last executing test programs: 11.279134483s ago: executing program 0 (id=1482): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) ioctl$auto(0x3, 0x5606, 0xfffffffffffff4e0) 10.557534578s ago: executing program 0 (id=1484): r0 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa1\x00', 0x101041, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/kernel/security/integrity/evm/evm_xattrs\x00', 0x3) 9.883091492s ago: executing program 0 (id=1485): timer_settime$auto(0x1, 0x3, 0x0, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0xa, 0x3, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2800, 0x0) ioctl$auto(r2, 0x4bfa, 0x9) fcntl$getown(r0, 0x9) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0xe) mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket(0xa, 0x3, 0x3b) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYRESDEC=r1, @ANYRES64=r5], 0x44}, 0x1, 0x0, 0x0, 0x40000c4}, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) socket(0x1d, 0x2, 0x7) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x1d, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) io_uring_register$auto(0x2, 0x21, &(0x7f0000000240), 0x1) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) r6 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8802, 0x0) ioctl$auto_BLKTRACESTART2(r6, 0x1274, 0x0) socket(0x22, 0xa, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x7) swapon$auto(&(0x7f0000000000)='/dev/kvm\x00', 0x101) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) 8.298561229s ago: executing program 1 (id=1490): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video6\x00', 0x1600, 0x0) poll$auto(&(0x7f0000000480)={r0, 0xffff, 0x29}, 0x6, 0x8) 7.969489372s ago: executing program 1 (id=1491): mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x900, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x8000400) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, 0x0, 0x20201, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x8) mmap$auto(0x40, 0x40008, 0x147d, 0x29b72, 0xffffffffffffffff, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x10001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd10/queue/iosched/read_expire\x00', 0x1c2b02, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0xa}, 0x0, 0xf4240, 0x1) socket(0x10, 0x2, 0x4) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8180, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x5) ptrace$auto(0x4206, 0x1, 0x0, 0x200005) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) mq_open$auto(0x0, 0x62, 0xfff6, 0x0) socket(0x3, 0x1, 0x0) socket(0x2, 0x2, 0x0) select$auto(0xa, 0x0, 0x0, &(0x7f00000002c0)={[0x20e5, 0x9, 0x2, 0x1, 0x5, 0x4, 0xdb60, 0x8, 0x9, 0x100000000000000c, 0x8, 0x100, 0xfffffffffffffbff, 0x4, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) 5.735000175s ago: executing program 0 (id=1492): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x5, 0x0, [{0x40000072, 0x7, 0x1000}]}) r4 = socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x6, 0x23, 0x0, &(0x7f00000000c0)=0x28000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) openat$auto_hpet_fops_hpet(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) unshare$auto(0x40000080) r5 = socket(0xa, 0x5, 0x0) mmap$auto(0x4, 0xa020009, 0x3, 0xeb1, r5, 0x7ffe) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_STATION(r2, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x200, 0x70bd2d, 0x25dfdc03}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) sendmsg$auto_TIPC_NL_MEDIA_SET(r5, &(0x7f0000001ac0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a80)={&(0x7f0000000380)=ANY=[@ANYRES64, @ANYRESOCT=r1, @ANYRES8=r6, @ANYRESOCT=r2], 0x120c}}, 0x4008004) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0x705400, 0x0) bpf$auto_BPF_MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)=@bpf_attr_1={r0, 0xf7f, @next_key=0x7f, 0x2}, 0x9a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/system/machinecheck/machinecheck0/cmci_disabled\x00', 0x2862, 0x0) write$auto(r6, &(0x7f0000000640)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\xff\x7f\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc:\xfa\x01\xd1\xa3\xb5\xc2B\xa5\xac:woR^a\xb9}\xe7\xbd\xe1\xf77.\xa3\xd8\xc2T\x95\x13\x91\xb6p\xf3\xb2w\xe6\xd7\x94DW\x97\x90a\xe6c\xfb\x88x\xd5L\xa9\xe4\x82\x04\xb1\x8b\r\xcaP\\\x1aVP\xc9\xa4`\xfd\v\x94\f\xc1\x0fQ\xc9\xdcL\x03\x9c\xbfk\xa6\xb1\xb0\xa1\xeeJ\xd8\xef\xc8t\x9d\x1e=J\x91W\xc6AuJ\xb9Q\xed\xd1\a\x05\x9d\x85\xb7b#r\xcd\xaf\xb7\x9f\xf7\xd2\xae\x0f\x98\xa9&\xb6~\xd4\xbd\xbbr\xb9\xc3\xacH!\xc1\x90K2\x05K@\xee\xac\xe8\xc7\t\xab\xbf\xa3\xedb\xd7\xb5\xd7\x83&\x95\xb2?\x0e\x85\xaaIGu\xd6$\xeb\xb6\xdd\a\x121\a\xac\x1bx#\x87\xa9\x10\x9b\xf8YD\x04ZL\xca\x99]\x8f[\x90[\xa8\xbf\x98\xa6\xe50(zC\xe84*w\x13\x96\xd5\xd0\x877\x12\xbc\xa1\xd0h@|\xf9\xfa\x9b\x17\x94\xb9\xe7\xf3\x15\x05\x91\xe8\x98p\x7f:\xd7s\xd9wo\x82\xda\xec\x91\xb7\xd9;H\x8a\b\x00\x00\x00\x00\x00\x00\x00\x8aZ\x94\x14$X7\xaeW6=^I\x9fQ\r5c\x81\xca]\x97m\x89o\x8f\xd8}P>I\xd0\xb3\x88C\xd7', 0x100000a3d9) ioctl$auto(0xffffffffffffffff, 0x540a, 0x0) 4.078681939s ago: executing program 1 (id=1498): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r0, 0xb21064a7, 0xffffffffffffffff) 3.797973313s ago: executing program 1 (id=1499): r0 = socket(0xa, 0x801, 0x106) recvmmsg$auto(r0, &(0x7f00000003c0)={{0x0, 0x5a, 0x0, 0x0, 0x0, 0x7, 0x7f}, 0x7ff}, 0x70000000, 0x9, &(0x7f0000000400)={0x3, 0xbd64}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x6, 0x19, 0x0, &(0x7f0000000040)=0x1) fanotify_init$auto(0x5, 0x2000000000002) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r3 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0x40047452, &(0x7f00000005c0)=0x7) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, r2, 0x0) pread64$auto(r5, &(0x7f0000000100)='/sys/kernel/security/safesetid/gid_allowlist_policy\x00', 0x7, 0x0) r6 = socket(0xa, 0x1, 0x84) ppoll$auto(&(0x7f0000000000)={r6, 0x1, 0x7}, 0x400, &(0x7f0000000040)={0x0, 0x6}, &(0x7f0000000080)={0x5}, 0x8) openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x1, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) write$auto(0x3, 0x0, 0x81) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x78, 0x8, 0x0, [0xe, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x9, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200004, 0x2, 0x4, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000440), r1) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x90) 3.546537167s ago: executing program 0 (id=1500): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000540), 0x20000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000580)={0x80000006, 0x0, 0xd12b, 0xfffffffd, 0x200a}) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x5, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, 0x0, 0x100000007) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xffffff00, 0x0) setsockopt$auto(0x3, 0x6, 0x5, 0x0, 0x8) statmount$auto(0x0, 0x0, 0x202, 0x2000000) mmap$auto(0x0, 0x4020009, 0xdc, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x8000000000000001, 0x15) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/mountinfo\x00', 0x20200, 0x0) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="a2a725bd7000a0c582043c197d65022e3375ad01b3b7244ae60bf5958da29bd4790936000a00ffffffff42cad213b10cb2370776141ec3365ded5c771c3371f18848dc406ad35832495abe071d74d7542995af2349f9a7e7c55911d95176eac013972f815c0bb4e513a8a91406877e7fef73194ff4c4aa0a8a"], 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0xc040810) read$auto(r1, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) 3.057556034s ago: executing program 2 (id=1501): r0 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000002c0), 0x20001, 0x0) writev$auto(r0, &(0x7f0000001c80)={0x0, 0x1}, 0x7) 2.842925194s ago: executing program 2 (id=1502): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000840)={0x831b, 0x0, 0x0, 0xfffffffffffffffb}) 2.586063643s ago: executing program 2 (id=1503): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r0, 0x7, 0x5, 0x4) 2.356792418s ago: executing program 2 (id=1504): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/afs/cells\x00', 0x100, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) open_tree$auto(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x101) creat$auto(&(0x7f0000000040)='./file0\x00', 0x3) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r1, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) io_submit$auto(0x6, 0x7f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x8, 0x3, 0x2, 0x3b, 0xfffffffffffffc00, 0x2, 0xfff, 0x0, 0x6}) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/execdomains\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x8100000041, 0x800000000000413b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000040)="20202078207e5cc0023af10e9bfa1babfa203753ca9a20370a", 0x19) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="011526bd7000fbdbdf250b0000000800130007000000080004000400000004000b"], 0x28}, 0x1, 0x0, 0x0, 0x24044095}, 0x4000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xa}, 0x7}, 0x3, 0x2) 1.42628843s ago: executing program 3 (id=1507): r0 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000001240), 0x80, 0x0) poll$auto(&(0x7f00000000c0)={r0, 0x1}, 0x1, 0x2) 1.187732586s ago: executing program 3 (id=1508): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x9000643b, 0xffffffffffffffff) 956.538462ms ago: executing program 3 (id=1509): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) socket(0x23, 0x80a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000600), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002080)='/dev/ptyb1\x00', 0x480, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1p/sub2/xrun_injection\x00', 0x28102, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x40080, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/031/001\x00', 0x2, 0x0) socketpair$auto(0x8001, 0x8, 0x8000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyu5\x00', 0x40, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'dummy0\x00'}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x1, 0x1000060}, 0x8c011) shmctl$auto(0x8, 0xfffffffe, &(0x7f0000000140)={{0x3, 0xffffffffffffffff, 0xee00, 0x3fe, 0x6, 0x6, 0x400}, 0xffffffff, 0x4, 0x76d2, 0x5, @raw=0x6, @inferred, 0x40, 0x0, &(0x7f0000000040)="b5b8704c75117c52a0aee18e66292b885eec514213972b750b27c06199c226a6a333a6c0ba308d759a13b442eb3f708cebc821abf4185252d4f6a4e0bdf1fdfa25db53274435f55190c472b9069f8039ab068b32f9a52407216888532182847abca053bfb896b4d1e0a54d50809c29c8bea054", 0x0}) socket(0x1d, 0x2, 0x6) socket(0x10, 0x80000, 0x75) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/driver/nvram\x00', 0x10b402, 0x0) socket(0x2b, 0x1, 0x0) 793.986133ms ago: executing program 0 (id=1510): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/dummy_hcd.0/usb1/power/autosuspend_delay_ms\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)='-7', 0xfffffc49) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x2, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) write$auto(0x3, 0x0, 0xfdef) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x121582, 0x0) fsmount$auto(r2, 0x4, 0x2) listmount$auto(&(0x7f0000000100)={0x20, @raw, 0xffffffffffffffff, 0xfffffffffffffffb}, 0x0, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$auto(r4, &(0x7f00000007c0)={&(0x7f00000006c0), 0x200, &(0x7f0000000740)={&(0x7f0000000700), 0xf}, 0x400, 0x0, 0xe, 0x466d}, 0x6) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r1, &(0x7f0000002080)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002040)={&(0x7f0000000940)={0x1580, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x8}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x1310, 0x6e, 0x0, 0x1, [@typed={0x8, 0x169, 0x0, 0x0, @uid=0xee01}, @nested={0x2d, 0x4f, 0x0, 0x1, [@generic="0ee823346cf821bb6aa3b1b4a3c97e711d3be9c406eafeaa7d3e07b78874139b8661c9cf1d", @nested={0x4, 0x7d}]}, @generic="9f5d908f8d6190dcc73f9b3b9020814384f90b297501b2bf863ded74525316647526fc2235572811dec4d439e4938da1ef844288dd8a055bd949a9c9480cbdae8bf6ae2465870c3706ef3934ad1dc216328ee574913be3c5da85", @generic="16d5c8789e7ec254a0056e8593e95f8b05201e980f4092dec3174c2b95f5620e778ad8cb2676fbf8cddfda9e25", @nested={0x79, 0x90, 0x0, 0x1, [@typed={0x8, 0x12c, 0x0, 0x0, @u32}, @generic="c70e1dab1540f7a273f17eb38685fa4522694c88218458e5bbfb58e72d05332546ae19c953df1441f45eee831561608773add61004a7f95c79071853d43a0d84c00718374eb5aecf7d8776a02382fecd8dcb98b51168d5d380ece6f3a833353d7a2ceef61b", @nested={0x4, 0x27}, @nested={0x4, 0x6e}]}, @generic="2b88dc205c86ba823fcee65791aa0c10cbc4dd47857a97a67b7f315251167dc9737e446ed61ef44636b001fe8433ec4ef16937822b40efe6769947853b934d1d814428004a5c73be8a1ac186d75b74945e0b96b0ee6904d8e43a54eb87485f83cbc6136d39327701af8cbb8a09932138f7b66e2b86908f1ef9", @generic="df6b9eba89848f1b415744469819f233e2e59ac285486de07ad84e9ef6426a573cc01baef243d1673f0ca717e837624164f4a4deb6bead3aad6289b204ff3bd5ba45f65da03c49f3c01b31301876a41dc8f6ef76b29748e7c65cb3b8bc1fad401f874861f0830e5eafed14c1da751af73b5e1583e49fcf8ae57dbe1f0a5b5ec37aaeebfb5a8f0f2c5de6d8c6b999138b893b573e2dcf515a917ac2a34646b8e4010ee914c85338f1e30cdc607599c65d2b0adc3f421ec7fa7b1b54036e37715b9ee1c47bdb52fa13496bdc2a76961a8b09349f769283f7e887874ae810de3026fbfe5796cab634a78fb33e3dbc78c8f6da0c8be76055cb6f4783db404abb4a69150041459e7ec3a53176c9c4cb16c889496d51124cc46854f5c70f3474aeefbaab81635c16264ddc660ec2ae2afc6388f04b00ae8cb65b1e92d5010a2660c13a0c8a6ba0d7849d88d8d3adadc5f4bea72eeb9de2c880405296a68238c2c73b39ad4127543ec0b5f4fd0753562bae9e61c7a5828d8459cf977f3345f97cd5ce012441913bca92b998dec5920013694ae1d8dc0f726f0865203005df3540c1b1675fc449dcfe34e889a947299221cebd5807840db6a193ecee034be1afe1627fb9065e3f1aba6f0dbe1539da162c3095e3dc1dc0bd8c168ad104ecef0945e065ec3f96adcaff6ea3536e410a8ab6f735c1d0080e225aa8fdba222659b9bceeca190c58d5fe66a4c4a18e3bca12f04bbace9d014f33afd601efe6215c3f5e139b031c968bd25775c5b2b169859a4e3535c6151f15c168acd73b456ae6a6e97fe8ead14fcecb74a02395500ad7b196e1eacbcd2dc3635745af241867f1a6b3380b9e12cda52767579b82a9daed1a51b4fa1e1e4703ad9caba130cd4ca549999605da21e35374d155c10fa4264b2e31de1732f6c92048f977cc67fb687796ff4f3e0426ce39b0aeb8fb263b6235f8abe4df795d4e3bfb74461baee55c00e5b2cf0fdde050e5fd39b0f29bdb170dbc25fb59bb181ce123b98afaf23bd459e4718af31091c7191b4c9b42e8b7ddb2a9a2596bee2797d4db9a50c935cd31e551d06edb37d0b91cd6769399e1c6fe87ce53824bf624e898181d2e9f40bce33e384a62a758b0627c2a85a9e94a5ac24bd3d6789ea438bb0d1d564e5d4c3afc5196787f5b31c46db5e0779c5466ef83a7a31eb175c3f65c372f213f106a182c4a226ce14bffcb0f7362e21aebe19ae22cbdbc7cc1540c63e0f2ebcfab9149b90f61c9416fa69f81a419d3ea87073e8ffad046fc1ef5252191e02a2d7354e5a630718ef21823bd616af7cd9700a43aa9153c8bbef66defc4b10230ef0a92cdbe9af7bfe71e8cba85a379bc293b18b538b22c935030d68262dd6957094771ce21118991f4fd7efcaa57abb57222d8b7ced46c4ebb6bcceca0398823b1bb72ed9712f36a53c0cab37074d20f82da727cf7c3071f8ec7e3bbdd70be6a62819d2da8ae6830d23b5154630252872aecb57996f96a69df45837671200840107bed374acb91b33b65de3be5860c8cf9a1cc8e4486078dad412c39d38f10887557778d483d6391e9cb821bcc5a9dd4e5e19ea5e23e3b6e27b0e9011a422338e30ad102f7228ad1577fddeb97363767b0815dfacf535e97fe0785c5b5430cc6aa26cd712436e34f2ee6ef45f4ed05804ec2c45ebd57c75378bee65181c5c13c7cbc180c2c4fc874975d093a95eb1859cc72b46cbad9ecacba053cd3be3240255e5908655b824cc2992a51bad6d7afbf1819eb97194f4268a827f3481cf3512381d91e402f64d4bb8cc0929b2651e8411ed8f7d52390bdd749cd1e18ee6ce8192b30c0cf7cdc75d62e6ba833a1dbaa6e5cfd5cb53a64d3648a8e546d3687bcdc811d2889d27b6bf45cefd74a908c6ca483f933caeaf36dea1e2a8c760fc0215d552f6ffd7495577668e511e656aa06a422571d75141691e6dcdfef6bb3e477cc73269d82e41b889d1580604c7d45c7cc212d64934ecaf8036ffcb899f9b58d86c5fcbc594c65cbddf330ccf27b95bba81b11155119c85495c4f1dd4c7c230f4591b9dbf0a8e0c4a99f7889f5c5e3a7dc275e56fb38ea0c4435eb696d1b87d7e7055ebc6d7b1ca32d1b60a5be77d7062aad6598975f2bc948e08f4f734bb601dd336cff91c88bdd3581cce455b213c0e9232614c7556cf092b2fab0574c2881d84bb1a5b66f1a4fa4f5d688a3bc6829115544e6f982a870c50605ee0b110a33b4b5cecc7dc6c4f6c761098afec5e13c2eff59d5f65d3fc9275f29dc788418af1e60f6e6cadcdd5ec1aae9ddfdeae2d0a337c7ab66c07bb5e53e4ca0ef5714156825bf84c6247d4763222e33536d066ba1b828a0347c4e8467e399f6d26c8686d8480f65ae5edf7e34684e379e2005418727918b01e054f2791e1f699f828c1d31ff929e5d8e7d593e60470da9a61af7f5262f5ebe2ee34feb598979a438e81b8ae6f8604d1dc2bb63c413d701a452ef876962588bc1d9b4a235a1265a01849eb0517ad7bdcd437bf72fd0d44461503750a0f7cabde890df55f3671e651a73503da53c3240171ee087efbb34454264814e4a001d608f5cc609aa32aa46d5fc8d876b5da9417bce6b09ef58bfc4e2c1c94bcea166e6cc092c9fef5551a7f11704be081e9a045b31fb56e7f2c403c96c59cef658cb095a9ab5a88fc802cc6ad2fcfcd4f79628433652e451e67f41cb018372668274bf2bf7e1d2f2769c6ada2ae2edbfe1b273b0e742e157bae4865ed92b0ad17bd94fa2ccca9d5ef4c4475f416396b6978fff9737ca5b5e3005c04a88303f881d08b3741f63351d50b2c18d1ee66b1bc4b243d9b681656bbad5f7ea00b53db84a8caf1815c62a607cadd0b631d8b48425bca5f08cb7a7d20293a1f0bd2dbac267cbf18522d840e90c1c50677095c8097be7739dad397ecd7d5de349c150789bfc376b2a2363167359294fcd194b87ac076d997c328ae26a4ff0221edb273aed04f5096d45164b983fcc0b7ae39efcb8cd322e71a93fad6cd3aa04bbb10128e41ce5ef704cc4ad509749102b4b45a57f9b0e3b24aa3fab7e176cbe3493e45140baf019d1b3fb59ea3ff1914cfeb6394032003b8322bf42db7c74614b1758e24794d80fb2790ea20a3432699f0df78c00b846b62c008e74863cf2ae292fe59b5e62fe507a4c1d08a7ff205dd55ff156ff0de42c30bc83856451a320c7f9c09f93bbf82e915e1e64fe628c427e71d8fd4c1df9ea8e974a2e78971bced6f7b800460f269cf9e206d5c63ba2162e0eee2d4c60c55a6ede603987f7b6c36b5f65bcf8683a1556ec989207462295cb644c3671fc4a542ee687272a4a5acda2bca1b5ea05922f7330d4c08390aaf1a6bd8c78b4c5c1c34de83c461c6d842d5bb2333ef3838b1bbf51ff33158a39c5780beea764175cfd0e51d3b46985dc8c75ad9990a59dfb9e97eab4e9dd295e42bac11a50afeafc6ce73cbdebb1a903d352154a84daa618cc45b0c1ae972d24657950d56000e1993341aed0f694cf37fcd5f9dcede4cbc1a151e1a81d3d89095c81262cb993f58b4286cd306eef2741eb5e58d157d873cd0f24128f75fc00bb7d4aaae67f80452fa915d33f761fe3e9ea1ba97ba979266c9bb75834a9233dde7a10398e6f98d50ebed4c43e6506ccfcec9f5e4d774b55133a7ad1147e8939b843e251ca8180aaab14ccd851044ddd3e0d9581a10481fdab626af410e7a4d81b11ff7b7126dba6aa83bb2ad7a7c216329aaed3774fdf80b646e62629265239bdec9ef17b3dbadbf629c8f8d0cdb1726e8387c88489a39c8287207168470e92d5aaa5c1344697133678d022cc1f39cd4b7d1de1fc0854a5f369b1fe88552b7eb47eb7f01202520dd48a76845d2e824231df177a78ba7de6d00980065b208ddde063471a9f5b89f307e64c908c2735a9473eef65786c73840e5cf582261aade1b88dea1591118ad8af5132e4556af270610795a38c2e145955e12324764aaa524c89f812367b61c0dd999c45cdbbe515eb08aaf5d5ecd19725890af1cce5642629d14b91b44d852f8144f6fe5778d02d597f3da2f15e3d79d83c72eb3d5067d91fbc7e6e7eee217ae83af9b422897fc0a7f108b77bb7350243a465c2009ee3642d60a89d00c4afa5db2425475fb01e09fd284b04ad73a5f4f14d15618bd714d3083ae7d3fef585eef0b06da79993926860776747761f4b2942aaa8a5e250afe3bff23baa5ab1cd15694052ee44a4c2b0ab1030eb2f0685dd2894db76b772b8bc08a9eb0521ddd1dae3df5b54bbc5a56a695510e0aa44f984919fd00179695094eb02000ab528576ff1f599b26ed8c4b1b50ba3349a6bb7a3a5f401f393ed9717d6db576a048d0fad8d978ff31a0a19e24e2283d5ff1a4723612e7a44630b44ef726d2ed6ae68e25cd9ab563b60bc0da61188291de88dc1523fa656857453788baba329242272a46c22ee10b2615c3351c43a66f917f8148e16a0932e5d45c75d3ab72b9726148c44c01768a427066bdf50ccbff6154b19c3df56f63ac6e9e9d64ddf7a16852e1e5008bd256766d8b552e09ebb89d780f331515ba47e8f3e6bad795ff2d86d52c5f6acfed5804da466e17e6ec6b2f93a31835c50667b1597de809c4902ac28e9e17c07f18cab4368e5273f8f71708fc57954620450c39bc9587b140f17452742582ffd62c19d20b3379c1109e4fc120acd4ad9a2f321089a56792f6cfcb537ec798c2d1c795f21162fc9f7ed55d0258174e0b60d9eeb14a8e8f945953d2231890e4e09adbe076c98b58c2d61d2a74322ecf0b9ce2d7c560e9dc533fb9dbb2e736570a3718aabf067c4da924046b65236cbfa4e451386fc0caf7fdbbd4c9c7579b8f127b2e560e9435bb366e4ad0083f8abb2ceca0935898c2c95b09c5d73449a7b9b08d6544eb2961643568a826b75c2a7f78c7aa862b8ceb2d40e5f0c3a77f9fadb6b4b10c7080efe129e82176e90a354099a12c0d51f30089441270bc677a9df0da88297c62c33a0dba9e84eaf1fceddd2c91c531883573ced622762706515b36a04cface9562d32b9f27b578e64726c9bdaa608a3edcf96f68e4db43eade020378b2c9138c6cb4a028960582bbcbdcaa120099231d2dad23773e3f377aef75b58bf126159b1b912524f5676e8672a0e9feddaae3871bd2ca08e2d6c88cf9a92dde652819c551abf52d1d72f3827e6160b65a4651e98887e9ab5eaab4a4461e35892de382d9016eefda15e924cb7bc9c191fa2f7486c2e32cd2095ba5b696654845d24066af196323e1edab9460105ecbb415e5bc9a12b22c1e780afa4dd1a2fc9e69c2c0abfeb1f770e755824328c88117bff796e0dcf6c38caca193e831de7142102b6e8dc8b0f5961001e2012906cbe639fbc5daf150aedba23ffd3dd3e1ee690ee84b9f038aa1d8b1db13af0584605c6a94e3b27c2daac18e554c4e02a69189aaf27554754b015645400ae79df647d87f2a8a7cfa54ce74c8c0c81149e39d193adb5d699b70212c7e453823d274bbd5c0fd6fc230a352761669b9d2abf5a0b01af78cfeba9593eaa72297e929ce46b80da748a36ab94efbfcd8d6724a0724427de038734c85276880bbbd0ccb8429a6530ca4cd579103493de80c4d5c50ba6c7deaa63e121ba602ff23cfd7e56570e538ba15c788f5c6539bc96e8ba66758f2ccc0a4c306606b5022d3601dba8147d0ef92229166e6bfa345b12cd9dea7db0c3616063b26882d21d77cb9d362ecfb5df2b3740740820c0f5be7462ba8e2b7494b8ed6ff4c6596078", @nested={0x44, 0x64, 0x0, 0x1, [@generic="87a30cb97c98582834eb34b250d670574925d5792f3054e4683434042b5b85468550e9f23c701b775759ec0cff1fb8d4da7080f5cf9a3b2c4ff27002", @nested={0x4, 0xeb}]}, @nested={0x111, 0x3f, 0x0, 0x1, [@nested={0x4, 0xf2}, @typed={0x8, 0x32, 0x0, 0x0, @str='(,]\x00'}, @generic="4924ef42934dba0fd6610700c5597b8369c7271001adc6897b06e8cb5f8a09c6e7eee365f98176161c200ec2488d9b7b0b9810343d60d428f67738e22e3d69f4bdced072da3492eaa3d5af00bc9fad787b63be00a65c4727b33f056c0d59c7a7ca8a3a049d53baaacc91e536a368d7d334048bb32ddae59529d7a6473e9bae057567a7496cd3f0818f9b168840e027e16c8ec64e1c478d431128a71a1b2ed5bc8bb5bdfdafb1c9457d27b55ea043486fd7024f495506e24361d194a94af35b902e07c4184facbc7d68eae45d3a19ce6d196b6dd801f173a0b671d8f33082eb654611dff658fadc4421ef0402db0df77dd52b79aff5e3d85f99", @generic, @typed={0x4, 0x1a}, @nested={0x4, 0x44}]}]}, @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, "10112cf7e6a9887b170f"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x2b, 0xbd, "803e22b76af2559e0967bd4bbc3239ad07992c712f4345d577a843049ea119393a42af28597e91"}, @NL80211_ATTR_TIMEOUT={0x8, 0x110, 0x2}, @NL80211_ATTR_MLO_TTLM_ULINK={0x82, 0x149, "310c61dce5095f7dda50691fe4e9a441d47458036484a2d02f7a1b14935260973794e688e9005860b0bc063cbf7f32c854f2ff6496b1236472760bb0ed024863b3e6bb26b787027ca071fa5fe3846562d9cc6d8d79c07ced14c72b10b5df502a77baf513f408a0d46254c90e7a266cec7f034bc4456c44a7062d60a29be5"}, @NL80211_ATTR_PMKID={0xc5, 0x55, "7a60f58f6142931a3e99af94d20111b06d62bf99fadbe172ba469b6249eaeeee65904eb86c0823811262f65e6b37e7928c7b1649a0a43d1ef75feca1fb171e0a2d947ad0c07bbbddbddc1c4df053eb44ea31b9ffe00e1668fa5eb130f04d0edd25f2069f0d9d8929c787b78325fd5815d1caedbd60c77e53d8cf749ac0468565c9572ff4430f74e85a43a565c27a7b39df3553b484bd94caf07993ee342f05860a299cf17cecf784fe78b09bb1060100f357d95951235dbcae9773634a3f574675"}, @NL80211_ATTR_BSSID={0xbe, 0xf5, "2ca0f2042470aa6390513136f86078d0941a331c699f65d998433cf1d85055800ef157474ad4d35403fb52c9761565e5729cde4034962b010b555952b2b98af00e27d6f52576eab1a468c24f5c375b8895dfb8e61c4f881b1f59eadf75b1d03a3f15c66e3d5d14ba074da6a5e871a42142ed3a887f26c6b52cc631d57c20c6393a4a4699ec8dd4a39b9ac375464cbe9946cb092182e295293dcf45cbc0b85c5124212d6a322b21e4ceba022a7cd8ebdb3b1e6a5341f13d25152b"}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}]}, 0x1580}, 0x1, 0x0, 0x0, 0x2400c000}, 0x24004880) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac2afb36", @ANYRES16=r3, @ANYBLOB="01002cbd7000fcdbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008890}, 0x4000000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tee$auto(r2, r5, 0x0, 0x5) r6 = prctl$auto_PR_SET_MM_ENV_END(0x40, 0xb, 0x0, 0x6, 0xb) r7 = fcntl$auto_F_UNLCK(r6, 0x5c5, 0x2) write$auto_hwsim_fops_rx_rssi_(r7, &(0x7f0000000000), 0x0) ioctl$auto(r2, 0x64c5, r2) 471.231123ms ago: executing program 3 (id=1511): socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0x3, 0x541b, 0x7f) 327.315521ms ago: executing program 1 (id=1512): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) fadvise64$auto_POSIX_FADV_DONTNEED(r0, 0x7, 0x5, 0x4) 244.38583ms ago: executing program 2 (id=1513): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cec6\x00', 0x80001, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x5, 0x6, 0x1, 0x1, 0x2, 0x7fffffff, 'f\x00\b\x00', 0xb, 0x5, 0x9, 0x5, 0x5, 0x4, 0x2}) 223.479838ms ago: executing program 3 (id=1514): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x811c2, 0x0) 67.898119ms ago: executing program 1 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001f40)=ANY=[@ANYRESDEC, @ANYRES64, @ANYRES32], 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x4010010) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x1400, 0x0, 0xaee2e45ddcc9e3a5}, 0x20040080) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r5, &(0x7f0000000440)="1100000000000000000000000000010000", 0x11) getsockopt$auto_SO_DEBUG(r5, 0x1, 0x1, &(0x7f0000000100)='},:(.!/\x00', &(0x7f00000001c0)) getpid() r6 = setfsuid$auto(0x0) setresuid$auto(0x0, r6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="05000001831ec17eb05043270095ef2b5ff3c0f2ed4190802a4e444f9c0a1f545840230f0aeff759c65d46d33dfc26a2ee2a0208473f568616ab1a598d6815fb97f79b7143", @ANYRES16=r2, @ANYRES32=r6, @ANYBLOB="a628948c7a1e2e056a527b0dfa36b28f18abe1527d8e6ccfceffff4bcb81b8895328329cbf360938b2dd30306bad7ed61a33bbcda75632fbd8d568c61be4e204369afb563b49f34b897af9c6a6e82fd748c47bd71b6ea3f5797c4859c0c22a1d8f44c97cd017820f005ba1a3088f6debaca719ace433ee08ed36bc8a0ab6a37e7a4527018645c2a135e9a39e924155021d2da840fa0c90bd1d7a4dc883b5dcd3da7ad50b1279c247835ee799b7f72d7b783199985a1fc822c045f662eb7090b5cd947b7b20d2c02f69d61eb2647d6b65facf0000008810b98004101f8004004980a938244aa4fe98c96c15b86b030a9784705a3e4d1e2cdebcf3f7d5130f3b335af9d77f8696223b94af78a7a143516a5e7c66abc2ca3874aa58112f4d7bd1c084b1f4b63d3f676b517300e727849fe17095e4ca018e7d4ee32d79c323b46779f4960ef0bad52dbd55bc043b4f4741eca24d1c886f088ebb327730e66870c7cdf063a3072443a8bbd6f74362f9f5b9e1efdc321f31467924dca8a7d9f75b389d20f2d18af1124943254db04fcdcac58bcfb3068315968ce6d9357bd572537a80711172223ca3d1a2ff21684dd4f4c37fc65f88054471ae621ce11775f02b4852e718f6e86e861872fae6fb526d3db6583c70a6e6412c088caf6a481a5fc9681b81e71f105c3401edba52235d8516cc5d16ea12ff402e8702cf63686cf3b4f65620fe6a21e5364e0326816ecff081b331add741303f49c140cbd978f477b8c6616ab91e09b3523723205172be148069daaeba6e7fc0f3e3e6e5979b016e6d4640175a39835c42e47f6b10d6b9bd2f4424966fe3d7746fb20098d092104dc90989700135b53f663609336411c8408738e98e355a06f295d35d896a72be83cbb5e84bc5fbe584afb1df1faba5483a500a9386521826df97736e6fbfd12777f09af9de80831d0323427e18406b2db3e051ab91d779665e69d2c676e79d6121384a45be197d59dbfbdb5c6edac52c4dac3e882a79edcb4e8793daadb7c0097a9057fd0efa5011a9dd7277eae815e551aaefca7afe74f4951f8789fe4d0d5bdda26cbd42e578ddb9cfa44086b8d975864031bdd1fb72ba87c819891e26721d197aee24d7484eec7f42a6035649790a535a88d0514aaaa58dc9f1568bb02f315876be7e84e7dfb824be8cac52fb4f06057804cab0719887a18920a17263e6e9c9f9639f1d6eee6a6d97ab46af107733539f336806d6acf77f78dae06245945e441248bd9b82eb97455a0025d189529a4322ad267d308ffc7401fe940d996ec8fda1c9fe2a9442d3fb0c55c82a74fa216eb8dc3d46fa09f22691de74f64826d49d7bae410e35df9eaa0725a9beb9499657da1a3921f138afa05420b70415b3bc8885495f7afc04dede98cbb9285e068ed3401b27b0147e66a835c44cad65bd8738cc2b60dcec20b19867c187aa679ae14fa021321ccaeabd4f6832c0229d2dc9a1ce9218d5c8e4e040a03b14701978df5bcfd22b957d2e901888ce556d9e63d8d4bc7609b8705b06d98fb7aba8ae0eb44825d4d46896e61fe7abc15c10bb6743bafcce24c91a937ebef08d4723e033d66a7c2b10775f9e2eb42fd776202805efec1a019e2124e05f49b79bfb32d503a8deadecf7780a01ac8b2840e5bd6c8bc0078962c480b7b3ec3f58816aa5e3532cf841c6606d0d6bb643ad0ded99bd8448ea78414d3e7bb049585c9b12d80811675cd6653c76693cd2337e64ae133178cc620dc365fe1cd6bd5e51333f63aa5eee0c9219d0b19322e37651063b78f9857d7e6e39faa833328189eab4dd8c199371688a77bd3855537f1b6a2d376e48c8bb1a99e5df4c9a24c5b82ac5a19be8ca7a76e057bd91c3933268d47be9cb3123f370b3cde125e68fd86e8bffb93e8383b583c386f0072c65f1266018b5f9b509eb57b4e217bae1749fef8beb4714ea30ed83ecb9a01f3bd41a47d77aab6e95fe4c5059a10358c64b1e705a322dc09933594a74eb52e8cbc96e293b0d26ab61075c1f9c2c71de57c3266b18d593e10c7390390b541336193e54755ffaf3cd8bcc1c265be1e4ce5c78d94deff4bcfe11f0d8e71de04724ea732fc1333dfe586c665579a49301be6200812c33a3363866cbbbee0f3341958e194bbe5ce640d9d2725b90d6914365f3671ef0cb1a31af731af3365bab7ff4b1265913685fab26b3ed30ec17cb86f317f3fd864013ecf1b7de1f9634d306d08449c41ad9e2c9b64ea55200c03fd2b996a172ca348da347d1bff7338bda7df6a34c370d32d7ad1efc0abc81ae2462dc28defd58e7e7c31c9397598b78e7ffe1a59fc308224c0ee542b4d1bc16048e68041c15bb82ebeac5e775591c23843681875664a63fb09fcb24710715c07ea3c343d2a3fde0e7b6d5ba164f82f4719508c577aad12d74e64e48502e8c082f1d2dc998fc4503a71dd400623798516c59436c8a2d08256614e40400dcf3e8bb026c044abde75c2e6fd35b154503669b0b0bc00e8caa6c1960a3c427d24551d3b4f8487a58a340c68c242cff6b9d5636ff51d1aaaacbfdb8b4ee33bb056c77a8e9fba4fa7eb6ae7a38b3371b4907515342ef2fea277bebef271e6984402c5a9ad123a742a7164e184674153db2e51990f066db7a18c4d16f059ccc4f3e656d8683b12825d522c20f64c6b16d7346f96b5db72fa7f968861f560be54fb2f270583399066b58eecdc3e7f6b0bd2ab114d39652fb3685e9366bb61ce9dae50ce904aa1c105fc4efa6f8ee224fd9f5cb9cb186d02835f8031696e06bdea56d04650b2b767c656635bd7489d17e36d31a46a84f5902e4dfd3bfaf15b2d34db2913954c51f8e8afb873b5326ae185e4b51de3ba4cd367374f8f483dad1dab835e22fd77a63cfe679a580fffa6d165460de996409cd379df0b89e349418f14925c67f3b045bcaabf899c0bab7c5df0ca2234dbfccd46ed4bcb2f3add2a5198d94ee9a5312a4f0b1165a1e21288de925734f609c30603cf20004fd8ef218e770cd88765cf6e4cdf96ae3de021e78b7c0859911ec7a34d782383d816d3518b3e25a8b117f5f75ab2d2e3a7c72100dea05e6e6c57729b8e3cb8531d0977a369b03bdeaf1e68c2cf46e01b976d9b388dce00e71e766fa4e68486df7c75316ea2d0b5ba3effe8eaeae258de0ebd9b374033831e6eb64edd0153f6d8982cb5acc8550f2ea1ed5105376189f61bfaa74fc272c69d61570d54d76f3303b37da1f4a201f740cd081fee8a0d97055e0ab5894e72a3a2a53c5df3fda79b8a61a674e42bd45e1690eb792d26533e3f45fbb08957a28e27633d87e71e6f7b31e00d59fbbc6bcff8bde4f2cd11f2cbb19e062802eba5e90fb8aa65ed3b27c5b83747fc4ecb5bc6ac423149579db949640cb8ab21f17520e24be76adc88e78c5689b92f15234bd2cfd41fbe81f2f5638e6b8b9216d33fde9acde536f8e5fd2a8192aa3907a922b324181979bd1fa8be1d34a160b8f734de8d67be14c68a60c32d3297c767fd81a467bf76a1823733e6a30072c19c858a152540f4db6bd56a78e13ff42e599c3b52aa23f1ffef33b6d2e3a4c69c10b89b00206beb4270c8afc01d6cd76c65dd70d3852dac08ce6ad3be3d73326fd6e2315ea10bd5652261d98dd86ecc017373a552e9f357f3b5ca541af751ba438cc78916027125e1195b74407a3a3756edce22dba1bcbf8f80dfbe17eef712683b71a110dddc6831d62449324b09cbb335be6f041c0d204092dba2b22dc836eecdb41159b04282ce1cc16cb4d34745fa3a4683c188d60c3d17773871286235358d05ed7e07abd0dcf57f4eb092b938a5e3bfac8ec84fff1f85f3f752dc73a52317a9f057b93ddb1f8d7c3fb8fdf623c2ff20041d55f3372c51a6211ef11d647f52e3f5db35768729ff0a5ab7cec9e3d45cdaab32c64d46ec262eb84e10a861050cf9fa99cf01a68d7e1bec19ffed1c69f5d0e469bf3ed4ae11b7b8cb678b080ffa33ee57e20b9d50ef52f1a32ab2a4a102b7a7fb8da0e4b04004caa79c9609f341a6f6b3c1904234f519b12ca31407670be1d6b7b7efc22b288ad56a6c64d187295084b04cf8ca1456f002c1cb6c99170a3d68e1ddd5fc56bbd3bb5e9055bf5501b85211a9485b244e3a772d23c43d1b1aa20227fa9bcbaff47fffabfadf07df41dcc4ab34c66de34b86f27a5125bc20e1e8c5e63bfcae9dfef83b005ea8e14b9199a8bc3762a5ec4aadc9bf9a147fe3fe63709c99ea7722bd36c5a3c5b69155b46440e6694d5e13a5492277a8ba4c79a29eb6c5bf5525092cf47dd9234a5bfaa79cb935f0bb843fc2134939d0bae168ae2fbd1ea1e88b539d26ca094e915dc5612abf71d17d53ab38727ad60dff42700d7bd8461758ad2f881349a4b3ad7431368cccdd3c827c5095aa8dbbd780b4639f8d09a0d7b3903168bbfca4d169a0281fa6e20723933232f3c85ae2d743d14764aa2419dde8f1988f2aae40350dcc7ff94b8c19eda33b1ec8856183bd5c5732c8a71b3c15013c10eea2556e8ede07c9e2a3b804a9107ce50b68c069d63225e59d74b86667f445fec2f9aed161638de7a292f9a3c2942e74b2383a861a1a5c270a009db4c967b338b7ed6fe777c0f33da80fcd20ef2cb893e419fb98fb1bb0cb9c4835d9cc657a759aedba4ad9ddefc97f900cce6180322a887bb500926bf04faa541b7175ffcb0a23c97625ad75ee09129e77664c8cf808dfdcefc80f72544cf5654805651899a54159916be3627ea553f3571dbc9e82ac29d2cb086e9771d11bd1bf931a837e927f4df89e544885b16d8a26c8a27e310e5d54c5ec81edd39608f410a145f84143faac93b27ddf53cb7b430216156b39e0eb70ddd8f2d9bedf27a13719bad2638b23833cfe29c75fa8d9cf6adcdc5736313aafcef882963513abb95b6ff46b4b956fd0d33cdea7b95f462224f56f22089ceed5cb6a4e0a7a98251b74c789befaea587d86cadbd96f5def5c1246fd248c01733f1a83abb4dc1ddfba27b7bcaadcad03d3c5f66802fb02a860e36a902a58c5fc8d580b70960ed1a2457638bb101e2112b37c03b973a781d9431052d42bdc05a7ed79003a1d69dc6c833b1140c3afa53fa580a58ea0c818b1465ba152c32c4efe73d13a262fdc11341ac90662d1a7af90a7bbee52ca82196dc517b04e9eb340a5c887c95945a123d11aa8c8a13dd1de35276e147defb334c0b865e21e99a379c6658291b1b04f51375399197ec29ac1f435258176771ae55be48e73ac2722f935a14f148ede3aef25d36032806c88aeed2744a06222be44ba9dc08f0336ae3f6dbac3aa70afff1df97a3bf2ee60ba87c78d15f0780a7a73d3a125627ac4ddb36fca014427330c3804fa88274839456aa3d89d9961b38ebeb187bec0d8399fd815d44d9c289de8887760d75b5ee6191bbf9b6eb97efe8da1649be938dcd994d0595d49961e05aaa18276f7e9ba876493f307d4f0d13d5b11dc39b41a3df95783cf3b4e7bc13f7c5450e7101806dd38b72ca8cebb0805e95bb140d93a86950c201b45b84e4a430a2c7d79369db00998d70a2bee354f374ec3c25870f555a936a1ab24ef6d86d22cb8aa08cddb0aa83ee4d357d165f42055a3548e6145b7f16eb494bf3d9418e84836c71b7798f71ab992472e4fa35d148f98794cac12b0c17ad5f3b303c69e45c8c748cb3f0677547a98ec017d3179c46b7a50fb80516e2841a608956618da36e992251acad034de400146acc82b1b76dbd5f76fc7648e8e6a700a72d1202f96c72a781cf7b33c13df0fa8e9011c43d1fd3eba9c66367d677307f18b05acc3f986a2cce96362f7c7c3ed4de018156f8d638a0da4cdf50e3688d7c31d9b80b5bd4b3acc03f160c50aa66b679521b67ebc3224b54451b0326f93354474b43f4106d79b913789944aa4c61ee3974961c1f1d4e37f9dcc1ab98c1f40c4833c1842b913bb56fd69c1b8f55e76473bca6e0e4efaddfef5ba109e26e72d68a481f795d04199be1d84c4275f90ff5c50ad905eab01a5fbdedbc637aa5b6f6acef7a8e90e4860a322155d40929faffd51d781a6518a997faebd4d902ade410e6ea32ef1c925a2cdea150f13f7c00a6805a285b156f94665f1b967a257c1172d57974f133342edeb71c8389c0ae9da533cba7c9371cc32efe6b8e69f44a737ff4a95178b8db73e7d6a53e24bde27d58b33b75f243f586bc5688495dc162e43913cb060a6fd34347c0cc28ad4c9aa54d2cc4fa5214a446744a9859c9fb0965b8b52c0a33e233dceb84040077002900ba008a9740d55adcaefe50b1797cb10892da185b79bad7aa34bb51f0dc0fdd6ee03d6375f9a0d8000000100007009238fbc3514aef7e368d78f2"], 0x134c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) setgroups$auto(0xe32, 0x0) write$auto(0x3, 0x0, 0xffd8) 9.468406ms ago: executing program 3 (id=1516): r0 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/debug/ieee80211/phy3/netdev:wlan0/tsf\x00', 0x80000, 0x0) read$auto(r0, &(0x7f0000001200)='\x00', 0x4) 0s ago: executing program 2 (id=1517): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_FIDEDUPERANGE(r1, 0xc0189436, 0x40) kernel console output (not intermixed with test programs): 744][ T9562] futex_wake_op: syz.2.906 tries to shift op by -2048; fix this program [ 400.437107][ T9568] netlink: 12 bytes leftover after parsing attributes in process `syz.0.902'. [ 401.532082][ T9584] FAULT_INJECTION: forcing a failure. [ 401.532082][ T9584] name failslab, interval 1, probability 0, space 0, times 0 [ 401.580319][ T9584] CPU: 0 UID: 0 PID: 9584 Comm: syz.0.912 Tainted: G U L syzkaller #0 PREEMPT(full) [ 401.580360][ T9584] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 401.580369][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 401.580384][ T9584] Call Trace: [ 401.580392][ T9584] [ 401.580403][ T9584] dump_stack_lvl+0x100/0x190 [ 401.580439][ T9584] should_fail_ex.cold+0x5/0xa [ 401.580478][ T9584] should_failslab+0xc2/0x120 [ 401.580514][ T9584] kmem_cache_alloc_noprof+0x91/0x6a0 [ 401.580545][ T9584] ? __pfx_map_id_range_down+0x10/0x10 [ 401.580580][ T9584] ? rcu_is_watching+0x12/0xc0 [ 401.580610][ T9584] ? security_inode_alloc+0x3b/0x2c0 [ 401.580642][ T9584] security_inode_alloc+0x3b/0x2c0 [ 401.580670][ T9584] inode_init_always_gfp+0xc77/0xfb0 [ 401.580699][ T9584] alloc_inode+0x8e/0x250 [ 401.580731][ T9584] new_inode+0x22/0x1c0 [ 401.580765][ T9584] proc_pid_make_inode+0x22/0x160 [ 401.580806][ T9584] proc_pident_instantiate+0x85/0x310 [ 401.580859][ T9584] proc_pident_lookup+0x1e3/0x270 [ 401.580898][ T9584] ? __pfx_down_read+0x10/0x10 [ 401.580927][ T9584] __lookup_slow+0x155/0x320 [ 401.580960][ T9584] lookup_slow+0x50/0x70 [ 401.580992][ T9584] link_path_walk+0x1377/0x1cc0 [ 401.581038][ T9584] path_openat+0x1c9/0x4280 [ 401.581060][ T9584] ? __kasan_slab_alloc+0x89/0x90 [ 401.581110][ T9584] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 401.581139][ T9584] ? do_getname+0x35/0x390 [ 401.581169][ T9584] ? __x64_sys_openat+0x12d/0x210 [ 401.581211][ T9584] ? __pfx_path_openat+0x10/0x10 [ 401.581244][ T9584] do_file_open+0x20e/0x430 [ 401.581271][ T9584] ? __pfx_do_file_open+0x10/0x10 [ 401.581306][ T9584] ? __pfx_kfree_link+0x10/0x10 [ 401.581350][ T9584] ? alloc_fd+0x471/0x7a0 [ 401.581376][ T9584] ? do_getname+0x191/0x390 [ 401.581409][ T9584] do_sys_openat2+0x10f/0x1e0 [ 401.581442][ T9584] ? __pfx_do_sys_openat2+0x10/0x10 [ 401.581510][ T9584] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 401.581559][ T9584] __x64_sys_openat+0x12d/0x210 [ 401.581593][ T9584] ? __pfx___x64_sys_openat+0x10/0x10 [ 401.581637][ T9584] do_syscall_64+0x115/0x840 [ 401.581658][ T9584] ? clear_bhb_loop+0x40/0x90 [ 401.581688][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.581712][ T9584] RIP: 0033:0x7fc6fff5d68e [ 401.581732][ T9584] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 401.581757][ T9584] RSP: 002b:00007fc700da2ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 401.581781][ T9584] RAX: ffffffffffffffda RBX: 00007fc700da36c0 RCX: 00007fc6fff5d68e [ 401.581797][ T9584] RDX: 0000000000000002 RSI: 00007fc700da2f90 RDI: ffffffffffffff9c [ 401.581813][ T9584] RBP: 00007fc700032e6f R08: 0000000000000000 R09: 0000000000000000 [ 401.581828][ T9584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.581843][ T9584] R13: 00007fc700216038 R14: 00007fc700215fa0 R15: 00007ffe0ae4f7f8 [ 401.581874][ T9584] [ 403.993521][ T9599] FAULT_INJECTION: forcing a failure. [ 403.993521][ T9599] name failslab, interval 1, probability 0, space 0, times 0 [ 404.068902][ T9599] CPU: 0 UID: 0 PID: 9599 Comm: syz.0.919 Tainted: G U L syzkaller #0 PREEMPT(full) [ 404.068943][ T9599] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 404.068952][ T9599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 404.068967][ T9599] Call Trace: [ 404.068975][ T9599] [ 404.068984][ T9599] dump_stack_lvl+0x100/0x190 [ 404.069023][ T9599] should_fail_ex.cold+0x5/0xa [ 404.069056][ T9599] should_failslab+0xc2/0x120 [ 404.069092][ T9599] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 404.069127][ T9599] ? __kasan_kmalloc+0xaa/0xb0 [ 404.069157][ T9599] ? create_filter_start.constprop.0+0x15b/0x310 [ 404.069201][ T9599] kstrdup+0x51/0xe0 [ 404.069231][ T9599] create_filter_start.constprop.0+0x15b/0x310 [ 404.069268][ T9599] ? __mutex_lock+0x26d/0x1bd0 [ 404.069293][ T9599] create_filter+0xb5/0x210 [ 404.069338][ T9599] ? __pfx_create_filter+0x10/0x10 [ 404.069376][ T9599] ? find_held_lock+0x2b/0x80 [ 404.069412][ T9599] apply_event_filter+0x220/0x500 [ 404.069451][ T9599] ? __pfx_apply_event_filter+0x10/0x10 [ 404.069496][ T9599] event_filter_write+0x16d/0x290 [ 404.069525][ T9599] vfs_write+0x2aa/0x1050 [ 404.069549][ T9599] ? __pfx_event_filter_write+0x10/0x10 [ 404.069578][ T9599] ? __pfx_vfs_write+0x10/0x10 [ 404.069600][ T9599] ? __fget_files+0x215/0x3d0 [ 404.069636][ T9599] ? __fget_files+0x21f/0x3d0 [ 404.069667][ T9599] ksys_write+0x12a/0x250 [ 404.069696][ T9599] ? __pfx_ksys_write+0x10/0x10 [ 404.069727][ T9599] do_syscall_64+0x115/0x840 [ 404.069749][ T9599] ? clear_bhb_loop+0x40/0x90 [ 404.069779][ T9599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.069803][ T9599] RIP: 0033:0x7fc6fff9ce59 [ 404.069823][ T9599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.069847][ T9599] RSP: 002b:00007fc700da3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 404.069870][ T9599] RAX: ffffffffffffffda RBX: 00007fc700215fa0 RCX: 00007fc6fff9ce59 [ 404.069886][ T9599] RDX: 000000000000000d RSI: 000020000000ac80 RDI: 0000000000000003 [ 404.069901][ T9599] RBP: 00007fc700032e6f R08: 0000000000000000 R09: 0000000000000000 [ 404.069916][ T9599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 404.069933][ T9599] R13: 00007fc700216038 R14: 00007fc700215fa0 R15: 00007ffe0ae4f7f8 [ 404.069964][ T9599] [ 405.412063][ T9611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.923'. [ 405.452300][ T9611] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.923: iget: checksum invalid [ 405.539729][ T9611] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 405.647809][ T9611] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.923: iget: checksum invalid [ 405.714885][ T9611] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 405.810794][ T9611] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.923: iget: checksum invalid [ 405.861103][ T9611] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 405.919434][ T9611] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.923: iget: checksum invalid [ 405.998601][ T9611] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 406.065089][ T9611] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 406.136149][ T9611] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 407.287726][ T9643] FAULT_INJECTION: forcing a failure. [ 407.287726][ T9643] name failslab, interval 1, probability 0, space 0, times 0 [ 407.314722][ T9644] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 407.343171][ T9643] CPU: 0 UID: 0 PID: 9643 Comm: syz.3.933 Tainted: G U L syzkaller #0 PREEMPT(full) [ 407.343212][ T9643] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 407.343221][ T9643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 407.343236][ T9643] Call Trace: [ 407.343244][ T9643] [ 407.343253][ T9643] dump_stack_lvl+0x100/0x190 [ 407.343289][ T9643] should_fail_ex.cold+0x5/0xa [ 407.343325][ T9643] should_failslab+0xc2/0x120 [ 407.343361][ T9643] __kmalloc_noprof+0xfc/0x820 [ 407.343390][ T9643] ? __pfx_from_kuid+0x10/0x10 [ 407.343427][ T9643] ? tomoyo_init_log+0x1224/0x20c0 [ 407.343528][ T9643] tomoyo_init_log+0x1224/0x20c0 [ 407.343565][ T9643] ? __pfx_stack_trace_save+0x10/0x10 [ 407.343603][ T9643] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 407.343645][ T9643] ? __pfx_tomoyo_init_log+0x10/0x10 [ 407.343687][ T9643] tomoyo_write_log2+0x2ed/0xbc0 [ 407.343726][ T9643] tomoyo_supervisor+0x15e/0x1340 [ 407.343771][ T9643] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 407.343830][ T9643] ? tomoyo_check_path_acl+0x141/0x210 [ 407.343860][ T9643] ? tomoyo_check_acl+0x1f7/0x410 [ 407.343890][ T9643] tomoyo_path_permission+0x270/0x3b0 [ 407.343922][ T9643] tomoyo_check_open_permission+0x37f/0x3c0 [ 407.343954][ T9643] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 407.343994][ T9643] ? hook_file_open+0x24f/0x8f0 [ 407.344047][ T9643] ? path_get+0x61/0x80 [ 407.344077][ T9643] tomoyo_file_open+0x6b/0x90 [ 407.344107][ T9643] security_file_open+0xb5/0x1e0 [ 407.344142][ T9643] do_dentry_open+0x588/0x14d0 [ 407.344175][ T9643] vfs_open+0x82/0x3f0 [ 407.344211][ T9643] path_openat+0x2873/0x4280 [ 407.344248][ T9643] ? __pfx_path_openat+0x10/0x10 [ 407.344281][ T9643] do_file_open+0x20e/0x430 [ 407.344308][ T9643] ? __pfx_do_file_open+0x10/0x10 [ 407.344354][ T9643] ? alloc_fd+0x471/0x7a0 [ 407.344380][ T9643] ? do_getname+0x191/0x390 [ 407.344413][ T9643] do_sys_openat2+0x10f/0x1e0 [ 407.344447][ T9643] ? __pfx_do_sys_openat2+0x10/0x10 [ 407.344483][ T9643] ? __fget_files+0x21f/0x3d0 [ 407.344511][ T9643] __x64_sys_openat+0x12d/0x210 [ 407.344545][ T9643] ? __pfx___x64_sys_openat+0x10/0x10 [ 407.344590][ T9643] do_syscall_64+0x115/0x840 [ 407.344612][ T9643] ? clear_bhb_loop+0x40/0x90 [ 407.344642][ T9643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.344668][ T9643] RIP: 0033:0x7f75ac59ce59 [ 407.344688][ T9643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.344712][ T9643] RSP: 002b:00007f75ad3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 407.344735][ T9643] RAX: ffffffffffffffda RBX: 00007f75ac815fa0 RCX: 00007f75ac59ce59 [ 407.344751][ T9643] RDX: 0000000000008000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 407.344767][ T9643] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 407.344782][ T9643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.344797][ T9643] R13: 00007f75ac816038 R14: 00007f75ac815fa0 R15: 00007ffd68ce87f8 [ 407.344828][ T9643] [ 408.398540][ T9660] FAULT_INJECTION: forcing a failure. [ 408.398540][ T9660] name failslab, interval 1, probability 0, space 0, times 0 [ 408.555684][ T9660] CPU: 0 UID: 0 PID: 9660 Comm: syz.0.940 Tainted: G U L syzkaller #0 PREEMPT(full) [ 408.555725][ T9660] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 408.555734][ T9660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 408.555750][ T9660] Call Trace: [ 408.555758][ T9660] [ 408.555767][ T9660] dump_stack_lvl+0x100/0x190 [ 408.555802][ T9660] should_fail_ex.cold+0x5/0xa [ 408.555834][ T9660] should_failslab+0xc2/0x120 [ 408.555869][ T9660] __kmalloc_noprof+0xfc/0x820 [ 408.555901][ T9660] ? process_vm_rw_core.constprop.0+0x1d7/0x950 [ 408.555938][ T9660] process_vm_rw_core.constprop.0+0x1d7/0x950 [ 408.555971][ T9660] ? futex_unqueue+0x13d/0x2c0 [ 408.555998][ T9660] ? __futex_wait+0x256/0x300 [ 408.556032][ T9660] ? __pfx___futex_wait+0x10/0x10 [ 408.556079][ T9660] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 408.556113][ T9660] ? import_ubuf+0x1b6/0x220 [ 408.556224][ T9660] ? iovec_from_user+0xda/0x140 [ 408.556264][ T9660] process_vm_rw+0x226/0x2d0 [ 408.556291][ T9660] ? futex_wait+0x11e/0x370 [ 408.556326][ T9660] ? __pfx_process_vm_rw+0x10/0x10 [ 408.556362][ T9660] ? find_held_lock+0x2b/0x80 [ 408.556392][ T9660] ? ksys_write+0x190/0x250 [ 408.556414][ T9660] ? ksys_write+0x190/0x250 [ 408.556446][ T9660] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 408.556487][ T9660] ? 0xffffffff81000000 [ 408.556515][ T9660] ? xfd_validate_state+0x129/0x190 [ 408.556550][ T9660] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 408.556582][ T9660] ? do_syscall_64+0x90/0x840 [ 408.556603][ T9660] ? lockdep_hardirqs_on+0x78/0x100 [ 408.556641][ T9660] do_syscall_64+0x115/0x840 [ 408.556662][ T9660] ? clear_bhb_loop+0x40/0x90 [ 408.556691][ T9660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.556716][ T9660] RIP: 0033:0x7fc6fff9ce59 [ 408.556735][ T9660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.556758][ T9660] RSP: 002b:00007fc700da3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 408.556781][ T9660] RAX: ffffffffffffffda RBX: 00007fc700215fa0 RCX: 00007fc6fff9ce59 [ 408.556797][ T9660] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 000000000000033c [ 408.556812][ T9660] RBP: 00007fc700032e6f R08: 0000000000000006 R09: 0000000000000000 [ 408.556827][ T9660] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000000 [ 408.556842][ T9660] R13: 00007fc700216038 R14: 00007fc700215fa0 R15: 00007ffe0ae4f7f8 [ 408.556873][ T9660] [ 409.220736][ T9665] Process accounting resumed [ 412.640955][ T9709] kvm: kvm [9708]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x4000007d) = 0x1000 [ 412.979674][ T5627] Bluetooth: hci1: unexpected event 0x08 length: 6 > 4 [ 413.731891][ T9728] FAULT_INJECTION: forcing a failure. [ 413.731891][ T9728] name failslab, interval 1, probability 0, space 0, times 0 [ 413.826729][ T9728] CPU: 0 UID: 0 PID: 9728 Comm: syz.0.963 Tainted: G U L syzkaller #0 PREEMPT(full) [ 413.826775][ T9728] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 413.826785][ T9728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.826799][ T9728] Call Trace: [ 413.826807][ T9728] [ 413.826816][ T9728] dump_stack_lvl+0x100/0x190 [ 413.826853][ T9728] should_fail_ex.cold+0x5/0xa [ 413.826889][ T9728] should_failslab+0xc2/0x120 [ 413.826924][ T9728] __kmalloc_cache_noprof+0x91/0x6c0 [ 413.826949][ T9728] ? arch_stack_walk+0xa6/0xf0 [ 413.826984][ T9728] ? tomoyo_init_log+0x1a0/0x20c0 [ 413.827024][ T9728] tomoyo_init_log+0x1a0/0x20c0 [ 413.827058][ T9728] ? __pfx_format_decode+0x10/0x10 [ 413.827093][ T9728] ? __pfx_stack_trace_save+0x10/0x10 [ 413.827131][ T9728] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 413.827173][ T9728] ? __pfx_tomoyo_init_log+0x10/0x10 [ 413.827215][ T9728] tomoyo_write_log2+0x2ed/0xbc0 [ 413.827253][ T9728] tomoyo_supervisor+0x15e/0x1340 [ 413.827298][ T9728] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 413.827357][ T9728] ? tomoyo_check_path_acl+0x141/0x210 [ 413.827388][ T9728] ? tomoyo_check_acl+0x1f7/0x410 [ 413.827417][ T9728] tomoyo_path_permission+0x270/0x3b0 [ 413.827449][ T9728] tomoyo_check_open_permission+0x37f/0x3c0 [ 413.827481][ T9728] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 413.827521][ T9728] ? hook_file_open+0x24f/0x8f0 [ 413.827573][ T9728] ? path_get+0x61/0x80 [ 413.827604][ T9728] tomoyo_file_open+0x6b/0x90 [ 413.827628][ T9728] security_file_open+0xb5/0x1e0 [ 413.827662][ T9728] do_dentry_open+0x588/0x14d0 [ 413.827694][ T9728] vfs_open+0x82/0x3f0 [ 413.827729][ T9728] path_openat+0x2873/0x4280 [ 413.827772][ T9728] ? __pfx_path_openat+0x10/0x10 [ 413.827805][ T9728] do_file_open+0x20e/0x430 [ 413.827832][ T9728] ? __pfx_do_file_open+0x10/0x10 [ 413.827878][ T9728] ? alloc_fd+0x471/0x7a0 [ 413.827911][ T9728] ? do_getname+0x191/0x390 [ 413.827945][ T9728] do_sys_openat2+0x10f/0x1e0 [ 413.827978][ T9728] ? __pfx_do_sys_openat2+0x10/0x10 [ 413.828013][ T9728] ? find_held_lock+0x2b/0x80 [ 413.828052][ T9728] __x64_sys_openat+0x12d/0x210 [ 413.828087][ T9728] ? __pfx___x64_sys_openat+0x10/0x10 [ 413.828133][ T9728] do_syscall_64+0x115/0x840 [ 413.828154][ T9728] ? clear_bhb_loop+0x40/0x90 [ 413.828184][ T9728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.828209][ T9728] RIP: 0033:0x7fc6fff9ce59 [ 413.828229][ T9728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.828253][ T9728] RSP: 002b:00007fc700da3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 413.828276][ T9728] RAX: ffffffffffffffda RBX: 00007fc700215fa0 RCX: 00007fc6fff9ce59 [ 413.828292][ T9728] RDX: 0000000000000200 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 413.828307][ T9728] RBP: 00007fc700032e6f R08: 0000000000000000 R09: 0000000000000000 [ 413.828322][ T9728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.828337][ T9728] R13: 00007fc700216038 R14: 00007fc700215fa0 R15: 00007ffe0ae4f7f8 [ 413.828367][ T9728] [ 414.486351][ T9735] FAULT_INJECTION: forcing a failure. [ 414.486351][ T9735] name failslab, interval 1, probability 0, space 0, times 0 [ 414.514246][ T9735] CPU: 0 UID: 0 PID: 9735 Comm: syz.3.965 Tainted: G U L syzkaller #0 PREEMPT(full) [ 414.514288][ T9735] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 414.514297][ T9735] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.514313][ T9735] Call Trace: [ 414.514320][ T9735] [ 414.514329][ T9735] dump_stack_lvl+0x100/0x190 [ 414.514364][ T9735] should_fail_ex.cold+0x5/0xa [ 414.514396][ T9735] should_failslab+0xc2/0x120 [ 414.514431][ T9735] __kmalloc_noprof+0xfc/0x820 [ 414.514461][ T9735] ? rcu_is_watching+0x12/0xc0 [ 414.514491][ T9735] ? tomoyo_realpath_from_path+0xb6/0x690 [ 414.514534][ T9735] tomoyo_realpath_from_path+0xb6/0x690 [ 414.514576][ T9735] tomoyo_check_open_permission+0x2af/0x3c0 [ 414.514609][ T9735] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 414.514639][ T9735] ? __lock_acquire+0x49f/0x1a40 [ 414.514669][ T9735] ? hook_file_open+0x24f/0x8f0 [ 414.514715][ T9735] ? lock_acquire+0x1b9/0x370 [ 414.514752][ T9735] tomoyo_file_open+0x6b/0x90 [ 414.514776][ T9735] security_file_open+0xb5/0x1e0 [ 414.514810][ T9735] do_dentry_open+0x588/0x14d0 [ 414.514843][ T9735] vfs_open+0x82/0x3f0 [ 414.514877][ T9735] path_openat+0x2873/0x4280 [ 414.514915][ T9735] ? __pfx_path_openat+0x10/0x10 [ 414.514955][ T9735] do_file_open+0x20e/0x430 [ 414.514983][ T9735] ? __pfx_do_file_open+0x10/0x10 [ 414.515029][ T9735] ? alloc_fd+0x471/0x7a0 [ 414.515055][ T9735] ? do_getname+0x191/0x390 [ 414.515090][ T9735] do_sys_openat2+0x10f/0x1e0 [ 414.515123][ T9735] ? __pfx_do_sys_openat2+0x10/0x10 [ 414.515166][ T9735] __x64_sys_openat+0x12d/0x210 [ 414.515200][ T9735] ? __pfx___x64_sys_openat+0x10/0x10 [ 414.515245][ T9735] do_syscall_64+0x115/0x840 [ 414.515267][ T9735] ? clear_bhb_loop+0x40/0x90 [ 414.515296][ T9735] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.515321][ T9735] RIP: 0033:0x7f75ac59ce59 [ 414.515341][ T9735] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.515365][ T9735] RSP: 002b:00007f75ad3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 414.515391][ T9735] RAX: ffffffffffffffda RBX: 00007f75ac815fa0 RCX: 00007f75ac59ce59 [ 414.515408][ T9735] RDX: 0000000000140b02 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 414.515424][ T9735] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 414.515439][ T9735] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.515453][ T9735] R13: 00007f75ac816038 R14: 00007f75ac815fa0 R15: 00007ffd68ce87f8 [ 414.515483][ T9735] [ 415.237719][ T9716] netlink: 12 bytes leftover after parsing attributes in process `syz.1.960'. [ 415.377831][ T9735] ERROR: Out of memory at tomoyo_realpath_from_path. [ 416.300433][ T9755] netlink: 326 bytes leftover after parsing attributes in process `syz.0.971'. [ 416.811340][ T9742] Process accounting resumed [ 416.847836][ T9757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 416.921585][ T9766] binder: 9765:9766 ioctl c00c620f 200000002f40 returned -22 [ 417.270664][ T9774] FAULT_INJECTION: forcing a failure. [ 417.270664][ T9774] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 417.342443][ T9774] CPU: 0 UID: 0 PID: 9774 Comm: syz.0.978 Tainted: G U L syzkaller #0 PREEMPT(full) [ 417.342485][ T9774] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 417.342495][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 417.342510][ T9774] Call Trace: [ 417.342518][ T9774] [ 417.342527][ T9774] dump_stack_lvl+0x100/0x190 [ 417.342561][ T9774] should_fail_ex.cold+0x5/0xa [ 417.342588][ T9774] ? prepare_alloc_pages+0x16d/0x5f0 [ 417.342627][ T9774] should_fail_alloc_page+0xeb/0x140 [ 417.342664][ T9774] prepare_alloc_pages+0x1f0/0x5f0 [ 417.342705][ T9774] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 417.342742][ T9774] ? rcu_is_watching+0x12/0xc0 [ 417.342773][ T9774] ? trace_mm_page_alloc+0x164/0x1c0 [ 417.342809][ T9774] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 417.342842][ T9774] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 417.342874][ T9774] ? stack_trace_save+0x8e/0xc0 [ 417.342932][ T9774] ? __pfx_stack_trace_save+0x10/0x10 [ 417.342967][ T9774] ? stack_depot_save_flags+0x27/0x9d0 [ 417.343004][ T9774] ? is_bpf_text_address+0x94/0x1a0 [ 417.343041][ T9774] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 417.343074][ T9774] ? __kasan_slab_alloc+0x89/0x90 [ 417.343106][ T9774] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 417.343136][ T9774] ? alloc_vmap_area+0x640/0x2bb0 [ 417.343173][ T9774] ? __get_vm_area_node+0x1ca/0x330 [ 417.343210][ T9774] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 417.343247][ T9774] ? __kvmalloc_node_noprof+0x3d3/0x970 [ 417.343277][ T9774] ? __do_sys_listmount+0x289/0xee0 [ 417.343325][ T9774] ? do_syscall_64+0x115/0x840 [ 417.343347][ T9774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.343382][ T9774] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 417.343417][ T9774] ? policy_nodemask+0xed/0x4f0 [ 417.343454][ T9774] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 417.343498][ T9774] __kasan_populate_vmalloc+0xf0/0x210 [ 417.343533][ T9774] alloc_vmap_area+0x95d/0x2bb0 [ 417.343573][ T9774] ? kasan_save_track+0x14/0x30 [ 417.343603][ T9774] ? __kasan_kmalloc+0xaa/0xb0 [ 417.343633][ T9774] ? __pfx_alloc_vmap_area+0x10/0x10 [ 417.343667][ T9774] ? __get_vm_area_node+0x101/0x330 [ 417.343705][ T9774] __get_vm_area_node+0x1ca/0x330 [ 417.343746][ T9774] __vmalloc_node_range_noprof+0x228/0x1630 [ 417.343785][ T9774] ? __do_sys_listmount+0x289/0xee0 [ 417.343821][ T9774] ? __pfx___futex_wait+0x10/0x10 [ 417.343853][ T9774] ? futex_hash+0x311/0x400 [ 417.343881][ T9774] ? __do_sys_listmount+0x289/0xee0 [ 417.343930][ T9774] ? alloc_pages_mpol+0x25a/0x540 [ 417.343968][ T9774] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 417.344012][ T9774] ? rcu_is_watching+0x12/0xc0 [ 417.344048][ T9774] __kvmalloc_node_noprof+0x3d3/0x970 [ 417.344079][ T9774] ? __do_sys_listmount+0x289/0xee0 [ 417.344119][ T9774] ? _copy_from_user+0x59/0xd0 [ 417.344152][ T9774] ? __do_sys_listmount+0x289/0xee0 [ 417.344195][ T9774] __do_sys_listmount+0x289/0xee0 [ 417.344233][ T9774] ? __pfx_do_futex+0x10/0x10 [ 417.344261][ T9774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 417.344305][ T9774] ? __pfx___do_sys_listmount+0x10/0x10 [ 417.344362][ T9774] do_syscall_64+0x115/0x840 [ 417.344383][ T9774] ? clear_bhb_loop+0x40/0x90 [ 417.344413][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.344437][ T9774] RIP: 0033:0x7fc6fff9ce59 [ 417.344458][ T9774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.344482][ T9774] RSP: 002b:00007fc700da3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 417.344505][ T9774] RAX: ffffffffffffffda RBX: 00007fc700215fa0 RCX: 00007fc6fff9ce59 [ 417.344522][ T9774] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 417.344537][ T9774] RBP: 00007fc700032e6f R08: 0000000000000000 R09: 0000000000000000 [ 417.344551][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.344566][ T9774] R13: 00007fc700216038 R14: 00007fc700215fa0 R15: 00007ffe0ae4f7f8 [ 417.344596][ T9774] [ 417.762393][ T9774] syz.0.978: vmalloc error: size 6164960, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 417.778720][ T9774] CPU: 0 UID: 0 PID: 9774 Comm: syz.0.978 Tainted: G U L syzkaller #0 PREEMPT(full) [ 417.778771][ T9774] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 417.778782][ T9774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 417.778799][ T9774] Call Trace: [ 417.778807][ T9774] [ 417.778817][ T9774] dump_stack_lvl+0x100/0x190 [ 417.778856][ T9774] warn_alloc.cold+0x94/0xa8 [ 417.778884][ T9774] ? __pfx_warn_alloc+0x10/0x10 [ 417.778913][ T9774] ? lockdep_hardirqs_on+0x78/0x100 [ 417.778961][ T9774] ? __get_vm_area_node+0x2cd/0x330 [ 417.779008][ T9774] ? __get_vm_area_node+0x208/0x330 [ 417.779054][ T9774] __vmalloc_node_range_noprof+0xccd/0x1630 [ 417.779116][ T9774] ? __pfx___futex_wait+0x10/0x10 [ 417.779162][ T9774] ? __do_sys_listmount+0x289/0xee0 [ 417.779210][ T9774] ? alloc_pages_mpol+0x25a/0x540 [ 417.779253][ T9774] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 417.779302][ T9774] ? rcu_is_watching+0x12/0xc0 [ 417.779349][ T9774] __kvmalloc_node_noprof+0x3d3/0x970 [ 417.779385][ T9774] ? __do_sys_listmount+0x289/0xee0 [ 417.779429][ T9774] ? _copy_from_user+0x59/0xd0 [ 417.779468][ T9774] ? __do_sys_listmount+0x289/0xee0 [ 417.779516][ T9774] __do_sys_listmount+0x289/0xee0 [ 417.779558][ T9774] ? __pfx_do_futex+0x10/0x10 [ 417.779596][ T9774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 417.779649][ T9774] ? __pfx___do_sys_listmount+0x10/0x10 [ 417.779718][ T9774] do_syscall_64+0x115/0x840 [ 417.779742][ T9774] ? clear_bhb_loop+0x40/0x90 [ 417.779775][ T9774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.779803][ T9774] RIP: 0033:0x7fc6fff9ce59 [ 417.779825][ T9774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.779851][ T9774] RSP: 002b:00007fc700da3028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 417.779876][ T9774] RAX: ffffffffffffffda RBX: 00007fc700215fa0 RCX: 00007fc6fff9ce59 [ 417.779895][ T9774] RDX: 00000000000bc23c RSI: 0000000000000000 RDI: 0000200000000100 [ 417.779911][ T9774] RBP: 00007fc700032e6f R08: 0000000000000000 R09: 0000000000000000 [ 417.779928][ T9774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.779944][ T9774] R13: 00007fc700216038 R14: 00007fc700215fa0 R15: 00007ffe0ae4f7f8 [ 417.779978][ T9774] [ 417.780803][ T9774] Mem-Info: [ 418.015487][ T9774] active_anon:13369 inactive_anon:0 isolated_anon:0 [ 418.015487][ T9774] active_file:5068 inactive_file:54200 isolated_file:0 [ 418.015487][ T9774] unevictable:768 dirty:460 writeback:0 [ 418.015487][ T9774] slab_reclaimable:11844 slab_unreclaimable:99247 [ 418.015487][ T9774] mapped:25871 shmem:4203 pagetables:1172 [ 418.015487][ T9774] sec_pagetables:0 bounce:0 [ 418.015487][ T9774] kernel_misc_reclaimable:0 [ 418.015487][ T9774] free:1305729 free_pcp:13373 free_cma:0 [ 418.082307][ T9774] Node 0 active_anon:53476kB inactive_anon:0kB active_file:20272kB inactive_file:216664kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103484kB dirty:1836kB writeback:0kB shmem:15276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11104kB pagetables:4516kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 418.117235][ T9774] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 418.150026][ T9774] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 418.180964][ T9774] lowmem_reserve[]: 0 2476 2477 2477 2477 [ 418.187451][ T9774] Node 0 DMA32 free:1276492kB boost:0kB min:34052kB low:42564kB high:51076kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53476kB inactive_anon:0kB active_file:20272kB inactive_file:216664kB unevictable:1536kB writepending:1836kB zspages:0kB present:3129332kB managed:2535508kB mlocked:0kB bounce:0kB free_pcp:46524kB local_pcp:46524kB free_cma:0kB [ 418.221592][ T9774] lowmem_reserve[]: 0 0 1 1 1 [ 418.233147][ T9774] Node 0 Normal free:12kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1028kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 418.305490][ T9774] lowmem_reserve[]: 0 0 0 0 0 [ 418.317761][ T9774] Node 1 Normal free:3931260kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:6696kB local_pcp:6696kB free_cma:0kB [ 418.427118][ T9774] lowmem_reserve[]: 0 0 0 0 0 [ 418.441391][ T9774] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 418.488109][ T9774] Node 0 DMA32: 4500*4kB (UM) 2676*8kB (UM) 1388*16kB (UME) 607*32kB (UME) 445*64kB (UME) 313*128kB (UM) 45*256kB (UM) 28*512kB (M) 19*1024kB (UME) 6*2048kB (UME) 262*4096kB (M) = 1280336kB [ 418.545776][ T9774] Node 0 Normal: 1*4kB (U) 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 418.574081][ T9774] Node 1 Normal: 12*4kB (UM) 11*8kB (UM) 12*16kB (UM) 5*32kB (UM) 1*64kB (M) 3*128kB (M) 7*256kB (UM) 3*512kB (UM) 1*1024kB (U) 1*2048kB (M) 958*4096kB (UM) = 3931304kB [ 418.651487][ T9774] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.685894][ T9774] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.711402][ T9774] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 418.732182][ T9774] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 418.760241][ T9774] 63467 total pagecache pages [ 418.783630][ T9774] 1 pages in swap cache [ 418.793737][ T9774] Free swap = 124992kB [ 418.803948][ T9774] Total swap = 124996kB [ 418.821031][ T9774] 2097051 pages RAM [ 418.831487][ T9774] 0 pages HighMem/MovableOnly [ 418.855033][ T9774] 431302 pages reserved [ 418.866333][ T9774] 0 pages cma reserved [ 419.594925][ T9803] vivid-007: ================= START STATUS ================= [ 419.643375][ T9803] vivid-007: Generate PTS: true [ 419.699924][ T9803] vivid-007: Generate SCR: true [ 419.741239][ T9803] tpg source WxH: 320x240 (Y'CbCr) [ 419.770220][ T9803] tpg field: 1 [ 419.785465][ T9803] tpg crop: (0,0)/320x240 [ 419.806229][ T9803] tpg compose: (0,0)/320x240 [ 419.827938][ T9803] tpg colorspace: 8 [ 419.847738][ T9803] tpg transfer function: 0/0 [ 419.885920][ T9803] tpg Y'CbCr encoding: 0/0 [ 419.911157][ T9803] tpg quantization: 0/0 [ 419.936807][ T9803] tpg RGB range: 0/2 [ 419.961158][ T9803] vivid-007: ================== END STATUS ================== [ 420.379665][ T9816] netlink: 12 bytes leftover after parsing attributes in process `syz.1.976'. [ 420.478824][ T9823] netlink: 5 bytes leftover after parsing attributes in process `syz.0.990'. [ 421.080232][ T9829] FAULT_INJECTION: forcing a failure. [ 421.080232][ T9829] name failslab, interval 1, probability 0, space 0, times 0 [ 421.165555][ T9829] CPU: 0 UID: 0 PID: 9829 Comm: syz.1.992 Tainted: G U L syzkaller #0 PREEMPT(full) [ 421.165597][ T9829] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 421.165606][ T9829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 421.165621][ T9829] Call Trace: [ 421.165628][ T9829] [ 421.165637][ T9829] dump_stack_lvl+0x100/0x190 [ 421.165673][ T9829] should_fail_ex.cold+0x5/0xa [ 421.165706][ T9829] should_failslab+0xc2/0x120 [ 421.165740][ T9829] __kmalloc_cache_noprof+0x91/0x6c0 [ 421.165765][ T9829] ? arch_stack_walk+0xa6/0xf0 [ 421.165800][ T9829] ? tomoyo_init_log+0x1a0/0x20c0 [ 421.165839][ T9829] tomoyo_init_log+0x1a0/0x20c0 [ 421.165873][ T9829] ? __pfx_format_decode+0x10/0x10 [ 421.165908][ T9829] ? clockevents_program_event+0x1bf/0x820 [ 421.165942][ T9829] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 421.165984][ T9829] ? __pfx_tomoyo_init_log+0x10/0x10 [ 421.166025][ T9829] tomoyo_write_log2+0x2ed/0xbc0 [ 421.166064][ T9829] tomoyo_supervisor+0x15e/0x1340 [ 421.166116][ T9829] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 421.166157][ T9829] ? irqentry_exit+0x24d/0xa00 [ 421.166197][ T9829] ? lockdep_hardirqs_on+0x78/0x100 [ 421.166234][ T9829] ? irqentry_exit+0x24d/0xa00 [ 421.166286][ T9829] ? tomoyo_check_path_acl+0x141/0x210 [ 421.166317][ T9829] ? tomoyo_check_acl+0x1f7/0x410 [ 421.166347][ T9829] tomoyo_path_permission+0x270/0x3b0 [ 421.166378][ T9829] tomoyo_check_open_permission+0x37f/0x3c0 [ 421.166410][ T9829] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 421.166450][ T9829] ? hook_file_open+0x24f/0x8f0 [ 421.166502][ T9829] ? path_get+0x61/0x80 [ 421.166532][ T9829] tomoyo_file_open+0x6b/0x90 [ 421.166556][ T9829] security_file_open+0xb5/0x1e0 [ 421.166590][ T9829] do_dentry_open+0x588/0x14d0 [ 421.166622][ T9829] vfs_open+0x82/0x3f0 [ 421.166656][ T9829] path_openat+0x2873/0x4280 [ 421.166693][ T9829] ? __pfx_path_openat+0x10/0x10 [ 421.166726][ T9829] do_file_open+0x20e/0x430 [ 421.166754][ T9829] ? __pfx_do_file_open+0x10/0x10 [ 421.166799][ T9829] ? alloc_fd+0x471/0x7a0 [ 421.166825][ T9829] ? do_getname+0x191/0x390 [ 421.166863][ T9829] do_sys_openat2+0x10f/0x1e0 [ 421.166896][ T9829] ? __pfx_do_sys_openat2+0x10/0x10 [ 421.166939][ T9829] __x64_sys_openat+0x12d/0x210 [ 421.166973][ T9829] ? __pfx___x64_sys_openat+0x10/0x10 [ 421.167018][ T9829] do_syscall_64+0x115/0x840 [ 421.167038][ T9829] ? clear_bhb_loop+0x40/0x90 [ 421.167068][ T9829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.167093][ T9829] RIP: 0033:0x7f6f0799ce59 [ 421.167119][ T9829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 421.167144][ T9829] RSP: 002b:00007f6f087bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 421.167168][ T9829] RAX: ffffffffffffffda RBX: 00007f6f07c15fa0 RCX: 00007f6f0799ce59 [ 421.167184][ T9829] RDX: 0000000000129000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 421.167199][ T9829] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 421.167214][ T9829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 421.167229][ T9829] R13: 00007f6f07c16038 R14: 00007f6f07c15fa0 R15: 00007ffda78dc618 [ 421.167259][ T9829] [ 422.470394][ T9843] netlink: 330 bytes leftover after parsing attributes in process `syz.3.996'. [ 422.957576][ T9854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.994'. [ 423.734401][ T9866] netlink: 226 bytes leftover after parsing attributes in process `syz.0.1002'. [ 423.773678][ T9866] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1002'. [ 423.804364][ T9866] net_ratelimit: 5 callbacks suppressed [ 423.804388][ T9866] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 424.219155][ T9874] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3722796297 (7445592594 ns) > initial count (1748978962 ns). Using initial count to start timer. [ 425.890569][ T9905] netlink: 13 bytes leftover after parsing attributes in process `syz.0.1012'. [ 426.446940][ T9910] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1011'. [ 427.513813][ T9926] FAULT_INJECTION: forcing a failure. [ 427.513813][ T9926] name failslab, interval 1, probability 0, space 0, times 0 [ 427.577141][ T9926] CPU: 0 UID: 0 PID: 9926 Comm: syz.3.1017 Tainted: G U L syzkaller #0 PREEMPT(full) [ 427.577182][ T9926] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 427.577192][ T9926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 427.577206][ T9926] Call Trace: [ 427.577214][ T9926] [ 427.577222][ T9926] dump_stack_lvl+0x100/0x190 [ 427.577257][ T9926] should_fail_ex.cold+0x5/0xa [ 427.577288][ T9926] should_failslab+0xc2/0x120 [ 427.577322][ T9926] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 427.577357][ T9926] ? debug_string_to_mask+0x81/0x560 [ 427.577523][ T9926] kstrdup+0x51/0xe0 [ 427.577552][ T9926] debug_string_to_mask+0x81/0x560 [ 427.577591][ T9926] ? find_held_lock+0x2b/0x80 [ 427.577621][ T9926] ? __might_fault+0xc5/0x140 [ 427.577650][ T9926] ? __pfx_debug_string_to_mask+0x10/0x10 [ 427.577692][ T9926] ? _copy_from_user+0x59/0xd0 [ 427.577739][ T9926] orangefs_debug_write+0x499/0x640 [ 427.577781][ T9926] ? __pfx_orangefs_debug_write+0x10/0x10 [ 427.577819][ T9926] ? __debugfs_file_get+0x1fc/0x860 [ 427.577873][ T9926] ? __pfx___debugfs_file_get+0x10/0x10 [ 427.577906][ T9926] full_proxy_write+0x135/0x1a0 [ 427.577935][ T9926] vfs_write+0x2aa/0x1050 [ 427.577958][ T9926] ? __pfx_full_proxy_write+0x10/0x10 [ 427.577986][ T9926] ? __pfx_vfs_write+0x10/0x10 [ 427.578008][ T9926] ? __fget_files+0x215/0x3d0 [ 427.578036][ T9926] ? __fget_files+0x21f/0x3d0 [ 427.578065][ T9926] ksys_write+0x12a/0x250 [ 427.578087][ T9926] ? __pfx_ksys_write+0x10/0x10 [ 427.578117][ T9926] do_syscall_64+0x115/0x840 [ 427.578139][ T9926] ? clear_bhb_loop+0x40/0x90 [ 427.578169][ T9926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.578194][ T9926] RIP: 0033:0x7f75ac59ce59 [ 427.578214][ T9926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.578237][ T9926] RSP: 002b:00007f75ad3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 427.578259][ T9926] RAX: ffffffffffffffda RBX: 00007f75ac815fa0 RCX: 00007f75ac59ce59 [ 427.578274][ T9926] RDX: 00000000a0000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 427.578289][ T9926] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 427.578303][ T9926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.578317][ T9926] R13: 00007f75ac816038 R14: 00007f75ac815fa0 R15: 00007ffd68ce87f8 [ 427.578346][ T9926] [ 427.845142][ T9920] FAULT_INJECTION: forcing a failure. [ 427.845142][ T9920] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.858755][ T9920] CPU: 0 UID: 0 PID: 9920 Comm: syz.1.1016 Tainted: G U L syzkaller #0 PREEMPT(full) [ 427.858795][ T9920] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 427.858804][ T9920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 427.858819][ T9920] Call Trace: [ 427.858828][ T9920] [ 427.858837][ T9920] dump_stack_lvl+0x100/0x190 [ 427.858872][ T9920] should_fail_ex.cold+0x5/0xa [ 427.858907][ T9920] ? prepare_alloc_pages+0x16d/0x5f0 [ 427.858946][ T9920] should_fail_alloc_page+0xeb/0x140 [ 427.858983][ T9920] prepare_alloc_pages+0x1f0/0x5f0 [ 427.859024][ T9920] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 427.859057][ T9920] ? rcu_is_watching+0x12/0xc0 [ 427.859087][ T9920] ? trace_mm_page_alloc+0x164/0x1c0 [ 427.859124][ T9920] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 427.859152][ T9920] ? stack_trace_save+0x8e/0xc0 [ 427.859186][ T9920] ? __pfx_stack_trace_save+0x10/0x10 [ 427.859222][ T9920] ? stack_depot_save_flags+0x27/0x9d0 [ 427.859259][ T9920] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 427.859287][ T9920] ? __lock_acquire+0x49f/0x1a40 [ 427.859310][ T9920] ? tomoyo_path_number_perm+0x46d/0x580 [ 427.859341][ T9920] ? kasan_save_stack+0x3f/0x50 [ 427.859370][ T9920] ? kasan_save_stack+0x30/0x50 [ 427.859399][ T9920] ? kasan_save_track+0x14/0x30 [ 427.859428][ T9920] ? kasan_save_free_info+0x3b/0x70 [ 427.859450][ T9920] ? __kasan_slab_free+0x5f/0x80 [ 427.859482][ T9920] ? kfree+0x22b/0x6c0 [ 427.859502][ T9920] ? look_up_lock_class+0x55/0x120 [ 427.859541][ T9920] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 427.859580][ T9920] ? __lock_acquire+0x49f/0x1a40 [ 427.859609][ T9920] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 427.859650][ T9920] ? policy_nodemask+0xed/0x4f0 [ 427.859688][ T9920] alloc_pages_mpol+0x1fb/0x540 [ 427.859725][ T9920] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 427.859768][ T9920] ___kmalloc_large_node+0xe5/0x120 [ 427.859807][ T9920] __kmalloc_large_node_noprof+0x1c/0x70 [ 427.859846][ T9920] __kmalloc_noprof+0x5a1/0x820 [ 427.859878][ T9920] ? rcu_is_watching+0x12/0xc0 [ 427.859908][ T9920] ? trace_kmalloc+0xeb/0x110 [ 427.859940][ T9920] ? vhost_dev_set_owner+0x330/0xa30 [ 427.860057][ T9920] vhost_dev_set_owner+0x330/0xa30 [ 427.860089][ T9920] vhost_net_ioctl+0xfa3/0x1910 [ 427.860129][ T9920] ? do_vfs_ioctl+0x226/0x13e0 [ 427.860166][ T9920] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 427.860201][ T9920] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 427.860231][ T9920] ? find_held_lock+0x2b/0x80 [ 427.860262][ T9920] ? __fget_files+0x215/0x3d0 [ 427.860284][ T9920] ? hook_file_ioctl_common+0x140/0x440 [ 427.860320][ T9920] ? __fget_files+0x21f/0x3d0 [ 427.860347][ T9920] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 427.860372][ T9920] __x64_sys_ioctl+0x18e/0x210 [ 427.860409][ T9920] do_syscall_64+0x115/0x840 [ 427.860430][ T9920] ? clear_bhb_loop+0x40/0x90 [ 427.860460][ T9920] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.860485][ T9920] RIP: 0033:0x7f6f0799ce59 [ 427.860505][ T9920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.860530][ T9920] RSP: 002b:00007f6f087bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 427.860553][ T9920] RAX: ffffffffffffffda RBX: 00007f6f07c15fa0 RCX: 00007f6f0799ce59 [ 427.860570][ T9920] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000004 [ 427.860585][ T9920] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 427.860599][ T9920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 427.860614][ T9920] R13: 00007f6f07c16038 R14: 00007f6f07c15fa0 R15: 00007ffda78dc618 [ 427.860644][ T9920] [ 429.244239][ T9942] MTRR 1 not used [ 429.488119][ T9945] HfR: entered promiscuous mode [ 429.554615][ T9945] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1023'. [ 429.607907][ T9945] HfR: left promiscuous mode [ 430.834275][ T9973] ======================================================= [ 430.834275][ T9973] WARNING: The mand mount option has been deprecated and [ 430.834275][ T9973] and is ignored by this kernel. Remove the mand [ 430.834275][ T9973] option from the mount to silence this warning. [ 430.834275][ T9973] ======================================================= [ 431.043685][ T9977] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1031'. [ 431.395027][ T9977] syz.0.1031 (9977) used greatest stack depth: 20112 bytes left [ 432.080539][ T9983] ERROR: Out of memory at tomoyo_memory_ok. [ 432.130453][ T9991] HfR: entered promiscuous mode [ 432.192229][ T9991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1035'. [ 432.247583][ T9991] HfR: left promiscuous mode [ 432.483118][ T9997] capability: warning: `syz.3.1037' uses 32-bit capabilities (legacy support in use) [ 432.561377][ T9997] FAULT_INJECTION: forcing a failure. [ 432.561377][ T9997] name failslab, interval 1, probability 0, space 0, times 0 [ 432.682717][ T9997] CPU: 0 UID: 0 PID: 9997 Comm: syz.3.1037 Tainted: G U L syzkaller #0 PREEMPT(full) [ 432.682758][ T9997] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 432.682767][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.682782][ T9997] Call Trace: [ 432.682790][ T9997] [ 432.682798][ T9997] dump_stack_lvl+0x100/0x190 [ 432.682834][ T9997] should_fail_ex.cold+0x5/0xa [ 432.682866][ T9997] should_failslab+0xc2/0x120 [ 432.682901][ T9997] kmem_cache_alloc_noprof+0x91/0x6a0 [ 432.682932][ T9997] ? __pfx_map_id_range_down+0x10/0x10 [ 432.682969][ T9997] ? security_inode_alloc+0x3b/0x2c0 [ 432.683001][ T9997] security_inode_alloc+0x3b/0x2c0 [ 432.683029][ T9997] inode_init_always_gfp+0xc77/0xfb0 [ 432.683057][ T9997] alloc_inode+0x8e/0x250 [ 432.683090][ T9997] new_inode+0x22/0x1c0 [ 432.683124][ T9997] hugetlbfs_get_inode+0x39a/0x700 [ 432.683154][ T9997] ? do_raw_spin_lock+0x128/0x260 [ 432.683185][ T9997] hugetlb_file_setup+0x15b/0x5b0 [ 432.683219][ T9997] memfd_alloc_file+0xc2/0x610 [ 432.683252][ T9997] ? _raw_spin_unlock+0x28/0x50 [ 432.683349][ T9997] ? __pfx_memfd_alloc_file+0x10/0x10 [ 432.683398][ T9997] __do_sys_memfd_create+0x236/0x3d0 [ 432.683435][ T9997] do_syscall_64+0x115/0x840 [ 432.683457][ T9997] ? clear_bhb_loop+0x40/0x90 [ 432.683487][ T9997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.683512][ T9997] RIP: 0033:0x7f75ac59ce59 [ 432.683532][ T9997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.683556][ T9997] RSP: 002b:00007f75ad3a4028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 432.683579][ T9997] RAX: ffffffffffffffda RBX: 00007f75ac815fa0 RCX: 00007f75ac59ce59 [ 432.683595][ T9997] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000040 [ 432.683610][ T9997] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 432.683625][ T9997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 432.683639][ T9997] R13: 00007f75ac816038 R14: 00007f75ac815fa0 R15: 00007ffd68ce87f8 [ 432.683668][ T9997] [ 433.593359][T10013] futex_wake_op: syz.3.1041 tries to shift op by -2048; fix this program [ 433.626995][T10013] futex_wake_op: syz.3.1041 tries to shift op by -2048; fix this program [ 433.658935][T10013] 0x000000000001-0x000000020000 : "" [ 433.697891][T10013] ftl_cs: FTL header corrupt! [ 433.997540][T10018] ERROR: Out of memory at tomoyo_memory_ok. [ 434.604997][T10024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1043'. [ 435.388813][T10035] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1046'. [ 435.920105][ T5627] Bluetooth: hci1: SCO packet too small [ 436.401515][ T3923] netdevsim netdevsim1334 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.007735][T10070] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[10070] [ 438.198513][T10082] MTRR 1 not used [ 439.355777][T10097] FAULT_INJECTION: forcing a failure. [ 439.355777][T10097] name failslab, interval 1, probability 0, space 0, times 0 [ 439.479922][T10097] CPU: 0 UID: 0 PID: 10097 Comm: syz.3.1065 Tainted: G U L syzkaller #0 PREEMPT(full) [ 439.479963][T10097] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 439.479972][T10097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 439.479987][T10097] Call Trace: [ 439.479995][T10097] [ 439.480004][T10097] dump_stack_lvl+0x100/0x190 [ 439.480046][T10097] should_fail_ex.cold+0x5/0xa [ 439.480079][T10097] should_failslab+0xc2/0x120 [ 439.480115][T10097] __kmalloc_noprof+0xfc/0x820 [ 439.480148][T10097] ? kobject_get_path+0xcf/0x2c0 [ 439.480183][T10097] kobject_get_path+0xcf/0x2c0 [ 439.480215][T10097] kobject_uevent_env+0x287/0x18b0 [ 439.480259][T10097] net_rx_queue_update_kobjects+0x1dd/0x760 [ 439.480390][T10097] ? kset_register+0x1bb/0x290 [ 439.480423][T10097] netdev_register_kobject+0x290/0x3d0 [ 439.480465][T10097] register_netdevice+0x15b6/0x25a0 [ 439.480542][T10097] ? __pfx_register_netdevice+0x10/0x10 [ 439.480581][T10097] ? __pfx_loopback_net_init+0x10/0x10 [ 439.480657][T10097] register_netdev+0x34/0x50 [ 439.480688][T10097] loopback_net_init+0x7a/0x170 [ 439.480733][T10097] ? __pfx_loopback_net_init+0x10/0x10 [ 439.480770][T10097] ops_init+0x1e2/0x5f0 [ 439.480823][T10097] setup_net+0x118/0x3a0 [ 439.480854][T10097] ? __pfx_setup_net+0x10/0x10 [ 439.480885][T10097] ? mutex_init_lockdep+0xf1/0x120 [ 439.480916][T10097] copy_net_ns+0x46f/0x7c0 [ 439.480952][T10097] create_new_namespaces+0x3ea/0xac0 [ 439.480986][T10097] unshare_nsproxy_namespaces+0xf2/0x220 [ 439.481016][T10097] ksys_unshare+0x438/0xab0 [ 439.481056][T10097] ? __pfx_ksys_unshare+0x10/0x10 [ 439.481091][T10097] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 439.481135][T10097] ? syscall_user_dispatch+0x76/0x130 [ 439.481165][T10097] __x64_sys_unshare+0x31/0x40 [ 439.481197][T10097] do_syscall_64+0x115/0x840 [ 439.481218][T10097] ? clear_bhb_loop+0x40/0x90 [ 439.481247][T10097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.481272][T10097] RIP: 0033:0x7f75ac59ce59 [ 439.481292][T10097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 439.481316][T10097] RSP: 002b:00007f75ad3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 439.481339][T10097] RAX: ffffffffffffffda RBX: 00007f75ac815fa0 RCX: 00007f75ac59ce59 [ 439.481356][T10097] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 439.481371][T10097] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 439.481386][T10097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.481400][T10097] R13: 00007f75ac816038 R14: 00007f75ac815fa0 R15: 00007ffd68ce87f8 [ 439.481431][T10097] [ 439.920755][T10103] Process accounting paused [ 440.140054][T10108] FAULT_INJECTION: forcing a failure. [ 440.140054][T10108] name failslab, interval 1, probability 0, space 0, times 0 [ 440.210956][T10108] CPU: 0 UID: 0 PID: 10108 Comm: syz.1.1066 Tainted: G U L syzkaller #0 PREEMPT(full) [ 440.210996][T10108] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 440.211005][T10108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 440.211020][T10108] Call Trace: [ 440.211028][T10108] [ 440.211037][T10108] dump_stack_lvl+0x100/0x190 [ 440.211082][T10108] should_fail_ex.cold+0x5/0xa [ 440.211114][T10108] should_failslab+0xc2/0x120 [ 440.211150][T10108] __kvmalloc_node_noprof+0x116/0x970 [ 440.211184][T10108] ? alloc_shrinker_info+0xf0/0x470 [ 440.211216][T10108] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 440.211250][T10108] alloc_shrinker_info+0xf0/0x470 [ 440.211284][T10108] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 440.211315][T10108] mem_cgroup_css_online+0xa4/0xbf0 [ 440.211348][T10108] ? __pfx_mem_cgroup_css_online+0x10/0x10 [ 440.211379][T10108] online_css+0xb2/0x350 [ 440.211408][T10108] cgroup_apply_control_enable+0xa8d/0xdd0 [ 440.211453][T10108] cgroup_mkdir+0x57f/0x1330 [ 440.211493][T10108] ? __pfx_cgroup_mkdir+0x10/0x10 [ 440.211530][T10108] kernfs_iop_mkdir+0x111/0x190 [ 440.211554][T10108] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 440.211596][T10108] vfs_mkdir+0x361/0x850 [ 440.211633][T10108] filename_mkdirat+0x48b/0x5e0 [ 440.211664][T10108] ? __pfx_filename_mkdirat+0x10/0x10 [ 440.211691][T10108] ? strncpy_from_user+0x19d/0x2d0 [ 440.211728][T10108] ? do_getname+0x191/0x390 [ 440.211761][T10108] __x64_sys_mkdir+0x6b/0x90 [ 440.211788][T10108] do_syscall_64+0x115/0x840 [ 440.211809][T10108] ? clear_bhb_loop+0x40/0x90 [ 440.211838][T10108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.211863][T10108] RIP: 0033:0x7f6f0799ce59 [ 440.211882][T10108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.211907][T10108] RSP: 002b:00007f6f087bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 440.211930][T10108] RAX: ffffffffffffffda RBX: 00007f6f07c15fa0 RCX: 00007f6f0799ce59 [ 440.211946][T10108] RDX: 0000000000000000 RSI: 00000000000008cd RDI: 0000200000000000 [ 440.211961][T10108] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 440.211976][T10108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.211990][T10108] R13: 00007f6f07c16038 R14: 00007f6f07c15fa0 R15: 00007ffda78dc618 [ 440.212021][T10108] [ 440.502428][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.509739][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.123342][T10122] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1071'. [ 442.362444][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1077'. [ 445.123715][T10164] netlink: 318 bytes leftover after parsing attributes in process `syz.3.1080'. [ 445.215713][T10166] FAULT_INJECTION: forcing a failure. [ 445.215713][T10166] name failslab, interval 1, probability 0, space 0, times 0 [ 445.380445][T10166] CPU: 0 UID: 0 PID: 10166 Comm: syz.1.1079 Tainted: G U L syzkaller #0 PREEMPT(full) [ 445.380498][T10166] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 445.380507][T10166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 445.380522][T10166] Call Trace: [ 445.380530][T10166] [ 445.380539][T10166] dump_stack_lvl+0x100/0x190 [ 445.380573][T10166] should_fail_ex.cold+0x5/0xa [ 445.380606][T10166] should_failslab+0xc2/0x120 [ 445.380641][T10166] __kmalloc_node_track_caller_noprof+0xf9/0x830 [ 445.380676][T10166] ? cache_create_net+0x2b/0x1f0 [ 445.380796][T10166] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 445.380844][T10166] kmemdup_noprof+0x29/0x60 [ 445.380873][T10166] cache_create_net+0x2b/0x1f0 [ 445.380902][T10166] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 445.380931][T10166] gss_svc_init_net+0x69/0x640 [ 445.380972][T10166] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 445.381042][T10166] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 445.381070][T10166] ops_init+0x1e2/0x5f0 [ 445.381105][T10166] setup_net+0x118/0x3a0 [ 445.381136][T10166] ? __pfx_setup_net+0x10/0x10 [ 445.381167][T10166] ? mutex_init_lockdep+0xf1/0x120 [ 445.381198][T10166] copy_net_ns+0x46f/0x7c0 [ 445.381235][T10166] create_new_namespaces+0x3ea/0xac0 [ 445.381269][T10166] unshare_nsproxy_namespaces+0xf2/0x220 [ 445.381299][T10166] ksys_unshare+0x438/0xab0 [ 445.381333][T10166] ? __pfx_ksys_unshare+0x10/0x10 [ 445.381367][T10166] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 445.381411][T10166] ? syscall_user_dispatch+0x76/0x130 [ 445.381441][T10166] __x64_sys_unshare+0x31/0x40 [ 445.381473][T10166] do_syscall_64+0x115/0x840 [ 445.381502][T10166] ? clear_bhb_loop+0x40/0x90 [ 445.381533][T10166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.381558][T10166] RIP: 0033:0x7f6f0799ce59 [ 445.381579][T10166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.381603][T10166] RSP: 002b:00007f6f087bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 445.381626][T10166] RAX: ffffffffffffffda RBX: 00007f6f07c15fa0 RCX: 00007f6f0799ce59 [ 445.381642][T10166] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 445.381657][T10166] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 445.381672][T10166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.381686][T10166] R13: 00007f6f07c16038 R14: 00007f6f07c15fa0 R15: 00007ffda78dc618 [ 445.381718][T10166] [ 445.995147][ T5627] Bluetooth: hci3: unexpected event 0x14 length: 16 > 6 [ 446.756641][T10192] futex_wake_op: syz.2.1087 tries to shift op by -2048; fix this program [ 446.792822][T10192] futex_wake_op: syz.2.1087 tries to shift op by -2048; fix this program [ 447.634539][T10201] Process accounting paused [ 448.892138][T10223] random: crng reseeded on system resumption [ 450.266390][T10243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1096'. [ 454.867014][T10297] ima: policy update failed [ 454.867168][ T30] audit: type=1802 audit(4294967407.980:27): pid=10297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1113" res=0 errno=0 [ 458.615336][T10368] ERROR: Out of memory at tomoyo_memory_ok. [ 458.936244][T10370] futex_wake_op: syz.1.1128 tries to shift op by -2048; fix this program [ 458.954123][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1123'. [ 459.004602][T10370] futex_wake_op: syz.1.1128 tries to shift op by -2048; fix this program [ 459.098744][T10373] 0x000000000001-0x000000020000 : "" [ 459.175297][T10373] ftl_cs: FTL header corrupt! [ 459.503860][T10382] ERROR: Out of memory at tomoyo_memory_ok. [ 462.326700][T10402] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1134'. [ 463.153491][T10425] input: f as /devices/virtual/input/input10 [ 463.235519][ T4977] ERROR: Out of memory at tomoyo_memory_ok. [ 464.515847][T10442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1143'. [ 464.633610][T10442] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1143: iget: checksum invalid [ 464.690410][T10442] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 464.740065][T10442] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1143: iget: checksum invalid [ 464.803177][T10442] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 464.854622][T10442] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1143: iget: checksum invalid [ 464.913296][T10442] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 464.968312][T10442] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1143: iget: checksum invalid [ 465.039054][T10442] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 465.083416][T10442] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 465.129861][T10442] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 465.839147][T10451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1153'. [ 466.225274][T10451] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1153: iget: checksum invalid [ 466.279072][T10451] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 466.348131][T10451] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1153: iget: checksum invalid [ 466.404313][T10451] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 466.455555][T10451] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1153: iget: checksum invalid [ 466.516476][T10451] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 466.556534][T10451] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.0.1153: iget: checksum invalid [ 466.598573][T10451] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 466.645251][T10451] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 466.699510][T10451] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 467.398941][T10475] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1148'. [ 469.879210][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1159'. [ 469.964717][T10521] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1159: iget: checksum invalid [ 470.016510][T10521] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 470.063918][T10521] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1159: iget: checksum invalid [ 470.125485][T10521] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 470.170283][T10521] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1159: iget: checksum invalid [ 470.184046][T10530] random: crng reseeded on system resumption [ 470.225231][T10521] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 470.270462][T10521] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1159: iget: checksum invalid [ 470.321891][T10521] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 470.361647][T10521] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 470.414684][T10521] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 470.963325][T10523] Process accounting resumed [ 471.254186][T10543] FAULT_INJECTION: forcing a failure. [ 471.254186][T10543] name failslab, interval 1, probability 0, space 0, times 0 [ 471.434395][T10543] CPU: 0 UID: 0 PID: 10543 Comm: syz.3.1163 Tainted: G U L syzkaller #0 PREEMPT(full) [ 471.434436][T10543] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 471.434446][T10543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.434461][T10543] Call Trace: [ 471.434470][T10543] [ 471.434479][T10543] dump_stack_lvl+0x100/0x190 [ 471.434514][T10543] should_fail_ex.cold+0x5/0xa [ 471.434546][T10543] should_failslab+0xc2/0x120 [ 471.434581][T10543] __kmalloc_cache_noprof+0x91/0x6c0 [ 471.434608][T10543] ? percpu_ref_init+0xec/0x3f0 [ 471.434641][T10543] ? __pfx_blk_queue_usage_counter_release+0x10/0x10 [ 471.434754][T10543] percpu_ref_init+0xec/0x3f0 [ 471.434785][T10543] blk_alloc_queue+0x574/0x790 [ 471.434824][T10543] __blk_alloc_disk+0xa0/0x170 [ 471.434896][T10543] ? __pfx___blk_alloc_disk+0x10/0x10 [ 471.434943][T10543] ? __pfx_idr_alloc+0x10/0x10 [ 471.434968][T10543] ? lockdep_init_map_type+0x5c/0x250 [ 471.434994][T10543] ? __raw_spin_lock_init+0x3a/0x110 [ 471.435025][T10543] ? __pfx_hot_add_show+0x10/0x10 [ 471.435084][T10543] zram_add+0x1bf/0x5d0 [ 471.435110][T10543] ? __pfx_zram_add+0x10/0x10 [ 471.435154][T10543] ? find_held_lock+0x2b/0x80 [ 471.435184][T10543] ? sysfs_file_kobj+0xe4/0x290 [ 471.435221][T10543] ? __pfx_hot_add_show+0x10/0x10 [ 471.435247][T10543] hot_add_show+0x21/0x80 [ 471.435273][T10543] class_attr_show+0x72/0xa0 [ 471.435337][T10543] ? __pfx_class_attr_show+0x10/0x10 [ 471.435372][T10543] sysfs_kf_seq_show+0x217/0x3f0 [ 471.435412][T10543] seq_read_iter+0x32f/0x1270 [ 471.435449][T10543] ? lock_acquire+0x1b9/0x370 [ 471.435483][T10543] kernfs_fop_read_iter+0x46c/0x610 [ 471.435529][T10543] ? rw_verify_area+0xce/0x6d0 [ 471.435565][T10543] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 471.435597][T10543] vfs_read+0x82e/0xb40 [ 471.435624][T10543] ? __pfx_vfs_read+0x10/0x10 [ 471.435665][T10543] ksys_read+0x12a/0x250 [ 471.435686][T10543] ? __pfx_ksys_read+0x10/0x10 [ 471.435717][T10543] do_syscall_64+0x115/0x840 [ 471.435739][T10543] ? clear_bhb_loop+0x40/0x90 [ 471.435769][T10543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.435794][T10543] RIP: 0033:0x7f75ac59ce59 [ 471.435814][T10543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.435838][T10543] RSP: 002b:00007f75ad383028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 471.435861][T10543] RAX: ffffffffffffffda RBX: 00007f75ac816090 RCX: 00007f75ac59ce59 [ 471.435883][T10543] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000003 [ 471.435898][T10543] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 471.435912][T10543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 471.435926][T10543] R13: 00007f75ac816128 R14: 00007f75ac816090 R15: 00007ffd68ce87f8 [ 471.435958][T10543] [ 473.284336][T10543] zram: Error allocating disk structure for device 1 [ 473.979888][T10565] FAULT_INJECTION: forcing a failure. [ 473.979888][T10565] name failslab, interval 1, probability 0, space 0, times 0 [ 474.089206][T10565] CPU: 0 UID: 0 PID: 10565 Comm: syz.1.1167 Tainted: G U L syzkaller #0 PREEMPT(full) [ 474.089247][T10565] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 474.089256][T10565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 474.089271][T10565] Call Trace: [ 474.089278][T10565] [ 474.089288][T10565] dump_stack_lvl+0x100/0x190 [ 474.089323][T10565] should_fail_ex.cold+0x5/0xa [ 474.089355][T10565] should_failslab+0xc2/0x120 [ 474.089390][T10565] __kmalloc_noprof+0xfc/0x820 [ 474.089422][T10565] ? lsm_blob_alloc+0x68/0x90 [ 474.089462][T10565] ? __pfx_nfsd_fill_super+0x10/0x10 [ 474.089604][T10565] lsm_blob_alloc+0x68/0x90 [ 474.089641][T10565] security_sb_alloc+0x25/0x240 [ 474.089666][T10565] sget_fc+0x3d0/0x1d80 [ 474.089715][T10565] ? __pfx_test_keyed_super+0x10/0x10 [ 474.089750][T10565] ? __pfx_set_anon_super_fc+0x10/0x10 [ 474.089789][T10565] ? __pfx_sget_fc+0x10/0x10 [ 474.089823][T10565] ? kasan_save_track+0x14/0x30 [ 474.089854][T10565] ? __kasan_kmalloc+0xaa/0xb0 [ 474.089886][T10565] ? rcu_is_watching+0x12/0xc0 [ 474.089917][T10565] ? apparmor_capable+0x1d7/0x4d0 [ 474.089946][T10565] ? __pfx_nfsd_fill_super+0x10/0x10 [ 474.089981][T10565] get_tree_keyed+0x59/0x1d0 [ 474.090020][T10565] vfs_get_tree+0x92/0x320 [ 474.090056][T10565] path_mount+0x7d0/0x23d0 [ 474.090090][T10565] ? __pfx_path_mount+0x10/0x10 [ 474.090116][T10565] ? lockdep_hardirqs_on+0x78/0x100 [ 474.090159][T10565] ? putname+0xb1/0x110 [ 474.090185][T10565] ? kmem_cache_free+0x127/0x6b0 [ 474.090222][T10565] ? __x64_sys_mount+0x293/0x310 [ 474.090249][T10565] __x64_sys_mount+0x293/0x310 [ 474.090279][T10565] ? __pfx___x64_sys_mount+0x10/0x10 [ 474.090317][T10565] do_syscall_64+0x115/0x840 [ 474.090337][T10565] ? clear_bhb_loop+0x40/0x90 [ 474.090367][T10565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.090392][T10565] RIP: 0033:0x7f6f0799ce59 [ 474.090412][T10565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.090436][T10565] RSP: 002b:00007f6f0879c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 474.090459][T10565] RAX: ffffffffffffffda RBX: 00007f6f07c16090 RCX: 00007f6f0799ce59 [ 474.090476][T10565] RDX: 0000200000000140 RSI: 0000200000000280 RDI: 0000000000000000 [ 474.090491][T10565] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 474.090506][T10565] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 474.090520][T10565] R13: 00007f6f07c16128 R14: 00007f6f07c16090 R15: 00007ffda78dc618 [ 474.090550][T10565] [ 474.367783][T10568] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1169'. [ 475.513233][T10583] FAULT_INJECTION: forcing a failure. [ 475.513233][T10583] name failslab, interval 1, probability 0, space 0, times 0 [ 475.573691][T10583] CPU: 0 UID: 0 PID: 10583 Comm: syz.1.1172 Tainted: G U L syzkaller #0 PREEMPT(full) [ 475.573734][T10583] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 475.573743][T10583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 475.573757][T10583] Call Trace: [ 475.573765][T10583] [ 475.573775][T10583] dump_stack_lvl+0x100/0x190 [ 475.573810][T10583] should_fail_ex.cold+0x5/0xa [ 475.573842][T10583] should_failslab+0xc2/0x120 [ 475.573877][T10583] kmem_cache_alloc_noprof+0x91/0x6a0 [ 475.573906][T10583] ? kasan_save_stack+0x30/0x50 [ 475.573936][T10583] ? kasan_save_track+0x14/0x30 [ 475.573965][T10583] ? __kasan_kmalloc+0xaa/0xb0 [ 475.573994][T10583] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 475.574038][T10583] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 475.574078][T10583] idr_get_free+0x52e/0xa00 [ 475.574125][T10583] idr_alloc_u32+0x1ac/0x320 [ 475.574151][T10583] ? __pfx_idr_alloc_u32+0x10/0x10 [ 475.574185][T10583] idr_alloc_cyclic+0x10b/0x230 [ 475.574211][T10583] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 475.574235][T10583] ? lockdep_init_map_type+0x5c/0x250 [ 475.574261][T10583] ? __rwlock_init+0x37/0x150 [ 475.574290][T10583] afs_lookup_cell+0xe48/0x1b10 [ 475.574395][T10583] ? __pfx_afs_lookup_cell+0x10/0x10 [ 475.574426][T10583] ? __pfx___might_resched+0x10/0x10 [ 475.574479][T10583] afs_cell_init+0x17d/0x380 [ 475.574520][T10583] afs_proc_rootcell_write+0x1c9/0x280 [ 475.574569][T10583] proc_simple_write+0x10e/0x1a0 [ 475.574600][T10583] ? __pfx_proc_simple_write+0x10/0x10 [ 475.574629][T10583] proc_reg_write+0x240/0x330 [ 475.574655][T10583] vfs_write+0x2aa/0x1050 [ 475.574679][T10583] ? __pfx_proc_reg_write+0x10/0x10 [ 475.574707][T10583] ? __pfx_vfs_write+0x10/0x10 [ 475.574729][T10583] ? __fget_files+0x215/0x3d0 [ 475.574758][T10583] ? __fget_files+0x21f/0x3d0 [ 475.574789][T10583] ksys_write+0x12a/0x250 [ 475.574811][T10583] ? __pfx_ksys_write+0x10/0x10 [ 475.574843][T10583] do_syscall_64+0x115/0x840 [ 475.574865][T10583] ? clear_bhb_loop+0x40/0x90 [ 475.574894][T10583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.574920][T10583] RIP: 0033:0x7f6f0799ce59 [ 475.574940][T10583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 475.574963][T10583] RSP: 002b:00007f6f087bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 475.574987][T10583] RAX: ffffffffffffffda RBX: 00007f6f07c15fa0 RCX: 00007f6f0799ce59 [ 475.575003][T10583] RDX: 0000000000000007 RSI: 00002000000000c0 RDI: 0000000000000003 [ 475.575018][T10583] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 475.575033][T10583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 475.575047][T10583] R13: 00007f6f07c16038 R14: 00007f6f07c15fa0 R15: 00007ffda78dc618 [ 475.575078][T10583] [ 476.730391][T10581] bond0: no command found in slaves file - use +ifname or -ifname [ 478.952282][T10618] Process accounting resumed [ 479.658054][T10632] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input11 [ 481.330676][ T5627] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 481.338610][ T5627] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 482.902657][T10646] Process accounting resumed [ 483.696357][T10699] random: crng reseeded on system resumption [ 484.664306][T10711] FAULT_INJECTION: forcing a failure. [ 484.664306][T10711] name failslab, interval 1, probability 0, space 0, times 0 [ 484.757957][T10711] CPU: 0 UID: 0 PID: 10711 Comm: syz.3.1196 Tainted: G U L syzkaller #0 PREEMPT(full) [ 484.757998][T10711] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 484.758007][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 484.758022][T10711] Call Trace: [ 484.758030][T10711] [ 484.758039][T10711] dump_stack_lvl+0x100/0x190 [ 484.758075][T10711] should_fail_ex.cold+0x5/0xa [ 484.758106][T10711] should_failslab+0xc2/0x120 [ 484.758141][T10711] __kmalloc_cache_noprof+0x91/0x6c0 [ 484.758168][T10711] ? shrinker_alloc+0xf5/0xc90 [ 484.758201][T10711] shrinker_alloc+0xf5/0xc90 [ 484.758232][T10711] ? mark_held_locks+0x40/0x70 [ 484.758271][T10711] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 484.758311][T10711] ? rcu_is_watching+0x12/0xc0 [ 484.758342][T10711] ? __pfx_shrinker_alloc+0x10/0x10 [ 484.758374][T10711] ? lockdep_init_map_type+0x5c/0x250 [ 484.758398][T10711] ? lockdep_init_map_type+0x5c/0x250 [ 484.758423][T10711] ? __raw_spin_lock_init+0x3a/0x110 [ 484.758450][T10711] ? __init_rwsem+0x10e/0x180 [ 484.758479][T10711] sget_fc+0x972/0x1d80 [ 484.758519][T10711] ? __pfx_test_keyed_super+0x10/0x10 [ 484.758554][T10711] ? __pfx_set_anon_super_fc+0x10/0x10 [ 484.758589][T10711] ? __pfx_sget_fc+0x10/0x10 [ 484.758624][T10711] ? kasan_save_track+0x14/0x30 [ 484.758654][T10711] ? __kasan_kmalloc+0xaa/0xb0 [ 484.758687][T10711] ? rcu_is_watching+0x12/0xc0 [ 484.758717][T10711] ? apparmor_capable+0x1d7/0x4d0 [ 484.758746][T10711] ? __pfx_nfsd_fill_super+0x10/0x10 [ 484.758783][T10711] get_tree_keyed+0x59/0x1d0 [ 484.758822][T10711] vfs_get_tree+0x92/0x320 [ 484.758864][T10711] path_mount+0x7d0/0x23d0 [ 484.758899][T10711] ? __pfx_path_mount+0x10/0x10 [ 484.758926][T10711] ? lockdep_hardirqs_on+0x78/0x100 [ 484.758967][T10711] ? putname+0xb1/0x110 [ 484.758992][T10711] ? kmem_cache_free+0x127/0x6b0 [ 484.759027][T10711] ? __x64_sys_mount+0x293/0x310 [ 484.759054][T10711] __x64_sys_mount+0x293/0x310 [ 484.759085][T10711] ? __pfx___x64_sys_mount+0x10/0x10 [ 484.759122][T10711] do_syscall_64+0x115/0x840 [ 484.759143][T10711] ? clear_bhb_loop+0x40/0x90 [ 484.759173][T10711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.759198][T10711] RIP: 0033:0x7f75ac59ce59 [ 484.759222][T10711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.759246][T10711] RSP: 002b:00007f75ad383028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 484.759269][T10711] RAX: ffffffffffffffda RBX: 00007f75ac816090 RCX: 00007f75ac59ce59 [ 484.759285][T10711] RDX: 0000200000000140 RSI: 0000200000000280 RDI: 0000000000000000 [ 484.759300][T10711] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 484.759315][T10711] R10: 000000000000000f R11: 0000000000000246 R12: 0000000000000000 [ 484.759329][T10711] R13: 00007f75ac816128 R14: 00007f75ac816090 R15: 00007ffd68ce87f8 [ 484.759360][T10711] [ 485.491223][T10715] ERROR: Out of memory at tomoyo_memory_ok. [ 486.980176][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1202'. [ 487.821746][T10764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1211'. [ 487.902360][T10764] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1211: iget: checksum invalid [ 487.966312][T10764] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 488.004801][T10764] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1211: iget: checksum invalid [ 488.057500][T10764] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 488.090533][T10764] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1211: iget: checksum invalid [ 488.134268][T10764] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 488.174802][T10764] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.1211: iget: checksum invalid [ 488.223001][T10764] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 488.260770][T10764] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 488.306132][T10764] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 488.646150][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1208'. [ 492.694847][T10824] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1223'. [ 493.646869][T10853] : Can't lookup blockdev [ 496.322843][T10889] sg_write: data in/out 124/2 bytes for SCSI command 0x61-- guessing data in; [ 496.322843][T10889] program syz.3.1236 not setting count and/or reply_len properly [ 497.780013][T10909] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1242'. [ 499.401791][T10676] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 499.409396][T10676] Bluetooth: hci2: Invalid handle: 0x3a4a > 0x0eff [ 501.896905][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.903280][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.203418][T10962] Process accounting paused [ 502.398414][T10976] kfence: disabled [ 502.462371][T10976] __vm_enough_memory: pid: 10976, comm: syz.3.1256, bytes: 4398046457856 not enough memory for the allocation [ 502.613398][T10978] kfence: re-enabled [ 502.630760][T10941] Process accounting resumed [ 505.346800][T10993] ERROR: Out of memory at tomoyo_memory_ok. [ 505.575661][ T4942] Bluetooth: hci0: command 0x0c1a tx timeout [ 505.588077][T10991] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 506.333630][T10991] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 506.403530][T10991] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 506.462587][T10991] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 507.735970][ T4942] Bluetooth: hci1: command 0x0c1a tx timeout [ 508.455561][ T4942] Bluetooth: hci2: command 0x0c1a tx timeout [ 508.536232][ T4942] Bluetooth: hci3: command 0x0c1a tx timeout [ 509.289841][T11032] FAULT_INJECTION: forcing a failure. [ 509.289841][T11032] name failslab, interval 1, probability 0, space 0, times 0 [ 509.363855][T11032] CPU: 0 UID: 0 PID: 11032 Comm: syz.3.1269 Tainted: G U L syzkaller #0 PREEMPT(full) [ 509.363897][T11032] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 509.363906][T11032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 509.363921][T11032] Call Trace: [ 509.363929][T11032] [ 509.363937][T11032] dump_stack_lvl+0x100/0x190 [ 509.363973][T11032] should_fail_ex.cold+0x5/0xa [ 509.364006][T11032] should_failslab+0xc2/0x120 [ 509.364041][T11032] kmem_cache_alloc_noprof+0x91/0x6a0 [ 509.364072][T11032] ? trace_kmem_cache_alloc+0xdd/0x100 [ 509.364107][T11032] ? security_file_alloc+0x34/0x2c0 [ 509.364145][T11032] security_file_alloc+0x34/0x2c0 [ 509.364177][T11032] init_file+0x95/0x480 [ 509.364215][T11032] alloc_empty_file+0x79/0x1c0 [ 509.364250][T11032] path_openat+0xe7/0x4280 [ 509.364275][T11032] ? __kasan_slab_alloc+0x89/0x90 [ 509.364307][T11032] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 509.364336][T11032] ? do_getname+0x35/0x390 [ 509.364365][T11032] ? do_sys_openat2+0xc7/0x1e0 [ 509.364395][T11032] ? __x64_sys_openat+0x12d/0x210 [ 509.364427][T11032] ? do_syscall_64+0x115/0x840 [ 509.364449][T11032] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.364482][T11032] ? __pfx_path_openat+0x10/0x10 [ 509.364515][T11032] do_file_open+0x20e/0x430 [ 509.364542][T11032] ? __pfx_do_file_open+0x10/0x10 [ 509.364587][T11032] ? alloc_fd+0x471/0x7a0 [ 509.364613][T11032] ? do_getname+0x191/0x390 [ 509.364647][T11032] do_sys_openat2+0x10f/0x1e0 [ 509.364679][T11032] ? __pfx_do_sys_openat2+0x10/0x10 [ 509.364715][T11032] ? __fget_files+0x21f/0x3d0 [ 509.364743][T11032] __x64_sys_openat+0x12d/0x210 [ 509.364776][T11032] ? __pfx___x64_sys_openat+0x10/0x10 [ 509.364821][T11032] do_syscall_64+0x115/0x840 [ 509.364842][T11032] ? clear_bhb_loop+0x40/0x90 [ 509.364871][T11032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.364896][T11032] RIP: 0033:0x7f75ac55d68e [ 509.364916][T11032] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 509.364940][T11032] RSP: 002b:00007f75ad3a3ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 509.364964][T11032] RAX: ffffffffffffffda RBX: 00007f75ad3a46c0 RCX: 00007f75ac55d68e [ 509.364980][T11032] RDX: 0000000000000002 RSI: 00007f75ad3a3f90 RDI: ffffffffffffff9c [ 509.364995][T11032] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 509.365010][T11032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 509.365024][T11032] R13: 00007f75ac816038 R14: 00007f75ac815fa0 R15: 00007ffd68ce87f8 [ 509.365054][T11032] [ 509.895884][T11039] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1269'. [ 511.327049][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1268'. [ 512.454448][T11065] vivid-007: ================= START STATUS ================= [ 512.493456][T11065] vivid-007: Generate PTS: true [ 512.512775][T11065] vivid-007: Generate SCR: true [ 512.528717][T11065] tpg source WxH: 320x240 (Y'CbCr) [ 512.559733][T11065] tpg field: 1 [ 512.582179][T11065] tpg crop: (0,0)/320x240 [ 512.627582][T11065] tpg compose: (0,0)/320x240 [ 512.676077][T11065] tpg colorspace: 8 [ 512.694689][T11065] tpg transfer function: 0/0 [ 512.729532][T11065] tpg Y'CbCr encoding: 0/0 [ 512.755794][T11065] tpg quantization: 0/0 [ 512.781926][T11065] tpg RGB range: 0/2 [ 512.832916][T11065] vivid-007: ================== END STATUS ================== [ 513.563341][ T30] audit: type=1804 audit(1843104534.300:28): pid=11084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1278" name="/newroot/306/file0" dev="tmpfs" ino=1585 res=1 errno=0 [ 516.604797][T11116] FAULT_INJECTION: forcing a failure. [ 516.604797][T11116] name failslab, interval 1, probability 0, space 0, times 0 [ 516.750896][T11116] CPU: 0 UID: 0 PID: 11116 Comm: syz.3.1283 Tainted: G U L syzkaller #0 PREEMPT(full) [ 516.750936][T11116] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 516.750944][T11116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 516.750959][T11116] Call Trace: [ 516.750967][T11116] [ 516.750976][T11116] dump_stack_lvl+0x100/0x190 [ 516.751009][T11116] should_fail_ex.cold+0x5/0xa [ 516.751040][T11116] should_failslab+0xc2/0x120 [ 516.751074][T11116] __kmalloc_cache_noprof+0x91/0x6c0 [ 516.751101][T11116] ? tomoyo_init_log+0x1a0/0x20c0 [ 516.751139][T11116] tomoyo_init_log+0x1a0/0x20c0 [ 516.751171][T11116] ? __pfx_format_decode+0x10/0x10 [ 516.751205][T11116] ? number+0x983/0xc90 [ 516.751233][T11116] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 516.751274][T11116] ? __pfx_tomoyo_init_log+0x10/0x10 [ 516.751315][T11116] tomoyo_write_log2+0x2ed/0xbc0 [ 516.751352][T11116] tomoyo_supervisor+0x15e/0x1340 [ 516.751396][T11116] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 516.751448][T11116] ? tomoyo_realpath_from_path+0x19c/0x690 [ 516.751487][T11116] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 516.751524][T11116] tomoyo_path_number_perm+0x445/0x580 [ 516.751556][T11116] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 516.751594][T11116] ? find_held_lock+0x2b/0x80 [ 516.751623][T11116] ? d_splice_alias_ops+0x626/0x15c0 [ 516.751673][T11116] ? current_check_access_path+0x269/0x430 [ 516.751713][T11116] ? simple_lookup+0xfc/0x1d0 [ 516.751735][T11116] ? lookup_one_qstr_excl+0xaf/0x250 [ 516.751770][T11116] tomoyo_path_mkdir+0x9b/0xe0 [ 516.751808][T11116] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 516.751863][T11116] security_path_mkdir+0x154/0x2e0 [ 516.751901][T11116] filename_mkdirat+0x168/0x5e0 [ 516.751931][T11116] ? __pfx_filename_mkdirat+0x10/0x10 [ 516.751957][T11116] ? strncpy_from_user+0x19d/0x2d0 [ 516.751993][T11116] ? do_getname+0x191/0x390 [ 516.752025][T11116] __x64_sys_mkdir+0x6b/0x90 [ 516.752051][T11116] do_syscall_64+0x115/0x840 [ 516.752072][T11116] ? clear_bhb_loop+0x40/0x90 [ 516.752100][T11116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.752124][T11116] RIP: 0033:0x7f75ac59ce59 [ 516.752143][T11116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.752166][T11116] RSP: 002b:00007f75ad3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 516.752189][T11116] RAX: ffffffffffffffda RBX: 00007f75ac815fa0 RCX: 00007f75ac59ce59 [ 516.752204][T11116] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000200000000100 [ 516.752218][T11116] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 516.752233][T11116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.752247][T11116] R13: 00007f75ac816038 R14: 00007f75ac815fa0 R15: 00007ffd68ce87f8 [ 516.752277][T11116] [ 517.965395][T11129] netlink: 4394 bytes leftover after parsing attributes in process `syz.3.1288'. [ 519.745711][T11140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1292'. [ 522.571083][T11179] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 522.668549][T11178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1298'. [ 526.494247][T11208] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1307'. [ 526.577117][T11208] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 526.638438][T11208] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 526.706661][T11208] bond0 (unregistering): Released all slaves [ 527.802682][T11214] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1308'. [ 532.652755][T11268] ERROR: Out of memory at tomoyo_memory_ok. [ 533.203192][ T30] audit: type=1804 audit(1843104553.940:29): pid=11274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1318" name="file0" dev="tmpfs" ino=1949 res=1 errno=0 [ 533.360020][T11240] kexec: Could not allocate control_code_buffer [ 534.025109][T11241] Process accounting resumed [ 534.544480][T11262] Process accounting paused [ 537.259709][T11309] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1327'. [ 537.365932][T11309] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1327'. [ 538.468512][T11324] usb usb16: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 539.562613][T11339] FAULT_INJECTION: forcing a failure. [ 539.562613][T11339] name failslab, interval 1, probability 0, space 0, times 0 [ 539.620215][T11336] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1328'. [ 539.632059][T11339] CPU: 0 UID: 0 PID: 11339 Comm: syz.1.1335 Tainted: G U L syzkaller #0 PREEMPT(full) [ 539.632099][T11339] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 539.632108][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 539.632123][T11339] Call Trace: [ 539.632131][T11339] [ 539.632140][T11339] dump_stack_lvl+0x100/0x190 [ 539.632179][T11339] should_fail_ex.cold+0x5/0xa [ 539.632219][T11339] should_failslab+0xc2/0x120 [ 539.632257][T11339] __kmalloc_cache_noprof+0x91/0x6c0 [ 539.632284][T11339] ? __lock_acquire+0x49f/0x1a40 [ 539.632308][T11339] ? tty_open+0x139/0xfa0 [ 539.632423][T11339] ? __pfx_tty_open+0x10/0x10 [ 539.632456][T11339] tty_open+0x139/0xfa0 [ 539.632493][T11339] ? __pfx_tty_open+0x10/0x10 [ 539.632524][T11339] ? chrdev_open+0x10b/0x6a0 [ 539.632554][T11339] ? chrdev_open+0x10b/0x6a0 [ 539.632583][T11339] ? __pfx_tty_open+0x10/0x10 [ 539.632615][T11339] chrdev_open+0x234/0x6a0 [ 539.632639][T11339] ? __pfx_apparmor_file_open+0x10/0x10 [ 539.632668][T11339] ? __pfx_chrdev_open+0x10/0x10 [ 539.632694][T11339] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 539.632729][T11339] do_dentry_open+0x6ab/0x14d0 [ 539.632753][T11339] ? __pfx_chrdev_open+0x10/0x10 [ 539.632784][T11339] vfs_open+0x82/0x3f0 [ 539.632818][T11339] path_openat+0x2873/0x4280 [ 539.632858][T11339] ? __pfx_path_openat+0x10/0x10 [ 539.632891][T11339] do_file_open+0x20e/0x430 [ 539.632918][T11339] ? __pfx_do_file_open+0x10/0x10 [ 539.632963][T11339] ? alloc_fd+0x471/0x7a0 [ 539.632990][T11339] ? do_getname+0x191/0x390 [ 539.633022][T11339] do_sys_openat2+0x10f/0x1e0 [ 539.633055][T11339] ? __pfx_do_sys_openat2+0x10/0x10 [ 539.633090][T11339] ? __fget_files+0x21f/0x3d0 [ 539.633118][T11339] __x64_sys_openat+0x12d/0x210 [ 539.633152][T11339] ? __pfx___x64_sys_openat+0x10/0x10 [ 539.633202][T11339] do_syscall_64+0x115/0x840 [ 539.633226][T11339] ? clear_bhb_loop+0x40/0x90 [ 539.633256][T11339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.633281][T11339] RIP: 0033:0x7f6f0799ce59 [ 539.633301][T11339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 539.633325][T11339] RSP: 002b:00007f6f087bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 539.633348][T11339] RAX: ffffffffffffffda RBX: 00007f6f07c15fa0 RCX: 00007f6f0799ce59 [ 539.633364][T11339] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 539.633379][T11339] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 539.633394][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 539.633409][T11339] R13: 00007f6f07c16038 R14: 00007f6f07c15fa0 R15: 00007ffda78dc618 [ 539.633439][T11339] [ 541.459382][T11357] bridge0: port 3(vlan1) entered blocking state [ 541.493468][T11357] bridge0: port 3(vlan1) entered disabled state [ 541.541039][T11357] vlan1: entered allmulticast mode [ 541.612764][T11357] vlan1: entered promiscuous mode [ 541.665094][T11357] bridge0: port 3(vlan1) entered blocking state [ 541.671536][T11357] bridge0: port 3(vlan1) entered forwarding state [ 541.963781][T11369] FAULT_INJECTION: forcing a failure. [ 541.963781][T11369] name failslab, interval 1, probability 0, space 0, times 0 [ 542.190175][T11369] CPU: 0 UID: 0 PID: 11369 Comm: syz.3.1341 Tainted: G U L syzkaller #0 PREEMPT(full) [ 542.190216][T11369] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 542.190225][T11369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 542.190240][T11369] Call Trace: [ 542.190247][T11369] [ 542.190257][T11369] dump_stack_lvl+0x100/0x190 [ 542.190291][T11369] should_fail_ex.cold+0x5/0xa [ 542.190323][T11369] should_failslab+0xc2/0x120 [ 542.190359][T11369] __kmalloc_cache_noprof+0x91/0x6c0 [ 542.190385][T11369] ? tomoyo_write_log2+0x333/0xbc0 [ 542.190426][T11369] tomoyo_write_log2+0x333/0xbc0 [ 542.190464][T11369] tomoyo_supervisor+0x15e/0x1340 [ 542.190509][T11369] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 542.190562][T11369] ? tomoyo_realpath_from_path+0x19c/0x690 [ 542.190602][T11369] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 542.190641][T11369] tomoyo_path_number_perm+0x445/0x580 [ 542.190676][T11369] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 542.190708][T11369] ? __pfx_futex_wait+0x10/0x10 [ 542.190778][T11369] ? find_held_lock+0x2b/0x80 [ 542.190811][T11369] ? __fget_files+0x215/0x3d0 [ 542.190832][T11369] ? hook_file_ioctl_common+0x140/0x440 [ 542.190869][T11369] ? __fget_files+0x21f/0x3d0 [ 542.190897][T11369] security_file_ioctl+0xd3/0x230 [ 542.190934][T11369] __x64_sys_ioctl+0xb7/0x210 [ 542.190971][T11369] do_syscall_64+0x115/0x840 [ 542.190993][T11369] ? clear_bhb_loop+0x40/0x90 [ 542.191022][T11369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.191053][T11369] RIP: 0033:0x7f75ac59ce59 [ 542.191074][T11369] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.191098][T11369] RSP: 002b:00007f75aa7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 542.191121][T11369] RAX: ffffffffffffffda RBX: 00007f75ac816180 RCX: 00007f75ac59ce59 [ 542.191137][T11369] RDX: 0000000000000000 RSI: 0000000000005452 RDI: 0000000000000006 [ 542.191152][T11369] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 542.191166][T11369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.191180][T11369] R13: 00007f75ac816218 R14: 00007f75ac816180 R15: 00007ffd68ce87f8 [ 542.191211][T11369] [ 544.250006][T11381] FAULT_INJECTION: forcing a failure. [ 544.250006][T11381] name failslab, interval 1, probability 0, space 0, times 0 [ 544.357899][T11381] CPU: 0 UID: 0 PID: 11381 Comm: syz.3.1345 Tainted: G U L syzkaller #0 PREEMPT(full) [ 544.357940][T11381] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 544.357950][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 544.357965][T11381] Call Trace: [ 544.357973][T11381] [ 544.357982][T11381] dump_stack_lvl+0x100/0x190 [ 544.358018][T11381] should_fail_ex.cold+0x5/0xa [ 544.358050][T11381] should_failslab+0xc2/0x120 [ 544.358088][T11381] __kmalloc_cache_noprof+0x91/0x6c0 [ 544.358115][T11381] ? tomoyo_write_log2+0x333/0xbc0 [ 544.358155][T11381] tomoyo_write_log2+0x333/0xbc0 [ 544.358194][T11381] tomoyo_supervisor+0x15e/0x1340 [ 544.358239][T11381] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 544.358292][T11381] ? tomoyo_realpath_from_path+0x19c/0x690 [ 544.358333][T11381] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 544.358379][T11381] tomoyo_path_number_perm+0x445/0x580 [ 544.358411][T11381] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 544.358470][T11381] ? find_held_lock+0x2b/0x80 [ 544.358502][T11381] ? __fget_files+0x215/0x3d0 [ 544.358523][T11381] ? hook_file_ioctl_common+0x140/0x440 [ 544.358560][T11381] ? __fget_files+0x21f/0x3d0 [ 544.358586][T11381] security_file_ioctl+0xd3/0x230 [ 544.358617][T11381] __x64_sys_ioctl+0xb7/0x210 [ 544.358655][T11381] do_syscall_64+0x115/0x840 [ 544.358677][T11381] ? clear_bhb_loop+0x40/0x90 [ 544.358707][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.358736][T11381] RIP: 0033:0x7f75ac59ce59 [ 544.358756][T11381] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 544.358780][T11381] RSP: 002b:00007f75ad3a4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 544.358803][T11381] RAX: ffffffffffffffda RBX: 00007f75ac815fa0 RCX: 00007f75ac59ce59 [ 544.358819][T11381] RDX: 0000200000000100 RSI: 000000008038550a RDI: 0000000000000009 [ 544.358834][T11381] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 544.358850][T11381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.358864][T11381] R13: 00007f75ac816038 R14: 00007f75ac815fa0 R15: 00007ffd68ce87f8 [ 544.358895][T11381] [ 544.359068][T11381] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 545.058628][T11379] FAULT_INJECTION: forcing a failure. [ 545.058628][T11379] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 545.099781][T11379] CPU: 0 UID: 0 PID: 11379 Comm: syz.1.1344 Tainted: G U L syzkaller #0 PREEMPT(full) [ 545.099823][T11379] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 545.099832][T11379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.099847][T11379] Call Trace: [ 545.099854][T11379] [ 545.099863][T11379] dump_stack_lvl+0x100/0x190 [ 545.099899][T11379] should_fail_ex.cold+0x5/0xa [ 545.099931][T11379] _copy_to_user+0x32/0xd0 [ 545.099977][T11379] do_pages_stat+0x559/0x7f0 [ 545.100023][T11379] ? __pfx_do_pages_stat+0x10/0x10 [ 545.100063][T11379] ? find_held_lock+0x2b/0x80 [ 545.100093][T11379] ? futex_wake+0x4ea/0x5e0 [ 545.100147][T11379] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 545.100183][T11379] ? lockdep_hardirqs_on+0x78/0x100 [ 545.100222][T11379] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 545.100262][T11379] kernel_move_pages+0xf11/0x14a0 [ 545.100307][T11379] ? __pfx_do_futex+0x10/0x10 [ 545.100334][T11379] ? _raw_spin_unlock+0x28/0x50 [ 545.100367][T11379] ? __pfx_kernel_move_pages+0x10/0x10 [ 545.100404][T11379] ? __pfx_do_set_mempolicy+0x10/0x10 [ 545.100443][T11379] ? __x64_sys_futex+0x34f/0x4d0 [ 545.100469][T11379] ? __x64_sys_futex+0x358/0x4d0 [ 545.100499][T11379] ? xfd_validate_state+0x129/0x190 [ 545.100534][T11379] __x64_sys_move_pages+0xe0/0x1c0 [ 545.100580][T11379] ? do_syscall_64+0x90/0x840 [ 545.100601][T11379] ? lockdep_hardirqs_on+0x78/0x100 [ 545.100638][T11379] do_syscall_64+0x115/0x840 [ 545.100659][T11379] ? clear_bhb_loop+0x40/0x90 [ 545.100688][T11379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.100713][T11379] RIP: 0033:0x7f6f0799ce59 [ 545.100732][T11379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.100756][T11379] RSP: 002b:00007f6f087bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 545.100779][T11379] RAX: ffffffffffffffda RBX: 00007f6f07c15fa0 RCX: 00007f6f0799ce59 [ 545.100795][T11379] RDX: 0000000000000000 RSI: 0000000000001001 RDI: 0000000000000000 [ 545.100810][T11379] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 545.100824][T11379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.100839][T11379] R13: 00007f6f07c16038 R14: 00007f6f07c15fa0 R15: 00007ffda78dc618 [ 545.100869][T11379] [ 545.801165][T11392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1346'. [ 548.538219][T11425] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 550.624250][T11449] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1357'. [ 552.310108][T11481] ERROR: Out of memory at tomoyo_memory_ok. [ 552.354596][T11472] FAULT_INJECTION: forcing a failure. [ 552.354596][T11472] name failslab, interval 1, probability 0, space 0, times 0 [ 552.432822][T11476] ERROR: Out of memory at tomoyo_memory_ok. [ 552.500471][T11472] CPU: 0 UID: 0 PID: 11472 Comm: syz.1.1363 Tainted: G U L syzkaller #0 PREEMPT(full) [ 552.500512][T11472] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 552.500522][T11472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 552.500537][T11472] Call Trace: [ 552.500544][T11472] [ 552.500553][T11472] dump_stack_lvl+0x100/0x190 [ 552.500592][T11472] should_fail_ex.cold+0x5/0xa [ 552.500625][T11472] should_failslab+0xc2/0x120 [ 552.500661][T11472] __kmalloc_noprof+0xfc/0x820 [ 552.500692][T11472] ? kobject_get_path+0xcf/0x2c0 [ 552.500728][T11472] kobject_get_path+0xcf/0x2c0 [ 552.500784][T11472] kobject_uevent_env+0x287/0x18b0 [ 552.500822][T11472] ? bus_to_subsys+0x114/0x150 [ 552.500851][T11472] device_del+0x605/0x9b0 [ 552.500950][T11472] ? __pfx_device_del+0x10/0x10 [ 552.500979][T11472] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 552.501027][T11472] rfkill_unregister+0xde/0x2c0 [ 552.501120][T11472] nfc_unregister_rfkill+0xd0/0x2b0 [ 552.501168][T11472] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 552.501226][T11472] nci_unregister_device+0x3e/0x330 [ 552.501276][T11472] ? ima_file_free+0xc6/0x340 [ 552.501323][T11472] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 552.501371][T11472] virtual_ncidev_close+0x4b/0xa0 [ 552.501408][T11472] __fput+0x3ff/0xb50 [ 552.501445][T11472] task_work_run+0x150/0x240 [ 552.501484][T11472] ? __pfx_task_work_run+0x10/0x10 [ 552.501529][T11472] exit_to_user_mode_loop+0x1d8/0x6f0 [ 552.501555][T11472] ? rcu_is_watching+0x12/0xc0 [ 552.501587][T11472] do_syscall_64+0x652/0x840 [ 552.501608][T11472] ? clear_bhb_loop+0x40/0x90 [ 552.501637][T11472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.501663][T11472] RIP: 0033:0x7f6f0799ce59 [ 552.501683][T11472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 552.501707][T11472] RSP: 002b:00007f6f087bd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 552.501730][T11472] RAX: 0000000000000000 RBX: 00007f6f07c15fa0 RCX: 00007f6f0799ce59 [ 552.501746][T11472] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 552.501760][T11472] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 552.501775][T11472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.501789][T11472] R13: 00007f6f07c16038 R14: 00007f6f07c15fa0 R15: 00007ffda78dc618 [ 552.501820][T11472] [ 553.614990][T11499] ubi: mtd0 is already attached to ubi31 [ 555.579340][T11524] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1371'. [ 555.638510][T11524] mac80211_hwsim hwsim4 : renamed from wlan0 (while UP) [ 558.209727][T11553] blktrace: Concurrent blktraces are not allowed on nbd8 [ 558.367906][T11553] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1375'. [ 559.407413][T11569] FAULT_INJECTION: forcing a failure. [ 559.407413][T11569] name failslab, interval 1, probability 0, space 0, times 0 [ 559.504856][T11569] CPU: 0 UID: 0 PID: 11569 Comm: syz.3.1377 Tainted: G U L syzkaller #0 PREEMPT(full) [ 559.504905][T11569] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 559.504915][T11569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 559.504928][T11569] Call Trace: [ 559.504936][T11569] [ 559.504944][T11569] dump_stack_lvl+0x100/0x190 [ 559.504978][T11569] should_fail_ex.cold+0x5/0xa [ 559.505009][T11569] should_failslab+0xc2/0x120 [ 559.505043][T11569] __kmalloc_noprof+0xfc/0x820 [ 559.505072][T11569] ? arch_stack_walk+0xa6/0xf0 [ 559.505107][T11569] ? constrain_params_by_rules+0x175/0xd20 [ 559.505214][T11569] constrain_params_by_rules+0x175/0xd20 [ 559.505255][T11569] ? stack_trace_save+0x8e/0xc0 [ 559.505288][T11569] ? __pfx_stack_trace_save+0x10/0x10 [ 559.505322][T11569] ? __kernel_text_address+0xd/0x30 [ 559.505364][T11569] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 559.505402][T11569] ? kasan_save_track+0x14/0x30 [ 559.505431][T11569] ? __kasan_kmalloc+0xaa/0xb0 [ 559.505461][T11569] ? snd_pcm_oss_sync+0x1de/0x840 [ 559.505496][T11569] ? snd_pcm_oss_release+0x238/0x300 [ 559.505531][T11569] ? __fput+0x3ff/0xb50 [ 559.505557][T11569] ? task_work_run+0x150/0x240 [ 559.505601][T11569] ? snd_interval_refine+0x2d0/0x580 [ 559.505651][T11569] snd_pcm_hw_refine+0x82a/0xb40 [ 559.505692][T11569] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 559.505740][T11569] ? kasan_save_track+0x14/0x30 [ 559.505770][T11569] ? __kasan_kmalloc+0xaa/0xb0 [ 559.505803][T11569] snd_pcm_hw_param_first+0x2b0/0x680 [ 559.505846][T11569] snd_pcm_hw_param_near.constprop.0+0x739/0x850 [ 559.505885][T11569] ? lockdep_hardirqs_on+0x78/0x100 [ 559.505930][T11569] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 559.505967][T11569] ? snd_pcm_oss_change_params_locked+0xa30/0x39f0 [ 559.506004][T11569] ? snd_pcm_oss_change_params_locked+0xa6d/0x39f0 [ 559.506042][T11569] ? kfree+0x22b/0x6c0 [ 559.506067][T11569] snd_pcm_oss_change_params_locked+0xae1/0x39f0 [ 559.506117][T11569] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 559.506154][T11569] ? __pfx___mutex_lock+0x10/0x10 [ 559.506176][T11569] ? snd_pcm_oss_sync+0x1a0/0x840 [ 559.506222][T11569] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 559.506268][T11569] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 559.506307][T11569] snd_pcm_oss_sync+0x1de/0x840 [ 559.506348][T11569] snd_pcm_oss_release+0x238/0x300 [ 559.506385][T11569] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 559.506422][T11569] __fput+0x3ff/0xb50 [ 559.506456][T11569] task_work_run+0x150/0x240 [ 559.506492][T11569] ? __pfx_task_work_run+0x10/0x10 [ 559.506535][T11569] exit_to_user_mode_loop+0x1d8/0x6f0 [ 559.506559][T11569] ? rcu_is_watching+0x12/0xc0 [ 559.506591][T11569] do_syscall_64+0x652/0x840 [ 559.506610][T11569] ? clear_bhb_loop+0x40/0x90 [ 559.506639][T11569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.506663][T11569] RIP: 0033:0x7f75ac59ce59 [ 559.506682][T11569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 559.506705][T11569] RSP: 002b:00007f75aa7f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 559.506728][T11569] RAX: 0000000000000000 RBX: 00007f75ac816180 RCX: 00007f75ac59ce59 [ 559.506743][T11569] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 559.506757][T11569] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 559.506771][T11569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.506785][T11569] R13: 00007f75ac816218 R14: 00007f75ac816180 R15: 00007ffd68ce87f8 [ 559.506815][T11569] [ 561.264857][T11562] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1377'. [ 563.336547][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.343020][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.773516][T11611] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 564.759734][T11613] Process accounting paused [ 564.963688][T11607] Process accounting resumed [ 565.201781][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1387'. [ 567.031181][T11648] vhci_hcd vhci_hcd.2: invalid port number 16 [ 567.097185][T11648] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 568.031385][T11667] blktrace: Concurrent blktraces are not allowed on nbd8 [ 568.169129][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1393'. [ 568.506703][T11668] bridge0: port 3(vlan1) entered disabled state [ 568.581981][T11668] vlan1 (unregistering): left allmulticast mode [ 568.617785][T11668] vlan1 (unregistering): left promiscuous mode [ 568.644523][T11668] bridge0: port 3(vlan1) entered disabled state [ 570.442738][T11685] openvswitch: netlink: Key type 103 is out of range max 32 [ 571.213859][T11689] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1399'. [ 574.585939][T11715] zram: Removed device: zram0 [ 575.251051][ T30] audit: type=1800 audit(1843104595.990:30): pid=11755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1408" name="features" dev="configfs" ino=42430 res=0 errno=0 [ 576.175098][ T4942] block nbd0: Receive control failed (result -32) [ 577.196045][ T30] audit: type=1800 audit(1843104597.940:31): pid=11783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1411" name="lu_gp_id" dev="configfs" ino=42569 res=0 errno=0 [ 579.394642][T11815] ubi: mtd0 is already attached to ubi31 [ 581.966904][T11842] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1424'. [ 582.034427][T11842] mac80211_hwsim hwsim6 : renamed from wlan0 (while UP) [ 582.547863][T11850] ERROR: Out of memory at tomoyo_memory_ok. [ 582.987808][T11855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1428'. [ 583.865083][T11862] serio: Serial port pty173 [ 588.711579][T11921] : Can't lookup blockdev [ 588.728974][T11916] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1436'. [ 588.755866][T11921] [U] 0="/ [ 588.797334][T11921] [U] [ 588.805473][T11916] mac80211_hwsim hwsim8 : renamed from wlan0 (while UP) [ 588.833290][T11921] [U] EeQ@ [ 588.989297][T11911] [U]  [ 591.406517][T11948] FAULT_INJECTION: forcing a failure. [ 591.406517][T11948] name failslab, interval 1, probability 0, space 0, times 0 [ 591.468544][T11948] CPU: 0 UID: 0 PID: 11948 Comm: syz.1.1448 Tainted: G U L syzkaller #0 PREEMPT(full) [ 591.468586][T11948] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 591.468595][T11948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.468611][T11948] Call Trace: [ 591.468619][T11948] [ 591.468628][T11948] dump_stack_lvl+0x100/0x190 [ 591.468663][T11948] should_fail_ex.cold+0x5/0xa [ 591.468695][T11948] should_failslab+0xc2/0x120 [ 591.468730][T11948] __kmalloc_noprof+0xfc/0x820 [ 591.468768][T11948] ? trace_kmem_cache_alloc+0xdd/0x100 [ 591.468802][T11948] ? lsm_blob_alloc+0x68/0x90 [ 591.468845][T11948] lsm_blob_alloc+0x68/0x90 [ 591.468882][T11948] security_sk_alloc+0x2d/0x290 [ 591.468909][T11948] sk_prot_alloc+0x1d1/0x2a0 [ 591.469030][T11948] sk_alloc+0x36/0xe80 [ 591.469057][T11948] inet6_create+0x385/0x12b0 [ 591.469135][T11948] ? inet6_create+0x7f/0x12b0 [ 591.469175][T11948] __sock_create+0x339/0x860 [ 591.469223][T11948] udp_sock_create6+0xc7/0x6a0 [ 591.469284][T11948] ? __pfx_udp_sock_create6+0x10/0x10 [ 591.469322][T11948] ? crng_make_state+0x477/0x6c0 [ 591.469378][T11948] ? lockdep_hardirqs_on+0x78/0x100 [ 591.469418][T11948] ? crng_make_state+0x2b0/0x6c0 [ 591.469459][T11948] rxrpc_open_socket+0x206/0x6e0 [ 591.469534][T11948] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 591.469584][T11948] ? rcu_is_watching+0x12/0xc0 [ 591.469619][T11948] rxrpc_lookup_local+0xac7/0x1220 [ 591.469659][T11948] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 591.469697][T11948] ? __local_bh_enable_ip+0x9e/0x120 [ 591.469734][T11948] rxrpc_sendmsg+0x34a/0x680 [ 591.469812][T11948] sock_write_iter+0x53a/0x5b0 [ 591.469848][T11948] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 591.469886][T11948] ? __pfx_sock_write_iter+0x10/0x10 [ 591.469930][T11948] ? bpf_lsm_file_permission+0x9/0x10 [ 591.469953][T11948] ? security_file_permission+0x76/0x210 [ 591.469987][T11948] ? rw_verify_area+0xce/0x6d0 [ 591.470026][T11948] vfs_write+0x6ac/0x1050 [ 591.470049][T11948] ? __pfx_sock_write_iter+0x10/0x10 [ 591.470088][T11948] ? __pfx_vfs_write+0x10/0x10 [ 591.470109][T11948] ? find_held_lock+0x2b/0x80 [ 591.470158][T11948] ksys_write+0x1f8/0x250 [ 591.470181][T11948] ? __pfx_ksys_write+0x10/0x10 [ 591.470212][T11948] do_syscall_64+0x115/0x840 [ 591.470233][T11948] ? clear_bhb_loop+0x40/0x90 [ 591.470263][T11948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.470288][T11948] RIP: 0033:0x7f6f0799ce59 [ 591.470308][T11948] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.470333][T11948] RSP: 002b:00007f6f087bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 591.470356][T11948] RAX: ffffffffffffffda RBX: 00007f6f07c15fa0 RCX: 00007f6f0799ce59 [ 591.470372][T11948] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 591.470387][T11948] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 591.470408][T11948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.470423][T11948] R13: 00007f6f07c16038 R14: 00007f6f07c15fa0 R15: 00007ffda78dc618 [ 591.470454][T11948] [ 592.179366][ T30] audit: type=1800 audit(1843104612.860:32): pid=11948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1448" name="features" dev="configfs" ino=43448 res=0 errno=0 [ 592.660812][ T4942] block nbd1: Receive control failed (result -32) [ 594.638429][ T30] audit: type=1326 audit(1843104615.380:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11976 comm="syz.3.1454" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75ac59ce59 code=0x0 [ 595.307375][T11991] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1456'. [ 595.375268][T11988] Process accounting resumed [ 597.897539][T12020] blktrace: Concurrent blktraces are not allowed on ram10 [ 603.530960][T12064] FAULT_INJECTION: forcing a failure. [ 603.530960][T12064] name failslab, interval 1, probability 0, space 0, times 0 [ 603.690344][T12064] CPU: 0 UID: 0 PID: 12064 Comm: syz.3.1470 Tainted: G U L syzkaller #0 PREEMPT(full) [ 603.690386][T12064] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 603.690397][T12064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 603.690413][T12064] Call Trace: [ 603.690422][T12064] [ 603.690431][T12064] dump_stack_lvl+0x100/0x190 [ 603.690467][T12064] should_fail_ex.cold+0x5/0xa [ 603.690499][T12064] should_failslab+0xc2/0x120 [ 603.690535][T12064] __kmalloc_cache_noprof+0x91/0x6c0 [ 603.690562][T12064] ? tomoyo_init_log+0x1a0/0x20c0 [ 603.690601][T12064] tomoyo_init_log+0x1a0/0x20c0 [ 603.690635][T12064] ? __pfx_format_decode+0x10/0x10 [ 603.690673][T12064] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 603.690719][T12064] ? __pfx_tomoyo_init_log+0x10/0x10 [ 603.690765][T12064] tomoyo_write_log2+0x2ed/0xbc0 [ 603.690803][T12064] tomoyo_supervisor+0x15e/0x1340 [ 603.690848][T12064] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 603.690912][T12064] ? tomoyo_check_path_acl+0x141/0x210 [ 603.690943][T12064] ? tomoyo_check_acl+0x1f7/0x410 [ 603.690972][T12064] tomoyo_path_permission+0x270/0x3b0 [ 603.691004][T12064] tomoyo_check_open_permission+0x34d/0x3c0 [ 603.691036][T12064] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 603.691066][T12064] ? __lock_acquire+0x49f/0x1a40 [ 603.691096][T12064] ? hook_file_open+0x24f/0x8f0 [ 603.691141][T12064] ? lock_acquire+0x1b9/0x370 [ 603.691172][T12064] tomoyo_file_open+0x6b/0x90 [ 603.691195][T12064] security_file_open+0xb5/0x1e0 [ 603.691229][T12064] do_dentry_open+0x588/0x14d0 [ 603.691261][T12064] vfs_open+0x82/0x3f0 [ 603.691295][T12064] path_openat+0x2873/0x4280 [ 603.691331][T12064] ? __pfx_path_openat+0x10/0x10 [ 603.691364][T12064] do_file_open+0x20e/0x430 [ 603.691391][T12064] ? __pfx_do_file_open+0x10/0x10 [ 603.691440][T12064] ? alloc_fd+0x471/0x7a0 [ 603.691488][T12064] ? do_getname+0x191/0x390 [ 603.691521][T12064] do_sys_openat2+0x10f/0x1e0 [ 603.691554][T12064] ? __pfx_do_sys_openat2+0x10/0x10 [ 603.691589][T12064] ? __fget_files+0x21f/0x3d0 [ 603.691617][T12064] __x64_sys_openat+0x12d/0x210 [ 603.691651][T12064] ? __pfx___x64_sys_openat+0x10/0x10 [ 603.691696][T12064] do_syscall_64+0x115/0x840 [ 603.691716][T12064] ? clear_bhb_loop+0x40/0x90 [ 603.691746][T12064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.691771][T12064] RIP: 0033:0x7f75ac59ce59 [ 603.691791][T12064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 603.691815][T12064] RSP: 002b:00007f75aa7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 603.691839][T12064] RAX: ffffffffffffffda RBX: 00007f75ac816180 RCX: 00007f75ac59ce59 [ 603.691855][T12064] RDX: 0000000000129882 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 603.691871][T12064] RBP: 00007f75ac632e6f R08: 0000000000000000 R09: 0000000000000000 [ 603.691886][T12064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 603.691905][T12064] R13: 00007f75ac816218 R14: 00007f75ac816180 R15: 00007ffd68ce87f8 [ 603.691936][T12064] [ 604.841433][T12047] netlink: 346 bytes leftover after parsing attributes in process `syz.0.1465'. [ 606.431574][T12091] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5630] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[12091] [ 608.911293][T12094] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1474'. [ 610.264525][T12120] ERROR: Out of memory at tomoyo_memory_ok. [ 610.412969][T12113] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 614.769446][T12173] FAULT_INJECTION: forcing a failure. [ 614.769446][T12173] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 614.850564][T12173] CPU: 0 UID: 0 PID: 12173 Comm: syz.1.1491 Tainted: G U L syzkaller #0 PREEMPT(full) [ 614.850606][T12173] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 614.850615][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 614.850630][T12173] Call Trace: [ 614.850637][T12173] [ 614.850647][T12173] dump_stack_lvl+0x100/0x190 [ 614.850684][T12173] should_fail_ex.cold+0x5/0xa [ 614.850711][T12173] ? prepare_alloc_pages+0x16d/0x5f0 [ 614.850749][T12173] should_fail_alloc_page+0xeb/0x140 [ 614.850786][T12173] prepare_alloc_pages+0x1f0/0x5f0 [ 614.850826][T12173] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 614.850861][T12173] ? rcu_is_watching+0x12/0xc0 [ 614.850891][T12173] ? trace_mm_page_alloc+0x164/0x1c0 [ 614.850927][T12173] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 614.850958][T12173] ? find_held_lock+0x2b/0x80 [ 614.850989][T12173] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 614.851021][T12173] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 614.851058][T12173] ? lockdep_hardirqs_on+0x78/0x100 [ 614.851096][T12173] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 614.851132][T12173] ? stack_depot_save_flags+0x479/0x9d0 [ 614.851172][T12173] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 614.851205][T12173] ? __kasan_slab_alloc+0x89/0x90 [ 614.851236][T12173] ? kmem_cache_alloc_node_noprof+0x27d/0x6b0 [ 614.851267][T12173] ? alloc_vmap_area+0x182f/0x2bb0 [ 614.851306][T12173] ? __get_vm_area_node+0x1ca/0x330 [ 614.851339][T12173] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 614.851377][T12173] ? __kvmalloc_node_noprof+0x3d3/0x970 [ 614.851406][T12173] ? __do_sys_listmount+0x289/0xee0 [ 614.851443][T12173] ? do_syscall_64+0x115/0x840 [ 614.851463][T12173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.851499][T12173] alloc_pages_bulk_noprof+0x5de/0x13c0 [ 614.851533][T12173] ? policy_nodemask+0xed/0x4f0 [ 614.851571][T12173] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 614.851616][T12173] __kasan_populate_vmalloc+0xf0/0x210 [ 614.851651][T12173] alloc_vmap_area+0x95d/0x2bb0 [ 614.851692][T12173] ? kasan_save_track+0x14/0x30 [ 614.851722][T12173] ? __kasan_kmalloc+0xaa/0xb0 [ 614.851752][T12173] ? __pfx_alloc_vmap_area+0x10/0x10 [ 614.851786][T12173] ? __get_vm_area_node+0x101/0x330 [ 614.851825][T12173] __get_vm_area_node+0x1ca/0x330 [ 614.851865][T12173] __vmalloc_node_range_noprof+0x228/0x1630 [ 614.851904][T12173] ? __do_sys_listmount+0x289/0xee0 [ 614.851944][T12173] ? __pfx___futex_wait+0x10/0x10 [ 614.851977][T12173] ? futex_hash+0x311/0x400 [ 614.852006][T12173] ? __do_sys_listmount+0x289/0xee0 [ 614.852047][T12173] ? alloc_pages_mpol+0x25a/0x540 [ 614.852085][T12173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 614.852129][T12173] ? rcu_is_watching+0x12/0xc0 [ 614.852165][T12173] __kvmalloc_node_noprof+0x3d3/0x970 [ 614.852196][T12173] ? __do_sys_listmount+0x289/0xee0 [ 614.852235][T12173] ? _copy_from_user+0x59/0xd0 [ 614.852270][T12173] ? __do_sys_listmount+0x289/0xee0 [ 614.852318][T12173] __do_sys_listmount+0x289/0xee0 [ 614.852355][T12173] ? __pfx_do_futex+0x10/0x10 [ 614.852384][T12173] ? __pfx_do_sendfile+0x10/0x10 [ 614.852422][T12173] ? __fget_files+0x21f/0x3d0 [ 614.852446][T12173] ? __pfx___do_sys_listmount+0x10/0x10 [ 614.852510][T12173] do_syscall_64+0x115/0x840 [ 614.852532][T12173] ? clear_bhb_loop+0x40/0x90 [ 614.852562][T12173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.852586][T12173] RIP: 0033:0x7f6f0799ce59 [ 614.852607][T12173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.852630][T12173] RSP: 002b:00007f6f0879c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 614.852654][T12173] RAX: ffffffffffffffda RBX: 00007f6f07c16090 RCX: 00007f6f0799ce59 [ 614.852670][T12173] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 614.852685][T12173] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 614.852700][T12173] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 614.852715][T12173] R13: 00007f6f07c16128 R14: 00007f6f07c16090 R15: 00007ffda78dc618 [ 614.852745][T12173] [ 615.677357][T12171] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[12171] [ 615.712729][T12173] syz.1.1491: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 615.758532][T12173] CPU: 0 UID: 0 PID: 12173 Comm: syz.1.1491 Tainted: G U L syzkaller #0 PREEMPT(full) [ 615.758573][T12173] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 615.758583][T12173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.758598][T12173] Call Trace: [ 615.758609][T12173] [ 615.758618][T12173] dump_stack_lvl+0x100/0x190 [ 615.758654][T12173] warn_alloc.cold+0x94/0xa8 [ 615.758682][T12173] ? __pfx_warn_alloc+0x10/0x10 [ 615.758709][T12173] ? lockdep_hardirqs_on+0x78/0x100 [ 615.758752][T12173] ? __get_vm_area_node+0x2cd/0x330 [ 615.758793][T12173] ? __get_vm_area_node+0x208/0x330 [ 615.758834][T12173] __vmalloc_node_range_noprof+0xccd/0x1630 [ 615.758875][T12173] ? __pfx___futex_wait+0x10/0x10 [ 615.758916][T12173] ? __do_sys_listmount+0x289/0xee0 [ 615.758958][T12173] ? alloc_pages_mpol+0x25a/0x540 [ 615.758996][T12173] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 615.759040][T12173] ? rcu_is_watching+0x12/0xc0 [ 615.759076][T12173] __kvmalloc_node_noprof+0x3d3/0x970 [ 615.759108][T12173] ? __do_sys_listmount+0x289/0xee0 [ 615.759147][T12173] ? _copy_from_user+0x59/0xd0 [ 615.759181][T12173] ? __do_sys_listmount+0x289/0xee0 [ 615.759225][T12173] __do_sys_listmount+0x289/0xee0 [ 615.759271][T12173] ? __pfx_do_futex+0x10/0x10 [ 615.759300][T12173] ? __pfx_do_sendfile+0x10/0x10 [ 615.759337][T12173] ? __fget_files+0x21f/0x3d0 [ 615.759361][T12173] ? __pfx___do_sys_listmount+0x10/0x10 [ 615.759419][T12173] do_syscall_64+0x115/0x840 [ 615.759441][T12173] ? clear_bhb_loop+0x40/0x90 [ 615.759471][T12173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.759495][T12173] RIP: 0033:0x7f6f0799ce59 [ 615.759515][T12173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.759539][T12173] RSP: 002b:00007f6f0879c028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 615.759562][T12173] RAX: ffffffffffffffda RBX: 00007f6f07c16090 RCX: 00007f6f0799ce59 [ 615.759578][T12173] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 615.759593][T12173] RBP: 00007f6f07a32e6f R08: 0000000000000000 R09: 0000000000000000 [ 615.759608][T12173] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 615.759622][T12173] R13: 00007f6f07c16128 R14: 00007f6f07c16090 R15: 00007ffda78dc618 [ 615.759652][T12173] [ 615.761595][T12173] Mem-Info: [ 616.354014][T12173] active_anon:31833 inactive_anon:1143 isolated_anon:0 [ 616.354014][T12173] active_file:2215 inactive_file:53857 isolated_file:0 [ 616.354014][T12173] unevictable:777 dirty:610 writeback:0 [ 616.354014][T12173] slab_reclaimable:12592 slab_unreclaimable:103354 [ 616.354014][T12173] mapped:38379 shmem:24141 pagetables:1243 [ 616.354014][T12173] sec_pagetables:0 bounce:0 [ 616.354014][T12173] kernel_misc_reclaimable:0 [ 616.354014][T12173] free:1282279 free_pcp:11963 free_cma:0 [ 616.500513][T12173] Node 0 active_anon:124420kB inactive_anon:4572kB active_file:8860kB inactive_file:215292kB unevictable:1572kB isolated(anon):0kB isolated(file):0kB mapped:106924kB dirty:2436kB writeback:0kB shmem:92376kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:10976kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 616.579453][T12173] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:172kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 616.691373][T12173] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 616.838974][T12173] lowmem_reserve[]: 0 2476 2477 2477 2477 [ 616.869845][T12173] Node 0 DMA32 free:1196328kB boost:0kB min:34052kB low:42564kB high:51076kB reserved_highatomic:0KB free_highatomic:0KB active_anon:105232kB inactive_anon:4572kB active_file:8860kB inactive_file:215292kB unevictable:1572kB writepending:2540kB zspages:0kB present:3129332kB managed:2535508kB mlocked:36kB bounce:0kB free_pcp:51572kB local_pcp:51572kB free_cma:0kB [ 617.025972][T12173] lowmem_reserve[]: 0 0 1 1 1 [ 617.050190][T12173] Node 0 Normal free:8kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1028kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 617.216481][T12173] lowmem_reserve[]: 0 0 0 0 0 [ 617.243243][T12173] Node 1 Normal free:3917160kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:17868kB local_pcp:17868kB free_cma:0kB [ 617.394584][T12173] lowmem_reserve[]: 0 0 0 0 0 [ 617.425938][T12173] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 617.499283][T12173] Node 0 DMA32: 7343*4kB (UME) 3549*8kB (UME) 2602*16kB (UME) 1418*32kB (UME) 635*64kB (UM) 125*128kB (ME) 29*256kB (UM) 2*512kB (M) 2*1024kB (UM) 5*2048kB (UM) 246*4096kB (UM) = 1229764kB [ 617.594474][T12173] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 617.654278][T12173] Node 1 Normal: 9*4kB (UM) 16*8kB (UM) 15*16kB (U) 6*32kB (UM) 7*64kB (UM) 5*128kB (U) 3*256kB (U) 4*512kB (U) 3*1024kB (UM) 1*2048kB (U) 954*4096kB (M) = 3917204kB [ 617.732507][T12173] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 617.780983][T12173] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 617.825815][T12173] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 617.871546][T12173] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 617.920853][T12173] 65347 total pagecache pages [ 617.940872][T12173] 1 pages in swap cache [ 617.954277][T12173] Free swap = 124992kB [ 617.973145][T12173] Total swap = 124996kB [ 617.992133][T12173] 2097051 pages RAM [ 618.010447][T12173] 0 pages HighMem/MovableOnly [ 618.035046][T12173] 431302 pages reserved [ 618.055681][T12173] 0 pages cma reserved [ 622.560639][ T187] ------------[ cut here ]------------ [ 622.566644][ T187] wlan0: Failed check-sdata-in-driver check, flags: 0x0 [ 622.573862][ T187] WARNING: net/mac80211/driver-ops.c:255 at drv_get_tsf+0x33f/0x760, CPU#0: kworker/u8:6/187 [ 622.584370][ T187] Modules linked in: [ 622.589994][ T187] CPU: 0 UID: 0 PID: 187 Comm: kworker/u8:6 Tainted: G U L syzkaller #0 PREEMPT(full) [ 622.601053][ T187] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 622.606306][ T187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 622.616729][ T187] Workqueue: events_unbound cfg80211_wiphy_work [ 622.623969][ T187] RIP: 0010:drv_get_tsf+0x345/0x760 [ 622.629289][ T187] Code: 0a 00 00 4d 85 ed 0f 84 23 03 00 00 e8 d4 00 02 f7 49 81 c5 20 01 00 00 e8 c8 00 02 f7 48 8d 3d 71 49 e6 05 44 89 f2 4c 89 ee <67> 48 0f b9 3a e9 a6 fd ff ff e8 ac 00 02 f7 65 44 8b 25 98 b4 0c [ 622.649085][ T187] RSP: 0018:ffffc90003067b78 EFLAGS: 00010293 [ 622.655217][ T187] RAX: 0000000000000000 RBX: ffff88805b660ec0 RCX: ffffffff8b06db27 [ 622.663499][ T187] RDX: 0000000000000000 RSI: ffff88805b660120 RDI: ffffffff90ed24f0 [ 622.672375][ T187] RBP: ffff88805b470f40 R08: 0000000000000005 R09: 0000000000000000 [ 622.680537][ T187] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805b661988 [ 622.688679][ T187] R13: ffff88805b660120 R14: 0000000000000000 R15: ffff88805b4706d8 [ 622.696845][ T187] FS: 0000000000000000(0000) GS:ffff8881242e7000(0000) knlGS:0000000000000000 [ 622.705867][ T187] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 622.712470][ T187] CR2: 0000001b3491fff8 CR3: 0000000075f50000 CR4: 00000000003526f0 [ 622.720624][ T187] Call Trace: [ 622.723980][ T187] [ 622.726989][ T187] ieee80211_if_fmt_tsf+0x42/0x70 [ 622.732149][ T187] ? __pfx_ieee80211_if_read_sdata_handler+0x10/0x10 [ 622.738986][ T187] wiphy_locked_debugfs_read_work+0xe6/0x1c0 [ 622.745174][ T187] ? trace_wiphy_work_run+0x73/0x220 [ 622.750557][ T187] cfg80211_wiphy_work+0x2b7/0x550 [ 622.755756][ T187] process_one_work+0xa23/0x1940 [ 622.760747][ T187] ? __pfx_process_one_work+0x10/0x10 [ 622.766203][ T187] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 622.772297][ T187] worker_thread+0x5ef/0xe50 [ 622.777072][ T187] ? __pfx_worker_thread+0x10/0x10 [ 622.782216][ T187] ? kthread+0x13a/0x450 [ 622.786556][ T187] ? __pfx_worker_thread+0x10/0x10 [ 622.791812][ T187] kthread+0x370/0x450 [ 622.795958][ T187] ? __pfx_kthread+0x10/0x10 [ 622.800613][ T187] ret_from_fork+0x72b/0xd50 [ 622.805323][ T187] ? __pfx_ret_from_fork+0x10/0x10 [ 622.810475][ T187] ? __switch_to+0x800/0x10f0 [ 622.815202][ T187] ? __switch_to_asm+0x39/0x70 [ 622.820066][ T187] ? __pfx_kthread+0x10/0x10 [ 622.824736][ T187] ret_from_fork_asm+0x1a/0x30 [ 622.829625][ T187] [ 622.832806][ T187] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 622.840109][ T187] CPU: 0 UID: 0 PID: 187 Comm: kworker/u8:6 Tainted: G U L syzkaller #0 PREEMPT(full) [ 622.851074][ T187] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 622.856274][ T187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 622.866344][ T187] Workqueue: events_unbound cfg80211_wiphy_work [ 622.872622][ T187] Call Trace: [ 622.875919][ T187] [ 622.878865][ T187] dump_stack_lvl+0x100/0x190 [ 622.883567][ T187] vpanic+0x552/0x970 [ 622.887564][ T187] ? __pfx_vpanic+0x10/0x10 [ 622.892125][ T187] panic+0xd1/0xe0 [ 622.895870][ T187] ? __pfx_panic+0x10/0x10 [ 622.900397][ T187] ? check_panic_on_warn+0x1f/0x90 [ 622.905541][ T187] check_panic_on_warn.cold+0x19/0x34 [ 622.910937][ T187] ? drv_get_tsf+0x33f/0x760 [ 622.915556][ T187] __warn.cold+0x191/0x318 [ 622.919993][ T187] __report_bug+0x30f/0x440 [ 622.924624][ T187] ? drv_get_tsf+0x33f/0x760 [ 622.929246][ T187] ? __pfx___report_bug+0x10/0x10 [ 622.934333][ T187] ? drv_get_tsf+0x2e7/0x760 [ 622.938986][ T187] report_bug_entry+0xe1/0x290 [ 622.943909][ T187] ? drv_get_tsf+0x345/0x760 [ 622.948561][ T187] handle_bug+0x1cd/0x2a0 [ 622.953185][ T187] exc_invalid_op+0x17/0x50 [ 622.957722][ T187] asm_exc_invalid_op+0x1a/0x20 [ 622.962596][ T187] RIP: 0010:drv_get_tsf+0x345/0x760 [ 622.967820][ T187] Code: 0a 00 00 4d 85 ed 0f 84 23 03 00 00 e8 d4 00 02 f7 49 81 c5 20 01 00 00 e8 c8 00 02 f7 48 8d 3d 71 49 e6 05 44 89 f2 4c 89 ee <67> 48 0f b9 3a e9 a6 fd ff ff e8 ac 00 02 f7 65 44 8b 25 98 b4 0c [ 622.987470][ T187] RSP: 0018:ffffc90003067b78 EFLAGS: 00010293 [ 622.993553][ T187] RAX: 0000000000000000 RBX: ffff88805b660ec0 RCX: ffffffff8b06db27 [ 623.001547][ T187] RDX: 0000000000000000 RSI: ffff88805b660120 RDI: ffffffff90ed24f0 [ 623.009649][ T187] RBP: ffff88805b470f40 R08: 0000000000000005 R09: 0000000000000000 [ 623.017638][ T187] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88805b661988 [ 623.025626][ T187] R13: ffff88805b660120 R14: 0000000000000000 R15: ffff88805b4706d8 [ 623.033620][ T187] ? drv_get_tsf+0x2e7/0x760 [ 623.038246][ T187] ? drv_get_tsf+0x338/0x760 [ 623.042866][ T187] ieee80211_if_fmt_tsf+0x42/0x70 [ 623.048535][ T187] ? __pfx_ieee80211_if_read_sdata_handler+0x10/0x10 [ 623.055635][ T187] wiphy_locked_debugfs_read_work+0xe6/0x1c0 [ 623.061663][ T187] ? trace_wiphy_work_run+0x73/0x220 [ 623.066982][ T187] cfg80211_wiphy_work+0x2b7/0x550 [ 623.072155][ T187] process_one_work+0xa23/0x1940 [ 623.077139][ T187] ? __pfx_process_one_work+0x10/0x10 [ 623.082560][ T187] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 623.088225][ T187] worker_thread+0x5ef/0xe50 [ 623.092856][ T187] ? __pfx_worker_thread+0x10/0x10 [ 623.097998][ T187] ? kthread+0x13a/0x450 [ 623.102274][ T187] ? __pfx_worker_thread+0x10/0x10 [ 623.107416][ T187] kthread+0x370/0x450 [ 623.111515][ T187] ? __pfx_kthread+0x10/0x10 [ 623.116219][ T187] ret_from_fork+0x72b/0xd50 [ 623.120868][ T187] ? __pfx_ret_from_fork+0x10/0x10 [ 623.126008][ T187] ? __switch_to+0x800/0x10f0 [ 623.130702][ T187] ? __switch_to_asm+0x39/0x70 [ 623.135501][ T187] ? __pfx_kthread+0x10/0x10 [ 623.140184][ T187] ret_from_fork_asm+0x1a/0x30 [ 623.145015][ T187] [ 623.148150][ T187] Kernel Offset: disabled [ 623.152495][ T187] Rebooting in 86400 seconds..