last executing test programs: 6.570213842s ago: executing program 3 (id=1888): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'pimreg0\x00'}) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000004c0)={"693bff15", 0xfffc, 0x4, 0xea, 0x4, 0x9, "0e9ad55f3f323fff251c91bc9bcea3", "f50ae111", "4217b493", "d8058699", ["b202eeb4f3ead2ea5c5acf7c", "4dc0321f7c27ff4bf86e786a", "46b133ad5cc8e08f99a7502e", "7c9d737fde76106d950f70dd"]}) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000540)={0x3, [{[0x3ff, 0xe0e2, 0xfffffffb, 0x2ef56bb0, 0x80, 0x9, 0x1, 0xb0]}, {[0x1, 0x7fff, 0x3, 0x3, 0x3, 0x6, 0x1, 0x1d1]}, {[0x10, 0x1ff, 0x8, 0x7fffffff, 0x1, 0x2, 0x0, 0x1ff]}], [{[0x907, 0x512b, 0x5, 0x7, 0x7, 0x2, 0x4, 0x6]}, {[0x7340, 0x6, 0x401, 0x7, 0xfffffff8, 0x8, 0x10, 0x5]}, {[0xffffff00, 0x401, 0x5, 0x3, 0x3, 0x2, 0x6, 0x8]}, {[0x8, 0x800, 0x9f, 0x7, 0x5db, 0x0, 0x8001, 0xff]}, {[0x6, 0x2, 0x0, 0x27a, 0x20000000, 0x2, 0x94, 0xf443]}], [{0x5, 0xe00}, {0x10000, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x0, 0x1}, {0xfffff000, 0x1bb, 0x1, 0x1, 0x1, 0x1}, {0x494b, 0x800000, 0x1}, {0xffff, 0x411, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x5b832f0b, 0x1}, {0x0, 0x23c9, 0x0, 0x1}, {0x4, 0x3, 0x1, 0x0, 0x0, 0x1}, {0xfff, 0x7, 0x1, 0x1}, {0x2, 0x7, 0x0, 0x1, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}], [{0x5d0, 0x4, 0x1, 0x1, 0x1}, {0x3, 0x4, 0x1, 0x1, 0x1}, {0x8000, 0x18, 0x1, 0x1}, {0xa80, 0xc, 0x1, 0x1, 0x1}, {0x8001, 0xffffff99, 0x0, 0x1, 0x1, 0x1}, {0x400, 0x8, 0x0, 0x1, 0x1}, {0xe6, 0x6, 0x1, 0x0, 0x1}, {0x6, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x401, 0x9, 0x0, 0x1, 0x0, 0x1}], 0x4, 0x101, 0x81, 0x7f, 0x7ff, 0x2, 0x2, "4cb7eb590ffe1d116ab2a0160d0f15cb", "3f81be25848e79ecfb48b7dfeb837bf2531eb68a92aa6e4a3e39a440da39194937cfb8d4c63a406c33f5f84de19629ab"}) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ioctl$auto_BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) mmap$auto(0xfffffffffffffff9, 0x20009, 0xdf, 0xeb1, r0, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) socket(0x25, 0x1, 0x84) r1 = socket(0x11, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f00000000c0), 0x5aa, &(0x7f0000000100)={&(0x7f0000000140)="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", 0x1}, 0x5, &(0x7f0000000300)="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", 0x5, 0x1000}, 0x5}, 0x8001, 0x100) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r2, 0x0, 0xfffffdf1) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r3, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x7, 0x0) mq_open$auto(0x0, 0x7e, 0x9, 0x0) mq_getsetattr$auto(0x3, 0x0, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 6.439186005s ago: executing program 1 (id=1889): r0 = socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0x5}, 0x3, 0xf8, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) readv$auto(0x3, &(0x7f0000000140)={0x0, 0xfffd}, 0x9) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) timer_create$auto_CLOCK_TAI(0xb, 0x0, &(0x7f0000000040)=0x1) r3 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000680), 0x103000, 0x0) read$auto_proc_timers_operations_base(r3, &(0x7f00000006c0)=""/1, 0x1) 5.512290846s ago: executing program 3 (id=1891): openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x80, 0xd2a, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video41\x00', 0xe0a80, 0x0) ioctl$auto(r0, 0x8008563f, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x0, 0x0) pread64$auto(r1, 0x0, 0x40001000f42c, 0x586) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x2b, 0x1, 0x0) mmap$auto(0x9, 0x2020009, 0x3, 0x8000000eb5, 0xfffffffffffffffa, 0x812) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae64, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x90001, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x9}, 0x7) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x905400, 0x0) ioctl$auto_PPPIOCSFLAGS(r4, 0x40047459, &(0x7f0000000100)=0x7ffe) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "07b9580051b461f1858332c2accc"}, 0x6a) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0x785c) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) 5.450306383s ago: executing program 1 (id=1892): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0xb, 0xd, 0x808e8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) prctl$auto(0x5, 0x39a, 0x0, 0x9, 0x20000000000001ff) ioctl$auto_BCH_IOCTL_DATA(0xffffffffffffffff, 0x4070bc0a, 0x0) io_setup$auto(0xe, &(0x7f0000000080)) mmap$auto(0x5, 0xe983, 0x5d, 0xeb1, r0, 0x8000) madvise$auto(0x0, 0x400053, 0x400009) 4.829862192s ago: executing program 0 (id=1893): r0 = openat$auto_suspend_stats_fops_(0xffffffffffffff9c, &(0x7f00000029c0), 0x42000, 0x0) pread64$auto(r0, &(0x7f0000000100)='/sys/kernel/tracing/tracing_cpumask\x00\x16\xcb\x0fL\x91\xe3\xb3b\xa6\xbc# 3\x17dq\xd1\x99+\xff\x8f.\xa9\xb0\x1a\x01\xbe\xdf\xc1\x00J\xa9P\xc3\xa8\x9axCg\x89&s\xee\x82N\x88\xb1\xc6\xc8\x1e', 0xfffffffffffffffa, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) r2 = ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f00000000c0)={0x4, 0xa347}) r3 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x68) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x101202, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_PMK(r5, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002c010000fbdbdf257bfffff208000300", @ANYRES32=r7], 0x1c}, 0x1, 0x0, 0x0, 0x48880}, 0x80) stat$auto(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000340)={0x2, 0x0, 0xf661, 0x0, 0xee00, 0xee00, 0x0, 0x5, 0x6c, 0x2, 0x263, 0x5, 0x80000002, 0x7, 0x7, 0x8000, 0x140}) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000080)={0xd, @raw=0x7fffffffffffffff, @raw=0x7fffffff, 0x3, 0x7, '\x00', {0x5, 0x3, 0x0, 0xffffffffffffffff, r8, 0x0, 0x1000, 0x7ff, {0x4, 0x100}, {0x1133, 0x40}, {0x2, 0xc431}, 0xa00, 0x3ae0, 0x4, 0x8, 0xe, 0x0, 0x3, 0xf, 0x8, 0x2, '\x00', 0x7, 0x0, 0x1816, 0x4}}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xc, 0x800008000) sysfs$auto(0x2, 0x46, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) r9 = socket(0x2, 0x5, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0xc004, 0xb}, 0xfff}, 0x5, 0x311) sendmmsg$auto(r9, &(0x7f0000000100)={{&(0x7f0000000040), 0x400, &(0x7f00000000c0)={0x0, 0xff80}, 0x7, 0x0, 0x3, 0x7}, 0x8}, 0x10001, 0x7fffffff) syz_clone3(&(0x7f0000000580)={0x181000080, &(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000400)=0x0, {0x3c}, &(0x7f0000000440)=""/247, 0xf7, &(0x7f0000000a40)=""/4096, &(0x7f0000000540)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) r11 = setfsuid$auto(0xee00) setresuid$auto(r11, 0x0, r11) ioprio_set$auto(0x3, r11, 0x4b34) ioctl$auto_XFS_IOC_FREESP(r3, 0x4030580b, &(0x7f0000000600)={0x1, 0xc97, 0x3ff, 0x6, 0x7fffffff, 0x0}) sendmsg$auto_TIPC_NL_BEARER_SET(r2, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000640)={&(0x7f0000003ec0)=ANY=[@ANYBLOB="94140000", @ANYRES16=0x0, @ANYBLOB="020028bd7000ffdbdf25050000000502058008009c00", @ANYRES32=r10, @ANYBLOB="040009000c008880040053800400448008004400", @ANYRES32=r11, @ANYBLOB="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", @ANYRES32=r9, @ANYBLOB="1accbf11ed5d47cc27f77dbc5e812003685fb49425189d8305dda9fc930e27873f92f90e987bdb8f0a21665c0e57bd1e7acfbce4bccbbfedf2a70b79141abb9d2281748875656d830b485500c4749f145a848f114d9b5667781644b9a5448d080014000a0101003e1245b96d15686c7061358c704ffb6bb5c605b46dce04460ea9333554e6c54ac6648ab92c9096ebf7c71fd79829aa7a7dbe67ab7bedfd84ee83b54be32bc679278149c1d106d15937a4ef9a90d8699848eb36f89803945b9d490800d800", @ANYRES32=r12, @ANYBLOB="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"], 0x1494}, 0x1, 0x0, 0x0, 0x4040804}, 0x40800) sendmsg$auto_NL80211_CMD_GET_COALESCE(r5, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x40040}, 0x66) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c04, 0x0) 4.825109379s ago: executing program 3 (id=1895): close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$auto(r0, 0x6, 0xa, &(0x7f0000000080)='$\xfe\x88\xc8\x91\x8bo\xc6#\x93\x91^\x01<\xc81\xc0\x80\xd6\xdb>f\x8c\xf7\xb6\xca\xcdi\xa6\x91R\x7f\x00B\x93H9\x19\xb4x\xb1\xb7\xd3\xe4\x00'/60, &(0x7f0000000040)=0xaa) fchdir$auto(0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/irq/14/spurious\x00', 0x44aec1, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) mlockall$auto(0x7) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) socket(0x2, 0x1, 0x106) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) shmget$auto(0x100000000, 0x3, 0x79e56dc9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x9, 0xb5f0, 0x2, 0x39, 0x65f, 0x80000003, 0x100, 0x3, 0x2, 0x7, 0x7, 0x4000, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x7fffffffffffffff, 0x0, 0x7, 0x2000, 0xfffffff7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, [0xc, 0x200000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffff4ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x66]}, 0x1fd, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) 4.730402999s ago: executing program 2 (id=1896): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3b) (async) r1 = socket(0xa, 0x3, 0x3b) connect$auto(r0, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x3ff) connect$auto(r1, 0x0, 0x58) (async) connect$auto(r1, 0x0, 0x58) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) (async) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) listen$auto(0x3, 0x83) (async) listen$auto(0x3, 0x83) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/bond0/bonding/slaves\x00', 0x80002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r2, 0x4001af84, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) (async) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) ioctl$auto(r4, 0x2, 0x9) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r3, 0x0, 0x84) (async) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r3, 0x0, 0x84) syz_clone(0x2010880, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x2a742, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x202, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) 4.584509511s ago: executing program 3 (id=1897): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="f011002d867cf9eac164ee128f66051d59398cb8196675ebff6994ebd14e4967092c63f8af6c360f094b476ca98cc2f212388c8bae4eee30982a0e9f5315a1681f188b0effefe56be2375a5d4b4e3580cb2d76e6d9f98adfb773dd334a6d4fcdbde88cee8dbfc928011730c6d3282c81ff739779c9d4a495bceda964eeffcd61be994ad8ff81f100"/151], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r0, 0x65, 0x7, 0x0, 0x4) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) getuid() getpid() (async) ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f0000000040)=0x47) (async) ppoll$auto(&(0x7f0000000340)={0xffffffffffffffff, 0x8}, 0x3, &(0x7f0000000380)={0x1000, 0x1ff}, 0x0, 0x8) (async) unshare$auto(0x2) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000012440)='/dev/loop4\x00', 0x2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x40000080) move_mount$auto(r3, 0x0, r3, 0x0, 0xc) read$auto(r2, 0x0, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x40000a, 0x7b65, 0x9b7e, 0x2, 0x100008000) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) prctl$auto_PR_SCHED_CORE_GET(0x476, 0x0, 0x0, 0x7, 0x6e) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x20) (async) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) 4.368970352s ago: executing program 1 (id=1898): syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3e", 0xfdef) 4.215970247s ago: executing program 0 (id=1899): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/slabinfo\x00', 0x80000, 0x0) r1 = epoll_create$auto(0x4e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) socket(0xa, 0x1, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x2a, 0xffffffffffffffff, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/lockd/parameters/nlm_timeout\x00', 0x101042, 0x0) ptrace$auto(0x7, 0x0, 0x5, 0x2) write$auto(r2, 0x0, 0x4) write$auto(r1, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0) statmount$auto(&(0x7f0000000080)={0x4b, @inferred=r0, 0x4, 0x3, 0x1880}, &(0x7f0000000100)={0x1, 0xfffffffa, 0x6, 0x9e, 0x1c000000, 0x5, 0x5, 0x7, 0x7fff, 0x0, 0x401, 0xa42, 0x7, 0x2ed, 0x0, 0x9, 0x4, 0x8, 0x81, 0x6, 0x6, 0x3, 0x9, 0x800, 0x776388d8, 0x8, 0x1, 0x742000, 0xb, 0x9, 0x10000, [0x0, 0xffffffffffff7fff, 0x8000, 0xffffffffffff423c, 0x82a, 0x40, 0x1, 0xffff, 0x3, 0x7, 0xffffffffffff8000, 0x7, 0x3, 0x4, 0x8, 0x1, 0x8000000000000000, 0xfffffffffffffffb, 0x100, 0x81, 0x5, 0x7a, 0xffffffffffffffff, 0x1, 0x8, 0x5, 0x7, 0x2, 0x2fc8, 0x673, 0xffffffffffff1312, 0x5, 0x3ff, 0x1, 0x8001, 0x10001, 0x2, 0x7ca3, 0x0, 0x8001, 0x100000000, 0x4, 0x1], "ff176e682c63ebaf192bf7da960e4379dec11a7664d869d070b6a79467ed71e52c33445ec47082dccae3c83a5990793b8bf59287925181864f0e5a1c45bbe545138f1be65239695252addb0908b49de3dcfa1a042c61a516461a5bdb2318c8bb734d46a523800e392e756627b534e4cc20c4a7e08f23c7b389fee607b5d90dbb8f33003f5629d86f165131a3e8af96724826e2854e4d4b3bf51f2b3da46b549d1b84119c353ca96e330dc7c9bf277c745027b0274e722e76074832a4335dd609360826159bb1e79664d1a95be88591d1e8a42d"}, 0x3, 0x6) 4.131603259s ago: executing program 1 (id=1900): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'pimreg0\x00'}) r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, &(0x7f00000004c0)={"693bff15", 0xfffc, 0x4, 0xea, 0x4, 0x9, "0e9ad55f3f323fff251c91bc9bcea3", "f50ae111", "4217b493", "d8058699", ["b202eeb4f3ead2ea5c5acf7c", "4dc0321f7c27ff4bf86e786a", "46b133ad5cc8e08f99a7502e", "7c9d737fde76106d950f70dd"]}) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000000540)={0x3, [{[0x3ff, 0xe0e2, 0xfffffffb, 0x2ef56bb0, 0x80, 0x9, 0x1, 0xb0]}, {[0x1, 0x7fff, 0x3, 0x3, 0x3, 0x6, 0x1, 0x1d1]}, {[0x10, 0x1ff, 0x8, 0x7fffffff, 0x1, 0x2, 0x0, 0x1ff]}], [{[0x907, 0x512b, 0x5, 0x7, 0x7, 0x2, 0x4, 0x6]}, {[0x7340, 0x6, 0x401, 0x7, 0xfffffff8, 0x8, 0x10, 0x5]}, {[0xffffff00, 0x401, 0x5, 0x3, 0x3, 0x2, 0x6, 0x8]}, {[0x8, 0x800, 0x9f, 0x7, 0x5db, 0x0, 0x8001, 0xff]}, {[0x6, 0x2, 0x0, 0x27a, 0x20000000, 0x2, 0x94, 0xf443]}], [{0x5, 0xe00}, {0x10000, 0x2, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x7, 0x1, 0x1, 0x0, 0x1}, {0xfffff000, 0x1bb, 0x1, 0x1, 0x1, 0x1}, {0x494b, 0x800000, 0x1}, {0xffff, 0x411, 0x0, 0x0, 0x1, 0x1}, {0x5, 0x5b832f0b, 0x1}, {0x0, 0x23c9, 0x0, 0x1}, {0x4, 0x3, 0x1, 0x0, 0x0, 0x1}, {0xfff, 0x7, 0x1, 0x1}, {0x2, 0x7, 0x0, 0x1, 0x1}, {0x7, 0x3, 0x0, 0x1, 0x1, 0x1}], [{0x5d0, 0x4, 0x1, 0x1, 0x1}, {0x3, 0x4, 0x1, 0x1, 0x1}, {0x8000, 0x18, 0x1, 0x1}, {0xa80, 0xc, 0x1, 0x1, 0x1}, {0x8001, 0xffffff99, 0x0, 0x1, 0x1, 0x1}, {0x400, 0x8, 0x0, 0x1, 0x1}, {0xe6, 0x6, 0x1, 0x0, 0x1}, {0x6, 0x6, 0x0, 0x0, 0x1, 0x1}, {0x401, 0x9, 0x0, 0x1, 0x0, 0x1}], 0x4, 0x101, 0x81, 0x7f, 0x7ff, 0x2, 0x2, "4cb7eb590ffe1d116ab2a0160d0f15cb", "3f81be25848e79ecfb48b7dfeb837bf2531eb68a92aa6e4a3e39a440da39194937cfb8d4c63a406c33f5f84de19629ab"}) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ioctl$auto_BLKDISCARD(0xffffffffffffffff, 0x1277, 0x0) mmap$auto(0xfffffffffffffff9, 0x20009, 0xdf, 0xeb1, r0, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x1, 0x0, 0x14) socket(0x25, 0x1, 0x84) r1 = socket(0x11, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000080)={{&(0x7f00000000c0), 0x5aa, &(0x7f0000000100)={&(0x7f0000000140)="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", 0x1}, 0x5, &(0x7f0000000300)="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", 0x5, 0x1000}, 0x5}, 0x8001, 0x100) r2 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) write$auto(r2, 0x0, 0xfffffdf1) ioctl$auto_FS_IOC_SETFLAGS2(r2, 0x40086602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r3, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) io_uring_setup$auto(0x7, 0x0) mq_open$auto(0x0, 0x7e, 0x9, 0x0) mq_getsetattr$auto(0x3, 0x0, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) 4.025045761s ago: executing program 0 (id=1901): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="100000001214af"], 0x14}}, 0x4000000) syz_genetlink_get_family_id$auto_tipcv2(0x0, r0) sendmsg$auto_TIPC_NL_BEARER_ADD(r0, &(0x7f0000000040)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={0x0, 0x224c}, 0x1, 0x0, 0x0, 0x4048804}, 0x4000) ioctl$auto_NS_GET_PID_IN_PIDNS(r0, 0x8004b708, &(0x7f0000000240)=0x401) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) socket(0x22, 0xa, 0x1) ioctl$auto_KVM_CREATE_VM(r3, 0xc048aeca, 0x0) r5 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event\x00', 0x220442, 0x0) mmap$auto(0x6, 0x202000b, 0x9, 0x17, r5, 0x8000) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r5) sendmsg$auto_NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20044809}, 0x8810) shmctl$auto_IPC_RMID(0x401, 0x0, &(0x7f00000004c0)={{0xb65, 0xee00, 0xee00, 0x4, 0xffffff01, 0x17b36b9b, 0x1}, 0x6, 0x2, 0x7, 0xfffffffffffffff7, @inferred, @inferred=0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000280)="8f123574a32d8dff7be1e2c85401b47792247f80d4016b535d895f2afe66246a6a201d072a56c0b679f98d0efb9ef45ba65ec89b4d1c751db91f311c7e32defd5fd640655a0fd22c0dd799075ccccdb5f34decf435274cb4c26545b10a6c1095ac39ea110397c8994201b8b7d131b6c67074c34a0e25e4114caa4504bab1faeb98fb3ac8cb9503cb01d4be6911b9acb14454c0145139d816da9ea83544c8d5f7fa71a14c37cb7eab025639150a88710e79e2e4a61bbd1e201dcb1b7c834e93152e4e227322b844a75e8b5943d3bfe83449b6069eca152ea129548211254e1037b686a5db82b998f5dafe4e", &(0x7f0000000400)="eed185bf69ffcbff11e506841b8fd89cab3058a406677d4e331457382f4ac386eeeee20cd2e50a044f256841840c01b1a54e7efbc33b2df6d6627993cf1ebd5ca6b66a98ddc172c917cf84cf862b2d153e857cc310c6264b4ac96f4a82f0e91b94bb86290832b9c5f1f611d326f02e3d4999956d418f"}) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2010000}, 0xc, &(0x7f0000000100)={&(0x7f0000000540)={0x133c, r6, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x40}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x5}, @NL802154_ATTR_SEC_LEVEL={0x77, 0x2d, 0x0, 0x1, [@generic="a2695a705047cdfb594b53136b4aa91ee86c6af3f72cf00095ba7c10722f0cfd8214f1b8eae902fbdf8acfa815cdaabbb48a130211d8a3e1e13758d7a12fc8e3a2ba339086823b9d98df5dac994fa94ce6db7715267bba4a95321c462348bf0a52a88c729ee8074ef788f35e8f66d06dfa6e8d"]}, @NL802154_ATTR_SEC_DEVKEY={0x129c, 0x2f, 0x0, 0x1, [@nested={0xf0, 0x5f, 0x0, 0x1, [@generic="8a134d8819d2137ad7b2605d8ddbcbba2749b00efced839669b35c908b8ce38bbf86ee7022a3e7ca004e7f56749dcfc97a1e2043d2d48fabf7da41092a1ee8504cca833116ad7602600d4071945e32a84f462d73a055c2ec79c3190c31a00643e7886869685eb0fcadfa2dc8d0b8ff1688a82ba95b795f97e73ea618199436edcdc7b84e42c7923c10deaf143fb47f88eb002681bc2e510d848a370879d25560410f6e08e0d002b8f5934879c99c92807834dc77e4bd444e9d1886ad4a92b1499d106b713e01fe1a4ec2dc56991cc9c7b0e09fbef02c7df023184b4ddd3a89d570df08cefeb2b405", @nested={0x4, 0xa6}]}, @nested={0xc, 0x130, 0x0, 0x1, [@typed={0x8, 0x91, 0x0, 0x0, @uid=r7}]}, @nested={0x119b, 0x110, 0x0, 0x1, [@typed={0x9, 0x24, 0x0, 0x0, @str='+4\x94+\x00'}, @generic="2ec80fe0f70c1a321b52af1f511b5b57bc1db693c1136b889bf33137c4fe0b79b696b862cdca27ee96", @generic="739ee0f8501748e0975b200c455031cce18d6cebafc52771a1a943fe64dbb49a0217e2235abc05309e48190d2a8f2b07c464e1aa", @generic="10d70a846f075377f3b0e7ca1e1e37493e99a160255f79752d3f82aa8b86f224ca905b2523a542ee732a035f9e08b5fa4f3b1c7a2d687d24837187d50e4b0a04337aed394f033baa7a526798b6106c76593cee1c405a881b3f4a9de7f41bc19d782f3a5503a1457039165cde804a995e7dd6e753f171f2b5ee452ff2c12cb9edc264b6f3c495b4c201a26055fdc232d935216e24c7964c5d597629018e1924fd14a2b0c3e4", @nested={0x4, 0x10c}, @generic="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", @typed={0x8, 0xf1, 0x0, 0x0, @fd=r0}, @generic="636f67d89e304a666f5757f918b753738dbb8d8caf2bf55034052a5138017aaefa5ae8d313eef2e9859c0ef86b7f6fa4b8aaca7d0738f0a3ad4cfea65fb79e540774817adccd3f3250c9b297dc33f6b46c62270549b35b784a788044f67e356431562db521f2795bba00e11bfb315c8947a9733895a8143ba3", @nested={0x4, 0x15d}]}]}]}, 0x133c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000010) 3.693001793s ago: executing program 2 (id=1902): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/watchdog_thresh\x00', 0x20402, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) set_mempolicy$auto(0x2005, &(0x7f0000000080)=0x87e, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/bus/usb-serial/drivers/digi_4/new_id\x00', 0x183841, 0x0) sysfs$auto(0x2, 0x100000000000039, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x1ff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xfe, 0x0) r3 = memfd_create$auto(0x0, 0x4) ioctl$auto_FS_IOC_UNRESVSP(r3, 0x40305829, 0x3) write$auto(0x3, 0x0, 0x5c8) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r4, 0x104000000000010e, 0xb, 0x0, 0x400) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYRESHEX=r1], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24004840) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:5/min_bytes\x00', 0x189842, 0x0) getsockopt$auto_SO_GET_FILTER(r6, 0x3, 0x1a, &(0x7f0000000000)='/sys/devices/virtual/bdi/1:5/min_bytes\x00', &(0x7f0000000040)=0x6) sendfile$auto(r6, r6, 0x0, 0x71) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) ioctl$auto(r7, 0x4b3a, 0x1) capget$auto(0x0, &(0x7f0000000180)={0x2, 0x1, 0xb}) 3.692720701s ago: executing program 3 (id=1903): mmap$auto(0x0, 0x7, 0x4, 0x9b72, 0xffffffffffffffff, 0x2ff) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) read$auto_trace_options_fops_trace(0xffffffffffffffff, 0x0, 0x0) socket(0x2, 0x3, 0x6) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) lseek$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) timer_create$auto(0x7, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x0, 0x800}}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x501, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000040), r0) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) fcntl$auto(0x3, 0x4, 0xa553) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), r0) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="00022abd7000fcdbdf2514000000180001801400020077673200"/38], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r4 = socket(0x2, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) 3.244674405s ago: executing program 2 (id=1904): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) msgctl$auto_MSG_STAT(0x2, 0xb, &(0x7f00000002c0)={{0x4, 0x0, 0x0, 0x9, 0x5, 0xffffff68, 0x4}, &(0x7f00000001c0)=0x9, &(0x7f0000000200)=0x8, 0x10, 0x7, 0x3, 0x46, 0x7, 0x6, 0x9f5, 0x22f3, @raw=0xffff7fff, @raw=0x64}) setresuid$auto(0x0, 0x0, r1) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) write$auto(r6, &(0x7f0000000240)=',-\t', 0x2000008008) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x18, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40014}, 0x0) getpgid$auto(0x0) r7 = socket(0x2, 0x801, 0x106) setsockopt$auto(r7, 0x6, 0x12, 0x0, 0xa1) sendmsg$auto_IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x28014044}, 0x0) r8 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) ioctl$auto(r8, 0x80046f45, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r9 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r9, &(0x7f0000000100), 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 3.076489282s ago: executing program 0 (id=1905): r0 = prctl$auto(0x35, 0x0, 0x8, 0x1, 0x7) landlock_create_ruleset$auto(&(0x7f0000001180)={0xd1d, 0x3, 0x7}, 0xb9, 0x0) r1 = prctl$auto(0x34, 0x0, 0x0, 0x5, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x580, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto_PR_SCHED_CORE_GET(0x476, 0x0, 0x0, 0x5, 0x7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) bpf$auto(0x5, 0x0, 0x80) msgctl$auto_IPC_SET(0x7f7, 0x1, 0x0) setregid$auto(0x0, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) listen$auto(0x3, 0x81) sendfile$auto(0x1, r2, 0x0, 0x1f) r5 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000000)='/dev/media8\x00', 0x2, 0x0) ioctl$auto(r5, 0x1, r5) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r1) msgctl$auto_IPC_RMID(0x10001, 0x0, &(0x7f0000000180)={{0x3c539d68, 0xee00, 0xee01, 0x4, 0x93, 0x4, 0xb6}, &(0x7f0000000100)=0x8, &(0x7f0000000140)=0x2, 0x8, 0x100, 0x3, 0xfc00000000000000, 0xffff, 0xc, 0x0, 0xfe0, @inferred=0xffffffffffffffff, @raw=0x8}) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r6, @ANYBLOB="000127bd7000fddbdf2598000000f8002d80e900b98008003500", @ANYRES32=r7, @ANYBLOB="04004300040084800400f78006000300250000006d908cc373e765a60ff3011c2f6bfdd8485d503efb07101400fd4f8ad2344e5c7bc16c3dc398b51c181c5393bf8d33ec035154d1023aa7a91043356f3dc203fbbdbf0900000000000000a01ecd25ecfd61bdc20ed426a33fbc0703af567d4e79298d2b0d1bf4ab0971adfb0cc7cc333d0219122f61658620f94e9e7b4f9d7747534988a059be17e98cf27cea7192f58ec9dd5b0a02f033d2a080a0994649f7468f047a79053b68a75adee491622c651685e88fca078b88c43208001e00ac1414bb08005f00000000000000000800e600d42f3a00"], 0x10c}, 0x1, 0x0, 0x0, 0x4004}, 0x10) exit$auto(0x189) 2.194271527s ago: executing program 2 (id=1906): close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) r0 = socket(0xa, 0x1, 0x0) getsockopt$auto(r0, 0x6, 0xa, &(0x7f0000000080)='$\xfe\x88\xc8\x91\x8bo\xc6#\x93\x91^\x01<\xc81\xc0\x80\xd6\xdb>f\x8c\xf7\xb6\xca\xcdi\xa6\x91R\x7f\x00B\x93H9\x19\xb4x\xb1\xb7\xd3\xe4\x00'/60, &(0x7f0000000040)=0xaa) fchdir$auto(0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/irq/14/spurious\x00', 0x44aec1, 0x0) pread64$auto(r1, 0x0, 0x800003, 0x270) mlockall$auto(0x7) msgctl$auto_IPC_RMID(0x1, 0x0, 0x0) socket(0x2, 0x1, 0x106) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x80011, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) shmget$auto(0x100000000, 0x3, 0x79e56dc9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x9, 0xb5f0, 0x2, 0x39, 0x65f, 0x80000003, 0x100, 0x3, 0x2, 0x7, 0x7, 0x4000, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x7fffffffffffffff, 0x0, 0x7, 0x2000, 0xfffffff7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3, 0x0, [0xc, 0x200000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffff4ef, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x4, 0x0, 0x0, 0x66]}, 0x1fd, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) 920.490648ms ago: executing program 2 (id=1907): mmap$auto(0x0, 0x6983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0xa, 0x1, 0x84) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), r0) sendmsg$auto_NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000003640)=ANY=[@ANYBLOB="90135414", @ANYRES16=0x0, @ANYBLOB="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"], 0x1390}}, 0x4000010) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) getrlimit$auto(0x3, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ram1\x00', 0x6281, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x4, 0x0) fanotify_init$auto(0x69, 0x2) socket(0x11, 0xa, 0x300) socket(0x11, 0x2, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r3, 0xc0c0128e, r3) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/module/kvm/parameters/enable_vmware_backdoor\x00', 0x384a02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) lseek$auto(0x3, 0xffffffffff800002, 0x10) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) getsockopt$auto(r0, 0x84, 0x1c, 0x0, 0x0) 689.663808ms ago: executing program 1 (id=1908): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77ef907d, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) 570.625239ms ago: executing program 0 (id=1909): shmctl$auto_SHM_LOCK(0x161, 0xb, &(0x7f00000001c0)={{0x1c0000, 0xee01, 0xffffffffffffffff, 0xff, 0x5, 0x0, 0x8}, 0x83, 0xb6, 0x101, 0x3, @raw=0x6, @raw=0x2, 0x7, 0x0, &(0x7f0000000080)="f878589dac4d7f81a915c1c4a349337b7d8c8d5ca9241e156f026d431e127c04e29a32601bb09785a4be9d25fb3b651691", &(0x7f0000000100)="4df7160100000000000000f98e1b1751994e0f626bda9c21979d2d0045ff96aa4c948b1b457771682377bbfbc391aef94117f08ad198e1109011723808d35a70bb4e6fcc0f1d4bb77ecd7042b430ebda62c4b6eaaf1b910807fa3c8cd826d7b78adac828bc71ed789b893c813a8ecb7c307f72689d8e84af26965527dbcf0000000000000000"}) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b3e", 0xfdef) 269.569875ms ago: executing program 0 (id=1910): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0xda25b84c77ef907d, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r3, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x4000050) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0xfdef) 156.765484ms ago: executing program 2 (id=1911): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000140)=@bpf_attr_11={0x81, 0x4189, 0x275b, 0x1, 0x80000001, 0x6, 0x5, 0xffffffffffffffff}, 0x7) ioctl$auto_VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f0000000080)=0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) getrlimit$auto(0x3, 0x0) ioctl$auto_BLKZEROOUT(0xffffffffffffffff, 0x127f, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) lseek$auto(0x3, 0xffffffffff800002, 0x10) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) fcntl$auto_F_GET_SEALS(r1, 0x40a, 0xd) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x84) 133.023367ms ago: executing program 3 (id=1912): mmap$auto(0x0, 0x2000009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='&\x00', @ANYBLOB="5de1"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) read$auto(r0, &(0x7f0000000080)='MJC802154_HWSIM\x00\xcb\x0fX\xc7\xfdx!\xf7\xb5T\x04\xad\x96\xf4\xbc\xca\xa52UWT1\a\x00\x00\x00\x00\x00\x007\xc9\xa6\x8a', 0x1060) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fba86c9dd051a0094a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f", 0xa}) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7114}, 0x8) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) read$auto(r2, 0x0, 0x9) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r1, &(0x7f0000000340)={0x0, 0x18}, 0x8) 0s ago: executing program 1 (id=1913): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0xfdef) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x5609, r1) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x141000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x4048) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/pci/00/01.3\x00', 0x42041, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x5}, 0xa) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x110c230000, 0x8031ca, 0x9) bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_1={r2, 0xffffffffffff50ba, @next_key=0xd}, 0x9) bpf$auto(0x1, 0x0, 0xf) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) mbind$auto(0x5, 0x2091d2, 0x4, 0x0, 0x5, 0x2) kernel console output (not intermixed with test programs): ata+0x959/0x1e20 [ 429.238022][T12083] cfg80211_inform_bss_data+0x237/0x3a00 [ 429.238040][T12083] cfg80211_inform_bss_frame_data+0x247/0x790 [ 429.238059][T12083] ieee80211_bss_info_update+0x310/0xab0 [ 429.238122][T12083] ieee80211_ibss_rx_queued_mgmt+0x1919/0x2f80 [ 429.238159][T12083] ieee80211_iface_work+0xbff/0x13d0 [ 429.238175][T12083] cfg80211_wiphy_work+0x446/0x5c0 [ 429.238233][T12083] process_one_work+0xa23/0x19a0 [ 429.238253][T12083] worker_thread+0x5ef/0xe50 [ 429.238271][T12083] kthread+0x370/0x450 [ 429.805923][T12119] netlink: 'syz.3.1365': attribute type 1 has an invalid length. [ 429.805943][T12119] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1365'. [ 430.080065][T12129] bond0: invalid ARP target specified [ 430.094640][T12129] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1369'. [ 430.105359][T12129] FAULT_INJECTION: forcing a failure. [ 430.105359][T12129] name failslab, interval 1, probability 0, space 0, times 0 [ 430.105397][T12129] CPU: 0 UID: 0 PID: 12129 Comm: syz.2.1369 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.105419][T12129] Tainted: [L]=SOFTLOCKUP [ 430.105424][T12129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 430.105434][T12129] Call Trace: [ 430.105440][T12129] [ 430.105446][T12129] dump_stack_lvl+0x100/0x190 [ 430.105473][T12129] should_fail_ex.cold+0x5/0xa [ 430.105492][T12129] should_failslab+0xc2/0x120 [ 430.105507][T12129] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 430.105529][T12129] ? alloc_empty_file+0x55/0x1c0 [ 430.105550][T12129] alloc_empty_file+0x55/0x1c0 [ 430.105568][T12129] alloc_file_pseudo+0x13a/0x230 [ 430.105588][T12129] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 430.105606][T12129] ? alloc_fd+0x476/0x790 [ 430.105624][T12129] sock_alloc_file+0x50/0x210 [ 430.105647][T12129] __sys_socket+0x1c0/0x260 [ 430.105663][T12129] ? exc_page_fault+0x6f/0xd0 [ 430.105683][T12129] ? __pfx___sys_socket+0x10/0x10 [ 430.105702][T12129] ? do_user_addr_fault+0x8d6/0x12f0 [ 430.105727][T12129] __x64_sys_socket+0x72/0xb0 [ 430.105744][T12129] ? lockdep_hardirqs_on+0x78/0x100 [ 430.105764][T12129] do_syscall_64+0x106/0xf80 [ 430.105784][T12129] ? clear_bhb_loop+0x40/0x90 [ 430.105802][T12129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.105820][T12129] RIP: 0033:0x7fb38059e007 [ 430.105833][T12129] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 430.105848][T12129] RSP: 002b:00007fb38153ff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 430.105863][T12129] RAX: ffffffffffffffda RBX: 00007fb380815fa0 RCX: 00007fb38059e007 [ 430.105873][T12129] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 430.105882][T12129] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 430.105891][T12129] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 430.105900][T12129] R13: 00007fb380816038 R14: 00007fb380815fa0 R15: 00007ffdbc056f38 [ 430.105919][T12129] [ 430.301743][T12135] vivid-007: ================= START STATUS ================= [ 430.301761][T12135] vivid-007: Enable Output Cropping: true [ 430.301782][T12135] vivid-007: Enable Output Composing: true [ 430.301800][T12135] vivid-007: Enable Output Scaler: true [ 430.301818][T12135] vivid-007: Tx RGB Quantization Range: Automatic [ 430.301848][T12135] vivid-007: Transmit Mode: HDMI [ 430.301866][T12135] vivid-007: Hotplug Present: 0x00000000 [ 430.301885][T12135] vivid-007: RxSense Present: 0x00000000 [ 430.301903][T12135] vivid-007: EDID Present: 0x00000000 [ 430.301921][T12135] vivid-007: ================== END STATUS ================== [ 430.490776][T12142] vivid-007: ================= START STATUS ================= [ 430.490845][T12142] vivid-007: Enable Output Cropping: true [ 430.490866][T12142] vivid-007: Enable Output Composing: true [ 430.490883][T12142] vivid-007: Enable Output Scaler: true [ 430.490900][T12142] vivid-007: Tx RGB Quantization Range: Automatic [ 430.490917][T12142] vivid-007: Transmit Mode: HDMI [ 430.490933][T12142] vivid-007: Hotplug Present: 0x00000000 [ 430.490951][T12142] vivid-007: RxSense Present: 0x00000000 [ 430.490967][T12142] vivid-007: EDID Present: 0x00000000 [ 430.490983][T12142] vivid-007: ================== END STATUS ================== [ 430.949691][T12165] netlink: 29 bytes leftover after parsing attributes in process `syz.3.1378'. [ 430.954676][ T51] Bluetooth: hci1: unexpected event 0x02 length: 726 > 260 [ 431.191966][T12172] bond0: invalid ARP target specified [ 431.205729][T12172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1379'. [ 431.221961][T12172] FAULT_INJECTION: forcing a failure. [ 431.221961][T12172] name failslab, interval 1, probability 0, space 0, times 0 [ 431.221992][T12172] CPU: 0 UID: 0 PID: 12172 Comm: syz.2.1379 Tainted: G L syzkaller #0 PREEMPT(full) [ 431.222013][T12172] Tainted: [L]=SOFTLOCKUP [ 431.222019][T12172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 431.222029][T12172] Call Trace: [ 431.222034][T12172] [ 431.222040][T12172] dump_stack_lvl+0x100/0x190 [ 431.222067][T12172] should_fail_ex.cold+0x5/0xa [ 431.222086][T12172] should_failslab+0xc2/0x120 [ 431.222102][T12172] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 431.222125][T12172] ? __d_alloc+0x34/0xa80 [ 431.222141][T12172] ? lockdep_init_map_type+0x5c/0x250 [ 431.222164][T12172] __d_alloc+0x34/0xa80 [ 431.222182][T12172] d_alloc_pseudo+0x1c/0xc0 [ 431.222202][T12172] alloc_file_pseudo+0xcf/0x230 [ 431.222221][T12172] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 431.222240][T12172] ? alloc_fd+0x476/0x790 [ 431.222257][T12172] sock_alloc_file+0x50/0x210 [ 431.222280][T12172] __sys_socket+0x1c0/0x260 [ 431.222295][T12172] ? exc_page_fault+0x6f/0xd0 [ 431.222316][T12172] ? __pfx___sys_socket+0x10/0x10 [ 431.222335][T12172] ? do_user_addr_fault+0x8d6/0x12f0 [ 431.222360][T12172] __x64_sys_socket+0x72/0xb0 [ 431.222377][T12172] ? lockdep_hardirqs_on+0x78/0x100 [ 431.222397][T12172] do_syscall_64+0x106/0xf80 [ 431.222417][T12172] ? clear_bhb_loop+0x40/0x90 [ 431.222435][T12172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.222450][T12172] RIP: 0033:0x7fb38059e007 [ 431.222463][T12172] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.222482][T12172] RSP: 002b:00007fb38153ff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 431.222497][T12172] RAX: ffffffffffffffda RBX: 00007fb380815fa0 RCX: 00007fb38059e007 [ 431.222506][T12172] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 431.222516][T12172] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 431.222525][T12172] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 431.222535][T12172] R13: 00007fb380816038 R14: 00007fb380815fa0 R15: 00007ffdbc056f38 [ 431.222556][T12172] [ 432.809618][T12223] vivid-007: ================= START STATUS ================= [ 432.809636][T12223] vivid-007: Enable Output Cropping: true [ 432.809656][T12223] vivid-007: Enable Output Composing: true [ 432.809673][T12223] vivid-007: Enable Output Scaler: true [ 432.809691][T12223] vivid-007: Tx RGB Quantization Range: Automatic [ 432.809707][T12223] vivid-007: Transmit Mode: HDMI [ 432.809723][T12223] vivid-007: Hotplug Present: 0x00000000 [ 432.809739][T12223] vivid-007: RxSense Present: 0x00000000 [ 432.809756][T12223] vivid-007: EDID Present: 0x00000000 [ 432.809772][T12223] vivid-007: ================== END STATUS ================== [ 433.485739][T12228] block2mtd: illegal erase size [ 433.936332][T12241] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 434.410063][T12255] vivid-007: ================= START STATUS ================= [ 434.431165][T12255] vivid-007: Enable Output Cropping: true [ 434.436929][T12255] vivid-007: Enable Output Composing: true [ 434.482965][T12255] vivid-007: Enable Output Scaler: true [ 434.504892][T12256] FAULT_INJECTION: forcing a failure. [ 434.504892][T12256] name failslab, interval 1, probability 0, space 0, times 0 [ 434.561906][T12255] vivid-007: Tx RGB Quantization Range: Automatic [ 434.592863][T12255] vivid-007: Transmit Mode: HDMI [ 434.621532][T12256] CPU: 0 UID: 0 PID: 12256 Comm: syz.3.1397 Tainted: G L syzkaller #0 PREEMPT(full) [ 434.621557][T12256] Tainted: [L]=SOFTLOCKUP [ 434.621563][T12256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 434.621572][T12256] Call Trace: [ 434.621577][T12256] [ 434.621583][T12256] dump_stack_lvl+0x100/0x190 [ 434.621610][T12256] should_fail_ex.cold+0x5/0xa [ 434.621627][T12256] should_failslab+0xc2/0x120 [ 434.621643][T12256] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 434.621665][T12256] ? __alloc_skb+0x140/0x710 [ 434.621687][T12256] __alloc_skb+0x140/0x710 [ 434.621703][T12256] ? __alloc_skb+0x5b7/0x710 [ 434.621721][T12256] ? __pfx___alloc_skb+0x10/0x10 [ 434.621743][T12256] netlink_alloc_large_skb+0x69/0x150 [ 434.621766][T12256] netlink_sendmsg+0x680/0xda0 [ 434.621790][T12256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.621809][T12256] ? __import_iovec+0x1d2/0x640 [ 434.621828][T12256] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 434.621853][T12256] ____sys_sendmsg+0x9e1/0xb70 [ 434.621867][T12256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.621896][T12256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.621919][T12256] ___sys_sendmsg+0x190/0x1e0 [ 434.621936][T12256] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.621973][T12256] __sys_sendmsg+0x170/0x220 [ 434.622063][T12256] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.622093][T12256] do_syscall_64+0x106/0xf80 [ 434.622112][T12256] ? clear_bhb_loop+0x40/0x90 [ 434.622130][T12256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.622145][T12256] RIP: 0033:0x7fa6b9f9c799 [ 434.622158][T12256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.622171][T12256] RSP: 002b:00007fa6b81f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.622186][T12256] RAX: ffffffffffffffda RBX: 00007fa6ba216180 RCX: 00007fa6b9f9c799 [ 434.622196][T12256] RDX: 0000000020000800 RSI: 0000200000000100 RDI: 0000000000000009 [ 434.622205][T12256] RBP: 00007fa6b81f6090 R08: 0000000000000000 R09: 0000000000000000 [ 434.622214][T12256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.622222][T12256] R13: 00007fa6ba216218 R14: 00007fa6ba216180 R15: 00007ffd01377c98 [ 434.622241][T12256] [ 434.622365][T12255] vivid-007: Hotplug Present: 0x00000000 [ 435.468166][T12255] vivid-007: RxSense Present: 0x00000000 [ 435.499083][T12255] vivid-007: EDID Present: 0x00000000 [ 435.519435][T12255] vivid-007: ================== END STATUS ================== [ 435.543433][T12268] vivid-007: ================= START STATUS ================= [ 435.551904][T12268] vivid-007: Enable Output Cropping: true [ 435.568077][T12268] vivid-007: Enable Output Composing: true [ 435.594478][T12268] vivid-007: Enable Output Scaler: true [ 435.607472][T12268] vivid-007: Tx RGB Quantization Range: Automatic [ 435.625263][T12277] FAULT_INJECTION: forcing a failure. [ 435.625263][T12277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.638467][T12268] vivid-007: Transmit Mode: HDMI [ 435.648609][T12268] vivid-007: Hotplug Present: 0x00000000 [ 435.664162][T12268] vivid-007: RxSense Present: 0x00000000 [ 435.671645][T12277] CPU: 0 UID: 0 PID: 12277 Comm: syz.0.1403 Tainted: G L syzkaller #0 PREEMPT(full) [ 435.671672][T12277] Tainted: [L]=SOFTLOCKUP [ 435.671678][T12277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.671688][T12277] Call Trace: [ 435.671694][T12277] [ 435.671701][T12277] dump_stack_lvl+0x100/0x190 [ 435.671729][T12277] should_fail_ex.cold+0x5/0xa [ 435.671749][T12277] _copy_from_user+0x2e/0xd0 [ 435.671767][T12277] io_uring_setup+0xc0/0x160 [ 435.671877][T12277] ? ksys_write+0x190/0x250 [ 435.671894][T12277] ? __pfx_io_uring_setup+0x10/0x10 [ 435.671916][T12277] ? do_futex+0x192/0x350 [ 435.671935][T12277] ? __pfx_do_futex+0x10/0x10 [ 435.671963][T12277] ? xfd_validate_state+0x129/0x190 [ 435.671990][T12277] __x64_sys_io_uring_setup+0xc2/0x170 [ 435.672010][T12277] do_syscall_64+0x106/0xf80 [ 435.672031][T12277] ? clear_bhb_loop+0x40/0x90 [ 435.672049][T12277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.672066][T12277] RIP: 0033:0x7fe58db9c799 [ 435.672079][T12277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.672094][T12277] RSP: 002b:00007fe58ea70028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 435.672109][T12277] RAX: ffffffffffffffda RBX: 00007fe58de15fa0 RCX: 00007fe58db9c799 [ 435.672119][T12277] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001d48 [ 435.672128][T12277] RBP: 00007fe58dc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 435.672137][T12277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.672146][T12277] R13: 00007fe58de16038 R14: 00007fe58de15fa0 R15: 00007ffd88d68b18 [ 435.672166][T12277] [ 435.690581][T12268] vivid-007: EDID Present: 0x00000000 [ 435.690608][T12268] vivid-007: ================== END STATUS ================== [ 435.799474][T12281] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 436.120103][T12287] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 436.750189][T12309] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 438.323831][T12342] vivid-007: ================= START STATUS ================= [ 438.343592][T12342] vivid-007: Enable Output Cropping: true [ 438.371494][T12342] vivid-007: Enable Output Composing: true [ 438.398468][T12342] vivid-007: Enable Output Scaler: true [ 438.432596][T12342] vivid-007: Tx RGB Quantization Range: Automatic [ 438.452261][T12342] vivid-007: Transmit Mode: HDMI [ 438.474733][T12342] vivid-007: Hotplug Present: 0x00000000 [ 438.495628][T12348] block2mtd: illegal erase size [ 438.503213][T12342] vivid-007: RxSense Present: 0x00000000 [ 438.525493][T12342] vivid-007: EDID Present: 0x00000000 [ 438.551905][T12342] vivid-007: ================== END STATUS ================== [ 438.977906][T12354] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 439.745342][T12375] vivid-007: ================= START STATUS ================= [ 439.779458][T12375] vivid-007: Enable Output Cropping: true [ 439.821746][T12375] vivid-007: Enable Output Composing: true [ 439.868645][T12375] vivid-007: Enable Output Scaler: true [ 439.893829][T12375] vivid-007: Tx RGB Quantization Range: Automatic [ 439.923146][T12375] vivid-007: Transmit Mode: HDMI [ 439.955264][T12375] vivid-007: Hotplug Present: 0x00000000 [ 439.979136][T12375] vivid-007: RxSense Present: 0x00000000 [ 440.005584][T12375] vivid-007: EDID Present: 0x00000000 [ 440.034219][T12375] vivid-007: ================== END STATUS ================== [ 440.166442][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.172863][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.247057][T12396] FAULT_INJECTION: forcing a failure. [ 441.247057][T12396] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 441.319675][T12396] CPU: 0 UID: 0 PID: 12396 Comm: syz.2.1432 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.319702][T12396] Tainted: [L]=SOFTLOCKUP [ 441.319708][T12396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 441.319717][T12396] Call Trace: [ 441.319723][T12396] [ 441.319729][T12396] dump_stack_lvl+0x100/0x190 [ 441.319757][T12396] should_fail_ex.cold+0x5/0xa [ 441.319772][T12396] ? prepare_alloc_pages+0x16d/0x5f0 [ 441.319791][T12396] should_fail_alloc_page+0xeb/0x140 [ 441.319809][T12396] prepare_alloc_pages+0x1f0/0x5f0 [ 441.319830][T12396] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 441.319855][T12396] ? __pfx_css_rstat_updated+0x10/0x10 [ 441.319872][T12396] ? kasan_save_stack+0x3f/0x50 [ 441.319894][T12396] ? kasan_save_stack+0x30/0x50 [ 441.319914][T12396] ? kasan_save_track+0x14/0x30 [ 441.319940][T12396] ? rcu_is_watching+0x12/0xc0 [ 441.319963][T12396] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 441.319988][T12396] ? lru_gen_add_folio+0x20f/0x13e0 [ 441.320015][T12396] ? lock_acquire+0x1cf/0x380 [ 441.320034][T12396] ? find_held_lock+0x2b/0x80 [ 441.320047][T12396] ? page_table_check_set+0x49a/0xa10 [ 441.320070][T12396] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 441.320095][T12396] ? policy_nodemask+0xed/0x4f0 [ 441.320112][T12396] alloc_pages_mpol+0x1fb/0x550 [ 441.320129][T12396] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 441.320150][T12396] folio_alloc_mpol_noprof+0x36/0x340 [ 441.320169][T12396] vma_alloc_folio_noprof+0xed/0x1d0 [ 441.320187][T12396] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 441.320211][T12396] do_anonymous_page+0xb3a/0x1fb0 [ 441.320237][T12396] __handle_mm_fault+0x1d42/0x2b60 [ 441.320262][T12396] ? __pfx___handle_mm_fault+0x10/0x10 [ 441.320292][T12396] ? pte_offset_map_lock+0x174/0x320 [ 441.320308][T12396] ? find_held_lock+0x2b/0x80 [ 441.320329][T12396] ? follow_page_pte+0x5b3/0x1400 [ 441.320350][T12396] handle_mm_fault+0x36d/0xa20 [ 441.320375][T12396] __get_user_pages+0xf9c/0x34d0 [ 441.320398][T12396] ? __pfx___get_user_pages+0x10/0x10 [ 441.320420][T12396] populate_vma_page_range+0x267/0x3f0 [ 441.320439][T12396] ? __pfx_populate_vma_page_range+0x10/0x10 [ 441.320457][T12396] ? __pfx_find_vma_intersection+0x10/0x10 [ 441.320473][T12396] ? do_mmap+0x93f/0x12f0 [ 441.320491][T12396] __mm_populate+0x107/0x3a0 [ 441.320510][T12396] ? __pfx___mm_populate+0x10/0x10 [ 441.320528][T12396] ? up_write+0x290/0x4f0 [ 441.320550][T12396] vm_mmap_pgoff+0x37f/0x470 [ 441.320570][T12396] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 441.320588][T12396] ? do_futex+0x192/0x350 [ 441.320607][T12396] ? __pfx_do_futex+0x10/0x10 [ 441.320625][T12396] ? __x64_sys_setitimer+0x266/0x350 [ 441.320646][T12396] ksys_mmap_pgoff+0xe1/0x650 [ 441.320662][T12396] ? __x64_sys_futex+0x34f/0x4d0 [ 441.320680][T12396] ? __x64_sys_futex+0x358/0x4d0 [ 441.320698][T12396] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 441.320714][T12396] ? xfd_validate_state+0x129/0x190 [ 441.320738][T12396] __x64_sys_mmap+0x125/0x190 [ 441.320761][T12396] do_syscall_64+0x106/0xf80 [ 441.320782][T12396] ? clear_bhb_loop+0x40/0x90 [ 441.320801][T12396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.320818][T12396] RIP: 0033:0x7fb38059c799 [ 441.320831][T12396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.320846][T12396] RSP: 002b:00007fb381541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 441.320862][T12396] RAX: ffffffffffffffda RBX: 00007fb380815fa0 RCX: 00007fb38059c799 [ 441.320872][T12396] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 441.320882][T12396] RBP: 00007fb380632c99 R08: 0000000000000002 R09: 0000000000008000 [ 441.320891][T12396] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 441.320901][T12396] R13: 00007fb380816038 R14: 00007fb380815fa0 R15: 00007ffdbc056f38 [ 441.320922][T12396] [ 442.088275][T12397] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 443.105202][T12422] FAULT_INJECTION: forcing a failure. [ 443.105202][T12422] name failslab, interval 1, probability 0, space 0, times 0 [ 443.147291][T12422] CPU: 0 UID: 0 PID: 12422 Comm: syz.2.1437 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.147317][T12422] Tainted: [L]=SOFTLOCKUP [ 443.147323][T12422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.147331][T12422] Call Trace: [ 443.147337][T12422] [ 443.147343][T12422] dump_stack_lvl+0x100/0x190 [ 443.147369][T12422] should_fail_ex.cold+0x5/0xa [ 443.147385][T12422] ? copy_splice_read+0x1a3/0xb90 [ 443.147407][T12422] should_failslab+0xc2/0x120 [ 443.147422][T12422] __kmalloc_noprof+0xe0/0x850 [ 443.147447][T12422] copy_splice_read+0x1a3/0xb90 [ 443.147472][T12422] ? __pfx_copy_splice_read+0x10/0x10 [ 443.147495][T12422] ? look_up_lock_class+0x55/0x120 [ 443.147519][T12422] ? lockdep_init_map_type+0x5c/0x250 [ 443.147538][T12422] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 443.147561][T12422] ? __pfx_copy_splice_read+0x10/0x10 [ 443.147582][T12422] do_splice_read+0x285/0x370 [ 443.147606][T12422] splice_direct_to_actor+0x2a1/0xa30 [ 443.147621][T12422] ? __pfx_direct_splice_actor+0x10/0x10 [ 443.147646][T12422] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 443.147666][T12422] do_splice_direct+0x174/0x240 [ 443.147681][T12422] ? __pfx_do_splice_direct+0x10/0x10 [ 443.147695][T12422] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 443.147719][T12422] ? rw_verify_area+0xce/0x6d0 [ 443.147740][T12422] do_sendfile+0xadc/0xe20 [ 443.147764][T12422] ? __pfx_do_sendfile+0x10/0x10 [ 443.147787][T12422] ? __fget_files+0x21f/0x3d0 [ 443.147805][T12422] __x64_sys_sendfile64+0x1d8/0x220 [ 443.147821][T12422] ? ksys_write+0x1ac/0x250 [ 443.147834][T12422] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 443.147855][T12422] do_syscall_64+0x106/0xf80 [ 443.147873][T12422] ? clear_bhb_loop+0x40/0x90 [ 443.147891][T12422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.147906][T12422] RIP: 0033:0x7fb38059c799 [ 443.147919][T12422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.147932][T12422] RSP: 002b:00007fb381541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 443.147946][T12422] RAX: ffffffffffffffda RBX: 00007fb380815fa0 RCX: 00007fb38059c799 [ 443.147956][T12422] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 443.147965][T12422] RBP: 00007fb381541090 R08: 0000000000000000 R09: 0000000000000000 [ 443.147973][T12422] R10: 0000000e00000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.147982][T12422] R13: 00007fb380816038 R14: 00007fb380815fa0 R15: 00007ffdbc056f38 [ 443.148001][T12422] [ 443.582223][T12429] Kernel: The 'panic_print' parameter is now deprecated. Please use 'panic_sys_info' and 'panic_console_replay' instead. [ 443.705665][T12434] bond0: invalid ARP target specified [ 443.722335][T12434] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1441'. [ 443.759632][T12434] FAULT_INJECTION: forcing a failure. [ 443.759632][T12434] name failslab, interval 1, probability 0, space 0, times 0 [ 443.774210][T12436] block2mtd: illegal erase size [ 443.797915][T12434] CPU: 0 UID: 0 PID: 12434 Comm: syz.2.1441 Tainted: G L syzkaller #0 PREEMPT(full) [ 443.797944][T12434] Tainted: [L]=SOFTLOCKUP [ 443.797950][T12434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 443.797960][T12434] Call Trace: [ 443.797966][T12434] [ 443.797972][T12434] dump_stack_lvl+0x100/0x190 [ 443.798001][T12434] should_fail_ex.cold+0x5/0xa [ 443.798019][T12434] should_failslab+0xc2/0x120 [ 443.798037][T12434] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 443.798061][T12434] ? __d_alloc+0x34/0xa80 [ 443.798086][T12434] ? lockdep_init_map_type+0x5c/0x250 [ 443.798112][T12434] __d_alloc+0x34/0xa80 [ 443.798131][T12434] d_alloc_pseudo+0x1c/0xc0 [ 443.798152][T12434] alloc_file_pseudo+0xcf/0x230 [ 443.798173][T12434] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 443.798192][T12434] ? alloc_fd+0x476/0x790 [ 443.798210][T12434] sock_alloc_file+0x50/0x210 [ 443.798235][T12434] __sys_socket+0x1c0/0x260 [ 443.798252][T12434] ? exc_page_fault+0x6f/0xd0 [ 443.798273][T12434] ? __pfx___sys_socket+0x10/0x10 [ 443.798293][T12434] ? do_user_addr_fault+0x8d6/0x12f0 [ 443.798320][T12434] __x64_sys_socket+0x72/0xb0 [ 443.798336][T12434] ? lockdep_hardirqs_on+0x78/0x100 [ 443.798357][T12434] do_syscall_64+0x106/0xf80 [ 443.798377][T12434] ? clear_bhb_loop+0x40/0x90 [ 443.798396][T12434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.798412][T12434] RIP: 0033:0x7fb38059e007 [ 443.798428][T12434] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 443.798443][T12434] RSP: 002b:00007fb38153ff98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 443.798460][T12434] RAX: ffffffffffffffda RBX: 00007fb380815fa0 RCX: 00007fb38059e007 [ 443.798471][T12434] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 443.798481][T12434] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 443.798490][T12434] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 443.798500][T12434] R13: 00007fb380816038 R14: 00007fb380815fa0 R15: 00007ffdbc056f38 [ 443.798519][T12434] [ 444.163891][T12446] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 444.203945][T12447] vivid-007: ================= START STATUS ================= [ 444.212669][T12447] vivid-007: Enable Output Cropping: true [ 444.218515][T12447] vivid-007: Enable Output Composing: true [ 444.224342][T12447] vivid-007: Enable Output Scaler: true [ 444.229873][T12447] vivid-007: Tx RGB Quantization Range: Automatic [ 444.237398][T12447] vivid-007: Transmit Mode: HDMI [ 444.267084][T12447] vivid-007: Hotplug Present: 0x00000000 [ 444.283875][T12448] FAULT_INJECTION: forcing a failure. [ 444.283875][T12448] name failslab, interval 1, probability 0, space 0, times 0 [ 444.346149][T12447] vivid-007: RxSense Present: 0x00000000 [ 444.351832][T12447] vivid-007: EDID Present: 0x00000000 [ 444.409232][T12448] CPU: 0 UID: 0 PID: 12448 Comm: syz.1.1445 Tainted: G L syzkaller #0 PREEMPT(full) [ 444.409257][T12448] Tainted: [L]=SOFTLOCKUP [ 444.409263][T12448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 444.409273][T12448] Call Trace: [ 444.409279][T12448] [ 444.409285][T12448] dump_stack_lvl+0x100/0x190 [ 444.409310][T12448] should_fail_ex.cold+0x5/0xa [ 444.409328][T12448] should_failslab+0xc2/0x120 [ 444.409345][T12448] __kmalloc_cache_noprof+0x7a/0x6f0 [ 444.409363][T12448] ? genl_start+0x1e8/0x970 [ 444.409377][T12448] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 444.409397][T12448] genl_start+0x1e8/0x970 [ 444.409414][T12448] __netlink_dump_start+0x60e/0x990 [ 444.409437][T12448] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 444.409454][T12448] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 444.409473][T12448] ? rcu_is_watching+0x12/0xc0 [ 444.409495][T12448] ? __pfx_genl_start+0x10/0x10 [ 444.409507][T12448] ? __pfx_genl_dumpit+0x10/0x10 [ 444.409520][T12448] ? __pfx_genl_done+0x10/0x10 [ 444.409535][T12448] ? bpf_lsm_capable+0x9/0x10 [ 444.409550][T12448] ? security_capable+0x80/0x260 [ 444.409645][T12448] genl_rcv_msg+0x471/0x800 [ 444.409663][T12448] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.409678][T12448] ? __pfx_ip_vs_genl_dump_services+0x10/0x10 [ 444.409738][T12448] netlink_rcv_skb+0x159/0x420 [ 444.409759][T12448] ? __pfx_genl_rcv_msg+0x10/0x10 [ 444.409775][T12448] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 444.409803][T12448] ? netlink_deliver_tap+0x1ae/0xcc0 [ 444.409826][T12448] genl_rcv+0x28/0x40 [ 444.409838][T12448] netlink_unicast+0x5aa/0x870 [ 444.409862][T12448] ? __pfx_netlink_unicast+0x10/0x10 [ 444.409889][T12448] netlink_sendmsg+0x8b0/0xda0 [ 444.409913][T12448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.409933][T12448] ? __import_iovec+0x1d2/0x640 [ 444.409951][T12448] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 444.409977][T12448] ____sys_sendmsg+0x9e1/0xb70 [ 444.409997][T12448] ? __pfx_netlink_sendmsg+0x10/0x10 [ 444.410019][T12448] ? __pfx_____sys_sendmsg+0x10/0x10 [ 444.410042][T12448] ___sys_sendmsg+0x190/0x1e0 [ 444.410059][T12448] ? __pfx____sys_sendmsg+0x10/0x10 [ 444.410098][T12448] __sys_sendmsg+0x170/0x220 [ 444.410118][T12448] ? __pfx___sys_sendmsg+0x10/0x10 [ 444.410149][T12448] do_syscall_64+0x106/0xf80 [ 444.410168][T12448] ? clear_bhb_loop+0x40/0x90 [ 444.410186][T12448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.410200][T12448] RIP: 0033:0x7ffa9a39c799 [ 444.410213][T12448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 444.410227][T12448] RSP: 002b:00007ffa9b2da028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 444.410241][T12448] RAX: ffffffffffffffda RBX: 00007ffa9a616180 RCX: 00007ffa9a39c799 [ 444.410251][T12448] RDX: 0000000020000800 RSI: 0000200000000100 RDI: 0000000000000009 [ 444.410260][T12448] RBP: 00007ffa9b2da090 R08: 0000000000000000 R09: 0000000000000000 [ 444.410268][T12448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.410277][T12448] R13: 00007ffa9a616218 R14: 00007ffa9a616180 R15: 00007ffdfae8d4c8 [ 444.410296][T12448] [ 444.723375][T12447] vivid-007: ================== END STATUS ================== [ 444.794802][T12457] vivid-007: ================= START STATUS ================= [ 444.802682][T12457] vivid-007: Enable Output Cropping: true [ 444.808452][T12457] vivid-007: Enable Output Composing: true [ 444.814251][T12457] vivid-007: Enable Output Scaler: true [ 444.820899][T12457] vivid-007: Tx RGB Quantization Range: Automatic [ 444.827470][T12457] vivid-007: Transmit Mode: HDMI [ 444.832400][T12457] vivid-007: Hotplug Present: 0x00000000 [ 444.838063][T12457] vivid-007: RxSense Present: 0x00000000 [ 444.843686][T12457] vivid-007: EDID Present: 0x00000000 [ 444.849098][T12457] vivid-007: ================== END STATUS ================== [ 445.036953][T12462] FAULT_INJECTION: forcing a failure. [ 445.036953][T12462] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 445.051501][T12462] CPU: 0 UID: 0 PID: 12462 Comm: syz.2.1449 Tainted: G L syzkaller #0 PREEMPT(full) [ 445.051525][T12462] Tainted: [L]=SOFTLOCKUP [ 445.051531][T12462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 445.051540][T12462] Call Trace: [ 445.051545][T12462] [ 445.051551][T12462] dump_stack_lvl+0x100/0x190 [ 445.051577][T12462] should_fail_ex.cold+0x5/0xa [ 445.051592][T12462] ? prepare_alloc_pages+0x16d/0x5f0 [ 445.051610][T12462] should_fail_alloc_page+0xeb/0x140 [ 445.051626][T12462] prepare_alloc_pages+0x1f0/0x5f0 [ 445.051641][T12462] ? kernel_text_address+0x8d/0x100 [ 445.051664][T12462] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 445.051690][T12462] ? copy_splice_read+0x1a3/0xb90 [ 445.051712][T12462] ? stack_trace_save+0x8e/0xc0 [ 445.051726][T12462] ? __pfx_stack_trace_save+0x10/0x10 [ 445.051741][T12462] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 445.051764][T12462] ? copy_splice_read+0x1a3/0xb90 [ 445.051784][T12462] ? kasan_save_stack+0x3f/0x50 [ 445.051803][T12462] ? kasan_save_stack+0x30/0x50 [ 445.051822][T12462] ? kasan_save_track+0x14/0x30 [ 445.051841][T12462] ? __kasan_kmalloc+0xaa/0xb0 [ 445.051860][T12462] ? __kmalloc_noprof+0x301/0x850 [ 445.051879][T12462] ? copy_splice_read+0x1a3/0xb90 [ 445.051898][T12462] ? do_splice_read+0x285/0x370 [ 445.051920][T12462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.051951][T12462] alloc_pages_bulk_noprof+0x782/0x1490 [ 445.051978][T12462] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 445.052004][T12462] ? __kmalloc_noprof+0x320/0x850 [ 445.052026][T12462] copy_splice_read+0x1e1/0xb90 [ 445.052052][T12462] ? __pfx_copy_splice_read+0x10/0x10 [ 445.052074][T12462] ? look_up_lock_class+0x55/0x120 [ 445.052097][T12462] ? lockdep_init_map_type+0x5c/0x250 [ 445.052116][T12462] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 445.052139][T12462] ? __pfx_copy_splice_read+0x10/0x10 [ 445.052159][T12462] do_splice_read+0x285/0x370 [ 445.052183][T12462] splice_direct_to_actor+0x2a1/0xa30 [ 445.052198][T12462] ? __pfx_direct_splice_actor+0x10/0x10 [ 445.052224][T12462] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 445.052243][T12462] do_splice_direct+0x174/0x240 [ 445.052258][T12462] ? __pfx_do_splice_direct+0x10/0x10 [ 445.052272][T12462] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 445.052296][T12462] ? rw_verify_area+0xce/0x6d0 [ 445.052317][T12462] do_sendfile+0xadc/0xe20 [ 445.052341][T12462] ? __pfx_do_sendfile+0x10/0x10 [ 445.052361][T12462] ? __fget_files+0x21f/0x3d0 [ 445.052379][T12462] __x64_sys_sendfile64+0x1d8/0x220 [ 445.052394][T12462] ? ksys_write+0x1ac/0x250 [ 445.052407][T12462] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 445.052428][T12462] do_syscall_64+0x106/0xf80 [ 445.052446][T12462] ? clear_bhb_loop+0x40/0x90 [ 445.052464][T12462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.052479][T12462] RIP: 0033:0x7fb38059c799 [ 445.052492][T12462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.052506][T12462] RSP: 002b:00007fb381541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 445.052520][T12462] RAX: ffffffffffffffda RBX: 00007fb380815fa0 RCX: 00007fb38059c799 [ 445.052530][T12462] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 445.052538][T12462] RBP: 00007fb381541090 R08: 0000000000000000 R09: 0000000000000000 [ 445.052547][T12462] R10: 0000000e00000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.052556][T12462] R13: 00007fb380816038 R14: 00007fb380815fa0 R15: 00007ffdbc056f38 [ 445.052574][T12462] [ 446.086397][T12477] bond0: invalid ARP target specified [ 446.098345][T12477] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1454'. [ 446.699726][T12497] block2mtd: illegal erase size [ 448.122825][T12527] vivid-007: ================= START STATUS ================= [ 448.140136][T12527] vivid-007: Enable Output Cropping: true [ 448.160887][T12527] vivid-007: Enable Output Composing: true [ 448.176969][T12529] bond0: invalid ARP target specified [ 448.189159][T12527] vivid-007: Enable Output Scaler: true [ 448.202862][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1466'. [ 448.218153][T12527] vivid-007: Tx RGB Quantization Range: Automatic [ 448.234639][T12527] vivid-007: Transmit Mode: HDMI [ 448.248994][T12529] FAULT_INJECTION: forcing a failure. [ 448.248994][T12529] name failslab, interval 1, probability 0, space 0, times 0 [ 448.266453][T12527] vivid-007: Hotplug Present: 0x00000000 [ 448.280783][T12527] vivid-007: RxSense Present: 0x00000000 [ 448.292241][T12529] CPU: 0 UID: 0 PID: 12529 Comm: syz.0.1466 Tainted: G L syzkaller #0 PREEMPT(full) [ 448.292267][T12529] Tainted: [L]=SOFTLOCKUP [ 448.292273][T12529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 448.292283][T12529] Call Trace: [ 448.292289][T12529] [ 448.292295][T12529] dump_stack_lvl+0x100/0x190 [ 448.292323][T12529] should_fail_ex.cold+0x5/0xa [ 448.292343][T12529] should_failslab+0xc2/0x120 [ 448.292359][T12529] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 448.292381][T12529] ? alloc_empty_file+0x55/0x1c0 [ 448.292403][T12529] alloc_empty_file+0x55/0x1c0 [ 448.292423][T12529] alloc_file_pseudo+0x13a/0x230 [ 448.292442][T12529] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 448.292460][T12529] ? alloc_fd+0x476/0x790 [ 448.292478][T12529] sock_alloc_file+0x50/0x210 [ 448.292502][T12529] __sys_socket+0x1c0/0x260 [ 448.292518][T12529] ? exc_page_fault+0x6f/0xd0 [ 448.292538][T12529] ? __pfx___sys_socket+0x10/0x10 [ 448.292556][T12529] ? do_user_addr_fault+0x8d6/0x12f0 [ 448.292583][T12529] __x64_sys_socket+0x72/0xb0 [ 448.292599][T12529] ? lockdep_hardirqs_on+0x78/0x100 [ 448.292619][T12529] do_syscall_64+0x106/0xf80 [ 448.292646][T12529] ? clear_bhb_loop+0x40/0x90 [ 448.292666][T12529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.292683][T12529] RIP: 0033:0x7fe58db9e007 [ 448.292696][T12529] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.292711][T12529] RSP: 002b:00007fe58ea6ef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 448.292727][T12529] RAX: ffffffffffffffda RBX: 00007fe58de15fa0 RCX: 00007fe58db9e007 [ 448.292737][T12529] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 448.292746][T12529] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 448.292755][T12529] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 448.292764][T12529] R13: 00007fe58de16038 R14: 00007fe58de15fa0 R15: 00007ffd88d68b18 [ 448.292783][T12529] [ 448.292945][T12527] vivid-007: EDID Present: [ 448.966130][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1472'. [ 448.982513][T12546] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 449.037431][T12527] 0x00000000 [ 449.040665][T12527] vivid-007: ================== END STATUS ================== [ 449.069111][T12551] netlink: 'syz.1.1472': attribute type 1 has an invalid length. [ 449.124158][T12551] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1472'. [ 449.204093][T12556] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 449.306195][T12556] FAULT_INJECTION: forcing a failure. [ 449.306195][T12556] name failslab, interval 1, probability 0, space 0, times 0 [ 449.368620][T12556] CPU: 0 UID: 0 PID: 12556 Comm: syz.2.1474 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.368648][T12556] Tainted: [L]=SOFTLOCKUP [ 449.368654][T12556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 449.368663][T12556] Call Trace: [ 449.368669][T12556] [ 449.368676][T12556] dump_stack_lvl+0x100/0x190 [ 449.368703][T12556] should_fail_ex.cold+0x5/0xa [ 449.368722][T12556] ? tomoyo_realpath_from_path+0xb6/0x690 [ 449.368743][T12556] should_failslab+0xc2/0x120 [ 449.368761][T12556] __kmalloc_noprof+0xe0/0x850 [ 449.368788][T12556] tomoyo_realpath_from_path+0xb6/0x690 [ 449.368811][T12556] tomoyo_check_open_permission+0x2af/0x3c0 [ 449.368829][T12556] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 449.368864][T12556] ? do_raw_spin_lock+0x128/0x260 [ 449.368886][T12556] ? path_get+0x61/0x80 [ 449.368905][T12556] tomoyo_file_open+0x6b/0x90 [ 449.368926][T12556] security_file_open+0xb5/0x1e0 [ 449.368944][T12556] do_dentry_open+0x5aa/0x1660 [ 449.368961][T12556] ? security_inode_permission+0xbf/0x250 [ 449.368980][T12556] vfs_open+0x82/0x3f0 [ 449.369000][T12556] path_openat+0x208c/0x31a0 [ 449.369022][T12556] ? __pfx_path_openat+0x10/0x10 [ 449.369044][T12556] do_file_open+0x20e/0x430 [ 449.369061][T12556] ? __pfx_do_file_open+0x10/0x10 [ 449.369090][T12556] ? alloc_fd+0x476/0x790 [ 449.369107][T12556] ? do_getname+0x191/0x390 [ 449.369126][T12556] do_sys_openat2+0x10d/0x1e0 [ 449.369145][T12556] ? __pfx_do_sys_openat2+0x10/0x10 [ 449.369171][T12556] __x64_sys_openat+0x12d/0x210 [ 449.369190][T12556] ? __pfx___x64_sys_openat+0x10/0x10 [ 449.369217][T12556] do_syscall_64+0x106/0xf80 [ 449.369245][T12556] ? clear_bhb_loop+0x40/0x90 [ 449.369265][T12556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.369281][T12556] RIP: 0033:0x7fb38059c799 [ 449.369295][T12556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.369310][T12556] RSP: 002b:00007fb381541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 449.369327][T12556] RAX: ffffffffffffffda RBX: 00007fb380815fa0 RCX: 00007fb38059c799 [ 449.369338][T12556] RDX: 0000000000141400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 449.369348][T12556] RBP: 00007fb380632c99 R08: 0000000000000000 R09: 0000000000000000 [ 449.369357][T12556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 449.369366][T12556] R13: 00007fb380816038 R14: 00007fb380815fa0 R15: 00007ffdbc056f38 [ 449.369386][T12556] [ 449.369410][T12556] ERROR: Out of memory at tomoyo_realpath_from_path. [ 449.923498][T12565] bond0: invalid ARP target specified [ 449.970296][T12565] FAULT_INJECTION: forcing a failure. [ 449.970296][T12565] name failslab, interval 1, probability 0, space 0, times 0 [ 450.005822][T12565] CPU: 0 UID: 0 PID: 12565 Comm: syz.3.1478 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.005849][T12565] Tainted: [L]=SOFTLOCKUP [ 450.005855][T12565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.005865][T12565] Call Trace: [ 450.005871][T12565] [ 450.005877][T12565] dump_stack_lvl+0x100/0x190 [ 450.005904][T12565] should_fail_ex.cold+0x5/0xa [ 450.005923][T12565] should_failslab+0xc2/0x120 [ 450.005939][T12565] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 450.005961][T12565] ? security_file_alloc+0x34/0x2c0 [ 450.005979][T12565] ? trace_kmem_cache_alloc+0xf3/0x120 [ 450.005997][T12565] security_file_alloc+0x34/0x2c0 [ 450.006015][T12565] init_file+0x95/0x480 [ 450.006033][T12565] alloc_empty_file+0x73/0x1c0 [ 450.006052][T12565] alloc_file_pseudo+0x13a/0x230 [ 450.006071][T12565] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 450.006089][T12565] ? alloc_fd+0x476/0x790 [ 450.006107][T12565] sock_alloc_file+0x50/0x210 [ 450.006130][T12565] __sys_socket+0x1c0/0x260 [ 450.006145][T12565] ? exc_page_fault+0x6f/0xd0 [ 450.006165][T12565] ? __pfx___sys_socket+0x10/0x10 [ 450.006184][T12565] ? do_user_addr_fault+0x8d6/0x12f0 [ 450.006210][T12565] __x64_sys_socket+0x72/0xb0 [ 450.006226][T12565] ? lockdep_hardirqs_on+0x78/0x100 [ 450.006246][T12565] do_syscall_64+0x106/0xf80 [ 450.006266][T12565] ? clear_bhb_loop+0x40/0x90 [ 450.006284][T12565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.006299][T12565] RIP: 0033:0x7fa6b9f9e007 [ 450.006313][T12565] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.006328][T12565] RSP: 002b:00007fa6bada8f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 450.006343][T12565] RAX: ffffffffffffffda RBX: 00007fa6ba215fa0 RCX: 00007fa6b9f9e007 [ 450.006353][T12565] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 450.006362][T12565] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 450.006371][T12565] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 450.006381][T12565] R13: 00007fa6ba216038 R14: 00007fa6ba215fa0 R15: 00007ffd01377c98 [ 450.006400][T12565] [ 450.449244][T12568] bond0: invalid ARP target specified [ 450.486840][T12568] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1479'. [ 450.528618][T12568] FAULT_INJECTION: forcing a failure. [ 450.528618][T12568] name failslab, interval 1, probability 0, space 0, times 0 [ 450.571264][T12568] CPU: 0 UID: 0 PID: 12568 Comm: syz.1.1479 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.571293][T12568] Tainted: [L]=SOFTLOCKUP [ 450.571300][T12568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 450.571310][T12568] Call Trace: [ 450.571316][T12568] [ 450.571323][T12568] dump_stack_lvl+0x100/0x190 [ 450.571360][T12568] should_fail_ex.cold+0x5/0xa [ 450.571380][T12568] should_failslab+0xc2/0x120 [ 450.571397][T12568] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 450.571420][T12568] ? security_inode_alloc+0x3b/0x2c0 [ 450.571437][T12568] ? lockdep_init_map_type+0x5c/0x250 [ 450.571460][T12568] security_inode_alloc+0x3b/0x2c0 [ 450.571475][T12568] inode_init_always_gfp+0xced/0x1040 [ 450.571494][T12568] alloc_inode+0x8e/0x250 [ 450.571513][T12568] sock_alloc+0x44/0x280 [ 450.571535][T12568] ? security_socket_create+0x7f/0x250 [ 450.571558][T12568] __sock_create+0xc2/0x860 [ 450.571577][T12568] __sys_socket+0x14d/0x260 [ 450.571593][T12568] ? exc_page_fault+0x6f/0xd0 [ 450.571614][T12568] ? __pfx___sys_socket+0x10/0x10 [ 450.571631][T12568] ? do_user_addr_fault+0x8d6/0x12f0 [ 450.571657][T12568] __x64_sys_socket+0x72/0xb0 [ 450.571672][T12568] ? lockdep_hardirqs_on+0x78/0x100 [ 450.571692][T12568] do_syscall_64+0x106/0xf80 [ 450.571712][T12568] ? clear_bhb_loop+0x40/0x90 [ 450.571730][T12568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.571745][T12568] RIP: 0033:0x7ffa9a39e007 [ 450.571759][T12568] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.571773][T12568] RSP: 002b:00007ffa9b31af98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 450.571789][T12568] RAX: ffffffffffffffda RBX: 00007ffa9a615fa0 RCX: 00007ffa9a39e007 [ 450.571799][T12568] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 450.571808][T12568] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 450.571817][T12568] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 450.571827][T12568] R13: 00007ffa9a616038 R14: 00007ffa9a615fa0 R15: 00007ffdfae8d4c8 [ 450.571847][T12568] [ 450.571927][T12568] socket: no more sockets [ 450.867234][T12556] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 451.018256][T12581] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 451.754506][T12597] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1487'. [ 451.924694][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1489'. [ 451.967247][T12603] tc_dump_action: action bad kind [ 452.772669][T12619] FAULT_INJECTION: forcing a failure. [ 452.772669][T12619] name failslab, interval 1, probability 0, space 0, times 0 [ 452.847562][T12619] CPU: 0 UID: 0 PID: 12619 Comm: syz.0.1493 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.847591][T12619] Tainted: [L]=SOFTLOCKUP [ 452.847597][T12619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 452.847606][T12619] Call Trace: [ 452.847613][T12619] [ 452.847619][T12619] dump_stack_lvl+0x100/0x190 [ 452.847649][T12619] should_fail_ex.cold+0x5/0xa [ 452.847667][T12619] ? tomoyo_encode2+0xfb/0x3c0 [ 452.847686][T12619] should_failslab+0xc2/0x120 [ 452.847703][T12619] __kmalloc_noprof+0xe0/0x850 [ 452.847724][T12619] ? d_absolute_path+0x136/0x1b0 [ 452.847748][T12619] tomoyo_encode2+0xfb/0x3c0 [ 452.847770][T12619] tomoyo_encode+0x29/0x50 [ 452.847787][T12619] tomoyo_realpath_from_path+0x18c/0x690 [ 452.847810][T12619] tomoyo_check_open_permission+0x2af/0x3c0 [ 452.847827][T12619] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 452.847863][T12619] ? do_raw_spin_lock+0x128/0x260 [ 452.847885][T12619] ? path_get+0x61/0x80 [ 452.847904][T12619] tomoyo_file_open+0x6b/0x90 [ 452.847925][T12619] security_file_open+0xb5/0x1e0 [ 452.847944][T12619] do_dentry_open+0x5aa/0x1660 [ 452.847960][T12619] ? security_inode_permission+0xbf/0x250 [ 452.847979][T12619] vfs_open+0x82/0x3f0 [ 452.847999][T12619] path_openat+0x208c/0x31a0 [ 452.848021][T12619] ? __pfx_path_openat+0x10/0x10 [ 452.848043][T12619] do_file_open+0x20e/0x430 [ 452.848059][T12619] ? __pfx_do_file_open+0x10/0x10 [ 452.848089][T12619] ? alloc_fd+0x476/0x790 [ 452.848105][T12619] ? do_getname+0x191/0x390 [ 452.848124][T12619] do_sys_openat2+0x10d/0x1e0 [ 452.848143][T12619] ? __pfx_do_sys_openat2+0x10/0x10 [ 452.848179][T12619] __x64_sys_openat+0x12d/0x210 [ 452.848199][T12619] ? __pfx___x64_sys_openat+0x10/0x10 [ 452.848227][T12619] do_syscall_64+0x106/0xf80 [ 452.848248][T12619] ? clear_bhb_loop+0x40/0x90 [ 452.848266][T12619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.848282][T12619] RIP: 0033:0x7fe58db9c799 [ 452.848296][T12619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.848312][T12619] RSP: 002b:00007fe58ea70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 452.848328][T12619] RAX: ffffffffffffffda RBX: 00007fe58de15fa0 RCX: 00007fe58db9c799 [ 452.848338][T12619] RDX: 0000000000141400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 452.848348][T12619] RBP: 00007fe58dc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 452.848358][T12619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.848368][T12619] R13: 00007fe58de16038 R14: 00007fe58de15fa0 R15: 00007ffd88d68b18 [ 452.848388][T12619] [ 452.848408][T12619] ERROR: Out of memory at tomoyo_realpath_from_path. [ 453.266453][T12627] block2mtd: illegal erase size [ 455.151652][T12667] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1504'. [ 455.230025][T12652] zswap: compressor  not available [ 455.258323][T12663] bond0: invalid ARP target specified [ 455.500170][T12677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1505'. [ 456.869073][T12700] FAULT_INJECTION: forcing a failure. [ 456.869073][T12700] name failslab, interval 1, probability 0, space 0, times 0 [ 456.939792][T12700] CPU: 0 UID: 0 PID: 12700 Comm: syz.2.1509 Tainted: G L syzkaller #0 PREEMPT(full) [ 456.939820][T12700] Tainted: [L]=SOFTLOCKUP [ 456.939826][T12700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 456.939845][T12700] Call Trace: [ 456.939850][T12700] [ 456.939858][T12700] dump_stack_lvl+0x100/0x190 [ 456.939887][T12700] should_fail_ex.cold+0x5/0xa [ 456.939906][T12700] ? tomoyo_realpath_from_path+0xb6/0x690 [ 456.939927][T12700] should_failslab+0xc2/0x120 [ 456.939943][T12700] __kmalloc_noprof+0xe0/0x850 [ 456.939969][T12700] tomoyo_realpath_from_path+0xb6/0x690 [ 456.939993][T12700] tomoyo_check_open_permission+0x2af/0x3c0 [ 456.940010][T12700] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 456.940045][T12700] ? do_raw_spin_lock+0x128/0x260 [ 456.940067][T12700] ? path_get+0x61/0x80 [ 456.940086][T12700] tomoyo_file_open+0x6b/0x90 [ 456.940107][T12700] security_file_open+0xb5/0x1e0 [ 456.940125][T12700] do_dentry_open+0x5aa/0x1660 [ 456.940142][T12700] ? security_inode_permission+0xbf/0x250 [ 456.940161][T12700] vfs_open+0x82/0x3f0 [ 456.940182][T12700] path_openat+0x208c/0x31a0 [ 456.940203][T12700] ? __pfx_path_openat+0x10/0x10 [ 456.940226][T12700] do_file_open+0x20e/0x430 [ 456.940242][T12700] ? __pfx_do_file_open+0x10/0x10 [ 456.940271][T12700] ? alloc_fd+0x476/0x790 [ 456.940288][T12700] ? do_getname+0x191/0x390 [ 456.940307][T12700] do_sys_openat2+0x10d/0x1e0 [ 456.940325][T12700] ? __pfx_do_sys_openat2+0x10/0x10 [ 456.940351][T12700] __x64_sys_openat+0x12d/0x210 [ 456.940371][T12700] ? __pfx___x64_sys_openat+0x10/0x10 [ 456.940397][T12700] do_syscall_64+0x106/0xf80 [ 456.940417][T12700] ? clear_bhb_loop+0x40/0x90 [ 456.940435][T12700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.940451][T12700] RIP: 0033:0x7fb38059c799 [ 456.940465][T12700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.940480][T12700] RSP: 002b:00007fb381541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 456.940495][T12700] RAX: ffffffffffffffda RBX: 00007fb380815fa0 RCX: 00007fb38059c799 [ 456.940505][T12700] RDX: 0000000000141400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 456.940515][T12700] RBP: 00007fb380632c99 R08: 0000000000000000 R09: 0000000000000000 [ 456.940524][T12700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 456.940533][T12700] R13: 00007fb380816038 R14: 00007fb380815fa0 R15: 00007ffdbc056f38 [ 456.940557][T12700] [ 457.499001][T12707] bond0: invalid ARP target specified [ 458.020178][T12700] ERROR: Out of memory at tomoyo_realpath_from_path. [ 458.084624][T12700] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 458.150621][T12700] netlink: 'syz.2.1509': attribute type 11 has an invalid length. [ 458.194209][T12700] netlink: 'syz.2.1509': attribute type 11 has an invalid length. [ 458.239786][T12700] netlink: 'syz.2.1509': attribute type 11 has an invalid length. [ 461.373015][T12755] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 462.758238][T12781] kvm: user requested TSC rate below hardware speed [ 463.776544][T12801] FAULT_INJECTION: forcing a failure. [ 463.776544][T12801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.838512][T12801] CPU: 0 UID: 0 PID: 12801 Comm: syz.0.1534 Tainted: G L syzkaller #0 PREEMPT(full) [ 463.838537][T12801] Tainted: [L]=SOFTLOCKUP [ 463.838543][T12801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 463.838552][T12801] Call Trace: [ 463.838558][T12801] [ 463.838564][T12801] dump_stack_lvl+0x100/0x190 [ 463.838592][T12801] should_fail_ex.cold+0x5/0xa [ 463.838609][T12801] _copy_to_user+0x32/0xd0 [ 463.838628][T12801] simple_read_from_buffer+0xcb/0x170 [ 463.838651][T12801] proc_fail_nth_read+0x1af/0x230 [ 463.838670][T12801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.838688][T12801] ? rw_verify_area+0xce/0x6d0 [ 463.838708][T12801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 463.838724][T12801] vfs_read+0x1e4/0xb30 [ 463.838748][T12801] ? __pfx_vfs_read+0x10/0x10 [ 463.838768][T12801] ? __fget_files+0x215/0x3d0 [ 463.838786][T12801] ? __fget_files+0x21f/0x3d0 [ 463.838804][T12801] ksys_read+0x12a/0x250 [ 463.838824][T12801] ? __pfx_ksys_read+0x10/0x10 [ 463.838850][T12801] do_syscall_64+0x106/0xf80 [ 463.838870][T12801] ? clear_bhb_loop+0x40/0x90 [ 463.838887][T12801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.838902][T12801] RIP: 0033:0x7fe58db5cfce [ 463.838914][T12801] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 463.838928][T12801] RSP: 002b:00007fe58ea6ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 463.838943][T12801] RAX: ffffffffffffffda RBX: 00007fe58ea706c0 RCX: 00007fe58db5cfce [ 463.838953][T12801] RDX: 000000000000000f RSI: 00007fe58ea700a0 RDI: 0000000000000004 [ 463.838962][T12801] RBP: 00007fe58ea70090 R08: 0000000000000000 R09: 0000000000000000 [ 463.838971][T12801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.838980][T12801] R13: 00007fe58de16038 R14: 00007fe58de15fa0 R15: 00007ffd88d68b18 [ 463.839000][T12801] [ 464.446091][T12813] block2mtd: illegal erase size [ 465.185662][T12825] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1540'. [ 467.604851][T12853] bond0: invalid ARP target specified [ 467.694107][T12853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1547'. [ 469.347662][T12887] vivid-007: ================= START STATUS ================= [ 469.380498][T12887] vivid-007: Enable Output Cropping: true [ 469.430547][T12887] vivid-007: Enable Output Composing: true [ 469.436412][T12887] vivid-007: Enable Output Scaler: true [ 469.482163][T12887] vivid-007: Tx RGB Quantization Range: Automatic [ 469.527005][T12887] vivid-007: Transmit Mode: HDMI [ 469.553745][T12887] vivid-007: Hotplug Present: 0x00000000 [ 469.593936][T12887] vivid-007: RxSense Present: 0x00000000 [ 469.621194][T12887] vivid-007: EDID Present: 0x00000000 [ 469.647459][T12887] vivid-007: ================== END STATUS ================== [ 471.582021][T12952] FAULT_INJECTION: forcing a failure. [ 471.582021][T12952] name failslab, interval 1, probability 0, space 0, times 0 [ 471.648587][T12952] CPU: 0 UID: 0 PID: 12952 Comm: syz.0.1572 Tainted: G L syzkaller #0 PREEMPT(full) [ 471.648619][T12952] Tainted: [L]=SOFTLOCKUP [ 471.648625][T12952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 471.648634][T12952] Call Trace: [ 471.648640][T12952] [ 471.648646][T12952] dump_stack_lvl+0x100/0x190 [ 471.648673][T12952] should_fail_ex.cold+0x5/0xa [ 471.648691][T12952] ? tomoyo_realpath_from_path+0xb6/0x690 [ 471.648710][T12952] should_failslab+0xc2/0x120 [ 471.648726][T12952] __kmalloc_noprof+0xe0/0x850 [ 471.648751][T12952] tomoyo_realpath_from_path+0xb6/0x690 [ 471.648773][T12952] tomoyo_path_number_perm+0x23c/0x580 [ 471.648787][T12952] ? tomoyo_path_number_perm+0x22e/0x580 [ 471.648804][T12952] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 471.648837][T12952] ? find_held_lock+0x2b/0x80 [ 471.648851][T12952] ? __fget_files+0x215/0x3d0 [ 471.648863][T12952] ? hook_file_ioctl_common+0x146/0x410 [ 471.648883][T12952] ? __fget_files+0x21f/0x3d0 [ 471.648899][T12952] security_file_ioctl+0xd3/0x230 [ 471.648952][T12952] __x64_sys_ioctl+0xb7/0x210 [ 471.648973][T12952] do_syscall_64+0x106/0xf80 [ 471.648993][T12952] ? clear_bhb_loop+0x40/0x90 [ 471.649011][T12952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.649026][T12952] RIP: 0033:0x7fe58db9c799 [ 471.649038][T12952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.649052][T12952] RSP: 002b:00007fe58ea70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 471.649067][T12952] RAX: ffffffffffffffda RBX: 00007fe58de15fa0 RCX: 00007fe58db9c799 [ 471.649077][T12952] RDX: 0000000000000003 RSI: 000000004008af10 RDI: 0000000000000004 [ 471.649086][T12952] RBP: 00007fe58ea70090 R08: 0000000000000000 R09: 0000000000000000 [ 471.649095][T12952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 471.649104][T12952] R13: 00007fe58de16038 R14: 00007fe58de15fa0 R15: 00007ffd88d68b18 [ 471.649130][T12952] [ 471.649455][T12952] ERROR: Out of memory at tomoyo_realpath_from_path. [ 473.711822][T13020] FAULT_INJECTION: forcing a failure. [ 473.711822][T13020] name failslab, interval 1, probability 0, space 0, times 0 [ 473.762258][T13020] CPU: 0 UID: 0 PID: 13020 Comm: syz.2.1586 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.762285][T13020] Tainted: [L]=SOFTLOCKUP [ 473.762291][T13020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.762299][T13020] Call Trace: [ 473.762305][T13020] [ 473.762311][T13020] dump_stack_lvl+0x100/0x190 [ 473.762339][T13020] should_fail_ex.cold+0x5/0xa [ 473.762357][T13020] ? tomoyo_encode2+0xfb/0x3c0 [ 473.762375][T13020] should_failslab+0xc2/0x120 [ 473.762390][T13020] __kmalloc_noprof+0xe0/0x850 [ 473.762410][T13020] ? d_absolute_path+0x136/0x1b0 [ 473.762433][T13020] tomoyo_encode2+0xfb/0x3c0 [ 473.762453][T13020] tomoyo_encode+0x29/0x50 [ 473.762469][T13020] tomoyo_realpath_from_path+0x18c/0x690 [ 473.762491][T13020] tomoyo_path_number_perm+0x23c/0x580 [ 473.762506][T13020] ? tomoyo_path_number_perm+0x22e/0x580 [ 473.762522][T13020] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 473.762556][T13020] ? find_held_lock+0x2b/0x80 [ 473.762569][T13020] ? __fget_files+0x215/0x3d0 [ 473.762582][T13020] ? hook_file_ioctl_common+0x146/0x410 [ 473.762602][T13020] ? __fget_files+0x21f/0x3d0 [ 473.762618][T13020] security_file_ioctl+0xd3/0x230 [ 473.762635][T13020] __x64_sys_ioctl+0xb7/0x210 [ 473.762657][T13020] do_syscall_64+0x106/0xf80 [ 473.762677][T13020] ? clear_bhb_loop+0x40/0x90 [ 473.762695][T13020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.762709][T13020] RIP: 0033:0x7fb38059c799 [ 473.762722][T13020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.762736][T13020] RSP: 002b:00007fb381541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.762750][T13020] RAX: ffffffffffffffda RBX: 00007fb380815fa0 RCX: 00007fb38059c799 [ 473.762760][T13020] RDX: 0000000000000003 RSI: 000000004008af10 RDI: 0000000000000004 [ 473.762769][T13020] RBP: 00007fb381541090 R08: 0000000000000000 R09: 0000000000000000 [ 473.762778][T13020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 473.762786][T13020] R13: 00007fb380816038 R14: 00007fb380815fa0 R15: 00007ffdbc056f38 [ 473.762805][T13020] [ 473.762819][T13020] ERROR: Out of memory at tomoyo_realpath_from_path. [ 476.376224][T13080] FAULT_INJECTION: forcing a failure. [ 476.376224][T13080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 476.507927][T13080] CPU: 0 UID: 0 PID: 13080 Comm: syz.3.1598 Tainted: G L syzkaller #0 PREEMPT(full) [ 476.507956][T13080] Tainted: [L]=SOFTLOCKUP [ 476.507962][T13080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 476.507973][T13080] Call Trace: [ 476.507979][T13080] [ 476.507986][T13080] dump_stack_lvl+0x100/0x190 [ 476.508016][T13080] should_fail_ex.cold+0x5/0xa [ 476.508034][T13080] copy_fpstate_to_sigframe+0x861/0xb20 [ 476.508057][T13080] ? kmem_cache_free+0x124/0x6a0 [ 476.508077][T13080] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 476.508101][T13080] ? collect_signal+0x271/0x550 [ 476.508120][T13080] ? x86_task_fpu+0x5f/0x90 [ 476.508137][T13080] get_sigframe+0x3fb/0x940 [ 476.508158][T13080] ? __pfx_get_sigframe+0x10/0x10 [ 476.508175][T13080] ? rcu_is_watching+0x12/0xc0 [ 476.508197][T13080] ? siginfo_layout+0x156/0x290 [ 476.508223][T13080] x64_setup_rt_frame+0x12f/0xce0 [ 476.508244][T13080] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 476.508261][T13080] ? kill_pid_info_type+0xe9/0x290 [ 476.508277][T13080] ? kill_pid_info_type+0xe9/0x290 [ 476.508294][T13080] ? find_held_lock+0x2b/0x80 [ 476.508310][T13080] arch_do_signal_or_restart+0x587/0x770 [ 476.508329][T13080] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 476.508346][T13080] ? kill_proc_info+0xa6/0x1b0 [ 476.508371][T13080] exit_to_user_mode_loop+0x86/0x4a0 [ 476.508392][T13080] do_syscall_64+0x668/0xf80 [ 476.508413][T13080] ? clear_bhb_loop+0x40/0x90 [ 476.508432][T13080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.508448][T13080] RIP: 0033:0x7fa6b9f9c799 [ 476.508461][T13080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.508477][T13080] RSP: 002b:00007fa6badaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 476.508493][T13080] RAX: 0000000000000000 RBX: 00007fa6ba215fa0 RCX: 00007fa6b9f9c799 [ 476.508502][T13080] RDX: 0000200000000000 RSI: 0000000000000011 RDI: 0000000000000672 [ 476.508512][T13080] RBP: 00007fa6ba032c99 R08: 0000000000000000 R09: 0000000000000000 [ 476.508521][T13080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.508530][T13080] R13: 00007fa6ba216038 R14: 00007fa6ba215fa0 R15: 00007ffd01377c98 [ 476.508550][T13080] [ 477.847679][T13075] KVM: debugfs: duplicate directory 13075-4 [ 479.450885][T13117] ptp ptp0: new virtual clock ptp1 [ 479.462886][T13117] ptp ptp0: guarantee physical clock free running [ 479.485240][T13117] ptp ptp0: guarantee physical clock free running [ 479.594517][T13123] vivid-007: ================= START STATUS ================= [ 479.610079][T13123] vivid-007: Enable Output Cropping: true [ 479.620612][T13125] bond0: invalid ARP target specified [ 479.631243][T13123] vivid-007: Enable Output Composing: true [ 479.646759][T13125] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1609'. [ 479.677560][T13123] vivid-007: Enable Output Scaler: true [ 479.699296][T13123] vivid-007: Tx RGB Quantization Range: Automatic [ 479.754028][T13123] vivid-007: Transmit Mode: HDMI [ 479.786538][T13123] vivid-007: Hotplug Present: 0x00000000 [ 479.812775][T13123] vivid-007: RxSense Present: 0x00000000 [ 479.840867][T13123] vivid-007: EDID Present: 0x00000000 [ 479.869746][T13123] vivid-007: ================== END STATUS ================== [ 481.322347][ T29] audit: type=1800 audit(1773538494.247:24): pid=13229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="" name="lu_gp_id" dev="configfs" ino=50710 res=0 errno=0 [ 481.629199][T13229] could not allocate digest TFM handle [ 482.514290][T13323] bond0: invalid ARP target specified [ 482.563883][T13323] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1622'. [ 482.681383][T13323] FAULT_INJECTION: forcing a failure. [ 482.681383][T13323] name fail_futex, interval 1, probability 0, space 0, times 0 [ 482.765196][T13323] CPU: 0 UID: 0 PID: 13323 Comm: syz.0.1622 Tainted: G L syzkaller #0 PREEMPT(full) [ 482.765224][T13323] Tainted: [L]=SOFTLOCKUP [ 482.765230][T13323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 482.765240][T13323] Call Trace: [ 482.765247][T13323] [ 482.765261][T13323] dump_stack_lvl+0x100/0x190 [ 482.765293][T13323] should_fail_ex.cold+0x5/0xa [ 482.765311][T13323] ? __kernel_text_address+0xd/0x30 [ 482.765336][T13323] get_futex_key+0x1d2/0x1620 [ 482.765357][T13323] ? __pfx_get_futex_key+0x10/0x10 [ 482.765375][T13323] ? putname+0xb1/0x110 [ 482.765392][T13323] ? stack_trace_save+0x8e/0xc0 [ 482.765407][T13323] ? __pfx_stack_trace_save+0x10/0x10 [ 482.765424][T13323] futex_wait_setup+0x83/0x510 [ 482.765450][T13323] __futex_wait+0x19f/0x300 [ 482.765473][T13323] ? __pfx___futex_wait+0x10/0x10 [ 482.765497][T13323] ? __pfx_futex_wake_mark+0x10/0x10 [ 482.765521][T13323] ? futex_hash+0x2c5/0x380 [ 482.765543][T13323] futex_wait+0xed/0x380 [ 482.765565][T13323] ? __pfx_futex_wait+0x10/0x10 [ 482.765590][T13323] ? putname+0xb1/0x110 [ 482.765604][T13323] ? kmem_cache_free+0x124/0x6a0 [ 482.765627][T13323] do_futex+0x1ef/0x350 [ 482.765646][T13323] ? __pfx_do_futex+0x10/0x10 [ 482.765663][T13323] ? __pfx_do_sys_openat2+0x10/0x10 [ 482.765684][T13323] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 482.765802][T13323] __x64_sys_futex+0x34f/0x4d0 [ 482.765823][T13323] ? __x64_sys_openat+0x12d/0x210 [ 482.765842][T13323] ? __pfx___x64_sys_futex+0x10/0x10 [ 482.765868][T13323] do_syscall_64+0x106/0xf80 [ 482.765890][T13323] ? clear_bhb_loop+0x40/0x90 [ 482.765910][T13323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.765926][T13323] RIP: 0033:0x7fe58db9c799 [ 482.765941][T13323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.765957][T13323] RSP: 002b:00007fe58ea700e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 482.765972][T13323] RAX: ffffffffffffffda RBX: 00007fe58de15fa8 RCX: 00007fe58db9c799 [ 482.765983][T13323] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe58de15fa8 [ 482.765993][T13323] RBP: 00007fe58de15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 482.766002][T13323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 482.766012][T13323] R13: 00007fe58de16038 R14: 00007ffd88d68a30 R15: 00007ffd88d68b18 [ 482.766032][T13323] [ 484.562460][T13365] bond0: invalid ARP target specified [ 484.601099][T13365] ecryptfs_miscdev_write: Invalid packet size [192] [ 484.985380][T13381] vivid-007: ================= START STATUS ================= [ 485.020757][T13381] vivid-007: Enable Output Cropping: true [ 485.073258][T13381] vivid-007: Enable Output Composing: true [ 485.109370][T13381] vivid-007: Enable Output Scaler: true [ 485.144782][T13381] vivid-007: Tx RGB Quantization Range: Automatic [ 485.178502][T13381] vivid-007: Transmit Mode: HDMI [ 485.208675][T13381] vivid-007: Hotplug Present: 0x00000000 [ 485.239491][T13381] vivid-007: RxSense Present: 0x00000000 [ 485.261672][T13381] vivid-007: EDID Present: 0x00000000 [ 485.282450][T13381] vivid-007: ================== END STATUS ================== [ 485.563767][T13396] bond0: invalid ARP target specified [ 485.592099][T13396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1640'. [ 485.996758][T13415] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 486.682327][T13422] FAULT_INJECTION: forcing a failure. [ 486.682327][T13422] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.726569][T13431] bond0: invalid ARP target specified [ 486.756735][T13431] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1647'. [ 486.787741][T13422] CPU: 0 UID: 0 PID: 13422 Comm: syz.3.1646 Tainted: G L syzkaller #0 PREEMPT(full) [ 486.787770][T13422] Tainted: [L]=SOFTLOCKUP [ 486.787776][T13422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 486.787786][T13422] Call Trace: [ 486.787791][T13422] [ 486.787798][T13422] dump_stack_lvl+0x100/0x190 [ 486.787827][T13422] should_fail_ex.cold+0x5/0xa [ 486.787846][T13422] _copy_to_user+0x32/0xd0 [ 486.787865][T13422] dma_heap_ioctl+0x413/0x5e0 [ 486.787987][T13422] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 486.788008][T13422] ? find_held_lock+0x2b/0x80 [ 486.788033][T13422] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 486.788055][T13422] __x64_sys_ioctl+0x18e/0x210 [ 486.788077][T13422] do_syscall_64+0x106/0xf80 [ 486.788098][T13422] ? clear_bhb_loop+0x40/0x90 [ 486.788116][T13422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.788133][T13422] RIP: 0033:0x7fa6b9f9c799 [ 486.788146][T13422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 486.788163][T13422] RSP: 002b:00007fa6badaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 486.788179][T13422] RAX: ffffffffffffffda RBX: 00007fa6ba215fa0 RCX: 00007fa6b9f9c799 [ 486.788189][T13422] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000006 [ 486.788198][T13422] RBP: 00007fa6ba032c99 R08: 0000000000000000 R09: 0000000000000000 [ 486.788208][T13422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.788217][T13422] R13: 00007fa6ba216038 R14: 00007fa6ba215fa0 R15: 00007ffd01377c98 [ 486.788237][T13422] [ 487.266568][T13440] bond0: invalid ARP target specified [ 487.316605][T13440] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1649'. [ 487.575697][T13440] FAULT_INJECTION: forcing a failure. [ 487.575697][T13440] name failslab, interval 1, probability 0, space 0, times 0 [ 487.626998][T13440] CPU: 0 UID: 0 PID: 13440 Comm: syz.0.1649 Tainted: G L syzkaller #0 PREEMPT(full) [ 487.627028][T13440] Tainted: [L]=SOFTLOCKUP [ 487.627034][T13440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 487.627044][T13440] Call Trace: [ 487.627050][T13440] [ 487.627057][T13440] dump_stack_lvl+0x100/0x190 [ 487.627086][T13440] should_fail_ex.cold+0x5/0xa [ 487.627105][T13440] should_failslab+0xc2/0x120 [ 487.627121][T13440] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 487.627145][T13440] ? __d_alloc+0x34/0xa80 [ 487.627161][T13440] ? lockdep_init_map_type+0x5c/0x250 [ 487.627184][T13440] __d_alloc+0x34/0xa80 [ 487.627202][T13440] d_alloc_pseudo+0x1c/0xc0 [ 487.627222][T13440] alloc_file_pseudo+0xcf/0x230 [ 487.627242][T13440] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 487.627260][T13440] ? alloc_fd+0x476/0x790 [ 487.627277][T13440] sock_alloc_file+0x50/0x210 [ 487.627302][T13440] __sys_socket+0x1c0/0x260 [ 487.627317][T13440] ? exc_page_fault+0x6f/0xd0 [ 487.627337][T13440] ? __pfx___sys_socket+0x10/0x10 [ 487.627355][T13440] ? do_user_addr_fault+0x8d6/0x12f0 [ 487.627381][T13440] __x64_sys_socket+0x72/0xb0 [ 487.627397][T13440] ? lockdep_hardirqs_on+0x78/0x100 [ 487.627417][T13440] do_syscall_64+0x106/0xf80 [ 487.627437][T13440] ? clear_bhb_loop+0x40/0x90 [ 487.627455][T13440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.627471][T13440] RIP: 0033:0x7fe58db9e007 [ 487.627485][T13440] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.627500][T13440] RSP: 002b:00007fe58ea6ef98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 487.627514][T13440] RAX: ffffffffffffffda RBX: 00007fe58de15fa0 RCX: 00007fe58db9e007 [ 487.627525][T13440] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 487.627534][T13440] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 487.627543][T13440] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 487.627556][T13440] R13: 00007fe58de16038 R14: 00007fe58de15fa0 R15: 00007ffd88d68b18 [ 487.627576][T13440] [ 488.542612][T13452] can: request_module (can-proto-0) failed. [ 490.061525][T13525] Invalid ELF header magic: != ELF [ 490.361799][T13541] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 492.300143][T13603] block2mtd: illegal erase size [ 492.529650][T13609] bond0: invalid ARP target specified [ 492.570126][T13609] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1674'. [ 492.658517][T13609] FAULT_INJECTION: forcing a failure. [ 492.658517][T13609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.720460][T13609] CPU: 0 UID: 0 PID: 13609 Comm: syz.2.1674 Tainted: G L syzkaller #0 PREEMPT(full) [ 492.720489][T13609] Tainted: [L]=SOFTLOCKUP [ 492.720495][T13609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 492.720505][T13609] Call Trace: [ 492.720510][T13609] [ 492.720517][T13609] dump_stack_lvl+0x100/0x190 [ 492.720545][T13609] should_fail_ex.cold+0x5/0xa [ 492.720565][T13609] _copy_to_iter+0x1f3/0x1720 [ 492.720585][T13609] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 492.720607][T13609] ? __pfx__copy_to_iter+0x10/0x10 [ 492.720625][T13609] ? __skb_recv_datagram+0x1b2/0x220 [ 492.720646][T13609] simple_copy_to_iter+0x46/0x90 [ 492.720664][T13609] __skb_datagram_iter+0x129/0x900 [ 492.720680][T13609] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 492.720700][T13609] ? skb_recv_datagram+0x88/0xc0 [ 492.720719][T13609] skb_copy_datagram_iter+0xa1/0x270 [ 492.720737][T13609] netlink_recvmsg+0x27e/0xa90 [ 492.720761][T13609] ? __pfx_netlink_recvmsg+0x10/0x10 [ 492.720780][T13609] ? __fget_files+0x215/0x3d0 [ 492.720795][T13609] ? __fget_files+0x215/0x3d0 [ 492.720811][T13609] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 492.720834][T13609] ? __pfx_netlink_recvmsg+0x10/0x10 [ 492.720856][T13609] sock_recvmsg+0x1a4/0x1f0 [ 492.720872][T13609] __sys_recvfrom+0x200/0x300 [ 492.720893][T13609] ? __pfx___sys_recvfrom+0x10/0x10 [ 492.720927][T13609] ? xfd_validate_state+0x129/0x190 [ 492.720951][T13609] __x64_sys_recvfrom+0xe0/0x1c0 [ 492.720969][T13609] ? do_syscall_64+0x95/0xf80 [ 492.720990][T13609] ? lockdep_hardirqs_on+0x78/0x100 [ 492.721010][T13609] do_syscall_64+0x106/0xf80 [ 492.721045][T13609] ? clear_bhb_loop+0x40/0x90 [ 492.721065][T13609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.721082][T13609] RIP: 0033:0x7fb38055cfce [ 492.721096][T13609] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 492.721111][T13609] RSP: 002b:00007fb38153fee8 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 492.721126][T13609] RAX: ffffffffffffffda RBX: 00007fb3815416c0 RCX: 00007fb38055cfce [ 492.721136][T13609] RDX: 0000000000001000 RSI: 00007fb381540000 RDI: 000000000000000c [ 492.721145][T13609] RBP: 000000000000000c R08: 0000000000000000 R09: 0000000000000000 [ 492.721153][T13609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001140 [ 492.721162][T13609] R13: 00007fb38153ffb0 R14: 000000000000000c R15: 0000000000000000 [ 492.721181][T13609] [ 493.282795][T13622] vivid-007: ================= START STATUS ================= [ 493.298878][T13622] vivid-007: Enable Output Cropping: true [ 493.314839][T13622] vivid-007: Enable Output Composing: true [ 493.325372][T13622] vivid-007: Enable Output Scaler: true [ 493.335488][T13622] vivid-007: Tx RGB Quantization Range: Automatic [ 493.359282][T13622] vivid-007: Transmit Mode: HDMI [ 493.369279][T13622] vivid-007: Hotplug Present: 0x00000000 [ 493.387654][T13622] vivid-007: RxSense Present: 0x00000000 [ 493.397877][T13622] vivid-007: EDID Present: 0x00000000 [ 493.408886][T13622] vivid-007: ================== END STATUS ================== [ 493.639287][T13628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1678'. [ 493.671507][T13628] netlink: 'syz.3.1678': attribute type 1 has an invalid length. [ 493.698910][T13628] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1678'. [ 494.031689][T13640] bond0: invalid ARP target specified [ 494.058555][T13640] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1680'. [ 494.807829][T13649] bond0: invalid ARP target specified [ 494.841853][T13649] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1684'. [ 494.900422][T13649] FAULT_INJECTION: forcing a failure. [ 494.900422][T13649] name failslab, interval 1, probability 0, space 0, times 0 [ 494.960300][T13649] CPU: 0 UID: 0 PID: 13649 Comm: syz.3.1684 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.960328][T13649] Tainted: [L]=SOFTLOCKUP [ 494.960334][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 494.960344][T13649] Call Trace: [ 494.960350][T13649] [ 494.960356][T13649] dump_stack_lvl+0x100/0x190 [ 494.960384][T13649] should_fail_ex.cold+0x5/0xa [ 494.960402][T13649] should_failslab+0xc2/0x120 [ 494.960418][T13649] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 494.960440][T13649] ? alloc_empty_file+0x55/0x1c0 [ 494.960463][T13649] alloc_empty_file+0x55/0x1c0 [ 494.960482][T13649] alloc_file_pseudo+0x13a/0x230 [ 494.960501][T13649] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 494.960519][T13649] ? alloc_fd+0x476/0x790 [ 494.960537][T13649] sock_alloc_file+0x50/0x210 [ 494.960560][T13649] __sys_socket+0x1c0/0x260 [ 494.960575][T13649] ? exc_page_fault+0x6f/0xd0 [ 494.960594][T13649] ? __pfx___sys_socket+0x10/0x10 [ 494.960612][T13649] ? do_user_addr_fault+0x8d6/0x12f0 [ 494.960638][T13649] __x64_sys_socket+0x72/0xb0 [ 494.960654][T13649] ? lockdep_hardirqs_on+0x78/0x100 [ 494.960674][T13649] do_syscall_64+0x106/0xf80 [ 494.960693][T13649] ? clear_bhb_loop+0x40/0x90 [ 494.960712][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.960727][T13649] RIP: 0033:0x7fa6b9f9e007 [ 494.960741][T13649] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.960756][T13649] RSP: 002b:00007fa6bada8f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 494.960771][T13649] RAX: ffffffffffffffda RBX: 00007fa6ba215fa0 RCX: 00007fa6b9f9e007 [ 494.960781][T13649] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 494.960789][T13649] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 494.960798][T13649] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 494.960824][T13649] R13: 00007fa6ba216038 R14: 00007fa6ba215fa0 R15: 00007ffd01377c98 [ 494.960845][T13649] [ 495.702345][T13750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 495.748928][T13750] netlink: 'syz.1.1689': attribute type 1 has an invalid length. [ 495.789932][T13750] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1689'. [ 496.154344][T13772] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 496.401718][T13783] vivid-007: ================= START STATUS ================= [ 496.435333][T13783] vivid-007: Enable Output Cropping: true [ 496.467961][T13783] vivid-007: Enable Output Composing: true [ 496.497649][T13783] vivid-007: Enable Output Scaler: true [ 496.526296][T13783] vivid-007: Tx RGB Quantization Range: Automatic [ 496.558189][T13783] vivid-007: Transmit Mode: HDMI [ 496.576748][T13783] vivid-007: Hotplug Present: 0x00000000 [ 496.607045][T13783] vivid-007: RxSense Present: 0x00000000 [ 496.624933][T13783] vivid-007: EDID Present: 0x00000000 [ 496.650532][T13783] vivid-007: ================== END STATUS ================== [ 497.189626][T13796] ubi0: attaching mtd0 [ 497.232338][T13796] ubi0: scanning is finished [ 497.237034][T13796] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 497.605625][T13796] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 497.713334][T13817] ptrace attach of "./syz-executor exec"[5825] was attempted by "./syz-executor exec"[13817] [ 498.271795][T13826] block2mtd: illegal erase size [ 499.612379][T13874] bridge0: port 2(team0) entered blocking state [ 499.689291][T13874] bridge0: port 2(team0) entered disabled state [ 499.735012][T13899] openvswitch: netlink: Multiple metadata blocks provided [ 499.735333][T13874] team0: entered allmulticast mode [ 499.735350][T13874] team_slave_0: entered allmulticast mode [ 499.735363][T13874] team_slave_1: entered allmulticast mode [ 499.748127][T13874] team0: entered promiscuous mode [ 499.748144][T13874] team_slave_0: entered promiscuous mode [ 499.748251][T13874] team_slave_1: entered promiscuous mode [ 499.748691][T13874] bridge0: port 2(team0) entered blocking state [ 499.748777][T13874] bridge0: port 2(team0) entered forwarding state [ 501.635970][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.644254][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.234726][T13950] block2mtd: illegal erase size [ 504.681259][T14025] bond0: invalid ARP target specified [ 504.719484][T14025] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1733'. [ 504.790014][T14028] FAULT_INJECTION: forcing a failure. [ 504.790014][T14028] name failslab, interval 1, probability 0, space 0, times 0 [ 504.816056][T14027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1734'. [ 504.851518][T14028] CPU: 0 UID: 0 PID: 14028 Comm: syz.3.1733 Tainted: G L syzkaller #0 PREEMPT(full) [ 504.851546][T14028] Tainted: [L]=SOFTLOCKUP [ 504.851552][T14028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 504.851562][T14028] Call Trace: [ 504.851568][T14028] [ 504.851575][T14028] dump_stack_lvl+0x100/0x190 [ 504.851603][T14028] should_fail_ex.cold+0x5/0xa [ 504.851622][T14028] should_failslab+0xc2/0x120 [ 504.851639][T14028] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 504.851662][T14028] ? __d_alloc+0x34/0xa80 [ 504.851678][T14028] ? lockdep_init_map_type+0x5c/0x250 [ 504.851701][T14028] __d_alloc+0x34/0xa80 [ 504.851719][T14028] d_alloc_pseudo+0x1c/0xc0 [ 504.851740][T14028] alloc_file_pseudo+0xcf/0x230 [ 504.851759][T14028] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 504.851778][T14028] ? alloc_fd+0x476/0x790 [ 504.851796][T14028] sock_alloc_file+0x50/0x210 [ 504.851819][T14028] __sys_socket+0x1c0/0x260 [ 504.851835][T14028] ? exc_page_fault+0x6f/0xd0 [ 504.851855][T14028] ? __pfx___sys_socket+0x10/0x10 [ 504.851873][T14028] ? do_user_addr_fault+0x8d6/0x12f0 [ 504.851899][T14028] __x64_sys_socket+0x72/0xb0 [ 504.851914][T14028] ? lockdep_hardirqs_on+0x78/0x100 [ 504.851935][T14028] do_syscall_64+0x106/0xf80 [ 504.851956][T14028] ? clear_bhb_loop+0x40/0x90 [ 504.851974][T14028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.851989][T14028] RIP: 0033:0x7fa6b9f9e007 [ 504.852003][T14028] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.852018][T14028] RSP: 002b:00007fa6bad87f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 504.852032][T14028] RAX: ffffffffffffffda RBX: 00007fa6ba216090 RCX: 00007fa6b9f9e007 [ 504.852042][T14028] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 504.852051][T14028] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 504.852060][T14028] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 504.852070][T14028] R13: 00007fa6ba216128 R14: 00007fa6ba216090 R15: 00007ffd01377c98 [ 504.852089][T14028] [ 504.853870][T14027] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1734'. [ 505.411924][T14042] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 505.673029][T14044] FAULT_INJECTION: forcing a failure. [ 505.673029][T14044] name failslab, interval 1, probability 0, space 0, times 0 [ 505.744901][T14044] CPU: 0 UID: 0 PID: 14044 Comm: syz.1.1739 Tainted: G L syzkaller #0 PREEMPT(full) [ 505.744926][T14044] Tainted: [L]=SOFTLOCKUP [ 505.744932][T14044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 505.744941][T14044] Call Trace: [ 505.744950][T14044] [ 505.744956][T14044] dump_stack_lvl+0x100/0x190 [ 505.744983][T14044] should_fail_ex.cold+0x5/0xa [ 505.745001][T14044] ? tomoyo_realpath_from_path+0xb6/0x690 [ 505.745020][T14044] should_failslab+0xc2/0x120 [ 505.745036][T14044] __kmalloc_noprof+0xe0/0x850 [ 505.745069][T14044] tomoyo_realpath_from_path+0xb6/0x690 [ 505.745091][T14044] tomoyo_path_number_perm+0x23c/0x580 [ 505.745106][T14044] ? tomoyo_path_number_perm+0x22e/0x580 [ 505.745123][T14044] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.745157][T14044] ? find_held_lock+0x2b/0x80 [ 505.745170][T14044] ? __fget_files+0x215/0x3d0 [ 505.745183][T14044] ? hook_file_ioctl_common+0x146/0x410 [ 505.745203][T14044] ? __fget_files+0x21f/0x3d0 [ 505.745219][T14044] security_file_ioctl+0xd3/0x230 [ 505.745238][T14044] __x64_sys_ioctl+0xb7/0x210 [ 505.745259][T14044] do_syscall_64+0x106/0xf80 [ 505.745278][T14044] ? clear_bhb_loop+0x40/0x90 [ 505.745296][T14044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.745310][T14044] RIP: 0033:0x7ffa9a39c799 [ 505.745323][T14044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 505.745337][T14044] RSP: 002b:00007ffa9b31c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.745351][T14044] RAX: ffffffffffffffda RBX: 00007ffa9a615fa0 RCX: 00007ffa9a39c799 [ 505.745361][T14044] RDX: 0000000000000038 RSI: 000000004040ae77 RDI: 0000000000000003 [ 505.745370][T14044] RBP: 00007ffa9b31c090 R08: 0000000000000000 R09: 0000000000000000 [ 505.745378][T14044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.745387][T14044] R13: 00007ffa9a616038 R14: 00007ffa9a615fa0 R15: 00007ffdfae8d4c8 [ 505.745406][T14044] [ 506.179122][T14055] vivid-007: ================= START STATUS ================= [ 506.207129][T14055] vivid-007: Enable Output Cropping: true [ 506.225302][T14055] vivid-007: Enable Output Composing: true [ 506.245748][T14055] vivid-007: Enable Output Scaler: true [ 506.251328][T14055] vivid-007: Tx RGB Quantization Range: Automatic [ 506.293658][T14055] vivid-007: Transmit Mode: HDMI [ 506.309059][T14055] vivid-007: Hotplug Present: 0x00000000 [ 506.325065][T14055] vivid-007: RxSense Present: 0x00000000 [ 506.345476][T14055] vivid-007: EDID Present: 0x00000000 [ 506.361168][T14055] vivid-007: ================== END STATUS ================== [ 506.527504][T14052] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 506.560255][T14044] ERROR: Out of memory at tomoyo_realpath_from_path. [ 506.784286][T14073] syz.1.1746 uses obsolete (PF_INET,SOCK_PACKET) [ 506.964884][T14077] bond0: invalid ARP target specified [ 506.997357][T14077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1747'. [ 507.026654][T14082] bond0: invalid ARP target specified [ 507.060542][T14077] FAULT_INJECTION: forcing a failure. [ 507.060542][T14077] name failslab, interval 1, probability 0, space 0, times 0 [ 507.075977][T14082] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1749'. [ 507.100285][T14077] CPU: 0 UID: 0 PID: 14077 Comm: syz.3.1747 Tainted: G L syzkaller #0 PREEMPT(full) [ 507.100314][T14077] Tainted: [L]=SOFTLOCKUP [ 507.100320][T14077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 507.100330][T14077] Call Trace: [ 507.100336][T14077] [ 507.100343][T14077] dump_stack_lvl+0x100/0x190 [ 507.100373][T14077] should_fail_ex.cold+0x5/0xa [ 507.100393][T14077] should_failslab+0xc2/0x120 [ 507.100410][T14077] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 507.100431][T14077] ? alloc_empty_file+0x55/0x1c0 [ 507.100454][T14077] alloc_empty_file+0x55/0x1c0 [ 507.100473][T14077] alloc_file_pseudo+0x13a/0x230 [ 507.100494][T14077] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 507.100512][T14077] ? alloc_fd+0x476/0x790 [ 507.100530][T14077] sock_alloc_file+0x50/0x210 [ 507.100554][T14077] __sys_socket+0x1c0/0x260 [ 507.100569][T14077] ? exc_page_fault+0x6f/0xd0 [ 507.100589][T14077] ? __pfx___sys_socket+0x10/0x10 [ 507.100608][T14077] ? do_user_addr_fault+0x8d6/0x12f0 [ 507.100634][T14077] __x64_sys_socket+0x72/0xb0 [ 507.100651][T14077] ? lockdep_hardirqs_on+0x78/0x100 [ 507.100672][T14077] do_syscall_64+0x106/0xf80 [ 507.100691][T14077] ? clear_bhb_loop+0x40/0x90 [ 507.100710][T14077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.100726][T14077] RIP: 0033:0x7fa6b9f9e007 [ 507.100740][T14077] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.100755][T14077] RSP: 002b:00007fa6bada8f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 507.100770][T14077] RAX: ffffffffffffffda RBX: 00007fa6ba215fa0 RCX: 00007fa6b9f9e007 [ 507.100780][T14077] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 507.100789][T14077] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 507.100798][T14077] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 507.100807][T14077] R13: 00007fa6ba216038 R14: 00007fa6ba215fa0 R15: 00007ffd01377c98 [ 507.100826][T14077] [ 507.558061][T14089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1750'. [ 507.571369][T14089] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1750'. [ 507.595323][T14091] block2mtd: illegal erase size [ 508.194852][T14131] block2mtd: illegal erase size [ 511.428479][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1761'. [ 511.468548][T14187] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1761'. [ 512.375984][T14223] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 514.488047][T14293] FAULT_INJECTION: forcing a failure. [ 514.488047][T14293] name failslab, interval 1, probability 0, space 0, times 0 [ 514.542418][T14293] CPU: 0 UID: 0 PID: 14293 Comm: syz.0.1781 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.542446][T14293] Tainted: [L]=SOFTLOCKUP [ 514.542452][T14293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 514.542463][T14293] Call Trace: [ 514.542469][T14293] [ 514.542475][T14293] dump_stack_lvl+0x100/0x190 [ 514.542504][T14293] should_fail_ex.cold+0x5/0xa [ 514.542524][T14293] ? tomoyo_realpath_from_path+0xb6/0x690 [ 514.542545][T14293] should_failslab+0xc2/0x120 [ 514.542562][T14293] __kmalloc_noprof+0xe0/0x850 [ 514.542588][T14293] tomoyo_realpath_from_path+0xb6/0x690 [ 514.542612][T14293] tomoyo_check_open_permission+0x2af/0x3c0 [ 514.542629][T14293] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 514.542663][T14293] ? lock_acquire+0x1cf/0x380 [ 514.542682][T14293] ? find_held_lock+0x2b/0x80 [ 514.542701][T14293] tomoyo_file_open+0x6b/0x90 [ 514.542722][T14293] security_file_open+0xb5/0x1e0 [ 514.542741][T14293] do_dentry_open+0x5aa/0x1660 [ 514.542762][T14293] vfs_open+0x82/0x3f0 [ 514.542782][T14293] path_openat+0x208c/0x31a0 [ 514.542804][T14293] ? __pfx_path_openat+0x10/0x10 [ 514.542826][T14293] do_file_open+0x20e/0x430 [ 514.542843][T14293] ? __pfx_do_file_open+0x10/0x10 [ 514.542871][T14293] ? alloc_fd+0x476/0x790 [ 514.542888][T14293] ? do_getname+0x191/0x390 [ 514.542908][T14293] do_sys_openat2+0x10d/0x1e0 [ 514.542927][T14293] ? __pfx_do_sys_openat2+0x10/0x10 [ 514.542952][T14293] __x64_sys_openat+0x12d/0x210 [ 514.542972][T14293] ? __pfx___x64_sys_openat+0x10/0x10 [ 514.542998][T14293] do_syscall_64+0x106/0xf80 [ 514.543018][T14293] ? clear_bhb_loop+0x40/0x90 [ 514.543036][T14293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.543052][T14293] RIP: 0033:0x7fe58db9c799 [ 514.543066][T14293] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.543081][T14293] RSP: 002b:00007fe58ea70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 514.543096][T14293] RAX: ffffffffffffffda RBX: 00007fe58de15fa0 RCX: 00007fe58db9c799 [ 514.543106][T14293] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 514.543116][T14293] RBP: 00007fe58dc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 514.543125][T14293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.543134][T14293] R13: 00007fe58de16038 R14: 00007fe58de15fa0 R15: 00007ffd88d68b18 [ 514.543154][T14293] [ 514.543162][T14293] ERROR: Out of memory at tomoyo_realpath_from_path. [ 516.086578][T14338] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1784'. [ 516.217249][T14343] FAULT_INJECTION: forcing a failure. [ 516.217249][T14343] name failslab, interval 1, probability 0, space 0, times 0 [ 516.360605][T14333] bond0: invalid ARP target specified [ 516.391060][T14343] CPU: 0 UID: 0 PID: 14343 Comm: syz.1.1784 Tainted: G L syzkaller #0 PREEMPT(full) [ 516.391089][T14343] Tainted: [L]=SOFTLOCKUP [ 516.391095][T14343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 516.391104][T14343] Call Trace: [ 516.391110][T14343] [ 516.391117][T14343] dump_stack_lvl+0x100/0x190 [ 516.391146][T14343] should_fail_ex.cold+0x5/0xa [ 516.391165][T14343] should_failslab+0xc2/0x120 [ 516.391182][T14343] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 516.391204][T14343] ? do_getname+0x35/0x390 [ 516.391237][T14343] do_getname+0x35/0x390 [ 516.391257][T14343] do_sys_openat2+0xc5/0x1e0 [ 516.391277][T14343] ? __pfx_do_sys_openat2+0x10/0x10 [ 516.391298][T14343] ? __sys_sendmsg+0x18f/0x220 [ 516.391323][T14343] __x64_sys_openat+0x12d/0x210 [ 516.391342][T14343] ? __pfx___x64_sys_openat+0x10/0x10 [ 516.391368][T14343] do_syscall_64+0x106/0xf80 [ 516.391389][T14343] ? clear_bhb_loop+0x40/0x90 [ 516.391407][T14343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.391422][T14343] RIP: 0033:0x7ffa9a39c799 [ 516.391437][T14343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 516.391452][T14343] RSP: 002b:00007ffa9b2da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 516.391467][T14343] RAX: ffffffffffffffda RBX: 00007ffa9a616180 RCX: 00007ffa9a39c799 [ 516.391477][T14343] RDX: 0000000000101002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 516.391487][T14343] RBP: 00007ffa9a432c99 R08: 0000000000000000 R09: 0000000000000000 [ 516.391496][T14343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.391504][T14343] R13: 00007ffa9a616218 R14: 00007ffa9a616180 R15: 00007ffdfae8d4c8 [ 516.391524][T14343] [ 516.984857][T14379] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1787'. [ 516.985274][T14379] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1787'. [ 518.356210][T14395] bond0: invalid ARP target specified [ 518.394437][T14395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1790'. [ 518.459273][T14403] FAULT_INJECTION: forcing a failure. [ 518.459273][T14403] name failslab, interval 1, probability 0, space 0, times 0 [ 518.533337][T14403] CPU: 0 UID: 0 PID: 14403 Comm: syz.1.1790 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.533364][T14403] Tainted: [L]=SOFTLOCKUP [ 518.533370][T14403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 518.533380][T14403] Call Trace: [ 518.533385][T14403] [ 518.533392][T14403] dump_stack_lvl+0x100/0x190 [ 518.533420][T14403] should_fail_ex.cold+0x5/0xa [ 518.533440][T14403] should_failslab+0xc2/0x120 [ 518.533457][T14403] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 518.533480][T14403] ? __d_alloc+0x34/0xa80 [ 518.533496][T14403] ? lockdep_init_map_type+0x5c/0x250 [ 518.533519][T14403] __d_alloc+0x34/0xa80 [ 518.533537][T14403] d_alloc_pseudo+0x1c/0xc0 [ 518.533557][T14403] alloc_file_pseudo+0xcf/0x230 [ 518.533577][T14403] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 518.533595][T14403] ? alloc_fd+0x476/0x790 [ 518.533613][T14403] sock_alloc_file+0x50/0x210 [ 518.533636][T14403] __sys_socket+0x1c0/0x260 [ 518.533652][T14403] ? exc_page_fault+0x6f/0xd0 [ 518.533673][T14403] ? __pfx___sys_socket+0x10/0x10 [ 518.533691][T14403] ? do_user_addr_fault+0x8d6/0x12f0 [ 518.533717][T14403] __x64_sys_socket+0x72/0xb0 [ 518.533732][T14403] ? lockdep_hardirqs_on+0x78/0x100 [ 518.533751][T14403] do_syscall_64+0x106/0xf80 [ 518.533770][T14403] ? clear_bhb_loop+0x40/0x90 [ 518.533788][T14403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.533803][T14403] RIP: 0033:0x7ffa9a39e007 [ 518.533817][T14403] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.533841][T14403] RSP: 002b:00007ffa9b2f9f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 518.533857][T14403] RAX: ffffffffffffffda RBX: 00007ffa9a616090 RCX: 00007ffa9a39e007 [ 518.533868][T14403] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 518.533878][T14403] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 518.533888][T14403] R10: 0000200000001140 R11: 0000000000000286 R12: 0000000000000000 [ 518.533897][T14403] R13: 00007ffa9a616128 R14: 00007ffa9a616090 R15: 00007ffdfae8d4c8 [ 518.533918][T14403] [ 519.930259][T14469] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1798'. [ 519.980867][T14469] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1798'. [ 520.365512][T14496] FAULT_INJECTION: forcing a failure. [ 520.365512][T14496] name failslab, interval 1, probability 0, space 0, times 0 [ 520.433865][T14496] CPU: 0 UID: 0 PID: 14496 Comm: syz.0.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.433894][T14496] Tainted: [L]=SOFTLOCKUP [ 520.433900][T14496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 520.433910][T14496] Call Trace: [ 520.433915][T14496] [ 520.433923][T14496] dump_stack_lvl+0x100/0x190 [ 520.433953][T14496] should_fail_ex.cold+0x5/0xa [ 520.433972][T14496] ? tomoyo_supervisor+0x65d/0x1340 [ 520.433993][T14496] should_failslab+0xc2/0x120 [ 520.434011][T14496] __kmalloc_noprof+0xe0/0x850 [ 520.434038][T14496] tomoyo_supervisor+0x65d/0x1340 [ 520.434063][T14496] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 520.434089][T14496] ? tomoyo_realpath_from_path+0x19c/0x690 [ 520.434114][T14496] ? tomoyo_realpath_from_path+0x19c/0x690 [ 520.434132][T14496] ? kfree+0x1f6/0x6b0 [ 520.434153][T14496] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 520.434176][T14496] tomoyo_path_number_perm+0x445/0x580 [ 520.434194][T14496] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 520.434218][T14496] ? do_raw_spin_lock+0x128/0x260 [ 520.434249][T14496] ? find_held_lock+0x2b/0x80 [ 520.434263][T14496] ? __pfx_d_add+0x10/0x10 [ 520.434280][T14496] ? d_alloc+0x176/0x1e0 [ 520.434295][T14496] ? current_check_access_path+0x281/0x460 [ 520.434318][T14496] ? simple_lookup+0x105/0x1d0 [ 520.434343][T14496] tomoyo_path_mknod+0x164/0x190 [ 520.434364][T14496] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 520.434387][T14496] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 520.434415][T14496] security_path_mknod+0x161/0x300 [ 520.434436][T14496] filename_mknodat+0x241/0x7f0 [ 520.434456][T14496] ? __pfx_filename_mknodat+0x10/0x10 [ 520.434472][T14496] ? strncpy_from_user+0x19d/0x2d0 [ 520.434492][T14496] ? do_getname+0x191/0x390 [ 520.434511][T14496] __x64_sys_mknod+0x8f/0xc0 [ 520.434528][T14496] do_syscall_64+0x106/0xf80 [ 520.434550][T14496] ? clear_bhb_loop+0x40/0x90 [ 520.434568][T14496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.434585][T14496] RIP: 0033:0x7fe58db9c799 [ 520.434599][T14496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.434625][T14496] RSP: 002b:00007fe58ea2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 520.434641][T14496] RAX: ffffffffffffffda RBX: 00007fe58de16180 RCX: 00007fe58db9c799 [ 520.434651][T14496] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000000 [ 520.434660][T14496] RBP: 00007fe58dc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 520.434670][T14496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.434680][T14496] R13: 00007fe58de16218 R14: 00007fe58de16180 R15: 00007ffd88d68b18 [ 520.434701][T14496] [ 521.930758][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1808'. [ 521.980772][T14576] netlink: 'syz.2.1808': attribute type 1 has an invalid length. [ 521.998364][T14576] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1808'. [ 522.324803][T14595] block2mtd: illegal erase size [ 523.694308][T14615] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1814'. [ 523.750408][T14616] FAULT_INJECTION: forcing a failure. [ 523.750408][T14616] name fail_futex, interval 1, probability 0, space 0, times 0 [ 523.872703][T14616] CPU: 0 UID: 0 PID: 14616 Comm: syz.0.1814 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.872732][T14616] Tainted: [L]=SOFTLOCKUP [ 523.872738][T14616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 523.872748][T14616] Call Trace: [ 523.872754][T14616] [ 523.872761][T14616] dump_stack_lvl+0x100/0x190 [ 523.872790][T14616] should_fail_ex.cold+0x5/0xa [ 523.872810][T14616] get_futex_key+0x1d2/0x1620 [ 523.872831][T14616] ? __pfx_get_futex_key+0x10/0x10 [ 523.872856][T14616] futex_wait_setup+0x83/0x510 [ 523.872882][T14616] __futex_wait+0x19f/0x300 [ 523.872907][T14616] ? __pfx___futex_wait+0x10/0x10 [ 523.872933][T14616] ? __pfx_futex_wake_mark+0x10/0x10 [ 523.872958][T14616] ? find_held_lock+0x2b/0x80 [ 523.872972][T14616] ? futex_wake+0x456/0x530 [ 523.872997][T14616] futex_wait+0xed/0x380 [ 523.873019][T14616] ? __pfx_futex_wait+0x10/0x10 [ 523.873046][T14616] ? tty_ioctl+0x345/0x1690 [ 523.873070][T14616] do_futex+0x1ef/0x350 [ 523.873089][T14616] ? __pfx_do_futex+0x10/0x10 [ 523.873109][T14616] ? find_held_lock+0x2b/0x80 [ 523.873125][T14616] __x64_sys_futex+0x34f/0x4d0 [ 523.873146][T14616] ? __pfx___x64_sys_futex+0x10/0x10 [ 523.873172][T14616] do_syscall_64+0x106/0xf80 [ 523.873192][T14616] ? clear_bhb_loop+0x40/0x90 [ 523.873211][T14616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.873226][T14616] RIP: 0033:0x7fe58db9c799 [ 523.873239][T14616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.873255][T14616] RSP: 002b:00007fe58ea4f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 523.873270][T14616] RAX: ffffffffffffffda RBX: 00007fe58de16098 RCX: 00007fe58db9c799 [ 523.873280][T14616] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe58de16098 [ 523.873289][T14616] RBP: 00007fe58de16090 R08: 0000000000000000 R09: 0000000000000000 [ 523.873299][T14616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.873308][T14616] R13: 00007fe58de16128 R14: 00007ffd88d68a30 R15: 00007ffd88d68b18 [ 523.873328][T14616] [ 524.860900][T14654] syz.3.1817 (14654): /proc/14653/oom_adj is deprecated, please use /proc/14653/oom_score_adj instead. [ 525.288492][T14677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1820'. [ 525.328965][T14677] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1820'. [ 525.414937][T14679] bond0: invalid ARP target specified [ 525.432348][T14679] FAULT_INJECTION: forcing a failure. [ 525.432348][T14679] name fail_futex, interval 1, probability 0, space 0, times 0 [ 525.432380][T14679] CPU: 0 UID: 0 PID: 14679 Comm: syz.2.1822 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.432402][T14679] Tainted: [L]=SOFTLOCKUP [ 525.432408][T14679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 525.432417][T14679] Call Trace: [ 525.432423][T14679] [ 525.432429][T14679] dump_stack_lvl+0x100/0x190 [ 525.432456][T14679] should_fail_ex.cold+0x5/0xa [ 525.432475][T14679] get_futex_key+0x1d2/0x1620 [ 525.432496][T14679] ? __pfx_get_futex_key+0x10/0x10 [ 525.432520][T14679] futex_wait_setup+0x83/0x510 [ 525.432551][T14679] __futex_wait+0x19f/0x300 [ 525.432575][T14679] ? __pfx___futex_wait+0x10/0x10 [ 525.432595][T14679] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 525.432614][T14679] ? lockdep_hardirqs_on+0x78/0x100 [ 525.432637][T14679] ? __pfx_futex_wake_mark+0x10/0x10 [ 525.432660][T14679] ? futex_hash+0x2c5/0x380 [ 525.432686][T14679] futex_wait+0xed/0x380 [ 525.432707][T14679] ? __pfx_futex_wait+0x10/0x10 [ 525.432735][T14679] ? __fget_files+0x21f/0x3d0 [ 525.432751][T14679] do_futex+0x1ef/0x350 [ 525.432770][T14679] ? __pfx_do_futex+0x10/0x10 [ 525.432788][T14679] ? pidfd_get_pid+0x149/0x1c0 [ 525.432811][T14679] __x64_sys_futex+0x34f/0x4d0 [ 525.432832][T14679] ? __pfx___x64_sys_futex+0x10/0x10 [ 525.432849][T14679] ? __do_sys_process_mrelease+0x1fc/0x410 [ 525.432871][T14679] ? __pfx___do_sys_process_mrelease+0x10/0x10 [ 525.432897][T14679] do_syscall_64+0x106/0xf80 [ 525.432917][T14679] ? clear_bhb_loop+0x40/0x90 [ 525.432935][T14679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.432951][T14679] RIP: 0033:0x7fb38059c799 [ 525.432964][T14679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.432979][T14679] RSP: 002b:00007fb3815410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 525.432994][T14679] RAX: ffffffffffffffda RBX: 00007fb380815fa8 RCX: 00007fb38059c799 [ 525.433004][T14679] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb380815fa8 [ 525.433013][T14679] RBP: 00007fb380815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 525.433023][T14679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 525.433032][T14679] R13: 00007fb380816038 R14: 00007ffdbc056e50 R15: 00007ffdbc056f38 [ 525.433051][T14679] [ 525.598490][T14682] block2mtd: illegal erase size [ 526.248206][T14687] block2mtd: illegal erase size [ 527.374656][T14718] rnbd_client L202: map_device: Unknown parameter or missing value '7' [ 527.737333][T14736] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1833'. [ 527.864437][T14747] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 528.097511][T14768] FAULT_INJECTION: forcing a failure. [ 528.097511][T14768] name failslab, interval 1, probability 0, space 0, times 0 [ 528.144570][T14768] CPU: 0 UID: 0 PID: 14768 Comm: syz.1.1835 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.144597][T14768] Tainted: [L]=SOFTLOCKUP [ 528.144604][T14768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 528.144614][T14768] Call Trace: [ 528.144619][T14768] [ 528.144627][T14768] dump_stack_lvl+0x100/0x190 [ 528.144655][T14768] should_fail_ex.cold+0x5/0xa [ 528.144676][T14768] should_failslab+0xc2/0x120 [ 528.144692][T14768] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 528.144715][T14768] ? posix_lock_inode+0x5b2/0x2440 [ 528.144730][T14768] ? lockdep_init_map_type+0x5c/0x250 [ 528.144753][T14768] posix_lock_inode+0x5b2/0x2440 [ 528.144776][T14768] ? __pfx_posix_lock_inode+0x10/0x10 [ 528.144796][T14768] vfs_lock_file+0xfb/0x150 [ 528.144812][T14768] fcntl_setlk+0x782/0xe40 [ 528.144830][T14768] ? __pfx_fcntl_setlk+0x10/0x10 [ 528.144854][T14768] ? rep_movs_alternative+0x30/0x90 [ 528.144873][T14768] do_fcntl+0xf39/0x1670 [ 528.144892][T14768] ? __pfx_do_fcntl+0x10/0x10 [ 528.144909][T14768] ? __fget_files+0x215/0x3d0 [ 528.144937][T14768] ? tomoyo_file_fcntl+0x6c/0xc0 [ 528.144963][T14768] __x64_sys_fcntl+0x163/0x200 [ 528.144986][T14768] do_syscall_64+0x106/0xf80 [ 528.145006][T14768] ? clear_bhb_loop+0x40/0x90 [ 528.145024][T14768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.145040][T14768] RIP: 0033:0x7ffa9a39c799 [ 528.145054][T14768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.145069][T14768] RSP: 002b:00007ffa9b31c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 528.145091][T14768] RAX: ffffffffffffffda RBX: 00007ffa9a615fa0 RCX: 00007ffa9a39c799 [ 528.145105][T14768] RDX: 0000000000001298 RSI: 0000000000000026 RDI: 0000000000000004 [ 528.145115][T14768] RBP: 00007ffa9a432c99 R08: 0000000000000000 R09: 0000000000000000 [ 528.145125][T14768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.145134][T14768] R13: 00007ffa9a616038 R14: 00007ffa9a615fa0 R15: 00007ffdfae8d4c8 [ 528.145156][T14768] [ 529.518985][T14812] FAULT_INJECTION: forcing a failure. [ 529.518985][T14812] name failslab, interval 1, probability 0, space 0, times 0 [ 529.519014][T14812] CPU: 0 UID: 0 PID: 14812 Comm: syz.3.1846 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.519036][T14812] Tainted: [L]=SOFTLOCKUP [ 529.519041][T14812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.519050][T14812] Call Trace: [ 529.519055][T14812] [ 529.519061][T14812] dump_stack_lvl+0x100/0x190 [ 529.519088][T14812] should_fail_ex.cold+0x5/0xa [ 529.519106][T14812] ? usb_alloc_urb+0x66/0xa0 [ 529.519216][T14812] should_failslab+0xc2/0x120 [ 529.519233][T14812] __kmalloc_noprof+0xe0/0x850 [ 529.519258][T14812] usb_alloc_urb+0x66/0xa0 [ 529.519280][T14812] do_proc_control+0x2ee/0xe50 [ 529.519323][T14812] ? __pfx_do_proc_control+0x10/0x10 [ 529.519344][T14812] usbdev_ioctl+0x1a28/0x3aa0 [ 529.519363][T14812] ? __pfx_usbdev_ioctl+0x10/0x10 [ 529.519382][T14812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 529.519406][T14812] ? do_vfs_ioctl+0x226/0x13e0 [ 529.519433][T14812] ? find_held_lock+0x2b/0x80 [ 529.519446][T14812] ? __fget_files+0x215/0x3d0 [ 529.519458][T14812] ? hook_file_ioctl_common+0x146/0x410 [ 529.519479][T14812] ? __fget_files+0x21f/0x3d0 [ 529.519495][T14812] ? __pfx_usbdev_ioctl+0x10/0x10 [ 529.519511][T14812] __x64_sys_ioctl+0x18e/0x210 [ 529.519534][T14812] do_syscall_64+0x106/0xf80 [ 529.519554][T14812] ? clear_bhb_loop+0x40/0x90 [ 529.519572][T14812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.519587][T14812] RIP: 0033:0x7fa6b9f9c799 [ 529.519599][T14812] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.519613][T14812] RSP: 002b:00007fa6badaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 529.519627][T14812] RAX: ffffffffffffffda RBX: 00007fa6ba215fa0 RCX: 00007fa6b9f9c799 [ 529.519637][T14812] RDX: 0000200000000240 RSI: 00000000c0185500 RDI: 0000000000000004 [ 529.519646][T14812] RBP: 00007fa6ba032c99 R08: 0000000000000000 R09: 0000000000000000 [ 529.519655][T14812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.519663][T14812] R13: 00007fa6ba216038 R14: 00007fa6ba215fa0 R15: 00007ffd01377c98 [ 529.519682][T14812] [ 529.898759][T14829] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1848'. [ 529.900229][T14829] FAULT_INJECTION: forcing a failure. [ 529.900229][T14829] name failslab, interval 1, probability 0, space 0, times 0 [ 529.900277][T14829] CPU: 0 UID: 0 PID: 14829 Comm: syz.2.1848 Tainted: G L syzkaller #0 PREEMPT(full) [ 529.900299][T14829] Tainted: [L]=SOFTLOCKUP [ 529.900306][T14829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 529.900315][T14829] Call Trace: [ 529.900321][T14829] [ 529.900328][T14829] dump_stack_lvl+0x100/0x190 [ 529.900355][T14829] should_fail_ex.cold+0x5/0xa [ 529.900374][T14829] ? tomoyo_encode2+0xfb/0x3c0 [ 529.900393][T14829] should_failslab+0xc2/0x120 [ 529.900410][T14829] __kmalloc_noprof+0xe0/0x850 [ 529.900432][T14829] ? d_absolute_path+0x136/0x1b0 [ 529.900455][T14829] tomoyo_encode2+0xfb/0x3c0 [ 529.900476][T14829] tomoyo_encode+0x29/0x50 [ 529.900494][T14829] tomoyo_realpath_from_path+0x18c/0x690 [ 529.900517][T14829] tomoyo_check_open_permission+0x2af/0x3c0 [ 529.900534][T14829] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 529.900570][T14829] ? do_raw_spin_lock+0x128/0x260 [ 529.900593][T14829] ? path_get+0x61/0x80 [ 529.900612][T14829] tomoyo_file_open+0x6b/0x90 [ 529.900633][T14829] security_file_open+0xb5/0x1e0 [ 529.900652][T14829] do_dentry_open+0x5aa/0x1660 [ 529.900669][T14829] ? security_inode_permission+0xbf/0x250 [ 529.900688][T14829] vfs_open+0x82/0x3f0 [ 529.900708][T14829] path_openat+0x208c/0x31a0 [ 529.900730][T14829] ? __pfx_path_openat+0x10/0x10 [ 529.900752][T14829] do_file_open+0x20e/0x430 [ 529.900769][T14829] ? __pfx_do_file_open+0x10/0x10 [ 529.900797][T14829] ? alloc_fd+0x476/0x790 [ 529.900814][T14829] ? do_getname+0x191/0x390 [ 529.900833][T14829] do_sys_openat2+0x10d/0x1e0 [ 529.900852][T14829] ? __pfx_do_sys_openat2+0x10/0x10 [ 529.900878][T14829] __x64_sys_openat+0x12d/0x210 [ 529.900897][T14829] ? __pfx___x64_sys_openat+0x10/0x10 [ 529.900924][T14829] do_syscall_64+0x106/0xf80 [ 529.900945][T14829] ? clear_bhb_loop+0x40/0x90 [ 529.900964][T14829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.900979][T14829] RIP: 0033:0x7fb38059c799 [ 529.900993][T14829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.901008][T14829] RSP: 002b:00007fb3814ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 529.901023][T14829] RAX: ffffffffffffffda RBX: 00007fb380816180 RCX: 00007fb38059c799 [ 529.901034][T14829] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 529.901043][T14829] RBP: 00007fb380632c99 R08: 0000000000000000 R09: 0000000000000000 [ 529.901053][T14829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 529.901061][T14829] R13: 00007fb380816218 R14: 00007fb380816180 R15: 00007ffdbc056f38 [ 529.901081][T14829] [ 529.901097][T14829] ERROR: Out of memory at tomoyo_realpath_from_path. [ 530.008099][T14832] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'. [ 530.008544][T14832] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1850'. [ 532.046249][T14902] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1861'. [ 532.233223][T14902] program syz.0.1861 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 532.317230][T14902] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1861'. [ 532.563247][T14919] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1863'. [ 532.603939][T14919] netlink: 25 bytes leftover after parsing attributes in process `syz.0.1863'. [ 533.402633][T14952] zram: Added device: zram1 [ 534.313138][T14983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1874'. [ 534.370488][T14985] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1874'. [ 534.827588][T15000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1878'. [ 534.921603][T15005] FAULT_INJECTION: forcing a failure. [ 534.921603][T15005] name failslab, interval 1, probability 0, space 0, times 0 [ 535.019685][T15005] CPU: 0 UID: 0 PID: 15005 Comm: syz.1.1880 Tainted: G L syzkaller #0 PREEMPT(full) [ 535.019714][T15005] Tainted: [L]=SOFTLOCKUP [ 535.019720][T15005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 535.019730][T15005] Call Trace: [ 535.019737][T15005] [ 535.019744][T15005] dump_stack_lvl+0x100/0x190 [ 535.019773][T15005] should_fail_ex.cold+0x5/0xa [ 535.019792][T15005] should_failslab+0xc2/0x120 [ 535.019808][T15005] __kmalloc_cache_noprof+0x7a/0x6f0 [ 535.019828][T15005] ? snd_pcm_attach_substream+0x451/0xd60 [ 535.019927][T15005] ? snd_ctl_get_preferred_subdevice+0x191/0x200 [ 535.019951][T15005] ? snd_pcm_open+0x25f/0x710 [ 535.019998][T15005] snd_pcm_attach_substream+0x451/0xd60 [ 535.020033][T15005] snd_pcm_open_substream+0x90/0x1850 [ 535.020055][T15005] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 535.020076][T15005] ? rcu_is_watching+0x12/0xc0 [ 535.020103][T15005] snd_pcm_open+0x2a3/0x710 [ 535.020126][T15005] ? __pfx_snd_pcm_open+0x10/0x10 [ 535.020148][T15005] ? __pfx_default_wake_function+0x10/0x10 [ 535.020170][T15005] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 535.020190][T15005] snd_pcm_capture_open+0x89/0xe0 [ 535.020220][T15005] snd_open+0x22d/0x4c0 [ 535.020236][T15005] ? __pfx_snd_open+0x10/0x10 [ 535.020252][T15005] chrdev_open+0x234/0x6a0 [ 535.020268][T15005] ? __pfx_apparmor_file_open+0x10/0x10 [ 535.020292][T15005] ? __pfx_chrdev_open+0x10/0x10 [ 535.020308][T15005] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 535.020329][T15005] do_dentry_open+0x6d8/0x1660 [ 535.020344][T15005] ? __pfx_chrdev_open+0x10/0x10 [ 535.020364][T15005] vfs_open+0x82/0x3f0 [ 535.020384][T15005] path_openat+0x208c/0x31a0 [ 535.020406][T15005] ? __pfx_path_openat+0x10/0x10 [ 535.020428][T15005] do_file_open+0x20e/0x430 [ 535.020445][T15005] ? __pfx_do_file_open+0x10/0x10 [ 535.020474][T15005] ? alloc_fd+0x476/0x790 [ 535.020492][T15005] ? do_getname+0x191/0x390 [ 535.020511][T15005] do_sys_openat2+0x10d/0x1e0 [ 535.020530][T15005] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.020551][T15005] ? __fget_files+0x21f/0x3d0 [ 535.020568][T15005] __x64_sys_openat+0x12d/0x210 [ 535.020588][T15005] ? __pfx___x64_sys_openat+0x10/0x10 [ 535.020615][T15005] do_syscall_64+0x106/0xf80 [ 535.020635][T15005] ? clear_bhb_loop+0x40/0x90 [ 535.020654][T15005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.020669][T15005] RIP: 0033:0x7ffa9a39c799 [ 535.020684][T15005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.020699][T15005] RSP: 002b:00007ffa9b31c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.020715][T15005] RAX: ffffffffffffffda RBX: 00007ffa9a615fa0 RCX: 00007ffa9a39c799 [ 535.020726][T15005] RDX: 0000000000080042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 535.020736][T15005] RBP: 00007ffa9a432c99 R08: 0000000000000000 R09: 0000000000000000 [ 535.020746][T15005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.020755][T15005] R13: 00007ffa9a616038 R14: 00007ffa9a615fa0 R15: 00007ffdfae8d4c8 [ 535.020777][T15005] [ 536.462106][T15060] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1886'. [ 536.517958][T15060] netlink: 25 bytes leftover after parsing attributes in process `syz.3.1886'. [ 537.829844][T15089] FAULT_INJECTION: forcing a failure. [ 537.829844][T15089] name failslab, interval 1, probability 0, space 0, times 0 [ 537.884960][T15090] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 537.901975][T15089] CPU: 0 UID: 0 PID: 15089 Comm: syz.1.1892 Tainted: G L syzkaller #0 PREEMPT(full) [ 537.902010][T15089] Tainted: [L]=SOFTLOCKUP [ 537.902016][T15089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 537.902026][T15089] Call Trace: [ 537.902032][T15089] [ 537.902039][T15089] dump_stack_lvl+0x100/0x190 [ 537.902067][T15089] should_fail_ex.cold+0x5/0xa [ 537.902086][T15089] should_failslab+0xc2/0x120 [ 537.902103][T15089] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 537.902125][T15089] ? alloc_inode+0x183/0x250 [ 537.902145][T15089] ? ioctx_alloc+0x427/0x21d0 [ 537.902164][T15089] alloc_inode+0x183/0x250 [ 537.902183][T15089] alloc_anon_inode+0x2a/0x3e0 [ 537.902200][T15089] ioctx_alloc+0x4dc/0x21d0 [ 537.902222][T15089] ? find_held_lock+0x2b/0x80 [ 537.902236][T15089] ? __pfx_ioctx_alloc+0x10/0x10 [ 537.902257][T15089] __x64_sys_io_setup+0xc9/0x220 [ 537.902275][T15089] do_syscall_64+0x106/0xf80 [ 537.902295][T15089] ? clear_bhb_loop+0x40/0x90 [ 537.902314][T15089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.902329][T15089] RIP: 0033:0x7ffa9a39c799 [ 537.902342][T15089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 537.902357][T15089] RSP: 002b:00007ffa9b31c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 537.902373][T15089] RAX: ffffffffffffffda RBX: 00007ffa9a615fa0 RCX: 00007ffa9a39c799 [ 537.902383][T15089] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 537.902393][T15089] RBP: 00007ffa9a432c99 R08: 0000000000000000 R09: 0000000000000000 [ 537.902402][T15089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.902411][T15089] R13: 00007ffa9a616038 R14: 00007ffa9a615fa0 R15: 00007ffdfae8d4c8 [ 537.902432][T15089] [ 540.091998][T15168] block2mtd: illegal erase size [ 541.158236][T15175] FAULT_INJECTION: forcing a failure. [ 541.158236][T15175] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 541.346149][T15175] CPU: 0 UID: 0 PID: 15175 Comm: syz.0.1905 Tainted: G L syzkaller #0 PREEMPT(full) [ 541.346181][T15175] Tainted: [L]=SOFTLOCKUP [ 541.346187][T15175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 541.346196][T15175] Call Trace: [ 541.346202][T15175] [ 541.346209][T15175] dump_stack_lvl+0x100/0x190 [ 541.346236][T15175] should_fail_ex.cold+0x5/0xa [ 541.346250][T15175] ? prepare_alloc_pages+0x16d/0x5f0 [ 541.346270][T15175] should_fail_alloc_page+0xeb/0x140 [ 541.346286][T15175] prepare_alloc_pages+0x1f0/0x5f0 [ 541.346306][T15175] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 541.346331][T15175] ? __pfx_css_rstat_updated+0x10/0x10 [ 541.346349][T15175] ? kasan_save_stack+0x3f/0x50 [ 541.346371][T15175] ? kasan_save_stack+0x30/0x50 [ 541.346391][T15175] ? kasan_save_track+0x14/0x30 [ 541.346417][T15175] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 541.346448][T15175] ? lock_acquire+0x1cf/0x380 [ 541.346468][T15175] ? find_held_lock+0x2b/0x80 [ 541.346481][T15175] ? page_table_check_set+0x49a/0xa10 [ 541.346504][T15175] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 541.346529][T15175] ? policy_nodemask+0xed/0x4f0 [ 541.346546][T15175] alloc_pages_mpol+0x1fb/0x550 [ 541.346562][T15175] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 541.346583][T15175] folio_alloc_mpol_noprof+0x36/0x340 [ 541.346602][T15175] vma_alloc_folio_noprof+0xed/0x1d0 [ 541.346619][T15175] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 541.346643][T15175] do_anonymous_page+0xb3a/0x1fb0 [ 541.346669][T15175] __handle_mm_fault+0x1d42/0x2b60 [ 541.346694][T15175] ? __pfx___handle_mm_fault+0x10/0x10 [ 541.346714][T15175] ? pte_offset_map_lock+0x174/0x320 [ 541.346733][T15175] ? find_held_lock+0x2b/0x80 [ 541.346752][T15175] ? follow_page_pte+0x5b3/0x1400 [ 541.346772][T15175] handle_mm_fault+0x36d/0xa20 [ 541.346795][T15175] __get_user_pages+0xf9c/0x34d0 [ 541.346819][T15175] ? __pfx___get_user_pages+0x10/0x10 [ 541.346840][T15175] populate_vma_page_range+0x267/0x3f0 [ 541.346859][T15175] ? __pfx_populate_vma_page_range+0x10/0x10 [ 541.346878][T15175] ? __pfx_find_vma_intersection+0x10/0x10 [ 541.346901][T15175] __mm_populate+0x107/0x3a0 [ 541.346919][T15175] ? __pfx___mm_populate+0x10/0x10 [ 541.346938][T15175] ? up_write+0x406/0x4f0 [ 541.346959][T15175] vm_mmap_pgoff+0x37f/0x470 [ 541.346978][T15175] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 541.346996][T15175] ? do_futex+0x192/0x350 [ 541.347015][T15175] ? __pfx_do_futex+0x10/0x10 [ 541.347037][T15175] ksys_mmap_pgoff+0xe1/0x650 [ 541.347052][T15175] ? __x64_sys_futex+0x34f/0x4d0 [ 541.347070][T15175] ? __x64_sys_futex+0x358/0x4d0 [ 541.347088][T15175] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 541.347103][T15175] ? xfd_validate_state+0x129/0x190 [ 541.347127][T15175] __x64_sys_mmap+0x125/0x190 [ 541.347150][T15175] do_syscall_64+0x106/0xf80 [ 541.347175][T15175] ? clear_bhb_loop+0x40/0x90 [ 541.347194][T15175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.347209][T15175] RIP: 0033:0x7fe58db9c799 [ 541.347222][T15175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.347237][T15175] RSP: 002b:00007fe58ea4f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 541.347252][T15175] RAX: ffffffffffffffda RBX: 00007fe58de16090 RCX: 00007fe58db9c799 [ 541.347263][T15175] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 541.347272][T15175] RBP: 00007fe58dc32c99 R08: ffffffffffffffff R09: 0000000000000000 [ 541.347281][T15175] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 541.347290][T15175] R13: 00007fe58de16128 R14: 00007fe58de16090 R15: 00007ffd88d68b18 [ 541.347309][T15175] [ 543.091952][T15210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1910'. [ 543.106947][T15212] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1908'. [ 543.161334][T15216] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 543.242307][T15215] ================================================================== [ 543.242351][T15215] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0x94e/0xc60 [ 543.242410][T15215] Read of size 8 at addr ffff888028ecd000 by task syz.2.1911/15215 [ 543.242424][T15215] [ 543.242442][T15215] CPU: 0 UID: 0 PID: 15215 Comm: syz.2.1911 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.242464][T15215] Tainted: [L]=SOFTLOCKUP [ 543.242470][T15215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.242480][T15215] Call Trace: [ 543.242486][T15215] [ 543.242492][T15215] dump_stack_lvl+0x100/0x190 [ 543.242514][T15215] print_report+0x156/0x4c9 [ 543.242541][T15215] ? __virt_addr_valid+0x81/0x620 [ 543.242559][T15215] ? __phys_addr+0xe8/0x180 [ 543.242577][T15215] ? fbcon_prepare_logo+0x94e/0xc60 [ 543.242591][T15215] kasan_report+0xdf/0x1e0 [ 543.242607][T15215] ? fbcon_prepare_logo+0x94e/0xc60 [ 543.242624][T15215] kasan_check_range+0x10f/0x1e0 [ 543.242641][T15215] __asan_memcpy+0x23/0x60 [ 543.242660][T15215] fbcon_prepare_logo+0x94e/0xc60 [ 543.242678][T15215] fbcon_init+0x10a0/0x1820 [ 543.242694][T15215] visual_init+0x320/0x620 [ 543.242739][T15215] do_bind_con_driver.isra.0+0x636/0x9c0 [ 543.242761][T15215] store_bind+0x609/0x730 [ 543.242782][T15215] ? __pfx_store_bind+0x10/0x10 [ 543.242801][T15215] dev_attr_store+0x58/0x80 [ 543.242849][T15215] ? __pfx_dev_attr_store+0x10/0x10 [ 543.242866][T15215] sysfs_kf_write+0xf2/0x150 [ 543.242886][T15215] kernfs_fop_write_iter+0x3e0/0x5f0 [ 543.242902][T15215] ? __pfx_sysfs_kf_write+0x10/0x10 [ 543.242920][T15215] vfs_write+0x6ac/0x1070 [ 543.242942][T15215] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 543.242958][T15215] ? __pfx_vfs_write+0x10/0x10 [ 543.242985][T15215] ksys_write+0x12a/0x250 [ 543.242998][T15215] ? __pfx_ksys_write+0x10/0x10 [ 543.243014][T15215] do_syscall_64+0x106/0xf80 [ 543.243034][T15215] ? clear_bhb_loop+0x40/0x90 [ 543.243050][T15215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.243066][T15215] RIP: 0033:0x7fb38059c799 [ 543.243079][T15215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.243095][T15215] RSP: 002b:00007fb381541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.243109][T15215] RAX: ffffffffffffffda RBX: 00007fb380815fa0 RCX: 00007fb38059c799 [ 543.243120][T15215] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000003 [ 543.243129][T15215] RBP: 00007fb380632c99 R08: 0000000000000000 R09: 0000000000000000 [ 543.243138][T15215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.243147][T15215] R13: 00007fb380816038 R14: 00007fb380815fa0 R15: 00007ffdbc056f38 [ 543.243162][T15215] [ 543.243168][T15215] [ 543.243173][T15215] Allocated by task 14079: [ 543.243209][T15215] kasan_save_stack+0x30/0x50 [ 543.243232][T15215] kasan_save_track+0x14/0x30 [ 543.243253][T15215] __kasan_kmalloc+0xaa/0xb0 [ 543.243273][T15215] register_netdevice+0x50c/0x2210 [ 543.243340][T15215] __ip_tunnel_create+0x52b/0x670 [ 543.243389][T15215] ip_tunnel_init_net+0x230/0x780 [ 543.243410][T15215] ops_init+0x1e2/0x5f0 [ 543.243436][T15215] setup_net+0x118/0x3a0 [ 543.243455][T15215] copy_net_ns+0x46f/0x7c0 [ 543.243477][T15215] create_new_namespaces+0x3ea/0xac0 [ 543.243492][T15215] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 543.243507][T15215] ksys_unshare+0x473/0xad0 [ 543.243523][T15215] __x64_sys_unshare+0x31/0x40 [ 543.243539][T15215] do_syscall_64+0x106/0xf80 [ 543.243557][T15215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.243571][T15215] [ 543.243575][T15215] Freed by task 14079: [ 543.243582][T15215] kasan_save_stack+0x30/0x50 [ 543.243601][T15215] kasan_save_track+0x14/0x30 [ 543.243621][T15215] kasan_save_free_info+0x3b/0x70 [ 543.243638][T15215] __kasan_slab_free+0x5f/0x80 [ 543.243650][T15215] kfree+0x1f6/0x6b0 [ 543.243666][T15215] unregister_netdevice_many_notify+0x14c3/0x2580 [ 543.243687][T15215] ops_undo_list+0x8ff/0xab0 [ 543.243708][T15215] setup_net+0x1fa/0x3a0 [ 543.243726][T15215] copy_net_ns+0x46f/0x7c0 [ 543.243745][T15215] create_new_namespaces+0x3ea/0xac0 [ 543.243759][T15215] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 543.243772][T15215] ksys_unshare+0x473/0xad0 [ 543.243787][T15215] __x64_sys_unshare+0x31/0x40 [ 543.243804][T15215] do_syscall_64+0x106/0xf80 [ 543.243821][T15215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.243835][T15215] [ 543.243839][T15215] The buggy address belongs to the object at ffff888028ecd000 [ 543.243839][T15215] which belongs to the cache kmalloc-64 of size 64 [ 543.243851][T15215] The buggy address is located 0 bytes inside of [ 543.243851][T15215] freed 64-byte region [ffff888028ecd000, ffff888028ecd040) [ 543.243865][T15215] [ 543.243869][T15215] The buggy address belongs to the physical page: [ 543.243876][T15215] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28ecd [ 543.243890][T15215] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 543.243903][T15215] page_type: f5(slab) [ 543.243917][T15215] raw: 00fff00000000000 ffff88813fe3c8c0 dead000000000100 dead000000000122 [ 543.243932][T15215] raw: 0000000000000000 0000000800200020 00000000f5000000 0000000000000000 [ 543.243941][T15215] page dumped because: kasan: bad access detected [ 543.243950][T15215] page_owner tracks the page as allocated [ 543.243956][T15215] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 35, tgid 35 (kworker/u8:2), ts 7896657645, free_ts 7871156403 [ 543.243982][T15215] post_alloc_hook+0x153/0x170 [ 543.244000][T15215] get_page_from_freelist+0x111d/0x3140 [ 543.244019][T15215] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 543.244038][T15215] new_slab+0xa6/0x6b0 [ 543.244054][T15215] refill_objects+0x26b/0x400 [ 543.244071][T15215] __pcs_replace_empty_main+0x1ab/0x660 [ 543.244091][T15215] __kmalloc_node_noprof+0x69a/0x850 [ 543.244110][T15215] __vmalloc_node_range_noprof+0x3dc/0x1530 [ 543.244127][T15215] __vmalloc_node_noprof+0xad/0xf0 [ 543.244143][T15215] copy_process+0x5ec/0x7a10 [ 543.244157][T15215] kernel_clone+0xfc/0x9a0 [ 543.244172][T15215] user_mode_thread+0xcc/0x110 [ 543.244187][T15215] call_usermodehelper_exec_work+0xcb/0x180 [ 543.244209][T15215] process_one_work+0xa23/0x19a0 [ 543.244227][T15215] worker_thread+0x5ef/0xe50 [ 543.244245][T15215] kthread+0x370/0x450 [ 543.244261][T15215] page last free pid 10 tgid 10 stack trace: [ 543.244269][T15215] __free_frozen_pages+0x7e1/0x10d0 [ 543.244285][T15215] vfree.part.0+0x12b/0x9d0 [ 543.244300][T15215] delayed_vfree_work+0x8e/0xd0 [ 543.244314][T15215] process_one_work+0xa23/0x19a0 [ 543.244332][T15215] worker_thread+0x5ef/0xe50 [ 543.244350][T15215] kthread+0x370/0x450 [ 543.244366][T15215] ret_from_fork+0x754/0xd80 [ 543.244386][T15215] ret_from_fork_asm+0x1a/0x30 [ 543.244400][T15215] [ 543.244404][T15215] Memory state around the buggy address: [ 543.244411][T15215] ffff888028eccf00: fc 00 00 00 00 00 00 00 00 00 fc fc fc fc 00 00 [ 543.244422][T15215] ffff888028eccf80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc [ 543.244439][T15215] >ffff888028ecd000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 543.244448][T15215] ^ [ 543.244456][T15215] ffff888028ecd080: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 543.244466][T15215] ffff888028ecd100: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 543.244476][T15215] ================================================================== [ 543.274752][T15215] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 543.274771][T15215] CPU: 0 UID: 0 PID: 15215 Comm: syz.2.1911 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.274796][T15215] Tainted: [L]=SOFTLOCKUP [ 543.274802][T15215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 543.274812][T15215] Call Trace: [ 543.274818][T15215] [ 543.274824][T15215] dump_stack_lvl+0x100/0x190 [ 543.274850][T15215] vpanic+0x552/0x970 [ 543.274866][T15215] ? __pfx_vpanic+0x10/0x10 [ 543.274883][T15215] ? fbcon_prepare_logo+0x94e/0xc60 [ 543.274899][T15215] panic+0xd1/0xe0 [ 543.274916][T15215] ? __pfx_panic+0x10/0x10 [ 543.274931][T15215] ? fbcon_prepare_logo+0x94e/0xc60 [ 543.274947][T15215] ? preempt_schedule_common+0x42/0xc0 [ 543.274970][T15215] check_panic_on_warn.cold+0x19/0x34 [ 543.274986][T15215] end_report.part.0+0x3a/0x90 [ 543.275006][T15215] kasan_report.cold+0xe/0x18 [ 543.275026][T15215] ? fbcon_prepare_logo+0x94e/0xc60 [ 543.275045][T15215] kasan_check_range+0x10f/0x1e0 [ 543.275064][T15215] __asan_memcpy+0x23/0x60 [ 543.275083][T15215] fbcon_prepare_logo+0x94e/0xc60 [ 543.275102][T15215] fbcon_init+0x10a0/0x1820 [ 543.275119][T15215] visual_init+0x320/0x620 [ 543.275137][T15215] do_bind_con_driver.isra.0+0x636/0x9c0 [ 543.275158][T15215] store_bind+0x609/0x730 [ 543.275178][T15215] ? __pfx_store_bind+0x10/0x10 [ 543.275196][T15215] dev_attr_store+0x58/0x80 [ 543.275213][T15215] ? __pfx_dev_attr_store+0x10/0x10 [ 543.275229][T15215] sysfs_kf_write+0xf2/0x150 [ 543.275247][T15215] kernfs_fop_write_iter+0x3e0/0x5f0 [ 543.275262][T15215] ? __pfx_sysfs_kf_write+0x10/0x10 [ 543.275280][T15215] vfs_write+0x6ac/0x1070 [ 543.275302][T15215] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 543.275319][T15215] ? __pfx_vfs_write+0x10/0x10 [ 543.275346][T15215] ksys_write+0x12a/0x250 [ 543.275359][T15215] ? __pfx_ksys_write+0x10/0x10 [ 543.275375][T15215] do_syscall_64+0x106/0xf80 [ 543.275394][T15215] ? clear_bhb_loop+0x40/0x90 [ 543.275411][T15215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.275434][T15215] RIP: 0033:0x7fb38059c799 [ 543.275447][T15215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.275464][T15215] RSP: 002b:00007fb381541028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 543.275481][T15215] RAX: ffffffffffffffda RBX: 00007fb380815fa0 RCX: 00007fb38059c799 [ 543.275492][T15215] RDX: 0000000000000084 RSI: 0000200000000040 RDI: 0000000000000003 [ 543.275504][T15215] RBP: 00007fb380632c99 R08: 0000000000000000 R09: 0000000000000000 [ 543.275514][T15215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.275524][T15215] R13: 00007fb380816038 R14: 00007fb380815fa0 R15: 00007ffdbc056f38 [ 543.275540][T15215] [ 543.275609][T15215] Kernel Offset: disabled