last executing test programs: 5.389537154s ago: executing program 0 (id=1710): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x4000, 0x0) fsetxattr$auto(r0, &(0x7f0000000200)='*,{:}{{*\x00', &(0x7f0000000240)="d7f63a0a1536873db32404dbd31639b80bb07fb2046c6b4106d3849e0ef09e349d847569f9cfbcd7621925a4270e9768f7832d8caab2fb3350", 0x100, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) setpriority$auto_PRIO_PGRP(0x1, 0xffffffffffffffff, 0x101) socket(0x10, 0x2, 0x0) r3 = socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae9a, 0x0) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40603d07, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x5, r2, 0x454f, 0x2000fff, 0x0, 0x0, r1, 0x80000080}, 0x6d4) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0xffffffff, 0x0, 0x4909b6f5, 0x1ffe0, 0xffff, 0x3, 0x20000009, 0x3, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x80, 0x3, 0xb5d, 0x8, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffefffff, 0x3, 0xfffffffffffffff8, 0x0, 0x0, 0x80000, 0x20000000000002, 0x10001, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdce, 0x0, 0xfffffffffffffffe, 0x0, 0x661]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) socket(0x10, 0x2, 0x0) 4.71048715s ago: executing program 2 (id=1714): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0xfdef) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x5609, r1) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x401, 0x0) read$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) getsockopt$auto_SO_PEERSEC(r2, 0x3, 0x1f, &(0x7f0000000000)='\x00', &(0x7f0000000080)=0x3) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x149041, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x5}, 0xa) socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket(0x1d, 0x2, 0x2) connect$auto(0x5, 0x0, 0x9) sendmsg$auto_HSR_C_GET_NODE_STATUS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRESHEX, @ANYRES16=r5, @ANYRESOCT, @ANYBLOB="fc959fc988"], 0x38}, 0x1, 0x0, 0x0, 0x2c050811}, 0x10) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/can/rcvlist_eff\x00', 0x80080, 0x0) read$auto(r6, 0x0, 0x805644) 4.532006191s ago: executing program 1 (id=1716): mmap$auto(0x3, 0x202000a, 0x9, 0x11, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) (rerun: 64) writev$auto(r0, &(0x7f0000000380)={&(0x7f0000000280), 0x4}, 0x8) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r1 = prctl$auto(0x23c, 0x1, 0x0, 0x3d, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r1, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x288202, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) (async, rerun: 64) fchdir$auto(0xffffffffffffffff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="60120000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="080081000700000000112a00058008002600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r5], 0x1260}, 0x1, 0x0, 0x0, 0x1}, 0x8000000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/kcore\x00', 0x28000, 0x0) pread64$auto(r6, 0x0, 0x800003, 0x270) mlockall$auto(0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) socket(0x2, 0x5, 0x109) (async, rerun: 64) r7 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0) write$auto_seq_oss_f_ops_seq_oss(r7, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) (async) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x200) 3.927465522s ago: executing program 3 (id=1717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r2 = gettid() r3 = ioctl$auto_NS_GET_PID_IN_PIDNS(0xffffffffffffffff, 0x8004b708, &(0x7f0000000080)=0x6) sendmsg$auto_TIPC_NL_MON_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x1b8, r1, 0x504, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@typed={0x8, 0x7b, 0x0, 0x0, @ipv4=@local}, @nested={0x115, 0x56, 0x0, 0x1, [@generic="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", @typed={0xc, 0x8a, 0x0, 0x0, @u64=0x1}, @typed={0x4, 0xcf}, @nested={0x4, 0xc6}]}, @typed={0x8, 0x117, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}, @typed={0x8, 0xc1, 0x0, 0x0, @pid=r2}]}, @TIPC_NLA_NODE={0x70, 0x6, 0x0, 0x1, [@typed={0x31, 0x39, 0x0, 0x0, @binary="65a64d9ae985106b785c45d1d4fbd28b445cafc578d3e8a30b442bc935949b907432279e028f16a43a9581c2dc"}, @typed={0x8, 0x70, 0x0, 0x0, @fd=r3}, @typed={0x4, 0x9b}, @typed={0x8, 0x56, 0x0, 0x0, @u32=0x6ddf}, @generic, @nested={0x23, 0xd4, 0x0, 0x1, [@nested={0x4, 0xd}, @nested={0x4, 0x82}, @nested={0x4, 0x9b}, @generic="4e7baa8db644097c857f26716221da9faf0dd9"]}]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x41c61c05190baafb}, 0x20000000) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000340), r0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000001780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001740)={&(0x7f0000000380)={0x13a0, r4, 0x2, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x4}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3}, @L2TP_ATTR_STATS={0x131f, 0x1e, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @u32=0x7}, @generic="0631899c0ed0758e0636d5eca3070087c3d8e5c0d7a362d188eace4edb59e8ded154d1a134406ffd6639e8e263a7cf6abd93807837c9feac8c5724de9309c620179791aa983e202ae8f2bb0688a638bd3fb0408ecf9d9ef7d5e72c2b9b4e0c3fccd6659cce497111aa84e6630d64ea88ef8fedefb2e4fc1d182e4a031613666f180ed034c3f0958e339cc8f94211c1f5ad7a28210c46d64999a532ecce56f2b19bc79ecdd805ff94b83895415f11329ae681aae2279665c53e5995dd53a67c03d48b97f01b6e354cc8008b46f33da3ef42fa", @nested={0x10e9, 0x2b, 0x0, 0x1, [@nested={0x4, 0x53}, @typed={0x1004, 0x43, 0x0, 0x0, @binary="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"}, @nested={0x4, 0x159}, @nested={0x4, 0xec}, @typed={0xb, 0x69, 0x0, 0x0, @str='TIPCv2\x00'}, @nested={0x4, 0x14b}, @generic="39a4ae13206a213a2f1eb38efdbe37ac03503d5792e571b7c95e285d37827ac2dd9106f01cd876baad19199b32b7997036a7dee608900306c72e59cba3286d40f548db9ddeaab10e1ba492c37eb8abbe06c569694db2d2aad6611fc5538a30b981726c76d6704074eaeb92af3526a77e8be46fa9483d5a0e6390ca4744e7c90989cedd771c3a5171eecaeabcc2931448c144ab8d246beb68b1ab3266cf732910bc9aee0f3735d16a183954a3daecafcd4d220b2ac84bc23eba6fb5aab276de3f6e", @nested={0x4, 0xc1}]}, @generic="3da4517d6ec01cba427c4b37da6d08cf9e348c657b205b87a3156ac3651a3c9cd93d1ca107dcfa65a08028d7e0d00d25b07d109f412baf9da4066c", @generic="da409549d3d04fb107dd4097451db3082b2ea5593c191768391d373839189037f6af479a228a6e23d9816a3a6f98c4decee6ea64f4fd595bbde65b68d753573c71309f00f29df6e45bc98b87a1155f299703827a762a1459084ecc0ffd76b87f09b23c5b0d27362f7da9ab1904b16520c24099e03a40a9f77620e4ae5f291e59912719772f5f73dc062e5f00f8539500c1687978f1b6ae8cd009a04958bc845a5e01396cb6d29e5f0a3cd3603fa39d4ccfc2f56802271b3c46a5d50dff9b18938469982adae4ee2d01a535f7af7e4bfe16395b4526651c4fc9c335e9ce79c857004d49f6aa46d346506589d42d3000701869", @typed={0x14, 0x134, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x14, 0x60, 0x0, 0x0, @ipv6=@mcast2}]}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_NONE={0x3e, 0x0, "1e880c0eca9c05627028f20a9495758d21b474c0c3fe831806dc29c2e81aa61fc091e3a61ecfd6342911f70550929ac13a22bcaa725988c233a4"}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x6}]}, 0x13a0}, 0x1, 0x0, 0x0, 0x4004890}, 0x24008811) r5 = ioctl$auto_SW_SYNC_GET_DEADLINE(r3, 0xc0105702, &(0x7f00000017c0)={0x0, 0x0, r3}) ioctl$auto_USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000001940)={0xdb, 0x7, 0x0, 0x80000001, &(0x7f0000001800)="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", 0x6, 0x1, 0x9, @stream_id, 0x1, 0x0, &(0x7f0000001900)="17d3490fa5b4064ac5319dd471856005b497fd5d65e15856e38f1b7ee573b89fa43aedfe22", [{0x7f, 0x0, 0x401}, {0x6, 0x4ada9944, 0xb}, {0x7fff, 0xffff, 0x4}, {0x4, 0xff, 0x756}, {0xbf5, 0x1, 0x9a14}]}) sendmsg$auto_NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000001a80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x86}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040000}, 0x800) socketpair$auto(0x1ff, 0x8, 0x1, &(0x7f0000001ac0)=0x3) r7 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000001b00), 0x20900, 0x0) sendmsg$auto_TIPC_NL_ADDR_LEGACY_GET(r5, &(0x7f0000003000)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002fc0)={&(0x7f0000001b80)={0x1420, r1, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NAME_TABLE={0x1200, 0x8, 0x0, 0x1, [@typed={0x8, 0x125, 0x0, 0x0, @u32=0x8}, @generic="1985dbab2e30cbc7396a5c654dbd3acedfbf1ed3417f83d2df03e412779d243b97a8ffac7423c163c6", @typed={0x4, 0xa1}, @generic="affb07a91bc5c3aa9ccb241f58e459f431e13b4eccae9785b6579db261f90a9455ec718fa4a6c6bfd279e61bc5327205c6977ef6b7c38c1385099f52bedd91fd8985ec0904013a5782eddf11d076be", @generic="156676730af2216a0696013dd75a3ff99adb87d0", @typed={0x4, 0xfe}, @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@local}, @nested={0x149, 0x81, 0x0, 0x1, [@nested={0x4, 0x148}, @typed={0x8, 0x127, 0x0, 0x0, @fd=r7}, @typed={0xb7, 0x153, 0x0, 0x0, @binary="5a194cace46f457473a25865d6c91e0dc90f813447d6397e6ea2c28211c438a9b99cace708eb262f66ae47b09c4c320870e07c0248e7bdbfa738c50c94c23b0ee0b7a4617b6d8694639926c75670827bd8adc938f16df992cdeac6c2689babe409c3e5350189b0b13524201600718406e809927dfb98890d097b9b18ee997ec6a142ffbcfcf66b5f43315099042b1f82fd0dec90505b10a6f9d626ccaf8651092e751b51500d21f0719c05d11aed843e4a8af5"}, @typed={0x14, 0xf8, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}, @generic="8bfb6e57ff695bce946620d1b5ab01fc537ef557c9a831fdbe0a5cea242d18bf2917d624e0cdc3ff3db06ebc138e21c4bae644beef81f8353b44041628ce9178a0fbbcb3911ec4839a7f3eee653c5c85a1f95e023ec1abd9deca825b93343b3feabc1d8bdf", @typed={0x8, 0xc3, 0x0, 0x0, @u32=0x9}, @generic]}, @generic="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"]}, @TIPC_NLA_LINK={0x209, 0x4, 0x0, 0x1, [@typed={0xb5, 0x4, 0x0, 0x0, @binary="27e6d62d8904348bb3ff0e8aae7a05ca5d3c55bc7eaabe76ad4deb73a123f3e3ad2333eb17b0e02c74f5dee4df7077d948a842091056b1f2f3637c355744c5e3b68f8dd1e3d0c4426baf5119ef307775f9566c7e2e65843e6bc524c1ee9d26f690bdd626f0fe9e8f8b3bcf773c7b001881538b4bebf9c4a700df1ba57e5f5e6e1c3a5e8c8bb1c0e9383b3bf92b62d2d6b737a43cbc03fa34616a997ce5e84f3d0bd28502e71cef26a5e26f3264d7a8d9fa"}, @generic="3ce938c1e8068ea14e254d5fe6964f0797566f3436e34f7dd12c5fd139dc8f283e80be422e64d1b760db37c5f775dfe3ddeb2ecd56ddf66bacb077ded2c603969f110e0748c60784e62462f4bb9c22c787a31c4c9d1f8f21b1a22d8b457efec67ca2530943cb6ed3b31f05b059014d30311be5529ac646892f7b5f76c325f4b694fc44423941509dd438102ab549b20fac9eee26f0f4f1fc74c65f74c72871bd46ac8c39061732493edcc0bb16", @generic="eab01feaa17107d07b013f316309e5aeb3079c057add45ed7c3c764562b019351bc1c04687173d84a1b6dde57fe690e904cf8e0b7a2845f19d0549e0997ca836bec31e24f62164bff59edb46e81cafbe60cb1d802908246279af9b1e20d51e477cb71fe514a9e59465895b7e43eafdf740d8d5058708bed2a81d44dd3ed28bc2483b4fbdc369ac3f081ac6ac00154c6a18169f00a38a51ea863ffdb3c2708381"]}]}, 0x1420}, 0x1, 0x0, 0x0, 0x4000040}, 0x20008810) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003080), r3) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000030c0)={'sit0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000003100)={'vcan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r3, &(0x7f0000003200)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000031c0)={&(0x7f0000003140)={0x58, r8, 0x4, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_STATS_HEADER={0x44, 0x2, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4004103}, 0x7fa45d3b4ae298eb) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, &(0x7f0000003240)="abe62f7c13cf31eadb948adfc1809a41cdbf23b3d5cca3acb9ea4ada9fc9941d04720ffa86d1657a332ae56fda6bec4e1dc06b6183a5315c9d14c9907d1b664b070ffee40e1f928f633e7ab91d719cfb5d3bc858d09ea92a3f37c2fcbfb31b10f6a9ff8a6f01486aec7bcdfc44aaecfeedd876717c5c647d34eea3738920d555e0d03a68bc090b7ad5a24551e7e20bfc91d99fc44ffde25655d01cac2c8b7f88f197a1348a3659d34f9466dd15f9513dc97e0e67eb1fc336882957474f34c907c80daa17a42eea90c751e79aa40bd63a0df17fe1ee27bf2df4df97abb0886f1ea0eb97c16e8a511a63c35c90e3d80b1c956e46e6") prctl$auto(0x2, 0x2, r2, 0xffff, 0x10) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000003340), 0x52b000, 0x0) r12 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000033c0), r3) newfstatat$auto(r5, &(0x7f0000003400)='./file0\x00', &(0x7f0000003440)={0x40, 0x9, 0x40b, 0x4, 0xee00, 0x0, 0x0, 0x5, 0x3, 0x5, 0x6, 0x101, 0x2, 0x5, 0x4, 0x9, 0x4}, 0x400) msgctl$auto_MSG_INFO(0x6, 0xc, &(0x7f0000003580)={{0x0, 0xee00, 0x0, 0x8001, 0x3, 0x6e, 0x2}, &(0x7f0000003500)=0xf, &(0x7f0000003540), 0xb, 0x9, 0x4, 0x4, 0x8, 0x0, 0x9, 0x5, @raw=0x3, @raw=0x7}) r15 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000003600), 0x302, 0x0) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r5, &(0x7f0000004800)={&(0x7f0000003380)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000047c0)={&(0x7f0000003640)={0x1150, r12, 0x600, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1120, 0x2f, 0x0, 0x1, [@nested={0x1118, 0xd1, 0x0, 0x1, [@nested={0x4, 0xcc}, @generic="4286204dfe55aa2317fcef78c72fee7d12521808442b670f09a885b83e1acbd8525d9f4b9c4d384c9ffeb828f0d3f93e03104f8aa22cf3220561ceccb599bebc7f824d119e147d15038fe3db33ecac8427a1d633377e3739f7d6a9dc2a9b5ac929ea49d5a4ee233354fb50b605e16292bb2cebf52eb9162c688701c822c7aaf9d96757f92f7733c6ff4125b9c232d84e3c4fb6786d3364d66783399831c56d0b9bce5afe28190f6b21ea5f3663bc61fd28596fa1822501d9c33854e3c7c07915679815dad0dff64c50aa0b556ba1a2870e18b5b14b72c5fc", @typed={0x8, 0x6d, 0x0, 0x0, @u32=0xa}, @nested={0x4, 0x4a}, @typed={0x8, 0x10, 0x0, 0x0, @uid=r13}, @typed={0x4, 0x96}, @typed={0x14, 0x115, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x58, 0x0, 0x0, @uid=r14}, @nested={0x4, 0xb4}, @generic="ba2499ccb6093b0c418bbf4b55d5e7a5b53a63bad980be185e887f44035f8e53fe4c38bad6960179c73150cefda3d6848bfc94360e87d1e86cf650e5803be29374e64c2ebc926b1878209ae4f4f40f88a593c2ac22d6bf7344a9c288da970ce1675f26621af77224b0368e7c7cb40c3484f09267d8c506d9b72ef41e3147c142a1270c28a703dcc9d2929908dde092e90df32e7945290aa45d510871c12aa4be25f5752af0ff5dae133af4f20af7ebdcc21ee7dbcce60d36d6c46c76a55521c7c5d898d1c433c420ea8a5b79d33a9c2facd7441c76082569d1c6029de7da03df34f17bbe4a2e4129e4b42109a65077cac9f5c76ac27c4e3999661f2f01ab588835427441ce6edfdb492f3fb10645bfeb770608530c7749f02e31defd2923b072b0fbab53479844f8fbf4be1b993b9079cc1c250461cbd6ed815225f9a02500d3bf443f3fc3603d13d279e6ff33f77fee17ac93ff0081816c2f03ac07518ae9ab614ee1a915c67a7d438292b19617fb257ed7de91411db2cb31f814e354aa95e5b1be0ea07091427f174a9628bc99539785275ee655a6b123115ae7427b184dd80cba5ddd48e5747663d5dd15dc769ee2df2741a0e77bf1d7bd0e6897612afec56b9a13d1adbaf1b703541f800069bf0edc18d6bf82f2ab8d91081d6667ce235c092acdb7213902e4b6159c3713ece9ccecd7e1b1fa309783436f6820c50bdfd0b3639cf4b5c57bc469c154fce2950d5ab983cc0fd329eb5e9bf4a87b251ce32b0ea91eda15b9e712ca72aa187ee256c82a36f1f6ceb003e3b36d8435c2850e39f08bd34ce7f9c3b5fe979d1f07b69546a4e492aa39b2bf501452e21ad63e153912b0784a093c8dc3f7ee4f01dd39309ee6c409bb2ad3dfd906c2c69510256bf972b692b52742977afc81c711862a2f20e146f51c284279af76673016639e2cc77dd1561b78c0be2944ab3edb378ba1f36ccf667fb30858b91f255eb7ade8570642058a5c98599fa20e4b8be44b6e5e82b5fd01eb96b394a8e5f87250c7c1ac6035e8407ec35ebb7d1f2b10fb47f9b7305038a413e12bde5f36be875d61b7ab0fc26101d2b158deabbd38627217b0e7a2ef9a3e68dbc3fb5289d638fa51035dd23252549143984ad6e8f76e7bb5c24b8f0252c694e23a22b8d9cd1092f382c28bbaa5f53b2510d9e897d4762b863950d82eb8f695c935325c1b1ec69fca5f3ecb8819256019198d087f5404e96096298d401b0485c1532cbcf4d6eb78258dabe09a921750536fccdacdc5de5fd1a09e371697bbf380fd2f18cd217b673687fdee642185b87d66554b285c66630ee38d447411d1579cfa2dee2df0b39065203602414d787c462e869c3bb2d6f5cfa80ed6de2096cc794b24d09a222fdf8fe0531041c49e717cd933abf37b202fe91b59318894ce96257482ccd8076e8c1394d2c4ebad15edf856a1413513d463d3ff998a360301e84da2309bb926cfc39d1676533c026cec23cc7affa6a8563864101239ea0911d783ee25dcde065dd549d91e55bad00ae7cee41fd8ce7504237fdd4eae639b57f06cbc931d58fff53c366609033bcbacab5b44f99c1d701aa934d8b9f84e5529f98a057729fd28d0290643c137375ef5193ea965f72f9fef6a5b7c55d6178c89e60157527f4752faa0e5e0da8fc3e9e4a2ec43b32eaf6a40821dcccea2d3f7cbbf6a3cb66a9e0a773da2231da0f5ec5bda942abd24dc7cf290ca96bf1dc64a08a34f25078c5f0247e71a3aa1808c70d5be0e10c621526134b60abe01355736e1c7b3f688a913249284ce16e3d702deaf4657e49ec77816e2a517b4883e93522cc9f5510fc16693cb814c2b06dc90c05f9a42ec443fe7440a1b31fc992c513dee02a0b7755ff718f81efa107048212b88d4363f6c4507ef01a4cf010a6f8e5ee3ec13ac44559756d365da2aec110f656d08484a675056ba720ded1e08f89e7a33886f57968272556b6bad92abec4aa3e66c91d4db5f206ba385eb51d3c48afdf3d75361623fc53f31e2ec1d07107c0dc7aef6da40e954be7d81d935b80948b97eaed81fa0ce4d76090be25c9756bbf857e4d8f74536bea3f3d8d3cbb15dbbf9721d2dc1e6b2fac8f4171d767659afde9b5c121b00d5523d621988b971b718486456bb3e289342cec96b3e08ad6656ddee5f2d0942b0067a88a0675b5b57e9d4364c4084d2cbb72ba748c64eb6c98c0cce73f77cee4b743d899a295b01e4fc268cd9e667bddf6216249afc840cdaf0f0af6bdbd36369db1748e23a5341f8dcefc2ad49b80c444c767c1439a2c5f61ca34bdc42b5ed79696cbaa76574b42314114ebaab78e52176257d0f23637144fb0a665754ea563d2bc98ecf7cbfcb95f55b7a6a5bb7b1ba667e41ed5f0aa78e9494e5c1bb723a31b4ca63b0c03bcb6babd3fd346b89f898e849fbb3e7e338f4d4f465daf3d2bbbe3f681f3ee39c54e6ace4f2e2ea4f21435e8ecdf91c9503e8bcb012b1c693b81651ea335093734c8ee538c49cb3649b48284ddd47f9634934a1fcea519a6f6dd8fe8351e7370caa805d229c589ce373e1ba7db72ac484fb504445aeca76fea8af48aabb72de856b7d1494af1e99ff084d4dbb24a3d4cbdc8e55d2e59be9ac88104196cd2e58fdba6410d2b76261637c768e6d9b16f91d2b44d78c361991e780845b2e1b93c9c1e15948496d412d5177540d34ed06d26b5044e474ab90a7efb7cd658140ae0bbc90c381ea0d070eca4a4e5624e888dfec07edc17d30b0aac8fcb9aa672211ef697935ed7880f96e00c8d287872f3edaad4cdad019dc457ed3da4e525b56e8d1efdcd66e087dd4318a552e14aad3ccd08e889e89935183b7c5af41ae0114b94bf05a8de5af87651229d27e5682cc1f6d9b83c99bade6ba77f34eef07a5ceb77cb16c91ed1fabc3713a3eba4f078f3343cf636679b5067550e1193284ae568bf675e2b649b762dc8b5db0a3783dc1d9e855df1a5bb0f1c23a99d55b8ab0d4ad5d4682f4d6ba28a1da123fcbde0a010b3706641141ff31e46ca41483f0160d0372547514180dd8779d64b337af0376e1e17f8b6d6517bc65bd1b9deb9196cf1662d44f4d6b714d91f865ce19e48a1b3d33189780b33055e8da713425659e0722dc21e5e4dd832b7969b60d482f267c5cb3b55f96d93854c3ae5c79313e422e95b28fd061eb1ed487be64f45074d06a794c4334d8e1d55fd1be87c780f7a279508c9b247efa04fead3a688015c0f0ef73c3f37eee22cb7143d84d5a8748b9338c5a38062f9c98e152446f8c37380259b59bb5a6418652fa9e952cf87d226e4672d098b60f4b6b98f1c5712477c151a87221f95d9e675b6829704474018dab8d554d35e3c553204da427d5e1fda868f7cd10a67a23f1c10bc21048eb3e4f2ff23917e186c233dd58cdc8df85ce00a841d2886ea4b959c7d84f754513fbe26b7555674cfda00215355664c669eba7b63aa4e13e62a51f500d373e807510b0b1b8743aee7da8536b93b74c57e8c29201b5003f0865bd71139cbd61e93b68764bba451d950ea8e0467a821526b087662b49010003d4b5d597af7c7775315ad2b57f7636dc07b6c2eedd6e9c08d51da5e02b593d9488e6fc2ab4a87537212a7de201dedd3d286b67a3c4e043a01fe20e77f70e3aa713d64979dd60251ebede928eeb2ba5788c154903272b28ea5b0c28f63b1601583640a29def4fb674b3d379d60af4627b87434eeec17b5243c2ca845acafaf1d1fe7e723adbc49875c4e9a37620747f7d3868439c847cfc4e033a45de6336097a48ff783a52a8afe112097d573437476a25ee70bca363ad25e98b38a4455daa46675850f3d770ef3a21f49b7c6497eb6432395f48f1e84a7e4c541ab2bcef7a9fffbea7844fff5b60dad8d9a0052755b51d7ecb4a8b39211421eb6ced2d9bc5a90274bf9cab389eb211421d3642abd550513f272229a7e1468f15e4eef2b38fcd5dbae718d7b7e0d02e3bbbac02087a2278666a27a41e5e827f5151f93fb5933dd402a4bb66733cbdd25d243d0daa9d0b08fff51d009cc5196f32affc08386fd9506deaa9d5e6b3ef6b53afa247c7b226d63044a04a2ab7378a73c4694acee7e16aa90ebf3199c8adca0a84b7e72533f7009b17548c1f3424acfdebfd2cbb2a25bebebb3d3a1aa9f5cc26a98c5133cec08a946a102b171ad459d35b26c95530a5098c49d9e513a821277636c5f992938e0bba799d98fe45d138c95c9349743e668824fb6b0a023135bc9b830debd3d10161329b005217dfe12fdb811a728d95fa6f7645a39a007f34100356e14394e8c249058af5f310fe079eb9f858da24e938f67190345a6728565640c79c632da10c75b0257acf240fc893c03d70ad4210e0e0ea7906e405079aebf69c0b3e5d4aa2e5b4481f3d7b99ec4439896d3f0dae71c0dd97a4997712f67341e82e733e157690135cc81771ef890c1033dafc845b3b0dd35bf949bf61d9610756c548270b104cd14dd3a0753ae88fd9827bc521cd47ce4914f5b5b13df3033e8bd729d134b63a08c2e26963040402f41de4a3538b05002c315a5fe18ccea8d3aa651a2cd1b7e8587a0b5438566aecabd001c0eb63910d7ef5546131740abadc407d08c9f276cecbc17fe707503470027ae643f54e1a00d96ceea901f9f2ebad32b551b9f8bae8df33e807472668c049a79c3feedb4f1b99f96165e24a20fb39355cf0c5881c7255b9821da4e574aa71f2838cdecca0ca1d35757a2b85e9a06c61429803f72d5eab340440051a288557e4c9a603064d17a551f457dc2eab2e626fcb18145effb1e700c04b7abda10c5830dae1030b7331772b347ff7421dc5c8bc35e376a6d4a177faff17a742e02ab300957bdb65e012f18cb346dc320d46b4168f26622cd546c36715917acbad25b33b930f99ab842425b197c91c527058b19764ac5679623545cd7b84171817426c3cf433010d3b61f718aca51de621757062b827f3e3642c24d3817396562008a6d96c3832eeb0358a09fb9a91fd1c5a198ecb1a11b6d8ae6bea9706c3d652c646d3fc0b825f024732b919fcaf684ddff70ea12ed27ce70a94369260abb483ea58cd7fd12e2b10416dc0c4844edaa2102e7ede575edf2ed3661d878d5a0cb5c42287d3d02efd66a4a44ece05c03a2b2cdb39275e8fc54f53a19a440456e3cc6427ba4aef024d5471411c5b2873d114e1d4f59307830f812357f2fb598ec0d6dd02396a77f35786be1b7edf051f422dd7c6be3ff3c67e4a945a10ca2fe0c97746cf22569dd4d4ecb3dd67008da3713fee0ee1afd2240f3c9881edc909b8a55f808b8c93e807928635913e163ae6f07a1e9832841b3f11590caecab822e00676faf7eb28d9f43ab1ae401a8933b189595f937d033e6de829b9f76d725f9f96ff1178fe311ea516b605dfc64a7993927e2670abed28dc3a475ac23e0e52531a54f9b0f9ce8c9263896600e898c4d5b66e5f2ad5d548c3a5fadc02eda8cbd5824aa48b15c1d3a678e0084055c689864cf762f7d8d88dc8e9e646d88c56162c29fa74d47878153adfe0e84d0300264f76df069a83aa10781fbfa92ac43aff0ee87c85d4578271d423da9e59cc6d26de7860423e45d16d6f21b632f320bee41f47c785bb906542f91495f0e54e67a65e8cf8d9b59b3b6afbd486d4b49eb37b4b457e971fe8c3b2dd9841b3c4b56dc14cd56a273dc06f0a8fdc33fd309056be7cc61a2d1f2eae60811f234b9962109455ed4c2a1186118b05ca81751556ab03ff5eaf0d9a278d9ceaf10d4f6b"]}, @typed={0x4, 0x59}]}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x9}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xff}, @NL802154_ATTR_PEER={0xc, 0x28, 0x0, 0x1, [@typed={0x8, 0xd4, 0x0, 0x0, @fd=r15}]}]}, 0x1150}}, 0x800) socket(0x1a, 0x5, 0x6) openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f0000004840), 0x612002, 0x0) open(&(0x7f0000004880)='./file0\x00', 0x800, 0x101) sendmsg$auto_NL80211_CMD_JOIN_OCB(r11, &(0x7f0000004c80)={&(0x7f00000048c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000004c40)={&(0x7f0000004940)={0x2c4, 0x0, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_VHT_CAPABILITY={0x82, 0x9d, "5b6491f15dcc331c4c6724e65ff27e5fdd16e34f743e4dbdee49f9b2ac268a8e3c3598ee341090793d3bc4b21a1f3edd3ae99530510dc96d1de7801e008f244a092a91c432ae6f86b0844215fc21a5d1c8c3b50db8745552933dd57bf0612dd2f2585d26d0c80355626575d5ea408406123c51ef1cdeff83e9231cc09634"}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xe1, 0xbb, "20d373b9eb520339ae1b88ea5db8a439624a328a0ca961187e3665621913ba1d0b235484c0c5865658310a37978269e0142bf6345ba2a0deea511c9ee7d6d852a81abf481b36f828d3e931b4398a50a23469318aa33e0f035c77f9708c2c0fd40fcae4fbaa0f24c46a9cfd156512e6ed74e265f1b23215a78417478f6f3af4b5bdc82f597151a21b8875bc9acdc30bef7d55a5e9b887d21fbae5c732fd90922e95f3d66ca6b2fcd74aedd94e44aaf7e5c39f38ce3aac45538f4e1d6f6e91a811f76b3be99bcb48013e24dabeac19bfe6b17fd9800dc20f47e07e97bb27"}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_FILS_ERP_USERNAME={0xb, 0xf9, "986228e60e35bf"}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x800000}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_FILS_DISCOVERY={0x128, 0x126, 0x0, 0x1, [@NL80211_FILS_DISCOVERY_ATTR_TMPL={0x9b, 0x3, "623b3a7b51af98cf210c1473303ecac26cbae7be2e205f6c211bb0998c59bb4b60a14d830fe98887dbf0990fd47f7dfd0ff30cc9ba27692b283efe8ca91b6a1b8f70dc57ccb10c42bec281894abd5e51959d362b7594a104a4f8174b8cbca4645fd4b5e8840875e9ae5aef75c761deb9f6bfda1a81b1662f04c833807d4b72c85195ba1300316bed3b5f45aa63efab46c42181951a6e75"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x8}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x3}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x7}, @NL80211_FILS_DISCOVERY_ATTR_INT_MAX={0x8, 0x2, 0x8000}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x52}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0xf, 0x3, "1db3e49b26e831a96f3a5e"}, @NL80211_FILS_DISCOVERY_ATTR_TMPL={0x3f, 0x3, "f3b925703973d285e6f78bedcdfb161b1fc638b6e7f6c0072c1d147740f58deff1635de64a69e712e1fd7d7cc2f3ff6c2ac135495464211194d50f"}, @NL80211_FILS_DISCOVERY_ATTR_INT_MIN={0x8, 0x1, 0x5}]}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x20048014}, 0x40010) 3.74546603s ago: executing program 2 (id=1718): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x37, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) r4 = epoll_create$auto(0x1) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7aa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_ECHOREQ(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r0, @ANYRES16, @ANYBLOB="1000000000000000ffff0300000008000500ac1414aaf3ff0400ffffffff14000b0000000000"], 0x38}, 0x1, 0x0, 0x0, 0xc015}, 0x8005) madvise$auto(0x0, 0xffffffffffff0001, 0x15) flistxattr$auto(r2, &(0x7f0000000140)='\x00', 0xcd9) setsockopt$auto(r0, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) unshare$auto(0x40000080) ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000280)=0x5) unshare$auto(0x40000080) r6 = socket(0x18, 0x800, 0x2) getpeername$auto(r6, &(0x7f0000000040)=@llc={0x1a, 0x338, 0x7, 0xc, 0x9, 0x8, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000080)=0xa98) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 3.707983009s ago: executing program 3 (id=1719): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) ioctl$auto_BTRFS_IOC_SCRUB_PROGRESS(r0, 0xc400941d, &(0x7f0000000500)={0x40a, 0x3, 0x3ac, 0x8, {0x1, 0x4, 0xb, 0x3, 0x8, 0x4, 0x9, 0x2, 0xe, 0xa5, 0x1, 0x4, 0x0, 0xf, 0xff}}) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r2, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r3, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r5, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/105, 0x69) 3.392166805s ago: executing program 1 (id=1720): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) waitid$auto_P_ALL(0x0, 0x21b, &(0x7f0000000000)={@siginfo_0_0={0x86, 0x1, 0x2, @_rt={0x0, 0xee00, @sival_int=0x4}}}, 0x7fffffff, &(0x7f0000000080)={{0x10001, 0x57}, {0x22a2, 0x5}, 0x4, 0x3ff, 0xffb, 0x6, 0x1000, 0x5, 0x4, 0x7, 0x101, 0x0, 0x2a1, 0x2, 0x0, 0x9}) r0 = getpid() r1 = gettid() rt_tgsigqueueinfo$auto(r0, r1, 0x16, &(0x7f0000000400)={@siginfo_0_0={0xfffeffff, 0x0, 0x2, @_sigpoll={0x8}}}) tgkill$auto_SIGCONT(r0, r0, 0x12) prctl$auto(0x8, 0x1, r0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) execve$auto(0x0, 0x0, 0x0) 3.012981207s ago: executing program 0 (id=1721): r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000680), 0x8841, 0x0) ioctl$auto_RTC_PARAM_SET(r0, 0x40187014, &(0x7f00000006c0)={0x80, @ptr=0xf13, 0x5}) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x7352, 0x41, 0x65f, 0x1ffde, 0x7, 0x3, 0x2, 0xb, 0x3, 0x5, 0x101, 0xb4, 0x9, 0x6, 0x7ff, 0x84, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0xb4, 0x4, 0x0, 0x0, 0x0, 0xfffffff9, [0x7, 0x0, 0x68, 0x0, 0x100000000, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x1000000000000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x3, 0x800000000000000, 0x7e30e0be]}, 0x1fe, 0xf) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="11000000070000000000000000000e0001", 0x11) r2 = socket(0x10, 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000140)='\xc7\x83=\"\xad\xff\x8d\xf9;\x18\xa4\xb0\xb4\xd9]\xce\xd8Q~\x17\xfb&L\xf9=b\a\xf1y\xb3\"\x80 B\xb1\x18[\x8f\xdf\x84\'\x8e\x0e+\xbcwx\xe6-!\xfe\xf7\x83\x7f\xc5&\xb6\xb7j\x0f\xa1\xbe!t\x17\x9b?\xbb\xf7\xec\xcc\xd4b\xb1\xc7\xf0\xa1D\x12,I\a\x00\x00\x00\x00\x00\x00\x00%\xcd@Ky\x05\xa6\xe8\xf9^\t\xff\x06\x0eD\xe5\xcd\xcb\xd2\x81\xbf%\x1e\xb4\x94\xf8\xfcj\xd3;\xf4\xcc\xa2\x18\xb6\xc4', 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008004) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) bpf$auto(0x18, &(0x7f00000002c0)=@bpf_attr_0={0x0, 0x10, 0x1, 0x6, 0x8, r4, 0x400, "432a8091dac3bd4a0411088194f19cb8", 0x0, r6, 0x400, 0x400, 0xff, 0x64, r5, r6}, 0x9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/pids.peak\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000040)=""/194, 0xc2) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(0x0, 0x0, 0x18) msgctl$auto_MSG_STAT(0x0, 0xb, &(0x7f0000000080)={{0x4, 0xffffffffffffffff, 0xee00, 0x1, 0x1, 0x29a6db24, 0x4}, &(0x7f0000000000), &(0x7f0000000040)=0xb, 0x4, 0x4ba7, 0x400, 0x1, 0xffffffff, 0x0, 0x7, 0x100, @inferred, @inferred=0xffffffffffffffff}) setgid$auto(r8) r9 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x101000, 0x0) ioctl$auto(r9, 0x5404, 0x3) ioctl$auto(0x3, 0x5100, 0x38) r10 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000100)={0x34, r10, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000004}, 0x20048880) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80040000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r10, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x10}, @ETHTOOL_A_PLCA_BURST_CNT={0x8, 0x8, 0x5}]}, 0x24}}, 0x50) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5e}, 0x800}, 0x7, 0x4008) recvmmsg$auto(r2, &(0x7f0000000600)={{&(0x7f0000000940)="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", 0xc, &(0x7f0000000140)={&(0x7f0000000ac0)="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", 0x1}, 0xb43, &(0x7f0000000540)="30b0df18044d0484101488b00e51282999d5954c3e9936cb2e6d01c229f85e7531657bab66ebfda0d1cd87b9e98eb510836413c04d4f782fe46f8007866ef02d7380d6b459657ced62be69b44671413417980ee9eaa3ac610a84450e2c19a83f4689c07c8845d92a9491606fbb1cc22cb59674f6277b1ca73d135fba58070b4d6da970fd6045b396416530a9a4bf9244262bb7d05bac574430", 0xfff, 0x5}, 0xd}, 0xfffffffe, 0x0, &(0x7f0000000640)={0x5, 0x12}) 2.851247478s ago: executing program 0 (id=1722): socket(0x22, 0x80004, 0x2000106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:00.0/dma_mask_bits\x00', 0x80000, 0x0) shmctl$auto_SHM_UNLOCK(0x8, 0xc, &(0x7f0000000180)={{0x80000001, 0xee00, 0x0, 0x4, 0x1, 0x5, 0x1}, 0x3, 0x639, 0xffffffffffffffff, 0x291, @inferred, @inferred, 0x7, 0x0, &(0x7f0000000340)="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", 0x0}) timer_settime$auto(0x0, 0x5, &(0x7f00000000c0)={{0x8, 0x10007}, {0x9, 0x10}}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttyz9\x00', 0x80502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x8010) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x180443, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) socket(0x10, 0x2, 0x14) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x626340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) 2.797568729s ago: executing program 3 (id=1723): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_vdpa(&(0x7f0000000040), r0) ioctl$auto_BLKZEROOUT(r0, 0x127f, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x7ff, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) ioctl$auto_USBDEVFS_SUBMITURB32(0xffffffffffffffff, 0x802c550a, &(0x7f00000000c0)=ANY=[@ANYRESDEC]) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x23, 0x7, 0x7fffffffefff, 0x0, 0x0) mseal$auto(0x0, 0x3, 0x0) setsockopt$auto(0xffffffffffffffff, 0x110, 0x4, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x8009b72, 0x2, 0x9000) close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/available_tracers\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) r2 = socket(0x1, 0x1, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x232042, 0x45) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x7) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_PAN_ID={0x6, 0x9, 0x1}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_SCAN_DURATION={0x5}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x480c0}, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r3 = open(&(0x7f0000000040)='./bus\x00', 0x14d27e, 0x56) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xfff) copy_file_range$auto(r3, 0x0, r3, &(0x7f0000000080)=0x8, 0x2, 0x0) 2.570058013s ago: executing program 0 (id=1724): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) (async) rt_sigqueueinfo$auto_SIGCONT(0xffffffffffffffff, 0x12, &(0x7f0000000000)={@_si_pad}) (async) r1 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r1, 0x29, 0x19, 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r0, &(0x7f00000000c0)={{0x0, 0x3, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x2000000200002, 0x8}, 0x803}, 0x3b, 0x10, 0x0) ioctl$auto_BLKTRACESETUP32(0xffffffffffffffff, 0xc0401273, &(0x7f00000004c0)={"62b21cb2f0902b65354460c9537f589ddb36c217ee17283eac992a9b644d0ae6", 0x33, 0x2, 0xffff, 0xffff, 0x10000, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000440)={0x0, &(0x7f0000000100)=0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0), {0x2d}, &(0x7f0000000280)=""/71, 0x47, &(0x7f0000000340)=""/142, &(0x7f0000000400)=[r2], 0x1}, 0x58) process_mrelease$auto(r3, 0x6) (async, rerun: 64) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x80401, 0x0) (rerun: 64) write$auto(r4, 0x0, 0x800f) 2.09436461s ago: executing program 3 (id=1725): mmap$auto(0x0, 0x20009, 0xb17a, 0xeb1, 0x3fd, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async, rerun: 32) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) (rerun: 32) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/nmi_watchdog\x00', 0x101202, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) write$auto(0x3, 0x0, 0xfdef) (rerun: 32) wait4$auto(0x0, 0x0, 0xf, 0x0) (async) faccessat2$auto(0x1, 0x0, 0x4, 0x1200) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) (async) r1 = socket(0x10, 0x3, 0x4) (async, rerun: 32) readv$auto(r0, &(0x7f0000000000)={&(0x7f0000000480)="42bb3abb4fa4cbdc6ab167a5461dfcd9f1167b36a8f36e69c15bb623f2798780bb485d5e68aa70e3b64e224ac4ca328b8149bd9935dbff7492f91b7945c6719055ebc809f7ac0f0dd93e88a2b12310f826430ea54c6760f9d74da0ba359dd02a0839d5ac7188825eb06f4373265738d1126b21a55b632afb604ca0239ec7a18c5cf59cd94b4491f35c62086bc05552d542464b72c264fea777d59e93cbac54dacc11e3ecbf003c46999c58bd5e9c313793a368208c5b85fd1b3c0dcbaf0c771f0a21c85dd995d73bc955b0c33d96c6cb2255258817a806d67fb0cd9548c2f10ca8ba94e7b7a9670d7c5ecfa637bbb7713d7259dc005d22505636622f0dc973584485b924d9ae3b4a442085dcd97988fae56461a978b7923b7020d8ed9a8f52dd047b763fabf070f36300da4aed0e5f8f54b72666e3c962a3bad8ca50f0d543ad70fc0f01062d8f72f376582a5ee29fb8d0a9f367b670616492202fd27c443a1a9734ca79b4018363d5e1f964d0a822c22605064cb5640399d169fd61e3b9229e6b739c7ad27a3c7faa31109cb0d47912d656cf7a65efa77ffbefd93784fdfc44e0a843a44b1674e62faf019f968749ed54618904e4aa88fd50368ffade3746d1f0730b67117fb13bc08922bfbaebd22aceb4a446668b72c010056a92ef0593353b7c76b87e7f48951440e23b0494c1f5eed9f40069aa426a5c015473b7c26ed3875a02d148676df4f5d02fe4cd8bd0906fdc317f49aad5a651443d3abfe0fe0de2fd30b31fc750ad97b9b18f4c9181272548dd3f22e2ee6a3e19228fe2363fdaaa6abe1a23a5fbe970cac1d421788436d3ba4895521c2d9e7757c3adf105c7e1730b64430b824dcb16f9c676f0781d2b31136b726c226b45be8c05ebdd5728de0b83636ef72547bae8f3b3c22c1544a3e8290dd255d1eecf79c5ab56632265cffd9e5fc62675fd81be83928a5a95f52288ef4d8f0cac104b33d069373c67b15226290dfa8d6708396c93a9b6521709583c121867ca3b7b118861acc1865b772e1f6b8eef8af87ecf2219712be741dad67c87ef381d7d26c06ab2d4ade8586f8d06d1c5b401a6f1db07b5beb210e8f90276ef7a8e2dce648831039bdef145abdab138390a1421e59efc01077ad085ab20620886485c269dd05d654efa513e9d29e1b93095e98af06ac80ec0594a9aa77c4d0446be7846f65120d2facf9d94d1c8bc8ddf21448d6671befc349c267affad46d5b4dcfa9dbebdecefe76005425522a7a8531763dd15ce4599d6f2fa3de77d9632ea47375ac90293b244a49770c3b5a0f72a13ffe544e145d2f00a3802db3678f106163688da8fa1ed560ecf95b08d5752680191900fe62d2d343adf5f2ad7572c76c35e9001d9a269f58d6f74b574ccd98debe107bb264299fd5d96006d4d84eee5f3df32787abefb50f528e486bb7ebf2c3b4f916356706c516a343145c4ee8fd5aa5e89a3421296af9cea56b9ea7582578c0ede0a251154c256c9c36f798e567ea09687e1f6a36694f68064bbe79dd8c004c7a5bbb2103fa1538f13338c03d6b999402bf44c6c1d82771bb96e2fd74fd58f26e53bec224fb7c85b6e2440a4ee0c28cb1933b8b6fc37f37c2487e1ab7689d3a34a4b55769e7e33f286697a6a84e876fa514754e86729b929391892e8544d0eec324439cc5486651c1ca6966fe88d7c2f2c84bc39087fe11000e34f41dc3412988454f18968644687edc0e1a1c3c5d524fdd5ce7332181292083d355bbb9a6ee8a64be9cd552c22a3b4179d9dd9abe2bdd0d634eceeef6180fccf6bece4b50c69dcb336fd5186ab8a1e060fabcc4f39e760dc9726daa48dd2e6846beefc8a621267c30fd5bc4c01b3f3aff6fc8ee922c78aef9286be1649b241f18fe51c4509981556030f14917c385b3a376f8c11dd81ee662564e4ed89abffa1395dc88abb3f3107fc022bd0926015bbe51e51de035d8a6e6cefbd2ea80d0648d678def9214ab1b730babd7707792845e9e931bfe6f9411aa8bbc599d0728fb04b349a1ad200eabc0f62a8c17354d1b665962e13c554e384640cc72324faeee463244f0ad10a969e43b86ea5a55b0fad2a24f6b82eb0574140e170c96989dc0f678af4da28b239cb1b684925134f7a86d4684603d2c8b2a8de9b12f9c3926669b895c8edabc801b21b06dcf928645b32475cf2faec94436c5524535f55413bab5e6113cee0c9f74709c45b1484ecfcbedc9865bfe8f313416579cb49bc7669687bcf8979cb2983b0322b841bac49208e767dca10243c108f15ff600aba61be17b9f69bc8616ee445d692b54f22bbf0c390c93372e945e3731992b2c8bae91aff316776deece168b080c1b214f86b7c80d72cf77f8fa92ba85b964eb4f76c3510e3c2aa35878bb5f32be75c1928e4a51cb422ee345afdf537292de520dd2dc3008db46cbd39ab8fcfa6b4c38f7f921e2e89513078d5ea3e4e543fef6122cae3f158a0adca5c79fbacb8df5fa4bbf0f35779ec736ad47afa8db48291034f4c670c6e28b554f0050ceb7533227716df38fdd9a022451dd84cbdeb2486bd092948aa742390059270e935f6be889ae642011d4c2127e8f2dd9fc6bb3cdd6da78c2a32199833d3a88f3ffc0fbba5edec708e0605557b6c369bffb89c211be69ca9188b7b5a33d77a01f0468d66850c95d867cdc28646d5afc24b7b6cb0364322083f5cb28c5396845008f249d5dfb47cae9910fbbf5198a676d1fa363ed8fcc63a5d0b65f4720117a5002fb77028cbed53a76c8070d387b675f2da5710d5e5c42885df797caca9748b04f13954fd7881f3e8a81fdf936f1bc419fcbf64e26c9c85dbf5a7684a51c287a26e0812b6f7db4b10cddb896093c49d93a3687e7830164ba13f8b1406456bbf3709f05d4405572003cda29d3c7ba9d38970f73c57467104c49c2129aaf34fb376907659ca2c1918d672ce6adcbfb5e9b229166687f123c35269a741fc4f9b2ba9ba2e0561f0bd2113fe9a5f9b059b5a371d9821b5697f52da469cce422635384d1bbf791a444af7db60e86e551f6cbe6e466ae1c6db4dd084c62fd554269fa7095540c7c5ba2f1ec61bf5174b3c8998926e6c141e9c2ae51615df85391cc129270326bb5a8445e6c8d4893005963d2834152e187ae22cab6a61631c3835f69bbbc86d0d5ff7a1b5eb15a9acef96ee57ff1d84eb1cb8619bf21a1095bd8051847499be7178dbd81906b2229ee7dafbed2ffd0557c6ae64105bf38f85bfe71f7990be8bc497a114bc6755617948614260f66037d57d21321a2190820e5a762639a22f25bbcbd6d990334eed51a180de8d02cbcf66bbecf6fd0a2e137c353838b1966a08760a42e2171bcb561aacd1ca95b95d3dc008b03d252e812750b48b0aa845ac50bb98cc49b84fb3e6be135fff81f6393f4537236d93a250837973e88f55f36404f27cac1e4eedd1e856be46043e6dc4921d356d475951dfb428eaf3cbc894a12a12010a0cb8ec1c6a5bf170b8c0e1c42442a1f62d5e72442fbc087f972e6fc27cb42410bb94792ce7a9f1e8f742172779a45081ffe0129da1fd4274e6f64a49f264a09866fbabeed9622d63f6227fabd8966e3e1535246ca794a0fe7ffb1ce76d2d23b4010b7ddb64630d765d1254e8ce60aa5cc9999ce0d20e22bced475230b5344dfe141bc3406f157e763a403561930827675cb586dab638a3640780fb0add865d973707cae5b87310f9d5cc55ffe981a6218d8356a6df5d5f1790019faaba81c560d140f2d01e63cb5d5f94193de8a7020ad10e5471dc90b2621375126c930971503c430571ba5f3829d2417f09ca8be49f7070b89512e4a65972adf99cc9f30df38e5a57eb3f4f2e864e03e62dc2e07b815de6fe88eaad8126a806dba03d3e86ecee09be5ab284dc743e0574d9a3429071e03f5ba9013bd0908f019857ef3f5e7fa0c5fc07b5ed3acc0c7965b65d1100ca7e7d108b74137eee8d1e25a566331bb325de0aae9dac2ade26b4104bffe81050606b6ce0f89c98041118dac1f52e574b11b5af468dc1a41113ec65d61cd1ecaf9a0735d4d62d95cffbafdaf4d30be3ff806268a8799d129e51367d0062a435c2a793fb5a6b775b3072658be0c38022bbdef4d8b72028bea2788762d68038a3f87bf2d074df79daf29601c33ef8b37ddb9b045c42c27e1090f01541e1d24ff6674e467219eef09870da69ac8780d5cdc6b78b3c0eafbeb671ee2c0b365dd2a44a19bcdc7f3cf4db382f93af36e85bacc539ad9ae446fe0c80a89f3f1be57462f37f905942d3256c6bca316978cc1fefaec0cd104300c082d4cffdc52a7525aca6d9f1a5b02fa0e10595a11a8fc85f1b0c836a9a7ae6658337af6ee24ae7082949129723396ba52cc20c95768cff23f8cbe4d998538ae98590462940546545b0572b23535043d0358b085e36583abc6a53aa45f60f3604918cf17a5ab38a414af935a5ce0f3d1a9b919a6e1eeb2e855836cd246f5fbe78edb842c74d59416ddceb557bd5abc543e4abeacab7170ace37b7143e3340895df01532cc6356461f1ada9021df127a66e21810eb1f1f6830e62d6f192c2b8cfee96d3c2f68950926f75b4a0d321c6b0fd646738dd6c6b82232768a0b8dfae307513acc48d198deea657ed38e1e7675f8601ff6ba0bd32556c59e37840114a20b4f3fad493b3404b1bf5f1f78632228a719f582c89a8f1e82183a0031dde5005d262f087ccedc6f44e078f381f28527688c2c3d8a0f20896ef41852d0f1d5be471a6ac8806f1ace8f94d90a3f839a8f5a791591de812f93c4c5511d282a083e7d9c41046d1493693a87e8d1bbd16a22b5f31eaa161fc1e6a6f56fd83f536bbc68f8c246aab91dd43ed5b8a2390567fc577dffd01d89438899b8eea004c1626c6954f8974fa0d4e9f77ed1bf49120a6e1f2cebc40dc037622a1f9b3cf8c959af8c05334f8eec82c49df28ec06a7398a3e82f5cd3c7102b162be1d55022c4524429b24eced56356ff5c1bae695b806c74bdfae83c9087c94b5cc600822fd0e1f486895035389cde221bbe14e5a99def043a7c29a85ad0bb0ad27876eb5c8712e1de1807218efff762c3cd31f7dcb019d9db9656c2b8b2b7371c091a268d66398334e935cb7ca6f595eb6173a8ac12c4fb2bb3e49c32f93c39be3e55a71a83845a122f48125709f6543f6b9f43c2d95aa81f8332e21efdddf385470a526c36b7d0a6eca28c8d6107c910ef0706fb79bf11e82a0558bc37b941cc0aba923b8d8f5081e7c3291072ef8939f0e412f3550533a1f45c56cea7da90534a2817b559490effab1d651fc04b78ad2454400b0806734b1e9fa26d791b071cd4c0b330c9311191a0722421215299f316365125ce8a9528d59c1886ed6e2536142fec9d9c09c964d22cb49fe7cee96636572162424a47d69f993c5557040e08492d2d12d52aeeeea7b95910efdae2022dc2831d78f322b7258c95f854b81a9539573d85d793212b16639e935091a29d9adca84404dc31e454e0f0d74fcc4b5b8a98f7aac0b4d04a6a612dd767fdeef91d5ecd0a3dab2b7307b111ade627796d7a6bd020a8d9b8cf4e8caeb1fb6c21d4fe3a8b45f15e1f5cd2292d9cadea76bd2841d7f8d137062b53f286c8d70649d6a614fa16d51deaca9678a2ab4005b34e8a0d0d3cfc9382cfe3f9ca6a611115173c1ce4e81f7bfe011d563485e0a6f16e1cfd939477c46e6c0e644a5c8b4e5addd576fab897c6888e91718fad64aaeb51e2b73b12883af3ea206debb85ad665a308d379ffa70a29", 0x3}, 0x6) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e800", @ANYRES32=r1, @ANYBLOB="0800fb00", @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x80000001}, 0x20000000, 0x0) (rerun: 64) 1.963922613s ago: executing program 2 (id=1726): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0xf, 0xa, 0x13) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) socket(0x1d, 0x2, 0x7) socket(0xa, 0x2, 0x73) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x8001, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0xfffffffe, 0x0, 0x5, 0x0, 0x200002, 0x8}, 0x801}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r1, 0x8932, 0x24) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) 1.788404621s ago: executing program 1 (id=1727): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0xa0342, 0x0) 1.678973874s ago: executing program 0 (id=1728): unshare$auto(0x40000080) sethostname$auto(&(0x7f0000000040)='/dev/rtc0\x00', 0x4) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x1, 0x2003f2, 0xb3d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) socket(0x1d, 0x2, 0x6) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) madvise$auto(0x0, 0x200007, 0x19) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/radio1\x00', 0x80880, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) madvise$auto(0x7, 0x338d, 0x6) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) 1.677830304s ago: executing program 1 (id=1729): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x6, 0x13, 0x0, 0x2e) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r2 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi19\x00', 0x8654092f478cae21, 0x0) (async) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) ioctl$auto_SG_GET_PACK_ID(r3, 0x227c, 0x0) ioctl$auto(0x3, 0xc0205649, r2) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) (async) r4 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x40, r4, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x14}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mlock$auto(0x3, 0x4ac) 1.234361646s ago: executing program 1 (id=1730): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x1d, 0xffffffffffffffff, 0x8, 0x5, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r2, 0x1b, 0x70bd26, 0x25dfdbfb, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @fd}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x1, 0x0) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={r3, 0x0, 0x856, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x7, 0x5, 0x3, 0x3, 0x3, 0x6}, 0x1) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) write$auto(r5, &(0x7f0000000200)='/de\xef\xe7audio1\x00', 0xa3d9) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000001680)="a7", 0x80000) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000040)=""/105, 0x69) 1.112326806s ago: executing program 3 (id=1731): read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) setregid$auto(0x0, 0x0) (async, rerun: 64) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) (rerun: 64) read$auto(r0, 0x0, 0x7ffc) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0405, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) select$auto(0x7, 0x0, 0x0, &(0x7f0000000200)={[0xfffffffffffffff9, 0x10, 0x4, 0x7fff, 0x5, 0x9, 0x6000000000, 0xffffffff, 0xfffffffffffff300, 0x80000000, 0x5, 0x8000000000000000, 0x3, 0xac, 0x7ff, 0x6]}, 0x0) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000240), 0x343441, 0x0) getsockopt$auto_SO_KEEPALIVE(r1, 0x5, 0x9, &(0x7f0000000180)='DU)s\x92/}\xd1\\\x18\x81\xdfu\xf1\xef\x88\x94\x8a$\xd8\xa6\"\xfe\f\xc3\x05h\x94A\b\x14\xda&%C\x05\xc8rIg\xf5l3\xadj\xc3_v\xdd~?\xe3\x94\xd9\xb4!\xfdmJ\x1e\x98\x13\xb2\xfd\x9f\xa7\f\x04P\xda\xa2}\x0f!\\\'61\xda\xcfH\x93Qw\xae\\8t\r\xa0\x9a\xc8\xa5{\xee\xe7\x02\xd6o#\xf3\x96\xad\xf1\x04\xe1\x19\x8f\xa24\xbe-z\xbd\xc6', 0x0) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/radio4\x00', 0xc0400, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000140), 0x40042, 0x0) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x4) (async) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r3) (async, rerun: 32) ioctl$auto_KVM_GET_MSRS(r2, 0x4138ae84, &(0x7f0000000140)={0x7}) (rerun: 32) prctl$auto(0x4c, 0x100000001, 0x0, 0x0, 0x99) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r4 = getgid() shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f00000000c0)={{0x5, 0xee01, r4, 0xd, 0xd89, 0x1, 0x6}, 0x2f, 0x2, 0xf, 0x8b5, @raw=0xd, @raw=0x5, 0xa9, 0x0, &(0x7f0000000080)="695cce756f", &(0x7f0000000280)="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"}) (async, rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) ustat$auto(0x1, &(0x7f0000000000)={0x3, 0x1000, "fc1671f4c44d", "69b53cb9cab7"}) 955.713338ms ago: executing program 2 (id=1732): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) arch_prctl$auto(0x5005, 0x200000000000006) write$auto_fuse_dev_operations_fuse_i(r0, &(0x7f0000000440)="110000000400"/17, 0x11) madvise$auto(0x360, 0x200007, 0x8) 287.972814ms ago: executing program 0 (id=1733): mmap$auto(0x0, 0x4, 0xdc, 0xeb1, 0x401, 0x2) unshare$auto(0x40000080) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x26, 0x5, 0x8c68) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/midi2\x00', 0x101e41, 0x0) ioperm$auto(0x4, 0x100000001, 0x4000005) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyra\x00', 0x74c40, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x800, 0x8000009, 0x1, 0x19, 0xffffffffffffffff, 0x100000000000008) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x6, 0x7, 0x2) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40146f2c, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2b, 0x0) r4 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x50ba82, 0x0) read$auto(r4, 0x0, 0xb4d3) unshare$auto(0x40000080) setsockopt$auto(r0, 0xd0, 0x800000e4, 0x0, 0x569) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 282.303302ms ago: executing program 1 (id=1734): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x5, 0xffffffffffff000c, 0xfffffffe) ppoll$auto(&(0x7f0000003600)={0x8, 0x800, 0x1}, 0xd6, 0x0, 0x0, 0x8) 129.010435ms ago: executing program 2 (id=1735): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000140)={{0x0, 0x1, 0x200800, 0x7, 0x7fffffff}, "0dd7fd201768a257c57ca5e9ca6307000000000000000000000000ff00"}) 704.697µs ago: executing program 3 (id=1736): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) nanosleep$auto(0x0, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x111000, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000002c0)={0x9, &(0x7f0000000000)={0x50, 0xf2, 0xb0}}) prctl$auto(0x41555856, 0x24, 0x2008, 0x0, 0x0) ioctl$auto(0x3, 0x890b, 0x38) write$auto(0x3, 0x0, 0xfdef) r3 = eventfd$auto(0x80) write$auto(r3, &(0x7f0000000400)='\'\x00', 0x8) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0xc0000080, 0x400, 0x718c1257}]}) 0s ago: executing program 2 (id=1737): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0xa0342, 0x0) kernel console output (not intermixed with test programs): b0 [ 282.891562][ T9901] tomoyo_encode2+0xfb/0x3c0 [ 282.891581][ T9901] tomoyo_encode+0x29/0x50 [ 282.891596][ T9901] tomoyo_realpath_from_path+0x18c/0x690 [ 282.891617][ T9901] tomoyo_check_open_permission+0x2af/0x3c0 [ 282.891641][ T9901] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 282.891683][ T9901] ? do_raw_spin_lock+0x128/0x260 [ 282.891705][ T9901] ? path_get+0x61/0x80 [ 282.891759][ T9901] tomoyo_file_open+0x6b/0x90 [ 282.891779][ T9901] security_file_open+0xb5/0x1e0 [ 282.891795][ T9901] do_dentry_open+0x5aa/0x1660 [ 282.891813][ T9901] ? security_inode_permission+0xbf/0x250 [ 282.891839][ T9901] vfs_open+0x82/0x3f0 [ 282.891860][ T9901] path_openat+0x208c/0x31a0 [ 282.891881][ T9901] ? __pfx_path_openat+0x10/0x10 [ 282.891903][ T9901] do_file_open+0x20e/0x430 [ 282.891919][ T9901] ? __pfx_do_file_open+0x10/0x10 [ 282.891948][ T9901] ? alloc_fd+0x476/0x790 [ 282.891965][ T9901] ? do_getname+0x191/0x390 [ 282.891984][ T9901] do_sys_openat2+0x10d/0x1e0 [ 282.892003][ T9901] ? __pfx_do_sys_openat2+0x10/0x10 [ 282.892028][ T9901] __x64_sys_openat+0x12d/0x210 [ 282.892048][ T9901] ? __pfx___x64_sys_openat+0x10/0x10 [ 282.892079][ T9901] do_syscall_64+0x106/0xf80 [ 282.892100][ T9901] ? clear_bhb_loop+0x40/0x90 [ 282.892122][ T9901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.892138][ T9901] RIP: 0033:0x7f4b0759c799 [ 282.892153][ T9901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.892167][ T9901] RSP: 002b:00007f4b08428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 282.892182][ T9901] RAX: ffffffffffffffda RBX: 00007f4b07815fa0 RCX: 00007f4b0759c799 [ 282.892191][ T9901] RDX: 0000000000020401 RSI: 0000200000001c80 RDI: ffffffffffffff9c [ 282.892201][ T9901] RBP: 00007f4b07632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 282.892209][ T9901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.892218][ T9901] R13: 00007f4b07816038 R14: 00007f4b07815fa0 R15: 00007ffe216e3a48 [ 282.892239][ T9901] [ 282.892271][ T9901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 283.205872][ T9895] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 283.221216][ T9895] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 283.230204][ T9895] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 283.264407][ T9895] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 283.542275][ T9920] Invalid ELF header magic: != ELF [ 284.104382][ T5143] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 284.461125][ T9935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 284.481980][ T9935] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 284.554555][ T9935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 284.667628][ T9935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 284.814598][ T980] Process accounting resumed [ 286.427552][ T9972] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 286.504384][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 286.505724][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 286.590340][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 286.744966][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 288.273503][T10010] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 289.113494][T10020] FAULT_INJECTION: forcing a failure. [ 289.113494][T10020] name failslab, interval 1, probability 0, space 0, times 0 [ 289.203004][T10020] CPU: 1 UID: 0 PID: 10020 Comm: syz.0.831 Tainted: G U syzkaller #0 PREEMPT(full) [ 289.203029][T10020] Tainted: [U]=USER [ 289.203034][T10020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 289.203043][T10020] Call Trace: [ 289.203048][T10020] [ 289.203054][T10020] dump_stack_lvl+0x100/0x190 [ 289.203081][T10020] should_fail_ex.cold+0x5/0xa [ 289.203099][T10020] should_failslab+0xc2/0x120 [ 289.203125][T10020] __kmalloc_cache_noprof+0x7a/0x6f0 [ 289.203144][T10020] ? trace_pid_list_alloc+0x2fe/0x480 [ 289.203171][T10020] trace_pid_list_alloc+0x2fe/0x480 [ 289.203195][T10020] trace_pid_write+0x110/0x460 [ 289.203218][T10020] ? __pfx_trace_pid_write+0x10/0x10 [ 289.203252][T10020] event_pid_write.isra.0+0x1e4/0x800 [ 289.203277][T10020] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 289.203306][T10020] vfs_write+0x2aa/0x1070 [ 289.203330][T10020] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 289.203355][T10020] ? __pfx_vfs_write+0x10/0x10 [ 289.203376][T10020] ? __fget_files+0x215/0x3d0 [ 289.203395][T10020] ? __fget_files+0x21f/0x3d0 [ 289.203413][T10020] ksys_write+0x12a/0x250 [ 289.203436][T10020] ? __pfx_ksys_write+0x10/0x10 [ 289.203464][T10020] do_syscall_64+0x106/0xf80 [ 289.203482][T10020] ? clear_bhb_loop+0x40/0x90 [ 289.203500][T10020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.203515][T10020] RIP: 0033:0x7f4b0759c799 [ 289.203532][T10020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.203546][T10020] RSP: 002b:00007f4b08428028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 289.203560][T10020] RAX: ffffffffffffffda RBX: 00007f4b07815fa0 RCX: 00007f4b0759c799 [ 289.203570][T10020] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 289.203579][T10020] RBP: 00007f4b07632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 289.203587][T10020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 289.203595][T10020] R13: 00007f4b07816038 R14: 00007f4b07815fa0 R15: 00007ffe216e3a48 [ 289.203618][T10020] [ 291.388498][T10059] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 291.418654][ T5178] ERROR: Out of memory at tomoyo_memory_ok. [ 291.561265][T10052] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 291.574689][T10052] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 291.591150][T10052] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 291.599800][T10052] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 292.015186][T10076] Invalid ELF header magic: != ELF [ 292.114074][T10083] Invalid ELF header magic: != ELF [ 292.745466][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 293.624355][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 293.624876][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 293.630784][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 293.955981][T10119] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 293.983563][T10119] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 293.998633][T10119] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 294.010314][T10119] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 294.063525][T10126] syz.1.854 uses obsolete (PF_INET,SOCK_PACKET) [ 294.516173][T10130] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 296.024492][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 296.030624][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 296.033365][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 296.037147][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 296.234002][T10172] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 297.285877][T10192] netlink: 28 bytes leftover after parsing attributes in process `syz.1.868'. [ 297.399457][T10197] Invalid ELF header magic: != ELF [ 300.195026][T10246] .^: entered promiscuous mode [ 300.598021][T10253] FAULT_INJECTION: forcing a failure. [ 300.598021][T10253] name fail_futex, interval 1, probability 0, space 0, times 0 [ 300.598053][T10253] CPU: 1 UID: 0 PID: 10253 Comm: syz.1.878 Tainted: G U syzkaller #0 PREEMPT(full) [ 300.598075][T10253] Tainted: [U]=USER [ 300.598081][T10253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 300.598094][T10253] Call Trace: [ 300.598099][T10253] [ 300.598105][T10253] dump_stack_lvl+0x100/0x190 [ 300.598131][T10253] should_fail_ex.cold+0x5/0xa [ 300.598150][T10253] get_futex_key+0x1d2/0x1620 [ 300.598170][T10253] ? __pfx_get_futex_key+0x10/0x10 [ 300.598190][T10253] ? __fput+0x68a/0xb40 [ 300.598209][T10253] futex_wait_setup+0x83/0x510 [ 300.598237][T10253] __futex_wait+0x19f/0x300 [ 300.598260][T10253] ? __pfx___futex_wait+0x10/0x10 [ 300.598285][T10253] ? __pfx_futex_wake_mark+0x10/0x10 [ 300.598308][T10253] ? futex_hash+0x2c5/0x380 [ 300.598331][T10253] futex_wait+0xed/0x380 [ 300.598353][T10253] ? __pfx_futex_wait+0x10/0x10 [ 300.598384][T10253] do_futex+0x1ef/0x350 [ 300.598403][T10253] ? __pfx_do_futex+0x10/0x10 [ 300.598421][T10253] ? __pfx___might_resched+0x10/0x10 [ 300.598442][T10253] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 300.598463][T10253] __x64_sys_futex+0x34f/0x4d0 [ 300.598483][T10253] ? __pfx_task_work_run+0x10/0x10 [ 300.598506][T10253] ? __pfx___x64_sys_futex+0x10/0x10 [ 300.598527][T10253] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 300.598552][T10253] do_syscall_64+0x106/0xf80 [ 300.598574][T10253] ? clear_bhb_loop+0x40/0x90 [ 300.598601][T10253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.598616][T10253] RIP: 0033:0x7f3f7bb9c799 [ 300.598630][T10253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.598644][T10253] RSP: 002b:00007f3f7c9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 300.598659][T10253] RAX: ffffffffffffffda RBX: 00007f3f7be15fa8 RCX: 00007f3f7bb9c799 [ 300.598669][T10253] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3f7be15fa8 [ 300.598678][T10253] RBP: 00007f3f7be15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 300.598686][T10253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 300.598695][T10253] R13: 00007f3f7be16038 R14: 00007fff8b1bc310 R15: 00007fff8b1bc3f8 [ 300.598714][T10253] [ 301.335942][T10264] netlink: 12 bytes leftover after parsing attributes in process `syz.1.882'. [ 302.747376][T10278] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 302.775032][T10278] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 302.790891][T10278] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 302.854495][T10278] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 303.335930][T10298] zram: Added device: zram1 [ 303.673276][T10305] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 304.840226][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 304.840263][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 304.852361][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 304.909272][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 307.798670][T10382] Invalid ELF header magic: != ELF [ 308.155878][T10385] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 308.204670][T10385] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 308.241017][T10385] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 308.277416][T10385] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 309.301935][T10425] Invalid ELF header magic: != ELF [ 309.316325][T10424] Invalid ELF header magic: != ELF [ 309.918500][T10428] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 310.024695][T10428] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 310.024818][T10428] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 310.024912][T10428] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 310.118855][T10437] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 310.118915][T10437] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 310.118928][T10437] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 310.118945][T10437] page_type: f5(slab) [ 310.118959][T10437] raw: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 310.118977][T10437] raw: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 310.118991][T10437] head: 00fff00000000040 ffff888140413280 dead000000000100 dead000000000122 [ 310.119005][T10437] head: 0000000000000000 0000000800190019 00000000f5000000 0000000000000000 [ 310.119019][T10437] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 310.119033][T10437] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 310.119042][T10437] page dumped because: unmovable page [ 310.119056][T10437] page_owner tracks the page as allocated [ 310.119073][T10437] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5207, tgid 5207 (udevadm), ts 29568034939, free_ts 23948392509 [ 310.119104][T10437] post_alloc_hook+0x153/0x170 [ 310.119128][T10437] get_page_from_freelist+0x111d/0x3140 [ 310.119149][T10437] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 310.119177][T10437] new_slab+0xa6/0x6d0 [ 310.119194][T10437] refill_objects+0x26b/0x400 [ 310.119213][T10437] __pcs_replace_empty_main+0x19f/0x600 [ 310.119234][T10437] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 310.119256][T10437] alloc_inode+0x183/0x250 [ 310.119274][T10437] iget_locked+0x1d9/0x6d0 [ 310.119292][T10437] kernfs_get_inode+0x46/0x470 [ 310.119311][T10437] kernfs_iop_lookup+0x1a7/0x2d0 [ 310.119332][T10437] __lookup_slow+0x251/0x460 [ 310.119350][T10437] lookup_slow+0x50/0x70 [ 310.119367][T10437] link_path_walk+0x1377/0x1cc0 [ 310.119387][T10437] path_lookupat+0x74/0xc40 [ 310.119406][T10437] filename_lookup+0x202/0x590 [ 310.119427][T10437] page last free pid 1 tgid 1 stack trace: [ 310.119436][T10437] __free_frozen_pages+0x7e1/0x10d0 [ 310.119454][T10437] free_contig_range+0xde/0x1d0 [ 310.119471][T10437] destroy_args+0xa8/0x7a0 [ 310.119490][T10437] debug_vm_pgtable+0x1b66/0x34c0 [ 310.119509][T10437] do_one_initcall+0x11d/0x760 [ 310.119524][T10437] kernel_init_freeable+0x6e5/0x7a0 [ 310.119544][T10437] kernel_init+0x1f/0x1e0 [ 310.119565][T10437] ret_from_fork+0x754/0xd80 [ 310.119585][T10437] ret_from_fork_asm+0x1a/0x30 [ 310.329783][T10443] netlink: 40 bytes leftover after parsing attributes in process `syz.3.914'. [ 311.603931][T10452] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 311.944766][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 312.106268][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 312.113463][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 312.120330][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 313.640443][T10483] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 316.674130][T10581] Invalid ELF header magic: != ELF [ 317.208936][ T5835] Bluetooth: hci0: Received unexpected HCI Event 0x00 [ 317.239240][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.245621][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.328753][T10590] device-mapper: ioctl: Invalid ioctl structure: name , dev 3ff [ 317.386714][T10593] FAULT_INJECTION: forcing a failure. [ 317.386714][T10593] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 317.414485][T10593] CPU: 0 UID: 0 PID: 10593 Comm: syz.2.943 Tainted: G U syzkaller #0 PREEMPT(full) [ 317.414529][T10593] Tainted: [U]=USER [ 317.414539][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 317.414559][T10593] Call Trace: [ 317.414568][T10593] [ 317.414578][T10593] dump_stack_lvl+0x100/0x190 [ 317.414625][T10593] should_fail_ex.cold+0x5/0xa [ 317.414652][T10593] ? prepare_alloc_pages+0x16d/0x5f0 [ 317.414690][T10593] should_fail_alloc_page+0xeb/0x140 [ 317.414721][T10593] prepare_alloc_pages+0x1f0/0x5f0 [ 317.414759][T10593] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 317.414812][T10593] ? stack_trace_save+0x8e/0xc0 [ 317.414839][T10593] ? __pfx_stack_trace_save+0x10/0x10 [ 317.414867][T10593] ? stack_depot_save_flags+0x27/0x9d0 [ 317.414895][T10593] ? is_bpf_text_address+0x8a/0x1a0 [ 317.414937][T10593] ? is_bpf_text_address+0x8a/0x1a0 [ 317.414985][T10593] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 317.415027][T10593] ? kasan_save_stack+0x3f/0x50 [ 317.415068][T10593] ? kasan_save_track+0x14/0x30 [ 317.415108][T10593] ? kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 317.415149][T10593] ? alloc_vmap_area+0x640/0x2bd0 [ 317.415175][T10593] ? __get_vm_area_node+0x1ca/0x330 [ 317.415203][T10593] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 317.415235][T10593] ? __vmalloc_node_noprof+0xad/0xf0 [ 317.415266][T10593] ? n_tty_open+0x1a/0x170 [ 317.415301][T10593] ? tty_ldisc_open+0xa2/0x120 [ 317.415327][T10593] ? tty_ldisc_setup+0x40/0xf0 [ 317.415355][T10593] ? tty_init_dev.part.0+0x1b5/0x470 [ 317.415395][T10593] ? do_file_open+0x20e/0x430 [ 317.415421][T10593] ? do_sys_openat2+0x10d/0x1e0 [ 317.415453][T10593] ? __x64_sys_openat+0x12d/0x210 [ 317.415486][T10593] ? do_syscall_64+0x106/0xf80 [ 317.415517][T10593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.415572][T10593] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 317.415620][T10593] ? policy_nodemask+0xed/0x4f0 [ 317.415651][T10593] alloc_pages_mpol+0x1fb/0x550 [ 317.415682][T10593] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 317.415722][T10593] alloc_pages_noprof+0x131/0x390 [ 317.415754][T10593] get_free_pages_noprof+0x10/0xb0 [ 317.415781][T10593] __kasan_populate_vmalloc+0xa0/0x210 [ 317.415832][T10593] alloc_vmap_area+0x95d/0x2bd0 [ 317.415878][T10593] ? __pfx_alloc_vmap_area+0x10/0x10 [ 317.415917][T10593] __get_vm_area_node+0x1ca/0x330 [ 317.415956][T10593] __vmalloc_node_range_noprof+0x213/0x1530 [ 317.415997][T10593] ? n_tty_open+0x1a/0x170 [ 317.416037][T10593] ? look_up_lock_class+0x64/0x120 [ 317.416075][T10593] ? n_tty_open+0x1a/0x170 [ 317.416124][T10593] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 317.416160][T10593] ? __ldsem_down_write_nested+0xfd/0x830 [ 317.416199][T10593] ? __ldsem_down_write_nested+0x10e/0x830 [ 317.416238][T10593] ? is_console_locked+0x9/0x20 [ 317.416277][T10593] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 317.416322][T10593] ? n_tty_open+0x1a/0x170 [ 317.416358][T10593] __vmalloc_node_noprof+0xad/0xf0 [ 317.416390][T10593] ? n_tty_open+0x1a/0x170 [ 317.416426][T10593] ? __pfx_n_tty_open+0x10/0x10 [ 317.416463][T10593] n_tty_open+0x1a/0x170 [ 317.416500][T10593] tty_ldisc_open+0xa2/0x120 [ 317.416530][T10593] tty_ldisc_setup+0x40/0xf0 [ 317.416561][T10593] tty_init_dev.part.0+0x1b5/0x470 [ 317.416602][T10593] tty_open+0xa63/0xfa0 [ 317.416644][T10593] ? __pfx_tty_open+0x10/0x10 [ 317.416677][T10593] ? chrdev_open+0x10b/0x6a0 [ 317.416703][T10593] ? chrdev_open+0x10b/0x6a0 [ 317.416736][T10593] ? __pfx_tty_open+0x10/0x10 [ 317.416770][T10593] chrdev_open+0x234/0x6a0 [ 317.416796][T10593] ? __pfx_apparmor_file_open+0x10/0x10 [ 317.416834][T10593] ? __pfx_chrdev_open+0x10/0x10 [ 317.416864][T10593] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 317.416897][T10593] do_dentry_open+0x6d8/0x1660 [ 317.416922][T10593] ? __pfx_chrdev_open+0x10/0x10 [ 317.416960][T10593] vfs_open+0x82/0x3f0 [ 317.417010][T10593] path_openat+0x208c/0x31a0 [ 317.417051][T10593] ? __pfx_path_openat+0x10/0x10 [ 317.417093][T10593] do_file_open+0x20e/0x430 [ 317.417125][T10593] ? __pfx_do_file_open+0x10/0x10 [ 317.417181][T10593] ? alloc_fd+0x476/0x790 [ 317.417212][T10593] ? do_getname+0x191/0x390 [ 317.417249][T10593] do_sys_openat2+0x10d/0x1e0 [ 317.417284][T10593] ? __pfx_do_sys_openat2+0x10/0x10 [ 317.417321][T10593] ? rcu_is_watching+0x12/0xc0 [ 317.417372][T10593] __x64_sys_openat+0x12d/0x210 [ 317.417414][T10593] ? __pfx___x64_sys_openat+0x10/0x10 [ 317.417465][T10593] do_syscall_64+0x106/0xf80 [ 317.417495][T10593] ? clear_bhb_loop+0x40/0x90 [ 317.417529][T10593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.417558][T10593] RIP: 0033:0x7f25a139c799 [ 317.417581][T10593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.417607][T10593] RSP: 002b:00007f25a2192028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 317.417642][T10593] RAX: ffffffffffffffda RBX: 00007f25a1616090 RCX: 00007f25a139c799 [ 317.417665][T10593] RDX: 0000000000000102 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 317.417683][T10593] RBP: 00007f25a1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 317.417699][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.417716][T10593] R13: 00007f25a1616128 R14: 00007f25a1616090 R15: 00007fffc0aed1e8 [ 317.417754][T10593] [ 317.418897][T10593] syz.2.943: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 318.045270][T10598] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 318.051875][T10598] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 318.081977][T10598] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.096080][T10593] CPU: 1 UID: 0 PID: 10593 Comm: syz.2.943 Tainted: G U syzkaller #0 PREEMPT(full) [ 318.096105][T10593] Tainted: [U]=USER [ 318.096110][T10593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 318.096119][T10593] Call Trace: [ 318.096124][T10593] [ 318.096130][T10593] dump_stack_lvl+0x100/0x190 [ 318.096157][T10593] warn_alloc.cold+0x95/0x1c1 [ 318.096183][T10593] ? __pfx_warn_alloc+0x10/0x10 [ 318.096203][T10593] ? lockdep_hardirqs_on+0x78/0x100 [ 318.096223][T10593] ? __get_vm_area_node+0x2c5/0x330 [ 318.096245][T10593] ? __get_vm_area_node+0x208/0x330 [ 318.096265][T10593] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 318.096284][T10593] ? look_up_lock_class+0x64/0x120 [ 318.096304][T10593] ? n_tty_open+0x1a/0x170 [ 318.096331][T10593] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 318.096349][T10593] ? __ldsem_down_write_nested+0xfd/0x830 [ 318.096370][T10593] ? __ldsem_down_write_nested+0x10e/0x830 [ 318.096390][T10593] ? is_console_locked+0x9/0x20 [ 318.096412][T10593] ? __pfx___ldsem_down_write_nested+0x10/0x10 [ 318.096435][T10593] ? n_tty_open+0x1a/0x170 [ 318.096454][T10593] __vmalloc_node_noprof+0xad/0xf0 [ 318.096472][T10593] ? n_tty_open+0x1a/0x170 [ 318.096492][T10593] ? __pfx_n_tty_open+0x10/0x10 [ 318.096512][T10593] n_tty_open+0x1a/0x170 [ 318.096533][T10593] tty_ldisc_open+0xa2/0x120 [ 318.096549][T10593] tty_ldisc_setup+0x40/0xf0 [ 318.096566][T10593] tty_init_dev.part.0+0x1b5/0x470 [ 318.096588][T10593] tty_open+0xa63/0xfa0 [ 318.096610][T10593] ? __pfx_tty_open+0x10/0x10 [ 318.096627][T10593] ? chrdev_open+0x10b/0x6a0 [ 318.096641][T10593] ? chrdev_open+0x10b/0x6a0 [ 318.096658][T10593] ? __pfx_tty_open+0x10/0x10 [ 318.096677][T10593] chrdev_open+0x234/0x6a0 [ 318.096691][T10593] ? __pfx_apparmor_file_open+0x10/0x10 [ 318.096713][T10593] ? __pfx_chrdev_open+0x10/0x10 [ 318.096728][T10593] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 318.096748][T10593] do_dentry_open+0x6d8/0x1660 [ 318.096762][T10593] ? __pfx_chrdev_open+0x10/0x10 [ 318.096781][T10593] vfs_open+0x82/0x3f0 [ 318.096802][T10593] path_openat+0x208c/0x31a0 [ 318.096824][T10593] ? __pfx_path_openat+0x10/0x10 [ 318.096845][T10593] do_file_open+0x20e/0x430 [ 318.096862][T10593] ? __pfx_do_file_open+0x10/0x10 [ 318.096891][T10593] ? alloc_fd+0x476/0x790 [ 318.096907][T10593] ? do_getname+0x191/0x390 [ 318.096927][T10593] do_sys_openat2+0x10d/0x1e0 [ 318.096946][T10593] ? __pfx_do_sys_openat2+0x10/0x10 [ 318.096966][T10593] ? rcu_is_watching+0x12/0xc0 [ 318.096993][T10593] __x64_sys_openat+0x12d/0x210 [ 318.097013][T10593] ? __pfx___x64_sys_openat+0x10/0x10 [ 318.097044][T10593] do_syscall_64+0x106/0xf80 [ 318.097061][T10593] ? clear_bhb_loop+0x40/0x90 [ 318.097079][T10593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.097095][T10593] RIP: 0033:0x7f25a139c799 [ 318.097108][T10593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.097122][T10593] RSP: 002b:00007f25a2192028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 318.097137][T10593] RAX: ffffffffffffffda RBX: 00007f25a1616090 RCX: 00007f25a139c799 [ 318.097147][T10593] RDX: 0000000000000102 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 318.097156][T10593] RBP: 00007f25a1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 318.097164][T10593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.097173][T10593] R13: 00007f25a1616128 R14: 00007f25a1616090 R15: 00007fffc0aed1e8 [ 318.097193][T10593] [ 318.097198][T10593] Mem-Info: [ 318.462912][T10598] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.536101][T10593] active_anon:5843 inactive_anon:6589 isolated_anon:0 [ 318.536101][T10593] active_file:14883 inactive_file:42044 isolated_file:0 [ 318.536101][T10593] unevictable:768 dirty:463 writeback:0 [ 318.536101][T10593] slab_reclaimable:11689 slab_unreclaimable:92064 [ 318.536101][T10593] mapped:26164 shmem:2376 pagetables:1224 [ 318.536101][T10593] sec_pagetables:0 bounce:0 [ 318.536101][T10593] kernel_misc_reclaimable:0 [ 318.536101][T10593] free:1311206 free_pcp:19775 free_cma:0 [ 318.583349][T10593] Node 0 active_anon:23372kB inactive_anon:26356kB active_file:59532kB inactive_file:168048kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104656kB dirty:1852kB writeback:0kB shmem:7968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12428kB pagetables:4744kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.626828][T10593] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 318.657114][T10593] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.752071][T10593] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 318.758067][T10593] Node 0 DMA32 free:1293076kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23372kB inactive_anon:26604kB active_file:59532kB inactive_file:168048kB unevictable:1536kB writepending:1940kB zspages:400kB present:3129332kB managed:2537416kB mlocked:0kB bounce:0kB free_pcp:74188kB local_pcp:39596kB free_cma:0kB [ 318.908597][T10593] lowmem_reserve[]: 0 0 1 1 1 [ 318.913419][T10593] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1060kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 318.944755][T10593] lowmem_reserve[]: 0 0 0 0 0 [ 318.950603][T10593] Node 1 Normal free:3935964kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:128kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4468kB local_pcp:4468kB free_cma:0kB [ 318.985895][T10593] lowmem_reserve[]: 0 0 0 0 0 [ 318.990684][T10593] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 319.003606][T10593] Node 0 DMA32: 4898*4kB (UME) 3582*8kB (UME) 1866*16kB (UME) 899*32kB (UME) 507*64kB (UME) 460*128kB (UME) 241*256kB (UM) 196*512kB (UM) 118*1024kB (UME) 14*2048kB (UME) 192*4096kB (UM) = 1296184kB [ 319.023921][T10593] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 319.035660][T10593] Node 1 Normal: 11*4kB (U) 12*8kB (UM) 23*16kB (UME) 11*32kB (UME) 2*64kB (ME) 6*128kB (UE) 2*256kB (UM) 1*512kB (U) 1*1024kB (E) 4*2048kB (UME) 958*4096kB (M) = 3935964kB [ 319.053185][T10593] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.062785][T10593] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 319.073760][T10593] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 319.083630][T10593] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 319.093040][T10593] 59340 total pagecache pages [ 319.099248][T10593] 13 pages in swap cache [ 319.103539][T10593] Free swap = 124560kB [ 319.107737][T10593] Total swap = 124996kB [ 319.111986][T10593] 2097051 pages RAM [ 319.115830][T10593] 0 pages HighMem/MovableOnly [ 319.120545][T10593] 430817 pages reserved [ 319.124805][T10593] 0 pages cma reserved [ 319.129041][T10593] tty tty1: ldisc open failed (-12), clearing slot 0 [ 320.105004][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 320.105125][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 320.121071][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 320.514408][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.547007][T10634] netlink: 288 bytes leftover after parsing attributes in process `syz.0.954'. [ 321.091125][T10641] netlink: 8 bytes leftover after parsing attributes in process `syz.0.957'. [ 321.443527][T10649] FAULT_INJECTION: forcing a failure. [ 321.443527][T10649] name failslab, interval 1, probability 0, space 0, times 0 [ 321.485151][T10649] CPU: 1 UID: 0 PID: 10649 Comm: syz.0.958 Tainted: G U syzkaller #0 PREEMPT(full) [ 321.485201][T10649] Tainted: [U]=USER [ 321.485210][T10649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 321.485230][T10649] Call Trace: [ 321.485240][T10649] [ 321.485250][T10649] dump_stack_lvl+0x100/0x190 [ 321.485311][T10649] should_fail_ex.cold+0x5/0xa [ 321.485346][T10649] ? lsm_blob_alloc+0x68/0x90 [ 321.485384][T10649] should_failslab+0xc2/0x120 [ 321.485417][T10649] __kmalloc_noprof+0xe0/0x850 [ 321.485459][T10649] ? trace_kmalloc+0x101/0x130 [ 321.485494][T10649] lsm_blob_alloc+0x68/0x90 [ 321.485527][T10649] security_sk_alloc+0x2d/0x290 [ 321.485567][T10649] sk_prot_alloc+0x12a/0x2a0 [ 321.485609][T10649] sk_alloc+0x36/0xe80 [ 321.485639][T10649] __netlink_create+0x5e/0x2c0 [ 321.485668][T10649] ? __wake_up+0x3f/0x60 [ 321.485699][T10649] netlink_create+0x293/0x610 [ 321.485731][T10649] ? __pfx_genl_bind+0x10/0x10 [ 321.485768][T10649] ? __pfx_genl_unbind+0x10/0x10 [ 321.485800][T10649] ? __pfx_genl_release+0x10/0x10 [ 321.485840][T10649] __sock_create+0x339/0x860 [ 321.485889][T10649] __sys_socket+0x14d/0x260 [ 321.485929][T10649] ? __pfx___sys_socket+0x10/0x10 [ 321.485981][T10649] __x64_sys_socket+0x72/0xb0 [ 321.486024][T10649] ? lockdep_hardirqs_on+0x78/0x100 [ 321.486058][T10649] do_syscall_64+0x106/0xf80 [ 321.486086][T10649] ? clear_bhb_loop+0x40/0x90 [ 321.486119][T10649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.486148][T10649] RIP: 0033:0x7f4b0759e007 [ 321.486173][T10649] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.486202][T10649] RSP: 002b:00007f4b08426f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 321.486230][T10649] RAX: ffffffffffffffda RBX: 00007f4b07815fa0 RCX: 00007f4b0759e007 [ 321.486253][T10649] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 321.486270][T10649] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 321.486297][T10649] R10: 0000000000000000 R11: 0000000000000286 R12: 0000000000000000 [ 321.486314][T10649] R13: 00007f4b07816038 R14: 00007f4b07815fa0 R15: 00007ffe216e3a48 [ 321.486353][T10649] [ 322.413433][T10654] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 323.505004][T10684] binder: 10677:10684 ioctl c018620c 200000001e00 returned -1 [ 325.195624][T10704] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 326.427374][T10725] Invalid ELF header magic: != ELF [ 326.815115][ T5835] Bluetooth: hci1: unexpected event 0x06 length: 435 > 3 [ 327.309461][T10732] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 327.322818][T10732] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 327.346820][T10732] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 327.353095][T10732] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 327.887594][T10738] FAULT_INJECTION: forcing a failure. [ 327.887594][T10738] name failslab, interval 1, probability 0, space 0, times 0 [ 327.977663][T10738] CPU: 0 UID: 0 PID: 10738 Comm: syz.1.980 Tainted: G U L syzkaller #0 PREEMPT(full) [ 327.977711][T10738] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 327.977722][T10738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 327.977738][T10738] Call Trace: [ 327.977747][T10738] [ 327.977757][T10738] dump_stack_lvl+0x100/0x190 [ 327.977804][T10738] should_fail_ex.cold+0x5/0xa [ 327.977837][T10738] should_failslab+0xc2/0x120 [ 327.977866][T10738] __kmalloc_cache_noprof+0x7a/0x6f0 [ 327.977902][T10738] ? alloc_mnt_ns+0xce/0x520 [ 327.977938][T10738] ? strncpy_from_user+0x19d/0x2d0 [ 327.977987][T10738] alloc_mnt_ns+0xce/0x520 [ 327.978029][T10738] vfs_open_tree+0x4ff/0x14d0 [ 327.978063][T10738] ? do_raw_spin_lock+0x128/0x260 [ 327.978106][T10738] ? __pfx_vfs_open_tree+0x10/0x10 [ 327.978144][T10738] ? do_raw_spin_unlock+0x145/0x1e0 [ 327.978181][T10738] ? _raw_spin_unlock+0x28/0x50 [ 327.978206][T10738] ? alloc_fd+0x476/0x790 [ 327.978241][T10738] ? __do_sys_open_tree_attr+0xc0/0x340 [ 327.978271][T10738] __do_sys_open_tree_attr+0xc0/0x340 [ 327.978303][T10738] ? __pfx___do_sys_open_tree_attr+0x10/0x10 [ 327.978334][T10738] ? fput+0x79/0x100 [ 327.978365][T10738] ? ksys_write+0x1ac/0x250 [ 327.978407][T10738] ? __pfx_ksys_write+0x10/0x10 [ 327.978460][T10738] do_syscall_64+0x106/0xf80 [ 327.978491][T10738] ? clear_bhb_loop+0x40/0x90 [ 327.978526][T10738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.978555][T10738] RIP: 0033:0x7f3f7bb9c799 [ 327.978578][T10738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.978604][T10738] RSP: 002b:00007f3f7c9f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d3 [ 327.978631][T10738] RAX: ffffffffffffffda RBX: 00007f3f7be15fa0 RCX: 00007f3f7bb9c799 [ 327.978649][T10738] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 327.978667][T10738] RBP: 00007f3f7c9f6090 R08: 0000000000000800 R09: 0000000000000000 [ 327.978684][T10738] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 327.978701][T10738] R13: 00007f3f7be16038 R14: 00007f3f7be15fa0 R15: 00007fff8b1bc3f8 [ 327.978738][T10738] [ 328.564819][T10744] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 328.707874][T10747] FAULT_INJECTION: forcing a failure. [ 328.707874][T10747] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 328.808277][T10747] CPU: 1 UID: 0 PID: 10747 Comm: syz.0.985 Tainted: G U L syzkaller #0 PREEMPT(full) [ 328.808305][T10747] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 328.808311][T10747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 328.808321][T10747] Call Trace: [ 328.808326][T10747] [ 328.808332][T10747] dump_stack_lvl+0x100/0x190 [ 328.808359][T10747] should_fail_ex.cold+0x5/0xa [ 328.808374][T10747] ? prepare_alloc_pages+0x16d/0x5f0 [ 328.808393][T10747] should_fail_alloc_page+0xeb/0x140 [ 328.808410][T10747] prepare_alloc_pages+0x1f0/0x5f0 [ 328.808430][T10747] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 328.808461][T10747] ? __pfx___schedule+0x10/0x10 [ 328.808477][T10747] ? unwind_get_return_address+0x59/0xa0 [ 328.808495][T10747] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 328.808520][T10747] ? lockdep_hardirqs_on+0x78/0x100 [ 328.808537][T10747] ? irqentry_exit+0x180/0x670 [ 328.808561][T10747] ? policy_nodemask+0x350/0x4f0 [ 328.808576][T10747] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 328.808602][T10747] ? policy_nodemask+0xed/0x4f0 [ 328.808618][T10747] alloc_pages_mpol+0x1fb/0x550 [ 328.808634][T10747] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 328.808655][T10747] alloc_pages_noprof+0x131/0x390 [ 328.808671][T10747] kimage_alloc_pages+0x72/0x380 [ 328.808698][T10747] kimage_alloc_control_pages+0x157/0xa20 [ 328.808718][T10747] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 328.808740][T10747] do_kexec_load+0x275/0x810 [ 328.808758][T10747] ? __pfx_do_kexec_load+0x10/0x10 [ 328.808775][T10747] ? _copy_from_user+0x59/0xd0 [ 328.808801][T10747] __x64_sys_kexec_load+0x1bf/0x230 [ 328.808819][T10747] do_syscall_64+0x106/0xf80 [ 328.808837][T10747] ? clear_bhb_loop+0x40/0x90 [ 328.808855][T10747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.808870][T10747] RIP: 0033:0x7f4b0759c799 [ 328.808884][T10747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.808898][T10747] RSP: 002b:00007f4b08428028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 328.808913][T10747] RAX: ffffffffffffffda RBX: 00007f4b07815fa0 RCX: 00007f4b0759c799 [ 328.808923][T10747] RDX: 0000200000000040 RSI: 0000000000000002 RDI: 0000000000000005 [ 328.808932][T10747] RBP: 00007f4b07632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 328.808947][T10747] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 328.808956][T10747] R13: 00007f4b07816038 R14: 00007f4b07815fa0 R15: 00007ffe216e3a48 [ 328.808976][T10747] [ 329.158287][T10747] kexec: Could not allocate control_code_buffer [ 329.403026][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 329.403048][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 329.403084][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 329.409156][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 329.628589][T10740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 329.642115][T10740] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 329.648401][T10740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.664633][T10740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 331.318379][T10797] ima: Unable to open file: /sys/kernel/security/integrity/ima/policy (-26) [ 331.366308][T10796] ima: policy update failed [ 331.383102][ T29] audit: type=1802 audit(4294968370.514:6): pid=10796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.997" res=0 errno=0 [ 331.523967][T10801] FAULT_INJECTION: forcing a failure. [ 331.523967][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 331.524052][T10801] CPU: 0 UID: 0 PID: 10801 Comm: syz.3.999 Tainted: G U L syzkaller #0 PREEMPT(full) [ 331.524095][T10801] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 331.524105][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.524121][T10801] Call Trace: [ 331.524128][T10801] [ 331.524136][T10801] dump_stack_lvl+0x100/0x190 [ 331.524176][T10801] should_fail_ex.cold+0x5/0xa [ 331.524209][T10801] should_failslab+0xc2/0x120 [ 331.524237][T10801] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 331.524282][T10801] ? kstrdup_const+0x63/0x80 [ 331.524324][T10801] kstrdup+0x51/0xe0 [ 331.524365][T10801] kstrdup_const+0x63/0x80 [ 331.524405][T10801] alloc_vfsmnt+0xe5/0x6a0 [ 331.524441][T10801] clone_mnt+0x4b/0x930 [ 331.524482][T10801] __do_loopback+0x455/0x520 [ 331.524516][T10801] vfs_open_tree+0x64e/0x14d0 [ 331.524549][T10801] ? do_raw_spin_lock+0x128/0x260 [ 331.524591][T10801] ? __pfx_vfs_open_tree+0x10/0x10 [ 331.524623][T10801] ? do_raw_spin_unlock+0x145/0x1e0 [ 331.524663][T10801] ? _raw_spin_unlock+0x28/0x50 [ 331.524696][T10801] ? alloc_fd+0x476/0x790 [ 331.524731][T10801] ? __do_sys_open_tree_attr+0xc0/0x340 [ 331.524759][T10801] __do_sys_open_tree_attr+0xc0/0x340 [ 331.524790][T10801] ? __pfx___do_sys_open_tree_attr+0x10/0x10 [ 331.524819][T10801] ? fput+0x79/0x100 [ 331.524849][T10801] ? ksys_write+0x1ac/0x250 [ 331.524889][T10801] ? __pfx_ksys_write+0x10/0x10 [ 331.524941][T10801] do_syscall_64+0x106/0xf80 [ 331.524972][T10801] ? clear_bhb_loop+0x40/0x90 [ 331.525005][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.525033][T10801] RIP: 0033:0x7fc64f39c799 [ 331.525055][T10801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.525081][T10801] RSP: 002b:00007fc65024b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d3 [ 331.525107][T10801] RAX: ffffffffffffffda RBX: 00007fc64f615fa0 RCX: 00007fc64f39c799 [ 331.525125][T10801] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 331.525142][T10801] RBP: 00007fc65024b090 R08: 0000000000000800 R09: 0000000000000000 [ 331.525159][T10801] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 331.525175][T10801] R13: 00007fc64f616038 R14: 00007fc64f615fa0 R15: 00007ffcbc740718 [ 331.525212][T10801] [ 331.722789][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 331.723421][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 331.728043][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 331.728122][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 331.883731][T10804] FAULT_INJECTION: forcing a failure. [ 331.883731][T10804] name failslab, interval 1, probability 0, space 0, times 0 [ 331.883789][T10804] CPU: 1 UID: 0 PID: 10804 Comm: syz.3.1000 Tainted: G U L syzkaller #0 PREEMPT(full) [ 331.883833][T10804] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 331.883848][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 331.883865][T10804] Call Trace: [ 331.883874][T10804] [ 331.883885][T10804] dump_stack_lvl+0x100/0x190 [ 331.883933][T10804] should_fail_ex.cold+0x5/0xa [ 331.883968][T10804] should_failslab+0xc2/0x120 [ 331.883997][T10804] __kmalloc_cache_noprof+0x7a/0x6f0 [ 331.884036][T10804] ? device_create_groups_vargs+0x8a/0x270 [ 331.884064][T10804] ? __lock_acquire+0x4a5/0x2630 [ 331.884103][T10804] device_create_groups_vargs+0x8a/0x270 [ 331.884144][T10804] device_create+0xed/0x130 [ 331.884175][T10804] ? __pfx_device_create+0x10/0x10 [ 331.884207][T10804] ? is_console_locked+0x9/0x20 [ 331.884238][T10804] ? con_is_visible+0x65/0x150 [ 331.884282][T10804] ? csi_J+0x57e/0xad0 [ 331.884321][T10804] vcs_make_sysfs+0x32/0x80 [ 331.884349][T10804] vc_allocate+0x539/0x880 [ 331.884383][T10804] ? __pfx_vc_allocate+0x10/0x10 [ 331.884425][T10804] con_install+0xa1/0x620 [ 331.884461][T10804] ? __pfx_con_install+0x10/0x10 [ 331.884501][T10804] ? __pfx_con_install+0x10/0x10 [ 331.884532][T10804] tty_init_dev.part.0+0x9e/0x470 [ 331.884572][T10804] tty_open+0xa63/0xfa0 [ 331.884614][T10804] ? __pfx_tty_open+0x10/0x10 [ 331.884646][T10804] ? chrdev_open+0x589/0x6a0 [ 331.884673][T10804] ? chrdev_open+0x589/0x6a0 [ 331.884706][T10804] ? __pfx_tty_open+0x10/0x10 [ 331.884742][T10804] chrdev_open+0x234/0x6a0 [ 331.884772][T10804] ? __pfx_chrdev_open+0x10/0x10 [ 331.884801][T10804] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 331.884837][T10804] do_dentry_open+0x6d8/0x1660 [ 331.884864][T10804] ? __pfx_chrdev_open+0x10/0x10 [ 331.884901][T10804] vfs_open+0x82/0x3f0 [ 331.884939][T10804] path_openat+0x208c/0x31a0 [ 331.884977][T10804] ? __pfx_path_openat+0x10/0x10 [ 331.885019][T10804] do_file_open+0x20e/0x430 [ 331.885049][T10804] ? __pfx_do_file_open+0x10/0x10 [ 331.885100][T10804] ? alloc_fd+0x476/0x790 [ 331.885129][T10804] ? do_getname+0x191/0x390 [ 331.885176][T10804] do_sys_openat2+0x10d/0x1e0 [ 331.885212][T10804] ? __pfx_do_sys_openat2+0x10/0x10 [ 331.885251][T10804] ? __fget_files+0x21f/0x3d0 [ 331.885283][T10804] __x64_sys_openat+0x12d/0x210 [ 331.885320][T10804] ? __pfx___x64_sys_openat+0x10/0x10 [ 331.885370][T10804] do_syscall_64+0x106/0xf80 [ 331.885403][T10804] ? clear_bhb_loop+0x40/0x90 [ 331.885437][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.885464][T10804] RIP: 0033:0x7fc64f39c799 [ 331.885486][T10804] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.885513][T10804] RSP: 002b:00007fc65024b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 331.885538][T10804] RAX: ffffffffffffffda RBX: 00007fc64f615fa0 RCX: 00007fc64f39c799 [ 331.885556][T10804] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 331.885575][T10804] RBP: 00007fc64f432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 331.885591][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.885605][T10804] R13: 00007fc64f616038 R14: 00007fc64f615fa0 R15: 00007ffcbc740718 [ 331.885641][T10804] [ 332.978785][T10833] netlink: 294 bytes leftover after parsing attributes in process `syz.1.1005'. [ 333.817027][T10862] Invalid ELF header magic: != ELF [ 337.532074][T10927] FAULT_INJECTION: forcing a failure. [ 337.532074][T10927] name failslab, interval 1, probability 0, space 0, times 0 [ 337.545060][T10927] CPU: 0 UID: 0 PID: 10927 Comm: syz.2.1026 Tainted: G U L syzkaller #0 PREEMPT(full) [ 337.545108][T10927] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 337.545117][T10927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 337.545133][T10927] Call Trace: [ 337.545143][T10927] [ 337.545154][T10927] dump_stack_lvl+0x100/0x190 [ 337.545200][T10927] should_fail_ex.cold+0x5/0xa [ 337.545233][T10927] should_failslab+0xc2/0x120 [ 337.545262][T10927] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 337.545302][T10927] ? security_file_alloc+0x34/0x2c0 [ 337.545331][T10927] ? trace_kmem_cache_alloc+0xf3/0x120 [ 337.545367][T10927] security_file_alloc+0x34/0x2c0 [ 337.545396][T10927] init_file+0x95/0x480 [ 337.545430][T10927] alloc_empty_file+0x73/0x1c0 [ 337.545465][T10927] dentry_open+0x46/0xd0 [ 337.545499][T10927] vfs_open_tree+0x8c1/0x14d0 [ 337.545540][T10927] ? __pfx_vfs_open_tree+0x10/0x10 [ 337.545573][T10927] ? do_raw_spin_unlock+0x145/0x1e0 [ 337.545621][T10927] ? _raw_spin_unlock+0x28/0x50 [ 337.545649][T10927] ? alloc_fd+0x476/0x790 [ 337.545685][T10927] ? __do_sys_open_tree_attr+0xc0/0x340 [ 337.545714][T10927] __do_sys_open_tree_attr+0xc0/0x340 [ 337.545747][T10927] ? __pfx___do_sys_open_tree_attr+0x10/0x10 [ 337.545777][T10927] ? fput+0x79/0x100 [ 337.545807][T10927] ? ksys_write+0x1ac/0x250 [ 337.545849][T10927] ? __pfx_ksys_write+0x10/0x10 [ 337.545902][T10927] do_syscall_64+0x106/0xf80 [ 337.545934][T10927] ? clear_bhb_loop+0x40/0x90 [ 337.545969][T10927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.545998][T10927] RIP: 0033:0x7f25a139c799 [ 337.546020][T10927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.546047][T10927] RSP: 002b:00007f25a21b3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001d3 [ 337.546074][T10927] RAX: ffffffffffffffda RBX: 00007f25a1615fa0 RCX: 00007f25a139c799 [ 337.546094][T10927] RDX: 0000000000000001 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 337.546112][T10927] RBP: 00007f25a21b3090 R08: 0000000000000800 R09: 0000000000000000 [ 337.546129][T10927] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 337.546146][T10927] R13: 00007f25a1616038 R14: 00007f25a1615fa0 R15: 00007fffc0aed1e8 [ 337.546184][T10927] [ 338.192646][T10934] Invalid ELF header magic: != ELF [ 338.766735][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1030'. [ 339.573293][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1031'. [ 339.609413][T10952] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1031'. [ 339.858997][T10958] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 341.944283][ T5828] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 343.883950][T11049] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 344.033844][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 344.429232][T11070] bridge0: port 3(syz_tun) entered blocking state [ 344.441243][T11070] bridge0: port 3(syz_tun) entered disabled state [ 344.544227][T11070] syz_tun: entered allmulticast mode [ 344.560727][T11070] syz_tun: entered promiscuous mode [ 344.583715][T11070] bridge0: port 3(syz_tun) entered blocking state [ 344.586131][T11081] random: crng reseeded on system resumption [ 344.590326][T11070] bridge0: port 3(syz_tun) entered forwarding state [ 344.615432][T11081] FAULT_INJECTION: forcing a failure. [ 344.615432][T11081] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 344.652913][T11081] CPU: 0 UID: 0 PID: 11081 Comm: syz.2.1056 Tainted: G U L syzkaller #0 PREEMPT(full) [ 344.652963][T11081] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 344.652974][T11081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 344.652991][T11081] Call Trace: [ 344.653000][T11081] [ 344.653010][T11081] dump_stack_lvl+0x100/0x190 [ 344.653065][T11081] should_fail_ex.cold+0x5/0xa [ 344.653093][T11081] ? prepare_alloc_pages+0x16d/0x5f0 [ 344.653130][T11081] should_fail_alloc_page+0xeb/0x140 [ 344.653163][T11081] prepare_alloc_pages+0x1f0/0x5f0 [ 344.653203][T11081] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 344.653261][T11081] ? stack_trace_save+0x8e/0xc0 [ 344.653290][T11081] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 344.653333][T11081] ? stack_depot_save_flags+0x27/0x9d0 [ 344.653363][T11081] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 344.653411][T11081] ? kasan_save_stack+0x3f/0x50 [ 344.653452][T11081] ? kasan_save_stack+0x30/0x50 [ 344.653492][T11081] ? kasan_save_track+0x14/0x30 [ 344.653541][T11081] ? do_sys_openat2+0x10d/0x1e0 [ 344.653575][T11081] ? __x64_sys_openat+0x12d/0x210 [ 344.653610][T11081] ? do_syscall_64+0x106/0xf80 [ 344.653642][T11081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.653675][T11081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 344.653723][T11081] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 344.653771][T11081] ? policy_nodemask+0xed/0x4f0 [ 344.653804][T11081] alloc_pages_mpol+0x1fb/0x550 [ 344.653835][T11081] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 344.653876][T11081] alloc_pages_noprof+0x131/0x390 [ 344.653908][T11081] get_zeroed_page_noprof+0x18/0xb0 [ 344.653939][T11081] get_image_page+0x18/0x1a0 [ 344.653983][T11081] memory_bm_create+0x432/0xba0 [ 344.654057][T11081] create_basic_memory_bitmaps+0x10b/0x350 [ 344.654098][T11081] snapshot_open+0x230/0x2a0 [ 344.654129][T11081] ? __pfx_snapshot_open+0x10/0x10 [ 344.654162][T11081] misc_open+0x26d/0x450 [ 344.654207][T11081] ? __pfx_misc_open+0x10/0x10 [ 344.654250][T11081] chrdev_open+0x234/0x6a0 [ 344.654278][T11081] ? __pfx_apparmor_file_open+0x10/0x10 [ 344.654319][T11081] ? __pfx_chrdev_open+0x10/0x10 [ 344.654350][T11081] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 344.654389][T11081] do_dentry_open+0x6d8/0x1660 [ 344.654416][T11081] ? __pfx_chrdev_open+0x10/0x10 [ 344.654455][T11081] vfs_open+0x82/0x3f0 [ 344.654494][T11081] path_openat+0x208c/0x31a0 [ 344.654536][T11081] ? __pfx_path_openat+0x10/0x10 [ 344.654579][T11081] do_file_open+0x20e/0x430 [ 344.654613][T11081] ? __pfx_do_file_open+0x10/0x10 [ 344.654671][T11081] ? alloc_fd+0x476/0x790 [ 344.654706][T11081] ? do_getname+0x191/0x390 [ 344.654745][T11081] do_sys_openat2+0x10d/0x1e0 [ 344.654783][T11081] ? __pfx_do_sys_openat2+0x10/0x10 [ 344.654821][T11081] ? find_held_lock+0x2b/0x80 [ 344.654857][T11081] __x64_sys_openat+0x12d/0x210 [ 344.654895][T11081] ? __pfx___x64_sys_openat+0x10/0x10 [ 344.654947][T11081] do_syscall_64+0x106/0xf80 [ 344.654978][T11081] ? clear_bhb_loop+0x40/0x90 [ 344.655013][T11081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.655048][T11081] RIP: 0033:0x7f25a139c799 [ 344.655073][T11081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.655100][T11081] RSP: 002b:00007f25a2192028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 344.655127][T11081] RAX: ffffffffffffffda RBX: 00007f25a1616090 RCX: 00007f25a139c799 [ 344.655147][T11081] RDX: 0000000000008001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 344.655166][T11081] RBP: 00007f25a1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 344.655183][T11081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 344.655199][T11081] R13: 00007f25a1616128 R14: 00007f25a1616090 R15: 00007fffc0aed1e8 [ 344.655239][T11081] [ 345.083803][T11084] usb usb2: usbfs: process 11084 (syz.0.1057) did not claim interface 4 before use [ 345.444148][T11103] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 345.796456][T11113] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 346.114661][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 346.239148][T11130] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 346.354063][T11133] Invalid ELF header magic: != ELF [ 346.479858][T11135] netlink: 'syz.2.1070': attribute type 2 has an invalid length. [ 346.496973][T11135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1070'. [ 346.508581][T11137] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 346.543807][T11128] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 346.553723][T11128] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 346.571378][T11128] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 346.587958][T11128] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 346.941004][T11148] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 347.944578][T11178] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 348.354225][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 348.594181][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 348.600320][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 348.606796][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 349.690638][T11198] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 349.702667][T11198] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 349.712781][T11198] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 349.722369][T11198] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 350.193209][T11208] delete_channel: no stack [ 351.236534][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 351.693726][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1100'. [ 351.716737][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 351.719675][T11248] net_ratelimit: 10 callbacks suppressed [ 351.719694][T11248] openvswitch: netlink: Flow key attr not present in new flow. [ 351.722790][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 351.795432][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 352.639281][T11269] vivid-007: ================= START STATUS ================= [ 352.639397][T11269] vivid-007: Generate PTS: true [ 352.639418][T11269] vivid-007: Generate SCR: true [ 352.639452][T11269] tpg source WxH: 320x240 (Y'CbCr) [ 352.639464][T11269] tpg field: 1 [ 352.639469][T11269] tpg crop: (0,0)/320x240 [ 352.639479][T11269] tpg compose: (0,0)/320x240 [ 352.639488][T11269] tpg colorspace: 8 [ 352.639494][T11269] tpg transfer function: 0/0 [ 352.639501][T11269] tpg Y'CbCr encoding: 0/0 [ 352.639508][T11269] tpg quantization: 0/0 [ 352.639515][T11269] tpg RGB range: 0/2 [ 352.639522][T11269] vivid-007: ================== END STATUS ================== [ 353.848430][T11299] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 353.871519][T11299] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 353.881198][T11299] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 353.896055][T11299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 354.873505][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804d9f3c00: rx timeout, send abort [ 354.875394][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804d9f3c00: 0x0ffff: (3) A timeout occurred and this is the connection abort to close the session. [ 355.876782][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 355.883961][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 355.957323][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 355.963387][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.121387][T11345] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 356.772373][T11343] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 356.807351][T11343] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 356.840307][T11343] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 356.866826][T11343] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 357.731816][T11367] mkiss: ax0: crc mode is auto. [ 358.203324][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.839119][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 358.920496][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 358.926612][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 359.419670][T11395] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 359.705058][T11403] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1139'. [ 360.275813][ T5143] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 360.723406][T11419] zswap: compressor not available [ 362.023850][T11440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 362.030106][T11440] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 362.037443][T11440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.056304][T11440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 362.352775][T11471] futex_wake_op: syz.0.1156 tries to shift op by -2048; fix this program [ 362.632099][T11476] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1157'. [ 362.934136][T11480] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 363.480462][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 364.041424][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 364.047530][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 364.126895][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 364.148441][T11502] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 364.187562][T11502] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 364.207802][T11502] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 364.241391][T11502] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 364.489058][T11510] sd 0:0:1:0: PR command failed: 1026 [ 364.494653][T11510] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 364.511831][T11510] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 365.049891][T11523] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 365.084400][T11523] CIFS mount error: No usable UNC path provided in device string! [ 365.084400][T11523] [ 365.126305][T11523] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 365.876581][T11538] binder: 11537:11538 ioctl ae41 6 returned -22 [ 366.011431][T11540] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 366.187826][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 366.193993][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 366.256520][T11546] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 366.269051][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 366.275130][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 366.332596][T11544] bridge_slave_1: left allmulticast mode [ 366.378590][T11549] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1177'. [ 366.390438][T11544] bridge_slave_1: left promiscuous mode [ 366.397839][T11544] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.537963][T11555] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1178'. [ 366.712096][ T5828] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 366.721095][ T5828] Bluetooth: hci3: Invalid handle: 0x3a4a > 0x0eff [ 366.730412][T11562] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 366.862315][T11559] zswap: compressor not available [ 368.568886][T11600] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 369.398424][T11613] kAFS: unparsable volume name [ 369.527641][T11618] ptrace attach of "./syz-executor exec"[5830] was attempted by "./syz-executor exec"[11618] [ 369.962733][T11636] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1198'. [ 370.800789][T11639] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 370.828719][T11639] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 370.844974][T11639] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 370.880464][T11639] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.478181][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 372.678616][T11694] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.745240][T11694] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 372.748825][T11694] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.749078][T11694] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.998676][T11711] capability: warning: `syz.2.1214' uses 32-bit capabilities (legacy support in use) [ 373.305355][T11710] sd 0:0:1:0: PR command failed: 1026 [ 373.310813][T11710] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 373.413873][T11710] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 373.950658][T11734] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1217'. [ 374.394160][T11758] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 374.415408][T11758] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 374.443412][T11758] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 374.517140][T11758] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 375.286803][T11778] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.287264][T11778] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.287367][T11778] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.287459][T11778] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.752912][T11810] Invalid ELF header magic: != ELF [ 376.928468][T11798] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 376.934836][T11798] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 376.943301][T11798] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 376.949500][T11798] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 378.494691][T11843] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.511255][T11843] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 378.517469][T11843] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 378.524152][T11843] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 378.617189][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.623718][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.061317][T11861] tipc: Started in network mode [ 379.077330][T11861] tipc: Node identity ee00, cluster identity 4711 [ 379.104708][T11861] tipc: Node number set to 60928 [ 379.782244][ T29] audit: type=1326 audit(4294970466.974:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11867 comm="syz.1.1245" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3f7bb9c799 code=0x0 [ 380.122684][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 380.132894][T11875] Invalid ELF header magic: != ELF [ 380.535722][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 380.535751][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 380.545249][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 380.984649][T11903] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.995289][T11903] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 381.015002][T11903] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 381.026449][T11903] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 381.253641][T11909] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 381.886678][T11922] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 381.905390][T11922] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 381.923315][T11922] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 381.959306][T11922] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 382.360842][T11929] can: request_module (can-proto-0) failed. [ 383.944476][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 383.950596][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 383.956813][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 384.030661][T11944] FAULT_INJECTION: forcing a failure. [ 384.030661][T11944] name failslab, interval 1, probability 0, space 0, times 0 [ 384.043972][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 384.054047][T11944] CPU: 1 UID: 0 PID: 11944 Comm: syz.2.1259 Tainted: G U L syzkaller #0 PREEMPT(full) [ 384.054096][T11944] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 384.054107][T11944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.054133][T11944] Call Trace: [ 384.054141][T11944] [ 384.054152][T11944] dump_stack_lvl+0x100/0x190 [ 384.054259][T11944] should_fail_ex.cold+0x5/0xa [ 384.054310][T11944] should_failslab+0xc2/0x120 [ 384.054359][T11944] __kmalloc_cache_noprof+0x7a/0x6f0 [ 384.054413][T11944] ? kobject_uevent_env+0x263/0x18b0 [ 384.054533][T11944] ? kernfs_remove_by_name_ns+0xd5/0xf0 [ 384.054597][T11944] kobject_uevent_env+0x263/0x18b0 [ 384.054646][T11944] ? kernfs_remove_by_name_ns+0x9f/0xf0 [ 384.054681][T11944] __kobject_del+0x168/0x220 [ 384.054720][T11944] kobject_put+0x348/0x640 [ 384.054761][T11944] net_rx_queue_update_kobjects+0x544/0x760 [ 384.054887][T11944] netdev_unregister_kobject+0x154/0x540 [ 384.054927][T11944] ? rtmsg_ifinfo_send+0xcc/0x110 [ 384.055001][T11944] unregister_netdevice_many_notify+0x1817/0x2580 [ 384.055086][T11944] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 384.055140][T11944] unregister_netdevice_queue+0x30b/0x3c0 [ 384.055179][T11944] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 384.055219][T11944] ? __pfx_locks_remove_file+0x10/0x10 [ 384.055269][T11944] ppp_release+0x211/0x230 [ 384.055356][T11944] ? __pfx_ppp_release+0x10/0x10 [ 384.055383][T11944] __fput+0x3ff/0xb40 [ 384.055431][T11944] task_work_run+0x150/0x240 [ 384.055488][T11944] ? __pfx_task_work_run+0x10/0x10 [ 384.055532][T11944] exit_to_user_mode_loop+0x100/0x4a0 [ 384.055590][T11944] do_syscall_64+0x668/0xf80 [ 384.055683][T11944] ? clear_bhb_loop+0x40/0x90 [ 384.055731][T11944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.055760][T11944] RIP: 0033:0x7f25a139c799 [ 384.055783][T11944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.055811][T11944] RSP: 002b:00007f25a21b3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 384.055853][T11944] RAX: 0000000000000000 RBX: 00007f25a1615fa0 RCX: 00007f25a139c799 [ 384.055872][T11944] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 384.055890][T11944] RBP: 00007f25a1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 384.055907][T11944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.055923][T11944] R13: 00007f25a1616038 R14: 00007f25a1615fa0 R15: 00007fffc0aed1e8 [ 384.055963][T11944] [ 385.562837][T11971] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1265'. [ 385.587001][ T5828] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 385.587038][ T5828] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 385.602388][ T5828] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 385.602437][ T5828] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 385.610521][ T5828] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 385.617871][ T5828] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 385.626369][ T5828] Bluetooth: hci3: Unknown advertising packet type: 0x72 [ 385.634040][ T5828] Bluetooth: hci3: Unknown advertising packet type: 0x14 [ 385.642593][ T5828] Bluetooth: hci3: Malformed LE Event: 0x0d [ 385.914504][T11980] QAT: Stopping all acceleration devices. [ 386.742916][T11990] Invalid ELF header magic: != ELF [ 387.442327][T11998] netlink: 302 bytes leftover after parsing attributes in process `syz.2.1271'. [ 387.498422][T11998] netlink: 'syz.2.1271': attribute type 28 has an invalid length. [ 387.506262][T11998] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1271'. [ 388.537266][T12003] FAULT_INJECTION: forcing a failure. [ 388.537266][T12003] name failslab, interval 1, probability 0, space 0, times 0 [ 388.550361][T12003] CPU: 0 UID: 0 PID: 12003 Comm: syz.3.1273 Tainted: G U L syzkaller #0 PREEMPT(full) [ 388.550414][T12003] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 388.550426][T12003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.550444][T12003] Call Trace: [ 388.550455][T12003] [ 388.550465][T12003] dump_stack_lvl+0x100/0x190 [ 388.550517][T12003] should_fail_ex.cold+0x5/0xa [ 388.550553][T12003] should_failslab+0xc2/0x120 [ 388.550584][T12003] __kmalloc_cache_node_noprof+0x7d/0x770 [ 388.550632][T12003] ? do_kmem_cache_create+0x16d/0x540 [ 388.550670][T12003] do_kmem_cache_create+0x16d/0x540 [ 388.550707][T12003] __kmem_cache_create_args+0x386/0x420 [ 388.550785][T12003] mon_text_open+0x333/0x510 [ 388.550906][T12003] ? __pfx_mon_text_open+0x10/0x10 [ 388.550951][T12003] ? __pfx_mon_text_ctor+0x10/0x10 [ 388.550989][T12003] ? find_held_lock+0x2b/0x80 [ 388.551024][T12003] ? __pfx_apparmor_file_open+0x10/0x10 [ 388.551151][T12003] ? lockdown_is_locked_down+0x3d/0x140 [ 388.551212][T12003] ? bpf_lsm_locked_down+0x9/0x10 [ 388.551257][T12003] ? __pfx_mon_text_open+0x10/0x10 [ 388.551292][T12003] full_proxy_open_regular+0x1b6/0x370 [ 388.551383][T12003] do_dentry_open+0x6d8/0x1660 [ 388.551412][T12003] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 388.551463][T12003] vfs_open+0x82/0x3f0 [ 388.551505][T12003] path_openat+0x208c/0x31a0 [ 388.551549][T12003] ? __pfx_path_openat+0x10/0x10 [ 388.551592][T12003] do_file_open+0x20e/0x430 [ 388.551625][T12003] ? __pfx_do_file_open+0x10/0x10 [ 388.551685][T12003] ? alloc_fd+0x476/0x790 [ 388.551724][T12003] ? do_getname+0x191/0x390 [ 388.551763][T12003] do_sys_openat2+0x10d/0x1e0 [ 388.551801][T12003] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.551842][T12003] ? __sys_sendmsg+0x18f/0x220 [ 388.551918][T12003] __x64_sys_openat+0x12d/0x210 [ 388.551958][T12003] ? __pfx___x64_sys_openat+0x10/0x10 [ 388.552014][T12003] do_syscall_64+0x106/0xf80 [ 388.552048][T12003] ? clear_bhb_loop+0x40/0x90 [ 388.552093][T12003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.552124][T12003] RIP: 0033:0x7fc64f39c799 [ 388.552150][T12003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.552179][T12003] RSP: 002b:00007fc65024b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.552208][T12003] RAX: ffffffffffffffda RBX: 00007fc64f615fa0 RCX: 00007fc64f39c799 [ 388.552228][T12003] RDX: 0000000000022202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 388.552247][T12003] RBP: 00007fc64f432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 388.552266][T12003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.552284][T12003] R13: 00007fc64f616038 R14: 00007fc64f615fa0 R15: 00007ffcbc740718 [ 388.552325][T12003] [ 388.552472][T12003] __kmem_cache_create_args(mon_text_ffff88805b2c6c00) failed with error -22 [ 388.850726][T12003] CPU: 0 UID: 0 PID: 12003 Comm: syz.3.1273 Tainted: G U L syzkaller #0 PREEMPT(full) [ 388.850777][T12003] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 388.850789][T12003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 388.850807][T12003] Call Trace: [ 388.850816][T12003] [ 388.850826][T12003] dump_stack_lvl+0x100/0x190 [ 388.850875][T12003] __kmem_cache_create_args.cold+0x33/0x6e [ 388.850919][T12003] mon_text_open+0x333/0x510 [ 388.850962][T12003] ? __pfx_mon_text_open+0x10/0x10 [ 388.851013][T12003] ? __pfx_mon_text_ctor+0x10/0x10 [ 388.851052][T12003] ? find_held_lock+0x2b/0x80 [ 388.851081][T12003] ? __pfx_apparmor_file_open+0x10/0x10 [ 388.851122][T12003] ? lockdown_is_locked_down+0x3d/0x140 [ 388.851159][T12003] ? bpf_lsm_locked_down+0x9/0x10 [ 388.851194][T12003] ? __pfx_mon_text_open+0x10/0x10 [ 388.851231][T12003] full_proxy_open_regular+0x1b6/0x370 [ 388.851274][T12003] do_dentry_open+0x6d8/0x1660 [ 388.851303][T12003] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 388.851351][T12003] vfs_open+0x82/0x3f0 [ 388.851393][T12003] path_openat+0x208c/0x31a0 [ 388.851436][T12003] ? __pfx_path_openat+0x10/0x10 [ 388.851479][T12003] do_file_open+0x20e/0x430 [ 388.851513][T12003] ? __pfx_do_file_open+0x10/0x10 [ 388.851571][T12003] ? alloc_fd+0x476/0x790 [ 388.851604][T12003] ? do_getname+0x191/0x390 [ 388.851643][T12003] do_sys_openat2+0x10d/0x1e0 [ 388.851681][T12003] ? __pfx_do_sys_openat2+0x10/0x10 [ 388.851722][T12003] ? __sys_sendmsg+0x18f/0x220 [ 388.851767][T12003] __x64_sys_openat+0x12d/0x210 [ 388.851806][T12003] ? __pfx___x64_sys_openat+0x10/0x10 [ 388.851860][T12003] do_syscall_64+0x106/0xf80 [ 388.851894][T12003] ? clear_bhb_loop+0x40/0x90 [ 388.851930][T12003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.851960][T12003] RIP: 0033:0x7fc64f39c799 [ 388.851992][T12003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.852021][T12003] RSP: 002b:00007fc65024b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 388.852049][T12003] RAX: ffffffffffffffda RBX: 00007fc64f615fa0 RCX: 00007fc64f39c799 [ 388.852069][T12003] RDX: 0000000000022202 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 388.852089][T12003] RBP: 00007fc64f432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 388.852106][T12003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.852123][T12003] R13: 00007fc64f616038 R14: 00007fc64f615fa0 R15: 00007ffcbc740718 [ 388.852163][T12003] [ 389.412645][T12012] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 391.216613][T12053] FAULT_INJECTION: forcing a failure. [ 391.216613][T12053] name failslab, interval 1, probability 0, space 0, times 0 [ 391.288906][T12053] CPU: 1 UID: 0 PID: 12053 Comm: syz.1.1282 Tainted: G U L syzkaller #0 PREEMPT(full) [ 391.288953][T12053] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 391.288963][T12053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 391.288977][T12053] Call Trace: [ 391.288985][T12053] [ 391.288996][T12053] dump_stack_lvl+0x100/0x190 [ 391.289042][T12053] should_fail_ex.cold+0x5/0xa [ 391.289076][T12053] should_failslab+0xc2/0x120 [ 391.289105][T12053] __kmalloc_cache_noprof+0x7a/0x6f0 [ 391.289140][T12053] ? alloc_pipe_info+0x10e/0x590 [ 391.289168][T12053] ? find_held_lock+0x2b/0x80 [ 391.289199][T12053] alloc_pipe_info+0x10e/0x590 [ 391.289231][T12053] splice_direct_to_actor+0x78f/0xa30 [ 391.289278][T12053] ? __lock_acquire+0x4a5/0x2630 [ 391.289317][T12053] ? __pfx_direct_splice_actor+0x10/0x10 [ 391.289363][T12053] ? __pfx_aa_file_perm+0x10/0x10 [ 391.289397][T12053] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 391.289454][T12053] do_splice_direct+0x174/0x240 [ 391.289482][T12053] ? __pfx_do_splice_direct+0x10/0x10 [ 391.289528][T12053] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 391.289578][T12053] ? rw_verify_area+0xce/0x6d0 [ 391.289620][T12053] do_sendfile+0xadc/0xe20 [ 391.289666][T12053] ? __pfx_do_sendfile+0x10/0x10 [ 391.289704][T12053] ? __fget_files+0x21f/0x3d0 [ 391.289738][T12053] __x64_sys_sendfile64+0x1d8/0x220 [ 391.289768][T12053] ? ksys_write+0x1ac/0x250 [ 391.289806][T12053] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 391.289829][T12053] do_syscall_64+0x106/0xf80 [ 391.289846][T12053] ? clear_bhb_loop+0x40/0x90 [ 391.289864][T12053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.289880][T12053] RIP: 0033:0x7f3f7bb9c799 [ 391.289894][T12053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.289908][T12053] RSP: 002b:00007f3f7c9b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 391.289923][T12053] RAX: ffffffffffffffda RBX: 00007f3f7be16180 RCX: 00007f3f7bb9c799 [ 391.289933][T12053] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 391.289941][T12053] RBP: 00007f3f7c9b4090 R08: 0000000000000000 R09: 0000000000000000 [ 391.289950][T12053] R10: 0000400000000006 R11: 0000000000000246 R12: 0000000000000001 [ 391.289959][T12053] R13: 00007f3f7be16218 R14: 00007f3f7be16180 R15: 00007fff8b1bc3f8 [ 391.289978][T12053] [ 393.512093][T12084] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1290'. [ 393.572825][T12079] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 393.581789][T12079] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 393.587974][T12079] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 393.614520][T12079] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 393.628844][T12083] zswap: compressor not available [ 393.639640][T12084] nbd: must specify at least one socket [ 393.657991][T12083] netlink: zone id is out of range [ 393.679848][T12083] netlink: set zone limit has 8 unknown bytes [ 395.402733][T12126] futex_wake_op: syz.1.1300 tries to shift op by -2048; fix this program [ 395.421569][T12126] futex_wake_op: syz.1.1300 tries to shift op by -2048; fix this program [ 395.437643][T12126] 0x000000000001-0x000000020000 : "" [ 395.487850][T12126] ftl_cs: FTL header corrupt! [ 395.545792][T12133] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1299'. [ 395.569630][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 395.653696][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 395.653751][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 395.670540][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 395.711790][T12132] ERROR: Out of memory at tomoyo_memory_ok. [ 395.762200][T12136] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 395.846365][T12136] nfsd: Unknown parameter 'ÁôÔ£' [ 395.859089][T12140] mmap: syz.1.1303 (12140) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 396.243201][T12152] Invalid ELF header magic: != ELF [ 396.264164][T12149] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1305'. [ 397.290237][T12164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 397.313754][T12164] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 397.534001][T12164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 397.540174][T12164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 397.989905][T12179] netlink: 'syz.3.1310': attribute type 33 has an invalid length. [ 398.030007][T12184] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1312'. [ 398.490617][T12186] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1313'. [ 398.649260][T12186] bond0: (slave bond_slave_1): Releasing backup interface [ 398.751970][T12197] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1316'. [ 398.903121][T12202] bridge0: port 2(gretap0) entered blocking state [ 398.914150][T12202] bridge0: port 2(gretap0) entered disabled state [ 398.920845][T12202] gretap0: entered allmulticast mode [ 398.928300][T12202] gretap0: entered promiscuous mode [ 398.934628][T12202] bridge0: port 2(gretap0) entered blocking state [ 398.941169][T12202] bridge0: port 2(gretap0) entered forwarding state [ 399.312440][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 399.318695][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout [ 399.550906][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 399.550970][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 399.642053][T12225] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1321'. [ 399.893722][T12222] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 399.909341][T12222] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 399.958490][T12222] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 399.979039][T12222] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.420574][T12259] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1331: iget: checksum invalid [ 401.436850][T12259] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 401.449201][T12259] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1331: iget: checksum invalid [ 401.470855][T12259] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 401.481537][T12259] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1331: iget: checksum invalid [ 401.506366][T12259] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 401.693162][T12259] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1331: iget: checksum invalid [ 401.719265][T12259] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 401.733738][T12259] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 401.752621][T12255] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 401.758775][T12255] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 401.765270][T12255] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 401.772079][T12255] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 401.788989][T12259] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 402.499046][T12289] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.3.1334: bg 4: bad block bitmap checksum [ 402.537377][T12289] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 74 [ 402.586889][T12289] EXT4-fs (sda1): This should not happen!! Data will be lost [ 402.586889][T12289] [ 402.897526][ C1] vcan0: j1939_tp_rxtimer: 0xffff888085ff4000: rx timeout, send abort [ 402.906480][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888085ff4000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 403.040729][T12294] Invalid ELF header magic: != ELF [ 403.294013][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 403.305276][T12301] FAULT_INJECTION: forcing a failure. [ 403.305276][T12301] name failslab, interval 1, probability 0, space 0, times 0 [ 403.320266][T12301] CPU: 1 UID: 0 PID: 12301 Comm: syz.3.1341 Tainted: G U L syzkaller #0 PREEMPT(full) [ 403.320313][T12301] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 403.320324][T12301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 403.320339][T12301] Call Trace: [ 403.320349][T12301] [ 403.320358][T12301] dump_stack_lvl+0x100/0x190 [ 403.320408][T12301] should_fail_ex.cold+0x5/0xa [ 403.320441][T12301] ? ops_init+0x77/0x5f0 [ 403.320584][T12301] should_failslab+0xc2/0x120 [ 403.320615][T12301] __kmalloc_noprof+0xe0/0x850 [ 403.320659][T12301] ? mutex_init_lockep+0x110/0x150 [ 403.320704][T12301] ops_init+0x77/0x5f0 [ 403.320743][T12301] setup_net+0x118/0x3a0 [ 403.320779][T12301] ? __pfx_setup_net+0x10/0x10 [ 403.320812][T12301] ? lockdep_init_map_type+0x5c/0x250 [ 403.320850][T12301] ? mutex_init_lockep+0x110/0x150 [ 403.320894][T12301] copy_net_ns+0x46f/0x7c0 [ 403.320937][T12301] create_new_namespaces+0x3ea/0xac0 [ 403.320977][T12301] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 403.321016][T12301] ksys_unshare+0x473/0xad0 [ 403.321067][T12301] ? __pfx_ksys_unshare+0x10/0x10 [ 403.321118][T12301] __x64_sys_unshare+0x31/0x40 [ 403.321154][T12301] do_syscall_64+0x106/0xf80 [ 403.321188][T12301] ? clear_bhb_loop+0x40/0x90 [ 403.321225][T12301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.321254][T12301] RIP: 0033:0x7fc64f39c799 [ 403.321278][T12301] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.321305][T12301] RSP: 002b:00007fc65024b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 403.321333][T12301] RAX: ffffffffffffffda RBX: 00007fc64f615fa0 RCX: 00007fc64f39c799 [ 403.321353][T12301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 403.321370][T12301] RBP: 00007fc64f432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 403.321388][T12301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.321405][T12301] R13: 00007fc64f616038 R14: 00007fc64f615fa0 R15: 00007ffcbc740718 [ 403.321444][T12301] [ 403.557809][T12304] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 403.570672][T12304] EXT4-fs (sda1): This should not happen!! Data will be lost [ 403.570672][T12304] [ 403.657274][T12309] mkiss: ax0: crc mode is auto. [ 403.781071][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 403.787471][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 403.793929][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 404.184461][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035cfc400: rx timeout, send abort [ 404.192980][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888035cfc400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 404.410350][T12316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1344'. [ 404.469266][T12316] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1344'. [ 406.738005][T12358] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 406.747072][T12358] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 406.753834][T12358] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 406.760120][T12358] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 407.473157][T12385] sd 0:0:1:0: PR command failed: 1026 [ 407.478804][T12385] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 407.488120][T12385] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 407.709760][T12386] Invalid ELF header magic: != ELF [ 408.101956][T12405] NFSD: Failed to start, no listeners configured. [ 408.455710][T12415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 408.479261][T12415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 408.491844][T12415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 408.526272][T12415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 408.794218][T12430] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 408.806752][T12430] EXT4-fs (sda1): This should not happen!! Data will be lost [ 408.806752][T12430] [ 410.267316][T12462] mkiss: ax0: crc mode is auto. [ 410.473018][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 410.550260][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 410.556357][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 410.562426][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 411.626069][T12493] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 411.724144][T12493] EXT4-fs (sda1): This should not happen!! Data will be lost [ 411.724144][T12493] [ 412.471883][T12507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 412.900029][T12511] FAULT_INJECTION: forcing a failure. [ 412.900029][T12511] name failslab, interval 1, probability 0, space 0, times 0 [ 412.918093][T12511] CPU: 1 UID: 0 PID: 12511 Comm: syz.3.1387 Tainted: G U L syzkaller #0 PREEMPT(full) [ 412.918139][T12511] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 412.918150][T12511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 412.918167][T12511] Call Trace: [ 412.918177][T12511] [ 412.918188][T12511] dump_stack_lvl+0x100/0x190 [ 412.918235][T12511] should_fail_ex.cold+0x5/0xa [ 412.918266][T12511] should_failslab+0xc2/0x120 [ 412.918295][T12511] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 412.918334][T12511] ? security_inode_alloc+0x3b/0x2c0 [ 412.918478][T12511] ? lockdep_init_map_type+0x5c/0x250 [ 412.918520][T12511] security_inode_alloc+0x3b/0x2c0 [ 412.918558][T12511] inode_init_always_gfp+0xced/0x1040 [ 412.918590][T12511] alloc_inode+0x8e/0x250 [ 412.918622][T12511] alloc_anon_inode+0x2a/0x3e0 [ 412.918652][T12511] ioctx_alloc+0x4dc/0x21d0 [ 412.918707][T12511] ? find_held_lock+0x2b/0x80 [ 412.918744][T12511] ? __pfx_ioctx_alloc+0x10/0x10 [ 412.918782][T12511] __x64_sys_io_setup+0xc9/0x220 [ 412.918816][T12511] do_syscall_64+0x106/0xf80 [ 412.918850][T12511] ? clear_bhb_loop+0x40/0x90 [ 412.918889][T12511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.918917][T12511] RIP: 0033:0x7fc64f39c799 [ 412.918940][T12511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 412.918967][T12511] RSP: 002b:00007fc6501e8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 412.918992][T12511] RAX: ffffffffffffffda RBX: 00007fc64f616270 RCX: 00007fc64f39c799 [ 412.919011][T12511] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 412.919028][T12511] RBP: 00007fc64f432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 412.919045][T12511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.919061][T12511] R13: 00007fc64f616308 R14: 00007fc64f616270 R15: 00007ffcbc740718 [ 412.919097][T12511] [ 413.797719][ T5835] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 413.961517][T12547] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 413.992604][T12547] EXT4-fs (sda1): This should not happen!! Data will be lost [ 413.992604][T12547] [ 414.446381][T12512] kexec: Could not allocate control_code_buffer [ 414.621552][T12566] synth uevent: /devices/platform/dummy_hcd.3/usb4/ep_00: unknown uevent action string [ 414.658967][T12566] ep_00: uevent: failed to send synthetic uevent: -22 [ 414.705305][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1398'. [ 414.924551][T12577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1400'. [ 414.984226][ T5835] Bluetooth: hci1: ISO packet for unknown connection handle 0 [ 417.255104][T12625] netlink: 'syz.0.1413': attribute type 1 has an invalid length. [ 417.895569][T12643] Invalid ELF header magic: != ELF [ 418.128661][T12638] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 418.141791][T12638] EXT4-fs (sda1): This should not happen!! Data will be lost [ 418.141791][T12638] [ 418.267552][T12647] FAULT_INJECTION: forcing a failure. [ 418.267552][T12647] name failslab, interval 1, probability 0, space 0, times 0 [ 418.303226][T12647] CPU: 1 UID: 0 PID: 12647 Comm: syz.2.1418 Tainted: G U L syzkaller #0 PREEMPT(full) [ 418.303283][T12647] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 418.303295][T12647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 418.303312][T12647] Call Trace: [ 418.303321][T12647] [ 418.303331][T12647] dump_stack_lvl+0x100/0x190 [ 418.303378][T12647] should_fail_ex.cold+0x5/0xa [ 418.303412][T12647] should_failslab+0xc2/0x120 [ 418.303441][T12647] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 418.303484][T12647] ? security_inode_alloc+0x3b/0x2c0 [ 418.303524][T12647] ? lockdep_init_map_type+0x5c/0x250 [ 418.303565][T12647] security_inode_alloc+0x3b/0x2c0 [ 418.303608][T12647] inode_init_always_gfp+0xced/0x1040 [ 418.303643][T12647] alloc_inode+0x8e/0x250 [ 418.303679][T12647] new_inode+0x22/0x1c0 [ 418.303719][T12647] shmem_get_inode+0x212/0x1040 [ 418.303760][T12647] ? __pfx_shmem_get_inode+0x10/0x10 [ 418.303795][T12647] ? rcu_is_watching+0x12/0xc0 [ 418.303835][T12647] ? percpu_counter_add_batch+0xb9/0x230 [ 418.303994][T12647] __shmem_file_setup+0x3ac/0x490 [ 418.304034][T12647] ? __pfx___shmem_file_setup+0x10/0x10 [ 418.304077][T12647] ? vm_area_alloc+0x1f/0x160 [ 418.304119][T12647] shmem_zero_setup+0x96/0x1b0 [ 418.304166][T12647] __mmap_region+0x2198/0x29e0 [ 418.304214][T12647] ? __pfx___mmap_region+0x10/0x10 [ 418.304257][T12647] ? process_measurement+0x1f4/0x2350 [ 418.304348][T12647] ? __lock_acquire+0x4a5/0x2630 [ 418.304400][T12647] ? sched_clock+0x38/0x60 [ 418.304453][T12647] ? lockdep_hardirqs_on+0x78/0x100 [ 418.304487][T12647] ? finish_task_switch.isra.0+0x205/0xb80 [ 418.304518][T12647] ? rcu_is_watching+0x12/0xc0 [ 418.304605][T12647] ? rcu_is_watching+0x12/0xc0 [ 418.304645][T12647] ? cap_capable+0x107/0x460 [ 418.304705][T12647] mmap_region+0x180/0x3e0 [ 418.304751][T12647] do_mmap+0xc63/0x12f0 [ 418.304786][T12647] ? __pfx_do_mmap+0x10/0x10 [ 418.304814][T12647] ? __pfx_down_write_killable+0x10/0x10 [ 418.304890][T12647] vm_mmap_pgoff+0x29e/0x470 [ 418.304912][T12647] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 418.304930][T12647] ? do_futex+0x192/0x350 [ 418.304955][T12647] ? __pfx_do_futex+0x10/0x10 [ 418.304978][T12647] ksys_mmap_pgoff+0xe1/0x650 [ 418.304994][T12647] ? __x64_sys_futex+0x34f/0x4d0 [ 418.305012][T12647] ? __x64_sys_futex+0x358/0x4d0 [ 418.305031][T12647] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 418.305047][T12647] ? xfd_validate_state+0x129/0x190 [ 418.305072][T12647] __x64_sys_mmap+0x125/0x190 [ 418.305095][T12647] do_syscall_64+0x106/0xf80 [ 418.305112][T12647] ? clear_bhb_loop+0x40/0x90 [ 418.305131][T12647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.305146][T12647] RIP: 0033:0x7f25a139c799 [ 418.305160][T12647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.305175][T12647] RSP: 002b:00007f25a21b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 418.305190][T12647] RAX: ffffffffffffffda RBX: 00007f25a1615fa0 RCX: 00007f25a139c799 [ 418.305200][T12647] RDX: 00000000000000df RSI: 0000000004020009 RDI: 0000000000000000 [ 418.305208][T12647] RBP: 00007f25a1432bd9 R08: 0000000000000401 R09: 0000000000008000 [ 418.305218][T12647] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 418.305227][T12647] R13: 00007f25a1616038 R14: 00007f25a1615fa0 R15: 00007fffc0aed1e8 [ 418.305253][T12647] [ 418.315412][T12647] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1418'. [ 418.953537][T12652] bridge_slave_1: left allmulticast mode [ 418.969987][T12652] bridge_slave_1: left promiscuous mode [ 418.980654][T12652] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.440372][T12691] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 420.520498][T12691] EXT4-fs (sda1): This should not happen!! Data will be lost [ 420.520498][T12691] [ 420.634696][T12689] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 420.865727][T12702] Invalid ELF header magic: != ELF [ 421.188086][T12713] < [ 421.188954][T12712] < [ 421.508651][T12727] vivid-010: ================= START STATUS ================= [ 421.532769][T12727] vivid-010: Interlaced VBI Format: false [ 421.547557][T12727] vivid-010: ================== END STATUS ================== [ 421.691964][T12725] futex_wake_op: syz.1.1437 tries to shift op by -2048; fix this program [ 421.708177][T12725] futex_wake_op: syz.1.1437 tries to shift op by -2048; fix this program [ 421.794229][T12734] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 421.844122][T12725] 0x000000000001-0x000000020000 : "" [ 421.890703][T12725] ftl_cs: FTL header corrupt! [ 421.910246][T12734] EXT4-fs (sda1): This should not happen!! Data will be lost [ 421.910246][T12734] [ 422.068408][T12736] ERROR: Out of memory at tomoyo_memory_ok. [ 422.791471][T12754] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 422.798344][T12754] EXT4-fs (sda1): This should not happen!! Data will be lost [ 422.798344][T12754] [ 422.973275][T12757] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 422.974291][T12757] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 423.007649][T12757] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 423.007856][T12757] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 423.134634][T12770] Invalid ELF header magic: != ELF [ 423.886377][ T3547] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 423.952926][ T3547] EXT4-fs (sda1): This should not happen!! Data will be lost [ 423.952926][ T3547] [ 424.014266][T12790] netlink: 'syz.3.1449': attribute type 2 has an invalid length. [ 424.502826][T12803] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1452'. [ 425.031133][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 425.037271][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 425.043387][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 425.049487][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 425.549737][T12827] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1457'. [ 425.888053][T12835] netlink: 2 bytes leftover after parsing attributes in process `syz.3.1459'. [ 426.244543][ T5835] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 426.648643][T12852] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1465: iget: checksum invalid [ 426.659897][T12852] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 426.672494][T12852] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1465: iget: checksum invalid [ 426.747178][T12852] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 426.757613][T12852] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1465: iget: checksum invalid [ 426.768816][T12852] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 426.779384][T12852] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1465: iget: checksum invalid [ 426.790573][T12852] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 426.800061][T12852] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 426.809871][T12852] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 427.174717][T12874] random: crng reseeded on system resumption [ 427.225284][T12874] hub 1-0:1.0: USB hub found [ 427.232180][T12874] hub 1-0:1.0: 1 port detected [ 427.256190][T12874] futex_wake_op: syz.2.1469 tries to shift op by -1; fix this program [ 427.376278][T12878] openvswitch: netlink: Message has 4 unknown bytes. [ 427.386497][T12878] openvswitch: netlink: Message has 4 unknown bytes. [ 428.637416][T12905] futex_wake_op: syz.2.1477 tries to shift op by -2048; fix this program [ 428.646304][T12905] futex_wake_op: syz.2.1477 tries to shift op by -2048; fix this program [ 428.751278][T12913] 0x000000000001-0x000000020000 : "" [ 428.844343][T12913] ftl_cs: FTL header corrupt! [ 428.975515][T12923] ERROR: Out of memory at tomoyo_memory_ok. [ 430.307109][T12921] kexec: Could not allocate control_code_buffer [ 430.549718][T12935] nbd: must specify a size in bytes for the device [ 432.375798][T12995] FAULT_INJECTION: forcing a failure. [ 432.375798][T12995] name failslab, interval 1, probability 0, space 0, times 0 [ 432.375901][T12995] CPU: 1 UID: 0 PID: 12995 Comm: syz.1.1492 Tainted: G U L syzkaller #0 PREEMPT(full) [ 432.375926][T12995] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 432.375931][T12995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 432.375940][T12995] Call Trace: [ 432.375946][T12995] [ 432.375952][T12995] dump_stack_lvl+0x100/0x190 [ 432.375980][T12995] should_fail_ex.cold+0x5/0xa [ 432.375999][T12995] should_failslab+0xc2/0x120 [ 432.376016][T12995] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 432.376038][T12995] ? __pmd_alloc+0xbf/0x9c0 [ 432.376058][T12995] __pmd_alloc+0xbf/0x9c0 [ 432.376077][T12995] __handle_mm_fault+0xa99/0x2b60 [ 432.376100][T12995] ? mt_find+0x45e/0x8e0 [ 432.376187][T12995] ? __pfx___handle_mm_fault+0x10/0x10 [ 432.376207][T12995] ? __pfx_mt_find+0x10/0x10 [ 432.376236][T12995] ? find_vma+0xbf/0x140 [ 432.376249][T12995] ? __pfx_find_vma+0x10/0x10 [ 432.376265][T12995] handle_mm_fault+0x36d/0xa20 [ 432.376288][T12995] do_user_addr_fault+0x74c/0x12f0 [ 432.376327][T12995] exc_page_fault+0x6f/0xd0 [ 432.376346][T12995] asm_exc_page_fault+0x26/0x30 [ 432.376360][T12995] RIP: 0010:strncpy_from_user+0xfd/0x2d0 [ 432.376414][T12995] Code: 00 4d 89 64 1d 00 48 83 ed 08 bf 07 00 00 00 48 83 c3 08 48 89 ee e8 12 45 e0 fc 48 83 fd 07 0f 86 bb 00 00 00 e8 23 4a e0 fc <4d> 8b 24 1e e8 1a 4a e0 fc 4c 89 e2 31 ff 4d 8d 7c 1d 00 48 b8 ff [ 432.376429][T12995] RSP: 0018:ffffc90008a9fd08 EFLAGS: 00050287 [ 432.376444][T12995] RAX: 0000000000000033 RBX: 0000000000000000 RCX: ffffc900068d9000 [ 432.376453][T12995] RDX: 0000000000080000 RSI: ffffffff8527c71d RDI: ffff888030213d00 [ 432.376463][T12995] RBP: 00000000000000a8 R08: 0000000000000007 R09: 0000000000000007 [ 432.376476][T12995] R10: 00000000000000a8 R11: 0000000000000000 R12: 0000000000000000 [ 432.376491][T12995] R13: ffff88808cdd8418 R14: 0000000000000000 R15: 00000000000000a8 [ 432.376516][T12995] ? strncpy_from_user+0xfd/0x2d0 [ 432.376557][T12995] ? strncpy_from_user+0xfd/0x2d0 [ 432.376608][T12995] do_getname+0x78/0x390 [ 432.376647][T12995] do_sys_openat2+0xc5/0x1e0 [ 432.376682][T12995] ? __pfx_do_sys_openat2+0x10/0x10 [ 432.376716][T12995] ? find_held_lock+0x2b/0x80 [ 432.376753][T12995] __x64_sys_open+0xfe/0x1d0 [ 432.376791][T12995] ? __pfx___x64_sys_open+0x10/0x10 [ 432.376842][T12995] do_syscall_64+0x106/0xf80 [ 432.376875][T12995] ? clear_bhb_loop+0x40/0x90 [ 432.376913][T12995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.376942][T12995] RIP: 0033:0x7f3f7bb9c799 [ 432.376966][T12995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.376993][T12995] RSP: 002b:00007f3f7c9d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 432.377020][T12995] RAX: ffffffffffffffda RBX: 00007f3f7be16090 RCX: 00007f3f7bb9c799 [ 432.377039][T12995] RDX: 0000000000000310 RSI: 0000000000000000 RDI: 0000000000000000 [ 432.377057][T12995] RBP: 00007f3f7bc32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 432.377075][T12995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.377092][T12995] R13: 00007f3f7be16128 R14: 00007f3f7be16090 R15: 00007fff8b1bc3f8 [ 432.377130][T12995] [ 432.477272][T12992] netlink: 146 bytes leftover after parsing attributes in process `syz.3.1491'. [ 433.358407][T12994] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 433.376816][T12994] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 433.383434][T12994] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 433.396113][T12994] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 434.548638][ T29] audit: type=1800 audit(4294970522.002:8): pid=13033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=47470 res=0 errno=0 [ 434.868330][T13033] could not allocate digest TFM handle [ 435.303030][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 435.384328][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 435.384368][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 435.462222][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 435.646102][T13062] FAULT_INJECTION: forcing a failure. [ 435.646102][T13062] name fail_futex, interval 1, probability 0, space 0, times 0 [ 435.659106][T13062] CPU: 1 UID: 0 PID: 13062 Comm: syz.3.1504 Tainted: G U L syzkaller #0 PREEMPT(full) [ 435.659155][T13062] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 435.659166][T13062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.659183][T13062] Call Trace: [ 435.659193][T13062] [ 435.659203][T13062] dump_stack_lvl+0x100/0x190 [ 435.659253][T13062] should_fail_ex.cold+0x5/0xa [ 435.659287][T13062] get_futex_key+0x1d2/0x1620 [ 435.659327][T13062] ? __pfx_get_futex_key+0x10/0x10 [ 435.659374][T13062] futex_wait_setup+0x83/0x510 [ 435.659427][T13062] __futex_wait+0x19f/0x300 [ 435.659473][T13062] ? __pfx___futex_wait+0x10/0x10 [ 435.659522][T13062] ? __pfx_futex_wake_mark+0x10/0x10 [ 435.659569][T13062] ? futex_hash+0x2c5/0x380 [ 435.659613][T13062] futex_wait+0xed/0x380 [ 435.659665][T13062] ? __pfx_futex_wait+0x10/0x10 [ 435.659716][T13062] ? __fget_files+0x215/0x3d0 [ 435.659752][T13062] do_futex+0x1ef/0x350 [ 435.659790][T13062] ? __pfx_do_futex+0x10/0x10 [ 435.659826][T13062] ? fdget+0x18b/0x210 [ 435.659852][T13062] ? __sys_sendmsg+0x18f/0x220 [ 435.659889][T13062] __x64_sys_futex+0x34f/0x4d0 [ 435.659931][T13062] ? __pfx___x64_sys_futex+0x10/0x10 [ 435.659982][T13062] do_syscall_64+0x106/0xf80 [ 435.660016][T13062] ? clear_bhb_loop+0x40/0x90 [ 435.660051][T13062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.660080][T13062] RIP: 0033:0x7fc64f39c799 [ 435.660105][T13062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.660135][T13062] RSP: 002b:00007fc65024b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 435.660162][T13062] RAX: ffffffffffffffda RBX: 00007fc64f615fa8 RCX: 00007fc64f39c799 [ 435.660183][T13062] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc64f615fa8 [ 435.660200][T13062] RBP: 00007fc64f615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 435.660218][T13062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.660235][T13062] R13: 00007fc64f616038 R14: 00007ffcbc740630 R15: 00007ffcbc740718 [ 435.660272][T13062] [ 435.990438][T13070] EXT4-fs (sda1): Delayed block allocation failed for inode 2021 at logical offset 0 with max blocks 1 with error 117 [ 436.003858][T13070] EXT4-fs (sda1): This should not happen!! Data will be lost [ 436.003858][T13070] [ 436.121103][T13067] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 436.127540][T13067] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 436.134030][T13067] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 436.171211][T13067] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 436.543217][T13083] nvme_fabrics: missing parameter 'transport=%s' [ 436.549921][T13083] nvme_fabrics: missing parameter 'nqn=%s' [ 437.275087][T13115] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz.3.1515: Error -117 reading block bitmap for 4 [ 437.378594][T13115] binder: 13114:13115 ioctl c018620c 0 returned -1 [ 437.502913][T13101] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 437.516739][T13101] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 437.537081][T13101] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 437.557636][T13101] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 438.947992][T13141] Invalid ELF header magic: != ELF [ 438.996153][T13158] process 'syz.3.1521' launched ':,' with NULL argv: empty string added [ 439.023410][T13158] ERROR: Out of memory at tomoyo_memory_ok. [ 439.134909][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 439.533018][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 439.602620][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 439.608681][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 439.774144][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.780533][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.429469][T13187] tipc: Started in network mode [ 440.438676][T13187] tipc: Node identity ee, cluster identity 4711 [ 440.444988][T13187] tipc: Node number set to 238 [ 440.952990][T13207] usb usb7: usbfs: process 13207 (syz.1.1533) did not claim interface 0 before use [ 441.351178][T13220] can: request_module (can-proto-0) failed. [ 441.391467][T13225] random: crng reseeded on system resumption [ 441.817616][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1542'. [ 443.923781][T13280] Invalid ELF header magic: != ELF [ 445.079890][T13300] bridge0: port 4(veth1_macvtap) entered blocking state [ 445.079955][T13300] bridge0: port 4(veth1_macvtap) entered disabled state [ 445.080116][T13300] veth1_macvtap: entered allmulticast mode [ 445.081442][T13300] veth1_macvtap: left allmulticast mode [ 445.309849][T13309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 445.326143][T13314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1557'. [ 446.251807][T13320] input: f¬ as /devices/virtual/input/input11 [ 446.341544][ T5178] ERROR: Out of memory at tomoyo_memory_ok. [ 446.706094][T13328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1559'. [ 447.891081][T13373] block2mtd: Using custom MTD label '' for dev [ 447.897475][T13373] block2mtd: error: cannot open device [ 448.375750][T13381] netlink: 'syz.0.1571': attribute type 1 has an invalid length. [ 448.397775][T13381] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 448.822444][T13392] mkiss: ax0: crc mode is auto. [ 450.305133][T13415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.322043][T13415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.361520][T13415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.403079][T13415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 451.219143][T13436] Invalid ELF header magic: != ELF [ 452.343404][ T5828] Bluetooth: hci0: command 0x0c1a tx timeout [ 452.349444][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 452.422349][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 452.422415][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 453.697719][T13477] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 453.704330][T13477] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 453.725878][T13477] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 453.736445][T13477] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 455.723996][T13511] syz.3.1598 (13511): /proc/13499/oom_adj is deprecated, please use /proc/13499/oom_score_adj instead. [ 455.777342][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 455.783393][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 455.789517][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 455.795532][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 457.986946][T13532] netlink: 17 bytes leftover after parsing attributes in process `syz.3.1604'. [ 461.473626][T13598] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1615'. [ 461.596911][T13593] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1615'. [ 461.869423][T13594] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1616: iget: checksum invalid [ 461.898743][T13594] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 462.005348][T13594] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1616: iget: checksum invalid [ 462.040862][T13594] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 462.068707][T13594] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1616: iget: checksum invalid [ 462.092515][T13594] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 462.103328][T13594] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1616: iget: checksum invalid [ 462.120049][T13594] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 462.166968][T13594] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 462.329806][T13594] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 463.100075][T13641] Invalid ELF header magic: != ELF [ 463.776792][T13647] FAULT_INJECTION: forcing a failure. [ 463.776792][T13647] name fail_futex, interval 1, probability 0, space 0, times 0 [ 463.789904][T13647] CPU: 1 UID: 0 PID: 13647 Comm: syz.1.1626 Tainted: G U L syzkaller #0 PREEMPT(full) [ 463.789947][T13647] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 463.789958][T13647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 463.789974][T13647] Call Trace: [ 463.789982][T13647] [ 463.789993][T13647] dump_stack_lvl+0x100/0x190 [ 463.790041][T13647] should_fail_ex.cold+0x5/0xa [ 463.790073][T13647] get_futex_key+0x1d2/0x1620 [ 463.790111][T13647] ? __pfx_get_futex_key+0x10/0x10 [ 463.790145][T13647] ? update_se+0x94/0x760 [ 463.790185][T13647] futex_wait_setup+0x83/0x510 [ 463.790236][T13647] __futex_wait+0x19f/0x300 [ 463.790279][T13647] ? __pfx___futex_wait+0x10/0x10 [ 463.790318][T13647] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 463.790378][T13647] ? lockdep_hardirqs_on+0x78/0x100 [ 463.790415][T13647] ? __pfx_futex_wake_mark+0x10/0x10 [ 463.790463][T13647] ? find_held_lock+0x2b/0x80 [ 463.790488][T13647] ? futex_wake+0x456/0x530 [ 463.790537][T13647] futex_wait+0xed/0x380 [ 463.790576][T13647] ? __pfx_futex_wait+0x10/0x10 [ 463.790638][T13647] do_futex+0x1ef/0x350 [ 463.790680][T13647] ? __pfx_do_futex+0x10/0x10 [ 463.790715][T13647] ? __pfx___might_resched+0x10/0x10 [ 463.790753][T13647] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 463.790889][T13647] __x64_sys_futex+0x34f/0x4d0 [ 463.790927][T13647] ? __pfx_task_work_run+0x10/0x10 [ 463.790965][T13647] ? __pfx___x64_sys_futex+0x10/0x10 [ 463.791001][T13647] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 463.791048][T13647] do_syscall_64+0x106/0xf80 [ 463.791079][T13647] ? clear_bhb_loop+0x40/0x90 [ 463.791114][T13647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.791142][T13647] RIP: 0033:0x7f3f7bb9c799 [ 463.791165][T13647] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.791192][T13647] RSP: 002b:00007f3f7c9f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 463.791218][T13647] RAX: ffffffffffffffda RBX: 00007f3f7be15fa8 RCX: 00007f3f7bb9c799 [ 463.791237][T13647] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3f7be15fa8 [ 463.791255][T13647] RBP: 00007f3f7be15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 463.791272][T13647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.791289][T13647] R13: 00007f3f7be16038 R14: 00007fff8b1bc310 R15: 00007fff8b1bc3f8 [ 463.791327][T13647] [ 465.007692][T13656] Invalid ELF header magic: != ELF [ 465.034205][T13655] Invalid ELF header magic: != ELF [ 465.491627][ T5828] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 466.448804][T13686] zswap: compressor  not available [ 467.464176][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1640'. [ 468.449604][T13744] Invalid ELF header magic: != ELF [ 469.967573][T13775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1655'. [ 470.063361][T13791] Invalid ELF header magic: != ELF [ 470.071057][T13791] vivid-007: ================= START STATUS ================= [ 470.081491][T13791] vivid-007: Enable Output Cropping: true [ 470.087588][T13791] vivid-007: Enable Output Composing: true [ 470.172040][T13791] vivid-007: Enable Output Scaler: true [ 470.180841][T13791] vivid-007: Tx RGB Quantization Range: Automatic [ 470.187276][T13791] vivid-007: Transmit Mode: HDMI [ 470.192324][T13791] vivid-007: Hotplug Present: 0x00000000 [ 470.197952][T13791] vivid-007: RxSense Present: 0x00000000 [ 470.204585][T13791] vivid-007: EDID Present: 0x00000000 [ 470.283532][T13791] vivid-007: ================== END STATUS ================== [ 470.459582][T13796] kAFS: unparsable volume name [ 470.535776][T13797] i2c i2c-0: new_device: Can't parse I2C address [ 470.571744][T13797] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[13797] [ 471.400591][T13816] block2mtd: illegal erase size [ 471.424323][T13802] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 471.424536][T13802] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 471.424701][T13802] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 471.443316][T13802] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.344339][T13831] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 472.363126][T13831] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 472.385001][T13831] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 472.416492][T13831] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 472.453525][T13833] FAULT_INJECTION: forcing a failure. [ 472.453525][T13833] name failslab, interval 1, probability 0, space 0, times 0 [ 472.475543][T13833] CPU: 1 UID: 0 PID: 13833 Comm: syz.2.1673 Tainted: G U L syzkaller #0 PREEMPT(full) [ 472.475593][T13833] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 472.475604][T13833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 472.475621][T13833] Call Trace: [ 472.475630][T13833] [ 472.475641][T13833] dump_stack_lvl+0x100/0x190 [ 472.475692][T13833] should_fail_ex.cold+0x5/0xa [ 472.475727][T13833] should_failslab+0xc2/0x120 [ 472.475757][T13833] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 472.475798][T13833] ? alloc_empty_file+0x55/0x1c0 [ 472.475831][T13833] ? alloc_file_pseudo+0x1a5/0x230 [ 472.475871][T13833] alloc_empty_file+0x55/0x1c0 [ 472.475904][T13833] alloc_file_clone+0x5f/0x110 [ 472.475939][T13833] create_pipe_files+0x40e/0x970 [ 472.475972][T13833] do_pipe2+0xbd/0x1e0 [ 472.475999][T13833] ? __pfx_do_pipe2+0x10/0x10 [ 472.476041][T13833] __x64_sys_pipe+0x33/0x50 [ 472.476069][T13833] do_syscall_64+0x106/0xf80 [ 472.476103][T13833] ? clear_bhb_loop+0x40/0x90 [ 472.476139][T13833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.476168][T13833] RIP: 0033:0x7f25a139c799 [ 472.476190][T13833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 472.476216][T13833] RSP: 002b:00007f25a21b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 472.476244][T13833] RAX: ffffffffffffffda RBX: 00007f25a1615fa0 RCX: 00007f25a139c799 [ 472.476264][T13833] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 472.476282][T13833] RBP: 00007f25a1432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 472.476299][T13833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.476315][T13833] R13: 00007f25a1616038 R14: 00007f25a1615fa0 R15: 00007fffc0aed1e8 [ 472.476351][T13833] [ 473.000830][T13839] netlink: 'syz.1.1674': attribute type 2 has an invalid length. [ 473.013149][T13839] netlink: 'syz.1.1674': attribute type 3 has an invalid length. [ 473.021361][T13839] netlink: 158 bytes leftover after parsing attributes in process `syz.1.1674'. [ 473.031443][T13839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1674'. [ 473.478418][T13837] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 473.991017][ T29] audit: type=1800 audit(4294971584.624:9): pid=13852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1676" name="sr0" dev="devtmpfs" ino=2865 res=0 errno=0 [ 474.399127][ T5835] Bluetooth: hci2: command 0x0c1a tx timeout [ 474.405194][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 474.412477][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 474.478770][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 474.619821][T13588] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u8:50: bg 1: bad block bitmap checksum [ 474.638831][T13588] EXT4-fs (sda1): Delayed block allocation failed for inode 2026 at logical offset 8 with max blocks 9 with error 74 [ 474.651566][T13588] EXT4-fs (sda1): This should not happen!! Data will be lost [ 474.651566][T13588] [ 476.524061][T13892] openvswitch: netlink: Message has 12 unknown bytes. [ 476.579744][T13894] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.1685'. [ 477.039175][T13901] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1686'. [ 478.113478][T13909] zswap: compressor  not available [ 480.402618][T13978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1702: iget: checksum invalid [ 480.488869][T13978] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 480.581196][T13978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1702: iget: checksum invalid [ 480.653009][T13978] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 480.724374][T13978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1702: iget: checksum invalid [ 480.800843][T13978] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 480.856305][T13978] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.1.1702: iget: checksum invalid [ 480.921653][T13987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 480.927899][T13987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 480.934260][T13987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 480.940445][T13987] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 480.956332][T13978] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 480.973864][T13978] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 480.985914][T13978] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 481.729507][T14009] ecryptfs_miscdev_write: Invalid packet size [192] [ 481.863022][T14010] ecryptfs_miscdev_write: Invalid packet size [192] [ 482.323534][T14016] netlink: 'syz.3.1713': attribute type 2 has an invalid length. [ 482.576440][T14030] netlink: 'syz.1.1716': attribute type 5 has an invalid length. [ 482.680379][T14030] netlink: 4158 bytes leftover after parsing attributes in process `syz.1.1716'. [ 482.998617][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 483.004798][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout [ 483.008579][ T5835] Bluetooth: hci0: command 0x0c1a tx timeout [ 483.016785][ T5835] Bluetooth: hci1: command 0x0c1a tx timeout [ 483.416929][T14046] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 483.447570][T14046] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 483.505169][T14046] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 483.532457][T14046] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 485.071986][T14075] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1725'. [ 485.089287][T14073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1726'. [ 485.159812][T14075] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1725'. [ 485.212195][T14075] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1725'. [ 485.268337][T14075] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1725'. [ 485.300539][T14075] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1725'. [ 485.357906][T14075] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1725'. [ 485.395060][T14075] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1725'. [ 485.453895][T14075] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1725'. [ 485.467146][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 485.473247][ T5143] Bluetooth: hci0: command 0x0c1a tx timeout [ 485.546663][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 485.552872][ T5143] Bluetooth: hci3: command 0x0c1a tx timeout [ 486.081656][T14097] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 486.163905][T14097] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 486.222509][T14097] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 486.376434][T14097] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 486.803712][T14112] FAULT_INJECTION: forcing a failure. [ 486.803712][T14112] name failslab, interval 1, probability 0, space 0, times 0 [ 486.823281][T14112] CPU: 0 UID: 0 PID: 14112 Comm: syz.0.1733 Tainted: G U L syzkaller #0 PREEMPT(full) [ 486.823310][T14112] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 486.823316][T14112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.823325][T14112] Call Trace: [ 486.823330][T14112] [ 486.823337][T14112] dump_stack_lvl+0x100/0x190 [ 486.823366][T14112] should_fail_ex.cold+0x5/0xa [ 486.823385][T14112] should_failslab+0xc2/0x120 [ 486.823402][T14112] __kmalloc_cache_noprof+0x7a/0x6f0 [ 486.823422][T14112] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 486.823543][T14112] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 486.823567][T14112] vidtv_mux_init+0x8a6/0xbf0 [ 486.823588][T14112] vidtv_start_feed+0x33e/0x4c0 [ 486.823634][T14112] ? __pfx_vidtv_start_feed+0x10/0x10 [ 486.823658][T14112] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 486.823685][T14112] ? mark_held_locks+0x40/0x70 [ 486.823707][T14112] ? __pfx_vidtv_start_feed+0x10/0x10 [ 486.823729][T14112] dmx_ts_feed_start_filtering+0xf6/0x220 [ 486.823756][T14112] dvb_dmxdev_start_feed+0x273/0x3f0 [ 486.823780][T14112] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 486.823804][T14112] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 486.823827][T14112] dvb_demux_do_ioctl+0xe64/0x1200 [ 486.823855][T14112] dvb_usercopy+0x167/0x340 [ 486.823873][T14112] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 486.823896][T14112] ? __pfx_dvb_usercopy+0x10/0x10 [ 486.823923][T14112] ? __fget_files+0x21f/0x3d0 [ 486.823941][T14112] dvb_demux_ioctl+0x29/0x40 [ 486.823959][T14112] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 486.823979][T14112] __x64_sys_ioctl+0x18e/0x210 [ 486.824001][T14112] do_syscall_64+0x106/0xf80 [ 486.824018][T14112] ? clear_bhb_loop+0x40/0x90 [ 486.824037][T14112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.824056][T14112] RIP: 0033:0x7f4b0759c799 [ 486.824071][T14112] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.824085][T14112] RSP: 002b:00007f4b08407028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.824101][T14112] RAX: ffffffffffffffda RBX: 00007f4b07816090 RCX: 00007f4b0759c799 [ 486.824111][T14112] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 486.824121][T14112] RBP: 00007f4b07632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 486.824131][T14112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.824141][T14112] R13: 00007f4b07816128 R14: 00007f4b07816090 R15: 00007ffe216e3a48 [ 486.824162][T14112] [ 487.085946][ T5888] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 487.097920][ T5888] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 487.106352][ T5888] CPU: 0 UID: 0 PID: 5888 Comm: kworker/0:4 Tainted: G U L syzkaller #0 PREEMPT(full) [ 487.117318][ T5888] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 487.122506][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.132564][ T5888] Workqueue: events vidtv_mux_tick [ 487.137691][ T5888] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 487.144302][ T5888] Code: ac 7d dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 487.163914][ T5888] RSP: 0000:ffffc90004a973f8 EFLAGS: 00010202 [ 487.169982][ T5888] RAX: 0000000000000002 RBX: ffffc90004a97678 RCX: 0000000000000002 [ 487.177956][ T5888] RDX: 0000000000000000 RSI: ffffffff882b9394 RDI: ffff88805b50bd00 [ 487.185927][ T5888] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 487.193897][ T5888] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004a97698 [ 487.201869][ T5888] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 487.209836][ T5888] FS: 0000000000000000(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000 [ 487.218771][ T5888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.225443][ T5888] CR2: 0000001b309f4ff8 CR3: 00000000937c6000 CR4: 00000000003526f0 [ 487.233416][ T5888] Call Trace: [ 487.236692][ T5888] [ 487.239622][ T5888] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 487.245983][ T5888] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 487.251554][ T5888] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 487.257625][ T5888] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 487.263358][ T5888] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 487.269447][ T5888] ? find_held_lock+0x2b/0x80 [ 487.274126][ T5888] ? unwind_next_frame+0x3be/0x1ea0 [ 487.279358][ T5888] ? unwind_next_frame+0x3be/0x1ea0 [ 487.284563][ T5888] vidtv_mux_push_si+0x932/0xe80 [ 487.289512][ T5888] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 487.294978][ T5888] ? __lock_acquire+0x4a5/0x2630 [ 487.299937][ T5888] ? __pfx_vidtv_ts_pcr_write_into+0x10/0x10 [ 487.305937][ T5888] ? find_held_lock+0x2b/0x80 [ 487.310616][ T5888] ? debug_object_activate+0x331/0x490 [ 487.316089][ T5888] ? do_raw_spin_unlock+0x145/0x1e0 [ 487.321303][ T5888] vidtv_mux_tick+0xe96/0x1480 [ 487.326076][ T5888] ? rcu_is_watching+0x12/0xc0 [ 487.330869][ T5888] ? __lock_acquire+0x4a5/0x2630 [ 487.335828][ T5888] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 487.341039][ T5888] ? __lock_acquire+0x4a5/0x2630 [ 487.345993][ T5888] ? debug_object_deactivate+0x2e4/0x3b0 [ 487.351642][ T5888] ? rcu_is_watching+0x12/0xc0 [ 487.356421][ T5888] process_one_work+0x9d7/0x1920 [ 487.361377][ T5888] ? __pfx_process_one_work+0x10/0x10 [ 487.366854][ T5888] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 487.372062][ T5888] worker_thread+0x5da/0xe40 [ 487.376670][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 487.381794][ T5888] ? kthread+0x13a/0x450 [ 487.386045][ T5888] ? __pfx_worker_thread+0x10/0x10 [ 487.391166][ T5888] kthread+0x370/0x450 [ 487.395244][ T5888] ? __pfx_kthread+0x10/0x10 [ 487.399846][ T5888] ret_from_fork+0x754/0xd80 [ 487.404450][ T5888] ? __pfx_ret_from_fork+0x10/0x10 [ 487.409575][ T5888] ? rcu_is_watching+0x12/0xc0 [ 487.414363][ T5888] ? __switch_to+0x7b4/0x1120 [ 487.419044][ T5888] ? __pfx_kthread+0x10/0x10 [ 487.423643][ T5888] ret_from_fork_asm+0x1a/0x30 [ 487.428421][ T5888] [ 487.431436][ T5888] Modules linked in: [ 487.436046][ T5888] ---[ end trace 0000000000000000 ]--- [ 487.580564][ T5888] RIP: 0010:vidtv_psi_ts_psi_write_into+0x54a/0xbc0 [ 487.592106][ T5888] Code: ac 7d dc f9 4c 8d 63 20 4c 89 e0 48 c1 e8 03 80 3c 28 00 0f 85 e8 04 00 00 48 8b 43 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 2a 38 ca 7f 08 84 d2 0f 85 19 05 00 00 0f b6 10 48 8b 7c [ 487.633831][ T5888] RSP: 0000:ffffc90004a973f8 EFLAGS: 00010202 [ 487.651442][ T5888] RAX: 0000000000000002 RBX: ffffc90004a97678 RCX: 0000000000000002 [ 487.688810][ T5888] RDX: 0000000000000000 RSI: ffffffff882b9394 RDI: ffff88805b50bd00 [ 487.716514][ T5888] RBP: dffffc0000000000 R08: 0000000000000005 R09: 0000000000000000 [ 487.730691][ T5888] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004a97698 [ 487.763047][ T5888] R13: 0000000000000178 R14: 0000000000000000 R15: 0000000000000008 [ 487.805778][ T5888] FS: 0000000000000000(0000) GS:ffff88812434e000(0000) knlGS:0000000000000000 [ 487.839199][ T5888] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 487.847693][ T5888] CR2: 00007f3f7c9d4f88 CR3: 000000007d22c000 CR4: 00000000003526f0 [ 487.856524][ T5888] Kernel panic - not syncing: Fatal exception [ 487.862870][ T5888] Kernel Offset: disabled [ 487.867191][ T5888] Rebooting in 86400 seconds..