last executing test programs: 10.973847226s ago: executing program 2 (id=557): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab83, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/input/event0\x00', 0x325d42, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000001180), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, r2, 0x10, 0x70bd2c, 0x25dfdbfa, {0xa, 0x0, 0xa00}, [@CTRL_ATTR_FAMILY_NAME={0x0, 0x2, '%/\x00\xe2\xa8\\A\xe7Z\x02q[-\x00\x00\x00\x11\x00\xdf(\xff\xfee\xc3\x17py\x9f\xda\xb88\xaa\xf6q*\x82\xe6(\xc9\xe6B\x9aJ82\v-i(c\x92{\xd7D\xb4\xf7\xb4\t\xb2\x98b\xd3%vu\xd4\xfd\t\xd7J\x83\x19)\xb1\x00[\xdd(\xef?\xc5\xae(\x84\xefjx\xfe\xdb\xeb\xbceaAw\x1eW\x12Bh\xc3y2\xc9\x0e\xc9\x99#\x92j\x97\xbbDOi\x03\xa4\x11\x02Ff\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000040)=0x3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) write$auto(r3, 0x0, 0x6) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, r2) setsockopt$auto(0xffffffffffffffff, 0x100, 0x5, 0x0, 0x8001) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x81, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) 5.000283747s ago: executing program 3 (id=572): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0xfffffff7, 0xffffffffffffffff) (async) ioctl$auto(0xffffffffffffffff, 0xfffffff7, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) (async) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x150082, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000002c0)={{0x0, 0x2, 0x8000, 0x8, 0x5}, 0x2, 0x8, "69735c1f7eaae22aac67d3fd35ef81bda40bc3c44cce9c95deef49965bbd9b51aa025901301277e5b1af6d70b6fcf571d753212d302d664708decb84ed925987", "6eb045e7940c3233d108a3acba766685d1cbe14b7b9c6c8b7b5f2ae8c91fcb0c56b046df736f6414cd8da91180803441c7b17c1d0f3e72fa1e573e9dcb5b34341473bf5d06ea00", 0x803, 0xffae, 0xffffffffefffffc6, 0x298, 0xcb55, "3ad6aad55a7e9b1fd36d1d3c7f31c37626f26f7e309a68e36aec6aa627d6e73f"}) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000400)={r1, &(0x7f0000000100)="7b297b216597473a05d240c16fbec106fe2dadcdcc", 0xe7, &(0x7f0000000140)="21f5c91cdedd32aa1900a9c48f3c9c71f15c0490617a42b562a98c4c4b30bee5afd0de4a47543848c74e005b575af273f7874e", 0x5, &(0x7f00000001c0)="30fea19f719890980f96ebf61e930b3756c55b433269cab52db044bbb4e2d55079d350a9867cd169a70b90ad4b781f372dc5f21076bf1b1574b00d98792e2b64433de36ccb4316af04d8cf1f0faa8f539542f1c30721ab3a4c1641beb5826b4faf6575cb14228b239d1e93bc3d336582236f9979fc5b2f05666cb7ff2b7a83395c48de89a12f88ab54fc1f1bd6df412dd56c644e7cc10a31c2b233268094d720542acfec1fa0dc2937139fa838b1aa143d831c7141a7ff416c7533d9f7ec82978ac480b5279882f7", &(0x7f00000003c0)=0xfffffffa}) (async) ioctl$auto_XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000400)={r1, &(0x7f0000000100)="7b297b216597473a05d240c16fbec106fe2dadcdcc", 0xe7, &(0x7f0000000140)="21f5c91cdedd32aa1900a9c48f3c9c71f15c0490617a42b562a98c4c4b30bee5afd0de4a47543848c74e005b575af273f7874e", 0x5, &(0x7f00000001c0)="30fea19f719890980f96ebf61e930b3756c55b433269cab52db044bbb4e2d55079d350a9867cd169a70b90ad4b781f372dc5f21076bf1b1574b00d98792e2b64433de36ccb4316af04d8cf1f0faa8f539542f1c30721ab3a4c1641beb5826b4faf6575cb14228b239d1e93bc3d336582236f9979fc5b2f05666cb7ff2b7a83395c48de89a12f88ab54fc1f1bd6df412dd56c644e7cc10a31c2b233268094d720542acfec1fa0dc2937139fa838b1aa143d831c7141a7ff416c7533d9f7ec82978ac480b5279882f7", &(0x7f00000003c0)=0xfffffffa}) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8083, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000040)=0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/workqueue/scsi_tmf_0/per_cpu\x00', 0x8001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0000, 0x0) close_range$auto(0x2, 0x8, 0x0) socketcall$auto(0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) (async) ioctl$auto(0x3, 0xae60, 0x10000000000402) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) madvise$auto(0x100000000, 0x7, 0xd) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) unshare$auto(0x40000080) setsockopt$auto(0xffffffffffffffff, 0x5, 0x7b, 0x0, 0x8) 4.798984974s ago: executing program 1 (id=574): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x42400, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x242182, 0x0) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) ioctl$auto_VHOST_SET_VRING_ERR2(r0, 0x4008af22, &(0x7f0000000200)={0xffffffff, r0}) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_FRAME(r1, 0x0, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) madvise$auto(0xc000000000000, 0x6, 0x3) ioperm$auto(0x800000005f4, 0x5ad2, 0xffff) write$auto(0xffffffffffffffff, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) ioperm$auto(0xffffffffffbfffff, 0x10100000c, 0x3) mmap$auto(0x1c5a, 0xfffffffffffffffe, 0xdb, 0x15, 0x401, 0xa) pipe$auto(0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) getsockopt$auto_SO_ERROR(r2, 0xd, 0x4, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), r3) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000000000000000000000008008b31c8fafa3bec91730477c2247046253be18679f08f607074fca58f1b369eb37b7caf9ab6ec1e09264d1257ac16b7b691b455b193391dc8844d5683847ac7f0267c1a6d92444ee42a28b0533a0189047ecb87a429fb01344a6a5da8738eae12d0fe8703d9c9b5ef951e8a294649c431b0ec4297510c4d78e73c029144e18d07c29a7896a60ec6185e2a5fbb4a1411c1501fb5a2d18778b1fb3f13dd3b6e9eb7deb107a0bf73b37bcb9eb8bf4", @ANYRES16=r4, @ANYBLOB="010027bd7000fddbdf252c000003"], 0x14}, 0x1, 0x1000060}, 0x400c080) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000040)={0x8020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3}, 0x58) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000020c0)=""/4093, 0xffd) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) 4.555680206s ago: executing program 2 (id=576): select$auto(0xd, &(0x7f00000000c0)={[0x5, 0x9, 0x3, 0x3, 0x2, 0xb8, 0x0, 0x9, 0x8000000000000001, 0xffffffffffffff73, 0x8001, 0x2, 0x4, 0x8, 0x803e7, 0x8]}, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x147) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x40203, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c00, 0xfffffffffffffffd) ppoll$auto(&(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x3}, 0x3, 0x0, 0x0, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x20, 0x0) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x5) ioctl$auto_VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000040)) mmap$auto(0x0, 0x7, 0xde, 0xeb1, 0x401, 0x8000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x4604, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) sysfs$auto(0x3, 0x7, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) sendmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x4, 0x4008) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000600)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x00\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\xf6Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9N:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\xbe\xb2\x02\xfe\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xa2\xdd\xc5{\xfa\xe0\x90\x8f\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/010/001\x00', 0x210500, 0x0) 4.400259698s ago: executing program 1 (id=577): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2d41, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = socket(0x23, 0x2, 0x0) ioctl$auto(r2, 0x80000541b, 0x38) writev$auto(r1, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/ptp/ptp0/n_external_timestamps\x00', 0x8a684, 0x0) unshare$auto(0x8000000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x101, 0x7fff) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range$auto(r4, 0xffffffffffffffff, 0x2) fanotify_init$auto(0xc00, 0x2000000000002) openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/ethtool/ring/rx_jumbo_max_pending\x00', 0x40000, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) 4.170380076s ago: executing program 1 (id=578): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/fib_multipath_hash_fields\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) (async) r1 = socket(0xa, 0x801, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) (async) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) ioctl$auto_EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, 0x0) socket(0x8, 0x800, 0x2f) (async) socket(0x8, 0x800, 0x2f) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x44eb2, 0xd, 0x300000000000) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) (async) semctl$auto_SEM_INFO(0x0, 0xfffffffd, 0x13, 0x1) r3 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r3, 0x107, 0xd, 0x0, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/tcp\x00', 0x181800, 0x0) read$auto(r4, &(0x7f0000000000)='/proc/scsi/sg/devices\x00', 0x1) fadvise64$auto_POSIX_FADV_SEQUENTIAL(r1, 0x8, 0x1ff, 0x2) read$auto(0x3, 0x0, 0xfdef) getrandom$auto(0x0, 0x6000000, 0x3) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0x1c, 0x92f1, 0x4}, 0xa) 3.869927693s ago: executing program 0 (id=579): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) lsetxattr$auto(&(0x7f0000000d40)='./file0\x00', &(0x7f0000000280)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', &(0x7f0000001340), 0x2, 0x0) write$auto(r0, &(0x7f00000004c0)='\x04>\x01\r\x00\xa2\xaa\xc3\xa0b_<\x0e}\x86\x14*\xc9\xe0\xf6\xe1\x00\x00\xbdY\xb8\xa7T\xf4\x93\xd0\a\xb9\x88\xa3}f\xcd\xdc\x95\xae\x05\xcd\x92\xad[r\xae!\xf3s\xe2\xc5\"m\x9c\xad\x875\x0f\x0e\xf7\xa7\x9d\xf14n/h\xee\xe8A\xc8\xff\xb31l\xd8U\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00pd\a%\x00\x00\x15b\xb0\xe3\x10\x0f\x00\x8a\xdc\x94\xb4\xbbEE\x03\x00\x00\x00\xd2\xc7\xb1$\x8205\x8d\xc2\bl\xaf\x91)\x18\xc5-\x15\xda\x7f\xbd\xd4r\xc9\x7f\x83\x13\xad\xf2\xa2\af\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x5, 0xfffffffd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000040)=0x3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mremap$auto(0xfffffffffffffe01, 0x40000000100005, 0x843, 0x3, 0x2) mmap$auto(0x665, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) write$auto(0x3, 0x0, 0xffd8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r3 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r3, 0x11, 0x67, 0x0, 0x8) 2.694203239s ago: executing program 2 (id=582): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x1, 0x7ff) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) write$auto(r1, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0xb) mlockall$auto(0x7) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000001380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001340)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400008036add0a834c94c1c0384848183ddbcce2e083e8f5993201e333495fa6f269c05ea8b29d5c6906f0606aef4c11fbfb72fdcaf3fa026abfed6aec746d990c25c6b54ac88e6c135aa56882155e455474f990351d19bc1", @ANYRES16=r4, @ANYBLOB="00022bbd7000fbdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000085) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/xfrm_stat\x00', 0x80080, 0x0) read$auto(r6, &(0x7f0000000040)='/,\x00', 0x5642) r7 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r7, 0x0, 0x80000000006) bpf$auto_BPF_MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)=@bpf_attr_3={0x800, 0x1, 0x8, 0x8, 0xffffffff, 0x3, 0x2c, 0x80, 0x3d1f, "6e1b4e6ea164040259f19765ddd5903f", 0x0, 0xf, r6, 0xa, 0x7, 0x3ff, 0x200, 0x0, 0x3ff, 0xf, @attach_btf_obj_fd, 0x6, 0x5, 0xffffffffffffffff, 0x5, 0x101, r6, r7}, 0x80000001) sendmsg$auto_NL80211_CMD_DISCONNECT(r7, &(0x7f0000002500)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000024c0)={&(0x7f00000013c0)={0x10cc, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MLD_ADDR={0x8b, 0x13a, "c587f1c03005ea6108d7e3e78a6432f2e1f3da904e0d17e6cff8e8ac580153783d0f164e0b86e985af93ba84ba53cd55478959cafcc8eb2c56db51ef73c4f14430e9dec05ec14c8ffd3527ba262504d7b4adcfe24180fe540f1c15e7b0880fe13631dd651cc1181b2b55edfc77ffb0fa99c0b2a4c1a4db3224a1f62ac4370170c68f2f77e8b575"}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x2}, @NL80211_ATTR_S1G_CAPABILITY={0x7e, 0x128, "d4a2fe9b7d19c89621a4f5b19a7b045794bf597b952750fff042af9d2ddf42271d1df6ad30ea32e19867caf916f90c35b58fd8db4c2645fb43940e72d521d01491becd24fbfffcadf6d666f814bb516d76af932d5616e445421044bc950bc27b6287e7c071f89257c3f1f73cd0dc9656027f127a705964188824"}, @NL80211_ATTR_MAC_MASK={0x5, 0xd7, ']'}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x38c, 0x2c, 0x0, 0x1, [@typed={0x8, 0x80, 0x0, 0x0, @fd=r6}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@empty}, @generic="a8e8443267eab980c83a0b97ac3b1588a0a2a4d8589e3d81627a459aadffa18282c1ae7f622549f94f646d936952784343ea2187232e02051b6748837358f0359c4cbadc69fbd7bbc412e40ba12bb432de5b67af9f0aa6725f42ed75af024a862e5125f7fef66c6a624e98a3922bf7829b7ef956502c1936305f34b9d8370bd2c989113e2c52f4440ba4bd4793c592afd84ab123a420609007cc443911fe2e4ec3e422c930067516f1c32ca917ab101a", @nested={0xf1, 0xb4, 0x0, 0x1, [@nested={0x4, 0x29}, @generic="d39c09896fd291bdef4a2fa9c5bedf7851e5c1bb6126bd07040d5640a80e77cb40645189b895a648bab0d63782f3d125a125b7c4c344ddab44eb91788b354756bef52c1aaa0b973d840c46ab7d0d0b8b85e823da57c1d11f9dfb458d8b03acaf3b86c8e6946c278e8790f08f99a77d774ad1a1faa2ddaba37fa083ca2c6fd11adeb2bd58e9bd8f0dcd22edfd887910b8baea4b80b55615f580eb13f32aeb64e5c7c4cc97641aa2237ee58c072da5351414de1cf27230ced470911344b49a24ac3e299135e159cd7a8adccd77a5bb35e0227cb97c0d1483d7c33d7a654dbb52cba6897e1147a67e2206"]}, @nested={0x1b6, 0xc1, 0x0, 0x1, [@generic="4393b067aeb32c317f57cd0269fa11eec564e45e3e3336fd99d3067ea1f03acca8b7fc7fe4389e992c9e96e105506f999229d521e8ff753273ca3d11485f1e8eba040c1d4de61621283b856bfad4080073b60667f4ff73f5b84e514cef0ba248671a1b62482b8f877be4ea01acfe5ad1a1d56ffda3ed43588178527d74ab272c3953815c787969348bdc14bb28db01042eb1a49b80004c13b2179c05edb537381f5d7dcad542bae1fb723bb3858c4d03500a088cb59802430322492747ddffc7a2c501684db5ac085a5d0d2e81600699214cb4d4fd653bbe53af4344f8", @generic="256bc0781931822531b8de41cc6118b6af8cf61cd5ccfd5b5c7118e9c1ffbc55816d8c76fa485ee1b4b2b3315ad1394c093b164be6a70a7d5e998dfe629db3ea25d037ade74f7163508e1811225e38cd913a66d5ca965c42ba8c2e9ead4a8a8197c07799060ac9a639e9e12ed57409363acb1e00f003d1469e2cb43dce4b6c8da2a9d81ca744695cc95557dabcc29d5f38b249c428070a07d961a6a662d2bb62d5af2cb0a6b1640e99e5cadb350a516fe6e92ab8de6b4b8fd6b194d87e6cb8ac4919421d27b547a2d1a744b6b0", @typed={0x8, 0xb1, 0x0, 0x0, @uid}]}, @typed={0x8, 0x24, 0x0, 0x0, @pid=r0}, @typed={0x8, 0x24, 0x0, 0x0, @fd=r1}]}, @NL80211_ATTR_FILS_CACHE_ID={0xcd, 0xfd, "126d03f5624f4288ff85bc22c621cfc9e0088dc8f54ac2a11bfa52d7448b5d16758b9bc07c26778ee976a245580f11c7c66495c98be2f0872c4584f1d123b1f5854a69958422697a16ff035d52c8e7aa727b0bb4644737c229d5127ec16de70b7e86fab7758c80ea11ad6c3f4105c3d193bac0e24903c713b94d0f476ed26d6afb7f048d27f99a88251a10c0edb1d2837447217bb0d18ad57f667ebe5835b0073a2a9a8000696a1272754db94475edebe4c11b68bb132531514f1cea64d604004e9c76f2682e873b34"}, @NL80211_ATTR_UNSOL_BCAST_PROBE_RESP={0xb30, 0x127, 0x0, 0x1, [@NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x7e2, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_TMPL={0x340, 0x2, "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"}, @NL80211_UNSOL_BCAST_PROBE_RESP_ATTR_INT={0x8, 0x1, 0x2}]}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x10}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x10cc}, 0x1, 0x0, 0x0, 0x20040010}, 0x4000040) signalfd$auto(r7, 0x0, 0x8) waitid$auto_P_PIDFD(0x3, r7, &(0x7f00000000c0)={@siginfo_0_0={0x80000000, 0xfff, 0x6, @_sigpoll={0x2, r5}}}, 0x9, &(0x7f0000000200)={{0xff, 0xc}, {0x2, 0xfed}, 0x608, 0x8000000000000000, 0x9, 0x101, 0xfffffffffffffffa, 0x6, 0x8000, 0x9, 0x8, 0x2, 0x800, 0x8, 0x4, 0x3}) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r8 = socket(0x2, 0x1, 0x106) open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) lsetxattr$auto(&(0x7f0000003080)='./file0\x00', &(0x7f00000030c0)='-\x00', &(0x7f0000003100), 0x7, 0x3) setreuid$auto(0xffffffffffffffff, 0x8) setsockopt$auto(r8, 0x6, 0xd, &(0x7f0000000140)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00}\xc9\xd0ghB\x8a\n\x8bw\xc8\x9f\x8f\xd1\xd0\xc3i\xd4\x8cO\x90\xaf?J\t\xce%\xcb\xb7Sq)\x12k\xb6\xa7(\\Vpm\xc6Q6\xe2\x0f\xae\xd6\x15\\\xf3\xefOA\xf1G\n\xd6u\x9b\x18+\x83\xc9g*v@\x90\xc6\xc2\xb9\n\a]\x86VDLp\xa2\xb0\xbd`\x144\xb2', 0x4) ptrace$auto_PTRACE_SECCOMP_GET_METADATA(0x420d, r0, 0x62, 0x27dd) 2.638094619s ago: executing program 3 (id=583): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="13002cbd7040450e531c87abd4f908000300", @ANYRES32=r4, @ANYBLOB="0800610002000000080062"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) acct$auto(&(0x7f0000000200)='/dev/virtual_nci\x00') setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket(0x2, 0x801, 0x106) getsockopt$auto(r5, 0x11c, 0x3, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x80}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x7f}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x5, 0x13, '^'}, @NL80211_ATTR_FILS_ERP_USERNAME={0xe, 0xf9, "42dc6299626727a087d5"}, @NL80211_ATTR_MLO_SUPPORT={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008054}, 0x804) syz_genetlink_get_family_id$auto_psample(&(0x7f0000000000), r1) close_range$auto(0x2, 0x8, 0x0) 2.108347037s ago: executing program 0 (id=584): mmap$auto(0x0, 0xe97f, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r0 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r1 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) r2 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0xfffffffffffffb52, 0x6, 0x4002008d, 0x1, 0x5, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001e, 0x7, 0xa, 0x9, 0x2, 0x6]}, 0x0) wait4$auto(r1, 0x0, 0x80000001, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000880)={&(0x7f0000000740)={0x114, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc0, 0x1, 0x0, 0x1, [@typed={0xc, 0x2f, 0x0, 0x0, @u64=0x7}, @generic="4173fe849ec514c647cf66500b600abfbb7201b8169bdf152e7967eb50b063b8462d91f7d8b32d6b01b1322404eb42df4e0b5515769945956fa38626847e7df88593cdaf51d05505cc12e47036049c1ffe5ef0d729336892b6cc4fff4c90cb36a4f442265e255eec47bd6ece7bb5042aad7d316a13354175d4036056dd541697ad1f953f", @generic="83edc69ce62089fe325acc9c99029f9e6165cd7b89cd937d7cf2f18d2b7c5519e40501320e7cbe265be8b016"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x3f, 0x1, 0x0, 0x1, [@generic="5424f4f477c0de6cd07269b8c9bcf4310a118ae201265a326c4a9111b1268619731b314ece0e4a", @typed={0xc, 0x7e, 0x0, 0x0, @u64=0x1}, @typed={0x8, 0xef, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000", @ANYBLOB="040006"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x800) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000005c0), r3) sendmsg$auto_MACSEC_CMD_ADD_RXSC(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="30100000", @ANYRES16=r4, @ANYBLOB="f51b26bd7000fedbdf2501000000080003800400370008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x1030}, 0x1, 0x0, 0x0, 0x20008090}, 0x4000) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f0000000680)={&(0x7f0000000000), 0xc, &(0x7f0000000640)={&(0x7f0000000340)={0x26c, r4, 0x0, 0x70bd26, 0x25dfdbfd, {}, [@MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_RXSC_CONFIG={0x160, 0x2, 0x0, 0x1, [@nested={0x15b, 0x125, 0x0, 0x1, [@generic="12187bfe322f6693ecd3342da069be4dcd0168c6ade26b55f9a6f951c4813b330e17fc13b39539377ead68d4bbab6aa78cb551b491a02f170ead5cb03627ac322945ca98b36332c879b6fa75b124066948de7f7761ecd1037a533dc9ec4e680c6e7209f67d3c3fa49fe912ee0c96f761d096814b410513cedfdd0afe3f00e2a5ec0fa8dd50a51b1e37308c804c8fa0f73ee902831700e79886f0359a7f61bf8d8522b2a0534a4b407eeac6204bf94e5e0c8e01503b05a95e21cbff3f3853463e90ec71165a82f9a409abe445a755dae9e86c4c1cba7df7992d2b3ca9d94b9c3e7ecdf854ea2f9253a9a2090aadb7ce0a9c", @typed={0x8, 0xef, 0x0, 0x0, @u32=0x2}, @generic="446c3bae1407d6f52212ea0acc77b0bbd66c57e7f23741819445a6f3d4e7bf98c0b473baa5086d582e0366821558aa75acc805aad590f4c680725f36a1af6627e965a9be1f46ad9a4ae9c103e2aedfcbe9dd1e96c01fb7d6358dfe588151"]}]}, @MACSEC_ATTR_SA_CONFIG={0xf0, 0x3, 0x0, 0x1, [@generic="317395eefeef337b6b55bec0f63e55bbd28d11315819f57518690255908a72e211611e871396918a2d85e9b7a59d4bb53da681646ac3692f24c35c8aaea9f89b8a96bf3ebecf2ba6488368e717d11f8462c2db9d5140fa6c1b62633d7ef1c8ee96be8ce4ed9ac5784e00c994b4f5e8198f0644cc3df2d2a83ff3ced427c92216c304be63e2f86552c8838174d64ea14b6b0772b4b316fb29defd1943b1829454e4779f4b4c2683b942c74dd0b75d7bc96efddc5f5a34d06827e2af882ae5723918a1513f6eafd5", @generic="5e0f7fd82b0adeb124e37b3a5f3486f2f587ad642c7eae9295", @typed={0x4, 0xe5}, @typed={0x8, 0x16, 0x0, 0x0, @u32=0x2}]}]}, 0x26c}}, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/block/nbd2/sched/starved\x00', 0x101000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r5, &(0x7f00000001c0)=""/70, 0x46) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0xc, @empty}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 1.905395932s ago: executing program 3 (id=585): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/midiC2D0\x00', 0x44001, 0x0) (async) unshare$auto(0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=r0, @ANYBLOB="bcfeed7e47dc8f831ef9a2deb96335a71a0cd607078ae162033d5dad37f7273289ba0e7cc2d62deff5a7ee1903759b903b1ebc737775ed05e92fa507809f037bf5409590a5a4bbcb4799439cd0a7ee40ce6b33e4ccd544354c8b85b21b3482edea6e785452b2fa464b97561acf64941488810ea3c45710583422ee5e0440a89080eb32fa83b88bf5794dbf1a926a627aa3cdfb0fc9b05464f41237952bd9a9b3586b8f2c9196a4b923545b741b2447976ffdd7a03f96caa7c54e030ed1c4c186775981583e97ba75e4f140606c1f11b7dfd348853a8aa041bd0ba646ffdd1c9c616b8090d274aa77d207f2bf272a764c3325", @ANYBLOB="01002ebd7000fbdbdf25030000001c73e7d2a714a85ad822fcc8116528933f8502db6a8a27a814695200100000a3a3407e9761a5c82908e719c5153570d8f4680ce35d622e64dcb327f9809d4ecd8d"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24040804) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x20a00, 0x0) (async, rerun: 64) r4 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) (rerun: 64) ioctl$auto_UBI_IOCATT(r4, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r4, 0x40046f41, 0x0) (async, rerun: 32) ioctl$auto_UBI_IOCDET(r4, 0x40046f41, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x3, 0x0, 0x4b34) setsockopt$auto_SO_BUSY_POLL_BUDGET(r3, 0x7, 0x46, &(0x7f00000001c0)='\'%^\x00', 0x81) sendmsg$auto_TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x48010) (async, rerun: 64) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x200681, 0x0) (rerun: 64) socket(0x3, 0x2, 0x7ff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async, rerun: 64) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 64) mmap$auto(0xffffffffffffffc0, 0x7, 0x4000000000db, 0x15, r1, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 64) socket(0x18, 0x2, 0x0) (rerun: 64) socket(0x2, 0x5, 0x8084) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000280)=@in={0x2, 0x7, @dev={0xac, 0x14, 0x14, 0x31}}, 0x54) (async, rerun: 64) fsetxattr$auto(r5, 0x0, 0x0, 0x4, 0x100) (async) prctl$auto(0x3e, 0x2, 0x0, 0x5, 0x0) (async, rerun: 64) setitimer$auto(0x2, &(0x7f0000000040)={{0x42e, 0x5}, {0x20000000000, 0xf5fc8d9}}, 0x0) (rerun: 64) 1.237400235s ago: executing program 0 (id=586): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2d41, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = socket(0x23, 0x2, 0x0) ioctl$auto(r2, 0x80000541b, 0x38) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8a684, 0x0) unshare$auto(0x8000000) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x76, 0x0, 0x8) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) pread64$auto(r3, 0x0, 0x101, 0x7fff) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x400, 0x0) close_range$auto(r4, 0xffffffffffffffff, 0x2) fanotify_init$auto(0xc00, 0x2000000000002) openat$auto_fops_u32_(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/ethtool/ring/rx_jumbo_max_pending\x00', 0x40000, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) 962.063018ms ago: executing program 2 (id=587): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6abc2, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port5/location\x00', 0x0, 0x0) sendfile$auto(r1, r1, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket(0x2, 0xa, 0x1) socket(0xa, 0x1, 0x84) statmount$auto(0x0, &(0x7f0000000180)={0x40a, 0x1, 0x44f, 0x9, 0x1, 0x1007181, 0x5, 0x807, 0x7, 0x7, 0x10001, 0x26, 0x4, 0x200000000001, 0xffffffffff9ff343, 0x3, 0x500000000000000, 0x0, 0x30, 0xfffffffffffffffe, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x5, 0x0, 0x0, [0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x9, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd07, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) ioctl$auto_MON_IOCX_GET(r3, 0x40189206, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/free_buffer\x00', 0x109100, 0xebff) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) madvise$auto(0x0, 0x2003f2, 0x15) unshare$auto(0x20000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x66, 0x200007, 0x8) r4 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000200)=""/36, 0x24) madvise$auto(0x0, 0x2003f0, 0x15) 950.621653ms ago: executing program 0 (id=588): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x104000, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) r2 = open(&(0x7f0000000140)='./cgroup\x00', 0xa000, 0x310) fcntl$auto(r2, 0x402, 0x1) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) read$auto(r1, 0x0, 0x10001) (async, rerun: 64) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000200), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="28010000", @ANYRES16=r3, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x24040070}, 0x800) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) ioctl$auto(r0, 0x551f, 0xf15) (async) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) (async) r5 = socket(0x2, 0x1, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) (async) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000040), 0x19, 0x0, 0x9, 0x0, 0x1f, 0x3}, 0x4}, 0x7, 0x20020004) (async) write$auto(0x3, 0x0, 0x7fffffff) 918.344236ms ago: executing program 1 (id=589): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x5b, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x318f, 0x4, 0x0, 0xff, "50cfeeca8e00"}) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x80802, 0x0) socket(0x2, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) socket(0x23, 0x80805, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/fail-nth\x00', 0x288101, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) close_range$auto(0x2, 0x8, 0x0) 302.348102ms ago: executing program 1 (id=590): r0 = socket$nl_generic(0x10, 0x3, 0x10) fchdir$auto(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x800, 0x10) getdents$auto(r1, 0x0, 0x20000018) mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) open(0x0, 0x161342, 0x100) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) mprotect$auto(0x200000000000, 0x806121, 0x8) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x80082, 0x0) socket(0x2, 0x1, 0x106) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r4, 0x40146f2c, 0x0) r5 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/kpagecgroup\x00', 0x20000, 0x0) r6 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, 0x100000, 0x7fffffffeffc, 0xfffffffffffffffe, 0x1, 0x0, 0xe8, 0x0, 0x2, 0x0, 0x8}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(r5, &(0x7f0000000000)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40005}, 0x24040004) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) r7 = socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000040)=0x8000000000000001) setsockopt$auto_SO_PEEK_OFF(r7, 0x0, 0x2a, &(0x7f0000000080)='/proc/thread-self/pagemap\x00', 0x0) 5.380748ms ago: executing program 0 (id=591): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) (async) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/blkio.bfq.weight_device\x00', 0x2062, 0x0) bind$auto(0x3, 0x0, 0x6d) (async) bind$auto(0x3, 0x0, 0x6d) rseq$auto(0x0, 0x8000, 0x0, 0x6) (async) rseq$auto(0x0, 0x8000, 0x0, 0x6) fsetxattr$auto(r0, &(0x7f0000000240)='.\x00', &(0x7f0000000280)="26c58c6ebbc26a0c64d378d9c1bf382079d63e9955aaa16def513511c18779d26b03936d1c15b9d745166530e658fd8f28fe3e84197b7862c05981e421c88f59762ce36ceb0634dbd8e6fb2117e378297bed6152338b0fe21e470e396f12035cb12bedab1f47432d9e80ce47a37356b64358f66ea476d32815d27abe9525bdff66261e", 0x1, 0x14d) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000001f00), 0x101002, 0x0) io_submit$auto(0x3, 0x1, &(0x7f0000000380)=&(0x7f0000000340)={0x384a835e, 0xbcd, 0x2, 0x0, 0x4, r3, 0x4, 0x1000, 0x1}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101303, 0x0) (async) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101303, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c03, 0x0) write$auto(r3, &(0x7f0000001f40)='!+*\x00', 0x8) setrlimit$auto(0x2, &(0x7f0000000100)={0x0, 0x5}) (async) setrlimit$auto(0x2, &(0x7f0000000100)={0x0, 0x5}) brk$auto(0x4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="033f7d9511f4ed60f5f8d5d821a7ece05c4f969a789599b323bfe5fb807c7f2f4fbc442e514d3d8c5102fa39b51e6107eaaeea641c7fda9c1242b05c8082aa6470517268216aef506c104b724dd78bffcc0000000000000000000000008ac43c637bb206fd4fdb250e2d4e9004dcfa35dc41780edc2097f93a4ef9a615981636ae0c4da331c50c3d951ba569caf4a20d921091400e2d103270d5c993eeb32bf48a4d6d90b9f7ee0b23db6cc575cb04e8d78ec5ebb497df5c6a71b6fe54a21f1a7e8a33a1eeb6a53a724a9c9a0154cd5a96558bdecfe442bd754612630537ce4230a561"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x402c810) r6 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) readv$auto(r6, &(0x7f00000004c0)={&(0x7f0000000440), 0xb}, 0x5) mmap$auto(0x0, 0x7fffffff, 0x6, 0x800000000000eb5, 0xfffffffffffffffa, 0x10000000008001) (async) mmap$auto(0x0, 0x7fffffff, 0x6, 0x800000000000eb5, 0xfffffffffffffffa, 0x10000000008001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x3, 0x0, 0xfffffffffffffff7, 0x13) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0xc004) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0xc004) close_range$auto(r1, r1, 0x0) read$auto_tap_fops_tap(r1, &(0x7f0000000000)=""/159, 0x9f) read$auto_usbdev_file_operations_usb(r4, &(0x7f0000000400)=""/31, 0x1f) 0s ago: executing program 3 (id=592): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x4c0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7000fbdbdf2512e233da08000300", @ANYRES32=r2], 0x24}, 0x1, 0x1400, 0x0, 0x80}, 0x20000084) kernel console output (not intermixed with test programs): over after parsing attributes in process `syz.3.90'. [ 134.299665][ T30] audit: type=1806 audit(1778324212.117:3): xattr="/" res=-22 [ 135.427289][ T6302] FAULT_INJECTION: forcing a failure. [ 135.427289][ T6302] name failslab, interval 1, probability 0, space 0, times 0 [ 135.452147][ T6302] CPU: 1 UID: 0 PID: 6302 Comm: syz.3.99 Not tainted syzkaller #0 PREEMPT(full) [ 135.452191][ T6302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.452211][ T6302] Call Trace: [ 135.452221][ T6302] [ 135.452233][ T6302] dump_stack_lvl+0x100/0x190 [ 135.452278][ T6302] should_fail_ex.cold+0x5/0xa [ 135.452324][ T6302] should_failslab+0xc2/0x120 [ 135.452366][ T6302] __kmalloc_cache_noprof+0x7a/0x6f0 [ 135.452419][ T6302] ? vkms_plane_duplicate_state+0x45/0x130 [ 135.452467][ T6302] vkms_plane_duplicate_state+0x45/0x130 [ 135.452511][ T6302] drm_atomic_get_plane_state+0x279/0x760 [ 135.452570][ T6302] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 135.452608][ T6302] ? rcu_is_watching+0x12/0xc0 [ 135.452669][ T6302] ? __mutex_lock+0x26d/0x1b10 [ 135.452729][ T6302] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 135.452768][ T6302] ? drm_master_internal_acquire+0x21/0x80 [ 135.452868][ T6302] drm_client_modeset_commit_locked+0x14d/0x580 [ 135.452914][ T6302] drm_client_modeset_commit+0x4f/0x80 [ 135.452952][ T6302] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 135.453018][ T6302] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 135.453083][ T6302] drm_fbdev_client_restore+0x1b/0x30 [ 135.453131][ T6302] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 135.453179][ T6302] drm_client_dev_restore+0x205/0x2a0 [ 135.453250][ T6302] drm_release+0x2c6/0x360 [ 135.453306][ T6302] ? __pfx_drm_release+0x10/0x10 [ 135.453363][ T6302] __fput+0x3ff/0xb50 [ 135.453426][ T6302] task_work_run+0x150/0x240 [ 135.453472][ T6302] ? __pfx_task_work_run+0x10/0x10 [ 135.453514][ T6302] ? rcu_is_watching+0x12/0xc0 [ 135.453567][ T6302] exit_to_user_mode_loop+0x100/0x4a0 [ 135.453604][ T6302] ? do_syscall_64+0x519/0xf80 [ 135.453669][ T6302] do_syscall_64+0x6f2/0xf80 [ 135.453723][ T6302] ? clear_bhb_loop+0x40/0x90 [ 135.453769][ T6302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.453807][ T6302] RIP: 0033:0x7f2844d9cdd9 [ 135.453836][ T6302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.453870][ T6302] RSP: 002b:00007f2842ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 135.453903][ T6302] RAX: 0000000000000000 RBX: 00007f2845015fa0 RCX: 00007f2844d9cdd9 [ 135.453926][ T6302] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 135.453953][ T6302] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 135.453974][ T6302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.453994][ T6302] R13: 00007f2845016038 R14: 00007f2845015fa0 R15: 00007ffcb9335bd8 [ 135.454039][ T6302] [ 136.024324][ T6307] FAULT_INJECTION: forcing a failure. [ 136.024324][ T6307] name failslab, interval 1, probability 0, space 0, times 0 [ 136.038520][ T6307] CPU: 1 UID: 0 PID: 6307 Comm: syz.3.101 Not tainted syzkaller #0 PREEMPT(full) [ 136.038561][ T6307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.038579][ T6307] Call Trace: [ 136.038596][ T6307] [ 136.038608][ T6307] dump_stack_lvl+0x100/0x190 [ 136.038649][ T6307] should_fail_ex.cold+0x5/0xa [ 136.038692][ T6307] should_failslab+0xc2/0x120 [ 136.038733][ T6307] __kmalloc_cache_noprof+0x7a/0x6f0 [ 136.038783][ T6307] ? vkms_plane_duplicate_state+0x45/0x130 [ 136.038830][ T6307] vkms_plane_duplicate_state+0x45/0x130 [ 136.038869][ T6307] drm_atomic_get_plane_state+0x279/0x760 [ 136.038923][ T6307] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 136.038958][ T6307] ? rcu_is_watching+0x12/0xc0 [ 136.039006][ T6307] ? __mutex_lock+0x26d/0x1b10 [ 136.039079][ T6307] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 136.039116][ T6307] ? drm_master_internal_acquire+0x21/0x80 [ 136.039213][ T6307] drm_client_modeset_commit_locked+0x14d/0x580 [ 136.039257][ T6307] drm_client_modeset_commit+0x4f/0x80 [ 136.039295][ T6307] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 136.039359][ T6307] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 136.039425][ T6307] drm_fbdev_client_restore+0x1b/0x30 [ 136.039470][ T6307] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 136.039516][ T6307] drm_client_dev_restore+0x205/0x2a0 [ 136.039589][ T6307] drm_release+0x2c6/0x360 [ 136.039645][ T6307] ? __pfx_drm_release+0x10/0x10 [ 136.039700][ T6307] __fput+0x3ff/0xb50 [ 136.039762][ T6307] task_work_run+0x150/0x240 [ 136.039800][ T6307] ? __pfx_task_work_run+0x10/0x10 [ 136.039840][ T6307] ? rcu_is_watching+0x12/0xc0 [ 136.039889][ T6307] exit_to_user_mode_loop+0x100/0x4a0 [ 136.039924][ T6307] ? do_syscall_64+0x519/0xf80 [ 136.039978][ T6307] do_syscall_64+0x6f2/0xf80 [ 136.040028][ T6307] ? clear_bhb_loop+0x40/0x90 [ 136.040071][ T6307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.040107][ T6307] RIP: 0033:0x7f2844d9cdd9 [ 136.040134][ T6307] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.040167][ T6307] RSP: 002b:00007f2842ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 136.040198][ T6307] RAX: 0000000000000000 RBX: 00007f2845015fa0 RCX: 00007f2844d9cdd9 [ 136.040219][ T6307] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 136.040239][ T6307] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 136.040260][ T6307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.040280][ T6307] R13: 00007f2845016038 R14: 00007f2845015fa0 R15: 00007ffcb9335bd8 [ 136.040339][ T6307] [ 136.725776][ T6312] netlink: 'syz.3.103': attribute type 1 has an invalid length. [ 137.173027][ T6327] ICMPv6: process `syz.2.107' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 140.014508][ T6362] vcan0: tx drop: invalid da for name 0x000000000000003f [ 140.281042][ T5639] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 142.358351][ T5639] Bluetooth: hci2: command 0x2016 tx timeout [ 144.438845][ T5631] Bluetooth: hci2: command 0x2016 tx timeout [ 144.898967][ T6461] Device name cannot be null; rc = [-22] [ 145.034646][ T6422] kexec: Could not allocate control_code_buffer [ 146.735332][ T6483] FAULT_INJECTION: forcing a failure. [ 146.735332][ T6483] name failslab, interval 1, probability 0, space 0, times 0 [ 146.790275][ T6483] CPU: 0 UID: 0 PID: 6483 Comm: syz.3.139 Not tainted syzkaller #0 PREEMPT(full) [ 146.790332][ T6483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 146.790352][ T6483] Call Trace: [ 146.790375][ T6483] [ 146.790386][ T6483] dump_stack_lvl+0x100/0x190 [ 146.790427][ T6483] should_fail_ex.cold+0x5/0xa [ 146.790467][ T6483] should_failslab+0xc2/0x120 [ 146.790506][ T6483] __kmalloc_cache_noprof+0x7a/0x6f0 [ 146.790552][ T6483] ? alloc_fs_context+0x57/0xf40 [ 146.790611][ T6483] alloc_fs_context+0x57/0xf40 [ 146.790663][ T6483] mq_init_ns+0x16e/0x820 [ 146.790697][ T6483] copy_ipcs+0x3dd/0x7e0 [ 146.790729][ T6483] create_new_namespaces+0x20a/0xac0 [ 146.790771][ T6483] ? security_capable+0x80/0x260 [ 146.790843][ T6483] unshare_nsproxy_namespaces+0xf2/0x220 [ 146.790892][ T6483] ksys_unshare+0x438/0xab0 [ 146.790945][ T6483] ? __pfx_ksys_unshare+0x10/0x10 [ 146.790994][ T6483] ? xfd_validate_state+0x129/0x190 [ 146.791043][ T6483] __x64_sys_unshare+0x31/0x40 [ 146.791093][ T6483] do_syscall_64+0x10b/0xf80 [ 146.791142][ T6483] ? clear_bhb_loop+0x40/0x90 [ 146.791183][ T6483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.791217][ T6483] RIP: 0033:0x7f2844d9cdd9 [ 146.791243][ T6483] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.791274][ T6483] RSP: 002b:00007f2842ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 146.791305][ T6483] RAX: ffffffffffffffda RBX: 00007f2845015fa0 RCX: 00007f2844d9cdd9 [ 146.791326][ T6483] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 146.791346][ T6483] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 146.791367][ T6483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.791385][ T6483] R13: 00007f2845016038 R14: 00007f2845015fa0 R15: 00007ffcb9335bd8 [ 146.791427][ T6483] [ 147.683218][ T6492] FAULT_INJECTION: forcing a failure. [ 147.683218][ T6492] name failslab, interval 1, probability 0, space 0, times 0 [ 147.731997][ T6492] CPU: 0 UID: 0 PID: 6492 Comm: syz.0.141 Not tainted syzkaller #0 PREEMPT(full) [ 147.732065][ T6492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 147.732098][ T6492] Call Trace: [ 147.732116][ T6492] [ 147.732135][ T6492] dump_stack_lvl+0x100/0x190 [ 147.732183][ T6492] should_fail_ex.cold+0x5/0xa [ 147.732227][ T6492] ? tomoyo_encode2+0xfb/0x3c0 [ 147.732270][ T6492] should_failslab+0xc2/0x120 [ 147.732311][ T6492] __kmalloc_noprof+0xe0/0x850 [ 147.732343][ T6492] ? rcu_is_watching+0x12/0xc0 [ 147.732392][ T6492] tomoyo_encode2+0xfb/0x3c0 [ 147.732443][ T6492] tomoyo_encode+0x29/0x50 [ 147.732484][ T6492] tomoyo_realpath_from_path+0x18c/0x690 [ 147.732553][ T6492] tomoyo_check_open_permission+0x2af/0x3c0 [ 147.732597][ T6492] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 147.732652][ T6492] ? hook_file_open+0x24e/0x7a0 [ 147.732713][ T6492] ? lock_acquire+0x1b1/0x370 [ 147.732760][ T6492] tomoyo_file_open+0x6b/0x90 [ 147.732814][ T6492] security_file_open+0xb5/0x1e0 [ 147.732857][ T6492] do_dentry_open+0x5aa/0x1660 [ 147.732914][ T6492] vfs_open+0x82/0x3f0 [ 147.732971][ T6492] path_openat+0x208c/0x31a0 [ 147.733032][ T6492] ? __pfx_path_openat+0x10/0x10 [ 147.733093][ T6492] do_file_open+0x20e/0x430 [ 147.733142][ T6492] ? __pfx_do_file_open+0x10/0x10 [ 147.733217][ T6492] ? alloc_fd+0x476/0x790 [ 147.733265][ T6492] ? do_getname+0x191/0x390 [ 147.733323][ T6492] do_sys_openat2+0x10d/0x1e0 [ 147.733378][ T6492] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.733448][ T6492] __x64_sys_openat+0x12d/0x210 [ 147.733513][ T6492] ? __pfx___x64_sys_openat+0x10/0x10 [ 147.733580][ T6492] ? rcu_is_watching+0x12/0xc0 [ 147.733629][ T6492] do_syscall_64+0x10b/0xf80 [ 147.733680][ T6492] ? clear_bhb_loop+0x40/0x90 [ 147.733723][ T6492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.733758][ T6492] RIP: 0033:0x7fc235f9cdd9 [ 147.733793][ T6492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 147.733827][ T6492] RSP: 002b:00007fc2341ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.733860][ T6492] RAX: ffffffffffffffda RBX: 00007fc236215fa0 RCX: 00007fc235f9cdd9 [ 147.733883][ T6492] RDX: 0000000000000082 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 147.733904][ T6492] RBP: 00007fc236032d69 R08: 0000000000000000 R09: 0000000000000000 [ 147.733922][ T6492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.733941][ T6492] R13: 00007fc236216038 R14: 00007fc236215fa0 R15: 00007ffffa0c1d08 [ 147.733985][ T6492] [ 148.043437][ T6492] ERROR: Out of memory at tomoyo_realpath_from_path. [ 151.027053][ T6538] netlink: 8 bytes leftover after parsing attributes in process `syz.3.150'. [ 151.862839][ T6552] Device name cannot be null; rc = [-22] [ 152.214431][ T6547] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 152.271372][ T6547] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 152.353268][ T6547] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 152.430116][ T6547] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 152.454408][ T6547] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.514830][ T6547] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 152.580817][ T6547] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 152.605990][ T6547] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.635617][ T6547] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 152.696505][ T6547] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 152.724455][ T6547] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 152.763222][ T6547] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 153.646870][ T6564] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 153.798358][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.931893][ T6570] FAULT_INJECTION: forcing a failure. [ 153.931893][ T6570] name failslab, interval 1, probability 0, space 0, times 0 [ 153.964276][ T6570] CPU: 1 UID: 0 PID: 6570 Comm: syz.1.159 Not tainted syzkaller #0 PREEMPT(full) [ 153.964321][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.964341][ T6570] Call Trace: [ 153.964352][ T6570] [ 153.964364][ T6570] dump_stack_lvl+0x100/0x190 [ 153.964409][ T6570] should_fail_ex.cold+0x5/0xa [ 153.964453][ T6570] should_failslab+0xc2/0x120 [ 153.964495][ T6570] __kmalloc_cache_noprof+0x7a/0x6f0 [ 153.964546][ T6570] ? vidtv_psi_pmt_table_init+0x4c/0x430 [ 153.964608][ T6570] vidtv_psi_pmt_table_init+0x4c/0x430 [ 153.964671][ T6570] vidtv_psi_pmt_create_sec_for_each_pat_entry+0x293/0x670 [ 153.964737][ T6570] vidtv_channel_si_init+0xf2d/0x18f0 [ 153.964808][ T6570] vidtv_mux_init+0x526/0xbf0 [ 153.964846][ T6570] vidtv_start_feed+0x34e/0x500 [ 153.964894][ T6570] ? __pfx_vidtv_start_feed+0x10/0x10 [ 153.964940][ T6570] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 153.964994][ T6570] ? mark_held_locks+0x40/0x70 [ 153.965036][ T6570] ? __pfx_vidtv_start_feed+0x10/0x10 [ 153.965079][ T6570] dmx_ts_feed_start_filtering+0xf6/0x220 [ 153.965134][ T6570] dvb_dmxdev_start_feed+0x273/0x3f0 [ 153.965179][ T6570] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 153.965225][ T6570] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 153.965271][ T6570] dvb_demux_do_ioctl+0xe64/0x1200 [ 153.965327][ T6570] dvb_usercopy+0x167/0x340 [ 153.965362][ T6570] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 153.965406][ T6570] ? __pfx_dvb_usercopy+0x10/0x10 [ 153.965460][ T6570] ? __fget_files+0x21f/0x3d0 [ 153.965511][ T6570] dvb_demux_ioctl+0x29/0x40 [ 153.965547][ T6570] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 153.965585][ T6570] __x64_sys_ioctl+0x18e/0x210 [ 153.965625][ T6570] do_syscall_64+0x10b/0xf80 [ 153.965704][ T6570] ? clear_bhb_loop+0x40/0x90 [ 153.965747][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.965784][ T6570] RIP: 0033:0x7f9c00f9cdd9 [ 153.965812][ T6570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.965845][ T6570] RSP: 002b:00007f9c01eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.965877][ T6570] RAX: ffffffffffffffda RBX: 00007f9c01215fa0 RCX: 00007f9c00f9cdd9 [ 153.965898][ T6570] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000006 [ 153.965919][ T6570] RBP: 00007f9c01032d69 R08: 0000000000000000 R09: 0000000000000000 [ 153.965939][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.965959][ T6570] R13: 00007f9c01216038 R14: 00007f9c01215fa0 R15: 00007ffc754d5238 [ 153.966005][ T6570] [ 154.328187][ T6571] futex_wake_op: syz.3.158 tries to shift op by -2048; fix this program [ 154.411172][ T6572] 0x000000000001-0x000000020000 : "" [ 154.441242][ T5639] Bluetooth: hci1: command 0x2016 tx timeout [ 154.470754][ T6572] ftl_cs: FTL header corrupt! [ 154.602909][ T5639] Bluetooth: hci2: command 0x2016 tx timeout [ 154.758350][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.111665][ T6592] FAULT_INJECTION: forcing a failure. [ 155.111665][ T6592] name failslab, interval 1, probability 0, space 0, times 0 [ 155.201724][ T6592] CPU: 0 UID: 0 PID: 6592 Comm: syz.0.160 Not tainted syzkaller #0 PREEMPT(full) [ 155.201770][ T6592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 155.201807][ T6592] Call Trace: [ 155.201818][ T6592] [ 155.201830][ T6592] dump_stack_lvl+0x100/0x190 [ 155.201872][ T6592] should_fail_ex.cold+0x5/0xa [ 155.201915][ T6592] should_failslab+0xc2/0x120 [ 155.201955][ T6592] __kmalloc_cache_noprof+0x7a/0x6f0 [ 155.202007][ T6592] ? blk_mq_init_allocated_queue+0xcf/0x1440 [ 155.202057][ T6592] ? lock_acquire+0x5e/0x370 [ 155.202096][ T6592] blk_mq_init_allocated_queue+0xcf/0x1440 [ 155.202151][ T6592] ? blk_alloc_queue+0x627/0x790 [ 155.202188][ T6592] ? blk_alloc_queue+0x1a3/0x790 [ 155.202228][ T6592] blk_mq_alloc_queue+0x1bd/0x290 [ 155.202274][ T6592] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 155.202343][ T6592] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 155.202401][ T6592] __blk_mq_alloc_disk+0x29/0x120 [ 155.202449][ T6592] loop_add+0x498/0xb60 [ 155.202502][ T6592] ? __pfx_loop_add+0x10/0x10 [ 155.202594][ T6592] ? find_held_lock+0x2b/0x80 [ 155.202641][ T6592] ? __fget_files+0x215/0x3d0 [ 155.202686][ T6592] loop_control_ioctl+0xae/0x620 [ 155.202744][ T6592] ? __pfx_loop_control_ioctl+0x10/0x10 [ 155.202806][ T6592] ? __pfx_loop_control_ioctl+0x10/0x10 [ 155.202869][ T6592] __x64_sys_ioctl+0x18e/0x210 [ 155.202908][ T6592] do_syscall_64+0x10b/0xf80 [ 155.202959][ T6592] ? clear_bhb_loop+0x40/0x90 [ 155.203002][ T6592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.203037][ T6592] RIP: 0033:0x7fc235f9cdd9 [ 155.203065][ T6592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.203099][ T6592] RSP: 002b:00007fc233d89028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.203131][ T6592] RAX: ffffffffffffffda RBX: 00007fc236216270 RCX: 00007fc235f9cdd9 [ 155.203153][ T6592] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000a [ 155.203175][ T6592] RBP: 00007fc236032d69 R08: 0000000000000000 R09: 0000000000000000 [ 155.203194][ T6592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.203210][ T6592] R13: 00007fc236216308 R14: 00007fc236216270 R15: 00007ffffa0c1d08 [ 155.203247][ T6592] [ 155.878460][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 156.518498][ T5639] Bluetooth: hci1: command 0x2016 tx timeout [ 156.688415][ T5639] Bluetooth: hci2: command 0x2016 tx timeout [ 156.838286][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.689003][ T6619] Device name cannot be null; rc = [-22] [ 157.960843][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.598359][ T5639] Bluetooth: hci1: command 0x2016 tx timeout [ 158.758403][ T5639] Bluetooth: hci2: command 0x2016 tx timeout [ 158.920979][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout [ 160.553246][ T6678] FAULT_INJECTION: forcing a failure. [ 160.553246][ T6678] name failslab, interval 1, probability 0, space 0, times 0 [ 160.581300][ T6678] CPU: 0 UID: 0 PID: 6678 Comm: syz.3.181 Not tainted syzkaller #0 PREEMPT(full) [ 160.581343][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 160.581364][ T6678] Call Trace: [ 160.581374][ T6678] [ 160.581386][ T6678] dump_stack_lvl+0x100/0x190 [ 160.581430][ T6678] should_fail_ex.cold+0x5/0xa [ 160.581472][ T6678] should_failslab+0xc2/0x120 [ 160.581514][ T6678] __kmalloc_cache_noprof+0x7a/0x6f0 [ 160.581564][ T6678] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 160.581615][ T6678] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 160.581671][ T6678] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 160.581727][ T6678] vidtv_channel_si_init+0x1365/0x18f0 [ 160.581799][ T6678] vidtv_mux_init+0x526/0xbf0 [ 160.581837][ T6678] vidtv_start_feed+0x34e/0x500 [ 160.581883][ T6678] ? __pfx_vidtv_start_feed+0x10/0x10 [ 160.581928][ T6678] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 160.581981][ T6678] ? mark_held_locks+0x40/0x70 [ 160.582023][ T6678] ? __pfx_vidtv_start_feed+0x10/0x10 [ 160.582065][ T6678] dmx_ts_feed_start_filtering+0xf6/0x220 [ 160.582118][ T6678] dvb_dmxdev_start_feed+0x273/0x3f0 [ 160.582163][ T6678] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 160.582210][ T6678] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 160.582263][ T6678] dvb_demux_do_ioctl+0xe64/0x1200 [ 160.582318][ T6678] dvb_usercopy+0x167/0x340 [ 160.582352][ T6678] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 160.582397][ T6678] ? __pfx_dvb_usercopy+0x10/0x10 [ 160.582450][ T6678] ? __fget_files+0x21f/0x3d0 [ 160.582500][ T6678] dvb_demux_ioctl+0x29/0x40 [ 160.582535][ T6678] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 160.582577][ T6678] __x64_sys_ioctl+0x18e/0x210 [ 160.582616][ T6678] do_syscall_64+0x10b/0xf80 [ 160.582668][ T6678] ? clear_bhb_loop+0x40/0x90 [ 160.582711][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.582746][ T6678] RIP: 0033:0x7f2844d9cdd9 [ 160.582775][ T6678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.582808][ T6678] RSP: 002b:00007f2842ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.582841][ T6678] RAX: ffffffffffffffda RBX: 00007f2845015fa0 RCX: 00007f2844d9cdd9 [ 160.582863][ T6678] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000006 [ 160.582883][ T6678] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 160.582903][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.582924][ T6678] R13: 00007f2845016038 R14: 00007f2845015fa0 R15: 00007ffcb9335bd8 [ 160.582969][ T6678] [ 164.427988][ T6720] mmap: syz.2.180 (6720) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 164.503150][ T6730] FAULT_INJECTION: forcing a failure. [ 164.503150][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 164.565235][ T6730] CPU: 1 UID: 0 PID: 6730 Comm: syz.0.189 Not tainted syzkaller #0 PREEMPT(full) [ 164.565281][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 164.565301][ T6730] Call Trace: [ 164.565312][ T6730] [ 164.565326][ T6730] dump_stack_lvl+0x100/0x190 [ 164.565370][ T6730] should_fail_ex.cold+0x5/0xa [ 164.565414][ T6730] ? ring_buffer_read_start+0x1b9/0x450 [ 164.565462][ T6730] should_failslab+0xc2/0x120 [ 164.565503][ T6730] __kmalloc_noprof+0xe0/0x850 [ 164.565546][ T6730] ring_buffer_read_start+0x1b9/0x450 [ 164.565594][ T6730] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 164.565644][ T6730] ? lockdep_init_map_type+0x5c/0x250 [ 164.565683][ T6730] ? ring_buffer_overruns+0x14e/0x1a0 [ 164.565726][ T6730] __tracing_open+0x74e/0xa80 [ 164.565770][ T6730] tracing_open+0x26b/0x4d0 [ 164.565813][ T6730] do_dentry_open+0x6d8/0x1660 [ 164.565856][ T6730] ? __pfx_tracing_open+0x10/0x10 [ 164.565911][ T6730] vfs_open+0x82/0x3f0 [ 164.565971][ T6730] path_openat+0x208c/0x31a0 [ 164.566031][ T6730] ? __pfx_path_openat+0x10/0x10 [ 164.566092][ T6730] do_file_open+0x20e/0x430 [ 164.566141][ T6730] ? __pfx_do_file_open+0x10/0x10 [ 164.566218][ T6730] ? alloc_fd+0x476/0x790 [ 164.566266][ T6730] ? do_getname+0x191/0x390 [ 164.566321][ T6730] do_sys_openat2+0x10d/0x1e0 [ 164.566376][ T6730] ? __pfx_do_sys_openat2+0x10/0x10 [ 164.566435][ T6730] ? __fget_files+0x21f/0x3d0 [ 164.566486][ T6730] __x64_sys_openat+0x12d/0x210 [ 164.566544][ T6730] ? __pfx___x64_sys_openat+0x10/0x10 [ 164.566610][ T6730] ? rcu_is_watching+0x12/0xc0 [ 164.566659][ T6730] do_syscall_64+0x10b/0xf80 [ 164.566710][ T6730] ? clear_bhb_loop+0x40/0x90 [ 164.566754][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.566790][ T6730] RIP: 0033:0x7fc235f9cdd9 [ 164.566818][ T6730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 164.566851][ T6730] RSP: 002b:00007fc2341ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 164.566892][ T6730] RAX: ffffffffffffffda RBX: 00007fc236215fa0 RCX: 00007fc235f9cdd9 [ 164.566913][ T6730] RDX: 1a6b75d638828712 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 164.566935][ T6730] RBP: 00007fc236032d69 R08: 0000000000000000 R09: 0000000000000000 [ 164.566955][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 164.566974][ T6730] R13: 00007fc236216038 R14: 00007fc236215fa0 R15: 00007ffffa0c1d08 [ 164.567018][ T6730] [ 166.725022][ T6770] FAULT_INJECTION: forcing a failure. [ 166.725022][ T6770] name failslab, interval 1, probability 0, space 0, times 0 [ 166.782644][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.3.194 Not tainted syzkaller #0 PREEMPT(full) [ 166.782688][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 166.782707][ T6770] Call Trace: [ 166.782718][ T6770] [ 166.782730][ T6770] dump_stack_lvl+0x100/0x190 [ 166.782775][ T6770] should_fail_ex.cold+0x5/0xa [ 166.782821][ T6770] should_failslab+0xc2/0x120 [ 166.782864][ T6770] __kmalloc_cache_noprof+0x7a/0x6f0 [ 166.782915][ T6770] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 166.782986][ T6770] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 166.783053][ T6770] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 166.783118][ T6770] vidtv_mux_init+0x72d/0xbf0 [ 166.783157][ T6770] vidtv_start_feed+0x34e/0x500 [ 166.783201][ T6770] ? __pfx_vidtv_start_feed+0x10/0x10 [ 166.783247][ T6770] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 166.783300][ T6770] ? mark_held_locks+0x40/0x70 [ 166.783341][ T6770] ? __pfx_vidtv_start_feed+0x10/0x10 [ 166.783396][ T6770] dmx_ts_feed_start_filtering+0xf6/0x220 [ 166.783448][ T6770] dvb_dmxdev_start_feed+0x273/0x3f0 [ 166.783492][ T6770] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 166.783538][ T6770] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 166.783581][ T6770] dvb_demux_do_ioctl+0xe64/0x1200 [ 166.783644][ T6770] dvb_usercopy+0x167/0x340 [ 166.783678][ T6770] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 166.783723][ T6770] ? __pfx_dvb_usercopy+0x10/0x10 [ 166.783774][ T6770] ? __fget_files+0x21f/0x3d0 [ 166.783824][ T6770] dvb_demux_ioctl+0x29/0x40 [ 166.783858][ T6770] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 166.783896][ T6770] __x64_sys_ioctl+0x18e/0x210 [ 166.783934][ T6770] do_syscall_64+0x10b/0xf80 [ 166.783983][ T6770] ? clear_bhb_loop+0x40/0x90 [ 166.784026][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.784061][ T6770] RIP: 0033:0x7f2844d9cdd9 [ 166.784087][ T6770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 166.784118][ T6770] RSP: 002b:00007f2842ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 166.784147][ T6770] RAX: ffffffffffffffda RBX: 00007f2845015fa0 RCX: 00007f2844d9cdd9 [ 166.784169][ T6770] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000006 [ 166.784189][ T6770] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 166.784208][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.784226][ T6770] R13: 00007f2845016038 R14: 00007f2845015fa0 R15: 00007ffcb9335bd8 [ 166.784269][ T6770] [ 168.015456][ T6789] FAULT_INJECTION: forcing a failure. [ 168.015456][ T6789] name fail_futex, interval 1, probability 0, space 0, times 0 [ 168.078401][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.0.198 Not tainted syzkaller #0 PREEMPT(full) [ 168.078440][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.078457][ T6789] Call Trace: [ 168.078467][ T6789] [ 168.078477][ T6789] dump_stack_lvl+0x100/0x190 [ 168.078523][ T6789] should_fail_ex.cold+0x5/0xa [ 168.078561][ T6789] get_futex_key+0x1d2/0x1510 [ 168.078595][ T6789] ? __pfx_get_futex_key+0x10/0x10 [ 168.078638][ T6789] futex_wake+0xea/0x530 [ 168.078678][ T6789] ? rcu_is_watching+0x12/0xc0 [ 168.078715][ T6789] ? __pfx_futex_wake+0x10/0x10 [ 168.078760][ T6789] ? putname+0xb1/0x110 [ 168.078799][ T6789] ? kmem_cache_free+0x127/0x6c0 [ 168.078848][ T6789] ? do_sys_openat2+0x1b4/0x1e0 [ 168.078902][ T6789] do_futex+0x32b/0x350 [ 168.078936][ T6789] ? __pfx_do_futex+0x10/0x10 [ 168.078966][ T6789] ? __pfx_do_sys_openat2+0x10/0x10 [ 168.079023][ T6789] __x64_sys_futex+0x34f/0x4d0 [ 168.079058][ T6789] ? __x64_sys_openat+0x12d/0x210 [ 168.079106][ T6789] ? __pfx___x64_sys_futex+0x10/0x10 [ 168.079148][ T6789] ? rcu_is_watching+0x12/0xc0 [ 168.079189][ T6789] do_syscall_64+0x10b/0xf80 [ 168.079253][ T6789] ? clear_bhb_loop+0x40/0x90 [ 168.079291][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.079322][ T6789] RIP: 0033:0x7fc235f9cdd9 [ 168.079346][ T6789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.079373][ T6789] RSP: 002b:00007fc2341ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 168.079401][ T6789] RAX: ffffffffffffffda RBX: 00007fc236215fa8 RCX: 00007fc235f9cdd9 [ 168.079420][ T6789] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc236215fac [ 168.079438][ T6789] RBP: 00007fc236215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 168.079456][ T6789] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 168.079474][ T6789] R13: 00007fc236216038 R14: 00007ffffa0c1c20 R15: 00007ffffa0c1d08 [ 168.079519][ T6789] [ 168.080326][ T6789] FAULT_INJECTION: forcing a failure. [ 168.080326][ T6789] name failslab, interval 1, probability 0, space 0, times 0 [ 168.331749][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.198'. [ 168.368914][ T6789] CPU: 1 UID: 0 PID: 6789 Comm: syz.0.198 Not tainted syzkaller #0 PREEMPT(full) [ 168.368949][ T6789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.368965][ T6789] Call Trace: [ 168.368974][ T6789] [ 168.368984][ T6789] dump_stack_lvl+0x100/0x190 [ 168.369019][ T6789] should_fail_ex.cold+0x5/0xa [ 168.369053][ T6789] ? tomoyo_realpath_from_path+0xb6/0x690 [ 168.369088][ T6789] should_failslab+0xc2/0x120 [ 168.369121][ T6789] __kmalloc_noprof+0xe0/0x850 [ 168.369147][ T6789] ? kfree+0x1dd/0x6c0 [ 168.369198][ T6789] tomoyo_realpath_from_path+0xb6/0x690 [ 168.369269][ T6789] tomoyo_path_number_perm+0x23c/0x580 [ 168.369303][ T6789] ? tomoyo_path_number_perm+0x22e/0x580 [ 168.369341][ T6789] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 168.369419][ T6789] ? find_held_lock+0x2b/0x80 [ 168.369462][ T6789] ? __fget_files+0x215/0x3d0 [ 168.369499][ T6789] ? hook_file_ioctl_common+0x149/0x410 [ 168.369529][ T6789] ? __fget_files+0x215/0x3d0 [ 168.369568][ T6789] ? __fget_files+0x21f/0x3d0 [ 168.369607][ T6789] security_file_ioctl+0xd3/0x230 [ 168.369639][ T6789] __x64_sys_ioctl+0xb7/0x210 [ 168.369675][ T6789] do_syscall_64+0x10b/0xf80 [ 168.369715][ T6789] ? clear_bhb_loop+0x40/0x90 [ 168.369750][ T6789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.369780][ T6789] RIP: 0033:0x7fc235f9cdd9 [ 168.369806][ T6789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.369835][ T6789] RSP: 002b:00007fc2341ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 168.369864][ T6789] RAX: ffffffffffffffda RBX: 00007fc236215fa0 RCX: 00007fc235f9cdd9 [ 168.369883][ T6789] RDX: 0000000000000000 RSI: 000000000000540a RDI: 000000000000000a [ 168.369901][ T6789] RBP: 00007fc2341ee090 R08: 0000000000000000 R09: 0000000000000000 [ 168.369919][ T6789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.369937][ T6789] R13: 00007fc236216038 R14: 00007fc236215fa0 R15: 00007ffffa0c1d08 [ 168.369978][ T6789] [ 168.370068][ T6789] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.751868][ T6798] FAULT_INJECTION: forcing a failure. [ 168.751868][ T6798] name failslab, interval 1, probability 0, space 0, times 0 [ 168.774871][ T6798] CPU: 0 UID: 0 PID: 6798 Comm: syz.1.200 Not tainted syzkaller #0 PREEMPT(full) [ 168.774912][ T6798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.774931][ T6798] Call Trace: [ 168.774942][ T6798] [ 168.774953][ T6798] dump_stack_lvl+0x100/0x190 [ 168.774996][ T6798] should_fail_ex.cold+0x5/0xa [ 168.775039][ T6798] ? drm_atomic_state_init+0x190/0x490 [ 168.775088][ T6798] should_failslab+0xc2/0x120 [ 168.775133][ T6798] __kmalloc_noprof+0xe0/0x850 [ 168.775173][ T6798] drm_atomic_state_init+0x190/0x490 [ 168.775230][ T6798] ? kasan_save_track+0x14/0x30 [ 168.775270][ T6798] drm_atomic_state_alloc+0xd3/0x120 [ 168.775321][ T6798] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 168.775356][ T6798] ? rcu_is_watching+0x12/0xc0 [ 168.775399][ T6798] ? trace_contention_end+0x122/0x170 [ 168.775439][ T6798] ? __mutex_lock+0x26d/0x1b10 [ 168.775495][ T6798] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 168.775530][ T6798] ? drm_master_internal_acquire+0x21/0x80 [ 168.775624][ T6798] drm_client_modeset_commit_locked+0x14d/0x580 [ 168.775666][ T6798] drm_client_modeset_commit+0x4f/0x80 [ 168.775701][ T6798] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 168.775763][ T6798] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 168.775823][ T6798] drm_fbdev_client_restore+0x1b/0x30 [ 168.775867][ T6798] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 168.775912][ T6798] drm_client_dev_restore+0x205/0x2a0 [ 168.775976][ T6798] drm_release+0x2c6/0x360 [ 168.776029][ T6798] ? __pfx_drm_release+0x10/0x10 [ 168.776082][ T6798] __fput+0x3ff/0xb50 [ 168.776142][ T6798] task_work_run+0x150/0x240 [ 168.776178][ T6798] ? __pfx_task_work_run+0x10/0x10 [ 168.776230][ T6798] ? rcu_is_watching+0x12/0xc0 [ 168.776276][ T6798] exit_to_user_mode_loop+0x100/0x4a0 [ 168.776310][ T6798] ? do_syscall_64+0x519/0xf80 [ 168.776364][ T6798] do_syscall_64+0x6f2/0xf80 [ 168.776411][ T6798] ? clear_bhb_loop+0x40/0x90 [ 168.776453][ T6798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.776487][ T6798] RIP: 0033:0x7f9c00f9cdd9 [ 168.776524][ T6798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.776554][ T6798] RSP: 002b:00007f9c01eee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 168.776582][ T6798] RAX: 0000000000000000 RBX: 00007f9c01215fa0 RCX: 00007f9c00f9cdd9 [ 168.776601][ T6798] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 168.776619][ T6798] RBP: 00007f9c01032d69 R08: 0000000000000000 R09: 0000000000000000 [ 168.776637][ T6798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 168.776654][ T6798] R13: 00007f9c01216038 R14: 00007f9c01215fa0 R15: 00007ffc754d5238 [ 168.776695][ T6798] [ 169.226124][ T6808] netlink: 186 bytes leftover after parsing attributes in process `syz.3.202'. [ 169.789142][ T6824] bridge0: port 3(netdevsim3) entered blocking state [ 169.812431][ T6824] bridge0: port 3(netdevsim3) entered disabled state [ 169.878497][ T6824] netdevsim netdevsim1 netdevsim3: entered allmulticast mode [ 169.963695][ T6824] netdevsim netdevsim1 netdevsim3: entered promiscuous mode [ 169.994623][ T6824] bridge0: port 3(netdevsim3) entered blocking state [ 170.002510][ T6824] bridge0: port 3(netdevsim3) entered forwarding state [ 170.305805][ T6823] NFSD: Failed to start, no listeners configured. [ 171.702199][ T6858] FAULT_INJECTION: forcing a failure. [ 171.702199][ T6858] name failslab, interval 1, probability 0, space 0, times 0 [ 171.717199][ T6858] CPU: 0 UID: 0 PID: 6858 Comm: syz.1.215 Not tainted syzkaller #0 PREEMPT(full) [ 171.717246][ T6858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.717266][ T6858] Call Trace: [ 171.717277][ T6858] [ 171.717290][ T6858] dump_stack_lvl+0x100/0x190 [ 171.717334][ T6858] should_fail_ex.cold+0x5/0xa [ 171.717377][ T6858] ? tomoyo_encode2+0xfb/0x3c0 [ 171.717420][ T6858] should_failslab+0xc2/0x120 [ 171.717462][ T6858] __kmalloc_noprof+0xe0/0x850 [ 171.717494][ T6858] ? rcu_is_watching+0x12/0xc0 [ 171.717552][ T6858] tomoyo_encode2+0xfb/0x3c0 [ 171.717603][ T6858] tomoyo_encode+0x29/0x50 [ 171.717646][ T6858] tomoyo_realpath_from_path+0x18c/0x690 [ 171.717702][ T6858] tomoyo_check_open_permission+0x2af/0x3c0 [ 171.717743][ T6858] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 171.717797][ T6858] ? hook_file_open+0x24e/0x7a0 [ 171.717855][ T6858] ? lock_acquire+0x1b1/0x370 [ 171.717907][ T6858] tomoyo_file_open+0x6b/0x90 [ 171.717959][ T6858] security_file_open+0xb5/0x1e0 [ 171.718000][ T6858] do_dentry_open+0x5aa/0x1660 [ 171.718053][ T6858] vfs_open+0x82/0x3f0 [ 171.718109][ T6858] path_openat+0x208c/0x31a0 [ 171.718169][ T6858] ? __pfx_path_openat+0x10/0x10 [ 171.718229][ T6858] do_file_open+0x20e/0x430 [ 171.718277][ T6858] ? __pfx_do_file_open+0x10/0x10 [ 171.718349][ T6858] ? alloc_fd+0x476/0x790 [ 171.718396][ T6858] ? do_getname+0x191/0x390 [ 171.718452][ T6858] do_sys_openat2+0x10d/0x1e0 [ 171.718504][ T6858] ? __pfx_do_sys_openat2+0x10/0x10 [ 171.718572][ T6858] __x64_sys_openat+0x12d/0x210 [ 171.718628][ T6858] ? __pfx___x64_sys_openat+0x10/0x10 [ 171.718684][ T6858] ? rcu_is_watching+0x12/0xc0 [ 171.718727][ T6858] do_syscall_64+0x10b/0xf80 [ 171.718774][ T6858] ? clear_bhb_loop+0x40/0x90 [ 171.718817][ T6858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.718849][ T6858] RIP: 0033:0x7f9c00f9cdd9 [ 171.718896][ T6858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.718928][ T6858] RSP: 002b:00007f9c01eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 171.718956][ T6858] RAX: ffffffffffffffda RBX: 00007f9c01215fa0 RCX: 00007f9c00f9cdd9 [ 171.718979][ T6858] RDX: 0000000000000082 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 171.719000][ T6858] RBP: 00007f9c01032d69 R08: 0000000000000000 R09: 0000000000000000 [ 171.719020][ T6858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.719039][ T6858] R13: 00007f9c01216038 R14: 00007f9c01215fa0 R15: 00007ffc754d5238 [ 171.719079][ T6858] [ 172.029805][ T6858] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.176822][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 172.670628][ T6877] FAULT_INJECTION: forcing a failure. [ 172.670628][ T6877] name fail_futex, interval 1, probability 0, space 0, times 0 [ 172.697216][ T6877] CPU: 0 UID: 0 PID: 6877 Comm: syz.0.220 Not tainted syzkaller #0 PREEMPT(full) [ 172.697261][ T6877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 172.697281][ T6877] Call Trace: [ 172.697291][ T6877] [ 172.697303][ T6877] dump_stack_lvl+0x100/0x190 [ 172.697345][ T6877] should_fail_ex.cold+0x5/0xa [ 172.697388][ T6877] get_futex_key+0x1d2/0x1510 [ 172.697428][ T6877] ? __pfx_get_futex_key+0x10/0x10 [ 172.697478][ T6877] futex_wait_setup+0x83/0x510 [ 172.697538][ T6877] __futex_wait+0x19f/0x300 [ 172.697589][ T6877] ? __pfx___futex_wait+0x10/0x10 [ 172.697643][ T6877] ? __pfx_futex_wake_mark+0x10/0x10 [ 172.697695][ T6877] ? futex_hash+0x2ad/0x370 [ 172.697731][ T6877] ? futex_hash+0x141/0x370 [ 172.697770][ T6877] futex_wait+0xe6/0x370 [ 172.697817][ T6877] ? __pfx_futex_wait+0x10/0x10 [ 172.697890][ T6877] do_futex+0x1ef/0x350 [ 172.697929][ T6877] ? __pfx_do_futex+0x10/0x10 [ 172.697970][ T6877] ? __fget_files+0x21f/0x3d0 [ 172.698018][ T6877] __x64_sys_futex+0x34f/0x4d0 [ 172.698069][ T6877] ? __pfx___x64_sys_futex+0x10/0x10 [ 172.698110][ T6877] ? __pfx_do_preadv+0x10/0x10 [ 172.698151][ T6877] ? rcu_is_watching+0x12/0xc0 [ 172.698200][ T6877] do_syscall_64+0x10b/0xf80 [ 172.698247][ T6877] ? clear_bhb_loop+0x40/0x90 [ 172.698287][ T6877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.698321][ T6877] RIP: 0033:0x7fc235f9cdd9 [ 172.698347][ T6877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 172.698380][ T6877] RSP: 002b:00007fc2341ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 172.698412][ T6877] RAX: ffffffffffffffda RBX: 00007fc236215fa8 RCX: 00007fc235f9cdd9 [ 172.698435][ T6877] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc236215fa8 [ 172.698455][ T6877] RBP: 00007fc236215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 172.698476][ T6877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.698496][ T6877] R13: 00007fc236216038 R14: 00007ffffa0c1c20 R15: 00007ffffa0c1d08 [ 172.698539][ T6877] [ 173.101479][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.220'. [ 177.281050][ T6974] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 178.773159][ T7001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.243'. [ 179.436914][ T7018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.245'. [ 179.521780][ T7018] macvlan0: entered promiscuous mode [ 179.546279][ T7018] macvlan0: entered allmulticast mode [ 179.562284][ T7018] veth1_vlan: entered allmulticast mode [ 180.347897][ T5639] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 180.601424][ T7035] futex_wake_op: syz.0.247 tries to shift op by -2048; fix this program [ 180.792305][ T7035] futex_wake_op: syz.0.247 tries to shift op by -2048; fix this program [ 183.244880][ T7055] netlink: 'syz.2.251': attribute type 4 has an invalid length. [ 183.276218][ T7055] netlink: 314 bytes leftover after parsing attributes in process `syz.2.251'. [ 183.783206][ T7069] Device name cannot be null; rc = [-22] [ 183.890808][ T7067] FAULT_INJECTION: forcing a failure. [ 183.890808][ T7067] name failslab, interval 1, probability 0, space 0, times 0 [ 184.018272][ T7067] CPU: 0 UID: 8 PID: 7067 Comm: syz.3.255 Not tainted syzkaller #0 PREEMPT(full) [ 184.018315][ T7067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 184.018339][ T7067] Call Trace: [ 184.018350][ T7067] [ 184.018362][ T7067] dump_stack_lvl+0x100/0x190 [ 184.018405][ T7067] should_fail_ex.cold+0x5/0xa [ 184.018450][ T7067] ? drm_atomic_state_init+0x190/0x490 [ 184.018502][ T7067] should_failslab+0xc2/0x120 [ 184.018545][ T7067] __kmalloc_noprof+0xe0/0x850 [ 184.018587][ T7067] drm_atomic_state_init+0x190/0x490 [ 184.018637][ T7067] ? kasan_save_track+0x14/0x30 [ 184.018678][ T7067] drm_atomic_state_alloc+0xd3/0x120 [ 184.018731][ T7067] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 184.018768][ T7067] ? rcu_is_watching+0x12/0xc0 [ 184.018810][ T7067] ? trace_contention_end+0x122/0x170 [ 184.018851][ T7067] ? __mutex_lock+0x26d/0x1b10 [ 184.018907][ T7067] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 184.018951][ T7067] ? drm_master_internal_acquire+0x21/0x80 [ 184.019049][ T7067] drm_client_modeset_commit_locked+0x14d/0x580 [ 184.019093][ T7067] drm_client_modeset_commit+0x4f/0x80 [ 184.019131][ T7067] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 184.019194][ T7067] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 184.019288][ T7067] drm_fbdev_client_restore+0x1b/0x30 [ 184.019333][ T7067] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 184.019378][ T7067] drm_client_dev_restore+0x205/0x2a0 [ 184.019446][ T7067] drm_release+0x2c6/0x360 [ 184.019500][ T7067] ? __pfx_drm_release+0x10/0x10 [ 184.019554][ T7067] __fput+0x3ff/0xb50 [ 184.019614][ T7067] task_work_run+0x150/0x240 [ 184.019655][ T7067] ? __pfx_task_work_run+0x10/0x10 [ 184.019695][ T7067] ? rcu_is_watching+0x12/0xc0 [ 184.019744][ T7067] exit_to_user_mode_loop+0x100/0x4a0 [ 184.019777][ T7067] ? do_syscall_64+0x519/0xf80 [ 184.019834][ T7067] do_syscall_64+0x6f2/0xf80 [ 184.019870][ T7067] ? clear_bhb_loop+0x40/0x90 [ 184.019900][ T7067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.019926][ T7067] RIP: 0033:0x7f2844d9cdd9 [ 184.019951][ T7067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.019975][ T7067] RSP: 002b:00007f2842ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 184.019998][ T7067] RAX: 0000000000000000 RBX: 00007f2845015fa0 RCX: 00007f2844d9cdd9 [ 184.020013][ T7067] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 184.020028][ T7067] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 184.020043][ T7067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.020057][ T7067] R13: 00007f2845016038 R14: 00007f2845015fa0 R15: 00007ffcb9335bd8 [ 184.020094][ T7067] [ 185.213043][ T7083] FAULT_INJECTION: forcing a failure. [ 185.213043][ T7083] name failslab, interval 1, probability 0, space 0, times 0 [ 185.263138][ T7083] CPU: 1 UID: 0 PID: 7083 Comm: syz.1.257 Not tainted syzkaller #0 PREEMPT(full) [ 185.263189][ T7083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.263207][ T7083] Call Trace: [ 185.263217][ T7083] [ 185.263228][ T7083] dump_stack_lvl+0x100/0x190 [ 185.263269][ T7083] should_fail_ex.cold+0x5/0xa [ 185.263311][ T7083] should_failslab+0xc2/0x120 [ 185.263350][ T7083] __kmalloc_cache_noprof+0x7a/0x6f0 [ 185.263396][ T7083] ? drm_atomic_state_alloc+0xb8/0x120 [ 185.263453][ T7083] drm_atomic_state_alloc+0xb8/0x120 [ 185.263502][ T7083] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 185.263534][ T7083] ? rcu_is_watching+0x12/0xc0 [ 185.263581][ T7083] ? trace_contention_end+0x122/0x170 [ 185.263618][ T7083] ? __mutex_lock+0x26d/0x1b10 [ 185.263669][ T7083] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 185.263702][ T7083] ? drm_master_internal_acquire+0x21/0x80 [ 185.263790][ T7083] drm_client_modeset_commit_locked+0x14d/0x580 [ 185.263829][ T7083] drm_client_modeset_commit+0x4f/0x80 [ 185.263863][ T7083] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 185.263921][ T7083] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 185.263976][ T7083] drm_fbdev_client_restore+0x1b/0x30 [ 185.264018][ T7083] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 185.264059][ T7083] drm_client_dev_restore+0x205/0x2a0 [ 185.264123][ T7083] drm_release+0x2c6/0x360 [ 185.264173][ T7083] ? __pfx_drm_release+0x10/0x10 [ 185.264223][ T7083] __fput+0x3ff/0xb50 [ 185.264277][ T7083] task_work_run+0x150/0x240 [ 185.264311][ T7083] ? __pfx_task_work_run+0x10/0x10 [ 185.264348][ T7083] ? rcu_is_watching+0x12/0xc0 [ 185.264392][ T7083] exit_to_user_mode_loop+0x100/0x4a0 [ 185.264423][ T7083] ? do_syscall_64+0x519/0xf80 [ 185.264472][ T7083] do_syscall_64+0x6f2/0xf80 [ 185.264517][ T7083] ? clear_bhb_loop+0x40/0x90 [ 185.264556][ T7083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.264608][ T7083] RIP: 0033:0x7f9c00f9cdd9 [ 185.264633][ T7083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.264662][ T7083] RSP: 002b:00007f9c01eee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 185.264691][ T7083] RAX: 0000000000000000 RBX: 00007f9c01215fa0 RCX: 00007f9c00f9cdd9 [ 185.264710][ T7083] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 185.264728][ T7083] RBP: 00007f9c01032d69 R08: 0000000000000000 R09: 0000000000000000 [ 185.264746][ T7083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.264764][ T7083] R13: 00007f9c01216038 R14: 00007f9c01215fa0 R15: 00007ffc754d5238 [ 185.264805][ T7083] [ 186.286122][ T30] audit: type=1800 audit(1778324264.097:4): pid=7092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.259" name="dbroot" dev="configfs" ino=14699 res=0 errno=0 [ 188.045777][ T7122] ovs_: entered promiscuous mode [ 188.296347][ T7132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.268'. [ 188.394002][ T7136] FAULT_INJECTION: forcing a failure. [ 188.394002][ T7136] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 188.484099][ T7136] CPU: 0 UID: 0 PID: 7136 Comm: syz.0.268 Not tainted syzkaller #0 PREEMPT(full) [ 188.484146][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.484166][ T7136] Call Trace: [ 188.484176][ T7136] [ 188.484188][ T7136] dump_stack_lvl+0x100/0x190 [ 188.484233][ T7136] should_fail_ex.cold+0x5/0xa [ 188.484277][ T7136] core_sys_select+0x9b9/0xbb0 [ 188.484341][ T7136] ? __pfx_core_sys_select+0x10/0x10 [ 188.484426][ T7136] ? ktime_get_ts64+0x306/0x420 [ 188.484483][ T7136] ? ktime_get_ts64+0x318/0x420 [ 188.484534][ T7136] ? ktime_get_ts64+0x257/0x420 [ 188.484599][ T7136] kern_select+0x20c/0x270 [ 188.484643][ T7136] ? __pfx_kern_select+0x10/0x10 [ 188.484695][ T7136] ? xfd_validate_state+0x129/0x190 [ 188.484741][ T7136] __x64_sys_select+0xbd/0x160 [ 188.484780][ T7136] ? do_syscall_64+0x90/0xf80 [ 188.484831][ T7136] ? lockdep_hardirqs_on+0x78/0x100 [ 188.484880][ T7136] do_syscall_64+0x10b/0xf80 [ 188.484928][ T7136] ? clear_bhb_loop+0x40/0x90 [ 188.484970][ T7136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.485004][ T7136] RIP: 0033:0x7fc235f9cdd9 [ 188.485031][ T7136] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.485064][ T7136] RSP: 002b:00007fc2341cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 188.485096][ T7136] RAX: ffffffffffffffda RBX: 00007fc236216090 RCX: 00007fc235f9cdd9 [ 188.485118][ T7136] RDX: 00002000000000c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 188.485139][ T7136] RBP: 00007fc236032d69 R08: 00002000000001c0 R09: 0000000000000000 [ 188.485160][ T7136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.485180][ T7136] R13: 00007fc236216128 R14: 00007fc236216090 R15: 00007ffffa0c1d08 [ 188.485222][ T7136] [ 188.763181][ T7139] FAULT_INJECTION: forcing a failure. [ 188.763181][ T7139] name fail_futex, interval 1, probability 0, space 0, times 0 [ 188.819059][ T7139] CPU: 0 UID: 0 PID: 7139 Comm: syz.0.268 Not tainted syzkaller #0 PREEMPT(full) [ 188.819102][ T7139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 188.819122][ T7139] Call Trace: [ 188.819137][ T7139] [ 188.819155][ T7139] dump_stack_lvl+0x100/0x190 [ 188.819201][ T7139] should_fail_ex.cold+0x5/0xa [ 188.819245][ T7139] get_futex_key+0x1d2/0x1510 [ 188.819294][ T7139] ? __pfx_get_futex_key+0x10/0x10 [ 188.819334][ T7139] ? __lock_acquire+0x4a5/0x2630 [ 188.819370][ T7139] ? __x64_sys_fsopen+0xd5/0x220 [ 188.819428][ T7139] ? kasan_save_stack+0x3f/0x50 [ 188.819461][ T7139] ? kasan_save_stack+0x30/0x50 [ 188.819500][ T7139] futex_wake+0xea/0x530 [ 188.819550][ T7139] ? __pfx_futex_wake+0x10/0x10 [ 188.819614][ T7139] do_futex+0x32b/0x350 [ 188.819653][ T7139] ? __pfx_do_futex+0x10/0x10 [ 188.819707][ T7139] __x64_sys_futex+0x34f/0x4d0 [ 188.819752][ T7139] ? __pfx___x64_sys_futex+0x10/0x10 [ 188.819797][ T7139] ? rcu_is_watching+0x12/0xc0 [ 188.819845][ T7139] do_syscall_64+0x10b/0xf80 [ 188.819896][ T7139] ? clear_bhb_loop+0x40/0x90 [ 188.819936][ T7139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.819971][ T7139] RIP: 0033:0x7fc235f9cdd9 [ 188.819999][ T7139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.820032][ T7139] RSP: 002b:00007fc2341ac0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 188.820064][ T7139] RAX: ffffffffffffffda RBX: 00007fc236216188 RCX: 00007fc235f9cdd9 [ 188.820086][ T7139] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc23621618c [ 188.820107][ T7139] RBP: 00007fc236216180 R08: 0000000000000001 R09: 0000000000000000 [ 188.820128][ T7139] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 188.820149][ T7139] R13: 00007fc236216218 R14: 00007ffffa0c1c20 R15: 00007ffffa0c1d08 [ 188.820192][ T7139] [ 190.893318][ T7187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.280'. [ 194.360975][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.367782][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.805976][ T7281] Device name cannot be null; rc = [-22] [ 198.118834][ T7308] FAULT_INJECTION: forcing a failure. [ 198.118834][ T7308] name failslab, interval 1, probability 0, space 0, times 0 [ 198.138541][ T7308] CPU: 1 UID: 0 PID: 7308 Comm: syz.0.301 Not tainted syzkaller #0 PREEMPT(full) [ 198.138586][ T7308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.138613][ T7308] Call Trace: [ 198.138624][ T7308] [ 198.138636][ T7308] dump_stack_lvl+0x100/0x190 [ 198.138681][ T7308] should_fail_ex.cold+0x5/0xa [ 198.138726][ T7308] should_failslab+0xc2/0x120 [ 198.138768][ T7308] __kmalloc_cache_noprof+0x7a/0x6f0 [ 198.138821][ T7308] ? drm_atomic_state_alloc+0xb8/0x120 [ 198.138885][ T7308] drm_atomic_state_alloc+0xb8/0x120 [ 198.138940][ T7308] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 198.138977][ T7308] ? rcu_is_watching+0x12/0xc0 [ 198.139021][ T7308] ? trace_contention_end+0x122/0x170 [ 198.139067][ T7308] ? __mutex_lock+0x26d/0x1b10 [ 198.139128][ T7308] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 198.139166][ T7308] ? drm_master_internal_acquire+0x21/0x80 [ 198.139278][ T7308] drm_client_modeset_commit_locked+0x14d/0x580 [ 198.139323][ T7308] drm_client_modeset_commit+0x4f/0x80 [ 198.139359][ T7308] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 198.139423][ T7308] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 198.139484][ T7308] drm_fbdev_client_restore+0x1b/0x30 [ 198.139531][ T7308] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 198.139576][ T7308] drm_client_dev_restore+0x205/0x2a0 [ 198.139650][ T7308] drm_release+0x2c6/0x360 [ 198.139706][ T7308] ? __pfx_drm_release+0x10/0x10 [ 198.139758][ T7308] __fput+0x3ff/0xb50 [ 198.139816][ T7308] task_work_run+0x150/0x240 [ 198.139853][ T7308] ? __pfx_task_work_run+0x10/0x10 [ 198.139893][ T7308] ? rcu_is_watching+0x12/0xc0 [ 198.139942][ T7308] exit_to_user_mode_loop+0x100/0x4a0 [ 198.139976][ T7308] ? do_syscall_64+0x519/0xf80 [ 198.140032][ T7308] do_syscall_64+0x6f2/0xf80 [ 198.140082][ T7308] ? clear_bhb_loop+0x40/0x90 [ 198.140125][ T7308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.140162][ T7308] RIP: 0033:0x7fc235f9cdd9 [ 198.140190][ T7308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.140223][ T7308] RSP: 002b:00007fc2341ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 198.140255][ T7308] RAX: 0000000000000000 RBX: 00007fc236215fa0 RCX: 00007fc235f9cdd9 [ 198.140276][ T7308] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 198.140296][ T7308] RBP: 00007fc236032d69 R08: 0000000000000000 R09: 0000000000000000 [ 198.140317][ T7308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.140337][ T7308] R13: 00007fc236216038 R14: 00007fc236215fa0 R15: 00007ffffa0c1d08 [ 198.140383][ T7308] [ 198.975336][ T7331] netlink: 330 bytes leftover after parsing attributes in process `syz.0.307'. [ 199.445908][ T7345] Device name cannot be null; rc = [-22] [ 200.959447][ T7376] netlink: 24 bytes leftover after parsing attributes in process `syz.2.316'. [ 201.008890][ T7381] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 201.016808][ T7381] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 201.196582][ T7387] netlink: 12 bytes leftover after parsing attributes in process `syz.3.318'. [ 201.841844][ T7404] Device name cannot be null; rc = [-22] [ 203.336808][ T7441] dyndbg: expected <4096 bytes into control [ 203.724684][ T7450] netlink: 3272 bytes leftover after parsing attributes in process `syz.1.332'. [ 204.538803][ T7463] netlink: 25 bytes leftover after parsing attributes in process `syz.3.335'. [ 205.823041][ T7480] FAULT_INJECTION: forcing a failure. [ 205.823041][ T7480] name fail_futex, interval 1, probability 0, space 0, times 0 [ 205.843263][ T7484] FAULT_INJECTION: forcing a failure. [ 205.843263][ T7484] name failslab, interval 1, probability 0, space 0, times 0 [ 205.875870][ T7484] CPU: 1 UID: 0 PID: 7484 Comm: syz.1.341 Not tainted syzkaller #0 PREEMPT(full) [ 205.875915][ T7484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.875935][ T7484] Call Trace: [ 205.875945][ T7484] [ 205.875958][ T7484] dump_stack_lvl+0x100/0x190 [ 205.876003][ T7484] should_fail_ex.cold+0x5/0xa [ 205.876048][ T7484] should_failslab+0xc2/0x120 [ 205.876090][ T7484] __kmalloc_cache_noprof+0x7a/0x6f0 [ 205.876145][ T7484] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 205.876217][ T7484] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 205.876284][ T7484] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 205.876347][ T7484] vidtv_mux_init+0x748/0xbf0 [ 205.876386][ T7484] vidtv_start_feed+0x34e/0x500 [ 205.876431][ T7484] ? __pfx_vidtv_start_feed+0x10/0x10 [ 205.876476][ T7484] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 205.876528][ T7484] ? mark_held_locks+0x40/0x70 [ 205.876581][ T7484] ? __pfx_vidtv_start_feed+0x10/0x10 [ 205.876636][ T7484] dmx_ts_feed_start_filtering+0xf6/0x220 [ 205.876686][ T7484] dvb_dmxdev_start_feed+0x273/0x3f0 [ 205.876726][ T7484] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 205.876762][ T7484] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 205.876807][ T7484] dvb_demux_do_ioctl+0xe64/0x1200 [ 205.876856][ T7484] dvb_usercopy+0x167/0x340 [ 205.876886][ T7484] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 205.876927][ T7484] ? __pfx_dvb_usercopy+0x10/0x10 [ 205.876976][ T7484] ? __fget_files+0x21f/0x3d0 [ 205.877023][ T7484] dvb_demux_ioctl+0x29/0x40 [ 205.877055][ T7484] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 205.877089][ T7484] __x64_sys_ioctl+0x18e/0x210 [ 205.877127][ T7484] do_syscall_64+0x10b/0xf80 [ 205.877174][ T7484] ? clear_bhb_loop+0x40/0x90 [ 205.877215][ T7484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.877249][ T7484] RIP: 0033:0x7f9c00f9cdd9 [ 205.877276][ T7484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.877309][ T7484] RSP: 002b:00007f9c01eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 205.877340][ T7484] RAX: ffffffffffffffda RBX: 00007f9c01215fa0 RCX: 00007f9c00f9cdd9 [ 205.877362][ T7484] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000006 [ 205.877382][ T7484] RBP: 00007f9c01032d69 R08: 0000000000000000 R09: 0000000000000000 [ 205.877401][ T7484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.877420][ T7484] R13: 00007f9c01216038 R14: 00007f9c01215fa0 R15: 00007ffc754d5238 [ 205.877463][ T7484] [ 205.902852][ T7480] CPU: 0 UID: 0 PID: 7480 Comm: syz.3.340 Not tainted syzkaller #0 PREEMPT(full) [ 205.902955][ T7480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 205.903006][ T7480] Call Trace: [ 205.903036][ T7480] [ 205.903061][ T7480] dump_stack_lvl+0x100/0x190 [ 205.903202][ T7480] should_fail_ex.cold+0x5/0xa [ 205.903311][ T7480] get_futex_key+0x1d2/0x1510 [ 205.903419][ T7480] ? __pfx_get_futex_key+0x10/0x10 [ 205.903546][ T7480] futex_wake+0xea/0x530 [ 205.903622][ T7480] ? rcu_is_watching+0x12/0xc0 [ 205.903730][ T7480] ? __pfx_futex_wake+0x10/0x10 [ 205.903875][ T7480] ? putname+0xb1/0x110 [ 205.903951][ T7480] ? kmem_cache_free+0x127/0x6c0 [ 205.904149][ T7480] do_futex+0x32b/0x350 [ 205.904252][ T7480] ? __pfx_do_futex+0x10/0x10 [ 205.904343][ T7480] ? __pfx_do_sys_openat2+0x10/0x10 [ 205.904517][ T7480] __x64_sys_futex+0x34f/0x4d0 [ 205.904620][ T7480] ? __x64_sys_openat+0x12d/0x210 [ 205.904770][ T7480] ? __pfx___x64_sys_futex+0x10/0x10 [ 205.904866][ T7480] ? ksys_read+0x1ac/0x250 [ 205.904989][ T7480] ? rcu_is_watching+0x12/0xc0 [ 205.905105][ T7480] do_syscall_64+0x10b/0xf80 [ 205.905237][ T7480] ? clear_bhb_loop+0x40/0x90 [ 205.905349][ T7480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.905467][ T7480] RIP: 0033:0x7f2844d9cdd9 [ 205.905554][ T7480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.905626][ T7480] RSP: 002b:00007f2842ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 205.905710][ T7480] RAX: ffffffffffffffda RBX: 00007f2845015fa8 RCX: 00007f2844d9cdd9 [ 205.905772][ T7480] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2845015fac [ 205.905824][ T7480] RBP: 00007f2845015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 205.905875][ T7480] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000000 [ 205.905927][ T7480] R13: 00007f2845016038 R14: 00007ffcb9335af0 R15: 00007ffcb9335bd8 [ 205.906032][ T7480] [ 206.525682][ T7480] netlink: 8 bytes leftover after parsing attributes in process `syz.3.340'. [ 206.847341][ T7496] netlink: 25 bytes leftover after parsing attributes in process `syz.1.344'. [ 207.164435][ T5639] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 207.172168][ T5639] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 208.351698][ T9] Process accounting resumed [ 208.493270][ T7525] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 209.147984][ T7535] netlink: 25 bytes leftover after parsing attributes in process `syz.3.354'. [ 209.316881][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.353'. [ 209.732927][ T7545] FAULT_INJECTION: forcing a failure. [ 209.732927][ T7545] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 209.813820][ T7501] Process accounting resumed [ 209.846514][ T7545] CPU: 1 UID: 0 PID: 7545 Comm: syz.0.356 Not tainted syzkaller #0 PREEMPT(full) [ 209.846558][ T7545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.846577][ T7545] Call Trace: [ 209.846588][ T7545] [ 209.846601][ T7545] dump_stack_lvl+0x100/0x190 [ 209.846645][ T7545] should_fail_ex.cold+0x5/0xa [ 209.846691][ T7545] core_sys_select+0x5d1/0xbb0 [ 209.846747][ T7545] ? __pfx_core_sys_select+0x10/0x10 [ 209.846839][ T7545] ? ktime_get_ts64+0x306/0x420 [ 209.846896][ T7545] ? ktime_get_ts64+0x318/0x420 [ 209.846958][ T7545] ? ktime_get_ts64+0x257/0x420 [ 209.847019][ T7545] kern_select+0x20c/0x270 [ 209.847063][ T7545] ? __pfx_kern_select+0x10/0x10 [ 209.847105][ T7545] ? xfd_validate_state+0x129/0x190 [ 209.847151][ T7545] __x64_sys_select+0xbd/0x160 [ 209.847190][ T7545] ? do_syscall_64+0x90/0xf80 [ 209.847241][ T7545] ? lockdep_hardirqs_on+0x78/0x100 [ 209.847291][ T7545] do_syscall_64+0x10b/0xf80 [ 209.847340][ T7545] ? clear_bhb_loop+0x40/0x90 [ 209.847382][ T7545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.847418][ T7545] RIP: 0033:0x7fc235f9cdd9 [ 209.847452][ T7545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.847484][ T7545] RSP: 002b:00007fc2341ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 209.847522][ T7545] RAX: ffffffffffffffda RBX: 00007fc236215fa0 RCX: 00007fc235f9cdd9 [ 209.847543][ T7545] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 209.847563][ T7545] RBP: 00007fc236032d69 R08: 0000200000000200 R09: 0000000000000000 [ 209.847585][ T7545] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 209.847605][ T7545] R13: 00007fc236216038 R14: 00007fc236215fa0 R15: 00007ffffa0c1d08 [ 209.847648][ T7545] [ 211.256567][ T7559] netlink: 8 bytes leftover after parsing attributes in process `syz.2.359'. [ 212.439953][ T7585] FAULT_INJECTION: forcing a failure. [ 212.439953][ T7585] name failslab, interval 1, probability 0, space 0, times 0 [ 212.503856][ T7585] CPU: 1 UID: 0 PID: 7585 Comm: syz.3.364 Not tainted syzkaller #0 PREEMPT(full) [ 212.503904][ T7585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 212.503926][ T7585] Call Trace: [ 212.503938][ T7585] [ 212.503951][ T7585] dump_stack_lvl+0x100/0x190 [ 212.503996][ T7585] should_fail_ex.cold+0x5/0xa [ 212.504042][ T7585] ? tomoyo_encode2+0xfb/0x3c0 [ 212.504085][ T7585] should_failslab+0xc2/0x120 [ 212.504132][ T7585] __kmalloc_noprof+0xe0/0x850 [ 212.504169][ T7585] ? d_absolute_path+0x136/0x1b0 [ 212.504224][ T7585] tomoyo_encode2+0xfb/0x3c0 [ 212.504274][ T7585] tomoyo_encode+0x29/0x50 [ 212.504315][ T7585] tomoyo_realpath_from_path+0x18c/0x690 [ 212.504370][ T7585] tomoyo_path_number_perm+0x23c/0x580 [ 212.504405][ T7585] ? tomoyo_path_number_perm+0x22e/0x580 [ 212.504444][ T7585] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 212.504483][ T7585] ? rcu_read_unlock+0x17/0x60 [ 212.504561][ T7585] ? current_check_access_path+0x269/0x430 [ 212.504607][ T7585] ? __pfx_current_check_access_path+0x10/0x10 [ 212.504655][ T7585] ? d_alloc_parallel+0x864/0x14e0 [ 212.504698][ T7585] tomoyo_path_mknod+0x164/0x190 [ 212.504748][ T7585] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 212.504797][ T7585] ? find_held_lock+0x2b/0x80 [ 212.504844][ T7585] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 212.504926][ T7585] security_path_mknod+0x161/0x300 [ 212.504981][ T7585] may_o_create+0x30/0x3a0 [ 212.505048][ T7585] lookup_open.isra.0+0xa0d/0x11b0 [ 212.505091][ T7585] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 212.505135][ T7585] ? __pfx___might_resched+0x10/0x10 [ 212.505180][ T7585] ? mnt_get_write_access+0x52/0x2f0 [ 212.505245][ T7585] ? __pfx_down_write+0x10/0x10 [ 212.505275][ T7585] ? mnt_get_write_access+0x1e9/0x2f0 [ 212.505339][ T7585] path_openat+0x2291/0x31a0 [ 212.505391][ T7585] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 212.505432][ T7585] ? __pfx_path_openat+0x10/0x10 [ 212.505491][ T7585] do_file_open+0x20e/0x430 [ 212.505537][ T7585] ? __pfx_do_file_open+0x10/0x10 [ 212.505612][ T7585] ? _raw_spin_unlock+0x28/0x50 [ 212.505654][ T7585] ? alloc_fd+0x476/0x790 [ 212.505706][ T7585] do_sys_openat2+0x10d/0x1e0 [ 212.505761][ T7585] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.505834][ T7585] __x64_sys_open+0xfe/0x1d0 [ 212.505890][ T7585] ? __pfx___x64_sys_open+0x10/0x10 [ 212.505952][ T7585] ? rcu_is_watching+0x12/0xc0 [ 212.506002][ T7585] do_syscall_64+0x10b/0xf80 [ 212.506052][ T7585] ? clear_bhb_loop+0x40/0x90 [ 212.506095][ T7585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.506133][ T7585] RIP: 0033:0x7f2844d9cdd9 [ 212.506181][ T7585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 212.506215][ T7585] RSP: 002b:00007f2842ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 212.506248][ T7585] RAX: ffffffffffffffda RBX: 00007f2845015fa0 RCX: 00007f2844d9cdd9 [ 212.506269][ T7585] RDX: 0000000000000154 RSI: 0000000000022240 RDI: 0000200000000800 [ 212.506290][ T7585] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 212.506310][ T7585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.506330][ T7585] R13: 00007f2845016038 R14: 00007f2845015fa0 R15: 00007ffcb9335bd8 [ 212.506372][ T7585] [ 212.838418][ T7585] ERROR: Out of memory at tomoyo_realpath_from_path. [ 213.447971][ T7588] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.651700][ T7588] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.909085][ T7588] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.024601][ T7600] binder_alloc: binder_alloc_mmap_handler: 7599 0-4001000 already mapped failed -16 [ 214.171875][ T7588] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.353393][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.370'. [ 214.656259][ T7610] netlink: 25 bytes leftover after parsing attributes in process `syz.1.371'. [ 216.850499][ T7628] FAULT_INJECTION: forcing a failure. [ 216.850499][ T7628] name failslab, interval 1, probability 0, space 0, times 0 [ 216.868862][ T7628] CPU: 1 UID: 0 PID: 7628 Comm: syz.0.375 Not tainted syzkaller #0 PREEMPT(full) [ 216.868909][ T7628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.868929][ T7628] Call Trace: [ 216.868940][ T7628] [ 216.868953][ T7628] dump_stack_lvl+0x100/0x190 [ 216.868997][ T7628] should_fail_ex.cold+0x5/0xa [ 216.869041][ T7628] ? drm_atomic_state_init+0x190/0x490 [ 216.869092][ T7628] should_failslab+0xc2/0x120 [ 216.869134][ T7628] __kmalloc_noprof+0xe0/0x850 [ 216.869180][ T7628] drm_atomic_state_init+0x190/0x490 [ 216.869229][ T7628] ? kasan_save_track+0x14/0x30 [ 216.869269][ T7628] drm_atomic_state_alloc+0xd3/0x120 [ 216.869324][ T7628] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 216.869359][ T7628] ? rcu_is_watching+0x12/0xc0 [ 216.869401][ T7628] ? trace_contention_end+0x122/0x170 [ 216.869439][ T7628] ? __mutex_lock+0x26d/0x1b10 [ 216.869505][ T7628] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 216.869542][ T7628] ? drm_master_internal_acquire+0x21/0x80 [ 216.869634][ T7628] drm_client_modeset_commit_locked+0x14d/0x580 [ 216.869678][ T7628] drm_client_modeset_commit+0x4f/0x80 [ 216.869713][ T7628] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 216.869776][ T7628] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 216.869835][ T7628] drm_fbdev_client_restore+0x1b/0x30 [ 216.869880][ T7628] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 216.869925][ T7628] drm_client_dev_restore+0x205/0x2a0 [ 216.869992][ T7628] drm_release+0x2c6/0x360 [ 216.870045][ T7628] ? __pfx_drm_release+0x10/0x10 [ 216.870099][ T7628] __fput+0x3ff/0xb50 [ 216.870160][ T7628] task_work_run+0x150/0x240 [ 216.870198][ T7628] ? __pfx_task_work_run+0x10/0x10 [ 216.870244][ T7628] ? rcu_is_watching+0x12/0xc0 [ 216.870292][ T7628] exit_to_user_mode_loop+0x100/0x4a0 [ 216.870328][ T7628] ? do_syscall_64+0x519/0xf80 [ 216.870381][ T7628] do_syscall_64+0x6f2/0xf80 [ 216.870430][ T7628] ? clear_bhb_loop+0x40/0x90 [ 216.870473][ T7628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.870515][ T7628] RIP: 0033:0x7fc235f9cdd9 [ 216.870540][ T7628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.870571][ T7628] RSP: 002b:00007fc2341ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 216.870602][ T7628] RAX: 0000000000000000 RBX: 00007fc236215fa0 RCX: 00007fc235f9cdd9 [ 216.870622][ T7628] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 216.870640][ T7628] RBP: 00007fc236032d69 R08: 0000000000000000 R09: 0000000000000000 [ 216.870659][ T7628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.870677][ T7628] R13: 00007fc236216038 R14: 00007fc236215fa0 R15: 00007ffffa0c1d08 [ 216.870721][ T7628] [ 217.236883][ T5631] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 217.817473][ T7639] FAULT_INJECTION: forcing a failure. [ 217.817473][ T7639] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.885722][ T7639] CPU: 1 UID: 0 PID: 7639 Comm: syz.0.377 Not tainted syzkaller #0 PREEMPT(full) [ 217.885766][ T7639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.885785][ T7639] Call Trace: [ 217.885796][ T7639] [ 217.885808][ T7639] dump_stack_lvl+0x100/0x190 [ 217.885853][ T7639] should_fail_ex.cold+0x5/0xa [ 217.885895][ T7639] _copy_to_user+0x32/0xd0 [ 217.885934][ T7639] simple_read_from_buffer+0xcb/0x170 [ 217.885979][ T7639] aqm_read+0x2ed/0x4a0 [ 217.886020][ T7639] ? __pfx_aqm_read+0x10/0x10 [ 217.886079][ T7639] ? __debugfs_file_get+0x1fc/0x860 [ 217.886121][ T7639] ? __pfx___debugfs_file_get+0x10/0x10 [ 217.886176][ T7639] short_proxy_read+0x12e/0x1a0 [ 217.886222][ T7639] ? __pfx_short_proxy_read+0x10/0x10 [ 217.886269][ T7639] vfs_readv+0x5d8/0x8d0 [ 217.886318][ T7639] ? __pfx_vfs_readv+0x10/0x10 [ 217.886381][ T7639] ? __fget_files+0x21f/0x3d0 [ 217.886443][ T7639] ? do_preadv+0x1ac/0x270 [ 217.886477][ T7639] do_preadv+0x1ac/0x270 [ 217.886516][ T7639] ? __pfx_do_preadv+0x10/0x10 [ 217.886557][ T7639] ? rcu_is_watching+0x12/0xc0 [ 217.886605][ T7639] do_syscall_64+0x10b/0xf80 [ 217.886656][ T7639] ? clear_bhb_loop+0x40/0x90 [ 217.886698][ T7639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.886733][ T7639] RIP: 0033:0x7fc235f9cdd9 [ 217.886762][ T7639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.886795][ T7639] RSP: 002b:00007fc2341ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 217.886828][ T7639] RAX: ffffffffffffffda RBX: 00007fc236215fa0 RCX: 00007fc235f9cdd9 [ 217.886850][ T7639] RDX: 0000000000000005 RSI: 00002000000000c0 RDI: 0000000000000007 [ 217.886871][ T7639] RBP: 00007fc236032d69 R08: 0000000000000003 R09: 0000000000000000 [ 217.886891][ T7639] R10: 0000000000000037 R11: 0000000000000246 R12: 0000000000000000 [ 217.886911][ T7639] R13: 00007fc236216038 R14: 00007fc236215fa0 R15: 00007ffffa0c1d08 [ 217.886955][ T7639] [ 218.371913][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.0.377'. [ 219.155930][ T7647] FAULT_INJECTION: forcing a failure. [ 219.155930][ T7647] name failslab, interval 1, probability 0, space 0, times 0 [ 219.177934][ T7647] CPU: 0 UID: 0 PID: 7647 Comm: syz.1.379 Not tainted syzkaller #0 PREEMPT(full) [ 219.177977][ T7647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.177997][ T7647] Call Trace: [ 219.178007][ T7647] [ 219.178019][ T7647] dump_stack_lvl+0x100/0x190 [ 219.178062][ T7647] should_fail_ex.cold+0x5/0xa [ 219.178103][ T7647] ? memcg_list_lru_alloc+0x4ec/0x740 [ 219.178135][ T7647] should_failslab+0xc2/0x120 [ 219.178178][ T7647] __kmalloc_noprof+0xe0/0x850 [ 219.178211][ T7647] ? __lock_acquire+0x4a5/0x2630 [ 219.178250][ T7647] memcg_list_lru_alloc+0x4ec/0x740 [ 219.178293][ T7647] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 219.178359][ T7647] __memcg_slab_post_alloc_hook+0x27e/0xff0 [ 219.178411][ T7647] ? kasan_save_track+0x14/0x30 [ 219.178445][ T7647] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 219.178496][ T7647] ? alloc_inode+0x183/0x250 [ 219.178559][ T7647] alloc_inode+0x183/0x250 [ 219.178610][ T7647] path_from_stashed+0x25b/0x750 [ 219.178654][ T7647] ? do_raw_spin_unlock+0x145/0x1e0 [ 219.178696][ T7647] ns_get_path+0x60/0x80 [ 219.178737][ T7647] proc_ns_get_link+0x121/0x230 [ 219.178772][ T7647] ? __pfx_proc_ns_get_link+0x10/0x10 [ 219.178811][ T7647] ? atime_needs_update+0x8b/0x6b0 [ 219.178844][ T7647] pick_link+0xd17/0x13c0 [ 219.178875][ T7647] ? __pfx_proc_ns_get_link+0x10/0x10 [ 219.178915][ T7647] step_into_slowpath+0x9ba/0xf90 [ 219.178955][ T7647] ? __pfx_step_into_slowpath+0x10/0x10 [ 219.179005][ T7647] ? find_held_lock+0x2b/0x80 [ 219.179069][ T7647] path_openat+0xf95/0x31a0 [ 219.179149][ T7647] ? __pfx_path_openat+0x10/0x10 [ 219.179209][ T7647] do_file_open+0x20e/0x430 [ 219.179257][ T7647] ? __pfx_do_file_open+0x10/0x10 [ 219.179330][ T7647] ? alloc_fd+0x476/0x790 [ 219.179377][ T7647] ? do_getname+0x191/0x390 [ 219.179433][ T7647] do_sys_openat2+0x10d/0x1e0 [ 219.179489][ T7647] ? __pfx_do_sys_openat2+0x10/0x10 [ 219.179553][ T7647] ? __fget_files+0x21f/0x3d0 [ 219.179603][ T7647] __x64_sys_openat+0x12d/0x210 [ 219.179660][ T7647] ? __pfx___x64_sys_openat+0x10/0x10 [ 219.179721][ T7647] ? rcu_is_watching+0x12/0xc0 [ 219.179768][ T7647] do_syscall_64+0x10b/0xf80 [ 219.179818][ T7647] ? clear_bhb_loop+0x40/0x90 [ 219.179860][ T7647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.179896][ T7647] RIP: 0033:0x7f9c00f5d60e [ 219.179923][ T7647] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 219.179955][ T7647] RSP: 002b:00007f9c01eedec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 219.179987][ T7647] RAX: ffffffffffffffda RBX: 00007f9c01eee6c0 RCX: 00007f9c00f5d60e [ 219.180008][ T7647] RDX: 0000000000000002 RSI: 00007f9c01eedf90 RDI: ffffffffffffff9c [ 219.180028][ T7647] RBP: 00007f9c01032d69 R08: 0000000000000000 R09: 0000000000000000 [ 219.180047][ T7647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.180065][ T7647] R13: 00007f9c01216038 R14: 00007f9c01215fa0 R15: 00007ffc754d5238 [ 219.180106][ T7647] [ 219.956721][ T7657] netlink: 25 bytes leftover after parsing attributes in process `syz.0.381'. [ 220.247490][ T7661] FAULT_INJECTION: forcing a failure. [ 220.247490][ T7661] name failslab, interval 1, probability 0, space 0, times 0 [ 220.296983][ T7661] CPU: 1 UID: 0 PID: 7661 Comm: syz.0.382 Not tainted syzkaller #0 PREEMPT(full) [ 220.297023][ T7661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 220.297040][ T7661] Call Trace: [ 220.297050][ T7661] [ 220.297063][ T7661] dump_stack_lvl+0x100/0x190 [ 220.297108][ T7661] should_fail_ex.cold+0x5/0xa [ 220.297152][ T7661] ? tomoyo_realpath_from_path+0xb6/0x690 [ 220.297197][ T7661] should_failslab+0xc2/0x120 [ 220.297239][ T7661] __kmalloc_noprof+0xe0/0x850 [ 220.297270][ T7661] ? kfree+0x1dd/0x6c0 [ 220.297327][ T7661] tomoyo_realpath_from_path+0xb6/0x690 [ 220.297385][ T7661] tomoyo_path_number_perm+0x23c/0x580 [ 220.297431][ T7661] ? tomoyo_path_number_perm+0x22e/0x580 [ 220.297473][ T7661] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 220.297522][ T7661] ? rcu_read_unlock+0x17/0x60 [ 220.297600][ T7661] ? current_check_access_path+0x269/0x430 [ 220.297646][ T7661] ? __pfx_current_check_access_path+0x10/0x10 [ 220.297695][ T7661] ? d_alloc_parallel+0x864/0x14e0 [ 220.297739][ T7661] tomoyo_path_mknod+0x164/0x190 [ 220.297789][ T7661] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 220.297837][ T7661] ? find_held_lock+0x2b/0x80 [ 220.297885][ T7661] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 220.297942][ T7661] security_path_mknod+0x161/0x300 [ 220.297990][ T7661] may_o_create+0x30/0x3a0 [ 220.298049][ T7661] lookup_open.isra.0+0xa0d/0x11b0 [ 220.298094][ T7661] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 220.298138][ T7661] ? __pfx___might_resched+0x10/0x10 [ 220.298175][ T7661] ? mnt_get_write_access+0x52/0x2f0 [ 220.298248][ T7661] ? __pfx_down_write+0x10/0x10 [ 220.298284][ T7661] ? mnt_get_write_access+0x1e9/0x2f0 [ 220.298364][ T7661] path_openat+0x2291/0x31a0 [ 220.298424][ T7661] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 220.298466][ T7661] ? __pfx_path_openat+0x10/0x10 [ 220.298529][ T7661] do_file_open+0x20e/0x430 [ 220.298577][ T7661] ? __pfx_do_file_open+0x10/0x10 [ 220.298652][ T7661] ? _raw_spin_unlock+0x28/0x50 [ 220.298696][ T7661] ? alloc_fd+0x476/0x790 [ 220.298752][ T7661] do_sys_openat2+0x10d/0x1e0 [ 220.298807][ T7661] ? __pfx_do_sys_openat2+0x10/0x10 [ 220.298878][ T7661] __x64_sys_open+0xfe/0x1d0 [ 220.298932][ T7661] ? __pfx___x64_sys_open+0x10/0x10 [ 220.298994][ T7661] ? rcu_is_watching+0x12/0xc0 [ 220.299041][ T7661] do_syscall_64+0x10b/0xf80 [ 220.299089][ T7661] ? clear_bhb_loop+0x40/0x90 [ 220.299131][ T7661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.299167][ T7661] RIP: 0033:0x7fc235f9cdd9 [ 220.299214][ T7661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 220.299246][ T7661] RSP: 002b:00007fc2341ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 220.299276][ T7661] RAX: ffffffffffffffda RBX: 00007fc236215fa0 RCX: 00007fc235f9cdd9 [ 220.299298][ T7661] RDX: 0000000000000154 RSI: 0000000000022240 RDI: 0000200000000800 [ 220.299318][ T7661] RBP: 00007fc236032d69 R08: 0000000000000000 R09: 0000000000000000 [ 220.299338][ T7661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 220.299357][ T7661] R13: 00007fc236216038 R14: 00007fc236215fa0 R15: 00007ffffa0c1d08 [ 220.299401][ T7661] [ 220.683813][ T7661] ERROR: Out of memory at tomoyo_realpath_from_path. [ 221.580667][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.0.387'. [ 222.096492][ T7688] random: crng reseeded on system resumption [ 222.334800][ T7691] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 222.800522][ T7701] Device name cannot be null; rc = [-22] [ 223.119072][ T7704] can: request_module (can-proto-5) failed. [ 223.136351][ T7706] can: request_module (can-proto-5) failed. [ 224.712482][ T7738] FAULT_INJECTION: forcing a failure. [ 224.712482][ T7738] name failslab, interval 1, probability 0, space 0, times 0 [ 224.745158][ T7738] CPU: 1 UID: 0 PID: 7738 Comm: syz.1.397 Not tainted syzkaller #0 PREEMPT(full) [ 224.745212][ T7738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.745232][ T7738] Call Trace: [ 224.745247][ T7738] [ 224.745261][ T7738] dump_stack_lvl+0x100/0x190 [ 224.745305][ T7738] should_fail_ex.cold+0x5/0xa [ 224.745355][ T7738] should_failslab+0xc2/0x120 [ 224.745402][ T7738] __kmalloc_cache_noprof+0x7a/0x6f0 [ 224.745454][ T7738] ? vkms_plane_duplicate_state+0x45/0x130 [ 224.745506][ T7738] vkms_plane_duplicate_state+0x45/0x130 [ 224.745551][ T7738] drm_atomic_get_plane_state+0x279/0x760 [ 224.745608][ T7738] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 224.745648][ T7738] ? rcu_is_watching+0x12/0xc0 [ 224.745696][ T7738] ? __mutex_lock+0x26d/0x1b10 [ 224.745753][ T7738] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 224.745790][ T7738] ? drm_master_internal_acquire+0x21/0x80 [ 224.745894][ T7738] drm_client_modeset_commit_locked+0x14d/0x580 [ 224.745939][ T7738] drm_client_modeset_commit+0x4f/0x80 [ 224.745976][ T7738] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 224.746039][ T7738] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 224.746100][ T7738] drm_fbdev_client_restore+0x1b/0x30 [ 224.746147][ T7738] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 224.746195][ T7738] drm_client_dev_restore+0x205/0x2a0 [ 224.746263][ T7738] drm_release+0x2c6/0x360 [ 224.746317][ T7738] ? __pfx_drm_release+0x10/0x10 [ 224.746370][ T7738] __fput+0x3ff/0xb50 [ 224.746430][ T7738] task_work_run+0x150/0x240 [ 224.746467][ T7738] ? __pfx_task_work_run+0x10/0x10 [ 224.746506][ T7738] ? rcu_is_watching+0x12/0xc0 [ 224.746555][ T7738] exit_to_user_mode_loop+0x100/0x4a0 [ 224.746591][ T7738] ? do_syscall_64+0x519/0xf80 [ 224.746646][ T7738] do_syscall_64+0x6f2/0xf80 [ 224.746695][ T7738] ? clear_bhb_loop+0x40/0x90 [ 224.746738][ T7738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.746774][ T7738] RIP: 0033:0x7f9c00f9cdd9 [ 224.746808][ T7738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.746847][ T7738] RSP: 002b:00007f9c01eee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 224.746878][ T7738] RAX: 0000000000000000 RBX: 00007f9c01215fa0 RCX: 00007f9c00f9cdd9 [ 224.746899][ T7738] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 224.746917][ T7738] RBP: 00007f9c01032d69 R08: 0000000000000000 R09: 0000000000000000 [ 224.746937][ T7738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.746956][ T7738] R13: 00007f9c01216038 R14: 00007f9c01215fa0 R15: 00007ffc754d5238 [ 224.747005][ T7738] [ 225.421623][ T7748] netlink: 146 bytes leftover after parsing attributes in process `syz.1.398'. [ 225.461140][ T7748] random: crng reseeded on system resumption [ 225.827586][ T7752] FAULT_INJECTION: forcing a failure. [ 225.827586][ T7752] name failslab, interval 1, probability 0, space 0, times 0 [ 225.879089][ T7752] CPU: 0 UID: 0 PID: 7752 Comm: syz.0.399 Not tainted syzkaller #0 PREEMPT(full) [ 225.879137][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 225.879158][ T7752] Call Trace: [ 225.879169][ T7752] [ 225.879182][ T7752] dump_stack_lvl+0x100/0x190 [ 225.879228][ T7752] should_fail_ex.cold+0x5/0xa [ 225.879274][ T7752] should_failslab+0xc2/0x120 [ 225.879316][ T7752] __kmalloc_cache_noprof+0x7a/0x6f0 [ 225.879367][ T7752] ? drm_atomic_state_alloc+0xb8/0x120 [ 225.879428][ T7752] drm_atomic_state_alloc+0xb8/0x120 [ 225.879482][ T7752] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 225.879518][ T7752] ? rcu_is_watching+0x12/0xc0 [ 225.879561][ T7752] ? trace_contention_end+0x122/0x170 [ 225.879601][ T7752] ? __mutex_lock+0x26d/0x1b10 [ 225.879666][ T7752] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 225.879703][ T7752] ? drm_master_internal_acquire+0x21/0x80 [ 225.879798][ T7752] drm_client_modeset_commit_locked+0x14d/0x580 [ 225.879845][ T7752] drm_client_modeset_commit+0x4f/0x80 [ 225.879881][ T7752] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 225.879945][ T7752] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 225.880010][ T7752] drm_fbdev_client_restore+0x1b/0x30 [ 225.880057][ T7752] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 225.880103][ T7752] drm_client_dev_restore+0x205/0x2a0 [ 225.880169][ T7752] drm_release+0x2c6/0x360 [ 225.880223][ T7752] ? __pfx_drm_release+0x10/0x10 [ 225.880275][ T7752] __fput+0x3ff/0xb50 [ 225.880335][ T7752] task_work_run+0x150/0x240 [ 225.880385][ T7752] ? __pfx_task_work_run+0x10/0x10 [ 225.880423][ T7752] ? rcu_is_watching+0x12/0xc0 [ 225.880469][ T7752] exit_to_user_mode_loop+0x100/0x4a0 [ 225.880502][ T7752] ? do_syscall_64+0x519/0xf80 [ 225.880554][ T7752] do_syscall_64+0x6f2/0xf80 [ 225.880601][ T7752] ? clear_bhb_loop+0x40/0x90 [ 225.880649][ T7752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.880683][ T7752] RIP: 0033:0x7fc235f9cdd9 [ 225.880712][ T7752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 225.880743][ T7752] RSP: 002b:00007fc2341ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 225.880775][ T7752] RAX: 0000000000000000 RBX: 00007fc236215fa0 RCX: 00007fc235f9cdd9 [ 225.880795][ T7752] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 225.880815][ T7752] RBP: 00007fc236032d69 R08: 0000000000000000 R09: 0000000000000000 [ 225.880834][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.880853][ T7752] R13: 00007fc236216038 R14: 00007fc236215fa0 R15: 00007ffffa0c1d08 [ 225.880898][ T7752] [ 227.317662][ T7780] Device name cannot be null; rc = [-22] [ 228.406241][ T7803] FAULT_INJECTION: forcing a failure. [ 228.406241][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 228.431201][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.3.409 Not tainted syzkaller #0 PREEMPT(full) [ 228.431246][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 228.431265][ T7803] Call Trace: [ 228.431276][ T7803] [ 228.431289][ T7803] dump_stack_lvl+0x100/0x190 [ 228.431334][ T7803] should_fail_ex.cold+0x5/0xa [ 228.431379][ T7803] should_failslab+0xc2/0x120 [ 228.431422][ T7803] __kmalloc_cache_noprof+0x7a/0x6f0 [ 228.431475][ T7803] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 228.431527][ T7803] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 228.431582][ T7803] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 228.431635][ T7803] vidtv_channel_si_init+0x1365/0x18f0 [ 228.431713][ T7803] vidtv_mux_init+0x526/0xbf0 [ 228.431751][ T7803] vidtv_start_feed+0x34e/0x500 [ 228.431794][ T7803] ? __pfx_vidtv_start_feed+0x10/0x10 [ 228.431835][ T7803] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 228.431884][ T7803] ? mark_held_locks+0x40/0x70 [ 228.431925][ T7803] ? __pfx_vidtv_start_feed+0x10/0x10 [ 228.431971][ T7803] dmx_ts_feed_start_filtering+0xf6/0x220 [ 228.432024][ T7803] dvb_dmxdev_start_feed+0x273/0x3f0 [ 228.432068][ T7803] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 228.432112][ T7803] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 228.432153][ T7803] dvb_demux_do_ioctl+0xe64/0x1200 [ 228.432202][ T7803] dvb_usercopy+0x167/0x340 [ 228.432231][ T7803] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 228.432275][ T7803] ? __pfx_dvb_usercopy+0x10/0x10 [ 228.432327][ T7803] ? __fget_files+0x21f/0x3d0 [ 228.432376][ T7803] dvb_demux_ioctl+0x29/0x40 [ 228.432412][ T7803] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 228.432448][ T7803] __x64_sys_ioctl+0x18e/0x210 [ 228.432486][ T7803] do_syscall_64+0x10b/0xf80 [ 228.432536][ T7803] ? clear_bhb_loop+0x40/0x90 [ 228.432578][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.432613][ T7803] RIP: 0033:0x7f2844d9cdd9 [ 228.432641][ T7803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.432685][ T7803] RSP: 002b:00007f2842ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.432729][ T7803] RAX: ffffffffffffffda RBX: 00007f2845015fa0 RCX: 00007f2844d9cdd9 [ 228.432757][ T7803] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000006 [ 228.432778][ T7803] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 228.432800][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.432820][ T7803] R13: 00007f2845016038 R14: 00007f2845015fa0 R15: 00007ffcb9335bd8 [ 228.432867][ T7803] [ 232.119776][ T7850] FAULT_INJECTION: forcing a failure. [ 232.119776][ T7850] name failslab, interval 1, probability 0, space 0, times 0 [ 232.200518][ T7850] CPU: 0 UID: 0 PID: 7850 Comm: syz.3.418 Not tainted syzkaller #0 PREEMPT(full) [ 232.200563][ T7850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 232.200587][ T7850] Call Trace: [ 232.200598][ T7850] [ 232.200612][ T7850] dump_stack_lvl+0x100/0x190 [ 232.200659][ T7850] should_fail_ex.cold+0x5/0xa [ 232.200705][ T7850] should_failslab+0xc2/0x120 [ 232.200747][ T7850] __kmalloc_cache_noprof+0x7a/0x6f0 [ 232.200799][ T7850] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 232.200872][ T7850] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 232.200939][ T7850] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 232.201026][ T7850] vidtv_mux_init+0x748/0xbf0 [ 232.201066][ T7850] vidtv_start_feed+0x34e/0x500 [ 232.201111][ T7850] ? __pfx_vidtv_start_feed+0x10/0x10 [ 232.201157][ T7850] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 232.201211][ T7850] ? mark_held_locks+0x40/0x70 [ 232.201251][ T7850] ? __pfx_vidtv_start_feed+0x10/0x10 [ 232.201292][ T7850] dmx_ts_feed_start_filtering+0xf6/0x220 [ 232.201346][ T7850] dvb_dmxdev_start_feed+0x273/0x3f0 [ 232.201391][ T7850] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 232.201438][ T7850] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 232.201484][ T7850] dvb_demux_do_ioctl+0xe64/0x1200 [ 232.201538][ T7850] dvb_usercopy+0x167/0x340 [ 232.201573][ T7850] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 232.201618][ T7850] ? __pfx_dvb_usercopy+0x10/0x10 [ 232.201671][ T7850] ? __fget_files+0x21f/0x3d0 [ 232.201722][ T7850] dvb_demux_ioctl+0x29/0x40 [ 232.201757][ T7850] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 232.201795][ T7850] __x64_sys_ioctl+0x18e/0x210 [ 232.201834][ T7850] do_syscall_64+0x10b/0xf80 [ 232.201885][ T7850] ? clear_bhb_loop+0x40/0x90 [ 232.201938][ T7850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.201974][ T7850] RIP: 0033:0x7f2844d9cdd9 [ 232.202009][ T7850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.202045][ T7850] RSP: 002b:00007f2842ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 232.202077][ T7850] RAX: ffffffffffffffda RBX: 00007f2845015fa0 RCX: 00007f2844d9cdd9 [ 232.202100][ T7850] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000006 [ 232.202121][ T7850] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 232.202143][ T7850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.202164][ T7850] R13: 00007f2845016038 R14: 00007f2845015fa0 R15: 00007ffcb9335bd8 [ 232.202210][ T7850] [ 232.836174][ T7863] kAFS: No cell specified [ 233.876498][ T7883] cifs: Unknown parameter '‰ƒ´ÕéŒ)¬ Up†µÌ¢{´¼V ]7ž62']ßΨÉú!²gÉÊ®Ë7ú9½ófM¸<*y¢sEéhîé”' [ 233.943823][ T7874] futex_wake_op: syz.2.425 tries to shift op by -2048; fix this program [ 233.968542][ T7874] futex_wake_op: syz.2.425 tries to shift op by -2048; fix this program [ 236.175538][ T7923] capability: warning: `syz.2.433' uses 32-bit capabilities (legacy support in use) [ 238.551558][ T7954] size and base must be multiples of 4 kiB [ 238.561477][ T7954] CPU: 1 UID: 0 PID: 7954 Comm: syz.3.439 Not tainted syzkaller #0 PREEMPT(full) [ 238.561518][ T7954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 238.561537][ T7954] Call Trace: [ 238.561547][ T7954] [ 238.561557][ T7954] dump_stack_lvl+0x100/0x190 [ 238.561599][ T7954] mtrr_del.cold+0x72/0x85 [ 238.561634][ T7954] mtrr_ioctl+0xbc8/0xcf0 [ 238.561668][ T7954] ? __pfx_mtrr_ioctl+0x10/0x10 [ 238.561706][ T7954] ? find_held_lock+0x2b/0x80 [ 238.561746][ T7954] ? __fget_files+0x21f/0x3d0 [ 238.561776][ T7954] ? __pfx_mtrr_ioctl+0x10/0x10 [ 238.561799][ T7954] proc_reg_unlocked_ioctl+0x229/0x320 [ 238.561828][ T7954] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 238.561861][ T7954] __x64_sys_ioctl+0x18e/0x210 [ 238.561887][ T7954] do_syscall_64+0x10b/0xf80 [ 238.561922][ T7954] ? clear_bhb_loop+0x40/0x90 [ 238.561950][ T7954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 238.561975][ T7954] RIP: 0033:0x7f2844d9cdd9 [ 238.561993][ T7954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 238.562016][ T7954] RSP: 002b:00007f2842fd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 238.562039][ T7954] RAX: ffffffffffffffda RBX: 00007f2845016090 RCX: 00007f2844d9cdd9 [ 238.562054][ T7954] RDX: 0000000000000003 RSI: 00000000400c4d04 RDI: 0000000000000003 [ 238.562068][ T7954] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 238.562083][ T7954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 238.562096][ T7954] R13: 00007f2845016128 R14: 00007f2845016090 R15: 00007ffcb9335bd8 [ 238.562126][ T7954] [ 238.988100][ T7965] FAULT_INJECTION: forcing a failure. [ 238.988100][ T7965] name failslab, interval 1, probability 0, space 0, times 0 [ 239.001377][ T7965] CPU: 0 UID: 0 PID: 7965 Comm: syz.0.442 Not tainted syzkaller #0 PREEMPT(full) [ 239.001429][ T7965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.001455][ T7965] Call Trace: [ 239.001467][ T7965] [ 239.001481][ T7965] dump_stack_lvl+0x100/0x190 [ 239.001536][ T7965] should_fail_ex.cold+0x5/0xa [ 239.001589][ T7965] should_failslab+0xc2/0x120 [ 239.001639][ T7965] __kmalloc_cache_noprof+0x7a/0x6f0 [ 239.001700][ T7965] ? vkms_plane_duplicate_state+0x45/0x130 [ 239.001762][ T7965] vkms_plane_duplicate_state+0x45/0x130 [ 239.001819][ T7965] drm_atomic_get_plane_state+0x279/0x760 [ 239.001884][ T7965] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 239.001928][ T7965] ? rcu_is_watching+0x12/0xc0 [ 239.001983][ T7965] ? __mutex_lock+0x26d/0x1b10 [ 239.002047][ T7965] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 239.002091][ T7965] ? drm_master_internal_acquire+0x21/0x80 [ 239.002199][ T7965] drm_client_modeset_commit_locked+0x14d/0x580 [ 239.002251][ T7965] drm_client_modeset_commit+0x4f/0x80 [ 239.002294][ T7965] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 239.002380][ T7965] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 239.002453][ T7965] drm_fbdev_client_restore+0x1b/0x30 [ 239.002507][ T7965] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 239.002561][ T7965] drm_client_dev_restore+0x205/0x2a0 [ 239.002639][ T7965] drm_release+0x2c6/0x360 [ 239.002705][ T7965] ? __pfx_drm_release+0x10/0x10 [ 239.002769][ T7965] __fput+0x3ff/0xb50 [ 239.002841][ T7965] task_work_run+0x150/0x240 [ 239.002887][ T7965] ? __pfx_task_work_run+0x10/0x10 [ 239.002933][ T7965] ? rcu_is_watching+0x12/0xc0 [ 239.002990][ T7965] exit_to_user_mode_loop+0x100/0x4a0 [ 239.003031][ T7965] ? do_syscall_64+0x519/0xf80 [ 239.003096][ T7965] do_syscall_64+0x6f2/0xf80 [ 239.003156][ T7965] ? clear_bhb_loop+0x40/0x90 [ 239.003208][ T7965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.003252][ T7965] RIP: 0033:0x7fc235f9cdd9 [ 239.003286][ T7965] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.003325][ T7965] RSP: 002b:00007fc2341ee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 239.003374][ T7965] RAX: 0000000000000000 RBX: 00007fc236215fa0 RCX: 00007fc235f9cdd9 [ 239.003399][ T7965] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 239.003422][ T7965] RBP: 00007fc236032d69 R08: 0000000000000000 R09: 0000000000000000 [ 239.003447][ T7965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.003471][ T7965] R13: 00007fc236216038 R14: 00007fc236215fa0 R15: 00007ffffa0c1d08 [ 239.003523][ T7965] [ 239.500269][ T7956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 239.509817][ T7956] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 239.610828][ T7956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 239.666506][ T7956] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 239.686777][ T7956] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 239.716352][ T7956] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 241.041728][ T30] audit: type=1800 audit(1778324318.857:5): pid=7963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.441" name="file0" dev="tmpfs" ino=589 res=0 errno=0 [ 241.558496][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 241.640429][ T5639] Bluetooth: hci1: command 0x2016 tx timeout [ 241.671738][ T5639] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 241.718469][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout [ 241.732685][ T5631] Bluetooth: hci2: command 0x2016 tx timeout [ 241.751191][ T7959] Process accounting paused [ 243.394950][ T8008] QAT: Invalid ioctl 65283 [ 243.638412][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 243.798334][ T5639] Bluetooth: hci3: command 0x0c1a tx timeout [ 244.409311][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.1.458'. [ 245.407192][ T8047] pim6reg: entered allmulticast mode [ 246.235508][ T8058] FAULT_INJECTION: forcing a failure. [ 246.235508][ T8058] name fail_futex, interval 1, probability 0, space 0, times 0 [ 246.275028][ T8058] CPU: 1 UID: 0 PID: 8058 Comm: syz.3.466 Not tainted syzkaller #0 PREEMPT(full) [ 246.275075][ T8058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 246.275100][ T8058] Call Trace: [ 246.275111][ T8058] [ 246.275123][ T8058] dump_stack_lvl+0x100/0x190 [ 246.275167][ T8058] should_fail_ex.cold+0x5/0xa [ 246.275210][ T8058] get_futex_key+0x1d2/0x1510 [ 246.275262][ T8058] ? __pfx_get_futex_key+0x10/0x10 [ 246.275300][ T8058] ? __fput+0x68d/0xb50 [ 246.275353][ T8058] futex_wait_setup+0x83/0x510 [ 246.275408][ T8058] __futex_wait+0x19f/0x300 [ 246.275458][ T8058] ? __pfx___futex_wait+0x10/0x10 [ 246.275515][ T8058] ? __pfx_futex_wake_mark+0x10/0x10 [ 246.275585][ T8058] ? futex_hash+0x2ad/0x370 [ 246.275625][ T8058] ? futex_hash+0x141/0x370 [ 246.275664][ T8058] futex_wait+0xe6/0x370 [ 246.275716][ T8058] ? __pfx_futex_wait+0x10/0x10 [ 246.275785][ T8058] do_futex+0x1ef/0x350 [ 246.275824][ T8058] ? __pfx_do_futex+0x10/0x10 [ 246.275864][ T8058] ? __pfx___might_resched+0x10/0x10 [ 246.275911][ T8058] ? blkcg_maybe_throttle_current+0x5e7/0xeb0 [ 246.275962][ T8058] __x64_sys_futex+0x34f/0x4d0 [ 246.276004][ T8058] ? __pfx_task_work_run+0x10/0x10 [ 246.276040][ T8058] ? __pfx___x64_sys_futex+0x10/0x10 [ 246.276080][ T8058] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 246.276114][ T8058] ? rcu_is_watching+0x12/0xc0 [ 246.276159][ T8058] ? rcu_is_watching+0x12/0xc0 [ 246.276207][ T8058] do_syscall_64+0x10b/0xf80 [ 246.276259][ T8058] ? clear_bhb_loop+0x40/0x90 [ 246.276299][ T8058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.276335][ T8058] RIP: 0033:0x7f2844d9cdd9 [ 246.276363][ T8058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 246.276396][ T8058] RSP: 002b:00007f2842ff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 246.276436][ T8058] RAX: ffffffffffffffda RBX: 00007f2845015fa8 RCX: 00007f2844d9cdd9 [ 246.276458][ T8058] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2845015fa8 [ 246.276480][ T8058] RBP: 00007f2845015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 246.276501][ T8058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.276520][ T8058] R13: 00007f2845016038 R14: 00007ffcb9335af0 R15: 00007ffcb9335bd8 [ 246.276563][ T8058] [ 246.646135][ T8068] netlink: 25 bytes leftover after parsing attributes in process `syz.0.467'. [ 247.286095][ T8080] Device name cannot be null; rc = [-22] [ 248.972910][ T5639] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 249.054600][ T5639] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 249.054655][ T5639] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 249.072274][ T5639] Bluetooth: hci1: Dropping invalid advertising data [ 249.084710][ T5639] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 249.084771][ T5639] Bluetooth: hci1: Dropping invalid advertising data [ 249.101330][ T5639] Bluetooth: hci1: Malformed LE Event: 0x02 [ 250.627691][ T8116] random: crng reseeded on system resumption [ 250.694730][ T8118] binder: 8117:8118 ioctl 400c620e 0 returned -14 [ 251.019070][ T8123] FAULT_INJECTION: forcing a failure. [ 251.019070][ T8123] name failslab, interval 1, probability 0, space 0, times 0 [ 251.077815][ T8123] CPU: 1 UID: 0 PID: 8123 Comm: syz.1.478 Not tainted syzkaller #0 PREEMPT(full) [ 251.077861][ T8123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 251.077883][ T8123] Call Trace: [ 251.077894][ T8123] [ 251.077907][ T8123] dump_stack_lvl+0x100/0x190 [ 251.077961][ T8123] should_fail_ex.cold+0x5/0xa [ 251.078007][ T8123] should_failslab+0xc2/0x120 [ 251.078057][ T8123] __kmalloc_cache_noprof+0x7a/0x6f0 [ 251.078110][ T8123] ? drm_atomic_state_alloc+0xb8/0x120 [ 251.078180][ T8123] drm_atomic_state_alloc+0xb8/0x120 [ 251.078240][ T8123] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 251.078278][ T8123] ? rcu_is_watching+0x12/0xc0 [ 251.078322][ T8123] ? trace_contention_end+0x122/0x170 [ 251.078362][ T8123] ? __mutex_lock+0x26d/0x1b10 [ 251.078418][ T8123] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 251.078457][ T8123] ? drm_master_internal_acquire+0x21/0x80 [ 251.078556][ T8123] drm_client_modeset_commit_locked+0x14d/0x580 [ 251.078599][ T8123] drm_client_modeset_commit+0x4f/0x80 [ 251.078639][ T8123] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 251.078702][ T8123] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 251.078766][ T8123] drm_fbdev_client_restore+0x1b/0x30 [ 251.078817][ T8123] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 251.078865][ T8123] drm_client_dev_restore+0x205/0x2a0 [ 251.078931][ T8123] drm_release+0x2c6/0x360 [ 251.078983][ T8123] ? __pfx_drm_release+0x10/0x10 [ 251.079033][ T8123] __fput+0x3ff/0xb50 [ 251.079094][ T8123] task_work_run+0x150/0x240 [ 251.079132][ T8123] ? __pfx_task_work_run+0x10/0x10 [ 251.079171][ T8123] ? rcu_is_watching+0x12/0xc0 [ 251.079228][ T8123] exit_to_user_mode_loop+0x100/0x4a0 [ 251.079263][ T8123] ? do_syscall_64+0x519/0xf80 [ 251.079317][ T8123] do_syscall_64+0x6f2/0xf80 [ 251.079368][ T8123] ? clear_bhb_loop+0x40/0x90 [ 251.079411][ T8123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.079447][ T8123] RIP: 0033:0x7f9c00f9cdd9 [ 251.079476][ T8123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 251.079510][ T8123] RSP: 002b:00007f9c01eee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 251.079543][ T8123] RAX: 0000000000000000 RBX: 00007f9c01215fa0 RCX: 00007f9c00f9cdd9 [ 251.079564][ T8123] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 251.079584][ T8123] RBP: 00007f9c01032d69 R08: 0000000000000000 R09: 0000000000000000 [ 251.079604][ T8123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.079623][ T8123] R13: 00007f9c01216038 R14: 00007f9c01215fa0 R15: 00007ffc754d5238 [ 251.079668][ T8123] [ 252.374682][ T8139] FAULT_INJECTION: forcing a failure. [ 252.374682][ T8139] name fail_futex, interval 1, probability 0, space 0, times 0 [ 252.479634][ T8139] CPU: 1 UID: 0 PID: 8139 Comm: syz.0.482 Not tainted syzkaller #0 PREEMPT(full) [ 252.479678][ T8139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 252.479698][ T8139] Call Trace: [ 252.479709][ T8139] [ 252.479722][ T8139] dump_stack_lvl+0x100/0x190 [ 252.479765][ T8139] should_fail_ex.cold+0x5/0xa [ 252.479809][ T8139] get_futex_key+0x1d2/0x1510 [ 252.479850][ T8139] ? __pfx_get_futex_key+0x10/0x10 [ 252.479885][ T8139] ? vfs_readv+0x3c5/0x8d0 [ 252.479919][ T8139] ? kfree+0x1dd/0x6c0 [ 252.479966][ T8139] ? iov_iter_advance+0xac/0x6d0 [ 252.479997][ T8139] ? short_proxy_read+0x13e/0x1a0 [ 252.480049][ T8139] futex_wake+0xea/0x530 [ 252.480098][ T8139] ? __pfx_futex_wake+0x10/0x10 [ 252.480160][ T8139] do_futex+0x32b/0x350 [ 252.480199][ T8139] ? __pfx_do_futex+0x10/0x10 [ 252.480247][ T8139] ? __fget_files+0x21f/0x3d0 [ 252.480292][ T8139] __x64_sys_futex+0x34f/0x4d0 [ 252.480346][ T8139] ? __pfx___x64_sys_futex+0x10/0x10 [ 252.480388][ T8139] ? __pfx_do_preadv+0x10/0x10 [ 252.480427][ T8139] ? rcu_is_watching+0x12/0xc0 [ 252.480473][ T8139] do_syscall_64+0x10b/0xf80 [ 252.480525][ T8139] ? clear_bhb_loop+0x40/0x90 [ 252.480567][ T8139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.480602][ T8139] RIP: 0033:0x7fc235f9cdd9 [ 252.480630][ T8139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 252.480671][ T8139] RSP: 002b:00007fc2341ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 252.480703][ T8139] RAX: ffffffffffffffda RBX: 00007fc236215fa8 RCX: 00007fc235f9cdd9 [ 252.480725][ T8139] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc236215fac [ 252.480746][ T8139] RBP: 00007fc236215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 252.480766][ T8139] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 252.480786][ T8139] R13: 00007fc236216038 R14: 00007ffffa0c1c20 R15: 00007ffffa0c1d08 [ 252.480828][ T8139] [ 253.419884][ T8150] Device name cannot be null; rc = [-22] [ 255.165944][ T8167] FAULT_INJECTION: forcing a failure. [ 255.165944][ T8167] name failslab, interval 1, probability 0, space 0, times 0 [ 255.207454][ T8167] CPU: 0 UID: 0 PID: 8167 Comm: syz.3.488 Not tainted syzkaller #0 PREEMPT(full) [ 255.207503][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.207525][ T8167] Call Trace: [ 255.207537][ T8167] [ 255.207549][ T8167] dump_stack_lvl+0x100/0x190 [ 255.207596][ T8167] should_fail_ex.cold+0x5/0xa [ 255.207641][ T8167] ? drm_atomic_state_init+0xf4/0x490 [ 255.207693][ T8167] should_failslab+0xc2/0x120 [ 255.207736][ T8167] __kmalloc_noprof+0xe0/0x850 [ 255.207780][ T8167] drm_atomic_state_init+0xf4/0x490 [ 255.207831][ T8167] ? kasan_save_track+0x14/0x30 [ 255.207870][ T8167] drm_atomic_state_alloc+0xd3/0x120 [ 255.207928][ T8167] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 255.207965][ T8167] ? rcu_is_watching+0x12/0xc0 [ 255.208009][ T8167] ? trace_contention_end+0x122/0x170 [ 255.208049][ T8167] ? __mutex_lock+0x26d/0x1b10 [ 255.208112][ T8167] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 255.208150][ T8167] ? drm_master_internal_acquire+0x21/0x80 [ 255.208240][ T8167] drm_client_modeset_commit_locked+0x14d/0x580 [ 255.208284][ T8167] drm_client_modeset_commit+0x4f/0x80 [ 255.208322][ T8167] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 255.208385][ T8167] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 255.208446][ T8167] drm_fbdev_client_restore+0x1b/0x30 [ 255.208495][ T8167] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 255.208529][ T8167] drm_client_dev_restore+0x205/0x2a0 [ 255.208578][ T8167] drm_release+0x2c6/0x360 [ 255.208618][ T8167] ? __pfx_drm_release+0x10/0x10 [ 255.208657][ T8167] __fput+0x3ff/0xb50 [ 255.208700][ T8167] task_work_run+0x150/0x240 [ 255.208727][ T8167] ? __pfx_task_work_run+0x10/0x10 [ 255.208755][ T8167] ? rcu_is_watching+0x12/0xc0 [ 255.208790][ T8167] exit_to_user_mode_loop+0x100/0x4a0 [ 255.208814][ T8167] ? do_syscall_64+0x519/0xf80 [ 255.208855][ T8167] do_syscall_64+0x6f2/0xf80 [ 255.208893][ T8167] ? clear_bhb_loop+0x40/0x90 [ 255.208924][ T8167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.208950][ T8167] RIP: 0033:0x7f2844d9cdd9 [ 255.208971][ T8167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.208996][ T8167] RSP: 002b:00007f2842ff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 255.209026][ T8167] RAX: 0000000000000000 RBX: 00007f2845015fa0 RCX: 00007f2844d9cdd9 [ 255.209042][ T8167] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 255.209057][ T8167] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 255.209072][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.209086][ T8167] R13: 00007f2845016038 R14: 00007f2845015fa0 R15: 00007ffcb9335bd8 [ 255.209124][ T8167] [ 255.823445][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.830006][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.330377][ T8206] zram0: detected capacity change from 0 to 16 [ 258.806146][ T8215] nvme_fcloop: unknown parameter or missing value '7' [ 260.032873][ T5639] Bluetooth: hci1: Malformed LE Event: 0x0b [ 260.108855][ T8243] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 260.182901][ T8240] bond0: no command found in slaves file - use +ifname or -ifname [ 262.516340][ T8270] FAULT_INJECTION: forcing a failure. [ 262.516340][ T8270] name failslab, interval 1, probability 0, space 0, times 0 [ 262.585823][ T8270] CPU: 0 UID: 0 PID: 8270 Comm: syz.3.507 Not tainted syzkaller #0 PREEMPT(full) [ 262.585856][ T8270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 262.585873][ T8270] Call Trace: [ 262.585880][ T8270] [ 262.585890][ T8270] dump_stack_lvl+0x100/0x190 [ 262.585921][ T8270] should_fail_ex.cold+0x5/0xa [ 262.585953][ T8270] should_failslab+0xc2/0x120 [ 262.585983][ T8270] __kmalloc_cache_noprof+0x7a/0x6f0 [ 262.586021][ T8270] ? vkms_plane_duplicate_state+0x45/0x130 [ 262.586056][ T8270] vkms_plane_duplicate_state+0x45/0x130 [ 262.586085][ T8270] drm_atomic_get_plane_state+0x279/0x760 [ 262.586136][ T8270] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 262.586163][ T8270] ? rcu_is_watching+0x12/0xc0 [ 262.586199][ T8270] ? __mutex_lock+0x26d/0x1b10 [ 262.586240][ T8270] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 262.586270][ T8270] ? drm_master_internal_acquire+0x21/0x80 [ 262.586339][ T8270] drm_client_modeset_commit_locked+0x14d/0x580 [ 262.586370][ T8270] drm_client_modeset_commit+0x4f/0x80 [ 262.586398][ T8270] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 262.586443][ T8270] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 262.586488][ T8270] drm_fbdev_client_restore+0x1b/0x30 [ 262.586522][ T8270] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 262.586555][ T8270] drm_client_dev_restore+0x205/0x2a0 [ 262.586603][ T8270] drm_release+0x2c6/0x360 [ 262.586643][ T8270] ? __pfx_drm_release+0x10/0x10 [ 262.586682][ T8270] __fput+0x3ff/0xb50 [ 262.586726][ T8270] task_work_run+0x150/0x240 [ 262.586753][ T8270] ? __pfx_task_work_run+0x10/0x10 [ 262.586781][ T8270] ? rcu_is_watching+0x12/0xc0 [ 262.586815][ T8270] exit_to_user_mode_loop+0x100/0x4a0 [ 262.586840][ T8270] ? do_syscall_64+0x519/0xf80 [ 262.586880][ T8270] do_syscall_64+0x6f2/0xf80 [ 262.586915][ T8270] ? clear_bhb_loop+0x40/0x90 [ 262.586947][ T8270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.586973][ T8270] RIP: 0033:0x7f2844d9cdd9 [ 262.586992][ T8270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 262.587017][ T8270] RSP: 002b:00007f2842fd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 262.587040][ T8270] RAX: 0000000000000000 RBX: 00007f2845016090 RCX: 00007f2844d9cdd9 [ 262.587057][ T8270] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 262.587071][ T8270] RBP: 00007f2844e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 262.587086][ T8270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.587101][ T8270] R13: 00007f2845016128 R14: 00007f2845016090 R15: 00007ffcb9335bd8 [ 262.587139][ T8270] [ 263.625788][ T8326] FAULT_INJECTION: forcing a failure. [ 263.625788][ T8326] name failslab, interval 1, probability 0, space 0, times 0 [ 263.689291][ T8326] CPU: 0 UID: 0 PID: 8326 Comm: syz.0.517 Not tainted syzkaller #0 PREEMPT(full) [ 263.689338][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 263.689360][ T8326] Call Trace: [ 263.689371][ T8326] [ 263.689384][ T8326] dump_stack_lvl+0x100/0x190 [ 263.689429][ T8326] should_fail_ex.cold+0x5/0xa [ 263.689474][ T8326] should_failslab+0xc2/0x120 [ 263.689516][ T8326] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 263.689572][ T8326] ? do_getname+0x35/0x390 [ 263.689633][ T8326] do_getname+0x35/0x390 [ 263.689694][ T8326] do_sys_openat2+0xc5/0x1e0 [ 263.689749][ T8326] ? __pfx_do_sys_openat2+0x10/0x10 [ 263.689818][ T8326] __x64_sys_openat+0x12d/0x210 [ 263.689874][ T8326] ? __pfx___x64_sys_openat+0x10/0x10 [ 263.689929][ T8326] ? ksys_read+0x1ac/0x250 [ 263.689993][ T8326] ? rcu_is_watching+0x12/0xc0 [ 263.690048][ T8326] do_syscall_64+0x10b/0xf80 [ 263.690098][ T8326] ? clear_bhb_loop+0x40/0x90 [ 263.690140][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.690176][ T8326] RIP: 0033:0x7fc235f9cdd9 [ 263.690205][ T8326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.690239][ T8326] RSP: 002b:00007fc2341cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 263.690271][ T8326] RAX: ffffffffffffffda RBX: 00007fc236216090 RCX: 00007fc235f9cdd9 [ 263.690293][ T8326] RDX: 0000000000000500 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 263.690315][ T8326] RBP: 00007fc236032d69 R08: 0000000000000000 R09: 0000000000000000 [ 263.690334][ T8326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.690354][ T8326] R13: 00007fc236216128 R14: 00007fc236216090 R15: 00007ffffa0c1d08 [ 263.690398][ T8326] [ 264.355318][ T8333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.521'. [ 264.593441][ T8333] veth1_macvtap: left promiscuous mode [ 266.672568][ T8390] netlink: 4 bytes leftover after parsing attributes in process `syz.2.529'. [ 267.090756][ T8377] ima: policy update failed [ 267.123019][ T30] audit: type=1802 audit(1778324344.937:6): pid=8377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.528" res=0 errno=0 [ 267.337508][ T8402] netlink: 'syz.2.533': attribute type 11 has an invalid length. [ 268.463805][ T8418] netlink: 4 bytes leftover after parsing attributes in process `syz.1.537'. [ 268.751249][ T8424] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 268.824465][ T8424] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 269.218591][ T5639] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 269.218639][ T5639] Bluetooth: hci1: unexpected subevent 0x0e length: 725 > 15 [ 269.233518][ T5639] Bluetooth: hci1: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 269.919052][ T8440] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 270.026689][ T8444] Device name cannot be null; rc = [-22] [ 271.805871][ T8448] Process accounting resumed [ 272.930482][ T8496] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 273.846461][ T8509] netlink: 16 bytes leftover after parsing attributes in process `syz.2.557'. [ 274.925567][ T8528] Device name cannot be null; rc = [-22] [ 277.925048][ T8574] FAULT_INJECTION: forcing a failure. [ 277.925048][ T8574] name fail_futex, interval 1, probability 0, space 0, times 0 [ 277.955408][ T8574] CPU: 0 UID: 0 PID: 8574 Comm: syz.0.569 Not tainted syzkaller #0 PREEMPT(full) [ 277.955453][ T8574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.955472][ T8574] Call Trace: [ 277.955482][ T8574] [ 277.955495][ T8574] dump_stack_lvl+0x100/0x190 [ 277.955539][ T8574] should_fail_ex.cold+0x5/0xa [ 277.955582][ T8574] get_futex_key+0x1d2/0x1510 [ 277.955621][ T8574] ? __pfx_get_futex_key+0x10/0x10 [ 277.955665][ T8574] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 277.955721][ T8574] ? __print_lock_name+0x23/0x80 [ 277.955780][ T8574] futex_wake+0xea/0x530 [ 277.955828][ T8574] ? dvb_dmxdev_filter_start+0x8d1/0xdd0 [ 277.955878][ T8574] ? __pfx_futex_wake+0x10/0x10 [ 277.955934][ T8574] ? rcu_is_watching+0x12/0xc0 [ 277.955979][ T8574] ? dvb_usercopy+0x1c0/0x340 [ 277.956012][ T8574] ? kfree+0x1dd/0x6c0 [ 277.956069][ T8574] do_futex+0x32b/0x350 [ 277.956109][ T8574] ? __pfx_do_futex+0x10/0x10 [ 277.956158][ T8574] __x64_sys_futex+0x34f/0x4d0 [ 277.956203][ T8574] ? __pfx___x64_sys_futex+0x10/0x10 [ 277.956251][ T8574] ? rcu_is_watching+0x12/0xc0 [ 277.956299][ T8574] do_syscall_64+0x10b/0xf80 [ 277.956349][ T8574] ? clear_bhb_loop+0x40/0x90 [ 277.956392][ T8574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.956428][ T8574] RIP: 0033:0x7fc235f9cdd9 [ 277.956456][ T8574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.956491][ T8574] RSP: 002b:00007fc2341ee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 277.956523][ T8574] RAX: ffffffffffffffda RBX: 00007fc236215fa8 RCX: 00007fc235f9cdd9 [ 277.956546][ T8574] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc236215fac [ 277.956567][ T8574] RBP: 00007fc236215fa0 R08: 0000000000000001 R09: 0000000000000000 [ 277.956587][ T8574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.956606][ T8574] R13: 00007fc236216038 R14: 00007ffffa0c1c20 R15: 00007ffffa0c1d08 [ 277.956655][ T8574] [ 280.223559][ T8612] Device name cannot be null; rc = [-22] [ 280.494783][ T8616] hub 1-0:1.0: USB hub found [ 280.533176][ T8616] hub 1-0:1.0: 1 port detected [ 283.747060][ T8665] FAULT_INJECTION: forcing a failure. [ 283.747060][ T8665] name failslab, interval 1, probability 0, space 0, times 0 [ 283.773473][ T8665] CPU: 1 UID: 0 PID: 8665 Comm: syz.1.589 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.773522][ T8665] Tainted: [L]=SOFTLOCKUP [ 283.773533][ T8665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.773551][ T8665] Call Trace: [ 283.773560][ T8665] [ 283.773571][ T8665] dump_stack_lvl+0x100/0x190 [ 283.773611][ T8665] should_fail_ex.cold+0x5/0xa [ 283.773650][ T8665] ? drm_atomic_state_init+0xf4/0x490 [ 283.773693][ T8665] should_failslab+0xc2/0x120 [ 283.773729][ T8665] __kmalloc_noprof+0xe0/0x850 [ 283.773766][ T8665] drm_atomic_state_init+0xf4/0x490 [ 283.773809][ T8665] ? kasan_save_track+0x14/0x30 [ 283.773843][ T8665] drm_atomic_state_alloc+0xd3/0x120 [ 283.773889][ T8665] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 283.773920][ T8665] ? rcu_is_watching+0x12/0xc0 [ 283.773957][ T8665] ? trace_contention_end+0x122/0x170 [ 283.773998][ T8665] ? __mutex_lock+0x26d/0x1b10 [ 283.774067][ T8665] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 283.774107][ T8665] ? drm_master_internal_acquire+0x21/0x80 [ 283.774203][ T8665] drm_client_modeset_commit_locked+0x14d/0x580 [ 283.774246][ T8665] drm_client_modeset_commit+0x4f/0x80 [ 283.774283][ T8665] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 283.774345][ T8665] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 283.774407][ T8665] drm_fbdev_client_restore+0x1b/0x30 [ 283.774453][ T8665] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 283.774499][ T8665] drm_client_dev_restore+0x205/0x2a0 [ 283.774568][ T8665] drm_release+0x2c6/0x360 [ 283.774627][ T8665] ? __pfx_drm_release+0x10/0x10 [ 283.774683][ T8665] __fput+0x3ff/0xb50 [ 283.774745][ T8665] task_work_run+0x150/0x240 [ 283.774784][ T8665] ? __pfx_task_work_run+0x10/0x10 [ 283.774824][ T8665] ? rcu_is_watching+0x12/0xc0 [ 283.774874][ T8665] exit_to_user_mode_loop+0x100/0x4a0 [ 283.774909][ T8665] ? do_syscall_64+0x519/0xf80 [ 283.774964][ T8665] do_syscall_64+0x6f2/0xf80 [ 283.775014][ T8665] ? clear_bhb_loop+0x40/0x90 [ 283.775069][ T8665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.775105][ T8665] RIP: 0033:0x7f9c00f9cdd9 [ 283.775134][ T8665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.775170][ T8665] RSP: 002b:00007f9c01eee028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 283.775205][ T8665] RAX: 0000000000000000 RBX: 00007f9c01215fa0 RCX: 00007f9c00f9cdd9 [ 283.775226][ T8665] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 283.775247][ T8665] RBP: 00007f9c01032d69 R08: 0000000000000000 R09: 0000000000000000 [ 283.775268][ T8665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.775289][ T8665] R13: 00007f9c01216038 R14: 00007f9c01215fa0 R15: 00007ffc754d5238 [ 283.775336][ T8665] [ 284.444879][ T8672] FAULT_INJECTION: forcing a failure. [ 284.444879][ T8672] name failslab, interval 1, probability 0, space 0, times 0 [ 284.526089][ T8672] CPU: 0 UID: 0 PID: 8672 Comm: syz.1.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.526145][ T8672] Tainted: [L]=SOFTLOCKUP [ 284.526159][ T8672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.526179][ T8672] Call Trace: [ 284.526189][ T8672] [ 284.526202][ T8672] dump_stack_lvl+0x100/0x190 [ 284.526248][ T8672] should_fail_ex.cold+0x5/0xa [ 284.526293][ T8672] should_failslab+0xc2/0x120 [ 284.526335][ T8672] __kmalloc_cache_noprof+0x7a/0x6f0 [ 284.526398][ T8672] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 284.526470][ T8672] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 284.526537][ T8672] vidtv_mux_init+0x8a6/0xbf0 [ 284.526576][ T8672] vidtv_start_feed+0x34e/0x500 [ 284.526620][ T8672] ? __pfx_vidtv_start_feed+0x10/0x10 [ 284.526665][ T8672] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 284.526718][ T8672] ? mark_held_locks+0x40/0x70 [ 284.526760][ T8672] ? __pfx_vidtv_start_feed+0x10/0x10 [ 284.526803][ T8672] dmx_ts_feed_start_filtering+0xf6/0x220 [ 284.526857][ T8672] dvb_dmxdev_start_feed+0x273/0x3f0 [ 284.526902][ T8672] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 284.526955][ T8672] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 284.527000][ T8672] dvb_demux_do_ioctl+0xe64/0x1200 [ 284.527056][ T8672] dvb_usercopy+0x167/0x340 [ 284.527090][ T8672] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 284.527135][ T8672] ? __pfx_dvb_usercopy+0x10/0x10 [ 284.527185][ T8672] ? __fget_files+0x21f/0x3d0 [ 284.527237][ T8672] dvb_demux_ioctl+0x29/0x40 [ 284.527272][ T8672] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 284.527311][ T8672] __x64_sys_ioctl+0x18e/0x210 [ 284.527355][ T8672] do_syscall_64+0x10b/0xf80 [ 284.527406][ T8672] ? clear_bhb_loop+0x40/0x90 [ 284.527449][ T8672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.527485][ T8672] RIP: 0033:0x7f9c00f9cdd9 [ 284.527517][ T8672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.527551][ T8672] RSP: 002b:00007f9c01eee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 284.527584][ T8672] RAX: ffffffffffffffda RBX: 00007f9c01215fa0 RCX: 00007f9c00f9cdd9 [ 284.527607][ T8672] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000006 [ 284.527628][ T8672] RBP: 00007f9c01032d69 R08: 0000000000000000 R09: 0000000000000000 [ 284.527648][ T8672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.527668][ T8672] R13: 00007f9c01216038 R14: 00007f9c01215fa0 R15: 00007ffc754d5238 [ 284.527713][ T8672] [ 284.782331][ T995] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 284.794390][ T995] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 284.802847][ T995] CPU: 0 UID: 0 PID: 995 Comm: kworker/0:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.814104][ T995] Tainted: [L]=SOFTLOCKUP [ 284.818462][ T995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 284.828568][ T995] Workqueue: events vidtv_mux_tick [ 284.833749][ T995] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 284.840469][ T995] Code: 4b 70 d6 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 284.860121][ T995] RSP: 0018:ffffc9000518f3f0 EFLAGS: 00010202 [ 284.866258][ T995] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 284.874358][ T995] RDX: 0000000000000000 RSI: ffffffff88318ed5 RDI: ffff88802863bd80 [ 284.882484][ T995] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 284.890501][ T995] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000518f690 [ 284.898515][ T995] R13: ffffc9000518f670 R14: 0000000000000178 R15: 0000000000000000 [ 284.906513][ T995] FS: 0000000000000000(0000) GS:ffff88812437a000(0000) knlGS:0000000000000000 [ 284.915488][ T995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 284.922125][ T995] CR2: 00007fc2341cdd58 CR3: 000000005d0da000 CR4: 00000000003526f0 [ 284.930143][ T995] Call Trace: [ 284.933447][ T995] [ 284.936406][ T995] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 284.942799][ T995] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 284.948401][ T995] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 284.954512][ T995] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 284.960285][ T995] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 284.966505][ T995] ? find_held_lock+0x2b/0x80 [ 284.971234][ T995] ? unwind_next_frame+0x3be/0x2090 [ 284.976470][ T995] ? unwind_next_frame+0x3be/0x2090 [ 284.981889][ T995] vidtv_mux_push_si+0x932/0xe80 [ 284.986881][ T995] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 284.992394][ T995] ? arch_stack_walk+0x94/0xf0 [ 284.997210][ T995] ? ret_from_fork_asm+0x1a/0x30 [ 285.002198][ T995] ? stack_trace_save+0x8e/0xc0 [ 285.007095][ T995] ? vidtv_memset+0x50/0x90 [ 285.011641][ T995] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 285.017314][ T995] ? ksm_scan_thread+0x14d0/0x7030 [ 285.022488][ T995] ? kasan_save_track+0x14/0x30 [ 285.027373][ T995] ? do_raw_spin_lock+0x128/0x260 [ 285.032430][ T995] vidtv_mux_tick+0xe93/0x1460 [ 285.037240][ T995] ? __lock_acquire+0x4a5/0x2630 [ 285.042227][ T995] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 285.047477][ T995] ? __lock_acquire+0x4a5/0x2630 [ 285.052445][ T995] ? do_raw_spin_unlock+0x145/0x1e0 [ 285.057680][ T995] ? debug_object_deactivate+0x2e4/0x3b0 [ 285.063362][ T995] ? rcu_is_watching+0x12/0xc0 [ 285.068169][ T995] process_one_work+0xa0e/0x1980 [ 285.073165][ T995] ? __pfx_process_one_work+0x10/0x10 [ 285.078608][ T995] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 285.083858][ T995] worker_thread+0x5ef/0xe50 [ 285.088484][ T995] ? kthread+0x13a/0x450 [ 285.092749][ T995] ? __pfx_worker_thread+0x10/0x10 [ 285.097887][ T995] kthread+0x370/0x450 [ 285.101987][ T995] ? __pfx_kthread+0x10/0x10 [ 285.106604][ T995] ret_from_fork+0x72b/0xd50 [ 285.111264][ T995] ? __pfx_ret_from_fork+0x10/0x10 [ 285.116415][ T995] ? __switch_to+0x800/0x1100 [ 285.121140][ T995] ? __switch_to_asm+0x39/0x70 [ 285.126487][ T995] ? __pfx_kthread+0x10/0x10 [ 285.131130][ T995] ret_from_fork_asm+0x1a/0x30 [ 285.135966][ T995] [ 285.139031][ T995] Modules linked in: [ 285.143328][ T995] ---[ end trace 0000000000000000 ]--- [ 285.174796][ T995] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 285.189611][ T995] Code: 4b 70 d6 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 285.232646][ T8679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 285.258432][ T995] RSP: 0018:ffffc9000518f3f0 EFLAGS: 00010202 [ 285.266424][ T995] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 285.285560][ T995] RDX: 0000000000000000 RSI: ffffffff88318ed5 RDI: ffff88802863bd80 [ 285.309747][ T995] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 285.318528][ T995] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc9000518f690 [ 285.334734][ T995] R13: ffffc9000518f670 R14: 0000000000000178 R15: 0000000000000000 [ 285.343246][ T995] FS: 0000000000000000(0000) GS:ffff88812437a000(0000) knlGS:0000000000000000 [ 285.354327][ T995] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 285.368692][ T995] CR2: 0000001b34c0eff8 CR3: 000000002be8a000 CR4: 00000000003526f0 [ 285.378461][ T995] Kernel panic - not syncing: Fatal exception [ 285.385186][ T995] Kernel Offset: disabled [ 285.389541][ T995] Rebooting in 86400 seconds..