last executing test programs: 6.534617152s ago: executing program 3 (id=4705): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2a, 0x1, 0xffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/netfs/volumes\x00', 0x40080, 0x0) pread64$auto(r3, 0x0, 0x8100000041, 0x413e) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) setresuid$auto(0x0, 0x7, 0x8080) capset$auto(0x0, 0x0) capset$auto(0x0, 0x0) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) mremap$auto(0x1ff000, 0x100005, 0x843, 0x3, 0x2) sendmsg$auto_IPVS_CMD_ZERO(r2, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000500)={0x1c0, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x1ac, 0x2, 0x0, 0x1, [@generic="1a99ec1c108cc41ca31099501ec119ce4b5086dfb04080eeb19cb87e98dccfb65dbd58ce66549f70212d8785218ed559266c8d2524ba8b74b00c910ddd6bb8fdc088021d5eef0cd1dc31777bac87bd923a25", @generic="2c29a1655b0019f6", @nested={0x123, 0xf2, 0x0, 0x1, [@generic="7b5db3bb84cef1dc3cca079149b7b424eb85eddf166c0dd11d03337e28763456bc7db91633edeb24a12032f4f17ef10403aeb8e7a16b5b55633b8492b86b7afdcd266c9df8cbaab53c59d8dd813dc2d38e212d90e8d79868a4777e480a571d96f7cb67ffc34b2e8272f7fb96cd31632717b2f05ee4492ea7438fc94ee328c915410539d63b5913f8535ff3c1218fdc8b431125ce30fc51e75d240fc05ada684ed0b6d3d03d8f2dea4899d919e1eae376b2941ad6d4e981e28d293dff8454b7ed44290d862ad12bab07d5a8a91f4b91744c0af2267422cd00e8c849708edaae2c47749ccb527d8395f46ef50e5a07e1", @nested={0x4, 0x37}, @typed={0x8, 0xdf, 0x0, 0x0, @u32=0x954f}, @nested={0x4, 0x13a}, @typed={0x8, 0xfc, 0x0, 0x0, @u32}, @nested={0x4, 0x3a}, @typed={0x14, 0x42, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, @typed={0x4, 0x6c}, @generic="8fc64834e29e6f3ea074a500cc3a589005bcd564f307f0bc1a6d5ddc9563474b5a089a1dfb30"]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x80}, 0x4048000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) fsopen$auto(0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0xfffffffffffffff5, 0xd, 0x7) ptrace$auto(0x4206, 0x1, 0x100000000, 0xe855) socket(0x2, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) madvise$auto(0x0, 0xffffffffffff0005, 0x3) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) 6.530892559s ago: executing program 1 (id=4706): prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x3, 0x40, 0x3ff, 0x6) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000280)={0x14, r1, 0xf3e97f51700e57cf, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8020) read$auto(0xffffffffffffffff, 0x0, 0x7f) mprotect$auto(0x8000, 0x8, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x121000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) (async) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) read$auto(r0, 0x0, 0x3) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) fanotify_init$auto(0x2, 0x8a) process_vm_readv$auto(0x0, 0x0, 0x800000001, 0x0, 0x6, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) (async) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x1000000a, 0xfffffffd, 0x44b, 0x7, 0x5, 0x1007181, 0xff, 0x7, 0x7, 0x7ff, 0x800c, 0x80000001, 0x4, 0x80200000000001, 0x800000000fbf, 0xde3, 0x9809588, 0xfffffffd, 0x2, 0x0, 0x864, 0x6, 0x22000, 0x40200, 0xfffffffe, 0xc3f, 0x2000000, 0x0, 0x0, 0x0, 0x0, [0x1000000000000000, 0x0, 0x0, 0x7fdf, 0x47, 0x0, 0x100, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44cd98b, 0xfffffffffffffffd, 0x0, 0x0, 0x8000000000000, 0x0, 0x6, 0x6, 0x0, 0x0, 0x6, 0x10001, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000000, 0x0, 0x6, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x0, 0x2000000000000]}, 0xa, 0xd) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd02, &(0x7f00000001c0)) (async) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd02, &(0x7f00000001c0)) wait4$auto(r5, 0x0, 0x80000001, 0x0) msgctl$auto_IPC_STAT(0x1ff, 0x2, &(0x7f0000000340)={{0xd, 0xee01, 0xffffffffffffffff, 0xf, 0x1ff, 0x3, 0x2}, &(0x7f0000000140)=0x8, 0x0, 0x0, 0x5, 0x7, 0x5, 0x91d, 0x3, 0x1000, 0x39a, @raw=0x7, @raw=0x2}) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r4, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x408c0}, 0x24040080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x189302, 0x0) lseek$auto(0x3, 0x8, 0x1) (async) lseek$auto(0x3, 0x8, 0x1) 5.263228273s ago: executing program 3 (id=4709): unshare$auto(0x40000080) listen$auto(0x3, 0x81) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r1, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_TSINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x700, 0x840}, 0x48000) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x103003, 0x0) 4.740951478s ago: executing program 1 (id=4712): r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) mbind$auto(0x0, 0x4, 0x4, 0x0, 0x2000000006, 0x0) landlock_restrict_self$auto(r0, 0xb) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_PARENT(r1, 0x8008b70d, 0x0) 4.676178385s ago: executing program 3 (id=4713): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x8, 0x1, 0x6) r0 = socket(0x23, 0x5, 0x0) bind$auto(r0, &(0x7f0000000140)=@phonet={0x23, 0x6, 0x3, 0xa3}, 0x80) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x80000001, 0xeb1, 0x401, 0x8002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\'\x00\xc9\n\xbf\xb9\x12\xfa\x00\x00\xcfk', 0xb7f) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) socket(0x28, 0x1, 0x0) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100), 0xffffffff}, 0x6, 0x0) getpgid(0x0) setsockopt$auto(r0, 0xffff99e4, 0x9, 0x0, 0xacb1) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) readv$auto(r1, &(0x7f0000000100)={0x0, 0x3}, 0x1) madvise$auto(0x2, 0x7e60, 0xfffffffd) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0xffffffffffffffff, 0x0, 0x7) setfsuid$auto(0xee00) lsm_get_self_attr$auto(0x6, &(0x7f0000000000)={0xfffffffffffffff3, 0x40, 0x5, 0x27, "1a46ea12ef45d10f142fd22a309929cc9fcdb5327e28f7be1e8b3d85b0bc2b87f3e613fe0eb082"}, &(0x7f0000000080)=0x3, 0x8000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) sendmsg$auto_NL80211_CMD_SET_STATION(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c0010000", @ANYRES16=r4], 0x1c0}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) madvise$auto(0x5, 0x1, 0x9) 4.538550296s ago: executing program 1 (id=4714): r0 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x0, 0x28, 0x0, 0xc) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL2\x01\x88\v\xae\xa9i8W\xe5\x00W\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\x90\x13\xd5\x84\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x95\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x13#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xbf\xa6\x11YTz\xf3\xdd\xe7i~:\x1a\xd0\xb0R\xb4J}\x00\x00\x00\x00\x00\x00\xa3\x05\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xd5\xc1\"\xact\xff\xc9\x00'/242, 0x7, 0x2) socket(0x10, 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x106) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000240)='/dev/binderfs/binder0\x00', 0x80000, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x3, 0x95f4da0a, 0x10001, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x5, 0x2, 0xfffffffffffffffe]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:<\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde0x0}) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESHEX=r3], 0x1ac}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4040044}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/cpu/cpu0/hotplug/fail\x00', 0x808882, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setfsuid$auto(0x0) sendmsg$auto_TIPC_NL_KEY_FLUSH(0xffffffffffffffff, 0x0, 0x8010) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x80140, 0x0) read$auto(r4, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0c\x00', 0x80, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/suspend_stats/failed_suspend_late\x00', 0x0, 0x0) mmap$auto(0x0, 0x3, 0x36, 0x1009b72, r5, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x8, 0xd7d) socket(0x29, 0x2, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, 0x0, 0x40000) recvmmsg$auto(r6, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000280), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.723877884s ago: executing program 0 (id=4719): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000014, 0xffffffffffffffff, 0xc1000001, 0x8}, 0x5) fsopen$auto(0x0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x400005, 0xe3, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0xa) getsockopt$auto(r1, 0x0, 0x14, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r2) wait4$auto(0xffffffffffffffff, &(0x7f00000000c0)=0x3b6cf7f5, 0x0, &(0x7f0000000140)={{0xfffffffffffffff8, 0x9}, {0x7, 0x9}, 0xfffffffffffffffc, 0x7fff, 0xffffffff, 0x7ff, 0x1, 0x0, 0xf, 0x3b, 0x8, 0x2cc7898, 0xfffffffffffffff3, 0x5, 0x6000, 0x5}) getpid() r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) read$auto(r0, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000240)={0x0, 0x7}, 0x3) shmctl$auto_SHM_UNLOCK(0x2, 0xc, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) 2.685806429s ago: executing program 2 (id=4720): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0xa0, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x8c, 0x7, 0x0, 0x1, [@typed={0x88, 0x3, 0x0, 0x0, @str='\x12\xd2\xc0\x99\xbe\xdeE\x04\xe4\x91\x12\xc0\x9f\t\x84\xd7@j\'\xb0\xd9\xbf\\L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x9b\xf5\xc9\x882\xd3&\xe7g\x84\xce\xd4]\xbf\xcf\bw\xf6=\xc1\x8d\xb1]\bF\x14\xce/\x05s|R/\xa3\x94\x8b\xbd\xfe\x922\xf3\x94Y+w)\xd6z\xaez\xdbL\x03\xd2\x97\x88\x04N\xd1\r\xc8\xfa\xf2an5\xab\xa9\xf0\xd2>\xf1c8\xfdz\x1d\xe6c\xdb?\"\xbe\xab\xbd\b\xcen\x8d;u\x85\xbc\xafu\x15'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x104}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0xa0, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x8c, 0x7, 0x0, 0x1, [@typed={0x88, 0x3, 0x0, 0x0, @str='\x12\xd2\xc0\x99\xbe\xdeE\x04\xe4\x91\x12\xc0\x9f\t\x84\xd7@j\'\xb0\xd9\xbf\\L\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf5\x9b\xf5\xc9\x882\xd3&\xe7g\x84\xce\xd4]\xbf\xcf\bw\xf6=\xc1\x8d\xb1]\bF\x14\xce/\x05s|R/\xa3\x94\x8b\xbd\xfe\x922\xf3\x94Y+w)\xd6z\xaez\xdbL\x03\xd2\x97\x88\x04N\xd1\r\xc8\xfa\xf2an5\xab\xa9\xf0\xd2>\xf1c8\xfdz\x1d\xe6c\xdb?\"\xbe\xab\xbd\b\xcen\x8d;u\x85\xbc\xafu\x15'}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x104}, 0x40) (async) 2.664029652s ago: executing program 3 (id=4721): clock_getres$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8080, 0x0) listen$auto(r0, 0x3) accept$auto(0x3, 0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x4, 0x0, 0x7fff, 0x1}, 0x80000b}, 0x5, 0x20000000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty59\x00', 0x105041, 0x0) close_range$auto(r1, 0x8, 0x20000000) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sysvipc/msg\x00', 0x10800, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x1) madvise$auto(0x4, 0xffffffffffff0805, 0x8f) open_by_handle_at$auto(0xffffffffffffffff, 0x0, 0x3) 2.450811826s ago: executing program 0 (id=4722): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x1d, 0x2, 0x6) setsockopt$auto(r0, 0x6a, 0x4000002, 0x0, 0x3) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/modules\x00', 0x3cb001, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x242e40, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/controlC0\x00', 0x402000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/tty28\x00', 0xa240, 0x0) ioctl$auto(r1, 0x541a, 0x0) unshare$auto(0x6) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11RTSSuccessCount\x00', 0x800, 0x0) r3 = socket(0xa, 0x1, 0x84) getsockopt$auto(r3, 0x84, 0x85, 0x0, &(0x7f0000000000)=0x7ffe) link$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x5, 0x84) init_module$auto(0x0, 0xffff9, 0x0) mmap$auto(0x4, 0x7fffffff, 0xfd8, 0xffffffff, r2, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/dynamic_events\x00', 0x201, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1882c2, 0x78e22799f4a46f1c) flock$auto(r5, 0x6) r6 = open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) flock$auto(r6, 0x1) r7 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abe0) flock$auto(r7, 0x1) close_range$auto(0x2, 0x8, 0x0) 2.405563441s ago: executing program 2 (id=4723): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x7cf403, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x30f244, 0x0) r1 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/lru_gen_full\x00', 0x400001, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x121040, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) pselect6$auto(0x49, &(0x7f0000000000)={[0x69, 0x4, 0x0, 0x6, 0x7ffe, 0x4000000000002bc8, 0xfff, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x32, 0x2, 0x10000008, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x800}, 0x0, 0xf, 0x9) r2 = pipe$auto(&(0x7f00000000c0)=r1) setsockopt$auto_SO_ATTACH_BPF(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x4) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x3880, 0x70) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x2, 0x802, 0x1) setsockopt$auto_SO_WIFI_STATUS(r3, 0x0, 0x29, &(0x7f0000000080)='\xef', 0x8000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r4, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) mkdir$auto(0x0, 0xfffd) r7 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), 0xffffffffffffffff) shmctl$auto_SHM_STAT_ANY(0xb5d, 0xf, &(0x7f0000000340)={{0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x0, 0x63c7, 0x5, 0x2, @inferred=0xffffffffffffffff, @inferred, 0x0, 0x0, &(0x7f0000000100)="6c7fbf667a1bb8aa980d6900b4e204c15955e264f630dedb88df8f6bd0e81124c488dee8346135152e5a7e63c4e7dacdd45d68f284f4d0f6b364c262c29b49ac2de0dbcf546a815c517709106c99056e5d0bda7ff9680c81bad8adc98377cabb7cb85a9e2fb391b1c341fcecb97a58af4df1e1a7d6dc3d03d38061ee700d78934d298de8d884a0cb4b0d5b88efda56ce85dda5444ab9f12f85ae41246d3d33f8b0", &(0x7f00000002c0)="85020ca67c0b2beb84bf45f8e766bad28b793f50884f98c056916386a895bf837eb3649cf5b598faa5ae922de20b1d1ed9cc77ae14f9097ea7f2e97d928a31736083c13ab1c914338453c28b93a9"}) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_ADD(r5, &(0x7f00000008c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000940)=ANY=[@ANYBLOB="cc040000b5d7020cf95bbec9689dd4c3fec556bff20c8158d8ea6cf68944d34b7db83f3530a4a292bae20a2b4821422b3d9bf2b1d71fc7e068c145c9833281dfb11fb616ae0bcb000000000000", @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="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"], 0x4cc}, 0x1, 0x0, 0x0, 0x10008001}, 0x4000) close_range$auto(0xffffffffffffffff, r0, 0x0) clock_getres$auto(0x1050, &(0x7f0000000900)={0xffffffffffffffff, 0xfffffffffffffffa}) r9 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r9) ioctl$auto_KVM_GET_MSRS(r6, 0x4008ae90, &(0x7f00000001c0)={0x2, 0x0, [{0x7, 0x7fd, 0x8}, {0x10002, 0x34, 0x1005}, {0x7, 0x0, 0x80000001}]}) 2.248241566s ago: executing program 2 (id=4724): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYBLOB="010027bd7000f9dbdf25010000000600020000000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x4080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100cda4429629bd7100f9db5f2502"], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r3) sendmsg$auto_HWSIM_CMD_GET_RADIO(r3, &(0x7f0000000c80)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)={0x9ac, r4, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@HWSIM_ATTR_PERM_ADDR={0xe, 0x16, "5b0f58486ba6d7c62dc8"}, @HWSIM_ATTR_PERM_ADDR={0xcb, 0x16, "9559b2d9ab4f8c62f09e5c628ac7e449a8c1e9336fd1415fa0f834d4f557486401f6929ce16a98f4a9d936b80e4edaae916342759e128b4ee062077a6d50488cbced8d16140088f1eb63db21249205bbf00a81eb606d00581760aaa78f8dda165375956ca08b383b313a84c6cabce79399de82b6ca0d09390764060cb03cb741b909ccb32bf47ec57a3d631a3822d49c98cc108ea36f2a06aa29e1a04488774fc62adbcb60d70665258eb46846ed9cca194c67cbb96e9a6212b6f2fad9d3345596011c4eda66a4"}, @HWSIM_ATTR_PERM_ADDR={0xc3, 0x16, "dcc0f28697d6948d051c85dca77790457699dcbf01784f7f47354bbcc75edb4e82debbeec14e84bbd6ced6a6298f5630d28c6a72855b9d1719fb0e003cf8483523e1ce843f4d8d1883367fb328d5017fb5024088eac9dae70c9aa9d7c130d5aca987f8c9201ee0c100cb927a7080d267b954e4b074c07cd8e814512dfd54db8a3804a51fe186e59b35c0db5bd9ad2f1dfc6eb966dc53580f91091dae4d3334cc01a4fbfbf32720b3db4b80949832be1e7257e47c786e4f187eaaa59f576edf"}, @HWSIM_ATTR_TX_INFO={0x4}, @HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_PMSR_SUPPORT={0x30, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x2c, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x28, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x800}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x4}, @NL80211_PMSR_FTM_CAPA_ATTR_BANDWIDTHS={0x8, 0x6, 0x94}, @NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x8}, @NL80211_PMSR_FTM_CAPA_ATTR_TRIGGER_BASED={0x4}]}]}]}, @HWSIM_ATTR_CIPHER_SUPPORT={0x54, 0x18, "f3cedf4930e3daad05a2592138b065cbf807709ef2e10a20353f635908983e4fd4d8d6889f0201280cc235f5f1dfa01cfeea99b7be2163aa5b91ffe7fdb28bf1abdf68c46c67a59e7bd12f5a3929b749"}, @HWSIM_ATTR_FRAME={0x20e, 0x3, "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"}, @HWSIM_ATTR_FRAME={0x55b, 0x3, "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"}]}, 0x9ac}, 0x1, 0x0, 0x0, 0x48040}, 0x8845) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x0, 0x0) ioctl$auto(0x3, 0x80885659, 0x38) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008) 1.807335345s ago: executing program 1 (id=4725): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptya1\x00', 0x800, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x20000) ioctl$auto(r0, 0x545c, 0xffffffffffffffff) 1.179133894s ago: executing program 1 (id=4726): socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) ioctl$auto(0xffffffffffffffff, 0x40104d01, 0xffffffffffffffff) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x2401, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20243, 0x0) write$auto(r0, 0x0, 0x6051) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r1, &(0x7f0000000000)='//\xf2\xff', 0x80000000) sendto$auto(0x3, 0x0, 0x13, 0x7, 0x0, 0x20) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x10000100200000) setrlimit$auto(0xb, 0x0) mmap$auto(0x3, 0x400009, 0x8, 0x50, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x54) 1.16535207s ago: executing program 0 (id=4727): r0 = socketcall$auto(0x2, 0x0) setsockopt$auto_SO_ATTACH_REUSEPORT_CBPF(r0, 0x81, 0x33, &(0x7f0000000380)='-\'\x00', 0x4) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x5eba82, 0x0) ioctl$auto_BLKALIGNOFF(r1, 0x127a, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x40000008000) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x2404c800) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sg0\x00', 0x141040, 0x0) ioctl$auto_SCSI_IOCTL_PROBE_HOST(r3, 0x5385, &(0x7f0000000280)) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000003c0)={"0f388da2cf4d2948e1ca9862fdcbdb886c5819512b017c3770c8d167f5d2147b", 0x0, 0x0, 0xeefd, 0x1, 0x4}) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x4004) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a1842, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_psample(&(0x7f0000007a40), 0xffffffffffffffff) sendmsg$auto_PSAMPLE_CMD_GET_GROUP(r4, &(0x7f0000007b00)={0x0, 0x0, &(0x7f0000007ac0)={&(0x7f0000007a80)={0x14, r5, 0x311, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0xf0, 0x40000}, 0x20000000) 1.017101154s ago: executing program 2 (id=4728): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) madvise$auto(0x0, 0x2000040080000004, 0xe) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000080)={0x0, 0x100fff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x20008800) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x28, 0x5, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bind$auto(r2, &(0x7f0000000080)=@in={0x28, 0x0, @rand_addr=0xffffffff}, 0x68) listen$auto(0x3, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r3, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="205527d0", @ANYRES16=r4, @ANYBLOB="010029bd7000ffdbdf25030000000a000200a060292f83d90000"], 0x20}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2c00, 0x0) ioctl$auto_EVIOCSMASK(r5, 0x40104593, &(0x7f0000000080)={0x2, 0x80000000, 0x7f}) r6 = socket(0x10, 0x2, 0x0) r7 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000540), 0xffffffffffffffff) r8 = socket(0x28, 0x5, 0x0) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) write$auto(r9, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\x9du\xbc\xe8\xd3j\x06\xc25x\xde\x84\xad\x17(\x0f\xc0\x14<6\x1eyY`\xd4g\xc3\xdeIJr\f\xbb \x0ew4\xa3\xde{\xa6\x93\x8fC\xe4@\xce\xbf\r.\x98\x8c\x0f\x90\n\xfa\"\xaa&?\xfdW\xdd\xd8<\n\x81\x9bU\xa3+wN\xd64O2\n\xa1\x937J`\xa1\xfd\x90S\x90\x93\xd7YL}\xd2\xcfL\x89', 0x98c7) connect$auto(r8, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x56) sendmsg$auto_NET_SHAPER_CMD_DELETE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="09802fbd7000fbdbdf25030000001e78f42363d28222e7815960649d88fbd9648c5a16992511595b9e5696631d386910c860850c64dba0e3af7fb221764fb3ed40401f8c29527ccbf554db6b829b36910120d1a1bf413e6fcc765f7a05e068949dc4d0f7c8e1440dd38d403cd42104c73561bb2b13e74d98a35c44dc98cec0774374210704ad678d53b56720caa59a17a7b75799357324909a553e1dfb70ccb7211eb7e8c1261801eaf8d3b897b23cbe28ba8553a1d919fd7f47a50cc581a2a92a92829023ba38680d8ebde724715450b82580ccf6aef300"/226], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c850) ioctl$auto_EVIOCGMASK(r5, 0x80104592, &(0x7f0000000180)={0x2, 0x3c, 0xc}) 497.481522ms ago: executing program 2 (id=4729): mmap$auto(0x5, 0x100000001, 0xdf, 0x9b72, 0x2, 0x4000000008000) r0 = socket(0xa, 0x3, 0x3b) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0x2, 0x801, 0x106) listen$auto(0x3, 0x83) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000c80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000300)={0x91c, r2, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_FRAME={0x820, 0x33, "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"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_BSS_SELECT={0x8, 0xe3, 0x0, 0x1, [@typed={0x4, 0x4c}]}, @NL80211_ATTR_EHT_CAPABILITY={0x38, 0x136, "904e2d2fee421d915e694a8b284a8c741898fc7443afa9d120ad858de02c28906ab2fbf94def4d819fa85bd4eb203bfb53f31875"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x9e, 0xac, "de6d0865d871d2a935657d2af5c1539a633615fce4c6b4fdccc36a975df8190ed99987c078b3550536e71d4a0f75cf912db921c6968f520e99b73d263a08fb614d1b0bd4dd1852a3dff009d6ed53bf145be7bc21f3427cddb0f40a79e3eb354332070b82c99c2582fe4767f7d4c09445754fb93ee3da77828f609e8013eb3b1cf8efba1ce59776e3b8e368a01197c9ee9febbc6096359a130090"}]}, 0x91c}, 0x1, 0x0, 0x0, 0x800}, 0xc4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20002, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x8e051, r4, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x2aa01, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci1/power\x00', 0x402000, 0x0) ioctl$auto_FS_IOC_GETFSMAP2(r5, 0xc0c0583b, &(0x7f0000000100)={0x4, 0xd, 0x7, 0x7, '\x00', [{0x34, 0xfffff6f7, 0xd223, 0x81, 0xffffffff, 0x7f}, {0x6e68, 0x5, 0x7, 0xfffffffffffff005, 0x8000003}]}) r6 = accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) getsockopt$auto(r0, 0x29, 0x33, 0x0, 0x0) fstatfs$auto(r6, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$auto_SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000d80)="e2ae0b763e9ee97110e3efd02223b19039944b590030f64536961fb73d525ad2e41b1d5864ccf18533d1cad88ea9bb1d7af36df872a9487c44c3ed809db1d5b8e4599a062fb1566873f8ce7a6a94262008f9bbd535065f8625ad5f770d1590b2d85e43813f24ab22851c69e00000000000362f7d6b11000001d54c6d36ce0a9d95733af53be7827e127d") 378.421572ms ago: executing program 0 (id=4730): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/extra\x00', 0xa142, 0x0) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_open$auto(&(0x7f0000000140)='2*-\b\x00\x00\x13', 0x8001, 0x9, 0x0) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x4, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/bus/input/handlers\x00', 0x200, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 355.032974ms ago: executing program 3 (id=4731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r0) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="810b25bd7080fbdbdf25010000"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) 117.959495ms ago: executing program 3 (id=4732): rseq$auto(&(0x7f0000000080)={0x4, 0x2, 0x9b, 0x6, 0x1, 0xa, '|'}, 0xfffffffb, 0x72a4, 0xd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x21) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/ptp/ptp0/max_vclocks\x00', 0x103841, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x0, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd14/sched/dispatch1\x00', 0x208440, 0x0) read$auto(r1, 0x0, 0x20) write$auto(0x3, 0x0, 0x5c8) r2 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/active_links\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r2, 0x0, 0x20) 0s ago: executing program 0 (id=4733): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) keyctl$auto(0xf, 0xfffffbfffffffffe, 0x2, 0x32, 0x77c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = getsockopt$auto(r0, 0x84, 0x84, 0x0, &(0x7f0000000000)=0x9000c) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r2, 0x1, 0x94d1) ptrace$auto_PTRACE_GET_SYSCALL_USER_DISPATCH_CONFIG(0x4211, r2, 0x100, 0x100000001) r3 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x2, 0x1007ff) ptrace$auto_PTRACE_SETREGSET(0x4205, r3, 0x2, 0x9193) r4 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r5 = fcntl$auto_F_DUPFD(r4, 0x0, r4) read$auto_tun_fops_tun(r5, 0x0, 0x0) ioctl$auto_NS_GET_TGID_IN_PIDNS(r5, 0x8004b709, &(0x7f0000000200)=0x7f) ptrace$auto(0x10, 0x0, 0x1, 0x7ff) ioctl$auto_XFS_IOC_SWAPEXT(r5, 0xc0c0586d, &(0x7f0000000240)={0x3, @raw=0x6, @raw=0x8, 0xdd2, 0x83, '\x00', {0x5, 0xffff, 0x20, 0xee00, 0x0, 0x3, 0x10001, 0xb, {0x1, 0xffffffff}, {0xb, 0x8}, {0x7f, 0x6}, 0x6, 0xae7c, 0xf6, 0xf, 0x8001, 0x7, 0x2, 0x3, 0x9, 0x9, '\x00', 0x7, 0x8, 0x5, 0x8}}) ioctl$auto_SIOCSIFHWADDR2(r5, 0x8924, &(0x7f0000000300)="7d219caf0179f82087355033c10c98d9947ed01fa057a50447c708b4166c7e3e9d6253a3f1a7efb8fffc705555ab2adf5553306f19ea58b2aa3c914050c13d5b018ef25266636ede3d7cf27d1d7641356420b597fec23c421b984dc0272168bcb19d7529f71e7e7e0f595aaa4d1fb1fba22e276e37cfb7dd7346ea292a2b2c6834ddea85817ea3be07297b60eeb0bfb8e6f8fae0c6d8f0be06f35fd015e39e0a3f124b558413273e1873c0d5a90f69237659603794cd44f5209523036d2afb7f863ff0b00ed899775c6a2f07ece8a5c73bc675049c2d99bd68c77e8cedd8177fa0") msgctl$auto_IPC_INFO(0x3ce, 0x3, &(0x7f0000000180)={{0xa, 0xffffffffffffffff, 0xee00, 0xd57, 0x2, 0xa, 0xffc2}, &(0x7f0000000100)=0x3, &(0x7f0000000140)=0x40, 0x52e2, 0x7fffffffffffffff, 0x8, 0x7, 0x6, 0x4, 0x140, 0x7, @inferred, @inferred=0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) kernel console output (not intermixed with test programs): 0 [ 719.627219][T17434] anon_inode_getfile_fmode+0x37/0xa0 [ 719.627257][T17434] __do_sys_fanotify_init+0xa79/0xe50 [ 719.627308][T17434] do_syscall_64+0x106/0xf80 [ 719.627349][T17434] ? clear_bhb_loop+0x40/0x90 [ 719.627385][T17434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 719.627415][T17434] RIP: 0033:0x7f1a0059c799 [ 719.627439][T17434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 719.627469][T17434] RSP: 002b:00007f1a01425028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 719.627497][T17434] RAX: ffffffffffffffda RBX: 00007f1a00816090 RCX: 00007f1a0059c799 [ 719.627516][T17434] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 719.627534][T17434] RBP: 00007f1a00632c99 R08: 0000000000000000 R09: 0000000000000000 [ 719.627552][T17434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 719.627570][T17434] R13: 00007f1a00816128 R14: 00007f1a00816090 R15: 00007fff484fe118 [ 719.627610][T17434] [ 721.368930][T17471] can: request_module (can-proto-0) failed. [ 722.251551][T17492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4007'. [ 722.377181][T17492] HfR: entered promiscuous mode [ 723.462842][T17519] FAULT_INJECTION: forcing a failure. [ 723.462842][T17519] name failslab, interval 1, probability 0, space 0, times 0 [ 723.537701][T17519] CPU: 1 UID: 0 PID: 17519 Comm: syz.2.4014 Not tainted syzkaller #0 PREEMPT(full) [ 723.537736][T17519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 723.537748][T17519] Call Trace: [ 723.537754][T17519] [ 723.537761][T17519] dump_stack_lvl+0x100/0x190 [ 723.537793][T17519] should_fail_ex.cold+0x5/0xa [ 723.537815][T17519] should_failslab+0xc2/0x120 [ 723.537834][T17519] __kmalloc_cache_noprof+0x7a/0x6f0 [ 723.537858][T17519] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 723.537883][T17519] ? get_mem_cgroup_from_mm+0x88/0x600 [ 723.537908][T17519] ? get_mem_cgroup_from_mm+0x132/0x600 [ 723.537937][T17519] __do_sys_fanotify_init+0x5cf/0xe50 [ 723.537969][T17519] do_syscall_64+0x106/0xf80 [ 723.537995][T17519] ? clear_bhb_loop+0x40/0x90 [ 723.538017][T17519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.538035][T17519] RIP: 0033:0x7f1a0059c799 [ 723.538051][T17519] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.538069][T17519] RSP: 002b:00007f1a01425028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 723.538087][T17519] RAX: ffffffffffffffda RBX: 00007f1a00816090 RCX: 00007f1a0059c799 [ 723.538098][T17519] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 723.538108][T17519] RBP: 00007f1a00632c99 R08: 0000000000000000 R09: 0000000000000000 [ 723.538119][T17519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.538129][T17519] R13: 00007f1a00816128 R14: 00007f1a00816090 R15: 00007fff484fe118 [ 723.538151][T17519] [ 725.662264][T17552] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4022'. [ 727.792189][T17581] input: f as /devices/virtual/input/input27 [ 728.067391][T17584] input: f as /devices/virtual/input/input28 [ 728.146215][T17576] FAULT_INJECTION: forcing a failure. [ 728.146215][T17576] name failslab, interval 1, probability 0, space 0, times 0 [ 728.290621][T17576] CPU: 0 UID: 0 PID: 17576 Comm: syz.1.4027 Not tainted syzkaller #0 PREEMPT(full) [ 728.290662][T17576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 728.290681][T17576] Call Trace: [ 728.290691][T17576] [ 728.290702][T17576] dump_stack_lvl+0x100/0x190 [ 728.290751][T17576] should_fail_ex.cold+0x5/0xa [ 728.290786][T17576] should_failslab+0xc2/0x120 [ 728.290816][T17576] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 728.290855][T17576] ? __d_alloc+0x34/0xa80 [ 728.290905][T17576] __d_alloc+0x34/0xa80 [ 728.290941][T17576] d_alloc_pseudo+0x1c/0xc0 [ 728.290981][T17576] alloc_file_pseudo+0xcf/0x230 [ 728.291015][T17576] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 728.291048][T17576] ? alloc_fd+0x476/0x790 [ 728.291079][T17576] ? do_raw_spin_unlock+0x145/0x1e0 [ 728.291127][T17576] __anon_inode_getfile+0xe8/0x280 [ 728.291166][T17576] anon_inode_getfile_fmode+0x37/0xa0 [ 728.291203][T17576] __do_sys_fanotify_init+0xa79/0xe50 [ 728.291253][T17576] do_syscall_64+0x106/0xf80 [ 728.291295][T17576] ? clear_bhb_loop+0x40/0x90 [ 728.291333][T17576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 728.291364][T17576] RIP: 0033:0x7fe3fdb9c799 [ 728.291390][T17576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 728.291416][T17576] RSP: 002b:00007fe3fe9f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 728.291445][T17576] RAX: ffffffffffffffda RBX: 00007fe3fde16090 RCX: 00007fe3fdb9c799 [ 728.291465][T17576] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 728.291483][T17576] RBP: 00007fe3fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 728.291502][T17576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 728.291520][T17576] R13: 00007fe3fde16128 R14: 00007fe3fde16090 R15: 00007ffd181bc638 [ 728.291560][T17576] [ 730.154558][T17623] input: f as /devices/virtual/input/input29 [ 730.484802][T17629] FAULT_INJECTION: forcing a failure. [ 730.484802][T17629] name failslab, interval 1, probability 0, space 0, times 0 [ 730.527690][T17629] CPU: 0 UID: 0 PID: 17629 Comm: syz.0.4044 Not tainted syzkaller #0 PREEMPT(full) [ 730.527737][T17629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.527756][T17629] Call Trace: [ 730.527767][T17629] [ 730.527779][T17629] dump_stack_lvl+0x100/0x190 [ 730.527841][T17629] should_fail_ex.cold+0x5/0xa [ 730.527879][T17629] should_failslab+0xc2/0x120 [ 730.527912][T17629] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 730.527957][T17629] ? __pmd_alloc+0xbf/0x950 [ 730.528001][T17629] __pmd_alloc+0xbf/0x950 [ 730.528041][T17629] __handle_mm_fault+0xa99/0x2b60 [ 730.528088][T17629] ? mt_find+0x45e/0x8e0 [ 730.528135][T17629] ? __pfx___handle_mm_fault+0x10/0x10 [ 730.528175][T17629] ? __pfx_mt_find+0x10/0x10 [ 730.528249][T17629] ? find_vma+0xbf/0x140 [ 730.528278][T17629] ? __pfx_find_vma+0x10/0x10 [ 730.528312][T17629] handle_mm_fault+0x36d/0xa20 [ 730.528362][T17629] do_user_addr_fault+0x74c/0x12f0 [ 730.528422][T17629] exc_page_fault+0x6f/0xd0 [ 730.528466][T17629] asm_exc_page_fault+0x26/0x30 [ 730.528496][T17629] RIP: 0010:__get_user_4+0x14/0x20 [ 730.528531][T17629] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 730.528560][T17629] RSP: 0018:ffffc900035e7ea8 EFLAGS: 00050287 [ 730.528585][T17629] RAX: 0000000000000000 RBX: ffff888037e36e00 RCX: ffffc9001927d000 [ 730.528603][T17629] RDX: 00007ffffffff000 RSI: ffffffff82560071 RDI: ffffffff8c1b0520 [ 730.528621][T17629] RBP: ffff88803aa60000 R08: 0000000000000001 R09: 00000000000001c5 [ 730.528640][T17629] R10: 0000000000000200 R11: 0000000000000000 R12: 0000000000000000 [ 730.528658][T17629] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000244d [ 730.528707][T17629] ? __might_fault+0x111/0x140 [ 730.528769][T17629] __do_sys_setgroups+0x2f3/0x4f0 [ 730.528822][T17629] do_syscall_64+0x106/0xf80 [ 730.528872][T17629] ? clear_bhb_loop+0x40/0x90 [ 730.528911][T17629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.528942][T17629] RIP: 0033:0x7fe6d479c799 [ 730.528968][T17629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.528997][T17629] RSP: 002b:00007fe6d5712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000074 [ 730.529024][T17629] RAX: ffffffffffffffda RBX: 00007fe6d4a15fa0 RCX: 00007fe6d479c799 [ 730.529043][T17629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000244d [ 730.529060][T17629] RBP: 00007fe6d4832c99 R08: 0000000000000000 R09: 0000000000000000 [ 730.529079][T17629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 730.529096][T17629] R13: 00007fe6d4a16038 R14: 00007fe6d4a15fa0 R15: 00007ffc81a67ce8 [ 730.529140][T17629] [ 731.207808][T17641] netlink: 'syz.3.4047': attribute type 1 has an invalid length. [ 731.207842][T17641] netlink: 33 bytes leftover after parsing attributes in process `syz.3.4047'. [ 731.246529][T17644] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4049'. [ 731.285967][T17644] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4049'. [ 731.950094][T17645] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 731.957861][T17645] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 731.965533][T17645] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 731.972982][T17645] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 732.047924][T17652] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 732.188417][T17656] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 732.444377][T17668] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 732.485524][T17669] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 732.502618][T17668] File: /dev/nullb0 PID: 17668 Comm: syz.3.4054 [ 732.620999][T17668] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 732.649743][T17668] File: /dev/nullb0 PID: 17668 Comm: syz.3.4054 [ 733.331993][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 733.972474][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 734.012508][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 734.048204][T17695] pci 0000:00:01.3: enabling device (0000 -> 0001) [ 734.057301][T16756] Bluetooth: hci3: command 0x0c1a tx timeout [ 734.376053][T17695] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 734.389816][T17695] pci 0000:00:01.3: PCI INT A: no GSI [ 735.097771][T17713] zswap: compressor not available [ 735.559154][T17728] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4072'. [ 735.846113][T17720] FAULT_INJECTION: forcing a failure. [ 735.846113][T17720] name failslab, interval 1, probability 0, space 0, times 0 [ 735.983408][T17720] CPU: 1 UID: 0 PID: 17720 Comm: syz.3.4068 Not tainted syzkaller #0 PREEMPT(full) [ 735.983451][T17720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 735.983465][T17720] Call Trace: [ 735.983473][T17720] [ 735.983481][T17720] dump_stack_lvl+0x100/0x190 [ 735.983512][T17720] should_fail_ex.cold+0x5/0xa [ 735.983535][T17720] should_failslab+0xc2/0x120 [ 735.983556][T17720] __kmalloc_cache_noprof+0x7a/0x6f0 [ 735.983580][T17720] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 735.983606][T17720] ? get_mem_cgroup_from_mm+0x88/0x600 [ 735.983640][T17720] ? get_mem_cgroup_from_mm+0x132/0x600 [ 735.983669][T17720] __do_sys_fanotify_init+0x5cf/0xe50 [ 735.983699][T17720] do_syscall_64+0x106/0xf80 [ 735.983725][T17720] ? clear_bhb_loop+0x40/0x90 [ 735.983747][T17720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 735.983767][T17720] RIP: 0033:0x7fc0e8d9c799 [ 735.983787][T17720] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 735.983814][T17720] RSP: 002b:00007fc0e9cae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 735.983844][T17720] RAX: ffffffffffffffda RBX: 00007fc0e9016090 RCX: 00007fc0e8d9c799 [ 735.983862][T17720] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 735.983878][T17720] RBP: 00007fc0e8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 735.983895][T17720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 735.983913][T17720] R13: 00007fc0e9016128 R14: 00007fc0e9016090 R15: 00007fffd4989278 [ 735.983951][T17720] [ 737.377831][T17762] input: f as /devices/virtual/input/input30 [ 737.571996][T17768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4082'. [ 738.611248][T17784] FAULT_INJECTION: forcing a failure. [ 738.611248][T17784] name failslab, interval 1, probability 0, space 0, times 0 [ 738.625278][T17784] CPU: 0 UID: 0 PID: 17784 Comm: syz.1.4088 Not tainted syzkaller #0 PREEMPT(full) [ 738.625306][T17784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 738.625317][T17784] Call Trace: [ 738.625324][T17784] [ 738.625331][T17784] dump_stack_lvl+0x100/0x190 [ 738.625362][T17784] should_fail_ex.cold+0x5/0xa [ 738.625385][T17784] should_failslab+0xc2/0x120 [ 738.625404][T17784] __kmalloc_cache_noprof+0x7a/0x6f0 [ 738.625428][T17784] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 738.625453][T17784] ? get_mem_cgroup_from_mm+0x88/0x600 [ 738.625478][T17784] ? get_mem_cgroup_from_mm+0x132/0x600 [ 738.625506][T17784] __do_sys_fanotify_init+0x5cf/0xe50 [ 738.625537][T17784] do_syscall_64+0x106/0xf80 [ 738.625561][T17784] ? clear_bhb_loop+0x40/0x90 [ 738.625583][T17784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.625603][T17784] RIP: 0033:0x7fe3fdb9c799 [ 738.625619][T17784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 738.625637][T17784] RSP: 002b:00007fe3fe9f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 738.625656][T17784] RAX: ffffffffffffffda RBX: 00007fe3fde16090 RCX: 00007fe3fdb9c799 [ 738.625667][T17784] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 738.625678][T17784] RBP: 00007fe3fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 738.625689][T17784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 738.625699][T17784] R13: 00007fe3fde16128 R14: 00007fe3fde16090 R15: 00007ffd181bc638 [ 738.625720][T17784] [ 739.972612][ T30] audit: type=1800 audit(4295024978.277:8): pid=17819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4096" name="dbroot" dev="configfs" ino=71088 res=0 errno=0 [ 740.524769][T17834] vivid-007: ================= START STATUS ================= [ 740.532903][T17834] vivid-007: Generate PTS: true [ 740.572240][T17834] vivid-007: Generate SCR: true [ 740.580215][T17834] tpg source WxH: 320x240 (Y'CbCr) [ 740.587635][T17834] tpg field: 1 [ 740.593053][T17834] tpg crop: (0,0)/320x240 [ 740.602518][T17834] tpg compose: (0,0)/320x240 [ 740.613515][T17834] tpg colorspace: 8 [ 740.644591][T17834] tpg transfer function: 0/0 [ 740.674272][T17834] tpg Y'CbCr encoding: 0/0 [ 740.680704][T17834] tpg quantization: 0/0 [ 740.773529][T17834] tpg RGB range: 0/2 [ 740.782695][T17834] vivid-007: ================== END STATUS ================== [ 741.850725][T17860] FAULT_INJECTION: forcing a failure. [ 741.850725][T17860] name failslab, interval 1, probability 0, space 0, times 0 [ 741.900880][T17860] CPU: 0 UID: 0 PID: 17860 Comm: syz.0.4109 Not tainted syzkaller #0 PREEMPT(full) [ 741.900922][T17860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 741.900940][T17860] Call Trace: [ 741.900952][T17860] [ 741.900963][T17860] dump_stack_lvl+0x100/0x190 [ 741.901013][T17860] should_fail_ex.cold+0x5/0xa [ 741.901051][T17860] should_failslab+0xc2/0x120 [ 741.901084][T17860] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 741.901130][T17860] ? __d_alloc+0x34/0xa80 [ 741.901173][T17860] __d_alloc+0x34/0xa80 [ 741.901211][T17860] d_alloc_pseudo+0x1c/0xc0 [ 741.901255][T17860] alloc_file_pseudo+0xcf/0x230 [ 741.901295][T17860] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 741.901331][T17860] ? alloc_fd+0x476/0x790 [ 741.901362][T17860] ? do_raw_spin_unlock+0x145/0x1e0 [ 741.901413][T17860] __anon_inode_getfile+0xe8/0x280 [ 741.901455][T17860] anon_inode_getfile_fmode+0x37/0xa0 [ 741.901494][T17860] __do_sys_fanotify_init+0xa79/0xe50 [ 741.901545][T17860] do_syscall_64+0x106/0xf80 [ 741.901585][T17860] ? clear_bhb_loop+0x40/0x90 [ 741.901621][T17860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 741.901654][T17860] RIP: 0033:0x7fe6d479c799 [ 741.901681][T17860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 741.901709][T17860] RSP: 002b:00007fe6d56f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 741.901750][T17860] RAX: ffffffffffffffda RBX: 00007fe6d4a16090 RCX: 00007fe6d479c799 [ 741.901774][T17860] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 741.901791][T17860] RBP: 00007fe6d4832c99 R08: 0000000000000000 R09: 0000000000000000 [ 741.901808][T17860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 741.901825][T17860] R13: 00007fe6d4a16128 R14: 00007fe6d4a16090 R15: 00007ffc81a67ce8 [ 741.901867][T17860] [ 742.928601][T17871] FAULT_INJECTION: forcing a failure. [ 742.928601][T17871] name failslab, interval 1, probability 0, space 0, times 0 [ 742.950425][T17871] CPU: 1 UID: 0 PID: 17871 Comm: syz.2.4111 Not tainted syzkaller #0 PREEMPT(full) [ 742.950469][T17871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.950488][T17871] Call Trace: [ 742.950496][T17871] [ 742.950507][T17871] dump_stack_lvl+0x100/0x190 [ 742.950556][T17871] should_fail_ex.cold+0x5/0xa [ 742.950592][T17871] should_failslab+0xc2/0x120 [ 742.950623][T17871] __kmalloc_cache_noprof+0x7a/0x6f0 [ 742.950662][T17871] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 742.950707][T17871] ? get_mem_cgroup_from_mm+0x88/0x600 [ 742.950752][T17871] ? get_mem_cgroup_from_mm+0x132/0x600 [ 742.950800][T17871] __do_sys_fanotify_init+0x5cf/0xe50 [ 742.950855][T17871] do_syscall_64+0x106/0xf80 [ 742.950909][T17871] ? clear_bhb_loop+0x40/0x90 [ 742.950948][T17871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.950982][T17871] RIP: 0033:0x7f1a0059c799 [ 742.951010][T17871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.951042][T17871] RSP: 002b:00007f1a01425028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 742.951074][T17871] RAX: ffffffffffffffda RBX: 00007f1a00816090 RCX: 00007f1a0059c799 [ 742.951095][T17871] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 742.951115][T17871] RBP: 00007f1a00632c99 R08: 0000000000000000 R09: 0000000000000000 [ 742.951134][T17871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.951153][T17871] R13: 00007f1a00816128 R14: 00007f1a00816090 R15: 00007fff484fe118 [ 742.951193][T17871] [ 743.565670][T17885] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 744.125925][T17903] FAULT_INJECTION: forcing a failure. [ 744.125925][T17903] name failslab, interval 1, probability 0, space 0, times 0 [ 744.142718][T17903] CPU: 0 UID: 0 PID: 17903 Comm: syz.1.4121 Not tainted syzkaller #0 PREEMPT(full) [ 744.142761][T17903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.142776][T17903] Call Trace: [ 744.142787][T17903] [ 744.142798][T17903] dump_stack_lvl+0x100/0x190 [ 744.142849][T17903] should_fail_ex.cold+0x5/0xa [ 744.142884][T17903] ? alloc_pipe_info+0x1ec/0x590 [ 744.142914][T17903] should_failslab+0xc2/0x120 [ 744.142947][T17903] __kmalloc_noprof+0xe0/0x850 [ 744.143002][T17903] alloc_pipe_info+0x1ec/0x590 [ 744.143037][T17903] create_pipe_files+0x8c/0x970 [ 744.143073][T17903] do_pipe2+0xbd/0x1e0 [ 744.143102][T17903] ? __pfx_do_pipe2+0x10/0x10 [ 744.143148][T17903] __x64_sys_pipe+0x33/0x50 [ 744.143178][T17903] do_syscall_64+0x106/0xf80 [ 744.143219][T17903] ? clear_bhb_loop+0x40/0x90 [ 744.143257][T17903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.143288][T17903] RIP: 0033:0x7fe3fdb9c799 [ 744.143314][T17903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.143344][T17903] RSP: 002b:00007fe3fea11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 744.143373][T17903] RAX: ffffffffffffffda RBX: 00007fe3fde15fa0 RCX: 00007fe3fdb9c799 [ 744.143393][T17903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 744.143410][T17903] RBP: 00007fe3fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 744.143428][T17903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.143446][T17903] R13: 00007fe3fde16038 R14: 00007fe3fde15fa0 R15: 00007ffd181bc638 [ 744.143489][T17903] [ 744.480087][T17910] syz.2.4124 (17910): /proc/17909/oom_adj is deprecated, please use /proc/17909/oom_score_adj instead. [ 744.932835][T17914] FAULT_INJECTION: forcing a failure. [ 744.932835][T17914] name failslab, interval 1, probability 0, space 0, times 0 [ 744.945779][T17914] CPU: 0 UID: 0 PID: 17914 Comm: syz.1.4125 Not tainted syzkaller #0 PREEMPT(full) [ 744.945823][T17914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.945841][T17914] Call Trace: [ 744.945861][T17914] [ 744.945872][T17914] dump_stack_lvl+0x100/0x190 [ 744.945922][T17914] should_fail_ex.cold+0x5/0xa [ 744.945960][T17914] should_failslab+0xc2/0x120 [ 744.945991][T17914] __kmalloc_cache_noprof+0x7a/0x6f0 [ 744.946029][T17914] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 744.946073][T17914] ? get_mem_cgroup_from_mm+0x88/0x600 [ 744.946116][T17914] ? get_mem_cgroup_from_mm+0x132/0x600 [ 744.946164][T17914] __do_sys_fanotify_init+0x5cf/0xe50 [ 744.946215][T17914] do_syscall_64+0x106/0xf80 [ 744.946255][T17914] ? clear_bhb_loop+0x40/0x90 [ 744.946291][T17914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.946324][T17914] RIP: 0033:0x7fe3fdb9c799 [ 744.946349][T17914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.946378][T17914] RSP: 002b:00007fe3fe9f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 744.946408][T17914] RAX: ffffffffffffffda RBX: 00007fe3fde16090 RCX: 00007fe3fdb9c799 [ 744.946428][T17914] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 744.946447][T17914] RBP: 00007fe3fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 744.946464][T17914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 744.946480][T17914] R13: 00007fe3fde16128 R14: 00007fe3fde16090 R15: 00007ffd181bc638 [ 744.946520][T17914] [ 746.294998][T17954] vivid-007: ================= START STATUS ================= [ 746.306167][T17954] vivid-007: Generate PTS: true [ 746.332098][T17954] vivid-007: Generate SCR: true [ 746.337181][T17954] tpg source WxH: 320x240 (Y'CbCr) [ 746.345053][T17954] tpg field: 1 [ 746.351036][T17954] tpg crop: (0,0)/320x240 [ 746.357062][T17954] tpg compose: (0,0)/320x240 [ 746.363611][T17954] tpg colorspace: 8 [ 746.369755][T17954] tpg transfer function: 0/0 [ 746.374735][T17954] tpg Y'CbCr encoding: 0/0 [ 746.419366][T17954] tpg quantization: 0/0 [ 746.441058][T17954] tpg RGB range: 0/2 [ 746.480987][T17954] vivid-007: ================== END STATUS ================== [ 746.555432][T17960] random: crng reseeded on system resumption [ 746.677947][T17962] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 747.295424][T17972] block2mtd: illegal erase size [ 747.341352][T17971] delete_channel: no stack [ 747.753524][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.764302][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.514711][T17988] FAULT_INJECTION: forcing a failure. [ 748.514711][T17988] name failslab, interval 1, probability 0, space 0, times 0 [ 748.547819][T17988] CPU: 0 UID: 0 PID: 17988 Comm: syz.1.4142 Not tainted syzkaller #0 PREEMPT(full) [ 748.547861][T17988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 748.547877][T17988] Call Trace: [ 748.547887][T17988] [ 748.547897][T17988] dump_stack_lvl+0x100/0x190 [ 748.547951][T17988] should_fail_ex.cold+0x5/0xa [ 748.547985][T17988] should_failslab+0xc2/0x120 [ 748.548017][T17988] __kmalloc_cache_noprof+0x7a/0x6f0 [ 748.548055][T17988] ? __do_sys_fanotify_init+0x690/0xe50 [ 748.548105][T17988] __do_sys_fanotify_init+0x690/0xe50 [ 748.548157][T17988] do_syscall_64+0x106/0xf80 [ 748.548200][T17988] ? clear_bhb_loop+0x40/0x90 [ 748.548239][T17988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.548272][T17988] RIP: 0033:0x7fe3fdb9c799 [ 748.548300][T17988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.548331][T17988] RSP: 002b:00007fe3fe9f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 748.548363][T17988] RAX: ffffffffffffffda RBX: 00007fe3fde16090 RCX: 00007fe3fdb9c799 [ 748.548383][T17988] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 748.548402][T17988] RBP: 00007fe3fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 748.548420][T17988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.548438][T17988] R13: 00007fe3fde16128 R14: 00007fe3fde16090 R15: 00007ffd181bc638 [ 748.548478][T17988] [ 749.229728][T18003] netlink: ct family unspecified [ 749.380724][T18006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4145'. [ 750.141995][T18025] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 750.185488][T18025] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 750.291109][T18026] ptrace attach of "./syz-executor exec"[13729] was attempted by ""[18026] [ 752.016094][T18055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4155'. [ 752.150750][T18055] macsec0: entered promiscuous mode [ 752.188235][T18055] macsec0: entered allmulticast mode [ 752.406643][T18062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4165'. [ 752.618700][T18068] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(4) [ 752.732938][T18067] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4159'. [ 754.351381][ T30] audit: type=1800 audit(4295024992.650:9): pid=18104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4170" name="dummy_udc" dev="gadgetfs" ino=7133 res=0 errno=0 [ 754.670351][T18115] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 755.624713][T18126] zswap: compressor not available [ 756.310427][T18140] FAULT_INJECTION: forcing a failure. [ 756.310427][T18140] name failslab, interval 1, probability 0, space 0, times 0 [ 756.581986][T18140] CPU: 0 UID: 0 PID: 18140 Comm: syz.1.4179 Not tainted syzkaller #0 PREEMPT(full) [ 756.582032][T18140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.582051][T18140] Call Trace: [ 756.582062][T18140] [ 756.582075][T18140] dump_stack_lvl+0x100/0x190 [ 756.582129][T18140] should_fail_ex.cold+0x5/0xa [ 756.582165][T18140] should_failslab+0xc2/0x120 [ 756.582199][T18140] __kmalloc_cache_noprof+0x7a/0x6f0 [ 756.582240][T18140] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 756.582285][T18140] ? get_mem_cgroup_from_mm+0x88/0x600 [ 756.582329][T18140] ? get_mem_cgroup_from_mm+0x132/0x600 [ 756.582389][T18140] __do_sys_fanotify_init+0x5cf/0xe50 [ 756.582443][T18140] do_syscall_64+0x106/0xf80 [ 756.582485][T18140] ? clear_bhb_loop+0x40/0x90 [ 756.582522][T18140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.582553][T18140] RIP: 0033:0x7fe3fdb9c799 [ 756.582581][T18140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.582612][T18140] RSP: 002b:00007fe3fe9f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 756.582644][T18140] RAX: ffffffffffffffda RBX: 00007fe3fde16090 RCX: 00007fe3fdb9c799 [ 756.582665][T18140] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 756.582683][T18140] RBP: 00007fe3fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 756.582702][T18140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 756.582719][T18140] R13: 00007fe3fde16128 R14: 00007fe3fde16090 R15: 00007ffd181bc638 [ 756.582767][T18140] [ 757.008302][T18154] deleting an unspecified loop device is not supported. [ 757.449452][T18162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4185'. [ 758.551033][T18168] zswap: compressor not available [ 759.993477][T16756] Bluetooth: hci4: Unable to find connection for big 0xd2 [ 760.708230][T18196] FAULT_INJECTION: forcing a failure. [ 760.708230][T18196] name failslab, interval 1, probability 0, space 0, times 0 [ 760.721297][T18196] CPU: 1 UID: 0 PID: 18196 Comm: syz.1.4194 Not tainted syzkaller #0 PREEMPT(full) [ 760.721323][T18196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 760.721335][T18196] Call Trace: [ 760.721342][T18196] [ 760.721349][T18196] dump_stack_lvl+0x100/0x190 [ 760.721380][T18196] should_fail_ex.cold+0x5/0xa [ 760.721401][T18196] should_failslab+0xc2/0x120 [ 760.721420][T18196] __kmalloc_cache_noprof+0x7a/0x6f0 [ 760.721496][T18196] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 760.721523][T18196] ? get_mem_cgroup_from_mm+0x88/0x600 [ 760.721549][T18196] ? get_mem_cgroup_from_mm+0x132/0x600 [ 760.721578][T18196] __do_sys_fanotify_init+0x5cf/0xe50 [ 760.721609][T18196] do_syscall_64+0x106/0xf80 [ 760.721634][T18196] ? clear_bhb_loop+0x40/0x90 [ 760.721656][T18196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.721676][T18196] RIP: 0033:0x7fe3fdb9c799 [ 760.721694][T18196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.721711][T18196] RSP: 002b:00007fe3fe9f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 760.721729][T18196] RAX: ffffffffffffffda RBX: 00007fe3fde16090 RCX: 00007fe3fdb9c799 [ 760.721741][T18196] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 760.721761][T18196] RBP: 00007fe3fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 760.721772][T18196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.721782][T18196] R13: 00007fe3fde16128 R14: 00007fe3fde16090 R15: 00007ffd181bc638 [ 760.721804][T18196] [ 760.899427][T18173] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 760.945855][T16756] Bluetooth: hci4: command 0x0c1a tx timeout [ 760.995977][T18173] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 761.002009][T18173] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 761.110419][T18173] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 761.940852][T18222] netlink: 5151 bytes leftover after parsing attributes in process `syz.3.4201'. [ 763.109989][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 763.116200][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 763.122809][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 763.741639][T18252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4213'. [ 765.063813][T18275] Invalid ELF header magic: != ELF [ 765.110280][T18275] FAULT_INJECTION: forcing a failure. [ 765.110280][T18275] name fail_futex, interval 1, probability 0, space 0, times 0 [ 765.143666][T18275] CPU: 1 UID: 0 PID: 18275 Comm: syz.1.4214 Not tainted syzkaller #0 PREEMPT(full) [ 765.143705][T18275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 765.143716][T18275] Call Trace: [ 765.143723][T18275] [ 765.143731][T18275] dump_stack_lvl+0x100/0x190 [ 765.143762][T18275] should_fail_ex.cold+0x5/0xa [ 765.143784][T18275] get_futex_key+0x1d2/0x1620 [ 765.143809][T18275] ? __pfx_get_futex_key+0x10/0x10 [ 765.143831][T18275] ? find_held_lock+0x2b/0x80 [ 765.143848][T18275] ? futex_wake+0x456/0x530 [ 765.143880][T18275] futex_wake+0xea/0x530 [ 765.143906][T18275] ? __pfx_futex_wait+0x10/0x10 [ 765.143933][T18275] ? __pfx_futex_wake+0x10/0x10 [ 765.143962][T18275] ? vfs_write+0x15d/0x1070 [ 765.143991][T18275] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 765.144016][T18275] do_futex+0x32b/0x350 [ 765.144040][T18275] ? __pfx_do_futex+0x10/0x10 [ 765.144063][T18275] ? cap_task_prctl+0x104/0xa50 [ 765.144094][T18275] __x64_sys_futex+0x34f/0x4d0 [ 765.144120][T18275] ? __pfx___x64_sys_futex+0x10/0x10 [ 765.144142][T18275] ? ksys_write+0x1ac/0x250 [ 765.144157][T18275] ? __pfx_ksys_write+0x10/0x10 [ 765.144179][T18275] do_syscall_64+0x106/0xf80 [ 765.144203][T18275] ? clear_bhb_loop+0x40/0x90 [ 765.144226][T18275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.144246][T18275] RIP: 0033:0x7fe3fdb9c799 [ 765.144261][T18275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.144279][T18275] RSP: 002b:00007fe3fea110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 765.144297][T18275] RAX: ffffffffffffffda RBX: 00007fe3fde15fa8 RCX: 00007fe3fdb9c799 [ 765.144308][T18275] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe3fde15fac [ 765.144319][T18275] RBP: 00007fe3fde15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 765.144330][T18275] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 765.144341][T18275] R13: 00007fe3fde16038 R14: 00007ffd181bc550 R15: 00007ffd181bc638 [ 765.144363][T18275] [ 765.598904][T18278] FAULT_INJECTION: forcing a failure. [ 765.598904][T18278] name failslab, interval 1, probability 0, space 0, times 0 [ 765.704124][T18278] CPU: 0 UID: 0 PID: 18278 Comm: syz.2.4215 Not tainted syzkaller #0 PREEMPT(full) [ 765.704153][T18278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 765.704163][T18278] Call Trace: [ 765.704170][T18278] [ 765.704178][T18278] dump_stack_lvl+0x100/0x190 [ 765.704209][T18278] should_fail_ex.cold+0x5/0xa [ 765.704231][T18278] should_failslab+0xc2/0x120 [ 765.704250][T18278] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 765.704277][T18278] ? __d_alloc+0x34/0xa80 [ 765.704301][T18278] __d_alloc+0x34/0xa80 [ 765.704322][T18278] d_alloc_pseudo+0x1c/0xc0 [ 765.704347][T18278] alloc_file_pseudo+0xcf/0x230 [ 765.704371][T18278] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 765.704398][T18278] ? alloc_fd+0x476/0x790 [ 765.704417][T18278] ? do_raw_spin_unlock+0x145/0x1e0 [ 765.704446][T18278] __anon_inode_getfile+0xe8/0x280 [ 765.704469][T18278] anon_inode_getfile_fmode+0x37/0xa0 [ 765.704492][T18278] __do_sys_fanotify_init+0xa79/0xe50 [ 765.704522][T18278] do_syscall_64+0x106/0xf80 [ 765.704546][T18278] ? clear_bhb_loop+0x40/0x90 [ 765.704568][T18278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 765.704586][T18278] RIP: 0033:0x7f1a0059c799 [ 765.704601][T18278] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 765.704619][T18278] RSP: 002b:00007f1a01425028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 765.704637][T18278] RAX: ffffffffffffffda RBX: 00007f1a00816090 RCX: 00007f1a0059c799 [ 765.704649][T18278] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 765.704660][T18278] RBP: 00007f1a00632c99 R08: 0000000000000000 R09: 0000000000000000 [ 765.704671][T18278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 765.704681][T18278] R13: 00007f1a00816128 R14: 00007f1a00816090 R15: 00007fff484fe118 [ 765.704704][T18278] [ 765.902763][T18283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4216'. [ 766.794423][T18299] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 766.861446][T18299] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 766.907340][T18299] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 766.933454][T18299] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 768.496529][T18334] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 768.642799][T18340] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 768.780237][T18344] netlink: 342 bytes leftover after parsing attributes in process `syz.0.4231'. [ 768.791806][ T5828] Bluetooth: hci4: command 0x0c1a tx timeout [ 768.879793][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 768.949761][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 768.955857][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 773.558555][T18449] FAULT_INJECTION: forcing a failure. [ 773.558555][T18449] name failslab, interval 1, probability 0, space 0, times 0 [ 773.609262][T18449] CPU: 0 UID: 0 PID: 18449 Comm: syz.1.4260 Not tainted syzkaller #0 PREEMPT(full) [ 773.609302][T18449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.609319][T18449] Call Trace: [ 773.609328][T18449] [ 773.609339][T18449] dump_stack_lvl+0x100/0x190 [ 773.609387][T18449] should_fail_ex.cold+0x5/0xa [ 773.609422][T18449] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 773.609529][T18449] should_failslab+0xc2/0x120 [ 773.609560][T18449] __kmalloc_noprof+0xe0/0x850 [ 773.609613][T18449] kernfs_fop_write_iter+0x26a/0x5f0 [ 773.609650][T18449] vfs_write+0x6ac/0x1070 [ 773.609695][T18449] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 773.609729][T18449] ? __pfx_vfs_write+0x10/0x10 [ 773.609800][T18449] ksys_write+0x12a/0x250 [ 773.609826][T18449] ? __pfx_ksys_write+0x10/0x10 [ 773.609867][T18449] do_syscall_64+0x106/0xf80 [ 773.609905][T18449] ? clear_bhb_loop+0x40/0x90 [ 773.609942][T18449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.609972][T18449] RIP: 0033:0x7fe3fdb9c799 [ 773.609998][T18449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.610025][T18449] RSP: 002b:00007fe3fea11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 773.610055][T18449] RAX: ffffffffffffffda RBX: 00007fe3fde15fa0 RCX: 00007fe3fdb9c799 [ 773.610074][T18449] RDX: 0000000000000085 RSI: 00002000000000c0 RDI: 0000000000000003 [ 773.610090][T18449] RBP: 00007fe3fea11090 R08: 0000000000000000 R09: 0000000000000000 [ 773.610108][T18449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.610124][T18449] R13: 00007fe3fde16038 R14: 00007fe3fde15fa0 R15: 00007ffd181bc638 [ 773.610167][T18449] [ 774.344328][T18451] Invalid ELF header magic: != ELF [ 774.392255][T18451] FAULT_INJECTION: forcing a failure. [ 774.392255][T18451] name fail_futex, interval 1, probability 0, space 0, times 0 [ 774.468086][T18451] CPU: 1 UID: 0 PID: 18451 Comm: syz.0.4261 Not tainted syzkaller #0 PREEMPT(full) [ 774.468128][T18451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 774.468145][T18451] Call Trace: [ 774.468154][T18451] [ 774.468165][T18451] dump_stack_lvl+0x100/0x190 [ 774.468208][T18451] should_fail_ex.cold+0x5/0xa [ 774.468236][T18451] get_futex_key+0x1d2/0x1620 [ 774.468269][T18451] ? __pfx_get_futex_key+0x10/0x10 [ 774.468296][T18451] ? futex_hash+0x2c5/0x380 [ 774.468334][T18451] futex_wake+0xea/0x530 [ 774.468378][T18451] ? __pfx_futex_wait+0x10/0x10 [ 774.468411][T18451] ? __pfx_kernel_waitid+0x10/0x10 [ 774.468443][T18451] ? __pfx_futex_wake+0x10/0x10 [ 774.468481][T18451] ? vfs_write+0x15d/0x1070 [ 774.468518][T18451] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 774.468551][T18451] do_futex+0x32b/0x350 [ 774.468581][T18451] ? __pfx_do_futex+0x10/0x10 [ 774.468612][T18451] ? cap_task_prctl+0x104/0xa50 [ 774.468655][T18451] __x64_sys_futex+0x34f/0x4d0 [ 774.468690][T18451] ? __pfx___x64_sys_futex+0x10/0x10 [ 774.468718][T18451] ? ksys_write+0x1ac/0x250 [ 774.468739][T18451] ? __pfx_ksys_write+0x10/0x10 [ 774.468769][T18451] do_syscall_64+0x106/0xf80 [ 774.468801][T18451] ? clear_bhb_loop+0x40/0x90 [ 774.468830][T18451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.468854][T18451] RIP: 0033:0x7fe6d479c799 [ 774.468873][T18451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.468896][T18451] RSP: 002b:00007fe6d57120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 774.468919][T18451] RAX: ffffffffffffffda RBX: 00007fe6d4a15fa8 RCX: 00007fe6d479c799 [ 774.468934][T18451] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe6d4a15fac [ 774.468948][T18451] RBP: 00007fe6d4a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 774.468962][T18451] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 774.468976][T18451] R13: 00007fe6d4a16038 R14: 00007ffc81a67c00 R15: 00007ffc81a67ce8 [ 774.469007][T18451] [ 775.703350][T18477] zswap: compressor not available [ 775.742020][T18486] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 777.951340][T18526] zswap: compressor not available [ 778.100451][T18538] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(7.4194304.67108862), cmd(12) [ 779.466122][T18565] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 779.496372][T18565] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 779.517351][T18565] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 779.591490][T18565] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 779.615687][T18568] veth1_to_batadv: entered promiscuous mode [ 779.643453][T18567] veth1_to_batadv: left promiscuous mode [ 780.507057][T18574] zswap: compressor not available [ 780.945863][T18586] misc userio: Invalid payload size [ 781.517257][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 781.517811][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 781.581755][T18603] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 781.595854][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 781.595866][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 782.435152][T18615] zswap: compressor not available [ 783.274086][T18639] zswap: compressor not available [ 784.117897][T18665] zswap: compressor not available [ 784.324789][T18672] random: crng reseeded on system resumption [ 784.601431][T18679] smpboot: CPU 1 is now offline [ 784.671343][T18684] nbd: socks must be embedded in a SOCK_ITEM attr [ 784.703975][T18684] block nbd0: shutting down sockets [ 785.152868][T18700] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4326'. [ 785.294062][T18700] HfR: entered promiscuous mode [ 786.333090][T18717] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 786.476724][T18720] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 786.529604][T18720] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 787.422623][T18740] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 787.472090][T18742] input: f as /devices/virtual/input/input31 [ 787.629255][T18742] FAULT_INJECTION: forcing a failure. [ 787.629255][T18742] name failslab, interval 1, probability 0, space 0, times 0 [ 787.719274][T18742] CPU: 0 UID: 0 PID: 18742 Comm: syz.3.4339 Not tainted syzkaller #0 PREEMPT(full) [ 787.719301][T18742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 787.719312][T18742] Call Trace: [ 787.719318][T18742] [ 787.719325][T18742] dump_stack_lvl+0x100/0x190 [ 787.719357][T18742] should_fail_ex.cold+0x5/0xa [ 787.719378][T18742] should_failslab+0xc2/0x120 [ 787.719397][T18742] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 787.719426][T18742] ? kasprintf+0xc7/0x100 [ 787.719451][T18742] kvasprintf+0xbc/0x150 [ 787.719471][T18742] ? __pfx_kvasprintf+0x10/0x10 [ 787.719498][T18742] ? sysfs_remove_group+0xc6/0x1b0 [ 787.719525][T18742] ? evdev_disconnect+0x40/0xb0 [ 787.719550][T18742] ? __input_unregister_device+0x226/0x4d0 [ 787.719577][T18742] ? input_unregister_device+0xc2/0x110 [ 787.719605][T18742] ? uinput_destroy_device+0x1f9/0x260 [ 787.719624][T18742] ? uinput_release+0x34/0x50 [ 787.719641][T18742] ? __fput+0x3ff/0xb40 [ 787.719659][T18742] ? task_work_run+0x150/0x240 [ 787.719684][T18742] ? get_signal+0x1bd/0x21e0 [ 787.719704][T18742] kasprintf+0xc7/0x100 [ 787.719724][T18742] ? __pfx_kasprintf+0x10/0x10 [ 787.719753][T18742] ? __pfx_input_devnode+0x10/0x10 [ 787.719775][T18742] device_get_devnode+0x166/0x2c0 [ 787.719799][T18742] devtmpfs_delete_node+0xc8/0x1d0 [ 787.719818][T18742] ? __pfx_devtmpfs_delete_node+0x10/0x10 [ 787.719847][T18742] ? kobject_put+0xb9/0x640 [ 787.719875][T18742] ? __pfx_klist_children_put+0x10/0x10 [ 787.719900][T18742] ? klist_children_put+0x49/0x60 [ 787.719923][T18742] ? klist_put+0x10a/0x1d0 [ 787.719949][T18742] device_del+0x717/0x9b0 [ 787.719979][T18742] ? __pfx_device_del+0x10/0x10 [ 787.720009][T18742] ? find_held_lock+0x2b/0x80 [ 787.720029][T18742] cdev_device_del+0x1d/0x110 [ 787.720048][T18742] evdev_disconnect+0x40/0xb0 [ 787.720074][T18742] __input_unregister_device+0x226/0x4d0 [ 787.720105][T18742] input_unregister_device+0xc2/0x110 [ 787.720134][T18742] uinput_destroy_device+0x1f9/0x260 [ 787.720155][T18742] ? __pfx_uinput_release+0x10/0x10 [ 787.720175][T18742] uinput_release+0x34/0x50 [ 787.720193][T18742] __fput+0x3ff/0xb40 [ 787.720218][T18742] task_work_run+0x150/0x240 [ 787.720244][T18742] ? __pfx_task_work_run+0x10/0x10 [ 787.720276][T18742] get_signal+0x1bd/0x21e0 [ 787.720301][T18742] ? task_work_add+0x201/0x3b0 [ 787.720327][T18742] ? __pfx_task_work_add+0x10/0x10 [ 787.720352][T18742] ? __pfx_get_signal+0x10/0x10 [ 787.720377][T18742] arch_do_signal_or_restart+0x91/0x770 [ 787.720398][T18742] ? __pfx___file_ref_put+0x10/0x10 [ 787.720427][T18742] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 787.720454][T18742] ? do_readv+0x234/0x340 [ 787.720486][T18742] exit_to_user_mode_loop+0x86/0x4a0 [ 787.720517][T18742] do_syscall_64+0x668/0xf80 [ 787.720540][T18742] ? clear_bhb_loop+0x40/0x90 [ 787.720562][T18742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.720580][T18742] RIP: 0033:0x7fc0e8d9c799 [ 787.720595][T18742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.720612][T18742] RSP: 002b:00007fc0e9ccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 787.720629][T18742] RAX: fffffffffffffe00 RBX: 00007fc0e9015fa0 RCX: 00007fc0e8d9c799 [ 787.720640][T18742] RDX: 0000000000000001 RSI: 0000200000000a80 RDI: 0000000000000003 [ 787.720651][T18742] RBP: 00007fc0e9ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 787.720662][T18742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 787.720672][T18742] R13: 00007fc0e9016038 R14: 00007fc0e9015fa0 R15: 00007fffd4989278 [ 787.720694][T18742] [ 789.501107][T18784] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 790.022836][T18806] vivid-007: ================= START STATUS ================= [ 790.022856][T18806] vivid-007: Generate PTS: true [ 790.022879][T18806] vivid-007: Generate SCR: true [ 790.022899][T18806] tpg source WxH: 320x240 (Y'CbCr) [ 790.022912][T18806] tpg field: 1 [ 790.022919][T18806] tpg crop: (0,0)/320x240 [ 790.022931][T18806] tpg compose: (0,0)/320x240 [ 790.022942][T18806] tpg colorspace: 8 [ 790.022949][T18806] tpg transfer function: 0/0 [ 790.022959][T18806] tpg Y'CbCr encoding: 0/0 [ 790.022967][T18806] tpg quantization: 0/0 [ 790.022975][T18806] tpg RGB range: 0/2 [ 790.022984][T18806] vivid-007: ================== END STATUS ================== [ 790.870021][T18810] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 790.915122][T18810] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 790.953703][T18810] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 790.980654][T18810] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 792.154393][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 792.366397][T18841] [U] / [ 792.809300][ T5826] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 792.954487][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 792.969186][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 793.035729][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 793.700690][T18885] zswap: compressor not available [ 794.030960][T18899] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(7.4194304.67108862), cmd(12) [ 795.949337][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4387'. [ 796.581572][T18937] Invalid ELF header magic: != ELF [ 796.943469][T18946] ICMPv6: process `syz.2.4391' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 798.137616][T18964] netlink: 'syz.2.4395': attribute type 1 has an invalid length. [ 798.401263][T18969] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 799.615328][T18995] FAULT_INJECTION: forcing a failure. [ 799.615328][T18995] name failslab, interval 1, probability 0, space 0, times 0 [ 799.662705][T18995] CPU: 0 UID: 0 PID: 18995 Comm: syz.3.4403 Not tainted syzkaller #0 PREEMPT(full) [ 799.662732][T18995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 799.662742][T18995] Call Trace: [ 799.662748][T18995] [ 799.662755][T18995] dump_stack_lvl+0x100/0x190 [ 799.662786][T18995] should_fail_ex.cold+0x5/0xa [ 799.662806][T18995] should_failslab+0xc2/0x120 [ 799.662825][T18995] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 799.662851][T18995] ? alloc_empty_file+0x55/0x1c0 [ 799.662877][T18995] alloc_empty_file+0x55/0x1c0 [ 799.662899][T18995] alloc_file_pseudo+0x13a/0x230 [ 799.662922][T18995] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 799.662944][T18995] ? alloc_fd+0x476/0x790 [ 799.662964][T18995] sock_alloc_file+0x50/0x210 [ 799.662991][T18995] __sys_socket+0x1c0/0x260 [ 799.663009][T18995] ? exc_page_fault+0x6f/0xd0 [ 799.663032][T18995] ? __pfx___sys_socket+0x10/0x10 [ 799.663053][T18995] ? do_user_addr_fault+0x8d6/0x12f0 [ 799.663084][T18995] __x64_sys_socket+0x72/0xb0 [ 799.663102][T18995] ? lockdep_hardirqs_on+0x78/0x100 [ 799.663126][T18995] do_syscall_64+0x106/0xf80 [ 799.663150][T18995] ? clear_bhb_loop+0x40/0x90 [ 799.663171][T18995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.663189][T18995] RIP: 0033:0x7fc0e8d9e007 [ 799.663203][T18995] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 799.663221][T18995] RSP: 002b:00007fc0e9cacf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 799.663238][T18995] RAX: ffffffffffffffda RBX: 00007fc0e9016090 RCX: 00007fc0e8d9e007 [ 799.663249][T18995] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 799.663259][T18995] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 799.663277][T18995] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 799.663287][T18995] R13: 00007fc0e9016128 R14: 00007fc0e9016090 R15: 00007fffd4989278 [ 799.663309][T18995] [ 799.957708][ T5913] usb usb40-port2: attempt power cycle [ 800.003220][T18997] FAULT_INJECTION: forcing a failure. [ 800.003220][T18997] name failslab, interval 1, probability 0, space 0, times 0 [ 800.092340][T18997] CPU: 0 UID: 0 PID: 18997 Comm: syz.0.4404 Not tainted syzkaller #0 PREEMPT(full) [ 800.092370][T18997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 800.092381][T18997] Call Trace: [ 800.092387][T18997] [ 800.092395][T18997] dump_stack_lvl+0x100/0x190 [ 800.092428][T18997] should_fail_ex.cold+0x5/0xa [ 800.092450][T18997] should_failslab+0xc2/0x120 [ 800.092470][T18997] __kmalloc_cache_noprof+0x7a/0x6f0 [ 800.092494][T18997] ? kernfs_fop_open+0x23d/0xd50 [ 800.092518][T18997] kernfs_fop_open+0x23d/0xd50 [ 800.092542][T18997] do_dentry_open+0x6d8/0x1660 [ 800.092559][T18997] ? __pfx_kernfs_fop_open+0x10/0x10 [ 800.092585][T18997] vfs_open+0x82/0x3f0 [ 800.092610][T18997] path_openat+0x208c/0x31a0 [ 800.092635][T18997] ? __pfx_path_openat+0x10/0x10 [ 800.092662][T18997] do_file_open+0x20e/0x430 [ 800.092682][T18997] ? __pfx_do_file_open+0x10/0x10 [ 800.092715][T18997] ? alloc_fd+0x476/0x790 [ 800.092735][T18997] ? do_getname+0x191/0x390 [ 800.092763][T18997] do_sys_openat2+0x10d/0x1e0 [ 800.092786][T18997] ? __pfx_do_sys_openat2+0x10/0x10 [ 800.092818][T18997] __x64_sys_openat+0x12d/0x210 [ 800.092842][T18997] ? __pfx___x64_sys_openat+0x10/0x10 [ 800.092875][T18997] do_syscall_64+0x106/0xf80 [ 800.092900][T18997] ? clear_bhb_loop+0x40/0x90 [ 800.092921][T18997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.092940][T18997] RIP: 0033:0x7fe6d479c799 [ 800.092955][T18997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.092972][T18997] RSP: 002b:00007fe6d5712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 800.092990][T18997] RAX: ffffffffffffffda RBX: 00007fe6d4a15fa0 RCX: 00007fe6d479c799 [ 800.093002][T18997] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 800.093012][T18997] RBP: 00007fe6d4832c99 R08: 0000000000000000 R09: 0000000000000000 [ 800.093023][T18997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.093033][T18997] R13: 00007fe6d4a16038 R14: 00007fe6d4a15fa0 R15: 00007ffc81a67ce8 [ 800.093055][T18997] [ 800.587289][ T5913] usb usb40-port2: unable to enumerate USB device [ 801.287931][T19019] zswap: compressor not available [ 801.719898][T19036] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4416'. [ 801.753608][T19037] CIFS mount error: No usable UNC path provided in device string! [ 801.753608][T19037] [ 801.807296][T19037] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 802.078587][ T5826] Bluetooth: hci2: SCO packet for unknown connection handle 0 [ 802.109477][T19051] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 802.317961][T19054] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 802.595634][T19053] FAULT_INJECTION: forcing a failure. [ 802.595634][T19053] name failslab, interval 1, probability 0, space 0, times 0 [ 802.668475][T19053] CPU: 0 UID: 0 PID: 19053 Comm: syz.1.4420 Not tainted syzkaller #0 PREEMPT(full) [ 802.668511][T19053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 802.668523][T19053] Call Trace: [ 802.668529][T19053] [ 802.668537][T19053] dump_stack_lvl+0x100/0x190 [ 802.668568][T19053] should_fail_ex.cold+0x5/0xa [ 802.668589][T19053] should_failslab+0xc2/0x120 [ 802.668609][T19053] __kmalloc_cache_noprof+0x7a/0x6f0 [ 802.668633][T19053] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 802.668659][T19053] ? get_mem_cgroup_from_mm+0x88/0x600 [ 802.668684][T19053] ? get_mem_cgroup_from_mm+0x132/0x600 [ 802.668713][T19053] __do_sys_fanotify_init+0x5cf/0xe50 [ 802.668743][T19053] do_syscall_64+0x106/0xf80 [ 802.668768][T19053] ? clear_bhb_loop+0x40/0x90 [ 802.668789][T19053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.668816][T19053] RIP: 0033:0x7fe3fdb9c799 [ 802.668831][T19053] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 802.668848][T19053] RSP: 002b:00007fe3fe9f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 802.668866][T19053] RAX: ffffffffffffffda RBX: 00007fe3fde16090 RCX: 00007fe3fdb9c799 [ 802.668878][T19053] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 802.668889][T19053] RBP: 00007fe3fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 802.668900][T19053] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.668911][T19053] R13: 00007fe3fde16128 R14: 00007fe3fde16090 R15: 00007ffd181bc638 [ 802.668932][T19053] [ 802.960565][T19060] syz.0.4421 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 803.636795][T19077] program syz.2.4425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 803.702755][T19079] program syz.2.4425 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 803.807001][T19074] zswap: compressor not available [ 805.177826][T19101] vivid-007: ================= START STATUS ================= [ 805.216573][T19101] vivid-007: Generate PTS: true [ 805.221515][T19101] vivid-007: Generate SCR: true [ 805.254434][T19101] tpg source WxH: 320x240 (Y'CbCr) [ 805.285826][T19101] tpg field: 1 [ 805.289226][T19101] tpg crop: (0,0)/320x240 [ 805.339863][T19101] tpg compose: (0,0)/320x240 [ 805.365472][T19101] tpg colorspace: 8 [ 805.369306][T19101] tpg transfer function: 0/0 [ 805.418641][T19101] tpg Y'CbCr encoding: 0/0 [ 805.428794][T19101] tpg quantization: 0/0 [ 805.443556][T19101] tpg RGB range: 0/2 [ 805.475682][T19101] vivid-007: ================== END STATUS ================== [ 805.485000][T19117] netlink: 'syz.0.4436': attribute type 2 has an invalid length. [ 806.030891][T19128] zswap: compressor not available [ 807.046335][T19144] FAULT_INJECTION: forcing a failure. [ 807.046335][T19144] name failslab, interval 1, probability 0, space 0, times 0 [ 807.173888][T19144] CPU: 0 UID: 0 PID: 19144 Comm: syz.0.4443 Not tainted syzkaller #0 PREEMPT(full) [ 807.173915][T19144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 807.173926][T19144] Call Trace: [ 807.173933][T19144] [ 807.173940][T19144] dump_stack_lvl+0x100/0x190 [ 807.173971][T19144] should_fail_ex.cold+0x5/0xa [ 807.174015][T19144] should_failslab+0xc2/0x120 [ 807.174035][T19144] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 807.174062][T19144] ? __d_alloc+0x34/0xa80 [ 807.174086][T19144] __d_alloc+0x34/0xa80 [ 807.174107][T19144] d_alloc_pseudo+0x1c/0xc0 [ 807.174132][T19144] alloc_file_pseudo+0xcf/0x230 [ 807.174156][T19144] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 807.174191][T19144] ? alloc_fd+0x476/0x790 [ 807.174209][T19144] ? do_raw_spin_unlock+0x145/0x1e0 [ 807.174239][T19144] __anon_inode_getfile+0xe8/0x280 [ 807.174264][T19144] anon_inode_getfile_fmode+0x37/0xa0 [ 807.174288][T19144] __do_sys_fanotify_init+0xa79/0xe50 [ 807.174320][T19144] do_syscall_64+0x106/0xf80 [ 807.174345][T19144] ? clear_bhb_loop+0x40/0x90 [ 807.174367][T19144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 807.174385][T19144] RIP: 0033:0x7fe6d479c799 [ 807.174401][T19144] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 807.174418][T19144] RSP: 002b:00007fe6d56f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 807.174437][T19144] RAX: ffffffffffffffda RBX: 00007fe6d4a16090 RCX: 00007fe6d479c799 [ 807.174450][T19144] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 807.174460][T19144] RBP: 00007fe6d4832c99 R08: 0000000000000000 R09: 0000000000000000 [ 807.174470][T19144] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 807.174481][T19144] R13: 00007fe6d4a16128 R14: 00007fe6d4a16090 R15: 00007ffc81a67ce8 [ 807.174505][T19144] [ 807.935113][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 807.941577][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.078650][T19162] zswap: compressor not available [ 808.103618][T19166] FAULT_INJECTION: forcing a failure. [ 808.103618][T19166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 808.268469][T19166] CPU: 0 UID: 0 PID: 19166 Comm: syz.2.4449 Not tainted syzkaller #0 PREEMPT(full) [ 808.268495][T19166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 808.268506][T19166] Call Trace: [ 808.268512][T19166] [ 808.268519][T19166] dump_stack_lvl+0x100/0x190 [ 808.268551][T19166] should_fail_ex.cold+0x5/0xa [ 808.268571][T19166] _copy_to_iter+0x1f3/0x1720 [ 808.268596][T19166] ? __pfx__copy_to_iter+0x10/0x10 [ 808.268615][T19166] ? kernfs_seq_stop+0xcd/0x120 [ 808.268638][T19166] ? kernfs_put_active+0x93/0xe0 [ 808.268667][T19166] seq_read_iter+0xdab/0x1270 [ 808.268708][T19166] kernfs_fop_read_iter+0x46c/0x610 [ 808.268727][T19166] ? rw_verify_area+0xce/0x6d0 [ 808.268752][T19166] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 808.268773][T19166] vfs_read+0x825/0xb30 [ 808.268806][T19166] ? __pfx_vfs_read+0x10/0x10 [ 808.268850][T19166] ksys_read+0x12a/0x250 [ 808.268881][T19166] ? __pfx_ksys_read+0x10/0x10 [ 808.268923][T19166] do_syscall_64+0x106/0xf80 [ 808.268947][T19166] ? clear_bhb_loop+0x40/0x90 [ 808.268969][T19166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 808.268987][T19166] RIP: 0033:0x7f1a0059c799 [ 808.269002][T19166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 808.269019][T19166] RSP: 002b:00007f1a01425028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 808.269037][T19166] RAX: ffffffffffffffda RBX: 00007f1a00816090 RCX: 00007f1a0059c799 [ 808.269048][T19166] RDX: 0000000000000800 RSI: 0000000000000000 RDI: 0000000000000004 [ 808.269058][T19166] RBP: 00007f1a01425090 R08: 0000000000000000 R09: 0000000000000000 [ 808.269068][T19166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 808.269078][T19166] R13: 00007f1a00816128 R14: 00007f1a00816090 R15: 00007fff484fe118 [ 808.269101][T19166] [ 808.834885][T19168] zswap: compressor not available [ 808.858508][T19176] random: crng reseeded on system resumption [ 810.243737][T19201] Invalid ELF header magic: != ELF [ 810.665881][T19196] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 811.157572][T19207] input: 00 [ 811.157572][T19207] as /devices/virtual/input/input32 [ 811.666689][T19214] FAULT_INJECTION: forcing a failure. [ 811.666689][T19214] name failslab, interval 1, probability 0, space 0, times 0 [ 811.724497][T19214] CPU: 0 UID: 0 PID: 19214 Comm: syz.3.4460 Not tainted syzkaller #0 PREEMPT(full) [ 811.724525][T19214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 811.724536][T19214] Call Trace: [ 811.724543][T19214] [ 811.724550][T19214] dump_stack_lvl+0x100/0x190 [ 811.724582][T19214] should_fail_ex.cold+0x5/0xa [ 811.724602][T19214] ? tomoyo_realpath_from_path+0xb6/0x690 [ 811.724626][T19214] should_failslab+0xc2/0x120 [ 811.724645][T19214] __kmalloc_noprof+0xe0/0x850 [ 811.724677][T19214] tomoyo_realpath_from_path+0xb6/0x690 [ 811.724707][T19214] tomoyo_path_number_perm+0x23c/0x580 [ 811.724726][T19214] ? tomoyo_path_number_perm+0x22e/0x580 [ 811.724747][T19214] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 811.724788][T19214] ? find_held_lock+0x2b/0x80 [ 811.724804][T19214] ? __fget_files+0x215/0x3d0 [ 811.724820][T19214] ? hook_file_ioctl_common+0x146/0x410 [ 811.724844][T19214] ? __fget_files+0x21f/0x3d0 [ 811.724864][T19214] security_file_ioctl+0xd3/0x230 [ 811.724886][T19214] __x64_sys_ioctl+0xb7/0x210 [ 811.724914][T19214] do_syscall_64+0x106/0xf80 [ 811.724939][T19214] ? clear_bhb_loop+0x40/0x90 [ 811.724961][T19214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 811.724980][T19214] RIP: 0033:0x7fc0e8d9c799 [ 811.724995][T19214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 811.725013][T19214] RSP: 002b:00007fc0e9ccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 811.725031][T19214] RAX: ffffffffffffffda RBX: 00007fc0e9015fa0 RCX: 00007fc0e8d9c799 [ 811.725043][T19214] RDX: 00002000000001c0 RSI: 00000000c0505510 RDI: 0000000000000003 [ 811.725054][T19214] RBP: 00007fc0e9ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 811.725064][T19214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 811.725074][T19214] R13: 00007fc0e9016038 R14: 00007fc0e9015fa0 R15: 00007fffd4989278 [ 811.725097][T19214] [ 811.725105][T19214] ERROR: Out of memory at tomoyo_realpath_from_path. [ 812.287061][T19220] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4462'. [ 812.721273][T19226] zswap: compressor not available [ 814.792536][T19260] FAULT_INJECTION: forcing a failure. [ 814.792536][T19260] name failslab, interval 1, probability 0, space 0, times 0 [ 814.941386][T19260] CPU: 0 UID: 0 PID: 19260 Comm: syz.3.4471 Not tainted syzkaller #0 PREEMPT(full) [ 814.941415][T19260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 814.941427][T19260] Call Trace: [ 814.941434][T19260] [ 814.941444][T19260] dump_stack_lvl+0x100/0x190 [ 814.941477][T19260] should_fail_ex.cold+0x5/0xa [ 814.941499][T19260] should_failslab+0xc2/0x120 [ 814.941519][T19260] __kmalloc_cache_noprof+0x7a/0x6f0 [ 814.941543][T19260] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 814.941570][T19260] ? get_mem_cgroup_from_mm+0x88/0x600 [ 814.941596][T19260] ? get_mem_cgroup_from_mm+0x132/0x600 [ 814.941625][T19260] __do_sys_fanotify_init+0x5cf/0xe50 [ 814.941657][T19260] do_syscall_64+0x106/0xf80 [ 814.941682][T19260] ? clear_bhb_loop+0x40/0x90 [ 814.941714][T19260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 814.941734][T19260] RIP: 0033:0x7fc0e8d9c799 [ 814.941751][T19260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 814.941771][T19260] RSP: 002b:00007fc0e9cae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 814.941792][T19260] RAX: ffffffffffffffda RBX: 00007fc0e9016090 RCX: 00007fc0e8d9c799 [ 814.941805][T19260] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 814.941816][T19260] RBP: 00007fc0e8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 814.941827][T19260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 814.941838][T19260] R13: 00007fc0e9016128 R14: 00007fc0e9016090 R15: 00007fffd4989278 [ 814.941861][T19260] [ 815.262230][T19271] Invalid ELF header magic: != ELF [ 815.644474][T19277] FAULT_INJECTION: forcing a failure. [ 815.644474][T19277] name fail_futex, interval 1, probability 0, space 0, times 0 [ 815.678984][T19277] CPU: 0 UID: 0 PID: 19277 Comm: syz.0.4476 Not tainted syzkaller #0 PREEMPT(full) [ 815.679012][T19277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 815.679023][T19277] Call Trace: [ 815.679030][T19277] [ 815.679037][T19277] dump_stack_lvl+0x100/0x190 [ 815.679069][T19277] should_fail_ex.cold+0x5/0xa [ 815.679087][T19277] ? rcu_is_watching+0x12/0xc0 [ 815.679116][T19277] get_futex_key+0x1d2/0x1620 [ 815.679139][T19277] ? __pfx_get_futex_key+0x10/0x10 [ 815.679159][T19277] ? lock_acquire+0x1cf/0x380 [ 815.679196][T19277] futex_wake+0xea/0x530 [ 815.679224][T19277] ? __pfx_futex_wake+0x10/0x10 [ 815.679251][T19277] ? exit_mm_release+0x19/0x30 [ 815.679279][T19277] do_futex+0x32b/0x350 [ 815.679302][T19277] ? __pfx_do_futex+0x10/0x10 [ 815.679324][T19277] ? __might_fault+0xc5/0x140 [ 815.679355][T19277] mm_release+0x24a/0x2f0 [ 815.679373][T19277] do_exit+0x704/0x2b60 [ 815.679399][T19277] ? __pfx_do_exit+0x10/0x10 [ 815.679423][T19277] ? do_raw_spin_lock+0x128/0x260 [ 815.679449][T19277] ? find_held_lock+0x2b/0x80 [ 815.679465][T19277] ? get_signal+0x7e0/0x21e0 [ 815.679485][T19277] do_group_exit+0xd5/0x2a0 [ 815.679511][T19277] get_signal+0x1ec7/0x21e0 [ 815.679537][T19277] ? __pfx_get_signal+0x10/0x10 [ 815.679557][T19277] ? do_futex+0x192/0x350 [ 815.679582][T19277] arch_do_signal_or_restart+0x91/0x770 [ 815.679606][T19277] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 815.679635][T19277] ? __pfx___x64_sys_futex+0x10/0x10 [ 815.679663][T19277] exit_to_user_mode_loop+0x86/0x4a0 [ 815.679689][T19277] do_syscall_64+0x668/0xf80 [ 815.679715][T19277] ? clear_bhb_loop+0x40/0x90 [ 815.679737][T19277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.679756][T19277] RIP: 0033:0x7fe6d479c799 [ 815.679772][T19277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.679790][T19277] RSP: 002b:00007fe6d56f10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 815.679808][T19277] RAX: fffffffffffffe00 RBX: 00007fe6d4a16098 RCX: 00007fe6d479c799 [ 815.679820][T19277] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe6d4a16098 [ 815.679831][T19277] RBP: 00007fe6d4a16090 R08: 0000000000000000 R09: 0000000000000000 [ 815.679842][T19277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.679852][T19277] R13: 00007fe6d4a16128 R14: 00007ffc81a67c00 R15: 00007ffc81a67ce8 [ 815.679875][T19277] [ 816.640866][T19281] zswap: compressor not available [ 819.034165][T19318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4483'. [ 819.116190][T19321] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4487'. [ 819.255485][T19323] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 819.332468][T19323] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 819.416209][T19326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4488'. [ 819.436909][T19323] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 819.509985][T19323] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 819.922880][T19334] netlink: 342 bytes leftover after parsing attributes in process `syz.3.4491'. [ 820.957744][T19354] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4496'. [ 820.977901][T19355] netlink: 342 bytes leftover after parsing attributes in process `syz.2.4495'. [ 821.279466][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 821.356536][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout [ 821.514710][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 821.521450][ T5828] Bluetooth: hci2: command 0x0c1a tx timeout [ 822.385440][ T5913] usb usb40-port2: attempt power cycle [ 822.463138][T19382] FAULT_INJECTION: forcing a failure. [ 822.463138][T19382] name failslab, interval 1, probability 0, space 0, times 0 [ 822.549323][T19382] CPU: 0 UID: 0 PID: 19382 Comm: syz.3.4506 Not tainted syzkaller #0 PREEMPT(full) [ 822.549350][T19382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 822.549361][T19382] Call Trace: [ 822.549368][T19382] [ 822.549377][T19382] dump_stack_lvl+0x100/0x190 [ 822.549409][T19382] should_fail_ex.cold+0x5/0xa [ 822.549431][T19382] should_failslab+0xc2/0x120 [ 822.549451][T19382] __kmalloc_cache_noprof+0x7a/0x6f0 [ 822.549476][T19382] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 822.549502][T19382] ? get_mem_cgroup_from_mm+0x88/0x600 [ 822.549528][T19382] ? get_mem_cgroup_from_mm+0x132/0x600 [ 822.549557][T19382] __do_sys_fanotify_init+0x5cf/0xe50 [ 822.549589][T19382] do_syscall_64+0x106/0xf80 [ 822.549614][T19382] ? clear_bhb_loop+0x40/0x90 [ 822.549637][T19382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 822.549656][T19382] RIP: 0033:0x7fc0e8d9c799 [ 822.549673][T19382] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 822.549690][T19382] RSP: 002b:00007fc0e9cae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 822.549710][T19382] RAX: ffffffffffffffda RBX: 00007fc0e9016090 RCX: 00007fc0e8d9c799 [ 822.549722][T19382] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 822.549734][T19382] RBP: 00007fc0e8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 822.549745][T19382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 822.549755][T19382] R13: 00007fc0e9016128 R14: 00007fc0e9016090 R15: 00007fffd4989278 [ 822.549778][T19382] [ 822.843179][T19387] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4494'. [ 823.241409][ T5913] usb usb40-port2: unable to enumerate USB device [ 824.001649][T19400] random: crng reseeded on system resumption [ 824.649279][T19415] zswap: compressor not available [ 825.341906][T19434] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input33 [ 825.875599][T19448] bond0: invalid ARP target specified [ 825.917590][T19445] bond0: invalid ARP target specified [ 826.344704][T19446] FAULT_INJECTION: forcing a failure. [ 826.344704][T19446] name failslab, interval 1, probability 0, space 0, times 0 [ 826.439189][T19459] : renamed from bond0 (while UP) [ 826.447036][T19446] CPU: 0 UID: 0 PID: 19446 Comm: syz.0.4519 Not tainted syzkaller #0 PREEMPT(full) [ 826.447073][T19446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 826.447085][T19446] Call Trace: [ 826.447092][T19446] [ 826.447100][T19446] dump_stack_lvl+0x100/0x190 [ 826.447131][T19446] should_fail_ex.cold+0x5/0xa [ 826.447153][T19446] should_failslab+0xc2/0x120 [ 826.447173][T19446] __kmalloc_cache_noprof+0x7a/0x6f0 [ 826.447197][T19446] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 826.447223][T19446] ? get_mem_cgroup_from_mm+0x88/0x600 [ 826.447250][T19446] ? get_mem_cgroup_from_mm+0x132/0x600 [ 826.447279][T19446] __do_sys_fanotify_init+0x5cf/0xe50 [ 826.447315][T19446] do_syscall_64+0x106/0xf80 [ 826.447339][T19446] ? clear_bhb_loop+0x40/0x90 [ 826.447362][T19446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.447390][T19446] RIP: 0033:0x7fe6d479c799 [ 826.447407][T19446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.447425][T19446] RSP: 002b:00007fe6d56f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 826.447444][T19446] RAX: ffffffffffffffda RBX: 00007fe6d4a16090 RCX: 00007fe6d479c799 [ 826.447457][T19446] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 826.447469][T19446] RBP: 00007fe6d4832c99 R08: 0000000000000000 R09: 0000000000000000 [ 826.447480][T19446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.447491][T19446] R13: 00007fe6d4a16128 R14: 00007fe6d4a16090 R15: 00007ffc81a67ce8 [ 826.447515][T19446] [ 826.454106][T19458] block2mtd: illegal erase size [ 826.721799][T19450] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 827.572963][T19460] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 829.884192][ T30] audit: type=1800 audit(4295062779.163:10): pid=19514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4537" name="dbroot" dev="configfs" ino=79543 res=0 errno=0 [ 829.972048][T19514] tipc: Started in network mode [ 829.977209][T19514] tipc: Node identity ffffffff, cluster identity 4711 [ 830.018141][T19514] tipc: Node number set to 4294967295 [ 830.041187][T19517] FAULT_INJECTION: forcing a failure. [ 830.041187][T19517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 830.089315][T19511] FAULT_INJECTION: forcing a failure. [ 830.089315][T19511] name failslab, interval 1, probability 0, space 0, times 0 [ 830.109653][T19517] CPU: 0 UID: 0 PID: 19517 Comm: syz.1.4538 Not tainted syzkaller #0 PREEMPT(full) [ 830.109679][T19517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.109690][T19517] Call Trace: [ 830.109697][T19517] [ 830.109704][T19517] dump_stack_lvl+0x100/0x190 [ 830.109737][T19517] should_fail_ex.cold+0x5/0xa [ 830.109758][T19517] _copy_to_user+0x32/0xd0 [ 830.109781][T19517] tomoyo_flush+0x161/0x520 [ 830.109810][T19517] tomoyo_read_control+0x123/0x540 [ 830.109836][T19517] ? tomoyo_read_control+0x115/0x540 [ 830.109865][T19517] ? __pfx_tomoyo_read+0x10/0x10 [ 830.109890][T19517] vfs_read+0x1e4/0xb30 [ 830.109922][T19517] ? __pfx_vfs_read+0x10/0x10 [ 830.109949][T19517] ? __fget_files+0x215/0x3d0 [ 830.109977][T19517] ? __fget_files+0x21f/0x3d0 [ 830.110000][T19517] ksys_read+0x12a/0x250 [ 830.110034][T19517] ? __pfx_ksys_read+0x10/0x10 [ 830.110069][T19517] do_syscall_64+0x106/0xf80 [ 830.110094][T19517] ? clear_bhb_loop+0x40/0x90 [ 830.110117][T19517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.110136][T19517] RIP: 0033:0x7fe3fdb9c799 [ 830.110152][T19517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.110169][T19517] RSP: 002b:00007fe3fea11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 830.110188][T19517] RAX: ffffffffffffffda RBX: 00007fe3fde15fa0 RCX: 00007fe3fdb9c799 [ 830.110199][T19517] RDX: 0000000000008080 RSI: 0000000000000000 RDI: 0000000000000003 [ 830.110210][T19517] RBP: 00007fe3fea11090 R08: 0000000000000000 R09: 0000000000000000 [ 830.110221][T19517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 830.110238][T19517] R13: 00007fe3fde16038 R14: 00007fe3fde15fa0 R15: 00007ffd181bc638 [ 830.110262][T19517] [ 830.514632][T19511] CPU: 0 UID: 0 PID: 19511 Comm: syz.2.4536 Not tainted syzkaller #0 PREEMPT(full) [ 830.514661][T19511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 830.514673][T19511] Call Trace: [ 830.514680][T19511] [ 830.514688][T19511] dump_stack_lvl+0x100/0x190 [ 830.514723][T19511] should_fail_ex.cold+0x5/0xa [ 830.514745][T19511] should_failslab+0xc2/0x120 [ 830.514765][T19511] __kmalloc_cache_noprof+0x7a/0x6f0 [ 830.514790][T19511] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 830.514817][T19511] ? get_mem_cgroup_from_mm+0x88/0x600 [ 830.514843][T19511] ? get_mem_cgroup_from_mm+0x132/0x600 [ 830.514873][T19511] __do_sys_fanotify_init+0x5cf/0xe50 [ 830.514904][T19511] do_syscall_64+0x106/0xf80 [ 830.514929][T19511] ? clear_bhb_loop+0x40/0x90 [ 830.514952][T19511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 830.514971][T19511] RIP: 0033:0x7f1a0059c799 [ 830.514987][T19511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 830.515005][T19511] RSP: 002b:00007f1a01425028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 830.515032][T19511] RAX: ffffffffffffffda RBX: 00007f1a00816090 RCX: 00007f1a0059c799 [ 830.515044][T19511] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 830.515055][T19511] RBP: 00007f1a00632c99 R08: 0000000000000000 R09: 0000000000000000 [ 830.515066][T19511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 830.515077][T19511] R13: 00007f1a00816128 R14: 00007f1a00816090 R15: 00007fff484fe118 [ 830.515099][T19511] [ 830.760809][T19526] netlink: 146 bytes leftover after parsing attributes in process `syz.0.4540'. [ 832.966786][T19573] zswap: compressor not available [ 833.234456][T19588] block2mtd: illegal erase size [ 833.492533][T19583] FAULT_INJECTION: forcing a failure. [ 833.492533][T19583] name failslab, interval 1, probability 0, space 0, times 0 [ 833.647466][T19583] CPU: 0 UID: 0 PID: 19583 Comm: syz.0.4556 Not tainted syzkaller #0 PREEMPT(full) [ 833.647495][T19583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 833.647507][T19583] Call Trace: [ 833.647514][T19583] [ 833.647521][T19583] dump_stack_lvl+0x100/0x190 [ 833.647552][T19583] should_fail_ex.cold+0x5/0xa [ 833.647575][T19583] should_failslab+0xc2/0x120 [ 833.647595][T19583] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 833.647624][T19583] ? __d_alloc+0x34/0xa80 [ 833.647647][T19583] __d_alloc+0x34/0xa80 [ 833.647674][T19583] d_alloc_pseudo+0x1c/0xc0 [ 833.647701][T19583] alloc_file_pseudo+0xcf/0x230 [ 833.647725][T19583] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 833.647747][T19583] ? alloc_fd+0x476/0x790 [ 833.647766][T19583] ? do_raw_spin_unlock+0x145/0x1e0 [ 833.647796][T19583] __anon_inode_getfile+0xe8/0x280 [ 833.647820][T19583] anon_inode_getfile_fmode+0x37/0xa0 [ 833.647844][T19583] __do_sys_fanotify_init+0xa79/0xe50 [ 833.647877][T19583] do_syscall_64+0x106/0xf80 [ 833.647902][T19583] ? clear_bhb_loop+0x40/0x90 [ 833.647924][T19583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.647943][T19583] RIP: 0033:0x7fe6d479c799 [ 833.647959][T19583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.647978][T19583] RSP: 002b:00007fe6d56f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 833.647997][T19583] RAX: ffffffffffffffda RBX: 00007fe6d4a16090 RCX: 00007fe6d479c799 [ 833.648009][T19583] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 833.648020][T19583] RBP: 00007fe6d4832c99 R08: 0000000000000000 R09: 0000000000000000 [ 833.648031][T19583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.648042][T19583] R13: 00007fe6d4a16128 R14: 00007fe6d4a16090 R15: 00007ffc81a67ce8 [ 833.648072][T19583] [ 834.627355][T19612] tc_dump_action: action bad kind [ 834.768484][T19615] bridge0: port 3(netdevsim1) entered blocking state [ 834.808270][T19615] bridge0: port 3(netdevsim1) entered disabled state [ 834.860186][T19615] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 834.913404][T19615] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 834.966949][T19615] bridge0: port 3(netdevsim1) entered blocking state [ 834.973874][T19615] bridge0: port 3(netdevsim1) entered forwarding state [ 835.319537][T19620] zswap: compressor not available [ 835.725677][T19637] FAULT_INJECTION: forcing a failure. [ 835.725677][T19637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 835.767276][T19629] FAULT_INJECTION: forcing a failure. [ 835.767276][T19629] name failslab, interval 1, probability 0, space 0, times 0 [ 835.786993][T19637] CPU: 0 UID: 0 PID: 19637 Comm: syz.3.4570 Not tainted syzkaller #0 PREEMPT(full) [ 835.787026][T19637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 835.787037][T19637] Call Trace: [ 835.787044][T19637] [ 835.787052][T19637] dump_stack_lvl+0x100/0x190 [ 835.787084][T19637] should_fail_ex.cold+0x5/0xa [ 835.787106][T19637] _copy_to_user+0x32/0xd0 [ 835.787129][T19637] simple_read_from_buffer+0xcb/0x170 [ 835.787160][T19637] proc_fail_nth_read+0x1af/0x230 [ 835.787182][T19637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.787206][T19637] ? rw_verify_area+0xce/0x6d0 [ 835.787232][T19637] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 835.787254][T19637] vfs_read+0x1e4/0xb30 [ 835.787285][T19637] ? __pfx_vfs_read+0x10/0x10 [ 835.787313][T19637] ? __fget_files+0x215/0x3d0 [ 835.787335][T19637] ? __fget_files+0x21f/0x3d0 [ 835.787357][T19637] ksys_read+0x12a/0x250 [ 835.787385][T19637] ? __pfx_ksys_read+0x10/0x10 [ 835.787420][T19637] do_syscall_64+0x106/0xf80 [ 835.787445][T19637] ? clear_bhb_loop+0x40/0x90 [ 835.787467][T19637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.787485][T19637] RIP: 0033:0x7fc0e8d5cfce [ 835.787501][T19637] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 835.787519][T19637] RSP: 002b:00007fc0e9ccefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 835.787536][T19637] RAX: ffffffffffffffda RBX: 00007fc0e9ccf6c0 RCX: 00007fc0e8d5cfce [ 835.787548][T19637] RDX: 000000000000000f RSI: 00007fc0e9ccf0a0 RDI: 0000000000000005 [ 835.787559][T19637] RBP: 00007fc0e9ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 835.787569][T19637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 835.787580][T19637] R13: 00007fc0e9016038 R14: 00007fc0e9015fa0 R15: 00007fffd4989278 [ 835.787602][T19637] [ 836.052088][T19629] CPU: 0 UID: 0 PID: 19629 Comm: syz.1.4569 Not tainted syzkaller #0 PREEMPT(full) [ 836.052117][T19629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 836.052128][T19629] Call Trace: [ 836.052135][T19629] [ 836.052143][T19629] dump_stack_lvl+0x100/0x190 [ 836.052175][T19629] should_fail_ex.cold+0x5/0xa [ 836.052198][T19629] should_failslab+0xc2/0x120 [ 836.052226][T19629] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 836.052253][T19629] ? acpi_ps_alloc_op+0x29d/0x360 [ 836.052282][T19629] acpi_ps_alloc_op+0x29d/0x360 [ 836.052303][T19629] ? acpi_ut_status_exit+0x111/0x1c0 [ 836.052332][T19629] acpi_ps_create_op+0x4b3/0xd10 [ 836.052355][T19629] ? __pfx_acpi_ps_create_op+0x10/0x10 [ 836.052377][T19629] ? acpi_ut_status_exit+0x111/0x1c0 [ 836.052410][T19629] acpi_ps_parse_loop+0xa65/0x24a0 [ 836.052437][T19629] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 836.052457][T19629] ? kmem_cache_alloc_noprof+0x292/0x6e0 [ 836.052484][T19629] ? acpi_ut_create_thread_state+0x6d/0x170 [ 836.052511][T19629] acpi_ps_parse_aml+0x81e/0x1120 [ 836.052536][T19629] acpi_ps_execute_method+0x5c4/0xe90 [ 836.052564][T19629] acpi_ns_evaluate+0x640/0x1670 [ 836.052594][T19629] acpi_evaluate_object+0x420/0xe00 [ 836.052611][T19629] ? kasan_save_stack+0x30/0x50 [ 836.052638][T19629] ? kasan_save_track+0x14/0x30 [ 836.052670][T19629] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 836.052695][T19629] acpi_evaluate_integer+0xdf/0x220 [ 836.052722][T19629] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 836.052759][T19629] ? __pfx_status_show+0x10/0x10 [ 836.052776][T19629] status_show+0xa0/0x120 [ 836.052793][T19629] ? __pfx_status_show+0x10/0x10 [ 836.052816][T19629] dev_attr_show+0x52/0xa0 [ 836.052838][T19629] ? __pfx_dev_attr_show+0x10/0x10 [ 836.052859][T19629] sysfs_kf_seq_show+0x217/0x3a0 [ 836.052889][T19629] seq_read_iter+0x32f/0x1270 [ 836.052927][T19629] kernfs_fop_read_iter+0x46c/0x610 [ 836.052949][T19629] ? rw_verify_area+0xce/0x6d0 [ 836.052975][T19629] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 836.052997][T19629] vfs_read+0x825/0xb30 [ 836.053029][T19629] ? __pfx_vfs_read+0x10/0x10 [ 836.053072][T19629] ksys_read+0x12a/0x250 [ 836.053100][T19629] ? __pfx_ksys_read+0x10/0x10 [ 836.053136][T19629] do_syscall_64+0x106/0xf80 [ 836.053161][T19629] ? clear_bhb_loop+0x40/0x90 [ 836.053183][T19629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.053203][T19629] RIP: 0033:0x7fe3fdb9c799 [ 836.053225][T19629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 836.053244][T19629] RSP: 002b:00007fe3fea11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 836.053262][T19629] RAX: ffffffffffffffda RBX: 00007fe3fde15fa0 RCX: 00007fe3fdb9c799 [ 836.053274][T19629] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000009 [ 836.053285][T19629] RBP: 00007fe3fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 836.053296][T19629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 836.053307][T19629] R13: 00007fe3fde16038 R14: 00007fe3fde15fa0 R15: 00007ffd181bc638 [ 836.053330][T19629] [ 836.053380][T19629] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20251212/psparse-529) [ 838.043951][T19664] zswap: compressor not available [ 838.090865][T19662] FAULT_INJECTION: forcing a failure. [ 838.090865][T19662] name failslab, interval 1, probability 0, space 0, times 0 [ 838.326049][T19662] CPU: 0 UID: 0 PID: 19662 Comm: syz.3.4576 Not tainted syzkaller #0 PREEMPT(full) [ 838.326078][T19662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 838.326090][T19662] Call Trace: [ 838.326096][T19662] [ 838.326104][T19662] dump_stack_lvl+0x100/0x190 [ 838.326137][T19662] should_fail_ex.cold+0x5/0xa [ 838.326159][T19662] should_failslab+0xc2/0x120 [ 838.326179][T19662] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 838.326207][T19662] ? __d_alloc+0x34/0xa80 [ 838.326232][T19662] __d_alloc+0x34/0xa80 [ 838.326254][T19662] d_alloc_pseudo+0x1c/0xc0 [ 838.326280][T19662] alloc_file_pseudo+0xcf/0x230 [ 838.326305][T19662] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 838.326328][T19662] ? alloc_fd+0x476/0x790 [ 838.326346][T19662] ? do_raw_spin_unlock+0x145/0x1e0 [ 838.326376][T19662] __anon_inode_getfile+0xe8/0x280 [ 838.326400][T19662] anon_inode_getfile_fmode+0x37/0xa0 [ 838.326423][T19662] __do_sys_fanotify_init+0xa79/0xe50 [ 838.326453][T19662] do_syscall_64+0x106/0xf80 [ 838.326479][T19662] ? clear_bhb_loop+0x40/0x90 [ 838.326502][T19662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.326521][T19662] RIP: 0033:0x7fc0e8d9c799 [ 838.326537][T19662] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 838.326555][T19662] RSP: 002b:00007fc0e9cae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 838.326575][T19662] RAX: ffffffffffffffda RBX: 00007fc0e9016090 RCX: 00007fc0e8d9c799 [ 838.326588][T19662] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 838.326599][T19662] RBP: 00007fc0e8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 838.326610][T19662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.326621][T19662] R13: 00007fc0e9016128 R14: 00007fc0e9016090 R15: 00007fffd4989278 [ 838.326644][T19662] [ 838.717725][T19682] random: crng reseeded on system resumption [ 839.124636][T19688] bond0: no command found in slaves file - use +ifname or -ifname [ 839.862407][T19706] netlink: 338 bytes leftover after parsing attributes in process `syz.3.4587'. [ 840.280624][T19711] zswap: compressor not available [ 840.311069][T19718] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4589'. [ 840.360652][T19718] : (slave bond_slave_0): Releasing backup interface [ 841.532564][T19739] binder: BINDER_SET_CONTEXT_MGR already set [ 841.554415][T19739] binder: 19738:19739 ioctl 4018620d 2000000027c0 returned -16 [ 843.744615][T19780] vivid-007: ================= START STATUS ================= [ 843.829376][T19780] vivid-007: Generate PTS: true [ 843.880844][T19780] vivid-007: Generate SCR: true [ 843.931236][T19780] tpg source WxH: 320x240 (Y'CbCr) [ 843.995784][T19780] tpg field: 1 [ 844.022466][T19780] tpg crop: (0,0)/320x240 [ 844.067303][T19780] tpg compose: (0,0)/320x240 [ 844.117029][T19780] tpg colorspace: 8 [ 844.189340][T19780] tpg transfer function: 0/0 [ 844.243624][T19780] tpg Y'CbCr encoding: 0/0 [ 844.298571][T19780] tpg quantization: 0/0 [ 844.325338][T19780] tpg RGB range: 0/2 [ 844.366165][T19780] vivid-007: ================== END STATUS ================== [ 845.553466][T19816] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 845.578528][T19833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4618'. [ 845.625106][T19816] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 845.742186][T19816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 845.821224][T19816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 846.282790][T19840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4621'. [ 846.495593][T19844] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 847.194534][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 847.266487][T19861] FAULT_INJECTION: forcing a failure. [ 847.266487][T19861] name failslab, interval 1, probability 0, space 0, times 0 [ 847.328116][T19861] CPU: 0 UID: 0 PID: 19861 Comm: syz.2.4628 Not tainted syzkaller #0 PREEMPT(full) [ 847.328144][T19861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 847.328156][T19861] Call Trace: [ 847.328163][T19861] [ 847.328171][T19861] dump_stack_lvl+0x100/0x190 [ 847.328205][T19861] should_fail_ex.cold+0x5/0xa [ 847.328227][T19861] should_failslab+0xc2/0x120 [ 847.328248][T19861] __kmalloc_cache_noprof+0x7a/0x6f0 [ 847.328273][T19861] ? usb_control_msg+0xbc/0x4b0 [ 847.328300][T19861] usb_control_msg+0xbc/0x4b0 [ 847.328324][T19861] ? __pfx_usb_control_msg+0x10/0x10 [ 847.328355][T19861] usb_clear_port_feature+0x64/0x90 [ 847.328383][T19861] disable_store+0x38c/0x450 [ 847.328411][T19861] ? __pfx_disable_store+0x10/0x10 [ 847.328438][T19861] ? find_held_lock+0x2b/0x80 [ 847.328456][T19861] ? sysfs_file_kobj+0xe4/0x290 [ 847.328477][T19861] ? sysfs_file_kobj+0xe4/0x290 [ 847.328500][T19861] ? __pfx_disable_store+0x10/0x10 [ 847.328525][T19861] dev_attr_store+0x58/0x80 [ 847.328546][T19861] ? __pfx_dev_attr_store+0x10/0x10 [ 847.328566][T19861] sysfs_kf_write+0xf2/0x150 [ 847.328591][T19861] kernfs_fop_write_iter+0x3e0/0x5f0 [ 847.328609][T19861] ? __pfx_sysfs_kf_write+0x10/0x10 [ 847.328634][T19861] vfs_write+0x6ac/0x1070 [ 847.328664][T19861] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 847.328686][T19861] ? __pfx_vfs_write+0x10/0x10 [ 847.328729][T19861] ksys_write+0x12a/0x250 [ 847.328746][T19861] ? __pfx_ksys_write+0x10/0x10 [ 847.328769][T19861] do_syscall_64+0x106/0xf80 [ 847.328795][T19861] ? clear_bhb_loop+0x40/0x90 [ 847.328817][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.328836][T19861] RIP: 0033:0x7f1a0059c799 [ 847.328852][T19861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.328870][T19861] RSP: 002b:00007f1a01446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 847.328888][T19861] RAX: ffffffffffffffda RBX: 00007f1a00815fa0 RCX: 00007f1a0059c799 [ 847.328900][T19861] RDX: 00000000000005c8 RSI: 0000000000000000 RDI: 0000000000000003 [ 847.328919][T19861] RBP: 00007f1a00632c99 R08: 0000000000000000 R09: 0000000000000000 [ 847.328929][T19861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 847.328940][T19861] R13: 00007f1a00816038 R14: 00007f1a00815fa0 R15: 00007fff484fe118 [ 847.328964][T19861] [ 847.737237][T19868] FAULT_INJECTION: forcing a failure. [ 847.737237][T19868] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 847.751488][T19868] CPU: 0 UID: 0 PID: 19868 Comm: syz.3.4629 Not tainted syzkaller #0 PREEMPT(full) [ 847.751513][T19868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 847.751524][T19868] Call Trace: [ 847.751531][T19868] [ 847.751538][T19868] dump_stack_lvl+0x100/0x190 [ 847.751570][T19868] should_fail_ex.cold+0x5/0xa [ 847.751587][T19868] ? prepare_alloc_pages+0x16d/0x5f0 [ 847.751610][T19868] should_fail_alloc_page+0xeb/0x140 [ 847.751631][T19868] prepare_alloc_pages+0x1f0/0x5f0 [ 847.751655][T19868] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 847.751685][T19868] ? bpf_ksym_find+0x124/0x1c0 [ 847.751707][T19868] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 847.751727][T19868] ? is_bpf_text_address+0x94/0x1a0 [ 847.751755][T19868] ? kernel_text_address+0x8d/0x100 [ 847.751781][T19868] ? __kernel_text_address+0xd/0x30 [ 847.751807][T19868] ? unwind_get_return_address+0x59/0xa0 [ 847.751830][T19868] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 847.751863][T19868] ? tomoyo_check_open_permission+0x1a2/0x3c0 [ 847.751888][T19868] ? look_up_lock_class+0x55/0x120 [ 847.751914][T19868] ? register_lock_class+0x40/0x560 [ 847.751937][T19868] ? find_held_lock+0x2b/0x80 [ 847.751953][T19868] ? ima_match_policy+0x8c4/0x2350 [ 847.751980][T19868] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 847.752011][T19868] ? policy_nodemask+0xed/0x4f0 [ 847.752032][T19868] alloc_pages_mpol+0x1fb/0x550 [ 847.752052][T19868] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 847.752077][T19868] alloc_pages_noprof+0x131/0x390 [ 847.752098][T19868] __pmd_alloc+0x3b/0x950 [ 847.752121][T19868] __handle_mm_fault+0xa99/0x2b60 [ 847.752149][T19868] ? mt_find+0x45e/0x8e0 [ 847.752176][T19868] ? __pfx___handle_mm_fault+0x10/0x10 [ 847.752200][T19868] ? __pfx_mt_find+0x10/0x10 [ 847.752238][T19868] ? find_vma+0xbf/0x140 [ 847.752255][T19868] ? __pfx_find_vma+0x10/0x10 [ 847.752274][T19868] handle_mm_fault+0x36d/0xa20 [ 847.752303][T19868] do_user_addr_fault+0x74c/0x12f0 [ 847.752339][T19868] exc_page_fault+0x6f/0xd0 [ 847.752364][T19868] asm_exc_page_fault+0x26/0x30 [ 847.752382][T19868] RIP: 0010:rep_movs_alternative+0xf/0x90 [ 847.752405][T19868] Code: c4 10 c3 cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 [ 847.752421][T19868] RSP: 0018:ffffc900001079b0 EFLAGS: 00050206 [ 847.752437][T19868] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000005 [ 847.752448][T19868] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90000107a38 [ 847.752459][T19868] RBP: 0000000000000005 R08: 0000000000000001 R09: fffff52000020f47 [ 847.752469][T19868] R10: ffffc90000107a3c R11: 0000000000000000 R12: 0000000000000000 [ 847.752480][T19868] R13: ffffc90000107a38 R14: 1ffff92000020f41 R15: ffffc90000107d6c [ 847.752502][T19868] _copy_from_user+0x98/0xd0 [ 847.752524][T19868] ____sys_sendmsg+0x1d1/0xb70 [ 847.752545][T19868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 847.752567][T19868] ? __pfx__kstrtoull+0x10/0x10 [ 847.752597][T19868] ___sys_sendmsg+0x190/0x1e0 [ 847.752618][T19868] ? __pfx____sys_sendmsg+0x10/0x10 [ 847.752648][T19868] ? find_held_lock+0x2b/0x80 [ 847.752678][T19868] __sys_sendmmsg+0x205/0x430 [ 847.752706][T19868] ? __pfx___sys_sendmmsg+0x10/0x10 [ 847.752739][T19868] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 847.752775][T19868] ? fput+0x79/0x100 [ 847.752796][T19868] ? ksys_write+0x1ac/0x250 [ 847.752811][T19868] ? __pfx_ksys_write+0x10/0x10 [ 847.752832][T19868] __x64_sys_sendmmsg+0x9c/0x100 [ 847.752857][T19868] ? lockdep_hardirqs_on+0x78/0x100 [ 847.752882][T19868] do_syscall_64+0x106/0xf80 [ 847.752906][T19868] ? clear_bhb_loop+0x40/0x90 [ 847.752928][T19868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 847.752947][T19868] RIP: 0033:0x7fc0e8d9c799 [ 847.752967][T19868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 847.752984][T19868] RSP: 002b:00007fc0e9ccf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 847.753001][T19868] RAX: ffffffffffffffda RBX: 00007fc0e9015fa0 RCX: 00007fc0e8d9c799 [ 847.753012][T19868] RDX: 0000000000000002 RSI: 00002000000001c0 RDI: 0000000000000003 [ 847.753023][T19868] RBP: 00007fc0e9ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 847.753033][T19868] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 847.753044][T19868] R13: 00007fc0e9016038 R14: 00007fc0e9015fa0 R15: 00007fffd4989278 [ 847.753067][T19868] [ 848.228663][T19864] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(12) [ 848.239275][T19864] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 848.247788][T19864] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 848.256073][T19864] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 848.264130][T19864] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 848.272661][T19864] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 848.280957][T19864] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 848.289167][T19864] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 848.297329][T19864] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 848.305448][T19864] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 848.313482][T19864] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 848.493091][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout [ 848.499185][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 848.505413][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 849.846251][T19899] zswap: compressor not available [ 849.906236][T19903] zswap: compressor not available [ 850.522315][T19923] vivid-007: ================= START STATUS ================= [ 850.628677][T19925] vivid-001: ================= START STATUS ================= [ 850.667942][T19925] vivid-001: Radio HW Seek Mode: Bounded [ 850.685046][T19923] vivid-007: Generate PTS: true [ 850.693917][T19925] vivid-001: Radio Programmable HW Seek: false [ 850.738035][T19923] vivid-007: Generate SCR: true [ 850.742946][T19923] tpg source WxH: 320x240 (Y'CbCr) [ 850.752616][T19925] vivid-001: RDS Rx I/O Mode: Block I/O [ 850.784520][T19925] vivid-001: Generate RBDS Instead of RDS: false [ 850.796329][T19925] vivid-001: RDS Reception: true [ 850.832691][T19923] tpg field: 1 [ 850.841738][T19925] vivid-001: RDS Program Type: 0 inactive [ 850.858221][T19923] tpg crop: (0,0)/320x240 [ 850.884679][T19925] vivid-001: RDS PS Name: inactive [ 850.902557][T19923] tpg compose: (0,0)/320x240 [ 850.912030][T19925] vivid-001: RDS Radio Text: inactive [ 850.934545][T19925] vivid-001: RDS Traffic Announcement: false inactive [ 850.942877][T19923] tpg colorspace: 8 [ 850.956774][T19925] vivid-001: RDS Traffic Program: false inactive [ 850.969135][T19923] tpg transfer function: 0/0 [ 850.983602][T19925] vivid-001: RDS Music: false inactive [ 851.002761][T19925] vivid-001: ================== END STATUS ================== [ 851.017138][T19923] tpg Y'CbCr encoding: 0/0 [ 851.053721][T19923] tpg quantization: 0/0 [ 851.100900][T19923] tpg RGB range: 0/2 [ 851.135821][T19923] vivid-007: ================== END STATUS ================== [ 852.698331][T19960] FAULT_INJECTION: forcing a failure. [ 852.698331][T19960] name failslab, interval 1, probability 0, space 0, times 0 [ 852.895139][T19960] CPU: 0 UID: 0 PID: 19960 Comm: syz.3.4651 Not tainted syzkaller #0 PREEMPT(full) [ 852.895177][T19960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 852.895189][T19960] Call Trace: [ 852.895196][T19960] [ 852.895204][T19960] dump_stack_lvl+0x100/0x190 [ 852.895237][T19960] should_fail_ex.cold+0x5/0xa [ 852.895259][T19960] should_failslab+0xc2/0x120 [ 852.895279][T19960] __kmalloc_cache_noprof+0x7a/0x6f0 [ 852.895304][T19960] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 852.895331][T19960] ? get_mem_cgroup_from_mm+0x88/0x600 [ 852.895357][T19960] ? get_mem_cgroup_from_mm+0x132/0x600 [ 852.895386][T19960] __do_sys_fanotify_init+0x5cf/0xe50 [ 852.895417][T19960] do_syscall_64+0x106/0xf80 [ 852.895442][T19960] ? clear_bhb_loop+0x40/0x90 [ 852.895465][T19960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 852.895484][T19960] RIP: 0033:0x7fc0e8d9c799 [ 852.895500][T19960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.895518][T19960] RSP: 002b:00007fc0e9cae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 852.895536][T19960] RAX: ffffffffffffffda RBX: 00007fc0e9016090 RCX: 00007fc0e8d9c799 [ 852.895548][T19960] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 852.895559][T19960] RBP: 00007fc0e8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 852.895570][T19960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.895580][T19960] R13: 00007fc0e9016128 R14: 00007fc0e9016090 R15: 00007fffd4989278 [ 852.895602][T19960] [ 853.936824][ T9] usb usb40-port2: attempt power cycle [ 854.495218][ T9] usb usb40-port2: unable to enumerate USB device [ 855.779096][T20026] FAULT_INJECTION: forcing a failure. [ 855.779096][T20026] name failslab, interval 1, probability 0, space 0, times 0 [ 855.825016][T20026] CPU: 0 UID: 0 PID: 20026 Comm: syz.1.4669 Not tainted syzkaller #0 PREEMPT(full) [ 855.825043][T20026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 855.825055][T20026] Call Trace: [ 855.825062][T20026] [ 855.825070][T20026] dump_stack_lvl+0x100/0x190 [ 855.825101][T20026] should_fail_ex.cold+0x5/0xa [ 855.825123][T20026] should_failslab+0xc2/0x120 [ 855.825143][T20026] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 855.825171][T20026] ? dup_fd+0x4d/0xd10 [ 855.825188][T20026] ? do_futex+0x192/0x350 [ 855.825220][T20026] dup_fd+0x4d/0xd10 [ 855.825246][T20026] __x64_sys_close_range+0x50f/0x5d0 [ 855.825269][T20026] ? __pfx___x64_sys_close_range+0x10/0x10 [ 855.825296][T20026] do_syscall_64+0x106/0xf80 [ 855.825322][T20026] ? clear_bhb_loop+0x40/0x90 [ 855.825344][T20026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.825363][T20026] RIP: 0033:0x7fe3fdb9c799 [ 855.825379][T20026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.825397][T20026] RSP: 002b:00007fe3fea11028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 855.825416][T20026] RAX: ffffffffffffffda RBX: 00007fe3fde15fa0 RCX: 00007fe3fdb9c799 [ 855.825428][T20026] RDX: 0000000000000006 RSI: 0000000000000008 RDI: 0000000000000002 [ 855.825439][T20026] RBP: 00007fe3fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 855.825450][T20026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 855.825462][T20026] R13: 00007fe3fde16038 R14: 00007fe3fde15fa0 R15: 00007ffd181bc638 [ 855.825486][T20026] [ 856.415395][T20037] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 856.421593][T20037] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 856.435045][T20037] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 856.466163][T20037] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 856.600957][ T30] audit: type=1326 audit(4295062805.883:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20025 comm="syz.1.4669" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe3fdb9c799 code=0x0 [ 857.090749][T20057] FAULT_INJECTION: forcing a failure. [ 857.090749][T20057] name failslab, interval 1, probability 0, space 0, times 0 [ 857.158485][T20057] CPU: 0 UID: 0 PID: 20057 Comm: syz.0.4677 Not tainted syzkaller #0 PREEMPT(full) [ 857.158513][T20057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 857.158524][T20057] Call Trace: [ 857.158531][T20057] [ 857.158538][T20057] dump_stack_lvl+0x100/0x190 [ 857.158571][T20057] should_fail_ex.cold+0x5/0xa [ 857.158593][T20057] should_failslab+0xc2/0x120 [ 857.158614][T20057] __kmalloc_cache_noprof+0x7a/0x6f0 [ 857.158639][T20057] ? do_signalfd4+0x14e/0x480 [ 857.158665][T20057] do_signalfd4+0x14e/0x480 [ 857.158689][T20057] __x64_sys_signalfd+0x120/0x1a0 [ 857.158712][T20057] ? __pfx___x64_sys_signalfd+0x10/0x10 [ 857.158740][T20057] do_syscall_64+0x106/0xf80 [ 857.158765][T20057] ? clear_bhb_loop+0x40/0x90 [ 857.158793][T20057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.158812][T20057] RIP: 0033:0x7fe6d479c799 [ 857.158827][T20057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.158846][T20057] RSP: 002b:00007fe6d5712028 EFLAGS: 00000246 ORIG_RAX: 000000000000011a [ 857.158864][T20057] RAX: ffffffffffffffda RBX: 00007fe6d4a15fa0 RCX: 00007fe6d479c799 [ 857.158876][T20057] RDX: 0000000000000008 RSI: 00002000000000c0 RDI: ffffffffffffffff [ 857.158888][T20057] RBP: 00007fe6d4832c99 R08: 0000000000000000 R09: 0000000000000000 [ 857.158899][T20057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.158910][T20057] R13: 00007fe6d4a16038 R14: 00007fe6d4a15fa0 R15: 00007ffc81a67ce8 [ 857.158943][T20057] [ 857.325456][T20057] FAULT_INJECTION: forcing a failure. [ 857.325456][T20057] name fail_futex, interval 1, probability 0, space 0, times 0 [ 857.338542][T20057] CPU: 0 UID: 0 PID: 20057 Comm: syz.0.4677 Not tainted syzkaller #0 PREEMPT(full) [ 857.338569][T20057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 857.338581][T20057] Call Trace: [ 857.338589][T20057] [ 857.338597][T20057] dump_stack_lvl+0x100/0x190 [ 857.338630][T20057] should_fail_ex.cold+0x5/0xa [ 857.338651][T20057] get_futex_key+0x1d2/0x1620 [ 857.338677][T20057] ? __pfx_get_futex_key+0x10/0x10 [ 857.338698][T20057] ? rcu_is_watching+0x12/0xc0 [ 857.338725][T20057] ? vfs_writev+0x1d5/0xe10 [ 857.338750][T20057] ? kfree+0x2ec/0x6b0 [ 857.338779][T20057] futex_wake+0xea/0x530 [ 857.338808][T20057] ? __pfx_futex_wake+0x10/0x10 [ 857.338844][T20057] ? do_writev+0x214/0x340 [ 857.338877][T20057] do_futex+0x32b/0x350 [ 857.338901][T20057] ? __pfx_do_futex+0x10/0x10 [ 857.338926][T20057] ? __fget_files+0x21f/0x3d0 [ 857.338946][T20057] __x64_sys_futex+0x34f/0x4d0 [ 857.338973][T20057] ? __pfx___x64_sys_futex+0x10/0x10 [ 857.338998][T20057] ? __pfx_do_writev+0x10/0x10 [ 857.339032][T20057] do_syscall_64+0x106/0xf80 [ 857.339056][T20057] ? clear_bhb_loop+0x40/0x90 [ 857.339079][T20057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.339098][T20057] RIP: 0033:0x7fe6d479c799 [ 857.339115][T20057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.339133][T20057] RSP: 002b:00007fe6d57120e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 857.339151][T20057] RAX: ffffffffffffffda RBX: 00007fe6d4a15fa8 RCX: 00007fe6d479c799 [ 857.339163][T20057] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe6d4a15fac [ 857.339174][T20057] RBP: 00007fe6d4a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 857.339185][T20057] R10: 000000000000710d R11: 0000000000000246 R12: 0000000000000000 [ 857.339196][T20057] R13: 00007fe6d4a16038 R14: 00007ffc81a67c00 R15: 00007ffc81a67ce8 [ 857.339218][T20057] [ 857.570590][T20057] ptp ptp0: delete virtual clock ptp1 [ 857.602333][T20057] ptp ptp0: only physical clock in use now [ 857.632002][T20063] program syz.1.4679 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 857.687609][T20062] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 857.693798][T20062] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 857.700300][T20062] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 857.706392][T20062] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 858.403064][T20086] netlink: 'syz.3.4685': attribute type 2 has an invalid length. [ 858.699233][T20094] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(0.0.0), cmd(1) [ 858.892426][T20092] zswap: compressor not available [ 859.524031][T20115] zswap: compressor not available [ 859.541137][T20118] FAULT_INJECTION: forcing a failure. [ 859.541137][T20118] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 859.623105][T20118] CPU: 0 UID: 0 PID: 20118 Comm: syz.1.4695 Not tainted syzkaller #0 PREEMPT(full) [ 859.623131][T20118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 859.623142][T20118] Call Trace: [ 859.623148][T20118] [ 859.623156][T20118] dump_stack_lvl+0x100/0x190 [ 859.623187][T20118] should_fail_ex.cold+0x5/0xa [ 859.623208][T20118] _copy_to_user+0x32/0xd0 [ 859.623231][T20118] simple_read_from_buffer+0xcb/0x170 [ 859.623261][T20118] proc_fail_nth_read+0x1af/0x230 [ 859.623284][T20118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.623307][T20118] ? rw_verify_area+0xce/0x6d0 [ 859.623333][T20118] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 859.623354][T20118] vfs_read+0x1e4/0xb30 [ 859.623386][T20118] ? __pfx_vfs_read+0x10/0x10 [ 859.623413][T20118] ? __fget_files+0x215/0x3d0 [ 859.623435][T20118] ? __fget_files+0x21f/0x3d0 [ 859.623457][T20118] ksys_read+0x12a/0x250 [ 859.623485][T20118] ? __pfx_ksys_read+0x10/0x10 [ 859.623520][T20118] do_syscall_64+0x106/0xf80 [ 859.623545][T20118] ? clear_bhb_loop+0x40/0x90 [ 859.623567][T20118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.623586][T20118] RIP: 0033:0x7fe3fdb5cfce [ 859.623601][T20118] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 859.623619][T20118] RSP: 002b:00007fe3fe9effe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 859.623637][T20118] RAX: ffffffffffffffda RBX: 00007fe3fe9f06c0 RCX: 00007fe3fdb5cfce [ 859.623649][T20118] RDX: 000000000000000f RSI: 00007fe3fe9f00a0 RDI: 0000000000000005 [ 859.623660][T20118] RBP: 00007fe3fe9f0090 R08: 0000000000000000 R09: 0000000000000000 [ 859.623671][T20118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 859.623681][T20118] R13: 00007fe3fde16128 R14: 00007fe3fde16090 R15: 00007ffd181bc638 [ 859.623704][T20118] [ 860.047528][ T5826] Bluetooth: hci3: command 0x0c1a tx timeout [ 860.053848][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 860.060737][ T5826] Bluetooth: hci5: command 0x0c1a tx timeout [ 860.070605][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 860.684608][T20137] FAULT_INJECTION: forcing a failure. [ 860.684608][T20137] name failslab, interval 1, probability 0, space 0, times 0 [ 860.918470][T20137] CPU: 0 UID: 0 PID: 20137 Comm: syz.2.4696 Not tainted syzkaller #0 PREEMPT(full) [ 860.918499][T20137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 860.918510][T20137] Call Trace: [ 860.918518][T20137] [ 860.918525][T20137] dump_stack_lvl+0x100/0x190 [ 860.918557][T20137] should_fail_ex.cold+0x5/0xa [ 860.918580][T20137] should_failslab+0xc2/0x120 [ 860.918600][T20137] __kmalloc_cache_noprof+0x7a/0x6f0 [ 860.918626][T20137] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 860.918652][T20137] ? get_mem_cgroup_from_mm+0x88/0x600 [ 860.918678][T20137] ? get_mem_cgroup_from_mm+0x132/0x600 [ 860.918707][T20137] __do_sys_fanotify_init+0x5cf/0xe50 [ 860.918738][T20137] do_syscall_64+0x106/0xf80 [ 860.918763][T20137] ? clear_bhb_loop+0x40/0x90 [ 860.918786][T20137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.918813][T20137] RIP: 0033:0x7f1a0059c799 [ 860.918829][T20137] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 860.918847][T20137] RSP: 002b:00007f1a01404028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 860.918866][T20137] RAX: ffffffffffffffda RBX: 00007f1a00816180 RCX: 00007f1a0059c799 [ 860.918879][T20137] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 860.918891][T20137] RBP: 00007f1a00632c99 R08: 0000000000000000 R09: 0000000000000000 [ 860.918902][T20137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 860.918913][T20137] R13: 00007f1a00816218 R14: 00007f1a00816180 R15: 00007fff484fe118 [ 860.918936][T20137] [ 862.274456][T20172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4706'. [ 862.311870][T20176] FAULT_INJECTION: forcing a failure. [ 862.311870][T20176] name failslab, interval 1, probability 0, space 0, times 0 [ 862.385489][T20176] CPU: 0 UID: 0 PID: 20176 Comm: syz.0.4708 Not tainted syzkaller #0 PREEMPT(full) [ 862.385517][T20176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 862.385528][T20176] Call Trace: [ 862.385535][T20176] [ 862.385542][T20176] dump_stack_lvl+0x100/0x190 [ 862.385573][T20176] should_fail_ex.cold+0x5/0xa [ 862.385594][T20176] ? tomoyo_encode2+0xfb/0x3c0 [ 862.385617][T20176] should_failslab+0xc2/0x120 [ 862.385636][T20176] __kmalloc_noprof+0xe0/0x850 [ 862.385661][T20176] ? d_absolute_path+0x136/0x1b0 [ 862.385690][T20176] tomoyo_encode2+0xfb/0x3c0 [ 862.385716][T20176] tomoyo_encode+0x29/0x50 [ 862.385738][T20176] tomoyo_realpath_from_path+0x18c/0x690 [ 862.385767][T20176] tomoyo_path_number_perm+0x23c/0x580 [ 862.385786][T20176] ? tomoyo_path_number_perm+0x22e/0x580 [ 862.385807][T20176] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 862.385855][T20176] ? find_held_lock+0x2b/0x80 [ 862.385873][T20176] ? __fget_files+0x215/0x3d0 [ 862.385888][T20176] ? hook_file_ioctl_common+0x146/0x410 [ 862.385914][T20176] ? __fget_files+0x21f/0x3d0 [ 862.385933][T20176] security_file_ioctl+0xd3/0x230 [ 862.385955][T20176] __x64_sys_ioctl+0xb7/0x210 [ 862.385982][T20176] do_syscall_64+0x106/0xf80 [ 862.386008][T20176] ? clear_bhb_loop+0x40/0x90 [ 862.386030][T20176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 862.386049][T20176] RIP: 0033:0x7fe6d479c799 [ 862.386064][T20176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 862.386081][T20176] RSP: 002b:00007fe6d5712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 862.386100][T20176] RAX: ffffffffffffffda RBX: 00007fe6d4a15fa0 RCX: 00007fe6d479c799 [ 862.386111][T20176] RDX: 00002000000001c0 RSI: 00000000c0505510 RDI: 0000000000000003 [ 862.386122][T20176] RBP: 00007fe6d5712090 R08: 0000000000000000 R09: 0000000000000000 [ 862.386133][T20176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 862.386144][T20176] R13: 00007fe6d4a16038 R14: 00007fe6d4a15fa0 R15: 00007ffc81a67ce8 [ 862.386167][T20176] [ 862.386183][T20176] ERROR: Out of memory at tomoyo_realpath_from_path. [ 863.115063][T20174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4706'. [ 864.321345][T20205] FAULT_INJECTION: forcing a failure. [ 864.321345][T20205] name failslab, interval 1, probability 0, space 0, times 0 [ 864.470522][T20205] CPU: 0 UID: 0 PID: 20205 Comm: syz.3.4713 Not tainted syzkaller #0 PREEMPT(full) [ 864.470551][T20205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 864.470562][T20205] Call Trace: [ 864.470570][T20205] [ 864.470577][T20205] dump_stack_lvl+0x100/0x190 [ 864.470609][T20205] should_fail_ex.cold+0x5/0xa [ 864.470632][T20205] should_failslab+0xc2/0x120 [ 864.470652][T20205] __kmalloc_cache_noprof+0x7a/0x6f0 [ 864.470677][T20205] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 864.470703][T20205] ? get_mem_cgroup_from_mm+0x88/0x600 [ 864.470729][T20205] ? get_mem_cgroup_from_mm+0x132/0x600 [ 864.470759][T20205] __do_sys_fanotify_init+0x5cf/0xe50 [ 864.470790][T20205] do_syscall_64+0x106/0xf80 [ 864.470815][T20205] ? clear_bhb_loop+0x40/0x90 [ 864.470846][T20205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.470864][T20205] RIP: 0033:0x7fc0e8d9c799 [ 864.470881][T20205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.470899][T20205] RSP: 002b:00007fc0e9cae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 864.470917][T20205] RAX: ffffffffffffffda RBX: 00007fc0e9016090 RCX: 00007fc0e8d9c799 [ 864.470929][T20205] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 864.470940][T20205] RBP: 00007fc0e8e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 864.470951][T20205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 864.470962][T20205] R13: 00007fc0e9016128 R14: 00007fc0e9016090 R15: 00007fffd4989278 [ 864.470984][T20205] [ 865.422589][T20226] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 865.435049][T20224] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 865.458214][T20224] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 865.477513][T20226] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 865.518289][T20224] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 865.549819][T20224] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 865.860260][T20234] netlink: 'syz.2.4720': attribute type 3 has an invalid length. [ 865.906479][T20238] netlink: 'syz.2.4720': attribute type 3 has an invalid length. [ 866.111265][T20242] Invalid ELF header magic: != ELF [ 866.147097][T20242] FAULT_INJECTION: forcing a failure. [ 866.147097][T20242] name failslab, interval 1, probability 0, space 0, times 0 [ 866.197187][T20242] CPU: 0 UID: 0 PID: 20242 Comm: syz.0.4722 Not tainted syzkaller #0 PREEMPT(full) [ 866.197221][T20242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.197233][T20242] Call Trace: [ 866.197240][T20242] [ 866.197248][T20242] dump_stack_lvl+0x100/0x190 [ 866.197280][T20242] should_fail_ex.cold+0x5/0xa [ 866.197302][T20242] ? tomoyo_realpath_from_path+0xb6/0x690 [ 866.197328][T20242] should_failslab+0xc2/0x120 [ 866.197348][T20242] __kmalloc_noprof+0xe0/0x850 [ 866.197380][T20242] tomoyo_realpath_from_path+0xb6/0x690 [ 866.197410][T20242] tomoyo_path_number_perm+0x23c/0x580 [ 866.197429][T20242] ? tomoyo_path_number_perm+0x22e/0x580 [ 866.197451][T20242] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 866.197496][T20242] ? find_held_lock+0x2b/0x80 [ 866.197514][T20242] ? current_check_access_path+0x281/0x460 [ 866.197539][T20242] ? __pfx_current_check_access_path+0x10/0x10 [ 866.197594][T20242] ? d_alloc_parallel+0x864/0x14e0 [ 866.197625][T20242] tomoyo_path_mknod+0x164/0x190 [ 866.197653][T20242] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 866.197680][T20242] ? find_held_lock+0x2b/0x80 [ 866.197698][T20242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 866.197734][T20242] security_path_mknod+0x161/0x300 [ 866.197761][T20242] may_o_create+0x30/0x3a0 [ 866.197788][T20242] lookup_open.isra.0+0xa0d/0x11b0 [ 866.197821][T20242] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 866.197859][T20242] ? __pfx___might_resched+0x10/0x10 [ 866.197886][T20242] ? mnt_get_write_access+0x52/0x2f0 [ 866.197916][T20242] ? __pfx_down_write+0x10/0x10 [ 866.197944][T20242] ? mnt_get_write_access+0x1e9/0x2f0 [ 866.197973][T20242] path_openat+0x2291/0x31a0 [ 866.197997][T20242] ? entry_SYSCALL_64_after_hwframe+0x48/0x7f [ 866.198020][T20242] ? __pfx_path_openat+0x10/0x10 [ 866.198048][T20242] do_file_open+0x20e/0x430 [ 866.198069][T20242] ? __pfx_do_file_open+0x10/0x10 [ 866.198104][T20242] ? _raw_spin_unlock+0x28/0x50 [ 866.198126][T20242] ? alloc_fd+0x476/0x790 [ 866.198150][T20242] do_sys_openat2+0x10d/0x1e0 [ 866.198175][T20242] ? __pfx_do_sys_openat2+0x10/0x10 [ 866.198208][T20242] __x64_sys_open+0xfe/0x1d0 [ 866.198232][T20242] ? __pfx___x64_sys_open+0x10/0x10 [ 866.198266][T20242] do_syscall_64+0x106/0xf80 [ 866.198290][T20242] ? clear_bhb_loop+0x40/0x90 [ 866.198313][T20242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.198332][T20242] RIP: 0033:0x7fe6d479c799 [ 866.198348][T20242] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.198367][T20242] RSP: 002b:00007fe6d5712028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 866.198385][T20242] RAX: ffffffffffffffda RBX: 00007fe6d4a15fa0 RCX: 00007fe6d479c799 [ 866.198397][T20242] RDX: 78e22799f4a46f1c RSI: 00000000001882c2 RDI: 00002000000000c0 [ 866.198409][T20242] RBP: 00007fe6d4832c99 R08: 0000000000000000 R09: 0000000000000000 [ 866.198420][T20242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.198430][T20242] R13: 00007fe6d4a16038 R14: 00007fe6d4a15fa0 R15: 00007ffc81a67ce8 [ 866.198454][T20242] [ 866.203999][T20242] ERROR: Out of memory at tomoyo_realpath_from_path. [ 866.702545][T20250] FAULT_INJECTION: forcing a failure. [ 866.702545][T20250] name failslab, interval 1, probability 0, space 0, times 0 [ 866.734724][T20250] CPU: 0 UID: 0 PID: 20250 Comm: syz.1.4725 Not tainted syzkaller #0 PREEMPT(full) [ 866.734754][T20250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 866.734766][T20250] Call Trace: [ 866.734773][T20250] [ 866.734780][T20250] dump_stack_lvl+0x100/0x190 [ 866.734813][T20250] should_fail_ex.cold+0x5/0xa [ 866.734836][T20250] should_failslab+0xc2/0x120 [ 866.734874][T20250] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 866.734911][T20250] ? kstrdup_const+0x63/0x80 [ 866.734945][T20250] kstrdup+0x51/0xe0 [ 866.734974][T20250] kstrdup_const+0x63/0x80 [ 866.735004][T20250] alloc_vfsmnt+0xe5/0x6a0 [ 866.735025][T20250] ? __pfx___might_resched+0x10/0x10 [ 866.735053][T20250] clone_mnt+0x4b/0x930 [ 866.735083][T20250] copy_tree+0xfc/0xbf0 [ 866.735100][T20250] ? __pfx_down_write+0x10/0x10 [ 866.735140][T20250] copy_mnt_ns+0x2bd/0xc30 [ 866.735161][T20250] ? create_new_namespaces+0x30/0xac0 [ 866.735189][T20250] ? rcu_is_watching+0x12/0xc0 [ 866.735233][T20250] create_new_namespaces+0xd3/0xac0 [ 866.735258][T20250] ? bpf_lsm_capable+0x9/0x10 [ 866.735277][T20250] ? security_capable+0x80/0x260 [ 866.735308][T20250] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 866.735335][T20250] ksys_unshare+0x473/0xad0 [ 866.735360][T20250] ? __pfx_ksys_unshare+0x10/0x10 [ 866.735392][T20250] __x64_sys_unshare+0x31/0x40 [ 866.735415][T20250] do_syscall_64+0x106/0xf80 [ 866.735440][T20250] ? clear_bhb_loop+0x40/0x90 [ 866.735463][T20250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.735482][T20250] RIP: 0033:0x7fe3fdb9c799 [ 866.735499][T20250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.735516][T20250] RSP: 002b:00007fe3fea11028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 866.735543][T20250] RAX: ffffffffffffffda RBX: 00007fe3fde15fa0 RCX: 00007fe3fdb9c799 [ 866.735555][T20250] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 866.735567][T20250] RBP: 00007fe3fdc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 866.735579][T20250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 866.735590][T20250] R13: 00007fe3fde16038 R14: 00007fe3fde15fa0 R15: 00007ffd181bc638 [ 866.735613][T20250] [ 867.514485][ T5826] Bluetooth: hci4: command 0x0c1a tx timeout [ 867.520575][ T5828] Bluetooth: hci5: command 0x0c1a tx timeout [ 867.594538][ T5828] Bluetooth: hci3: command 0x0c1a tx timeout [ 867.601339][ T5826] Bluetooth: hci2: command 0x0c1a tx timeout [ 868.174998][T20270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4731'. [ 868.192968][T20269] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input36 [ 868.480121][ T61] ------------[ cut here ]------------ [ 868.485810][ T61] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 868.492764][ T61] WARNING: net/mac80211/driver-ops.h:1723 at ieee80211_set_active_links+0x2d0/0x9d0, CPU#0: kworker/u8:4/61 [ 868.504367][ T61] Modules linked in: [ 868.508531][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 868.517968][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 868.528441][ T61] Workqueue: events_unbound cfg80211_wiphy_work [ 868.535457][ T61] RIP: 0010:ieee80211_set_active_links+0x2d7/0x9d0 [ 868.542060][ T61] Code: 06 00 00 e8 6b 1c 05 f7 48 8b 34 24 48 81 c6 20 01 00 00 48 89 34 24 e8 57 1c 05 f7 48 8d 3d 40 8a e7 05 48 8b 34 24 44 89 fa <67> 48 0f b9 3a e9 e0 fe ff ff e8 3a 1c 05 f7 0f b7 c5 4c 8d bb 30 [ 868.562574][ T61] RSP: 0018:ffffc9000210faf0 EFLAGS: 00010293 [ 868.568742][ T61] RAX: 0000000000000000 RBX: ffff888145a82a90 RCX: ffffffff8b02fa6e [ 868.576931][ T61] RDX: 0000000000000000 RSI: ffff888145a80120 RDI: ffffffff90ea8510 [ 868.585125][ T61] RBP: 0000000000000040 R08: 0000000000000005 R09: 0000000000000000 [ 868.593311][ T61] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888145a817f8 [ 868.601393][ T61] R13: 0000000000000000 R14: ffff8880298b8e80 R15: 0000000000000000 [ 868.609669][ T61] FS: 0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 868.618899][ T61] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 868.625724][ T61] CR2: 0000001b34712ff8 CR3: 0000000040ffe000 CR4: 00000000003526f0 [ 868.634468][ T61] Call Trace: [ 868.637770][ T61] [ 868.640700][ T61] ? __lock_acquire+0x4a5/0x2630 [ 868.646091][ T61] ieee80211_if_parse_active_links+0xbb/0x120 [ 868.652177][ T61] ? __pfx_ieee80211_if_parse_active_links+0x10/0x10 [ 868.659015][ T61] ? __lockdep_reset_lock+0x60/0x80 [ 868.664333][ T61] ? ieee80211_if_write_sdata_handler+0x1a/0x90 [ 868.670687][ T61] ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10 [ 868.677601][ T61] wiphy_locked_debugfs_write_work+0xe6/0x1c0 [ 868.683767][ T61] ? trace_wiphy_work_run+0x73/0x240 [ 868.689206][ T61] cfg80211_wiphy_work+0x446/0x5c0 [ 868.694548][ T61] process_one_work+0xa23/0x19a0 [ 868.699592][ T61] ? __pfx_process_one_work+0x10/0x10 [ 868.705059][ T61] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 868.710731][ T61] worker_thread+0x5ef/0xe50 [ 868.715595][ T61] ? kthread+0x13a/0x450 [ 868.719885][ T61] ? __pfx_worker_thread+0x10/0x10 [ 868.725295][ T61] kthread+0x370/0x450 [ 868.729511][ T61] ? __pfx_kthread+0x10/0x10 [ 868.734200][ T61] ret_from_fork+0x754/0xd80 [ 868.739278][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 868.744753][ T61] ? __switch_to+0x7b4/0x1120 [ 868.749525][ T61] ? __pfx_kthread+0x10/0x10 [ 868.754137][ T61] ret_from_fork_asm+0x1a/0x30 [ 868.758965][ T61] [ 868.762008][ T61] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 868.769458][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 868.778738][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 868.788881][ T61] Workqueue: events_unbound cfg80211_wiphy_work [ 868.795155][ T61] Call Trace: [ 868.798483][ T61] [ 868.801632][ T61] dump_stack_lvl+0x100/0x190 [ 868.806356][ T61] vpanic+0x552/0x970 [ 868.810349][ T61] ? __pfx_vpanic+0x10/0x10 [ 868.814909][ T61] panic+0xd1/0xe0 [ 868.818659][ T61] ? __pfx_panic+0x10/0x10 [ 868.823089][ T61] ? check_panic_on_warn+0x1f/0x90 [ 868.828232][ T61] check_panic_on_warn.cold+0x19/0x34 [ 868.833641][ T61] ? ieee80211_set_active_links+0x2d0/0x9d0 [ 868.839556][ T61] __warn.cold+0x191/0x348 [ 868.844006][ T61] __report_bug+0x296/0x3d0 [ 868.848540][ T61] ? ieee80211_set_active_links+0x2d0/0x9d0 [ 868.854589][ T61] ? __pfx___report_bug+0x10/0x10 [ 868.859637][ T61] ? __lock_acquire+0x4a5/0x2630 [ 868.864598][ T61] ? ieee80211_set_active_links+0x26e/0x9d0 [ 868.870602][ T61] ? update_cfs_rq_load_avg+0x51/0x550 [ 868.876085][ T61] report_bug_entry+0xe1/0x290 [ 868.880959][ T61] ? ieee80211_set_active_links+0x2d7/0x9d0 [ 868.886950][ T61] handle_bug+0x1cd/0x2a0 [ 868.891299][ T61] exc_invalid_op+0x17/0x50 [ 868.896002][ T61] asm_exc_invalid_op+0x1a/0x20 [ 868.900942][ T61] RIP: 0010:ieee80211_set_active_links+0x2d7/0x9d0 [ 868.907543][ T61] Code: 06 00 00 e8 6b 1c 05 f7 48 8b 34 24 48 81 c6 20 01 00 00 48 89 34 24 e8 57 1c 05 f7 48 8d 3d 40 8a e7 05 48 8b 34 24 44 89 fa <67> 48 0f b9 3a e9 e0 fe ff ff e8 3a 1c 05 f7 0f b7 c5 4c 8d bb 30 [ 868.927339][ T61] RSP: 0018:ffffc9000210faf0 EFLAGS: 00010293 [ 868.933428][ T61] RAX: 0000000000000000 RBX: ffff888145a82a90 RCX: ffffffff8b02fa6e [ 868.941488][ T61] RDX: 0000000000000000 RSI: ffff888145a80120 RDI: ffffffff90ea8510 [ 868.949555][ T61] RBP: 0000000000000040 R08: 0000000000000005 R09: 0000000000000000 [ 868.957730][ T61] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888145a817f8 [ 868.965725][ T61] R13: 0000000000000000 R14: ffff8880298b8e80 R15: 0000000000000000 [ 868.973857][ T61] ? ieee80211_set_active_links+0x26e/0x9d0 [ 868.979938][ T61] ? __lock_acquire+0x4a5/0x2630 [ 868.984997][ T61] ieee80211_if_parse_active_links+0xbb/0x120 [ 868.991083][ T61] ? __pfx_ieee80211_if_parse_active_links+0x10/0x10 [ 868.997797][ T61] ? __lockdep_reset_lock+0x60/0x80 [ 869.003101][ T61] ? ieee80211_if_write_sdata_handler+0x1a/0x90 [ 869.009366][ T61] ? __pfx_ieee80211_if_write_sdata_handler+0x10/0x10 [ 869.016156][ T61] wiphy_locked_debugfs_write_work+0xe6/0x1c0 [ 869.022242][ T61] ? trace_wiphy_work_run+0x73/0x240 [ 869.027544][ T61] cfg80211_wiphy_work+0x446/0x5c0 [ 869.032874][ T61] process_one_work+0xa23/0x19a0 [ 869.037828][ T61] ? __pfx_process_one_work+0x10/0x10 [ 869.043325][ T61] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 869.048977][ T61] worker_thread+0x5ef/0xe50 [ 869.053586][ T61] ? kthread+0x13a/0x450 [ 869.057843][ T61] ? __pfx_worker_thread+0x10/0x10 [ 869.062965][ T61] kthread+0x370/0x450 [ 869.067140][ T61] ? __pfx_kthread+0x10/0x10 [ 869.071737][ T61] ret_from_fork+0x754/0xd80 [ 869.076371][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 869.081706][ T61] ? __switch_to+0x7b4/0x1120 [ 869.086403][ T61] ? __pfx_kthread+0x10/0x10 [ 869.091001][ T61] ret_from_fork_asm+0x1a/0x30 [ 869.095784][ T61] [ 869.098857][ T61] Kernel Offset: disabled [ 869.103202][ T61] Rebooting in 86400 seconds..