last executing test programs: 25.598946323s ago: executing program 0 (id=1948): setitimer$auto_ITIMER_REAL(0x0, &(0x7f0000000180)={{0x7, 0x6}, {0x51, 0xd8bd}}, 0x0) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) setitimer$auto_ITIMER_PROF(0x2, &(0x7f0000000280)={{0x8000, 0x5}, {0x9, 0x6}}, &(0x7f00000002c0)={{0x9}, {0x6, 0xc}}) r0 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r1) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_OP={0x8, 0xa, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/netfs/cookies\x00', 0xd00, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/249, 0xf9) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r3) sendmsg$auto_TIPC_NL_MEDIA_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x14, r5, 0x701, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) r6 = openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/uprobe_profile\x00', 0x101000, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f00000000c0)=r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/MOSCHIP usb-ethernet driver/remove_id\x00', 0xa42, 0x0) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xfdf3}, 0x1da) getsockopt$auto(r7, 0x1, 0x5, 0xfffffffffffffffc, 0x0) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r8, 0x0, 0x81) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) 25.092912006s ago: executing program 0 (id=1941): kcmp$auto(0x1, 0x1, 0x0, 0xffffffffffffffff, 0x100000001) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x88000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2000, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x401, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0x9, 0x15) mmap$auto(0x0, 0x2020005, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2b, 0x1, 0x0) sysfs$auto(0x2, 0x100000000000011, 0x0) r1 = fsopen$auto(0x0, 0x1) fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) fsmount$auto(0x4, 0x0, 0x200003) sendmsg$auto_HWSIM_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r2 = pipe$auto(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'gretap0\x00', 0x0}) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r2, 0x800455d1, &(0x7f0000000100)=0x4) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf25050000000c00018008000100", @ANYRES32=r5, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008000) mmap$auto(0x0, 0x4000000400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) read$auto(r0, 0x0, 0x8) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x5}, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0xa003, 0x0) 23.732336393s ago: executing program 0 (id=1943): openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1cb603, 0x0) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x0, 0x0) readahead$auto(r0, 0xc, 0x8) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0x101200, 0x0) ioctl$auto_FBIOGETCMAP(r1, 0x4604, &(0x7f00000002c0)="f300000000d2") r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) clock_getres$auto(0x2, 0x0) alarm$auto(0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x0, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r2, 0x8, 0x0) ioctl$auto_TIOCMGET(0xffffffffffffffff, 0x5415, &(0x7f0000000240)="8c138e73727869c37e2acac4cbc59e67e0a89f4da083ec710956a8173e9d7143ba1ecb9d37fd8722c3f8c176c1cd150b4f6f866a34e2520e27f58a19e206acd35cb910742d280916f3650bf401e1f2") openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, 0x0, 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 21.452674358s ago: executing program 0 (id=1951): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x4, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0xffffffff, 0xb00) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x10000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) ioctl$auto_FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, 0x0, 0x40000, 0x0) mkdir$auto(&(0x7f0000000240)='}[,&*}\x00', 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) chroot$auto(&(0x7f0000000540)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06\x00') setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 19.502310829s ago: executing program 0 (id=1958): mmap$auto(0x0, 0x20009, 0xdf, 0x19, 0x401, 0x8000) socket(0xa, 0x801, 0x106) r0 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) symlink$auto(&(0x7f0000000080)='\xe6\'\xd4\v{T+\xac', &(0x7f0000000000)='\'--[[\x14+\\\x00') r1 = getpid() r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x22, &(0x7f0000000400)={@siginfo_0_0={0x3, 0xfffffff5, 0xfffffffa, @_kill={r1}}}) mmap$auto(0x0, 0x40009, 0x0, 0xffb, 0x7, 0x28000) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) setuid$auto(r3) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) splice$auto(r5, 0x0, r5, &(0x7f0000000040)=0x3, 0xe8b, 0x2) r6 = pidfd_open$auto(0x1, 0x0) readahead$auto(r6, 0x418642b8, 0x5) r7 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x20000, 0x0) readv$auto(r7, &(0x7f0000000c40)={&(0x7f0000000bc0), 0x3}, 0x85) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ADD(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000200)={0x14, r9, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000840) sendmsg$auto_TIPC_NL_NODE_GET(r0, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000480)={0x384, r9, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x36d, 0x2, 0x0, 0x1, [@nested={0x1d3, 0x32, 0x0, 0x1, [@generic="a6bd7d5b82ed2fadb88ccef13f3f9c1087691b747a6ff9eee2c314098f996f2e29e43db387b76c3eab9dd39db1a078de935ae8a34c75cf0a1bd32d08cf2fda1e453ed1e3630e3fcd20f297249c477911f212dee32ed5b80a3d13d91929d929bf37db18a4424cfedb18fd3903688b3bbc094291bb9766c9a856960290cedb9fcbad03d07e64f9b430af59849e27c6ed1c14635297506c3581dc66769337bd1b002e69bea1414533aa979a494e18e5aad138ae9c7e36c859df5bb3c6e9c6727902107e57668d9b7b9bdc282c37fdacc88667", @typed={0x14, 0x41, 0x0, 0x0, @ipv6=@empty}, @generic="3faf8519b03cd63bbb13f4aa884ee64692fed800cb23916db341fccf90e382f2e76d83a999752082e78b7c611f6d24e2942cdb6784a25fcb7635eceb2a08429ab8ec8a34e3df72b80ff53d00891bf235871c028fdb6975d893af652975c817d01c4112c7b0fe68bca1cf80b6776653a00d2ea9f41564a8e0d6d8b5380666ac992bfa64bc5c9a6a1e50eab88e04cc24e619fea1203078eaf6f2d61b2f797a199631174cd867464cab96bcd54a6dbe992e27a604472ecf98316e7dc68da8b3a4d7636a161360c96b37be8473f4ffb8624344bf", @typed={0x8, 0xb0, 0x0, 0x0, @fd=r7}, @typed={0x5, 0xb2, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x67, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}]}, @nested={0x2d, 0x7d, 0x0, 0x1, [@generic="0443278af6807da7aee7e2a88e4e1889480629d97d1553fdb1a55a43e3873ace3db03d2ced", @typed={0x4, 0x6b}]}, @typed={0x8, 0xb0, 0x0, 0x0, @fd}, @generic="fad7a665712cca88a8ba4c620e9b5bb552fa77287527a5d960d7db15856857490c101d68b19624c21d34afc818f5d417ed16b5a074d4b54b7d2d33597952fe32f60924cd86588d6f2387c99087bba7570e737ed564c2a8716120d99f8c05258c03d7ff0a0a1287fbf08bc893190e06b9a6b6b54698eccb6a067f10d7ad4d1ebef03d5ce901e64cb4944fde0c63bbacc0e209f934", @nested={0x18, 0xd8, 0x0, 0x1, [@typed={0xc, 0x5f, 0x0, 0x0, @u64=0x100000000}, @typed={0x5, 0x117, 0x0, 0x0, @str='\x00'}]}, @nested={0x18, 0xee, 0x0, 0x1, [@nested={0x4, 0x33}, @generic="5f093531dc3cc4241e5c5361dfa15bd9"]}, @generic="8dfb05bb1451c38c990ac18743456a030851d3df4aa94f6bdc1bfdbcf8bc9a4b5aabd048da8dd67f653c505cf55cfb49319e7edea73968fad20e9cc65c48635877a5d57c2ba03cf9cf3538838e936a9bb342fd17b2a6033fd558b328048c23705a026ef0677d25275c61c20247b7372fb9fc", @generic="2bb4919c14c1112d02f05a56036b782d1006a9ff1f772fdcc7647ecb2074b352d1b01a02f58736"]}]}, 0x384}, 0x1, 0x0, 0x0, 0x8040}, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/pcmC0D0c\x00', 0x4141, 0x0) getsockopt$auto_SO_NO_CHECK(r6, 0x1, 0xb, &(0x7f00000000c0)='\x00', &(0x7f0000000100)=0x2) readlink$auto(&(0x7f0000000040)='\'--[[\x14+\\\x00', &(0x7f0000000140)='\x00', 0x8) 16.197510441s ago: executing program 0 (id=1967): socket(0xa, 0x1, 0x84) (async) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x2, 0xeb2, r0, 0x8000) futex$auto(&(0x7f0000000000)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xc0603d0f, 0x0) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x60, 0x0, 0x6f7250c4) (async) setsockopt$auto(r2, 0x0, 0x60, 0x0, 0x6f7250c4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13002cbd7000dddbdf252500f0c908000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13002cbd7000dddbdf252500f0c908000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r6, &(0x7f00000001c0)) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x208, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xbf, 0xbe, "862b846bc6f523ab4358b75ca31f4655c1fbb85d80e137d87fee67cdc394a171b9641da1251966b9437aa03161a3f210ac7539b8030845b1899d337664cdd5f7b5d234902a4a94d040a023a5a4817a67e7dfe7f3aa618c52474d6ddf5a6895f9fc230bddf2211f5d95e0f4b8dbaf9f4ad42301483aad8f05327ed7b9c9d6929d9398e8100cab5879eb177449e5911c70e3d9cdbe015c9edb6bf7fccd80eb0e4919f370c96010651421554961127adc0410167fc6b09f85c9ce432f"}, @NL80211_ATTR_FILS_ERP_REALM={0xa5, 0xfa, "b56f0ed68d1a54a17cd731520dbf938504e50e2a133daa1bd029cea3a4bc04ff574416453258655de405effa0bcac3c9c01d20e98488d5908121e15adc7981057c0056a7702caf6fc4bd209a79ab0456149ad4233b67598389325232f45922412be2e618eaddeb62fe4c3d2a0e38431cccfcb189800295c05a45165c28187e51a18b37e0332255ce2bdffd847aeef987d673309872f0ced6d089e32fc0296834bb"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x8}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0xe}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x67, 0xbe, "019f1f9ed5e01d343ab53d71e6271f85f4a4db383a6221111d5e2603fff1f86e68822ca9e7526946e4b65e7b06fb4e0a5fd0a4e677a6bf2924f1bc84f253439dc5f9ceb5f8e65fc622aa1d4c2b6b5d2de715852501acd9ecfbf52824b133d7a7e982f5"}]}, 0x208}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = prctl$auto_PR_SET_MM_START_DATA(0x7, 0x3, r6, 0x3, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000003c0), r7) shutdown$auto(0x200000003, 0x2) (async) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) (async) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) 8.411303974s ago: executing program 2 (id=1993): r0 = socket(0x23, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x200000000000eb1, 0xfffffffffffffffa, 0x8000) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1d8, r1, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_ASSOC_MLD_EXT_CAPA_OPS={0x6, 0x151, 0xe}, @NL80211_ATTR_SAR_SPEC={0x1b8, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_TYPE={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS={0x64, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x375}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x18000000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffc}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}]}, @NL80211_SAR_ATTR_SPECS={0x130, 0x2, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7f}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8000}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffffffc6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffff6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2b}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x877}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x400}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffb}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x2}]}]}]}]}, 0x1d8}, 0x1, 0x0, 0x0, 0x40050}, 0x4) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_REGISTER(r0, &(0x7f0000000740)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x144, r2, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@HWSIM_ATTR_FRAME={0x130, 0x3, "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"}]}, 0x144}, 0x1, 0x0, 0x0, 0x80}, 0x40000c4) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="e0ffffff", @ANYRES16, @ANYBLOB="3e5827bd7000fddbdf251600000008000180040025808c0306807a34b9b9f858e23b6ab2d898beab43de6a409961a18a42c6382e4e711455efed58f9fa3218845b24ee3d793b325275c8938ca4fde39935a1d86c1a24420f7274401f3b1dcd7a6a0193296be0734a413f2894320e408206377d7d"], 0x3a8}}, 0x11) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32"], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setxattrat$auto(0xffffffffffffffff, 0x0, 0x1004, 0x0, 0x0, 0xc000000000000000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) socket(0x23, 0x80805, 0x0) ioctl$auto(0x3, 0x89ed, 0xfffffffffffff4e0) 8.009455951s ago: executing program 2 (id=1994): remap_file_pages$auto(0x7fffffff, 0x513e42ea, 0x0, 0xfffffffffffffffe, 0x741a7957) socket(0x10, 0x80002, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/README\x00', 0x80, 0x0) mmap$auto(0x0, 0x9, 0xfc, 0x1000000eb1, 0x401, 0x8000) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) epoll_create$auto(0x20009) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) epoll_create$auto(0x3e) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x2) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=0x0, @ANYBLOB="06000600050000000600060037"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082dbd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES32=r0, @ANYBLOB="060006000500dfff08000d"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/smps\x00', 0x22001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) write$auto_debugfs_full_proxy_file_operations_internal(r1, 0x0, 0x0) r2 = socket(0xa, 0x80002, 0x8) close_range$auto(r2, r2, 0x0) pipe$auto(0x0) splice$auto(r2, 0x0, 0x2, 0x0, 0xfffffffffffffdef, 0x9) 7.279369515s ago: executing program 2 (id=1996): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x200080, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) mremap$auto(0x9, 0x3ff, 0x5d, 0x80000000, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x408d81, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0x2, 0x801, 0x106) pipe$auto(0x0) 6.971720216s ago: executing program 1 (id=1998): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) r0 = socket(0x2, 0x1, 0x0) prctl$auto(0x1000000001c, 0x5, 0x100000000, 0x400000000009, 0x3fffffffff) setreuid$auto(0x0, 0x5) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000240)='/proc/sys/kernel/auto_msgmni\x00', 0x101000, 0x0) ioctl$auto_FIONREAD(r0, 0x541b, 0x8) 6.764233515s ago: executing program 1 (id=1999): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x80402, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x420009, 0xe2, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) r2 = ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), r2) waitid$auto(0x5, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000001c0)={{0x5, 0x3}, {0x3ff, 0x3}, 0x6, 0xd, 0x3, 0xd, 0x0, 0x100, 0xc4e, 0x7ff, 0xb, 0x1, 0x8000000000000000, 0x7b, 0x400, 0x1}) r3 = getpid() r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/batman_adv/parameters/routing_algo\x00', 0x80302, 0x0) sendfile$auto(r4, r4, 0x0, 0x2001) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000340)=""/8, 0x8) timerfd_settime$auto(r4, 0x5, &(0x7f00000002c0)={{0xa71, 0x1}, {0xffffffffffffff80, 0x60}}, 0x0) sched_setaffinity$auto(r3, 0x5, &(0x7f0000000000)=0x7) r5 = setfsuid$auto(0xee00) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000002900)={{0x3, r5, 0xee00, 0x9, 0x17, 0x6, 0x1}, 0x6, 0x6, 0x7, 0x2, @raw=0xfffffff8, @raw=0x5, 0x80, 0x0, 0x0, &(0x7f0000001300)="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"}) ioctl$auto_TUNGETVNETBE2(r2, 0x800454df, &(0x7f00000000c0)=0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) 6.627984513s ago: executing program 2 (id=2001): openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a2003000004000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x4000011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000080), 0x20802, 0x0) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x3, 0x1) mmap$auto(0x0, 0x1, 0xdf, 0x2cad7c32, 0x2, 0x8003) setreuid$auto(0x0, 0x20000000004) ioctl$auto(0x3, 0x8916, 0x91) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x4, 0xee01, 0x0, 0x3, 0xb, 0x3, 0xcd8e}, &(0x7f0000000280)=0xf8, &(0x7f00000002c0), 0xc, 0x356, 0x3, 0x800000000000000, 0x81, 0x3, 0xffff, 0x1000, @raw=0x389, @raw=0x7}) write$auto_proc_uid_map_operations_base(r1, 0x0, 0x0) prctl$auto(0x4430, 0x1, 0x4, 0x400000005, 0x400000000007) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) 5.939685131s ago: executing program 3 (id=2004): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = socket(0xa, 0x5, 0x0) r1 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x16082, 0x0) r2 = syz_clone(0x12c00, 0x0, 0x0, 0x0, &(0x7f00000010c0), 0x0) futex$auto(0x0, 0xc, 0x1, 0x0, 0x0, 0x2a08) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r3, 0x4c82, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) capset$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(0x6, 0x11b, 0x1, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)={0x1c, r6, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_COLOR_CHANGE_ELEMS={0x8, 0x131, 0x0, 0x1, [@NL80211_ATTR_BEACON_HEAD={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000050}, 0x240088e4) r7 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f00000000c0), r5) sendmsg$auto_NLBL_CIPSOV4_C_LIST(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x10, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x4) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r4, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000480)={0x2d0, r7, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x51c0a727}, @NLBL_CIPSOV4_A_MLSCAT={0x286, 0xb, 0x0, 0x1, [@typed={0x4, 0x103}, @typed={0x14, 0x131, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x38}}, @generic="6965e1f7f1b32d80bf07bcf228372e7a992cc94fc01c39e25bb48a0f6b5e91e9a23166f46e74a8e5f61569d82ff962c78f69b8c6018a117794506be473cc0769d286ea405df9c488f05a29037edc2318b74ac369a81adf002406eb949f42a8b00ab1b53db44a85d381be679203a5d626273581802632f6d5c90d78225e348e02b84c5034f5f191a8118a2df7fddced3b36e9c4b7dd4473ef9a8a8705a0a3a5b72dcb68f61476bfd6e6c5", @typed={0xc, 0x113, 0x0, 0x0, @u64=0x7fffffffffffffff}, @nested={0x6a, 0xdf, 0x0, 0x1, [@generic="58b880419ebc08757dc55e799e322025c38742a83d5682f277d3ce24b43e70f469a0d0a1cf2e8889cd1d2227069ffbd0684cec3578a89fa856b646afbda2bdaf197b999632d673ef6634f4fb3f4f1f9a5df0caa8783f39b63b21513d8f77f10d21592201ec53"]}, @typed={0x8, 0x147, 0x0, 0x0, @u32=0x9fd9}, @generic="3dbae0490278fe9eb265289fa7e28ca43b2b9db597a4bf6dba4831a55c40345ec0f75ce80d27f528edc33549bb2ecc6860bb95bac89b778342c7d7d20f8eed547977bc7af7bb272b27e54647a991b2fbb32d08006a0707d5bf08dbefa00d13d5ba1b6a0a118d44889cb7aa3ae57277f30e86a7aa5b488d8e8f1ccc77e834a2b8ab5f77a7d6241f99bac10abf5ab850ac49f322045f5c0591b53d4ea4abcc079c1b9dc91038ca96849adb34fd6c3d88fd0bcb308c40cca922fdcbff8ceac94266a28557b5bdff20c04bb5e678d96907a774404427", @typed={0x8, 0x4f, 0x0, 0x0, @pid=r2}, @generic="b7b024064bc34f557d8c6991b361ccb3ea0ecbd35274851e6c60bbe770452a60c5b5475767938ab36859f6906592a85eae9f7fcc7359174ec46d0e2dd681130011cb44c91e89468a3f8eea97616c1a3fd197a5975a1e5c4a31543e84cdd84f665ffad1c7"]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [@nested={0x8, 0x11, 0x0, 0x1, [@nested={0x4, 0xce}]}]}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfffff6c5}]}, 0x2d0}, 0x1, 0x0, 0x0, 0x1}, 0x80) r8 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r8, &(0x7f00000011c0)='\x03W\x96l\x15\x00\x00\xf7\xff\xf4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^', 0x100000002, 0x100000001) getsockopt$auto(r0, 0x84, 0x10, 0x0, 0x0) 5.900996065s ago: executing program 1 (id=2005): syz_clone(0x90081800, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8000000000000000, 0xdb, 0x100eb4, 0xffffffffffffffff, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0xa175) timer_create$auto(0x2, 0x0, 0x0) r0 = socket(0x9, 0x2, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r2, r2, 0x0, 0x2) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x9, 0x0, 0x1bba, 0x9}, 0x800009}, 0x7, 0x20000000) setsockopt$auto(0x3, 0x9, 0x2f, 0x0, 0x9) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_TIMESTAMPING_NEW(r0, 0xfffffff7, 0x41, &(0x7f0000000080)='\x00', 0x7ff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000000eb1, 0x401, 0x10000) socket(0x11, 0x80003, 0x300) r3 = socket(0x11, 0x80003, 0x300) sendto$auto(r3, 0x0, 0x13, 0x2, &(0x7f0000000000)=@tipc=@name={0x1e, 0x2, 0x0, {{0x40, 0x4}, 0x2}}, 0x1e) io_uring_setup$auto(0x101, 0x0) 5.241706845s ago: executing program 2 (id=2006): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1000}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000200)='/proc/irq/3/node\x00', 0x189c40, 0x0) getsockopt$auto(0xffffffffffffffff, 0x0, 0x53, 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="205c2078027e0dc0023af10e9bfa1babfa20a974ca9a20370a", 0x19) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) r3 = openat$auto_long_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ieee80211/phy0/long_retry_limit\x00', 0x400, 0x0) read$auto_long_retry_limit_ops_(r3, 0x0, 0x0) lseek$auto(0x3, 0x2, 0x4) socket(0x27, 0x80000, 0x6) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) statmount$auto(0x0, 0x0, 0x800, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) write$auto(r4, &(0x7f0000000340)=',,2.15.4 ]\x98\x0f7V\xd4l\xf2AC\x04\xecQ=\xa2\xce\nO}\x1d\xd7\xb5\x92\xf7\xb2\xc2\xddm\xfbR\xfb\x92x\xd8\xb2\x8a&\xda\\\xa1}&^\x03\x02\xf28\xfd|\xed~\a\xaf\x14\xb5.\x92\"-6.\xb2$\x88\xeb\xdc\x0f\xba$?c\x8b\xcb\xf4q\r\xf5>}4\x99(\xb8D\x15\xb8\xc9U\x14\xd6r\xc9\x81\xbbI\xc9+^\x00\xf6\xb5\xd9\x1e\x89G?/\xc5\x86\xd0\xab\xb3\xfd\xc9?\xa7B\x1b\xdc\xff\xab\xb6~\x96\xd6\x9f\x1d\xfb\xa1dg\x9d\x8d]\xdek\x9c0\xea\xb3\nV\x1d\x10g\xaa\xf9\xf0\xc9\n\x8c\xf25G\x9c\x19\xe5\xd8\xa3\xee\x11\x12f\xd5o\x00\xeaY\n\xe0\x9f\r\xd4\x8e9G\x01\x04\xb2j\xbfYX\x9a)OQ\xedk\xb9\x85\x03c\xf3\x80\x10eG(\x94m81PL\x8d\xa47\x1a\x16\x11\xcd\xcdf\x15\r\x19\xc3\x90\xbe\x12\x85V\xeb\x8d\x97\xf0\x9c!\x86:\xe8\x8b\xa7@l', 0x3) r5 = socket(0x28, 0x3, 0x100000) ioctl$sock_SIOCGIFINDEX(r5, 0x8955, 0x0) 4.709314173s ago: executing program 1 (id=2007): mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/tunl0/addr_assign_type\x00', 0x40c00, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000800)=""/184, 0xb8) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) getsockopt$auto(r0, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), r2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x8001, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) clock_nanosleep$auto(0xfffffffd, 0x1, 0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 4.423143592s ago: executing program 3 (id=2008): unshare$auto(0x40000080) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@bpf_attr_5={@target_fd=r1, r0, 0x9, 0x5d, 0xffffffffffffffff, @relative_id=0x7ff, 0x6}, 0x100000cf) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x3, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x4008) socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x6a1, 0x2000000000002) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) socket(0x1, 0x1, 0x1) pidfd_open$auto(0x1, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) socket(0x10, 0x2, 0xff) close_range$auto(0x2, 0x8, 0x0) readv$auto(0x0, &(0x7f0000000080)={0x0, 0x60}, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) setfsuid$auto(0xee01) 3.768329838s ago: executing program 1 (id=2009): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1cb603, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x7000000) ioctl$auto_TIOCMGET(r0, 0x5415, &(0x7f0000000240)="8c138e73727869c37e2acac4cbc59e67e0a89f4da083ec710956a8173e9d7143ba1ecb9d37fd8722c3f8c176c1cd150b4f6f866a34e2520e27f58a19e206acd35cb910742d280916f3650bf401e1f2") openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, 0x0, 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 3.508077859s ago: executing program 3 (id=2010): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/class/zram-control/hot_remove\x00', 0x8001, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000080)) io_uring_setup$auto(0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x200080, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) mremap$auto(0x9, 0x3ff, 0x5d, 0x80000000, 0x100) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS2\x00', 0x408d81, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, 0x0, 0x54) close_range$auto(0x0, 0xffffeffe, 0x2) socket(0x2, 0x801, 0x106) pipe$auto(0x0) 2.095204278s ago: executing program 3 (id=2011): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) wait4$auto(0x0, 0x0, 0xf, &(0x7f0000000140)={{0x2599}, {0xffffffffffffffff, 0x1000000009}, 0x2, 0x800080000001, 0x1, 0x1000, 0x5, 0x7, 0x5, 0x5, 0xb11c, 0x8, 0xfffffffffffffffd, 0x7, 0xffff, 0x801c0000000}) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004881}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="120027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x7fff, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x40007}, 0x3, 0x0) sendmsg$auto_NFC_CMD_DISABLE_SE(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000003c00)={0x0, 0xe0}, 0x1, 0x0, 0x0, 0x2}, 0x8) ioctl$auto_RTC_IRQP_SET(0xffffffffffffffff, 0x4008700c, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/tty/ttyv7/power/control\x00', 0x22902, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="100025bd7000fbdbdf250200000008000100fb19a1450c000e"], 0x28}}, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto(0x3, 0xae41, r1) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f00000001c0), 0xffffffffffffffff) 788.08362ms ago: executing program 32 (id=1967): socket(0xa, 0x1, 0x84) (async) r0 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x2, 0xeb2, r0, 0x8000) futex$auto(&(0x7f0000000000)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) io_uring_setup$auto(0x6, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0xc0603d0f, 0x0) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x0, 0x60, 0x0, 0x6f7250c4) (async) setsockopt$auto(r2, 0x0, 0x60, 0x0, 0x6f7250c4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13002cbd7000dddbdf252500f0c908000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) (async) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="13002cbd7000dddbdf252500f0c908000300", @ANYRES32=r5], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r6, &(0x7f00000001c0)) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x208, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_PID={0x8, 0x52, r6}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x9}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xbf, 0xbe, "862b846bc6f523ab4358b75ca31f4655c1fbb85d80e137d87fee67cdc394a171b9641da1251966b9437aa03161a3f210ac7539b8030845b1899d337664cdd5f7b5d234902a4a94d040a023a5a4817a67e7dfe7f3aa618c52474d6ddf5a6895f9fc230bddf2211f5d95e0f4b8dbaf9f4ad42301483aad8f05327ed7b9c9d6929d9398e8100cab5879eb177449e5911c70e3d9cdbe015c9edb6bf7fccd80eb0e4919f370c96010651421554961127adc0410167fc6b09f85c9ce432f"}, @NL80211_ATTR_FILS_ERP_REALM={0xa5, 0xfa, "b56f0ed68d1a54a17cd731520dbf938504e50e2a133daa1bd029cea3a4bc04ff574416453258655de405effa0bcac3c9c01d20e98488d5908121e15adc7981057c0056a7702caf6fc4bd209a79ab0456149ad4233b67598389325232f45922412be2e618eaddeb62fe4c3d2a0e38431cccfcb189800295c05a45165c28187e51a18b37e0332255ce2bdffd847aeef987d673309872f0ced6d089e32fc0296834bb"}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x8}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0xe}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x67, 0xbe, "019f1f9ed5e01d343ab53d71e6271f85f4a4db383a6221111d5e2603fff1f86e68822ca9e7526946e4b65e7b06fb4e0a5fd0a4e677a6bf2924f1bc84f253439dc5f9ceb5f8e65fc622aa1d4c2b6b5d2de715852501acd9ecfbf52824b133d7a7e982f5"}]}, 0x208}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) r7 = prctl$auto_PR_SET_MM_START_DATA(0x7, 0x3, r6, 0x3, 0x0) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f00000003c0), r7) shutdown$auto(0x200000003, 0x2) (async) shutdown$auto(0x200000003, 0x2) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) (async) setsockopt$auto(0x3, 0x10000000084, 0xb, 0x0, 0xc) 659.101008ms ago: executing program 3 (id=2013): r0 = socket(0x18, 0xa, 0x3) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x50100, 0x0) mmap$auto(0x800000, 0x400008, 0x40000000009, 0x100000000000d256, 0x2, 0x7ffd) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x7, 0x810005, 0x80000000000ff, 0x10, r0, 0xb) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) socket(0x11, 0x3, 0x9) setsockopt$auto_SO_TIMESTAMPING_OLD(0xffffffffffffffff, 0x8, 0x25, &(0x7f0000000100)='/dev/tty12\x00', 0xfffffff9) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ustat$auto(0x801, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x800800, 0x0) ioctl$auto_RTC_SET_TIME(r2, 0x4024700a, &(0x7f0000000280)={0x9, 0x80, 0x4, 0x6a, 0x1, 0x200, 0x1, 0x5, 0x75f}) r3 = bpf$auto_BPF_TOKEN_CREATE(0x24, 0x0, 0x5) ioctl$auto(r1, 0x1, r3) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r5, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) setuid$auto(0x800000000008) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) semctl$auto(0x1ff, 0x2, 0x13, 0x4) clone3$auto(&(0x7f0000000000)={0x200, 0x5, 0x7, 0x2, 0x1, 0x87, 0x8, 0xb, 0x9, 0x2, 0xcb6}, 0xaa) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r3, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000009c0)=ANY=[@ANYBLOB="00140000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="0800c580040026801c00f08008007600e00000010400588004007c000800dd00", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="d6ffffff", @ANYRES32=r5, @ANYBLOB], 0x1400}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x1, &(0x7f0000000000)='Q*\"\x00', &(0x7f0000000080), 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r6, 0x1, &(0x7f0000000100)="90aa41520ff3cd44b5eba8cb5c7a1bc0104e01214c7daab0aeba8e823025d35bcd846f3f682efe8f200148dcbd046e0c3ccdd469cb6a31e40809e47ba1c861da744f9a2244efbc4a6df980fb19d0ada3053d81183ebfe905011124133cbfdfef1c4f9ee70ddaf35024ca9c6c79a146c71b3073452afa759c1aa4997c0109462a9381b6f3185403865de29fbf18a2144198ad0fc7cd9d1dfa70ad917fb01d7f22ea9310f913d6f7b72fd37b") 469.385098ms ago: executing program 1 (id=2014): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ptyv2/dev\x00', 0xc0002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_hwsim_fops_ps_(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy1/hwsim/ps\x00', 0x240, 0x0) lseek$auto(0x3, 0xffffffffff800002, 0x10) bpf$auto_BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)=@raw_tracepoint={0x0, r1, 0x0, 0xaf}, 0x9) r2 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) unshare$auto(0x40000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/system/cpu/cpuidle/available_governors\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000040)=""/247, 0xf7) r4 = openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) writev$auto(r4, &(0x7f0000001200)={0x0, 0x80000001}, 0xf) r5 = ioctl$auto_TUNDETACHFILTER(r2, 0x401054d6, &(0x7f0000000080)={0x4, &(0x7f0000000040)={0xcca7, 0x0, 0x7, @raw=0x16}}) r6 = socket(0x29, 0x5, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[], 0x1190}, 0x1, 0x0, 0x0, 0x2c095}, 0x4080) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89/s\x1cJ\x99\x00:\x00!\r?\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xe, 0x3) r7 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r0) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(r5, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="020529bd7000fddbf2251000000008000100070000000500240008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x8000000) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900), 0x0) 174.22058ms ago: executing program 2 (id=2015): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x1cb603, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyr1\x00', 0x80200, 0x0) r1 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/set_event\x00', 0x121000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002bbd7000fcdbdf2504000000040010"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) madvise$auto(0x0, 0xff7fffffffff0001, 0x15) close_range$auto(r1, 0x8, 0x0) ioctl$auto_TIOCMGET(r0, 0x5415, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) 0s ago: executing program 3 (id=2016): prctl$auto_PR_GET_UNALIGN(0x5, 0x29, 0x8000, 0x3, 0x7ffd) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4042, 0x0) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x20009, 0xfff, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x40400, 0x0) socket(0x10, 0x80006, 0x6) openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci2/force_wakeup\x00', 0x8742, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r1, 0x32c, 0x8, 0x0, 0x0) r2 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) write$auto(r2, 0x0, 0xe) kernel console output (not intermixed with test programs): 99.445768][T15013] [ 600.285086][T15024] FAULT_INJECTION: forcing a failure. [ 600.285086][T15024] name failslab, interval 1, probability 0, space 0, times 0 [ 600.343498][T15024] CPU: 0 UID: 0 PID: 15024 Comm: syz.3.1593 Tainted: G L syzkaller #0 PREEMPT(full) [ 600.343526][T15024] Tainted: [L]=SOFTLOCKUP [ 600.343532][T15024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 600.343543][T15024] Call Trace: [ 600.343548][T15024] [ 600.343555][T15024] dump_stack_lvl+0x100/0x190 [ 600.343586][T15024] should_fail_ex.cold+0x5/0xa [ 600.343607][T15024] should_failslab+0xc2/0x120 [ 600.343626][T15024] __kmalloc_cache_noprof+0x7a/0x6f0 [ 600.343648][T15024] ? crtc_crc_open+0x3ba/0x7e0 [ 600.343673][T15024] crtc_crc_open+0x3ba/0x7e0 [ 600.343696][T15024] ? __debugfs_file_get+0x1fc/0x860 [ 600.343715][T15024] ? __pfx_crtc_crc_open+0x10/0x10 [ 600.343737][T15024] ? __pfx_apparmor_file_open+0x10/0x10 [ 600.343752][T15024] ? path_get+0x61/0x80 [ 600.343775][T15024] ? __pfx_crtc_crc_open+0x10/0x10 [ 600.343797][T15024] full_proxy_open_regular+0x1b6/0x370 [ 600.343819][T15024] do_dentry_open+0x6d8/0x1660 [ 600.343837][T15024] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 600.343863][T15024] vfs_open+0x82/0x3f0 [ 600.343886][T15024] path_openat+0x208c/0x31a0 [ 600.343911][T15024] ? __pfx_path_openat+0x10/0x10 [ 600.343936][T15024] do_file_open+0x20e/0x430 [ 600.343957][T15024] ? __pfx_do_file_open+0x10/0x10 [ 600.343988][T15024] ? alloc_fd+0x476/0x790 [ 600.344008][T15024] ? do_getname+0x191/0x390 [ 600.344031][T15024] do_sys_openat2+0x10d/0x1e0 [ 600.344053][T15024] ? __pfx_do_sys_openat2+0x10/0x10 [ 600.344077][T15024] ? do_raw_spin_lock+0x128/0x260 [ 600.344098][T15024] __x64_sys_openat+0x12d/0x210 [ 600.344121][T15024] ? __pfx___x64_sys_openat+0x10/0x10 [ 600.344147][T15024] ? rcu_is_watching+0x12/0xc0 [ 600.344167][T15024] do_syscall_64+0x10b/0xf80 [ 600.344189][T15024] ? clear_bhb_loop+0x40/0x90 [ 600.344208][T15024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.344223][T15024] RIP: 0033:0x7ff3db79ce59 [ 600.344238][T15024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.344252][T15024] RSP: 002b:00007ff3dc6fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 600.344268][T15024] RAX: ffffffffffffffda RBX: 00007ff3dba16180 RCX: 00007ff3db79ce59 [ 600.344278][T15024] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 600.344288][T15024] RBP: 00007ff3db832d6f R08: 0000000000000000 R09: 0000000000000000 [ 600.344297][T15024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.344307][T15024] R13: 00007ff3dba16218 R14: 00007ff3dba16180 R15: 00007fffd6751ca8 [ 600.344327][T15024] [ 601.433788][T15033] random: crng reseeded on system resumption [ 601.561486][T15032] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 601.599378][T15032] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 601.731078][T15005] Process accounting resumed [ 601.881771][T15044] futex_wake_op: syz.2.1598 tries to shift op by -2048; fix this program [ 601.916690][T15042] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1601'. [ 601.930851][T15046] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 601.976493][T15042] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1601'. [ 602.061669][T15038] 0x000000000001-0x000000020000 : "" [ 602.141682][T15038] ftl_cs: FTL header corrupt! [ 602.219657][T15043] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1600'. [ 603.219656][T15067] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1606'. [ 603.915247][T15082] random: crng reseeded on system resumption [ 604.047233][T15082] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 604.047255][T15082] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 604.067893][T15082] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 604.067915][T15082] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 604.340422][T15089] FAULT_INJECTION: forcing a failure. [ 604.340422][T15089] name failslab, interval 1, probability 0, space 0, times 0 [ 604.340466][T15089] CPU: 0 UID: 0 PID: 15089 Comm: syz.3.1610 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.340487][T15089] Tainted: [L]=SOFTLOCKUP [ 604.340492][T15089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.340502][T15089] Call Trace: [ 604.340507][T15089] [ 604.340512][T15089] dump_stack_lvl+0x100/0x190 [ 604.340533][T15089] should_fail_ex.cold+0x5/0xa [ 604.340552][T15089] should_failslab+0xc2/0x120 [ 604.340570][T15089] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 604.340594][T15089] ? aio_alloc_inode+0x25/0x70 [ 604.340612][T15089] ? rcu_is_watching+0x12/0xc0 [ 604.340630][T15089] ? pcpu_alloc_noprof+0xde1/0x1cc0 [ 604.340646][T15089] ? __pfx_aio_alloc_inode+0x10/0x10 [ 604.340665][T15089] aio_alloc_inode+0x25/0x70 [ 604.340683][T15089] alloc_inode+0x68/0x250 [ 604.340706][T15089] alloc_anon_inode+0x2a/0x3e0 [ 604.340728][T15089] ioctx_alloc+0x4dc/0x21a0 [ 604.340755][T15089] ? find_held_lock+0x2b/0x80 [ 604.340775][T15089] ? __pfx_ioctx_alloc+0x10/0x10 [ 604.340801][T15089] __x64_sys_io_setup+0xc9/0x220 [ 604.340823][T15089] do_syscall_64+0x10b/0xf80 [ 604.340846][T15089] ? clear_bhb_loop+0x40/0x90 [ 604.340865][T15089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.340880][T15089] RIP: 0033:0x7ff3db79ce59 [ 604.340894][T15089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.340908][T15089] RSP: 002b:00007ff3dc73d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 604.340923][T15089] RAX: ffffffffffffffda RBX: 00007ff3dba15fa0 RCX: 00007ff3db79ce59 [ 604.340933][T15089] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 604.340941][T15089] RBP: 00007ff3dc73d090 R08: 0000000000000000 R09: 0000000000000000 [ 604.340950][T15089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.340959][T15089] R13: 00007ff3dba16038 R14: 00007ff3dba15fa0 R15: 00007fffd6751ca8 [ 604.340979][T15089] [ 604.694466][T15037] Process accounting resumed [ 605.024115][T15099] block nbd2: not configured, cannot reconfigure [ 605.110963][T15099] block nbd2: not configured, cannot reconfigure [ 605.111102][T15099] block nbd2: not configured, cannot reconfigure [ 605.111233][T15099] block nbd2: not configured, cannot reconfigure [ 605.111387][T15099] block nbd2: not configured, cannot reconfigure [ 605.111509][T15099] block nbd2: not configured, cannot reconfigure [ 605.111630][T15099] block nbd2: not configured, cannot reconfigure [ 605.111751][T15099] block nbd2: not configured, cannot reconfigure [ 605.111874][T15099] block nbd2: not configured, cannot reconfigure [ 605.111996][T15099] block nbd2: not configured, cannot reconfigure [ 605.112117][T15099] block nbd2: not configured, cannot reconfigure [ 605.112250][T15099] block nbd2: not configured, cannot reconfigure [ 605.128907][T15099] block nbd2: not configured, cannot reconfigure [ 605.129046][T15099] block nbd2: not configured, cannot reconfigure [ 605.129202][T15099] block nbd2: not configured, cannot reconfigure [ 605.129334][T15099] block nbd2: not configured, cannot reconfigure [ 605.129459][T15099] block nbd2: not configured, cannot reconfigure [ 605.129587][T15099] block nbd2: not configured, cannot reconfigure [ 605.129710][T15099] block nbd2: not configured, cannot reconfigure [ 605.129833][T15099] block nbd2: not configured, cannot reconfigure [ 605.129954][T15099] block nbd2: not configured, cannot reconfigure [ 605.130077][T15099] block nbd2: not configured, cannot reconfigure [ 605.130205][T15099] block nbd2: not configured, cannot reconfigure [ 605.140339][T15101] ubi0: attaching mtd0 [ 605.141503][T15101] ubi0: scanning is finished [ 605.141537][T15101] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 605.150994][T15099] block nbd2: not configured, cannot reconfigure [ 605.151137][T15099] block nbd2: not configured, cannot reconfigure [ 605.151268][T15099] block nbd2: not configured, cannot reconfigure [ 605.151390][T15099] block nbd2: not configured, cannot reconfigure [ 605.151514][T15099] block nbd2: not configured, cannot reconfigure [ 605.151636][T15099] block nbd2: not configured, cannot reconfigure [ 605.152180][T15099] block nbd2: not configured, cannot reconfigure [ 605.186849][T15099] block nbd2: not configured, cannot reconfigure [ 605.187026][T15099] block nbd2: not configured, cannot reconfigure [ 605.187167][T15099] block nbd2: not configured, cannot reconfigure [ 605.342712][T15105] FAULT_INJECTION: forcing a failure. [ 605.342712][T15105] name failslab, interval 1, probability 0, space 0, times 0 [ 605.342745][T15105] CPU: 0 UID: 0 PID: 15105 Comm: syz.2.1612 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.342768][T15105] Tainted: [L]=SOFTLOCKUP [ 605.342774][T15105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 605.342783][T15105] Call Trace: [ 605.342789][T15105] [ 605.342795][T15105] dump_stack_lvl+0x100/0x190 [ 605.342817][T15105] should_fail_ex.cold+0x5/0xa [ 605.342837][T15105] ? tomoyo_realpath_from_path+0xb6/0x690 [ 605.342858][T15105] should_failslab+0xc2/0x120 [ 605.342875][T15105] __kmalloc_noprof+0xe0/0x850 [ 605.342889][T15105] ? kfree+0x1dd/0x6c0 [ 605.342912][T15105] tomoyo_realpath_from_path+0xb6/0x690 [ 605.342936][T15105] tomoyo_check_open_permission+0x2af/0x3c0 [ 605.342954][T15105] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 605.342978][T15105] ? hook_file_open+0x24e/0x7a0 [ 605.343008][T15105] ? path_get+0x61/0x80 [ 605.343030][T15105] tomoyo_file_open+0x6b/0x90 [ 605.343052][T15105] security_file_open+0xb5/0x1e0 [ 605.343071][T15105] do_dentry_open+0x5aa/0x1660 [ 605.343090][T15105] ? security_inode_permission+0xbf/0x250 [ 605.343110][T15105] vfs_open+0x82/0x3f0 [ 605.343134][T15105] path_openat+0x208c/0x31a0 [ 605.343167][T15105] ? __pfx_path_openat+0x10/0x10 [ 605.343193][T15105] do_file_open+0x20e/0x430 [ 605.343213][T15105] ? __pfx_do_file_open+0x10/0x10 [ 605.343246][T15105] ? alloc_fd+0x476/0x790 [ 605.343267][T15105] ? do_getname+0x191/0x390 [ 605.343289][T15105] do_sys_openat2+0x10d/0x1e0 [ 605.343311][T15105] ? __pfx_do_sys_openat2+0x10/0x10 [ 605.343340][T15105] __x64_sys_openat+0x12d/0x210 [ 605.343363][T15105] ? __pfx___x64_sys_openat+0x10/0x10 [ 605.343385][T15105] ? ksys_write+0x1ac/0x250 [ 605.343404][T15105] ? rcu_is_watching+0x12/0xc0 [ 605.343425][T15105] do_syscall_64+0x10b/0xf80 [ 605.343446][T15105] ? clear_bhb_loop+0x40/0x90 [ 605.343465][T15105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.343481][T15105] RIP: 0033:0x7fd8c359ce59 [ 605.343494][T15105] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.343509][T15105] RSP: 002b:00007fd8c44b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 605.343524][T15105] RAX: ffffffffffffffda RBX: 00007fd8c3816090 RCX: 00007fd8c359ce59 [ 605.343534][T15105] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 605.343545][T15105] RBP: 00007fd8c3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 605.343554][T15105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 605.343564][T15105] R13: 00007fd8c3816128 R14: 00007fd8c3816090 R15: 00007ffe9ddc5df8 [ 605.343584][T15105] [ 605.343613][T15105] ERROR: Out of memory at tomoyo_realpath_from_path. [ 605.631529][T15101] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 605.965941][T15092] Process accounting resumed [ 606.332300][T15118] FAULT_INJECTION: forcing a failure. [ 606.332300][T15118] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 606.332388][T15118] CPU: 0 UID: 0 PID: 15118 Comm: syz.0.1615 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.332410][T15118] Tainted: [L]=SOFTLOCKUP [ 606.332416][T15118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 606.332425][T15118] Call Trace: [ 606.332431][T15118] [ 606.332437][T15118] dump_stack_lvl+0x100/0x190 [ 606.332457][T15118] should_fail_ex.cold+0x5/0xa [ 606.332473][T15118] ? prepare_alloc_pages+0x16d/0x5f0 [ 606.332495][T15118] should_fail_alloc_page+0xeb/0x140 [ 606.332514][T15118] prepare_alloc_pages+0x1f0/0x5f0 [ 606.332536][T15118] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 606.332563][T15118] ? stack_trace_save+0x8e/0xc0 [ 606.332585][T15118] ? look_up_lock_class+0x64/0x120 [ 606.332609][T15118] ? register_lock_class+0x40/0x560 [ 606.332625][T15118] ? find_held_lock+0x2b/0x80 [ 606.332644][T15118] ? ima_match_policy+0x8c4/0x2350 [ 606.332661][T15118] ? ima_match_policy+0x8c4/0x2350 [ 606.332678][T15118] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 606.332714][T15118] ? vma_is_special_huge+0x23f/0x2d0 [ 606.332732][T15118] ? __pfx_vma_is_special_huge+0x10/0x10 [ 606.332749][T15118] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 606.332772][T15118] ? policy_nodemask+0xed/0x4f0 [ 606.332791][T15118] alloc_pages_mpol+0x1fb/0x540 [ 606.332810][T15118] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 606.332829][T15118] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 606.332852][T15118] alloc_pages_noprof+0x1a/0x160 [ 606.332872][T15118] __pmd_alloc+0x3b/0x950 [ 606.332893][T15118] __handle_mm_fault+0xa9c/0x2a00 [ 606.332918][T15118] ? mt_find+0x45e/0x8e0 [ 606.332934][T15118] ? __pfx___handle_mm_fault+0x10/0x10 [ 606.332954][T15118] ? __pfx_mt_find+0x10/0x10 [ 606.332979][T15118] ? find_vma+0xbf/0x140 [ 606.332995][T15118] ? __pfx_find_vma+0x10/0x10 [ 606.333013][T15118] handle_mm_fault+0x36d/0xa20 [ 606.333045][T15118] do_user_addr_fault+0x74c/0x12f0 [ 606.333066][T15118] ? trace_page_fault_kernel+0x7a/0x200 [ 606.333085][T15118] exc_page_fault+0x6f/0xd0 [ 606.333108][T15118] asm_exc_page_fault+0x26/0x30 [ 606.333124][T15118] RIP: 0010:rep_movs_alternative+0x33/0x90 [ 606.333143][T15118] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 4d 9b 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 606.333157][T15118] RSP: 0018:ffffc9000540fae8 EFLAGS: 00050216 [ 606.333169][T15118] RAX: 3020202020202020 RBX: 0000000000000000 RCX: 0000000000000012 [ 606.333179][T15118] RDX: 0000000000000001 RSI: ffff88807df52000 RDI: 0000000000000000 [ 606.333188][T15118] RBP: ffffc9000540fd80 R08: 0000000000000000 R09: ffffed100fbea402 [ 606.333197][T15118] R10: ffff88807df52011 R11: 0000000000000000 R12: 0000000000000012 [ 606.333206][T15118] R13: 00007ffffffff000 R14: ffff88807df52000 R15: 0000000000000012 [ 606.333225][T15118] _copy_to_iter+0x391/0x1720 [ 606.333244][T15118] ? sysfs_file_kobj+0xe4/0x290 [ 606.333269][T15118] ? __pfx__copy_to_iter+0x10/0x10 [ 606.333284][T15118] ? kernfs_seq_stop+0xcd/0x120 [ 606.333308][T15118] ? kernfs_put_active+0x93/0xe0 [ 606.333329][T15118] seq_read_iter+0xdab/0x1270 [ 606.333354][T15118] kernfs_fop_read_iter+0x46c/0x610 [ 606.333377][T15118] ? rw_verify_area+0xce/0x6d0 [ 606.333391][T15118] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 606.333415][T15118] vfs_read+0x825/0xb30 [ 606.333434][T15118] ? __pfx_vfs_read+0x10/0x10 [ 606.333463][T15118] ksys_read+0x12a/0x250 [ 606.333479][T15118] ? __pfx_ksys_read+0x10/0x10 [ 606.333498][T15118] ? rcu_is_watching+0x12/0xc0 [ 606.333519][T15118] do_syscall_64+0x10b/0xf80 [ 606.333541][T15118] ? clear_bhb_loop+0x40/0x90 [ 606.333563][T15118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.333578][T15118] RIP: 0033:0x7f0a50b9ce59 [ 606.333594][T15118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.333608][T15118] RSP: 002b:00007f0a519af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 606.333621][T15118] RAX: ffffffffffffffda RBX: 00007f0a50e15fa0 RCX: 00007f0a50b9ce59 [ 606.333631][T15118] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 606.333639][T15118] RBP: 00007f0a519af090 R08: 0000000000000000 R09: 0000000000000000 [ 606.333648][T15118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 606.333657][T15118] R13: 00007f0a50e16038 R14: 00007f0a50e15fa0 R15: 00007ffe8f0c5178 [ 606.333676][T15118] [ 606.623719][T15115] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1614'. [ 607.768939][T15140] random: crng reseeded on system resumption [ 607.891066][T15138] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 607.891088][T15138] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 607.894398][T15138] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 607.894418][T15138] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 608.579282][ T30] audit: type=1807 audit(4142.690:48): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 608.579321][ T30] audit: type=1802 audit(4142.690:49): pid=15146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.1623" res=0 errno=0 [ 608.585785][T15142] ima: policy update failed [ 608.585886][ T30] audit: type=1802 audit(4142.690:50): pid=15142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1623" res=0 errno=0 [ 608.768790][T15152] FAULT_INJECTION: forcing a failure. [ 608.768790][T15152] name failslab, interval 1, probability 0, space 0, times 0 [ 608.768837][T15152] CPU: 0 UID: 0 PID: 15152 Comm: syz.2.1625 Tainted: G L syzkaller #0 PREEMPT(full) [ 608.768859][T15152] Tainted: [L]=SOFTLOCKUP [ 608.768864][T15152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 608.768874][T15152] Call Trace: [ 608.768879][T15152] [ 608.768886][T15152] dump_stack_lvl+0x100/0x190 [ 608.768906][T15152] should_fail_ex.cold+0x5/0xa [ 608.768926][T15152] ? lsm_blob_alloc+0x68/0x90 [ 608.768947][T15152] should_failslab+0xc2/0x120 [ 608.768965][T15152] __kmalloc_noprof+0xe0/0x850 [ 608.768980][T15152] ? trace_kmem_cache_alloc+0xd5/0x100 [ 608.769001][T15152] lsm_blob_alloc+0x68/0x90 [ 608.769022][T15152] security_sk_alloc+0x2d/0x290 [ 608.769037][T15152] sk_prot_alloc+0x1d1/0x2a0 [ 608.769060][T15152] sk_alloc+0x36/0xe80 [ 608.769077][T15152] inet6_create+0x385/0x12b0 [ 608.769100][T15152] ? inet6_create+0x7f/0x12b0 [ 608.769123][T15152] __sock_create+0x339/0x860 [ 608.769149][T15152] udp_sock_create6+0xc7/0x6a0 [ 608.769169][T15152] ? __pfx_udp_sock_create6+0x10/0x10 [ 608.769204][T15152] ? crng_make_state+0x477/0x6c0 [ 608.769223][T15152] ? lockdep_hardirqs_on+0x78/0x100 [ 608.769247][T15152] ? crng_make_state+0x2b0/0x6c0 [ 608.769267][T15152] rxrpc_open_socket+0x206/0x6b0 [ 608.769287][T15152] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 608.769314][T15152] ? rcu_is_watching+0x12/0xc0 [ 608.769332][T15152] ? trace_rxrpc_local+0x80/0x250 [ 608.769352][T15152] rxrpc_lookup_local+0xac7/0x1220 [ 608.769374][T15152] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 608.769395][T15152] ? __local_bh_enable_ip+0x9e/0x120 [ 608.769421][T15152] rxrpc_sendmsg+0x34a/0x680 [ 608.769444][T15152] sock_write_iter+0x524/0x5a0 [ 608.769466][T15152] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 608.769486][T15152] ? __pfx_sock_write_iter+0x10/0x10 [ 608.769507][T15152] ? futex_hash+0x141/0x370 [ 608.769531][T15152] ? bpf_lsm_file_permission+0x9/0x10 [ 608.769552][T15152] ? security_file_permission+0x76/0x210 [ 608.769571][T15152] ? rw_verify_area+0xce/0x6d0 [ 608.769589][T15152] vfs_write+0x6ac/0x1070 [ 608.769608][T15152] ? __pfx_sock_write_iter+0x10/0x10 [ 608.769631][T15152] ? __pfx_vfs_write+0x10/0x10 [ 608.769647][T15152] ? find_held_lock+0x2b/0x80 [ 608.769678][T15152] ksys_write+0x1f8/0x250 [ 608.769696][T15152] ? __pfx_ksys_write+0x10/0x10 [ 608.769714][T15152] ? rcu_is_watching+0x12/0xc0 [ 608.769734][T15152] do_syscall_64+0x10b/0xf80 [ 608.769756][T15152] ? clear_bhb_loop+0x40/0x90 [ 608.769774][T15152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 608.769790][T15152] RIP: 0033:0x7fd8c359ce59 [ 608.769804][T15152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 608.769819][T15152] RSP: 002b:00007fd8c44d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 608.769835][T15152] RAX: ffffffffffffffda RBX: 00007fd8c3815fa0 RCX: 00007fd8c359ce59 [ 608.769846][T15152] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 608.769856][T15152] RBP: 00007fd8c3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 608.769866][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 608.769876][T15152] R13: 00007fd8c3816038 R14: 00007fd8c3815fa0 R15: 00007ffe9ddc5df8 [ 608.769895][T15152] [ 608.903962][T15147] futex_wake_op: syz.0.1621 tries to shift op by -2048; fix this program [ 608.904744][T15147] 0x000000000001-0x000000020000 : "" [ 608.914395][T15147] ftl_cs: FTL header corrupt! [ 609.429234][T15145] Process accounting resumed [ 610.292091][T15173] random: crng reseeded on system resumption [ 610.397434][T15177] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 610.397456][T15177] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 610.591930][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1631'. [ 610.910313][T15179] FAULT_INJECTION: forcing a failure. [ 610.910313][T15179] name failslab, interval 1, probability 0, space 0, times 0 [ 610.910344][T15179] CPU: 0 UID: 0 PID: 15179 Comm: syz.2.1631 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.910366][T15179] Tainted: [L]=SOFTLOCKUP [ 610.910371][T15179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 610.910381][T15179] Call Trace: [ 610.910387][T15179] [ 610.910393][T15179] dump_stack_lvl+0x100/0x190 [ 610.910414][T15179] should_fail_ex.cold+0x5/0xa [ 610.910434][T15179] should_failslab+0xc2/0x120 [ 610.910453][T15179] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 610.910476][T15179] ? __d_alloc+0x34/0xa40 [ 610.910501][T15179] __d_alloc+0x34/0xa40 [ 610.910523][T15179] d_alloc+0x4a/0x1e0 [ 610.910544][T15179] lookup_one_qstr_excl+0x171/0x250 [ 610.910569][T15179] start_dirop+0x59/0xb0 [ 610.910587][T15179] simple_start_creating+0xf9/0x110 [ 610.910605][T15179] ? __pfx_simple_start_creating+0x10/0x10 [ 610.910624][T15179] ? mntput+0x70/0xa0 [ 610.910640][T15179] ? simple_pin_fs+0xa3/0x190 [ 610.910657][T15179] debugfs_start_creating.part.0+0x82/0x170 [ 610.910682][T15179] __debugfs_create_file+0xb3/0x4f0 [ 610.910707][T15179] debugfs_create_file_full+0x41/0x60 [ 610.910732][T15179] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 610.910752][T15179] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 610.910788][T15179] ? lockdep_init_map_type+0x5c/0x250 [ 610.910807][T15179] preinit_net.part.0+0x43b/0x920 [ 610.910828][T15179] copy_net_ns+0x339/0x7c0 [ 610.910851][T15179] create_new_namespaces+0x3ea/0xac0 [ 610.910876][T15179] unshare_nsproxy_namespaces+0xf2/0x220 [ 610.910898][T15179] ksys_unshare+0x438/0xab0 [ 610.910921][T15179] ? __pfx_ksys_unshare+0x10/0x10 [ 610.910942][T15179] ? xfd_validate_state+0x129/0x190 [ 610.910957][T15179] ? ksys_write+0x1ac/0x250 [ 610.910980][T15179] __x64_sys_unshare+0x31/0x40 [ 610.911001][T15179] do_syscall_64+0x10b/0xf80 [ 610.911023][T15179] ? clear_bhb_loop+0x40/0x90 [ 610.911041][T15179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.911066][T15179] RIP: 0033:0x7fd8c359ce59 [ 610.911080][T15179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.911096][T15179] RSP: 002b:00007fd8c44d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 610.911111][T15179] RAX: ffffffffffffffda RBX: 00007fd8c3815fa0 RCX: 00007fd8c359ce59 [ 610.911121][T15179] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 610.911131][T15179] RBP: 00007fd8c3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 610.911140][T15179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.911150][T15179] R13: 00007fd8c3816038 R14: 00007fd8c3815fa0 R15: 00007ffe9ddc5df8 [ 610.911171][T15179] [ 612.348234][T15195] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 612.348575][T15196] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 612.520258][T15201] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1635'. [ 612.653150][T15201] FAULT_INJECTION: forcing a failure. [ 612.653150][T15201] name failslab, interval 1, probability 0, space 0, times 0 [ 612.653180][T15201] CPU: 0 UID: 0 PID: 15201 Comm: syz.0.1635 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.653201][T15201] Tainted: [L]=SOFTLOCKUP [ 612.653207][T15201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 612.653216][T15201] Call Trace: [ 612.653222][T15201] [ 612.653229][T15201] dump_stack_lvl+0x100/0x190 [ 612.653250][T15201] should_fail_ex.cold+0x5/0xa [ 612.653270][T15201] should_failslab+0xc2/0x120 [ 612.653288][T15201] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 612.653311][T15201] ? __d_alloc+0x34/0xa40 [ 612.653336][T15201] __d_alloc+0x34/0xa40 [ 612.653358][T15201] d_alloc+0x4a/0x1e0 [ 612.653379][T15201] lookup_one_qstr_excl+0x171/0x250 [ 612.653404][T15201] start_dirop+0x59/0xb0 [ 612.653421][T15201] simple_start_creating+0xf9/0x110 [ 612.653440][T15201] ? __pfx_simple_start_creating+0x10/0x10 [ 612.653458][T15201] ? mntput+0x70/0xa0 [ 612.653474][T15201] ? simple_pin_fs+0xa3/0x190 [ 612.653490][T15201] debugfs_start_creating.part.0+0x82/0x170 [ 612.653515][T15201] __debugfs_create_file+0xb3/0x4f0 [ 612.653540][T15201] debugfs_create_file_full+0x41/0x60 [ 612.653565][T15201] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 612.653597][T15201] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 612.653633][T15201] ? lockdep_init_map_type+0x5c/0x250 [ 612.653653][T15201] preinit_net.part.0+0x43b/0x920 [ 612.653679][T15201] copy_net_ns+0x339/0x7c0 [ 612.653702][T15201] create_new_namespaces+0x3ea/0xac0 [ 612.653727][T15201] unshare_nsproxy_namespaces+0xf2/0x220 [ 612.653749][T15201] ksys_unshare+0x438/0xab0 [ 612.653772][T15201] ? __pfx_ksys_unshare+0x10/0x10 [ 612.653792][T15201] ? xfd_validate_state+0x129/0x190 [ 612.653807][T15201] ? ksys_write+0x1ac/0x250 [ 612.653830][T15201] __x64_sys_unshare+0x31/0x40 [ 612.653851][T15201] do_syscall_64+0x10b/0xf80 [ 612.653873][T15201] ? clear_bhb_loop+0x40/0x90 [ 612.653891][T15201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.653907][T15201] RIP: 0033:0x7f0a50b9ce59 [ 612.653921][T15201] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.653935][T15201] RSP: 002b:00007f0a5198e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 612.653950][T15201] RAX: ffffffffffffffda RBX: 00007f0a50e16090 RCX: 00007f0a50b9ce59 [ 612.653960][T15201] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 612.653969][T15201] RBP: 00007f0a50c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 612.653979][T15201] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.653989][T15201] R13: 00007f0a50e16128 R14: 00007f0a50e16090 R15: 00007ffe8f0c5178 [ 612.654009][T15201] [ 613.955388][T15206] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 614.020443][ T30] audit: type=1800 audit(4148.130:51): pid=15209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1637" name="dbroot" dev="configfs" ino=64321 res=0 errno=0 [ 614.170327][T15217] random: crng reseeded on system resumption [ 614.215213][T15220] FAULT_INJECTION: forcing a failure. [ 614.215213][T15220] name failslab, interval 1, probability 0, space 0, times 0 [ 614.292904][T15220] CPU: 0 UID: 0 PID: 15220 Comm: syz.1.1640 Tainted: G L syzkaller #0 PREEMPT(full) [ 614.292931][T15220] Tainted: [L]=SOFTLOCKUP [ 614.292937][T15220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 614.292947][T15220] Call Trace: [ 614.292953][T15220] [ 614.292959][T15220] dump_stack_lvl+0x100/0x190 [ 614.292982][T15220] should_fail_ex.cold+0x5/0xa [ 614.293001][T15220] ? tomoyo_encode2+0xfb/0x3c0 [ 614.293023][T15220] should_failslab+0xc2/0x120 [ 614.293040][T15220] __kmalloc_noprof+0xe0/0x850 [ 614.293055][T15220] ? rcu_is_watching+0x12/0xc0 [ 614.293076][T15220] tomoyo_encode2+0xfb/0x3c0 [ 614.293098][T15220] tomoyo_encode+0x29/0x50 [ 614.293116][T15220] tomoyo_realpath_from_path+0x18c/0x690 [ 614.293140][T15220] tomoyo_check_open_permission+0x2af/0x3c0 [ 614.293158][T15220] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 614.293183][T15220] ? hook_file_open+0x24e/0x7a0 [ 614.293215][T15220] ? path_get+0x61/0x80 [ 614.293237][T15220] tomoyo_file_open+0x6b/0x90 [ 614.293259][T15220] security_file_open+0xb5/0x1e0 [ 614.293277][T15220] do_dentry_open+0x5aa/0x1660 [ 614.293298][T15220] ? security_inode_permission+0xbf/0x250 [ 614.293317][T15220] vfs_open+0x82/0x3f0 [ 614.293341][T15220] path_openat+0x208c/0x31a0 [ 614.293366][T15220] ? __pfx_path_openat+0x10/0x10 [ 614.293391][T15220] do_file_open+0x20e/0x430 [ 614.293411][T15220] ? __pfx_do_file_open+0x10/0x10 [ 614.293443][T15220] ? alloc_fd+0x476/0x790 [ 614.293463][T15220] ? do_getname+0x191/0x390 [ 614.293486][T15220] do_sys_openat2+0x10d/0x1e0 [ 614.293509][T15220] ? __pfx_do_sys_openat2+0x10/0x10 [ 614.293545][T15220] __x64_sys_openat+0x12d/0x210 [ 614.293568][T15220] ? __pfx___x64_sys_openat+0x10/0x10 [ 614.293591][T15220] ? ksys_write+0x1ac/0x250 [ 614.293611][T15220] ? rcu_is_watching+0x12/0xc0 [ 614.293631][T15220] do_syscall_64+0x10b/0xf80 [ 614.293653][T15220] ? clear_bhb_loop+0x40/0x90 [ 614.293673][T15220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.293689][T15220] RIP: 0033:0x7f7f9df9ce59 [ 614.293703][T15220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.293718][T15220] RSP: 002b:00007f7f9eeb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 614.293733][T15220] RAX: ffffffffffffffda RBX: 00007f7f9e215fa0 RCX: 00007f7f9df9ce59 [ 614.293744][T15220] RDX: 0000000000000500 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 614.293754][T15220] RBP: 00007f7f9e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 614.293763][T15220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 614.293772][T15220] R13: 00007f7f9e216038 R14: 00007f7f9e215fa0 R15: 00007ffd523c7a88 [ 614.293792][T15220] [ 614.293821][T15220] ERROR: Out of memory at tomoyo_realpath_from_path. [ 614.607588][T15217] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 614.633241][T15217] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 614.664912][T15215] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 614.679659][T15215] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 614.979523][T15231] FAULT_INJECTION: forcing a failure. [ 614.979523][T15231] name failslab, interval 1, probability 0, space 0, times 0 [ 615.035521][T15231] CPU: 0 UID: 7 PID: 15231 Comm: syz.2.1641 Tainted: G L syzkaller #0 PREEMPT(full) [ 615.035550][T15231] Tainted: [L]=SOFTLOCKUP [ 615.035556][T15231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 615.035565][T15231] Call Trace: [ 615.035571][T15231] [ 615.035577][T15231] dump_stack_lvl+0x100/0x190 [ 615.035599][T15231] should_fail_ex.cold+0x5/0xa [ 615.035619][T15231] should_failslab+0xc2/0x120 [ 615.035638][T15231] __kmalloc_node_noprof+0xe6/0x850 [ 615.035652][T15231] ? alloc_slab_obj_exts+0xae/0x270 [ 615.035676][T15231] alloc_slab_obj_exts+0xae/0x270 [ 615.035700][T15231] __memcg_slab_post_alloc_hook+0x3c2/0xff0 [ 615.035726][T15231] ? kasan_save_track+0x14/0x30 [ 615.035744][T15231] kmem_cache_alloc_noprof+0x58a/0x6e0 [ 615.035766][T15231] ? do_epoll_ctl+0xc6c/0x36a0 [ 615.035789][T15231] do_epoll_ctl+0xc6c/0x36a0 [ 615.035808][T15231] ? __lock_acquire+0x4a5/0x2630 [ 615.035830][T15231] ? __pfx_do_epoll_ctl+0x10/0x10 [ 615.035849][T15231] ? find_held_lock+0x2b/0x80 [ 615.035867][T15231] ? __might_fault+0xc5/0x140 [ 615.035889][T15231] ? __might_fault+0xc5/0x140 [ 615.035918][T15231] ? __x64_sys_epoll_ctl+0x15c/0x1e0 [ 615.035938][T15231] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 615.035959][T15231] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 615.035979][T15231] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 615.036002][T15231] ? syscall_user_dispatch+0x76/0x130 [ 615.036022][T15231] do_syscall_64+0x10b/0xf80 [ 615.036043][T15231] ? clear_bhb_loop+0x40/0x90 [ 615.036061][T15231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.036077][T15231] RIP: 0033:0x7fd8c359ce59 [ 615.036091][T15231] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.036105][T15231] RSP: 002b:00007fd8c44d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 615.036120][T15231] RAX: ffffffffffffffda RBX: 00007fd8c3815fa0 RCX: 00007fd8c359ce59 [ 615.036131][T15231] RDX: 0000000000000005 RSI: 0000000000000001 RDI: 0000000000000006 [ 615.036140][T15231] RBP: 00007fd8c3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 615.036149][T15231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 615.036158][T15231] R13: 00007fd8c3816038 R14: 00007fd8c3815fa0 R15: 00007ffe9ddc5df8 [ 615.036182][T15231] [ 615.854381][T15242] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 616.238801][ T5730] Process accounting resumed [ 616.251945][ T5730] Process accounting resumed [ 616.305858][ T5730] Process accounting resumed [ 616.342274][ T5730] Process accounting resumed [ 616.375614][ T5730] Process accounting resumed [ 616.425149][ T5730] Process accounting resumed [ 616.564311][T15251] Process accounting resumed [ 616.825416][T15262] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 617.739150][T15280] [ 618.653989][T15304] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1658'. [ 618.691307][T15309] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 618.750821][T15311] blktrace: Concurrent blktraces are not allowed on sda [ 618.862006][T15306] FAULT_INJECTION: forcing a failure. [ 618.862006][T15306] name failslab, interval 1, probability 0, space 0, times 0 [ 619.071602][T15320] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1662'. [ 619.088004][T15321] FAULT_INJECTION: forcing a failure. [ 619.088004][T15321] name failslab, interval 1, probability 0, space 0, times 0 [ 619.116059][T15306] CPU: 0 UID: 0 PID: 15306 Comm: syz.0.1657 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.116087][T15306] Tainted: [L]=SOFTLOCKUP [ 619.116094][T15306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.116103][T15306] Call Trace: [ 619.116109][T15306] [ 619.116116][T15306] dump_stack_lvl+0x100/0x190 [ 619.116142][T15306] should_fail_ex.cold+0x5/0xa [ 619.116162][T15306] should_failslab+0xc2/0x120 [ 619.116183][T15306] __kmalloc_cache_noprof+0x7a/0x6f0 [ 619.116205][T15306] ? crtc_crc_open+0x3ba/0x7e0 [ 619.116231][T15306] crtc_crc_open+0x3ba/0x7e0 [ 619.116254][T15306] ? __debugfs_file_get+0x1fc/0x860 [ 619.116272][T15306] ? __pfx_crtc_crc_open+0x10/0x10 [ 619.116301][T15306] ? __pfx_apparmor_file_open+0x10/0x10 [ 619.116317][T15306] ? path_get+0x61/0x80 [ 619.116339][T15306] ? __pfx_crtc_crc_open+0x10/0x10 [ 619.116363][T15306] full_proxy_open_regular+0x1b6/0x370 [ 619.116385][T15306] do_dentry_open+0x6d8/0x1660 [ 619.116404][T15306] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 619.116429][T15306] vfs_open+0x82/0x3f0 [ 619.116452][T15306] path_openat+0x208c/0x31a0 [ 619.116477][T15306] ? __pfx_path_openat+0x10/0x10 [ 619.116504][T15306] do_file_open+0x20e/0x430 [ 619.116526][T15306] ? __pfx_do_file_open+0x10/0x10 [ 619.116564][T15306] ? alloc_fd+0x476/0x790 [ 619.116584][T15306] ? do_getname+0x191/0x390 [ 619.116611][T15306] do_sys_openat2+0x10d/0x1e0 [ 619.116633][T15306] ? __pfx_do_sys_openat2+0x10/0x10 [ 619.116657][T15306] ? do_raw_spin_lock+0x128/0x260 [ 619.116681][T15306] __x64_sys_openat+0x12d/0x210 [ 619.116703][T15306] ? __pfx___x64_sys_openat+0x10/0x10 [ 619.116729][T15306] ? rcu_is_watching+0x12/0xc0 [ 619.116749][T15306] do_syscall_64+0x10b/0xf80 [ 619.116771][T15306] ? clear_bhb_loop+0x40/0x90 [ 619.116791][T15306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.116806][T15306] RIP: 0033:0x7f0a50b9ce59 [ 619.116821][T15306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.116836][T15306] RSP: 002b:00007f0a5198e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 619.116852][T15306] RAX: ffffffffffffffda RBX: 00007f0a50e16090 RCX: 00007f0a50b9ce59 [ 619.116863][T15306] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 619.116873][T15306] RBP: 00007f0a50c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 619.116883][T15306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.116892][T15306] R13: 00007f0a50e16128 R14: 00007f0a50e16090 R15: 00007ffe8f0c5178 [ 619.116912][T15306] [ 619.439245][T15321] CPU: 0 UID: 0 PID: 15321 Comm: syz.1.1663 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.439273][T15321] Tainted: [L]=SOFTLOCKUP [ 619.439278][T15321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.439288][T15321] Call Trace: [ 619.439293][T15321] [ 619.439300][T15321] dump_stack_lvl+0x100/0x190 [ 619.439321][T15321] should_fail_ex.cold+0x5/0xa [ 619.439341][T15321] should_failslab+0xc2/0x120 [ 619.439359][T15321] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 619.439383][T15321] ? security_file_alloc+0x34/0x2c0 [ 619.439402][T15321] ? trace_kmem_cache_alloc+0xd5/0x100 [ 619.439424][T15321] security_file_alloc+0x34/0x2c0 [ 619.439443][T15321] init_file+0x95/0x480 [ 619.439464][T15321] alloc_empty_file+0x79/0x1c0 [ 619.439487][T15321] alloc_file_pseudo+0x13a/0x230 [ 619.439510][T15321] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 619.439537][T15321] ioctx_alloc+0x5d6/0x21a0 [ 619.439565][T15321] ? find_held_lock+0x2b/0x80 [ 619.439586][T15321] ? __pfx_ioctx_alloc+0x10/0x10 [ 619.439612][T15321] __x64_sys_io_setup+0xc9/0x220 [ 619.439635][T15321] do_syscall_64+0x10b/0xf80 [ 619.439659][T15321] ? clear_bhb_loop+0x40/0x90 [ 619.439678][T15321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.439693][T15321] RIP: 0033:0x7f7f9df9ce59 [ 619.439707][T15321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.439721][T15321] RSP: 002b:00007f7f9eeb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 619.439736][T15321] RAX: ffffffffffffffda RBX: 00007f7f9e215fa0 RCX: 00007f7f9df9ce59 [ 619.439746][T15321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 619.439755][T15321] RBP: 00007f7f9eeb7090 R08: 0000000000000000 R09: 0000000000000000 [ 619.439765][T15321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 619.439774][T15321] R13: 00007f7f9e216038 R14: 00007f7f9e215fa0 R15: 00007ffd523c7a88 [ 619.439794][T15321] [ 619.755463][T15327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1664'. [ 619.857849][T15330] FAULT_INJECTION: forcing a failure. [ 619.857849][T15330] name failslab, interval 1, probability 0, space 0, times 0 [ 619.905485][T15330] CPU: 0 UID: 0 PID: 15330 Comm: syz.1.1664 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.905515][T15330] Tainted: [L]=SOFTLOCKUP [ 619.905521][T15330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.905531][T15330] Call Trace: [ 619.905537][T15330] [ 619.905544][T15330] dump_stack_lvl+0x100/0x190 [ 619.905566][T15330] should_fail_ex.cold+0x5/0xa [ 619.905587][T15330] should_failslab+0xc2/0x120 [ 619.905607][T15330] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 619.905630][T15330] ? __d_alloc+0x34/0xa40 [ 619.905655][T15330] __d_alloc+0x34/0xa40 [ 619.905677][T15330] d_alloc+0x4a/0x1e0 [ 619.905698][T15330] lookup_one_qstr_excl+0x171/0x250 [ 619.905726][T15330] start_dirop+0x59/0xb0 [ 619.905744][T15330] simple_start_creating+0xf9/0x110 [ 619.905763][T15330] ? __pfx_simple_start_creating+0x10/0x10 [ 619.905782][T15330] ? mntput+0x70/0xa0 [ 619.905799][T15330] ? simple_pin_fs+0xa3/0x190 [ 619.905816][T15330] debugfs_start_creating.part.0+0x82/0x170 [ 619.905840][T15330] __debugfs_create_file+0xb3/0x4f0 [ 619.905866][T15330] debugfs_create_file_full+0x41/0x60 [ 619.905890][T15330] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 619.905911][T15330] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 619.905954][T15330] ? lockdep_init_map_type+0x5c/0x250 [ 619.905974][T15330] preinit_net.part.0+0x43b/0x920 [ 619.905996][T15330] copy_net_ns+0x339/0x7c0 [ 619.906018][T15330] create_new_namespaces+0x3ea/0xac0 [ 619.906042][T15330] unshare_nsproxy_namespaces+0xf2/0x220 [ 619.906063][T15330] ksys_unshare+0x438/0xab0 [ 619.906092][T15330] ? __pfx_ksys_unshare+0x10/0x10 [ 619.906113][T15330] ? xfd_validate_state+0x129/0x190 [ 619.906129][T15330] ? ksys_write+0x1ac/0x250 [ 619.906154][T15330] __x64_sys_unshare+0x31/0x40 [ 619.906175][T15330] do_syscall_64+0x10b/0xf80 [ 619.906197][T15330] ? clear_bhb_loop+0x40/0x90 [ 619.906216][T15330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.906232][T15330] RIP: 0033:0x7f7f9df9ce59 [ 619.906245][T15330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.906259][T15330] RSP: 002b:00007f7f9ee96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 619.906274][T15330] RAX: ffffffffffffffda RBX: 00007f7f9e216090 RCX: 00007f7f9df9ce59 [ 619.906284][T15330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 619.906293][T15330] RBP: 00007f7f9e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 619.906303][T15330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.906312][T15330] R13: 00007f7f9e216128 R14: 00007f7f9e216090 R15: 00007ffd523c7a88 [ 619.906332][T15330] [ 622.612933][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1673'. [ 622.854540][T15391] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 622.950762][T15395] FAULT_INJECTION: forcing a failure. [ 622.950762][T15395] name failslab, interval 1, probability 0, space 0, times 0 [ 622.998767][T15395] CPU: 0 UID: 0 PID: 15395 Comm: syz.0.1676 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.998794][T15395] Tainted: [L]=SOFTLOCKUP [ 622.998800][T15395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 622.998809][T15395] Call Trace: [ 622.998815][T15395] [ 622.998821][T15395] dump_stack_lvl+0x100/0x190 [ 622.998848][T15395] should_fail_ex.cold+0x5/0xa [ 622.998868][T15395] ? ioctx_alloc+0x6a5/0x21a0 [ 622.998888][T15395] should_failslab+0xc2/0x120 [ 622.998905][T15395] __kmalloc_noprof+0xe0/0x850 [ 622.998924][T15395] ioctx_alloc+0x6a5/0x21a0 [ 622.998950][T15395] ? find_held_lock+0x2b/0x80 [ 622.998970][T15395] ? __pfx_ioctx_alloc+0x10/0x10 [ 622.998996][T15395] __x64_sys_io_setup+0xc9/0x220 [ 622.999018][T15395] do_syscall_64+0x10b/0xf80 [ 622.999042][T15395] ? clear_bhb_loop+0x40/0x90 [ 622.999060][T15395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.999078][T15395] RIP: 0033:0x7f0a50b9ce59 [ 622.999092][T15395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.999106][T15395] RSP: 002b:00007f0a519af028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 622.999121][T15395] RAX: ffffffffffffffda RBX: 00007f0a50e15fa0 RCX: 00007f0a50b9ce59 [ 622.999132][T15395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000007ffe [ 622.999141][T15395] RBP: 00007f0a519af090 R08: 0000000000000000 R09: 0000000000000000 [ 622.999150][T15395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.999159][T15395] R13: 00007f0a50e16038 R14: 00007f0a50e15fa0 R15: 00007ffe8f0c5178 [ 622.999178][T15395] [ 623.881270][T15405] FAULT_INJECTION: forcing a failure. [ 623.881270][T15405] name failslab, interval 1, probability 0, space 0, times 0 [ 624.079350][T15405] CPU: 0 UID: 0 PID: 15405 Comm: syz.2.1678 Tainted: G L syzkaller #0 PREEMPT(full) [ 624.079381][T15405] Tainted: [L]=SOFTLOCKUP [ 624.079387][T15405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 624.079397][T15405] Call Trace: [ 624.079402][T15405] [ 624.079408][T15405] dump_stack_lvl+0x100/0x190 [ 624.079431][T15405] should_fail_ex.cold+0x5/0xa [ 624.079451][T15405] should_failslab+0xc2/0x120 [ 624.079471][T15405] __kmalloc_cache_noprof+0x7a/0x6f0 [ 624.079492][T15405] ? crtc_crc_open+0x3ba/0x7e0 [ 624.079518][T15405] crtc_crc_open+0x3ba/0x7e0 [ 624.079540][T15405] ? __debugfs_file_get+0x1fc/0x860 [ 624.079559][T15405] ? __pfx_crtc_crc_open+0x10/0x10 [ 624.079581][T15405] ? __pfx_apparmor_file_open+0x10/0x10 [ 624.079596][T15405] ? path_get+0x61/0x80 [ 624.079619][T15405] ? __pfx_crtc_crc_open+0x10/0x10 [ 624.079639][T15405] full_proxy_open_regular+0x1b6/0x370 [ 624.079662][T15405] do_dentry_open+0x6d8/0x1660 [ 624.079681][T15405] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 624.079706][T15405] vfs_open+0x82/0x3f0 [ 624.079729][T15405] path_openat+0x208c/0x31a0 [ 624.079761][T15405] ? __pfx_path_openat+0x10/0x10 [ 624.079787][T15405] do_file_open+0x20e/0x430 [ 624.079808][T15405] ? __pfx_do_file_open+0x10/0x10 [ 624.079840][T15405] ? alloc_fd+0x476/0x790 [ 624.079860][T15405] ? do_getname+0x191/0x390 [ 624.079883][T15405] do_sys_openat2+0x10d/0x1e0 [ 624.079906][T15405] ? __pfx_do_sys_openat2+0x10/0x10 [ 624.079929][T15405] ? do_raw_spin_lock+0x128/0x260 [ 624.079951][T15405] __x64_sys_openat+0x12d/0x210 [ 624.079974][T15405] ? __pfx___x64_sys_openat+0x10/0x10 [ 624.079999][T15405] ? rcu_is_watching+0x12/0xc0 [ 624.080019][T15405] do_syscall_64+0x10b/0xf80 [ 624.080042][T15405] ? clear_bhb_loop+0x40/0x90 [ 624.080059][T15405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.080075][T15405] RIP: 0033:0x7fd8c359ce59 [ 624.080089][T15405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.080103][T15405] RSP: 002b:00007fd8c44b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 624.080118][T15405] RAX: ffffffffffffffda RBX: 00007fd8c3816090 RCX: 00007fd8c359ce59 [ 624.080129][T15405] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 624.080138][T15405] RBP: 00007fd8c3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 624.080148][T15405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 624.080158][T15405] R13: 00007fd8c3816128 R14: 00007fd8c3816090 R15: 00007ffe9ddc5df8 [ 624.080177][T15405] [ 624.650589][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.662116][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.745994][T15414] can: request_module (can-proto-3) failed. [ 624.987410][T15424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1683'. [ 625.570446][T15434] [ 625.589185][T15436] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1692'. [ 625.653949][T15436] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1692'. [ 628.055900][T15503] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1696'. [ 628.122578][T15503] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1696'. [ 628.374907][T15474] FAULT_INJECTION: forcing a failure. [ 628.374907][T15474] name fail_futex, interval 1, probability 0, space 0, times 0 [ 628.390676][T15514] random: crng reseeded on system resumption [ 628.496456][T15474] CPU: 0 UID: 0 PID: 15474 Comm: syz.2.1689 Tainted: G L syzkaller #0 PREEMPT(full) [ 628.496482][T15474] Tainted: [L]=SOFTLOCKUP [ 628.496488][T15474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 628.496497][T15474] Call Trace: [ 628.496502][T15474] [ 628.496508][T15474] dump_stack_lvl+0x100/0x190 [ 628.496530][T15474] should_fail_ex.cold+0x5/0xa [ 628.496549][T15474] get_futex_key+0xf78/0x1510 [ 628.496567][T15474] ? __pfx_get_futex_key+0x10/0x10 [ 628.496581][T15474] ? lock_acquire+0x1b1/0x370 [ 628.496601][T15474] futex_wake+0xea/0x530 [ 628.496622][T15474] ? __pfx_futex_wake+0x10/0x10 [ 628.496640][T15474] ? exit_mm_release+0x19/0x30 [ 628.496667][T15474] do_futex+0x32b/0x350 [ 628.496684][T15474] ? __pfx_do_futex+0x10/0x10 [ 628.496698][T15474] ? __might_fault+0xc5/0x140 [ 628.496726][T15474] mm_release+0x24a/0x2f0 [ 628.496744][T15474] do_exit+0x707/0x2af0 [ 628.496770][T15474] ? __pfx_do_exit+0x10/0x10 [ 628.496792][T15474] ? do_raw_spin_lock+0x128/0x260 [ 628.496809][T15474] ? find_held_lock+0x2b/0x80 [ 628.496827][T15474] ? get_signal+0x7e5/0x2210 [ 628.496848][T15474] do_group_exit+0xd5/0x2a0 [ 628.496872][T15474] get_signal+0x20ff/0x2210 [ 628.496897][T15474] ? __pfx_get_signal+0x10/0x10 [ 628.496918][T15474] ? do_futex+0x192/0x350 [ 628.496935][T15474] arch_do_signal_or_restart+0x91/0x7a0 [ 628.496960][T15474] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 628.496987][T15474] ? fput+0x79/0x100 [ 628.497008][T15474] ? rcu_is_watching+0x12/0xc0 [ 628.497028][T15474] exit_to_user_mode_loop+0x8b/0x4f0 [ 628.497043][T15474] ? rcu_is_watching+0x12/0xc0 [ 628.497062][T15474] do_syscall_64+0x6f2/0xf80 [ 628.497085][T15474] ? clear_bhb_loop+0x40/0x90 [ 628.497103][T15474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.497119][T15474] RIP: 0033:0x7fd8c359ce59 [ 628.497132][T15474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.497147][T15474] RSP: 002b:00007fd8c44950e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 628.497162][T15474] RAX: fffffffffffffe00 RBX: 00007fd8c3816188 RCX: 00007fd8c359ce59 [ 628.497172][T15474] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd8c3816188 [ 628.497181][T15474] RBP: 00007fd8c3816180 R08: 0000000000000000 R09: 0000000000000000 [ 628.497191][T15474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.497200][T15474] R13: 00007fd8c3816218 R14: 00007ffe9ddc5d10 R15: 00007ffe9ddc5df8 [ 628.497219][T15474] [ 628.826895][T15520] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 628.834276][T15520] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 629.025979][T15515] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 629.047152][T15515] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 629.079516][T15517] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 629.106309][T15517] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 629.960185][T15548] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1708'. [ 630.833621][T15575] random: crng reseeded on system resumption [ 631.095101][T15575] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 631.175286][T15575] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 631.444224][T15597] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1718'. [ 631.709004][ T30] audit: type=1800 audit(4165.820:52): pid=15599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1719" name="lu_gp_id" dev="configfs" ino=66437 res=0 errno=0 [ 632.149060][T15602] Process accounting paused [ 632.323377][T15613] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1723'. [ 632.341680][T15616] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 632.389091][T15613] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1723'. [ 632.665280][T15620] random: crng reseeded on system resumption [ 632.837688][T15620] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 632.879922][T15620] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 632.927271][T15620] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 632.960058][T15620] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 633.211909][T15639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1729'. [ 633.586049][T15647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1733'. [ 633.866086][T15651] FAULT_INJECTION: forcing a failure. [ 633.866086][T15651] name failslab, interval 1, probability 0, space 0, times 0 [ 634.122005][T15651] CPU: 0 UID: 0 PID: 15651 Comm: syz.1.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.122044][T15651] Tainted: [L]=SOFTLOCKUP [ 634.122050][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.122060][T15651] Call Trace: [ 634.122067][T15651] [ 634.122074][T15651] dump_stack_lvl+0x100/0x190 [ 634.122096][T15651] should_fail_ex.cold+0x5/0xa [ 634.122117][T15651] should_failslab+0xc2/0x120 [ 634.122136][T15651] __kmalloc_cache_noprof+0x7a/0x6f0 [ 634.122157][T15651] ? crtc_crc_open+0x3ba/0x7e0 [ 634.122184][T15651] crtc_crc_open+0x3ba/0x7e0 [ 634.122205][T15651] ? __debugfs_file_get+0x1fc/0x860 [ 634.122224][T15651] ? __pfx_crtc_crc_open+0x10/0x10 [ 634.122247][T15651] ? __pfx_apparmor_file_open+0x10/0x10 [ 634.122261][T15651] ? path_get+0x61/0x80 [ 634.122284][T15651] ? __pfx_crtc_crc_open+0x10/0x10 [ 634.122305][T15651] full_proxy_open_regular+0x1b6/0x370 [ 634.122328][T15651] do_dentry_open+0x6d8/0x1660 [ 634.122346][T15651] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 634.122370][T15651] vfs_open+0x82/0x3f0 [ 634.122394][T15651] path_openat+0x208c/0x31a0 [ 634.122418][T15651] ? __pfx_path_openat+0x10/0x10 [ 634.122443][T15651] do_file_open+0x20e/0x430 [ 634.122463][T15651] ? __pfx_do_file_open+0x10/0x10 [ 634.122495][T15651] ? alloc_fd+0x476/0x790 [ 634.122518][T15651] ? do_getname+0x191/0x390 [ 634.122540][T15651] do_sys_openat2+0x10d/0x1e0 [ 634.122563][T15651] ? __pfx_do_sys_openat2+0x10/0x10 [ 634.122585][T15651] ? do_raw_spin_lock+0x128/0x260 [ 634.122607][T15651] __x64_sys_openat+0x12d/0x210 [ 634.122630][T15651] ? __pfx___x64_sys_openat+0x10/0x10 [ 634.122656][T15651] ? rcu_is_watching+0x12/0xc0 [ 634.122676][T15651] do_syscall_64+0x10b/0xf80 [ 634.122698][T15651] ? clear_bhb_loop+0x40/0x90 [ 634.122716][T15651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.122732][T15651] RIP: 0033:0x7f7f9df9ce59 [ 634.122746][T15651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.122762][T15651] RSP: 002b:00007f7f9ee75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 634.122778][T15651] RAX: ffffffffffffffda RBX: 00007f7f9e216180 RCX: 00007f7f9df9ce59 [ 634.122789][T15651] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 634.122799][T15651] RBP: 00007f7f9e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 634.122808][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.122818][T15651] R13: 00007f7f9e216218 R14: 00007f7f9e216180 R15: 00007ffd523c7a88 [ 634.122838][T15651] [ 634.453995][T15664] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1736'. [ 634.465471][T15664] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1736'. [ 634.521946][T15663] netlink: 197 bytes leftover after parsing attributes in process `syz.2.1737'. [ 634.609505][T15668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1739'. [ 634.805526][T15678] random: crng reseeded on system resumption [ 634.937871][T15676] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 634.966503][T15676] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 635.002500][T15673] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 635.059917][T15673] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 635.101246][T15669] Process accounting paused [ 635.673474][T15687] ubi0: attaching mtd0 [ 635.693824][T15687] ubi0: scanning is finished [ 635.709838][T15687] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 635.953678][T15687] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 636.519077][T15705] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1747'. [ 636.565611][T15705] netlink: 504 bytes leftover after parsing attributes in process `syz.3.1747'. [ 637.573578][T15722] FAULT_INJECTION: forcing a failure. [ 637.573578][T15722] name failslab, interval 1, probability 0, space 0, times 0 [ 637.717376][T15722] CPU: 0 UID: 0 PID: 15722 Comm: syz.3.1751 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.717406][T15722] Tainted: [L]=SOFTLOCKUP [ 637.717412][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 637.717422][T15722] Call Trace: [ 637.717428][T15722] [ 637.717435][T15722] dump_stack_lvl+0x100/0x190 [ 637.717457][T15722] should_fail_ex.cold+0x5/0xa [ 637.717477][T15722] should_failslab+0xc2/0x120 [ 637.717495][T15722] __kmalloc_cache_noprof+0x7a/0x6f0 [ 637.717516][T15722] ? crtc_crc_open+0x3ba/0x7e0 [ 637.717543][T15722] crtc_crc_open+0x3ba/0x7e0 [ 637.717565][T15722] ? __debugfs_file_get+0x1fc/0x860 [ 637.717583][T15722] ? __pfx_crtc_crc_open+0x10/0x10 [ 637.717606][T15722] ? __pfx_apparmor_file_open+0x10/0x10 [ 637.717621][T15722] ? path_get+0x61/0x80 [ 637.717644][T15722] ? __pfx_crtc_crc_open+0x10/0x10 [ 637.717666][T15722] full_proxy_open_regular+0x1b6/0x370 [ 637.717688][T15722] do_dentry_open+0x6d8/0x1660 [ 637.717706][T15722] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 637.717738][T15722] vfs_open+0x82/0x3f0 [ 637.717763][T15722] path_openat+0x208c/0x31a0 [ 637.717789][T15722] ? __pfx_path_openat+0x10/0x10 [ 637.717815][T15722] do_file_open+0x20e/0x430 [ 637.717835][T15722] ? __pfx_do_file_open+0x10/0x10 [ 637.717866][T15722] ? alloc_fd+0x476/0x790 [ 637.717886][T15722] ? do_getname+0x191/0x390 [ 637.717909][T15722] do_sys_openat2+0x10d/0x1e0 [ 637.717931][T15722] ? __pfx_do_sys_openat2+0x10/0x10 [ 637.717960][T15722] __x64_sys_openat+0x12d/0x210 [ 637.717983][T15722] ? __pfx___x64_sys_openat+0x10/0x10 [ 637.718009][T15722] ? rcu_is_watching+0x12/0xc0 [ 637.718029][T15722] do_syscall_64+0x10b/0xf80 [ 637.718052][T15722] ? clear_bhb_loop+0x40/0x90 [ 637.718071][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.718087][T15722] RIP: 0033:0x7ff3db79ce59 [ 637.718101][T15722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.718116][T15722] RSP: 002b:00007ff3dc71c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 637.718131][T15722] RAX: ffffffffffffffda RBX: 00007ff3dba16090 RCX: 00007ff3db79ce59 [ 637.718141][T15722] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 637.718151][T15722] RBP: 00007ff3db832d6f R08: 0000000000000000 R09: 0000000000000000 [ 637.718161][T15722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.718170][T15722] R13: 00007ff3dba16128 R14: 00007ff3dba16090 R15: 00007fffd6751ca8 [ 637.718191][T15722] [ 638.272510][T15732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1754'. [ 639.522209][T15750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1765'. [ 639.659923][T15756] random: crng reseeded on system resumption [ 639.837468][T15757] FAULT_INJECTION: forcing a failure. [ 639.837468][T15757] name failslab, interval 1, probability 0, space 0, times 0 [ 639.837503][T15757] CPU: 0 UID: 0 PID: 15757 Comm: syz.0.1765 Tainted: G L syzkaller #0 PREEMPT(full) [ 639.837526][T15757] Tainted: [L]=SOFTLOCKUP [ 639.837532][T15757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 639.837542][T15757] Call Trace: [ 639.837547][T15757] [ 639.837554][T15757] dump_stack_lvl+0x100/0x190 [ 639.837575][T15757] should_fail_ex.cold+0x5/0xa [ 639.837595][T15757] ? tomoyo_realpath_from_path+0xb6/0x690 [ 639.837623][T15757] should_failslab+0xc2/0x120 [ 639.837642][T15757] __kmalloc_noprof+0xe0/0x850 [ 639.837656][T15757] ? kfree+0x1dd/0x6c0 [ 639.837679][T15757] tomoyo_realpath_from_path+0xb6/0x690 [ 639.837703][T15757] tomoyo_check_open_permission+0x2af/0x3c0 [ 639.837721][T15757] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 639.837746][T15757] ? hook_file_open+0x24e/0x7a0 [ 639.837776][T15757] ? path_get+0x61/0x80 [ 639.837798][T15757] tomoyo_file_open+0x6b/0x90 [ 639.837820][T15757] security_file_open+0xb5/0x1e0 [ 639.837839][T15757] do_dentry_open+0x5aa/0x1660 [ 639.837858][T15757] ? security_inode_permission+0xbf/0x250 [ 639.837881][T15757] vfs_open+0x82/0x3f0 [ 639.837905][T15757] path_openat+0x208c/0x31a0 [ 639.837930][T15757] ? __pfx_path_openat+0x10/0x10 [ 639.837955][T15757] do_file_open+0x20e/0x430 [ 639.837975][T15757] ? __pfx_do_file_open+0x10/0x10 [ 639.838007][T15757] ? alloc_fd+0x476/0x790 [ 639.838027][T15757] ? do_getname+0x191/0x390 [ 639.838049][T15757] do_sys_openat2+0x10d/0x1e0 [ 639.838072][T15757] ? __pfx_do_sys_openat2+0x10/0x10 [ 639.838101][T15757] __x64_sys_openat+0x12d/0x210 [ 639.838124][T15757] ? __pfx___x64_sys_openat+0x10/0x10 [ 639.838145][T15757] ? ksys_write+0x1ac/0x250 [ 639.838165][T15757] ? rcu_is_watching+0x12/0xc0 [ 639.838185][T15757] do_syscall_64+0x10b/0xf80 [ 639.838207][T15757] ? clear_bhb_loop+0x40/0x90 [ 639.838226][T15757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.838242][T15757] RIP: 0033:0x7f0a50b9ce59 [ 639.838256][T15757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.838271][T15757] RSP: 002b:00007f0a4edf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 639.838286][T15757] RAX: ffffffffffffffda RBX: 00007f0a50e16180 RCX: 00007f0a50b9ce59 [ 639.838296][T15757] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 639.838307][T15757] RBP: 00007f0a50c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 639.838316][T15757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 639.838325][T15757] R13: 00007f0a50e16218 R14: 00007f0a50e16180 R15: 00007ffe8f0c5178 [ 639.838345][T15757] [ 639.838361][T15757] ERROR: Out of memory at tomoyo_realpath_from_path. [ 639.948583][T15752] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 639.948604][T15752] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 641.645779][T15741] Process accounting paused [ 642.288066][ T5627] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 642.447943][T15795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 642.958414][T15795] FAULT_INJECTION: forcing a failure. [ 642.958414][T15795] name failslab, interval 1, probability 0, space 0, times 0 [ 642.958450][T15795] CPU: 0 UID: 0 PID: 15795 Comm: syz.3.1764 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.958472][T15795] Tainted: [L]=SOFTLOCKUP [ 642.958478][T15795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 642.958488][T15795] Call Trace: [ 642.958494][T15795] [ 642.958500][T15795] dump_stack_lvl+0x100/0x190 [ 642.958521][T15795] should_fail_ex.cold+0x5/0xa [ 642.958542][T15795] should_failslab+0xc2/0x120 [ 642.958561][T15795] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 642.958586][T15795] ? __d_alloc+0x34/0xa40 [ 642.958610][T15795] __d_alloc+0x34/0xa40 [ 642.958632][T15795] d_alloc+0x4a/0x1e0 [ 642.958653][T15795] lookup_one_qstr_excl+0x171/0x250 [ 642.958678][T15795] start_dirop+0x59/0xb0 [ 642.958695][T15795] simple_start_creating+0xf9/0x110 [ 642.958714][T15795] ? __pfx_simple_start_creating+0x10/0x10 [ 642.958732][T15795] ? mntput+0x70/0xa0 [ 642.958749][T15795] ? simple_pin_fs+0xa3/0x190 [ 642.958765][T15795] debugfs_start_creating.part.0+0x82/0x170 [ 642.958790][T15795] __debugfs_create_file+0xb3/0x4f0 [ 642.958815][T15795] debugfs_create_file_full+0x41/0x60 [ 642.958840][T15795] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 642.958860][T15795] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 642.958878][T15795] ? ida_alloc_range+0x70d/0x830 [ 642.958917][T15795] ? lockdep_init_map_type+0x5c/0x250 [ 642.958936][T15795] preinit_net.part.0+0x252/0x920 [ 642.958958][T15795] copy_net_ns+0x339/0x7c0 [ 642.958980][T15795] create_new_namespaces+0x3ea/0xac0 [ 642.959004][T15795] unshare_nsproxy_namespaces+0xf2/0x220 [ 642.959025][T15795] ksys_unshare+0x438/0xab0 [ 642.959049][T15795] ? __pfx_ksys_unshare+0x10/0x10 [ 642.959069][T15795] ? xfd_validate_state+0x129/0x190 [ 642.959084][T15795] ? ksys_write+0x1ac/0x250 [ 642.959106][T15795] __x64_sys_unshare+0x31/0x40 [ 642.959128][T15795] do_syscall_64+0x10b/0xf80 [ 642.959149][T15795] ? clear_bhb_loop+0x40/0x90 [ 642.959167][T15795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.959183][T15795] RIP: 0033:0x7ff3db79ce59 [ 642.959197][T15795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.959212][T15795] RSP: 002b:00007ff3dc73d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 642.959231][T15795] RAX: ffffffffffffffda RBX: 00007ff3dba15fa0 RCX: 00007ff3db79ce59 [ 642.959242][T15795] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 642.959251][T15795] RBP: 00007ff3db832d6f R08: 0000000000000000 R09: 0000000000000000 [ 642.959260][T15795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.959269][T15795] R13: 00007ff3dba16038 R14: 00007ff3dba15fa0 R15: 00007fffd6751ca8 [ 642.959289][T15795] [ 643.517063][T15812] random: crng reseeded on system resumption [ 643.650132][T15812] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 643.650153][T15812] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 645.025890][T15825] FAULT_INJECTION: forcing a failure. [ 645.025890][T15825] name fail_futex, interval 1, probability 0, space 0, times 0 [ 645.054843][T15834] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 645.178508][T15825] CPU: 0 UID: 0 PID: 15825 Comm: syz.3.1770 Tainted: G L syzkaller #0 PREEMPT(full) [ 645.178537][T15825] Tainted: [L]=SOFTLOCKUP [ 645.178544][T15825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 645.178553][T15825] Call Trace: [ 645.178559][T15825] [ 645.178566][T15825] dump_stack_lvl+0x100/0x190 [ 645.178587][T15825] should_fail_ex.cold+0x5/0xa [ 645.178605][T15825] ? rcu_is_watching+0x12/0xc0 [ 645.178626][T15825] get_futex_key+0x1d2/0x1510 [ 645.178644][T15825] ? __pfx_get_futex_key+0x10/0x10 [ 645.178667][T15825] futex_wait_setup+0x83/0x510 [ 645.178692][T15825] __futex_wait+0x19f/0x300 [ 645.178713][T15825] ? __pfx___futex_wait+0x10/0x10 [ 645.178735][T15825] ? __pfx_futex_wake_mark+0x10/0x10 [ 645.178758][T15825] ? find_held_lock+0x2b/0x80 [ 645.178776][T15825] ? futex_wake+0x456/0x530 [ 645.178799][T15825] futex_wait+0xe6/0x370 [ 645.178819][T15825] ? __pfx_futex_wait+0x10/0x10 [ 645.178848][T15825] do_futex+0x1ef/0x350 [ 645.178864][T15825] ? __pfx_do_futex+0x10/0x10 [ 645.178881][T15825] ? __pfx___might_resched+0x10/0x10 [ 645.178898][T15825] ? blkcg_maybe_throttle_current+0x5e8/0xeb0 [ 645.178917][T15825] ? _raw_spin_unlock_irq+0x23/0x50 [ 645.178941][T15825] __x64_sys_futex+0x34f/0x4d0 [ 645.178961][T15825] ? __pfx___x64_sys_futex+0x10/0x10 [ 645.178977][T15825] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 645.178996][T15825] ? rcu_is_watching+0x12/0xc0 [ 645.179016][T15825] do_syscall_64+0x10b/0xf80 [ 645.179037][T15825] ? clear_bhb_loop+0x40/0x90 [ 645.179055][T15825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 645.179070][T15825] RIP: 0033:0x7ff3db79ce59 [ 645.179084][T15825] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 645.179099][T15825] RSP: 002b:00007ff3dc6fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 645.179113][T15825] RAX: ffffffffffffffda RBX: 00007ff3dba16188 RCX: 00007ff3db79ce59 [ 645.179124][T15825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff3dba16188 [ 645.179133][T15825] RBP: 00007ff3dba16180 R08: 0000000000000000 R09: 0000000000000000 [ 645.179142][T15825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 645.179151][T15825] R13: 00007ff3dba16218 R14: 00007fffd6751bc0 R15: 00007fffd6751ca8 [ 645.179169][T15825] [ 645.997857][T15847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1775'. [ 646.646749][T15857] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 646.725325][T15859] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 647.118328][T15854] Process accounting paused [ 647.892506][T15886] FAULT_INJECTION: forcing a failure. [ 647.892506][T15886] name failslab, interval 1, probability 0, space 0, times 0 [ 647.982182][T15888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1785'. [ 648.175039][T15886] CPU: 0 UID: 0 PID: 15886 Comm: syz.2.1782 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.175067][T15886] Tainted: [L]=SOFTLOCKUP [ 648.175073][T15886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 648.175082][T15886] Call Trace: [ 648.175088][T15886] [ 648.175095][T15886] dump_stack_lvl+0x100/0x190 [ 648.175116][T15886] should_fail_ex.cold+0x5/0xa [ 648.175137][T15886] should_failslab+0xc2/0x120 [ 648.175155][T15886] __kmalloc_cache_noprof+0x7a/0x6f0 [ 648.175176][T15886] ? crtc_crc_open+0x3ba/0x7e0 [ 648.175203][T15886] crtc_crc_open+0x3ba/0x7e0 [ 648.175225][T15886] ? __debugfs_file_get+0x1fc/0x860 [ 648.175243][T15886] ? __pfx_crtc_crc_open+0x10/0x10 [ 648.175266][T15886] ? __pfx_apparmor_file_open+0x10/0x10 [ 648.175281][T15886] ? path_get+0x61/0x80 [ 648.175303][T15886] ? __pfx_crtc_crc_open+0x10/0x10 [ 648.175333][T15886] full_proxy_open_regular+0x1b6/0x370 [ 648.175356][T15886] do_dentry_open+0x6d8/0x1660 [ 648.175375][T15886] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 648.175402][T15886] vfs_open+0x82/0x3f0 [ 648.175426][T15886] path_openat+0x208c/0x31a0 [ 648.175451][T15886] ? __pfx_path_openat+0x10/0x10 [ 648.175476][T15886] do_file_open+0x20e/0x430 [ 648.175496][T15886] ? __pfx_do_file_open+0x10/0x10 [ 648.175528][T15886] ? alloc_fd+0x476/0x790 [ 648.175548][T15886] ? do_getname+0x191/0x390 [ 648.175570][T15886] do_sys_openat2+0x10d/0x1e0 [ 648.175593][T15886] ? __pfx_do_sys_openat2+0x10/0x10 [ 648.175616][T15886] ? do_raw_spin_lock+0x128/0x260 [ 648.175638][T15886] __x64_sys_openat+0x12d/0x210 [ 648.175661][T15886] ? __pfx___x64_sys_openat+0x10/0x10 [ 648.175687][T15886] ? rcu_is_watching+0x12/0xc0 [ 648.175708][T15886] do_syscall_64+0x10b/0xf80 [ 648.175730][T15886] ? clear_bhb_loop+0x40/0x90 [ 648.175749][T15886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.175765][T15886] RIP: 0033:0x7fd8c359ce59 [ 648.175780][T15886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.175795][T15886] RSP: 002b:00007fd8c44b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 648.175810][T15886] RAX: ffffffffffffffda RBX: 00007fd8c3816090 RCX: 00007fd8c359ce59 [ 648.175820][T15886] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 648.175831][T15886] RBP: 00007fd8c3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 648.175841][T15886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.175850][T15886] R13: 00007fd8c3816128 R14: 00007fd8c3816090 R15: 00007ffe9ddc5df8 [ 648.175869][T15886] [ 648.770966][T15898] FAULT_INJECTION: forcing a failure. [ 648.770966][T15898] name failslab, interval 1, probability 0, space 0, times 0 [ 648.812061][T15898] CPU: 0 UID: 0 PID: 15898 Comm: syz.1.1785 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.812092][T15898] Tainted: [L]=SOFTLOCKUP [ 648.812100][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 648.812109][T15898] Call Trace: [ 648.812115][T15898] [ 648.812122][T15898] dump_stack_lvl+0x100/0x190 [ 648.812143][T15898] should_fail_ex.cold+0x5/0xa [ 648.812165][T15898] should_failslab+0xc2/0x120 [ 648.812183][T15898] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 648.812210][T15898] ? __d_alloc+0x34/0xa40 [ 648.812234][T15898] __d_alloc+0x34/0xa40 [ 648.812255][T15898] d_alloc+0x4a/0x1e0 [ 648.812276][T15898] lookup_one_qstr_excl+0x171/0x250 [ 648.812302][T15898] start_dirop+0x59/0xb0 [ 648.812319][T15898] simple_start_creating+0xf9/0x110 [ 648.812338][T15898] ? __pfx_simple_start_creating+0x10/0x10 [ 648.812357][T15898] ? mntput+0x70/0xa0 [ 648.812373][T15898] ? simple_pin_fs+0xa3/0x190 [ 648.812390][T15898] debugfs_start_creating.part.0+0x82/0x170 [ 648.812414][T15898] __debugfs_create_file+0xb3/0x4f0 [ 648.812440][T15898] debugfs_create_file_full+0x41/0x60 [ 648.812464][T15898] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 648.812485][T15898] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 648.812503][T15898] ? ida_alloc_range+0x70d/0x830 [ 648.812574][T15898] ? lockdep_init_map_type+0x5c/0x250 [ 648.812598][T15898] preinit_net.part.0+0x252/0x920 [ 648.812620][T15898] copy_net_ns+0x339/0x7c0 [ 648.812643][T15898] create_new_namespaces+0x3ea/0xac0 [ 648.812668][T15898] unshare_nsproxy_namespaces+0xf2/0x220 [ 648.812689][T15898] ksys_unshare+0x438/0xab0 [ 648.812713][T15898] ? __pfx_ksys_unshare+0x10/0x10 [ 648.812733][T15898] ? xfd_validate_state+0x129/0x190 [ 648.812748][T15898] ? ksys_write+0x1ac/0x250 [ 648.812771][T15898] __x64_sys_unshare+0x31/0x40 [ 648.812792][T15898] do_syscall_64+0x10b/0xf80 [ 648.812814][T15898] ? clear_bhb_loop+0x40/0x90 [ 648.812833][T15898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.812848][T15898] RIP: 0033:0x7f7f9df9ce59 [ 648.812862][T15898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.812877][T15898] RSP: 002b:00007f7f9ee75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 648.812891][T15898] RAX: ffffffffffffffda RBX: 00007f7f9e216180 RCX: 00007f7f9df9ce59 [ 648.812902][T15898] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 648.812911][T15898] RBP: 00007f7f9e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 648.812926][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.812935][T15898] R13: 00007f7f9e216218 R14: 00007f7f9e216180 R15: 00007ffd523c7a88 [ 648.812955][T15898] [ 649.913758][T15915] random: crng reseeded on system resumption [ 650.055941][T15915] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 650.148872][T15915] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 651.669478][T15936] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1794'. [ 651.721330][T15936] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1794'. [ 653.000363][T15966] random: crng reseeded on system resumption [ 653.153872][T15966] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 653.153893][T15966] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 653.595823][T15980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1802'. [ 654.087101][T15990] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1804'. [ 654.189800][T15990] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1804'. [ 655.229242][T16024] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 655.814611][T16034] ubi0: attaching mtd0 [ 655.911712][T16034] ubi0: scanning is finished [ 655.997932][T16037] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1813'. [ 656.018920][T16034] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 656.517568][T16034] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 656.617587][T16058] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 656.942749][T16063] zswap: compressor not available [ 657.120623][ T5627] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 657.128300][ T5627] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 657.571686][T16078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1819'. [ 658.166040][T16076] Process accounting resumed [ 658.633055][T16065] Process accounting resumed [ 660.560798][T16136] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 661.324627][T16156] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1834'. [ 661.720332][T16162] FAULT_INJECTION: forcing a failure. [ 661.720332][T16162] name fail_futex, interval 1, probability 0, space 0, times 0 [ 661.912639][T16162] CPU: 0 UID: 0 PID: 16162 Comm: syz.0.1835 Tainted: G L syzkaller #0 PREEMPT(full) [ 661.912669][T16162] Tainted: [L]=SOFTLOCKUP [ 661.912674][T16162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 661.912684][T16162] Call Trace: [ 661.912691][T16162] [ 661.912697][T16162] dump_stack_lvl+0x100/0x190 [ 661.912719][T16162] should_fail_ex.cold+0x5/0xa [ 661.912740][T16162] get_futex_key+0x1d2/0x1510 [ 661.912759][T16162] ? __pfx_get_futex_key+0x10/0x10 [ 661.912782][T16162] futex_wake+0xea/0x530 [ 661.912802][T16162] ? __pfx_futex_wake+0x10/0x10 [ 661.912822][T16162] ? lockdep_hardirqs_on+0x78/0x100 [ 661.912851][T16162] do_futex+0x32b/0x350 [ 661.912868][T16162] ? __pfx_do_futex+0x10/0x10 [ 661.912884][T16162] ? __pfx___might_resched+0x10/0x10 [ 661.912902][T16162] ? blkcg_maybe_throttle_current+0x5e8/0xeb0 [ 661.912922][T16162] ? _raw_spin_unlock_irq+0x23/0x50 [ 661.912944][T16162] __x64_sys_futex+0x34f/0x4d0 [ 661.912963][T16162] ? __pfx___x64_sys_futex+0x10/0x10 [ 661.912979][T16162] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 661.912995][T16162] ? rcu_is_watching+0x12/0xc0 [ 661.913013][T16162] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 661.913037][T16162] ? rcu_is_watching+0x12/0xc0 [ 661.913058][T16162] do_syscall_64+0x10b/0xf80 [ 661.913081][T16162] ? clear_bhb_loop+0x40/0x90 [ 661.913100][T16162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.913116][T16162] RIP: 0033:0x7f0a50b9ce59 [ 661.913131][T16162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 661.913146][T16162] RSP: 002b:00007f0a4edf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 661.913161][T16162] RAX: ffffffffffffffda RBX: 00007f0a50e16188 RCX: 00007f0a50b9ce59 [ 661.913172][T16162] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0a50e1618c [ 661.913181][T16162] RBP: 00007f0a50e16180 R08: 0000000000000001 R09: 0000000000000000 [ 661.913190][T16162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 661.913199][T16162] R13: 00007f0a50e16218 R14: 00007ffe8f0c5090 R15: 00007ffe8f0c5178 [ 661.913219][T16162] [ 662.526547][T16166] Process accounting resumed [ 663.333193][T16192] FAULT_INJECTION: forcing a failure. [ 663.333193][T16192] name failslab, interval 1, probability 0, space 0, times 0 [ 663.442189][T16192] CPU: 0 UID: 0 PID: 16192 Comm: syz.3.1842 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.442219][T16192] Tainted: [L]=SOFTLOCKUP [ 663.442224][T16192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 663.442234][T16192] Call Trace: [ 663.442240][T16192] [ 663.442246][T16192] dump_stack_lvl+0x100/0x190 [ 663.442268][T16192] should_fail_ex.cold+0x5/0xa [ 663.442288][T16192] should_failslab+0xc2/0x120 [ 663.442307][T16192] __kmalloc_cache_noprof+0x7a/0x6f0 [ 663.442328][T16192] ? snd_pcm_attach_substream+0x436/0xd20 [ 663.442346][T16192] ? snd_ctl_get_preferred_subdevice+0x17a/0x1f0 [ 663.442367][T16192] snd_pcm_attach_substream+0x436/0xd20 [ 663.442389][T16192] snd_pcm_open_substream+0x90/0x1850 [ 663.442409][T16192] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 663.442427][T16192] ? rcu_is_watching+0x12/0xc0 [ 663.442449][T16192] snd_pcm_open+0x2a3/0x710 [ 663.442468][T16192] ? __pfx_snd_pcm_open+0x10/0x10 [ 663.442487][T16192] ? __pfx_default_wake_function+0x10/0x10 [ 663.442512][T16192] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 663.442529][T16192] snd_pcm_playback_open+0x86/0xe0 [ 663.442547][T16192] snd_open+0x201/0x450 [ 663.442569][T16192] ? __pfx_snd_open+0x10/0x10 [ 663.442589][T16192] chrdev_open+0x234/0x6a0 [ 663.442607][T16192] ? __pfx_apparmor_file_open+0x10/0x10 [ 663.442623][T16192] ? __pfx_chrdev_open+0x10/0x10 [ 663.442642][T16192] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 663.442666][T16192] do_dentry_open+0x6d8/0x1660 [ 663.442684][T16192] ? __pfx_chrdev_open+0x10/0x10 [ 663.442708][T16192] vfs_open+0x82/0x3f0 [ 663.442732][T16192] path_openat+0x208c/0x31a0 [ 663.442761][T16192] ? __pfx_path_openat+0x10/0x10 [ 663.442786][T16192] do_file_open+0x20e/0x430 [ 663.442807][T16192] ? __pfx_do_file_open+0x10/0x10 [ 663.442840][T16192] ? alloc_fd+0x476/0x790 [ 663.442861][T16192] ? do_getname+0x191/0x390 [ 663.442885][T16192] do_sys_openat2+0x10d/0x1e0 [ 663.442907][T16192] ? __pfx_do_sys_openat2+0x10/0x10 [ 663.442930][T16192] ? __fget_files+0x21f/0x3d0 [ 663.442968][T16192] __x64_sys_openat+0x12d/0x210 [ 663.442991][T16192] ? __pfx___x64_sys_openat+0x10/0x10 [ 663.443017][T16192] ? rcu_is_watching+0x12/0xc0 [ 663.443038][T16192] do_syscall_64+0x10b/0xf80 [ 663.443061][T16192] ? clear_bhb_loop+0x40/0x90 [ 663.443080][T16192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.443096][T16192] RIP: 0033:0x7ff3db79ce59 [ 663.443111][T16192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.443126][T16192] RSP: 002b:00007ff3dc6fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 663.443141][T16192] RAX: ffffffffffffffda RBX: 00007ff3dba16180 RCX: 00007ff3db79ce59 [ 663.443152][T16192] RDX: 0000000000002100 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 663.443162][T16192] RBP: 00007ff3db832d6f R08: 0000000000000000 R09: 0000000000000000 [ 663.443172][T16192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.443181][T16192] R13: 00007ff3dba16218 R14: 00007ff3dba16180 R15: 00007fffd6751ca8 [ 663.443202][T16192] [ 663.918025][T16198] ubi0: attaching mtd0 [ 663.957708][T16198] ubi0: scanning is finished [ 663.962358][T16198] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 664.065085][T16205] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 664.143058][T16198] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 664.284927][T16212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1848'. [ 664.611440][T16215] FAULT_INJECTION: forcing a failure. [ 664.611440][T16215] name failslab, interval 1, probability 0, space 0, times 0 [ 664.780217][T16215] CPU: 0 UID: 0 PID: 16215 Comm: syz.2.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.780245][T16215] Tainted: [L]=SOFTLOCKUP [ 664.780251][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 664.780261][T16215] Call Trace: [ 664.780266][T16215] [ 664.780273][T16215] dump_stack_lvl+0x100/0x190 [ 664.780295][T16215] should_fail_ex.cold+0x5/0xa [ 664.780316][T16215] should_failslab+0xc2/0x120 [ 664.780334][T16215] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 664.780359][T16215] ? __alloc_skb+0x140/0x710 [ 664.780379][T16215] __alloc_skb+0x140/0x710 [ 664.780394][T16215] ? __alloc_skb+0x5b7/0x710 [ 664.780410][T16215] ? __pfx___alloc_skb+0x10/0x10 [ 664.780426][T16215] ? __lock_acquire+0x4a5/0x2630 [ 664.780445][T16215] hwsim_mcast_del_radio+0x82/0x230 [ 664.780468][T16215] ? __pfx_hwsim_mcast_del_radio+0x10/0x10 [ 664.780492][T16215] ? __local_bh_enable_ip+0x9e/0x120 [ 664.780515][T16215] mac80211_hwsim_netlink_notify+0x826/0x16c0 [ 664.780540][T16215] ? __pfx_mac80211_hwsim_netlink_notify+0x10/0x10 [ 664.780564][T16215] notifier_call_chain+0x99/0x400 [ 664.780591][T16215] blocking_notifier_call_chain+0x69/0xa0 [ 664.780616][T16215] netlink_release+0x167a/0x2030 [ 664.780642][T16215] ? netlink_release+0x1e0/0x2030 [ 664.780664][T16215] ? __pfx_netlink_release+0x10/0x10 [ 664.780688][T16215] ? __pfx_locks_remove_file+0x10/0x10 [ 664.780711][T16215] __sock_release+0xb3/0x260 [ 664.780745][T16215] ? __pfx_sock_close+0x10/0x10 [ 664.780765][T16215] sock_close+0x1c/0x30 [ 664.780787][T16215] __fput+0x3ff/0xb50 [ 664.780811][T16215] ? _raw_spin_unlock_irq+0x23/0x50 [ 664.780838][T16215] task_work_run+0x150/0x240 [ 664.780855][T16215] ? __pfx_task_work_run+0x10/0x10 [ 664.780872][T16215] ? rcu_is_watching+0x12/0xc0 [ 664.780894][T16215] exit_to_user_mode_loop+0x107/0x4f0 [ 664.780909][T16215] ? rcu_is_watching+0x12/0xc0 [ 664.780929][T16215] do_syscall_64+0x6f2/0xf80 [ 664.780951][T16215] ? clear_bhb_loop+0x40/0x90 [ 664.780969][T16215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.780984][T16215] RIP: 0033:0x7fd8c359ce59 [ 664.780998][T16215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.781013][T16215] RSP: 002b:00007fd8c4495028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 664.781029][T16215] RAX: 0000000000000000 RBX: 00007fd8c3816180 RCX: 00007fd8c359ce59 [ 664.781039][T16215] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 664.781049][T16215] RBP: 00007fd8c3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 664.781058][T16215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.781068][T16215] R13: 00007fd8c3816218 R14: 00007fd8c3816180 R15: 00007ffe9ddc5df8 [ 664.781088][T16215] [ 665.344417][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1851'. [ 666.800432][T16249] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input15 [ 667.473146][T16275] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1858'. [ 667.586992][T16276] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 667.761544][T16276] File: /dev/nullb0 PID: 16276 Comm: syz.0.1858 [ 667.979247][T16294] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1863'. [ 668.837175][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1865'. [ 668.981314][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1866'. [ 669.041523][T16306] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.098363][T16306] bridge_slave_0 (unregistering): left allmulticast mode [ 669.137370][T16306] bridge_slave_0 (unregistering): left promiscuous mode [ 669.177810][T16306] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.058343][T16328] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 670.514275][T16337] random: crng reseeded on system resumption [ 670.691177][T16337] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 670.750735][T16337] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 671.470573][T16357] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1878'. [ 671.547773][T16357] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.610106][T16357] bridge_slave_0 (unregistering): left allmulticast mode [ 671.634936][T16357] bridge_slave_0 (unregistering): left promiscuous mode [ 671.661203][T16357] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.913782][T16341] Process accounting resumed [ 672.789986][T16397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1885'. [ 673.090251][T16404] FAULT_INJECTION: forcing a failure. [ 673.090251][T16404] name failslab, interval 1, probability 0, space 0, times 0 [ 673.282308][T16404] CPU: 0 UID: 0 PID: 16404 Comm: syz.2.1885 Tainted: G L syzkaller #0 PREEMPT(full) [ 673.282336][T16404] Tainted: [L]=SOFTLOCKUP [ 673.282342][T16404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 673.282351][T16404] Call Trace: [ 673.282357][T16404] [ 673.282363][T16404] dump_stack_lvl+0x100/0x190 [ 673.282384][T16404] should_fail_ex.cold+0x5/0xa [ 673.282404][T16404] ? tomoyo_encode2+0xfb/0x3c0 [ 673.282423][T16404] should_failslab+0xc2/0x120 [ 673.282441][T16404] __kmalloc_noprof+0xe0/0x850 [ 673.282455][T16404] ? rcu_is_watching+0x12/0xc0 [ 673.282477][T16404] tomoyo_encode2+0xfb/0x3c0 [ 673.282498][T16404] tomoyo_encode+0x29/0x50 [ 673.282516][T16404] tomoyo_realpath_from_path+0x18c/0x690 [ 673.282540][T16404] tomoyo_check_open_permission+0x2af/0x3c0 [ 673.282558][T16404] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 673.282582][T16404] ? hook_file_open+0x24e/0x7a0 [ 673.282613][T16404] ? path_get+0x61/0x80 [ 673.282635][T16404] tomoyo_file_open+0x6b/0x90 [ 673.282658][T16404] security_file_open+0xb5/0x1e0 [ 673.282676][T16404] do_dentry_open+0x5aa/0x1660 [ 673.282696][T16404] ? security_inode_permission+0xbf/0x250 [ 673.282716][T16404] vfs_open+0x82/0x3f0 [ 673.282740][T16404] path_openat+0x208c/0x31a0 [ 673.282765][T16404] ? __pfx_path_openat+0x10/0x10 [ 673.282791][T16404] do_file_open+0x20e/0x430 [ 673.282811][T16404] ? __pfx_do_file_open+0x10/0x10 [ 673.282843][T16404] ? alloc_fd+0x476/0x790 [ 673.282863][T16404] ? do_getname+0x191/0x390 [ 673.282886][T16404] do_sys_openat2+0x10d/0x1e0 [ 673.282908][T16404] ? __pfx_do_sys_openat2+0x10/0x10 [ 673.282931][T16404] ? rcu_is_watching+0x12/0xc0 [ 673.282953][T16404] __x64_sys_openat+0x12d/0x210 [ 673.282976][T16404] ? __pfx___x64_sys_openat+0x10/0x10 [ 673.283002][T16404] ? rcu_is_watching+0x12/0xc0 [ 673.283022][T16404] do_syscall_64+0x10b/0xf80 [ 673.283046][T16404] ? clear_bhb_loop+0x40/0x90 [ 673.283064][T16404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.283079][T16404] RIP: 0033:0x7fd8c359ce59 [ 673.283092][T16404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 673.283107][T16404] RSP: 002b:00007fd8c4495028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 673.283122][T16404] RAX: ffffffffffffffda RBX: 00007fd8c3816180 RCX: 00007fd8c359ce59 [ 673.283132][T16404] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 673.283141][T16404] RBP: 00007fd8c3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 673.283150][T16404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 673.283159][T16404] R13: 00007fd8c3816218 R14: 00007fd8c3816180 R15: 00007ffe9ddc5df8 [ 673.283178][T16404] [ 673.283193][T16404] ERROR: Out of memory at tomoyo_realpath_from_path. [ 673.747207][T16413] random: crng reseeded on system resumption [ 675.399014][T16444] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1898'. [ 675.458470][T16446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1890'. [ 675.642250][T16446] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.657041][T16449] FAULT_INJECTION: forcing a failure. [ 675.657041][T16449] name failslab, interval 1, probability 0, space 0, times 0 [ 675.722250][T16446] bridge_slave_0 (unregistering): left allmulticast mode [ 675.766119][T16446] bridge_slave_0 (unregistering): left promiscuous mode [ 675.773642][T16449] CPU: 0 UID: 0 PID: 16449 Comm: syz.1.1898 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.773667][T16449] Tainted: [L]=SOFTLOCKUP [ 675.773673][T16449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.773683][T16449] Call Trace: [ 675.773689][T16449] [ 675.773694][T16449] dump_stack_lvl+0x100/0x190 [ 675.773715][T16449] should_fail_ex.cold+0x5/0xa [ 675.773735][T16449] should_failslab+0xc2/0x120 [ 675.773754][T16449] __kmalloc_cache_noprof+0x7a/0x6f0 [ 675.773776][T16449] ? crtc_crc_open+0x3ba/0x7e0 [ 675.773802][T16449] crtc_crc_open+0x3ba/0x7e0 [ 675.773824][T16449] ? __debugfs_file_get+0x1fc/0x860 [ 675.773843][T16449] ? __pfx_crtc_crc_open+0x10/0x10 [ 675.773865][T16449] ? __pfx_apparmor_file_open+0x10/0x10 [ 675.773881][T16449] ? path_get+0x61/0x80 [ 675.773902][T16449] ? __pfx_crtc_crc_open+0x10/0x10 [ 675.773923][T16449] full_proxy_open_regular+0x1b6/0x370 [ 675.773945][T16449] do_dentry_open+0x6d8/0x1660 [ 675.773963][T16449] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 675.773988][T16449] vfs_open+0x82/0x3f0 [ 675.774021][T16449] path_openat+0x208c/0x31a0 [ 675.774047][T16449] ? __pfx_path_openat+0x10/0x10 [ 675.774073][T16449] do_file_open+0x20e/0x430 [ 675.774093][T16449] ? __pfx_do_file_open+0x10/0x10 [ 675.774124][T16449] ? alloc_fd+0x476/0x790 [ 675.774144][T16449] ? do_getname+0x191/0x390 [ 675.774167][T16449] do_sys_openat2+0x10d/0x1e0 [ 675.774189][T16449] ? __pfx_do_sys_openat2+0x10/0x10 [ 675.774212][T16449] ? do_raw_spin_lock+0x128/0x260 [ 675.774234][T16449] __x64_sys_openat+0x12d/0x210 [ 675.774256][T16449] ? __pfx___x64_sys_openat+0x10/0x10 [ 675.774282][T16449] ? rcu_is_watching+0x12/0xc0 [ 675.774302][T16449] do_syscall_64+0x10b/0xf80 [ 675.774324][T16449] ? clear_bhb_loop+0x40/0x90 [ 675.774343][T16449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.774360][T16449] RIP: 0033:0x7f7f9df9ce59 [ 675.774374][T16449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.774389][T16449] RSP: 002b:00007f7f9ee75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 675.774404][T16449] RAX: ffffffffffffffda RBX: 00007f7f9e216180 RCX: 00007f7f9df9ce59 [ 675.774415][T16449] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 675.774425][T16449] RBP: 00007f7f9e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 675.774436][T16449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.774445][T16449] R13: 00007f7f9e216218 R14: 00007f7f9e216180 R15: 00007ffd523c7a88 [ 675.774465][T16449] [ 676.310365][T16446] bridge0: port 1(bridge_slave_0) entered disabled state [ 678.930949][T16489] Process accounting resumed [ 679.175381][T16503] random: crng reseeded on system resumption [ 679.407043][T16510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1902'. [ 679.923596][T16516] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1904'. [ 679.982608][T16516] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1904'. [ 680.014239][T16518] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1903'. [ 680.172152][T16521] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 680.434376][T16527] FAULT_INJECTION: forcing a failure. [ 680.434376][T16527] name failslab, interval 1, probability 0, space 0, times 0 [ 680.560353][T16527] CPU: 0 UID: 0 PID: 16527 Comm: syz.0.1903 Tainted: G L syzkaller #0 PREEMPT(full) [ 680.560381][T16527] Tainted: [L]=SOFTLOCKUP [ 680.560387][T16527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 680.560397][T16527] Call Trace: [ 680.560402][T16527] [ 680.560409][T16527] dump_stack_lvl+0x100/0x190 [ 680.560429][T16527] should_fail_ex.cold+0x5/0xa [ 680.560450][T16527] should_failslab+0xc2/0x120 [ 680.560469][T16527] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 680.560492][T16527] ? __d_alloc+0x34/0xa40 [ 680.560516][T16527] __d_alloc+0x34/0xa40 [ 680.560538][T16527] d_alloc+0x4a/0x1e0 [ 680.560558][T16527] lookup_one_qstr_excl+0x171/0x250 [ 680.560583][T16527] start_dirop+0x59/0xb0 [ 680.560600][T16527] simple_start_creating+0xf9/0x110 [ 680.560618][T16527] ? __pfx_simple_start_creating+0x10/0x10 [ 680.560637][T16527] ? mntput+0x70/0xa0 [ 680.560652][T16527] ? simple_pin_fs+0xa3/0x190 [ 680.560669][T16527] debugfs_start_creating.part.0+0x82/0x170 [ 680.560701][T16527] __debugfs_create_file+0xb3/0x4f0 [ 680.560728][T16527] debugfs_create_file_full+0x41/0x60 [ 680.560754][T16527] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 680.560775][T16527] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 680.560810][T16527] ? lockdep_init_map_type+0x5c/0x250 [ 680.560829][T16527] preinit_net.part.0+0x43b/0x920 [ 680.560850][T16527] copy_net_ns+0x339/0x7c0 [ 680.560872][T16527] create_new_namespaces+0x3ea/0xac0 [ 680.560897][T16527] unshare_nsproxy_namespaces+0xf2/0x220 [ 680.560919][T16527] ksys_unshare+0x438/0xab0 [ 680.560942][T16527] ? __pfx_ksys_unshare+0x10/0x10 [ 680.560965][T16527] ? xfd_validate_state+0x129/0x190 [ 680.560980][T16527] ? ksys_write+0x1ac/0x250 [ 680.561003][T16527] __x64_sys_unshare+0x31/0x40 [ 680.561025][T16527] do_syscall_64+0x10b/0xf80 [ 680.561048][T16527] ? clear_bhb_loop+0x40/0x90 [ 680.561067][T16527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 680.561082][T16527] RIP: 0033:0x7f0a50b9ce59 [ 680.561096][T16527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 680.561111][T16527] RSP: 002b:00007f0a4edf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 680.561126][T16527] RAX: ffffffffffffffda RBX: 00007f0a50e16180 RCX: 00007f0a50b9ce59 [ 680.561136][T16527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 680.561145][T16527] RBP: 00007f0a50c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 680.561155][T16527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 680.561166][T16527] R13: 00007f0a50e16218 R14: 00007f0a50e16180 R15: 00007ffe8f0c5178 [ 680.561186][T16527] [ 681.439987][T16537] random: crng reseeded on system resumption [ 681.991677][T16542] netlink: 'syz.1.1918': attribute type 2 has an invalid length. [ 682.011720][T16542] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'. [ 682.022178][T16543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1911'. [ 682.584044][T16560] netlink: 'syz.1.1913': attribute type 2 has an invalid length. [ 682.668966][T16560] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1913'. [ 682.694878][T16561] snd_aloop snd_aloop.0: control 53842:9:2:yª:1023 is already present [ 683.582516][T16576] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1919'. [ 684.026080][T16594] random: crng reseeded on system resumption [ 685.181357][T16609] cougar: G6 mapped to space [ 685.353231][T16614] FAULT_INJECTION: forcing a failure. [ 685.353231][T16614] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 685.445958][T16614] CPU: 0 UID: 0 PID: 16614 Comm: syz.2.1928 Tainted: G L syzkaller #0 PREEMPT(full) [ 685.445985][T16614] Tainted: [L]=SOFTLOCKUP [ 685.445991][T16614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 685.446000][T16614] Call Trace: [ 685.446006][T16614] [ 685.446012][T16614] dump_stack_lvl+0x100/0x190 [ 685.446033][T16614] should_fail_ex.cold+0x5/0xa [ 685.446053][T16614] _copy_from_iter+0x1f4/0x1690 [ 685.446072][T16614] ? __asan_memset+0x23/0x50 [ 685.446096][T16614] ? __pfx__copy_from_iter+0x10/0x10 [ 685.446111][T16614] ? __pfx___alloc_skb+0x10/0x10 [ 685.446138][T16614] netlink_sendmsg+0x808/0xda0 [ 685.446165][T16614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.446186][T16614] ? __import_iovec+0x1d2/0x640 [ 685.446203][T16614] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 685.446230][T16614] ____sys_sendmsg+0x9e1/0xb70 [ 685.446251][T16614] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.446280][T16614] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.446310][T16614] ___sys_sendmsg+0x190/0x1e0 [ 685.446334][T16614] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.446378][T16614] __sys_sendmsg+0x170/0x220 [ 685.446396][T16614] ? __pfx___sys_sendmsg+0x10/0x10 [ 685.446422][T16614] ? rcu_is_watching+0x12/0xc0 [ 685.446443][T16614] do_syscall_64+0x10b/0xf80 [ 685.446466][T16614] ? clear_bhb_loop+0x40/0x90 [ 685.446484][T16614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.446499][T16614] RIP: 0033:0x7fd8c359ce59 [ 685.446512][T16614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.446526][T16614] RSP: 002b:00007fd8c44d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.446541][T16614] RAX: ffffffffffffffda RBX: 00007fd8c3815fa0 RCX: 00007fd8c359ce59 [ 685.446552][T16614] RDX: 0000000020008000 RSI: 0000200000000000 RDI: 0000000000000003 [ 685.446561][T16614] RBP: 00007fd8c44d7090 R08: 0000000000000000 R09: 0000000000000000 [ 685.446570][T16614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.446578][T16614] R13: 00007fd8c3816038 R14: 00007fd8c3815fa0 R15: 00007ffe9ddc5df8 [ 685.446597][T16614] [ 685.993671][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.002360][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.356269][T16622] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1931'. [ 686.417168][T16622] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 686.791522][T16627] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1932'. [ 686.907911][T16627] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1932'. [ 687.032960][T16630] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 687.451478][T16642] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 687.846696][T16652] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1935'. [ 688.352315][T16664] FAULT_INJECTION: forcing a failure. [ 688.352315][T16664] name failslab, interval 1, probability 0, space 0, times 0 [ 688.469343][T16664] CPU: 0 UID: 0 PID: 16664 Comm: syz.1.1935 Tainted: G L syzkaller #0 PREEMPT(full) [ 688.469372][T16664] Tainted: [L]=SOFTLOCKUP [ 688.469378][T16664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 688.469388][T16664] Call Trace: [ 688.469393][T16664] [ 688.469401][T16664] dump_stack_lvl+0x100/0x190 [ 688.469423][T16664] should_fail_ex.cold+0x5/0xa [ 688.469444][T16664] should_failslab+0xc2/0x120 [ 688.469462][T16664] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 688.469490][T16664] ? __alloc_skb+0x140/0x710 [ 688.469510][T16664] __alloc_skb+0x140/0x710 [ 688.469525][T16664] ? __alloc_skb+0x5b7/0x710 [ 688.469541][T16664] ? __pfx___alloc_skb+0x10/0x10 [ 688.469559][T16664] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 688.469577][T16664] nl80211_notify_iface+0x32/0x1c0 [ 688.469599][T16664] _cfg80211_unregister_wdev+0xcb/0x800 [ 688.469623][T16664] ieee80211_remove_interfaces+0x34e/0x6f0 [ 688.469647][T16664] ? __pfx_ieee80211_remove_interfaces+0x10/0x10 [ 688.469674][T16664] ieee80211_unregister_hw+0x55/0x360 [ 688.469699][T16664] mac80211_hwsim_netlink_notify+0x868/0x16c0 [ 688.469725][T16664] ? __pfx_mac80211_hwsim_netlink_notify+0x10/0x10 [ 688.469749][T16664] notifier_call_chain+0x99/0x400 [ 688.469777][T16664] blocking_notifier_call_chain+0x69/0xa0 [ 688.469802][T16664] netlink_release+0x167a/0x2030 [ 688.469828][T16664] ? netlink_release+0x1e0/0x2030 [ 688.469851][T16664] ? __pfx_netlink_release+0x10/0x10 [ 688.469874][T16664] ? __pfx_locks_remove_file+0x10/0x10 [ 688.469898][T16664] __sock_release+0xb3/0x260 [ 688.469917][T16664] ? __pfx_sock_close+0x10/0x10 [ 688.469934][T16664] sock_close+0x1c/0x30 [ 688.469951][T16664] __fput+0x3ff/0xb50 [ 688.469973][T16664] ? _raw_spin_unlock_irq+0x23/0x50 [ 688.469996][T16664] task_work_run+0x150/0x240 [ 688.470012][T16664] ? __pfx_task_work_run+0x10/0x10 [ 688.470035][T16664] ? rcu_is_watching+0x12/0xc0 [ 688.470057][T16664] exit_to_user_mode_loop+0x107/0x4f0 [ 688.470073][T16664] ? rcu_is_watching+0x12/0xc0 [ 688.470094][T16664] do_syscall_64+0x6f2/0xf80 [ 688.470117][T16664] ? clear_bhb_loop+0x40/0x90 [ 688.470135][T16664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 688.470151][T16664] RIP: 0033:0x7f7f9df9ce59 [ 688.470166][T16664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 688.470181][T16664] RSP: 002b:00007f7f9ee75028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 688.470197][T16664] RAX: 0000000000000000 RBX: 00007f7f9e216180 RCX: 00007f7f9df9ce59 [ 688.470207][T16664] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 688.470216][T16664] RBP: 00007f7f9e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 688.470225][T16664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 688.470234][T16664] R13: 00007f7f9e216218 R14: 00007f7f9e216180 R15: 00007ffd523c7a88 [ 688.470256][T16664] [ 689.155221][T16657] Process accounting paused [ 689.949446][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1943'. [ 690.268605][T16684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1944'. [ 690.632608][T16689] FAULT_INJECTION: forcing a failure. [ 690.632608][T16689] name failslab, interval 1, probability 0, space 0, times 0 [ 690.724540][T16689] CPU: 0 UID: 0 PID: 16689 Comm: syz.3.1944 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.724570][T16689] Tainted: [L]=SOFTLOCKUP [ 690.724576][T16689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 690.724586][T16689] Call Trace: [ 690.724592][T16689] [ 690.724599][T16689] dump_stack_lvl+0x100/0x190 [ 690.724621][T16689] should_fail_ex.cold+0x5/0xa [ 690.724641][T16689] ? tomoyo_realpath_from_path+0xb6/0x690 [ 690.724662][T16689] should_failslab+0xc2/0x120 [ 690.724680][T16689] __kmalloc_noprof+0xe0/0x850 [ 690.724694][T16689] ? kfree+0x1dd/0x6c0 [ 690.724718][T16689] tomoyo_realpath_from_path+0xb6/0x690 [ 690.724742][T16689] tomoyo_check_open_permission+0x2af/0x3c0 [ 690.724760][T16689] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 690.724784][T16689] ? hook_file_open+0x24e/0x7a0 [ 690.724814][T16689] ? path_get+0x61/0x80 [ 690.724836][T16689] tomoyo_file_open+0x6b/0x90 [ 690.724858][T16689] security_file_open+0xb5/0x1e0 [ 690.724877][T16689] do_dentry_open+0x5aa/0x1660 [ 690.724897][T16689] ? security_inode_permission+0xbf/0x250 [ 690.724917][T16689] vfs_open+0x82/0x3f0 [ 690.724941][T16689] path_openat+0x208c/0x31a0 [ 690.724973][T16689] ? __pfx_path_openat+0x10/0x10 [ 690.724999][T16689] do_file_open+0x20e/0x430 [ 690.725021][T16689] ? __pfx_do_file_open+0x10/0x10 [ 690.725054][T16689] ? alloc_fd+0x476/0x790 [ 690.725075][T16689] ? do_getname+0x191/0x390 [ 690.725097][T16689] do_sys_openat2+0x10d/0x1e0 [ 690.725119][T16689] ? __pfx_do_sys_openat2+0x10/0x10 [ 690.725149][T16689] __x64_sys_openat+0x12d/0x210 [ 690.725172][T16689] ? __pfx___x64_sys_openat+0x10/0x10 [ 690.725194][T16689] ? ksys_write+0x1ac/0x250 [ 690.725213][T16689] ? rcu_is_watching+0x12/0xc0 [ 690.725234][T16689] do_syscall_64+0x10b/0xf80 [ 690.725256][T16689] ? clear_bhb_loop+0x40/0x90 [ 690.725275][T16689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.725291][T16689] RIP: 0033:0x7ff3db79ce59 [ 690.725305][T16689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.725320][T16689] RSP: 002b:00007ff3dc6fb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 690.725335][T16689] RAX: ffffffffffffffda RBX: 00007ff3dba16180 RCX: 00007ff3db79ce59 [ 690.725346][T16689] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 690.725357][T16689] RBP: 00007ff3db832d6f R08: 0000000000000000 R09: 0000000000000000 [ 690.725367][T16689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.725376][T16689] R13: 00007ff3dba16218 R14: 00007ff3dba16180 R15: 00007fffd6751ca8 [ 690.725397][T16689] [ 690.725404][T16689] ERROR: Out of memory at tomoyo_realpath_from_path. [ 691.343346][T16697] random: crng reseeded on system resumption [ 691.909070][T16705] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 693.548073][T16727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1954'. [ 693.724854][T16702] Process accounting paused [ 694.212096][T16740] netlink: 'syz.3.1956': attribute type 2 has an invalid length. [ 694.293666][T16740] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1956'. [ 695.805438][T16758] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 697.559851][T16780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1968'. [ 698.578976][T16783] FAULT_INJECTION: forcing a failure. [ 698.578976][T16783] name failslab, interval 1, probability 0, space 0, times 0 [ 698.618139][T16795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1967'. [ 698.664604][T16798] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1967'. [ 698.879934][T16783] CPU: 0 UID: 0 PID: 16783 Comm: syz.2.1968 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.879962][T16783] Tainted: [L]=SOFTLOCKUP [ 698.879968][T16783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 698.879977][T16783] Call Trace: [ 698.879984][T16783] [ 698.879990][T16783] dump_stack_lvl+0x100/0x190 [ 698.880012][T16783] should_fail_ex.cold+0x5/0xa [ 698.880033][T16783] should_failslab+0xc2/0x120 [ 698.880052][T16783] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 698.880076][T16783] ? __alloc_skb+0x140/0x710 [ 698.880096][T16783] __alloc_skb+0x140/0x710 [ 698.880111][T16783] ? __alloc_skb+0x5b7/0x710 [ 698.880127][T16783] ? __pfx___alloc_skb+0x10/0x10 [ 698.880143][T16783] ? __lock_acquire+0x4a5/0x2630 [ 698.880162][T16783] hwsim_mcast_del_radio+0x82/0x230 [ 698.880186][T16783] ? __pfx_hwsim_mcast_del_radio+0x10/0x10 [ 698.880210][T16783] ? __local_bh_enable_ip+0x9e/0x120 [ 698.880231][T16783] mac80211_hwsim_netlink_notify+0x826/0x16c0 [ 698.880263][T16783] ? __pfx_mac80211_hwsim_netlink_notify+0x10/0x10 [ 698.880289][T16783] notifier_call_chain+0x99/0x400 [ 698.880317][T16783] blocking_notifier_call_chain+0x69/0xa0 [ 698.880342][T16783] netlink_release+0x167a/0x2030 [ 698.880368][T16783] ? netlink_release+0x1e0/0x2030 [ 698.880390][T16783] ? __pfx_netlink_release+0x10/0x10 [ 698.880414][T16783] ? __pfx_locks_remove_file+0x10/0x10 [ 698.880437][T16783] __sock_release+0xb3/0x260 [ 698.880455][T16783] ? __pfx_sock_close+0x10/0x10 [ 698.880473][T16783] sock_close+0x1c/0x30 [ 698.880490][T16783] __fput+0x3ff/0xb50 [ 698.880512][T16783] ? _raw_spin_unlock_irq+0x23/0x50 [ 698.880535][T16783] task_work_run+0x150/0x240 [ 698.880551][T16783] ? __pfx_task_work_run+0x10/0x10 [ 698.880568][T16783] ? rcu_is_watching+0x12/0xc0 [ 698.880589][T16783] exit_to_user_mode_loop+0x107/0x4f0 [ 698.880605][T16783] ? rcu_is_watching+0x12/0xc0 [ 698.880625][T16783] do_syscall_64+0x6f2/0xf80 [ 698.880647][T16783] ? clear_bhb_loop+0x40/0x90 [ 698.880665][T16783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.880680][T16783] RIP: 0033:0x7fd8c359ce59 [ 698.880695][T16783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.880709][T16783] RSP: 002b:00007fd8c4495028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 698.880724][T16783] RAX: 0000000000000000 RBX: 00007fd8c3816180 RCX: 00007fd8c359ce59 [ 698.880734][T16783] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 698.880743][T16783] RBP: 00007fd8c3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 698.880752][T16783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.880761][T16783] R13: 00007fd8c3816218 R14: 00007fd8c3816180 R15: 00007ffe9ddc5df8 [ 698.880782][T16783] [ 699.612185][T16810] random: crng reseeded on system resumption [ 700.237083][T16827] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 700.302895][T16824] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 701.640536][T16851] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'. [ 701.718982][T16854] random: crng reseeded on system resumption [ 702.164110][T16844] Process accounting paused [ 703.422206][T16870] random: crng reseeded on system resumption [ 703.562686][T16870] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 703.651615][T16870] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 703.932741][T16880] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1989'. [ 704.399511][T16890] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1991'. [ 704.629977][T16893] can: request_module (can-proto-4) failed. [ 705.251238][T16901] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1993'. [ 705.327927][T16901] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1993'. [ 705.632553][T16903] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1994'. [ 705.763772][T16910] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 705.937507][T16903] syz_tun: refused to change device tx_queue_len [ 706.553576][T16920] __vm_enough_memory: pid: 16920, comm: syz.3.1997, bytes: 4398046457856 not enough memory for the allocation [ 706.838808][T16927] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 706.930640][T16929] netlink: 'syz.3.2000': attribute type 2 has an invalid length. [ 706.981647][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2000'. [ 707.425332][T16944] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2003'. [ 707.862281][T16952] hub 1-0:1.0: USB hub found [ 707.933809][T16952] hub 1-0:1.0: 1 port detected [ 709.921480][T16991] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'. [ 710.456334][T16998] FAULT_INJECTION: forcing a failure. [ 710.456334][T16998] name failslab, interval 1, probability 0, space 0, times 0 [ 710.738646][T16998] CPU: 0 UID: 0 PID: 16998 Comm: syz.1.2009 Tainted: G L syzkaller #0 PREEMPT(full) [ 710.738674][T16998] Tainted: [L]=SOFTLOCKUP [ 710.738680][T16998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 710.738691][T16998] Call Trace: [ 710.738696][T16998] [ 710.738703][T16998] dump_stack_lvl+0x100/0x190 [ 710.738725][T16998] should_fail_ex.cold+0x5/0xa [ 710.738746][T16998] should_failslab+0xc2/0x120 [ 710.738763][T16998] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 710.738786][T16998] ? alloc_empty_file+0x5b/0x1c0 [ 710.738808][T16998] ? __pfx_stack_trace_save+0x10/0x10 [ 710.738831][T16998] alloc_empty_file+0x5b/0x1c0 [ 710.738853][T16998] path_openat+0xe8/0x31a0 [ 710.738871][T16998] ? kasan_save_stack+0x3f/0x50 [ 710.738885][T16998] ? kasan_save_stack+0x30/0x50 [ 710.738898][T16998] ? kasan_save_track+0x14/0x30 [ 710.738912][T16998] ? __kasan_slab_alloc+0x89/0x90 [ 710.738926][T16998] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 710.738948][T16998] ? do_getname+0x35/0x390 [ 710.738968][T16998] ? do_sys_openat2+0xc5/0x1e0 [ 710.738990][T16998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.739008][T16998] ? __pfx_path_openat+0x10/0x10 [ 710.739033][T16998] do_file_open+0x20e/0x430 [ 710.739053][T16998] ? __pfx_do_file_open+0x10/0x10 [ 710.739084][T16998] ? alloc_fd+0x476/0x790 [ 710.739103][T16998] ? do_getname+0x191/0x390 [ 710.739126][T16998] do_sys_openat2+0x10d/0x1e0 [ 710.739148][T16998] ? __pfx_do_sys_openat2+0x10/0x10 [ 710.739171][T16998] ? find_held_lock+0x2b/0x80 [ 710.739195][T16998] __x64_sys_openat+0x12d/0x210 [ 710.739217][T16998] ? __pfx___x64_sys_openat+0x10/0x10 [ 710.739243][T16998] ? rcu_is_watching+0x12/0xc0 [ 710.739263][T16998] do_syscall_64+0x10b/0xf80 [ 710.739285][T16998] ? clear_bhb_loop+0x40/0x90 [ 710.739303][T16998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 710.739318][T16998] RIP: 0033:0x7f7f9df9ce59 [ 710.739333][T16998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 710.739348][T16998] RSP: 002b:00007f7f9ee75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 710.739364][T16998] RAX: ffffffffffffffda RBX: 00007f7f9e216180 RCX: 00007f7f9df9ce59 [ 710.739375][T16998] RDX: 0000000000000200 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 710.739385][T16998] RBP: 00007f7f9e032d6f R08: 0000000000000000 R09: 0000000000000000 [ 710.739402][T16998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 710.739411][T16998] R13: 00007f7f9e216218 R14: 00007f7f9e216180 R15: 00007ffd523c7a88 [ 710.739432][T16998] [ 711.572167][T17003] FAULT_INJECTION: forcing a failure. [ 711.572167][T17003] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 711.653916][T17003] CPU: 0 UID: 0 PID: 17003 Comm: syz.3.2011 Tainted: G L syzkaller #0 PREEMPT(full) [ 711.653945][T17003] Tainted: [L]=SOFTLOCKUP [ 711.653951][T17003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 711.653961][T17003] Call Trace: [ 711.653966][T17003] [ 711.653973][T17003] dump_stack_lvl+0x100/0x190 [ 711.653996][T17003] should_fail_ex.cold+0x5/0xa [ 711.654014][T17003] ? prepare_alloc_pages+0x16d/0x5f0 [ 711.654035][T17003] should_fail_alloc_page+0xeb/0x140 [ 711.654055][T17003] prepare_alloc_pages+0x1f0/0x5f0 [ 711.654074][T17003] ? arch_stack_walk+0xa6/0xf0 [ 711.654094][T17003] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 711.654122][T17003] ? stack_trace_save+0x8e/0xc0 [ 711.654143][T17003] ? __pfx_stack_trace_save+0x10/0x10 [ 711.654161][T17003] ? put_dec+0x2e/0xc0 [ 711.654178][T17003] ? stack_depot_save_flags+0x27/0x9d0 [ 711.654199][T17003] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 711.654222][T17003] ? kasan_save_stack+0x3f/0x50 [ 711.654236][T17003] ? kasan_save_stack+0x30/0x50 [ 711.654250][T17003] ? kasan_save_track+0x14/0x30 [ 711.654264][T17003] ? kvm_create_lapic+0xa9/0x440 [ 711.654285][T17003] ? kvm_vm_ioctl+0x756/0x4050 [ 711.654304][T17003] ? __x64_sys_ioctl+0x18e/0x210 [ 711.654318][T17003] ? do_syscall_64+0x10b/0xf80 [ 711.654339][T17003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.654384][T17003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 711.654408][T17003] ? policy_nodemask+0xed/0x4f0 [ 711.654428][T17003] alloc_pages_mpol+0x1fb/0x540 [ 711.654446][T17003] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 711.654469][T17003] alloc_pages_noprof+0x1a/0x160 [ 711.654490][T17003] get_zeroed_page_noprof+0x18/0xb0 [ 711.654509][T17003] kvm_create_lapic+0x392/0x440 [ 711.654531][T17003] kvm_arch_vcpu_create+0x286/0xac0 [ 711.654554][T17003] kvm_vm_ioctl+0x756/0x4050 [ 711.654580][T17003] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 711.654612][T17003] ? kasan_quarantine_put+0x104/0x240 [ 711.654627][T17003] ? lockdep_hardirqs_on+0x78/0x100 [ 711.654649][T17003] ? find_held_lock+0x2b/0x80 [ 711.654669][T17003] ? tomoyo_path_number_perm+0x28f/0x580 [ 711.654686][T17003] ? tomoyo_path_number_perm+0x28f/0x580 [ 711.654706][T17003] ? tomoyo_path_number_perm+0x188/0x580 [ 711.654724][T17003] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 711.654740][T17003] ? futex_wake+0x1ad/0x530 [ 711.654764][T17003] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 711.654786][T17003] ? do_vfs_ioctl+0x226/0x13e0 [ 711.654801][T17003] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 711.654821][T17003] ? find_held_lock+0x2b/0x80 [ 711.654840][T17003] ? __fget_files+0x215/0x3d0 [ 711.654856][T17003] ? hook_file_ioctl_common+0x149/0x410 [ 711.654877][T17003] ? __fget_files+0x21f/0x3d0 [ 711.654897][T17003] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 711.654917][T17003] __x64_sys_ioctl+0x18e/0x210 [ 711.654934][T17003] do_syscall_64+0x10b/0xf80 [ 711.654956][T17003] ? clear_bhb_loop+0x40/0x90 [ 711.654974][T17003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 711.654990][T17003] RIP: 0033:0x7ff3db79ce59 [ 711.655005][T17003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 711.655020][T17003] RSP: 002b:00007ff3dc73d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 711.655035][T17003] RAX: ffffffffffffffda RBX: 00007ff3dba15fa0 RCX: 00007ff3db79ce59 [ 711.655050][T17003] RDX: 0000000000000007 RSI: 000000000000ae41 RDI: 0000000000000003 [ 711.655059][T17003] RBP: 00007ff3db832d6f R08: 0000000000000000 R09: 0000000000000000 [ 711.655068][T17003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 711.655077][T17003] R13: 00007ff3dba16038 R14: 00007ff3dba15fa0 R15: 00007fffd6751ca8 [ 711.655097][T17003] [ 712.386234][T17003] malloc apic regs error for vcpu 7 [ 712.620702][ T5625] Process accounting paused [ 713.061387][T17018] random: crng reseeded on system resumption [ 713.471084][T17029] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2015'. [ 713.490099][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 713.531953][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 713.547980][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 713.738630][ T5627] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 713.780343][T17037] FAULT_INJECTION: forcing a failure. [ 713.780343][T17037] name failslab, interval 1, probability 0, space 0, times 0 [ 713.800449][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 713.980262][T17037] CPU: 0 UID: 0 PID: 17037 Comm: syz.2.2015 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.980290][T17037] Tainted: [L]=SOFTLOCKUP [ 713.980296][T17037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 713.980306][T17037] Call Trace: [ 713.980312][T17037] [ 713.980319][T17037] dump_stack_lvl+0x100/0x190 [ 713.980340][T17037] should_fail_ex.cold+0x5/0xa [ 713.980362][T17037] should_failslab+0xc2/0x120 [ 713.980380][T17037] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 713.980404][T17037] ? __d_alloc+0x34/0xa40 [ 713.980428][T17037] __d_alloc+0x34/0xa40 [ 713.980450][T17037] d_alloc+0x4a/0x1e0 [ 713.980471][T17037] lookup_one_qstr_excl+0x171/0x250 [ 713.980496][T17037] start_dirop+0x59/0xb0 [ 713.980513][T17037] simple_start_creating+0xf9/0x110 [ 713.980532][T17037] ? __pfx_simple_start_creating+0x10/0x10 [ 713.980551][T17037] ? mntput+0x70/0xa0 [ 713.980566][T17037] ? simple_pin_fs+0xa3/0x190 [ 713.980583][T17037] debugfs_start_creating.part.0+0x82/0x170 [ 713.980608][T17037] __debugfs_create_file+0xb3/0x4f0 [ 713.980633][T17037] debugfs_create_file_full+0x41/0x60 [ 713.980658][T17037] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 713.980679][T17037] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 713.980697][T17037] ? ida_alloc_range+0x70d/0x830 [ 713.980735][T17037] ? lockdep_init_map_type+0x5c/0x250 [ 713.980755][T17037] preinit_net.part.0+0x252/0x920 [ 713.980776][T17037] copy_net_ns+0x339/0x7c0 [ 713.980797][T17037] create_new_namespaces+0x3ea/0xac0 [ 713.980822][T17037] unshare_nsproxy_namespaces+0xf2/0x220 [ 713.980845][T17037] ksys_unshare+0x438/0xab0 [ 713.980867][T17037] ? __pfx_ksys_unshare+0x10/0x10 [ 713.980888][T17037] ? xfd_validate_state+0x129/0x190 [ 713.980903][T17037] ? ksys_write+0x1ac/0x250 [ 713.980926][T17037] __x64_sys_unshare+0x31/0x40 [ 713.980951][T17037] do_syscall_64+0x10b/0xf80 [ 713.980973][T17037] ? clear_bhb_loop+0x40/0x90 [ 713.980992][T17037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.981008][T17037] RIP: 0033:0x7fd8c359ce59 [ 713.981022][T17037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.981037][T17037] RSP: 002b:00007fd8c4495028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 713.981053][T17037] RAX: ffffffffffffffda RBX: 00007fd8c3816180 RCX: 00007fd8c359ce59 [ 713.981063][T17037] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 713.981073][T17037] RBP: 00007fd8c3632d6f R08: 0000000000000000 R09: 0000000000000000 [ 713.981082][T17037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.981092][T17037] R13: 00007fd8c3816218 R14: 00007fd8c3816180 R15: 00007ffe9ddc5df8 [ 713.981112][T17037] [ 715.228216][T16796] ------------[ cut here ]------------ [ 715.233731][T16796] ODEBUG: free active (active state 0) object: ffff88802df99438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 715.247321][T16796] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#0: syz.0.1967/16796 [ 715.257996][T16796] Modules linked in: [ 715.261894][T16796] CPU: 0 UID: 0 PID: 16796 Comm: syz.0.1967 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.273046][T16796] Tainted: [L]=SOFTLOCKUP [ 715.277372][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 715.287453][T16796] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 715.293259][T16796] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 92 8a e2 0b 41 56 48 8b 14 dd 40 53 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac 05 d8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 715.313578][T16796] RSP: 0018:ffffc9000768f6f8 EFLAGS: 00010246 [ 715.319779][T16796] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 715.327922][T16796] RDX: ffffffff8c1c5280 RSI: ffffffff8c1c4ea0 RDI: ffffffff90e2bca0 [ 715.335903][T16796] RBP: 0000000000000001 R08: ffff88802df99438 R09: ffffffff8bb2c700 [ 715.343895][T16796] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c4ea0 [ 715.352677][T16796] R13: ffffffff8bb2c740 R14: ffffffff8a9331e0 R15: ffffc9000768f7f8 [ 715.361339][T16796] FS: 0000000000000000(0000) GS:ffff888124374000(0000) knlGS:0000000000000000 [ 715.376207][T16796] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 715.382796][T16796] CR2: 00007fd6371187e8 CR3: 0000000091882000 CR4: 00000000003526f0 [ 715.390775][T16796] Call Trace: [ 715.394037][T16796] [ 715.396990][T16796] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 715.402474][T16796] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 715.408310][T16796] debug_check_no_obj_freed+0x4da/0x630 [ 715.413846][T16796] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 715.419929][T16796] ? __page_table_check_zero+0x333/0x410 [ 715.425549][T16796] ? __page_table_check_zero+0x333/0x410 [ 715.431214][T16796] ? __page_table_check_zero+0x338/0x410 [ 715.436859][T16796] __free_frozen_pages+0x3f5/0x1040 [ 715.442313][T16796] hci_release_dev+0x4ef/0x630 [ 715.447091][T16796] ? __pfx_hci_release_dev+0x10/0x10 [ 715.453160][T16796] ? device_release+0x97/0x270 [ 715.458398][T16796] ? rcu_is_watching+0x12/0xc0 [ 715.463213][T16796] ? device_release+0x97/0x270 [ 715.468032][T16796] bt_host_release+0x6a/0xb0 [ 715.472621][T16796] ? __pfx_bt_host_release+0x10/0x10 [ 715.477979][T16796] device_release+0xd2/0x270 [ 715.482591][T16796] kobject_put+0x1f7/0x640 [ 715.487062][T16796] put_device+0x1f/0x30 [ 715.491222][T16796] vhci_release+0x185/0x230 [ 715.495715][T16796] ? __pfx_vhci_release+0x10/0x10 [ 715.500780][T16796] __fput+0x3ff/0xb50 [ 715.504757][T16796] task_work_run+0x150/0x240 [ 715.509355][T16796] ? __pfx_task_work_run+0x10/0x10 [ 715.514466][T16796] ? free_uts_ns+0x16e/0x330 [ 715.519080][T16796] do_exit+0x951/0x2af0 [ 715.523230][T16796] ? __pfx___might_resched+0x10/0x10 [ 715.528971][T16796] ? rcu_is_watching+0x12/0xc0 [ 715.533739][T16796] ? __pfx_do_exit+0x10/0x10 [ 715.538355][T16796] ? do_raw_spin_lock+0x128/0x260 [ 715.543367][T16796] ? find_held_lock+0x2b/0x80 [ 715.548059][T16796] ? get_signal+0x7e5/0x2210 [ 715.553423][T16796] do_group_exit+0xd5/0x2a0 [ 715.558406][T16796] get_signal+0x20ff/0x2210 [ 715.562911][T16796] ? __pfx_get_signal+0x10/0x10 [ 715.567855][T16796] ? kernel_move_pages+0xcfd/0x13f0 [ 715.573049][T16796] ? do_futex+0x192/0x350 [ 715.577433][T16796] arch_do_signal_or_restart+0x91/0x7a0 [ 715.582992][T16796] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 715.589166][T16796] ? rcu_is_watching+0x12/0xc0 [ 715.593918][T16796] exit_to_user_mode_loop+0x8b/0x4f0 [ 715.599228][T16796] ? rcu_is_watching+0x12/0xc0 [ 715.603984][T16796] do_syscall_64+0x6f2/0xf80 [ 715.608627][T16796] ? clear_bhb_loop+0x40/0x90 [ 715.613303][T16796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 715.619229][T16796] RIP: 0033:0x7f0a50b9ce59 [ 715.623639][T16796] Code: Unable to access opcode bytes at 0x7f0a50b9ce2f. [ 715.630668][T16796] RSP: 002b:00007f0a5198e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 715.639135][T16796] RAX: fffffffffffffff2 RBX: 00007f0a50e16090 RCX: 00007f0a50b9ce59 [ 715.647343][T16796] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 715.656258][T16796] RBP: 00007f0a50c32d6f R08: 0000000000000000 R09: 8000400000000000 [ 715.664715][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 715.672754][T16796] R13: 00007f0a50e16128 R14: 00007f0a50e16090 R15: 00007ffe8f0c5178 [ 715.680899][T16796] [ 715.683926][T16796] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 715.691191][T16796] CPU: 0 UID: 0 PID: 16796 Comm: syz.0.1967 Tainted: G L syzkaller #0 PREEMPT(full) [ 715.702111][T16796] Tainted: [L]=SOFTLOCKUP [ 715.706417][T16796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 715.716454][T16796] Call Trace: [ 715.719718][T16796] [ 715.722634][T16796] dump_stack_lvl+0x100/0x190 [ 715.727299][T16796] vpanic+0x552/0x970 [ 715.731264][T16796] ? __pfx_vpanic+0x10/0x10 [ 715.735752][T16796] panic+0xd1/0xe0 [ 715.739454][T16796] ? __pfx_panic+0x10/0x10 [ 715.743855][T16796] ? check_panic_on_warn+0x1f/0x90 [ 715.748949][T16796] check_panic_on_warn.cold+0x19/0x34 [ 715.754303][T16796] ? debug_print_object+0x18e/0x2a0 [ 715.759487][T16796] __warn.cold+0x191/0x328 [ 715.763886][T16796] __report_bug+0x296/0x3d0 [ 715.768378][T16796] ? debug_print_object+0x18e/0x2a0 [ 715.773564][T16796] ? __pfx___report_bug+0x10/0x10 [ 715.778582][T16796] ? unwind_next_frame+0x3c8/0x2090 [ 715.783769][T16796] report_bug_entry+0xe1/0x290 [ 715.788522][T16796] ? debug_print_object+0x19b/0x2a0 [ 715.793709][T16796] handle_bug+0x1cd/0x2a0 [ 715.798024][T16796] exc_invalid_op+0x17/0x50 [ 715.802511][T16796] asm_exc_invalid_op+0x1a/0x20 [ 715.807343][T16796] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 715.813138][T16796] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 92 8a e2 0b 41 56 48 8b 14 dd 40 53 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 ac 05 d8 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 715.832728][T16796] RSP: 0018:ffffc9000768f6f8 EFLAGS: 00010246 [ 715.838777][T16796] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 715.846728][T16796] RDX: ffffffff8c1c5280 RSI: ffffffff8c1c4ea0 RDI: ffffffff90e2bca0 [ 715.854691][T16796] RBP: 0000000000000001 R08: ffff88802df99438 R09: ffffffff8bb2c700 [ 715.862654][T16796] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c4ea0 [ 715.870610][T16796] R13: ffffffff8bb2c740 R14: ffffffff8a9331e0 R15: ffffc9000768f7f8 [ 715.878571][T16796] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 715.884030][T16796] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 715.889477][T16796] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 715.895277][T16796] debug_check_no_obj_freed+0x4da/0x630 [ 715.900814][T16796] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 715.906859][T16796] ? __page_table_check_zero+0x333/0x410 [ 715.912474][T16796] ? __page_table_check_zero+0x333/0x410 [ 715.918099][T16796] ? __page_table_check_zero+0x338/0x410 [ 715.923719][T16796] __free_frozen_pages+0x3f5/0x1040 [ 715.928907][T16796] hci_release_dev+0x4ef/0x630 [ 715.933659][T16796] ? __pfx_hci_release_dev+0x10/0x10 [ 715.938948][T16796] ? device_release+0x97/0x270 [ 715.943716][T16796] ? rcu_is_watching+0x12/0xc0 [ 715.948471][T16796] ? device_release+0x97/0x270 [ 715.953233][T16796] bt_host_release+0x6a/0xb0 [ 715.957817][T16796] ? __pfx_bt_host_release+0x10/0x10 [ 715.963092][T16796] device_release+0xd2/0x270 [ 715.967673][T16796] kobject_put+0x1f7/0x640 [ 715.972073][T16796] put_device+0x1f/0x30 [ 715.976219][T16796] vhci_release+0x185/0x230 [ 715.980709][T16796] ? __pfx_vhci_release+0x10/0x10 [ 715.985722][T16796] __fput+0x3ff/0xb50 [ 715.989696][T16796] task_work_run+0x150/0x240 [ 715.994269][T16796] ? __pfx_task_work_run+0x10/0x10 [ 715.999359][T16796] ? free_uts_ns+0x16e/0x330 [ 716.003941][T16796] do_exit+0x951/0x2af0 [ 716.008085][T16796] ? __pfx___might_resched+0x10/0x10 [ 716.013351][T16796] ? rcu_is_watching+0x12/0xc0 [ 716.018149][T16796] ? __pfx_do_exit+0x10/0x10 [ 716.022745][T16796] ? do_raw_spin_lock+0x128/0x260 [ 716.027768][T16796] ? find_held_lock+0x2b/0x80 [ 716.032438][T16796] ? get_signal+0x7e5/0x2210 [ 716.037020][T16796] do_group_exit+0xd5/0x2a0 [ 716.041521][T16796] get_signal+0x20ff/0x2210 [ 716.046018][T16796] ? __pfx_get_signal+0x10/0x10 [ 716.050855][T16796] ? kernel_move_pages+0xcfd/0x13f0 [ 716.056042][T16796] ? do_futex+0x192/0x350 [ 716.060356][T16796] arch_do_signal_or_restart+0x91/0x7a0 [ 716.065902][T16796] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 716.072070][T16796] ? rcu_is_watching+0x12/0xc0 [ 716.076838][T16796] exit_to_user_mode_loop+0x8b/0x4f0 [ 716.082130][T16796] ? rcu_is_watching+0x12/0xc0 [ 716.086897][T16796] do_syscall_64+0x6f2/0xf80 [ 716.091490][T16796] ? clear_bhb_loop+0x40/0x90 [ 716.096166][T16796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.102046][T16796] RIP: 0033:0x7f0a50b9ce59 [ 716.106443][T16796] Code: Unable to access opcode bytes at 0x7f0a50b9ce2f. [ 716.113443][T16796] RSP: 002b:00007f0a5198e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 716.121840][T16796] RAX: fffffffffffffff2 RBX: 00007f0a50e16090 RCX: 00007f0a50b9ce59 [ 716.129799][T16796] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 716.137760][T16796] RBP: 00007f0a50c32d6f R08: 0000000000000000 R09: 8000400000000000 [ 716.145722][T16796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.153678][T16796] R13: 00007f0a50e16128 R14: 00007f0a50e16090 R15: 00007ffe8f0c5178 [ 716.161642][T16796] [ 716.164704][T16796] Kernel Offset: disabled [ 716.169031][T16796] Rebooting in 86400 seconds..