last executing test programs: 8.245498484s ago: executing program 0 (id=2179): r0 = socket(0xa, 0x0, 0x2) r1 = pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000003c0), 0x1541, 0x0) r2 = syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000080), r0) sendmsg$auto_KSMBD_EVENT_HEARTBEAT_REQUEST(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x48080) r3 = epoll_create$auto(0x1) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0xffffffffffffffff, 0x10008000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x6) keyctl$auto(0x15, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x8) keyctl$auto_KEY_REQKEY_DEFL_NO_CHANGE(0x4, 0xffffffffffffffff, 0x0, 0x0, 0xf0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x40003, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x55) mincore$auto(0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0xe, 0x0, 0x8) socket(0x2c, 0x3, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x4, 0x4) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(0x6, 0x1, 0x4d, 0xfffffffffffffffe, 0x0) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x100000000000000}, 0x3) 8.204438085s ago: executing program 1 (id=2180): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) ioctl$auto(r0, 0x80085617, r0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) select$auto(0x7, 0x0, &(0x7f0000000000)={[0x209c, 0x40, 0x8, 0x19, 0xffffffffffffeff7, 0x47, 0xc, 0x200000f, 0x0, 0x0, 0x12, 0xd59, 0x100000000101, 0x9b, 0x2, 0xffffffffffffffff]}, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYRES64], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0xc840) 7.511687312s ago: executing program 1 (id=2182): eventfd$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/media0\x00', 0x40040, 0x0) r2 = epoll_create$auto(0x70c) epoll_ctl$auto(r2, 0x1, r0, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{0xffffffff, 0x4, 0x2}, {0x0, 0x0, 0x1ff}, {0x2, 0x8, 0x100}, {0x2, 0x0, 0x8001}, {0x7fe00000, 0x70, 0x81}, {0x10, 0x2, 0xe800000000000000}]}) eventfd$auto(0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) (async) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f00000022c0)='/dev/media0\x00', 0x40040, 0x0) (async) epoll_create$auto(0x70c) (async) epoll_ctl$auto(r2, 0x1, r0, 0x0) (async) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x3, 0x0, [{0xffffffff, 0x4, 0x2}, {0x0, 0x0, 0x1ff}, {0x2, 0x8, 0x100}, {0x2, 0x0, 0x8001}, {0x7fe00000, 0x70, 0x81}, {0x10, 0x2, 0xe800000000000000}]}) (async) 7.316664797s ago: executing program 0 (id=2183): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) memfd_secret$auto(0x0) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x7, 0x0) clock_nanosleep$auto(0x8, 0x1, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x6, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) 7.220808476s ago: executing program 1 (id=2184): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x140) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) select$auto(0xfffffffb, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x400000000000005, 0x5, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) read$auto(0x3, 0x0, 0x8080) madvise$auto(0xffffffff, 0x6d, 0x4) 6.238556719s ago: executing program 3 (id=2188): r0 = open(&(0x7f0000000040)='./file0\x00', 0x105242, 0xe1d2b27bdc14aa7c) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptyac\x00', 0x410080, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x100000001, 0x7ff) ptrace$auto_PTRACE_GETEVENTMSG(0x4201, r1, 0x9, 0xfffffffffffffff9) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0x3a) r2 = socket(0xa, 0x2, 0x0) setsockopt$auto(r2, 0x29, 0x8, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x17\x11\x1d\x1a\xab5\xc3,\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x7ff) setsockopt$auto(0x400000000000003, 0x29, 0x3b, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) sendmsg$auto_NETDEV_CMD_BIND_RX(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)={0x14, r4, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r6 = io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x5, 0xdf0}, 0x7}, 0x3, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto_NL80211_CMD_DEL_PMK(r6, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_FILS_ERP_USERNAME={0xd, 0xf9, "049157c5dc3a46eb3c"}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "1e0876c65f6b14d803a72646"}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x1801}, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_m5602/parameters/dump_sensor\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001700)=""/4082, 0xff2) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0xaf1e, 0x34, 0x400000000065f, 0x7, 0x40007, 0x7f, 0x20000005, 0x9, 0x3, 0x6, 0x400000004, 0xb4, 0x4, 0x6, 0x2, 0x4, 0xfff, 0xfffffff7, 0x7, 0x1fff, 0x203, 0x838b, 0x84, 0x2, 0xffff, 0x5, 0x0, 0x0, [0x2, 0x0, 0x4, 0x40000000000, 0x1, 0xffffffffffffffff, 0x8000000000000000, 0x1, 0x400, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x0, 0x81, 0x9e, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffffffffc4a, 0x4, 0x3e, 0x251, 0x3, 0x0, 0x0, 0x8, 0x9, 0xfffffffffffff7cc, 0x0, 0x400000000000002, 0x1, 0xfffffffffffffffe, 0x1, 0x0, 0x9, 0x8, 0x2000]}, 0x1fe, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 6.23695316s ago: executing program 0 (id=2189): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) pselect6$auto(0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xfffc, 0x9}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(0x0, 0x161342, 0x100) read$auto(0xffffffffffffffff, 0x0, 0x20) mprotect$auto(0x200000000000, 0x806121, 0x8) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) madvise$auto(0x1000, 0x7fffffff, 0x3) 5.313665106s ago: executing program 3 (id=2191): mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r0 = socket$nl_generic(0x10, 0x3, 0x10) pwritev2$auto(r0, &(0x7f00000003c0)={0x0, 0x5}, 0x8000000000000004, 0xffffffffffffffff, 0x9, 0xb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/usbcore/parameters/quirks\x00', 0x1e1441, 0x0) keyctl$auto_KEYCTL_ASSUME_AUTHORITY(0x10, 0x25f, 0x4, 0x4, 0x7) 5.221265662s ago: executing program 0 (id=2192): r0 = syz_clone(0x4002000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x100000000) keyctl$auto(0x1e, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x1) mmap$auto(0x0, 0x9, 0x4000000000e1, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x2, 0x0) bind$auto(r1, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x22001, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x68102, 0x0) pread64$auto(r2, 0x0, 0x3, 0xe9) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) r5 = timerfd_create$auto(0x1, 0x0) timerfd_settime$auto(r5, 0x3, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) sendmmsg$auto(r1, 0x0, 0x11a7, 0xc21f) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) close_range$auto(0x2, r3, 0xfffff7fd) sendto$auto(r4, &(0x7f0000000e80)="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", 0x3, 0x10, &(0x7f0000001e80)=@vsock={0x28, 0x0, 0x2710, @host}, 0x2) unshare$auto(0x40000080) socket(0xf, 0xa, 0x5) rt_sigsuspend$auto(&(0x7f0000000140)={0x10}, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x801, 0x6) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x40100, 0x0) shutdown$auto(0x200000003, 0x2) listen$auto(0x3, 0x7) shmctl$auto_SHM_STAT(0xd, 0xd, &(0x7f0000000180)={{0x3, 0xee01, 0xffffffffffffffff, 0x2, 0x5, 0x10001, 0x7}, 0xfffffffe, 0x9, 0x2, 0x5, @inferred, @inferred=r0, 0x0, 0x0, 0x0, 0x0}) unshare$auto(0x40000080) 5.008481535s ago: executing program 3 (id=2193): r0 = socket(0x11, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000280), r1) sendmsg$auto_HWSIM_CMD_REGISTER(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250100000079a958146438dce4755801f2ff45040e2bf80faf0e30e7f14da8422cf1504ea1419bd226c5749bcdf6a3e9c1"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) mmap$auto(0x0, 0x20009, 0x5, 0xeb2, 0x8, 0x1008000) r3 = socket(0x10, 0x2, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f0000000000)="c80d1b5d399b71", 0x7) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r4 = eventfd$auto(0x10001) fchown$auto(r4, 0x0, 0x0) recvmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x14d27e, 0x72) copy_file_range$auto(r5, 0x0, r5, &(0x7f0000000080)=0xeb2f, 0xfffffffffffffffe, 0x0) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0xa, 0x80000, 0x84) mmap$auto(0x0, 0x7f, 0x5, 0xeb1, 0xffffffffffffffff, 0x8000) r9 = socket(0xa, 0x1, 0x84) getsockopt$auto(r9, 0x84, 0x14, 0x0, 0x0) mmap$auto(0x400, 0xa, 0x4000000000df, 0x10, r8, 0x8000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) syz_genetlink_get_family_id$auto_tipcv2(0x0, r3) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f00000003c0)='\a', 0x5ea}, 0x5, 0x0, 0x0, 0x1001}, 0x5}, 0x2, 0x100) 4.313968565s ago: executing program 1 (id=2195): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40040, 0x11) mmap$auto(0x0, 0x1, 0xfd5, 0x12, r0, 0x0) fcntl$getown(r0, 0x9) read$auto_ptdump_fops_(r0, &(0x7f0000000000)=""/142, 0x8e) r1 = epoll_create$auto(0x4) r2 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(r1, 0x1, r2, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, r1, 0x0) read$auto_nvram_misc_fops_nvram(r3, &(0x7f0000000100)=""/249, 0xf9) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x8000, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram10\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r4, 0x8000) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x109206, 0x0) write$auto(0x3, 0x0, 0x3) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x5000) 3.921323114s ago: executing program 3 (id=2196): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0xfdef) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7}, 0x2) mprotect$auto(0x200000000000, 0x806121, 0x4) pselect6$auto(0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xfffc, 0x9}, 0x0) open(0x0, 0x161342, 0x100) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mprotect$auto(0x200000000000, 0x806121, 0x8) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x80082, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) madvise$auto(0x1000, 0x7fffffff, 0x3) 2.669069212s ago: executing program 3 (id=2197): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/memfd_noexec\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0xfdef) writev$auto(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x7}, 0x2) mprotect$auto(0x200000000000, 0x806121, 0x4) pselect6$auto(0x2, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xfffc, 0x9}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mprotect$auto(0x200000000000, 0x806121, 0x8) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x80082, 0x0) socket(0x2, 0x1, 0x106) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) madvise$auto(0x1000, 0x7fffffff, 0x3) 2.657418698s ago: executing program 2 (id=2198): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) mmap$auto(0x101, 0x9, 0x8000000000000003, 0x17, 0xfffffffffffffffa, 0x40008000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0) fsconfig$auto_SHMEM_HUGE_ALWAYS(r0, 0x6, &(0x7f0000000040)='/dev/ram1\x00', &(0x7f0000000200)="d827470ae63e934cd8ca55b96d3b6badc09d2faa88ab289d890fad4bb50135e0bd06b0c83c6fc1f3b917587b444f4730ea8a12ddeb7552e4989eeeb9d9566b5ee2bb8d499fee07419e249d46d884c0255a86bbde2c2c65a1a65a56dd861f962a7a50cfc0fd5b442f0e510769d3c558e989da4eb3dde940a440de78ddb05d755570173d81b6e17117a7ac548b36d63d9071a96f7bf467b8c7ed823cc6db7efdcb749fac979f94775ab5e1dcacf29ef5", 0x1) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) sendmmsg$auto(r2, &(0x7f0000000400)={{&(0x7f0000000000), 0x205aa, &(0x7f0000000100)={0x0, 0x4b}, 0x1, 0x0, 0x5, 0x1060}, 0x5}, 0x2, 0x100) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r3, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x4100, 0x0) r5 = ioctl$auto_TUNSETVNETBE2(r4, 0x400454de, &(0x7f0000000a40)=0x5) r6 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000001c40), 0xffffffffffffffff) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000001d00)={&(0x7f0000001c00), 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x3c, r6, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8}, @NLBL_CIPSOV4_A_TAG={0x5, 0x3, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [@typed={0xc, 0x131, 0x0, 0x0, @str='nl80211\x00'}]}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40804}, 0x10) r7 = gettid() sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r3, &(0x7f0000000480)={&(0x7f0000000080), 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x120, r6, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x10c, 0x4, 0x0, 0x1, [@nested={0x107, 0x9e, 0x0, 0x1, [@typed={0xc, 0xbc, 0x0, 0x0, @u64=0x40}, @nested={0x4, 0x12f}, @generic="0b3834b16141f5837d7ec5220efc3b4f923c30e745ab8a500a7f7e6c1ee8f55854f42644cdca11cd181362ed60fff123886d6abc6f6781e7e2cf906b4e17d72e7d9d7743fa1098e48c806d06622ff4686960e3c4f0d3bd2ce1193e3501dfc7f6a46e35c0d35ba8a00dd9588bfd146f557cbc0fe97c0e02041db5ee0a05", @typed={0x4a, 0xaf, 0x0, 0x0, @binary="83ff86502367f7ab968a3bd6b650124b6d95519d9fbe89239d3e90b170bb18471eb7476e160a53d2ad9a37608daaf1a334d764b5d603965f8909d06a03950d1af6737e6141b8"}, @typed={0x8, 0x50, 0x0, 0x0, @pid=r7}, @generic="b7f076976beff94f99412f5347e68555cf81c386cb15ba7dd298003b4753e48d7b75"]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x840}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r8 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r8, 0x1261, 0x0) lseek$auto(0x3, 0xffffffffff800002, 0x10) ioctl$auto_BLKFLSBUF(r8, 0x1261, 0x0) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x20201, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) msync$auto(0x50000000, 0x5, 0x1) unshare$auto(0x40000080) ioctl$auto_BLKFLSBUF(r8, 0x1261, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, 0x0, 0x0) 2.111138873s ago: executing program 1 (id=2199): r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x10080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) (async) mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) preadv$auto(r1, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x0, 0x4, 0x5) r2 = socket(0x2a, 0x4, 0x1) setsockopt$auto(r2, 0x65, 0x5, 0x0, 0x800) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0xd) mmap$auto(0x0, 0x8000, 0x5, 0x99, 0xffffffffffffffff, 0xffffffffffffffff) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0xffffffffffffffff, r3, 0xffffffff) close_range$auto(0xffffffffffffffff, r0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto_nsim_dev_trap_fa_cookie_fops_dev(r3, &(0x7f00000000c0)="e1a760b72a974064c587975100e7e7a3a8bd9b9ca9eb6d67ce7aa834892f99c0f8995884f58405b3e8f892aff8612d93f26a9e875d7e379683f2eff29dda217e00cf9d83bafb185aa64a225cd6d01684805a2c0ce18bab51d60f32173ebb075cad432eb921d5cf344441d70974aa277e8a05e55905f30704eab9a21e4decd87b3fc2fe2a246c0e7a2089c2d7ba8599bac702701653552f28b17a198415e6e54210b756bf7dc660e11f90e7be5fbfa3c34e6d6a61085c9d7ad7c21de2df76e4721366788ec12d88f9fed4ded38d05fb691d8d37717b9c59016bd9e9d37e1becf3cda0fb817e574fcbd34a2441dd4934d33277ba", 0xf3) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) writev$auto(r4, &(0x7f0000000080)={0x0, 0x1ff}, 0x7) (async) writev$auto(r4, &(0x7f0000000080)={0x0, 0x1ff}, 0x7) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r1, 0x0, 0x20004004) (async) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(r1, 0x0, 0x20004004) mbind$auto(0x0, 0x2091d2, 0x100004, 0x0, 0x6, 0x2) unshare$auto(0x40000080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) (async) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c840) madvise$auto(0x110c230000, 0x1, 0x9) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mq_open$auto(0x0, 0x1, 0x7e, &(0x7f0000000040)={0x943b, 0x6, 0xffffffffffffffc0, 0x400}) (async) mq_open$auto(0x0, 0x1, 0x7e, &(0x7f0000000040)={0x943b, 0x6, 0xffffffffffffffc0, 0x400}) socket(0x0, 0x6, 0x0) (async) socket(0x0, 0x6, 0x0) eventfd$auto(0x9) 1.814689894s ago: executing program 0 (id=2200): openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch8\x00', 0x80f00, 0x0) (async) unshare$auto(0x40000080) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) inotify_init1$auto(0x6) r0 = socket(0x2, 0x5, 0x0) capget$auto(0x0, 0xfffffffffffffffe) (async) setsockopt$auto(r0, 0x0, 0xa, 0x0, 0x5) (async) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x2, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) 1.430393253s ago: executing program 2 (id=2201): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/netstat\x00', 0xa0001, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) write$auto(r0, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xadR\\\xcc\x8b\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y', 0x4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x8a603, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000340)='%]{\fZ', 0xffffffff) mmap$auto(0x0, 0xa7c, 0x5, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon17\x00', 0x80, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x7) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x20802, 0x0) socket(0x10, 0x2, 0x0) r3 = open(0x0, 0x20200, 0x188) statx$auto(r3, 0x0, 0x1003, 0x4005, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x102, 0x0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x9000, 0x0) r5 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r5, 0xaf01, 0x5) ioctl$auto(r5, 0x4028af11, r4) socket$nl_generic(0x10, 0x3, 0x10) mprotect$auto(0x200000000000, 0x5, 0x4) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x80000000, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0x4]}, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000006900)='/sys/kernel/config/target/dbroot\x00', 0x189002, 0x0) 882.57359ms ago: executing program 2 (id=2202): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) shutdown$auto(r0, 0xda6) (async) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) fcntl$auto(0x0, 0x407, 0x8100000) r1 = socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x9, 0x7, 0x3b, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x9, 0x3, 0x40fffc, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x7]}, 0x202, 0xd) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 588.31846ms ago: executing program 2 (id=2203): openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x442a02, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) inotify_init1$auto(0x3000000000000) (async) r2 = gettid() rt_sigqueueinfo$auto(r2, 0xb, &(0x7f00000001c0)={@siginfo_0_0={0x3, 0x401, 0xfffffffb, @_timer={r2, 0xd, @sival_ptr=0x0, 0x62}}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x38401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_FILS_AAD(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x4, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x44) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000880), r4) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001180), r3) sendmsg$auto_NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f0000003640)={0x0, 0x0, &(0x7f0000003600)={&(0x7f0000001200)={0x1c, r5, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001000}, 0x24000800) (async) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="053b1b90bfece0e2c8257e0000"], 0x14}, 0x1, 0x0, 0x0, 0x20004045}, 0x8000) unshare$auto(0x20000) (async) setns(0xffffffffffffffff, 0x20000) (async) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) (async) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/mem\x00', 0x20401, 0x0) mmap$auto(0x80000, 0x2004020009, 0x6, 0x100000000000eb1, 0x401, 0x0) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r8, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 494.42526ms ago: executing program 0 (id=2204): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mprotect$auto(0x1000, 0x84a1, 0x10000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/amidi2\x00', 0x2841, 0x0) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) ioctl$auto_BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/PNP0A06:01/uid\x00', 0x22902, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x0, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iostats\x00', 0x80302, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) mmap$auto(0x0, 0x2020005, 0x4, 0x11, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 353.215172ms ago: executing program 1 (id=2205): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x8f3b7a51b80eb581, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) socket(0x2, 0x80002, 0x73) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x7}, 0x2) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/batadv_slave_1/ra_defrtr_metric\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/mpls/conf/wg2/input\x00', 0x40802, 0x0) sendfile$auto(r4, r3, 0x0, 0x3fffff) sysfs$auto(0x2, 0x24, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r5, 0x0, 0xaf0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(0xffffffffffffffff, 0x5509, 0x0) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) 288.570619ms ago: executing program 2 (id=2206): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0x0, 0x0) ioctl$auto(r0, 0x4b3a, 0x1) 3.732156ms ago: executing program 2 (id=2207): mmap$auto(0x0, 0x8, 0x1000e2, 0xeb1, 0x405, 0x100008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x20082, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xfffffffffffffffe, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000003) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) msync$auto(0x110c230000, 0xc4, 0x8) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/nbd7/queue/dax\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4098, 0x1002) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) wait4$auto(r2, 0x0, 0x80000000, &(0x7f0000000140)={{0x10000, 0x100080}, {0x1, 0x9}, 0x8000000000000000, 0x2, 0x9, 0x10, 0x2, 0x1, 0x5, 0x6, 0x3, 0x800000000000008, 0x4, 0x7, 0x6, 0xb4b9}) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x80040}, 0x10004000) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7fd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r5, 0x0, 0x2) 0s ago: executing program 3 (id=2208): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/ax88179_178a/remove_id\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x14a) ioctl$auto_SNDCTL_SEQ_SYNC(r0, 0x5101, 0x0) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) select$auto(0xfffffffb, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x400000000000005, 0x5, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000fb, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) execve$auto(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid$auto_P_ALL(0x0, 0xffffffffffffffff, 0x0, 0x5, 0x0) read$auto(0x3, 0x0, 0x8080) madvise$auto(0xffffffff, 0x6d, 0x4) kernel console output (not intermixed with test programs): .888937][T12368] RIP: 0033:0x7f394f79ce59 [ 509.888957][T12368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 509.888981][T12368] RSP: 002b:00007f394d9f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 509.889004][T12368] RAX: ffffffffffffffda RBX: 00007f394fa16090 RCX: 00007f394f79ce59 [ 509.889020][T12368] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000005 [ 509.889034][T12368] RBP: 00007f394f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 509.889049][T12368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.889063][T12368] R13: 00007f394fa16128 R14: 00007f394fa16090 R15: 00007fff6b472d08 [ 509.889094][T12368] [ 512.297881][T12405] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 512.325649][T12405] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 512.366066][T12405] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.385105][T12427] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1275'. [ 513.660815][T12013] Bluetooth: hci1: command 0x0406 tx timeout [ 514.075057][T12437] netlink: 159 bytes leftover after parsing attributes in process `syz.1.1278'. [ 514.381191][T12013] Bluetooth: hci2: command 0x0406 tx timeout [ 514.389000][T12013] Bluetooth: hci3: command 0x0406 tx timeout [ 514.515746][T12448] FAULT_INJECTION: forcing a failure. [ 514.515746][T12448] name failslab, interval 1, probability 0, space 0, times 0 [ 514.609178][T12448] CPU: 0 UID: 0 PID: 12448 Comm: syz.0.1279 Tainted: G U L syzkaller #0 PREEMPT(full) [ 514.609220][T12448] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 514.609229][T12448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 514.609244][T12448] Call Trace: [ 514.609253][T12448] [ 514.609262][T12448] dump_stack_lvl+0x100/0x190 [ 514.609299][T12448] should_fail_ex.cold+0x5/0xa [ 514.609330][T12448] should_failslab+0xc2/0x120 [ 514.609360][T12448] __kmalloc_cache_noprof+0x7a/0x6f0 [ 514.609396][T12448] ? vidtv_psi_nit_table_init+0x5b/0x5f0 [ 514.609436][T12448] vidtv_psi_nit_table_init+0x5b/0x5f0 [ 514.609470][T12448] ? kasan_save_track+0x14/0x30 [ 514.609497][T12448] vidtv_channel_si_init+0xccf/0x18f0 [ 514.609543][T12448] vidtv_mux_init+0x526/0xbf0 [ 514.609584][T12448] vidtv_start_feed+0x34e/0x500 [ 514.609612][T12448] ? __pfx_vidtv_start_feed+0x10/0x10 [ 514.609643][T12448] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 514.609686][T12448] dmx_section_feed_start_filtering+0x3a8/0x660 [ 514.609728][T12448] dvb_dmxdev_filter_start+0x767/0xdd0 [ 514.609764][T12448] dvb_demux_do_ioctl+0xe64/0x1200 [ 514.609799][T12448] dvb_usercopy+0x167/0x340 [ 514.609837][T12448] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 514.609865][T12448] ? __pfx_dvb_usercopy+0x10/0x10 [ 514.609915][T12448] ? __fget_files+0x21f/0x3d0 [ 514.609950][T12448] dvb_demux_ioctl+0x29/0x40 [ 514.609972][T12448] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 514.609995][T12448] __x64_sys_ioctl+0x18e/0x210 [ 514.610022][T12448] do_syscall_64+0x115/0x840 [ 514.610056][T12448] ? clear_bhb_loop+0x40/0x90 [ 514.610086][T12448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.610111][T12448] RIP: 0033:0x7f394f79ce59 [ 514.610130][T12448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.610153][T12448] RSP: 002b:00007f394d9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 514.610176][T12448] RAX: ffffffffffffffda RBX: 00007f394fa16180 RCX: 00007f394f79ce59 [ 514.610192][T12448] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 000000000000000b [ 514.610207][T12448] RBP: 00007f394f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 514.610221][T12448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.610250][T12448] R13: 00007f394fa16218 R14: 00007f394fa16180 R15: 00007fff6b472d08 [ 514.610286][T12448] [ 515.410550][T12437] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1278: iget: checksum invalid [ 515.424524][T12437] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 515.469216][T12437] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1278: iget: checksum invalid [ 515.556312][T12437] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 515.602993][T12437] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1278: iget: checksum invalid [ 515.643921][T12437] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 515.676499][T12437] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1278: iget: checksum invalid [ 515.720127][T12437] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 515.749758][T12437] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 515.786005][T12437] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 517.798944][T12453] ubi0: attaching mtd0 [ 517.854148][T12453] ubi0: scanning is finished [ 517.898019][T12453] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 518.055449][T12481] random: crng reseeded on system resumption [ 518.265342][T12453] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 519.870102][T12515] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1292'. [ 520.166641][T12518] ima: Unable to open file: /surit‹¯Ròy/integrity?iqa/policy (-2) [ 520.700811][T12518] ima: policy update failed [ 520.761041][ T30] audit: type=1802 audit(1780333561.952:17): pid=12518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1293" res=0 errno=0 [ 521.496507][T12523] tc_dump_action: action bad kind [ 522.632223][T12535] ubi0: attaching mtd0 [ 522.653425][T12535] ubi0: scanning is finished [ 522.678016][T12535] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 522.933660][T12535] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 523.480898][T12562] Process accounting paused [ 527.428563][T12586] Process accounting paused [ 529.327582][T12635] vhci_hcd: not connected 4 [ 529.505698][T12644] HSR: entered promiscuous mode [ 532.296017][T12680] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 533.647937][T12691] Process accounting resumed [ 535.063058][T12722] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1334'. [ 536.088148][T12741] FAULT_INJECTION: forcing a failure. [ 536.088148][T12741] name failslab, interval 1, probability 0, space 0, times 0 [ 536.153513][T12741] CPU: 0 UID: 0 PID: 12741 Comm: syz.2.1339 Tainted: G U L syzkaller #0 PREEMPT(full) [ 536.153554][T12741] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 536.153563][T12741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.153578][T12741] Call Trace: [ 536.153594][T12741] [ 536.153603][T12741] dump_stack_lvl+0x100/0x190 [ 536.153632][T12741] should_fail_ex.cold+0x5/0xa [ 536.153663][T12741] should_failslab+0xc2/0x120 [ 536.153695][T12741] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 536.153721][T12741] ? snd_pcm_hw_rule_add+0x3b3/0x510 [ 536.153752][T12741] ? krealloc_node_align_noprof+0x27e/0x3e0 [ 536.153777][T12741] ? kfree+0x1dd/0x6c0 [ 536.153814][T12741] krealloc_node_align_noprof+0x1f9/0x3e0 [ 536.153844][T12741] snd_pcm_hw_rule_add+0x3b3/0x510 [ 536.153877][T12741] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 536.153910][T12741] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 536.153940][T12741] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 536.153973][T12741] ? mutex_init_lockdep+0xf1/0x120 [ 536.153999][T12741] ? snd_pcm_attach_substream+0x287/0xd20 [ 536.154030][T12741] snd_pcm_open_substream+0x942/0x1850 [ 536.154074][T12741] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 536.154116][T12741] ? rcu_is_watching+0x12/0xc0 [ 536.154150][T12741] snd_pcm_open+0x2a3/0x710 [ 536.154176][T12741] ? __pfx_snd_pcm_open+0x10/0x10 [ 536.154219][T12741] ? __pfx_default_wake_function+0x10/0x10 [ 536.154263][T12741] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 536.154287][T12741] snd_pcm_playback_open+0x86/0xe0 [ 536.154311][T12741] snd_open+0x201/0x450 [ 536.154343][T12741] ? __pfx_snd_open+0x10/0x10 [ 536.154374][T12741] chrdev_open+0x234/0x6a0 [ 536.154405][T12741] ? __pfx_apparmor_file_open+0x10/0x10 [ 536.154432][T12741] ? __pfx_chrdev_open+0x10/0x10 [ 536.154464][T12741] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 536.154504][T12741] do_dentry_open+0x6ab/0x14d0 [ 536.154533][T12741] ? __pfx_chrdev_open+0x10/0x10 [ 536.154570][T12741] vfs_open+0x82/0x3f0 [ 536.154616][T12741] path_openat+0x208c/0x31a0 [ 536.154658][T12741] ? __pfx_path_openat+0x10/0x10 [ 536.154700][T12741] do_file_open+0x20e/0x430 [ 536.154733][T12741] ? __pfx_do_file_open+0x10/0x10 [ 536.154785][T12741] ? alloc_fd+0x476/0x790 [ 536.154817][T12741] ? do_getname+0x191/0x390 [ 536.154856][T12741] do_sys_openat2+0x10d/0x1e0 [ 536.154894][T12741] ? __pfx_do_sys_openat2+0x10/0x10 [ 536.154935][T12741] ? __fget_files+0x21f/0x3d0 [ 536.154969][T12741] __x64_sys_openat+0x12d/0x210 [ 536.155008][T12741] ? __pfx___x64_sys_openat+0x10/0x10 [ 536.155052][T12741] ? rcu_is_watching+0x12/0xc0 [ 536.155084][T12741] do_syscall_64+0x115/0x840 [ 536.155118][T12741] ? clear_bhb_loop+0x40/0x90 [ 536.155148][T12741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.155173][T12741] RIP: 0033:0x7fa5d499ce59 [ 536.155192][T12741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 536.155216][T12741] RSP: 002b:00007fa5d590c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 536.155239][T12741] RAX: ffffffffffffffda RBX: 00007fa5d4c15fa0 RCX: 00007fa5d499ce59 [ 536.155255][T12741] RDX: 0000000000002100 RSI: 0000200000004ec0 RDI: ffffffffffffff9c [ 536.155270][T12741] RBP: 00007fa5d4a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 536.155285][T12741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.155299][T12741] R13: 00007fa5d4c16038 R14: 00007fa5d4c15fa0 R15: 00007ffc75fc3bc8 [ 536.155330][T12741] [ 538.591769][T12770] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1344'. [ 541.474381][T12826] FAULT_INJECTION: forcing a failure. [ 541.474381][T12826] name failslab, interval 1, probability 0, space 0, times 0 [ 541.579152][T12826] CPU: 0 UID: 0 PID: 12826 Comm: syz.3.1358 Tainted: G U L syzkaller #0 PREEMPT(full) [ 541.579193][T12826] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 541.579202][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 541.579216][T12826] Call Trace: [ 541.579223][T12826] [ 541.579232][T12826] dump_stack_lvl+0x100/0x190 [ 541.579261][T12826] should_fail_ex.cold+0x5/0xa [ 541.579292][T12826] should_failslab+0xc2/0x120 [ 541.579321][T12826] __kmalloc_cache_noprof+0x7a/0x6f0 [ 541.579357][T12826] ? snd_timer_instance_new+0x47/0x350 [ 541.579398][T12826] snd_timer_instance_new+0x47/0x350 [ 541.579434][T12826] snd_seq_timer_open+0x1d4/0x5d0 [ 541.579462][T12826] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 541.579490][T12826] ? find_held_lock+0x2b/0x80 [ 541.579525][T12826] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 541.579558][T12826] ? lockdep_hardirqs_on+0x78/0x100 [ 541.579592][T12826] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 541.579627][T12826] queue_use+0xdc/0x1f0 [ 541.579674][T12826] snd_seq_queue_alloc+0x2e5/0x540 [ 541.579716][T12826] snd_seq_ioctl_create_queue+0xa9/0x370 [ 541.579746][T12826] call_seq_client_ctl+0xa3/0x130 [ 541.579777][T12826] snd_seq_kernel_client_ctl+0x77/0xd0 [ 541.579809][T12826] alloc_seq_queue+0xdb/0x180 [ 541.579840][T12826] ? __pfx_alloc_seq_queue+0x10/0x10 [ 541.579895][T12826] ? find_held_lock+0x2b/0x80 [ 541.579926][T12826] ? mark_held_locks+0x40/0x70 [ 541.579966][T12826] snd_seq_oss_open+0x2b2/0xa10 [ 541.580002][T12826] odev_open+0x6f/0x90 [ 541.580027][T12826] ? __pfx_odev_open+0x10/0x10 [ 541.580054][T12826] soundcore_open+0x2e3/0x5a0 [ 541.580085][T12826] ? __pfx_soundcore_open+0x10/0x10 [ 541.580114][T12826] chrdev_open+0x234/0x6a0 [ 541.580143][T12826] ? __pfx_apparmor_file_open+0x10/0x10 [ 541.580169][T12826] ? __pfx_chrdev_open+0x10/0x10 [ 541.580200][T12826] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 541.580238][T12826] do_dentry_open+0x6ab/0x14d0 [ 541.580308][T12826] ? __pfx_chrdev_open+0x10/0x10 [ 541.580349][T12826] vfs_open+0x82/0x3f0 [ 541.580387][T12826] path_openat+0x208c/0x31a0 [ 541.580426][T12826] ? __pfx_path_openat+0x10/0x10 [ 541.580466][T12826] do_file_open+0x20e/0x430 [ 541.580498][T12826] ? __pfx_do_file_open+0x10/0x10 [ 541.580548][T12826] ? alloc_fd+0x476/0x790 [ 541.580579][T12826] ? do_getname+0x191/0x390 [ 541.580616][T12826] do_sys_openat2+0x10d/0x1e0 [ 541.580658][T12826] ? __pfx_do_sys_openat2+0x10/0x10 [ 541.580705][T12826] __x64_sys_openat+0x12d/0x210 [ 541.580743][T12826] ? __pfx___x64_sys_openat+0x10/0x10 [ 541.580779][T12826] ? exit_to_user_mode_loop+0xf3/0x670 [ 541.580823][T12826] ? rcu_is_watching+0x12/0xc0 [ 541.580853][T12826] do_syscall_64+0x115/0x840 [ 541.580885][T12826] ? clear_bhb_loop+0x40/0x90 [ 541.580913][T12826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.580938][T12826] RIP: 0033:0x7f3768f9ce59 [ 541.580957][T12826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.580980][T12826] RSP: 002b:00007f3769d73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 541.581002][T12826] RAX: ffffffffffffffda RBX: 00007f3769216090 RCX: 00007f3768f9ce59 [ 541.581017][T12826] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 541.581032][T12826] RBP: 00007f3769032d6f R08: 0000000000000000 R09: 0000000000000000 [ 541.581046][T12826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.581060][T12826] R13: 00007f3769216128 R14: 00007f3769216090 R15: 00007ffda3425188 [ 541.581090][T12826] [ 545.059385][T12851] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1362'. [ 547.462158][ T30] audit: type=1800 audit(1780333588.639:18): pid=12886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1369" name="file0" dev="tmpfs" ino=1569 res=0 errno=0 [ 548.585285][T12897] FAULT_INJECTION: forcing a failure. [ 548.585285][T12897] name failslab, interval 1, probability 0, space 0, times 0 [ 548.757022][T12897] CPU: 0 UID: 0 PID: 12897 Comm: syz.0.1371 Tainted: G U L syzkaller #0 PREEMPT(full) [ 548.757061][T12897] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 548.757070][T12897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 548.757083][T12897] Call Trace: [ 548.757091][T12897] [ 548.757099][T12897] dump_stack_lvl+0x100/0x190 [ 548.757133][T12897] should_fail_ex.cold+0x5/0xa [ 548.757163][T12897] ? mempool_init_node+0x2f7/0x6e0 [ 548.757190][T12897] should_failslab+0xc2/0x120 [ 548.757219][T12897] __kmalloc_noprof+0xe0/0x850 [ 548.757241][T12897] ? mempool_init_noprof+0x3a/0x50 [ 548.757269][T12897] ? __pfx_mempool_kmalloc+0x10/0x10 [ 548.757296][T12897] mempool_init_node+0x2f7/0x6e0 [ 548.757329][T12897] ? __pfx_mempool_kmalloc+0x10/0x10 [ 548.757354][T12897] ? __pfx_mempool_kfree+0x10/0x10 [ 548.757379][T12897] mempool_init_noprof+0x3a/0x50 [ 548.757409][T12897] do_fanotify_mark+0x2a98/0x3e70 [ 548.757448][T12897] ? __pfx_do_fanotify_mark+0x10/0x10 [ 548.757477][T12897] ? __x64_sys_futex+0x358/0x4d0 [ 548.757505][T12897] ? xfd_validate_state+0x129/0x190 [ 548.757535][T12897] __x64_sys_fanotify_mark+0xbd/0x160 [ 548.757562][T12897] ? do_syscall_64+0x90/0x840 [ 548.757595][T12897] ? lockdep_hardirqs_on+0x78/0x100 [ 548.757631][T12897] do_syscall_64+0x115/0x840 [ 548.757663][T12897] ? clear_bhb_loop+0x40/0x90 [ 548.757691][T12897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.757715][T12897] RIP: 0033:0x7f394f79ce59 [ 548.757734][T12897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.757757][T12897] RSP: 002b:00007f395058e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012d [ 548.757778][T12897] RAX: ffffffffffffffda RBX: 00007f394fa15fa0 RCX: 00007f394f79ce59 [ 548.757794][T12897] RDX: 0000000000008009 RSI: 0000000000000105 RDI: 0000000000000000 [ 548.757808][T12897] RBP: 00007f394f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 548.757822][T12897] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 548.757836][T12897] R13: 00007f394fa16038 R14: 00007f394fa15fa0 R15: 00007fff6b472d08 [ 548.757866][T12897] [ 549.372189][T12900] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1372'. [ 549.767764][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1371'. [ 550.630048][T12927] i2c i2c-0: new_device: Invalid device name [ 550.785934][T12927] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1380: iget: checksum invalid [ 550.813301][T12927] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 550.854850][T12927] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1380: iget: checksum invalid [ 550.890896][T12927] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 550.932423][T12927] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1380: iget: checksum invalid [ 550.973666][T12927] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 551.005294][T12927] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1380: iget: checksum invalid [ 551.042703][T12927] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 551.069085][T12927] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 551.105246][T12927] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 551.509741][T12933] FAULT_INJECTION: forcing a failure. [ 551.509741][T12933] name failslab, interval 1, probability 0, space 0, times 0 [ 551.562274][T12933] CPU: 0 UID: 0 PID: 12933 Comm: syz.0.1389 Tainted: G U L syzkaller #0 PREEMPT(full) [ 551.562314][T12933] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 551.562323][T12933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 551.562337][T12933] Call Trace: [ 551.562344][T12933] [ 551.562352][T12933] dump_stack_lvl+0x100/0x190 [ 551.562380][T12933] should_fail_ex.cold+0x5/0xa [ 551.562410][T12933] ? tomoyo_encode2+0xfb/0x3c0 [ 551.562443][T12933] should_failslab+0xc2/0x120 [ 551.562471][T12933] __kmalloc_noprof+0xe0/0x850 [ 551.562492][T12933] ? d_absolute_path+0x136/0x1b0 [ 551.562518][T12933] tomoyo_encode2+0xfb/0x3c0 [ 551.562556][T12933] tomoyo_encode+0x29/0x50 [ 551.562588][T12933] tomoyo_realpath_from_path+0x18c/0x690 [ 551.562629][T12933] tomoyo_path_number_perm+0x23c/0x580 [ 551.562657][T12933] ? tomoyo_path_number_perm+0x22e/0x580 [ 551.562688][T12933] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 551.562717][T12933] ? futex_wait+0x11e/0x370 [ 551.562772][T12933] ? find_held_lock+0x2b/0x80 [ 551.562801][T12933] ? __fget_files+0x215/0x3d0 [ 551.562826][T12933] ? hook_file_ioctl_common+0x149/0x410 [ 551.562855][T12933] ? __fget_files+0x215/0x3d0 [ 551.562886][T12933] ? __fget_files+0x21f/0x3d0 [ 551.562918][T12933] security_file_ioctl+0xd3/0x230 [ 551.562955][T12933] __x64_sys_ioctl+0xb7/0x210 [ 551.562980][T12933] do_syscall_64+0x115/0x840 [ 551.563013][T12933] ? clear_bhb_loop+0x40/0x90 [ 551.563042][T12933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.563066][T12933] RIP: 0033:0x7f394f79ce59 [ 551.563084][T12933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.563108][T12933] RSP: 002b:00007f395058e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 551.563130][T12933] RAX: ffffffffffffffda RBX: 00007f394fa15fa0 RCX: 00007f394f79ce59 [ 551.563145][T12933] RDX: 0000000000000000 RSI: 0000000040047440 RDI: 0000000000000008 [ 551.563160][T12933] RBP: 00007f394f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 551.563173][T12933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.563187][T12933] R13: 00007f394fa16038 R14: 00007f394fa15fa0 R15: 00007fff6b472d08 [ 551.563216][T12933] [ 551.563235][T12933] ERROR: Out of memory at tomoyo_realpath_from_path. [ 551.893292][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1382'. [ 553.463632][T12968] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1386'. [ 554.333707][T12993] IPVS: length: 537396514 != 24 [ 554.836883][T12972] Process accounting resumed [ 555.425186][T13012] netlink: 4394 bytes leftover after parsing attributes in process `syz.0.1407'. [ 556.414183][T13036] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 557.982548][T13059] Process accounting resumed [ 559.308633][T13070] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 560.318292][T13083] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 561.434782][T13099] zswap: compressor not available [ 561.916216][T13112] vivid-007: ================= START STATUS ================= [ 561.986420][T13112] vivid-007: Enable Output Cropping: true grabbed [ 562.070573][T13112] vivid-007: Enable Output Composing: true grabbed [ 562.154488][T13112] vivid-007: Enable Output Scaler: true grabbed [ 562.229294][T13112] vivid-007: Tx RGB Quantization Range: Automatic grabbed [ 562.340670][T13112] vivid-007: Transmit Mode: HDMI grabbed [ 562.375715][T13112] vivid-007: Hotplug Present: 0x00000000 [ 562.414183][T13112] vivid-007: RxSense Present: 0x00000000 [ 562.460463][T13112] vivid-007: EDID Present: 0x00000000 [ 562.503868][T13112] vivid-007: ================== END STATUS ================== [ 562.921562][T13126] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 563.133660][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.151548][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.736491][T13164] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 566.041725][T13145] Process accounting paused [ 567.115599][T13193] FAULT_INJECTION: forcing a failure. [ 567.115599][T13193] name failslab, interval 1, probability 0, space 0, times 0 [ 567.130002][T13193] CPU: 0 UID: 0 PID: 13193 Comm: syz.1.1436 Tainted: G U L syzkaller #0 PREEMPT(full) [ 567.130045][T13193] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 567.130054][T13193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 567.130069][T13193] Call Trace: [ 567.130077][T13193] [ 567.130087][T13193] dump_stack_lvl+0x100/0x190 [ 567.130115][T13193] should_fail_ex.cold+0x5/0xa [ 567.130146][T13193] should_failslab+0xc2/0x120 [ 567.130176][T13193] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 567.130216][T13193] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 567.130252][T13193] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 567.130286][T13193] idr_get_free+0x52e/0xa00 [ 567.130327][T13193] idr_alloc_u32+0x1ac/0x320 [ 567.130364][T13193] ? __pfx_idr_alloc_u32+0x10/0x10 [ 567.130408][T13193] idr_alloc+0xc0/0x130 [ 567.130441][T13193] ? __pfx_idr_alloc+0x10/0x10 [ 567.130473][T13193] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 567.130508][T13193] tipc_conn_alloc+0x337/0x590 [ 567.130541][T13193] tipc_topsrv_kern_subscr+0x11c/0x3c0 [ 567.130576][T13193] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 567.130613][T13193] ? net_generic+0xea/0x2a0 [ 567.130651][T13193] tipc_group_create+0x4ab/0x660 [ 567.130689][T13193] tipc_setsockopt+0x611/0xe30 [ 567.130715][T13193] ? __pfx_tipc_setsockopt+0x10/0x10 [ 567.130750][T13193] ? __pfx_tipc_setsockopt+0x10/0x10 [ 567.130775][T13193] do_sock_setsockopt+0xf3/0x1d0 [ 567.130809][T13193] __sys_setsockopt+0x119/0x190 [ 567.130838][T13193] __x64_sys_setsockopt+0xbd/0x160 [ 567.130860][T13193] ? do_syscall_64+0x90/0x840 [ 567.130894][T13193] ? lockdep_hardirqs_on+0x78/0x100 [ 567.130929][T13193] do_syscall_64+0x115/0x840 [ 567.130969][T13193] ? clear_bhb_loop+0x40/0x90 [ 567.130999][T13193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.131024][T13193] RIP: 0033:0x7f7dbb19ce59 [ 567.131045][T13193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.131069][T13193] RSP: 002b:00007f7dbc063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 567.131092][T13193] RAX: ffffffffffffffda RBX: 00007f7dbb416090 RCX: 00007f7dbb19ce59 [ 567.131108][T13193] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 567.131122][T13193] RBP: 00007f7dbb232d6f R08: 0000000000000014 R09: 0000000000000000 [ 567.131137][T13193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 567.131151][T13193] R13: 00007f7dbb416128 R14: 00007f7dbb416090 R15: 00007fffe24d78a8 [ 567.131182][T13193] [ 567.880479][T12445] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 567.888420][T12445] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 569.896833][T11470] Process accounting resumed [ 570.803273][T13217] Process accounting resumed [ 571.603560][T13251] FAULT_INJECTION: forcing a failure. [ 571.603560][T13251] name failslab, interval 1, probability 0, space 0, times 0 [ 571.717740][T13251] CPU: 0 UID: 0 PID: 13251 Comm: syz.0.1447 Tainted: G U L syzkaller #0 PREEMPT(full) [ 571.717782][T13251] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 571.717792][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 571.717806][T13251] Call Trace: [ 571.717814][T13251] [ 571.717824][T13251] dump_stack_lvl+0x100/0x190 [ 571.717853][T13251] should_fail_ex.cold+0x5/0xa [ 571.717883][T13251] ? tomoyo_realpath_from_path+0xb6/0x690 [ 571.717920][T13251] should_failslab+0xc2/0x120 [ 571.717948][T13251] __kmalloc_noprof+0xe0/0x850 [ 571.717970][T13251] ? kfree+0x1dd/0x6c0 [ 571.718008][T13251] tomoyo_realpath_from_path+0xb6/0x690 [ 571.718051][T13251] tomoyo_path_number_perm+0x23c/0x580 [ 571.718080][T13251] ? tomoyo_path_number_perm+0x22e/0x580 [ 571.718112][T13251] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 571.718141][T13251] ? futex_wait+0x11e/0x370 [ 571.718201][T13251] ? find_held_lock+0x2b/0x80 [ 571.718230][T13251] ? __fget_files+0x215/0x3d0 [ 571.718258][T13251] ? hook_file_ioctl_common+0x149/0x410 [ 571.718287][T13251] ? __fget_files+0x215/0x3d0 [ 571.718320][T13251] ? __fget_files+0x21f/0x3d0 [ 571.718354][T13251] security_file_ioctl+0xd3/0x230 [ 571.718384][T13251] __x64_sys_ioctl+0xb7/0x210 [ 571.718411][T13251] do_syscall_64+0x115/0x840 [ 571.718445][T13251] ? clear_bhb_loop+0x40/0x90 [ 571.718474][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.718499][T13251] RIP: 0033:0x7f394f79ce59 [ 571.718519][T13251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.718542][T13251] RSP: 002b:00007f394d9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 571.718565][T13251] RAX: ffffffffffffffda RBX: 00007f394fa16180 RCX: 00007f394f79ce59 [ 571.718581][T13251] RDX: 8000000000000000 RSI: 000000004030582a RDI: 0000000000000004 [ 571.718596][T13251] RBP: 00007f394f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 571.718611][T13251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.718624][T13251] R13: 00007f394fa16218 R14: 00007f394fa16180 R15: 00007fff6b472d08 [ 571.718662][T13251] [ 571.718697][T13251] ERROR: Out of memory at tomoyo_realpath_from_path. [ 573.696454][T13270] netlink: 158 bytes leftover after parsing attributes in process `syz.0.1451'. [ 573.736463][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1451'. [ 574.393050][T12002] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 574.401295][T12002] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 575.629344][T13300] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1455'. [ 576.912050][T13309] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1457'. [ 577.270432][T13304] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 577.408817][T13286] Process accounting resumed [ 577.629981][T13318] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 577.887349][T13322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1459'. [ 578.897670][T13332] WARNING! power/level is deprecated; use power/control instead [ 580.882244][T13367] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 581.089657][T13363] FAULT_INJECTION: forcing a failure. [ 581.089657][T13363] name fail_futex, interval 1, probability 0, space 0, times 0 [ 581.146191][T13363] CPU: 0 UID: 0 PID: 13363 Comm: syz.0.1467 Tainted: G U L syzkaller #0 PREEMPT(full) [ 581.146230][T13363] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 581.146238][T13363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 581.146252][T13363] Call Trace: [ 581.146260][T13363] [ 581.146268][T13363] dump_stack_lvl+0x100/0x190 [ 581.146296][T13363] should_fail_ex.cold+0x5/0xa [ 581.146326][T13363] get_futex_key+0x1d2/0x1510 [ 581.146367][T13363] ? __pfx_get_futex_key+0x10/0x10 [ 581.146403][T13363] ? futex_hash+0x2ad/0x370 [ 581.146441][T13363] ? futex_hash+0x141/0x370 [ 581.146482][T13363] futex_wake+0xea/0x530 [ 581.146513][T13363] ? __pfx_futex_wake+0x10/0x10 [ 581.146545][T13363] ? find_held_lock+0x2b/0x80 [ 581.146573][T13363] ? do_sys_openat2+0x1b4/0x1e0 [ 581.146615][T13363] do_futex+0x32b/0x350 [ 581.146640][T13363] ? __pfx_do_futex+0x10/0x10 [ 581.146670][T13363] __x64_sys_futex+0x34f/0x4d0 [ 581.146697][T13363] ? fdget_pos+0x2c0/0x380 [ 581.146726][T13363] ? __pfx___x64_sys_futex+0x10/0x10 [ 581.146750][T13363] ? ksys_write+0x1ac/0x250 [ 581.146776][T13363] ? __pfx_ksys_write+0x10/0x10 [ 581.146808][T13363] ? rcu_is_watching+0x12/0xc0 [ 581.146839][T13363] do_syscall_64+0x115/0x840 [ 581.146872][T13363] ? clear_bhb_loop+0x40/0x90 [ 581.146900][T13363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.146925][T13363] RIP: 0033:0x7f394f79ce59 [ 581.146943][T13363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.146966][T13363] RSP: 002b:00007f394d9d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 581.146988][T13363] RAX: ffffffffffffffda RBX: 00007f394fa16188 RCX: 00007f394f79ce59 [ 581.147004][T13363] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f394fa1618c [ 581.147018][T13363] RBP: 00007f394fa16180 R08: 0000000000000001 R09: 0000000000000000 [ 581.147032][T13363] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 581.147047][T13363] R13: 00007f394fa16218 R14: 00007fff6b472c20 R15: 00007fff6b472d08 [ 581.147075][T13363] [ 585.637401][T13384] Process accounting paused [ 586.055302][T12445] Bluetooth: hci1: unexpected event 0x3e length: 0 < 1 [ 586.156849][T13427] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1478'. [ 594.007318][T13560] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 596.639522][T13591] Process accounting resumed [ 597.739140][T13612] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 597.772660][T13621] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input15 [ 598.008235][T13612] File: /dev/nullb0 PID: 13612 Comm: syz.0.1511 [ 599.792837][T13653] binder: 13652:13653 ioctl 8 9 returned -22 [ 599.901574][ T30] audit: type=1804 audit(1780333641.052:19): pid=13653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1518" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=1077 res=1 errno=0 [ 600.666797][T13675] i2c i2c-0: new_device: Invalid device name [ 600.740764][T13676] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1523: iget: checksum invalid [ 600.792654][T13681] mtrr: base(0x2000000) is not aligned on a size(0x0000) boundary [ 600.833208][T13681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1524'. [ 600.874597][T13683] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1523'. [ 600.958879][T13676] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 600.978379][T13681] Process accounting paused [ 601.016434][T13676] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1523: iget: checksum invalid [ 601.071037][T13676] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 601.117002][T13676] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1523: iget: checksum invalid [ 601.177144][T13676] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 601.230709][T13676] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1523: iget: checksum invalid [ 601.307665][T13676] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 601.349772][T13676] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 601.394659][T13676] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 603.717738][T13726] i2c i2c-0: delete_device: Can't parse I2C address [ 606.153746][T13755] FAULT_INJECTION: forcing a failure. [ 606.153746][T13755] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 606.242078][T13755] CPU: 0 UID: 0 PID: 13755 Comm: syz.2.1539 Tainted: G U L syzkaller #0 PREEMPT(full) [ 606.242117][T13755] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 606.242126][T13755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.242140][T13755] Call Trace: [ 606.242147][T13755] [ 606.242156][T13755] dump_stack_lvl+0x100/0x190 [ 606.242184][T13755] should_fail_ex.cold+0x5/0xa [ 606.242209][T13755] ? prepare_alloc_pages+0x16d/0x5f0 [ 606.242242][T13755] should_fail_alloc_page+0xeb/0x140 [ 606.242273][T13755] prepare_alloc_pages+0x1f0/0x5f0 [ 606.242308][T13755] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 606.242349][T13755] ? rcu_is_watching+0x12/0xc0 [ 606.242377][T13755] ? trace_mm_page_alloc+0x163/0x1d0 [ 606.242407][T13755] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 606.242447][T13755] ? vhost_dev_set_owner+0x190/0xa30 [ 606.242472][T13755] ? stack_trace_save+0x8e/0xc0 [ 606.242520][T13755] ? __pfx_stack_trace_save+0x10/0x10 [ 606.242575][T13755] ? stack_depot_save_flags+0x27/0x9d0 [ 606.242614][T13755] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 606.242657][T13755] ? vhost_dev_set_owner+0x190/0xa30 [ 606.242679][T13755] ? kasan_save_stack+0x3f/0x50 [ 606.242701][T13755] ? kasan_save_stack+0x30/0x50 [ 606.242723][T13755] ? kasan_save_track+0x14/0x30 [ 606.242747][T13755] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 606.242786][T13755] ? vhost_net_ioctl+0xfa3/0x1910 [ 606.242809][T13755] ? __x64_sys_ioctl+0x18e/0x210 [ 606.242835][T13755] ? __lock_acquire+0x4a5/0x2630 [ 606.242876][T13755] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 606.242911][T13755] ? policy_nodemask+0xed/0x4f0 [ 606.242941][T13755] alloc_pages_mpol+0x1fb/0x540 [ 606.242970][T13755] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 606.243005][T13755] ? vhost_dev_set_owner+0x3b2/0xa30 [ 606.243027][T13755] ___kmalloc_large_node+0xe5/0x120 [ 606.243060][T13755] __kmalloc_large_node_noprof+0x1c/0x70 [ 606.243093][T13755] __kmalloc_noprof+0x5be/0x850 [ 606.243119][T13755] vhost_dev_set_owner+0x3b2/0xa30 [ 606.243153][T13755] vhost_net_ioctl+0xfa3/0x1910 [ 606.243176][T13755] ? do_vfs_ioctl+0x226/0x13e0 [ 606.243199][T13755] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 606.243224][T13755] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 606.243254][T13755] ? find_held_lock+0x2b/0x80 [ 606.243283][T13755] ? __fget_files+0x215/0x3d0 [ 606.243308][T13755] ? hook_file_ioctl_common+0x149/0x410 [ 606.243344][T13755] ? __fget_files+0x21f/0x3d0 [ 606.243375][T13755] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 606.243402][T13755] __x64_sys_ioctl+0x18e/0x210 [ 606.243427][T13755] do_syscall_64+0x115/0x840 [ 606.243460][T13755] ? clear_bhb_loop+0x40/0x90 [ 606.243489][T13755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.243513][T13755] RIP: 0033:0x7fa5d499ce59 [ 606.243536][T13755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.243560][T13755] RSP: 002b:00007fa5d590c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.243582][T13755] RAX: ffffffffffffffda RBX: 00007fa5d4c15fa0 RCX: 00007fa5d499ce59 [ 606.243616][T13755] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000006 [ 606.243631][T13755] RBP: 00007fa5d4a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 606.243646][T13755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.243660][T13755] R13: 00007fa5d4c16038 R14: 00007fa5d4c15fa0 R15: 00007ffc75fc3bc8 [ 606.243691][T13755] [ 609.271903][T13812] vivid-007: ================= START STATUS ================= [ 609.298776][T13812] vivid-007: Enable Output Cropping: true [ 609.322627][T13812] vivid-007: Enable Output Composing: true [ 609.369124][T13812] vivid-007: Enable Output Scaler: true [ 609.376138][T13814] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 609.410711][T13812] vivid-007: Tx RGB Quantization Range: Automatic [ 609.458605][T13812] vivid-007: Transmit Mode: HDMI [ 609.497208][T13812] vivid-007: Hotplug Present: 0x00000000 [ 609.539943][T13812] vivid-007: RxSense Present: 0x00000000 [ 609.582167][T13812] vivid-007: EDID Present: 0x00000000 [ 609.638556][T13812] vivid-007: ================== END STATUS ================== [ 612.106600][T13841] Process accounting paused [ 613.006004][T13863] netlink: 'syz.2.1563': attribute type 11 has an invalid length. [ 613.045529][T13862] netlink: 'syz.2.1563': attribute type 11 has an invalid length. [ 614.088505][T13880] netlink: 'syz.2.1565': attribute type 11 has an invalid length. [ 614.773438][T13896] blktrace: Concurrent blktraces are not allowed on sg0 [ 616.729837][T13894] Process accounting resumed [ 619.865410][T13969] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1581'. [ 619.951057][T13969] syz_tun: refused to change device tx_queue_len [ 620.147875][T13980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1582'. [ 620.715392][T13990] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1587'. [ 621.675235][T13981] Process accounting resumed [ 621.879466][ T30] audit: type=1804 audit(1780333663.021:20): pid=14012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1591" name="/newroot/sys/kernel/tracing/set_event_notrace_pid" dev="tracefs" ino=1077 res=1 errno=0 [ 623.896641][T14039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1598'. [ 624.603552][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.613816][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.541760][T14085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1604'. [ 626.717153][T14085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 626.778888][T14085] bond_slave_1: left promiscuous mode [ 626.810723][T14085] bond0 (unregistering): Released all slaves [ 627.322540][T12445] Bluetooth: hci1: unexpected event 0x30 length: 10 > 3 [ 627.344620][ T30] audit: type=1800 audit(1780333668.479:21): pid=14101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1606" name="dbroot" dev="configfs" ino=53378 res=0 errno=0 [ 627.403565][T14099] vhci_hcd vhci_hcd.2: default hub control req: 0301 v0005 i0006 l9 [ 627.497052][ T30] audit: type=1804 audit(1780333668.579:22): pid=14103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1606" name="/newroot/sys/kernel/debug/tracing/set_event" dev="tracefs" ino=1073 res=1 errno=0 [ 628.273038][T14052] Process accounting paused [ 630.018863][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1612'. [ 631.501888][T14143] kexec: Could not allocate control_code_buffer [ 631.985343][T14140] Process accounting resumed [ 633.247544][T14169] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1620'. [ 634.333685][T14206] random: crng reseeded on system resumption [ 637.625267][T14247] FAULT_INJECTION: forcing a failure. [ 637.625267][T14247] name failslab, interval 1, probability 0, space 0, times 0 [ 637.690990][T14247] CPU: 0 UID: 0 PID: 14247 Comm: syz.3.1635 Tainted: G U L syzkaller #0 PREEMPT(full) [ 637.691032][T14247] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 637.691041][T14247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 637.691059][T14247] Call Trace: [ 637.691066][T14247] [ 637.691075][T14247] dump_stack_lvl+0x100/0x190 [ 637.691104][T14247] should_fail_ex.cold+0x5/0xa [ 637.691136][T14247] should_failslab+0xc2/0x120 [ 637.691166][T14247] __kvmalloc_node_noprof+0xfa/0xa00 [ 637.691190][T14247] ? io_alloc_cache_init+0x38/0x170 [ 637.691219][T14247] ? lockdep_init_map_type+0x10/0x250 [ 637.691265][T14247] io_alloc_cache_init+0x38/0x170 [ 637.691296][T14247] io_uring_setup.cold+0x3eb/0x1c6e [ 637.691339][T14247] ? __pfx_io_uring_setup+0x10/0x10 [ 637.691380][T14247] ? do_futex+0x192/0x350 [ 637.691405][T14247] ? __pfx_do_futex+0x10/0x10 [ 637.691443][T14247] ? xfd_validate_state+0x129/0x190 [ 637.691466][T14247] ? ksys_write+0x1ac/0x250 [ 637.691502][T14247] __x64_sys_io_uring_setup+0xc2/0x170 [ 637.691573][T14247] do_syscall_64+0x115/0x840 [ 637.691608][T14247] ? clear_bhb_loop+0x40/0x90 [ 637.691638][T14247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.691662][T14247] RIP: 0033:0x7f3768f9ce59 [ 637.691682][T14247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.691706][T14247] RSP: 002b:00007f3769d94028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 637.691729][T14247] RAX: ffffffffffffffda RBX: 00007f3769215fa0 RCX: 00007f3768f9ce59 [ 637.691745][T14247] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000c [ 637.691759][T14247] RBP: 00007f3769032d6f R08: 0000000000000000 R09: 0000000000000000 [ 637.691774][T14247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.691795][T14247] R13: 00007f3769216038 R14: 00007f3769215fa0 R15: 00007ffda3425188 [ 637.691825][T14247] [ 638.623299][T14268] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1638'. [ 639.110655][T14278] __vm_enough_memory: pid: 14278, comm: syz.2.1640, bytes: 4398046457856 not enough memory for the allocation [ 642.318196][T14336] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 642.753785][T12445] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 643.776652][T14366] dyndbg: expected <4096 bytes into control [ 644.629807][T14385] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1661: iget: checksum invalid [ 644.631385][T14385] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 644.631539][T14385] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1661: iget: checksum invalid [ 644.634560][T14385] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 644.634715][T14385] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1661: iget: checksum invalid [ 644.656918][T14385] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 644.657085][T14385] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1661: iget: checksum invalid [ 644.657246][T14385] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 644.657290][T14385] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 644.657313][T14385] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 644.699341][T14387] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1661'. [ 644.849053][T12002] Bluetooth: hci1: command 0x0406 tx timeout [ 645.832348][T12445] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 645.832378][T12445] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 645.847567][T12445] Bluetooth: hci1: Dropping invalid advertising data [ 645.854703][T12445] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 645.854734][T12445] Bluetooth: hci1: Dropping invalid advertising data [ 645.869003][T12445] Bluetooth: hci1: Malformed LE Event: 0x02 [ 646.927046][T12445] Bluetooth: hci1: command 0x0406 tx timeout [ 647.588651][T14434] Process accounting paused [ 649.355408][T14469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1678'. [ 653.050131][T14512] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1686'. [ 654.057373][T14527] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 654.450643][T14533] FAULT_INJECTION: forcing a failure. [ 654.450643][T14533] name failslab, interval 1, probability 0, space 0, times 0 [ 654.509947][T14533] CPU: 1 UID: 0 PID: 14533 Comm: syz.1.1691 Tainted: G U L syzkaller #0 PREEMPT(full) [ 654.510003][T14533] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 654.510016][T14533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 654.510036][T14533] Call Trace: [ 654.510046][T14533] [ 654.510058][T14533] dump_stack_lvl+0x100/0x190 [ 654.510098][T14533] should_fail_ex.cold+0x5/0xa [ 654.510142][T14533] should_failslab+0xc2/0x120 [ 654.510183][T14533] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 654.510219][T14533] ? ip6_route_net_init+0x30f/0x8d0 [ 654.510266][T14533] kmemdup_noprof+0x29/0x60 [ 654.510302][T14533] ip6_route_net_init+0x30f/0x8d0 [ 654.510344][T14533] ? __pfx_ip6_route_net_init+0x10/0x10 [ 654.510383][T14533] ops_init+0x1e2/0x5f0 [ 654.510431][T14533] setup_net+0x118/0x3a0 [ 654.510469][T14533] ? __pfx_setup_net+0x10/0x10 [ 654.510505][T14533] ? mutex_init_lockdep+0xf1/0x120 [ 654.510553][T14533] copy_net_ns+0x46f/0x7c0 [ 654.510598][T14533] create_new_namespaces+0x3ea/0xac0 [ 654.510650][T14533] unshare_nsproxy_namespaces+0xf2/0x220 [ 654.510696][T14533] ksys_unshare+0x438/0xab0 [ 654.510745][T14533] ? __pfx_ksys_unshare+0x10/0x10 [ 654.510790][T14533] ? xfd_validate_state+0x129/0x190 [ 654.510821][T14533] ? exit_to_user_mode_loop+0xf3/0x670 [ 654.510899][T14533] __x64_sys_unshare+0x31/0x40 [ 654.510947][T14533] do_syscall_64+0x115/0x840 [ 654.510993][T14533] ? clear_bhb_loop+0x40/0x90 [ 654.511034][T14533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.511086][T14533] RIP: 0033:0x7f7dbb19ce59 [ 654.511113][T14533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.511146][T14533] RSP: 002b:00007f7dbc063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 654.511178][T14533] RAX: ffffffffffffffda RBX: 00007f7dbb416090 RCX: 00007f7dbb19ce59 [ 654.511199][T14533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 654.511219][T14533] RBP: 00007f7dbb232d6f R08: 0000000000000000 R09: 0000000000000000 [ 654.511239][T14533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.511258][T14533] R13: 00007f7dbb416128 R14: 00007f7dbb416090 R15: 00007fffe24d78a8 [ 654.511302][T14533] [ 655.145753][T14541] ecryptfs_miscdev_write: Error while inspecting packet size [ 657.785422][T14561] ubi0: attaching mtd0 [ 657.811784][T14561] ubi0: scanning is finished [ 657.832864][T14561] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 658.156009][T14561] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 658.290898][T12002] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 658.716398][T14566] Process accounting resumed [ 659.699576][T14584] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1698'. [ 662.567473][T14614] Process accounting paused [ 663.415705][T14618] kexec: Could not allocate control_code_buffer [ 663.673468][T14632] zram: Removed device: zram0 [ 665.350233][T14655] FAULT_INJECTION: forcing a failure. [ 665.350233][T14655] name failslab, interval 1, probability 0, space 0, times 0 [ 665.432919][T14655] CPU: 1 UID: 0 PID: 14655 Comm: syz.3.1713 Tainted: G U L syzkaller #0 PREEMPT(full) [ 665.432976][T14655] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 665.432989][T14655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 665.433007][T14655] Call Trace: [ 665.433016][T14655] [ 665.433029][T14655] dump_stack_lvl+0x100/0x190 [ 665.433076][T14655] should_fail_ex.cold+0x5/0xa [ 665.433124][T14655] should_failslab+0xc2/0x120 [ 665.433183][T14655] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 665.433256][T14655] ? security_file_alloc+0x34/0x2c0 [ 665.433303][T14655] ? trace_kmem_cache_alloc+0xd5/0x100 [ 665.433359][T14655] security_file_alloc+0x34/0x2c0 [ 665.433407][T14655] init_file+0x95/0x480 [ 665.433462][T14655] alloc_empty_file+0x79/0x1c0 [ 665.433515][T14655] path_openat+0xe8/0x31a0 [ 665.433560][T14655] ? kasan_save_stack+0x3f/0x50 [ 665.433592][T14655] ? kasan_save_stack+0x30/0x50 [ 665.433626][T14655] ? kasan_save_track+0x14/0x30 [ 665.433660][T14655] ? __kasan_slab_alloc+0x89/0x90 [ 665.433694][T14655] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 665.433754][T14655] ? do_getname+0x35/0x390 [ 665.433801][T14655] ? do_sys_openat2+0xc5/0x1e0 [ 665.433859][T14655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.433900][T14655] ? __pfx_path_openat+0x10/0x10 [ 665.433974][T14655] do_file_open+0x20e/0x430 [ 665.434020][T14655] ? __pfx_do_file_open+0x10/0x10 [ 665.434096][T14655] ? alloc_fd+0x476/0x790 [ 665.434139][T14655] ? do_getname+0x191/0x390 [ 665.434196][T14655] do_sys_openat2+0x10d/0x1e0 [ 665.434257][T14655] ? __pfx_do_sys_openat2+0x10/0x10 [ 665.434326][T14655] __x64_sys_openat+0x12d/0x210 [ 665.434386][T14655] ? __pfx___x64_sys_openat+0x10/0x10 [ 665.434453][T14655] ? rcu_is_watching+0x12/0xc0 [ 665.434496][T14655] do_syscall_64+0x115/0x840 [ 665.434569][T14655] ? clear_bhb_loop+0x40/0x90 [ 665.434623][T14655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 665.434657][T14655] RIP: 0033:0x7f3768f9ce59 [ 665.434689][T14655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 665.434720][T14655] RSP: 002b:00007f3769d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 665.434752][T14655] RAX: ffffffffffffffda RBX: 00007f3769215fa0 RCX: 00007f3768f9ce59 [ 665.434783][T14655] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 665.434820][T14655] RBP: 00007f3769032d6f R08: 0000000000000000 R09: 0000000000000000 [ 665.434840][T14655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 665.434859][T14655] R13: 00007f3769216038 R14: 00007f3769215fa0 R15: 00007ffda3425188 [ 665.434913][T14655] [ 665.715264][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1715'. [ 666.215423][T14665] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1714'. [ 666.278594][T14665] tc_dump_action: action bad kind [ 670.690828][T14742] FAULT_INJECTION: forcing a failure. [ 670.690828][T14742] name failslab, interval 1, probability 0, space 0, times 0 [ 670.707751][T14742] CPU: 1 UID: 0 PID: 14742 Comm: syz.0.1730 Tainted: G U L syzkaller #0 PREEMPT(full) [ 670.707809][T14742] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 670.707821][T14742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 670.707841][T14742] Call Trace: [ 670.707852][T14742] [ 670.707864][T14742] dump_stack_lvl+0x100/0x190 [ 670.707900][T14742] should_fail_ex.cold+0x5/0xa [ 670.707944][T14742] ? tomoyo_realpath_from_path+0xb6/0x690 [ 670.707988][T14742] should_failslab+0xc2/0x120 [ 670.708024][T14742] __kmalloc_noprof+0xe0/0x850 [ 670.708049][T14742] ? kfree+0x1dd/0x6c0 [ 670.708092][T14742] tomoyo_realpath_from_path+0xb6/0x690 [ 670.708141][T14742] tomoyo_check_open_permission+0x2af/0x3c0 [ 670.708177][T14742] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 670.708225][T14742] ? hook_file_open+0x24e/0x7a0 [ 670.708281][T14742] ? path_get+0x61/0x80 [ 670.708326][T14742] tomoyo_file_open+0x6b/0x90 [ 670.708353][T14742] security_file_open+0xb5/0x1e0 [ 670.708391][T14742] do_dentry_open+0x588/0x14d0 [ 670.708435][T14742] vfs_open+0x82/0x3f0 [ 670.708479][T14742] path_openat+0x208c/0x31a0 [ 670.708525][T14742] ? __pfx_path_openat+0x10/0x10 [ 670.708571][T14742] do_file_open+0x20e/0x430 [ 670.708609][T14742] ? __pfx_do_file_open+0x10/0x10 [ 670.708666][T14742] ? alloc_fd+0x476/0x790 [ 670.708703][T14742] ? do_getname+0x191/0x390 [ 670.708747][T14742] do_sys_openat2+0x10d/0x1e0 [ 670.708790][T14742] ? __pfx_do_sys_openat2+0x10/0x10 [ 670.708845][T14742] __x64_sys_openat+0x12d/0x210 [ 670.708897][T14742] ? __pfx___x64_sys_openat+0x10/0x10 [ 670.708944][T14742] ? exit_to_user_mode_loop+0xf3/0x670 [ 670.708999][T14742] ? rcu_is_watching+0x12/0xc0 [ 670.709036][T14742] do_syscall_64+0x115/0x840 [ 670.709074][T14742] ? clear_bhb_loop+0x40/0x90 [ 670.709108][T14742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.709137][T14742] RIP: 0033:0x7f394f79ce59 [ 670.709159][T14742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.709187][T14742] RSP: 002b:00007f395058e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 670.709213][T14742] RAX: ffffffffffffffda RBX: 00007f394fa15fa0 RCX: 00007f394f79ce59 [ 670.709232][T14742] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 670.709250][T14742] RBP: 00007f394f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 670.709267][T14742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 670.709284][T14742] R13: 00007f394fa16038 R14: 00007f394fa15fa0 R15: 00007fff6b472d08 [ 670.709323][T14742] [ 670.711821][T14742] ERROR: Out of memory at tomoyo_realpath_from_path. [ 671.034562][T12002] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 671.607805][T14751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1732'. [ 672.485430][T14762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1733'. [ 672.514017][T14762] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1733: iget: checksum invalid [ 672.529546][T14762] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 672.565764][T14762] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1733: iget: checksum invalid [ 672.601547][T14762] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 672.632649][T14762] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1733: iget: checksum invalid [ 672.659266][T14762] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 672.690095][T14762] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1733: iget: checksum invalid [ 672.739755][T14762] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 672.792702][T14762] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 672.815088][T14762] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 675.967365][T14820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 676.380559][T14803] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 676.407388][T14803] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 677.304852][T14835] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1747'. [ 677.438936][T14835] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1747: iget: checksum invalid [ 677.566205][T14835] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 677.729223][T14835] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1747: iget: checksum invalid [ 677.886043][T14807] Process accounting resumed [ 677.894743][T14835] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 677.922060][T14835] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1747: iget: checksum invalid [ 678.081607][T14835] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 678.161201][T14835] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1747: iget: checksum invalid [ 678.219190][T14835] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 678.290309][T14835] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 678.382052][T14835] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 679.265015][T14874] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 680.600025][T14889] FAULT_INJECTION: forcing a failure. [ 680.600025][T14889] name failslab, interval 1, probability 0, space 0, times 0 [ 680.651744][T14889] CPU: 1 UID: 0 PID: 14889 Comm: syz.0.1759 Tainted: G U L syzkaller #0 PREEMPT(full) [ 680.651798][T14889] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 680.651811][T14889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.651830][T14889] Call Trace: [ 680.651840][T14889] [ 680.651851][T14889] dump_stack_lvl+0x100/0x190 [ 680.651892][T14889] should_fail_ex.cold+0x5/0xa [ 680.651933][T14889] should_failslab+0xc2/0x120 [ 680.651973][T14889] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 680.652024][T14889] ? security_file_alloc+0x34/0x2c0 [ 680.652068][T14889] ? trace_kmem_cache_alloc+0xd5/0x100 [ 680.652114][T14889] security_file_alloc+0x34/0x2c0 [ 680.652157][T14889] init_file+0x95/0x480 [ 680.652204][T14889] alloc_empty_file+0x79/0x1c0 [ 680.652254][T14889] path_openat+0xe8/0x31a0 [ 680.652294][T14889] ? kasan_save_stack+0x3f/0x50 [ 680.652324][T14889] ? kasan_save_stack+0x30/0x50 [ 680.652364][T14889] ? kasan_save_track+0x14/0x30 [ 680.652398][T14889] ? __kasan_slab_alloc+0x89/0x90 [ 680.652432][T14889] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 680.652484][T14889] ? do_getname+0x35/0x390 [ 680.652533][T14889] ? do_sys_openat2+0xc5/0x1e0 [ 680.652582][T14889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.652622][T14889] ? __pfx_path_openat+0x10/0x10 [ 680.652678][T14889] do_file_open+0x20e/0x430 [ 680.652721][T14889] ? __pfx_do_file_open+0x10/0x10 [ 680.652790][T14889] ? alloc_fd+0x476/0x790 [ 680.652834][T14889] ? do_getname+0x191/0x390 [ 680.652886][T14889] do_sys_openat2+0x10d/0x1e0 [ 680.652937][T14889] ? __pfx_do_sys_openat2+0x10/0x10 [ 680.653001][T14889] __x64_sys_openat+0x12d/0x210 [ 680.653053][T14889] ? __pfx___x64_sys_openat+0x10/0x10 [ 680.653101][T14889] ? exit_to_user_mode_loop+0xf3/0x670 [ 680.653161][T14889] ? rcu_is_watching+0x12/0xc0 [ 680.653203][T14889] do_syscall_64+0x115/0x840 [ 680.653248][T14889] ? clear_bhb_loop+0x40/0x90 [ 680.653286][T14889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.653320][T14889] RIP: 0033:0x7f394f79ce59 [ 680.653353][T14889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.653387][T14889] RSP: 002b:00007f395058e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 680.653418][T14889] RAX: ffffffffffffffda RBX: 00007f394fa15fa0 RCX: 00007f394f79ce59 [ 680.653439][T14889] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 680.653460][T14889] RBP: 00007f394f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 680.653479][T14889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.653497][T14889] R13: 00007f394fa16038 R14: 00007f394fa15fa0 R15: 00007fff6b472d08 [ 680.653538][T14889] [ 681.512319][T14898] [U]  [ 681.515423][T14898] [U] [ 681.518152][T14898] [U] [ 681.520890][T14898] [U] [ 681.550710][T14898] [U] [ 681.553500][T14898] [U] [ 681.556229][T14898] [U] [ 681.558957][T14898] [U] [ 681.602794][T14898] [U] [ 681.605579][T14898] [U] [ 681.608305][T14898] [U] [ 681.611020][T14898] [U] [ 681.641228][T14898] [U] [ 681.643963][T14898] [U] [ 681.646674][T14898] [U] [ 681.649386][T14898] [U] [ 681.700468][T14898] [U] [ 681.703258][T14898] [U] [ 681.706026][T14898] [U] [ 681.708765][T14898] [U] [ 681.751053][T14898] [U] [ 681.753851][T14898] [U] [ 681.756617][T14898] [U] [ 681.759373][T14898] [U] [ 681.807467][T14898] [U] [ 681.810229][T14898] [U] [ 681.812952][T14898] [U] [ 681.815679][T14898] [U] [ 681.859750][T14898] [U] [ 681.862552][T14898] [U] [ 681.865306][T14898] [U] [ 681.868046][T14898] [U] [ 681.910284][T14898] [U] [ 681.913063][T14898] [U] [ 681.915820][T14898] [U] [ 681.918576][T14898] [U] [ 681.943996][T14898] [U] [ 681.946767][T14898] [U] [ 681.949477][T14898] [U] [ 681.952189][T14898] [U] [ 682.012754][T14898] [U] [ 682.015520][T14898] [U] [ 682.018293][T14898] [U] [ 682.021041][T14898] [U] [ 682.058001][T14898] [U] [ 682.060797][T14898] [U] [ 682.063551][T14898] [U] [ 682.066299][T14898] [U] [ 682.112621][T14898] [U] [ 682.395882][T14899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1761'. [ 683.766066][T14934] futex_wake_op: syz.1.1769 tries to shift op by -2048; fix this program [ 683.819860][T14934] futex_wake_op: syz.1.1769 tries to shift op by -2048; fix this program [ 683.834195][T14935] 0x000000000001-0x000000020000 : "" [ 683.945459][T14935] ftl_cs: FTL header corrupt! [ 685.150532][T14961] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1772'. [ 686.055688][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.062314][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.663197][T14991] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1776'. [ 687.276735][T15005] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 688.616132][T15028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1787'. [ 688.834140][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 688.928245][T15035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1788'. [ 690.211053][T15048] Process accounting paused [ 690.506931][T15054] futex_wake_op: syz.2.1791 tries to shift op by -2048; fix this program [ 690.537793][T15054] futex_wake_op: syz.2.1791 tries to shift op by -2048; fix this program [ 690.553596][T15054] 0x000000000001-0x000000020000 : "" [ 690.678565][T15054] ftl_cs: FTL header corrupt! [ 691.545871][T15074] futex_wake_op: syz.2.1796 tries to shift op by -2048; fix this program [ 691.581092][T15075] futex_wake_op: syz.2.1796 tries to shift op by -2048; fix this program [ 691.967552][T15089] FAULT_INJECTION: forcing a failure. [ 691.967552][T15089] name failslab, interval 1, probability 0, space 0, times 0 [ 692.001966][T15089] CPU: 1 UID: 0 PID: 15089 Comm: syz.1.1799 Tainted: G U L syzkaller #0 PREEMPT(full) [ 692.002025][T15089] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 692.002038][T15089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 692.002065][T15089] Call Trace: [ 692.002084][T15089] [ 692.002096][T15089] dump_stack_lvl+0x100/0x190 [ 692.002137][T15089] should_fail_ex.cold+0x5/0xa [ 692.002182][T15089] should_failslab+0xc2/0x120 [ 692.002235][T15089] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 692.002288][T15089] ? security_file_alloc+0x34/0x2c0 [ 692.002333][T15089] ? trace_kmem_cache_alloc+0xd5/0x100 [ 692.002379][T15089] security_file_alloc+0x34/0x2c0 [ 692.002424][T15089] init_file+0x95/0x480 [ 692.002471][T15089] alloc_empty_file+0x79/0x1c0 [ 692.002521][T15089] path_openat+0xe8/0x31a0 [ 692.002563][T15089] ? kasan_save_stack+0x3f/0x50 [ 692.002596][T15089] ? kasan_save_stack+0x30/0x50 [ 692.002628][T15089] ? kasan_save_track+0x14/0x30 [ 692.002659][T15089] ? __kasan_slab_alloc+0x89/0x90 [ 692.002693][T15089] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 692.002744][T15089] ? do_getname+0x35/0x390 [ 692.002790][T15089] ? do_sys_openat2+0xc5/0x1e0 [ 692.002838][T15089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.002896][T15089] ? __pfx_path_openat+0x10/0x10 [ 692.002956][T15089] do_file_open+0x20e/0x430 [ 692.003003][T15089] ? __pfx_do_file_open+0x10/0x10 [ 692.003118][T15089] ? alloc_fd+0x476/0x790 [ 692.003169][T15089] ? do_getname+0x191/0x390 [ 692.003223][T15089] do_sys_openat2+0x10d/0x1e0 [ 692.003276][T15089] ? __pfx_do_sys_openat2+0x10/0x10 [ 692.003345][T15089] __x64_sys_openat+0x12d/0x210 [ 692.003400][T15089] ? __pfx___x64_sys_openat+0x10/0x10 [ 692.003454][T15089] ? exit_to_user_mode_loop+0xf3/0x670 [ 692.003515][T15089] ? rcu_is_watching+0x12/0xc0 [ 692.003637][T15089] do_syscall_64+0x115/0x840 [ 692.003697][T15089] ? clear_bhb_loop+0x40/0x90 [ 692.003740][T15089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.003774][T15089] RIP: 0033:0x7f7dbb19ce59 [ 692.003802][T15089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.003834][T15089] RSP: 002b:00007f7dbc084028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 692.003866][T15089] RAX: ffffffffffffffda RBX: 00007f7dbb415fa0 RCX: 00007f7dbb19ce59 [ 692.003889][T15089] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 692.003910][T15089] RBP: 00007f7dbb232d6f R08: 0000000000000000 R09: 0000000000000000 [ 692.003930][T15089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.003950][T15089] R13: 00007f7dbb416038 R14: 00007f7dbb415fa0 R15: 00007fffe24d78a8 [ 692.003993][T15089] [ 692.904260][T15080] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 693.711137][T15096] Process accounting resumed [ 694.451124][T15126] futex_wake_op: syz.3.1806 tries to shift op by -2048; fix this program [ 694.500118][T15126] 0x000000000001-0x000000000201 : "" [ 694.673517][T15126] ftl_cs: FTL header corrupt! [ 694.979253][T15124] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input20 [ 696.733198][T15163] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 697.413272][T15169] pim6reg: entered allmulticast mode [ 698.550305][T15188] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 701.642881][T15234] smpboot: CPU 1 is now offline [ 702.146823][T15244] NFSD: Failed to start, no listeners configured. [ 704.614854][T15266] FAULT_INJECTION: forcing a failure. [ 704.614854][T15266] name fail_futex, interval 1, probability 0, space 0, times 0 [ 704.689674][T15266] CPU: 0 UID: 0 PID: 15266 Comm: syz.1.1831 Tainted: G U L syzkaller #0 PREEMPT(full) [ 704.689715][T15266] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 704.689724][T15266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 704.689739][T15266] Call Trace: [ 704.689747][T15266] [ 704.689755][T15266] dump_stack_lvl+0x100/0x190 [ 704.689784][T15266] should_fail_ex.cold+0x5/0xa [ 704.689811][T15266] ? __kernel_text_address+0xd/0x30 [ 704.689838][T15266] get_futex_key+0x1d2/0x1510 [ 704.689881][T15266] ? __pfx_get_futex_key+0x10/0x10 [ 704.689922][T15266] ? putname+0xb1/0x110 [ 704.689954][T15266] ? stack_trace_save+0x8e/0xc0 [ 704.689986][T15266] ? __pfx_stack_trace_save+0x10/0x10 [ 704.690025][T15266] futex_wait_setup+0x83/0x510 [ 704.690063][T15266] __futex_wait+0x19f/0x300 [ 704.690096][T15266] ? __pfx___futex_wait+0x10/0x10 [ 704.690131][T15266] ? __pfx_futex_wake_mark+0x10/0x10 [ 704.690165][T15266] ? futex_hash+0x2ad/0x370 [ 704.690205][T15266] ? futex_hash+0x141/0x370 [ 704.690247][T15266] futex_wait+0xe6/0x370 [ 704.690278][T15266] ? __pfx_futex_wait+0x10/0x10 [ 704.690314][T15266] ? putname+0xb1/0x110 [ 704.690352][T15266] ? kmem_cache_free+0x127/0x6c0 [ 704.690389][T15266] ? do_sys_openat2+0x1b4/0x1e0 [ 704.690431][T15266] do_futex+0x1ef/0x350 [ 704.690456][T15266] ? __pfx_do_futex+0x10/0x10 [ 704.690479][T15266] ? __pfx_do_sys_openat2+0x10/0x10 [ 704.690523][T15266] __x64_sys_futex+0x34f/0x4d0 [ 704.690550][T15266] ? __x64_sys_openat+0x12d/0x210 [ 704.690590][T15266] ? __pfx___x64_sys_futex+0x10/0x10 [ 704.690614][T15266] ? exit_to_user_mode_loop+0xf3/0x670 [ 704.690658][T15266] ? rcu_is_watching+0x12/0xc0 [ 704.690690][T15266] do_syscall_64+0x115/0x840 [ 704.690725][T15266] ? clear_bhb_loop+0x40/0x90 [ 704.690754][T15266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.690780][T15266] RIP: 0033:0x7f7dbb19ce59 [ 704.690799][T15266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.690824][T15266] RSP: 002b:00007f7dbc0840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 704.690847][T15266] RAX: ffffffffffffffda RBX: 00007f7dbb415fa8 RCX: 00007f7dbb19ce59 [ 704.690864][T15266] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7dbb415fa8 [ 704.690878][T15266] RBP: 00007f7dbb415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 704.690893][T15266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.690907][T15266] R13: 00007f7dbb416038 R14: 00007fffe24d77c0 R15: 00007fffe24d78a8 [ 704.690938][T15266] [ 706.310505][T15299] FAULT_INJECTION: forcing a failure. [ 706.310505][T15299] name failslab, interval 1, probability 0, space 0, times 0 [ 706.368550][T15299] CPU: 0 UID: 0 PID: 15299 Comm: syz.1.1838 Tainted: G U L syzkaller #0 PREEMPT(full) [ 706.368590][T15299] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 706.368599][T15299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 706.368613][T15299] Call Trace: [ 706.368621][T15299] [ 706.368629][T15299] dump_stack_lvl+0x100/0x190 [ 706.368657][T15299] should_fail_ex.cold+0x5/0xa [ 706.368687][T15299] should_failslab+0xc2/0x120 [ 706.368716][T15299] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 706.368755][T15299] ? __d_alloc+0x34/0xa40 [ 706.368793][T15299] __d_alloc+0x34/0xa40 [ 706.368827][T15299] d_alloc_parallel+0x111/0x14e0 [ 706.368851][T15299] ? stack_trace_save+0x8e/0xc0 [ 706.368884][T15299] ? __lock_acquire+0x4a5/0x2630 [ 706.368925][T15299] ? __pfx_d_alloc_parallel+0x10/0x10 [ 706.368952][T15299] ? lockdep_init_map_type+0x5c/0x250 [ 706.368992][T15299] ? lockdep_init_map_type+0x5c/0x250 [ 706.369035][T15299] __lookup_slow+0x193/0x460 [ 706.369072][T15299] ? __pfx___lookup_slow+0x10/0x10 [ 706.369123][T15299] ? __d_lookup+0x266/0x4a0 [ 706.369152][T15299] lookup_slow+0x50/0x70 [ 706.369188][T15299] link_path_walk+0x1377/0x1cc0 [ 706.369223][T15299] path_openat+0x1be/0x31a0 [ 706.369251][T15299] ? kasan_save_stack+0x3f/0x50 [ 706.369281][T15299] ? kasan_save_stack+0x30/0x50 [ 706.369303][T15299] ? kasan_save_track+0x14/0x30 [ 706.369325][T15299] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 706.369373][T15299] ? __pfx_path_openat+0x10/0x10 [ 706.369414][T15299] do_file_open+0x20e/0x430 [ 706.369446][T15299] ? __pfx_do_file_open+0x10/0x10 [ 706.369496][T15299] ? alloc_fd+0x476/0x790 [ 706.369527][T15299] ? do_getname+0x191/0x390 [ 706.369565][T15299] do_sys_openat2+0x10d/0x1e0 [ 706.369602][T15299] ? __pfx_do_sys_openat2+0x10/0x10 [ 706.369649][T15299] __x64_sys_openat+0x12d/0x210 [ 706.369686][T15299] ? __pfx___x64_sys_openat+0x10/0x10 [ 706.369723][T15299] ? exit_to_user_mode_loop+0xf3/0x670 [ 706.369765][T15299] ? rcu_is_watching+0x12/0xc0 [ 706.369796][T15299] do_syscall_64+0x115/0x840 [ 706.369829][T15299] ? clear_bhb_loop+0x40/0x90 [ 706.369858][T15299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.369882][T15299] RIP: 0033:0x7f7dbb19ce59 [ 706.369901][T15299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.369925][T15299] RSP: 002b:00007f7dbc084028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 706.369948][T15299] RAX: ffffffffffffffda RBX: 00007f7dbb415fa0 RCX: 00007f7dbb19ce59 [ 706.369963][T15299] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 706.369978][T15299] RBP: 00007f7dbb232d6f R08: 0000000000000000 R09: 0000000000000000 [ 706.369993][T15299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.370007][T15299] R13: 00007f7dbb416038 R14: 00007f7dbb415fa0 R15: 00007fffe24d78a8 [ 706.370036][T15299] [ 708.333413][T15298] Process accounting paused [ 717.455235][T15451] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1870'. [ 717.815414][ T30] audit: type=1800 audit(4294967364.960:23): pid=15467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1874" name="lu_gp_id" dev="configfs" ino=61189 res=0 errno=0 [ 717.852659][T15469] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1875'. [ 717.964291][T15463] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1873: iget: checksum invalid [ 718.009649][T15463] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 718.052391][T15463] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1873: iget: checksum invalid [ 718.096390][T15476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1877'. [ 718.129767][T15463] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 718.184366][T15463] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1873: iget: checksum invalid [ 718.238096][T15463] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 718.287433][T15463] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1873: iget: checksum invalid [ 718.391515][T15463] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 718.493084][T15463] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 718.555477][T15463] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 721.902967][T15506] Process accounting resumed [ 722.202431][T15535] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 723.624387][T15563] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 723.943608][T15565] Process accounting paused [ 726.244815][ T30] audit: type=1800 audit(4294967335.030:24): pid=15612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1900" name="lu_gp_id" dev="configfs" ino=61908 res=0 errno=0 [ 726.266487][T15612] kstrtoul() returned -22 for lu_gp_id [ 726.565419][T15622] netlink: 'syz.1.1903': attribute type 11 has an invalid length. [ 726.600638][T15622] netlink: 'syz.1.1903': attribute type 11 has an invalid length. [ 726.639799][T15622] netlink: 'syz.1.1903': attribute type 11 has an invalid length. [ 726.680436][T15626] random: crng reseeded on system resumption [ 726.762322][ T30] audit: type=1800 audit(4294967335.540:25): pid=15626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1904" name=22050820 dev="tmpfs" ino=2458 res=0 errno=0 [ 726.926387][T15630] blktrace: Concurrent blktraces are not allowed on sg0 [ 727.932388][T15642] sg_write: data in/out 262108/45 bytes for SCSI command 0x61-- guessing data in; [ 727.932388][T15642] program syz.2.1907 not setting count and/or reply_len properly [ 729.992855][T15688] random: crng reseeded on system resumption [ 731.965773][T15738] random: crng reseeded on system resumption [ 732.825889][T15751] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 738.525001][T15814] Process accounting resumed [ 739.847083][T15868] ubi0: attaching mtd0 [ 739.915705][T15868] ubi0: scanning is finished [ 739.955009][T15868] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 740.396327][T15868] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 740.626597][T15887] vhci_hcd: not connected 4 [ 742.855204][T15917] FAULT_INJECTION: forcing a failure. [ 742.855204][T15917] name failslab, interval 1, probability 0, space 0, times 0 [ 742.906670][T15917] CPU: 0 UID: 0 PID: 15917 Comm: syz.3.1954 Tainted: G U L syzkaller #0 PREEMPT(full) [ 742.906710][T15917] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 742.906719][T15917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 742.906733][T15917] Call Trace: [ 742.906740][T15917] [ 742.906749][T15917] dump_stack_lvl+0x100/0x190 [ 742.906777][T15917] should_fail_ex.cold+0x5/0xa [ 742.906806][T15917] should_failslab+0xc2/0x120 [ 742.906836][T15917] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 742.906888][T15917] ? __d_alloc+0x34/0xa40 [ 742.906920][T15917] ? do_raw_spin_lock+0x128/0x260 [ 742.906951][T15917] __d_alloc+0x34/0xa40 [ 742.907005][T15917] d_alloc_parallel+0x111/0x14e0 [ 742.907037][T15917] ? find_held_lock+0x2b/0x80 [ 742.907067][T15917] ? __d_lookup+0x25c/0x4a0 [ 742.907090][T15917] ? __pfx_d_alloc_parallel+0x10/0x10 [ 742.907118][T15917] ? __d_lookup+0x266/0x4a0 [ 742.907149][T15917] lookup_open.isra.0+0x57c/0x11b0 [ 742.907173][T15917] ? find_held_lock+0x2b/0x80 [ 742.907202][T15917] ? proc_sys_permission+0x150/0x1f0 [ 742.907237][T15917] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 742.907279][T15917] ? lookup_fast+0x2da/0x600 [ 742.907306][T15917] path_openat+0xa98/0x31a0 [ 742.907346][T15917] ? __pfx_path_openat+0x10/0x10 [ 742.907387][T15917] do_file_open+0x20e/0x430 [ 742.907419][T15917] ? __pfx_do_file_open+0x10/0x10 [ 742.907470][T15917] ? alloc_fd+0x476/0x790 [ 742.907502][T15917] ? do_getname+0x191/0x390 [ 742.907540][T15917] do_sys_openat2+0x10d/0x1e0 [ 742.907577][T15917] ? __pfx_do_sys_openat2+0x10/0x10 [ 742.907625][T15917] __x64_sys_openat+0x12d/0x210 [ 742.907664][T15917] ? __pfx___x64_sys_openat+0x10/0x10 [ 742.907701][T15917] ? exit_to_user_mode_loop+0xf3/0x670 [ 742.907744][T15917] ? rcu_is_watching+0x12/0xc0 [ 742.907775][T15917] do_syscall_64+0x115/0x840 [ 742.907809][T15917] ? clear_bhb_loop+0x40/0x90 [ 742.907838][T15917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.907869][T15917] RIP: 0033:0x7f3768f9ce59 [ 742.907888][T15917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.907912][T15917] RSP: 002b:00007f3769d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 742.907935][T15917] RAX: ffffffffffffffda RBX: 00007f3769215fa0 RCX: 00007f3768f9ce59 [ 742.907951][T15917] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 742.907967][T15917] RBP: 00007f3769032d6f R08: 0000000000000000 R09: 0000000000000000 [ 742.907981][T15917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.907996][T15917] R13: 00007f3769216038 R14: 00007f3769215fa0 R15: 00007ffda3425188 [ 742.908027][T15917] [ 743.265467][T12002] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 747.491989][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.498426][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.056298][T16006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 748.504414][T16011] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1971'. [ 749.469786][T16025] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1974'. [ 751.738896][T16057] FAULT_INJECTION: forcing a failure. [ 751.738896][T16057] name fail_futex, interval 1, probability 0, space 0, times 0 [ 751.842367][T16057] CPU: 0 UID: 0 PID: 16057 Comm: syz.1.1981 Tainted: G U L syzkaller #0 PREEMPT(full) [ 751.842413][T16057] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 751.842422][T16057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 751.842436][T16057] Call Trace: [ 751.842443][T16057] [ 751.842452][T16057] dump_stack_lvl+0x100/0x190 [ 751.842481][T16057] should_fail_ex.cold+0x5/0xa [ 751.842512][T16057] get_futex_key+0x1d2/0x1510 [ 751.842553][T16057] ? __pfx_get_futex_key+0x10/0x10 [ 751.842601][T16057] futex_wake+0xea/0x530 [ 751.842630][T16057] ? rcu_is_watching+0x12/0xc0 [ 751.842657][T16057] ? __pfx_futex_wake+0x10/0x10 [ 751.842689][T16057] ? putname+0xb1/0x110 [ 751.842718][T16057] ? kmem_cache_free+0x127/0x6c0 [ 751.842753][T16057] ? do_sys_openat2+0x1b4/0x1e0 [ 751.842793][T16057] do_futex+0x32b/0x350 [ 751.842817][T16057] ? __pfx_do_futex+0x10/0x10 [ 751.842840][T16057] ? __pfx_do_sys_openat2+0x10/0x10 [ 751.842883][T16057] __x64_sys_futex+0x34f/0x4d0 [ 751.842909][T16057] ? __x64_sys_openat+0x12d/0x210 [ 751.842948][T16057] ? __pfx___x64_sys_futex+0x10/0x10 [ 751.842972][T16057] ? exit_to_user_mode_loop+0xf3/0x670 [ 751.843014][T16057] ? rcu_is_watching+0x12/0xc0 [ 751.843043][T16057] do_syscall_64+0x115/0x840 [ 751.843077][T16057] ? clear_bhb_loop+0x40/0x90 [ 751.843105][T16057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 751.843129][T16057] RIP: 0033:0x7f7dbb19ce59 [ 751.843148][T16057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 751.843171][T16057] RSP: 002b:00007f7dbc0840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 751.843193][T16057] RAX: ffffffffffffffda RBX: 00007f7dbb415fa8 RCX: 00007f7dbb19ce59 [ 751.843209][T16057] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7dbb415fac [ 751.843223][T16057] RBP: 00007f7dbb415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 751.843237][T16057] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 751.843252][T16057] R13: 00007f7dbb416038 R14: 00007fffe24d77c0 R15: 00007fffe24d78a8 [ 751.843281][T16057] [ 752.069559][T16062] random: crng reseeded on system resumption [ 752.702440][T16073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1985'. [ 753.830851][T16061] Process accounting paused [ 753.936576][ T30] audit: type=1800 audit(4294967362.720:26): pid=16084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1986" name="dbroot" dev="configfs" ino=64317 res=0 errno=0 [ 754.271062][T16098] ubi9: attaching mtd2 [ 754.288210][T16098] ubi9 error: ubi_attach_mtd_dev: bad VID header (10) or data offsets (74) [ 754.539895][T16083] Process accounting resumed [ 754.705186][T16108] FAULT_INJECTION: forcing a failure. [ 754.705186][T16108] name failslab, interval 1, probability 0, space 0, times 0 [ 754.780255][T16108] CPU: 0 UID: 0 PID: 16108 Comm: syz.1.1992 Tainted: G U L syzkaller #0 PREEMPT(full) [ 754.780296][T16108] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 754.780306][T16108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 754.780320][T16108] Call Trace: [ 754.780328][T16108] [ 754.780338][T16108] dump_stack_lvl+0x100/0x190 [ 754.780366][T16108] should_fail_ex.cold+0x5/0xa [ 754.780398][T16108] should_failslab+0xc2/0x120 [ 754.780430][T16108] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 754.780469][T16108] ? do_getname+0x35/0x390 [ 754.780511][T16108] do_getname+0x35/0x390 [ 754.780549][T16108] do_sys_openat2+0xc5/0x1e0 [ 754.780586][T16108] ? __pfx_do_sys_openat2+0x10/0x10 [ 754.780648][T16108] __x64_sys_openat+0x12d/0x210 [ 754.780687][T16108] ? __pfx___x64_sys_openat+0x10/0x10 [ 754.780725][T16108] ? exit_to_user_mode_loop+0xf3/0x670 [ 754.780770][T16108] ? rcu_is_watching+0x12/0xc0 [ 754.780801][T16108] do_syscall_64+0x115/0x840 [ 754.780834][T16108] ? clear_bhb_loop+0x40/0x90 [ 754.780863][T16108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.780888][T16108] RIP: 0033:0x7f7dbb19ce59 [ 754.780906][T16108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.780930][T16108] RSP: 002b:00007f7dbc084028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 754.780952][T16108] RAX: ffffffffffffffda RBX: 00007f7dbb415fa0 RCX: 00007f7dbb19ce59 [ 754.780968][T16108] RDX: 0000000000002002 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 754.780983][T16108] RBP: 00007f7dbb232d6f R08: 0000000000000000 R09: 0000000000000000 [ 754.780997][T16108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.781011][T16108] R13: 00007f7dbb416038 R14: 00007f7dbb415fa0 R15: 00007fffe24d78a8 [ 754.781042][T16108] [ 758.753341][T16173] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 759.024656][T16173] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2004'. [ 759.379126][T16186] block nbd0: NBD_DISCONNECT [ 759.902680][T16192] FAULT_INJECTION: forcing a failure. [ 759.902680][T16192] name failslab, interval 1, probability 0, space 0, times 0 [ 759.957004][T16192] CPU: 0 UID: 0 PID: 16192 Comm: syz.3.2008 Tainted: G U L syzkaller #0 PREEMPT(full) [ 759.957041][T16192] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 759.957050][T16192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 759.957063][T16192] Call Trace: [ 759.957070][T16192] [ 759.957079][T16192] dump_stack_lvl+0x100/0x190 [ 759.957106][T16192] should_fail_ex.cold+0x5/0xa [ 759.957135][T16192] should_failslab+0xc2/0x120 [ 759.957162][T16192] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 759.957219][T16192] ? __d_alloc+0x34/0xa40 [ 759.957250][T16192] ? __pfx_stack_trace_save+0x10/0x10 [ 759.957286][T16192] __d_alloc+0x34/0xa40 [ 759.957321][T16192] d_alloc_parallel+0x111/0x14e0 [ 759.957352][T16192] ? find_held_lock+0x2b/0x80 [ 759.957381][T16192] ? __d_lookup+0x25c/0x4a0 [ 759.957403][T16192] ? __pfx_d_alloc_parallel+0x10/0x10 [ 759.957431][T16192] ? __d_lookup+0x266/0x4a0 [ 759.957459][T16192] lookup_open.isra.0+0x57c/0x11b0 [ 759.957483][T16192] ? find_held_lock+0x2b/0x80 [ 759.957510][T16192] ? proc_sys_permission+0x150/0x1f0 [ 759.957543][T16192] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 759.957587][T16192] ? lookup_fast+0x2da/0x600 [ 759.957613][T16192] path_openat+0xa98/0x31a0 [ 759.957652][T16192] ? __pfx_path_openat+0x10/0x10 [ 759.957692][T16192] do_file_open+0x20e/0x430 [ 759.957725][T16192] ? __pfx_do_file_open+0x10/0x10 [ 759.957775][T16192] ? alloc_fd+0x476/0x790 [ 759.957805][T16192] ? do_getname+0x191/0x390 [ 759.957843][T16192] do_sys_openat2+0x10d/0x1e0 [ 759.957887][T16192] ? __pfx_do_sys_openat2+0x10/0x10 [ 759.957940][T16192] __x64_sys_openat+0x12d/0x210 [ 759.957978][T16192] ? __pfx___x64_sys_openat+0x10/0x10 [ 759.958034][T16192] ? exit_to_user_mode_loop+0xf3/0x670 [ 759.958082][T16192] ? rcu_is_watching+0x12/0xc0 [ 759.958113][T16192] do_syscall_64+0x115/0x840 [ 759.958148][T16192] ? clear_bhb_loop+0x40/0x90 [ 759.958177][T16192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 759.958202][T16192] RIP: 0033:0x7f3768f9ce59 [ 759.958222][T16192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 759.958246][T16192] RSP: 002b:00007f3769d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 759.958270][T16192] RAX: ffffffffffffffda RBX: 00007f3769215fa0 RCX: 00007f3768f9ce59 [ 759.958286][T16192] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 759.958301][T16192] RBP: 00007f3769032d6f R08: 0000000000000000 R09: 0000000000000000 [ 759.958316][T16192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 759.958330][T16192] R13: 00007f3769216038 R14: 00007f3769215fa0 R15: 00007ffda3425188 [ 759.958361][T16192] [ 763.150509][T16236] FAULT_INJECTION: forcing a failure. [ 763.150509][T16236] name failslab, interval 1, probability 0, space 0, times 0 [ 763.250141][T16236] CPU: 0 UID: 0 PID: 16236 Comm: syz.0.2017 Tainted: G U L syzkaller #0 PREEMPT(full) [ 763.250181][T16236] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 763.250190][T16236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 763.250204][T16236] Call Trace: [ 763.250212][T16236] [ 763.250220][T16236] dump_stack_lvl+0x100/0x190 [ 763.250248][T16236] should_fail_ex.cold+0x5/0xa [ 763.250278][T16236] should_failslab+0xc2/0x120 [ 763.250307][T16236] __kmalloc_cache_noprof+0x7a/0x6f0 [ 763.250342][T16236] ? snd_card_file_add+0x52/0x330 [ 763.250381][T16236] snd_card_file_add+0x52/0x330 [ 763.250421][T16236] snd_pcm_oss_open+0x1c2/0x1390 [ 763.250456][T16236] ? lockdep_hardirqs_on+0x78/0x100 [ 763.250491][T16236] ? find_held_lock+0x2b/0x80 [ 763.250520][T16236] ? tomoyo_check_open_permission+0x1db/0x3c0 [ 763.250553][T16236] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 763.250600][T16236] ? __lock_acquire+0x4a5/0x2630 [ 763.250640][T16236] ? __lock_acquire+0x4a5/0x2630 [ 763.250684][T16236] ? do_raw_spin_lock+0x128/0x260 [ 763.250711][T16236] ? soundcore_open+0x231/0x5a0 [ 763.250742][T16236] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 763.250776][T16236] soundcore_open+0x2e3/0x5a0 [ 763.250807][T16236] ? __pfx_soundcore_open+0x10/0x10 [ 763.250836][T16236] chrdev_open+0x234/0x6a0 [ 763.250865][T16236] ? __pfx_apparmor_file_open+0x10/0x10 [ 763.250891][T16236] ? __pfx_chrdev_open+0x10/0x10 [ 763.250923][T16236] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 763.250961][T16236] do_dentry_open+0x6ab/0x14d0 [ 763.250988][T16236] ? __pfx_chrdev_open+0x10/0x10 [ 763.251024][T16236] vfs_open+0x82/0x3f0 [ 763.251062][T16236] path_openat+0x208c/0x31a0 [ 763.251101][T16236] ? __pfx_path_openat+0x10/0x10 [ 763.251141][T16236] do_file_open+0x20e/0x430 [ 763.251172][T16236] ? __pfx_do_file_open+0x10/0x10 [ 763.251221][T16236] ? alloc_fd+0x476/0x790 [ 763.251253][T16236] ? do_getname+0x191/0x390 [ 763.251290][T16236] do_sys_openat2+0x10d/0x1e0 [ 763.251326][T16236] ? __pfx_do_sys_openat2+0x10/0x10 [ 763.251373][T16236] __x64_sys_openat+0x12d/0x210 [ 763.251410][T16236] ? __pfx___x64_sys_openat+0x10/0x10 [ 763.251453][T16236] ? rcu_is_watching+0x12/0xc0 [ 763.251483][T16236] do_syscall_64+0x115/0x840 [ 763.251516][T16236] ? clear_bhb_loop+0x40/0x90 [ 763.251544][T16236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.251574][T16236] RIP: 0033:0x7f394f79ce59 [ 763.251592][T16236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.251615][T16236] RSP: 002b:00007f395058e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 763.251637][T16236] RAX: ffffffffffffffda RBX: 00007f394fa15fa0 RCX: 00007f394f79ce59 [ 763.251652][T16236] RDX: 0000000000020342 RSI: 0000200000000540 RDI: ffffffffffffff9c [ 763.251667][T16236] RBP: 00007f394f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 763.251681][T16236] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.251694][T16236] R13: 00007f394fa16038 R14: 00007f394fa15fa0 R15: 00007fff6b472d08 [ 763.251724][T16236] [ 766.072178][T16277] netlink: 'syz.0.2026': attribute type 1 has an invalid length. [ 768.323377][T16322] netlink: 'syz.2.2035': attribute type 2 has an invalid length. [ 768.339444][T16316] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 768.367825][T16322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2035'. [ 769.759245][T16291] Process accounting paused [ 770.232770][T16357] futex_wake_op: syz.3.2040 tries to shift op by -2048; fix this program [ 772.034829][T16395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2048'. [ 772.110262][T16395] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 772.769764][T16412] FAULT_INJECTION: forcing a failure. [ 772.769764][T16412] name fail_futex, interval 1, probability 0, space 0, times 0 [ 772.791581][T16415] vhci_hcd: not connected 4 [ 772.834314][T16412] CPU: 0 UID: 0 PID: 16412 Comm: syz.1.2051 Tainted: G U L syzkaller #0 PREEMPT(full) [ 772.834350][T16412] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 772.834358][T16412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 772.834371][T16412] Call Trace: [ 772.834378][T16412] [ 772.834385][T16412] dump_stack_lvl+0x100/0x190 [ 772.834411][T16412] should_fail_ex.cold+0x5/0xa [ 772.834435][T16412] ? __css_rstat_updated+0x1ce/0x5a0 [ 772.834471][T16412] get_futex_key+0x1d2/0x1510 [ 772.834511][T16412] ? __pfx_get_futex_key+0x10/0x10 [ 772.834550][T16412] ? pick_eevdf+0x4d3/0x860 [ 772.834585][T16412] futex_wait_setup+0x83/0x510 [ 772.834619][T16412] __futex_wait+0x19f/0x300 [ 772.834648][T16412] ? __pfx___futex_wait+0x10/0x10 [ 772.834674][T16412] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 772.834707][T16412] ? __pfx_futex_wake_mark+0x10/0x10 [ 772.834739][T16412] ? find_held_lock+0x2b/0x80 [ 772.834765][T16412] ? futex_wake+0x456/0x530 [ 772.834797][T16412] futex_wait+0xe6/0x370 [ 772.834824][T16412] ? __pfx_futex_wait+0x10/0x10 [ 772.834885][T16412] do_futex+0x1ef/0x350 [ 772.834909][T16412] ? __pfx_do_futex+0x10/0x10 [ 772.834930][T16412] ? __pfx_do_sys_openat2+0x10/0x10 [ 772.834968][T16412] ? __pfx_do_sendfile+0x10/0x10 [ 772.835004][T16412] __x64_sys_futex+0x34f/0x4d0 [ 772.835032][T16412] ? __pfx___x64_sys_futex+0x10/0x10 [ 772.835056][T16412] ? exit_to_user_mode_loop+0xf3/0x670 [ 772.835095][T16412] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 772.835130][T16412] ? rcu_is_watching+0x12/0xc0 [ 772.835161][T16412] do_syscall_64+0x115/0x840 [ 772.835193][T16412] ? clear_bhb_loop+0x40/0x90 [ 772.835221][T16412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.835244][T16412] RIP: 0033:0x7f7dbb19ce59 [ 772.835263][T16412] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.835285][T16412] RSP: 002b:00007f7dbc0840e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 772.835307][T16412] RAX: ffffffffffffffda RBX: 00007f7dbb415fa8 RCX: 00007f7dbb19ce59 [ 772.835322][T16412] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7dbb415fa8 [ 772.835336][T16412] RBP: 00007f7dbb415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 772.835350][T16412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.835364][T16412] R13: 00007f7dbb416038 R14: 00007fffe24d77c0 R15: 00007fffe24d78a8 [ 772.835397][T16412] [ 773.807470][T16435] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 773.873007][T16435] ubi3: attaching mtd1 [ 774.915166][T16453] ubi0: attaching mtd0 [ 774.958773][T16453] ubi0: scanning is finished [ 775.018401][T16460] random: crng reseeded on system resumption [ 775.056245][T16453] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 775.634755][T16453] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 776.214637][T16494] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2065'. [ 776.543063][T16504] FAULT_INJECTION: forcing a failure. [ 776.543063][T16504] name failslab, interval 1, probability 0, space 0, times 0 [ 776.624223][T16504] CPU: 0 UID: 0 PID: 16504 Comm: syz.0.2067 Tainted: G U L syzkaller #0 PREEMPT(full) [ 776.624263][T16504] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 776.624273][T16504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 776.624287][T16504] Call Trace: [ 776.624295][T16504] [ 776.624303][T16504] dump_stack_lvl+0x100/0x190 [ 776.624332][T16504] should_fail_ex.cold+0x5/0xa [ 776.624362][T16504] should_failslab+0xc2/0x120 [ 776.624391][T16504] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 776.624429][T16504] ? __pmd_alloc+0xbf/0x950 [ 776.624465][T16504] __pmd_alloc+0xbf/0x950 [ 776.624493][T16504] ? __pud_alloc+0x4fb/0x690 [ 776.624525][T16504] __handle_mm_fault+0xa9c/0x2a00 [ 776.624565][T16504] ? mt_find+0x45e/0x8e0 [ 776.624602][T16504] ? __pfx___handle_mm_fault+0x10/0x10 [ 776.624636][T16504] ? __pfx_mt_find+0x10/0x10 [ 776.624693][T16504] handle_mm_fault+0x37b/0xa30 [ 776.624734][T16504] __get_user_pages+0x1178/0x32a0 [ 776.624781][T16504] ? __pfx___get_user_pages+0x10/0x10 [ 776.624819][T16504] populate_vma_page_range+0x267/0x3f0 [ 776.624853][T16504] ? __pfx_populate_vma_page_range+0x10/0x10 [ 776.624884][T16504] ? __pfx_find_vma_intersection+0x10/0x10 [ 776.624914][T16504] ? do_mmap+0x93f/0x12f0 [ 776.624946][T16504] __mm_populate+0x107/0x3a0 [ 776.624978][T16504] ? __pfx___mm_populate+0x10/0x10 [ 776.625011][T16504] ? up_write+0x28c/0x4f0 [ 776.625039][T16504] vm_mmap_pgoff+0x37f/0x470 [ 776.625073][T16504] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 776.625105][T16504] ? do_futex+0x192/0x350 [ 776.625130][T16504] ? __pfx_do_futex+0x10/0x10 [ 776.625163][T16504] ksys_mmap_pgoff+0xe4/0x610 [ 776.625192][T16504] ? __x64_sys_futex+0x358/0x4d0 [ 776.625217][T16504] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 776.625245][T16504] ? xfd_validate_state+0x129/0x190 [ 776.625267][T16504] ? ksys_write+0x1ac/0x250 [ 776.625299][T16504] __x64_sys_mmap+0x125/0x190 [ 776.625327][T16504] do_syscall_64+0x115/0x840 [ 776.625359][T16504] ? clear_bhb_loop+0x40/0x90 [ 776.625387][T16504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 776.625412][T16504] RIP: 0033:0x7f394f79ce59 [ 776.625431][T16504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 776.625454][T16504] RSP: 002b:00007f395058e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 776.625476][T16504] RAX: ffffffffffffffda RBX: 00007f394fa15fa0 RCX: 00007f394f79ce59 [ 776.625491][T16504] RDX: 0000000000000896 RSI: 0000000000000003 RDI: 0000240000000000 [ 776.625505][T16504] RBP: 00007f394f832d6f R08: 0000000000000002 R09: 0000000000000000 [ 776.625518][T16504] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 776.625532][T16504] R13: 00007f394fa16038 R14: 00007f394fa15fa0 R15: 00007fff6b472d08 [ 776.625561][T16504] [ 777.071535][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 777.081816][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 777.090930][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 777.101060][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 777.110115][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 777.119415][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 777.128479][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 777.137575][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 777.146599][T16511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2070'. [ 781.301179][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.337216][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.376747][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.484464][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.572403][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.615424][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.662286][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.711837][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.760859][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.792823][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.845577][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.880889][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.925393][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.962544][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 782.001131][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 782.046317][T16608] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 783.423459][T16631] FAULT_INJECTION: forcing a failure. [ 783.423459][T16631] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 783.502436][T16631] CPU: 0 UID: 0 PID: 16631 Comm: syz.2.2091 Tainted: G U L syzkaller #0 PREEMPT(full) [ 783.502479][T16631] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 783.502488][T16631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 783.502503][T16631] Call Trace: [ 783.502510][T16631] [ 783.502519][T16631] dump_stack_lvl+0x100/0x190 [ 783.502548][T16631] should_fail_ex.cold+0x5/0xa [ 783.502574][T16631] ? prepare_alloc_pages+0x16d/0x5f0 [ 783.502607][T16631] should_fail_alloc_page+0xeb/0x140 [ 783.502637][T16631] prepare_alloc_pages+0x1f0/0x5f0 [ 783.502672][T16631] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 783.502724][T16631] ? stack_trace_save+0x8e/0xc0 [ 783.502755][T16631] ? __pfx_stack_trace_save+0x10/0x10 [ 783.502788][T16631] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 783.502832][T16631] ? kasan_save_stack+0x3f/0x50 [ 783.502855][T16631] ? kasan_save_stack+0x30/0x50 [ 783.502877][T16631] ? kasan_save_track+0x14/0x30 [ 783.502899][T16631] ? __kasan_kmalloc+0xaa/0xb0 [ 783.502920][T16631] ? mon_bin_open+0x1a8/0x470 [ 783.502946][T16631] ? chrdev_open+0x234/0x6a0 [ 783.502977][T16631] ? __x64_sys_openat+0x12d/0x210 [ 783.503013][T16631] ? do_syscall_64+0x115/0x840 [ 783.503045][T16631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.503076][T16631] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 783.503112][T16631] ? policy_nodemask+0xed/0x4f0 [ 783.503142][T16631] alloc_pages_mpol+0x1fb/0x540 [ 783.503171][T16631] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 783.503207][T16631] alloc_pages_noprof+0x1a/0x160 [ 783.503240][T16631] get_zeroed_page_noprof+0x18/0xb0 [ 783.503268][T16631] mon_alloc_buff+0xce/0x1b0 [ 783.503293][T16631] ? kasan_save_track+0x14/0x30 [ 783.503319][T16631] mon_bin_open+0x207/0x470 [ 783.503353][T16631] ? __pfx_mon_bin_open+0x10/0x10 [ 783.503379][T16631] chrdev_open+0x234/0x6a0 [ 783.503410][T16631] ? __pfx_chrdev_open+0x10/0x10 [ 783.503442][T16631] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 783.503480][T16631] do_dentry_open+0x6ab/0x14d0 [ 783.503508][T16631] ? __pfx_chrdev_open+0x10/0x10 [ 783.503544][T16631] vfs_open+0x82/0x3f0 [ 783.503582][T16631] path_openat+0x208c/0x31a0 [ 783.503621][T16631] ? __pfx_path_openat+0x10/0x10 [ 783.503661][T16631] do_file_open+0x20e/0x430 [ 783.503693][T16631] ? __pfx_do_file_open+0x10/0x10 [ 783.503742][T16631] ? alloc_fd+0x476/0x790 [ 783.503774][T16631] ? do_getname+0x191/0x390 [ 783.503812][T16631] do_sys_openat2+0x10d/0x1e0 [ 783.503848][T16631] ? __pfx_do_sys_openat2+0x10/0x10 [ 783.503887][T16631] ? __fget_files+0x21f/0x3d0 [ 783.503919][T16631] __x64_sys_openat+0x12d/0x210 [ 783.503957][T16631] ? __pfx___x64_sys_openat+0x10/0x10 [ 783.503999][T16631] ? rcu_is_watching+0x12/0xc0 [ 783.504029][T16631] do_syscall_64+0x115/0x840 [ 783.504062][T16631] ? clear_bhb_loop+0x40/0x90 [ 783.504090][T16631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.504114][T16631] RIP: 0033:0x7fa5d499ce59 [ 783.504132][T16631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.504155][T16631] RSP: 002b:00007fa5d590c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 783.504177][T16631] RAX: ffffffffffffffda RBX: 00007fa5d4c15fa0 RCX: 00007fa5d499ce59 [ 783.504192][T16631] RDX: 0000000000004000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 783.504207][T16631] RBP: 00007fa5d4a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 783.504221][T16631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.504234][T16631] R13: 00007fa5d4c16038 R14: 00007fa5d4c15fa0 R15: 00007ffc75fc3bc8 [ 783.504264][T16631] [ 784.208795][T16619] Process accounting resumed [ 784.717466][T16628] Process accounting paused [ 786.070774][T16668] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2099: iget: checksum invalid [ 786.126240][T16671] blktrace: Concurrent blktraces are not allowed on loop2 [ 786.159585][T16668] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 786.239568][T16668] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2099: iget: checksum invalid [ 786.349402][T16668] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 786.436548][T16668] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2099: iget: checksum invalid [ 786.520646][T16668] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 786.567876][T16668] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2099: iget: checksum invalid [ 786.614792][T16668] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 786.662325][T16668] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 786.702562][T16668] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 787.621763][T16692] FAULT_INJECTION: forcing a failure. [ 787.621763][T16692] name failslab, interval 1, probability 0, space 0, times 0 [ 787.687167][T16692] CPU: 0 UID: 0 PID: 16692 Comm: syz.3.2104 Tainted: G U L syzkaller #0 PREEMPT(full) [ 787.687216][T16692] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 787.687225][T16692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 787.687240][T16692] Call Trace: [ 787.687248][T16692] [ 787.687257][T16692] dump_stack_lvl+0x100/0x190 [ 787.687285][T16692] should_fail_ex.cold+0x5/0xa [ 787.687317][T16692] should_failslab+0xc2/0x120 [ 787.687346][T16692] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 787.687386][T16692] ? do_getname+0x35/0x390 [ 787.687428][T16692] do_getname+0x35/0x390 [ 787.687469][T16692] do_sys_openat2+0xc5/0x1e0 [ 787.687507][T16692] ? __pfx_do_sys_openat2+0x10/0x10 [ 787.687547][T16692] ? find_held_lock+0x2b/0x80 [ 787.687584][T16692] __x64_sys_openat+0x12d/0x210 [ 787.687623][T16692] ? __pfx___x64_sys_openat+0x10/0x10 [ 787.687667][T16692] ? rcu_is_watching+0x12/0xc0 [ 787.687699][T16692] do_syscall_64+0x115/0x840 [ 787.687733][T16692] ? clear_bhb_loop+0x40/0x90 [ 787.687761][T16692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.687786][T16692] RIP: 0033:0x7f3768f9ce59 [ 787.687805][T16692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.687829][T16692] RSP: 002b:00007f3769d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 787.687851][T16692] RAX: ffffffffffffffda RBX: 00007f3769215fa0 RCX: 00007f3768f9ce59 [ 787.687867][T16692] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 787.687883][T16692] RBP: 00007f3769032d6f R08: 0000000000000000 R09: 0000000000000000 [ 787.687897][T16692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 787.687911][T16692] R13: 00007f3769216038 R14: 00007f3769215fa0 R15: 00007ffda3425188 [ 787.687941][T16692] [ 788.187326][T16698] __nla_validate_parse: 24 callbacks suppressed [ 788.187344][T16698] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2105'. [ 788.429208][T16703] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2108'. [ 788.452534][T16704] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 789.136533][T16727] FAULT_INJECTION: forcing a failure. [ 789.136533][T16727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 789.205095][T16727] CPU: 0 UID: 0 PID: 16727 Comm: syz.2.2111 Tainted: G U L syzkaller #0 PREEMPT(full) [ 789.205135][T16727] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 789.205144][T16727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 789.205157][T16727] Call Trace: [ 789.205164][T16727] [ 789.205173][T16727] dump_stack_lvl+0x100/0x190 [ 789.205200][T16727] should_fail_ex.cold+0x5/0xa [ 789.205231][T16727] _copy_from_iter+0x1f4/0x1690 [ 789.205268][T16727] ? __asan_memset+0x23/0x50 [ 789.205306][T16727] ? __pfx__copy_from_iter+0x10/0x10 [ 789.205340][T16727] ? __pfx___alloc_skb+0x10/0x10 [ 789.205383][T16727] netlink_sendmsg+0x808/0xda0 [ 789.205418][T16727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 789.205451][T16727] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 789.205478][T16727] __sys_sendto+0x468/0x4b0 [ 789.205511][T16727] ? __pfx_netlink_sendmsg+0x10/0x10 [ 789.205544][T16727] ? __pfx___sys_sendto+0x10/0x10 [ 789.205618][T16727] ? xfd_validate_state+0x129/0x190 [ 789.205640][T16727] ? ksys_write+0x1ac/0x250 [ 789.205672][T16727] __x64_sys_sendto+0xe0/0x1c0 [ 789.205709][T16727] ? do_syscall_64+0x90/0x840 [ 789.205741][T16727] ? lockdep_hardirqs_on+0x78/0x100 [ 789.205774][T16727] do_syscall_64+0x115/0x840 [ 789.205806][T16727] ? clear_bhb_loop+0x40/0x90 [ 789.205834][T16727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 789.205858][T16727] RIP: 0033:0x7fa5d495d68e [ 789.205877][T16727] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 789.205900][T16727] RSP: 002b:00007fa5d590ae88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 789.205922][T16727] RAX: ffffffffffffffda RBX: 00007fa5d590c6c0 RCX: 00007fa5d495d68e [ 789.205937][T16727] RDX: 0000000000000028 RSI: 00007fa5d590b000 RDI: 0000000000000005 [ 789.205958][T16727] RBP: 0000000000000000 R08: 00007fa5d590af04 R09: 000000000000000c [ 789.205972][T16727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 789.205985][T16727] R13: 00007fa5d590af58 R14: 00007fa5d590b000 R15: 0000000000000000 [ 789.206015][T16727] [ 792.300990][T16786] FAULT_INJECTION: forcing a failure. [ 792.300990][T16786] name failslab, interval 1, probability 0, space 0, times 0 [ 792.488159][T16786] CPU: 0 UID: 0 PID: 16786 Comm: syz.2.2124 Tainted: G U L syzkaller #0 PREEMPT(full) [ 792.488199][T16786] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 792.488208][T16786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 792.488235][T16786] Call Trace: [ 792.488243][T16786] [ 792.488251][T16786] dump_stack_lvl+0x100/0x190 [ 792.488278][T16786] should_fail_ex.cold+0x5/0xa [ 792.488307][T16786] should_failslab+0xc2/0x120 [ 792.488334][T16786] __kmalloc_cache_noprof+0x7a/0x6f0 [ 792.488367][T16786] ? kvm_dev_ioctl+0x1321/0x1a50 [ 792.488403][T16786] kvm_dev_ioctl+0x1321/0x1a50 [ 792.488443][T16786] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 792.488483][T16786] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 792.488516][T16786] __x64_sys_ioctl+0x18e/0x210 [ 792.488541][T16786] do_syscall_64+0x115/0x840 [ 792.488572][T16786] ? clear_bhb_loop+0x40/0x90 [ 792.488602][T16786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 792.488625][T16786] RIP: 0033:0x7fa5d499ce59 [ 792.488643][T16786] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 792.488666][T16786] RSP: 002b:00007fa5d590c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 792.488687][T16786] RAX: ffffffffffffffda RBX: 00007fa5d4c15fa0 RCX: 00007fa5d499ce59 [ 792.488702][T16786] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003 [ 792.488715][T16786] RBP: 00007fa5d4a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 792.488730][T16786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 792.488742][T16786] R13: 00007fa5d4c16038 R14: 00007fa5d4c15fa0 R15: 00007ffc75fc3bc8 [ 792.488776][T16786] [ 793.353459][T16790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2123'. [ 793.650864][T16809] mtrr: base(0xf2fffffff2ffffff000) is not aligned on a size(0xf2ffffff000) boundary [ 794.251555][T16813] FAULT_INJECTION: forcing a failure. [ 794.251555][T16813] name failslab, interval 1, probability 0, space 0, times 0 [ 794.303421][T16815] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 794.317975][T16813] CPU: 0 UID: 0 PID: 16813 Comm: syz.2.2127 Tainted: G U L syzkaller #0 PREEMPT(full) [ 794.318014][T16813] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 794.318023][T16813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 794.318037][T16813] Call Trace: [ 794.318044][T16813] [ 794.318053][T16813] dump_stack_lvl+0x100/0x190 [ 794.318083][T16813] should_fail_ex.cold+0x5/0xa [ 794.318113][T16813] should_failslab+0xc2/0x120 [ 794.318141][T16813] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 794.318179][T16813] ? proc_alloc_inode+0x25/0x200 [ 794.318210][T16813] ? __pfx_proc_alloc_inode+0x10/0x10 [ 794.318237][T16813] proc_alloc_inode+0x25/0x200 [ 794.318262][T16813] alloc_inode+0x68/0x250 [ 794.318299][T16813] new_inode+0x22/0x1c0 [ 794.318332][T16813] ? proc_sys_lookup+0x266/0x430 [ 794.318363][T16813] proc_sys_make_inode+0x47/0x5c0 [ 794.318392][T16813] proc_sys_lookup+0x307/0x430 [ 794.318422][T16813] ? __pfx_proc_sys_lookup+0x10/0x10 [ 794.318454][T16813] ? lockdep_init_map_type+0x5c/0x250 [ 794.318494][T16813] ? lockdep_init_map_type+0x5c/0x250 [ 794.318536][T16813] __lookup_slow+0x251/0x460 [ 794.318574][T16813] ? __pfx___lookup_slow+0x10/0x10 [ 794.318624][T16813] ? __d_lookup+0x266/0x4a0 [ 794.318652][T16813] lookup_slow+0x50/0x70 [ 794.318688][T16813] link_path_walk+0x1377/0x1cc0 [ 794.318729][T16813] path_openat+0x1be/0x31a0 [ 794.318757][T16813] ? kasan_save_stack+0x3f/0x50 [ 794.318780][T16813] ? kasan_save_stack+0x30/0x50 [ 794.318802][T16813] ? kasan_save_track+0x14/0x30 [ 794.318827][T16813] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 794.318872][T16813] ? __pfx_path_openat+0x10/0x10 [ 794.318912][T16813] do_file_open+0x20e/0x430 [ 794.318944][T16813] ? __pfx_do_file_open+0x10/0x10 [ 794.318994][T16813] ? alloc_fd+0x476/0x790 [ 794.319024][T16813] ? do_getname+0x191/0x390 [ 794.319074][T16813] do_sys_openat2+0x10d/0x1e0 [ 794.319108][T16813] ? __pfx_do_sys_openat2+0x10/0x10 [ 794.319151][T16813] __x64_sys_openat+0x12d/0x210 [ 794.319185][T16813] ? __pfx___x64_sys_openat+0x10/0x10 [ 794.319240][T16813] ? exit_to_user_mode_loop+0xf3/0x670 [ 794.319282][T16813] ? rcu_is_watching+0x12/0xc0 [ 794.319324][T16813] do_syscall_64+0x115/0x840 [ 794.319355][T16813] ? clear_bhb_loop+0x40/0x90 [ 794.319381][T16813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 794.319404][T16813] RIP: 0033:0x7fa5d499ce59 [ 794.319422][T16813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 794.319443][T16813] RSP: 002b:00007fa5d590c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 794.319464][T16813] RAX: ffffffffffffffda RBX: 00007fa5d4c15fa0 RCX: 00007fa5d499ce59 [ 794.319479][T16813] RDX: 0000000000040802 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 794.319492][T16813] RBP: 00007fa5d4a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 794.319506][T16813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 794.319519][T16813] R13: 00007fa5d4c16038 R14: 00007fa5d4c15fa0 R15: 00007ffc75fc3bc8 [ 794.319546][T16813] [ 797.303833][T16841] futex_wake_op: syz.0.2129 tries to shift op by -2048; fix this program [ 797.418367][T16841] 0x000000000001-0x000000020000 : "" [ 797.953385][T16841] ftl_cs: FTL header corrupt! [ 799.859094][T16878] FAULT_INJECTION: forcing a failure. [ 799.859094][T16878] name failslab, interval 1, probability 0, space 0, times 0 [ 799.921784][T16878] CPU: 0 UID: 0 PID: 16878 Comm: syz.1.2139 Tainted: G U L syzkaller #0 PREEMPT(full) [ 799.921824][T16878] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 799.921833][T16878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 799.921848][T16878] Call Trace: [ 799.921855][T16878] [ 799.921864][T16878] dump_stack_lvl+0x100/0x190 [ 799.921892][T16878] should_fail_ex.cold+0x5/0xa [ 799.921922][T16878] ? tomoyo_encode2+0xfb/0x3c0 [ 799.921954][T16878] should_failslab+0xc2/0x120 [ 799.921983][T16878] __kmalloc_noprof+0xe0/0x850 [ 799.922004][T16878] ? rcu_is_watching+0x12/0xc0 [ 799.922036][T16878] tomoyo_encode2+0xfb/0x3c0 [ 799.922073][T16878] tomoyo_encode+0x29/0x50 [ 799.922105][T16878] tomoyo_realpath_from_path+0x18c/0x690 [ 799.922147][T16878] tomoyo_check_open_permission+0x2af/0x3c0 [ 799.922179][T16878] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 799.922219][T16878] ? hook_file_open+0x24e/0x7a0 [ 799.922263][T16878] ? lock_acquire+0x1b1/0x370 [ 799.922308][T16878] tomoyo_file_open+0x6b/0x90 [ 799.922331][T16878] security_file_open+0xb5/0x1e0 [ 799.922364][T16878] do_dentry_open+0x588/0x14d0 [ 799.922405][T16878] vfs_open+0x82/0x3f0 [ 799.922447][T16878] path_openat+0x208c/0x31a0 [ 799.922487][T16878] ? __pfx_path_openat+0x10/0x10 [ 799.922528][T16878] do_file_open+0x20e/0x430 [ 799.922560][T16878] ? __pfx_do_file_open+0x10/0x10 [ 799.922610][T16878] ? alloc_fd+0x476/0x790 [ 799.922641][T16878] ? do_getname+0x191/0x390 [ 799.922679][T16878] do_sys_openat2+0x10d/0x1e0 [ 799.922716][T16878] ? __pfx_do_sys_openat2+0x10/0x10 [ 799.922754][T16878] ? find_held_lock+0x2b/0x80 [ 799.922790][T16878] __x64_sys_openat+0x12d/0x210 [ 799.922827][T16878] ? __pfx___x64_sys_openat+0x10/0x10 [ 799.922870][T16878] ? rcu_is_watching+0x12/0xc0 [ 799.922900][T16878] do_syscall_64+0x115/0x840 [ 799.922933][T16878] ? clear_bhb_loop+0x40/0x90 [ 799.922961][T16878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.922985][T16878] RIP: 0033:0x7f7dbb19ce59 [ 799.923005][T16878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.923027][T16878] RSP: 002b:00007f7dbc084028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 799.923049][T16878] RAX: ffffffffffffffda RBX: 00007f7dbb415fa0 RCX: 00007f7dbb19ce59 [ 799.923065][T16878] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 799.923080][T16878] RBP: 00007f7dbb232d6f R08: 0000000000000000 R09: 0000000000000000 [ 799.923095][T16878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 799.923109][T16878] R13: 00007f7dbb416038 R14: 00007f7dbb415fa0 R15: 00007fffe24d78a8 [ 799.923138][T16878] [ 799.923179][T16878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 801.227408][T16877] Process accounting resumed [ 806.370737][T16962] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 806.950901][T16967] zswap: compressor not available [ 807.071616][T16970] random: crng reseeded on system resumption [ 807.829887][T16993] random: crng reseeded on system resumption [ 807.926899][T16993] Unrecognized hibernate image header format! [ 807.955990][T16993] PM: hibernation: Image mismatch: architecture specific data [ 808.792325][T17002] tc_dump_action: action bad kind [ 808.930501][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.940489][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.064643][T16974] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 809.183994][T16974] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 809.258686][T16974] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 810.545278][T17019] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 810.905141][T17023] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2170'. [ 811.092201][T12002] Bluetooth: hci1: command 0x0406 tx timeout [ 811.247625][T12002] Bluetooth: hci3: command 0x0406 tx timeout [ 811.327620][T12002] Bluetooth: hci2: command 0x0406 tx timeout [ 812.047119][T17044] openvswitch: netlink: Multiple metadata blocks provided [ 812.858911][T17045] Process accounting resumed [ 813.037108][T17052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 813.173872][T17052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 813.266556][T17065] FAULT_INJECTION: forcing a failure. [ 813.266556][T17065] name failslab, interval 1, probability 0, space 0, times 0 [ 813.308364][T17069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2177'. [ 813.318295][T17052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 813.357501][T17065] CPU: 0 UID: 0 PID: 17065 Comm: syz.3.2176 Tainted: G U L syzkaller #0 PREEMPT(full) [ 813.357547][T17065] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 813.357557][T17065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 813.357571][T17065] Call Trace: [ 813.357578][T17065] [ 813.357588][T17065] dump_stack_lvl+0x100/0x190 [ 813.357617][T17065] should_fail_ex.cold+0x5/0xa [ 813.357648][T17065] ? tracepoint_add_func+0x3a8/0x1150 [ 813.357684][T17065] should_failslab+0xc2/0x120 [ 813.357713][T17065] __kmalloc_noprof+0xe0/0x850 [ 813.357740][T17065] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 813.357778][T17065] tracepoint_add_func+0x3a8/0x1150 [ 813.357812][T17065] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 813.357855][T17065] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 813.357891][T17065] tracepoint_probe_register+0xc4/0x110 [ 813.357929][T17065] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 813.357966][T17065] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 813.358003][T17065] ? __lock_acquire+0x4a5/0x2630 [ 813.358048][T17065] tracing_start_sched_switch+0xaf/0x170 [ 813.358083][T17065] __ftrace_event_enable_disable+0x557/0x6f0 [ 813.358126][T17065] __ftrace_set_clr_event_nolock+0x390/0xc30 [ 813.358176][T17065] ftrace_set_clr_event+0x1b7/0x3f0 [ 813.358205][T17065] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 813.358232][T17065] ? trace_get_user+0x3ae/0xa70 [ 813.358276][T17065] ftrace_event_write+0x259/0x2c0 [ 813.358303][T17065] ? __pfx_ftrace_event_write+0x10/0x10 [ 813.358342][T17065] vfs_write+0x2aa/0x1070 [ 813.358372][T17065] ? __pfx_ftrace_event_write+0x10/0x10 [ 813.358401][T17065] ? __pfx_vfs_write+0x10/0x10 [ 813.358435][T17065] ? __fget_files+0x215/0x3d0 [ 813.358470][T17065] ? __fget_files+0x21f/0x3d0 [ 813.358507][T17065] ksys_write+0x12a/0x250 [ 813.358535][T17065] ? __pfx_ksys_write+0x10/0x10 [ 813.358566][T17065] ? rcu_is_watching+0x12/0xc0 [ 813.358599][T17065] do_syscall_64+0x115/0x840 [ 813.358635][T17065] ? clear_bhb_loop+0x40/0x90 [ 813.358665][T17065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.358691][T17065] RIP: 0033:0x7f3768f9ce59 [ 813.358711][T17065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.358736][T17065] RSP: 002b:00007f3769d94028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 813.358758][T17065] RAX: ffffffffffffffda RBX: 00007f3769215fa0 RCX: 00007f3768f9ce59 [ 813.358775][T17065] RDX: 0000000000000af0 RSI: 0000000000000000 RDI: 0000000000000005 [ 813.358790][T17065] RBP: 00007f3769032d6f R08: 0000000000000000 R09: 0000000000000000 [ 813.358805][T17065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.358819][T17065] R13: 00007f3769216038 R14: 00007f3769215fa0 R15: 00007ffda3425188 [ 813.358850][T17065] [ 814.536170][T17065] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 814.661844][T17073] Process accounting paused [ 815.095147][T12002] Bluetooth: hci1: command 0x0406 tx timeout [ 815.247618][T12002] Bluetooth: hci3: command 0x0406 tx timeout [ 815.329961][T12002] Bluetooth: hci2: command 0x0406 tx timeout [ 815.485654][T17082] zswap: compressor û not available [ 815.585756][T17088] block2mtd: illegal erase size [ 816.604003][T17127] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2187'. [ 816.653752][T17127] tc_dump_action: action bad kind [ 818.234848][T17159] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2193'. [ 818.868764][T17153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 821.322367][T17200] random: crng reseeded on system resumption [ 821.786038][T17190] ima: policy update failed [ 821.833600][ T30] audit: type=1802 audit(4294967430.620:27): pid=17190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.2199" res=0 errno=0 [ 821.945526][ T30] audit: type=1800 audit(4294967430.730:28): pid=17210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2201" name="dbroot" dev="configfs" ino=70613 res=0 errno=0 [ 822.224134][T17213] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2202'. [ 823.021343][T17229] ------------[ cut here ]------------ [ 823.028602][T17229] IS_ERR(old) [ 823.029356][T17229] WARNING: kernel/tracepoint.c:369 at tracepoint_probe_unregister+0x837/0xd10, CPU#0: syz.1.2205/17229 [ 823.043958][T17229] Modules linked in: [ 823.049440][T17229] CPU: 0 UID: 0 PID: 17229 Comm: syz.1.2205 Tainted: G U L syzkaller #0 PREEMPT(full) [ 823.060494][T17229] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 823.065729][T17229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.076682][T17229] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 823.084520][T17229] Code: cc e8 4d 23 fe ff 48 8d 73 f0 48 c7 c2 20 c8 09 82 48 c7 c7 80 30 87 8e e8 b6 24 e2 ff eb ba bb fe ff ff ff e8 2a 23 fe ff 90 <0f> 0b 90 eb ac e8 1f 23 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 823.104426][T17229] RSP: 0018:ffffc9000512f8b0 EFLAGS: 00010287 [ 823.110621][T17229] RAX: 000000000004844e RBX: 00000000fffffffe RCX: ffffc90007063000 [ 823.118699][T17229] RDX: 0000000000080000 RSI: ffffffff8209d916 RDI: ffff88801eaa5d00 [ 823.126721][T17229] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 823.134942][T17229] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82102f10 [ 823.143077][T17229] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8ec49180 [ 823.151106][T17229] FS: 00007f7dbc0636c0(0000) GS:ffff88812438a000(0000) knlGS:0000000000000000 [ 823.160094][T17229] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 823.166698][T17229] CR2: 00002000001e6000 CR3: 00000000793e6000 CR4: 00000000003526f0 [ 823.174799][T17229] Call Trace: [ 823.178743][T17229] [ 823.181693][T17229] tracing_stop_cmdline_record+0x66/0xa0 [ 823.187829][T17229] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 823.193864][T17229] ftrace_event_set_open+0x224/0x380 [ 823.199376][T17229] do_dentry_open+0x6ab/0x14d0 [ 823.204211][T17229] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 823.210098][T17229] vfs_open+0x82/0x3f0 [ 823.214204][T17229] path_openat+0x208c/0x31a0 [ 823.218848][T17229] ? __pfx_path_openat+0x10/0x10 [ 823.223847][T17229] do_file_open+0x20e/0x430 [ 823.228415][T17229] ? __pfx_do_file_open+0x10/0x10 [ 823.233484][T17229] ? alloc_fd+0x476/0x790 [ 823.237921][T17229] ? do_getname+0x191/0x390 [ 823.242453][T17229] do_sys_openat2+0x10d/0x1e0 [ 823.247157][T17229] ? __pfx_do_sys_openat2+0x10/0x10 [ 823.252442][T17229] ? find_held_lock+0x2b/0x80 [ 823.257176][T17229] __x64_sys_openat+0x12d/0x210 [ 823.262076][T17229] ? __pfx___x64_sys_openat+0x10/0x10 [ 823.267483][T17229] ? rcu_is_watching+0x12/0xc0 [ 823.272319][T17229] do_syscall_64+0x115/0x840 [ 823.276931][T17229] ? clear_bhb_loop+0x40/0x90 [ 823.282508][T17229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.288832][T17229] RIP: 0033:0x7f7dbb19ce59 [ 823.293263][T17229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.312934][T17229] RSP: 002b:00007f7dbc063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 823.321406][T17229] RAX: ffffffffffffffda RBX: 00007f7dbb416090 RCX: 00007f7dbb19ce59 [ 823.329417][T17229] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 823.337434][T17229] RBP: 00007f7dbb232d6f R08: 0000000000000000 R09: 0000000000000000 [ 823.345468][T17229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.353480][T17229] R13: 00007f7dbb416128 R14: 00007f7dbb416090 R15: 00007fffe24d78a8 [ 823.361535][T17229] [ 823.364585][T17229] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 823.371875][T17229] CPU: 0 UID: 0 PID: 17229 Comm: syz.1.2205 Tainted: G U L syzkaller #0 PREEMPT(full) [ 823.382844][T17229] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 823.388043][T17229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.398107][T17229] Call Trace: [ 823.401391][T17229] [ 823.404327][T17229] dump_stack_lvl+0x100/0x190 [ 823.409019][T17229] vpanic+0x552/0x970 [ 823.413029][T17229] ? __pfx_vpanic+0x10/0x10 [ 823.417551][T17229] panic+0xd1/0xe0 [ 823.421278][T17229] ? __pfx_panic+0x10/0x10 [ 823.425715][T17229] check_panic_on_warn.cold+0x19/0x34 [ 823.431099][T17229] ? tracepoint_probe_unregister+0x837/0xd10 [ 823.437109][T17229] __warn.cold+0x191/0x328 [ 823.441538][T17229] __report_bug+0x296/0x3d0 [ 823.446068][T17229] ? tracepoint_probe_unregister+0x837/0xd10 [ 823.452071][T17229] ? __pfx___report_bug+0x10/0x10 [ 823.457131][T17229] ? rcu_is_watching+0x12/0xc0 [ 823.461913][T17229] ? trace_contention_end+0x122/0x170 [ 823.467298][T17229] ? __mutex_lock+0x26d/0x1b10 [ 823.472084][T17229] ? tracepoint_probe_unregister+0x31/0xd10 [ 823.477998][T17229] ? rcu_is_watching+0x12/0xc0 [ 823.482779][T17229] ? trace_contention_end+0x122/0x170 [ 823.488160][T17229] ? tracepoint_probe_unregister+0x837/0xd10 [ 823.494162][T17229] report_bug+0xb2/0x220 [ 823.498422][T17229] ? tracepoint_probe_unregister+0x837/0xd10 [ 823.504428][T17229] handle_bug+0x16a/0x2a0 [ 823.508766][T17229] exc_invalid_op+0x17/0x50 [ 823.513276][T17229] asm_exc_invalid_op+0x1a/0x20 [ 823.518160][T17229] RIP: 0010:tracepoint_probe_unregister+0x837/0xd10 [ 823.524772][T17229] Code: cc e8 4d 23 fe ff 48 8d 73 f0 48 c7 c2 20 c8 09 82 48 c7 c7 80 30 87 8e e8 b6 24 e2 ff eb ba bb fe ff ff ff e8 2a 23 fe ff 90 <0f> 0b 90 eb ac e8 1f 23 fe ff 49 89 dd 45 31 ff 49 be 00 00 00 00 [ 823.544389][T17229] RSP: 0018:ffffc9000512f8b0 EFLAGS: 00010287 [ 823.550464][T17229] RAX: 000000000004844e RBX: 00000000fffffffe RCX: ffffc90007063000 [ 823.558457][T17229] RDX: 0000000000080000 RSI: ffffffff8209d916 RDI: ffff88801eaa5d00 [ 823.566435][T17229] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 823.574411][T17229] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff82102f10 [ 823.582386][T17229] R13: 0000000000000202 R14: 0000000000000002 R15: ffffffff8ec49180 [ 823.590377][T17229] ? __pfx_probe_sched_switch+0x10/0x10 [ 823.595951][T17229] ? tracepoint_probe_unregister+0x836/0xd10 [ 823.601967][T17229] tracing_stop_cmdline_record+0x66/0xa0 [ 823.607621][T17229] __ftrace_event_enable_disable+0x5c4/0x6f0 [ 823.613627][T17229] ftrace_event_set_open+0x224/0x380 [ 823.618937][T17229] do_dentry_open+0x6ab/0x14d0 [ 823.623712][T17229] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 823.629548][T17229] vfs_open+0x82/0x3f0 [ 823.633645][T17229] path_openat+0x208c/0x31a0 [ 823.638262][T17229] ? __pfx_path_openat+0x10/0x10 [ 823.643228][T17229] do_file_open+0x20e/0x430 [ 823.647753][T17229] ? __pfx_do_file_open+0x10/0x10 [ 823.652824][T17229] ? alloc_fd+0x476/0x790 [ 823.657178][T17229] ? do_getname+0x191/0x390 [ 823.661706][T17229] do_sys_openat2+0x10d/0x1e0 [ 823.666410][T17229] ? __pfx_do_sys_openat2+0x10/0x10 [ 823.671632][T17229] ? find_held_lock+0x2b/0x80 [ 823.676332][T17229] __x64_sys_openat+0x12d/0x210 [ 823.681209][T17229] ? __pfx___x64_sys_openat+0x10/0x10 [ 823.686612][T17229] ? rcu_is_watching+0x12/0xc0 [ 823.691391][T17229] do_syscall_64+0x115/0x840 [ 823.696005][T17229] ? clear_bhb_loop+0x40/0x90 [ 823.700699][T17229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.706603][T17229] RIP: 0033:0x7f7dbb19ce59 [ 823.711029][T17229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 823.730648][T17229] RSP: 002b:00007f7dbc063028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 823.739071][T17229] RAX: ffffffffffffffda RBX: 00007f7dbb416090 RCX: 00007f7dbb19ce59 [ 823.747051][T17229] RDX: 0000000000020201 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 823.755027][T17229] RBP: 00007f7dbb232d6f R08: 0000000000000000 R09: 0000000000000000 [ 823.763002][T17229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 823.770977][T17229] R13: 00007f7dbb416128 R14: 00007f7dbb416090 R15: 00007fffe24d78a8 [ 823.778974][T17229] [ 823.782066][T17229] Kernel Offset: disabled [ 823.786398][T17229] Rebooting in 86400 seconds..