after parsing attributes in process `syz.3.653'. [ 329.284257][ T9415] program syz.1.652 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 331.442845][ T30] audit: type=1800 audit(4294967346.080:15): pid=9472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=32880 res=0 errno=0 [ 331.800360][ T9469] could not allocate digest TFM handle [ 332.534472][ T9479] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 332.549346][ T9479] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.576531][ T9479] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.583543][ T9479] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 334.413685][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 334.573758][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 334.653294][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 334.663404][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 335.565594][ T9533] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 335.630050][ T9533] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 335.638938][ T9533] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 335.649130][ T9533] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 335.730610][ T9533] raw: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 335.745682][ T9533] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 335.890784][ T9533] head: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 335.903664][ T9533] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 335.990401][ T9533] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 336.057163][ T9533] page dumped because: unmovable page [ 336.091885][ T9533] page_owner tracks the page as allocated [ 336.170925][ T9533] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5676, tgid 5676 (sftp-server), ts 71354996427, free_ts 71286505642 [ 336.291797][ T9533] post_alloc_hook+0x153/0x170 [ 336.298863][ T9533] get_page_from_freelist+0x111d/0x3140 [ 336.321946][ T9533] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 336.351672][ T9533] alloc_pages_mpol+0x1fb/0x550 [ 336.369723][ T9533] alloc_pages_noprof+0x131/0x390 [ 336.474045][ T9533] skb_page_frag_refill+0x365/0x5b0 [ 336.534950][ T9533] try_fill_recv+0x7f1/0x2930 [ 336.581367][ T9533] virtnet_poll+0x154a/0x3a20 [ 336.620603][ T9533] __napi_poll.constprop.0+0xaf/0x450 [ 336.661042][ T9533] net_rx_action+0xa40/0xf20 [ 336.686579][ T9533] handle_softirqs+0x1eb/0x9e0 [ 336.716359][ T9533] __irq_exit_rcu+0xef/0x150 [ 336.721017][ T9533] irq_exit_rcu+0x9/0x30 [ 336.745999][ T9533] common_interrupt+0xbe/0xe0 [ 336.763393][ T9533] asm_common_interrupt+0x26/0x40 [ 336.778718][ T9533] page last free pid 5696 tgid 5696 stack trace: [ 336.805835][ T9533] __free_frozen_pages+0x7e1/0x10d0 [ 336.813797][ T9533] qlist_free_all+0x47/0xe0 [ 336.818417][ T9533] kasan_quarantine_reduce+0x1a0/0x1f0 [ 336.839829][ T9533] __kasan_slab_alloc+0x69/0x90 [ 336.854412][ T9533] kmem_cache_alloc_noprof+0x241/0x6e0 [ 336.863860][ T9533] vm_area_alloc+0x1f/0x160 [ 336.869467][ T9533] __mmap_region+0x10cc/0x29e0 [ 336.883245][ T9533] mmap_region+0x180/0x3e0 [ 336.889018][ T9533] do_mmap+0xc63/0x12f0 [ 336.893442][ T9533] vm_mmap_pgoff+0x29e/0x470 [ 336.932635][ T9533] ksys_mmap_pgoff+0x3c8/0x650 [ 336.947560][ T9533] __x64_sys_mmap+0x125/0x190 [ 336.959480][ T9533] do_syscall_64+0x106/0xf80 [ 336.969356][ T9533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.074992][ T9540] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 337.123286][ T9540] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 337.131961][ T9540] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 337.161889][ T9540] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 337.198209][ T9540] raw: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 337.223550][ T9540] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 337.257382][ T9540] head: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 337.332368][ T9558] ima: policy update failed [ 337.356871][ T9540] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 337.357153][ T30] audit: type=1807 audit(4294967351.970:16): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 337.418335][ T9540] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 337.432229][ T30] audit: type=1802 audit(4294967351.970:17): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.677" res=0 errno=0 [ 337.454807][ T9540] page dumped because: unmovable page [ 337.628335][ T30] audit: type=1802 audit(4294967351.980:18): pid=9558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.677" res=0 errno=0 [ 337.665157][ T9540] page_owner tracks the page as allocated [ 337.680016][ T9540] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5676, tgid 5676 (sftp-server), ts 71354996427, free_ts 71286505642 [ 337.721101][ T9540] post_alloc_hook+0x153/0x170 [ 337.730451][ T9540] get_page_from_freelist+0x111d/0x3140 [ 337.741542][ T9540] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 337.758609][ T9540] alloc_pages_mpol+0x1fb/0x550 [ 337.768391][ T9540] alloc_pages_noprof+0x131/0x390 [ 337.791039][ T9540] skb_page_frag_refill+0x365/0x5b0 [ 337.812934][ T9540] try_fill_recv+0x7f1/0x2930 [ 337.824098][ T9540] virtnet_poll+0x154a/0x3a20 [ 337.836550][ T9540] __napi_poll.constprop.0+0xaf/0x450 [ 337.845536][ T9540] net_rx_action+0xa40/0xf20 [ 337.854105][ T9540] handle_softirqs+0x1eb/0x9e0 [ 337.860262][ T9540] __irq_exit_rcu+0xef/0x150 [ 337.886531][ T9540] irq_exit_rcu+0x9/0x30 [ 337.921635][ T9540] common_interrupt+0xbe/0xe0 [ 337.963432][ T9540] asm_common_interrupt+0x26/0x40 [ 337.968685][ T9540] page last free pid 5696 tgid 5696 stack trace: [ 338.017481][ T9540] __free_frozen_pages+0x7e1/0x10d0 [ 338.022755][ T9540] qlist_free_all+0x47/0xe0 [ 338.039597][ T9540] kasan_quarantine_reduce+0x1a0/0x1f0 [ 338.063670][ T9540] __kasan_slab_alloc+0x69/0x90 [ 338.093378][ T9540] kmem_cache_alloc_noprof+0x241/0x6e0 [ 338.107738][ T9540] vm_area_alloc+0x1f/0x160 [ 338.137425][ T9540] __mmap_region+0x10cc/0x29e0 [ 338.167914][ T9542] program syz.0.671 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.184301][ T9540] mmap_region+0x180/0x3e0 [ 338.193461][ T9540] do_mmap+0xc63/0x12f0 [ 338.203594][ T9540] vm_mmap_pgoff+0x29e/0x470 [ 338.261884][ T9540] ksys_mmap_pgoff+0x3c8/0x650 [ 338.275779][ T9540] __x64_sys_mmap+0x125/0x190 [ 338.296435][ T9540] do_syscall_64+0x106/0xf80 [ 338.308521][ T9540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.724683][ T9568] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 339.634670][ T9581] FAULT_INJECTION: forcing a failure. [ 339.634670][ T9581] name failslab, interval 1, probability 0, space 0, times 0 [ 339.674003][ T9581] CPU: 0 UID: 0 PID: 9581 Comm: syz.1.687 Tainted: G L syzkaller #0 PREEMPT(full) [ 339.674036][ T9581] Tainted: [L]=SOFTLOCKUP [ 339.674042][ T9581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 339.674053][ T9581] Call Trace: [ 339.674060][ T9581] [ 339.674074][ T9581] dump_stack_lvl+0x100/0x190 [ 339.674107][ T9581] should_fail_ex.cold+0x5/0xa [ 339.674129][ T9581] should_failslab+0xc2/0x120 [ 339.674148][ T9581] __kmalloc_cache_noprof+0x7a/0x6f0 [ 339.674172][ T9581] ? ptp_open+0xe4/0x550 [ 339.674202][ T9581] ptp_open+0xe4/0x550 [ 339.674232][ T9581] ? __pfx_ptp_open+0x10/0x10 [ 339.674266][ T9581] ? __pfx_ptp_open+0x10/0x10 [ 339.674293][ T9581] posix_clock_open+0x17b/0x290 [ 339.674314][ T9581] ? __pfx_posix_clock_open+0x10/0x10 [ 339.674334][ T9581] chrdev_open+0x234/0x6a0 [ 339.674351][ T9581] ? __pfx_apparmor_file_open+0x10/0x10 [ 339.674381][ T9581] ? __pfx_chrdev_open+0x10/0x10 [ 339.674400][ T9581] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 339.674423][ T9581] do_dentry_open+0x6d8/0x1660 [ 339.674441][ T9581] ? __pfx_chrdev_open+0x10/0x10 [ 339.674464][ T9581] vfs_open+0x82/0x3f0 [ 339.674488][ T9581] path_openat+0x208c/0x31a0 [ 339.674514][ T9581] ? __pfx_path_openat+0x10/0x10 [ 339.674540][ T9581] do_file_open+0x20e/0x430 [ 339.674560][ T9581] ? __pfx_do_file_open+0x10/0x10 [ 339.674594][ T9581] ? alloc_fd+0x476/0x790 [ 339.674613][ T9581] ? do_getname+0x191/0x390 [ 339.674637][ T9581] do_sys_openat2+0x10d/0x1e0 [ 339.674660][ T9581] ? __pfx_do_sys_openat2+0x10/0x10 [ 339.674691][ T9581] ? __fget_files+0x21f/0x3d0 [ 339.674712][ T9581] __x64_sys_openat+0x12d/0x210 [ 339.674736][ T9581] ? __pfx___x64_sys_openat+0x10/0x10 [ 339.674769][ T9581] do_syscall_64+0x106/0xf80 [ 339.674793][ T9581] ? clear_bhb_loop+0x40/0x90 [ 339.674815][ T9581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.674833][ T9581] RIP: 0033:0x7fbad279c799 [ 339.674849][ T9581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 339.674866][ T9581] RSP: 002b:00007fbad3624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 339.674883][ T9581] RAX: ffffffffffffffda RBX: 00007fbad2a15fa0 RCX: 00007fbad279c799 [ 339.674895][ T9581] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 339.674906][ T9581] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 339.674916][ T9581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 339.674926][ T9581] R13: 00007fbad2a16038 R14: 00007fbad2a15fa0 R15: 00007ffc0949bf08 [ 339.674949][ T9581] [ 340.955830][ T9600] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 340.967547][ T9598] netlink: 'syz.2.693': attribute type 1 has an invalid length. [ 340.967579][ T9598] netlink: 33 bytes leftover after parsing attributes in process `syz.2.693'. [ 341.019398][ T9600] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 341.071274][ T9600] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 341.206072][ T9600] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 341.215299][ T9600] raw: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 341.258081][ T9600] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 341.363389][ T9600] head: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 341.410344][ T9600] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 341.474997][ T9600] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 341.500996][ T9600] page dumped because: unmovable page [ 341.513317][ T9600] page_owner tracks the page as allocated [ 341.549980][ T9600] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5676, tgid 5676 (sftp-server), ts 71354996427, free_ts 71286505642 [ 341.722155][ T9600] post_alloc_hook+0x153/0x170 [ 341.763220][ T9600] get_page_from_freelist+0x111d/0x3140 [ 341.768884][ T9600] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 341.820106][ T9600] alloc_pages_mpol+0x1fb/0x550 [ 341.838601][ T9600] alloc_pages_noprof+0x131/0x390 [ 341.854565][ T9600] skb_page_frag_refill+0x365/0x5b0 [ 341.873239][ T9600] try_fill_recv+0x7f1/0x2930 [ 341.885423][ T9600] virtnet_poll+0x154a/0x3a20 [ 341.890150][ T9600] __napi_poll.constprop.0+0xaf/0x450 [ 341.910311][ T9600] net_rx_action+0xa40/0xf20 [ 341.915138][ T9600] handle_softirqs+0x1eb/0x9e0 [ 341.920143][ T9600] __irq_exit_rcu+0xef/0x150 [ 341.924891][ T9600] irq_exit_rcu+0x9/0x30 [ 341.930301][ T9600] common_interrupt+0xbe/0xe0 [ 341.935284][ T9600] asm_common_interrupt+0x26/0x40 [ 341.940445][ T9600] page last free pid 5696 tgid 5696 stack trace: [ 341.946892][ T9600] __free_frozen_pages+0x7e1/0x10d0 [ 341.955559][ T9600] qlist_free_all+0x47/0xe0 [ 341.962178][ T9600] kasan_quarantine_reduce+0x1a0/0x1f0 [ 342.006297][ T9600] __kasan_slab_alloc+0x69/0x90 [ 342.011242][ T9600] kmem_cache_alloc_noprof+0x241/0x6e0 [ 342.033263][ T9600] vm_area_alloc+0x1f/0x160 [ 342.037873][ T9600] __mmap_region+0x10cc/0x29e0 [ 342.042680][ T9600] mmap_region+0x180/0x3e0 [ 342.051959][ T9600] do_mmap+0xc63/0x12f0 [ 342.067308][ T9600] vm_mmap_pgoff+0x29e/0x470 [ 342.071972][ T9600] ksys_mmap_pgoff+0x3c8/0x650 [ 342.087594][ T9600] __x64_sys_mmap+0x125/0x190 [ 342.092358][ T9600] do_syscall_64+0x106/0xf80 [ 342.109037][ T9600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.115774][ T9603] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 342.127380][ T9603] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 342.136062][ T9603] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 342.144089][ T9603] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 342.155476][ T9603] raw: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 342.204443][ T9603] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 342.225042][ T9603] head: ffff888078006000 0000000000000000 00000008ffffffff 0000000000000000 [ 342.246567][ T9603] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 342.283333][ T9603] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 342.295269][ T9608] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 342.301287][ T9608] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 342.313923][ T9608] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 342.323281][ T9603] page dumped because: unmovable page [ 342.328698][ T9603] page_owner tracks the page as allocated [ 342.335989][ T9603] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5676, tgid 5676 (sftp-server), ts 71354996427, free_ts 71286505642 [ 342.343806][ T9608] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 342.360874][ T9603] post_alloc_hook+0x153/0x170 [ 342.367157][ T9603] get_page_from_freelist+0x111d/0x3140 [ 342.373646][ T9603] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 342.379620][ T9603] alloc_pages_mpol+0x1fb/0x550 [ 342.384624][ T9603] alloc_pages_noprof+0x131/0x390 [ 342.389935][ T9603] skb_page_frag_refill+0x365/0x5b0 [ 342.395274][ T9603] try_fill_recv+0x7f1/0x2930 [ 342.400165][ T9603] virtnet_poll+0x154a/0x3a20 [ 342.405027][ T9603] __napi_poll.constprop.0+0xaf/0x450 [ 342.410458][ T9603] net_rx_action+0xa40/0xf20 [ 342.417013][ T9603] handle_softirqs+0x1eb/0x9e0 [ 342.421842][ T9603] __irq_exit_rcu+0xef/0x150 [ 342.426687][ T9603] irq_exit_rcu+0x9/0x30 [ 342.431176][ T9603] common_interrupt+0xbe/0xe0 [ 342.436252][ T9603] asm_common_interrupt+0x26/0x40 [ 342.441358][ T9603] page last free pid 5696 tgid 5696 stack trace: [ 342.448226][ T9603] __free_frozen_pages+0x7e1/0x10d0 [ 342.453565][ T9603] qlist_free_all+0x47/0xe0 [ 342.462421][ T9603] kasan_quarantine_reduce+0x1a0/0x1f0 [ 342.471828][ T9603] __kasan_slab_alloc+0x69/0x90 [ 342.499438][ T9603] kmem_cache_alloc_noprof+0x241/0x6e0 [ 342.508830][ T9603] vm_area_alloc+0x1f/0x160 [ 342.513545][ T9603] __mmap_region+0x10cc/0x29e0 [ 342.518749][ T9603] mmap_region+0x180/0x3e0 [ 342.534032][ T9603] do_mmap+0xc63/0x12f0 [ 342.553441][ T9603] vm_mmap_pgoff+0x29e/0x470 [ 342.558099][ T9603] ksys_mmap_pgoff+0x3c8/0x650 [ 342.569166][ T9603] __x64_sys_mmap+0x125/0x190 [ 342.579516][ T9603] do_syscall_64+0x106/0xf80 [ 342.603601][ T9603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.285625][ T9633] FAULT_INJECTION: forcing a failure. [ 343.285625][ T9633] name failslab, interval 1, probability 0, space 0, times 0 [ 343.303424][ T9633] CPU: 0 UID: 0 PID: 9633 Comm: syz.0.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 343.303470][ T9633] Tainted: [L]=SOFTLOCKUP [ 343.303480][ T9633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.303495][ T9633] Call Trace: [ 343.303505][ T9633] [ 343.303516][ T9633] dump_stack_lvl+0x100/0x190 [ 343.303565][ T9633] should_fail_ex.cold+0x5/0xa [ 343.303599][ T9633] should_failslab+0xc2/0x120 [ 343.303630][ T9633] __kmalloc_cache_noprof+0x7a/0x6f0 [ 343.303667][ T9633] ? ptp_open+0xe4/0x550 [ 343.303713][ T9633] ptp_open+0xe4/0x550 [ 343.303758][ T9633] ? __pfx_ptp_open+0x10/0x10 [ 343.303810][ T9633] ? __pfx_ptp_open+0x10/0x10 [ 343.303851][ T9633] posix_clock_open+0x17b/0x290 [ 343.303885][ T9633] ? __pfx_posix_clock_open+0x10/0x10 [ 343.303916][ T9633] chrdev_open+0x234/0x6a0 [ 343.303944][ T9633] ? __pfx_apparmor_file_open+0x10/0x10 [ 343.303990][ T9633] ? __pfx_chrdev_open+0x10/0x10 [ 343.304022][ T9633] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 343.304058][ T9633] do_dentry_open+0x6d8/0x1660 [ 343.304085][ T9633] ? __pfx_chrdev_open+0x10/0x10 [ 343.304123][ T9633] vfs_open+0x82/0x3f0 [ 343.304163][ T9633] path_openat+0x208c/0x31a0 [ 343.304206][ T9633] ? __pfx_path_openat+0x10/0x10 [ 343.304250][ T9633] do_file_open+0x20e/0x430 [ 343.304293][ T9633] ? __pfx_do_file_open+0x10/0x10 [ 343.304351][ T9633] ? alloc_fd+0x476/0x790 [ 343.304384][ T9633] ? do_getname+0x191/0x390 [ 343.304424][ T9633] do_sys_openat2+0x10d/0x1e0 [ 343.304461][ T9633] ? __pfx_do_sys_openat2+0x10/0x10 [ 343.304501][ T9633] ? __fget_files+0x21f/0x3d0 [ 343.304535][ T9633] __x64_sys_openat+0x12d/0x210 [ 343.304574][ T9633] ? __pfx___x64_sys_openat+0x10/0x10 [ 343.304627][ T9633] do_syscall_64+0x106/0xf80 [ 343.304666][ T9633] ? clear_bhb_loop+0x40/0x90 [ 343.304703][ T9633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.304732][ T9633] RIP: 0033:0x7f1dd459c799 [ 343.304756][ T9633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.304783][ T9633] RSP: 002b:00007f1dd53e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 343.304809][ T9633] RAX: ffffffffffffffda RBX: 00007f1dd4815fa0 RCX: 00007f1dd459c799 [ 343.304828][ T9633] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 343.304846][ T9633] RBP: 00007f1dd4632c99 R08: 0000000000000000 R09: 0000000000000000 [ 343.304863][ T9633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 343.304879][ T9633] R13: 00007f1dd4816038 R14: 00007f1dd4815fa0 R15: 00007ffc3b06fed8 [ 343.304918][ T9633] [ 344.337252][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 344.344016][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 344.344100][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 344.391377][ T9641] ima: policy update failed [ 344.417828][ T30] audit: type=1807 audit(4294967359.030:19): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 344.429948][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 344.556854][ T30] audit: type=1802 audit(4294967359.030:20): pid=9641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.702" res=0 errno=0 [ 344.644996][ T30] audit: type=1802 audit(4294967359.050:21): pid=9641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.702" res=0 errno=0 [ 346.866354][ T9662] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.872453][ T9662] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.878831][ T9662] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 346.922769][ T9662] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 347.373818][ T9683] FAULT_INJECTION: forcing a failure. [ 347.373818][ T9683] name failslab, interval 1, probability 0, space 0, times 0 [ 347.428239][ T9683] CPU: 1 UID: 0 PID: 9683 Comm: syz.3.711 Tainted: G L syzkaller #0 PREEMPT(full) [ 347.428276][ T9683] Tainted: [L]=SOFTLOCKUP [ 347.428282][ T9683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 347.428293][ T9683] Call Trace: [ 347.428299][ T9683] [ 347.428306][ T9683] dump_stack_lvl+0x100/0x190 [ 347.428337][ T9683] should_fail_ex.cold+0x5/0xa [ 347.428358][ T9683] should_failslab+0xc2/0x120 [ 347.428377][ T9683] __kmalloc_cache_noprof+0x7a/0x6f0 [ 347.428401][ T9683] ? ptp_open+0xe4/0x550 [ 347.428431][ T9683] ptp_open+0xe4/0x550 [ 347.428461][ T9683] ? __pfx_ptp_open+0x10/0x10 [ 347.428495][ T9683] ? __pfx_ptp_open+0x10/0x10 [ 347.428523][ T9683] posix_clock_open+0x17b/0x290 [ 347.428544][ T9683] ? __pfx_posix_clock_open+0x10/0x10 [ 347.428563][ T9683] chrdev_open+0x234/0x6a0 [ 347.428581][ T9683] ? __pfx_apparmor_file_open+0x10/0x10 [ 347.428611][ T9683] ? __pfx_chrdev_open+0x10/0x10 [ 347.428629][ T9683] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 347.428653][ T9683] do_dentry_open+0x6d8/0x1660 [ 347.428670][ T9683] ? __pfx_chrdev_open+0x10/0x10 [ 347.428693][ T9683] vfs_open+0x82/0x3f0 [ 347.428718][ T9683] path_openat+0x208c/0x31a0 [ 347.428744][ T9683] ? __pfx_path_openat+0x10/0x10 [ 347.428770][ T9683] do_file_open+0x20e/0x430 [ 347.428791][ T9683] ? __pfx_do_file_open+0x10/0x10 [ 347.428825][ T9683] ? alloc_fd+0x476/0x790 [ 347.428845][ T9683] ? do_getname+0x191/0x390 [ 347.428869][ T9683] do_sys_openat2+0x10d/0x1e0 [ 347.428892][ T9683] ? __pfx_do_sys_openat2+0x10/0x10 [ 347.428916][ T9683] ? __fget_files+0x21f/0x3d0 [ 347.428937][ T9683] __x64_sys_openat+0x12d/0x210 [ 347.428961][ T9683] ? __pfx___x64_sys_openat+0x10/0x10 [ 347.428993][ T9683] do_syscall_64+0x106/0xf80 [ 347.429018][ T9683] ? clear_bhb_loop+0x40/0x90 [ 347.429039][ T9683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.429057][ T9683] RIP: 0033:0x7f50f999c799 [ 347.429073][ T9683] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 347.429089][ T9683] RSP: 002b:00007f50fa8e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 347.429107][ T9683] RAX: ffffffffffffffda RBX: 00007f50f9c15fa0 RCX: 00007f50f999c799 [ 347.429118][ T9683] RDX: 0000000000008000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 347.429129][ T9683] RBP: 00007f50f9a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 347.429138][ T9683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 347.429148][ T9683] R13: 00007f50f9c16038 R14: 00007f50f9c15fa0 R15: 00007fffa59b6508 [ 347.429171][ T9683] [ 348.414801][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 348.973745][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 348.974562][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 348.979813][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 349.448900][ T9] usb usb40-port2: attempt power cycle [ 350.024844][ T9] usb usb40-port2: unable to enumerate USB device [ 350.361508][ T9735] futex_wake_op: syz.1.724 tries to shift op by -2048; fix this program [ 350.370301][ T9735] futex_wake_op: syz.1.724 tries to shift op by -2048; fix this program [ 350.381012][ T9735] 0x000000000001-0x000000020000 : "" [ 350.397580][ T9735] ftl_cs: FTL header corrupt! [ 352.103363][ T5829] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 352.650794][ T9760] ima: policy update failed [ 352.667851][ T30] audit: type=1807 audit(4294967367.290:22): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 352.684724][ T30] audit: type=1802 audit(4294967367.290:23): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.730" res=0 errno=0 [ 352.762965][ T30] audit: type=1802 audit(4294967367.300:24): pid=9760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.730" res=0 errno=0 [ 352.896932][ T9765] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 355.094630][ T9774] netlink: 'syz.0.741': attribute type 1 has an invalid length. [ 356.432729][ T9808] random: crng reseeded on system resumption [ 358.955233][ T9821] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 358.966718][ T9821] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 358.980518][ T9821] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 359.012766][ T9821] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 360.413555][ T5829] Bluetooth: hci0: command 0x0c1a tx timeout [ 360.977465][ T5829] Bluetooth: hci1: command 0x0c1a tx timeout [ 361.053289][ T5829] Bluetooth: hci3: command 0x0c1a tx timeout [ 361.053322][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 367.395516][ T9935] kexec: Could not allocate control_code_buffer [ 368.576457][ T5145] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 371.738131][T10006] vivid-007: ================= START STATUS ================= [ 371.754023][T10006] vivid-007: Generate PTS: true [ 371.763233][T10006] vivid-007: Generate SCR: true [ 371.822885][T10006] tpg source WxH: 320x240 (Y'CbCr) [ 371.843514][T10006] tpg field: 1 [ 371.850521][T10006] tpg crop: (0,0)/320x240 [ 371.855092][T10006] tpg compose: (0,0)/320x240 [ 371.860795][T10006] tpg colorspace: 8 [ 371.864720][T10006] tpg transfer function: 0/0 [ 371.869598][T10006] tpg Y'CbCr encoding: 0/0 [ 371.874726][T10006] tpg quantization: 0/0 [ 371.879021][T10006] tpg RGB range: 0/2 [ 371.883514][T10006] vivid-007: ================== END STATUS ================== [ 372.514480][T10024] FAULT_INJECTION: forcing a failure. [ 372.514480][T10024] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 372.569412][T10024] CPU: 1 UID: 0 PID: 10024 Comm: syz.3.786 Tainted: G L syzkaller #0 PREEMPT(full) [ 372.569461][T10024] Tainted: [L]=SOFTLOCKUP [ 372.569471][T10024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 372.569488][T10024] Call Trace: [ 372.569499][T10024] [ 372.569511][T10024] dump_stack_lvl+0x100/0x190 [ 372.569548][T10024] should_fail_ex.cold+0x5/0xa [ 372.569569][T10024] _copy_from_user+0x2e/0xd0 [ 372.569592][T10024] copy_mount_options+0x76/0x190 [ 372.569619][T10024] __x64_sys_mount+0x1ab/0x310 [ 372.569641][T10024] ? __pfx___x64_sys_mount+0x10/0x10 [ 372.569668][T10024] do_syscall_64+0x106/0xf80 [ 372.569693][T10024] ? clear_bhb_loop+0x40/0x90 [ 372.569715][T10024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.569734][T10024] RIP: 0033:0x7f50f999c799 [ 372.569748][T10024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 372.569766][T10024] RSP: 002b:00007f50fa8c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.569783][T10024] RAX: ffffffffffffffda RBX: 00007f50f9c16090 RCX: 00007f50f999c799 [ 372.569795][T10024] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 372.569805][T10024] RBP: 00007f50f9a32c99 R08: 0000200000000280 R09: 0000000000000000 [ 372.569816][T10024] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 372.569826][T10024] R13: 00007f50f9c16128 R14: 00007f50f9c16090 R15: 00007fffa59b6508 [ 372.569849][T10024] [ 373.902080][T10040] FAULT_INJECTION: forcing a failure. [ 373.902080][T10040] name failslab, interval 1, probability 0, space 0, times 0 [ 373.915087][T10040] CPU: 0 UID: 0 PID: 10040 Comm: syz.1.792 Tainted: G L syzkaller #0 PREEMPT(full) [ 373.915135][T10040] Tainted: [L]=SOFTLOCKUP [ 373.915145][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 373.915174][T10040] Call Trace: [ 373.915184][T10040] [ 373.915196][T10040] dump_stack_lvl+0x100/0x190 [ 373.915249][T10040] should_fail_ex.cold+0x5/0xa [ 373.915285][T10040] should_failslab+0xc2/0x120 [ 373.915317][T10040] __kmalloc_node_noprof+0xe6/0x850 [ 373.915361][T10040] ? __rb_allocate_pages+0x589/0xf50 [ 373.915410][T10040] __rb_allocate_pages+0x589/0xf50 [ 373.915471][T10040] ring_buffer_subbuf_order_set+0x3ef/0x18c0 [ 373.915523][T10040] ? tracing_stop_tr+0xf6/0x210 [ 373.915568][T10040] ? __pfx_ring_buffer_subbuf_order_set+0x10/0x10 [ 373.915608][T10040] ? __pfx___might_resched+0x10/0x10 [ 373.915650][T10040] ? iovec_from_user+0xda/0x140 [ 373.915691][T10040] buffer_subbuf_size_write+0x182/0x280 [ 373.915720][T10040] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 373.915778][T10040] ? __pfx_buffer_subbuf_size_write+0x10/0x10 [ 373.915821][T10040] vfs_writev+0x5ea/0xe10 [ 373.915859][T10040] ? rcu_is_watching+0x12/0xc0 [ 373.915909][T10040] ? __pfx_vfs_writev+0x10/0x10 [ 373.915945][T10040] ? fdget_pos+0x2aa/0x380 [ 373.916002][T10040] ? __fget_files+0x21f/0x3d0 [ 373.916039][T10040] ? do_writev+0x13e/0x340 [ 373.916075][T10040] do_writev+0x13e/0x340 [ 373.916115][T10040] ? __pfx_do_writev+0x10/0x10 [ 373.916174][T10040] do_syscall_64+0x106/0xf80 [ 373.916211][T10040] ? clear_bhb_loop+0x40/0x90 [ 373.916246][T10040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.916276][T10040] RIP: 0033:0x7fbad279c799 [ 373.916302][T10040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.916330][T10040] RSP: 002b:00007fbad3624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 373.916358][T10040] RAX: ffffffffffffffda RBX: 00007fbad2a15fa0 RCX: 00007fbad279c799 [ 373.916378][T10040] RDX: 000000000000000a RSI: 0000200000000200 RDI: 0000000000000009 [ 373.916396][T10040] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 373.916414][T10040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.916431][T10040] R13: 00007fbad2a16038 R14: 00007fbad2a15fa0 R15: 00007ffc0949bf08 [ 373.916473][T10040] [ 374.932187][ T30] audit: type=1800 audit(4294967330.600:25): pid=10053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.802" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 376.378612][T10065] futex_wake_op: syz.0.795 tries to shift op by -2048; fix this program [ 376.414995][T10065] futex_wake_op: syz.0.795 tries to shift op by -2048; fix this program [ 376.448662][T10065] 0x000000000001-0x000000020000 : "" [ 376.525658][T10065] ftl_cs: FTL header corrupt! [ 377.464509][ T5145] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 378.036185][T10089] vivid-007: ================= START STATUS ================= [ 378.036274][T10089] vivid-007: Generate PTS: true [ 378.036365][T10089] vivid-007: Generate SCR: true [ 378.036444][T10089] tpg source WxH: 320x240 (Y'CbCr) [ 378.036466][T10089] tpg field: 1 [ 378.036478][T10089] tpg crop: (0,0)/320x240 [ 378.036540][T10089] tpg compose: (0,0)/320x240 [ 378.036563][T10089] tpg colorspace: 8 [ 378.036575][T10089] tpg transfer function: 0/0 [ 378.036861][T10089] tpg Y'CbCr encoding: 0/0 [ 378.036879][T10089] tpg quantization: 0/0 [ 378.036895][T10089] tpg RGB range: 0/2 [ 378.036910][T10089] vivid-007: ================== END STATUS ================== [ 378.737614][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.744111][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.421194][T10091] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 379.430092][T10091] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 379.437353][T10091] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 379.445957][T10091] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 379.761702][T10105] FAULT_INJECTION: forcing a failure. [ 379.761702][T10105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.775581][T10105] CPU: 0 UID: 0 PID: 10105 Comm: syz.1.801 Tainted: G L syzkaller #0 PREEMPT(full) [ 379.775630][T10105] Tainted: [L]=SOFTLOCKUP [ 379.775641][T10105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 379.775659][T10105] Call Trace: [ 379.775669][T10105] [ 379.775681][T10105] dump_stack_lvl+0x100/0x190 [ 379.775732][T10105] should_fail_ex.cold+0x5/0xa [ 379.775769][T10105] _copy_from_user+0x2e/0xd0 [ 379.775806][T10105] copy_mount_options+0x76/0x190 [ 379.775851][T10105] __x64_sys_mount+0x1ab/0x310 [ 379.775899][T10105] ? __pfx___x64_sys_mount+0x10/0x10 [ 379.775949][T10105] do_syscall_64+0x106/0xf80 [ 379.775993][T10105] ? clear_bhb_loop+0x40/0x90 [ 379.776033][T10105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.776065][T10105] RIP: 0033:0x7fbad279c799 [ 379.776091][T10105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 379.776119][T10105] RSP: 002b:00007fbad3603028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 379.776149][T10105] RAX: ffffffffffffffda RBX: 00007fbad2a16090 RCX: 00007fbad279c799 [ 379.776169][T10105] RDX: 0000200000000240 RSI: 0000000000000000 RDI: 0000200000000180 [ 379.776187][T10105] RBP: 00007fbad2832c99 R08: 0000200000000280 R09: 0000000000000000 [ 379.776205][T10105] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 379.776234][T10105] R13: 00007fbad2a16128 R14: 00007fbad2a16090 R15: 00007ffc0949bf08 [ 379.776276][T10105] [ 380.189825][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 381.437456][ T30] audit: type=1800 audit(4294967337.150:26): pid=10123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.804" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 381.461638][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 381.463620][ T5829] Bluetooth: hci2: command 0x0c1a tx timeout [ 381.463730][ T5831] Bluetooth: hci1: command 0x0c1a tx timeout [ 384.120190][T10158] vivid-007: ================= START STATUS ================= [ 384.151192][T10158] vivid-007: Generate PTS: true [ 384.162112][T10158] vivid-007: Generate SCR: true [ 384.170262][T10158] tpg source WxH: 320x240 (Y'CbCr) [ 384.179842][T10158] tpg field: 1 [ 384.183336][T10158] tpg crop: (0,0)/320x240 [ 384.242257][T10158] tpg compose: (0,0)/320x240 [ 384.265333][T10158] tpg colorspace: 8 [ 384.275442][T10158] tpg transfer function: 0/0 [ 384.282466][T10158] tpg Y'CbCr encoding: 0/0 [ 384.292166][T10158] tpg quantization: 0/0 [ 384.296461][T10158] tpg RGB range: 0/2 [ 384.300444][T10158] vivid-007: ================== END STATUS ================== [ 384.907465][T10154] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 384.921387][T10154] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 384.939301][T10154] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 384.958447][T10154] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 385.525629][ T5831] Bluetooth: hci0: command 0x0c1a tx timeout [ 386.114761][T10187] FAULT_INJECTION: forcing a failure. [ 386.114761][T10187] name failslab, interval 1, probability 0, space 0, times 0 [ 386.127530][T10187] CPU: 0 UID: 0 PID: 10187 Comm: syz.0.826 Tainted: G L syzkaller #0 PREEMPT(full) [ 386.127573][T10187] Tainted: [L]=SOFTLOCKUP [ 386.127582][T10187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 386.127597][T10187] Call Trace: [ 386.127607][T10187] [ 386.127618][T10187] dump_stack_lvl+0x100/0x190 [ 386.127669][T10187] should_fail_ex.cold+0x5/0xa [ 386.127706][T10187] should_failslab+0xc2/0x120 [ 386.127740][T10187] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 386.127786][T10187] ? alloc_empty_file+0x55/0x1c0 [ 386.127832][T10187] alloc_empty_file+0x55/0x1c0 [ 386.127873][T10187] alloc_file_pseudo+0x13a/0x230 [ 386.127915][T10187] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 386.127967][T10187] __anon_inode_getfile+0xe8/0x280 [ 386.128004][T10187] ? kasan_save_track+0x14/0x30 [ 386.128056][T10187] sync_file_alloc+0x65/0x160 [ 386.128098][T10187] sync_file_create+0x17/0xf0 [ 386.128129][T10187] sw_sync_ioctl+0x849/0xf80 [ 386.128171][T10187] ? find_held_lock+0x2b/0x80 [ 386.128202][T10187] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 386.128255][T10187] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 386.128292][T10187] __x64_sys_ioctl+0x18e/0x210 [ 386.128340][T10187] do_syscall_64+0x106/0xf80 [ 386.128383][T10187] ? clear_bhb_loop+0x40/0x90 [ 386.128423][T10187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.128461][T10187] RIP: 0033:0x7f1dd459c799 [ 386.128488][T10187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.128515][T10187] RSP: 002b:00007f1dd53e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.128539][T10187] RAX: ffffffffffffffda RBX: 00007f1dd4815fa0 RCX: 00007f1dd459c799 [ 386.128554][T10187] RDX: 0000200000000080 RSI: 00000000c0285700 RDI: 0000000000000009 [ 386.128569][T10187] RBP: 00007f1dd4632c99 R08: 0000000000000000 R09: 0000000000000000 [ 386.128583][T10187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.128597][T10187] R13: 00007f1dd4816038 R14: 00007f1dd4815fa0 R15: 00007ffc3b06fed8 [ 386.128628][T10187] [ 386.979659][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 386.986300][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 386.992348][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 387.854934][T10208] futex_wake_op: syz.3.822 tries to shift op by -2048; fix this program [ 387.863439][T10208] futex_wake_op: syz.3.822 tries to shift op by -2048; fix this program [ 387.875059][T10208] 0x000000000001-0x000000020000 : "" [ 387.946305][T10208] ftl_cs: FTL header corrupt! [ 390.018514][T10247] [U] [ 390.040627][T10247] mtrr: base(0xe00000) is not aligned on a size(0x4000000000) boundary [ 391.019904][T10265] Invalid ELF header magic: != ELF [ 392.768036][T10235] kexec: Could not allocate control_code_buffer [ 392.913942][T10283] futex_wake_op: syz.1.836 tries to shift op by -2048; fix this program [ 392.941464][T10283] futex_wake_op: syz.1.836 tries to shift op by -2048; fix this program [ 392.990184][T10283] 0x000000000001-0x000000020000 : "" [ 393.030719][T10283] ftl_cs: FTL header corrupt! [ 394.346257][T10304] FAULT_INJECTION: forcing a failure. [ 394.346257][T10304] name failslab, interval 1, probability 0, space 0, times 0 [ 394.381375][T10304] CPU: 1 UID: 0 PID: 10304 Comm: syz.1.839 Tainted: G L syzkaller #0 PREEMPT(full) [ 394.381424][T10304] Tainted: [L]=SOFTLOCKUP [ 394.381435][T10304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 394.381452][T10304] Call Trace: [ 394.381463][T10304] [ 394.381475][T10304] dump_stack_lvl+0x100/0x190 [ 394.381529][T10304] should_fail_ex.cold+0x5/0xa [ 394.381567][T10304] should_failslab+0xc2/0x120 [ 394.381600][T10304] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 394.381648][T10304] ? alloc_inode+0x183/0x250 [ 394.381697][T10304] alloc_inode+0x183/0x250 [ 394.381739][T10304] new_inode+0x22/0x1c0 [ 394.381777][T10304] ? dput.part.0+0xdd/0x570 [ 394.381822][T10304] simple_fill_super+0x2d9/0x680 [ 394.381859][T10304] ? __pfx_nfsd_fill_super+0x10/0x10 [ 394.381895][T10304] nfsd_fill_super+0x98/0x560 [ 394.381927][T10304] ? __pfx_set_anon_super_fc+0x10/0x10 [ 394.381974][T10304] ? __pfx_nfsd_fill_super+0x10/0x10 [ 394.382009][T10304] get_tree_keyed+0x10e/0x1d0 [ 394.382060][T10304] vfs_get_tree+0x92/0x320 [ 394.382104][T10304] path_mount+0x7d0/0x23d0 [ 394.382156][T10304] ? __pfx_path_mount+0x10/0x10 [ 394.382189][T10304] ? lockdep_hardirqs_on+0x78/0x100 [ 394.382238][T10304] ? putname+0xb1/0x110 [ 394.382269][T10304] ? kmem_cache_free+0x124/0x6a0 [ 394.382323][T10304] ? __x64_sys_mount+0x293/0x310 [ 394.382355][T10304] __x64_sys_mount+0x293/0x310 [ 394.382398][T10304] ? __pfx___x64_sys_mount+0x10/0x10 [ 394.382448][T10304] do_syscall_64+0x106/0xf80 [ 394.382490][T10304] ? clear_bhb_loop+0x40/0x90 [ 394.382529][T10304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.382558][T10304] RIP: 0033:0x7fbad279c799 [ 394.382585][T10304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.382612][T10304] RSP: 002b:00007fbad3603028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 394.382643][T10304] RAX: ffffffffffffffda RBX: 00007fbad2a16090 RCX: 00007fbad279c799 [ 394.382662][T10304] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 394.382681][T10304] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 394.382699][T10304] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 394.382716][T10304] R13: 00007fbad2a16128 R14: 00007fbad2a16090 R15: 00007ffc0949bf08 [ 394.382758][T10304] [ 396.256570][T10347] futex_wake_op: syz.0.849 tries to shift op by -2048; fix this program [ 396.346111][T10347] futex_wake_op: syz.0.849 tries to shift op by -2048; fix this program [ 397.523893][T10373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.856'. [ 397.545190][T10373] netlink: 354 bytes leftover after parsing attributes in process `syz.2.856'. [ 397.964651][T10381] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 399.677500][T10412] input: jJǸ-9%vJ86 as /devices/virtual/input/input15 [ 400.199361][T10397] Invalid ELF header magic: != ELF [ 400.742790][T10425] FAULT_INJECTION: forcing a failure. [ 400.742790][T10425] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 400.816907][T10425] CPU: 1 UID: 0 PID: 10425 Comm: syz.3.867 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.816938][T10425] Tainted: [L]=SOFTLOCKUP [ 400.816945][T10425] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.816956][T10425] Call Trace: [ 400.816963][T10425] [ 400.816970][T10425] dump_stack_lvl+0x100/0x190 [ 400.817001][T10425] should_fail_ex.cold+0x5/0xa [ 400.817019][T10425] ? prepare_alloc_pages+0x16d/0x5f0 [ 400.817047][T10425] should_fail_alloc_page+0xeb/0x140 [ 400.817070][T10425] prepare_alloc_pages+0x1f0/0x5f0 [ 400.817095][T10425] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 400.817126][T10425] ? lock_acquire+0x1cf/0x380 [ 400.817150][T10425] ? find_held_lock+0x2b/0x80 [ 400.817166][T10425] ? free_unref_folios+0xd3f/0x1790 [ 400.817191][T10425] ? free_unref_folios+0xd3f/0x1790 [ 400.817220][T10425] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 400.817260][T10425] ? lock_acquire+0x1cf/0x380 [ 400.817283][T10425] ? find_held_lock+0x2b/0x80 [ 400.817298][T10425] ? page_table_check_set+0x49a/0xa10 [ 400.817315][T10425] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 400.817346][T10425] ? policy_nodemask+0xed/0x4f0 [ 400.817366][T10425] alloc_pages_mpol+0x1fb/0x550 [ 400.817385][T10425] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 400.817411][T10425] folio_alloc_mpol_noprof+0x36/0x340 [ 400.817434][T10425] vma_alloc_folio_noprof+0xed/0x1d0 [ 400.817456][T10425] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 400.817485][T10425] do_anonymous_page+0xb3a/0x1fb0 [ 400.817518][T10425] __handle_mm_fault+0x1d42/0x2b60 [ 400.817549][T10425] ? __pfx___handle_mm_fault+0x10/0x10 [ 400.817575][T10425] ? pte_offset_map_lock+0x174/0x320 [ 400.817593][T10425] ? find_held_lock+0x2b/0x80 [ 400.817617][T10425] ? follow_page_pte+0x5b3/0x1400 [ 400.817641][T10425] handle_mm_fault+0x36d/0xa20 [ 400.817670][T10425] __get_user_pages+0xf9c/0x34d0 [ 400.817699][T10425] ? __pfx___get_user_pages+0x10/0x10 [ 400.817725][T10425] populate_vma_page_range+0x267/0x3f0 [ 400.817748][T10425] ? __pfx_populate_vma_page_range+0x10/0x10 [ 400.817769][T10425] ? __pfx_find_vma_intersection+0x10/0x10 [ 400.817789][T10425] ? do_mmap+0x93f/0x12f0 [ 400.817818][T10425] __mm_populate+0x107/0x3a0 [ 400.817841][T10425] ? __pfx___mm_populate+0x10/0x10 [ 400.817864][T10425] ? up_write+0x290/0x4f0 [ 400.817892][T10425] vm_mmap_pgoff+0x37f/0x470 [ 400.817914][T10425] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 400.817936][T10425] ? do_futex+0x192/0x350 [ 400.817959][T10425] ? __pfx_do_futex+0x10/0x10 [ 400.817981][T10425] ? __pfx_do_sys_openat2+0x10/0x10 [ 400.818009][T10425] ksys_mmap_pgoff+0xe1/0x650 [ 400.818028][T10425] ? __x64_sys_futex+0x34f/0x4d0 [ 400.818050][T10425] ? __x64_sys_futex+0x358/0x4d0 [ 400.818073][T10425] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 400.818092][T10425] ? xfd_validate_state+0x129/0x190 [ 400.818123][T10425] __x64_sys_mmap+0x125/0x190 [ 400.818152][T10425] do_syscall_64+0x106/0xf80 [ 400.818176][T10425] ? clear_bhb_loop+0x40/0x90 [ 400.818198][T10425] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.818217][T10425] RIP: 0033:0x7f50f999c799 [ 400.818232][T10425] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 400.818250][T10425] RSP: 002b:00007f50fa8c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 400.818268][T10425] RAX: ffffffffffffffda RBX: 00007f50f9c16090 RCX: 00007f50f999c799 [ 400.818280][T10425] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 400.818291][T10425] RBP: 00007f50f9a32c99 R08: 0000000000000002 R09: 0000000000008000 [ 400.818301][T10425] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 400.818312][T10425] R13: 00007f50f9c16128 R14: 00007f50f9c16090 R15: 00007fffa59b6508 [ 400.818335][T10425] [ 401.258984][T10424] NFSD: Failed to start, no listeners configured. [ 402.272540][T10450] FAULT_INJECTION: forcing a failure. [ 402.272540][T10450] name failslab, interval 1, probability 0, space 0, times 0 [ 402.287797][T10450] CPU: 1 UID: 0 PID: 10450 Comm: syz.2.870 Tainted: G L syzkaller #0 PREEMPT(full) [ 402.287828][T10450] Tainted: [L]=SOFTLOCKUP [ 402.287835][T10450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 402.287846][T10450] Call Trace: [ 402.287852][T10450] [ 402.287859][T10450] dump_stack_lvl+0x100/0x190 [ 402.287890][T10450] should_fail_ex.cold+0x5/0xa [ 402.287911][T10450] should_failslab+0xc2/0x120 [ 402.287931][T10450] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 402.287957][T10450] ? security_inode_alloc+0x3b/0x2c0 [ 402.287976][T10450] ? lockdep_init_map_type+0x5c/0x250 [ 402.288003][T10450] security_inode_alloc+0x3b/0x2c0 [ 402.288021][T10450] inode_init_always_gfp+0xced/0x1040 [ 402.288043][T10450] alloc_inode+0x8e/0x250 [ 402.288075][T10450] new_inode+0x22/0x1c0 [ 402.288097][T10450] ? dput.part.0+0xdd/0x570 [ 402.288121][T10450] simple_fill_super+0x2d9/0x680 [ 402.288142][T10450] ? __pfx_nfsd_fill_super+0x10/0x10 [ 402.288163][T10450] nfsd_fill_super+0x98/0x560 [ 402.288182][T10450] ? __pfx_set_anon_super_fc+0x10/0x10 [ 402.288209][T10450] ? __pfx_nfsd_fill_super+0x10/0x10 [ 402.288229][T10450] get_tree_keyed+0x10e/0x1d0 [ 402.288259][T10450] vfs_get_tree+0x92/0x320 [ 402.288284][T10450] path_mount+0x7d0/0x23d0 [ 402.288308][T10450] ? __pfx_path_mount+0x10/0x10 [ 402.288327][T10450] ? lockdep_hardirqs_on+0x78/0x100 [ 402.288355][T10450] ? putname+0xb1/0x110 [ 402.288372][T10450] ? kmem_cache_free+0x124/0x6a0 [ 402.288404][T10450] ? __x64_sys_mount+0x293/0x310 [ 402.288423][T10450] __x64_sys_mount+0x293/0x310 [ 402.288445][T10450] ? __pfx___x64_sys_mount+0x10/0x10 [ 402.288473][T10450] do_syscall_64+0x106/0xf80 [ 402.288498][T10450] ? clear_bhb_loop+0x40/0x90 [ 402.288520][T10450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.288538][T10450] RIP: 0033:0x7f995299c799 [ 402.288553][T10450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.288571][T10450] RSP: 002b:00007f9953905028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 402.288589][T10450] RAX: ffffffffffffffda RBX: 00007f9952c16090 RCX: 00007f995299c799 [ 402.288600][T10450] RDX: 00002000000001c0 RSI: 00002000000000c0 RDI: 0000000000000000 [ 402.288611][T10450] RBP: 00007f9952a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 402.288621][T10450] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 402.288631][T10450] R13: 00007f9952c16128 R14: 00007f9952c16090 R15: 00007fff081a99e8 [ 402.288654][T10450] [ 405.040201][T10472] block nbd8: shutting down sockets [ 405.646778][T10479] Invalid ELF header magic: != ELF [ 405.853313][T10499] [U] [ 405.926660][T10499] mtrr: base(0xe00000) is not aligned on a size(0x4000000000) boundary [ 410.130804][T10554] Invalid ELF header magic: != ELF [ 413.059217][T10614] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 413.851809][T10631] Invalid ELF header magic: != ELF [ 414.077670][ T5831] Bluetooth: hci2: unexpected event 0x32 length: 727 > 9 [ 417.262897][T10696] Invalid ELF header magic: != ELF [ 419.267045][T10714] FAULT_INJECTION: forcing a failure. [ 419.267045][T10714] name failslab, interval 1, probability 0, space 0, times 0 [ 419.295155][T10714] CPU: 0 UID: 0 PID: 10714 Comm: syz.1.928 Tainted: G L syzkaller #0 PREEMPT(full) [ 419.295208][T10714] Tainted: [L]=SOFTLOCKUP [ 419.295220][T10714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 419.295239][T10714] Call Trace: [ 419.295249][T10714] [ 419.295262][T10714] dump_stack_lvl+0x100/0x190 [ 419.295315][T10714] should_fail_ex.cold+0x5/0xa [ 419.295352][T10714] should_failslab+0xc2/0x120 [ 419.295384][T10714] __kmalloc_cache_noprof+0x7a/0x6f0 [ 419.295426][T10714] ? newseg+0x269/0xed0 [ 419.295471][T10714] newseg+0x269/0xed0 [ 419.295509][T10714] ? __pfx_futex_wait+0x10/0x10 [ 419.295559][T10714] ? __pfx_newseg+0x10/0x10 [ 419.295597][T10714] ? down_write+0x146/0x1f0 [ 419.295647][T10714] ? __sched_setaffinity+0x17c/0x280 [ 419.295682][T10714] ? __pfx___sched_setaffinity+0x10/0x10 [ 419.295720][T10714] ipcget+0xee/0xf50 [ 419.295758][T10714] ? do_futex+0x192/0x350 [ 419.295798][T10714] ? __pfx_do_futex+0x10/0x10 [ 419.295839][T10714] ? sched_setaffinity+0xe0/0x400 [ 419.295869][T10714] ? __might_fault+0xc5/0x140 [ 419.295916][T10714] ? __pfx_ipcget+0x10/0x10 [ 419.295956][T10714] ? __x64_sys_futex+0x34f/0x4d0 [ 419.296004][T10714] ? __x64_sys_futex+0x358/0x4d0 [ 419.296052][T10714] __x64_sys_shmget+0x13b/0x1b0 [ 419.296093][T10714] ? __pfx___x64_sys_shmget+0x10/0x10 [ 419.296145][T10714] do_syscall_64+0x106/0xf80 [ 419.296186][T10714] ? clear_bhb_loop+0x40/0x90 [ 419.296225][T10714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.296256][T10714] RIP: 0033:0x7fbad279c799 [ 419.296283][T10714] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.296314][T10714] RSP: 002b:00007fbad3624028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 419.296346][T10714] RAX: ffffffffffffffda RBX: 00007fbad2a15fa0 RCX: 00007fbad279c799 [ 419.296366][T10714] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 419.296386][T10714] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 419.296404][T10714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.296422][T10714] R13: 00007fbad2a16038 R14: 00007fbad2a15fa0 R15: 00007ffc0949bf08 [ 419.296465][T10714] [ 420.601281][T10762] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 421.538363][T10773] FAULT_INJECTION: forcing a failure. [ 421.538363][T10773] name failslab, interval 1, probability 0, space 0, times 0 [ 421.554321][T10773] CPU: 1 UID: 0 PID: 10773 Comm: syz.1.941 Tainted: G L syzkaller #0 PREEMPT(full) [ 421.554372][T10773] Tainted: [L]=SOFTLOCKUP [ 421.554383][T10773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 421.554401][T10773] Call Trace: [ 421.554411][T10773] [ 421.554422][T10773] dump_stack_lvl+0x100/0x190 [ 421.554472][T10773] should_fail_ex.cold+0x5/0xa [ 421.554509][T10773] should_failslab+0xc2/0x120 [ 421.554542][T10773] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 421.554588][T10773] ? alloc_empty_file+0x55/0x1c0 [ 421.554634][T10773] alloc_empty_file+0x55/0x1c0 [ 421.554674][T10773] alloc_file_pseudo+0x13a/0x230 [ 421.554716][T10773] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 421.554767][T10773] __anon_inode_getfile+0xe8/0x280 [ 421.554810][T10773] ? kasan_save_track+0x14/0x30 [ 421.554858][T10773] sync_file_alloc+0x65/0x160 [ 421.554888][T10773] sync_file_create+0x17/0xf0 [ 421.554912][T10773] sw_sync_ioctl+0x849/0xf80 [ 421.554941][T10773] ? find_held_lock+0x2b/0x80 [ 421.554963][T10773] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 421.555002][T10773] ? __pfx_sw_sync_ioctl+0x10/0x10 [ 421.555029][T10773] __x64_sys_ioctl+0x18e/0x210 [ 421.555065][T10773] do_syscall_64+0x106/0xf80 [ 421.555096][T10773] ? clear_bhb_loop+0x40/0x90 [ 421.555125][T10773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.555149][T10773] RIP: 0033:0x7fbad279c799 [ 421.555170][T10773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.555193][T10773] RSP: 002b:00007fbad3603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.555218][T10773] RAX: ffffffffffffffda RBX: 00007fbad2a16090 RCX: 00007fbad279c799 [ 421.555235][T10773] RDX: 0000200000000080 RSI: 00000000c0285700 RDI: 0000000000000009 [ 421.555249][T10773] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 421.555264][T10773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.555279][T10773] R13: 00007fbad2a16128 R14: 00007fbad2a16090 R15: 00007ffc0949bf08 [ 421.555310][T10773] [ 424.597263][T10810] netlink: 28 bytes leftover after parsing attributes in process `syz.3.949'. [ 424.678878][T10810] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.730858][T10810] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.801126][T10810] bond0 (unregistering): Released all slaves [ 425.598049][T10813] FAULT_INJECTION: forcing a failure. [ 425.598049][T10813] name failslab, interval 1, probability 0, space 0, times 0 [ 425.636571][T10813] CPU: 1 UID: 0 PID: 10813 Comm: syz.1.950 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.636604][T10813] Tainted: [L]=SOFTLOCKUP [ 425.636610][T10813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 425.636621][T10813] Call Trace: [ 425.636628][T10813] [ 425.636635][T10813] dump_stack_lvl+0x100/0x190 [ 425.636666][T10813] should_fail_ex.cold+0x5/0xa [ 425.636687][T10813] should_failslab+0xc2/0x120 [ 425.636708][T10813] __kvmalloc_node_noprof+0xfa/0xa00 [ 425.636744][T10813] ? alloc_fdtable+0x110/0x2d0 [ 425.636776][T10813] alloc_fdtable+0x110/0x2d0 [ 425.636805][T10813] dup_fd+0x995/0xd10 [ 425.636824][T10813] ? fd_statfs+0xdd/0x120 [ 425.636853][T10813] ksys_unshare+0x7ad/0xad0 [ 425.636877][T10813] ? __pfx_ksys_unshare+0x10/0x10 [ 425.636908][T10813] __x64_sys_unshare+0x31/0x40 [ 425.636930][T10813] do_syscall_64+0x106/0xf80 [ 425.636954][T10813] ? clear_bhb_loop+0x40/0x90 [ 425.636976][T10813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.636994][T10813] RIP: 0033:0x7fbad279c799 [ 425.637010][T10813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.637027][T10813] RSP: 002b:00007fbad3603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 425.637045][T10813] RAX: ffffffffffffffda RBX: 00007fbad2a16090 RCX: 00007fbad279c799 [ 425.637056][T10813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 425.637067][T10813] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 425.637078][T10813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.637088][T10813] R13: 00007fbad2a16128 R14: 00007fbad2a16090 R15: 00007ffc0949bf08 [ 425.637110][T10813] [ 426.672051][T10841] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 428.121285][T10855] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 428.592450][T10862] Invalid ELF header magic: != ELF [ 431.860583][T10907] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 432.809542][T10916] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 433.557004][T10930] NFSD: Failed to start, no listeners configured. [ 434.017539][T10874] kexec: Could not allocate control_code_buffer [ 434.768755][T10945] FAULT_INJECTION: forcing a failure. [ 434.768755][T10945] name failslab, interval 1, probability 0, space 0, times 0 [ 434.854418][T10945] CPU: 1 UID: 0 PID: 10945 Comm: syz.3.974 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.854451][T10945] Tainted: [L]=SOFTLOCKUP [ 434.854459][T10945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.854471][T10945] Call Trace: [ 434.854477][T10945] [ 434.854485][T10945] dump_stack_lvl+0x100/0x190 [ 434.854517][T10945] should_fail_ex.cold+0x5/0xa [ 434.854539][T10945] should_failslab+0xc2/0x120 [ 434.854558][T10945] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 434.854586][T10945] ? __proc_create+0x2cb/0x8c0 [ 434.854627][T10945] __proc_create+0x2cb/0x8c0 [ 434.854656][T10945] ? __pfx___proc_create+0x10/0x10 [ 434.854689][T10945] ? _raw_write_unlock+0x28/0x50 [ 434.854713][T10945] ? proc_register+0x559/0x8a0 [ 434.854733][T10945] proc_create_reg+0x75/0x170 [ 434.854753][T10945] proc_create_net_data+0x8e/0x1c0 [ 434.854771][T10945] ? __pfx_proc_create_net_data+0x10/0x10 [ 434.854795][T10945] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 434.854818][T10945] kcm_proc_init_net+0xa3/0x120 [ 434.854841][T10945] ops_init+0x1e2/0x5f0 [ 434.854871][T10945] setup_net+0x118/0x3a0 [ 434.854898][T10945] ? __pfx_setup_net+0x10/0x10 [ 434.854923][T10945] ? lockdep_init_map_type+0x5c/0x250 [ 434.854948][T10945] ? mutex_init_lockep+0x110/0x150 [ 434.854975][T10945] copy_net_ns+0x46f/0x7c0 [ 434.854994][T10945] create_new_namespaces+0x3ea/0xac0 [ 434.855018][T10945] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 434.855040][T10945] ksys_unshare+0x473/0xad0 [ 434.855065][T10945] ? __pfx_ksys_unshare+0x10/0x10 [ 434.855096][T10945] __x64_sys_unshare+0x31/0x40 [ 434.855118][T10945] do_syscall_64+0x106/0xf80 [ 434.855142][T10945] ? clear_bhb_loop+0x40/0x90 [ 434.855164][T10945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.855182][T10945] RIP: 0033:0x7f50f999c799 [ 434.855198][T10945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.855216][T10945] RSP: 002b:00007f50fa8c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 434.855233][T10945] RAX: ffffffffffffffda RBX: 00007f50f9c16090 RCX: 00007f50f999c799 [ 434.855244][T10945] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 434.855255][T10945] RBP: 00007f50f9a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 434.855265][T10945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.855275][T10945] R13: 00007f50f9c16128 R14: 00007f50f9c16090 R15: 00007fffa59b6508 [ 434.855297][T10945] [ 436.188069][T10963] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 436.499375][T10972] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 439.405150][T11012] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 439.447308][T11014] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 440.185340][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.193438][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.894180][T11063] Invalid ELF header magic: != ELF [ 442.032278][T11053] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 442.042129][T11053] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 442.081817][T11053] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 442.285688][T11053] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 442.402580][T10906] Bluetooth: hci1: unexpected event 0x32 length: 727 > 9 [ 442.596195][T11076] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 443.323587][T11096] program syz.3.1007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.408917][ T30] audit: type=1807 audit(4294967399.120:27): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 443.449184][ T30] audit: type=1802 audit(4294967399.130:28): pid=11093 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.3.1007" res=0 errno=0 [ 443.458408][T10906] Bluetooth: hci0: command 0x0c1a tx timeout [ 443.494554][T11092] ima: policy update failed [ 443.522542][ T30] audit: type=1802 audit(4294967399.210:29): pid=11092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1007" res=0 errno=0 [ 444.093456][T10906] Bluetooth: hci2: command 0x0c1a tx timeout [ 444.099493][T10906] Bluetooth: hci1: command 0x0c1a tx timeout [ 444.148190][T11105] NFSD: Failed to start, no listeners configured. [ 444.334816][T11110] Bluetooth: hci3: command 0x0c1a tx timeout [ 445.641134][T11129] FAULT_INJECTION: forcing a failure. [ 445.641134][T11129] name failslab, interval 1, probability 0, space 0, times 0 [ 445.716041][T11129] CPU: 0 UID: 0 PID: 11129 Comm: syz.1.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.716075][T11129] Tainted: [L]=SOFTLOCKUP [ 445.716082][T11129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.716093][T11129] Call Trace: [ 445.716099][T11129] [ 445.716106][T11129] dump_stack_lvl+0x100/0x190 [ 445.716140][T11129] should_fail_ex.cold+0x5/0xa [ 445.716161][T11129] ? tomoyo_realpath_from_path+0xb6/0x690 [ 445.716185][T11129] should_failslab+0xc2/0x120 [ 445.716206][T11129] __kmalloc_noprof+0xe0/0x850 [ 445.716237][T11129] tomoyo_realpath_from_path+0xb6/0x690 [ 445.716266][T11129] tomoyo_check_open_permission+0x2af/0x3c0 [ 445.716287][T11129] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 445.716327][T11129] ? lock_acquire+0x1cf/0x380 [ 445.716350][T11129] ? find_held_lock+0x2b/0x80 [ 445.716373][T11129] tomoyo_file_open+0x6b/0x90 [ 445.716402][T11129] security_file_open+0xb5/0x1e0 [ 445.716425][T11129] do_dentry_open+0x5aa/0x1660 [ 445.716449][T11129] vfs_open+0x82/0x3f0 [ 445.716474][T11129] path_openat+0x208c/0x31a0 [ 445.716500][T11129] ? __pfx_path_openat+0x10/0x10 [ 445.716526][T11129] do_file_open+0x20e/0x430 [ 445.716546][T11129] ? __pfx_do_file_open+0x10/0x10 [ 445.716580][T11129] ? alloc_fd+0x476/0x790 [ 445.716599][T11129] ? do_getname+0x191/0x390 [ 445.716624][T11129] do_sys_openat2+0x10d/0x1e0 [ 445.716647][T11129] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.716686][T11129] __x64_sys_openat+0x12d/0x210 [ 445.716716][T11129] ? __pfx___x64_sys_openat+0x10/0x10 [ 445.716750][T11129] do_syscall_64+0x106/0xf80 [ 445.716775][T11129] ? clear_bhb_loop+0x40/0x90 [ 445.716798][T11129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.716817][T11129] RIP: 0033:0x7fbad279c799 [ 445.716833][T11129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.716850][T11129] RSP: 002b:00007fbad3624028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 445.716869][T11129] RAX: ffffffffffffffda RBX: 00007fbad2a15fa0 RCX: 00007fbad279c799 [ 445.716880][T11129] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 445.716891][T11129] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 445.716902][T11129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.716913][T11129] R13: 00007fbad2a16038 R14: 00007fbad2a15fa0 R15: 00007ffc0949bf08 [ 445.716936][T11129] [ 445.716978][T11129] ERROR: Out of memory at tomoyo_realpath_from_path. [ 448.769674][T11172] syz.2.1019 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 449.403936][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1024'. [ 449.519848][T11183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 449.537601][T11183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 449.597618][T11183] bond0 (unregistering): Released all slaves [ 451.699721][T11200] FAULT_INJECTION: forcing a failure. [ 451.699721][T11200] name failslab, interval 1, probability 0, space 0, times 0 [ 451.756911][T11200] CPU: 1 UID: 0 PID: 11200 Comm: syz.0.1034 Tainted: G L syzkaller #0 PREEMPT(full) [ 451.756966][T11200] Tainted: [L]=SOFTLOCKUP [ 451.756978][T11200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 451.756997][T11200] Call Trace: [ 451.757008][T11200] [ 451.757021][T11200] dump_stack_lvl+0x100/0x190 [ 451.757076][T11200] should_fail_ex.cold+0x5/0xa [ 451.757114][T11200] should_failslab+0xc2/0x120 [ 451.757149][T11200] __kvmalloc_node_noprof+0xfa/0xa00 [ 451.757199][T11200] ? alloc_fdtable+0x110/0x2d0 [ 451.757257][T11200] alloc_fdtable+0x110/0x2d0 [ 451.757310][T11200] dup_fd+0x995/0xd10 [ 451.757345][T11200] ? fd_statfs+0xdd/0x120 [ 451.757396][T11200] ksys_unshare+0x7ad/0xad0 [ 451.757440][T11200] ? __pfx_ksys_unshare+0x10/0x10 [ 451.757496][T11200] __x64_sys_unshare+0x31/0x40 [ 451.757536][T11200] do_syscall_64+0x106/0xf80 [ 451.757577][T11200] ? clear_bhb_loop+0x40/0x90 [ 451.757616][T11200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.757650][T11200] RIP: 0033:0x7f1dd459c799 [ 451.757678][T11200] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 451.757709][T11200] RSP: 002b:00007f1dd53c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 451.757742][T11200] RAX: ffffffffffffffda RBX: 00007f1dd4816090 RCX: 00007f1dd459c799 [ 451.757764][T11200] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000400 [ 451.757783][T11200] RBP: 00007f1dd4632c99 R08: 0000000000000000 R09: 0000000000000000 [ 451.757812][T11200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 451.757830][T11200] R13: 00007f1dd4816128 R14: 00007f1dd4816090 R15: 00007ffc3b06fed8 [ 451.757872][T11200] [ 454.598459][T11260] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 459.699717][T11296] kexec: Could not allocate control_code_buffer [ 460.848494][T11330] block nbd8: Unsupported socket: should be TCP or UNIX. [ 466.389825][T11391] FAULT_INJECTION: forcing a failure. [ 466.389825][T11391] name failslab, interval 1, probability 0, space 0, times 0 [ 466.453530][T11391] CPU: 1 UID: 0 PID: 11391 Comm: syz.0.1063 Tainted: G L syzkaller #0 PREEMPT(full) [ 466.453581][T11391] Tainted: [L]=SOFTLOCKUP [ 466.453592][T11391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 466.453611][T11391] Call Trace: [ 466.453622][T11391] [ 466.453634][T11391] dump_stack_lvl+0x100/0x190 [ 466.453687][T11391] should_fail_ex.cold+0x5/0xa [ 466.453725][T11391] should_failslab+0xc2/0x120 [ 466.453761][T11391] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 466.453808][T11391] ? __proc_create+0x2cb/0x8c0 [ 466.453877][T11391] __proc_create+0x2cb/0x8c0 [ 466.453929][T11391] ? __pfx___proc_create+0x10/0x10 [ 466.453986][T11391] ? _raw_write_unlock+0x28/0x50 [ 466.454029][T11391] ? proc_register+0x559/0x8a0 [ 466.454065][T11391] proc_create_reg+0x75/0x170 [ 466.454101][T11391] proc_create_net_data+0x8e/0x1c0 [ 466.454134][T11391] ? __pfx_proc_create_net_data+0x10/0x10 [ 466.454164][T11391] ? net_generic+0xea/0x2a0 [ 466.454209][T11391] ? __pfx_vlan_init_net+0x10/0x10 [ 466.454252][T11391] vlan_proc_init+0xe6/0x160 [ 466.454288][T11391] ops_init+0x1e2/0x5f0 [ 466.454335][T11391] setup_net+0x118/0x3a0 [ 466.454381][T11391] ? __pfx_setup_net+0x10/0x10 [ 466.454425][T11391] ? lockdep_init_map_type+0x5c/0x250 [ 466.454469][T11391] ? mutex_init_lockep+0x110/0x150 [ 466.454519][T11391] copy_net_ns+0x46f/0x7c0 [ 466.454555][T11391] create_new_namespaces+0x3ea/0xac0 [ 466.454597][T11391] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 466.454637][T11391] ksys_unshare+0x473/0xad0 [ 466.454678][T11391] ? __pfx_ksys_unshare+0x10/0x10 [ 466.454732][T11391] __x64_sys_unshare+0x31/0x40 [ 466.454772][T11391] do_syscall_64+0x106/0xf80 [ 466.454814][T11391] ? clear_bhb_loop+0x40/0x90 [ 466.454862][T11391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.454893][T11391] RIP: 0033:0x7f1dd459c799 [ 466.454919][T11391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.454948][T11391] RSP: 002b:00007f1dd53c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 466.454975][T11391] RAX: ffffffffffffffda RBX: 00007f1dd4816090 RCX: 00007f1dd459c799 [ 466.454994][T11391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 466.455012][T11391] RBP: 00007f1dd4632c99 R08: 0000000000000000 R09: 0000000000000000 [ 466.455030][T11391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 466.455047][T11391] R13: 00007f1dd4816128 R14: 00007f1dd4816090 R15: 00007ffc3b06fed8 [ 466.455090][T11391] [ 466.692183][T11367] kexec: Could not allocate control_code_buffer [ 466.720539][T11391] 8021q: can't create entry in proc filesystem! [ 470.058009][ T30] audit: type=1800 audit(4294967425.770:30): pid=11460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1070" name="trace_pipe" dev="tracefs" ino=224 res=0 errno=0 [ 470.089671][T11444] NFSD: Failed to start, no listeners configured. [ 474.733430][T11110] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 476.672828][T11509] Invalid ELF header magic: != ELF [ 478.509472][T11519] block nbd8: shutting down sockets [ 478.573562][T11533] block nbd8: Unsupported socket: should be TCP or UNIX. [ 479.140048][T11492] kexec: Could not allocate control_code_buffer [ 479.325309][ T30] audit: type=1800 audit(4294967434.970:31): pid=11546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1086" name="trace_pipe" dev="tracefs" ino=224 res=0 errno=0 [ 480.412702][T11561] Invalid ELF header magic: != ELF [ 486.203870][T11631] Invalid ELF header magic: != ELF [ 486.366769][T11609] kexec: Could not allocate control_code_buffer [ 486.759048][T11623] [U] ^@ [ 487.298838][T11650] block nbd8: Unsupported socket: should be TCP or UNIX. [ 488.002502][T11662] FAULT_INJECTION: forcing a failure. [ 488.002502][T11662] name failslab, interval 1, probability 0, space 0, times 0 [ 488.047101][T11662] CPU: 0 UID: 0 PID: 11662 Comm: syz.0.1109 Tainted: G L syzkaller #0 PREEMPT(full) [ 488.047134][T11662] Tainted: [L]=SOFTLOCKUP [ 488.047141][T11662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 488.047152][T11662] Call Trace: [ 488.047158][T11662] [ 488.047166][T11662] dump_stack_lvl+0x100/0x190 [ 488.047198][T11662] should_fail_ex.cold+0x5/0xa [ 488.047220][T11662] should_failslab+0xc2/0x120 [ 488.047239][T11662] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 488.047266][T11662] ? sk_prot_alloc+0x60/0x2a0 [ 488.047287][T11662] sk_prot_alloc+0x60/0x2a0 [ 488.047306][T11662] sk_alloc+0x36/0xe80 [ 488.047331][T11662] tipc_sk_create+0xf9/0x2420 [ 488.047358][T11662] ? find_held_lock+0x2b/0x80 [ 488.047375][T11662] ? __sock_create+0x2f3/0x860 [ 488.047393][T11662] ? __sock_create+0x2f3/0x860 [ 488.047415][T11662] __sock_create+0x339/0x860 [ 488.047438][T11662] __sys_socket+0x14d/0x260 [ 488.047458][T11662] ? __pfx___sys_socket+0x10/0x10 [ 488.047492][T11662] __x64_sys_socket+0x72/0xb0 [ 488.047511][T11662] ? lockdep_hardirqs_on+0x78/0x100 [ 488.047536][T11662] do_syscall_64+0x106/0xf80 [ 488.047560][T11662] ? clear_bhb_loop+0x40/0x90 [ 488.047582][T11662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.047601][T11662] RIP: 0033:0x7f1dd459c799 [ 488.047617][T11662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.047635][T11662] RSP: 002b:00007f1dd53e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 488.047654][T11662] RAX: ffffffffffffffda RBX: 00007f1dd4815fa0 RCX: 00007f1dd459c799 [ 488.047665][T11662] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 488.047676][T11662] RBP: 00007f1dd4632c99 R08: 0000000000000000 R09: 0000000000000000 [ 488.047686][T11662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.047696][T11662] R13: 00007f1dd4816038 R14: 00007f1dd4815fa0 R15: 00007ffc3b06fed8 [ 488.047717][T11662] [ 489.920100][T11698] Invalid ELF header magic: != ELF [ 492.164537][T11722] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 492.958975][T11695] kexec: Could not allocate control_code_buffer [ 493.372937][T11730] block nbd8: Unsupported socket: should be TCP or UNIX. [ 493.584457][T11740] Invalid ELF header magic: != ELF [ 494.537506][T11729] block nbd8: shutting down sockets [ 494.795112][T11754] FAULT_INJECTION: forcing a failure. [ 494.795112][T11754] name failslab, interval 1, probability 0, space 0, times 0 [ 494.861342][T11754] CPU: 1 UID: 0 PID: 11754 Comm: syz.3.1123 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.861395][T11754] Tainted: [L]=SOFTLOCKUP [ 494.861406][T11754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.861424][T11754] Call Trace: [ 494.861434][T11754] [ 494.861447][T11754] dump_stack_lvl+0x100/0x190 [ 494.861500][T11754] should_fail_ex.cold+0x5/0xa [ 494.861537][T11754] ? tomoyo_realpath_from_path+0xb6/0x690 [ 494.861579][T11754] should_failslab+0xc2/0x120 [ 494.861614][T11754] __kmalloc_noprof+0xe0/0x850 [ 494.861680][T11754] tomoyo_realpath_from_path+0xb6/0x690 [ 494.861732][T11754] tomoyo_check_open_permission+0x2af/0x3c0 [ 494.861771][T11754] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 494.861846][T11754] ? lock_acquire+0x1cf/0x380 [ 494.861887][T11754] ? find_held_lock+0x2b/0x80 [ 494.861928][T11754] tomoyo_file_open+0x6b/0x90 [ 494.861977][T11754] security_file_open+0xb5/0x1e0 [ 494.862018][T11754] do_dentry_open+0x5aa/0x1660 [ 494.862063][T11754] vfs_open+0x82/0x3f0 [ 494.862109][T11754] path_openat+0x208c/0x31a0 [ 494.862156][T11754] ? __pfx_path_openat+0x10/0x10 [ 494.862207][T11754] do_file_open+0x20e/0x430 [ 494.862244][T11754] ? __pfx_do_file_open+0x10/0x10 [ 494.862309][T11754] ? alloc_fd+0x476/0x790 [ 494.862346][T11754] ? do_getname+0x191/0x390 [ 494.862389][T11754] do_sys_openat2+0x10d/0x1e0 [ 494.862430][T11754] ? __pfx_do_sys_openat2+0x10/0x10 [ 494.862487][T11754] __x64_sys_openat+0x12d/0x210 [ 494.862531][T11754] ? __pfx___x64_sys_openat+0x10/0x10 [ 494.862590][T11754] do_syscall_64+0x106/0xf80 [ 494.862633][T11754] ? clear_bhb_loop+0x40/0x90 [ 494.862681][T11754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.862714][T11754] RIP: 0033:0x7f50f999c799 [ 494.862741][T11754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.862771][T11754] RSP: 002b:00007f50fa8e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 494.862802][T11754] RAX: ffffffffffffffda RBX: 00007f50f9c15fa0 RCX: 00007f50f999c799 [ 494.862823][T11754] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 494.862843][T11754] RBP: 00007f50f9a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 494.862861][T11754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.862879][T11754] R13: 00007f50f9c16038 R14: 00007f50f9c15fa0 R15: 00007fffa59b6508 [ 494.862921][T11754] [ 495.250716][T11754] ERROR: Out of memory at tomoyo_realpath_from_path. [ 499.027213][T11784] block nbd8: shutting down sockets [ 500.621023][T11834] FAULT_INJECTION: forcing a failure. [ 500.621023][T11834] name failslab, interval 1, probability 0, space 0, times 0 [ 500.701945][T11834] CPU: 0 UID: 0 PID: 11834 Comm: syz.2.1144 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.701993][T11834] Tainted: [L]=SOFTLOCKUP [ 500.702004][T11834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 500.702021][T11834] Call Trace: [ 500.702030][T11834] [ 500.702041][T11834] dump_stack_lvl+0x100/0x190 [ 500.702088][T11834] should_fail_ex.cold+0x5/0xa [ 500.702120][T11834] ? tomoyo_realpath_from_path+0xb6/0x690 [ 500.702156][T11834] should_failslab+0xc2/0x120 [ 500.702187][T11834] __kmalloc_noprof+0xe0/0x850 [ 500.702235][T11834] tomoyo_realpath_from_path+0xb6/0x690 [ 500.702280][T11834] tomoyo_check_open_permission+0x2af/0x3c0 [ 500.702314][T11834] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 500.702381][T11834] ? lock_acquire+0x1cf/0x380 [ 500.702428][T11834] ? find_held_lock+0x2b/0x80 [ 500.702466][T11834] tomoyo_file_open+0x6b/0x90 [ 500.702508][T11834] security_file_open+0xb5/0x1e0 [ 500.702545][T11834] do_dentry_open+0x5aa/0x1660 [ 500.702587][T11834] vfs_open+0x82/0x3f0 [ 500.702626][T11834] path_openat+0x208c/0x31a0 [ 500.702669][T11834] ? __pfx_path_openat+0x10/0x10 [ 500.702712][T11834] do_file_open+0x20e/0x430 [ 500.702744][T11834] ? __pfx_do_file_open+0x10/0x10 [ 500.702802][T11834] ? alloc_fd+0x476/0x790 [ 500.702833][T11834] ? do_getname+0x191/0x390 [ 500.702871][T11834] do_sys_openat2+0x10d/0x1e0 [ 500.702905][T11834] ? __pfx_do_sys_openat2+0x10/0x10 [ 500.702955][T11834] __x64_sys_openat+0x12d/0x210 [ 500.702992][T11834] ? __pfx___x64_sys_openat+0x10/0x10 [ 500.703047][T11834] do_syscall_64+0x106/0xf80 [ 500.703092][T11834] ? clear_bhb_loop+0x40/0x90 [ 500.703129][T11834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.703159][T11834] RIP: 0033:0x7f995299c799 [ 500.703184][T11834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.703211][T11834] RSP: 002b:00007f9953926028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 500.703240][T11834] RAX: ffffffffffffffda RBX: 00007f9952c15fa0 RCX: 00007f995299c799 [ 500.703262][T11834] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 500.703281][T11834] RBP: 00007f9952a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 500.703297][T11834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.703313][T11834] R13: 00007f9952c16038 R14: 00007f9952c15fa0 R15: 00007fff081a99e8 [ 500.703355][T11834] [ 500.963306][T11834] ERROR: Out of memory at tomoyo_realpath_from_path. [ 501.242224][T11849] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 501.307746][T11848] ima: policy update failed [ 501.308924][ T30] audit: type=1802 audit(4294967457.020:32): pid=11848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1146" res=0 errno=0 [ 501.629053][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.629111][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.959006][T11882] FAULT_INJECTION: forcing a failure. [ 503.959006][T11882] name failslab, interval 1, probability 0, space 0, times 0 [ 504.054327][T11882] CPU: 0 UID: 0 PID: 11882 Comm: syz.1.1151 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.054368][T11882] Tainted: [L]=SOFTLOCKUP [ 504.054377][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.054391][T11882] Call Trace: [ 504.054399][T11882] [ 504.054408][T11882] dump_stack_lvl+0x100/0x190 [ 504.054451][T11882] should_fail_ex.cold+0x5/0xa [ 504.054479][T11882] should_failslab+0xc2/0x120 [ 504.054505][T11882] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 504.054541][T11882] ? __proc_create+0x2cb/0x8c0 [ 504.054593][T11882] __proc_create+0x2cb/0x8c0 [ 504.054631][T11882] ? __pfx___proc_create+0x10/0x10 [ 504.054670][T11882] ? _raw_write_unlock+0x28/0x50 [ 504.054713][T11882] proc_create_reg+0x75/0x170 [ 504.054737][T11882] ? __pfx_kcm_stats_seq_show+0x10/0x10 [ 504.054769][T11882] proc_create_net_single+0x86/0x180 [ 504.054792][T11882] ? __pfx_proc_create_net_single+0x10/0x10 [ 504.054823][T11882] ? __pfx_kcm_proc_init_net+0x10/0x10 [ 504.054853][T11882] kcm_proc_init_net+0x52/0x120 [ 504.054883][T11882] ops_init+0x1e2/0x5f0 [ 504.054921][T11882] setup_net+0x118/0x3a0 [ 504.054956][T11882] ? __pfx_setup_net+0x10/0x10 [ 504.054988][T11882] ? lockdep_init_map_type+0x5c/0x250 [ 504.055021][T11882] ? mutex_init_lockep+0x110/0x150 [ 504.055057][T11882] copy_net_ns+0x46f/0x7c0 [ 504.055083][T11882] create_new_namespaces+0x3ea/0xac0 [ 504.055117][T11882] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 504.055145][T11882] ksys_unshare+0x473/0xad0 [ 504.055177][T11882] ? __pfx_ksys_unshare+0x10/0x10 [ 504.055209][T11882] ? kcov_ioctl+0x16a/0x720 [ 504.055237][T11882] __x64_sys_unshare+0x31/0x40 [ 504.055265][T11882] do_syscall_64+0x106/0xf80 [ 504.055297][T11882] ? clear_bhb_loop+0x40/0x90 [ 504.055327][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.055351][T11882] RIP: 0033:0x7fbad279c799 [ 504.055371][T11882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.055394][T11882] RSP: 002b:00007fbad3603028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 504.055418][T11882] RAX: ffffffffffffffda RBX: 00007fbad2a16090 RCX: 00007fbad279c799 [ 504.055434][T11882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 504.055447][T11882] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 504.055461][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 504.055474][T11882] R13: 00007fbad2a16128 R14: 00007fbad2a16090 R15: 00007ffc0949bf08 [ 504.055507][T11882] [ 508.388865][T11937] netlink: 98 bytes leftover after parsing attributes in process `syz.2.1164'. [ 508.573245][T11110] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 509.909981][T11961] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 510.222090][T11110] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 510.379185][T11976] ------------[ cut here ]------------ [ 510.385102][T11976] !reader [ 510.385119][T11976] WARNING: kernel/trace/ring_buffer.c:7407 at ring_buffer_map_get_reader+0x659/0x880, CPU#1: syz.1.1171/11976 [ 510.399769][T11976] Modules linked in: [ 510.404013][T11976] CPU: 1 UID: 0 PID: 11976 Comm: syz.1.1171 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.415009][T11976] Tainted: [L]=SOFTLOCKUP [ 510.419368][T11976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.429466][T11976] RIP: 0010:ring_buffer_map_get_reader+0x659/0x880 [ 510.436010][T11976] Code: ff e8 1b d5 fb ff 48 8d 3d d4 58 d1 0e 4c 89 fe 67 48 0f b9 3a e9 e0 fc ff ff 4c 8b 7c 24 58 4c 8b 74 24 60 e8 f8 d4 fb ff 90 <0f> 0b 90 e8 ef d4 fb ff 48 89 df 31 db e8 e5 0f fe ff 48 8b 74 24 [ 510.455645][T11976] RSP: 0018:ffffc90003abfd90 EFLAGS: 00010083 [ 510.461733][T11976] RAX: 000000000000079b RBX: ffff88813fea5000 RCX: ffffc9000eea2000 [ 510.469719][T11976] RDX: 0000000000080000 RSI: ffffffff820c4368 RDI: ffff88802d48db80 [ 510.477703][T11976] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 510.485688][T11976] R10: 0000000000000000 R11: ffff88813fea50b0 R12: ffff88813fea50b0 [ 510.493670][T11976] R13: dffffc0000000000 R14: ffff88813fea5190 R15: ffff88813fea5018 [ 510.501917][T11976] FS: 00007fbad35e26c0(0000) GS:ffff88812444a000(0000) knlGS:0000000000000000 [ 510.510862][T11976] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 510.517461][T11976] CR2: 0000001b30bf7ff8 CR3: 0000000034be2000 CR4: 00000000003526f0 [ 510.525449][T11976] Call Trace: [ 510.528734][T11976] [ 510.531686][T11976] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 510.538034][T11976] ? __fget_files+0x21f/0x3d0 [ 510.542729][T11976] tracing_buffers_ioctl+0x30d/0x400 [ 510.548297][T11976] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 510.554130][T11976] __x64_sys_ioctl+0x18e/0x210 [ 510.558925][T11976] do_syscall_64+0x106/0xf80 [ 510.563538][T11976] ? clear_bhb_loop+0x40/0x90 [ 510.568232][T11976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.574146][T11976] RIP: 0033:0x7fbad279c799 [ 510.578574][T11976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.598191][T11976] RSP: 002b:00007fbad35e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.606889][T11976] RAX: ffffffffffffffda RBX: 00007fbad2a16180 RCX: 00007fbad279c799 [ 510.614871][T11976] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 000000000000000a [ 510.622857][T11976] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 510.630833][T11976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.638812][T11976] R13: 00007fbad2a16218 R14: 00007fbad2a16180 R15: 00007ffc0949bf08 [ 510.646811][T11976] [ 510.649841][T11976] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 510.657134][T11976] CPU: 1 UID: 0 PID: 11976 Comm: syz.1.1171 Tainted: G L syzkaller #0 PREEMPT(full) [ 510.668695][T11976] Tainted: [L]=SOFTLOCKUP [ 510.673024][T11976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 510.683152][T11976] Call Trace: [ 510.686445][T11976] [ 510.689386][T11976] dump_stack_lvl+0x100/0x190 [ 510.694097][T11976] vpanic+0x552/0x970 [ 510.698096][T11976] ? __pfx_vpanic+0x10/0x10 [ 510.702631][T11976] panic+0xd1/0xe0 [ 510.706365][T11976] ? __pfx_panic+0x10/0x10 [ 510.710820][T11976] check_panic_on_warn.cold+0x19/0x34 [ 510.716207][T11976] ? ring_buffer_map_get_reader+0x659/0x880 [ 510.722111][T11976] __warn.cold+0x191/0x348 [ 510.726561][T11976] __report_bug+0x296/0x3d0 [ 510.731087][T11976] ? ring_buffer_map_get_reader+0x659/0x880 [ 510.737004][T11976] ? __pfx___report_bug+0x10/0x10 [ 510.742055][T11976] ? add_lock_to_list+0x99/0x110 [ 510.747020][T11976] ? lockdep_unlock+0x5a/0xc0 [ 510.751714][T11976] ? rb_set_head_page+0x1e6/0x2f0 [ 510.756769][T11976] ? ring_buffer_map_get_reader+0x659/0x880 [ 510.762677][T11976] report_bug+0xb2/0x220 [ 510.766939][T11976] ? ring_buffer_map_get_reader+0x659/0x880 [ 510.772844][T11976] handle_bug+0x16a/0x2a0 [ 510.777229][T11976] exc_invalid_op+0x17/0x50 [ 510.781745][T11976] asm_exc_invalid_op+0x1a/0x20 [ 510.786611][T11976] RIP: 0010:ring_buffer_map_get_reader+0x659/0x880 [ 510.793128][T11976] Code: ff e8 1b d5 fb ff 48 8d 3d d4 58 d1 0e 4c 89 fe 67 48 0f b9 3a e9 e0 fc ff ff 4c 8b 7c 24 58 4c 8b 74 24 60 e8 f8 d4 fb ff 90 <0f> 0b 90 e8 ef d4 fb ff 48 89 df 31 db e8 e5 0f fe ff 48 8b 74 24 [ 510.812764][T11976] RSP: 0018:ffffc90003abfd90 EFLAGS: 00010083 [ 510.818860][T11976] RAX: 000000000000079b RBX: ffff88813fea5000 RCX: ffffc9000eea2000 [ 510.827047][T11976] RDX: 0000000000080000 RSI: ffffffff820c4368 RDI: ffff88802d48db80 [ 510.835051][T11976] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 510.843044][T11976] R10: 0000000000000000 R11: ffff88813fea50b0 R12: ffff88813fea50b0 [ 510.851063][T11976] R13: dffffc0000000000 R14: ffff88813fea5190 R15: ffff88813fea5018 [ 510.859058][T11976] ? ring_buffer_map_get_reader+0x658/0x880 [ 510.864991][T11976] ? __pfx_ring_buffer_map_get_reader+0x10/0x10 [ 510.871255][T11976] ? __fget_files+0x21f/0x3d0 [ 510.875953][T11976] tracing_buffers_ioctl+0x30d/0x400 [ 510.881269][T11976] ? __pfx_tracing_buffers_ioctl+0x10/0x10 [ 510.887098][T11976] __x64_sys_ioctl+0x18e/0x210 [ 510.891888][T11976] do_syscall_64+0x106/0xf80 [ 510.896503][T11976] ? clear_bhb_loop+0x40/0x90 [ 510.901206][T11976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.907110][T11976] RIP: 0033:0x7fbad279c799 [ 510.911537][T11976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.931167][T11976] RSP: 002b:00007fbad35e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.939602][T11976] RAX: ffffffffffffffda RBX: 00007fbad2a16180 RCX: 00007fbad279c799 [ 510.947590][T11976] RDX: 0000000000000000 RSI: 0000000000005220 RDI: 000000000000000a [ 510.955574][T11976] RBP: 00007fbad2832c99 R08: 0000000000000000 R09: 0000000000000000 [ 510.963563][T11976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 510.971547][T11976] R13: 00007fbad2a16218 R14: 00007fbad2a16180 R15: 00007ffc0949bf08 [ 510.979636][T11976] [ 510.983007][T11976] Kernel Offset: disabled [ 510.987328][T11976] Rebooting in 86400 seconds..