last executing test programs: 4.851270708s ago: executing program 0 (id=2147): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0xffffff70, 0x1, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x672e, 0x10df, 0xeb1, r0, 0x3) getsockopt$auto(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) rseq$auto(0x0, 0x8000, 0x0, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r1, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x40e00, 0x0) pread64$auto(r2, 0x0, 0x3, 0x5ef6) msync$auto(0x1ffff000, 0x180000000000101, 0x400000004) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x4c, r4, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0x2d, 0x11, '/P\x13jE\f\xf9r\xf5\xa3\xd2\x84y\xf9*\x9b\"\x1c\xa4l-\x19\xfd\xa4\xf4y\x02\xc2\x96\xfa\x84L\x12\xcd\x83\xf7\x12\xd3\xc4\x1e]'}, @HWSIM_ATTR_PMSR_SUPPORT={0x8, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40800) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8001) 4.128301441s ago: executing program 0 (id=2151): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xa, 0x0) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x80, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x6, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0x9}, 0xffb}, 0x5, 0x311) 4.025942331s ago: executing program 0 (id=2153): r0 = socket(0xa, 0x2, 0x0) r1 = fcntl$auto_F_DUPFD(r0, 0x0, r0) mmap$auto(0xffffffffffffc532, 0x4, 0x6, 0xeb1, r1, 0x3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000240)={0x0, 0x7}, 0x3) shmctl$auto_SHM_UNLOCK(0x2, 0xc, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) unshare$auto(0x8000000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) r5 = prctl$auto_SIGCONT(0x7ff, 0x12, 0x0, 0x2, 0x7) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x1040, r4, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0xfffffffd}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "65eb2a76b44a01d135e1dcee"}, @NL80211_ATTR_HW_TIMESTAMP_ENABLED={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r5}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x1004, 0xe8, "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"}]}, 0x1040}, 0x1, 0x0, 0x0, 0x10}, 0x10) unshare$auto(0x8000400) 3.484876938s ago: executing program 1 (id=2155): rseq$auto(0x0, 0x584, 0x1, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb1\x00', 0x501000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x1a6b75d638828712, 0x0) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) setregid$auto(0xee01, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000048) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r1, &(0x7f00000018c0)={&(0x7f0000001880), 0x1}, 0x9) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x800048}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}}) 3.442961147s ago: executing program 1 (id=2157): r0 = bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000000)=@raw_tracepoint={0x5717, 0xffffffffffffffff, 0x0, 0x8}, 0x1) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1200}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4000080) (async) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000280), r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000001cc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001c80)={&(0x7f0000000300)={0x1964, r3, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x80}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}, @NL802154_ATTR_SUPPORTED_COMMANDS={0x2cf, 0x19, 0x0, 0x1, [@generic="b3e220c57ceb4cb45a8a28135f19dd6fb82cd201a9f72ea350107895033762f4b88700f34fafbaa354e6bf28039b72", @nested={0x1cb, 0x13, 0x0, 0x1, [@generic="ef82336a875984b35861dfffa2c4c3a864664d53e8eb969e15192820f7e9cbfa80bb49b4c46a448a98efe6c392c57587eaf2f9a284e94b86447b2e9e3189b080788d14324d30e6e1fd7b78a91caa8b1bfb4c5786b29649ef7ec744fa1cbc85c1d8e084f8990e84c762b439", @nested={0x4, 0x12c}, @generic="116c823c5828fa2659f99ee086bd1446acb3bdbd12fe917ca25ae60694205927cbcd5ec562d07f20d839b1b3d15451cd50fea2ef8d33b8622d0546c9f99600651019f806fc", @generic="0a06f8f2b4036df359d1e3a761f9a83b7e1b684b7c2b4446fed7042b27a167c8d09f4f8f01db2d4e17398473dbc3a65364e88342925184f97c7773f8b5a6e9a4", @nested={0x4, 0xa3}, @generic="b3136d79d2789d5028c30fcd6318e8698548d70b5c8b9a6282ca12cbdbc7d7f5dbc5926f34beaa07d519f63ddb7d3a242ac2da90b1fea1e1d24a337e05d563a5c870a92d626de92e5fcbf39a667f22a18be2d0a451dae2de84917d3b7fcab8284215c0d012f4c541691fe862268970472770748333e86f34c87cfd23a01cd3c221b7410af882f6b81a9ffbd14592bc1ad0ebbb1e75af87139228dedb94990fc4b739b7c9fb36ee2a87e15ae890129af27dd1fb41b1d740587ee5a7e364d82c0fb834e955d4c8e6ec083f997ee02cb3"]}, @generic="3ca7d49528b6753da2d496ca510acccbed47294b2fbca2311d789c0f588df8e8e360ec4c177a1115059892bc8399b52a90d955920c1f2833a5ec0f50aecd9c2db49863cc1410c427ed40fcc8", @generic="c4885e9c0c79f9b61cec3f6df913278627bbbf9e5685d39a91c13d6228c5343e52ea28e192cf3c53c82abdce944ba413b4bbf29d86c1abf33d2b42cb06f12f248c3c7181f49e", @generic="6896b3a9fd5e75957c3850d95805acf5ecfef8321a6917071c33f67843ab9c5429cc533aaecb74572969d7b59618a5eef01d", @nested={0xc, 0xdf, 0x0, 0x1, [@typed={0x4, 0xc7}, @nested={0x4, 0x6b}]}]}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x6bb9}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x9ba}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x1641, 0x2b, 0x0, 0x1, [@generic="52d0c72ebcf383d30205a515eb2a437e7fbe9c7a197fbb4421aaac547185933eb2dcf7ecb12893091b027450fc8e9fae1d44ddc28666f10bdb07e5b88c2ce9057831c3a71213e7c95314e263906fc696548a3ac95a90333b90c703134c77100a6a4e102250024b0d8977e44ccc26d10410ed2c4d53c9d2c835fa71e202c4768c520c1a61968e0e0b2594c814defd8cb0279ff34c066a9565095e72783b6c923440840e69d096e1292f1128ba0caa1b16a9fe0540acc1b172b8cf95c4e4db2ee24157c9a2a9317f241191a9b9e6c1941cb3e97d090f94eda3b07861e55c69d1a4274b24d5769e41cb7b4354cf5961a0d1c217", @typed={0x8, 0xb6, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x54, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x1c, 0xfb, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x3c}}, @nested={0x4, 0x133}]}, @generic="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", @nested={0x244, 0xc, 0x0, 0x1, [@generic="f610474a678468fcb38a957210b83f762a2a5c1091d7dfc9506c607e78934980dcd2508b97e2ab4445c32b34c6dd3158924d2944b82752d173a6bf6234768d61d542b9a28c97996ef9759257d0d83d6b138b2affd5a180c6a2a04a7c1fefaf9c02cf62ac675f1602c644972f0c1591a1f86ac745e654cc6e3c73a7aa8b47d5e23b063f56a3082138792715480bef875e5b737ff4c25244c7aa71d92f017893904c9fddfa09f413785d314a245d22290384c495b5ab4c3277d88aa55979eabf8d6ccdf33e7518eafd6d54d19b", @typed={0x8, 0xb5, 0x0, 0x0, @u32=0x2}, @nested={0x4, 0x83}, @generic="fd507e17c722f9d56ed8c5a722fa80ec4869c0746b9812e52b77e3b640c7d1f0060e5e712df8031a111ce6dc4e2af0e2770f92272312cb5573ec36732002d422cbf7c28476dd458a35d8a95e48ed6d94ea93cb4101091dbd0be3d4dfa48b76e1e98228c8eada178d22bd67d15265220125b6cc383e6483b02f323a9f168459498ae72ef0c378ef557dd09978bb0659e555fb3fe45cac1b594c2426a7a6d9d1835d2d91b46c74", @generic="5357db0d185694350652f2d802f204c6f69bd4e0b7385e777b067579c7c6cd4e543532cd05b666d776d79c4f81706b8db75fdd9f8ed716b7a52a25e28ce360b30e701bff0a9ecee63d2a743d901eeafd3bcb74aba78defbdb09285579f882699e41c0b0765f7ae330320457d247e4dc33e24fdea1d9a2f2d1bdd81d87e5ca14cfc808293a34b43af978f86a1e63382e2cd238d11fe24baba4ccbec3e30a6e34c4b542197749e28ea192704ba4eb49b8c8649ff786376b09cccd2eafa9273b150a210"]}, @nested={0xd7, 0xe5, 0x0, 0x1, [@generic="266485ddfa9412def5426268c09441061203f083e4d7c21e31aecc95c97aed607bddbd7f318dac332d9777aad55f117376f71a4c9833b8d3baf389af2e36f05aedc6d482aaae650e44bd06632cf2da687762778002b57e662aa377482a7235ad6a37f9119ce673ed087995ba49b652e283cd19123582a1fe7a0c60e8cc3904bc30a994271fe6dad6c488cfb11012ad5080931e1c81bdf0354423d2f67c832f8ef7946838af1c", @generic="24c941b934f80f719cd575c3f3a818da6aeda6719a1765e77ef0e774e7899f45328ecdc4c4c885e2b0bcb95344"]}, @generic="40814ecaca091e3b1b9b796931ee26b3232274522e6bf9f94fbf1a5d413d830d789f283458517abebe7bf0d9b4e7edc316337edb82748e75bf72a3a40519542ebe348078793306c4a5afcf84a2a78b1220fe5297bec4ca2b131b2177752ea09468e143e6521a82912e81b6e19ca5cda03c50f4572b402bf684d0643146822289135c2414088ee6d0ca8c9cac57ed1b669ea842ce26263d52f7f2e1b2d16525b01395da798a2aa7eb9693af33b3e781f44d8f8c5b973dc1ebbc54ed2cc89c8bc1b6d7094925604a577bf838f7aabdea98c4cbd865c0c49a1f9f8793e3f27da63aad47ec57ed102bad8b7a98d33dbcf7d00725a98880e6888e", @generic="b31383c3adb8c20094f98d584aa811f46ebbbb4be31eda656bd6d26e15e94e9f9aaeae13", @generic="61994f198994287cdaf7de1abcdfaec59ba9b7ecf5c6026e13805f55cd2145f800a2699473b32f7abe6f914349fa110b80d59911a7a5ed90c9f6885df640adac859b96372741dbb0e8f3626fc01446b88354993fe8f873aac470d65ca0ef0232f61abbb01d268b96ae5a73a9ebe31e55623718f811cba88caacd5b2383e5e08b08beace3a56fe0a3260e4a480ffb1025095071a477401f4f6669263d97af2b3de979216cc06b99216231eacf00b7b3903f80ac9ce14d0cf95f639a2206150bf978439cb9d6360512749c5c8737eff0002a6f250723612f2d7913df9ea5c30a0be1d931150da775"]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xe}]}, 0x1964}}, 0x0) (async) r5 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000001d00)='/proc/self/loginuid\x00', 0x14000, 0x0) r6 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000001d40)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x40000, 0x0) ioctl$auto_FITRIM4(r6, 0xc0185879, &(0x7f0000001d80)={0x2, 0x1, 0x7}) (async) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r1, &(0x7f0000002040)={&(0x7f0000001dc0), 0xc, &(0x7f0000002000)={&(0x7f0000001e00)={0x1f8, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x100000000}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x85, 0xe8, "0d798e4a25dd982f3ab474c7d8a9189ecddc6a1fbcb67b77114d75e735a3e43322c782770fb98a021b9b3deadd77dc530b5b6bf336a5c2d630030ef4ded4001f9414ba4d63443cfe53a9b30c591313d8a5480e926dabdaa8a6b650b688a4be4ec89e69da0ccd29e7c4450182384b84cb79b49accf3baf4de602cfb6192f2539667"}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_BEACON_TAIL={0x14b, 0xf, "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"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x20000000}, 0x20048090) (async) io_uring_register$auto_IORING_REGISTER_FILE_ALLOC_RANGE(r6, 0x19, &(0x7f0000002080)="735dddab2b899050b8061c3ff229d2404b9c05888a23e197d2f2b7ca732d05769d5ac8f560077abab734493e4b8ae3531f39d40511403f5348bc848a054f1ed6483020bae1769e27628837b3931d3c4db998fc600dd3ff9ecb7f6606621470c89aebb40b1d159fcd8e2b480815365279ddfdd7d98e49d2ebe90f78809d528e8fec91c8d5ee8cea33f96b885a9c7be987df8fb6cfe93a5f577a486711ddc451cad6491b9a983f0947b323999230203459ee416e9925c4e8f3e29da0507f38aaec2bedc6fa49825f64b857cdd96d18f3d043dfc1b8e0a86c30e50409703d3aae1472c141540dd7f14142a7fcf725f29e463b00", 0x10) (async) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000002180)='/proc/sys/net/ipv6/conf/hsr_slave_1/autoconf\x00', 0x2000, 0x0) fcntl$auto_F_GETFD(r7, 0x1, 0x4) (async, rerun: 32) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000002200), r0) (rerun: 32) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000002540)={&(0x7f00000021c0), 0xc, &(0x7f0000002500)={&(0x7f0000002240)={0x294, r8, 0x0, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x313}, @NL80211_ATTR_MBSSID_ELEMS={0x256, 0x133, 0x0, 0x1, [@nested={0x20b, 0xd9, 0x0, 0x1, [@nested={0x4, 0xfe}, @generic="cb98400b63bce1988b5116fda08a9e408ba2a71d1efce37e5711f3c8ea6c0b8d39a57d3148e40af531f98eb8ba442184dccb3806562f41bf065e296d08171517a24938f685f1065ce5a39a02093fde74794d57a71f9bc6c3c87d06d0178bad2dfb75da38493f91ed75369f3e678a034ce150f1cb14282fd6c2f7c139ad", @generic="ebd15b2db3a17dbbc6c10077e3704e7208fb7c5e895b4b25171c5277cefbacd75a37aa922b2a3a6c7c7974d4182ad2c7821848c0e40054cd19c7fca2a45fc195b3482c41c2164547cf5aca117315de3690a786e1bf06e76ee850bf377b60e3212b0ded9a9d95d2078010c9d97ce7b311494517b69d261f1be93267a65ed5ec0da2ee1d2235c9898ac07c7b58442ffd28d8938da0", @typed={0x8, 0xe5, 0x0, 0x0, @ipv4=@local}, @generic="4f2b3adb9cf818084353be5a605ea8e60c6d7e68ad22d6f792db1cd82b45da55ce0c3f6c658b8178e0af025655560c25be95882eabb0395cb9bb725026e5f0f287b0d240fea323a61b9abfc34ac9c534728b58fe903cba5011e2dc981fda", @nested={0x4, 0x105}, @nested={0x4, 0x9d}, @typed={0x76, 0xc, 0x0, 0x0, @binary="4e2dc2b86dd1b078e7d7c52131f4158a8ef3c34a52e2ec0cfa15a644d0286851303ad122383add52733357f49c3a18b45788efcb51f004115b1936d0ff3e01d022708fef12379371c24a69011eb49fea8ff7d8b7eabd3557630857c1e9e386fa28c970b8a1c9e73311dc8ec9b979ec798797"}, @typed={0xc, 0xdc, 0x0, 0x0, @u64=0x2}]}, @generic="8fcb45469bc70860ebbab6f4abbf496ff52d0bca2295329eb0cd97fd7b70b3ea1337922392bc24838f110df6ab484262b812edbd49e69e2b4b3ad89c445d196e45e2d470dec1"]}, @NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x3}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x9}, @NL80211_ATTR_SSID={0xd, 0x34, "ad149e750a46338609"}]}, 0x294}, 0x1, 0x0, 0x0, 0x8080}, 0x800) r9 = bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002580)=@task_fd_query={0x0, r0, 0x77, 0x2, 0x7, 0x29, r0, 0xfffffffffffffe01, 0x7}, 0x401) sendmsg$auto_NL802154_CMD_SET_TX_POWER(r9, &(0x7f0000002700)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000026c0)={&(0x7f0000002680)={0x2c, r3, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x5}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x8}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x28004}, 0x20000881) (async, rerun: 64) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000002740), r1) (async, rerun: 64) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f00000027c0)={{@raw=0xfffffc00, 0x9, 0xc7e5, 0x8, "a80c31098d4212b6f1c7d85a79cbd95272f36ed4198a96c31811396c0916a207a3fb7f299dba2a31fd93b1f1", @inferred=r10}, 0x0, @enumerated=@item_ptr=&(0x7f0000002780)=0x400, "7385731459d142471d39325ae5a13bc56671a68e0dc3c74f7f9e20da4b2a9138daa95552fbe87bb8f3fab317591a170e3eb308a9d46dcc1b55c42f780fe21ec52af1c8ea1f15159a64caa739979ddc20bac1f5232fe6b9b02343b4a40d9c655705c6fc0cc599d3860efc18256fd4a649b3ab4c23ceb496257e964e1634367620"}) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002cc0)='/dev/ptyq5\x00', 0x14000, 0x0) r13 = socket(0x2b, 0x80000, 0x74) (async, rerun: 32) ioctl$auto_proc_iter_file_ops_compat_inode(r0, 0x1, &(0x7f0000002d00)="c9a844dcd2daaae2d725408d27a5b1ec920cef6c0f9776fee62680420b5a73f27ff7d3eced4227ca6475566e8f1702f6d3e216a35bce61927dda5fcc37a39b2a16eeda4bb6b8ba05201edf6d7f4a12fb7d5a8c584c8fb54be96efb5c1fdb63628a0027919bc8e2fc904fd76d1b44f75e923d310027807c7f107500fc63ae982f3d504c72f67fde7d9c6768bd845d39d61a82470946") (async, rerun: 32) ioctl$auto(r5, 0x2, 0xffffffffffffffff) fsconfig$auto_EROFS_MOUNT_DAX_NEVER(r12, 0x6, &(0x7f0000002dc0)='SMC_PNETID\x00', &(0x7f0000002e00)="f52bfc25c007720a9a361f541c97c080a89f61cf85a804c83bf068f95dbbee749f96f45abc4ad91394a435d39bf5290368bcc0f4ea0c89779f38d4510822d783cebb3c5eb07959", 0x80) (async) setsockopt$auto_SO_TXREHASH(r11, 0x1, 0x4a, &(0x7f0000002e80)='\x00', 0x8) (async) statmount$auto(&(0x7f0000002ec0)={0x629, @raw=0x8, 0x40, 0x81, 0xfff}, &(0x7f0000002f00)={0x4, 0x1fd0, 0xd, 0x7, 0x101, 0x7, 0xffffff2c, 0x888, 0x8, 0x4, 0x76, 0x101, 0x24, 0x3, 0x5, 0x8, 0x8, 0xffffffff, 0xaac, 0x3, 0xfffffff7, 0x5, 0x6, 0x8, 0x9, 0x4, 0x3, 0xfffff941, 0x5137, 0x0, 0x9, [0x1, 0x8, 0x0, 0x6, 0x2, 0x4, 0xc415, 0x4, 0x8, 0x3, 0x6, 0x2, 0x3, 0x3, 0x3e79, 0x0, 0x878, 0xf, 0xb7b, 0x1, 0x2, 0xf, 0x5, 0xfffffffffffffffd, 0x1, 0x5, 0x9, 0x7, 0x1, 0x2, 0x9, 0x8, 0xb3, 0xc, 0xc85, 0x80, 0x1, 0x4, 0x4, 0x100000001, 0x7b633da8, 0x10000, 0x7], "351fc5b5036b46251db7669d528f9aaea50ed281f2c57c7ffcf342da2b023662e075c80ba341160bc0c0f3493e"}, 0x6, 0xd) (async, rerun: 64) mmap$auto(0x85d3, 0x7, 0x8000, 0x17, r13, 0x8e) (async, rerun: 64) io_setup$auto(0x3, &(0x7f0000003140)=0x6) r14 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000031c0), r0) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r0, &(0x7f0000003340)={&(0x7f0000003180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003300)={&(0x7f0000003200)={0xf4, r14, 0x400, 0x70bd26, 0x25dfdbfb, {}, "dfce11a9332b3668b8b1f0b70e8ac08a3e04ab01783f51a6431faccbd3d2e2aa25594f8e80d200793da5d6d35e0fccda58ec963ce63b605bd17b4777c9fed23e87219776ff721538bc108ecfcda556bc8fcc82aaa1cabba69b8e68322e317312b337a9e6530d106eb07244d8864a9db6d6cde16b85b46f9d05db8c7feb87c3338070df14d15923b107cc48cd8f8fb29ee53df8c5b9adf295eb79665eac49d35e06526c85c8e43aff1a38945d583a3f5bf04ffefb1c527d8e2e7f5ff38ce86d0345a698bb53f7079ab57e0a0e3b299b6c6549172f351420eb7560cf5589d0dfd0"}, 0xf4}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000) 3.288954333s ago: executing program 1 (id=2160): mprotect$auto(0x110c238000, 0x1, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xc642, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x2, 0x1) cachestat$auto(0xffffffffffffffff, &(0x7f00000000c0)={0x401, 0x428a}, 0x0, 0x0) close_range$auto(r0, 0xffffffffffffffff, 0x2) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0x3, 0x80000541b, 0x38) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x1b, r0, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x10, 0x0, 0x0, 0x8) madvise$auto(0x110c230000, 0x8031ca, 0x9) 3.215196945s ago: executing program 3 (id=2161): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) mmap$auto(0x0, 0x3965, 0x1000000000000006, 0xf8, 0xfffffffffffffffa, 0x1000) close_range$auto(0x2, 0x8, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x6, 0x0, 0x0, 0x0) write$auto_evdev_fops_evdev(r1, &(0x7f0000000000)="0793fbaa2737ff95ca2e06bd7b8fc2912c5c2290b93db95d034646936ca7", 0x1e) socket(0x10, 0x2, 0xc) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/force_tx_status\x00', 0x82, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001140)='/proc/sys/net/ipv6/conf/wg1/drop_unicast_in_l2_multicast\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x84) r3 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x80000001}}) io_uring_enter$auto(r3, 0x9, 0x820e, 0x8b, 0x0, 0x18) process_madvise$auto_MADV_DONTFORK(r3, &(0x7f0000000180)={&(0x7f0000000300)="1090a084b13846bb97e54b223eb04bdc224007a0d92bd578ee9f18bfef74ed969f33b5529efa7fb3cad5ba276c1e773ee9a7f3ecb414bfb79abd9f45df4e266a563fddddb20afda02c375052f90bcb96dcbdb3f688732f4bae565b8d84b2c0592f65f5b8ff6ef5cd97b6455ad1f1e2a9c0bbe75134b880b011be1683453b9b9a19cfe03b5c33cd5d60b2e6111585738732309cfd0842cf51d169ceb8b6e5ad706c7458e8d7ed7497d568787dbac4a4f6a7a80c"}, 0x8, 0xa, 0x9) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x2}, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000200)='}[,&*}/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000080)={0x220000, 0x0, 0x23}, 0x18) ioctl$auto_USB_RAW_IOCTL_INIT(r0, 0x41015500, 0x0) 3.021547633s ago: executing program 1 (id=2162): socket(0x10, 0x2, 0x14) (async) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000001a14af"], 0x14}}, 0x4000000) semtimedop$auto(0x4, 0x0, 0xffff, &(0x7f0000000080)={0xdc, 0x8}) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x35dc80000000) (async) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x35dc80000000) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4, 0xdf, 0x80000000000eb1, 0x3, 0x0) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x12, 0x0, 0x0) (async) getsockopt$auto(r2, 0x84, 0x12, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0x12, 0x401, 0x8000) r3 = socket(0x2c, 0x3, 0x0) bind$auto(r3, &(0x7f0000000080)=@xdp={0x2c, 0xc, 0x0, 0x1c}, 0x6b) (async) bind$auto(r3, &(0x7f0000000080)=@xdp={0x2c, 0xc, 0x0, 0x1c}, 0x6b) setsockopt$auto_SO_BROADCAST(r3, 0x5, 0x6, 0x0, 0x74) (async) setsockopt$auto_SO_BROADCAST(r3, 0x5, 0x6, 0x0, 0x74) socket(0x80000000000000a, 0x2, 0x0) (async) r4 = socket(0x80000000000000a, 0x2, 0x0) sendto$auto(r4, 0x0, 0x402, 0x101, &(0x7f0000000000)=@generic={0x21, "01e983638bffff4993021400"}, 0x17) socket(0x18, 0x3, 0x2) (async) socket(0x18, 0x3, 0x2) sendmmsg$auto(0x3, 0x0, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) epoll_create$auto(0x4) (async) epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) fcntl$auto(0x0, 0x408, 0x100000) (async) fcntl$auto(0x0, 0x408, 0x100000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) (async) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x400, 0x7ff) 2.984955371s ago: executing program 0 (id=2164): ustat$auto(0x9, &(0x7f0000000080)={0xd, 0x1ff, "0128128462aa", "533a98866819"}) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x36, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ustat$auto(0x9, &(0x7f0000000080)={0xd, 0x1ff, "0128128462aa", "533a98866819"}) (async) socket(0xa, 0x2, 0x0) (async) setsockopt$auto(r0, 0x29, 0x36, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) 2.532277182s ago: executing program 2 (id=2166): rseq$auto(0x0, 0x584, 0x1, 0x2) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fb1\x00', 0x501000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x1a6b75d638828712, 0x0) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) setregid$auto(0xee01, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000048) r1 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) readv$auto(r1, &(0x7f00000018c0)={&(0x7f0000001880), 0x1}, 0x9) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x800048}) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0xb0, @raw=0xfffff010}}) 2.288567327s ago: executing program 3 (id=2167): mmap$auto(0x0, 0x6, 0x2, 0x40eb2, 0xffffffffffffffff, 0x308000000000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) r0 = fcntl$auto_F_DUPFD_CLOEXEC(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000002c0), r0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x6}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x40001) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c010000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000000ae082a428e921f3f8219839ecbf783"], 0x11c}, 0x1, 0x0, 0x0, 0x20}, 0x8855) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000400)={0x18, &(0x7f00000003c0)={0x5e, 0xa, 0x9, @raw=0x4}}) r6 = socket(0x1a, 0x1, 0x106) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x80040, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r8) ioctl$auto_KVM_GET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x2, 0x0, [{0x2ff, 0x3, 0x3e}]}) pidfd_send_signal$auto_PIDFD_SIGNAL_PROCESS_GROUP(0xffffffffffffffff, 0x8, &(0x7f0000000580)={@siginfo_0_0={0x8000, 0xb, 0x2, @_sigpoll={0x0, r5}}}, 0x4) bind$auto(r6, &(0x7f0000000040)=@in={0x2, 0x3, @broadcast}, 0x6a) r9 = socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.0/usb1/authorized\x00', 0xe2400, 0x0) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) r10 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000140), r9) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="8c1f0b33", @ANYRES16=r10, @ANYBLOB="080026bd7000ffdbdf252f00000008002f0000080000050029000100000005002b009b00000005001a0005000000140030000c9648311751fa8edba17d6ebe164b6505002500020000000500110008000000050027000200000005002a000300000014000100766574683000"/118], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x400401c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'vlan0\x00', 0x0}) sendmsg$auto_IEEE802154_LLSEC_LIST_DEVKEY(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0c9897c5884349fb8e1ae4ca94e5a6269d646f0a4f286b80b352efaaed05a892b272dba28425f0ab46c275cb9f852d4bb8f5d5130c704060a761884595cf", @ANYRES32=r11, @ANYBLOB="05003400090000000600080008000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/002/001\x00', 0x4a901, 0x0) 2.198289103s ago: executing program 0 (id=2168): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) r0 = syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) setgid$auto(0x0) newfstatat$auto(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000440)={0x8, 0x61, 0x8, 0x40, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, 0x7fff, 0x7, 0x9, 0x7d, 0x2, 0x7fffffffffffffff, 0x9}, 0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) unshare$auto(0x40000080) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x91}, 0x10) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(r2, 0xc0109207, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x8) mlockall$auto(0x7) mprotect$auto(0x0, 0x806121, 0x6) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) ptrace$auto(0x10, r0, 0x2, 0x1007ff) 2.185958593s ago: executing program 2 (id=2169): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000300)={0x7, 0x1, {0x101, 0x8cf, 0xe, {0x8, 0xfffd}, {0x7ff, 0xff}, @rumble={0x2, 0x7}}, {0x7, 0x9, 0x8, {0x1, 0x5}, {0x2, 0x3}, @periodic={0xff0f, 0x6, 0x69, 0x3, 0x0, {0x4bb, 0x4, 0x0, 0x800}, 0xac4f, 0x0}}}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)={0x14, r2, 0x1, 0x70bd31, 0x25dfdbfd}, 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000180), 0x301442, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) fanotify_init$auto(0x65, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000380)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) sendmsg$auto_NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)={0x274, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DATA={0x15, 0x7, "f6ff64389b62872b26f97bc80d052696ab"}, @NL80211_ATTR_MESH_ID={0x22, 0x18, "3eed9b1465d94ee937d70efbcdd93f95cb35b0d61936ae811703d63b6d71"}, @NL80211_ATTR_SAR_SPEC={0x210, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x12c, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x48}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x401}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x200}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffd}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffff1e6d}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xa}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x452}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}, {0x4}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xbb02}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xb19}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x20}]}]}, @NL80211_SAR_ATTR_SPECS={0xe0, 0x2, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x497819ce}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xc59b}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x18}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xc6000000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x20000}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7fff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xd}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}]}]}]}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x3}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x274}, 0x1, 0x0, 0x0, 0x24040081}, 0x40094) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\xf4\x00'/21, 0x100000002, 0x100000001) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r4 = prctl$auto(0x42, 0x0, 0x0, 0x1, 0x0) ioctl$auto_BLKROSET(r4, 0x125d, 0x0) mmap$auto(0xfffffffffffffff8, 0x40009, 0x3, 0x9b72, 0xffffffffffffffff, 0xfffffffffffffc01) madvise$auto(0x6, 0x1, 0x7fffffff) 2.05441445s ago: executing program 1 (id=2170): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/virtual/block/zram0/mm_stat\x00', 0x8900, 0x0) (async) mmap$auto(0x0, 0xa8, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x60, 0x2, 0x110000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x0, 0x7f, 0x0, 0x2, 0x0, 0x2}) (async) r0 = socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) (async) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) setsockopt$auto(r0, 0x10000000084, 0x9, 0x0, 0x9c) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @rand_addr=0x64010102}, 0x54) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (async) unshare$auto(0x40000080) (async) setresgid$auto(0x81, 0x800000a0, 0x8) socket(0x2b, 0x1, 0x1) read$auto(r2, 0x0, 0x20) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/module/nfs_layout_flexfiles/parameters/io_maxretrans\x00', 0xa001, 0x0) write$auto(r4, &(0x7f00000002c0)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k>\xc8\x1f\xad\xf6\xf0\xef\xe4s\x95\xf2\x00\x97S\xb9O\xac\xbe\xd6\\J<\x02YK\xd6M\xe6\xe7\xa0\xb8\xc3[\x01\xc5\xe8|\xb0\xb0\x80\xbf\xa5?=i\x88UB\x1d\x8e\xd3\xc2\x949\xb6\xfb\x006\x02\x9c\x83\x14\x13\x99\xc7\xb4)M\xed\tN $\xd4\x90^?J\x92\x9a?\xf8b\x03\xd8\xdd\x84\xdf\x92\xf0\xcd\xd8\xba\xab\x15\x80\x9eo,\xc8\xf2\x82\xd2\x88\xbeL\xa0\x1a\xd3\xd5Of\x95\xee\x13e\xeb}o\x9b\x86_\xf0?\f<\xf3t7\xb6\x0f\x93\xc79@\xd8x\x9e\xef!\x006\b\xdbWB\x84\xdd\xac\xdau\x86g\x8f\x02@O7\x0f\xf8\x8d(\x9c\xf2NyD\x7f3\x14\x9eg\x86%)\xd6\b\xcd\x1f\x03\x00:\xa6\x83\'\xf4\xf2\x9dd\xf4z\x89\xc5D\xc4\x02\\\x81\xcf\x02Ep\xf6`\xde*\x1dV', 0x81) (async) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x58402, 0x0) mount$auto(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) (async) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, 0x0, 0x10) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) 2.01355768s ago: executing program 3 (id=2171): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000041c0)={0x1c, 0x0, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) 1.83064626s ago: executing program 3 (id=2172): bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x1, @prog_cnt=0x4, 0x0, 0x80000000, 0xc, 0x2000000e, 0x5}, 0x7) (async, rerun: 32) r0 = socket(0xa, 0x2, 0x3a) (rerun: 32) setsockopt$auto(r0, 0x29, 0x1b, &(0x7f0000000040)='!\x00', 0x1ff) 1.282740474s ago: executing program 3 (id=2173): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/rose14/statistics/rx_length_errors\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0xa0080, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000fc0), r3) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r3, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000001100)={0x31c, r4, 0x41d, 0x70bd28, 0x25dfdbff, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x28, 0x1, 0x0, 0x1, [@nested={0x18, 0x1a, 0x0, 0x1, [@generic, @typed={0xd, 0x2f, 0x0, 0x0, @binary="eeeabdac6767fd8292"}, @nested={0x4, 0x26}]}, @typed={0xc, 0x3e, 0x0, 0x0, @u64=0xab2}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x16d, 0x1, 0x0, 0x1, [@generic="5b819d2e3eff693a9678cb419da58f871687cc365554f44a8f55501516273e17b8117643195217d552d844af8e573b83a482f2c5f55d3413e0064c584df0da96a1c41a5590997f4d232226639b37f3129401a6a41feed7fd7529456dbe7e58026bfd22dc9a0d97179de85f9f21007d4153dd3b166113c8c966ab635755deefaa8d624eec6430596add4317c249b22afa592d647cb8b78027a46353871d4def902fabcd012146ebf0fc3beb7b061b5ebb0ade0afbc7e4409094c9d94c91e40c5a3ecd25484c", @typed={0x3d, 0x39, 0x0, 0x0, @binary="3e50e8f53746711c59a2de76aaca74159d80e0cad22953225490dd3d8bd9412356b66ca56fb046926f0aab27799275c6794490cc836b650638"}, @generic, @nested={0x4, 0x1c}, @generic="e3304c74c435f9f36c3d1617fed8b63d73835472591776d0d6d5b8b3dd0e2468ea6d75dcc7a7aadd32199eef6ee91668a4dc262815659c0308281772fe200747c973e38b223571845432dfe63b3cb4d0dad7e87efca3da87b80d9f99a9c15af2"]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x16f, 0x1, 0x0, 0x1, [@nested={0x84, 0x118, 0x0, 0x1, [@typed={0x8, 0xfb, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0xb6}, @typed={0xc, 0x40, 0x0, 0x0, @u64=0x4e5b}, @generic="0db572f44408272cd2a306dd0f4f27d9cb1a25e50ca26f8391f49ef9b8c8b35e4290bdc4215273925f8344cbb412f61a8b8e7ed2a69bc01186ef75f15b093540bbdb2cd8866a15bc3239fddd1b4e98fb525cf9e636827008ec575079415b5dfd8e9492f2", @nested={0x4, 0xf2}]}, @nested={0xb5, 0x14e, 0x0, 0x1, [@typed={0x8, 0x126, 0x0, 0x0, @uid=0xee01}, @typed={0x8, 0xa2, 0x0, 0x0, @fd=r3}, @typed={0x4, 0x136}, @typed={0x8, 0x9, 0x0, 0x0, @fd=r3}, @typed={0x4, 0xe8}, @generic="4486c4c5f894c2d7a45d4d9c2c71911b9d8deab694b890df0804291512cc3f49c484d0603f23303472aafff7abda06a3f06556117ea12ec5d67d1a2ee00d53574dfc1ceaaa9549b46bc502c63afff562788b3a0f6820", @generic="5b38e3f04f5a903e41e92af6e39638d6e7fb87380795ddf6fc5914ba22c8759717c4893e94b85f1f811e7d286d5a5a957c457ed0342ce04b58a206"]}, @typed={0x8, 0xbf, 0x0, 0x0, @pid}, @generic="bffb563d466f9a86698d52475aa00bb0208ad50b511861", @typed={0x8, 0xdc, 0x0, 0x0, @pid}, @typed={0x8, 0x132, 0x0, 0x0, @u32=0xff}]}]}, 0x31c}, 0x1, 0x0, 0x0, 0x40400c1}, 0x4014) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2, 0x80802, 0x0) r6 = socket(0x2b, 0x1, 0x0) socket(0x11, 0x80003, 0x300) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/apparmor/parameters/audit\x00', 0xb02, 0x0) sendfile$auto(r7, r7, 0x0, 0x3) ioctl$auto(0x3, 0x541b, 0x10000000000402) ioctl$auto_USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, &(0x7f0000000100)=0x1) mmap$auto(0x0, 0x6, 0x3, 0xeb1, r6, 0x8000) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x103102, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r6, &(0x7f0000000080)={{&(0x7f0000000140), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x1000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) recvmmsg$auto(0x3, 0x0, 0x8, 0x4, 0x0) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r5) 1.117741502s ago: executing program 2 (id=2174): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x88) (async) r0 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1ff, r0, @relative_id=0x13, 0xe600}, 0xf) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}]}, 0x58}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x6) setsockopt$auto(r4, 0x104000000000010e, 0xb, 0x0, 0x400) (async) setsockopt$auto(r4, 0x104000000000010e, 0xb, 0x0, 0x400) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x6, r3, 0x0, 0x4}, 0xc) (async) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x6, r3, 0x0, 0x4}, 0xc) 521.871103ms ago: executing program 2 (id=2175): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x1d, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x88042, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) r0 = fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) mremap$auto(0x3, 0x4, 0x4, 0x7, 0x100000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x1000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), r1) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="ffffffef3c6b795fbb755d8520be04cd07f787c5ef1a3278812180f6006c521e7d97b846e9a40829363381642ca99b08f2e9abe9e91689920ff87976fbc5d4738076c7561dd1cf9dc9e9b46c7cb8201c0eac8a9c0966cd3e0e70391f46296a3a426da1440c4a121fd1e2f38e88fa1be6a26c5d696bdbaf3d4737d75280814e048efc59b0a70a14acac074239acf117e5a52ef1bd607894ab6f3b516e7b0b8c9d8e746769944f120446e9f6ea359fe9960e0ba4962151745a3f686c07bc4e34828fb457cbaee782d1752767b84a474067a96472", @ANYRES16=r2, @ANYBLOB="23002bbd7000fedbdf25090000000c00038005000180030000000400028008000100", @ANYRES32=0x0, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4008008}, 0x80) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) ioctl$auto(0xc8, 0x4020940d, 0x5c8d) 273.960182ms ago: executing program 2 (id=2176): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) (async) r0 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/transparent_hugepage/hugepages-16kB/stats/swpout_fallback\x00', 0xc0200, 0x0) (async) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000002640)='/dev/mtd0\x00', 0x8000, 0x0) ioctl$auto_OTPSELECT(r2, 0x80044d0d, &(0x7f00000000c0)=0x2) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000180)=""/231, 0xe7) (async) ioctl$auto_RTC_PARAM_GET(r0, 0x40187013, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/loop6/integrity/read_verify\x00', 0x2262, 0x0) write$auto(r3, &(0x7f0000000080)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\xfc\xb2\x00\x00\x00\x00y\x113!\x05\xa7\xd6M\xce\xd6\'\xdf@\x9f\xf5 \x8b_hw\x8em\xd0\b\xe7~1\xf5\xf8\x93*jH\x85H\x05\xae\xdf\xf0\x15A\xdb$\'\x87', 0x81) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) (async) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) semctl$auto(0x2, 0x5, 0x13, 0x9) (async) ioctl$auto(r5, 0xc038563c, r4) 125.12972ms ago: executing program 1 (id=2177): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x6) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fe00000, 0xf0ee, 0x40020009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00"}, 0x10000, 0x966, 0x3, @raw=0x3, @integer={0x100000000, 0x2}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6bf3362a1183bedbd313642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc100"}) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 32) r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$auto(0x3, 0x8208ae63, 0x38) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) (async) fanotify_init$auto(0x9, 0x3) (async) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x8, 0x101, 0x0, 0x1c, r0, 0x1000000000002) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) io_uring_setup$auto(0x19, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x4b, 0x17f, 0x2}, {0xff, 0x3, 0x52, 0x5, 0x6c6, 0x40, 0x4, 0x8, 0x100000004}}) 120.375013ms ago: executing program 0 (id=2178): mmap$auto(0x0, 0xe981, 0xdf, 0xeb1, 0x401, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = ioctl$auto_TUNSETSNDBUF2(0xffffffffffffffff, 0x400454d4, &(0x7f0000000000)=0x3626) signalfd$auto(r0, 0x0, 0x8) r1 = epoll_create$auto(0x3e) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='('], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) kill$auto(0x0, 0x11) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x5, 0x84) setsockopt$auto(r2, 0x10000000084, 0x6, 0x0, 0x80010) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0xfffffffe, "36a2662b59209f6b017400000086009c791daf044ae6ff08853006000ce28999", @inferred=0xffffffffffffffff}) epoll_ctl$auto(r3, 0x6, r4, &(0x7f00000000c0)={0xfffffff6, 0x2}) unshare$auto(0x40000080) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r5, &(0x7f0000000040)={0x0}, 0x6, 0x0, 0x8000000000003, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r6, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r6, 0x80204d01, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4b3, 0xeb1, 0x401, 0x8000) 50.8312ms ago: executing program 2 (id=2179): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) socket(0x6, 0x3, 0x37) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x4) r0 = socket(0x26, 0x5, 0x8c68) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x101e41, 0x0) ioperm$auto(0xfffffffffffffff7, 0x5, 0x4000005) futex_waitv$auto(0x0, 0x7ff, 0x8, &(0x7f00000000c0)={0x1000000004, 0x10}, 0x4) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/admmidi2\x00', 0x8e100, 0x0) read$auto_snd_rawmidi_f_ops_rawmidi(r5, &(0x7f00000002c0)=""/157, 0x9d) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) close_range$auto(r2, r4, 0x3) sysfs$auto(0x2, 0x7, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r6 = ioctl$auto_TUNATTACHFILTER(r0, 0x401054d5, 0x0) ioctl$auto_virtual_ncidev_fops_virtual_ncidev(r6, 0x6, 0x0) futex_wake$auto(&(0x7f0000000140)="adf3e16812f6e5", 0x8, 0x6, 0x6) ioctl$auto_BLKRRPART(r6, 0x125f, 0x0) r7 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r7, 0x40146f2c, 0x0) unshare$auto(0x40000080) setsockopt$auto(r1, 0xd0, 0x800000e4, 0x0, 0x569) r8 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040), 0x20580, 0x0) mmap$auto(0x0, 0x80000000005, 0x2, 0x9b73, r8, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) 0s ago: executing program 3 (id=2180): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x9, 0x800, 0x8) r0 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/features/oneway_spam_detection\x00', 0x4000, 0x0) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002a40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7020f8dbdf2501fffe0008000200", @ANYBLOB="08000100486652000800"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x200400b0) munmap$auto(0x8000, 0xffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x80003, 0x300) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001200), r1) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/024/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x2, 0x1, 0x84) setrlimit$auto(0x1000000007, 0x0) accept$auto(r3, 0x0, 0x0) ioctl$auto(r2, 0xc0105502, r2) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89\x06s\x1cJ\x99\x8a>c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(r0, r0, 0x4000000000002) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) madvise$auto(0x110c230000, 0x8031ca, 0x9) mprotect$auto(0x0, 0x806121, 0x8) kernel console output (not intermixed with test programs): 395] should_failslab+0xc2/0x120 [ 386.743450][T11395] __kmalloc_cache_noprof+0x7a/0x6f0 [ 386.743476][T11395] ? vkms_plane_duplicate_state+0x87/0x130 [ 386.743504][T11395] vkms_plane_duplicate_state+0x87/0x130 [ 386.743526][T11395] drm_atomic_get_plane_state+0x279/0x760 [ 386.743555][T11395] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 386.743585][T11395] ? trace_contention_end+0x140/0x180 [ 386.743615][T11395] ? __mutex_lock+0x26a/0x1b90 [ 386.743637][T11395] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 386.743667][T11395] ? drm_master_internal_acquire+0x21/0x80 [ 386.743716][T11395] drm_client_modeset_commit_locked+0x14d/0x580 [ 386.743749][T11395] drm_client_modeset_commit+0x4f/0x80 [ 386.743778][T11395] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 386.743811][T11395] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 386.743851][T11395] drm_fbdev_client_restore+0x1b/0x30 [ 386.743874][T11395] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 386.743897][T11395] drm_client_dev_restore+0x205/0x2a0 [ 386.743930][T11395] drm_release+0x2c6/0x360 [ 386.743960][T11395] ? __pfx_drm_release+0x10/0x10 [ 386.743987][T11395] __fput+0x3ff/0xb40 [ 386.744015][T11395] task_work_run+0x150/0x240 [ 386.744043][T11395] ? __pfx_task_work_run+0x10/0x10 [ 386.744077][T11395] exit_to_user_mode_loop+0x100/0x4a0 [ 386.744104][T11395] do_syscall_64+0x668/0xf80 [ 386.744122][T11395] ? clear_bhb_loop+0x40/0x90 [ 386.744145][T11395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.744166][T11395] RIP: 0033:0x7f65e099c799 [ 386.744189][T11395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.744215][T11395] RSP: 002b:00007f65e17eb028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 386.744243][T11395] RAX: 0000000000000000 RBX: 00007f65e0c15fa0 RCX: 00007f65e099c799 [ 386.744260][T11395] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 386.744276][T11395] RBP: 00007f65e0a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 386.744293][T11395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 386.744310][T11395] R13: 00007f65e0c16038 R14: 00007f65e0c15fa0 R15: 00007ffcd01bd1e8 [ 386.744338][T11395] [ 388.781888][T11404] program syz.3.1103 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 388.803552][T11438] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 391.331661][T11479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1114'. [ 391.444846][T11484] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1114'. [ 392.281547][T11493] block nbd8: shutting down sockets [ 392.848772][T11508] netlink: 74 bytes leftover after parsing attributes in process `syz.3.1122'. [ 393.210015][T11515] FAULT_INJECTION: forcing a failure. [ 393.210015][T11515] name failslab, interval 1, probability 0, space 0, times 0 [ 393.277965][T11515] CPU: 1 UID: 0 PID: 11515 Comm: syz.3.1125 Tainted: G U L syzkaller #0 PREEMPT(full) [ 393.278021][T11515] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 393.278033][T11515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 393.278052][T11515] Call Trace: [ 393.278062][T11515] [ 393.278074][T11515] dump_stack_lvl+0x100/0x190 [ 393.278128][T11515] should_fail_ex.cold+0x5/0xa [ 393.278166][T11515] should_failslab+0xc2/0x120 [ 393.278204][T11515] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 393.278251][T11515] ? __kernfs_new_node+0xd2/0x960 [ 393.278298][T11515] ? kstrdup+0xb3/0xe0 [ 393.278333][T11515] __kernfs_new_node+0xd2/0x960 [ 393.278384][T11515] ? __pfx___kernfs_new_node+0x10/0x10 [ 393.278441][T11515] ? find_held_lock+0x2b/0x80 [ 393.278472][T11515] ? kernfs_root+0xee/0x2a0 [ 393.278515][T11515] ? kernfs_root+0xee/0x2a0 [ 393.278580][T11515] kernfs_new_node+0x11b/0x1a0 [ 393.278618][T11515] kernfs_create_dir_ns+0x4c/0x1a0 [ 393.278654][T11515] sysfs_create_dir_ns+0x13a/0x2b0 [ 393.278696][T11515] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 393.278735][T11515] ? find_held_lock+0x2b/0x80 [ 393.278762][T11515] ? kobject_add_internal+0x25f/0x930 [ 393.278799][T11515] ? kobject_add_internal+0x25f/0x930 [ 393.278832][T11515] ? do_raw_spin_unlock+0x145/0x1e0 [ 393.278881][T11515] kobject_add_internal+0x2c8/0x930 [ 393.278923][T11515] kobject_init_and_add+0x121/0x180 [ 393.278964][T11515] ? __pfx_kobject_init_and_add+0x10/0x10 [ 393.278997][T11515] ? ops_init+0x1e2/0x5f0 [ 393.279026][T11515] ? unshare_nsproxy_namespaces+0xc3/0x1f0 [ 393.279059][T11515] ? ksys_unshare+0x473/0xad0 [ 393.279093][T11515] ? __x64_sys_unshare+0x31/0x40 [ 393.279130][T11515] ? do_syscall_64+0x106/0xf80 [ 393.279156][T11515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.279188][T11515] ? dev_uevent_filter+0x3e/0xd0 [ 393.279215][T11515] ? kobject_uevent_env+0x2e7/0x18b0 [ 393.279259][T11515] net_rx_queue_update_kobjects+0x37e/0x760 [ 393.279299][T11515] ? kset_register+0x1bb/0x290 [ 393.279333][T11515] netdev_register_kobject+0x290/0x3d0 [ 393.279374][T11515] register_netdevice+0x12e0/0x2210 [ 393.279415][T11515] ? __pfx_register_netdevice+0x10/0x10 [ 393.279455][T11515] __ip_tunnel_create+0x52b/0x670 [ 393.279486][T11515] ? __pfx___ip_tunnel_create+0x10/0x10 [ 393.279514][T11515] ? net_generic+0xea/0x2a0 [ 393.279563][T11515] ip_tunnel_init_net+0x230/0x780 [ 393.279602][T11515] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 393.279647][T11515] ? __kmalloc_noprof+0x320/0x850 [ 393.279702][T11515] ? __pfx_ipip_init_net+0x10/0x10 [ 393.279737][T11515] ops_init+0x1e2/0x5f0 [ 393.279772][T11515] setup_net+0x118/0x3a0 [ 393.279802][T11515] ? __pfx_setup_net+0x10/0x10 [ 393.279828][T11515] ? lockdep_init_map_type+0x5c/0x250 [ 393.279868][T11515] ? mutex_init_lockep+0x110/0x150 [ 393.279916][T11515] copy_net_ns+0x46f/0x7c0 [ 393.279952][T11515] create_new_namespaces+0x3ea/0xac0 [ 393.279996][T11515] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 393.280034][T11515] ksys_unshare+0x473/0xad0 [ 393.280075][T11515] ? __pfx_ksys_unshare+0x10/0x10 [ 393.280126][T11515] __x64_sys_unshare+0x31/0x40 [ 393.280162][T11515] do_syscall_64+0x106/0xf80 [ 393.280189][T11515] ? clear_bhb_loop+0x40/0x90 [ 393.280222][T11515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.280251][T11515] RIP: 0033:0x7f9c6d19c799 [ 393.280277][T11515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.280305][T11515] RSP: 002b:00007f9c6e111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 393.280344][T11515] RAX: ffffffffffffffda RBX: 00007f9c6d415fa0 RCX: 00007f9c6d19c799 [ 393.280363][T11515] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 393.280381][T11515] RBP: 00007f9c6d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 393.280399][T11515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.280416][T11515] R13: 00007f9c6d416038 R14: 00007f9c6d415fa0 R15: 00007ffefc24c378 [ 393.280457][T11515] [ 393.682970][T11515] kobject: kobject_add_internal failed for rx-0 (error: -12 parent: queues) [ 394.341717][T11510] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1129'. [ 395.958576][T11549] block nbd8: shutting down sockets [ 396.619372][T11560] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 396.932687][ T30] audit: type=1800 audit(4294967405.390:7): pid=11558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1133" name="file0" dev="tmpfs" ino=1493 res=0 errno=0 [ 396.954281][T11547] program syz.2.1120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.297637][T11584] block nbd8: shutting down sockets [ 397.868214][T11591] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1149'. [ 397.930443][T11593] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 397.979516][T11596] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1149'. [ 398.215213][T11604] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 398.768684][T11624] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 400.213749][T11653] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1154'. [ 400.293872][T11662] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1154'. [ 400.666712][T11672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1158'. [ 401.342299][T11699] FAULT_INJECTION: forcing a failure. [ 401.342299][T11699] name failslab, interval 1, probability 0, space 0, times 0 [ 401.401047][T11699] CPU: 1 UID: 0 PID: 11699 Comm: syz.0.1164 Tainted: G U L syzkaller #0 PREEMPT(full) [ 401.401081][T11699] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 401.401089][T11699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 401.401099][T11699] Call Trace: [ 401.401105][T11699] [ 401.401113][T11699] dump_stack_lvl+0x100/0x190 [ 401.401146][T11699] should_fail_ex.cold+0x5/0xa [ 401.401168][T11699] ? snd_pcm_plugin_build+0x64/0x650 [ 401.401194][T11699] should_failslab+0xc2/0x120 [ 401.401215][T11699] __kmalloc_noprof+0xe0/0x850 [ 401.401244][T11699] ? snd_pcm_hw_params+0x262/0x1cb0 [ 401.401275][T11699] snd_pcm_plugin_build+0x64/0x650 [ 401.401304][T11699] snd_pcm_plugin_build_io+0x207/0x5f0 [ 401.401332][T11699] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 401.401361][T11699] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 401.401392][T11699] snd_pcm_oss_change_params_locked+0x2eb3/0x39f0 [ 401.401438][T11699] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 401.401479][T11699] snd_pcm_oss_get_active_substream+0x175/0x1d0 [ 401.401508][T11699] snd_pcm_oss_ioctl+0x1c08/0x3720 [ 401.401534][T11699] ? __fget_files+0x215/0x3d0 [ 401.401551][T11699] ? hook_file_ioctl_common+0x146/0x410 [ 401.401575][T11699] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 401.401603][T11699] ? __fget_files+0x21f/0x3d0 [ 401.401623][T11699] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 401.401649][T11699] __x64_sys_ioctl+0x18e/0x210 [ 401.401679][T11699] do_syscall_64+0x106/0xf80 [ 401.401696][T11699] ? clear_bhb_loop+0x40/0x90 [ 401.401720][T11699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.401739][T11699] RIP: 0033:0x7f65e099c799 [ 401.401760][T11699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.401778][T11699] RSP: 002b:00007f65e17eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 401.401796][T11699] RAX: ffffffffffffffda RBX: 00007f65e0c15fa0 RCX: 00007f65e099c799 [ 401.401809][T11699] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000006 [ 401.401820][T11699] RBP: 00007f65e0a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 401.401831][T11699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 401.401842][T11699] R13: 00007f65e0c16038 R14: 00007f65e0c15fa0 R15: 00007ffcd01bd1e8 [ 401.401865][T11699] [ 402.046912][T11707] vivid-007: ================= START STATUS ================= [ 402.055256][T11707] vivid-007: Generate PTS: true [ 402.061449][T11707] vivid-007: Generate SCR: true [ 402.111154][T11707] tpg source WxH: 320x240 (Y'CbCr) [ 402.117122][T11707] tpg field: 1 [ 402.121577][T11707] tpg crop: (0,0)/320x240 [ 402.133421][T11707] tpg compose: (0,0)/320x240 [ 402.154200][T11707] tpg colorspace: 8 [ 402.166493][T11707] tpg transfer function: 0/0 [ 402.171106][T11707] tpg Y'CbCr encoding: 0/0 [ 402.210256][T11713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1167'. [ 402.270125][T11707] tpg quantization: 0/0 [ 402.295373][T11707] tpg RGB range: 0/2 [ 402.302308][T11707] vivid-007: ================== END STATUS ================== [ 402.416626][T11721] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1167'. [ 402.960321][T11731] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1169'. [ 402.994511][T11731] ipvlan0: entered promiscuous mode [ 403.008792][T11731] ipvlan0: entered allmulticast mode [ 403.015240][T11731] veth0_vlan: entered allmulticast mode [ 404.673857][T11764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1177'. [ 405.039596][T11768] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1177'. [ 405.111493][T11758] vivid-007: ================= START STATUS ================= [ 405.138519][T11758] vivid-007: Generate PTS: true [ 405.144517][T11758] vivid-007: Generate SCR: true [ 405.180111][T11758] tpg source WxH: 320x240 (Y'CbCr) [ 405.215377][T11758] tpg field: 1 [ 405.218814][T11758] tpg crop: (0,0)/320x240 [ 405.223140][T11758] tpg compose: (0,0)/320x240 [ 405.276358][T11758] tpg colorspace: 8 [ 405.280213][T11758] tpg transfer function: 0/0 [ 405.344083][T11758] tpg Y'CbCr encoding: 0/0 [ 405.355173][T11758] tpg quantization: 0/0 [ 405.369721][T11758] tpg RGB range: 0/2 [ 405.408881][T11758] vivid-007: ================== END STATUS ================== [ 406.729076][T11809] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 406.752542][T11811] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 407.296693][T11818] blktrace: Concurrent blktraces are not allowed on sg0 [ 407.532213][T11821] zram: Added device: zram1 [ 408.118588][T11844] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1194'. [ 410.652886][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'. [ 410.733088][T11885] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1203'. [ 410.754766][T11884] blktrace: Concurrent blktraces are not allowed on sg0 [ 411.220024][T11895] FAULT_INJECTION: forcing a failure. [ 411.220024][T11895] name failslab, interval 1, probability 0, space 0, times 0 [ 411.254908][T11895] CPU: 1 UID: 0 PID: 11895 Comm: syz.2.1205 Tainted: G U L syzkaller #0 PREEMPT(full) [ 411.254962][T11895] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 411.254973][T11895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 411.254989][T11895] Call Trace: [ 411.254999][T11895] [ 411.255010][T11895] dump_stack_lvl+0x100/0x190 [ 411.255055][T11895] should_fail_ex.cold+0x5/0xa [ 411.255077][T11895] ? tomoyo_realpath_from_path+0xb6/0x690 [ 411.255105][T11895] should_failslab+0xc2/0x120 [ 411.255125][T11895] __kmalloc_noprof+0xe0/0x850 [ 411.255159][T11895] tomoyo_realpath_from_path+0xb6/0x690 [ 411.255191][T11895] tomoyo_path_number_perm+0x23c/0x580 [ 411.255213][T11895] ? tomoyo_path_number_perm+0x22e/0x580 [ 411.255237][T11895] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 411.255259][T11895] ? futex_wake+0x1ad/0x530 [ 411.255308][T11895] ? find_held_lock+0x2b/0x80 [ 411.255326][T11895] ? __fget_files+0x215/0x3d0 [ 411.255342][T11895] ? hook_file_ioctl_common+0x146/0x410 [ 411.255370][T11895] ? __fget_files+0x21f/0x3d0 [ 411.255392][T11895] security_file_ioctl+0xd3/0x230 [ 411.255416][T11895] __x64_sys_ioctl+0xb7/0x210 [ 411.255446][T11895] do_syscall_64+0x106/0xf80 [ 411.255463][T11895] ? clear_bhb_loop+0x40/0x90 [ 411.255486][T11895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.255514][T11895] RIP: 0033:0x7f81ded9c799 [ 411.255531][T11895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.255547][T11895] RSP: 002b:00007f81dfc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 411.255566][T11895] RAX: ffffffffffffffda RBX: 00007f81df015fa0 RCX: 00007f81ded9c799 [ 411.255577][T11895] RDX: 00002000000000c0 RSI: 0000000040107447 RDI: 0000000000000003 [ 411.255589][T11895] RBP: 00007f81dee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 411.255599][T11895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.255611][T11895] R13: 00007f81df016038 R14: 00007f81df015fa0 R15: 00007fff97d0d6d8 [ 411.255635][T11895] [ 411.633120][T11895] ERROR: Out of memory at tomoyo_realpath_from_path. [ 412.209750][T11915] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1213'. [ 412.636073][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1215'. [ 412.774800][T11931] netlink: 86 bytes leftover after parsing attributes in process `syz.3.1215'. [ 413.344633][T11946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1220'. [ 413.386123][T11946] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1220'. [ 414.678683][T11977] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 414.719231][T11975] netlink: 93 bytes leftover after parsing attributes in process `syz.2.1234'. [ 415.593242][T11991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1229'. [ 415.890018][T11991] netlink: 86 bytes leftover after parsing attributes in process `syz.0.1229'. [ 415.921238][T12002] ksmbd: Unknown IPC event: 14, ignore. [ 416.156505][T12002] netlink: 'syz.1.1230': attribute type 4 has an invalid length. [ 416.245129][T12000] syz.2.1228 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 416.293405][T12002] netlink: 'syz.1.1230': attribute type 4 has an invalid length. [ 416.852111][T12017] FAULT_INJECTION: forcing a failure. [ 416.852111][T12017] name fail_futex, interval 1, probability 0, space 0, times 0 [ 416.865935][T12017] CPU: 0 UID: 0 PID: 12017 Comm: syz.0.1232 Tainted: G U L syzkaller #0 PREEMPT(full) [ 416.865988][T12017] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 416.865998][T12017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 416.866015][T12017] Call Trace: [ 416.866026][T12017] [ 416.866038][T12017] dump_stack_lvl+0x100/0x190 [ 416.866091][T12017] should_fail_ex.cold+0x5/0xa [ 416.866128][T12017] get_futex_key+0x1d2/0x1620 [ 416.866173][T12017] ? __pfx_get_futex_key+0x10/0x10 [ 416.866212][T12017] ? update_se+0x94/0x760 [ 416.866257][T12017] futex_wait_setup+0x83/0x510 [ 416.866316][T12017] __futex_wait+0x19f/0x300 [ 416.866367][T12017] ? __pfx___futex_wait+0x10/0x10 [ 416.866412][T12017] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 416.866466][T12017] ? lockdep_hardirqs_on+0x78/0x100 [ 416.866502][T12017] ? __pfx_futex_wake_mark+0x10/0x10 [ 416.866558][T12017] ? find_held_lock+0x2b/0x80 [ 416.866588][T12017] ? futex_wake+0x456/0x530 [ 416.866644][T12017] futex_wait+0xed/0x380 [ 416.866692][T12017] ? __pfx_futex_wait+0x10/0x10 [ 416.866760][T12017] do_futex+0x1ef/0x350 [ 416.866801][T12017] ? __pfx_do_futex+0x10/0x10 [ 416.866841][T12017] ? __pfx___might_resched+0x10/0x10 [ 416.866886][T12017] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 416.866934][T12017] __x64_sys_futex+0x34f/0x4d0 [ 416.866972][T12017] ? __pfx_task_work_run+0x10/0x10 [ 416.867014][T12017] ? __pfx___x64_sys_futex+0x10/0x10 [ 416.867051][T12017] ? exit_to_user_mode_loop+0xdd/0x4a0 [ 416.867098][T12017] do_syscall_64+0x106/0xf80 [ 416.867123][T12017] ? clear_bhb_loop+0x40/0x90 [ 416.867156][T12017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.867184][T12017] RIP: 0033:0x7f65e099c799 [ 416.867209][T12017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.867235][T12017] RSP: 002b:00007f65e17eb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 416.867264][T12017] RAX: ffffffffffffffda RBX: 00007f65e0c15fa8 RCX: 00007f65e099c799 [ 416.867281][T12017] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f65e0c15fa8 [ 416.867298][T12017] RBP: 00007f65e0c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 416.867316][T12017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 416.867332][T12017] R13: 00007f65e0c16038 R14: 00007ffcd01bd100 R15: 00007ffcd01bd1e8 [ 416.867367][T12017] [ 419.450606][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1242'. [ 419.743237][T12053] netlink: 86 bytes leftover after parsing attributes in process `syz.0.1242'. [ 428.954871][T12218] tc_dump_action: action bad kind [ 429.158168][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1277'. [ 429.315903][T12228] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1277'. [ 430.988103][T12275] smpboot: CPU 1 is now offline [ 431.856643][T12284] FAULT_INJECTION: forcing a failure. [ 431.856643][T12284] name failslab, interval 1, probability 0, space 0, times 0 [ 431.949896][T12284] CPU: 0 UID: 0 PID: 12284 Comm: syz.2.1290 Tainted: G U L syzkaller #0 PREEMPT(full) [ 431.949930][T12284] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 431.949938][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.949948][T12284] Call Trace: [ 431.949954][T12284] [ 431.949963][T12284] dump_stack_lvl+0x100/0x190 [ 431.950004][T12284] should_fail_ex.cold+0x5/0xa [ 431.950027][T12284] should_failslab+0xc2/0x120 [ 431.950048][T12284] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 431.950078][T12284] ? alloc_vmap_area+0x640/0x2bd0 [ 431.950102][T12284] alloc_vmap_area+0x640/0x2bd0 [ 431.950130][T12284] ? __pfx_alloc_vmap_area+0x10/0x10 [ 431.950156][T12284] __get_vm_area_node+0x1ca/0x330 [ 431.950183][T12284] __vmalloc_node_range_noprof+0x213/0x1530 [ 431.950209][T12284] ? __do_sys_listmount+0x289/0xee0 [ 431.950243][T12284] ? __do_sys_listmount+0x289/0xee0 [ 431.950278][T12284] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 431.950307][T12284] ? rcu_is_watching+0x12/0xc0 [ 431.950340][T12284] __kvmalloc_node_noprof+0x3de/0xa00 [ 431.950359][T12284] ? __do_sys_listmount+0x289/0xee0 [ 431.950386][T12284] ? __do_sys_listmount+0x289/0xee0 [ 431.950414][T12284] ? _copy_from_user+0x59/0xd0 [ 431.950438][T12284] ? copy_mnt_id_req+0x1b1/0x350 [ 431.950465][T12284] __do_sys_listmount+0x289/0xee0 [ 431.950494][T12284] ? __pfx_do_futex+0x10/0x10 [ 431.950519][T12284] ? cap_task_prctl+0x104/0xa50 [ 431.950540][T12284] ? __pfx___do_sys_listmount+0x10/0x10 [ 431.950590][T12284] do_syscall_64+0x106/0xf80 [ 431.950608][T12284] ? clear_bhb_loop+0x40/0x90 [ 431.950630][T12284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.950650][T12284] RIP: 0033:0x7f81ded9c799 [ 431.950665][T12284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.950683][T12284] RSP: 002b:00007f81dfc55028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 431.950701][T12284] RAX: ffffffffffffffda RBX: 00007f81df015fa0 RCX: 00007f81ded9c799 [ 431.950712][T12284] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 431.950722][T12284] RBP: 00007f81dee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 431.950732][T12284] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 431.950743][T12284] R13: 00007f81df016038 R14: 00007f81df015fa0 R15: 00007fff97d0d6d8 [ 431.950765][T12284] [ 431.950908][T12284] syz.2.1290: vmalloc error: size 8000000, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null) [ 432.194524][T12296] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1291'. [ 432.391010][T12304] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1291'. [ 433.041058][T12284] ,cpuset=/,mems_allowed=0-1 [ 433.055401][T12284] CPU: 0 UID: 0 PID: 12284 Comm: syz.2.1290 Tainted: G U L syzkaller #0 PREEMPT(full) [ 433.055436][T12284] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 433.055443][T12284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 433.055454][T12284] Call Trace: [ 433.055462][T12284] [ 433.055469][T12284] dump_stack_lvl+0x100/0x190 [ 433.055502][T12284] warn_alloc.cold+0x95/0x1c1 [ 433.055536][T12284] ? __pfx_warn_alloc+0x10/0x10 [ 433.055563][T12284] ? lockdep_hardirqs_on+0x78/0x100 [ 433.055584][T12284] ? __get_vm_area_node+0x2c5/0x330 [ 433.055611][T12284] ? __get_vm_area_node+0x208/0x330 [ 433.055638][T12284] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 433.055669][T12284] ? __do_sys_listmount+0x289/0xee0 [ 433.055705][T12284] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 433.055735][T12284] ? rcu_is_watching+0x12/0xc0 [ 433.055769][T12284] __kvmalloc_node_noprof+0x3de/0xa00 [ 433.055788][T12284] ? __do_sys_listmount+0x289/0xee0 [ 433.055817][T12284] ? __do_sys_listmount+0x289/0xee0 [ 433.055845][T12284] ? _copy_from_user+0x59/0xd0 [ 433.055869][T12284] ? copy_mnt_id_req+0x1b1/0x350 [ 433.055897][T12284] __do_sys_listmount+0x289/0xee0 [ 433.055927][T12284] ? __pfx_do_futex+0x10/0x10 [ 433.055953][T12284] ? cap_task_prctl+0x104/0xa50 [ 433.055975][T12284] ? __pfx___do_sys_listmount+0x10/0x10 [ 433.056025][T12284] do_syscall_64+0x106/0xf80 [ 433.056043][T12284] ? clear_bhb_loop+0x40/0x90 [ 433.056065][T12284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.056084][T12284] RIP: 0033:0x7f81ded9c799 [ 433.056100][T12284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.056117][T12284] RSP: 002b:00007f81dfc55028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 433.056135][T12284] RAX: ffffffffffffffda RBX: 00007f81df015fa0 RCX: 00007f81ded9c799 [ 433.056147][T12284] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000200000000080 [ 433.056158][T12284] RBP: 00007f81dee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 433.056168][T12284] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 433.056179][T12284] R13: 00007f81df016038 R14: 00007f81df015fa0 R15: 00007fff97d0d6d8 [ 433.056201][T12284] [ 433.056207][T12284] Mem-Info: [ 433.641078][T12284] active_anon:4324 inactive_anon:8192 isolated_anon:0 [ 433.641078][T12284] active_file:16683 inactive_file:41181 isolated_file:0 [ 433.641078][T12284] unevictable:776 dirty:885 writeback:0 [ 433.641078][T12284] slab_reclaimable:12006 slab_unreclaimable:92990 [ 433.641078][T12284] mapped:24918 shmem:1398 pagetables:1226 [ 433.641078][T12284] sec_pagetables:0 bounce:0 [ 433.641078][T12284] kernel_misc_reclaimable:0 [ 433.641078][T12284] free:1319846 free_pcp:9157 free_cma:0 [ 433.693333][T12321] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 433.840347][T12284] Node 0 active_anon:17296kB inactive_anon:28816kB active_file:68180kB inactive_file:163136kB unevictable:1568kB isolated(anon):0kB isolated(file):0kB mapped:99672kB dirty:3536kB writeback:0kB shmem:4056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12640kB pagetables:4756kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 433.939208][T12284] Node 1 active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 434.045047][T12284] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.141656][T12284] lowmem_reserve[]: 0 2477 2478 2478 2478 [ 434.173484][T12284] Node 0 DMA32 free:1314800kB boost:0kB min:34056kB low:42568kB high:51080kB reserved_highatomic:0KB free_highatomic:0KB active_anon:17296kB inactive_anon:35172kB active_file:68180kB inactive_file:163136kB unevictable:1568kB writepending:3536kB zspages:768kB present:3129332kB managed:2537292kB mlocked:12kB bounce:0kB free_pcp:31312kB local_pcp:31312kB free_cma:0kB [ 434.276634][T12284] lowmem_reserve[]: 0 0 1 1 1 [ 434.286140][T12284] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1056kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 434.363224][T12284] lowmem_reserve[]: 0 0 0 0 0 [ 434.378331][T12284] Node 1 Normal free:3949224kB boost:0kB min:55832kB low:69788kB high:83744kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:8kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:396kB local_pcp:396kB free_cma:0kB [ 434.553955][T12284] lowmem_reserve[]: 0 0 0 0 0 [ 434.623209][T12284] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 434.718902][T12284] Node 0 DMA32: 7683*4kB (UME) 4049*8kB (UME) 2392*16kB (UME) 1205*32kB (UME) 579*64kB (UME) 303*128kB (UME) 122*256kB (UME) 79*512kB (UME) 71*1024kB (UM) 10*2048kB (UME) 228*4096kB (UM) = 1314548kB [ 434.824299][T12284] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 434.914600][T12284] Node 1 Normal: 5*4kB (UM) 10*8kB (UM) 7*16kB (UM) 8*32kB (UM) 6*64kB (UM) 3*128kB (UM) 4*256kB (M) 5*512kB (UM) 2*1024kB (UM) 3*2048kB (UM) 961*4096kB (M) = 3949268kB [ 435.004589][T12284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.064305][T12284] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 435.113786][T12284] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 435.181766][T12284] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 435.223738][T12284] 59322 total pagecache pages [ 435.259416][T12284] 51 pages in swap cache [ 435.275118][T12284] Free swap = 124456kB [ 435.296287][T12284] Total swap = 124996kB [ 435.308182][T12284] 2097051 pages RAM [ 435.325503][T12284] 0 pages HighMem/MovableOnly [ 435.357615][T12284] 430849 pages reserved [ 435.392095][T12284] 0 pages cma reserved [ 435.816234][ T30] audit: type=1326 audit(4294969356.438:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12365 comm="syz.2.1307" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81ded9c799 code=0x0 [ 437.288673][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'. [ 437.883278][T12402] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 437.939789][T12402] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 438.322378][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1319'. [ 438.388194][T12427] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 438.551173][T12425] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 438.599700][T12438] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1319'. [ 439.087696][T12450] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'. [ 439.270295][T12450] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1321'. [ 440.225455][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.241261][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.281097][T12484] FAULT_INJECTION: forcing a failure. [ 440.281097][T12484] name failslab, interval 1, probability 0, space 0, times 0 [ 440.490365][T12484] CPU: 0 UID: 0 PID: 12484 Comm: syz.2.1325 Tainted: G U L syzkaller #0 PREEMPT(full) [ 440.490399][T12484] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 440.490407][T12484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 440.490417][T12484] Call Trace: [ 440.490423][T12484] [ 440.490431][T12484] dump_stack_lvl+0x100/0x190 [ 440.490464][T12484] should_fail_ex.cold+0x5/0xa [ 440.490486][T12484] ? memcg_list_lru_alloc+0x4ec/0x740 [ 440.490515][T12484] should_failslab+0xc2/0x120 [ 440.490536][T12484] __kmalloc_noprof+0xe0/0x850 [ 440.490564][T12484] ? ipcget+0xee/0xf50 [ 440.490593][T12484] memcg_list_lru_alloc+0x4ec/0x740 [ 440.490628][T12484] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 440.490657][T12484] ? rcu_read_unlock+0x17/0x60 [ 440.490683][T12484] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 440.490714][T12484] __memcg_slab_post_alloc_hook+0x130/0x990 [ 440.490740][T12484] ? kasan_save_track+0x14/0x30 [ 440.490759][T12484] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 440.490789][T12484] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 440.490814][T12484] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 440.490834][T12484] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 440.490855][T12484] alloc_inode+0x68/0x250 [ 440.490881][T12484] new_inode+0x22/0x1c0 [ 440.490907][T12484] hugetlbfs_get_inode+0x313/0x750 [ 440.490931][T12484] hugetlb_file_setup+0x3cc/0x5b0 [ 440.490964][T12484] newseg+0xabb/0xed0 [ 440.490992][T12484] ? __pfx_newseg+0x10/0x10 [ 440.491016][T12484] ? down_write+0x146/0x1f0 [ 440.491038][T12484] ? ksys_write+0x190/0x250 [ 440.491055][T12484] ? ksys_write+0x190/0x250 [ 440.491076][T12484] ipcget+0xee/0xf50 [ 440.491101][T12484] ? do_futex+0x192/0x350 [ 440.491126][T12484] ? __pfx_do_futex+0x10/0x10 [ 440.491154][T12484] ? __pfx_ipcget+0x10/0x10 [ 440.491180][T12484] ? __x64_sys_futex+0x34f/0x4d0 [ 440.491203][T12484] ? __x64_sys_futex+0x358/0x4d0 [ 440.491231][T12484] __x64_sys_shmget+0x13b/0x1b0 [ 440.491257][T12484] ? __pfx___x64_sys_shmget+0x10/0x10 [ 440.491290][T12484] do_syscall_64+0x106/0xf80 [ 440.491307][T12484] ? clear_bhb_loop+0x40/0x90 [ 440.491329][T12484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.491348][T12484] RIP: 0033:0x7f81ded9c799 [ 440.491365][T12484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.491382][T12484] RSP: 002b:00007f81dfbd1028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 440.491400][T12484] RAX: ffffffffffffffda RBX: 00007f81df016360 RCX: 00007f81ded9c799 [ 440.491412][T12484] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 440.491423][T12484] RBP: 00007f81dee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 440.491433][T12484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.491443][T12484] R13: 00007f81df0163f8 R14: 00007f81df016360 R15: 00007fff97d0d6d8 [ 440.491466][T12484] [ 441.136600][T12508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1330'. [ 442.034554][T12503] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1330'. [ 442.316935][T12530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1334'. [ 442.540996][T12536] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1334'. [ 443.667879][T12571] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1342'. [ 444.177523][T12579] vivid-007: ================= START STATUS ================= [ 444.218754][T12579] vivid-007: Generate PTS: true [ 444.266092][T12579] vivid-007: Generate SCR: true [ 444.286603][T12579] tpg source WxH: 320x240 (Y'CbCr) [ 444.291775][T12579] tpg field: 1 [ 444.388913][T12579] tpg crop: (0,0)/320x240 [ 444.398536][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1343'. [ 444.414628][T12579] tpg compose: (0,0)/320x240 [ 444.422522][T12579] tpg colorspace: 8 [ 444.444991][T12579] tpg transfer function: 0/0 [ 444.449610][T12579] tpg Y'CbCr encoding: 0/0 [ 444.479041][T12579] tpg quantization: 0/0 [ 444.490016][T12579] tpg RGB range: 0/2 [ 444.502200][T12579] vivid-007: ================== END STATUS ================== [ 445.347666][T12593] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1355'. [ 445.487131][ T5146] Bluetooth: hci3: unexpected event 0x3e length: 0 < 1 [ 445.800013][T12619] FAULT_INJECTION: forcing a failure. [ 445.800013][T12619] name failslab, interval 1, probability 0, space 0, times 0 [ 445.828614][T12619] CPU: 0 UID: 0 PID: 12619 Comm: syz.2.1350 Tainted: G U L syzkaller #0 PREEMPT(full) [ 445.828649][T12619] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 445.828656][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.828667][T12619] Call Trace: [ 445.828674][T12619] [ 445.828682][T12619] dump_stack_lvl+0x100/0x190 [ 445.828715][T12619] should_fail_ex.cold+0x5/0xa [ 445.828737][T12619] should_failslab+0xc2/0x120 [ 445.828758][T12619] __kvmalloc_node_noprof+0xfa/0xa00 [ 445.828777][T12619] ? open_substream+0x311/0x9e0 [ 445.828809][T12619] ? lockdep_init_map_type+0x5c/0x250 [ 445.828843][T12619] open_substream+0x311/0x9e0 [ 445.828868][T12619] ? lockdep_hardirqs_on+0x78/0x100 [ 445.828889][T12619] rawmidi_open_priv+0x595/0x6f0 [ 445.828921][T12619] snd_rawmidi_open+0x4c9/0xba0 [ 445.828954][T12619] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 445.828983][T12619] ? __pfx_default_wake_function+0x10/0x10 [ 445.829007][T12619] ? kobject_get_unless_zero+0x156/0x200 [ 445.829031][T12619] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 445.829060][T12619] snd_open+0x22d/0x4c0 [ 445.829083][T12619] ? __pfx_snd_open+0x10/0x10 [ 445.829104][T12619] chrdev_open+0x234/0x6a0 [ 445.829124][T12619] ? __pfx_apparmor_file_open+0x10/0x10 [ 445.829145][T12619] ? __pfx_chrdev_open+0x10/0x10 [ 445.829166][T12619] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 445.829192][T12619] do_dentry_open+0x6d8/0x1660 [ 445.829211][T12619] ? __pfx_chrdev_open+0x10/0x10 [ 445.829236][T12619] vfs_open+0x82/0x3f0 [ 445.829263][T12619] path_openat+0x208c/0x31a0 [ 445.829291][T12619] ? __pfx_path_openat+0x10/0x10 [ 445.829319][T12619] do_file_open+0x20e/0x430 [ 445.829349][T12619] ? __pfx_do_file_open+0x10/0x10 [ 445.829385][T12619] ? alloc_fd+0x476/0x790 [ 445.829407][T12619] ? do_getname+0x191/0x390 [ 445.829434][T12619] do_sys_openat2+0x10d/0x1e0 [ 445.829460][T12619] ? __pfx_do_sys_openat2+0x10/0x10 [ 445.829486][T12619] ? find_held_lock+0x2b/0x80 [ 445.829511][T12619] __x64_sys_openat+0x12d/0x210 [ 445.829538][T12619] ? __pfx___x64_sys_openat+0x10/0x10 [ 445.829573][T12619] do_syscall_64+0x106/0xf80 [ 445.829591][T12619] ? clear_bhb_loop+0x40/0x90 [ 445.829613][T12619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.829633][T12619] RIP: 0033:0x7f81ded9c799 [ 445.829649][T12619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.829666][T12619] RSP: 002b:00007f81dfc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 445.829684][T12619] RAX: ffffffffffffffda RBX: 00007f81df015fa0 RCX: 00007f81ded9c799 [ 445.829696][T12619] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 445.829707][T12619] RBP: 00007f81dee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 445.829717][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.829728][T12619] R13: 00007f81df016038 R14: 00007f81df015fa0 R15: 00007fff97d0d6d8 [ 445.829751][T12619] [ 446.863435][T12626] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1352'. [ 447.976099][T12648] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 449.827736][T12670] kexec: Could not allocate control_code_buffer [ 450.770985][T12715] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1370'. [ 450.820401][T12715] veth1_vlan: entered allmulticast mode [ 451.360474][T12735] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1371'. [ 454.275084][T12779] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1378'. [ 454.424701][T12760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1376'. [ 454.434398][T12779] ipvlan0: entered promiscuous mode [ 454.439614][T12779] ipvlan0: entered allmulticast mode [ 454.628463][T12779] veth0_vlan: entered allmulticast mode [ 454.727056][T12764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1378'. [ 455.241613][T12787] sp0: Synchronizing with TNC [ 455.376190][T12787] [U] [ 456.630795][T12812] random: crng reseeded on system resumption [ 459.678558][T12852] random: crng reseeded on system resumption [ 459.822264][T12852] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 460.193793][T12865] Unrecognized hibernate image header format! [ 460.389465][T12865] PM: hibernation: Image mismatch: architecture specific data [ 460.431943][T12871] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1396'. [ 460.634509][T12853] Unrecognized hibernate image header format! [ 460.723348][T12853] PM: hibernation: Image mismatch: architecture specific data [ 461.239336][T12886] bridge_slave_1: left allmulticast mode [ 461.245193][T12886] bridge_slave_1: left promiscuous mode [ 461.308857][T12886] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.239634][T12920] NFSD: Failed to start, no listeners configured. [ 464.134946][T12948] random: crng reseeded on system resumption [ 465.370433][T12973] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1419'. [ 467.732094][T13017] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 468.300032][T13035] HSR: entered promiscuous mode [ 468.597534][T13048] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1427'. [ 471.447130][T13108] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 471.491918][T13107] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 472.519281][T13120] QAT: Device 250 not found [ 472.533104][T13124] QAT: Invalid ioctl 21531 [ 472.724168][T13134] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1443'. [ 473.388284][T13143] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1446'. [ 473.731561][T13147] can: request_module (can-proto-5) failed. [ 473.762605][T13150] can: request_module (can-proto-5) failed. [ 474.158652][T13165] ecryptfs_miscdev_write: Invalid packet size [192] [ 474.865047][T13187] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1453'. [ 477.106109][T13219] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1461'. [ 477.206637][T13224] kafs: addr_prefs: Invalid Command [ 477.504497][T13236] Invalid ELF header magic: != ELF [ 478.077165][T13260] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1469'. [ 479.083640][T13270] random: crng reseeded on system resumption [ 479.363742][T13304] netlink: 'syz.1.1481': attribute type 4 has an invalid length. [ 479.399990][T13304] netlink: 62 bytes leftover after parsing attributes in process `syz.1.1481'. [ 479.776492][T13319] NFSD: Failed to start, no listeners configured. [ 479.825116][T13320] usb usb37: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 479.861929][T13320] vhci_hcd vhci_hcd.2: invalid port number 189 [ 479.910531][T13320] vhci_hcd vhci_hcd.2: invalid port number 189 [ 481.528226][T13373] FAULT_INJECTION: forcing a failure. [ 481.528226][T13373] name failslab, interval 1, probability 0, space 0, times 0 [ 481.600477][T13373] CPU: 0 UID: 0 PID: 13373 Comm: syz.3.1493 Tainted: G U L syzkaller #0 PREEMPT(full) [ 481.600511][T13373] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 481.600519][T13373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 481.600529][T13373] Call Trace: [ 481.600535][T13373] [ 481.600543][T13373] dump_stack_lvl+0x100/0x190 [ 481.600575][T13373] should_fail_ex.cold+0x5/0xa [ 481.600598][T13373] should_failslab+0xc2/0x120 [ 481.600620][T13373] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 481.600648][T13373] ? ptlock_alloc+0x1f/0x70 [ 481.600678][T13373] ptlock_alloc+0x1f/0x70 [ 481.600703][T13373] pte_alloc_one+0x82/0x3d0 [ 481.600725][T13373] do_fault+0x88e/0x18e0 [ 481.600746][T13373] ? __pmd_alloc+0x3fb/0x950 [ 481.600770][T13373] __handle_mm_fault+0x1815/0x2b60 [ 481.600800][T13373] ? mt_find+0x45e/0x8e0 [ 481.600821][T13373] ? __pfx___handle_mm_fault+0x10/0x10 [ 481.600846][T13373] ? __pfx_mt_find+0x10/0x10 [ 481.600878][T13373] ? find_vma+0xbf/0x140 [ 481.600895][T13373] ? __pfx_find_vma+0x10/0x10 [ 481.600916][T13373] handle_mm_fault+0x36d/0xa20 [ 481.600946][T13373] do_user_addr_fault+0x74c/0x12f0 [ 481.600970][T13373] exc_page_fault+0x6f/0xd0 [ 481.601001][T13373] asm_exc_page_fault+0x26/0x30 [ 481.601019][T13373] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 481.601044][T13373] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 481.601060][T13373] RSP: 0018:ffffc90005927ba8 EFLAGS: 00050206 [ 481.601076][T13373] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000400 [ 481.601087][T13373] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffff888034aa8800 [ 481.601097][T13373] RBP: 0000000000000400 R08: 0000000000000001 R09: ffffed100695517f [ 481.601108][T13373] R10: ffff888034aa8bff R11: 0000000000000000 R12: 0000000000000000 [ 481.601119][T13373] R13: ffff888034aa8800 R14: 0000000000000000 R15: ffff88807e0ee000 [ 481.601141][T13373] _copy_from_user+0x98/0xd0 [ 481.601166][T13373] snd_pcm_oss_write2+0x1c2/0x400 [ 481.601193][T13373] ? __pfx_snd_pcm_oss_write2+0x10/0x10 [ 481.601235][T13373] snd_pcm_oss_write+0x729/0xa30 [ 481.601261][T13373] ? security_file_permission+0x76/0x210 [ 481.601298][T13373] vfs_write+0x2aa/0x1070 [ 481.601324][T13373] ? __pfx_snd_pcm_oss_write+0x10/0x10 [ 481.601351][T13373] ? __pfx_vfs_write+0x10/0x10 [ 481.601367][T13373] ? find_held_lock+0x2b/0x80 [ 481.601386][T13373] ? __fget_files+0x215/0x3d0 [ 481.601404][T13373] ? __fget_files+0x215/0x3d0 [ 481.601426][T13373] ? __fget_files+0x21f/0x3d0 [ 481.601450][T13373] ksys_write+0x12a/0x250 [ 481.601468][T13373] ? __pfx_ksys_write+0x10/0x10 [ 481.601492][T13373] do_syscall_64+0x106/0xf80 [ 481.601509][T13373] ? clear_bhb_loop+0x40/0x90 [ 481.601532][T13373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.601550][T13373] RIP: 0033:0x7f9c6d19c799 [ 481.601566][T13373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.601583][T13373] RSP: 002b:00007f9c6e0f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 481.601599][T13373] RAX: ffffffffffffffda RBX: 00007f9c6d416090 RCX: 00007f9c6d19c799 [ 481.601610][T13373] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 481.601626][T13373] RBP: 00007f9c6d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 481.601636][T13373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.601647][T13373] R13: 00007f9c6d416128 R14: 00007f9c6d416090 R15: 00007ffefc24c378 [ 481.601670][T13373] [ 482.566998][ T5146] Bluetooth: hci0: unexpected subevent 0x01 length: 3 < 18 [ 484.981537][T13422] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1504'. [ 486.612541][T13479] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1514'. [ 487.279105][T13491] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1516'. [ 487.429001][T13494] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1516'. [ 488.681121][T13516] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 488.722851][T13516] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 488.761266][T13516] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 488.791404][T13516] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 490.117489][ T5146] Bluetooth: hci0: command 0x0c1a tx timeout [ 490.754320][ T5146] Bluetooth: hci2: command 0x0c1a tx timeout [ 490.761171][ T5146] Bluetooth: hci1: command 0x0c1a tx timeout [ 490.835391][T13576] Bluetooth: hci3: command 0x0c1a tx timeout [ 490.979210][T13576] Bluetooth: hci3: unexpected subevent 0x01 length: 3 < 18 [ 491.314345][T13578] Unable to find swap-space signature [ 491.898853][T13594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 491.922602][T13594] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 491.951204][T13594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 491.983783][T13594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 493.939902][T13576] Bluetooth: hci1: command 0x0c1a tx timeout [ 493.946722][ T5833] Bluetooth: hci0: command 0x0c1a tx timeout [ 494.017505][T13576] Bluetooth: hci3: command 0x0c1a tx timeout [ 494.024121][ T5833] Bluetooth: hci2: command 0x0c1a tx timeout [ 494.917611][T13645] FAULT_INJECTION: forcing a failure. [ 494.917611][T13645] name failslab, interval 1, probability 0, space 0, times 0 [ 495.023358][T13645] CPU: 0 UID: 0 PID: 13645 Comm: syz.2.1543 Tainted: G U L syzkaller #0 PREEMPT(full) [ 495.023392][T13645] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 495.023399][T13645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 495.023409][T13645] Call Trace: [ 495.023416][T13645] [ 495.023423][T13645] dump_stack_lvl+0x100/0x190 [ 495.023457][T13645] should_fail_ex.cold+0x5/0xa [ 495.023479][T13645] should_failslab+0xc2/0x120 [ 495.023501][T13645] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 495.023531][T13645] ? proc_alloc_inode+0x25/0x200 [ 495.023561][T13645] ? __pfx_proc_alloc_inode+0x10/0x10 [ 495.023591][T13645] proc_alloc_inode+0x25/0x200 [ 495.023618][T13645] alloc_inode+0x68/0x250 [ 495.023645][T13645] new_inode+0x22/0x1c0 [ 495.023671][T13645] proc_pid_make_inode+0x22/0x160 [ 495.023699][T13645] proc_pident_instantiate+0x85/0x310 [ 495.023731][T13645] proc_pident_lookup+0x1e3/0x270 [ 495.023766][T13645] __lookup_slow+0x251/0x460 [ 495.023798][T13645] ? __pfx___lookup_slow+0x10/0x10 [ 495.023841][T13645] lookup_slow+0x50/0x70 [ 495.023866][T13645] link_path_walk+0x1377/0x1cc0 [ 495.023903][T13645] path_openat+0x1be/0x31a0 [ 495.023921][T13645] ? kasan_save_stack+0x3f/0x50 [ 495.023937][T13645] ? kasan_save_stack+0x30/0x50 [ 495.023953][T13645] ? kasan_save_track+0x14/0x30 [ 495.023969][T13645] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 495.024003][T13645] ? __pfx_path_openat+0x10/0x10 [ 495.024033][T13645] do_file_open+0x20e/0x430 [ 495.024055][T13645] ? __pfx_do_file_open+0x10/0x10 [ 495.024083][T13645] ? __pfx_kfree_link+0x10/0x10 [ 495.024115][T13645] ? alloc_fd+0x476/0x790 [ 495.024136][T13645] ? do_getname+0x191/0x390 [ 495.024162][T13645] do_sys_openat2+0x10d/0x1e0 [ 495.024187][T13645] ? __pfx_do_sys_openat2+0x10/0x10 [ 495.024230][T13645] __x64_sys_openat+0x12d/0x210 [ 495.024256][T13645] ? __pfx___x64_sys_openat+0x10/0x10 [ 495.024291][T13645] do_syscall_64+0x106/0xf80 [ 495.024309][T13645] ? clear_bhb_loop+0x40/0x90 [ 495.024332][T13645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.024352][T13645] RIP: 0033:0x7f81ded5cfce [ 495.024369][T13645] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 495.024391][T13645] RSP: 002b:00007f81dfc54ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 495.024409][T13645] RAX: ffffffffffffffda RBX: 00007f81dfc556c0 RCX: 00007f81ded5cfce [ 495.024421][T13645] RDX: 0000000000000002 RSI: 00007f81dfc54f90 RDI: ffffffffffffff9c [ 495.024433][T13645] RBP: 00007f81dee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 495.024444][T13645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.024455][T13645] R13: 00007f81df016038 R14: 00007f81df015fa0 R15: 00007fff97d0d6d8 [ 495.024477][T13645] [ 496.058924][T13666] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 496.483129][T13681] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1551'. [ 496.940773][T13695] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 497.028254][T13698] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 499.092291][T13741] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1564'. [ 499.982849][T13756] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 500.126655][T13757] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 500.842690][T13755] Unable to find swap-space signature [ 501.347186][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.354049][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.062493][T13779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1573'. [ 503.360112][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1574'. [ 504.258298][T13790] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1576'. [ 505.890629][T13822] hub 1-0:1.0: USB hub found [ 505.925477][T13822] hub 1-0:1.0: 1 port detected [ 506.111714][T13825] netlink: 29 bytes leftover after parsing attributes in process `syz.0.1583'. [ 506.335552][T13827] bond0: option slaves: interface - does not exist! [ 506.854136][T13833] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 506.895931][T13833] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 511.373740][T13842] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1587'. [ 511.384006][T13841] FAULT_INJECTION: forcing a failure. [ 511.384006][T13841] name failslab, interval 1, probability 0, space 0, times 0 [ 511.438884][T13841] CPU: 0 UID: 0 PID: 13841 Comm: syz.3.1588 Tainted: G U L syzkaller #0 PREEMPT(full) [ 511.438918][T13841] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 511.438925][T13841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 511.438936][T13841] Call Trace: [ 511.438943][T13841] [ 511.438950][T13841] dump_stack_lvl+0x100/0x190 [ 511.438991][T13841] should_fail_ex.cold+0x5/0xa [ 511.439014][T13841] ? tomoyo_init_log+0x1224/0x20c0 [ 511.439039][T13841] should_failslab+0xc2/0x120 [ 511.439060][T13841] __kmalloc_noprof+0xe0/0x850 [ 511.439094][T13841] tomoyo_init_log+0x1224/0x20c0 [ 511.439123][T13841] ? vsnprintf+0x4ee/0x1240 [ 511.439158][T13841] ? __pfx_tomoyo_init_log+0x10/0x10 [ 511.439183][T13841] ? tomoyo_profile+0x47/0x60 [ 511.439212][T13841] ? tomoyo_domain_quota_is_ok+0x367/0x580 [ 511.439237][T13841] tomoyo_supervisor+0x506/0x1340 [ 511.439270][T13841] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 511.439314][T13841] ? tomoyo_check_path_acl+0x141/0x210 [ 511.439336][T13841] ? tomoyo_check_acl+0x1f7/0x410 [ 511.439359][T13841] tomoyo_path_permission+0x270/0x3b0 [ 511.439384][T13841] tomoyo_check_open_permission+0x37f/0x3c0 [ 511.439408][T13841] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 511.439452][T13841] ? lock_acquire+0x1cf/0x380 [ 511.439476][T13841] ? find_held_lock+0x2b/0x80 [ 511.439500][T13841] tomoyo_file_open+0x6b/0x90 [ 511.439518][T13841] security_file_open+0xb5/0x1e0 [ 511.439544][T13841] do_dentry_open+0x5aa/0x1660 [ 511.439570][T13841] vfs_open+0x82/0x3f0 [ 511.439596][T13841] path_openat+0x208c/0x31a0 [ 511.439624][T13841] ? __pfx_path_openat+0x10/0x10 [ 511.439651][T13841] do_file_open+0x20e/0x430 [ 511.439673][T13841] ? __pfx_do_file_open+0x10/0x10 [ 511.439708][T13841] ? alloc_fd+0x476/0x790 [ 511.439730][T13841] ? do_getname+0x191/0x390 [ 511.439755][T13841] do_sys_openat2+0x10d/0x1e0 [ 511.439781][T13841] ? __pfx_do_sys_openat2+0x10/0x10 [ 511.439807][T13841] ? __fget_files+0x21f/0x3d0 [ 511.439830][T13841] __x64_sys_openat+0x12d/0x210 [ 511.439856][T13841] ? __pfx___x64_sys_openat+0x10/0x10 [ 511.439890][T13841] do_syscall_64+0x106/0xf80 [ 511.439908][T13841] ? clear_bhb_loop+0x40/0x90 [ 511.439930][T13841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.439949][T13841] RIP: 0033:0x7f9c6d19c799 [ 511.439965][T13841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.439988][T13841] RSP: 002b:00007f9c6e111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 511.440007][T13841] RAX: ffffffffffffffda RBX: 00007f9c6d415fa0 RCX: 00007f9c6d19c799 [ 511.440018][T13841] RDX: 0000000000008382 RSI: 0000200000000640 RDI: ffffffffffffff9c [ 511.440029][T13841] RBP: 00007f9c6d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 511.440039][T13841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.440050][T13841] R13: 00007f9c6d416038 R14: 00007f9c6d415fa0 R15: 00007ffefc24c378 [ 511.440073][T13841] [ 512.562236][T13868] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1594'. [ 513.321960][T13883] netlink: 86 bytes leftover after parsing attributes in process `syz.2.1595'. [ 513.405515][T13883] netlink: 86 bytes leftover after parsing attributes in process `syz.2.1595'. [ 513.445743][T13883] netlink: 86 bytes leftover after parsing attributes in process `syz.2.1595'. [ 513.511285][T13883] netlink: 86 bytes leftover after parsing attributes in process `syz.2.1595'. [ 513.556385][T13895] hub 1-0:1.0: USB hub found [ 513.575567][T13895] hub 1-0:1.0: 1 port detected [ 513.585776][T13883] netlink: 86 bytes leftover after parsing attributes in process `syz.2.1595'. [ 513.585910][T13883] netlink: 86 bytes leftover after parsing attributes in process `syz.2.1595'. [ 513.586050][T13883] netlink: 86 bytes leftover after parsing attributes in process `syz.2.1595'. [ 513.586164][T13883] netlink: 86 bytes leftover after parsing attributes in process `syz.2.1595'. [ 513.868045][T13893] zswap: compressor  not available [ 515.258856][T13950] nfs: Unknown parameter 'k}0}𜯢ʊ5.Յ梅3ݏ#h[D 13}5M' [ 516.189423][T13974] hub 1-0:1.0: USB hub found [ 516.219361][T13974] hub 1-0:1.0: 1 port detected [ 517.237570][T13984] __nla_validate_parse: 29 callbacks suppressed [ 517.237590][T13984] netlink: 29 bytes leftover after parsing attributes in process `syz.3.1612'. [ 518.228137][T13990] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1613'. [ 518.425918][T13989] bond0: no command found in slaves file - use +ifname or -ifname [ 518.511798][T14001] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1614'. [ 520.937562][T14078] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1626'. [ 521.202613][T14080] FAULT_INJECTION: forcing a failure. [ 521.202613][T14080] name failslab, interval 1, probability 0, space 0, times 0 [ 521.315348][T14080] CPU: 0 UID: 0 PID: 14080 Comm: syz.3.1627 Tainted: G U L syzkaller #0 PREEMPT(full) [ 521.315383][T14080] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 521.315391][T14080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 521.315402][T14080] Call Trace: [ 521.315408][T14080] [ 521.315417][T14080] dump_stack_lvl+0x100/0x190 [ 521.315449][T14080] should_fail_ex.cold+0x5/0xa [ 521.315472][T14080] should_failslab+0xc2/0x120 [ 521.315493][T14080] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 521.315522][T14080] ? __anon_vma_prepare+0x344/0x5e0 [ 521.315553][T14080] __anon_vma_prepare+0x344/0x5e0 [ 521.315578][T14080] ? __filemap_get_folio_mpol+0x3ba/0xe70 [ 521.315599][T14080] __vmf_anon_prepare+0x11f/0x250 [ 521.315623][T14080] hugetlb_no_page+0xe28/0x1970 [ 521.315655][T14080] hugetlb_fault+0x5df/0x1450 [ 521.315682][T14080] ? __pfx_hugetlb_fault+0x10/0x10 [ 521.315715][T14080] ? find_vma+0xbf/0x140 [ 521.315733][T14080] ? __pfx_find_vma+0x10/0x10 [ 521.315754][T14080] handle_mm_fault+0x5f1/0xa20 [ 521.315785][T14080] do_user_addr_fault+0x74c/0x12f0 [ 521.315811][T14080] exc_page_fault+0x6f/0xd0 [ 521.315842][T14080] asm_exc_page_fault+0x26/0x30 [ 521.315860][T14080] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 521.315885][T14080] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 fd 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 521.315902][T14080] RSP: 0018:ffffc900033e7e48 EFLAGS: 00050212 [ 521.315918][T14080] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 521.315930][T14080] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900033e7ea0 [ 521.315940][T14080] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff5200067cfd5 [ 521.315950][T14080] R10: ffffc900033e7eaf R11: 0000000000000000 R12: 0000000000000000 [ 521.315961][T14080] R13: ffffc900033e7ea0 R14: 0000000000000000 R15: 0000000000000000 [ 521.315983][T14080] _copy_from_user+0x98/0xd0 [ 521.316008][T14080] __x64_sys_setrlimit+0xc6/0x160 [ 521.316036][T14080] ? __pfx___x64_sys_setrlimit+0x10/0x10 [ 521.316068][T14080] do_syscall_64+0x106/0xf80 [ 521.316095][T14080] ? clear_bhb_loop+0x40/0x90 [ 521.316118][T14080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.316137][T14080] RIP: 0033:0x7f9c6d19c799 [ 521.316153][T14080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.316170][T14080] RSP: 002b:00007f9c6e111028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a0 [ 521.316186][T14080] RAX: ffffffffffffffda RBX: 00007f9c6d415fa0 RCX: 00007f9c6d19c799 [ 521.316197][T14080] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000007 [ 521.316208][T14080] RBP: 00007f9c6d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 521.316218][T14080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.316229][T14080] R13: 00007f9c6d416038 R14: 00007f9c6d415fa0 R15: 00007ffefc24c378 [ 521.316253][T14080] [ 521.738946][T14091] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 523.545110][T14157] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1639'. [ 524.326743][T14175] zswap: compressor not available [ 524.597422][T14193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1648'. [ 524.747473][T14193] openvswitch: netlink: Flow key attr not present in new flow. [ 526.146994][T14214] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1652'. [ 526.946943][T14243] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1]. [ 528.023937][T14262] FAULT_INJECTION: forcing a failure. [ 528.023937][T14262] name failslab, interval 1, probability 0, space 0, times 0 [ 528.081519][T14262] CPU: 0 UID: 0 PID: 14262 Comm: syz.0.1661 Tainted: G U L syzkaller #0 PREEMPT(full) [ 528.081553][T14262] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 528.081560][T14262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.081570][T14262] Call Trace: [ 528.081577][T14262] [ 528.081584][T14262] dump_stack_lvl+0x100/0x190 [ 528.081617][T14262] should_fail_ex.cold+0x5/0xa [ 528.081639][T14262] should_failslab+0xc2/0x120 [ 528.081660][T14262] __kmalloc_cache_noprof+0x7a/0x6f0 [ 528.081687][T14262] ? do_eventfd+0x67/0x2b0 [ 528.081717][T14262] do_eventfd+0x67/0x2b0 [ 528.081744][T14262] __x64_sys_eventfd+0x32/0x50 [ 528.081771][T14262] do_syscall_64+0x106/0xf80 [ 528.081789][T14262] ? clear_bhb_loop+0x40/0x90 [ 528.081820][T14262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.081840][T14262] RIP: 0033:0x7f65e099c799 [ 528.081854][T14262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.081872][T14262] RSP: 002b:00007f65e17eb028 EFLAGS: 00000246 ORIG_RAX: 000000000000011c [ 528.081891][T14262] RAX: ffffffffffffffda RBX: 00007f65e0c15fa0 RCX: 00007f65e099c799 [ 528.081903][T14262] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 528.081914][T14262] RBP: 00007f65e0a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 528.081926][T14262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.081936][T14262] R13: 00007f65e0c16038 R14: 00007f65e0c15fa0 R15: 00007ffcd01bd1e8 [ 528.081958][T14262] [ 528.334647][T14274] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1662'. [ 528.615928][T14284] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1663'. [ 529.379871][T14310] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 530.110934][T14330] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1676'. [ 530.170661][T14336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1675'. [ 530.194400][T14330] ipvlan0: entered promiscuous mode [ 530.225057][T14330] ipvlan0: entered allmulticast mode [ 530.307572][T14330] veth0_vlan: entered allmulticast mode [ 530.419041][T14345] FAULT_INJECTION: forcing a failure. [ 530.419041][T14345] name failslab, interval 1, probability 0, space 0, times 0 [ 530.434000][T14344] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1675'. [ 530.522511][T14345] CPU: 0 UID: 0 PID: 14345 Comm: syz.2.1677 Tainted: G U L syzkaller #0 PREEMPT(full) [ 530.522545][T14345] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 530.522553][T14345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 530.522564][T14345] Call Trace: [ 530.522570][T14345] [ 530.522578][T14345] dump_stack_lvl+0x100/0x190 [ 530.522611][T14345] should_fail_ex.cold+0x5/0xa [ 530.522634][T14345] should_failslab+0xc2/0x120 [ 530.522655][T14345] __kmalloc_cache_node_noprof+0x7d/0x770 [ 530.522674][T14345] ? __alloc_workqueue+0xf78/0x1880 [ 530.522696][T14345] ? lockdep_init_map_type+0x5c/0x250 [ 530.522734][T14345] __alloc_workqueue+0xf78/0x1880 [ 530.522760][T14345] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 530.522795][T14345] alloc_workqueue_noprof+0xd2/0x200 [ 530.522819][T14345] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 530.522849][T14345] ? __pfx___debug_object_init+0x10/0x10 [ 530.522874][T14345] nci_register_device+0x394/0xb80 [ 530.522901][T14345] ? __pfx_nci_register_device+0x10/0x10 [ 530.522931][T14345] ? lockdep_init_map_type+0x5c/0x250 [ 530.522960][T14345] virtual_ncidev_open+0x141/0x220 [ 530.522988][T14345] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 530.523016][T14345] misc_open+0x26d/0x450 [ 530.523040][T14345] ? __pfx_misc_open+0x10/0x10 [ 530.523062][T14345] chrdev_open+0x234/0x6a0 [ 530.523083][T14345] ? __pfx_apparmor_file_open+0x10/0x10 [ 530.523104][T14345] ? __pfx_chrdev_open+0x10/0x10 [ 530.523125][T14345] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 530.523151][T14345] do_dentry_open+0x6d8/0x1660 [ 530.523170][T14345] ? __pfx_chrdev_open+0x10/0x10 [ 530.523195][T14345] vfs_open+0x82/0x3f0 [ 530.523221][T14345] path_openat+0x208c/0x31a0 [ 530.523248][T14345] ? __pfx_path_openat+0x10/0x10 [ 530.523276][T14345] do_file_open+0x20e/0x430 [ 530.523298][T14345] ? __pfx_do_file_open+0x10/0x10 [ 530.523333][T14345] ? alloc_fd+0x476/0x790 [ 530.523355][T14345] ? do_getname+0x191/0x390 [ 530.523380][T14345] do_sys_openat2+0x10d/0x1e0 [ 530.523406][T14345] ? __pfx_do_sys_openat2+0x10/0x10 [ 530.523437][T14345] ? ktime_get+0x1a7/0x300 [ 530.523455][T14345] ? find_held_lock+0x2b/0x80 [ 530.523479][T14345] __x64_sys_openat+0x12d/0x210 [ 530.523505][T14345] ? __pfx___x64_sys_openat+0x10/0x10 [ 530.523539][T14345] do_syscall_64+0x106/0xf80 [ 530.523556][T14345] ? clear_bhb_loop+0x40/0x90 [ 530.523579][T14345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.523598][T14345] RIP: 0033:0x7f81ded9c799 [ 530.523615][T14345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.523631][T14345] RSP: 002b:00007f81dfc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 530.523649][T14345] RAX: ffffffffffffffda RBX: 00007f81df015fa0 RCX: 00007f81ded9c799 [ 530.523661][T14345] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 530.523671][T14345] RBP: 00007f81dee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 530.523681][T14345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 530.523692][T14345] R13: 00007f81df016038 R14: 00007f81df015fa0 R15: 00007fff97d0d6d8 [ 530.523721][T14345] [ 532.332191][T14372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 532.658937][ T30] audit: type=1807 audit(4294969453.792:9): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 532.710763][ T30] audit: type=1802 audit(4294969453.812:10): pid=14376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1685" res=0 errno=0 [ 532.909721][T14376] ima: policy update failed [ 532.931741][ T30] audit: type=1802 audit(4294969454.064:11): pid=14376 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1685" res=0 errno=0 [ 533.356320][T14391] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 533.431302][T14386] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 533.503087][T14391] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 533.585178][T14391] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 533.666069][T14391] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 533.763292][T14391] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 533.890741][T14391] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 533.938636][T14403] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1688'. [ 534.020835][T14391] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 534.132801][T14408] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1688'. [ 535.291825][T14423] kAFS: Invalid Command on /proc/fs/afs/cells file [ 535.757276][T14429] openvswitch: netlink: IP tunnel TTL not specified. [ 536.856508][T14460] tc_dump_action: action bad kind [ 538.480788][T14505] mkiss: ax0: crc mode is auto. [ 539.571491][T14590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1710'. [ 540.570109][T14609] FAULT_INJECTION: forcing a failure. [ 540.570109][T14609] name failslab, interval 1, probability 0, space 0, times 0 [ 540.654844][T14609] CPU: 0 UID: 0 PID: 14609 Comm: syz.0.1711 Tainted: G U L syzkaller #0 PREEMPT(full) [ 540.654879][T14609] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 540.654886][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 540.654897][T14609] Call Trace: [ 540.654904][T14609] [ 540.654911][T14609] dump_stack_lvl+0x100/0x190 [ 540.654944][T14609] should_fail_ex.cold+0x5/0xa [ 540.654966][T14609] should_failslab+0xc2/0x120 [ 540.654988][T14609] __kvmalloc_node_noprof+0xfa/0xa00 [ 540.655005][T14609] ? traverse.part.0.constprop.0+0x397/0x650 [ 540.655042][T14609] traverse.part.0.constprop.0+0x397/0x650 [ 540.655080][T14609] seq_read_iter+0x93f/0x1270 [ 540.655112][T14609] ? __pfx_aa_file_perm+0x10/0x10 [ 540.655146][T14609] proc_reg_read_iter+0x11b/0x310 [ 540.655177][T14609] do_iter_readv_writev+0x60d/0x920 [ 540.655207][T14609] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 540.655242][T14609] ? rw_verify_area+0xce/0x6d0 [ 540.655272][T14609] vfs_readv+0x4d3/0x8d0 [ 540.655305][T14609] ? __pfx_vfs_readv+0x10/0x10 [ 540.655348][T14609] ? __fget_files+0x21f/0x3d0 [ 540.655372][T14609] ? do_preadv+0x1ac/0x270 [ 540.655398][T14609] do_preadv+0x1ac/0x270 [ 540.655428][T14609] ? __pfx_do_preadv+0x10/0x10 [ 540.655463][T14609] do_syscall_64+0x106/0xf80 [ 540.655480][T14609] ? clear_bhb_loop+0x40/0x90 [ 540.655503][T14609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.655522][T14609] RIP: 0033:0x7f65e099c799 [ 540.655537][T14609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.655562][T14609] RSP: 002b:00007f65e17ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 540.655580][T14609] RAX: ffffffffffffffda RBX: 00007f65e0c16090 RCX: 00007f65e099c799 [ 540.655591][T14609] RDX: 0000000000000026 RSI: 0000200000009180 RDI: 0000000000000008 [ 540.655602][T14609] RBP: 00007f65e0a32c99 R08: 0000000000000005 R09: 0000000000000000 [ 540.655613][T14609] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 540.655623][T14609] R13: 00007f65e0c16128 R14: 00007f65e0c16090 R15: 00007ffcd01bd1e8 [ 540.655646][T14609] [ 541.948239][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1714'. [ 542.101255][T14617] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1714'. [ 544.188906][T14685] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1723'. [ 544.736470][T14702] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1726'. [ 545.054220][T14702] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1726'. [ 545.608640][T14695] tc_dump_action: action bad kind [ 546.398883][T14738] netlink: 314 bytes leftover after parsing attributes in process `syz.3.1734'. [ 547.289214][T14743] block2mtd: illegal erase size [ 547.866501][T14767] mkiss: ax0: crc mode is auto. [ 548.159120][T14781] FAULT_INJECTION: forcing a failure. [ 548.159120][T14781] name failslab, interval 1, probability 0, space 0, times 0 [ 548.195928][T14785] mkiss: ax0: crc mode is auto. [ 548.236253][T14781] CPU: 0 UID: 0 PID: 14781 Comm: syz.3.1751 Tainted: G U L syzkaller #0 PREEMPT(full) [ 548.236286][T14781] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 548.236293][T14781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 548.236304][T14781] Call Trace: [ 548.236311][T14781] [ 548.236318][T14781] dump_stack_lvl+0x100/0x190 [ 548.236352][T14781] should_fail_ex.cold+0x5/0xa [ 548.236374][T14781] should_failslab+0xc2/0x120 [ 548.236396][T14781] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 548.236425][T14781] ? ptlock_alloc+0x1f/0x70 [ 548.236455][T14781] ptlock_alloc+0x1f/0x70 [ 548.236480][T14781] pte_alloc_one+0x82/0x3d0 [ 548.236501][T14781] do_fault+0x88e/0x18e0 [ 548.236523][T14781] ? __pmd_alloc+0x3fb/0x950 [ 548.236547][T14781] __handle_mm_fault+0x1815/0x2b60 [ 548.236576][T14781] ? mt_find+0x45e/0x8e0 [ 548.236596][T14781] ? __pfx___handle_mm_fault+0x10/0x10 [ 548.236621][T14781] ? __pfx_mt_find+0x10/0x10 [ 548.236657][T14781] handle_mm_fault+0x36d/0xa20 [ 548.236688][T14781] __get_user_pages+0xf9c/0x34d0 [ 548.236718][T14781] ? __pfx___get_user_pages+0x10/0x10 [ 548.236746][T14781] populate_vma_page_range+0x267/0x3f0 [ 548.236781][T14781] ? __pfx_populate_vma_page_range+0x10/0x10 [ 548.236803][T14781] ? __pfx_find_vma_intersection+0x10/0x10 [ 548.236825][T14781] ? __pfx_apply_vma_lock_flags+0x10/0x10 [ 548.236857][T14781] __mm_populate+0x107/0x3a0 [ 548.236881][T14781] ? __pfx___mm_populate+0x10/0x10 [ 548.236907][T14781] ? up_write+0x290/0x4f0 [ 548.236936][T14781] do_mlock+0x3f0/0x7f0 [ 548.236967][T14781] ? __pfx_do_mlock+0x10/0x10 [ 548.236993][T14781] ? __x64_sys_futex+0x34f/0x4d0 [ 548.237018][T14781] ? __x64_sys_futex+0x358/0x4d0 [ 548.237045][T14781] ? xfd_validate_state+0x129/0x190 [ 548.237078][T14781] __x64_sys_mlock+0x59/0x80 [ 548.237107][T14781] do_syscall_64+0x106/0xf80 [ 548.237124][T14781] ? clear_bhb_loop+0x40/0x90 [ 548.237147][T14781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.237166][T14781] RIP: 0033:0x7f9c6d19c799 [ 548.237182][T14781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.237199][T14781] RSP: 002b:00007f9c6e111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 548.237217][T14781] RAX: ffffffffffffffda RBX: 00007f9c6d415fa0 RCX: 00007f9c6d19c799 [ 548.237229][T14781] RDX: 0000000000000000 RSI: 0000000000080006 RDI: 0000000000000112 [ 548.237239][T14781] RBP: 00007f9c6d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 548.237250][T14781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.237260][T14781] R13: 00007f9c6d416038 R14: 00007f9c6d415fa0 R15: 00007ffefc24c378 [ 548.237283][T14781] [ 548.881937][T14776] tc_dump_action: action bad kind [ 549.317154][T14802] ALUA LU Group already has a valid ID, ignoring request [ 549.330100][ T30] audit: type=1800 audit(4294967299.553:12): pid=14802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1745" name="lu_gp_id" dev="configfs" ino=50348 res=0 errno=0 [ 552.861527][T14886] tc_dump_action: action bad kind [ 554.711464][T14919] cgroup: fork rejected by pids controller in /syz1 [ 556.342861][T14993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.443542][T14993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.978175][T15005] can: request_module (can-proto-0) failed. [ 557.509465][T13576] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 557.517438][T13576] Bluetooth: hci0: Invalid handle: 0x3a4a > 0x0eff [ 558.217422][T15038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 558.559948][T15031] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1775'. [ 559.336643][T15078] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1787'. [ 559.731644][T15062] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1787'. [ 559.913249][T15091] hub 1-0:1.0: USB hub found [ 559.950653][T15091] hub 1-0:1.0: 1 port detected [ 560.178865][T15098] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 560.219212][T15098] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 560.563415][T15115] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1794'. [ 561.598526][T15133] futex_wake_op: syz.1.1797 tries to shift op by -2048; fix this program [ 561.717866][T15133] futex_wake_op: syz.1.1797 tries to shift op by -2048; fix this program [ 561.858791][T15139] input: jJǸ-9%vJ86 as /devices/virtual/input/input20 [ 562.483510][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.494295][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.931369][T15147] can: request_module (can-proto-0) failed. [ 566.925953][T15239] nvme_fcloop: unknown parameter or missing value '' [ 567.788708][T15262] futex_wake_op: syz.1.1812 tries to shift op by -2048; fix this program [ 567.927618][T15264] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 570.757289][T15316] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1824'. [ 570.799638][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1824'. [ 571.066388][T15326] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 571.247188][T15330] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 571.305772][T15330] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 572.613849][T15373] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1831'. [ 573.925206][T15406] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 573.932562][T15406] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 576.047803][T15441] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1843'. [ 579.471925][T15503] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1854'. [ 579.582400][T15466] can: request_module (can-proto-0) failed. [ 582.084520][T15351] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 582.992763][T15581] netlink: 'syz.3.1863': attribute type 11 has an invalid length. [ 584.468852][T15603] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 584.996298][T15616] futex_wake_op: syz.2.1869 tries to shift op by -2048; fix this program [ 586.174136][T15646] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1872'. [ 587.098133][T15670] netlink: 'syz.0.1876': attribute type 11 has an invalid length. [ 587.758469][T15693] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1878'. [ 588.555880][T15703] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1880'. [ 588.890209][T15711] FAULT_INJECTION: forcing a failure. [ 588.890209][T15711] name failslab, interval 1, probability 0, space 0, times 0 [ 588.944890][T15711] CPU: 0 UID: 0 PID: 15711 Comm: syz.3.1882 Tainted: G U L syzkaller #0 PREEMPT(full) [ 588.944924][T15711] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 588.944931][T15711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.944942][T15711] Call Trace: [ 588.944948][T15711] [ 588.944955][T15711] dump_stack_lvl+0x100/0x190 [ 588.944988][T15711] should_fail_ex.cold+0x5/0xa [ 588.945010][T15711] ? qrtr_tun_write_iter+0xc1/0x1b0 [ 588.945033][T15711] should_failslab+0xc2/0x120 [ 588.945054][T15711] __kmalloc_noprof+0xe0/0x850 [ 588.945088][T15711] qrtr_tun_write_iter+0xc1/0x1b0 [ 588.945114][T15711] vfs_write+0x6ac/0x1070 [ 588.945134][T15711] ? __pfx_qrtr_tun_write_iter+0x10/0x10 [ 588.945160][T15711] ? __pfx_vfs_write+0x10/0x10 [ 588.945176][T15711] ? find_held_lock+0x2b/0x80 [ 588.945207][T15711] ksys_write+0x12a/0x250 [ 588.945232][T15711] ? __pfx_ksys_write+0x10/0x10 [ 588.945256][T15711] do_syscall_64+0x106/0xf80 [ 588.945273][T15711] ? clear_bhb_loop+0x40/0x90 [ 588.945295][T15711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.945314][T15711] RIP: 0033:0x7f9c6d19c799 [ 588.945330][T15711] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.945347][T15711] RSP: 002b:00007f9c6e0f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 588.945366][T15711] RAX: ffffffffffffffda RBX: 00007f9c6d416090 RCX: 00007f9c6d19c799 [ 588.945377][T15711] RDX: 0000000000000081 RSI: 0000000000000000 RDI: 0000000000000004 [ 588.945388][T15711] RBP: 00007f9c6d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 588.945399][T15711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.945409][T15711] R13: 00007f9c6d416128 R14: 00007f9c6d416090 R15: 00007ffefc24c378 [ 588.945432][T15711] [ 590.823071][T15734] zswap: compressor not available [ 591.262590][T15750] netlink: 'syz.2.1890': attribute type 11 has an invalid length. [ 591.275507][T15754] FAULT_INJECTION: forcing a failure. [ 591.275507][T15754] name failslab, interval 1, probability 0, space 0, times 0 [ 591.316568][T15754] CPU: 0 UID: 0 PID: 15754 Comm: syz.3.1892 Tainted: G U L syzkaller #0 PREEMPT(full) [ 591.316600][T15754] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 591.316607][T15754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.316618][T15754] Call Trace: [ 591.316624][T15754] [ 591.316632][T15754] dump_stack_lvl+0x100/0x190 [ 591.316664][T15754] should_fail_ex.cold+0x5/0xa [ 591.316687][T15754] ? tomoyo_encode2+0xfb/0x3c0 [ 591.316714][T15754] should_failslab+0xc2/0x120 [ 591.316734][T15754] __kmalloc_noprof+0xe0/0x850 [ 591.316763][T15754] ? rcu_is_watching+0x12/0xc0 [ 591.316795][T15754] tomoyo_encode2+0xfb/0x3c0 [ 591.316825][T15754] tomoyo_encode+0x29/0x50 [ 591.316850][T15754] tomoyo_realpath_from_path+0x18c/0x690 [ 591.316882][T15754] tomoyo_check_open_permission+0x2af/0x3c0 [ 591.316906][T15754] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 591.316959][T15754] ? do_raw_spin_lock+0x128/0x260 [ 591.316988][T15754] ? path_get+0x61/0x80 [ 591.317012][T15754] tomoyo_file_open+0x6b/0x90 [ 591.317030][T15754] security_file_open+0xb5/0x1e0 [ 591.317055][T15754] do_dentry_open+0x5aa/0x1660 [ 591.317076][T15754] ? security_inode_permission+0xbf/0x250 [ 591.317102][T15754] vfs_open+0x82/0x3f0 [ 591.317129][T15754] path_openat+0x208c/0x31a0 [ 591.317157][T15754] ? __pfx_path_openat+0x10/0x10 [ 591.317184][T15754] do_file_open+0x20e/0x430 [ 591.317206][T15754] ? __pfx_do_file_open+0x10/0x10 [ 591.317241][T15754] ? alloc_fd+0x476/0x790 [ 591.317262][T15754] ? do_getname+0x191/0x390 [ 591.317289][T15754] do_sys_openat2+0x10d/0x1e0 [ 591.317315][T15754] ? __pfx_do_sys_openat2+0x10/0x10 [ 591.317350][T15754] __x64_sys_openat+0x12d/0x210 [ 591.317376][T15754] ? __pfx___x64_sys_openat+0x10/0x10 [ 591.317411][T15754] do_syscall_64+0x106/0xf80 [ 591.317429][T15754] ? clear_bhb_loop+0x40/0x90 [ 591.317452][T15754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.317471][T15754] RIP: 0033:0x7f9c6d19c799 [ 591.317488][T15754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.317507][T15754] RSP: 002b:00007f9c6e111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 591.317526][T15754] RAX: ffffffffffffffda RBX: 00007f9c6d415fa0 RCX: 00007f9c6d19c799 [ 591.317538][T15754] RDX: 0000000000040001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 591.317549][T15754] RBP: 00007f9c6d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 591.317561][T15754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.317571][T15754] R13: 00007f9c6d416038 R14: 00007f9c6d415fa0 R15: 00007ffefc24c378 [ 591.317595][T15754] [ 591.317614][T15754] ERROR: Out of memory at tomoyo_realpath_from_path. [ 592.619896][T15780] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 592.765608][T15786] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 593.849248][T15338] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 593.858037][T15338] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 594.376605][T15837] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1904'. [ 595.972569][T15869] FAULT_INJECTION: forcing a failure. [ 595.972569][T15869] name failslab, interval 1, probability 0, space 0, times 0 [ 596.106233][T15869] CPU: 0 UID: 0 PID: 15869 Comm: syz.0.1913 Tainted: G U L syzkaller #0 PREEMPT(full) [ 596.106265][T15869] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 596.106273][T15869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 596.106284][T15869] Call Trace: [ 596.106290][T15869] [ 596.106299][T15869] dump_stack_lvl+0x100/0x190 [ 596.106333][T15869] should_fail_ex.cold+0x5/0xa [ 596.106355][T15869] should_failslab+0xc2/0x120 [ 596.106378][T15869] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 596.106408][T15869] ? security_file_alloc+0x34/0x2c0 [ 596.106433][T15869] ? trace_kmem_cache_alloc+0xf3/0x120 [ 596.106458][T15869] security_file_alloc+0x34/0x2c0 [ 596.106484][T15869] init_file+0x95/0x480 [ 596.106507][T15869] alloc_empty_file_noaccount+0x3d/0xd0 [ 596.106534][T15869] alloc_file_pseudo_noaccount+0x13a/0x230 [ 596.106562][T15869] ? __pfx_alloc_file_pseudo_noaccount+0x10/0x10 [ 596.106591][T15869] ? iput+0x3a/0x40 [ 596.106617][T15869] bdev_file_open_by_dev+0x13a/0x210 [ 596.106647][T15869] blkdev_bszset+0x170/0x240 [ 596.106675][T15869] ? __pfx_blkdev_bszset+0x10/0x10 [ 596.106703][T15869] ? find_held_lock+0x2b/0x80 [ 596.106721][T15869] ? __fget_files+0x215/0x3d0 [ 596.106738][T15869] ? hook_file_ioctl_common+0x146/0x410 [ 596.106764][T15869] blkdev_ioctl+0x513/0x6f0 [ 596.106792][T15869] ? __pfx_blkdev_ioctl+0x10/0x10 [ 596.106822][T15869] ? __pfx_blkdev_ioctl+0x10/0x10 [ 596.106851][T15869] __x64_sys_ioctl+0x18e/0x210 [ 596.106888][T15869] do_syscall_64+0x106/0xf80 [ 596.106906][T15869] ? clear_bhb_loop+0x40/0x90 [ 596.106929][T15869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.106950][T15869] RIP: 0033:0x7f65e099c799 [ 596.106966][T15869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.106984][T15869] RSP: 002b:00007f65e17eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.107004][T15869] RAX: ffffffffffffffda RBX: 00007f65e0c15fa0 RCX: 00007f65e099c799 [ 596.107016][T15869] RDX: 00002000000000c0 RSI: 0000000040081271 RDI: 0000000000000006 [ 596.107028][T15869] RBP: 00007f65e0a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 596.107039][T15869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.107050][T15869] R13: 00007f65e0c16038 R14: 00007f65e0c15fa0 R15: 00007ffcd01bd1e8 [ 596.107073][T15869] [ 596.790100][T15889] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1918'. [ 596.803228][T15893] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1917'. [ 597.117189][T15906] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 597.320626][T15909] FAULT_INJECTION: forcing a failure. [ 597.320626][T15909] name failslab, interval 1, probability 0, space 0, times 0 [ 597.391139][T15909] CPU: 0 UID: 0 PID: 15909 Comm: syz.3.1921 Tainted: G U L syzkaller #0 PREEMPT(full) [ 597.391180][T15909] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 597.391188][T15909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.391199][T15909] Call Trace: [ 597.391205][T15909] [ 597.391213][T15909] dump_stack_lvl+0x100/0x190 [ 597.391247][T15909] should_fail_ex.cold+0x5/0xa [ 597.391271][T15909] should_failslab+0xc2/0x120 [ 597.391293][T15909] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 597.391324][T15909] ? shmem_alloc_inode+0x25/0x50 [ 597.391349][T15909] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 597.391372][T15909] shmem_alloc_inode+0x25/0x50 [ 597.391394][T15909] alloc_inode+0x68/0x250 [ 597.391420][T15909] new_inode+0x22/0x1c0 [ 597.391448][T15909] shmem_get_inode+0x212/0x1040 [ 597.391477][T15909] ? __pfx_shmem_get_inode+0x10/0x10 [ 597.391502][T15909] ? map_id_range_up+0x2ce/0x3b0 [ 597.391522][T15909] ? make_vfsuid+0xec/0x140 [ 597.391547][T15909] ? __pfx_make_vfsuid+0x10/0x10 [ 597.391574][T15909] ? current_check_access_path+0x281/0x460 [ 597.391603][T15909] shmem_mknod+0x20c/0x470 [ 597.391630][T15909] ? __pfx_shmem_mknod+0x10/0x10 [ 597.391654][T15909] ? security_inode_permission+0xbf/0x250 [ 597.391679][T15909] ? inode_permission+0x374/0x620 [ 597.391709][T15909] shmem_mkdir+0x31/0x80 [ 597.391734][T15909] vfs_mkdir+0x361/0x850 [ 597.391764][T15909] filename_mkdirat+0x48b/0x5e0 [ 597.391789][T15909] ? __pfx_filename_mkdirat+0x10/0x10 [ 597.391811][T15909] ? strncpy_from_user+0x19d/0x2d0 [ 597.391836][T15909] ? do_getname+0x191/0x390 [ 597.391869][T15909] __x64_sys_mkdir+0x6b/0x90 [ 597.391891][T15909] do_syscall_64+0x106/0xf80 [ 597.391909][T15909] ? clear_bhb_loop+0x40/0x90 [ 597.391931][T15909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.391951][T15909] RIP: 0033:0x7f9c6d19c799 [ 597.391967][T15909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.391986][T15909] RSP: 002b:00007f9c6e111028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 597.392004][T15909] RAX: ffffffffffffffda RBX: 00007f9c6d415fa0 RCX: 00007f9c6d19c799 [ 597.392016][T15909] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000200000000100 [ 597.392027][T15909] RBP: 00007f9c6d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 597.392038][T15909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.392049][T15909] R13: 00007f9c6d416038 R14: 00007f9c6d415fa0 R15: 00007ffefc24c378 [ 597.392072][T15909] [ 598.319373][T15926] tipc: Started in network mode [ 598.331815][T15926] tipc: Node identity ffffffff, cluster identity 4711 [ 598.353280][T15926] tipc: Node number set to 4294967295 [ 598.389002][T15926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1926'. [ 598.560544][T15909] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 598.587809][T15909] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 602.055000][T15953] kexec: Could not allocate control_code_buffer [ 602.589190][T15999] sd 0:0:1:0: PR command failed: 1026 [ 602.594684][T15999] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 602.639307][T15999] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 602.679124][T16001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1943'. [ 602.728318][T16002] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1943'. [ 603.593306][T16007] Invalid ELF header magic: != ELF [ 604.073964][T16028] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1949'. [ 604.184482][T16030] FAULT_INJECTION: forcing a failure. [ 604.184482][T16030] name failslab, interval 1, probability 0, space 0, times 0 [ 604.226082][T16030] CPU: 0 UID: 0 PID: 16030 Comm: syz.2.1950 Tainted: G U L syzkaller #0 PREEMPT(full) [ 604.226118][T16030] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 604.226126][T16030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.226137][T16030] Call Trace: [ 604.226145][T16030] [ 604.226153][T16030] dump_stack_lvl+0x100/0x190 [ 604.226187][T16030] should_fail_ex.cold+0x5/0xa [ 604.226210][T16030] ? tomoyo_encode2+0xfb/0x3c0 [ 604.226237][T16030] should_failslab+0xc2/0x120 [ 604.226258][T16030] __kmalloc_noprof+0xe0/0x850 [ 604.226287][T16030] ? d_absolute_path+0x136/0x1b0 [ 604.226317][T16030] tomoyo_encode2+0xfb/0x3c0 [ 604.226348][T16030] tomoyo_encode+0x29/0x50 [ 604.226373][T16030] tomoyo_realpath_from_path+0x18c/0x690 [ 604.226406][T16030] tomoyo_path_number_perm+0x23c/0x580 [ 604.226428][T16030] ? tomoyo_path_number_perm+0x22e/0x580 [ 604.226453][T16030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 604.226484][T16030] ? do_raw_spin_lock+0x128/0x260 [ 604.226516][T16030] ? find_held_lock+0x2b/0x80 [ 604.226547][T16030] ? __pfx_d_add+0x10/0x10 [ 604.226570][T16030] ? d_alloc+0x176/0x1e0 [ 604.226591][T16030] ? current_check_access_path+0x281/0x460 [ 604.226619][T16030] ? __pfx_current_check_access_path+0x10/0x10 [ 604.226647][T16030] ? simple_lookup+0x105/0x1d0 [ 604.226665][T16030] ? lookup_one_qstr_excl+0xb3/0x250 [ 604.226693][T16030] tomoyo_path_mkdir+0x9b/0xe0 [ 604.226723][T16030] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 604.226774][T16030] security_path_mkdir+0x154/0x2e0 [ 604.226804][T16030] filename_mkdirat+0x168/0x5e0 [ 604.226828][T16030] ? __pfx_filename_mkdirat+0x10/0x10 [ 604.226851][T16030] ? strncpy_from_user+0x19d/0x2d0 [ 604.226877][T16030] ? do_getname+0x191/0x390 [ 604.226904][T16030] __x64_sys_mkdir+0x6b/0x90 [ 604.226927][T16030] do_syscall_64+0x106/0xf80 [ 604.226945][T16030] ? clear_bhb_loop+0x40/0x90 [ 604.226968][T16030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.226988][T16030] RIP: 0033:0x7f81ded9c799 [ 604.227004][T16030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.227023][T16030] RSP: 002b:00007f81dfc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 604.227041][T16030] RAX: ffffffffffffffda RBX: 00007f81df015fa0 RCX: 00007f81ded9c799 [ 604.227053][T16030] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000200000000100 [ 604.227064][T16030] RBP: 00007f81dee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 604.227076][T16030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.227087][T16030] R13: 00007f81df016038 R14: 00007f81df015fa0 R15: 00007fff97d0d6d8 [ 604.227112][T16030] [ 604.229353][T16030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 605.182222][T16056] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1955'. [ 605.338732][T16062] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 605.366648][T16061] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1957'. [ 605.400007][T16062] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 605.561289][T16061] bond0: (slave bond_slave_0): Releasing backup interface [ 606.146949][T16088] FAULT_INJECTION: forcing a failure. [ 606.146949][T16088] name failslab, interval 1, probability 0, space 0, times 0 [ 606.242339][T16088] CPU: 0 UID: 0 PID: 16088 Comm: syz.3.1962 Tainted: G U L syzkaller #0 PREEMPT(full) [ 606.242374][T16088] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 606.242382][T16088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 606.242394][T16088] Call Trace: [ 606.242401][T16088] [ 606.242408][T16088] dump_stack_lvl+0x100/0x190 [ 606.242442][T16088] should_fail_ex.cold+0x5/0xa [ 606.242465][T16088] should_failslab+0xc2/0x120 [ 606.242487][T16088] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 606.242517][T16088] ? __d_alloc+0x34/0xa80 [ 606.242540][T16088] ? security_inode_alloc+0xcf/0x2c0 [ 606.242564][T16088] __d_alloc+0x34/0xa80 [ 606.242585][T16088] ? __ns_ref_active_get+0x9f/0x1b0 [ 606.242612][T16088] path_from_stashed+0x427/0x750 [ 606.242633][T16088] ? do_raw_spin_unlock+0x145/0x1e0 [ 606.242665][T16088] ns_get_path+0x60/0x80 [ 606.242686][T16088] proc_ns_get_link+0x121/0x230 [ 606.242714][T16088] ? __pfx_proc_ns_get_link+0x10/0x10 [ 606.242744][T16088] ? atime_needs_update+0x8b/0x6b0 [ 606.242773][T16088] pick_link+0xd17/0x13c0 [ 606.242800][T16088] ? __pfx_proc_ns_get_link+0x10/0x10 [ 606.242830][T16088] step_into_slowpath+0x9ba/0xf90 [ 606.242863][T16088] ? __pfx_step_into_slowpath+0x10/0x10 [ 606.242891][T16088] ? find_held_lock+0x2b/0x80 [ 606.242916][T16088] path_openat+0xf95/0x31a0 [ 606.242943][T16088] ? __pfx_path_openat+0x10/0x10 [ 606.242979][T16088] do_file_open+0x20e/0x430 [ 606.243002][T16088] ? __pfx_do_file_open+0x10/0x10 [ 606.243036][T16088] ? alloc_fd+0x476/0x790 [ 606.243058][T16088] ? do_getname+0x191/0x390 [ 606.243085][T16088] do_sys_openat2+0x10d/0x1e0 [ 606.243111][T16088] ? __pfx_do_sys_openat2+0x10/0x10 [ 606.243138][T16088] ? __fget_files+0x21f/0x3d0 [ 606.243162][T16088] __x64_sys_openat+0x12d/0x210 [ 606.243189][T16088] ? __pfx___x64_sys_openat+0x10/0x10 [ 606.243224][T16088] do_syscall_64+0x106/0xf80 [ 606.243242][T16088] ? clear_bhb_loop+0x40/0x90 [ 606.243265][T16088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.243285][T16088] RIP: 0033:0x7f9c6d15cfce [ 606.243300][T16088] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 606.243318][T16088] RSP: 002b:00007f9c6e0efec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 606.243338][T16088] RAX: ffffffffffffffda RBX: 00007f9c6e0f06c0 RCX: 00007f9c6d15cfce [ 606.243349][T16088] RDX: 0000000000000002 RSI: 00007f9c6e0eff90 RDI: ffffffffffffff9c [ 606.243361][T16088] RBP: 00007f9c6d232c99 R08: 0000000000000000 R09: 0000000000000000 [ 606.243372][T16088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.243383][T16088] R13: 00007f9c6d416128 R14: 00007f9c6d416090 R15: 00007ffefc24c378 [ 606.243405][T16088] [ 607.671708][T16115] FAULT_INJECTION: forcing a failure. [ 607.671708][T16115] name failslab, interval 1, probability 0, space 0, times 0 [ 607.714726][T16115] CPU: 0 UID: 0 PID: 16115 Comm: syz.0.1968 Tainted: G U L syzkaller #0 PREEMPT(full) [ 607.714762][T16115] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 607.714771][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.714781][T16115] Call Trace: [ 607.714788][T16115] [ 607.714796][T16115] dump_stack_lvl+0x100/0x190 [ 607.714829][T16115] should_fail_ex.cold+0x5/0xa [ 607.714852][T16115] ? tomoyo_encode2+0xfb/0x3c0 [ 607.714879][T16115] should_failslab+0xc2/0x120 [ 607.714901][T16115] __kmalloc_noprof+0xe0/0x850 [ 607.714929][T16115] ? d_absolute_path+0x136/0x1b0 [ 607.714960][T16115] tomoyo_encode2+0xfb/0x3c0 [ 607.715000][T16115] tomoyo_encode+0x29/0x50 [ 607.715025][T16115] tomoyo_realpath_from_path+0x18c/0x690 [ 607.715059][T16115] tomoyo_path_number_perm+0x23c/0x580 [ 607.715081][T16115] ? tomoyo_path_number_perm+0x22e/0x580 [ 607.715105][T16115] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 607.715137][T16115] ? do_raw_spin_lock+0x128/0x260 [ 607.715165][T16115] ? find_held_lock+0x2b/0x80 [ 607.715196][T16115] ? __pfx_d_add+0x10/0x10 [ 607.715220][T16115] ? d_alloc+0x176/0x1e0 [ 607.715242][T16115] ? current_check_access_path+0x281/0x460 [ 607.715271][T16115] ? __pfx_current_check_access_path+0x10/0x10 [ 607.715298][T16115] ? simple_lookup+0x105/0x1d0 [ 607.715316][T16115] ? lookup_one_qstr_excl+0xb3/0x250 [ 607.715344][T16115] tomoyo_path_mkdir+0x9b/0xe0 [ 607.715374][T16115] ? __pfx_tomoyo_path_mkdir+0x10/0x10 [ 607.715411][T16115] security_path_mkdir+0x154/0x2e0 [ 607.715439][T16115] filename_mkdirat+0x168/0x5e0 [ 607.715464][T16115] ? __pfx_filename_mkdirat+0x10/0x10 [ 607.715486][T16115] ? strncpy_from_user+0x19d/0x2d0 [ 607.715513][T16115] ? do_getname+0x191/0x390 [ 607.715540][T16115] __x64_sys_mkdir+0x6b/0x90 [ 607.715562][T16115] do_syscall_64+0x106/0xf80 [ 607.715580][T16115] ? clear_bhb_loop+0x40/0x90 [ 607.715603][T16115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.715623][T16115] RIP: 0033:0x7f65e099c799 [ 607.715639][T16115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.715657][T16115] RSP: 002b:00007f65e17eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 607.715676][T16115] RAX: ffffffffffffffda RBX: 00007f65e0c15fa0 RCX: 00007f65e099c799 [ 607.715688][T16115] RDX: 0000000000000000 RSI: 0000000000008001 RDI: 0000200000000100 [ 607.715699][T16115] RBP: 00007f65e0a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 607.715710][T16115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.715721][T16115] R13: 00007f65e0c16038 R14: 00007f65e0c15fa0 R15: 00007ffcd01bd1e8 [ 607.715745][T16115] [ 607.715764][T16115] ERROR: Out of memory at tomoyo_realpath_from_path. [ 608.431901][T16123] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 608.464101][T16123] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 609.092275][T16127] ACPI: Can not change Invalid GPE/Fixed Event status [ 611.231985][T16199] random: crng reseeded on system resumption [ 611.479112][T16205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1984'. [ 611.533744][T16205] nbd: must specify an index to disconnect [ 611.569092][T16199] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 611.600646][T16199] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 611.950610][ T30] audit: type=1800 audit(4294968374.381:13): pid=16210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1985" name="dbroot" dev="configfs" ino=56540 res=0 errno=0 [ 612.811386][T16188] kexec: Could not allocate control_code_buffer [ 612.828343][ T30] audit: type=1800 audit(4294968375.255:14): pid=16223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1986" name="dbroot" dev="configfs" ino=56650 res=0 errno=0 [ 613.978413][T16265] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1993'. [ 614.446767][T16269] FAULT_INJECTION: forcing a failure. [ 614.446767][T16269] name failslab, interval 1, probability 0, space 0, times 0 [ 614.486780][T16269] CPU: 0 UID: 0 PID: 16269 Comm: syz.2.1995 Tainted: G U L syzkaller #0 PREEMPT(full) [ 614.486815][T16269] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 614.486822][T16269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 614.486834][T16269] Call Trace: [ 614.486842][T16269] [ 614.486851][T16269] dump_stack_lvl+0x100/0x190 [ 614.486885][T16269] should_fail_ex.cold+0x5/0xa [ 614.486908][T16269] should_failslab+0xc2/0x120 [ 614.486930][T16269] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 614.486959][T16269] ? vm_area_dup+0x27/0x8e0 [ 614.486990][T16269] vm_area_dup+0x27/0x8e0 [ 614.487023][T16269] __split_vma+0x18c/0xd90 [ 614.487054][T16269] ? __pfx___split_vma+0x10/0x10 [ 614.487087][T16269] ? __mpol_equal+0xaf/0x340 [ 614.487117][T16269] vma_modify+0x1121/0x2250 [ 614.487151][T16269] ? __pfx_vma_modify+0x10/0x10 [ 614.487184][T16269] vma_modify_policy+0x238/0x300 [ 614.487223][T16269] ? __pfx_vma_modify_policy+0x10/0x10 [ 614.487271][T16269] mbind_range+0x175/0x550 [ 614.487299][T16269] do_mbind+0x7dc/0xfd0 [ 614.487328][T16269] ? __might_fault+0xc5/0x140 [ 614.487356][T16269] ? __pfx_do_mbind+0x10/0x10 [ 614.487386][T16269] ? _copy_from_user+0x59/0xd0 [ 614.487417][T16269] ? __pfx_get_nodes+0x10/0x10 [ 614.487441][T16269] kernel_mbind+0x1b7/0x200 [ 614.487468][T16269] ? __pfx_kernel_mbind+0x10/0x10 [ 614.487500][T16269] do_syscall_64+0x106/0xf80 [ 614.487519][T16269] ? clear_bhb_loop+0x40/0x90 [ 614.487541][T16269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.487561][T16269] RIP: 0033:0x7f81ded9c799 [ 614.487578][T16269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.487603][T16269] RSP: 002b:00007f81dfc55028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 614.487622][T16269] RAX: ffffffffffffffda RBX: 00007f81df015fa0 RCX: 00007f81ded9c799 [ 614.487635][T16269] RDX: 0000000000008003 RSI: 0000000000800605 RDI: 0000000000000000 [ 614.487646][T16269] RBP: 00007f81dee32c99 R08: 0000000000000003 R09: 0000000000000003 [ 614.487658][T16269] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 614.487669][T16269] R13: 00007f81df016038 R14: 00007f81df015fa0 R15: 00007fff97d0d6d8 [ 614.487693][T16269] [ 615.174092][T16259] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1993'. [ 616.096055][T16326] FAULT_INJECTION: forcing a failure. [ 616.096055][T16326] name failslab, interval 1, probability 0, space 0, times 0 [ 616.176447][T16326] CPU: 0 UID: 8 PID: 16326 Comm: syz.0.2002 Tainted: G U L syzkaller #0 PREEMPT(full) [ 616.176481][T16326] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 616.176489][T16326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 616.176500][T16326] Call Trace: [ 616.176507][T16326] [ 616.176515][T16326] dump_stack_lvl+0x100/0x190 [ 616.176550][T16326] should_fail_ex.cold+0x5/0xa [ 616.176573][T16326] should_failslab+0xc2/0x120 [ 616.176602][T16326] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 616.176633][T16326] ? key_alloc+0x3c5/0x1310 [ 616.176657][T16326] ? mark_held_locks+0x40/0x70 [ 616.176686][T16326] key_alloc+0x3c5/0x1310 [ 616.176718][T16326] ? __pfx_key_alloc+0x10/0x10 [ 616.176743][T16326] ? __pfx_key_default_cmp+0x10/0x10 [ 616.176772][T16326] ? __pfx_keyring_search_iterator+0x10/0x10 [ 616.176804][T16326] keyring_alloc+0x44/0xc0 [ 616.176834][T16326] look_up_user_keyrings+0x508/0x790 [ 616.176861][T16326] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 616.176883][T16326] ? futex_wake+0x1ad/0x530 [ 616.176915][T16326] ? __pfx_futex_wake+0x10/0x10 [ 616.176947][T16326] lookup_user_key+0xbb1/0x1300 [ 616.176972][T16326] ? __pfx_lookup_user_key+0x10/0x10 [ 616.177001][T16326] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 616.177028][T16326] ? __x64_sys_futex+0x34f/0x4d0 [ 616.177053][T16326] ? __x64_sys_futex+0x358/0x4d0 [ 616.177083][T16326] keyctl_session_to_parent+0x28/0xae0 [ 616.177109][T16326] __do_sys_keyctl+0x2b1/0x5a0 [ 616.177131][T16326] do_syscall_64+0x106/0xf80 [ 616.177150][T16326] ? clear_bhb_loop+0x40/0x90 [ 616.177173][T16326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.177193][T16326] RIP: 0033:0x7f65e099c799 [ 616.177209][T16326] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.177228][T16326] RSP: 002b:00007f65e17eb028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 616.177248][T16326] RAX: ffffffffffffffda RBX: 00007f65e0c15fa0 RCX: 00007f65e099c799 [ 616.177261][T16326] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 616.177272][T16326] RBP: 00007f65e0a32c99 R08: 0000000000000001 R09: 0000000000000000 [ 616.177284][T16326] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 616.177295][T16326] R13: 00007f65e0c16038 R14: 00007f65e0c15fa0 R15: 00007ffcd01bd1e8 [ 616.177318][T16326] [ 616.645150][T16351] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 616.761958][T16358] netlink: Setting conntrack mark requires 'commit' flag. [ 616.991348][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2006'. [ 617.138263][T16385] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2006'. [ 617.508681][T16396] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.342161][T16413] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.385542][T16413] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.473495][T16407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2014'. [ 620.261087][T16467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2022'. [ 620.482650][T16460] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2022'. [ 620.804815][T16475] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 621.960333][ T30] audit: type=1326 audit(4294968384.438:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16496 comm="syz.2.2028" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f81ded9c799 code=0x0 [ 622.447042][T15822] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 622.447074][T15822] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 622.462289][T15822] Bluetooth: hci2: Dropping invalid advertising data [ 622.470701][T15822] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 622.470730][T15822] Bluetooth: hci2: Dropping invalid advertising data [ 622.486356][T15822] Bluetooth: hci2: Malformed LE Event: 0x02 [ 623.311428][T16539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2034'. [ 623.563002][T16531] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2034'. [ 623.619124][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.626373][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.206634][T16576] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 625.629048][T16589] ima: policy update failed [ 625.638895][ T30] audit: type=1802 audit(4294968388.115:16): pid=16589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2042" res=0 errno=0 [ 626.284859][T16578] ima: policy update failed [ 626.305732][ T30] audit: type=1802 audit(4294968388.799:17): pid=16578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2042" res=0 errno=0 [ 626.966601][T16618] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 627.293745][T16614] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2046'. [ 628.787052][T16647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2052'. [ 629.172058][T16652] __vm_enough_memory: pid: 16652, comm: syz.0.2053, bytes: 4398046511104 not enough memory for the allocation [ 629.618837][T16653] random: crng reseeded on system resumption [ 630.167328][T16676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2057'. [ 630.410026][T16668] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2057'. [ 632.555233][T16746] can: request_module (can-proto-0) failed. [ 633.175813][T16758] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 635.833880][T16832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2081'. [ 635.998965][T16820] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2081'. [ 636.540153][T16848] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2087'. [ 636.642792][T16850] vivid-007: ================= START STATUS ================= [ 636.683285][T16850] vivid-007: Generate PTS: true [ 636.688272][T16850] vivid-007: Generate SCR: true [ 636.721907][T16850] tpg source WxH: 320x240 (Y'CbCr) [ 636.727083][T16850] tpg field: 1 [ 636.801718][T16850] tpg crop: (0,0)/320x240 [ 636.821428][T16850] tpg compose: (0,0)/320x240 [ 636.826059][T16850] tpg colorspace: 8 [ 636.863935][T16850] tpg transfer function: 0/0 [ 636.887367][T16850] tpg Y'CbCr encoding: 0/0 [ 636.907135][T16850] tpg quantization: 0/0 [ 636.949386][T16850] tpg RGB range: 0/2 [ 636.969480][T16850] vivid-007: ================== END STATUS ================== [ 638.195413][T16898] cougar: G6 mapped to F18 [ 638.221379][T16896] cougar: G6 mapped to F18 [ 638.293870][T16898] netlink: 186 bytes leftover after parsing attributes in process `syz.2.2095'. [ 638.346999][T16896] can: request_module (can-proto-5) failed. [ 641.071282][T16963] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2108'. [ 642.040237][T16987] FAULT_INJECTION: forcing a failure. [ 642.040237][T16987] name failslab, interval 1, probability 0, space 0, times 0 [ 642.091461][T16987] CPU: 0 UID: 0 PID: 16987 Comm: syz.0.2115 Tainted: G U L syzkaller #0 PREEMPT(full) [ 642.091494][T16987] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 642.091502][T16987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 642.091514][T16987] Call Trace: [ 642.091521][T16987] [ 642.091528][T16987] dump_stack_lvl+0x100/0x190 [ 642.091563][T16987] should_fail_ex.cold+0x5/0xa [ 642.091586][T16987] should_failslab+0xc2/0x120 [ 642.091608][T16987] __kvmalloc_node_noprof+0xfa/0xa00 [ 642.091626][T16987] ? traverse.part.0.constprop.0+0x397/0x650 [ 642.091658][T16987] ? fdget_pos+0x2aa/0x380 [ 642.091684][T16987] traverse.part.0.constprop.0+0x397/0x650 [ 642.091717][T16987] ? find_held_lock+0x2b/0x80 [ 642.091741][T16987] seq_lseek+0x2fb/0x430 [ 642.091776][T16987] proc_reg_llseek+0x104/0x2f0 [ 642.091809][T16987] ksys_lseek+0xf3/0x1b0 [ 642.091839][T16987] do_syscall_64+0x106/0xf80 [ 642.091858][T16987] ? clear_bhb_loop+0x40/0x90 [ 642.091882][T16987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.091902][T16987] RIP: 0033:0x7f65e099c799 [ 642.091917][T16987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.091936][T16987] RSP: 002b:00007f65e17eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 642.091955][T16987] RAX: ffffffffffffffda RBX: 00007f65e0c15fa0 RCX: 00007f65e099c799 [ 642.091967][T16987] RDX: 0000000000000001 RSI: 00000000000007fd RDI: 0000000000000003 [ 642.091979][T16987] RBP: 00007f65e17eb090 R08: 0000000000000000 R09: 0000000000000000 [ 642.091990][T16987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.092001][T16987] R13: 00007f65e0c16038 R14: 00007f65e0c15fa0 R15: 00007ffcd01bd1e8 [ 642.092025][T16987] [ 642.827352][T17005] ovs_?: entered promiscuous mode [ 642.863422][T17006] vivid-007: ================= START STATUS ================= [ 642.889370][T17006] vivid-007: Generate PTS: true [ 642.925979][T17006] vivid-007: Generate SCR: true [ 642.941835][T17006] tpg source WxH: 320x240 (Y'CbCr) [ 642.959148][T17006] tpg field: 1 [ 642.969370][T17006] tpg crop: (0,0)/320x240 [ 642.987106][T17006] tpg compose: (0,0)/320x240 [ 643.001795][T17006] tpg colorspace: 8 [ 643.013496][T17006] tpg transfer function: 0/0 [ 643.031288][T17006] tpg Y'CbCr encoding: 0/0 [ 643.044359][T17006] tpg quantization: 0/0 [ 643.058758][T17006] tpg RGB range: 0/2 [ 643.071494][T17006] vivid-007: ================== END STATUS ================== [ 643.214316][ T30] audit: type=1800 audit(4294968405.788:18): pid=17018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2123" name="dbroot" dev="configfs" ino=59923 res=0 errno=0 [ 644.543242][T17070] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2131'. [ 645.105183][T17076] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2131'. [ 649.242933][T17150] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 649.801894][T17168] FAULT_INJECTION: forcing a failure. [ 649.801894][T17168] name failslab, interval 1, probability 0, space 0, times 0 [ 649.816774][T17168] CPU: 0 UID: 0 PID: 17168 Comm: syz.0.2153 Tainted: G U L syzkaller #0 PREEMPT(full) [ 649.816810][T17168] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 649.816817][T17168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 649.816829][T17168] Call Trace: [ 649.816836][T17168] [ 649.816850][T17168] dump_stack_lvl+0x100/0x190 [ 649.816885][T17168] should_fail_ex.cold+0x5/0xa [ 649.816908][T17168] ? tomoyo_realpath_from_path+0xb6/0x690 [ 649.816937][T17168] should_failslab+0xc2/0x120 [ 649.816959][T17168] __kmalloc_noprof+0xe0/0x850 [ 649.816993][T17168] tomoyo_realpath_from_path+0xb6/0x690 [ 649.817026][T17168] tomoyo_path_number_perm+0x23c/0x580 [ 649.817049][T17168] ? tomoyo_path_number_perm+0x22e/0x580 [ 649.817074][T17168] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 649.817126][T17168] ? find_held_lock+0x2b/0x80 [ 649.817145][T17168] ? current_check_access_path+0x281/0x460 [ 649.817174][T17168] ? __pfx_current_check_access_path+0x10/0x10 [ 649.817202][T17168] ? d_alloc_parallel+0x864/0x14e0 [ 649.817235][T17168] tomoyo_path_mknod+0x164/0x190 [ 649.817266][T17168] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 649.817296][T17168] ? find_held_lock+0x2b/0x80 [ 649.817316][T17168] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 649.817340][T17168] security_path_mknod+0x161/0x300 [ 649.817380][T17168] may_o_create+0x30/0x3a0 [ 649.817412][T17168] lookup_open.isra.0+0xa0d/0x11b0 [ 649.817447][T17168] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 649.817480][T17168] ? __pfx___might_resched+0x10/0x10 [ 649.817509][T17168] ? mnt_get_write_access+0x52/0x2f0 [ 649.817540][T17168] ? __pfx_down_write+0x10/0x10 [ 649.817560][T17168] ? mnt_get_write_access+0x1e9/0x2f0 [ 649.817590][T17168] path_openat+0x2291/0x31a0 [ 649.817618][T17168] ? __pfx_path_openat+0x10/0x10 [ 649.817647][T17168] do_file_open+0x20e/0x430 [ 649.817675][T17168] ? __pfx_do_file_open+0x10/0x10 [ 649.817712][T17168] ? alloc_fd+0x476/0x790 [ 649.817734][T17168] ? do_getname+0x191/0x390 [ 649.817760][T17168] do_sys_openat2+0x10d/0x1e0 [ 649.817792][T17168] ? __pfx_do_sys_openat2+0x10/0x10 [ 649.817827][T17168] __x64_sys_openat+0x12d/0x210 [ 649.817854][T17168] ? __pfx___x64_sys_openat+0x10/0x10 [ 649.817890][T17168] do_syscall_64+0x106/0xf80 [ 649.817907][T17168] ? clear_bhb_loop+0x40/0x90 [ 649.817931][T17168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.817950][T17168] RIP: 0033:0x7f65e099c799 [ 649.817967][T17168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.817985][T17168] RSP: 002b:00007f65e17eb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 649.818003][T17168] RAX: ffffffffffffffda RBX: 00007f65e0c15fa0 RCX: 00007f65e099c799 [ 649.818015][T17168] RDX: 0000000000183841 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 649.818026][T17168] RBP: 00007f65e0a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 649.818038][T17168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.818050][T17168] R13: 00007f65e0c16038 R14: 00007f65e0c15fa0 R15: 00007ffcd01bd1e8 [ 649.818075][T17168] [ 649.818176][T17168] ERROR: Out of memory at tomoyo_realpath_from_path. [ 650.223832][T17174] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 650.245909][T17174] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2154'. [ 650.887600][T17204] FAULT_INJECTION: forcing a failure. [ 650.887600][T17204] name failslab, interval 1, probability 0, space 0, times 0 [ 650.903182][T17204] CPU: 0 UID: 0 PID: 17204 Comm: syz.2.2163 Tainted: G U L syzkaller #0 PREEMPT(full) [ 650.903225][T17204] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 650.903233][T17204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 650.903244][T17204] Call Trace: [ 650.903252][T17204] [ 650.903259][T17204] dump_stack_lvl+0x100/0x190 [ 650.903292][T17204] should_fail_ex.cold+0x5/0xa [ 650.903316][T17204] should_failslab+0xc2/0x120 [ 650.903344][T17204] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 650.903374][T17204] ? __pmd_alloc+0xbf/0x950 [ 650.903400][T17204] __pmd_alloc+0xbf/0x950 [ 650.903425][T17204] __handle_mm_fault+0xa9e/0x2b60 [ 650.903456][T17204] ? mt_find+0x45e/0x8e0 [ 650.903478][T17204] ? __pfx___handle_mm_fault+0x10/0x10 [ 650.903503][T17204] ? __pfx_mt_find+0x10/0x10 [ 650.903542][T17204] handle_mm_fault+0x36d/0xa20 [ 650.903573][T17204] __get_user_pages+0xf9c/0x34d0 [ 650.903604][T17204] ? __pfx___get_user_pages+0x10/0x10 [ 650.903633][T17204] populate_vma_page_range+0x267/0x3f0 [ 650.903659][T17204] ? __pfx_populate_vma_page_range+0x10/0x10 [ 650.903682][T17204] ? __pfx_find_vma_intersection+0x10/0x10 [ 650.903704][T17204] ? do_mmap+0x93f/0x12f0 [ 650.903729][T17204] __mm_populate+0x107/0x3a0 [ 650.903753][T17204] ? __pfx___mm_populate+0x10/0x10 [ 650.903779][T17204] ? up_write+0x290/0x4f0 [ 650.903809][T17204] vm_mmap_pgoff+0x37f/0x470 [ 650.903834][T17204] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 650.903858][T17204] ? do_futex+0x192/0x350 [ 650.903884][T17204] ? __pfx_do_futex+0x10/0x10 [ 650.903913][T17204] ksys_mmap_pgoff+0xe1/0x650 [ 650.903934][T17204] ? __x64_sys_futex+0x34f/0x4d0 [ 650.903958][T17204] ? __x64_sys_futex+0x358/0x4d0 [ 650.903983][T17204] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 650.904005][T17204] ? xfd_validate_state+0x129/0x190 [ 650.904037][T17204] __x64_sys_mmap+0x125/0x190 [ 650.904068][T17204] do_syscall_64+0x106/0xf80 [ 650.904092][T17204] ? clear_bhb_loop+0x40/0x90 [ 650.904115][T17204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.904134][T17204] RIP: 0033:0x7f81ded9c799 [ 650.904151][T17204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 650.904169][T17204] RSP: 002b:00007f81dfc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 650.904187][T17204] RAX: ffffffffffffffda RBX: 00007f81df015fa0 RCX: 00007f81ded9c799 [ 650.904207][T17204] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 650.904218][T17204] RBP: 00007f81dee32c99 R08: 0000000000000007 R09: 0000000000028000 [ 650.904229][T17204] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 650.904240][T17204] R13: 00007f81df016038 R14: 00007f81df015fa0 R15: 00007fff97d0d6d8 [ 650.904263][T17204] [ 652.792239][T17246] netlink: zone id is out of range [ 652.924256][T17246] netlink: zone id is out of range [ 653.170966][T17246] netlink: zone id is out of range [ 653.260937][T17246] netlink: zone id is out of range [ 653.291961][T17246] netlink: zone id is out of range [ 653.322345][T17246] netlink: zone id is out of range [ 653.360257][T17246] netlink: zone id is out of range [ 653.403123][T17246] netlink: zone id is out of range [ 653.479419][T17246] netlink: zone id is out of range [ 653.505275][T17246] netlink: zone id is out of range [ 653.831446][T17268] FAULT_INJECTION: forcing a failure. [ 653.831446][T17268] name failslab, interval 1, probability 0, space 0, times 0 [ 653.875110][T17271] futex_wake_op: syz.0.2178 tries to shift op by -2048; fix this program [ 653.934275][T17268] CPU: 0 UID: 0 PID: 17268 Comm: syz.2.2179 Tainted: G U L syzkaller #0 PREEMPT(full) [ 653.934310][T17268] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 653.934318][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.934329][T17268] Call Trace: [ 653.934336][T17268] [ 653.934344][T17268] dump_stack_lvl+0x100/0x190 [ 653.934378][T17268] should_fail_ex.cold+0x5/0xa [ 653.934401][T17268] should_failslab+0xc2/0x120 [ 653.934423][T17268] __kmalloc_cache_noprof+0x7a/0x6f0 [ 653.934450][T17268] ? vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 653.934478][T17268] ? vidtv_psi_pmt_table_init+0x363/0x430 [ 653.934509][T17268] vidtv_psi_pmt_stream_init+0x4e/0x3e0 [ 653.934539][T17268] vidtv_channel_si_init+0x1289/0x18d0 [ 653.934577][T17268] vidtv_mux_init+0x526/0xbf0 [ 653.934599][T17268] vidtv_start_feed+0x33e/0x4c0 [ 653.934623][T17268] ? __pfx_vidtv_start_feed+0x10/0x10 [ 653.934648][T17268] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 653.934677][T17268] ? mark_held_locks+0x40/0x70 [ 653.934706][T17268] ? __pfx_vidtv_start_feed+0x10/0x10 [ 653.934730][T17268] dmx_ts_feed_start_filtering+0xf6/0x220 [ 653.934760][T17268] dvb_dmxdev_start_feed+0x273/0x3f0 [ 653.934790][T17268] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 653.934816][T17268] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 653.934841][T17268] dvb_demux_do_ioctl+0xe64/0x1200 [ 653.934873][T17268] dvb_usercopy+0x167/0x340 [ 653.934892][T17268] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 653.934917][T17268] ? __pfx_dvb_usercopy+0x10/0x10 [ 653.934946][T17268] ? __fget_files+0x21f/0x3d0 [ 653.934970][T17268] dvb_demux_ioctl+0x29/0x40 [ 653.934990][T17268] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 653.935011][T17268] __x64_sys_ioctl+0x18e/0x210 [ 653.935042][T17268] do_syscall_64+0x106/0xf80 [ 653.935060][T17268] ? clear_bhb_loop+0x40/0x90 [ 653.935090][T17268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.935110][T17268] RIP: 0033:0x7f81ded9c799 [ 653.935127][T17268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.935144][T17268] RSP: 002b:00007f81dfc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 653.935163][T17268] RAX: ffffffffffffffda RBX: 00007f81df015fa0 RCX: 00007f81ded9c799 [ 653.935175][T17268] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 653.935187][T17268] RBP: 00007f81dee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 653.935199][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.935210][T17268] R13: 00007f81df016038 R14: 00007f81df015fa0 R15: 00007fff97d0d6d8 [ 653.935235][T17268] [ 653.935296][T17268] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 654.204592][T17268] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 654.213031][T17268] CPU: 0 UID: 0 PID: 17268 Comm: syz.2.2179 Tainted: G U L syzkaller #0 PREEMPT(full) [ 654.224403][T17268] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 654.229585][T17268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.239808][T17268] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 654.245724][T17268] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 5d 33 db f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 39 33 db f9 4d 85 e4 [ 654.265852][T17268] RSP: 0018:ffffc900037f7a10 EFLAGS: 00010247 [ 654.271942][T17268] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000d5f2000 [ 654.279906][T17268] RDX: 0000000000000000 RSI: ffffffff882d1063 RDI: 0000000000000005 [ 654.287870][T17268] RBP: ffff888034af2e20 R08: 0000000000000000 R09: 4453534204050000 [ 654.295842][T17268] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 654.303816][T17268] R13: ffff88807ba8f4c0 R14: ffff8880298dcbc0 R15: ffff88807ba8f7c0 [ 654.311825][T17268] FS: 00007f81dfc556c0(0000) GS:ffff888124343000(0000) knlGS:0000000000000000 [ 654.320776][T17268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 654.327362][T17268] CR2: 0000001b30f21ff8 CR3: 0000000043170000 CR4: 00000000003526f0 [ 654.335423][T17268] Call Trace: [ 654.338697][T17268] [ 654.341711][T17268] vidtv_channel_si_init+0x12fc/0x18d0 [ 654.347188][T17268] vidtv_mux_init+0x526/0xbf0 [ 654.351959][T17268] vidtv_start_feed+0x33e/0x4c0 [ 654.356910][T17268] ? __pfx_vidtv_start_feed+0x10/0x10 [ 654.362291][T17268] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 654.368901][T17268] ? mark_held_locks+0x40/0x70 [ 654.373704][T17268] ? __pfx_vidtv_start_feed+0x10/0x10 [ 654.379096][T17268] dmx_ts_feed_start_filtering+0xf6/0x220 [ 654.384844][T17268] dvb_dmxdev_start_feed+0x273/0x3f0 [ 654.390139][T17268] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 654.395609][T17268] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 654.400810][T17268] dvb_demux_do_ioctl+0xe64/0x1200 [ 654.405943][T17268] dvb_usercopy+0x167/0x340 [ 654.410445][T17268] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 654.415995][T17268] ? __pfx_dvb_usercopy+0x10/0x10 [ 654.421019][T17268] ? __fget_files+0x21f/0x3d0 [ 654.425781][T17268] dvb_demux_ioctl+0x29/0x40 [ 654.430544][T17268] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 654.435827][T17268] __x64_sys_ioctl+0x18e/0x210 [ 654.440605][T17268] do_syscall_64+0x106/0xf80 [ 654.445195][T17268] ? clear_bhb_loop+0x40/0x90 [ 654.449889][T17268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.455778][T17268] RIP: 0033:0x7f81ded9c799 [ 654.460186][T17268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.480008][T17268] RSP: 002b:00007f81dfc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 654.488420][T17268] RAX: ffffffffffffffda RBX: 00007f81df015fa0 RCX: 00007f81ded9c799 [ 654.496388][T17268] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000002 [ 654.504530][T17268] RBP: 00007f81dee32c99 R08: 0000000000000000 R09: 0000000000000000 [ 654.512496][T17268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 654.520492][T17268] R13: 00007f81df016038 R14: 00007f81df015fa0 R15: 00007fff97d0d6d8 [ 654.528653][T17268] [ 654.531673][T17268] Modules linked in: [ 654.536918][T17268] ---[ end trace 0000000000000000 ]--- [ 654.546571][T17271] futex_wake_op: syz.0.2178 tries to shift op by -2048; fix this program [ 654.861525][T17268] RIP: 0010:vidtv_psi_desc_assign+0x24/0x90 [ 654.872002][T17268] Code: 90 90 90 90 90 90 0f 1f 40 d6 41 54 55 48 89 f5 53 48 89 fb e8 5d 33 db f9 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 75 4c 4c 8b 23 49 39 ec 74 36 e8 39 33 db f9 4d 85 e4 [ 654.892072][T17268] RSP: 0018:ffffc900037f7a10 EFLAGS: 00010247 [ 654.930254][T17268] RAX: dffffc0000000000 RBX: 0000000000000005 RCX: ffffc9000d5f2000 [ 654.976841][T17268] RDX: 0000000000000000 RSI: ffffffff882d1063 RDI: 0000000000000005 [ 654.991327][T17268] RBP: ffff888034af2e20 R08: 0000000000000000 R09: 4453534204050000 [ 654.999633][T17268] R10: 0000000000000005 R11: 0000000000000000 R12: 0000000000000000 [ 655.010628][T17268] R13: ffff88807ba8f4c0 R14: ffff8880298dcbc0 R15: ffff88807ba8f7c0 [ 655.019251][T17268] FS: 00007f81dfc556c0(0000) GS:ffff888124343000(0000) knlGS:0000000000000000 [ 655.032901][T17268] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 655.039594][T17268] CR2: 0000001b30df1ff8 CR3: 0000000043170000 CR4: 00000000003526f0 [ 655.054871][T17268] Kernel panic - not syncing: Fatal exception [ 655.061167][T17268] Kernel Offset: disabled [ 655.065489][T17268] Rebooting in 86400 seconds..