last executing test programs: 2m26.351933733s ago: executing program 2 (id=2292): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x1) r0 = socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast1}, 0x6a) r2 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000015c0)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000001500)=@bpf_attr_5={@target_ifindex=r3, 0xffffffffffffffff, 0x9, 0x1, 0xffffffffffffffff, @relative_fd, 0x1}, 0x10) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x1, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x46600, 0x0) sendfile$auto(r4, 0x3, 0x0, 0x7ffff000) ioctl$auto(0xffffffffffffffff, 0x541d, 0x38) mmap$auto(0x1, 0x400009, 0x20df, 0x12, r0, 0x4008000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="010b0bbd7000fcdbff7f05"], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4040084) 2m25.808542171s ago: executing program 2 (id=2294): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/rpc/use-gss-proxy\x00', 0x0, 0x0) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000002180)={r0, &(0x7f0000000040)="ffa5412d446043fb181e3e27842283fc8396a4677f8a2fbb41627b7eb4d232de413ceba572c64cdc52b982ccc1fa87b6d668a3757f6a57e4466fa945da61dff2230be486beb6", 0x48, &(0x7f0000000140)="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", 0x2, &(0x7f0000001140)="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", &(0x7f0000002140)=0xc}) ioctl$auto_VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000021c0)={0x1, 0x0, [{0x20008, 0x101, 0x8a14}, {0xa, 0x7, 0x4}, {0x6, 0x4, 0x3}, {0xfffffffffffffff7, 0x1780000, 0x1ff}]}) (async) setsockopt$auto_SO_TIMESTAMPING_OLD(0xffffffffffffffff, 0x1, 0x25, &(0x7f00000000c0)='+^\x00', 0x100) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28080, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r2, 0x1, &(0x7f0000000040)) (async) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) 2m25.465646952s ago: executing program 2 (id=2297): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) socket(0x28, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r2) mmap$auto(0x3000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 2m23.342392082s ago: executing program 2 (id=2308): mmap$auto(0x0, 0x3, 0x4000000000df, 0x7f, 0x401, 0x300000000000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) pread64$auto(r0, 0x0, 0x5, 0xffff) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xe2c1, 0x157) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (fail_nth: 17) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0xfffffffffffffffe, 0x8, 0xcf2, 0x17, r3, 0x8000) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r4, 0x0, 0xeda5, 0xc86) 2m22.033275047s ago: executing program 2 (id=2315): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xfa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x400, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x0, 0x3, 0x4, 0xd, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xbd, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x3, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 2m20.965249156s ago: executing program 2 (id=2319): semctl$auto_GETZCNT(0x3, 0x7fffffff, 0xf, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, 0x0, 0x422000, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) kexec_load$auto(0x8134a6c, 0x1, 0x0, 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) sysfs$auto(0x2, 0xe, 0x0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(0xffffffffffffffff, 0x0, 0x20000004) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r2, 0x40f, 0x4) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x1040146f2c, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon26\x00', 0x60501, 0x0) ioctl$auto_MON_IOCG_STATS(r4, 0x80089203, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x14, r1, 0x403, 0x70bd28, 0x25dfdc03}, 0x14}, 0x1, 0x0, 0x0, 0x40815}, 0x240000c4) 2m19.875793498s ago: executing program 1 (id=2323): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = seccomp$auto_SECCOMP_SET_MODE_FILTER(0x1, 0xfffffbff, 0x0) sendmsg$auto_TIPC_NL_KEY_SET(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001540)={0x98, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_PUBL={0x80, 0x3, 0x0, 0x1, [@nested={0x7c, 0x129, 0x0, 0x1, [@nested={0x4, 0x14a}, @nested={0x74, 0x108, 0x0, 0x1, [@typed={0x4, 0x11b}, @typed={0x8, 0x159, 0x0, 0x0, @str='^.{\x00'}, @nested={0x62, 0x126, 0x0, 0x1, [@generic="9ee1d72080b729df875612e6a3930e153196cc9ee391a1b91e5c80594bb1c9ad35d3cee6f9475cbb08b34f8c95bed320cc8d4465988f536758048edb98d5c28947d87d43416b9a80b72636029c5f041e6ef3f4f17dc21d5754a658c01d5b"]}]}]}]}, @TIPC_NLA_MEDIA={0x4}]}, 0x98}, 0x1, 0x0, 0x0, 0xc050}, 0x80) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3f", 0xfdef) 2m16.090707584s ago: executing program 1 (id=2337): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0xffffffffffffffff, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) pipe$auto(0x0) (async) dup2$auto(0x5, 0x4) (async) vmsplice$auto(0x4, &(0x7f0000000040)={0x0, 0x80000000002}, 0x3, 0x4) (async) r0 = memfd_create$auto(0x0, 0xe) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) (async) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) (async) msync$auto(0x0, 0xe0, 0x6) (async) getsockopt$auto(r0, 0xffffffff, 0x5d, 0x0, 0x0) (async) r2 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x4923c1, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9, 0x10, r2, 0x6) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80500, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) (async) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) read$auto(0x3, 0x0, 0x7fffffff) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000038, 0x0) (async) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) prctl$auto_PR_SET_THP_DISABLE(0x29, 0x3, 0x41dd, 0xfffffffffffffffd, 0x3) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 2m13.260694975s ago: executing program 1 (id=2344): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) (async) r4 = openat$auto_ubifs_dir_operations_ubifs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mac80211_hwsim/hwsim13\x00', 0x1, 0x0) ioctl$auto_FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS2(r4, 0xc0406619, &(0x7f0000000080)={{0xfffffffc, 0x0, @identifier="c38e7ab794e8081aef92b3d2c3683030"}, 0xfffffbff}) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) r5 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r5, 0x9, 0x0) (async) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7f, 0x10}, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_7={@link_id=0x1, 0x3, 0x3}, 0x6f3) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) socket(0xa, 0x3, 0x6) (async) socket(0x11, 0x80003, 0x300) (async) socket(0x10, 0x2, 0x0) socket(0x2, 0x3, 0x2) (async) socket(0x2, 0x3, 0x104) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) mprotect$auto(0x200000000000, 0x806121, 0x8) (async) r6 = socket(0xa, 0x2, 0x0) setsockopt$auto(r6, 0x29, 0x3b, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) (async) r7 = socketpair$auto(0x3, 0x5, 0x7, 0x0) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) (async) r8 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) (async) ioctl$auto_RTC_UIE_OFF(r7, 0x7004, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f0000000480)) (async) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r3, @ANYBLOB="280109800c00"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) 2m13.003801864s ago: executing program 1 (id=2346): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x1) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x4e22, @multicast1}, 0x6a) r1 = socket(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000015c0)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000001500)=@bpf_attr_5={@target_ifindex=r2, 0xffffffffffffffff, 0x9, 0x1, 0xffffffffffffffff, @relative_fd, 0x1}, 0x10) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x1, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x46600, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010b0bbd7000fcdbff7f05"], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4040084) 2m12.828281415s ago: executing program 1 (id=2348): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/i8042/serio1/power/wakeup_abort_count\x00', 0xe0604, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) (fail_nth: 4) 2m12.117370574s ago: executing program 1 (id=2349): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xfa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x400, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x0, 0x3, 0x4, 0xd, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xbd, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x3, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 1m57.25655926s ago: executing program 32 (id=2349): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\a\x00'], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xfa}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x400, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x0, 0x3, 0x4, 0xd, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xbd, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x3, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 6.765080039s ago: executing program 3 (id=2768): openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/aql_pending\x00', 0x40200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_HARDIF(r0, 0x0, 0x8001) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r0, &(0x7f0000000900)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80080000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="e63beb55", @ANYRES16, @ANYBLOB="00022dbd7000fcdbdf250200000008000300ffffffffe70405005408b3ac37f1c157f146cd9b39a675158baa7d5455473ec06fb11e8419bf54284210e27aa2ef9ea1993df911277d5eac214d6eaab660139ee82904e358f96d366998b663aeffa335bc5f0ba88aaf6b594a547ed45c03136057b8efe7d5620b4e92996a0a82a6dff2d64b39192d3d36ba0183d6e376fbeea4b7e30b09f02a5ef9977d0ca6d0590a714ba760ec7ca480d02f1e3595a2d18340f8b5dfc25c5b45decdfb80f0968b8d642835b52f8d67c672c84b6dc219c4872c5b01cf332e1be5f92e6be6680f35b0bbfff45f44dbcf188cc6141c700c7719b470386b600088ebaef786da126767e03e789ed8e0d23089a30f53c780d47c2688afd11331bc75f57c1ae2da3555bb810d0f4db294dfaea1671cfc8201500016932932b653ca15bf62daaf338a24511ff62897d8e59816798c78fc8cb7f18a4161a50cdbef297e141deb6344bfd88ec294408737547d002c84b972c055de925d66ea366ec8fcc3b14a77a6241821757b31a327336d309c757622460c13e8cfb5179d1672c49de7fc5a9d021e7caf20a1faf2ad869d71e80fd212ac54ba241b4f3bcdf4c5c80beec36edd9174f2dea46cd4dd3c2f2e7ef2de84a0dab9678598c1dca2118280bb596135316adb4cce19414e1dd895d420bf181e4651e2aaabb6f750b89071a6e702e119a25d7eee54657990204ad0d2ad0ac1bff3a8e334f45d3650dcaf13f1ea5fb191a2699bd5733220676507b0a2987318259caba81a03218f3f4b76e7ad0c9af9ed8f0a33a2040cc7c2a49b1825519c1d50532acd7cc82155e4ddfce3d4dc658ae86dfea8412dc005f36f6c816bde2a68348a16c68c0bb8a05b1b425d448e322b34691a3328aae645099edbf7c5b943914d831d1c3aa4cbf3d087eb66f3dde1bbfa90e19a3456f8b220ba8db5145edae00d821b61ca9dfc8e4bb053c025869bedf22a0c1a8a23bc510b9bd99c4f7777470ec25c66d1f5f204c48ccc240591893e711d0ae43b0e648b9727dc2bb0bdf11362b9084e5247bcbef83129e186fe7fb9b09c52f8b203b62842f7197ced4b67d31137d7f221c0d7a67145000d2c2ef2e98fba739879c081c25f8691dfa158b0d27adc102cb499fb5e7b69343bdfbe7e6c47918213b74fb3dc8f34aabbc37d2427bf02ab7a40191ec037fa0ffc19ae3d4b14b62d3d35e3a860cdc2b5ddb5046508993b357e7dbe5349b4e7829e3ee1d3a78217644b1c488dc6afa9ced73cf22f994730eb1c8429c0796f3c552fc2db79a56bfcb7a8408bc3c11b675fd0ff0a566e33f61c998bbf975a572c957dde9272f8cc71c6da39596091cfd3e7a83e26b21fa664eb61f81c81223b410aa1991328c1beb4e77487477023a8ecc03a55a2070061b7291ecd0bb47c28ad99a1c997ba4cb065d884fd72e8b6b1a5b8c7536e0d51cb5cf00c1cce53f1f537bce187db0fd5b0a2accad1c52cab83ae752e8b1e0d778a6a74da1e12815d647009119afabae603e5b85cfaceda497c53fe095c9ed69cb298742cbe6d4704951fa551a2c65f3ec91d8199cfa692aee182cae2aa246ffc3ebdb96131921af93c7d96a7c715b6f7ab03d70af2afdebbaebc752437b1f9f9432dbf7f4f3ed7cc1126917be3d7eb1c2952648d2091f0821d0a557a815ff8c9f896c9337062e1a79f174a33ad64953fdb319e5e0134670466dd4dee5c007cd7777a30d81f5e8cced30c59fe221d980d097ebfc3caf13850d37bc0155d7e94944eb0e8839d1884419bb9cf8c0d1d9f0b330ba4b700"], 0x504}}, 0x4001) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x3, 0x3, 0x10000, 0x7, 0x20, 0x319, 0x8, 0x1, 0x6, 0x3, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x4, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbf0, 0x0, 0xffffffffffffffff, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x7, 0xfffffffffffffffe]}, 0x2001fb, 0x7f) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r2, 0x0, 0x1ff) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00/\x00\x00\x00\xfd\xfdX\xd3\x1d\xf8\xbebZ\xddL\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x88\v\xae\xa9i8W\xe5\x00!\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\xd9\xe5H.-\x14\xee\xbc\xae\xe1\x85\xb2b\xd42\x89\x05e\x03z\xe6q\xcd\x91\tM\xd2\x90\xc91\xd9\x86\xe4\x8e\x0fI\xf0b2\nfa\xb8\x1a\xdb\xaa0P\xca\xb2W\xe3\x14\xb9Cx\x0e4\xc9\xb4\xdc4\xe3\x8f\x1c\xa5\x89\x8d\x84V\x97dg \x9f\xcd\x8fA\x16\x01\xc5.\x7fG\x86L\xa4\xd6h\xea\x11x\xce\x96t\xc7~# )\x8c6\x06\xd7\xfcu\x8c{t\xa5\x92JW\x8b\xb3Oj%\xb5H\x91F\x1b\x01\xef\x0e\xc5\xac\xcfK\xd5\x98\xce\xd6?\t\xa8\xb7\xce\x87\xdb\xb0\xaa\x8al8qF\re\xa7\xda\x1f\x9ad\b!\xddBD\xd9', 0x3c, 0x200001000) sendmsg$auto_OVS_VPORT_CMD_DEL(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="7a102d"], 0x3c}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon24\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) syz_clone(0x5004000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime$auto(0x10, 0x0, &(0x7f00000003c0)={{0x0, 0x80000001}, {0x3, 0x9}}, &(0x7f0000000400)={{0xfffffffffffffffb, 0x6}, {0x8, 0x9563}}) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x0) mmap$auto(0x0, 0x400108, 0x3, 0x9b72, r0, 0x7) ioctl$auto_BLKPG(0xffffffffffffffff, 0x1269, 0x300) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x442883, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x4001, 0x0) 5.55873521s ago: executing program 3 (id=2770): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) pipe$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getuid() sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, 0x0, 0x44810) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x1, 0x19) mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/maps\x00', 0x80, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000020c0)=""/4093, 0xffd) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) r1 = io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000006, 0x9, 0x4001, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x100000], {0x9, 0x6, 0xf, 0x29f, 0x3, 0x7f, 0x6, 0x4000006, 0x2000}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x104, 0x8, 0x100000000}}) mmap$auto(0x2, 0xaef, 0xdf, 0xeb1, r1, 0x8000) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(r1, 0x4008ae5d, 0xffffffffffffffff) madvise$auto(0x0, 0x454, 0x9) mmap$auto(0xffffffffffffffff, 0x479e, 0x3, 0xeb1, r1, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x40001, 0x0) write$auto_kmsg_fops_printk(r2, &(0x7f0000000040)='<', 0x1) io_uring_register$auto_IORING_UNREGISTER_BUFFERS(r2, 0x1, &(0x7f0000000100), 0x1000) close_range$auto(r2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x49, 0x400008, 0xe3, 0x15, 0xffffffffffffffff, 0x100) socket$nl_generic(0x10, 0x3, 0x10) 4.034413012s ago: executing program 0 (id=2773): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x8009b72, 0x2, 0x9000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x4048aec9, r1) mmap$auto(0xffffffffffffffff, 0x9a, 0x4000000000df, 0xeb4, 0x401, 0x8000) clone$auto(0x8, 0x7, 0x0, 0xffffffffffffffff, 0x80000001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r3 = io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r4, 0xc1205531, r3) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010b27bd7000fda5c5a620736600080003", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) sendmsg$auto_NL80211_CMD_NEW_STATION(r3, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x2d0, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x38}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_FTM_RESPONDER={0x2a8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xcc, 0x3, "7ca6ed5aefa36b78f2356e084180e40146da8749e3facc9fad015999508ff2341e2b57f669cef36d9f4faf95d99e40c2bb84470fc9eb105ce41199f9b6949a88f70af8598d7fc439ffd9e5f0f565dce7562eb1a3ab8efbf92fcf73bd30958438bce533cdbe878f6abb88af17b14df420fee24b35d09e9d8132b224979edb84a4678b6a21c8fbb1335ed6641ed0983012281dd3a6f98ce50142982309741a042f59ae0b31725d6432ff188b73ff9917d5cdda763b066bbd653ae34d32ca0b11ba04c474e503af4c07"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc3, 0x3, "776f27506b2eaedd4fbf236fe05d05bacb247d1d20f7699f5f173367c44eb2fa2a645b9c65f40d75a3e634b222d4e001b4a151c699906e9d9dc3cb1e133f544f45721c0a7760bcbb03b0e44c982ac2cbca2838db3f436ac4970cca462a66a96bd13e53c39b03955c6a3d7a86afb0e412633106d34b806543952e5f07fa7fdb7f9d863bd5b0fa653520bd65e05bef96d881d2da6fced098671b3f228a4d8a5a89c740122594ec840b7d91413267c73bdff21fa5c42fbfb88eef61b0c6684937"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x76, 0x3, "6b9fb5ad1540d2e3e0714524bfdc82e709ab2ef69fa71fc6404ca0c8857f62aa60f39fe4e4fb9f41fa8ca98d9b1515a68929949a361159023f573fe5f5d477d6f4e0ca5dd2ca5396dbff3846de913037c429c7d2d94b1323af3574ed2880bbf3d5f42ab3cbd5e6fdd781a2ac670133f0e01f"}, @NL80211_FTM_RESP_ATTR_LCI={0x8b, 0x2, "d3733ceeae991ce93365b50defc2f7d25060267ca21abba06c43afcc6e12638926649137b9cca0c4b7385d055d7f1b926d6450d7ddc936448a825226ec8b1a5b4a5153f11370a0f4356f1a257e46cd0a87e5f95abc3ec54be5fbb468280920717c2762156ef1fd0bbaef0efffcf85962aa0c9ae84dc9e27e7989d3121d8810648f562c719462eb"}, @NL80211_FTM_RESP_ATTR_LCI={0x9, 0x2, "1afe906b76"}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x4080}, 0x200c8000) fstat$auto(r0, &(0x7f0000000100)={0x7f, 0xfffffffffffff6de, 0x5, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x51f, 0x1, 0x5f6d, 0x0, 0x9, 0x5, 0x0, 0x7, 0x3, 0x8000}) r7 = setfsgid$auto(0xee01) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x4002, 0x0) setresgid$auto(r7, 0x0, 0x0) statx$auto(r3, &(0x7f0000000040)='./file0\x00', 0x10001, 0x36a, &(0x7f00000003c0)={0x2, 0x200, 0xfffffffffffffff8, 0x3, r6, r7, 0x43, 0x5be3, 0x4, 0xac, 0x3, 0x100000000, {0x5, 0x9}, {0xfffffffffffff801, 0x5}, {0xf0, 0xc392}, {0x3, 0x8}, 0x1f5, 0x4, 0x6, 0x9, 0xd, 0x1, 0x1, 0xdd0, 0xffff, 0x2, 0xc0000000, 0x8000, [0x6, 0x3, 0x8, 0x9, 0x2, 0x4, 0x4, 0x5, 0x9]}) keyctl$auto_KEYCTL_REVOKE(0x3, 0x3, 0xb, 0x8000, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 3.661361403s ago: executing program 0 (id=2774): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x8009b72, 0x2, 0x9000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x4048aec9, r1) mmap$auto(0xffffffffffffffff, 0x9a, 0x4000000000df, 0xeb4, 0x401, 0x8000) clone$auto(0x8, 0x7, 0x0, 0xffffffffffffffff, 0x80000001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r3 = io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r4, 0xc1205531, r3) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010b27bd7000fda5c5a620736600080003", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) sendmsg$auto_NL80211_CMD_NEW_STATION(r3, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x298, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x38}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_FTM_RESPONDER={0x270, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xcc, 0x3, "7ca6ed5aefa36b78f2356e084180e40146da8749e3facc9fad015999508ff2341e2b57f669cef36d9f4faf95d99e40c2bb84470fc9eb105ce41199f9b6949a88f70af8598d7fc439ffd9e5f0f565dce7562eb1a3ab8efbf92fcf73bd30958438bce533cdbe878f6abb88af17b14df420fee24b35d09e9d8132b224979edb84a4678b6a21c8fbb1335ed6641ed0983012281dd3a6f98ce50142982309741a042f59ae0b31725d6432ff188b73ff9917d5cdda763b066bbd653ae34d32ca0b11ba04c474e503af4c07"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x3b, 0x3, "5ed2e771d0ca64382cb593bdb6ccedaa24be799b6b0761b0c9a936044fed1905efd76ddbe3f7dd100ebfd78a7b481e16cd7ca2f07b419e"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc3, 0x3, "776f27506b2eaedd4fbf236fe05d05bacb247d1d20f7699f5f173367c44eb2fa2a645b9c65f40d75a3e634b222d4e001b4a151c699906e9d9dc3cb1e133f544f45721c0a7760bcbb03b0e44c982ac2cbca2838db3f436ac4970cca462a66a96bd13e53c39b03955c6a3d7a86afb0e412633106d34b806543952e5f07fa7fdb7f9d863bd5b0fa653520bd65e05bef96d881d2da6fced098671b3f228a4d8a5a89c740122594ec840b7d91413267c73bdff21fa5c42fbfb88eef61b0c6684937"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x8b, 0x2, "d3733ceeae991ce93365b50defc2f7d25060267ca21abba06c43afcc6e12638926649137b9cca0c4b7385d055d7f1b926d6450d7ddc936448a825226ec8b1a5b4a5153f11370a0f4356f1a257e46cd0a87e5f95abc3ec54be5fbb468280920717c2762156ef1fd0bbaef0efffcf85962aa0c9ae84dc9e27e7989d3121d8810648f562c719462eb"}, @NL80211_FTM_RESP_ATTR_LCI={0x9, 0x2, "1afe906b76"}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x298}, 0x1, 0x0, 0x0, 0x4080}, 0x200c8000) fstat$auto(r0, &(0x7f0000000100)={0x7f, 0xfffffffffffff6de, 0x5, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x51f, 0x1, 0x5f6d, 0x0, 0x9, 0x5, 0x0, 0x7, 0x3, 0x8000}) r7 = setfsgid$auto(0xee01) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x4002, 0x0) setresgid$auto(r7, 0x0, 0x0) statx$auto(r3, &(0x7f0000000040)='./file0\x00', 0x10001, 0x36a, &(0x7f00000003c0)={0x2, 0x200, 0xfffffffffffffff8, 0x3, r6, r7, 0x43, 0x5be3, 0x4, 0xac, 0x3, 0x100000000, {0x5, 0x9}, {0xfffffffffffff801, 0x5}, {0xf0, 0xc392}, {0x3, 0x8}, 0x1f5, 0x4, 0x6, 0x9, 0xd, 0x1, 0x1, 0xdd0, 0xffff, 0x2, 0xc0000000, 0x8000, [0x6, 0x3, 0x8, 0x9, 0x2, 0x4, 0x4, 0x5, 0x9]}) keyctl$auto_KEYCTL_REVOKE(0x3, 0x3, 0xb, 0x8000, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 3.66053256s ago: executing program 3 (id=2775): semctl$auto_GETZCNT(0x3, 0x7fffffff, 0xf, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) openat$auto_dmaengine_summary_fops_(0xffffffffffffff9c, 0x0, 0x422000, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/013/001\x00', 0xa901, 0x0) kexec_load$auto(0x8134a6c, 0x1, 0x0, 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) sysfs$auto(0x2, 0xe, 0x0) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(0xffffffffffffffff, 0x0, 0x20000004) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r2, 0x40f, 0x4) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x1040146f2c, 0x0) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000040)='/dev/usbmon26\x00', 0x60501, 0x0) ioctl$auto_MON_IOCG_STATS(r4, 0x80089203, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x18, r1, 0x403, 0x70bd28, 0x25dfdc03, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40815}, 0x240000c4) 3.128498831s ago: executing program 0 (id=2777): mmap$auto(0x0, 0x20000000402000b, 0x1000, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) sendfile$auto(r0, r0, 0x0, 0x80000001) rseq$auto(0x0, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x400006, 0xdd, 0x9b72, 0x2, 0x8000) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r1, 0x92106405, r1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x2400, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(r2, 0x4018aee2, &(0x7f0000000080)={0x1, 0x0, 0x3, 0xd4}) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video67\x00', 0x169000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0xf998, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/boot_params/data\x00', 0x2c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001c00)=""/4109, 0x100d) socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000011c0)=ANY=[], 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r6, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) recvfrom$auto(0x3, 0x0, 0x8000000003, 0xfffff4a5, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_WIPHY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r5, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r4, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) 1.917611056s ago: executing program 0 (id=2778): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77ef907d, 0x0) r4 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 1.916682821s ago: executing program 3 (id=2784): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010b0bbd7000fcdbff7f05"], 0x14}, 0x1, 0x0, 0x0, 0x4008010}, 0x4040084) 952.422855ms ago: executing program 0 (id=2779): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xffffff01, 0x9, 0x9, 0x80000006, 0x7, 0x8, 0x5, 0x5, 0x9, 0x2, 0x8, 0x1, 0xf, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x40010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x800, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000dddbdf25020001000800030000000000080015"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1800"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000044}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) r2 = socket(0x10, 0x2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r3) read$auto(r3, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77ef907d, 0x0) r4 = socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) shutdown$auto(0x200000003, 0x2) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r4, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(r2, &(0x7f0000000000)='-\x00', 0xfdef) 951.640419ms ago: executing program 3 (id=2780): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) socket(0x28, 0x5, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4000014}, 0x400c000) r1 = socket(0x10, 0x2, 0x4) write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r2) mmap$auto(0x3000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 629.985072ms ago: executing program 3 (id=2781): mmap$auto(0x0, 0x3, 0x4000000000df, 0x7f, 0x401, 0x300000000000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) pread64$auto(r0, 0x0, 0x5, 0xffff) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x40006, 0xdf, 0x12, r0, 0x3) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0xe2c1, 0x157) socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x527601, 0x20) socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x2) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000180)="704c06f5185c9ee8637ad3a1fba2f47aedbd245fb2a44a1dc23f1a364397c4ffff18880d89f25c2131f78443df738ec659f64cbca5028cd668cc7ae0ffe03001e0003903d94abcff36f9aee441e43dde49d70a6ab7c4f54781ba867f824c5e770da9b243bec412f2d6ab08c342d27a1539d094c6000000000000622984021f3c3a5aeec77aa94a6b45d53f9b399a5ba313b5cb9a0ea0e05187eff6bcc2a074615cbbd3d76f351d24ed3c43239b4dbf313965ce0900cecbb63e501da2ecdfc6000000", 0x12, 0x0, 0x9, 0x0, 0x1d, 0xb}, 0x800009}, 0x5, 0x20000000) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r3, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40080, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x5, 0x8, 0xcf2, 0x15, r4, 0x8000) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64$auto(r5, 0x0, 0xeda5, 0xc86) 0s ago: executing program 0 (id=2782): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x8009b72, 0x2, 0x9000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x4048aec9, r1) mmap$auto(0xffffffffffffffff, 0x9a, 0x4000000000df, 0xeb4, 0x401, 0x8000) clone$auto(0x8, 0x7, 0x0, 0xffffffffffffffff, 0x80000001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x24, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @private=0xa010100}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r3 = io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r4, 0xc1205531, r3) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010b27bd7000fda5c5a620736600080003", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040080) sendmsg$auto_NL80211_CMD_NEW_STATION(r3, &(0x7f0000000840)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200001}, 0xc, &(0x7f0000000800)={&(0x7f00000004c0)={0x2d4, r5, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x38}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}, @NL80211_ATTR_FTM_RESPONDER={0x2ac, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0xcc, 0x3, "7ca6ed5aefa36b78f2356e084180e40146da8749e3facc9fad015999508ff2341e2b57f669cef36d9f4faf95d99e40c2bb84470fc9eb105ce41199f9b6949a88f70af8598d7fc439ffd9e5f0f565dce7562eb1a3ab8efbf92fcf73bd30958438bce533cdbe878f6abb88af17b14df420fee24b35d09e9d8132b224979edb84a4678b6a21c8fbb1335ed6641ed0983012281dd3a6f98ce50142982309741a042f59ae0b31725d6432ff188b73ff9917d5cdda763b066bbd653ae34d32ca0b11ba04c474e503af4c07"}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0xc3, 0x3, "776f27506b2eaedd4fbf236fe05d05bacb247d1d20f7699f5f173367c44eb2fa2a645b9c65f40d75a3e634b222d4e001b4a151c699906e9d9dc3cb1e133f544f45721c0a7760bcbb03b0e44c982ac2cbca2838db3f436ac4970cca462a66a96bd13e53c39b03955c6a3d7a86afb0e412633106d34b806543952e5f07fa7fdb7f9d863bd5b0fa653520bd65e05bef96d881d2da6fced098671b3f228a4d8a5a89c740122594ec840b7d91413267c73bdff21fa5c42fbfb88eef61b0c6684937"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_CIVICLOC={0x76, 0x3, "6b9fb5ad1540d2e3e0714524bfdc82e709ab2ef69fa71fc6404ca0c8857f62aa60f39fe4e4fb9f41fa8ca98d9b1515a68929949a361159023f573fe5f5d477d6f4e0ca5dd2ca5396dbff3846de913037c429c7d2d94b1323af3574ed2880bbf3d5f42ab3cbd5e6fdd781a2ac670133f0e01f"}, @NL80211_FTM_RESP_ATTR_LCI={0x8b, 0x2, "d3733ceeae991ce93365b50defc2f7d25060267ca21abba06c43afcc6e12638926649137b9cca0c4b7385d055d7f1b926d6450d7ddc936448a825226ec8b1a5b4a5153f11370a0f4356f1a257e46cd0a87e5f95abc3ec54be5fbb468280920717c2762156ef1fd0bbaef0efffcf85962aa0c9ae84dc9e27e7989d3121d8810648f562c719462eb"}, @NL80211_FTM_RESP_ATTR_LCI={0x9, 0x2, "1afe906b76"}]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x2d4}, 0x1, 0x0, 0x0, 0x4080}, 0x200c8000) fstat$auto(r0, &(0x7f0000000100)={0x7f, 0xfffffffffffff6de, 0x5, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x51f, 0x1, 0x5f6d, 0x0, 0x9, 0x5, 0x0, 0x7, 0x3, 0x8000}) r7 = setfsgid$auto(0xee01) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f00000002c0), 0x4002, 0x0) setresgid$auto(r7, 0x0, 0x0) statx$auto(r3, &(0x7f0000000040)='./file0\x00', 0x10001, 0x36a, &(0x7f00000003c0)={0x2, 0x200, 0xfffffffffffffff8, 0x3, r6, r7, 0x43, 0x5be3, 0x4, 0xac, 0x3, 0x100000000, {0x5, 0x9}, {0xfffffffffffff801, 0x5}, {0xf0, 0xc392}, {0x3, 0x8}, 0x1f5, 0x4, 0x6, 0x9, 0xd, 0x1, 0x1, 0xdd0, 0xffff, 0x2, 0xc0000000, 0x8000, [0x6, 0x3, 0x8, 0x9, 0x2, 0x4, 0x4, 0x5, 0x9]}) keyctl$auto_KEYCTL_REVOKE(0x3, 0x3, 0xb, 0x8000, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) kernel console output (not intermixed with test programs): 20 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.114625][T14835] Tainted: [L]=SOFTLOCKUP [ 685.114633][T14835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 685.114648][T14835] Call Trace: [ 685.114655][T14835] [ 685.114664][T14835] dump_stack_lvl+0x100/0x190 [ 685.114704][T14835] should_fail_ex.cold+0x5/0xa [ 685.114733][T14835] ? tomoyo_encode2+0xfb/0x3c0 [ 685.114768][T14835] should_failslab+0xc2/0x120 [ 685.114795][T14835] __kmalloc_noprof+0xe0/0x850 [ 685.114831][T14835] ? d_absolute_path+0x136/0x1b0 [ 685.114870][T14835] tomoyo_encode2+0xfb/0x3c0 [ 685.114907][T14835] tomoyo_encode+0x29/0x50 [ 685.114940][T14835] tomoyo_realpath_from_path+0x18c/0x690 [ 685.114982][T14835] tomoyo_path_number_perm+0x23c/0x580 [ 685.115010][T14835] ? tomoyo_path_number_perm+0x22e/0x580 [ 685.115042][T14835] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 685.115100][T14835] ? find_held_lock+0x2b/0x80 [ 685.115123][T14835] ? __fget_files+0x215/0x3d0 [ 685.115145][T14835] ? hook_file_ioctl_common+0x146/0x410 [ 685.115182][T14835] ? __fget_files+0x21f/0x3d0 [ 685.115210][T14835] security_file_ioctl+0xd3/0x230 [ 685.115265][T14835] __x64_sys_ioctl+0xb7/0x210 [ 685.115319][T14835] do_syscall_64+0x106/0xf80 [ 685.115355][T14835] ? clear_bhb_loop+0x40/0x90 [ 685.115392][T14835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.115416][T14835] RIP: 0033:0x7fd263d9c819 [ 685.115436][T14835] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.115460][T14835] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 685.115489][T14835] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 685.115505][T14835] RDX: 0000000000000000 RSI: 0000000080089203 RDI: 0000000000000008 [ 685.115520][T14835] RBP: 00007fd264d43090 R08: 0000000000000000 R09: 0000000000000000 [ 685.115534][T14835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.115549][T14835] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 685.115580][T14835] [ 685.116475][T14835] ERROR: Out of memory at tomoyo_realpath_from_path. [ 686.227099][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.242808][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.622559][T13664] Bluetooth: hci1: command tx timeout [ 688.768291][T14861] FAULT_INJECTION: forcing a failure. [ 688.768291][T14861] name failslab, interval 1, probability 0, space 0, times 0 [ 688.793573][T14861] CPU: 0 UID: 0 PID: 14861 Comm: syz.0.2428 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.793629][T14861] Tainted: [L]=SOFTLOCKUP [ 688.793642][T14861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 688.793663][T14861] Call Trace: [ 688.793675][T14861] [ 688.793688][T14861] dump_stack_lvl+0x100/0x190 [ 688.793749][T14861] should_fail_ex.cold+0x5/0xa [ 688.793793][T14861] should_failslab+0xc2/0x120 [ 688.793833][T14861] __kmalloc_cache_noprof+0x7a/0x6f0 [ 688.793883][T14861] ? mon_bin_open+0xe6/0x470 [ 688.793937][T14861] mon_bin_open+0xe6/0x470 [ 688.793985][T14861] ? __pfx_mon_bin_open+0x10/0x10 [ 688.794031][T14861] chrdev_open+0x234/0x6a0 [ 688.794067][T14861] ? __pfx_apparmor_file_open+0x10/0x10 [ 688.794108][T14861] ? __pfx_chrdev_open+0x10/0x10 [ 688.794151][T14861] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 688.794201][T14861] do_dentry_open+0x6d8/0x1660 [ 688.794238][T14861] ? __pfx_chrdev_open+0x10/0x10 [ 688.794289][T14861] vfs_open+0x82/0x3f0 [ 688.794351][T14861] path_openat+0x208c/0x31a0 [ 688.794405][T14861] ? __pfx_path_openat+0x10/0x10 [ 688.794463][T14861] do_file_open+0x20e/0x430 [ 688.794505][T14861] ? __pfx_do_file_open+0x10/0x10 [ 688.794575][T14861] ? alloc_fd+0x476/0x790 [ 688.794617][T14861] ? do_getname+0x191/0x390 [ 688.794667][T14861] do_sys_openat2+0x10d/0x1e0 [ 688.794717][T14861] ? __pfx_do_sys_openat2+0x10/0x10 [ 688.794770][T14861] ? __sys_sendmsg+0x18f/0x220 [ 688.794814][T14861] __x64_sys_openat+0x12d/0x210 [ 688.794866][T14861] ? __pfx___x64_sys_openat+0x10/0x10 [ 688.794931][T14861] do_syscall_64+0x106/0xf80 [ 688.794967][T14861] ? clear_bhb_loop+0x40/0x90 [ 688.795011][T14861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.795047][T14861] RIP: 0033:0x7f68e0b9c819 [ 688.795077][T14861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.795111][T14861] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 688.795145][T14861] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 688.795168][T14861] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 688.795191][T14861] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 688.795212][T14861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.795232][T14861] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 688.795278][T14861] [ 690.904666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 692.366500][T14896] FAULT_INJECTION: forcing a failure. [ 692.366500][T14896] name failslab, interval 1, probability 0, space 0, times 0 [ 692.389654][T14896] CPU: 1 UID: 0 PID: 14896 Comm: syz.0.2437 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.389708][T14896] Tainted: [L]=SOFTLOCKUP [ 692.389729][T14896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 692.389749][T14896] Call Trace: [ 692.389760][T14896] [ 692.389774][T14896] dump_stack_lvl+0x100/0x190 [ 692.389835][T14896] should_fail_ex.cold+0x5/0xa [ 692.389878][T14896] ? tomoyo_encode2+0xfb/0x3c0 [ 692.389929][T14896] should_failslab+0xc2/0x120 [ 692.389970][T14896] __kmalloc_noprof+0xe0/0x850 [ 692.390027][T14896] ? d_absolute_path+0x136/0x1b0 [ 692.390086][T14896] tomoyo_encode2+0xfb/0x3c0 [ 692.390145][T14896] tomoyo_encode+0x29/0x50 [ 692.390194][T14896] tomoyo_realpath_from_path+0x18c/0x690 [ 692.390257][T14896] tomoyo_check_open_permission+0x2af/0x3c0 [ 692.390305][T14896] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 692.390391][T14896] ? do_raw_spin_lock+0x128/0x260 [ 692.390448][T14896] ? path_get+0x61/0x80 [ 692.390494][T14896] tomoyo_file_open+0x6b/0x90 [ 692.390531][T14896] security_file_open+0xb5/0x1e0 [ 692.390580][T14896] do_dentry_open+0x5aa/0x1660 [ 692.390622][T14896] ? security_inode_permission+0xbf/0x250 [ 692.390673][T14896] vfs_open+0x82/0x3f0 [ 692.390733][T14896] path_openat+0x208c/0x31a0 [ 692.390788][T14896] ? __pfx_path_openat+0x10/0x10 [ 692.390843][T14896] do_file_open+0x20e/0x430 [ 692.390886][T14896] ? __pfx_do_file_open+0x10/0x10 [ 692.390958][T14896] ? alloc_fd+0x476/0x790 [ 692.390999][T14896] ? do_getname+0x191/0x390 [ 692.391051][T14896] do_sys_openat2+0x10d/0x1e0 [ 692.391101][T14896] ? __pfx_do_sys_openat2+0x10/0x10 [ 692.391153][T14896] ? __sys_sendmsg+0x18f/0x220 [ 692.391198][T14896] __x64_sys_openat+0x12d/0x210 [ 692.391249][T14896] ? __pfx___x64_sys_openat+0x10/0x10 [ 692.391317][T14896] do_syscall_64+0x106/0xf80 [ 692.391354][T14896] ? clear_bhb_loop+0x40/0x90 [ 692.391398][T14896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.391435][T14896] RIP: 0033:0x7f68e0b9c819 [ 692.391464][T14896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 692.391500][T14896] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 692.391535][T14896] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 692.391559][T14896] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 692.391581][T14896] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 692.391601][T14896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.391622][T14896] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 692.391667][T14896] [ 692.391701][T14896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 693.421117][T14909] FAULT_INJECTION: forcing a failure. [ 693.421117][T14909] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 693.461577][T14909] CPU: 1 UID: 0 PID: 14909 Comm: syz.3.2440 Tainted: G L syzkaller #0 PREEMPT(full) [ 693.461628][T14909] Tainted: [L]=SOFTLOCKUP [ 693.461639][T14909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 693.461659][T14909] Call Trace: [ 693.461670][T14909] [ 693.461683][T14909] dump_stack_lvl+0x100/0x190 [ 693.461745][T14909] should_fail_ex.cold+0x5/0xa [ 693.461787][T14909] _copy_to_user+0x32/0xd0 [ 693.461836][T14909] simple_read_from_buffer+0xcb/0x170 [ 693.461902][T14909] proc_fail_nth_read+0x1af/0x230 [ 693.461949][T14909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.461997][T14909] ? rw_verify_area+0xce/0x6d0 [ 693.462046][T14909] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 693.462091][T14909] vfs_read+0x1e4/0xb30 [ 693.462130][T14909] ? __pfx_vfs_read+0x10/0x10 [ 693.462163][T14909] ? __fget_files+0x215/0x3d0 [ 693.462207][T14909] ? __fget_files+0x21f/0x3d0 [ 693.462254][T14909] ksys_read+0x12a/0x250 [ 693.462288][T14909] ? __pfx_ksys_read+0x10/0x10 [ 693.462334][T14909] do_syscall_64+0x106/0xf80 [ 693.462370][T14909] ? clear_bhb_loop+0x40/0x90 [ 693.462413][T14909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 693.462448][T14909] RIP: 0033:0x7fd263d5d04e [ 693.462476][T14909] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 693.462510][T14909] RSP: 002b:00007fd264d42fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 693.462541][T14909] RAX: ffffffffffffffda RBX: 00007fd264d436c0 RCX: 00007fd263d5d04e [ 693.462564][T14909] RDX: 000000000000000f RSI: 00007fd264d430a0 RDI: 0000000000000009 [ 693.462585][T14909] RBP: 00007fd264d43090 R08: 0000000000000000 R09: 0000000000000000 [ 693.462606][T14909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 693.462625][T14909] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 693.462670][T14909] [ 693.796257][T14912] netlink: 'syz.0.2441': attribute type 1 has an invalid length. [ 694.607983][T14925] FAULT_INJECTION: forcing a failure. [ 694.607983][T14925] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 694.621705][T14925] CPU: 1 UID: 0 PID: 14925 Comm: syz.0.2445 Tainted: G L syzkaller #0 PREEMPT(full) [ 694.621761][T14925] Tainted: [L]=SOFTLOCKUP [ 694.621774][T14925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 694.621796][T14925] Call Trace: [ 694.621809][T14925] [ 694.621823][T14925] dump_stack_lvl+0x100/0x190 [ 694.621886][T14925] should_fail_ex.cold+0x5/0xa [ 694.621923][T14925] ? prepare_alloc_pages+0x16d/0x5f0 [ 694.621972][T14925] should_fail_alloc_page+0xeb/0x140 [ 694.622017][T14925] prepare_alloc_pages+0x1f0/0x5f0 [ 694.622060][T14925] ? is_bpf_text_address+0x94/0x1a0 [ 694.622123][T14925] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 694.622202][T14925] ? stack_trace_save+0x8e/0xc0 [ 694.622240][T14925] ? __pfx_stack_trace_save+0x10/0x10 [ 694.622277][T14925] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 694.622334][T14925] ? stack_depot_save_flags+0x27/0x9d0 [ 694.622394][T14925] ? kasan_save_stack+0x3f/0x50 [ 694.622426][T14925] ? kasan_save_stack+0x30/0x50 [ 694.622458][T14925] ? kasan_save_track+0x14/0x30 [ 694.622490][T14925] ? __kasan_kmalloc+0xaa/0xb0 [ 694.622537][T14925] ? do_file_open+0x20e/0x430 [ 694.622575][T14925] ? do_sys_openat2+0x10d/0x1e0 [ 694.622624][T14925] ? __x64_sys_openat+0x12d/0x210 [ 694.622671][T14925] ? do_syscall_64+0x106/0xf80 [ 694.622708][T14925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.622753][T14925] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 694.622795][T14925] ? policy_nodemask+0xed/0x4f0 [ 694.622839][T14925] alloc_pages_mpol+0x1fb/0x550 [ 694.622882][T14925] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 694.622935][T14925] alloc_pages_noprof+0x136/0x390 [ 694.622979][T14925] get_zeroed_page_noprof+0x18/0xb0 [ 694.623022][T14925] mon_alloc_buff+0xce/0x1b0 [ 694.623067][T14925] ? kasan_save_track+0x14/0x30 [ 694.623106][T14925] mon_bin_open+0x207/0x470 [ 694.623153][T14925] ? __pfx_mon_bin_open+0x10/0x10 [ 694.623200][T14925] chrdev_open+0x234/0x6a0 [ 694.623238][T14925] ? __pfx_apparmor_file_open+0x10/0x10 [ 694.623279][T14925] ? __pfx_chrdev_open+0x10/0x10 [ 694.623330][T14925] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 694.623382][T14925] do_dentry_open+0x6d8/0x1660 [ 694.623420][T14925] ? __pfx_chrdev_open+0x10/0x10 [ 694.623471][T14925] vfs_open+0x82/0x3f0 [ 694.623531][T14925] path_openat+0x208c/0x31a0 [ 694.623588][T14925] ? __pfx_path_openat+0x10/0x10 [ 694.623645][T14925] do_file_open+0x20e/0x430 [ 694.623689][T14925] ? __pfx_do_file_open+0x10/0x10 [ 694.623761][T14925] ? alloc_fd+0x476/0x790 [ 694.623803][T14925] ? do_getname+0x191/0x390 [ 694.623855][T14925] do_sys_openat2+0x10d/0x1e0 [ 694.623905][T14925] ? __pfx_do_sys_openat2+0x10/0x10 [ 694.623959][T14925] ? __sys_sendmsg+0x18f/0x220 [ 694.624003][T14925] __x64_sys_openat+0x12d/0x210 [ 694.624055][T14925] ? __pfx___x64_sys_openat+0x10/0x10 [ 694.624123][T14925] do_syscall_64+0x106/0xf80 [ 694.624160][T14925] ? clear_bhb_loop+0x40/0x90 [ 694.624204][T14925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.624241][T14925] RIP: 0033:0x7f68e0b9c819 [ 694.624271][T14925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.624306][T14925] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 694.624341][T14925] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 694.624365][T14925] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 694.624388][T14925] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 694.624409][T14925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 694.624429][T14925] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 694.624476][T14925] [ 696.777599][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2452'. [ 696.788199][T14946] netlink: 13 bytes leftover after parsing attributes in process `syz.3.2452'. [ 698.507862][T14954] FAULT_INJECTION: forcing a failure. [ 698.507862][T14954] name failslab, interval 1, probability 0, space 0, times 0 [ 698.538822][T14954] CPU: 0 UID: 0 PID: 14954 Comm: syz.3.2455 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.538881][T14954] Tainted: [L]=SOFTLOCKUP [ 698.538896][T14954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 698.538917][T14954] Call Trace: [ 698.538929][T14954] [ 698.538943][T14954] dump_stack_lvl+0x100/0x190 [ 698.539007][T14954] should_fail_ex.cold+0x5/0xa [ 698.539050][T14954] ? tomoyo_realpath_from_path+0xb6/0x690 [ 698.539104][T14954] should_failslab+0xc2/0x120 [ 698.539145][T14954] __kmalloc_noprof+0xe0/0x850 [ 698.539210][T14954] tomoyo_realpath_from_path+0xb6/0x690 [ 698.539274][T14954] tomoyo_check_open_permission+0x2af/0x3c0 [ 698.539332][T14954] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 698.539422][T14954] ? do_raw_spin_lock+0x128/0x260 [ 698.539481][T14954] ? path_get+0x61/0x80 [ 698.539529][T14954] tomoyo_file_open+0x6b/0x90 [ 698.539565][T14954] security_file_open+0xb5/0x1e0 [ 698.539616][T14954] do_dentry_open+0x5aa/0x1660 [ 698.539658][T14954] ? security_inode_permission+0xbf/0x250 [ 698.539712][T14954] vfs_open+0x82/0x3f0 [ 698.539764][T14954] path_openat+0x208c/0x31a0 [ 698.539818][T14954] ? __pfx_path_openat+0x10/0x10 [ 698.539874][T14954] do_file_open+0x20e/0x430 [ 698.539919][T14954] ? __pfx_do_file_open+0x10/0x10 [ 698.539990][T14954] ? alloc_fd+0x476/0x790 [ 698.540032][T14954] ? do_getname+0x191/0x390 [ 698.540085][T14954] do_sys_openat2+0x10d/0x1e0 [ 698.540135][T14954] ? __pfx_do_sys_openat2+0x10/0x10 [ 698.540189][T14954] ? __sys_sendmsg+0x18f/0x220 [ 698.540233][T14954] __x64_sys_openat+0x12d/0x210 [ 698.540293][T14954] ? __pfx___x64_sys_openat+0x10/0x10 [ 698.540362][T14954] do_syscall_64+0x106/0xf80 [ 698.540400][T14954] ? clear_bhb_loop+0x40/0x90 [ 698.540445][T14954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.540482][T14954] RIP: 0033:0x7fd263d9c819 [ 698.540513][T14954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.540550][T14954] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 698.540584][T14954] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 698.540608][T14954] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 698.540632][T14954] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 698.540654][T14954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.540675][T14954] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 698.540720][T14954] [ 698.540735][T14954] ERROR: Out of memory at tomoyo_realpath_from_path. [ 701.708599][T14980] FAULT_INJECTION: forcing a failure. [ 701.708599][T14980] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 701.784546][T14980] CPU: 1 UID: 0 PID: 14980 Comm: syz.0.2463 Tainted: G L syzkaller #0 PREEMPT(full) [ 701.784607][T14980] Tainted: [L]=SOFTLOCKUP [ 701.784620][T14980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 701.784640][T14980] Call Trace: [ 701.784652][T14980] [ 701.784665][T14980] dump_stack_lvl+0x100/0x190 [ 701.784730][T14980] should_fail_ex.cold+0x5/0xa [ 701.784766][T14980] ? prepare_alloc_pages+0x16d/0x5f0 [ 701.784816][T14980] should_fail_alloc_page+0xeb/0x140 [ 701.784860][T14980] prepare_alloc_pages+0x1f0/0x5f0 [ 701.784908][T14980] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 701.784983][T14980] ? stack_trace_save+0x8e/0xc0 [ 701.785019][T14980] ? __pfx_stack_trace_save+0x10/0x10 [ 701.785066][T14980] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 701.785126][T14980] ? stack_depot_save_flags+0x27/0x9d0 [ 701.785187][T14980] ? kasan_save_stack+0x3f/0x50 [ 701.785221][T14980] ? kasan_save_stack+0x30/0x50 [ 701.785251][T14980] ? kasan_save_track+0x14/0x30 [ 701.785283][T14980] ? __kasan_kmalloc+0xaa/0xb0 [ 701.785319][T14980] ? do_file_open+0x20e/0x430 [ 701.785357][T14980] ? do_sys_openat2+0x10d/0x1e0 [ 701.785402][T14980] ? __x64_sys_openat+0x12d/0x210 [ 701.785450][T14980] ? do_syscall_64+0x106/0xf80 [ 701.785486][T14980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.785531][T14980] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 701.785572][T14980] ? policy_nodemask+0xed/0x4f0 [ 701.785616][T14980] alloc_pages_mpol+0x1fb/0x550 [ 701.785659][T14980] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 701.785712][T14980] alloc_pages_noprof+0x136/0x390 [ 701.785756][T14980] get_zeroed_page_noprof+0x18/0xb0 [ 701.785799][T14980] mon_alloc_buff+0xce/0x1b0 [ 701.785846][T14980] ? kasan_save_track+0x14/0x30 [ 701.785886][T14980] mon_bin_open+0x207/0x470 [ 701.785933][T14980] ? __pfx_mon_bin_open+0x10/0x10 [ 701.785978][T14980] chrdev_open+0x234/0x6a0 [ 701.786016][T14980] ? __pfx_apparmor_file_open+0x10/0x10 [ 701.786066][T14980] ? __pfx_chrdev_open+0x10/0x10 [ 701.786110][T14980] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 701.786161][T14980] do_dentry_open+0x6d8/0x1660 [ 701.786199][T14980] ? __pfx_chrdev_open+0x10/0x10 [ 701.786248][T14980] vfs_open+0x82/0x3f0 [ 701.786300][T14980] path_openat+0x208c/0x31a0 [ 701.786355][T14980] ? __pfx_path_openat+0x10/0x10 [ 701.786411][T14980] do_file_open+0x20e/0x430 [ 701.786453][T14980] ? __pfx_do_file_open+0x10/0x10 [ 701.786524][T14980] ? alloc_fd+0x476/0x790 [ 701.786566][T14980] ? do_getname+0x191/0x390 [ 701.786618][T14980] do_sys_openat2+0x10d/0x1e0 [ 701.786667][T14980] ? __pfx_do_sys_openat2+0x10/0x10 [ 701.786729][T14980] ? __sys_sendmsg+0x18f/0x220 [ 701.786775][T14980] __x64_sys_openat+0x12d/0x210 [ 701.786829][T14980] ? __pfx___x64_sys_openat+0x10/0x10 [ 701.786898][T14980] do_syscall_64+0x106/0xf80 [ 701.786935][T14980] ? clear_bhb_loop+0x40/0x90 [ 701.786979][T14980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 701.787015][T14980] RIP: 0033:0x7f68e0b9c819 [ 701.787053][T14980] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 701.787088][T14980] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 701.787125][T14980] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 701.787150][T14980] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 701.787175][T14980] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 701.787198][T14980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 701.787218][T14980] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 701.787261][T14980] [ 703.018186][T15003] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2469'. [ 704.025344][T15012] FAULT_INJECTION: forcing a failure. [ 704.025344][T15012] name failslab, interval 1, probability 0, space 0, times 0 [ 704.038616][T15012] CPU: 0 UID: 0 PID: 15012 Comm: syz.0.2472 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.038655][T15012] Tainted: [L]=SOFTLOCKUP [ 704.038665][T15012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 704.038681][T15012] Call Trace: [ 704.038690][T15012] [ 704.038700][T15012] dump_stack_lvl+0x100/0x190 [ 704.038758][T15012] should_fail_ex.cold+0x5/0xa [ 704.038789][T15012] ? tomoyo_encode2+0xfb/0x3c0 [ 704.038825][T15012] should_failslab+0xc2/0x120 [ 704.038854][T15012] __kmalloc_noprof+0xe0/0x850 [ 704.038892][T15012] ? d_absolute_path+0x136/0x1b0 [ 704.038933][T15012] tomoyo_encode2+0xfb/0x3c0 [ 704.038972][T15012] tomoyo_encode+0x29/0x50 [ 704.039007][T15012] tomoyo_realpath_from_path+0x18c/0x690 [ 704.039050][T15012] tomoyo_check_open_permission+0x2af/0x3c0 [ 704.039083][T15012] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 704.039143][T15012] ? do_raw_spin_lock+0x128/0x260 [ 704.039184][T15012] ? path_get+0x61/0x80 [ 704.039216][T15012] tomoyo_file_open+0x6b/0x90 [ 704.039241][T15012] security_file_open+0xb5/0x1e0 [ 704.039275][T15012] do_dentry_open+0x5aa/0x1660 [ 704.039305][T15012] ? security_inode_permission+0xbf/0x250 [ 704.039340][T15012] vfs_open+0x82/0x3f0 [ 704.039376][T15012] path_openat+0x208c/0x31a0 [ 704.039413][T15012] ? __pfx_path_openat+0x10/0x10 [ 704.039452][T15012] do_file_open+0x20e/0x430 [ 704.039486][T15012] ? __pfx_do_file_open+0x10/0x10 [ 704.039537][T15012] ? alloc_fd+0x476/0x790 [ 704.039567][T15012] ? do_getname+0x191/0x390 [ 704.039602][T15012] do_sys_openat2+0x10d/0x1e0 [ 704.039642][T15012] ? __pfx_do_sys_openat2+0x10/0x10 [ 704.039678][T15012] ? __sys_sendmsg+0x18f/0x220 [ 704.039710][T15012] __x64_sys_openat+0x12d/0x210 [ 704.039745][T15012] ? __pfx___x64_sys_openat+0x10/0x10 [ 704.039798][T15012] do_syscall_64+0x106/0xf80 [ 704.039825][T15012] ? clear_bhb_loop+0x40/0x90 [ 704.039856][T15012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.039881][T15012] RIP: 0033:0x7f68e0b9c819 [ 704.039903][T15012] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.039928][T15012] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 704.039952][T15012] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 704.039969][T15012] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 704.039985][T15012] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 704.040001][T15012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.040017][T15012] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 704.040048][T15012] [ 704.040073][T15012] ERROR: Out of memory at tomoyo_realpath_from_path. [ 706.074023][T15047] FAULT_INJECTION: forcing a failure. [ 706.074023][T15047] name failslab, interval 1, probability 0, space 0, times 0 [ 706.098730][T15047] CPU: 0 UID: 0 PID: 15047 Comm: syz.3.2482 Tainted: G L syzkaller #0 PREEMPT(full) [ 706.098788][T15047] Tainted: [L]=SOFTLOCKUP [ 706.098801][T15047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 706.098822][T15047] Call Trace: [ 706.098834][T15047] [ 706.098848][T15047] dump_stack_lvl+0x100/0x190 [ 706.098912][T15047] should_fail_ex.cold+0x5/0xa [ 706.098955][T15047] should_failslab+0xc2/0x120 [ 706.098997][T15047] __kmalloc_cache_noprof+0x7a/0x6f0 [ 706.099047][T15047] ? mon_bin_open+0xe6/0x470 [ 706.099104][T15047] mon_bin_open+0xe6/0x470 [ 706.099151][T15047] ? __pfx_mon_bin_open+0x10/0x10 [ 706.099208][T15047] chrdev_open+0x234/0x6a0 [ 706.099254][T15047] ? __pfx_apparmor_file_open+0x10/0x10 [ 706.099296][T15047] ? __pfx_chrdev_open+0x10/0x10 [ 706.099339][T15047] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 706.099391][T15047] do_dentry_open+0x6d8/0x1660 [ 706.099430][T15047] ? __pfx_chrdev_open+0x10/0x10 [ 706.099479][T15047] vfs_open+0x82/0x3f0 [ 706.099533][T15047] path_openat+0x208c/0x31a0 [ 706.099588][T15047] ? __pfx_path_openat+0x10/0x10 [ 706.099644][T15047] do_file_open+0x20e/0x430 [ 706.099687][T15047] ? __pfx_do_file_open+0x10/0x10 [ 706.099759][T15047] ? alloc_fd+0x476/0x790 [ 706.099801][T15047] ? do_getname+0x191/0x390 [ 706.099852][T15047] do_sys_openat2+0x10d/0x1e0 [ 706.099901][T15047] ? __pfx_do_sys_openat2+0x10/0x10 [ 706.099955][T15047] ? __sys_sendmsg+0x18f/0x220 [ 706.099998][T15047] __x64_sys_openat+0x12d/0x210 [ 706.100050][T15047] ? __pfx___x64_sys_openat+0x10/0x10 [ 706.100119][T15047] do_syscall_64+0x106/0xf80 [ 706.100179][T15047] ? clear_bhb_loop+0x40/0x90 [ 706.100229][T15047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 706.100265][T15047] RIP: 0033:0x7fd263d9c819 [ 706.100293][T15047] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 706.100329][T15047] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 706.100363][T15047] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 706.100386][T15047] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 706.100409][T15047] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 706.100429][T15047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 706.100451][T15047] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 706.100494][T15047] [ 707.183679][T15062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2486'. [ 708.211592][T15080] FAULT_INJECTION: forcing a failure. [ 708.211592][T15080] name failslab, interval 1, probability 0, space 0, times 0 [ 708.226379][T15080] CPU: 1 UID: 0 PID: 15080 Comm: syz.3.2492 Tainted: G L syzkaller #0 PREEMPT(full) [ 708.226434][T15080] Tainted: [L]=SOFTLOCKUP [ 708.226447][T15080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 708.226470][T15080] Call Trace: [ 708.226483][T15080] [ 708.226496][T15080] dump_stack_lvl+0x100/0x190 [ 708.226563][T15080] should_fail_ex.cold+0x5/0xa [ 708.226608][T15080] should_failslab+0xc2/0x120 [ 708.226649][T15080] __kmalloc_cache_noprof+0x7a/0x6f0 [ 708.226699][T15080] ? mon_bin_open+0x1a8/0x470 [ 708.226745][T15080] ? lockdep_init_map_type+0x5c/0x250 [ 708.226802][T15080] mon_bin_open+0x1a8/0x470 [ 708.226849][T15080] ? __pfx_mon_bin_open+0x10/0x10 [ 708.226896][T15080] chrdev_open+0x234/0x6a0 [ 708.226935][T15080] ? __pfx_apparmor_file_open+0x10/0x10 [ 708.226976][T15080] ? __pfx_chrdev_open+0x10/0x10 [ 708.227017][T15080] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 708.227068][T15080] do_dentry_open+0x6d8/0x1660 [ 708.227107][T15080] ? __pfx_chrdev_open+0x10/0x10 [ 708.227156][T15080] vfs_open+0x82/0x3f0 [ 708.227209][T15080] path_openat+0x208c/0x31a0 [ 708.227272][T15080] ? __pfx_path_openat+0x10/0x10 [ 708.227330][T15080] do_file_open+0x20e/0x430 [ 708.227373][T15080] ? __pfx_do_file_open+0x10/0x10 [ 708.227446][T15080] ? alloc_fd+0x476/0x790 [ 708.227489][T15080] ? do_getname+0x191/0x390 [ 708.227542][T15080] do_sys_openat2+0x10d/0x1e0 [ 708.227592][T15080] ? __pfx_do_sys_openat2+0x10/0x10 [ 708.227645][T15080] ? __sys_sendmsg+0x18f/0x220 [ 708.227690][T15080] __x64_sys_openat+0x12d/0x210 [ 708.227742][T15080] ? __pfx___x64_sys_openat+0x10/0x10 [ 708.227811][T15080] do_syscall_64+0x106/0xf80 [ 708.227849][T15080] ? clear_bhb_loop+0x40/0x90 [ 708.227893][T15080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.227931][T15080] RIP: 0033:0x7fd263d9c819 [ 708.227960][T15080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.227996][T15080] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 708.228030][T15080] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 708.228054][T15080] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 708.228077][T15080] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 708.228099][T15080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 708.228120][T15080] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 708.228166][T15080] [ 709.495613][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2497'. [ 710.388966][T15108] FAULT_INJECTION: forcing a failure. [ 710.388966][T15108] name failslab, interval 1, probability 0, space 0, times 0 [ 710.424356][T15108] CPU: 1 UID: 0 PID: 15108 Comm: syz.0.2501 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.424416][T15108] Tainted: [L]=SOFTLOCKUP [ 710.424430][T15108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 710.424453][T15108] Call Trace: [ 710.424466][T15108] [ 710.424480][T15108] dump_stack_lvl+0x100/0x190 [ 710.424541][T15108] should_fail_ex.cold+0x5/0xa [ 710.424584][T15108] ? tomoyo_encode2+0xfb/0x3c0 [ 710.424632][T15108] should_failslab+0xc2/0x120 [ 710.424673][T15108] __kmalloc_noprof+0xe0/0x850 [ 710.424727][T15108] ? d_absolute_path+0x136/0x1b0 [ 710.424797][T15108] tomoyo_encode2+0xfb/0x3c0 [ 710.424854][T15108] tomoyo_encode+0x29/0x50 [ 710.424903][T15108] tomoyo_realpath_from_path+0x18c/0x690 [ 710.424964][T15108] tomoyo_check_open_permission+0x2af/0x3c0 [ 710.425012][T15108] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 710.425100][T15108] ? do_raw_spin_lock+0x128/0x260 [ 710.425157][T15108] ? path_get+0x61/0x80 [ 710.425204][T15108] tomoyo_file_open+0x6b/0x90 [ 710.425241][T15108] security_file_open+0xb5/0x1e0 [ 710.425291][T15108] do_dentry_open+0x5aa/0x1660 [ 710.425332][T15108] ? security_inode_permission+0xbf/0x250 [ 710.425383][T15108] vfs_open+0x82/0x3f0 [ 710.425435][T15108] path_openat+0x208c/0x31a0 [ 710.425489][T15108] ? __pfx_path_openat+0x10/0x10 [ 710.425544][T15108] do_file_open+0x20e/0x430 [ 710.425587][T15108] ? __pfx_do_file_open+0x10/0x10 [ 710.425657][T15108] ? alloc_fd+0x476/0x790 [ 710.425699][T15108] ? do_getname+0x191/0x390 [ 710.425749][T15108] do_sys_openat2+0x10d/0x1e0 [ 710.425806][T15108] ? __pfx_do_sys_openat2+0x10/0x10 [ 710.425859][T15108] ? __sys_sendmsg+0x18f/0x220 [ 710.425905][T15108] __x64_sys_openat+0x12d/0x210 [ 710.425956][T15108] ? __pfx___x64_sys_openat+0x10/0x10 [ 710.426024][T15108] do_syscall_64+0x106/0xf80 [ 710.426062][T15108] ? clear_bhb_loop+0x40/0x90 [ 710.426107][T15108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.426143][T15108] RIP: 0033:0x7f68e0b9c819 [ 710.426173][T15108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.426208][T15108] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 710.426242][T15108] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 710.426266][T15108] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 710.426289][T15108] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 710.426312][T15108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.426333][T15108] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 710.426377][T15108] [ 710.426462][T15108] ERROR: Out of memory at tomoyo_realpath_from_path. [ 713.000056][T15149] FAULT_INJECTION: forcing a failure. [ 713.000056][T15149] name failslab, interval 1, probability 0, space 0, times 0 [ 713.035059][T15149] CPU: 1 UID: 0 PID: 15149 Comm: syz.3.2511 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.035114][T15149] Tainted: [L]=SOFTLOCKUP [ 713.035128][T15149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 713.035149][T15149] Call Trace: [ 713.035160][T15149] [ 713.035174][T15149] dump_stack_lvl+0x100/0x190 [ 713.035233][T15149] should_fail_ex.cold+0x5/0xa [ 713.035275][T15149] ? tomoyo_encode2+0xfb/0x3c0 [ 713.035325][T15149] should_failslab+0xc2/0x120 [ 713.035365][T15149] __kmalloc_noprof+0xe0/0x850 [ 713.035420][T15149] ? d_absolute_path+0x136/0x1b0 [ 713.035488][T15149] tomoyo_encode2+0xfb/0x3c0 [ 713.035547][T15149] tomoyo_encode+0x29/0x50 [ 713.035596][T15149] tomoyo_realpath_from_path+0x18c/0x690 [ 713.035656][T15149] tomoyo_check_open_permission+0x2af/0x3c0 [ 713.035704][T15149] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 713.035792][T15149] ? do_raw_spin_lock+0x128/0x260 [ 713.035850][T15149] ? path_get+0x61/0x80 [ 713.035896][T15149] tomoyo_file_open+0x6b/0x90 [ 713.035932][T15149] security_file_open+0xb5/0x1e0 [ 713.035981][T15149] do_dentry_open+0x5aa/0x1660 [ 713.036022][T15149] ? security_inode_permission+0xbf/0x250 [ 713.036073][T15149] vfs_open+0x82/0x3f0 [ 713.036125][T15149] path_openat+0x208c/0x31a0 [ 713.036178][T15149] ? __pfx_path_openat+0x10/0x10 [ 713.036231][T15149] do_file_open+0x20e/0x430 [ 713.036273][T15149] ? __pfx_do_file_open+0x10/0x10 [ 713.036343][T15149] ? alloc_fd+0x476/0x790 [ 713.036385][T15149] ? do_getname+0x191/0x390 [ 713.036435][T15149] do_sys_openat2+0x10d/0x1e0 [ 713.036493][T15149] ? __pfx_do_sys_openat2+0x10/0x10 [ 713.036542][T15149] ? __sys_sendmsg+0x18f/0x220 [ 713.036572][T15149] __x64_sys_openat+0x12d/0x210 [ 713.036609][T15149] ? __pfx___x64_sys_openat+0x10/0x10 [ 713.036655][T15149] do_syscall_64+0x106/0xf80 [ 713.036680][T15149] ? clear_bhb_loop+0x40/0x90 [ 713.036711][T15149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.036739][T15149] RIP: 0033:0x7fd263d9c819 [ 713.036764][T15149] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.036789][T15149] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 713.036813][T15149] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 713.036829][T15149] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 713.036846][T15149] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 713.036861][T15149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.036875][T15149] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 713.036932][T15149] [ 713.415883][T15149] ERROR: Out of memory at tomoyo_realpath_from_path. [ 715.107856][T15177] FAULT_INJECTION: forcing a failure. [ 715.107856][T15177] name failslab, interval 1, probability 0, space 0, times 0 [ 715.136971][T15177] CPU: 0 UID: 0 PID: 15177 Comm: syz.0.2520 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.137024][T15177] Tainted: [L]=SOFTLOCKUP [ 715.137037][T15177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 715.137057][T15177] Call Trace: [ 715.137068][T15177] [ 715.137082][T15177] dump_stack_lvl+0x100/0x190 [ 715.137142][T15177] should_fail_ex.cold+0x5/0xa [ 715.137184][T15177] should_failslab+0xc2/0x120 [ 715.137223][T15177] __kmalloc_cache_noprof+0x7a/0x6f0 [ 715.137271][T15177] ? mon_bin_open+0xe6/0x470 [ 715.137325][T15177] mon_bin_open+0xe6/0x470 [ 715.137375][T15177] ? __pfx_mon_bin_open+0x10/0x10 [ 715.137421][T15177] chrdev_open+0x234/0x6a0 [ 715.137459][T15177] ? __pfx_apparmor_file_open+0x10/0x10 [ 715.137501][T15177] ? __pfx_chrdev_open+0x10/0x10 [ 715.137552][T15177] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 715.137603][T15177] do_dentry_open+0x6d8/0x1660 [ 715.137641][T15177] ? __pfx_chrdev_open+0x10/0x10 [ 715.137691][T15177] vfs_open+0x82/0x3f0 [ 715.137744][T15177] path_openat+0x208c/0x31a0 [ 715.137799][T15177] ? __pfx_path_openat+0x10/0x10 [ 715.137855][T15177] do_file_open+0x20e/0x430 [ 715.137898][T15177] ? __pfx_do_file_open+0x10/0x10 [ 715.137969][T15177] ? alloc_fd+0x476/0x790 [ 715.138011][T15177] ? do_getname+0x191/0x390 [ 715.138063][T15177] do_sys_openat2+0x10d/0x1e0 [ 715.138114][T15177] ? __pfx_do_sys_openat2+0x10/0x10 [ 715.138168][T15177] ? __sys_sendmsg+0x18f/0x220 [ 715.138227][T15177] __x64_sys_openat+0x12d/0x210 [ 715.138279][T15177] ? __pfx___x64_sys_openat+0x10/0x10 [ 715.138347][T15177] do_syscall_64+0x106/0xf80 [ 715.138383][T15177] ? clear_bhb_loop+0x40/0x90 [ 715.138426][T15177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.138461][T15177] RIP: 0033:0x7f68e0b9c819 [ 715.138491][T15177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 715.138528][T15177] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 715.138568][T15177] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 715.138591][T15177] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 715.138615][T15177] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 715.138637][T15177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.138658][T15177] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 715.138703][T15177] [ 717.573665][ T5833] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 717.587184][ T5833] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 717.596361][ T5833] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 717.606638][ T5833] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 717.618549][ T5833] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 717.769738][T15208] FAULT_INJECTION: forcing a failure. [ 717.769738][T15208] name failslab, interval 1, probability 0, space 0, times 0 [ 717.818060][T15208] CPU: 0 UID: 0 PID: 15208 Comm: syz.3.2528 Tainted: G L syzkaller #0 PREEMPT(full) [ 717.818115][T15208] Tainted: [L]=SOFTLOCKUP [ 717.818128][T15208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 717.818151][T15208] Call Trace: [ 717.818163][T15208] [ 717.818177][T15208] dump_stack_lvl+0x100/0x190 [ 717.818239][T15208] should_fail_ex.cold+0x5/0xa [ 717.818282][T15208] should_failslab+0xc2/0x120 [ 717.818322][T15208] __kmalloc_cache_noprof+0x7a/0x6f0 [ 717.818372][T15208] ? mon_bin_open+0x1a8/0x470 [ 717.818418][T15208] ? lockdep_init_map_type+0x5c/0x250 [ 717.818473][T15208] mon_bin_open+0x1a8/0x470 [ 717.818521][T15208] ? __pfx_mon_bin_open+0x10/0x10 [ 717.818567][T15208] chrdev_open+0x234/0x6a0 [ 717.818605][T15208] ? __pfx_apparmor_file_open+0x10/0x10 [ 717.818646][T15208] ? __pfx_chrdev_open+0x10/0x10 [ 717.818688][T15208] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 717.818739][T15208] do_dentry_open+0x6d8/0x1660 [ 717.818777][T15208] ? __pfx_chrdev_open+0x10/0x10 [ 717.818827][T15208] vfs_open+0x82/0x3f0 [ 717.818902][T15208] path_openat+0x208c/0x31a0 [ 717.818965][T15208] ? __pfx_path_openat+0x10/0x10 [ 717.819021][T15208] do_file_open+0x20e/0x430 [ 717.819065][T15208] ? __pfx_do_file_open+0x10/0x10 [ 717.819137][T15208] ? alloc_fd+0x476/0x790 [ 717.819179][T15208] ? do_getname+0x191/0x390 [ 717.819231][T15208] do_sys_openat2+0x10d/0x1e0 [ 717.819280][T15208] ? __pfx_do_sys_openat2+0x10/0x10 [ 717.819334][T15208] ? __sys_sendmsg+0x18f/0x220 [ 717.819378][T15208] __x64_sys_openat+0x12d/0x210 [ 717.819432][T15208] ? __pfx___x64_sys_openat+0x10/0x10 [ 717.819500][T15208] do_syscall_64+0x106/0xf80 [ 717.819537][T15208] ? clear_bhb_loop+0x40/0x90 [ 717.819586][T15208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.819625][T15208] RIP: 0033:0x7fd263d9c819 [ 717.819656][T15208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.819690][T15208] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 717.819725][T15208] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 717.819749][T15208] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 717.819772][T15208] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 717.819795][T15208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 717.819816][T15208] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 717.819862][T15208] [ 718.425568][T15204] chnl_net:caif_netlink_parms(): no params data found [ 718.552001][T15204] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.559338][T15204] bridge0: port 1(bridge_slave_0) entered disabled state [ 718.568283][T15204] bridge_slave_0: entered allmulticast mode [ 718.582337][T15204] bridge_slave_0: entered promiscuous mode [ 718.603888][T15204] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.611407][T15204] bridge0: port 2(bridge_slave_1) entered disabled state [ 718.619001][T15204] bridge_slave_1: entered allmulticast mode [ 718.627600][T15204] bridge_slave_1: entered promiscuous mode [ 718.672941][T15204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 718.686616][T15204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 718.733543][T15204] team0: Port device team_slave_0 added [ 718.743304][T15204] team0: Port device team_slave_1 added [ 718.784650][T15204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 718.797291][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.826526][T15204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 718.843963][T15204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 718.851974][T15204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 718.879854][T15204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 719.033073][T15204] hsr_slave_0: entered promiscuous mode [ 719.050841][T15204] hsr_slave_1: entered promiscuous mode [ 719.059583][T15204] debugfs: 'hsr0' already exists in 'hsr' [ 719.067655][T15204] Cannot create hsr debugfs directory [ 719.130098][T15227] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2530'. [ 719.679212][T13664] Bluetooth: hci5: command tx timeout [ 721.291956][T15248] FAULT_INJECTION: forcing a failure. [ 721.291956][T15248] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 721.319866][T15248] CPU: 1 UID: 0 PID: 15248 Comm: syz.3.2537 Tainted: G L syzkaller #0 PREEMPT(full) [ 721.319921][T15248] Tainted: [L]=SOFTLOCKUP [ 721.319934][T15248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 721.319955][T15248] Call Trace: [ 721.319966][T15248] [ 721.319979][T15248] dump_stack_lvl+0x100/0x190 [ 721.320040][T15248] should_fail_ex.cold+0x5/0xa [ 721.320076][T15248] ? prepare_alloc_pages+0x16d/0x5f0 [ 721.320123][T15248] should_fail_alloc_page+0xeb/0x140 [ 721.320166][T15248] prepare_alloc_pages+0x1f0/0x5f0 [ 721.320217][T15248] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 721.320294][T15248] ? stack_trace_save+0x8e/0xc0 [ 721.320331][T15248] ? __pfx_stack_trace_save+0x10/0x10 [ 721.320368][T15248] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 721.320424][T15248] ? stack_depot_save_flags+0x27/0x9d0 [ 721.320483][T15248] ? kasan_save_stack+0x3f/0x50 [ 721.320525][T15248] ? kasan_save_stack+0x30/0x50 [ 721.320557][T15248] ? kasan_save_track+0x14/0x30 [ 721.320589][T15248] ? __kasan_kmalloc+0xaa/0xb0 [ 721.320625][T15248] ? do_file_open+0x20e/0x430 [ 721.320662][T15248] ? do_sys_openat2+0x10d/0x1e0 [ 721.320708][T15248] ? __x64_sys_openat+0x12d/0x210 [ 721.320757][T15248] ? do_syscall_64+0x106/0xf80 [ 721.320793][T15248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.320837][T15248] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 721.320878][T15248] ? policy_nodemask+0xed/0x4f0 [ 721.320922][T15248] alloc_pages_mpol+0x1fb/0x550 [ 721.320964][T15248] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 721.321017][T15248] alloc_pages_noprof+0x136/0x390 [ 721.321059][T15248] get_zeroed_page_noprof+0x18/0xb0 [ 721.321101][T15248] mon_alloc_buff+0xce/0x1b0 [ 721.321154][T15248] ? kasan_save_track+0x14/0x30 [ 721.321192][T15248] mon_bin_open+0x207/0x470 [ 721.321250][T15248] ? __pfx_mon_bin_open+0x10/0x10 [ 721.321298][T15248] chrdev_open+0x234/0x6a0 [ 721.321336][T15248] ? __pfx_apparmor_file_open+0x10/0x10 [ 721.321377][T15248] ? __pfx_chrdev_open+0x10/0x10 [ 721.321417][T15248] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 721.321468][T15248] do_dentry_open+0x6d8/0x1660 [ 721.321516][T15248] ? __pfx_chrdev_open+0x10/0x10 [ 721.321567][T15248] vfs_open+0x82/0x3f0 [ 721.321619][T15248] path_openat+0x208c/0x31a0 [ 721.321673][T15248] ? __pfx_path_openat+0x10/0x10 [ 721.321739][T15248] do_file_open+0x20e/0x430 [ 721.321790][T15248] ? __pfx_do_file_open+0x10/0x10 [ 721.321862][T15248] ? alloc_fd+0x476/0x790 [ 721.321904][T15248] ? do_getname+0x191/0x390 [ 721.321955][T15248] do_sys_openat2+0x10d/0x1e0 [ 721.322004][T15248] ? __pfx_do_sys_openat2+0x10/0x10 [ 721.322058][T15248] ? __sys_sendmsg+0x18f/0x220 [ 721.322102][T15248] __x64_sys_openat+0x12d/0x210 [ 721.322153][T15248] ? __pfx___x64_sys_openat+0x10/0x10 [ 721.322221][T15248] do_syscall_64+0x106/0xf80 [ 721.322256][T15248] ? clear_bhb_loop+0x40/0x90 [ 721.322300][T15248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 721.322336][T15248] RIP: 0033:0x7fd263d9c819 [ 721.322365][T15248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 721.322400][T15248] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 721.322435][T15248] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 721.322458][T15248] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 721.322482][T15248] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 721.322512][T15248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 721.322533][T15248] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 721.322580][T15248] [ 721.760392][T13664] Bluetooth: hci5: command tx timeout [ 722.543175][T15270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2542'. [ 722.563745][T15270] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2542'. [ 723.198370][T15278] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2545'. [ 723.459712][T15286] FAULT_INJECTION: forcing a failure. [ 723.459712][T15286] name failslab, interval 1, probability 0, space 0, times 0 [ 723.490819][T15286] CPU: 0 UID: 0 PID: 15286 Comm: syz.3.2547 Tainted: G L syzkaller #0 PREEMPT(full) [ 723.490872][T15286] Tainted: [L]=SOFTLOCKUP [ 723.490884][T15286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 723.490904][T15286] Call Trace: [ 723.490916][T15286] [ 723.490931][T15286] dump_stack_lvl+0x100/0x190 [ 723.490995][T15286] should_fail_ex.cold+0x5/0xa [ 723.491040][T15286] ? tomoyo_encode2+0xfb/0x3c0 [ 723.491091][T15286] should_failslab+0xc2/0x120 [ 723.491132][T15286] __kmalloc_noprof+0xe0/0x850 [ 723.491187][T15286] ? d_absolute_path+0x136/0x1b0 [ 723.491245][T15286] tomoyo_encode2+0xfb/0x3c0 [ 723.491302][T15286] tomoyo_encode+0x29/0x50 [ 723.491353][T15286] tomoyo_realpath_from_path+0x18c/0x690 [ 723.491424][T15286] tomoyo_check_open_permission+0x2af/0x3c0 [ 723.491474][T15286] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 723.491563][T15286] ? do_raw_spin_lock+0x128/0x260 [ 723.491621][T15286] ? path_get+0x61/0x80 [ 723.491667][T15286] tomoyo_file_open+0x6b/0x90 [ 723.491703][T15286] security_file_open+0xb5/0x1e0 [ 723.491760][T15286] do_dentry_open+0x5aa/0x1660 [ 723.491801][T15286] ? security_inode_permission+0xbf/0x250 [ 723.491855][T15286] vfs_open+0x82/0x3f0 [ 723.491906][T15286] path_openat+0x208c/0x31a0 [ 723.491962][T15286] ? __pfx_path_openat+0x10/0x10 [ 723.492018][T15286] do_file_open+0x20e/0x430 [ 723.492062][T15286] ? __pfx_do_file_open+0x10/0x10 [ 723.492133][T15286] ? alloc_fd+0x476/0x790 [ 723.492176][T15286] ? do_getname+0x191/0x390 [ 723.492228][T15286] do_sys_openat2+0x10d/0x1e0 [ 723.492277][T15286] ? __pfx_do_sys_openat2+0x10/0x10 [ 723.492331][T15286] ? __sys_sendmsg+0x18f/0x220 [ 723.492380][T15286] __x64_sys_openat+0x12d/0x210 [ 723.492432][T15286] ? __pfx___x64_sys_openat+0x10/0x10 [ 723.492499][T15286] do_syscall_64+0x106/0xf80 [ 723.492538][T15286] ? clear_bhb_loop+0x40/0x90 [ 723.492582][T15286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 723.492620][T15286] RIP: 0033:0x7fd263d9c819 [ 723.492650][T15286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 723.492685][T15286] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 723.492718][T15286] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 723.492742][T15286] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 723.492766][T15286] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 723.492788][T15286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 723.492810][T15286] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 723.492857][T15286] [ 723.779936][T15286] ERROR: Out of memory at tomoyo_realpath_from_path. [ 723.841106][T13664] Bluetooth: hci5: command tx timeout [ 724.373095][T15299] scsi_mod.scan: string doesn't fit in 6 chars. [ 725.922256][T13664] Bluetooth: hci5: command tx timeout [ 727.044951][T15347] FAULT_INJECTION: forcing a failure. [ 727.044951][T15347] name failslab, interval 1, probability 0, space 0, times 0 [ 727.074387][T15347] CPU: 0 UID: 0 PID: 15347 Comm: syz.0.2563 Tainted: G L syzkaller #0 PREEMPT(full) [ 727.074446][T15347] Tainted: [L]=SOFTLOCKUP [ 727.074461][T15347] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 727.074482][T15347] Call Trace: [ 727.074494][T15347] [ 727.074508][T15347] dump_stack_lvl+0x100/0x190 [ 727.074571][T15347] should_fail_ex.cold+0x5/0xa [ 727.074615][T15347] should_failslab+0xc2/0x120 [ 727.074654][T15347] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 727.074710][T15347] ? security_inode_alloc+0x3b/0x2c0 [ 727.074751][T15347] ? lockdep_init_map_type+0x5c/0x250 [ 727.074806][T15347] security_inode_alloc+0x3b/0x2c0 [ 727.074849][T15347] inode_init_always_gfp+0xced/0x1040 [ 727.074894][T15347] alloc_inode+0x8e/0x250 [ 727.074943][T15347] sock_alloc+0x44/0x280 [ 727.074980][T15347] ? security_socket_create+0x7f/0x250 [ 727.075020][T15347] __sock_create+0xc2/0x860 [ 727.075070][T15347] __sys_socketpair+0x1e4/0x5b0 [ 727.075121][T15347] ? __pfx___sys_socketpair+0x10/0x10 [ 727.075169][T15347] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 727.075208][T15347] ? xfd_validate_state+0x129/0x190 [ 727.075280][T15347] __x64_sys_socketpair+0x96/0x100 [ 727.075330][T15347] ? lockdep_hardirqs_on+0x78/0x100 [ 727.075368][T15347] do_syscall_64+0x106/0xf80 [ 727.075404][T15347] ? clear_bhb_loop+0x40/0x90 [ 727.075447][T15347] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 727.075483][T15347] RIP: 0033:0x7f68e0b9c819 [ 727.075514][T15347] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 727.075547][T15347] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 727.075581][T15347] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 727.075605][T15347] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 0000000000000001 [ 727.075627][T15347] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 727.075648][T15347] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 727.075668][T15347] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 727.075714][T15347] [ 727.075764][T15347] net_ratelimit: 47 callbacks suppressed [ 727.075788][T15347] socket: no more sockets [ 727.414218][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2563'. [ 727.433947][T15349] netlink: 25 bytes leftover after parsing attributes in process `syz.0.2563'. [ 729.442148][T15379] bcache: register_bcache() error : failed to open device [ 737.111199][T15483] vivid-007: ================= START STATUS ================= [ 737.127950][T15483] vivid-007: Generate PTS: true [ 737.143065][T15483] vivid-007: Generate SCR: true [ 737.150249][T15483] tpg source WxH: 320x240 (Y'CbCr) [ 737.155733][T15483] tpg field: 1 [ 737.162066][T15483] tpg crop: (0,0)/320x240 [ 737.168547][T15483] tpg compose: (0,0)/320x240 [ 737.173516][T15483] tpg colorspace: 8 [ 737.179314][T15483] tpg transfer function: 0/0 [ 737.184117][T15483] tpg Y'CbCr encoding: 0/0 [ 737.189633][T15483] tpg quantization: 0/0 [ 737.193931][T15483] tpg RGB range: 0/2 [ 737.198554][T15483] vivid-007: ================== END STATUS ================== [ 738.895321][ T5833] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 738.901725][ T5833] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 738.912982][ T5833] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 738.915082][ T5833] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 738.930494][ T5833] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 739.454307][T15508] chnl_net:caif_netlink_parms(): no params data found [ 739.733527][T15508] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.987498][T15508] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.999303][T15508] bridge_slave_0: entered allmulticast mode [ 740.007577][T15508] bridge_slave_0: entered promiscuous mode [ 740.033208][T15508] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.049668][T15508] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.057240][T15508] bridge_slave_1: entered allmulticast mode [ 740.071939][T15508] bridge_slave_1: entered promiscuous mode [ 740.171236][T15508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.186202][T15508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.288961][T15508] team0: Port device team_slave_0 added [ 740.303485][T15508] team0: Port device team_slave_1 added [ 740.403415][T15508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.420195][T15508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.475408][T15508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.568461][T15508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.589389][T15508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.634496][T15508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.751286][T15508] hsr_slave_0: entered promiscuous mode [ 740.758644][T15508] hsr_slave_1: entered promiscuous mode [ 740.765527][T15508] debugfs: 'hsr0' already exists in 'hsr' [ 740.771556][T15508] Cannot create hsr debugfs directory [ 740.970055][ T5833] Bluetooth: hci6: command tx timeout [ 742.716515][T15550] FAULT_INJECTION: forcing a failure. [ 742.716515][T15550] name failslab, interval 1, probability 0, space 0, times 0 [ 742.766689][T15550] CPU: 1 UID: 0 PID: 15550 Comm: syz.0.2618 Tainted: G L syzkaller #0 PREEMPT(full) [ 742.766746][T15550] Tainted: [L]=SOFTLOCKUP [ 742.766760][T15550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 742.766781][T15550] Call Trace: [ 742.766794][T15550] [ 742.766807][T15550] dump_stack_lvl+0x100/0x190 [ 742.766870][T15550] should_fail_ex.cold+0x5/0xa [ 742.766915][T15550] should_failslab+0xc2/0x120 [ 742.766957][T15550] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 742.767015][T15550] ? sock_alloc_inode+0x25/0x1c0 [ 742.767063][T15550] ? __pfx_sock_alloc_inode+0x10/0x10 [ 742.767107][T15550] sock_alloc_inode+0x25/0x1c0 [ 742.767147][T15550] alloc_inode+0x68/0x250 [ 742.767206][T15550] sock_alloc+0x44/0x280 [ 742.767242][T15550] ? security_socket_create+0x7f/0x250 [ 742.767284][T15550] __sock_create+0xc2/0x860 [ 742.767338][T15550] __sys_socket+0x14d/0x260 [ 742.767385][T15550] ? __pfx___sys_socket+0x10/0x10 [ 742.767451][T15550] __x64_sys_socket+0x72/0xb0 [ 742.767511][T15550] ? lockdep_hardirqs_on+0x78/0x100 [ 742.767549][T15550] do_syscall_64+0x106/0xf80 [ 742.767585][T15550] ? clear_bhb_loop+0x40/0x90 [ 742.767629][T15550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.767667][T15550] RIP: 0033:0x7f68e0b9c819 [ 742.767696][T15550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.767732][T15550] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 742.767766][T15550] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 742.767789][T15550] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 742.767810][T15550] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 742.767832][T15550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 742.767853][T15550] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 742.767899][T15550] [ 742.767917][T15550] socket: no more sockets [ 743.060645][ T5833] Bluetooth: hci6: command tx timeout [ 745.132364][ T5833] Bluetooth: hci6: command tx timeout [ 747.212724][ T5833] Bluetooth: hci6: command tx timeout [ 747.745685][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.752066][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.566787][T15650] sd 0:0:1:0: PR command failed: 1026 [ 751.572300][T15650] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 751.582405][T15650] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 753.906796][T15677] zswap: compressor 000 not available [ 755.221937][T15700] FAULT_INJECTION: forcing a failure. [ 755.221937][T15700] name failslab, interval 1, probability 0, space 0, times 0 [ 755.236179][T15700] CPU: 0 UID: 0 PID: 15700 Comm: syz.0.2659 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.236235][T15700] Tainted: [L]=SOFTLOCKUP [ 755.236249][T15700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 755.236271][T15700] Call Trace: [ 755.236283][T15700] [ 755.236296][T15700] dump_stack_lvl+0x100/0x190 [ 755.236359][T15700] should_fail_ex.cold+0x5/0xa [ 755.236403][T15700] should_failslab+0xc2/0x120 [ 755.236455][T15700] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 755.236515][T15700] ? alloc_inode+0x183/0x250 [ 755.236580][T15700] ? stashed_dentry_get+0x10a/0x2c0 [ 755.236631][T15700] ? stashed_dentry_get+0x10a/0x2c0 [ 755.236677][T15700] alloc_inode+0x183/0x250 [ 755.236725][T15700] path_from_stashed+0x25b/0x750 [ 755.236769][T15700] ? do_raw_spin_unlock+0x145/0x1e0 [ 755.236834][T15700] ns_get_path+0x60/0x80 [ 755.236874][T15700] proc_ns_get_link+0x121/0x230 [ 755.236925][T15700] ? __pfx_proc_ns_get_link+0x10/0x10 [ 755.236983][T15700] ? atime_needs_update+0x8b/0x6b0 [ 755.237040][T15700] pick_link+0xd17/0x13c0 [ 755.237098][T15700] ? __pfx_proc_ns_get_link+0x10/0x10 [ 755.237157][T15700] step_into_slowpath+0x9ba/0xf90 [ 755.237220][T15700] ? __pfx_step_into_slowpath+0x10/0x10 [ 755.237275][T15700] ? find_held_lock+0x2b/0x80 [ 755.237324][T15700] path_openat+0xf95/0x31a0 [ 755.237376][T15700] ? __pfx_path_openat+0x10/0x10 [ 755.237430][T15700] do_file_open+0x20e/0x430 [ 755.237472][T15700] ? __pfx_do_file_open+0x10/0x10 [ 755.237541][T15700] ? alloc_fd+0x476/0x790 [ 755.237581][T15700] ? do_getname+0x191/0x390 [ 755.237632][T15700] do_sys_openat2+0x10d/0x1e0 [ 755.237681][T15700] ? __pfx_do_sys_openat2+0x10/0x10 [ 755.237732][T15700] ? find_held_lock+0x2b/0x80 [ 755.237776][T15700] __x64_sys_openat+0x12d/0x210 [ 755.237826][T15700] ? __pfx___x64_sys_openat+0x10/0x10 [ 755.237893][T15700] do_syscall_64+0x106/0xf80 [ 755.237929][T15700] ? clear_bhb_loop+0x40/0x90 [ 755.237973][T15700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.238011][T15700] RIP: 0033:0x7f68e0b5d04e [ 755.238042][T15700] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 755.238077][T15700] RSP: 002b:00007f68e1aa0ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 755.238119][T15700] RAX: ffffffffffffffda RBX: 00007f68e1aa16c0 RCX: 00007f68e0b5d04e [ 755.238142][T15700] RDX: 0000000000000002 RSI: 00007f68e1aa0f90 RDI: ffffffffffffff9c [ 755.238165][T15700] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 755.238188][T15700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.238210][T15700] R13: 00007f68e0e16128 R14: 00007f68e0e16090 R15: 00007ffd98196438 [ 755.238256][T15700] [ 755.531166][T15702] FAULT_INJECTION: forcing a failure. [ 755.531166][T15702] name failslab, interval 1, probability 0, space 0, times 0 [ 755.544148][T15702] CPU: 1 UID: 0 PID: 15702 Comm: syz.3.2660 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.544205][T15702] Tainted: [L]=SOFTLOCKUP [ 755.544218][T15702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 755.544240][T15702] Call Trace: [ 755.544251][T15702] [ 755.544265][T15702] dump_stack_lvl+0x100/0x190 [ 755.544327][T15702] should_fail_ex.cold+0x5/0xa [ 755.544371][T15702] should_failslab+0xc2/0x120 [ 755.544413][T15702] __kmalloc_cache_noprof+0x7a/0x6f0 [ 755.544463][T15702] ? mon_bin_open+0x1a8/0x470 [ 755.544510][T15702] ? lockdep_init_map_type+0x5c/0x250 [ 755.544568][T15702] mon_bin_open+0x1a8/0x470 [ 755.544614][T15702] ? __pfx_mon_bin_open+0x10/0x10 [ 755.544661][T15702] chrdev_open+0x234/0x6a0 [ 755.544699][T15702] ? __pfx_apparmor_file_open+0x10/0x10 [ 755.544740][T15702] ? __pfx_chrdev_open+0x10/0x10 [ 755.544792][T15702] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 755.544843][T15702] do_dentry_open+0x6d8/0x1660 [ 755.544881][T15702] ? __pfx_chrdev_open+0x10/0x10 [ 755.544932][T15702] vfs_open+0x82/0x3f0 [ 755.544984][T15702] path_openat+0x208c/0x31a0 [ 755.545048][T15702] ? __pfx_path_openat+0x10/0x10 [ 755.545105][T15702] do_file_open+0x20e/0x430 [ 755.545148][T15702] ? __pfx_do_file_open+0x10/0x10 [ 755.545220][T15702] ? alloc_fd+0x476/0x790 [ 755.545262][T15702] ? do_getname+0x191/0x390 [ 755.545314][T15702] do_sys_openat2+0x10d/0x1e0 [ 755.545364][T15702] ? __pfx_do_sys_openat2+0x10/0x10 [ 755.545417][T15702] ? __sys_sendmsg+0x18f/0x220 [ 755.545462][T15702] __x64_sys_openat+0x12d/0x210 [ 755.545513][T15702] ? __pfx___x64_sys_openat+0x10/0x10 [ 755.545582][T15702] do_syscall_64+0x106/0xf80 [ 755.545620][T15702] ? clear_bhb_loop+0x40/0x90 [ 755.545665][T15702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.545701][T15702] RIP: 0033:0x7fd263d9c819 [ 755.545732][T15702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.545768][T15702] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 755.545811][T15702] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 755.545836][T15702] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 755.545860][T15702] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 755.545882][T15702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 755.545904][T15702] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 755.545952][T15702] [ 757.754749][T15741] FAULT_INJECTION: forcing a failure. [ 757.754749][T15741] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 757.786686][T15741] CPU: 0 UID: 0 PID: 15741 Comm: syz.3.2670 Tainted: G L syzkaller #0 PREEMPT(full) [ 757.786738][T15741] Tainted: [L]=SOFTLOCKUP [ 757.786751][T15741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 757.786770][T15741] Call Trace: [ 757.786782][T15741] [ 757.786796][T15741] dump_stack_lvl+0x100/0x190 [ 757.786853][T15741] should_fail_ex.cold+0x5/0xa [ 757.786888][T15741] ? prepare_alloc_pages+0x16d/0x5f0 [ 757.786937][T15741] should_fail_alloc_page+0xeb/0x140 [ 757.786982][T15741] prepare_alloc_pages+0x1f0/0x5f0 [ 757.787035][T15741] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 757.787114][T15741] ? stack_trace_save+0x8e/0xc0 [ 757.787153][T15741] ? __pfx_stack_trace_save+0x10/0x10 [ 757.787190][T15741] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 757.787247][T15741] ? stack_depot_save_flags+0x27/0x9d0 [ 757.787305][T15741] ? kasan_save_stack+0x3f/0x50 [ 757.787337][T15741] ? kasan_save_stack+0x30/0x50 [ 757.787369][T15741] ? kasan_save_track+0x14/0x30 [ 757.787401][T15741] ? __kasan_kmalloc+0xaa/0xb0 [ 757.787437][T15741] ? do_file_open+0x20e/0x430 [ 757.787473][T15741] ? do_sys_openat2+0x10d/0x1e0 [ 757.787520][T15741] ? __x64_sys_openat+0x12d/0x210 [ 757.787579][T15741] ? do_syscall_64+0x106/0xf80 [ 757.787615][T15741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.787660][T15741] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 757.787702][T15741] ? policy_nodemask+0xed/0x4f0 [ 757.787746][T15741] alloc_pages_mpol+0x1fb/0x550 [ 757.787789][T15741] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 757.787842][T15741] alloc_pages_noprof+0x136/0x390 [ 757.787889][T15741] get_zeroed_page_noprof+0x18/0xb0 [ 757.787930][T15741] mon_alloc_buff+0xce/0x1b0 [ 757.787976][T15741] ? kasan_save_track+0x14/0x30 [ 757.788015][T15741] mon_bin_open+0x207/0x470 [ 757.788063][T15741] ? __pfx_mon_bin_open+0x10/0x10 [ 757.788109][T15741] chrdev_open+0x234/0x6a0 [ 757.788147][T15741] ? __pfx_apparmor_file_open+0x10/0x10 [ 757.788188][T15741] ? __pfx_chrdev_open+0x10/0x10 [ 757.788229][T15741] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 757.788279][T15741] do_dentry_open+0x6d8/0x1660 [ 757.788316][T15741] ? __pfx_chrdev_open+0x10/0x10 [ 757.788366][T15741] vfs_open+0x82/0x3f0 [ 757.788419][T15741] path_openat+0x208c/0x31a0 [ 757.788473][T15741] ? __pfx_path_openat+0x10/0x10 [ 757.788530][T15741] do_file_open+0x20e/0x430 [ 757.788584][T15741] ? __pfx_do_file_open+0x10/0x10 [ 757.788656][T15741] ? alloc_fd+0x476/0x790 [ 757.788699][T15741] ? do_getname+0x191/0x390 [ 757.788752][T15741] do_sys_openat2+0x10d/0x1e0 [ 757.788803][T15741] ? __pfx_do_sys_openat2+0x10/0x10 [ 757.788857][T15741] ? __sys_sendmsg+0x18f/0x220 [ 757.788902][T15741] __x64_sys_openat+0x12d/0x210 [ 757.788953][T15741] ? __pfx___x64_sys_openat+0x10/0x10 [ 757.789020][T15741] do_syscall_64+0x106/0xf80 [ 757.789057][T15741] ? clear_bhb_loop+0x40/0x90 [ 757.789101][T15741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.789137][T15741] RIP: 0033:0x7fd263d9c819 [ 757.789168][T15741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.789204][T15741] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 757.789238][T15741] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 757.789262][T15741] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 757.789286][T15741] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 757.789308][T15741] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.789329][T15741] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 757.789377][T15741] [ 760.033367][T15772] FAULT_INJECTION: forcing a failure. [ 760.033367][T15772] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 760.071169][T15772] CPU: 1 UID: 0 PID: 15772 Comm: syz.0.2679 Tainted: G L syzkaller #0 PREEMPT(full) [ 760.071228][T15772] Tainted: [L]=SOFTLOCKUP [ 760.071242][T15772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 760.071265][T15772] Call Trace: [ 760.071276][T15772] [ 760.071290][T15772] dump_stack_lvl+0x100/0x190 [ 760.071354][T15772] should_fail_ex.cold+0x5/0xa [ 760.071403][T15772] ? prepare_alloc_pages+0x16d/0x5f0 [ 760.071453][T15772] should_fail_alloc_page+0xeb/0x140 [ 760.071498][T15772] prepare_alloc_pages+0x1f0/0x5f0 [ 760.071558][T15772] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 760.071631][T15772] ? stack_trace_save+0x8e/0xc0 [ 760.071666][T15772] ? __pfx_stack_trace_save+0x10/0x10 [ 760.071700][T15772] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 760.071753][T15772] ? stack_depot_save_flags+0x27/0x9d0 [ 760.071806][T15772] ? kasan_save_stack+0x3f/0x50 [ 760.071835][T15772] ? kasan_save_stack+0x30/0x50 [ 760.071863][T15772] ? kasan_save_track+0x14/0x30 [ 760.071893][T15772] ? __kasan_kmalloc+0xaa/0xb0 [ 760.071925][T15772] ? do_file_open+0x20e/0x430 [ 760.071971][T15772] ? do_sys_openat2+0x10d/0x1e0 [ 760.072017][T15772] ? __x64_sys_openat+0x12d/0x210 [ 760.072064][T15772] ? do_syscall_64+0x106/0xf80 [ 760.072100][T15772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.072144][T15772] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 760.072183][T15772] ? policy_nodemask+0xed/0x4f0 [ 760.072226][T15772] alloc_pages_mpol+0x1fb/0x550 [ 760.072269][T15772] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 760.072320][T15772] alloc_pages_noprof+0x136/0x390 [ 760.072364][T15772] get_zeroed_page_noprof+0x18/0xb0 [ 760.072407][T15772] mon_alloc_buff+0xce/0x1b0 [ 760.072452][T15772] ? kasan_save_track+0x14/0x30 [ 760.072491][T15772] mon_bin_open+0x207/0x470 [ 760.072549][T15772] ? __pfx_mon_bin_open+0x10/0x10 [ 760.072597][T15772] chrdev_open+0x234/0x6a0 [ 760.072636][T15772] ? __pfx_apparmor_file_open+0x10/0x10 [ 760.072677][T15772] ? __pfx_chrdev_open+0x10/0x10 [ 760.072719][T15772] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 760.072770][T15772] do_dentry_open+0x6d8/0x1660 [ 760.072808][T15772] ? __pfx_chrdev_open+0x10/0x10 [ 760.072858][T15772] vfs_open+0x82/0x3f0 [ 760.072911][T15772] path_openat+0x208c/0x31a0 [ 760.072966][T15772] ? __pfx_path_openat+0x10/0x10 [ 760.073022][T15772] do_file_open+0x20e/0x430 [ 760.073066][T15772] ? __pfx_do_file_open+0x10/0x10 [ 760.073137][T15772] ? alloc_fd+0x476/0x790 [ 760.073179][T15772] ? do_getname+0x191/0x390 [ 760.073231][T15772] do_sys_openat2+0x10d/0x1e0 [ 760.073281][T15772] ? __pfx_do_sys_openat2+0x10/0x10 [ 760.073335][T15772] ? __sys_sendmsg+0x18f/0x220 [ 760.073380][T15772] __x64_sys_openat+0x12d/0x210 [ 760.073433][T15772] ? __pfx___x64_sys_openat+0x10/0x10 [ 760.073501][T15772] do_syscall_64+0x106/0xf80 [ 760.073549][T15772] ? clear_bhb_loop+0x40/0x90 [ 760.073593][T15772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.073632][T15772] RIP: 0033:0x7f68e0b9c819 [ 760.073662][T15772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.073698][T15772] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 760.073733][T15772] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 760.073758][T15772] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 760.073782][T15772] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 760.073805][T15772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 760.073827][T15772] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 760.073873][T15772] [ 762.221561][T15805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2688'. [ 763.037973][T15810] FAULT_INJECTION: forcing a failure. [ 763.037973][T15810] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 763.061318][T15810] CPU: 0 UID: 0 PID: 15810 Comm: syz.3.2690 Tainted: G L syzkaller #0 PREEMPT(full) [ 763.061374][T15810] Tainted: [L]=SOFTLOCKUP [ 763.061387][T15810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 763.061408][T15810] Call Trace: [ 763.061421][T15810] [ 763.061434][T15810] dump_stack_lvl+0x100/0x190 [ 763.061494][T15810] should_fail_ex.cold+0x5/0xa [ 763.061530][T15810] ? prepare_alloc_pages+0x16d/0x5f0 [ 763.061579][T15810] should_fail_alloc_page+0xeb/0x140 [ 763.061622][T15810] prepare_alloc_pages+0x1f0/0x5f0 [ 763.061672][T15810] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 763.061751][T15810] ? stack_trace_save+0x8e/0xc0 [ 763.061790][T15810] ? __pfx_stack_trace_save+0x10/0x10 [ 763.061827][T15810] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 763.061883][T15810] ? stack_depot_save_flags+0x27/0x9d0 [ 763.061942][T15810] ? kasan_save_stack+0x3f/0x50 [ 763.061974][T15810] ? kasan_save_stack+0x30/0x50 [ 763.062006][T15810] ? kasan_save_track+0x14/0x30 [ 763.062038][T15810] ? __kasan_kmalloc+0xaa/0xb0 [ 763.062073][T15810] ? do_file_open+0x20e/0x430 [ 763.062110][T15810] ? do_sys_openat2+0x10d/0x1e0 [ 763.062156][T15810] ? __x64_sys_openat+0x12d/0x210 [ 763.062212][T15810] ? do_syscall_64+0x106/0xf80 [ 763.062250][T15810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.062293][T15810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 763.062333][T15810] ? policy_nodemask+0xed/0x4f0 [ 763.062377][T15810] alloc_pages_mpol+0x1fb/0x550 [ 763.062420][T15810] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 763.062472][T15810] alloc_pages_noprof+0x136/0x390 [ 763.062516][T15810] get_zeroed_page_noprof+0x18/0xb0 [ 763.062558][T15810] mon_alloc_buff+0xce/0x1b0 [ 763.062604][T15810] ? kasan_save_track+0x14/0x30 [ 763.062642][T15810] mon_bin_open+0x207/0x470 [ 763.062689][T15810] ? __pfx_mon_bin_open+0x10/0x10 [ 763.062735][T15810] chrdev_open+0x234/0x6a0 [ 763.062774][T15810] ? __pfx_apparmor_file_open+0x10/0x10 [ 763.062816][T15810] ? __pfx_chrdev_open+0x10/0x10 [ 763.062859][T15810] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 763.062910][T15810] do_dentry_open+0x6d8/0x1660 [ 763.062948][T15810] ? __pfx_chrdev_open+0x10/0x10 [ 763.062998][T15810] vfs_open+0x82/0x3f0 [ 763.063049][T15810] path_openat+0x208c/0x31a0 [ 763.063104][T15810] ? __pfx_path_openat+0x10/0x10 [ 763.063161][T15810] do_file_open+0x20e/0x430 [ 763.063210][T15810] ? __pfx_do_file_open+0x10/0x10 [ 763.063281][T15810] ? alloc_fd+0x476/0x790 [ 763.063323][T15810] ? do_getname+0x191/0x390 [ 763.063376][T15810] do_sys_openat2+0x10d/0x1e0 [ 763.063425][T15810] ? __pfx_do_sys_openat2+0x10/0x10 [ 763.063479][T15810] ? __sys_sendmsg+0x18f/0x220 [ 763.063522][T15810] __x64_sys_openat+0x12d/0x210 [ 763.063573][T15810] ? __pfx___x64_sys_openat+0x10/0x10 [ 763.063643][T15810] do_syscall_64+0x106/0xf80 [ 763.063680][T15810] ? clear_bhb_loop+0x40/0x90 [ 763.063725][T15810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 763.063763][T15810] RIP: 0033:0x7fd263d9c819 [ 763.063793][T15810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 763.063829][T15810] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 763.063879][T15810] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 763.063907][T15810] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 763.063930][T15810] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 763.063952][T15810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 763.063973][T15810] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 763.064020][T15810] [ 764.082058][T15820] block2mtd: parameter too long [ 764.820050][T15834] FAULT_INJECTION: forcing a failure. [ 764.820050][T15834] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 764.854215][T15834] CPU: 0 UID: 0 PID: 15834 Comm: syz.3.2698 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.854271][T15834] Tainted: [L]=SOFTLOCKUP [ 764.854285][T15834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 764.854307][T15834] Call Trace: [ 764.854318][T15834] [ 764.854333][T15834] dump_stack_lvl+0x100/0x190 [ 764.854396][T15834] should_fail_ex.cold+0x5/0xa [ 764.854434][T15834] ? prepare_alloc_pages+0x16d/0x5f0 [ 764.854482][T15834] should_fail_alloc_page+0xeb/0x140 [ 764.854526][T15834] prepare_alloc_pages+0x1f0/0x5f0 [ 764.854578][T15834] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 764.854655][T15834] ? stack_trace_save+0x8e/0xc0 [ 764.854693][T15834] ? __pfx_stack_trace_save+0x10/0x10 [ 764.854731][T15834] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 764.854788][T15834] ? stack_depot_save_flags+0x27/0x9d0 [ 764.854846][T15834] ? kasan_save_stack+0x3f/0x50 [ 764.854879][T15834] ? kasan_save_stack+0x30/0x50 [ 764.854911][T15834] ? kasan_save_track+0x14/0x30 [ 764.854942][T15834] ? __kasan_kmalloc+0xaa/0xb0 [ 764.854977][T15834] ? do_file_open+0x20e/0x430 [ 764.855023][T15834] ? do_sys_openat2+0x10d/0x1e0 [ 764.855070][T15834] ? __x64_sys_openat+0x12d/0x210 [ 764.855118][T15834] ? do_syscall_64+0x106/0xf80 [ 764.855154][T15834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.855199][T15834] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 764.855241][T15834] ? policy_nodemask+0xed/0x4f0 [ 764.855284][T15834] alloc_pages_mpol+0x1fb/0x550 [ 764.855326][T15834] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 764.855379][T15834] alloc_pages_noprof+0x136/0x390 [ 764.855422][T15834] get_zeroed_page_noprof+0x18/0xb0 [ 764.855464][T15834] mon_alloc_buff+0xce/0x1b0 [ 764.855509][T15834] ? kasan_save_track+0x14/0x30 [ 764.855546][T15834] mon_bin_open+0x207/0x470 [ 764.855594][T15834] ? __pfx_mon_bin_open+0x10/0x10 [ 764.855641][T15834] chrdev_open+0x234/0x6a0 [ 764.855679][T15834] ? __pfx_apparmor_file_open+0x10/0x10 [ 764.855721][T15834] ? __pfx_chrdev_open+0x10/0x10 [ 764.855763][T15834] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 764.855813][T15834] do_dentry_open+0x6d8/0x1660 [ 764.855851][T15834] ? __pfx_chrdev_open+0x10/0x10 [ 764.855901][T15834] vfs_open+0x82/0x3f0 [ 764.855972][T15834] path_openat+0x208c/0x31a0 [ 764.856036][T15834] ? __pfx_path_openat+0x10/0x10 [ 764.856092][T15834] do_file_open+0x20e/0x430 [ 764.856137][T15834] ? __pfx_do_file_open+0x10/0x10 [ 764.856210][T15834] ? alloc_fd+0x476/0x790 [ 764.856253][T15834] ? do_getname+0x191/0x390 [ 764.856304][T15834] do_sys_openat2+0x10d/0x1e0 [ 764.856355][T15834] ? __pfx_do_sys_openat2+0x10/0x10 [ 764.856407][T15834] ? __sys_sendmsg+0x18f/0x220 [ 764.856451][T15834] __x64_sys_openat+0x12d/0x210 [ 764.856504][T15834] ? __pfx___x64_sys_openat+0x10/0x10 [ 764.856573][T15834] do_syscall_64+0x106/0xf80 [ 764.856609][T15834] ? clear_bhb_loop+0x40/0x90 [ 764.856653][T15834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.856690][T15834] RIP: 0033:0x7fd263d9c819 [ 764.856722][T15834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.856760][T15834] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 764.856795][T15834] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 764.856819][T15834] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 764.856843][T15834] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 764.856865][T15834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.856887][T15834] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 764.856934][T15834] [ 766.887320][T15865] FAULT_INJECTION: forcing a failure. [ 766.887320][T15865] name failslab, interval 1, probability 0, space 0, times 0 [ 766.900329][T15865] CPU: 0 UID: 0 PID: 15865 Comm: syz.3.2707 Tainted: G L syzkaller #0 PREEMPT(full) [ 766.900381][T15865] Tainted: [L]=SOFTLOCKUP [ 766.900396][T15865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 766.900418][T15865] Call Trace: [ 766.900431][T15865] [ 766.900444][T15865] dump_stack_lvl+0x100/0x190 [ 766.900505][T15865] should_fail_ex.cold+0x5/0xa [ 766.900549][T15865] should_failslab+0xc2/0x120 [ 766.900591][T15865] __kmalloc_cache_noprof+0x7a/0x6f0 [ 766.900641][T15865] ? mon_bin_open+0xe6/0x470 [ 766.900697][T15865] mon_bin_open+0xe6/0x470 [ 766.900745][T15865] ? __pfx_mon_bin_open+0x10/0x10 [ 766.900799][T15865] chrdev_open+0x234/0x6a0 [ 766.900837][T15865] ? __pfx_apparmor_file_open+0x10/0x10 [ 766.900879][T15865] ? __pfx_chrdev_open+0x10/0x10 [ 766.900921][T15865] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 766.900972][T15865] do_dentry_open+0x6d8/0x1660 [ 766.901010][T15865] ? __pfx_chrdev_open+0x10/0x10 [ 766.901061][T15865] vfs_open+0x82/0x3f0 [ 766.901113][T15865] path_openat+0x208c/0x31a0 [ 766.901167][T15865] ? __pfx_path_openat+0x10/0x10 [ 766.901223][T15865] do_file_open+0x20e/0x430 [ 766.901275][T15865] ? __pfx_do_file_open+0x10/0x10 [ 766.901346][T15865] ? alloc_fd+0x476/0x790 [ 766.901389][T15865] ? do_getname+0x191/0x390 [ 766.901441][T15865] do_sys_openat2+0x10d/0x1e0 [ 766.901491][T15865] ? __pfx_do_sys_openat2+0x10/0x10 [ 766.901543][T15865] ? __sys_sendmsg+0x18f/0x220 [ 766.901587][T15865] __x64_sys_openat+0x12d/0x210 [ 766.901638][T15865] ? __pfx___x64_sys_openat+0x10/0x10 [ 766.901706][T15865] do_syscall_64+0x106/0xf80 [ 766.901742][T15865] ? clear_bhb_loop+0x40/0x90 [ 766.901795][T15865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.901832][T15865] RIP: 0033:0x7fd263d9c819 [ 766.901862][T15865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.901897][T15865] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 766.901932][T15865] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 766.901956][T15865] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 766.901979][T15865] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 766.902001][T15865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 766.902023][T15865] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 766.902069][T15865] [ 767.741066][T15876] FAULT_INJECTION: forcing a failure. [ 767.741066][T15876] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 767.741188][T15876] CPU: 0 UID: 0 PID: 15876 Comm: syz.3.2711 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.741235][T15876] Tainted: [L]=SOFTLOCKUP [ 767.741247][T15876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 767.741268][T15876] Call Trace: [ 767.741279][T15876] [ 767.741293][T15876] dump_stack_lvl+0x100/0x190 [ 767.741350][T15876] should_fail_ex.cold+0x5/0xa [ 767.741385][T15876] ? prepare_alloc_pages+0x16d/0x5f0 [ 767.741431][T15876] should_fail_alloc_page+0xeb/0x140 [ 767.741473][T15876] prepare_alloc_pages+0x1f0/0x5f0 [ 767.741522][T15876] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 767.741583][T15876] ? __pfx_css_rstat_updated+0x10/0x10 [ 767.741626][T15876] ? kasan_save_stack+0x3f/0x50 [ 767.741657][T15876] ? kasan_save_stack+0x30/0x50 [ 767.741696][T15876] ? kasan_save_track+0x14/0x30 [ 767.741736][T15876] ? rcu_is_watching+0x12/0xc0 [ 767.741791][T15876] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 767.741856][T15876] ? lru_gen_add_folio+0x20f/0x13e0 [ 767.741900][T15876] ? lock_acquire+0x1cf/0x380 [ 767.741947][T15876] ? find_held_lock+0x2b/0x80 [ 767.741981][T15876] ? page_table_check_set+0x49a/0xa10 [ 767.742015][T15876] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 767.742054][T15876] ? policy_nodemask+0xed/0x4f0 [ 767.742096][T15876] alloc_pages_mpol+0x1fb/0x550 [ 767.742135][T15876] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 767.742185][T15876] folio_alloc_mpol_noprof+0x36/0x340 [ 767.742233][T15876] vma_alloc_folio_noprof+0xed/0x1d0 [ 767.742283][T15876] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 767.742338][T15876] do_anonymous_page+0xb3a/0x1fb0 [ 767.742401][T15876] __handle_mm_fault+0x1d48/0x2b60 [ 767.742456][T15876] ? __pfx___handle_mm_fault+0x10/0x10 [ 767.742507][T15876] ? pte_offset_map_lock+0x174/0x320 [ 767.742545][T15876] ? find_held_lock+0x2b/0x80 [ 767.742592][T15876] ? follow_page_pte+0x5b3/0x1400 [ 767.742640][T15876] handle_mm_fault+0x36d/0xa20 [ 767.742705][T15876] __get_user_pages+0xf9c/0x34d0 [ 767.742763][T15876] ? __pfx___get_user_pages+0x10/0x10 [ 767.742816][T15876] populate_vma_page_range+0x267/0x3f0 [ 767.742861][T15876] ? __pfx_populate_vma_page_range+0x10/0x10 [ 767.742901][T15876] ? __pfx_find_vma_intersection+0x10/0x10 [ 767.742943][T15876] ? do_mmap+0x93f/0x12f0 [ 767.742987][T15876] __mm_populate+0x107/0x3a0 [ 767.743032][T15876] ? __pfx___mm_populate+0x10/0x10 [ 767.743076][T15876] ? up_write+0x290/0x4f0 [ 767.743130][T15876] vm_mmap_pgoff+0x37f/0x470 [ 767.743176][T15876] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 767.743220][T15876] ? do_futex+0x192/0x350 [ 767.743266][T15876] ? __pfx_do_futex+0x10/0x10 [ 767.743320][T15876] ksys_mmap_pgoff+0xe1/0x650 [ 767.743359][T15876] ? __x64_sys_futex+0x34f/0x4d0 [ 767.743405][T15876] ? __x64_sys_futex+0x358/0x4d0 [ 767.743453][T15876] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 767.743492][T15876] ? __pfx___x64_sys_futex+0x10/0x10 [ 767.743540][T15876] ? __pfx_do_writev+0x10/0x10 [ 767.743576][T15876] __x64_sys_mmap+0x125/0x190 [ 767.743634][T15876] do_syscall_64+0x106/0xf80 [ 767.743677][T15876] ? clear_bhb_loop+0x40/0x90 [ 767.743721][T15876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.743756][T15876] RIP: 0033:0x7fd263d9c819 [ 767.743784][T15876] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.743817][T15876] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 767.743849][T15876] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 767.743871][T15876] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 767.743891][T15876] RBP: 00007fd263e32c91 R08: 0000000000000002 R09: 0000000000008000 [ 767.743911][T15876] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 767.743931][T15876] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 767.743976][T15876] [ 769.673955][T15904] FAULT_INJECTION: forcing a failure. [ 769.673955][T15904] name failslab, interval 1, probability 0, space 0, times 0 [ 769.702165][T15904] CPU: 1 UID: 0 PID: 15904 Comm: syz.3.2716 Tainted: G L syzkaller #0 PREEMPT(full) [ 769.702206][T15904] Tainted: [L]=SOFTLOCKUP [ 769.702215][T15904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 769.702230][T15904] Call Trace: [ 769.702239][T15904] [ 769.702249][T15904] dump_stack_lvl+0x100/0x190 [ 769.702305][T15904] should_fail_ex.cold+0x5/0xa [ 769.702335][T15904] ? tomoyo_encode2+0xfb/0x3c0 [ 769.702369][T15904] should_failslab+0xc2/0x120 [ 769.702398][T15904] __kmalloc_noprof+0xe0/0x850 [ 769.702436][T15904] ? d_absolute_path+0x136/0x1b0 [ 769.702477][T15904] tomoyo_encode2+0xfb/0x3c0 [ 769.702524][T15904] tomoyo_encode+0x29/0x50 [ 769.702559][T15904] tomoyo_realpath_from_path+0x18c/0x690 [ 769.702603][T15904] tomoyo_check_open_permission+0x2af/0x3c0 [ 769.702638][T15904] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 769.702699][T15904] ? do_raw_spin_lock+0x128/0x260 [ 769.702739][T15904] ? path_get+0x61/0x80 [ 769.702772][T15904] tomoyo_file_open+0x6b/0x90 [ 769.702797][T15904] security_file_open+0xb5/0x1e0 [ 769.702832][T15904] do_dentry_open+0x5aa/0x1660 [ 769.702860][T15904] ? security_inode_permission+0xbf/0x250 [ 769.702903][T15904] vfs_open+0x82/0x3f0 [ 769.702940][T15904] path_openat+0x208c/0x31a0 [ 769.702978][T15904] ? __pfx_path_openat+0x10/0x10 [ 769.703016][T15904] do_file_open+0x20e/0x430 [ 769.703046][T15904] ? __pfx_do_file_open+0x10/0x10 [ 769.703095][T15904] ? alloc_fd+0x476/0x790 [ 769.703123][T15904] ? do_getname+0x191/0x390 [ 769.703159][T15904] do_sys_openat2+0x10d/0x1e0 [ 769.703194][T15904] ? __pfx_do_sys_openat2+0x10/0x10 [ 769.703231][T15904] ? __sys_sendmsg+0x18f/0x220 [ 769.703261][T15904] __x64_sys_openat+0x12d/0x210 [ 769.703296][T15904] ? __pfx___x64_sys_openat+0x10/0x10 [ 769.703386][T15904] do_syscall_64+0x106/0xf80 [ 769.703423][T15904] ? clear_bhb_loop+0x40/0x90 [ 769.703469][T15904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.703495][T15904] RIP: 0033:0x7fd263d9c819 [ 769.703521][T15904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.703546][T15904] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 769.703570][T15904] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 769.703586][T15904] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 769.703602][T15904] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 769.703618][T15904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.703634][T15904] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 769.703665][T15904] [ 769.703692][T15904] ERROR: Out of memory at tomoyo_realpath_from_path. [ 772.009940][T15956] FAULT_INJECTION: forcing a failure. [ 772.009940][T15956] name failslab, interval 1, probability 0, space 0, times 0 [ 772.095325][T15956] CPU: 0 UID: 0 PID: 15956 Comm: syz.0.2725 Tainted: G L syzkaller #0 PREEMPT(full) [ 772.095380][T15956] Tainted: [L]=SOFTLOCKUP [ 772.095394][T15956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 772.095415][T15956] Call Trace: [ 772.095426][T15956] [ 772.095439][T15956] dump_stack_lvl+0x100/0x190 [ 772.095499][T15956] should_fail_ex.cold+0x5/0xa [ 772.095541][T15956] should_failslab+0xc2/0x120 [ 772.095584][T15956] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 772.095641][T15956] ? security_file_alloc+0x34/0x2c0 [ 772.095689][T15956] ? trace_kmem_cache_alloc+0xf3/0x120 [ 772.095737][T15956] security_file_alloc+0x34/0x2c0 [ 772.095787][T15956] init_file+0x95/0x480 [ 772.095833][T15956] alloc_empty_file+0x73/0x1c0 [ 772.095880][T15956] path_openat+0xe8/0x31a0 [ 772.095917][T15956] ? kasan_save_stack+0x3f/0x50 [ 772.095948][T15956] ? kasan_save_stack+0x30/0x50 [ 772.095980][T15956] ? kasan_save_track+0x14/0x30 [ 772.096021][T15956] ? __kasan_slab_alloc+0x89/0x90 [ 772.096057][T15956] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 772.096112][T15956] ? do_getname+0x35/0x390 [ 772.096156][T15956] ? do_sys_openat2+0xc5/0x1e0 [ 772.096204][T15956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.096246][T15956] ? __pfx_path_openat+0x10/0x10 [ 772.096301][T15956] do_file_open+0x20e/0x430 [ 772.096343][T15956] ? __pfx_do_file_open+0x10/0x10 [ 772.096413][T15956] ? alloc_fd+0x476/0x790 [ 772.096455][T15956] ? do_getname+0x191/0x390 [ 772.096506][T15956] do_sys_openat2+0x10d/0x1e0 [ 772.096555][T15956] ? __pfx_do_sys_openat2+0x10/0x10 [ 772.096608][T15956] ? __sys_sendmsg+0x18f/0x220 [ 772.096652][T15956] __x64_sys_openat+0x12d/0x210 [ 772.096702][T15956] ? __pfx___x64_sys_openat+0x10/0x10 [ 772.096769][T15956] do_syscall_64+0x106/0xf80 [ 772.096806][T15956] ? clear_bhb_loop+0x40/0x90 [ 772.096848][T15956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.096883][T15956] RIP: 0033:0x7f68e0b9c819 [ 772.096913][T15956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 772.096947][T15956] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 772.096979][T15956] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 772.097009][T15956] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 772.097032][T15956] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 772.097054][T15956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 772.097074][T15956] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 772.097119][T15956] [ 773.973901][T15988] FAULT_INJECTION: forcing a failure. [ 773.973901][T15988] name failslab, interval 1, probability 0, space 0, times 0 [ 774.006303][T15988] CPU: 1 UID: 0 PID: 15988 Comm: syz.3.2735 Tainted: G L syzkaller #0 PREEMPT(full) [ 774.006358][T15988] Tainted: [L]=SOFTLOCKUP [ 774.006370][T15988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 774.006391][T15988] Call Trace: [ 774.006401][T15988] [ 774.006415][T15988] dump_stack_lvl+0x100/0x190 [ 774.006477][T15988] should_fail_ex.cold+0x5/0xa [ 774.006528][T15988] ? tomoyo_encode2+0xfb/0x3c0 [ 774.006577][T15988] should_failslab+0xc2/0x120 [ 774.006618][T15988] __kmalloc_noprof+0xe0/0x850 [ 774.006673][T15988] ? d_absolute_path+0x136/0x1b0 [ 774.006730][T15988] tomoyo_encode2+0xfb/0x3c0 [ 774.006786][T15988] tomoyo_encode+0x29/0x50 [ 774.006834][T15988] tomoyo_realpath_from_path+0x18c/0x690 [ 774.006895][T15988] tomoyo_check_open_permission+0x2af/0x3c0 [ 774.006941][T15988] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 774.007032][T15988] ? do_raw_spin_lock+0x128/0x260 [ 774.007087][T15988] ? path_get+0x61/0x80 [ 774.007132][T15988] tomoyo_file_open+0x6b/0x90 [ 774.007167][T15988] security_file_open+0xb5/0x1e0 [ 774.007218][T15988] do_dentry_open+0x5aa/0x1660 [ 774.007258][T15988] ? security_inode_permission+0xbf/0x250 [ 774.007309][T15988] vfs_open+0x82/0x3f0 [ 774.007360][T15988] path_openat+0x208c/0x31a0 [ 774.007411][T15988] ? __pfx_path_openat+0x10/0x10 [ 774.007463][T15988] do_file_open+0x20e/0x430 [ 774.007504][T15988] ? __pfx_do_file_open+0x10/0x10 [ 774.007571][T15988] ? alloc_fd+0x476/0x790 [ 774.007611][T15988] ? do_getname+0x191/0x390 [ 774.007665][T15988] do_sys_openat2+0x10d/0x1e0 [ 774.007712][T15988] ? __pfx_do_sys_openat2+0x10/0x10 [ 774.007764][T15988] ? __sys_sendmsg+0x18f/0x220 [ 774.007805][T15988] __x64_sys_openat+0x12d/0x210 [ 774.007855][T15988] ? __pfx___x64_sys_openat+0x10/0x10 [ 774.007919][T15988] do_syscall_64+0x106/0xf80 [ 774.007955][T15988] ? clear_bhb_loop+0x40/0x90 [ 774.008002][T15988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 774.008037][T15988] RIP: 0033:0x7fd263d9c819 [ 774.008066][T15988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 774.008099][T15988] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 774.008132][T15988] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 774.008154][T15988] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 774.008175][T15988] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 774.008195][T15988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 774.008215][T15988] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 774.008259][T15988] [ 774.008292][T15988] ERROR: Out of memory at tomoyo_realpath_from_path. [ 775.426883][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 776.439606][T16017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2741'. [ 777.584887][T16028] FAULT_INJECTION: forcing a failure. [ 777.584887][T16028] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 777.620458][T16028] CPU: 0 UID: 0 PID: 16028 Comm: syz.3.2744 Tainted: G L syzkaller #0 PREEMPT(full) [ 777.620516][T16028] Tainted: [L]=SOFTLOCKUP [ 777.620530][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 777.620552][T16028] Call Trace: [ 777.620563][T16028] [ 777.620578][T16028] dump_stack_lvl+0x100/0x190 [ 777.620643][T16028] should_fail_ex.cold+0x5/0xa [ 777.620679][T16028] ? prepare_alloc_pages+0x16d/0x5f0 [ 777.620728][T16028] should_fail_alloc_page+0xeb/0x140 [ 777.620771][T16028] prepare_alloc_pages+0x1f0/0x5f0 [ 777.620822][T16028] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 777.620900][T16028] ? stack_trace_save+0x8e/0xc0 [ 777.620939][T16028] ? __pfx_stack_trace_save+0x10/0x10 [ 777.620977][T16028] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 777.621034][T16028] ? stack_depot_save_flags+0x27/0x9d0 [ 777.621093][T16028] ? kasan_save_stack+0x3f/0x50 [ 777.621126][T16028] ? kasan_save_stack+0x30/0x50 [ 777.621156][T16028] ? kasan_save_track+0x14/0x30 [ 777.621188][T16028] ? __kasan_kmalloc+0xaa/0xb0 [ 777.621223][T16028] ? do_file_open+0x20e/0x430 [ 777.621261][T16028] ? do_sys_openat2+0x10d/0x1e0 [ 777.621308][T16028] ? __x64_sys_openat+0x12d/0x210 [ 777.621364][T16028] ? do_syscall_64+0x106/0xf80 [ 777.621401][T16028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.621445][T16028] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 777.621487][T16028] ? policy_nodemask+0xed/0x4f0 [ 777.621531][T16028] alloc_pages_mpol+0x1fb/0x550 [ 777.621573][T16028] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 777.621626][T16028] alloc_pages_noprof+0x136/0x390 [ 777.621677][T16028] get_zeroed_page_noprof+0x18/0xb0 [ 777.621720][T16028] mon_alloc_buff+0xce/0x1b0 [ 777.621765][T16028] ? kasan_save_track+0x14/0x30 [ 777.621803][T16028] mon_bin_open+0x207/0x470 [ 777.621851][T16028] ? __pfx_mon_bin_open+0x10/0x10 [ 777.621898][T16028] chrdev_open+0x234/0x6a0 [ 777.621937][T16028] ? __pfx_apparmor_file_open+0x10/0x10 [ 777.621977][T16028] ? __pfx_chrdev_open+0x10/0x10 [ 777.622020][T16028] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 777.622071][T16028] do_dentry_open+0x6d8/0x1660 [ 777.622109][T16028] ? __pfx_chrdev_open+0x10/0x10 [ 777.622160][T16028] vfs_open+0x82/0x3f0 [ 777.622212][T16028] path_openat+0x208c/0x31a0 [ 777.622267][T16028] ? __pfx_path_openat+0x10/0x10 [ 777.622323][T16028] do_file_open+0x20e/0x430 [ 777.622373][T16028] ? __pfx_do_file_open+0x10/0x10 [ 777.622445][T16028] ? alloc_fd+0x476/0x790 [ 777.622488][T16028] ? do_getname+0x191/0x390 [ 777.622540][T16028] do_sys_openat2+0x10d/0x1e0 [ 777.622600][T16028] ? __pfx_do_sys_openat2+0x10/0x10 [ 777.622652][T16028] ? __sys_sendmsg+0x18f/0x220 [ 777.622698][T16028] __x64_sys_openat+0x12d/0x210 [ 777.622751][T16028] ? __pfx___x64_sys_openat+0x10/0x10 [ 777.622819][T16028] do_syscall_64+0x106/0xf80 [ 777.622856][T16028] ? clear_bhb_loop+0x40/0x90 [ 777.622901][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.622937][T16028] RIP: 0033:0x7fd263d9c819 [ 777.622968][T16028] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 777.623004][T16028] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 777.623038][T16028] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 777.623061][T16028] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 777.623084][T16028] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 777.623106][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.623128][T16028] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 777.623174][T16028] [ 778.217908][T13664] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 778.230714][T13664] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 778.239384][T13664] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 778.247612][T13664] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 778.260994][T13664] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 778.608697][T16029] chnl_net:caif_netlink_parms(): no params data found [ 778.776099][T16029] bridge0: port 1(bridge_slave_0) entered blocking state [ 778.786251][T16029] bridge0: port 1(bridge_slave_0) entered disabled state [ 778.808768][T16029] bridge_slave_0: entered allmulticast mode [ 778.817045][T16029] bridge_slave_0: entered promiscuous mode [ 778.838199][T16029] bridge0: port 2(bridge_slave_1) entered blocking state [ 778.848640][T16029] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.856297][T16029] bridge_slave_1: entered allmulticast mode [ 778.877137][T16029] bridge_slave_1: entered promiscuous mode [ 778.980007][T16029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 779.013795][T16029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 779.085185][T16029] team0: Port device team_slave_0 added [ 779.102648][T16029] team0: Port device team_slave_1 added [ 779.169622][T16029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 779.169648][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.169694][T16029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 779.176381][T16029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 779.268662][T16029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 779.268714][T16029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 779.380944][T16029] hsr_slave_0: entered promiscuous mode [ 779.382296][T16029] hsr_slave_1: entered promiscuous mode [ 779.383211][T16029] debugfs: 'hsr0' already exists in 'hsr' [ 779.383241][T16029] Cannot create hsr debugfs directory [ 780.351217][ T5833] Bluetooth: hci7: command tx timeout [ 780.509605][ T5833] Bluetooth: hci4: command 0x0406 tx timeout [ 782.032674][T16061] sd 0:0:1:0: PR command failed: 1026 [ 782.040229][T16061] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 782.047039][T16061] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 782.430640][T13664] Bluetooth: hci7: command tx timeout [ 782.787956][T16063] FAULT_INJECTION: forcing a failure. [ 782.787956][T16063] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 782.822876][T16063] CPU: 1 UID: 0 PID: 16063 Comm: syz.3.2752 Tainted: G L syzkaller #0 PREEMPT(full) [ 782.822935][T16063] Tainted: [L]=SOFTLOCKUP [ 782.822950][T16063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 782.822971][T16063] Call Trace: [ 782.822983][T16063] [ 782.822997][T16063] dump_stack_lvl+0x100/0x190 [ 782.823055][T16063] should_fail_ex.cold+0x5/0xa [ 782.823102][T16063] ? prepare_alloc_pages+0x16d/0x5f0 [ 782.823152][T16063] should_fail_alloc_page+0xeb/0x140 [ 782.823196][T16063] prepare_alloc_pages+0x1f0/0x5f0 [ 782.823247][T16063] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 782.823327][T16063] ? stack_trace_save+0x8e/0xc0 [ 782.823364][T16063] ? __pfx_stack_trace_save+0x10/0x10 [ 782.823402][T16063] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 782.823458][T16063] ? stack_depot_save_flags+0x27/0x9d0 [ 782.823516][T16063] ? kasan_save_stack+0x3f/0x50 [ 782.823548][T16063] ? kasan_save_stack+0x30/0x50 [ 782.823580][T16063] ? kasan_save_track+0x14/0x30 [ 782.823612][T16063] ? __kasan_kmalloc+0xaa/0xb0 [ 782.823647][T16063] ? do_file_open+0x20e/0x430 [ 782.823685][T16063] ? do_sys_openat2+0x10d/0x1e0 [ 782.823731][T16063] ? __x64_sys_openat+0x12d/0x210 [ 782.823777][T16063] ? do_syscall_64+0x106/0xf80 [ 782.823812][T16063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.823857][T16063] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 782.823898][T16063] ? policy_nodemask+0xed/0x4f0 [ 782.823942][T16063] alloc_pages_mpol+0x1fb/0x550 [ 782.823985][T16063] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 782.824038][T16063] alloc_pages_noprof+0x136/0x390 [ 782.824080][T16063] get_zeroed_page_noprof+0x18/0xb0 [ 782.824130][T16063] mon_alloc_buff+0xce/0x1b0 [ 782.824177][T16063] ? kasan_save_track+0x14/0x30 [ 782.824216][T16063] mon_bin_open+0x207/0x470 [ 782.824263][T16063] ? __pfx_mon_bin_open+0x10/0x10 [ 782.824309][T16063] chrdev_open+0x234/0x6a0 [ 782.824346][T16063] ? __pfx_apparmor_file_open+0x10/0x10 [ 782.824388][T16063] ? __pfx_chrdev_open+0x10/0x10 [ 782.824429][T16063] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 782.824479][T16063] do_dentry_open+0x6d8/0x1660 [ 782.824516][T16063] ? __pfx_chrdev_open+0x10/0x10 [ 782.824564][T16063] vfs_open+0x82/0x3f0 [ 782.824616][T16063] path_openat+0x208c/0x31a0 [ 782.824670][T16063] ? __pfx_path_openat+0x10/0x10 [ 782.824725][T16063] do_file_open+0x20e/0x430 [ 782.824768][T16063] ? __pfx_do_file_open+0x10/0x10 [ 782.824839][T16063] ? alloc_fd+0x476/0x790 [ 782.824883][T16063] ? do_getname+0x191/0x390 [ 782.824935][T16063] do_sys_openat2+0x10d/0x1e0 [ 782.824985][T16063] ? __pfx_do_sys_openat2+0x10/0x10 [ 782.825039][T16063] ? __sys_sendmsg+0x18f/0x220 [ 782.825083][T16063] __x64_sys_openat+0x12d/0x210 [ 782.825144][T16063] ? __pfx___x64_sys_openat+0x10/0x10 [ 782.825212][T16063] do_syscall_64+0x106/0xf80 [ 782.825248][T16063] ? clear_bhb_loop+0x40/0x90 [ 782.825291][T16063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.825328][T16063] RIP: 0033:0x7fd263d9c819 [ 782.825358][T16063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 782.825392][T16063] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 782.825427][T16063] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 782.825451][T16063] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 782.825474][T16063] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 782.825496][T16063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.825517][T16063] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 782.825564][T16063] [ 784.511743][T13664] Bluetooth: hci7: command tx timeout [ 785.953760][T16089] FAULT_INJECTION: forcing a failure. [ 785.953760][T16089] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 785.968470][T16089] CPU: 0 UID: 0 PID: 16089 Comm: syz.3.2760 Tainted: G L syzkaller #0 PREEMPT(full) [ 785.968528][T16089] Tainted: [L]=SOFTLOCKUP [ 785.968541][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 785.968563][T16089] Call Trace: [ 785.968577][T16089] [ 785.968590][T16089] dump_stack_lvl+0x100/0x190 [ 785.968653][T16089] should_fail_ex.cold+0x5/0xa [ 785.968691][T16089] ? prepare_alloc_pages+0x16d/0x5f0 [ 785.968739][T16089] should_fail_alloc_page+0xeb/0x140 [ 785.968785][T16089] prepare_alloc_pages+0x1f0/0x5f0 [ 785.968836][T16089] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 785.968914][T16089] ? stack_trace_save+0x8e/0xc0 [ 785.968953][T16089] ? __pfx_stack_trace_save+0x10/0x10 [ 785.968991][T16089] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 785.969048][T16089] ? stack_depot_save_flags+0x27/0x9d0 [ 785.969107][T16089] ? kasan_save_stack+0x3f/0x50 [ 785.969140][T16089] ? kasan_save_stack+0x30/0x50 [ 785.969171][T16089] ? kasan_save_track+0x14/0x30 [ 785.969203][T16089] ? __kasan_kmalloc+0xaa/0xb0 [ 785.969239][T16089] ? do_file_open+0x20e/0x430 [ 785.969276][T16089] ? do_sys_openat2+0x10d/0x1e0 [ 785.969323][T16089] ? __x64_sys_openat+0x12d/0x210 [ 785.969371][T16089] ? do_syscall_64+0x106/0xf80 [ 785.969408][T16089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.969452][T16089] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 785.969502][T16089] ? policy_nodemask+0xed/0x4f0 [ 785.969546][T16089] alloc_pages_mpol+0x1fb/0x550 [ 785.969590][T16089] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 785.969642][T16089] alloc_pages_noprof+0x136/0x390 [ 785.969686][T16089] get_zeroed_page_noprof+0x18/0xb0 [ 785.969729][T16089] mon_alloc_buff+0xce/0x1b0 [ 785.969774][T16089] ? kasan_save_track+0x14/0x30 [ 785.969813][T16089] mon_bin_open+0x207/0x470 [ 785.969859][T16089] ? __pfx_mon_bin_open+0x10/0x10 [ 785.969906][T16089] chrdev_open+0x234/0x6a0 [ 785.969944][T16089] ? __pfx_apparmor_file_open+0x10/0x10 [ 785.969985][T16089] ? __pfx_chrdev_open+0x10/0x10 [ 785.970027][T16089] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 785.970078][T16089] do_dentry_open+0x6d8/0x1660 [ 785.970116][T16089] ? __pfx_chrdev_open+0x10/0x10 [ 785.970166][T16089] vfs_open+0x82/0x3f0 [ 785.970218][T16089] path_openat+0x208c/0x31a0 [ 785.970274][T16089] ? __pfx_path_openat+0x10/0x10 [ 785.970331][T16089] do_file_open+0x20e/0x430 [ 785.970375][T16089] ? __pfx_do_file_open+0x10/0x10 [ 785.970446][T16089] ? alloc_fd+0x476/0x790 [ 785.970496][T16089] ? do_getname+0x191/0x390 [ 785.970549][T16089] do_sys_openat2+0x10d/0x1e0 [ 785.970599][T16089] ? __pfx_do_sys_openat2+0x10/0x10 [ 785.970652][T16089] ? __sys_sendmsg+0x18f/0x220 [ 785.970696][T16089] __x64_sys_openat+0x12d/0x210 [ 785.970748][T16089] ? __pfx___x64_sys_openat+0x10/0x10 [ 785.970817][T16089] do_syscall_64+0x106/0xf80 [ 785.970855][T16089] ? clear_bhb_loop+0x40/0x90 [ 785.970898][T16089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 785.970936][T16089] RIP: 0033:0x7fd263d9c819 [ 785.970967][T16089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 785.971003][T16089] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 785.971037][T16089] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 785.971060][T16089] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 785.971084][T16089] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 785.971106][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 785.971128][T16089] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 785.971174][T16089] [ 786.592405][T13664] Bluetooth: hci7: command tx timeout [ 786.888311][T16096] FAULT_INJECTION: forcing a failure. [ 786.888311][T16096] name failslab, interval 1, probability 0, space 0, times 0 [ 786.952740][T16096] CPU: 1 UID: 0 PID: 16096 Comm: syz.3.2761 Tainted: G L syzkaller #0 PREEMPT(full) [ 786.952804][T16096] Tainted: [L]=SOFTLOCKUP [ 786.952819][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 786.952840][T16096] Call Trace: [ 786.952853][T16096] [ 786.952867][T16096] dump_stack_lvl+0x100/0x190 [ 786.952931][T16096] should_fail_ex.cold+0x5/0xa [ 786.952974][T16096] ? tomoyo_encode2+0xfb/0x3c0 [ 786.953026][T16096] should_failslab+0xc2/0x120 [ 786.953067][T16096] __kmalloc_noprof+0xe0/0x850 [ 786.953121][T16096] ? d_absolute_path+0x136/0x1b0 [ 786.953179][T16096] tomoyo_encode2+0xfb/0x3c0 [ 786.953237][T16096] tomoyo_encode+0x29/0x50 [ 786.953287][T16096] tomoyo_realpath_from_path+0x18c/0x690 [ 786.953360][T16096] tomoyo_check_open_permission+0x2af/0x3c0 [ 786.953409][T16096] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 786.953498][T16096] ? do_raw_spin_lock+0x128/0x260 [ 786.953557][T16096] ? path_get+0x61/0x80 [ 786.953605][T16096] tomoyo_file_open+0x6b/0x90 [ 786.953641][T16096] security_file_open+0xb5/0x1e0 [ 786.953692][T16096] do_dentry_open+0x5aa/0x1660 [ 786.953734][T16096] ? security_inode_permission+0xbf/0x250 [ 786.953787][T16096] vfs_open+0x82/0x3f0 [ 786.953840][T16096] path_openat+0x208c/0x31a0 [ 786.953893][T16096] ? __pfx_path_openat+0x10/0x10 [ 786.953950][T16096] do_file_open+0x20e/0x430 [ 786.953994][T16096] ? __pfx_do_file_open+0x10/0x10 [ 786.954064][T16096] ? alloc_fd+0x476/0x790 [ 786.954107][T16096] ? do_getname+0x191/0x390 [ 786.954158][T16096] do_sys_openat2+0x10d/0x1e0 [ 786.954207][T16096] ? __pfx_do_sys_openat2+0x10/0x10 [ 786.954262][T16096] ? __sys_sendmsg+0x18f/0x220 [ 786.954306][T16096] __x64_sys_openat+0x12d/0x210 [ 786.954367][T16096] ? __pfx___x64_sys_openat+0x10/0x10 [ 786.954437][T16096] do_syscall_64+0x106/0xf80 [ 786.954474][T16096] ? clear_bhb_loop+0x40/0x90 [ 786.954519][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 786.954558][T16096] RIP: 0033:0x7fd263d9c819 [ 786.954587][T16096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 786.954624][T16096] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 786.954659][T16096] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 786.954689][T16096] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 786.954713][T16096] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 786.954736][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 786.954757][T16096] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 786.954805][T16096] [ 786.954891][T16096] ERROR: Out of memory at tomoyo_realpath_from_path. [ 788.626852][T16111] FAULT_INJECTION: forcing a failure. [ 788.626852][T16111] name failslab, interval 1, probability 0, space 0, times 0 [ 788.644563][T16113] FAULT_INJECTION: forcing a failure. [ 788.644563][T16113] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 788.663416][T16113] CPU: 0 UID: 0 PID: 16113 Comm: syz.0.2769 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.663476][T16113] Tainted: [L]=SOFTLOCKUP [ 788.663489][T16113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 788.663510][T16113] Call Trace: [ 788.663523][T16113] [ 788.663537][T16113] dump_stack_lvl+0x100/0x190 [ 788.663598][T16113] should_fail_ex.cold+0x5/0xa [ 788.663634][T16113] ? prepare_alloc_pages+0x16d/0x5f0 [ 788.663682][T16113] should_fail_alloc_page+0xeb/0x140 [ 788.663725][T16113] prepare_alloc_pages+0x1f0/0x5f0 [ 788.663776][T16113] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 788.663851][T16113] ? stack_trace_save+0x8e/0xc0 [ 788.663888][T16113] ? __pfx_stack_trace_save+0x10/0x10 [ 788.663925][T16113] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 788.663981][T16113] ? stack_depot_save_flags+0x27/0x9d0 [ 788.664040][T16113] ? kasan_save_stack+0x3f/0x50 [ 788.664074][T16113] ? kasan_save_stack+0x30/0x50 [ 788.664106][T16113] ? kasan_save_track+0x14/0x30 [ 788.664138][T16113] ? __kasan_kmalloc+0xaa/0xb0 [ 788.664174][T16113] ? do_file_open+0x20e/0x430 [ 788.664212][T16113] ? do_sys_openat2+0x10d/0x1e0 [ 788.664259][T16113] ? __x64_sys_openat+0x12d/0x210 [ 788.664306][T16113] ? do_syscall_64+0x106/0xf80 [ 788.664341][T16113] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.664385][T16113] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 788.664427][T16113] ? policy_nodemask+0xed/0x4f0 [ 788.664476][T16113] alloc_pages_mpol+0x1fb/0x550 [ 788.664519][T16113] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 788.664572][T16113] alloc_pages_noprof+0x136/0x390 [ 788.664615][T16113] get_zeroed_page_noprof+0x18/0xb0 [ 788.664658][T16113] mon_alloc_buff+0xce/0x1b0 [ 788.664703][T16113] ? kasan_save_track+0x14/0x30 [ 788.664741][T16113] mon_bin_open+0x207/0x470 [ 788.664788][T16113] ? __pfx_mon_bin_open+0x10/0x10 [ 788.664835][T16113] chrdev_open+0x234/0x6a0 [ 788.664873][T16113] ? __pfx_apparmor_file_open+0x10/0x10 [ 788.664913][T16113] ? __pfx_chrdev_open+0x10/0x10 [ 788.664955][T16113] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 788.665006][T16113] do_dentry_open+0x6d8/0x1660 [ 788.665044][T16113] ? __pfx_chrdev_open+0x10/0x10 [ 788.665095][T16113] vfs_open+0x82/0x3f0 [ 788.665147][T16113] path_openat+0x208c/0x31a0 [ 788.665201][T16113] ? __pfx_path_openat+0x10/0x10 [ 788.665257][T16113] do_file_open+0x20e/0x430 [ 788.665301][T16113] ? __pfx_do_file_open+0x10/0x10 [ 788.665372][T16113] ? alloc_fd+0x476/0x790 [ 788.665414][T16113] ? do_getname+0x191/0x390 [ 788.665465][T16113] do_sys_openat2+0x10d/0x1e0 [ 788.665521][T16113] ? __pfx_do_sys_openat2+0x10/0x10 [ 788.665574][T16113] ? __sys_sendmsg+0x18f/0x220 [ 788.665618][T16113] __x64_sys_openat+0x12d/0x210 [ 788.665669][T16113] ? __pfx___x64_sys_openat+0x10/0x10 [ 788.665737][T16113] do_syscall_64+0x106/0xf80 [ 788.665772][T16113] ? clear_bhb_loop+0x40/0x90 [ 788.665816][T16113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.665853][T16113] RIP: 0033:0x7f68e0b9c819 [ 788.665884][T16113] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.665919][T16113] RSP: 002b:00007f68e1ac2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 788.665954][T16113] RAX: ffffffffffffffda RBX: 00007f68e0e15fa0 RCX: 00007f68e0b9c819 [ 788.665977][T16113] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 788.666000][T16113] RBP: 00007f68e0c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 788.666021][T16113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.666042][T16113] R13: 00007f68e0e16038 R14: 00007f68e0e15fa0 R15: 00007ffd98196438 [ 788.666086][T16113] [ 788.667802][T16111] CPU: 1 UID: 0 PID: 16111 Comm: syz.3.2768 Tainted: G L syzkaller #0 PREEMPT(full) [ 788.667858][T16111] Tainted: [L]=SOFTLOCKUP [ 788.667867][T16111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 788.667882][T16111] Call Trace: [ 788.667891][T16111] [ 788.667901][T16111] dump_stack_lvl+0x100/0x190 [ 788.667943][T16111] should_fail_ex.cold+0x5/0xa [ 788.667972][T16111] ? tomoyo_encode2+0xfb/0x3c0 [ 788.668006][T16111] should_failslab+0xc2/0x120 [ 788.668034][T16111] __kmalloc_noprof+0xe0/0x850 [ 788.668073][T16111] ? d_absolute_path+0x136/0x1b0 [ 788.668114][T16111] tomoyo_encode2+0xfb/0x3c0 [ 788.668153][T16111] tomoyo_encode+0x29/0x50 [ 788.668188][T16111] tomoyo_realpath_from_path+0x18c/0x690 [ 788.668238][T16111] tomoyo_check_open_permission+0x2af/0x3c0 [ 788.668272][T16111] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 788.668334][T16111] ? do_raw_spin_lock+0x128/0x260 [ 788.668374][T16111] ? path_get+0x61/0x80 [ 788.668407][T16111] tomoyo_file_open+0x6b/0x90 [ 788.668432][T16111] security_file_open+0xb5/0x1e0 [ 788.668468][T16111] do_dentry_open+0x5aa/0x1660 [ 788.668496][T16111] ? security_inode_permission+0xbf/0x250 [ 788.668533][T16111] vfs_open+0x82/0x3f0 [ 788.668569][T16111] path_openat+0x208c/0x31a0 [ 788.668605][T16111] ? __pfx_path_openat+0x10/0x10 [ 788.668643][T16111] do_file_open+0x20e/0x430 [ 788.668673][T16111] ? __pfx_do_file_open+0x10/0x10 [ 788.668721][T16111] ? alloc_fd+0x476/0x790 [ 788.668750][T16111] ? do_getname+0x191/0x390 [ 788.668786][T16111] do_sys_openat2+0x10d/0x1e0 [ 788.668820][T16111] ? __pfx_do_sys_openat2+0x10/0x10 [ 788.668857][T16111] ? __sys_sendmsg+0x18f/0x220 [ 788.668887][T16111] __x64_sys_openat+0x12d/0x210 [ 788.668923][T16111] ? __pfx___x64_sys_openat+0x10/0x10 [ 788.668969][T16111] do_syscall_64+0x106/0xf80 [ 788.668994][T16111] ? clear_bhb_loop+0x40/0x90 [ 788.669024][T16111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 788.669049][T16111] RIP: 0033:0x7fd263d9c819 [ 788.669069][T16111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 788.669093][T16111] RSP: 002b:00007fd264d43028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 788.669116][T16111] RAX: ffffffffffffffda RBX: 00007fd264015fa0 RCX: 00007fd263d9c819 [ 788.669132][T16111] RDX: 0000000000121200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 788.669148][T16111] RBP: 00007fd263e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 788.669163][T16111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 788.669178][T16111] R13: 00007fd264016038 R14: 00007fd264015fa0 R15: 00007fffc842f758 [ 788.669210][T16111] [ 788.669355][T16111] ERROR: Out of memory at tomoyo_realpath_from_path. [ 790.954127][T16124] < [ 794.361724][T16156] netlink: 'syz.0.2779': attribute type 21 has an invalid length. [ 794.396317][T16156] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2779'. [ 794.405420][T16156] IPv6: NLM_F_CREATE should be specified when creating new route [ 794.831272][T16161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2779'. [ 799.286036][T15206] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 799.305829][T15206] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 799.314109][T15206] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 799.324984][T15206] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 799.333789][T15206] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 799.516825][T16169] chnl_net:caif_netlink_parms(): no params data found [ 799.610011][T16169] bridge0: port 1(bridge_slave_0) entered blocking state [ 799.617421][T16169] bridge0: port 1(bridge_slave_0) entered disabled state [ 799.625142][T16169] bridge_slave_0: entered allmulticast mode [ 799.633004][T16169] bridge_slave_0: entered promiscuous mode [ 799.641712][T16169] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.649096][T16169] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.656357][T16169] bridge_slave_1: entered allmulticast mode [ 799.665638][T16169] bridge_slave_1: entered promiscuous mode [ 799.699742][T16169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 799.714164][T16169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 799.749785][T16169] team0: Port device team_slave_0 added [ 799.758140][T16169] team0: Port device team_slave_1 added [ 799.790046][T16169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 799.797378][T16169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.825418][T16169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 799.838261][T16169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 799.845646][T16169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 799.871977][T16169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 799.929638][T16169] hsr_slave_0: entered promiscuous mode [ 799.936389][T16169] hsr_slave_1: entered promiscuous mode [ 799.943260][T16169] debugfs: 'hsr0' already exists in 'hsr' [ 799.949125][T16169] Cannot create hsr debugfs directory [ 800.999709][T15206] Bluetooth: hci1: command 0x0406 tx timeout [ 801.399882][T13664] Bluetooth: hci8: command tx timeout [ 803.490927][T13664] Bluetooth: hci8: command tx timeout [ 805.561990][T13664] Bluetooth: hci8: command tx timeout [ 807.642970][T13664] Bluetooth: hci8: command tx timeout [ 809.167441][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.175191][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 825.812497][ T31] INFO: task syz-executor:14520 blocked for more than 143 seconds. [ 825.820542][ T31] Tainted: G L syzkaller #0 [ 825.830990][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 825.840571][ T31] task:syz-executor state:D stack:24872 pid:14520 tgid:14520 ppid:1 task_flags:0x480140 flags:0x00080002 [ 825.853683][ T31] Call Trace: [ 825.857024][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 825.860060][ T31] __schedule+0xfee/0x6120 [ 825.865511][ T31] ? __lock_acquire+0x4a5/0x2630 [ 825.870670][ T31] ? __pfx___schedule+0x10/0x10 [ 825.875763][ T31] ? find_held_lock+0x2b/0x80 [ 825.880524][ T31] ? schedule+0x2bf/0x390 [ 825.885141][ T31] schedule+0xdd/0x390 [ 825.889285][ T31] schedule_timeout+0x1b2/0x280 [ 825.895965][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 825.901459][ T31] ? mark_held_locks+0x40/0x70 [ 825.906916][ T31] __wait_for_common+0x2e7/0x4c0 [ 825.912928][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 825.918436][ T31] ? __pfx___wait_for_common+0x10/0x10 [ 825.925759][ T31] remove_one+0x312/0x420 [ 825.930194][ T31] ? find_next_child+0x18f/0x280 [ 825.936513][ T31] __simple_recursive_removal+0x148/0x5c0 [ 825.942788][ T31] ? __pfx_remove_one+0x10/0x10 [ 825.947731][ T31] debugfs_remove+0x5d/0x80 [ 825.952829][ T31] nsim_dev_health_exit+0x3b/0xe0 [ 825.957952][ T31] nsim_dev_reload_destroy+0x144/0x4a0 [ 825.964113][ T31] nsim_drv_remove+0x52/0x1e0 [ 825.968864][ T31] ? __pfx_nsim_bus_remove+0x10/0x10 [ 825.975007][ T31] device_remove+0xcb/0x180 [ 825.979869][ T31] device_release_driver_internal+0x44e/0x620 [ 825.987568][ T31] bus_remove_device+0x2bc/0x560 [ 825.994341][ T31] ? __pfx_bus_remove_device+0x10/0x10 [ 825.999890][ T31] ? __pfx_device_remove_attrs+0x10/0x10 [ 826.006108][ T31] ? up_write+0x290/0x4f0 [ 826.010710][ T31] device_del+0x376/0x9b0 [ 826.015816][ T31] ? __pfx_device_del+0x10/0x10 [ 826.020942][ T31] ? __lock_acquire+0x4a5/0x2630 [ 826.027593][ T31] device_unregister+0x1d/0xe0 [ 826.033223][ T31] del_device_store+0x346/0x480 [ 826.039896][ T31] ? __pfx_del_device_store+0x10/0x10 [ 826.046603][ T31] ? find_held_lock+0x2b/0x80 [ 826.051503][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 826.064481][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 826.069445][ T31] ? __pfx_del_device_store+0x10/0x10 [ 826.075652][ T31] bus_attr_store+0x74/0xb0 [ 826.080249][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 826.086111][ T31] sysfs_kf_write+0xf2/0x150 [ 826.090795][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 826.096777][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 826.102807][ T31] vfs_write+0x6ac/0x1070 [ 826.107246][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 826.113994][ T31] ? __pfx_vfs_write+0x10/0x10 [ 826.118849][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.124760][ T31] ksys_write+0x12a/0x250 [ 826.129298][ T31] ? __pfx_ksys_write+0x10/0x10 [ 826.134925][ T31] do_syscall_64+0x106/0xf80 [ 826.140685][ T31] ? clear_bhb_loop+0x40/0x90 [ 826.146074][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.152534][ T31] RIP: 0033:0x7fc4c7b5d04e [ 826.157284][ T31] RSP: 002b:00007ffe13aa5de8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 826.166541][ T31] RAX: ffffffffffffffda RBX: 000055557dd8f500 RCX: 00007fc4c7b5d04e [ 826.175042][ T31] RDX: 0000000000000001 RSI: 00007ffe13aa5e70 RDI: 0000000000000005 [ 826.183492][ T31] RBP: 00007fc4c7c33514 R08: 0000000000000000 R09: 0000000000000000 [ 826.191764][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.200362][ T31] R13: 00007ffe13aa5e70 R14: 00007fc4c8944620 R15: 0000000000000003 [ 826.209046][ T31] [ 826.212607][ T31] INFO: task syz.1.2349:14587 blocked for more than 143 seconds. [ 826.220414][ T31] Tainted: G L syzkaller #0 [ 826.227631][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 826.236658][ T31] task:syz.1.2349 state:D stack:29000 pid:14587 tgid:14585 ppid:5839 task_flags:0x400040 flags:0x00080002 [ 826.251165][ T31] Call Trace: [ 826.254865][ T31] [ 826.257849][ T31] __schedule+0xfee/0x6120 [ 826.262829][ T31] ? __lock_acquire+0x4a5/0x2630 [ 826.267869][ T31] ? __pfx___schedule+0x10/0x10 [ 826.273466][ T31] ? find_held_lock+0x2b/0x80 [ 826.278250][ T31] ? schedule+0x2bf/0x390 [ 826.283086][ T31] schedule+0xdd/0x390 [ 826.287220][ T31] schedule_preempt_disabled+0x13/0x30 [ 826.294101][ T31] __mutex_lock+0xc9a/0x1b90 [ 826.298771][ T31] ? netlink_has_listeners+0x20f/0x430 [ 826.304608][ T31] ? devlink_health_report+0x681/0xb50 [ 826.310263][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 826.316980][ T31] ? devlink_recover_notify.constprop.0+0x200/0x670 [ 826.325205][ T31] ? __lock_acquire+0x401/0x2630 [ 826.330254][ T31] ? devlink_health_report+0x681/0xb50 [ 826.337184][ T31] devlink_health_report+0x681/0xb50 [ 826.342857][ T31] ? __pfx_devlink_health_report+0x10/0x10 [ 826.349965][ T31] ? _copy_from_user+0x59/0xd0 [ 826.355350][ T31] nsim_dev_health_break_write+0x166/0x210 [ 826.361284][ T31] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 826.368298][ T31] full_proxy_write+0x135/0x1a0 [ 826.373901][ T31] vfs_write+0x2aa/0x1070 [ 826.378346][ T31] ? __pfx_full_proxy_write+0x10/0x10 [ 826.384309][ T31] ? __pfx_vfs_write+0x10/0x10 [ 826.389502][ T31] ? __fget_files+0x215/0x3d0 [ 826.394698][ T31] ? __fget_files+0x21f/0x3d0 [ 826.399449][ T31] ksys_write+0x12a/0x250 [ 826.404371][ T31] ? __pfx_ksys_write+0x10/0x10 [ 826.409333][ T31] ? kcov_ioctl+0x16a/0x720 [ 826.414460][ T31] do_syscall_64+0x106/0xf80 [ 826.419115][ T31] ? clear_bhb_loop+0x40/0x90 [ 826.424335][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.430809][ T31] RIP: 0033:0x7f304d79c819 [ 826.435750][ T31] RSP: 002b:00007f304e6b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 826.444571][ T31] RAX: ffffffffffffffda RBX: 00007f304da16090 RCX: 00007f304d79c819 [ 826.454863][ T31] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000004 [ 826.463330][ T31] RBP: 00007f304d832c91 R08: 0000000000000000 R09: 0000000000000000 [ 826.471800][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 826.480294][ T31] R13: 00007f304da16128 R14: 00007f304da16090 R15: 00007ffeadc43928 [ 826.488659][ T31] [ 826.491782][ T31] INFO: task syz-executor:14756 blocked for more than 144 seconds. [ 826.500682][ T31] Tainted: G L syzkaller #0 [ 826.507820][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 826.517255][ T31] task:syz-executor state:D stack:24264 pid:14756 tgid:14756 ppid:1 task_flags:0x400140 flags:0x00080002 [ 826.529852][ T31] Call Trace: [ 826.533608][ T31] [ 826.536604][ T31] __schedule+0xfee/0x6120 [ 826.541095][ T31] ? __lock_acquire+0x4a5/0x2630 [ 826.546891][ T31] ? __pfx___schedule+0x10/0x10 [ 826.553552][ T31] ? find_held_lock+0x2b/0x80 [ 826.558372][ T31] ? schedule+0x2bf/0x390 [ 826.563312][ T31] schedule+0xdd/0x390 [ 826.567487][ T31] schedule_preempt_disabled+0x13/0x30 [ 826.575069][ T31] __mutex_lock+0xc9a/0x1b90 [ 826.579846][ T31] ? del_device_store+0xd1/0x480 [ 826.585430][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 826.590527][ T31] ? sscanf+0xc7/0x100 [ 826.595141][ T31] ? __pfx_sscanf+0x10/0x10 [ 826.599725][ T31] ? __lock_acquire+0x4a5/0x2630 [ 826.605090][ T31] ? __lock_acquire+0x4a5/0x2630 [ 826.610151][ T31] ? del_device_store+0xd1/0x480 [ 826.616014][ T31] del_device_store+0xd1/0x480 [ 826.620855][ T31] ? __pfx_del_device_store+0x10/0x10 [ 826.626984][ T31] ? find_held_lock+0x2b/0x80 [ 826.631732][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 826.637710][ T31] ? sysfs_file_kobj+0xe4/0x290 [ 826.643483][ T31] ? __pfx_del_device_store+0x10/0x10 [ 826.648933][ T31] bus_attr_store+0x74/0xb0 [ 826.657746][ T31] ? __pfx_bus_attr_store+0x10/0x10 [ 826.663405][ T31] sysfs_kf_write+0xf2/0x150 [ 826.668184][ T31] kernfs_fop_write_iter+0x3e0/0x5f0 [ 826.674157][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 826.679474][ T31] vfs_write+0x6ac/0x1070 [ 826.685700][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 826.691661][ T31] ? __pfx_vfs_write+0x10/0x10 [ 826.697051][ T31] ? __pfx_do_sys_openat2+0x10/0x10 [ 826.702659][ T31] ksys_write+0x12a/0x250 [ 826.707058][ T31] ? __pfx_ksys_write+0x10/0x10 [ 826.712015][ T31] do_syscall_64+0x106/0xf80 [ 826.717715][ T31] ? clear_bhb_loop+0x40/0x90 [ 826.722721][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.728718][ T31] RIP: 0033:0x7fc249f5d04e [ 826.733638][ T31] RSP: 002b:00007ffcf0fffeb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 826.742259][ T31] RAX: ffffffffffffffda RBX: 000055558bad5500 RCX: 00007fc249f5d04e [ 826.751121][ T31] RDX: 0000000000000001 RSI: 00007ffcf0ffff40 RDI: 0000000000000005 [ 826.760577][ T31] RBP: 00007fc24a033514 R08: 0000000000000000 R09: 0000000000000000 [ 826.769188][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 826.778955][ T31] R13: 00007ffcf0ffff40 R14: 00007fc24ad44620 R15: 0000000000000003 [ 826.787553][ T31] [ 826.790693][ T31] [ 826.790693][ T31] Showing all locks held in the system: [ 826.799945][ T31] 1 lock held by khungtaskd/31: [ 826.806564][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 826.817419][ T31] 2 locks held by getty/5586: [ 826.822316][ T31] #0: ffff888038bda0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 826.832935][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 826.843826][ T31] 2 locks held by syz-executor/5814: [ 826.849359][ T31] 4 locks held by kworker/u8:17/7506: [ 826.855350][ T31] #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 826.868227][ T31] #1: ffffc90003517d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 826.878787][ T31] #2: ffffffff905fea90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 826.888549][ T31] #3: ffff888078b50130 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x185/0x330 [ 826.899138][ T31] 7 locks held by syz-executor/14520: [ 826.904875][ T31] #0: ffff888034c24420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 826.914385][ T31] #1: ffff888034b1d488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 826.924650][ T31] #2: ffff88802a3fee18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 826.935746][ T31] #3: ffffffff8fb6f1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 826.946480][ T31] #4: ffff888078b50130 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 826.957569][ T31] #5: ffff88807b807250 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 826.969129][ T31] #6: ffff88805ec6d568 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 826.981469][ T31] 3 locks held by syz.1.2349/14587: [ 826.988157][ T31] #0: ffff888036501b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 826.998815][ T31] #1: ffff8880202ba420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 827.008478][ T31] #2: ffff88807b807250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x681/0xb50 [ 827.020621][ T31] 4 locks held by syz-executor/14756: [ 827.026489][ T31] #0: ffff888034c24420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 827.035984][ T31] #1: ffff88807ace6888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 827.046385][ T31] #2: ffff88802a3fee18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 827.057419][ T31] #3: ffffffff8fb6f1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 827.069971][ T31] 4 locks held by syz-executor/15204: [ 827.076646][ T31] #0: ffff888034c24420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 827.086212][ T31] #1: ffff88807b6fb888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 827.107118][ T31] #2: ffff88802a3fee18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 827.119074][ T31] #3: ffffffff8fb6f1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 827.131012][ T31] 4 locks held by syz-executor/15508: [ 827.136780][ T31] #0: ffff888034c24420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 827.146472][ T31] #1: ffff888046690488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 827.157403][ T31] #2: ffff88802a3fee18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 827.169544][ T31] #3: ffffffff8fb6f1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 827.181160][ T31] 4 locks held by syz-executor/16029: [ 827.190360][ T31] #0: ffff888034c24420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 827.201615][ T31] #1: ffff888069524088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 827.225107][ T31] #2: ffff88802a3fee18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 827.282691][ T31] #3: ffffffff8fb6f1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 827.322777][ T31] 4 locks held by syz-executor/16169: [ 827.328273][ T31] #0: ffff888034c24420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 827.351630][ T31] #1: ffff888021f12088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 827.369785][ T31] #2: ffff88802a3fee18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 827.380151][ T31] #3: ffffffff8fb6f1c8 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 827.413073][ T31] [ 827.415459][ T31] ============================================= [ 827.415459][ T31] [ 827.433147][ T31] NMI backtrace for cpu 0 [ 827.433167][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 827.433200][ T31] Tainted: [L]=SOFTLOCKUP [ 827.433208][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 827.433222][ T31] Call Trace: [ 827.433229][ T31] [ 827.433238][ T31] dump_stack_lvl+0x100/0x190 [ 827.433280][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 827.433319][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 827.433356][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 827.433395][ T31] sys_info+0x141/0x190 [ 827.433423][ T31] watchdog+0xd25/0x1050 [ 827.433455][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.433481][ T31] ? __kthread_parkme+0x18c/0x230 [ 827.433511][ T31] ? kthread+0x13a/0x450 [ 827.433541][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.433563][ T31] kthread+0x370/0x450 [ 827.433594][ T31] ? __pfx_kthread+0x10/0x10 [ 827.433628][ T31] ret_from_fork+0x754/0xd80 [ 827.433665][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 827.433704][ T31] ? __switch_to+0x7b4/0x1120 [ 827.433731][ T31] ? __pfx_kthread+0x10/0x10 [ 827.433765][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.433806][ T31] [ 827.433814][ T31] Sending NMI from CPU 0 to CPUs 1: [ 827.561877][ C1] NMI backtrace for cpu 1 [ 827.561909][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.561947][ C1] Tainted: [L]=SOFTLOCKUP [ 827.561956][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 827.561973][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 827.562006][ C1] Code: 98 84 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 f0 1c 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 827.562033][ C1] RSP: 0018:ffffc90000197df0 EFLAGS: 00000246 [ 827.562055][ C1] RAX: 00000000002ce74d RBX: ffff88801e6e8000 RCX: ffffffff8b8e9c75 [ 827.562073][ C1] RDX: 0000000000000000 RSI: ffffffff8de83840 RDI: ffffffff8c1b1e20 [ 827.562091][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170a679d [ 827.562108][ C1] R10: ffff8880b8533ceb R11: 0000000000000000 R12: 0000000000000001 [ 827.562125][ C1] R13: ffffed1003cdd000 R14: 0000000000000001 R15: ffffffff90da0210 [ 827.562144][ C1] FS: 0000000000000000(0000) GS:ffff888124440000(0000) knlGS:0000000000000000 [ 827.562169][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 827.562187][ C1] CR2: 000055c8d5148ee8 CR3: 0000000032980000 CR4: 00000000003526f0 [ 827.562204][ C1] Call Trace: [ 827.562214][ C1] [ 827.562223][ C1] default_idle+0x9/0x10 [ 827.562255][ C1] default_idle_call+0x6c/0xb0 [ 827.562288][ C1] do_idle+0x464/0x590 [ 827.562315][ C1] ? __pfx_do_idle+0x10/0x10 [ 827.562346][ C1] cpu_startup_entry+0x4f/0x60 [ 827.562372][ C1] start_secondary+0x21d/0x2d0 [ 827.562409][ C1] ? __pfx_start_secondary+0x10/0x10 [ 827.562449][ C1] common_startup_64+0x13e/0x148 [ 827.562488][ C1] [ 827.741236][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 827.748255][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 827.759083][ T31] Tainted: [L]=SOFTLOCKUP [ 827.763444][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 827.773723][ T31] Call Trace: [ 827.777050][ T31] [ 827.780199][ T31] dump_stack_lvl+0x100/0x190 [ 827.785075][ T31] vpanic+0x552/0x970 [ 827.789117][ T31] ? __pfx_vpanic+0x10/0x10 [ 827.793674][ T31] ? rcu_is_watching+0x12/0xc0 [ 827.798691][ T31] panic+0xd1/0xe0 [ 827.802468][ T31] ? __pfx_panic+0x10/0x10 [ 827.806944][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 827.813182][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 827.819403][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 827.825697][ T31] ? watchdog.cold+0x198/0x1ca [ 827.830564][ T31] ? watchdog+0xd35/0x1050 [ 827.835139][ T31] watchdog.cold+0x1a9/0x1ca [ 827.839913][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.844728][ T31] ? __kthread_parkme+0x18c/0x230 [ 827.849827][ T31] ? kthread+0x13a/0x450 [ 827.854148][ T31] ? __pfx_watchdog+0x10/0x10 [ 827.858853][ T31] kthread+0x370/0x450 [ 827.863057][ T31] ? __pfx_kthread+0x10/0x10 [ 827.867715][ T31] ret_from_fork+0x754/0xd80 [ 827.872372][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 827.877522][ T31] ? __switch_to+0x7b4/0x1120 [ 827.882504][ T31] ? __pfx_kthread+0x10/0x10 [ 827.887248][ T31] ret_from_fork_asm+0x1a/0x30 [ 827.892069][ T31] [ 827.895756][ T31] Kernel Offset: disabled [ 827.900375][ T31] Rebooting in 86400 seconds..