last executing test programs: 8m6.813065666s ago: executing program 3 (id=2272): r0 = socket(0xa, 0x3, 0x5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00'}) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x88000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto_KEYCTL_UPDATE(0x2, 0xffffffffffffffff, 0x6, 0x1, 0x100000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/vivid.0/media14/power/runtime_suspended_time\x00', 0xf2c1, 0x0) read$auto(r1, 0x0, 0x9) mmap$auto(0x0, 0x4020009, 0x17ffffffe, 0xeba, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2000c, 0x3, 0xe31, 0x40000000000a5, 0x8000) syz_genetlink_get_family_id$auto_802_15_4_mac(0x0, 0xffffffffffffffff) socketpair$auto(0x9, 0x5, 0x400, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x4, 0xd176) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0x2, 0x1, 0x106) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) utimensat$auto(r3, &(0x7f0000000300)='\x00', &(0x7f00000000c0)={0x9b5, 0x8}, 0x1000) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) socket(0x2, 0x80802, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{0x0, 0x5aa, 0x0, 0x8, 0x0, 0x1, 0x1000}, 0xd}, 0x8001, 0xfd) r4 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r4, 0x0, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(r2, 0x0, 0x7, 0x10, 0x0, 0x6) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) 8m5.591761108s ago: executing program 3 (id=2273): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r3, 0x0, 0xffffff7f, 0x8000000000009) read$auto_mon_fops_text_t_mon_text(r3, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x4800, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd}) 8m4.935721287s ago: executing program 3 (id=2276): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) read$auto(r0, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xedKW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1\x1f\xf7uw\a\xd0\x83{_>/\xff', 0x100000001) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40084}, 0x40) sendmsg$auto_TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x4005) write$auto(r0, &(0x7f0000000040)='S\x00-\x00\xfe\xff\xff\xff', 0x8587) 8m4.565287027s ago: executing program 3 (id=2278): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x10f, 0x8a, 0x0, 0x14) rmdir$auto(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00') r1 = io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video3\x00', 0x2aa01, 0x0) ioctl$auto_BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) write$auto_tty_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_gtp(0x0, r3) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000380)=""/11, 0xb) sendmsg$auto_GTP_CMD_ECHOREQ(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000100)=ANY=[@ANYRES16=r4, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x4091}, 0x80) listen$auto(r1, 0x8) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, r0) poll$auto(0x0, 0x200, 0x8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7ff, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0x35, "9aabf67ec86f4b366505cb9847a5"}, 0x55) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000280), r5) sendmsg$auto_TIPC_NL_MEDIA_SET(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x18, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) close_range$auto(0x2, 0x8, 0x0) 8m3.644083265s ago: executing program 3 (id=2282): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001c00)={0x0}, 0x1, 0x0, 0x0, 0x2000c040}, 0x20008004) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x100, 0x2020009, 0x17, 0xeb1, r0, 0xe) r1 = socketpair$auto(0xb, 0xd, 0x808e8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x400053, 0x9) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000140)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x6}, 0xffffffff, 0x4, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r1) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0x24}, 0x1, 0x1400, 0x0, 0x4004085}, 0x20040080) sendmsg$auto_NL80211_CMD_ABORT_SCAN(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000a00)={&(0x7f0000001180)=ANY=[], 0x6f8}}, 0x40080) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r4, &(0x7f0000000440)="110000000000000000000000000001", 0xf) getsockopt$auto_SO_DEBUG(r4, 0x1, 0x1, &(0x7f0000000100)='},:(.!/\x00', &(0x7f00000001c0)) getpid() r5 = setfsuid$auto(0xee01) setresuid$auto(0x0, r5, r5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000001f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a80)=ANY=[], 0x113c}}, 0x20040081) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 8m2.322336796s ago: executing program 3 (id=2288): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x4, 0x1, 0x4, 0x54d7, 0x7) mmap$auto(0xa, 0x400008, 0x6, 0x9b72, 0xffffffffffffffff, 0x408000) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0x35, 0x7, 0x40, r0}, 0x9) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25040000000800020008000000bead713289fd582a8d68d253fb98dcc6fbf2d79c820bd90d5a69e23fcf"], 0x1c}, 0x1, 0x0, 0x0, 0x18005}, 0x40) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) epoll_create$auto(0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0xa, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400007, 0x8, 0x9b72, 0xffffffffffffffff, 0x6) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xffffff00, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) 7m46.963721415s ago: executing program 32 (id=2288): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x4, 0x1, 0x4, 0x54d7, 0x7) mmap$auto(0xa, 0x400008, 0x6, 0x9b72, 0xffffffffffffffff, 0x408000) bpf$auto_BPF_BTF_LOAD(0x12, &(0x7f0000000000)=@bpf_attr_7={@btf_id=0x35, 0x7, 0x40, r0}, 0x9) sendmsg$auto_NLBL_CIPSOV4_C_LISTALL(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000fbdbdf25040000000800020008000000bead713289fd582a8d68d253fb98dcc6fbf2d79c820bd90d5a69e23fcf"], 0x1c}, 0x1, 0x0, 0x0, 0x18005}, 0x40) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) timerfd_gettime$auto(0xffffffffffffffff, 0x0) epoll_create$auto(0x1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x400000004) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0xa, 0x6) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) mkdir$auto(&(0x7f0000000040)='./cgroup/../file0\x00', 0x1) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x400007, 0x8, 0x9b72, 0xffffffffffffffff, 0x6) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) socket(0x2, 0x1, 0x0) socketpair$auto(0x1e, 0x3, 0xffffff00, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) 16.324237976s ago: executing program 2 (id=3877): socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$auto(0xffffffffffffffff, 0x800064c1, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r1 = pidfd_open$auto(0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0xb9, 0x9, 0xfffffffffffffffd, 0x948d, 0x1ff, 0x1, 0x8, 0x8003, 0x65, 0x8000001f, 0x10000001002, 0x100000000006d41, 0x7, 0x1, 0x9]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x3, 0x6, 0x7, 0x4, 0x0, 0x4000000000003, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x3, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000002100)=ANY=[@ANYBLOB="60100000", @ANYRES16=r3, @ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x10, r1, 0x8000) socketpair$auto(0x1b, 0x4, 0x8000000000000000, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x4, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prctl$auto_SIGCONT(0xc86, 0x12, 0x0, 0x30c, 0x1) 13.101196842s ago: executing program 4 (id=3890): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x6f4641, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, r1, 0x3fc) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x1b41, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) mmap$auto(0x9, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) getsockopt$auto(0xffffffffffffffff, 0x100084, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) sendfile$auto(0x3, r6, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) settimeofday$auto(0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioctl$auto_EVIOCSREP(r7, 0x400845fe, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYRESHEX=0x0], 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) 12.878896426s ago: executing program 2 (id=3892): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) socket(0xa, 0x3, 0x3b) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x1, 0x40000006, 0x0, 0x0, 0x80000001) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyed\x00', 0x40400, 0x0) io_uring_enter$auto(r2, 0x9, 0x3, 0x0, &(0x7f00000001c0)="f7b7673865581b3df46865ec7eae691a1f1d921e0d38af47deeb690849f5faa51485a5d30653a73214817771ba36e22151a81d9c8a0dec9abed25fb8ad26411e7c53f10218651cb8219670beb6ce6268ee6378ec8e386cbe7bc22a1038ed5d18d37e1236cf25a12ce7a33b253de7eda5685c0e296879c18d8d6e4802a765c943a1a00d3101bc4578bc2c5dc1", 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) mmap$auto(0x0, 0x400, 0xfffffffffffffffa, 0xeb1, 0x401, 0x8000) madvise$auto(0x4, 0x2004, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8004) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event0\x00', 0x802000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/v4l-touch15/power/autosuspend_delay_ms\x00', 0x20b42, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) write$auto(r3, 0x0, 0x47ffffdf2) 9.978699435s ago: executing program 4 (id=3900): mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x2, 0x2020006, 0x1, 0xeb1, 0xfffffffffffffffa, 0x800000000008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001500), r0) statmount$auto(&(0x7f0000000040)={0x1f, @raw, 0x80000029, 0xf5ff, 0x8}, 0x0, 0x7ffffffff000, 0x0) r1 = socket(0x10, 0x1, 0x0) getsockopt$auto(r1, 0x40006, 0x4, 0x0, &(0x7f0000000100)=0x7fffffff) write$auto(0xca, &(0x7f0000000000)='\x04>\x01\x01\x00\x00\x00\x00\x01_\x9e\x99:R\xcc\x96\xf9&\x02\xb0\x93l\xeb\x87\r\b\x87\x14\xf8e6\x9c%\xb6\x9a\\S\xa2(Q\xcc', 0x7f) r2 = socket(0xa, 0x3, 0x3b) r3 = getsockopt$auto(r2, 0x29, 0x5, 0x0, 0x0) ioctl$auto_snd_seq_f_ops_seq_clientmgr(r3, 0x1, &(0x7f0000000240)="c5f57b583b5768e58ed6c726998b") mq_getsetattr$auto(r2, &(0x7f0000000180)={0xb2b6, 0x1d, 0x8, 0x3}, &(0x7f00000001c0)={0x401, 0x1, 0x1, 0x8}) unshare$auto(0x1) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f0000000280)=""/40, 0x28) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400007, 0x0, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/smaps_rollup\x00', 0x20000, 0x0) lseek$auto(r4, 0x7fd, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r5, r5, 0x4, 0x1ff, 0xffffffffffffffff, @relative_id=0x13, 0xe603}, 0xf) mmap$auto(0x0, 0x20005, 0xdf, 0xeb1, 0x401, 0x200008000) sysfs$auto(0x2, 0x0, 0x0) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) mmap$auto(0xfffffffffffffffa, 0x10, 0xd, 0x410, r6, 0x5) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="05082cbd7000fbdbdf257e000000000000ffe9ff00000000fbcdcf723761e464cc2327ce89ce96a5082aecdbbbdb9b60b1d9000000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 8.800167779s ago: executing program 2 (id=3908): statx$auto(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x4, &(0x7f0000000040)={0x1, 0xa, 0x0, 0x7ff, 0x0, 0x0, 0xfffb, 0x8000, 0x83, 0x0, 0x7c55, 0x34b, {0x0, 0xe}, {0x100, 0x9}, {0x81, 0x2}, {0xfff, 0xfff, 0x2000000}, 0x1, 0x6, 0xb0, 0xfffffffb, 0x3, 0x76b3, 0x4, 0x8, 0x6, 0x20000000, 0x3, 0x4, [0x10, 0x4, 0x3, 0x523, 0x4, 0x8, 0xf, 0x1, 0x7]}) 7.742379463s ago: executing program 2 (id=3911): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) ioctl$auto_BLKRRPART(r0, 0x125f, 0xfffffffffffffffb) 7.324887803s ago: executing program 4 (id=3913): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00\x00\x00\x00\x00\xff\xfb\xff\x7f\x00\x00\x00\x00', 0x9) 7.008912264s ago: executing program 0 (id=3914): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x108000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x1, 0x40000006, 0x0, 0x0, 0x80000001) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptyed\x00', 0x40400, 0x0) io_uring_enter$auto(r2, 0x9, 0x3, 0x0, &(0x7f00000001c0)="f7b7673865581b3df46865ec7eae691a1f1d921e0d38af47deeb690849f5faa51485a5d30653a73214817771ba36e22151a81d9c8a0dec9abed25fb8ad26411e7c53f10218651cb8219670beb6ce6268ee6378ec8e386cbe7bc22a1038ed5d18d37e1236cf25a12ce7a33b253de7eda5685c0e296879c18d8d6e4802a765c943a1a00d3101bc4578bc2c5dc1", 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0xfffffc96) mmap$auto(0x0, 0x400, 0xfffffffffffffffa, 0xeb1, 0x401, 0x8000) madvise$auto(0x4, 0x2004, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8004) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event0\x00', 0x802000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/v4l-touch15/power/autosuspend_delay_ms\x00', 0x20b42, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) write$auto(r3, 0x0, 0x47ffffdf2) 6.792738399s ago: executing program 4 (id=3915): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) preadv2$auto(r0, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2a) (async) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/mtdblock0\x00', 0x14be02, 0x0) (async) mprotect$auto(0x1000, 0x401000, 0x4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) pidfd_open$auto(0xffffffffffffffff, 0x8c1) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r3) sendmsg$auto_TASKSTATS_CMD_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, r4, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_TGID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x20008010) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000001c0), r1) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c00000047546d9f9812d7d37cd8458aad1de2051eb0342b5e4f5f1a6ee15064b7bc97e8d6bd2d165e94fc5edbb7b947c8f09eb0bc46000000003e3900"/73, @ANYRES16=r2, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)={0xa4, r2, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xf9}, @NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_ROAM_SUPPORT={0x4}, @NL80211_ATTR_PMK={0x38, 0xfe, "13b719a075dd05b65a8d2b306dac1c56c6b75e212af0ab7c9228efadca93dac320044c1e26bbcf69fac915c134b386b0efb6d9d3"}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x3}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e24}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_FILS_ERP_RRK={0x2d, 0xfc, "eb0ec2373fd04abbeba55986db9bdaeabc842d89266f047855dca92eadae5625b1c52f230b63848edf"}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x44004) (async) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) sysfs$auto(0x2, 0xd, 0x0) (async) r5 = fsopen$auto(0x0, 0x1) fsconfig$auto_FSCONFIG_SET_FD(r5, 0x5, 0x0, 0x0, 0x0) (async) r6 = socket(0x15, 0x5, 0x0) (async) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) fstat$auto(r6, &(0x7f0000000440)={0x8, 0x7fff, 0xffffffffffffff11, 0x520, 0xffffffffffffffff, 0x0, 0x0, 0x9, 0x0, 0x5, 0x400, 0x8000000000000001, 0x709, 0x7, 0x8, 0x2, 0x9}) (async, rerun: 32) r9 = getpid() (async, rerun: 32) shmctl$auto_SHM_STAT(0x52, 0xd, &(0x7f0000000700)={{0x200000, 0xee00, 0xee01, 0x80000000, 0xfffffc00, 0x6, 0x668d}, 0x0, 0x7ff, 0x9, 0xf2d, @inferred=0xffffffffffffffff, @inferred, 0xd, 0x0, &(0x7f0000000500)="7de36c817f1b15b2657b070d52fe32d7e42ecd2e2e050ea7cc6c0d57686f22a17d7cbfab144133b2bfe10c56c668e3e08bc2787e71eb1c23775f12d5c53dd7f344921bd7b6957bdccf7a7e262fdc0c86910e30f9eb950b39614216cb12ca64e148f66c2b1edd828318c5015c4258b7a244bf8eadaff61c48bd34a08de8e84fc84142b819b4e4e98446a94d2be7dc448b990388a032eb3c04aef2518627b13798e4ef58d54334f419e56abc0fc4b68c255d175bd51568ead6d85f414689afe5e2a3780607f9a5cb2298ec17402514211bcce3f2db7677d88e40e468064cb7e4", &(0x7f0000000600)="47e204b36e6e22ad344d4c9e6a6acbf7031a6ddbd948035250e1cd2f8585d08670a4ebf7a60e0f2c1be0915f395bff3089d023a61b9d993482b0eff88e5a1489ab1d0c5963cf300c1d095528d11fb856c9fe515658ccc74505bc5e711e938e0ef813e26e1595ef7e451968d9295221831d2dbe1b0a072c5e2840acb9a12b00960cffc0a42bc99a3ed83971771ef7a11c146921794fa4818ee85f60c9487da5a308a4a58c8c1e97406a2c7b530fa279137f62c8a2c33a1e36467f86bf6101d24cfb0c2bc07383f742eeb88fddab01763f87a9c9e93b60d42eacae07955e63707517e1d8201dcba70ccd"}) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000c80)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000c40)={&(0x7f0000001dc0)={0xeb4, r2, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_VIF_RADIO_MASK={0x8, 0x14d, 0x9}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_NAN_FUNC={0x1c4, 0xf0, 0x0, 0x1, [@nested={0x10, 0xe9, 0x0, 0x1, [@typed={0x5, 0x28, 0x0, 0x0, @binary='C'}, @nested={0x4, 0x49}]}, @typed={0x8, 0xd3, 0x0, 0x0, @ipv4=@loopback}, @nested={0x1a7, 0x10e, 0x0, 0x1, [@typed={0x8, 0x8a, 0x0, 0x0, @uid=r8}, @generic="0e5c46cb3ef52f15690d1e4da2a70a42b0a14e4b58e7d0f2f8cdb1ab61975db02989f98a567b890c345a0bb3b29450991292bc35c009e846cd1eeb46cd7afece7f5a2e4755e17ce584db89aa67dbf2463d57d621ad4b3ac654577cd2eb54a7700b767df1f2c32eb111c8d7cc8af8d81ef0ef06c4b725ea9aca576a59b74f4db9f1b27b8f32a0a0386c0134647c60f2cd4d7ed818b057b8a1b0e9136426d805c9a17ef51e9fbf67051b397badacfbf1ea79e01831e54c", @typed={0x8, 0x8e, 0x0, 0x0, @pid=r9}, @typed={0x8, 0xe4, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x14b, 0x0, 0x0, @uid=r10}, @generic="495a5eccf6d175ec3896e776f8b11138477b9c0f607ece92c10799576e52d01ba873c899ada221f243323f3f366dca54b41a18ffbad594096daa850ae75aecd3ea47f841c7e5824d634db332c96b19c5d33839565c2c2ac19e2d0601ada865884b82aaca0d9d8adffe3d0626cf74d67880246edfe187e57bddf86ebf7608bae50e25de8db591fd76f6d2fd9d4508cf04ef9facd930bc6da7663693aaeb790f2e643a2ec5b2d395064b2fa2e199c0751edbbf7d62ad0164629a3e26c9ad2809671b871690a9", @typed={0x8, 0x10b, 0x0, 0x0, @str='{\\\'\x00'}]}]}, @NL80211_ATTR_PUNCT_BITMAP={0x8}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0x4}, @NL80211_ATTR_MBSSID_ELEMS={0xc68, 0x133, 0x0, 0x1, [@nested={0xa3b, 0x31, 0x0, 0x1, [@generic="fa4862e33ed13d64d362be0a9ccb0f46e84f1b7737d69b1f5c913606de711fc98fd9a17a1f89c83fba93418d022655727a69e74570ab3b8a19076895572c2ae88ecca49e93c2e1434b72fe5a86177a4fee960b8fc67b2f812af3409738278656cccef508cf5db3df66b4b073a30a701ceef1ca7f2a328599d02f8855b32c7b284845839ca36f67dbe766af68c635f18ba1defa5ee0a81372587d9a19953d8f0fce", @nested={0x22a, 0x61, 0x0, 0x1, [@generic="bd2c897341837cfb9a77b1cedddc0f2f49d9d482a3210ce911aa38c876bf447f03f531da62d520b3d502684db729ce5d8d20365947ef990978d2d6e44c95169fee7a62e110e7d8141092c5dc82b8e82eb6f542c78756fc70535dfad4d4f1785af5d51381b6c9ae8cf32d2c2ad00b45b67a8314d8ce1c4d7aa30287f40527780f56f27b66d5c8b94aa0fe94bb001635587d3e2651d7311ce330570d261c753f27a99e9a146db5b818", @generic="0fedddc1acf485c34a546d060b8abb717268744f0f58fe0211b4c7e9b8c00a4f10f24e1dc8384866b9a302793d4b2b721ec7", @typed={0xa, 0x3d, 0x0, 0x0, @str='[/!,(\x00'}, @generic="4e03e24995e4e090", @typed={0x14, 0x16b, 0x0, 0x0, @ipv6=@remote}, @generic="e58d10881c530e704a4fbf08ceed2e654e94fe9d482d2c4062019dac91b741e71434a6fe7d3cfd26500e2cc4c7de9425ef97ea6b464aca4dcac2fb7ec92978c84f5dc45875164515893f25630d4885408345756e2dcbacfe44843afd929f2aa4e9721f1f961af5b35ecc85c1e855a7c14d99eb4fe6185986b37b9eca7fcbaf94268e6b44932fcdc1fb821a4ea4a0196acaafbd48c8f0c8", @nested={0x4, 0x45}, @generic="a9d0f2dcd5dec28b43a12be74ca77846e56fd9e7d7a38bd450b2f77a9d909df574733ab2b24eff14aeb4c86532dbb31fa8ea4edb919bcf67bc44c08ce8bb1cfc899d56e4202392542cc1faee44334cceb53d5f1ad2d752654294707fadde3ad7514ce869e3d240e8c1d89f4ec76de2c4b5977b56b5ceeb637836c916cbfdfdc4d339b9ce1e5c607d55"]}, @nested={0x94, 0x8b, 0x0, 0x1, [@typed={0x8, 0x11d, 0x0, 0x0, @pid}, @generic="7a63a02a962c3ad488beef19972c60324d1ff2be09f904b9ed30c1ded8a75a5bb167a192f2a19cee7c243a2c0da6bc1eca60277ea59a2f01eed593bb67c36376df905e7571a94654724a24108883d817bef8fe133e9ea136a2bec5dc259ec6a6387a24a8cfe9fc5f40235406b5a3fa1006e7a4b3dc51cff0", @nested={0x4, 0x11c}, @generic, @typed={0xc, 0x48, 0x0, 0x0, @u64=0x5}]}, @nested={0x9e, 0xa1, 0x0, 0x1, [@typed={0x14, 0x16b, 0x0, 0x0, @ipv6=@private1}, @generic="9e3b1d029ebf909f2d579f89954f2287d5ba260d03126d8fe9a22a025c728888c84edfb9ac85d8406f21cbc8c4d1d1ac0ef2f618f51c4ffb3d05458a112e157328a5806f5f79cedd1fca1f8ef67f157f9b997ef8fb86b7a6b55628962e3a6957352f1f7c84405207974de71a7124df7654eb12f34fb6c6989f1a2a7a4a8b3a396a84fd5e8617"]}, @nested={0x28, 0x155, 0x0, 0x1, [@nested={0x4, 0xdb}, @nested={0x4, 0x14a}, @nested={0x4, 0x4a}, @typed={0x14, 0x48, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, @nested={0x4, 0x11}]}, @generic="d724bb1149d686489719e40ff571e5e7aad87ffc3214e3b65f41ae9b5af8", @generic, @nested={0x269, 0x9, 0x0, 0x1, [@generic="5aefed157d3b502e95a2cbda3c479e219b846eef7236ed20ae928d79dded0d57f08492a0469441f53cf9bf21ade4f564013ab3f1063a4f9bc9f243a4a5e30567d86a39f0ef0c5808b5711707f7d95255675d711e46c2f49a6a6beea3ede40854baad65e8924f3e50cc6a86a0e88f813ff3a98f3c8eb46514d4db27764628cfff2ac1eb486530ef04e31979c40ce469c4dbbc904082eeda0e0a8a7a5ad2f7dab0e134055102427b5e6dfaffc32d95b2babc4ec0e7f411afb7", @generic="b462e45a905a2f438d2b4e8c7bca8f8c9c6b29d93463577b6e43f67f61f65484282b3b2fbc36961cba258875277e3ad7a9eb1a0fac8de353a4a401fee0159f6503a2109cf30206bcde3e7b1be4c94bc96d0d44c171fd79e09da2b3d9f701e3947c3b40d11e3c93637bc5fd853e14f4e41761ccec5ee06f118d92e26adad3e577e23bdc5986fd61f22f5e67e7f737a8007f06d16aa4a2f66cd7b07fac856055fbac571a61280f8d6a7530b351de3d946d4a16756dd0a39a", @typed={0x14, 0x166, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x35}, @nested={0x4, 0x6}, @nested={0x4, 0x139}, @nested={0x4, 0x15d}, @nested={0x4, 0xc9}, @generic="410f9dbaa94fd2070001409d1ec514578dcaa441de92f11748affaea8c1b6102afd41c172c811c600de4d67bea16a395db553b7e3c81f6818a93b44c7aac04d34572b2c0f007738fd53cb7764b01d568b464d08a44bc9bd3fa8b82de30395d0d486674bd55bb3204ff47291f5fa943f8a5ad524b461c58f804d98847b49636606b44a17698c91b8280d1db33ce595b37ec91f8723fdc85425ff6930b8ac593900cea1201ad42282b2f37f3f53bfcac7e7cdcab1ed40071ca0d4a3723cd5d55363aada6b060cca731bae02f671e3d"]}, @nested={0x384, 0x13c, 0x0, 0x1, [@generic="62de9b20581b3cc37fe60aa0499677ca61cf78fb4dbcd4fffb53d60f8d9e9008bd46e942d9d1a5177c32f5fe00694cffb0350bcfc303cf7e2bfa7d4629109d4886ffa0f2fb9345c2ac6adb549363ae68d8f14331c2f725370c97bbe0dbb12bcb4aa8e7dd98b6dcaa7cf644b829660736fac4ba3a", @generic="cd8d2a4338211106a53019f5e0b35d060e4b276f66b55b129391d97c8c5df41e4b10b72d2b8359dc953f5fb2ca35c773c5572fa2eff498f3427a890410459f56ae69818523e27826d05f17162b0d145709274faf6d3a547d873e732dae9debf8af26bca86b78c513789010f942da305de9f555e26f162381", @nested={0x292, 0x119, 0x0, 0x1, [@generic="dc864d666bcfb54ba005a19d197a9361baaabf8758cb44a8af9f9a1194689dec85fb6f34a3255858ae697f17afaf7d67b83cf87eea72ba64ad73a6e998913321a2c50842f3b74b622709a214c454da1f76f6680bc18d7c0a6b57878a692d40501b29c10bccfb327a33e2c887ff91662cc5346cad053cd458f42db14ad58e2c83d53fd71bfcbde49a2192eff72593d66a504277749640ad99a38a753bac1d9b03a66d707f2b1ab5ee4872486946e1c3573b6e45f815c0fcb6d036a7c93d3ebe3d992d7afc39", @generic="b552d0f2dc22da324b6b8edb9587daa26bf2a62bb42503d28ad86e567035be4c8d204db5e2f92f6ab7cabab80e38aa664328daa6b533f0f0298be249538b4e0dac6f8226f3818c6fd1664be1f678b9c74d4e47c9c849b28756f6a76c06d5a8efc784a00bdca1b2d5105258c46addd2fe080e3527496990accfd77ac363c63a780c26ed3b47579c4fcb65396a208ed8a37d63cd21facff424b6eec1c9db3989cac63f5783dd403dceeeac327f51b63e0b4bd8f945b9f48f669512341ce2110c975bc4abdc4452d5559373875d1b9cb0df2e66549c6201e869ceffab4f65da727090c8c181d267fd", @generic="39bb2813f84da4251dc55f8a99edbd43a53fbdd0fa7f19480435f48077df4fa0d2ab162ff42f44bb601c194c88908e5eff1fb4111337968a3eb6e2e151872c666eadb623fff41301e5a4e584e92303ab0c35411249f00699d644273b56d269505c42606ab75c210379a975a2eec6c44fee8a55242656b245fd6d8571b42b4c6a6f377d00178220246d9561be11c9f99101262b2fab62109342e8465d5f4c35bdf3197f77006a1fadd70ed1231c79d619cca53ad5da78a81f01e69c8d30afcf75761a951fe2386a6151ebeb7b2dc2ca5de0d5", @nested={0x10, 0x166, 0x0, 0x1, [@typed={0xc, 0x9d, 0x0, 0x0, @u64=0x3a8d}]}]}]}]}, @nested={0x20f, 0xab, 0x0, 0x1, [@generic="52f7f5cc5ccbe2b08a3081ea90adf44ab33335f0cafe65d9f2409d0de97e6f64a472c753e538fcb7aeaeb02feb6c0f2aa47abde5a492ac6a4f351938304bbe2d4adc71909a6bd993edff4728e4d9355dab27f445468e2a89fa1d849bc5bd1956883236f9453959d51345c776caf0f057562e21050002bb4b70949195e3dfb20fa158740052163f1c2c15d62f7546691ef9b0445c3b36017bfef62b25982edb10bc191b0b4c850438ed7122654bfe31", @typed={0x14, 0x3d, 0x0, 0x0, @ipv6=@mcast1}, @generic="74cb31e950e3a95fd6cd2d174bed4d61f990d339ddf2a3b0d5a8511eedd4a7f30828aec2b4551f8b164505d27dd4b15d9dc023dfc48dd04622eda8210b44a71b797325da4d0546be683d67f25e62f63539b6e855583cd1e2c488ab4e4d929d7bbf73407700618f47c038be366e82d6b6064b1a6a79641d7f7754be0f2ffd7d2e16c4fce90fb5bf3a2033e9e3bc5a228ef16c8a13df5bee1ff3abecb91cbded47dfe3b50f4f311a7971813ce46a1e12216609bafba2120b0c910f69a1", @generic="8e1e5d57dbca6b884d3df63ba22f1fc3def015c727e8d6cb96638a0cf75d14f124628db8274d17214426598babbd230f24ae0e5a5e23db5175a3e5c6a2dfd2f265676c0c11ca9dfbe3d90e034cf7206c36ec16accaa9c601841e542fda19b04fe8a01f5a8061e75abf37eb39fbce83cbfa32fae1d9c59b614ee12fa32472876d66ca4d22efc7566e4d3b1aae"]}, @typed={0x17, 0xba, 0x0, 0x0, @str='(-,\x00\xa8!%&-#&^[(]}^--'}]}, @NL80211_ATTR_REG_ALPHA2={0x48, 0x21, "e5d2e0e962566faa3e9eaa242dd74acab138fa1319a5d94d97f36bb21f49cee88d76c6d9d10ee0da0fc2bb40bf988d61b0b733981b3d805c18f39d721074d27addf129cc"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7}]}, 0xeb4}, 0x1, 0x0, 0x0, 0x40}, 0x0) 6.304896294s ago: executing program 4 (id=3916): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0xa, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/031/001\x00', 0x20400, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/card2\x00', 0x0, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) 6.05741752s ago: executing program 2 (id=3917): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) read$auto(r0, 0x0, 0x4) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="01002dbd7000f9dbdf2501000000060002000100000005000700570000000800090108000000050004000300000014001f00fe88000000000000000000000000000114002000ff010000000000000000000000000001"], 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r2, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) read$auto(0x3, 0x0, 0x57) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x111442, 0x0) pread64$auto(r3, 0x0, 0x7, 0x6) process_madvise$auto_MADV_DOFORK(0xffffffffffffffff, 0x0, 0x0, 0xb, 0x9) unshare$auto(0x6c000000) 5.655239849s ago: executing program 4 (id=3918): mmap$auto(0x0, 0xffc, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0x6c6, 0xeb1, 0x401, 0x8000) unshare$auto(0x8000000) semget$auto(0x0, 0x2e4a, 0x7) semtimedop$auto(0x0, &(0x7f0000000000)={0x2, 0x8001, 0x36ec}, 0x1f4, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r0 = socket(0x29, 0x5, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) mkdir$auto(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x8cd) bpf$auto_BPF_OBJ_GET_INFO_BY_FD(0xf, &(0x7f00000002c0)=@test={0xffffffffffffffff, 0x0, 0xf05, 0x189, 0x8, 0x7fff, 0x7fff, 0x10000, 0xc91a, 0x0, 0x3f, 0x3, 0x3, 0x3, 0x6}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) inotify_init1$auto(0x3000000000000) r1 = socket$nl_generic(0x11, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x3, 0xeb1, 0xfffffffffffffffa, 0x7ffc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bdi/43:416/min_ratio\x00', 0x80302, 0x0) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x2, 0x1) unshare$auto(0x40000080) socket(0x1a, 0x6, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRESOCT=r1, @ANYBLOB="010003000000000000000a00000018003e8378ee25d48014000200"/39], 0x2c}, 0x1, 0x0, 0x0, 0x4805}, 0x400001d) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/smaps_rollup\x00', 0x840, 0x0) read$auto(r1, 0x0, 0x5) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x6, 0x78, 0x5b, 0xeb3, 0x401, 0x8000) madvise$auto(0x7ffffffffd, 0xffffffffffff0005, 0x2053) 5.071996044s ago: executing program 0 (id=3920): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x6f4641, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, r1, 0x3fc) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x1b41, 0x15) r2 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) mmap$auto(0x9, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) getsockopt$auto(0xffffffffffffffff, 0x100084, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0x400000000fff, 0x8000000008011, 0x3, 0x8000) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) sendfile$auto(0x3, r6, 0x0, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) settimeofday$auto(0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) ioctl$auto_EVIOCSREP(r7, 0x400845fe, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3, @ANYRESHEX=0x0], 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) 4.223960032s ago: executing program 1 (id=3922): madvise$auto(0x0, 0x600006, 0x19) 3.861112883s ago: executing program 1 (id=3923): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0c/xrun_debug\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) ioctl$auto_UBI_IOCATT(r2, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) r3 = openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_clock\x00', 0x101001, 0x0) write$auto_trace_clock_fops_trace(r3, 0x0, 0x0) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) pwritev$auto(r4, &(0x7f0000000140)={0x0, 0x400000000001}, 0x5, 0x5, 0x4000d3b8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000c00), r5) sendmsg$auto_TCP_METRICS_CMD_DEL(r5, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010927bd7000fbdbdf2502000000140054f02720dc1bef2c0dd6022e0c1a1031bbeea60800ff0100"/49], 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) getpid() gettid() r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram6\x00', 0x2000, 0x0) write$auto(r7, &(0x7f0000000000)='//\xf2\x00', 0x80000000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x801, 0x84) 3.238955372s ago: executing program 1 (id=3924): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x10, 0x4cbd5d) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) socketpair$auto(0x7, 0x2, 0x80f, &(0x7f0000000040)=0xdf) fremovexattr$auto(r2, &(0x7f0000000000)='system.posix_acl_access\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2, 0x14) r3 = setfsuid$auto(0xee00) setreuid$auto(r3, 0x0) setfsuid$auto(r3) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xc0680, 0x0) setfsgid$auto(0xee01) 3.064874047s ago: executing program 2 (id=3925): r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) ioctl$auto_XFS_IOC_ALLOCSP(r0, 0x4030580a, &(0x7f0000000040)={0x18, 0x8, 0x100000001, 0xd, 0x8, 0xffffffffffffffff}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000014, 0xffffffffffffffff, 0xc1000001, 0x8}, 0x5) prctl$auto_PR_SET_MM_START_DATA(0x200, 0x3, r1, 0x6, 0x6) set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x9) mmap$auto(0x1000000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$dir(0xffffffffffffff9c, 0x0, 0x40400, 0x48) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000003940), 0xc00, 0x0) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000003980)=""/61, 0x3d) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r4, 0x0, 0x98) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r5 = socket(0x10, 0x2, 0x4) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(r5, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="100bd5747000fedbdf2501000000a37ac29ba434ba8991e1dd87f029db076239ac106a99b866b8b3843aa1bcb7648622b2600e5fafb46915841b06137524fe61cb901416edd51f8e"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x28044004) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0xffffffffffffffff, r5, 0x0, 0xd) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r2, 0x0) 2.192286796s ago: executing program 0 (id=3926): openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x80001, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x2041, 0xfa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000680)=ANY=[@ANYRES32=r2, @ANYRES16=r2, @ANYBLOB="01002dbd7000fddbdf258c00000006000e001c85db4261a133d3c2da003a0b3ccfee9305cb1e8801dbc2eb90494ae9f65267f6abd0f50507510d2fed466b9c76aa2b2407bcd964a8d501f649a8419fff2cd5bcabea90af5a90964d3f98f034380f61d0f9cbfd361a46ac525517f8537f1a800f0064e870dc7b1b66d9cb5b1201c163ad790739677afa56780296018fe6ff37675241c5c984caacfb53096f094d45b0cbf002d6530fba3f9f3e570a58d06d5714ddf46f938f2fc6ca5e5c26ad7d955de1e910b5ea3d0435beb9a2af61fa835b7eceaff7d06731eae125bbd97a3d9e02"], 0x1c}, 0x1, 0x0, 0x0, 0x6040000}, 0x20008810) linkat$auto(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x1000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/irq/8/smp_affinity\x00', 0x490042, 0x0) shmget$auto(0x8, 0x10565, 0x7ff) r4 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sg0\x00', 0x2, 0x0) ioctl$auto_SG_SET_KEEP_ORPHAN(r4, 0x2287, &(0x7f0000000380)) shmat$auto(0x10000, &(0x7f0000000280)='(\x00', 0x5) shmctl$auto_SHM_LOCK(0x0, 0xb, &(0x7f00000001c0)={{0x2, 0xffffffffffffffff, 0xee01, 0x7fffffff, 0x4, 0x1781, 0x40}, 0x80000001, 0x71, 0x7fff, 0x400, @inferred, @inferred=0xffffffffffffffff, 0x2, 0x0, 0x0, &(0x7f0000000180)="6aa9f450cd41400ff19ce80c38955761650847da1d19a473ea07c5f21d47cae01adb43"}) r7 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000140), r0) sendmsg$auto_NFSD_CMD_VERSION_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="80010000", @ANYRES32=r7, @ANYRESOCT=r0], 0x180}, 0x1, 0x0, 0x0, 0x800}, 0x140080c0) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000340)={{0x0, 0xee00, 0xee00, 0x0, 0x8, 0x80000000, 0x80}, 0x7f, 0x1, 0x7, 0x3, @raw=0xc, @raw, 0x5, 0x0, 0x0, 0x0}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_init$auto(0xc00, 0x2) r8 = open(&(0x7f0000000000)='./file0\x00', 0x165b42, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, r8, 0x0) socket(0x2a, 0x2, 0x6) shmctl$auto_IPC_INFO(0x9, 0x3, &(0x7f00000005c0)={{0x2f8a, r5, r6, 0x6, 0x8, 0xd, 0x400}, 0x3, 0x571fb398, 0x3, 0x80000000, @raw=0x3, @raw=0x3, 0x0, 0x0, &(0x7f0000000240)="167f8e1bb3be12be62beb1cc478d21bc47ecfbdd7652f63c70b22c0b817934deb82394f9d12ca9ab5ae0b365456f3e94584bb2", &(0x7f00000002c0)="c0c424974f565c3fc519"}) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4743, 0x116) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) 2.057216296s ago: executing program 1 (id=3927): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c0283", 0x9f) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x40000080) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/vulnerabilities/mmio_stale_data\x00', 0x80000, 0x0) read$auto(r2, &(0x7f0000000040)='^\x00', 0x75e) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200017, 0x19) (async) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_FITHAW(r4, 0xc0045878, 0x2) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r5 = clone$auto(0x5, 0x0, 0x0, 0x0, 0xb) socket(0xf, 0x2, 0x7) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r5], 0x1}, 0x58) r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/exception_policy\x00', 0xc0201, 0x0) write$auto_tomoyo_operations_securityfs_if(r6, &(0x7f00000000c0)="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", 0x119) (async) getpid() sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) (async) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="032cb56b8df1534ea9f3580a0005000204000000000600010040020040060001000300000008000200485352007d8e"], 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) r7 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x400, 0x0) preadv2$auto(r7, &(0x7f0000000280)={0x0, 0x80000000}, 0x3, 0x40000000003, 0x4, 0x2a) 1.844405121s ago: executing program 0 (id=3928): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYRES16=0x0, @ANYBLOB='%\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x400c9d0}, 0xc080) r2 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x7, 0x9, 0x16, 0x2, 0x8000) socket(0xa, 0x1, 0x84) futex$auto(0x0, 0x109, 0xb, 0x0, 0x0, 0xa) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = socket(0x28, 0x5, 0x0) lseek$auto(0x3, 0x0, 0x1) bind$auto(r4, &(0x7f0000000080)=@in={0x28}, 0x68) getsockopt$auto(r3, 0x84, 0x8, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x9, 0x0, 0x3, 0xb}, 0xfff}, 0x6, 0x311) ioctl$auto(0x3, 0x541b, 0x38) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x2404c884}, 0x480f1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x1}, 0x7}, 0x3d55, 0x0) 1.523202076s ago: executing program 0 (id=3929): write$auto(0xffffffffffffffff, &(0x7f00000004c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x8) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000340)='/Eev/audio1\x00V\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\xdd\'\x91\x9c\xc1S9*\x80z\x1c\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xc0\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWg\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc\x00'/174, 0x10000) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x1e, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYBLOB="6a0051b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40897}, 0x2004c0c4) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1008, &(0x7f0000000100)={&(0x7f0000000080), 0x8}, 0x2, &(0x7f00000001c0), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r3 = openat$auto_proc_page_owner_threshold_(0xffffffffffffff9c, &(0x7f0000000000), 0x109280, 0x0) read$auto(r3, &(0x7f0000000100)='\xcb%)\x00', 0x7) prctl$auto(0x1000000003b, 0x592, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) rmdir$auto(0x0) socket(0xa, 0x4, 0x9000300) fanotify_init$auto(0x1, 0x2) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty6\x00', 0x14400, 0x0) ioctl$auto(r4, 0x80045430, r4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim2/new_port\x00', 0x183a41, 0x0) writev$auto(r5, &(0x7f00000002c0)={&(0x7f0000000480)='4r', 0x5}, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, r1, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x1, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) 1.168887363s ago: executing program 1 (id=3930): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x93f, 0x1fee1, 0x3, 0x6, 0xfffffffffffffffe, 0x9, 0x5, 0x8005, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x8, 0x4, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x1000000000000, 0xfffffffffffffffc, 0x0, 0x7fffffffffff, 0x9, 0x3, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x1fe, 0x82) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000340)={0xdc, r1, 0x1, 0x70bd2e, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xc8, 0x1, 0x0, 0x1, [@typed={0xc3, 0x1, 0x0, 0x0, @str='\x06\x1b\x00\x00\x00\x00\x00\x00\'J\xf5\x14t\xcaCgOtfo\bY\x97l/\x88\xc3\xdcE#\x1e\x99\xfb\xcc=\x02\xc2\x87N\xa2\xd3\xf78\xb9hZ\xc7f\x85\xb6\xe8\xcc\xaf\xa3| l\xc9\xbb\x19\x19[6\x81V\x00\xcdoEj[\xdbY\x85\x84\xb6X\x0f\x91\xa2o*5q\x9d\x1c\xf7\xf7Q\x11\xacXH\xd4\xb5\xf4\xe9\xf5\xce\x1b\xae\xb3`\xf5b\x8dA\x00=3o\xc8\x8e\xe9}z,\x19\xbb\xd8W\r5\n\xdb}S\xb7[:\xadh\xeb\xc0`\xb3^\xd3\x1e;Wh\x10\xe2\xaf\xb5\x9b\xa2\xbb\x8cj\\\xae\xcb\xac \xe8\xe3\xab\x80\xe5\xf3(\xf59\xfd\xe0\x85\xba\xea\x1eM\xd2\x17e\x11i\xc0[\xe3\xc3+c\xbdY\n\x8f\x1fwa\xe5'}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x24040804) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) write$auto(r2, &(0x7f0000000040)='\x00', 0x4) 58.366311ms ago: executing program 1 (id=3931): socket(0x2000000000000021, 0x2, 0x10000000000002) ioctl$auto(0xffffffffffffffff, 0x800064c1, 0xffffffffffffffff) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x9) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x481, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) r1 = pidfd_open$auto(0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0xb9, 0x9, 0xfffffffffffffffd, 0x948d, 0x1ff, 0x1, 0x8, 0x8003, 0x65, 0x8000001f, 0x10000001002, 0x100000000006d41, 0x7, 0x1, 0x9]}, 0x0) select$auto(0x9, &(0x7f00000000c0)={[0xeeda, 0x7, 0x100000001, 0x9, 0x6, 0x3, 0x6, 0x7, 0x4, 0x0, 0x4000000000003, 0x4303, 0x1, 0x9a8c, 0x9, 0x10001]}, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x3, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x0, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000031c0)={0x0, 0x0, &(0x7f0000003180)={&(0x7f0000002100)=ANY=[@ANYBLOB="60100000", @ANYRES16=r3, @ANYBLOB="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"], 0x1060}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe3, 0x10, r1, 0x8000) socketpair$auto(0x1b, 0x4, 0x8000000000000000, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x4, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) prctl$auto_SIGCONT(0xc86, 0x12, 0x0, 0x30c, 0x1) 0s ago: executing program 0 (id=3932): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000002c40)='/dev/tty27\x00', 0x60002, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/037/001\x00', 0x4a901, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000880), r1) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000280)={0x1c, r2, 0x3abba0b2ae0bab93, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x240088d0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='e\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r5) r7 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00", @ANYRES32=r7, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r8, @ANYRES16=r6, @ANYRES64=r1], 0x18}, 0x1, 0x0, 0x0, 0x4001}, 0xc004) openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/o2hb/quorum_regions\x00', 0x2, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r6, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc010}, 0x4) r9 = socket(0x25, 0xa, 0x4) getpeername$auto(r9, 0x0, 0x0) pipe2$auto(0x0, 0x80) ioctl$auto_USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000100)={0x2, 0x80, 0xffff, 0x5, &(0x7f0000000240), 0xc694, 0x3, 0x80005, @stream_id=0x7, 0x2004b, 0xc, 0x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_USBDEVFS_REAPURBNDELAY32(r0, 0x4004550d, 0x0) fcntl$auto(0x0, 0x407, 0xffffffff80000000) kernel console output (not intermixed with test programs): syzkaller #0 PREEMPT(full) [ 829.028397][T17588] Tainted: [L]=SOFTLOCKUP [ 829.028406][T17588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 829.028420][T17588] Call Trace: [ 829.028427][T17588] [ 829.028436][T17588] dump_stack_lvl+0x100/0x190 [ 829.028478][T17588] should_fail_ex.cold+0x5/0xa [ 829.028505][T17588] should_failslab+0xc2/0x120 [ 829.028531][T17588] __kmalloc_cache_noprof+0x7a/0x6f0 [ 829.028562][T17588] ? sctp_add_bind_addr+0xae/0x3e0 [ 829.028591][T17588] sctp_add_bind_addr+0xae/0x3e0 [ 829.028616][T17588] sctp_copy_local_addr_list+0x349/0x550 [ 829.028646][T17588] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 829.028677][T17588] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 829.028705][T17588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 829.028741][T17588] sctp_bind_addr_copy+0xe0/0x530 [ 829.028770][T17588] sctp_connect_new_asoc+0x1c9/0x770 [ 829.028807][T17588] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 829.028839][T17588] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 829.028867][T17588] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 829.028904][T17588] __sctp_connect+0x3e7/0xc70 [ 829.028941][T17588] ? __pfx___sctp_connect+0x10/0x10 [ 829.028974][T17588] ? __pfx_sctp_inet_connect+0x10/0x10 [ 829.029007][T17588] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 829.029041][T17588] ? __pfx_sctp_inet_connect+0x10/0x10 [ 829.029071][T17588] sctp_inet_connect+0x15f/0x220 [ 829.029111][T17588] __sys_connect_file+0x141/0x1a0 [ 829.029138][T17588] __sys_connect+0x141/0x170 [ 829.029160][T17588] ? __pfx___sys_connect+0x10/0x10 [ 829.029181][T17588] ? __fget_files+0x21f/0x3d0 [ 829.029235][T17588] ? __pfx_ksys_write+0x10/0x10 [ 829.029268][T17588] __x64_sys_connect+0x72/0xb0 [ 829.029291][T17588] ? lockdep_hardirqs_on+0x78/0x100 [ 829.029328][T17588] do_syscall_64+0x10b/0xf80 [ 829.029348][T17588] ? clear_bhb_loop+0x40/0x90 [ 829.029375][T17588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 829.029399][T17588] RIP: 0033:0x7fe66599ce59 [ 829.029418][T17588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 829.029441][T17588] RSP: 002b:00007fe663bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 829.029463][T17588] RAX: ffffffffffffffda RBX: 00007fe665c15fa0 RCX: 00007fe66599ce59 [ 829.029478][T17588] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 829.029492][T17588] RBP: 00007fe663bee090 R08: 0000000000000000 R09: 0000000000000000 [ 829.029505][T17588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 829.029519][T17588] R13: 00007fe665c16038 R14: 00007fe665c15fa0 R15: 00007ffd38374a78 [ 829.029548][T17588] [ 830.733949][T17606] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 830.742045][T17606] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 830.761296][T17606] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 830.794035][T17606] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 830.807171][T17606] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 830.845583][T17606] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 830.905117][T17606] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 830.952161][T17606] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 830.996596][T17606] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 831.058092][T17606] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 831.085340][T17606] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 831.188079][T17606] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 831.222897][T17606] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 831.486216][T17337] Bluetooth: hci4: unexpected event 0x03 length: 123 > 11 [ 831.532147][T17634] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2764'. [ 831.649673][T17634] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.660303][T17634] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.823285][T17643] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input82 [ 831.860869][ T4981] ERROR: Out of memory at tomoyo_memory_ok. [ 832.069739][T17337] Bluetooth: hci0: command 0x0406 tx timeout [ 832.870075][T17337] Bluetooth: hci4: command 0x0406 tx timeout [ 833.030054][T17337] Bluetooth: hci3: command 0x0406 tx timeout [ 833.110648][T17337] Bluetooth: hci1: command 0x0c1a tx timeout [ 833.169658][T17668] Process accounting resumed [ 833.308503][T17675] FAULT_INJECTION: forcing a failure. [ 833.308503][T17675] name failslab, interval 1, probability 0, space 0, times 0 [ 833.472918][T17675] CPU: 0 UID: 0 PID: 17675 Comm: syz.4.2772 Tainted: G L syzkaller #0 PREEMPT(full) [ 833.472956][T17675] Tainted: [L]=SOFTLOCKUP [ 833.472965][T17675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 833.472978][T17675] Call Trace: [ 833.472986][T17675] [ 833.472995][T17675] dump_stack_lvl+0x100/0x190 [ 833.473024][T17675] should_fail_ex.cold+0x5/0xa [ 833.473053][T17675] should_failslab+0xc2/0x120 [ 833.473080][T17675] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 833.473116][T17675] ? __proc_create+0x2cb/0x8c0 [ 833.473151][T17675] __proc_create+0x2cb/0x8c0 [ 833.473181][T17675] ? __pfx___proc_create+0x10/0x10 [ 833.473214][T17675] ? _raw_write_unlock+0x28/0x50 [ 833.473248][T17675] ? proc_register+0x559/0x8a0 [ 833.473281][T17675] proc_create_reg+0x75/0x170 [ 833.473313][T17675] proc_create_net_data+0x8e/0x1c0 [ 833.473345][T17675] ? __pfx_proc_create_net_data+0x10/0x10 [ 833.473375][T17675] ? sctp_defaults_init+0x720/0xd90 [ 833.473409][T17675] sctp_proc_init+0xfb/0x270 [ 833.473436][T17675] ? __pfx_sctp_defaults_init+0x10/0x10 [ 833.473462][T17675] sctp_defaults_init+0x758/0xd90 [ 833.473490][T17675] ? __pfx_sctp_defaults_init+0x10/0x10 [ 833.473518][T17675] ops_init+0x1e2/0x5f0 [ 833.473550][T17675] setup_net+0x118/0x3a0 [ 833.473579][T17675] ? __pfx_setup_net+0x10/0x10 [ 833.473609][T17675] ? mutex_init_lockdep+0xf1/0x120 [ 833.473637][T17675] copy_net_ns+0x46f/0x7c0 [ 833.473672][T17675] create_new_namespaces+0x3ea/0xac0 [ 833.473716][T17675] unshare_nsproxy_namespaces+0xf2/0x220 [ 833.473750][T17675] ksys_unshare+0x438/0xab0 [ 833.473786][T17675] ? __pfx_ksys_unshare+0x10/0x10 [ 833.473821][T17675] ? xfd_validate_state+0x129/0x190 [ 833.473853][T17675] __x64_sys_unshare+0x31/0x40 [ 833.473887][T17675] do_syscall_64+0x10b/0xf80 [ 833.473907][T17675] ? clear_bhb_loop+0x40/0x90 [ 833.473934][T17675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 833.473957][T17675] RIP: 0033:0x7fee1159ce59 [ 833.473975][T17675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 833.473997][T17675] RSP: 002b:00007fee124f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 833.474018][T17675] RAX: ffffffffffffffda RBX: 00007fee11816090 RCX: 00007fee1159ce59 [ 833.474033][T17675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 833.474048][T17675] RBP: 00007fee11632d6f R08: 0000000000000000 R09: 0000000000000000 [ 833.474062][T17675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 833.474075][T17675] R13: 00007fee11816128 R14: 00007fee11816090 R15: 00007fff8d20d848 [ 833.474103][T17675] [ 834.053627][T17689] input: f as /devices/virtual/input/input83 [ 834.151352][T17337] Bluetooth: hci0: command 0x0406 tx timeout [ 834.233834][T17692] ERROR: Out of memory at tomoyo_memory_ok. [ 834.951423][T17337] Bluetooth: hci4: command 0x0406 tx timeout [ 835.111407][T17337] Bluetooth: hci3: command 0x0406 tx timeout [ 835.191305][T17337] Bluetooth: hci1: command 0x0c1a tx timeout [ 836.172942][T17720] ERROR: Out of memory at tomoyo_memory_ok. [ 836.241622][T17337] Bluetooth: hci0: command 0x0406 tx timeout [ 836.775620][T17708] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 836.775620][T17708] program syz.0.2779 not setting count and/or reply_len properly [ 836.958997][T17713] kAFS: unparsable volume name [ 837.035672][T17337] Bluetooth: hci4: command 0x0406 tx timeout [ 837.272307][T17337] Bluetooth: hci1: command 0x0c1a tx timeout [ 837.742815][T17732] usbip-vudc usbip-vudc.0: gadget not bound [ 837.815012][T17734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2786'. [ 838.520094][T17748] netlink: 'syz.0.2789': attribute type 11 has an invalid length. [ 839.113920][T17337] Bluetooth: hci4: command 0x0406 tx timeout [ 839.219319][T17762] FAULT_INJECTION: forcing a failure. [ 839.219319][T17762] name failslab, interval 1, probability 0, space 0, times 0 [ 839.353501][T17337] Bluetooth: hci1: command 0x0c1a tx timeout [ 839.405085][T17762] CPU: 0 UID: 0 PID: 17762 Comm: syz.4.2793 Tainted: G L syzkaller #0 PREEMPT(full) [ 839.405121][T17762] Tainted: [L]=SOFTLOCKUP [ 839.405128][T17762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 839.405159][T17762] Call Trace: [ 839.405166][T17762] [ 839.405176][T17762] dump_stack_lvl+0x100/0x190 [ 839.405205][T17762] should_fail_ex.cold+0x5/0xa [ 839.405235][T17762] should_failslab+0xc2/0x120 [ 839.405263][T17762] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 839.405300][T17762] ? do_getname+0x35/0x390 [ 839.405333][T17762] ? find_held_lock+0x2b/0x80 [ 839.405363][T17762] ? ksys_write+0x190/0x250 [ 839.405394][T17762] do_getname+0x35/0x390 [ 839.405431][T17762] do_sys_openat2+0xc5/0x1e0 [ 839.405467][T17762] ? __pfx_do_sys_openat2+0x10/0x10 [ 839.405502][T17762] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 839.405530][T17762] ? __fget_files+0x21f/0x3d0 [ 839.405562][T17762] __x64_sys_openat+0x12d/0x210 [ 839.405599][T17762] ? __pfx___x64_sys_openat+0x10/0x10 [ 839.405634][T17762] ? ksys_write+0x1ac/0x250 [ 839.405665][T17762] ? rcu_is_watching+0x12/0xc0 [ 839.405697][T17762] do_syscall_64+0x10b/0xf80 [ 839.405717][T17762] ? clear_bhb_loop+0x40/0x90 [ 839.405745][T17762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 839.405769][T17762] RIP: 0033:0x7fee1159ce59 [ 839.405788][T17762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 839.405811][T17762] RSP: 002b:00007fee124f8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 839.405833][T17762] RAX: ffffffffffffffda RBX: 00007fee11816090 RCX: 00007fee1159ce59 [ 839.405849][T17762] RDX: 0000000000101300 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 839.405864][T17762] RBP: 00007fee124f8090 R08: 0000000000000000 R09: 0000000000000000 [ 839.405878][T17762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 839.405891][T17762] R13: 00007fee11816128 R14: 00007fee11816090 R15: 00007fff8d20d848 [ 839.405919][T17762] [ 839.979746][T17767] ERROR: Out of memory at tomoyo_memory_ok. [ 840.036199][T17773] ERROR: Out of memory at tomoyo_memory_ok. [ 841.802375][T17795] ERROR: Out of memory at tomoyo_memory_ok. [ 842.141938][T17803] FAULT_INJECTION: forcing a failure. [ 842.141938][T17803] name failslab, interval 1, probability 0, space 0, times 0 [ 842.210161][T17803] CPU: 0 UID: 0 PID: 17803 Comm: syz.1.2803 Tainted: G L syzkaller #0 PREEMPT(full) [ 842.210199][T17803] Tainted: [L]=SOFTLOCKUP [ 842.210207][T17803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 842.210222][T17803] Call Trace: [ 842.210230][T17803] [ 842.210239][T17803] dump_stack_lvl+0x100/0x190 [ 842.210270][T17803] should_fail_ex.cold+0x5/0xa [ 842.210301][T17803] should_failslab+0xc2/0x120 [ 842.210330][T17803] __kmalloc_cache_noprof+0x7a/0x6f0 [ 842.210365][T17803] ? sctp_add_bind_addr+0xae/0x3e0 [ 842.210396][T17803] sctp_add_bind_addr+0xae/0x3e0 [ 842.210424][T17803] sctp_copy_local_addr_list+0x349/0x550 [ 842.210459][T17803] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 842.210492][T17803] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 842.210525][T17803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 842.210564][T17803] sctp_bind_addr_copy+0xe0/0x530 [ 842.210596][T17803] sctp_connect_new_asoc+0x1c9/0x770 [ 842.210634][T17803] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 842.210673][T17803] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 842.210705][T17803] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 842.210747][T17803] __sctp_connect+0x3e7/0xc70 [ 842.210797][T17803] ? __pfx___sctp_connect+0x10/0x10 [ 842.210835][T17803] ? __pfx_sctp_inet_connect+0x10/0x10 [ 842.210872][T17803] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 842.210910][T17803] ? __pfx_sctp_inet_connect+0x10/0x10 [ 842.210944][T17803] sctp_inet_connect+0x15f/0x220 [ 842.210981][T17803] __sys_connect_file+0x141/0x1a0 [ 842.211011][T17803] __sys_connect+0x141/0x170 [ 842.211036][T17803] ? __pfx___sys_connect+0x10/0x10 [ 842.211061][T17803] ? __fget_files+0x21f/0x3d0 [ 842.211100][T17803] ? __pfx_ksys_write+0x10/0x10 [ 842.211133][T17803] __x64_sys_connect+0x72/0xb0 [ 842.211169][T17803] ? lockdep_hardirqs_on+0x78/0x100 [ 842.211203][T17803] do_syscall_64+0x10b/0xf80 [ 842.211221][T17803] ? clear_bhb_loop+0x40/0x90 [ 842.211247][T17803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.211269][T17803] RIP: 0033:0x7f135ad9ce59 [ 842.211286][T17803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.211307][T17803] RSP: 002b:00007f135bd2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 842.211328][T17803] RAX: ffffffffffffffda RBX: 00007f135b015fa0 RCX: 00007f135ad9ce59 [ 842.211342][T17803] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 842.211355][T17803] RBP: 00007f135bd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 842.211368][T17803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 842.211381][T17803] R13: 00007f135b016038 R14: 00007f135b015fa0 R15: 00007ffd16fd8498 [ 842.211407][T17803] [ 842.999978][T17800] Process accounting resumed [ 844.711333][T17837] netlink: 'syz.4.2809': attribute type 2 has an invalid length. [ 844.767505][T17837] netlink: 3632 bytes leftover after parsing attributes in process `syz.4.2809'. [ 844.831267][T17837] nbd: must specify a device to reconfigure [ 846.710804][T17881] ERROR: Out of memory at tomoyo_memory_ok. [ 846.984148][T17885] ERROR: Out of memory at tomoyo_memory_ok. [ 847.880294][T17898] phram: not enough arguments [ 849.061276][T17930] Zero length message leads to an empty skb [ 850.466786][T17937] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 850.466786][T17937] program syz.2.2826 not setting count and/or reply_len properly [ 850.613336][T17939] kAFS: unparsable volume name [ 851.541012][T17974] process 'syz.1.2833' launched './file0' with NULL argv: empty string added [ 851.666696][T17974] ERROR: Out of memory at tomoyo_memory_ok. [ 851.771075][T17976] ERROR: Out of memory at tomoyo_memory_ok. [ 852.265342][T17980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 852.871962][T17962] Process accounting paused [ 856.529254][T18022] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 856.529254][T18022] program syz.4.2843 not setting count and/or reply_len properly [ 859.047600][T18055] vhci_hcd: not connected 4 [ 860.016758][T18070] ERROR: Out of memory at tomoyo_memory_ok. [ 860.145000][T18073] ERROR: Out of memory at tomoyo_memory_ok. [ 860.475601][T18080] ERROR: Out of memory at tomoyo_memory_ok. [ 860.933554][T18081] zswap: compressor not available [ 861.823580][T18098] Zero length message leads to an empty skb [ 862.565699][T18105] warning: `syz.0.2863' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 863.318306][T18094] Process accounting paused [ 865.008260][T18123] FAULT_INJECTION: forcing a failure. [ 865.008260][T18123] name failslab, interval 1, probability 0, space 0, times 0 [ 865.072278][T18123] CPU: 0 UID: 0 PID: 18123 Comm: syz.0.2867 Tainted: G L syzkaller #0 PREEMPT(full) [ 865.072313][T18123] Tainted: [L]=SOFTLOCKUP [ 865.072321][T18123] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 865.072334][T18123] Call Trace: [ 865.072341][T18123] [ 865.072349][T18123] dump_stack_lvl+0x100/0x190 [ 865.072378][T18123] should_fail_ex.cold+0x5/0xa [ 865.072405][T18123] should_failslab+0xc2/0x120 [ 865.072431][T18123] __kmalloc_cache_noprof+0x7a/0x6f0 [ 865.072463][T18123] ? sctp_add_bind_addr+0xae/0x3e0 [ 865.072516][T18123] sctp_add_bind_addr+0xae/0x3e0 [ 865.072545][T18123] sctp_copy_local_addr_list+0x349/0x550 [ 865.072578][T18123] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 865.072610][T18123] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 865.072642][T18123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 865.072679][T18123] sctp_bind_addr_copy+0xe0/0x530 [ 865.072710][T18123] sctp_connect_new_asoc+0x1c9/0x770 [ 865.072749][T18123] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 865.072783][T18123] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 865.072813][T18123] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 865.072853][T18123] __sctp_connect+0x3e7/0xc70 [ 865.072893][T18123] ? __pfx___sctp_connect+0x10/0x10 [ 865.072929][T18123] ? __pfx_sctp_inet_connect+0x10/0x10 [ 865.072964][T18123] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 865.073011][T18123] ? __pfx_sctp_inet_connect+0x10/0x10 [ 865.073042][T18123] sctp_inet_connect+0x15f/0x220 [ 865.073075][T18123] __sys_connect_file+0x141/0x1a0 [ 865.073102][T18123] __sys_connect+0x141/0x170 [ 865.073125][T18123] ? __pfx___sys_connect+0x10/0x10 [ 865.073146][T18123] ? __fget_files+0x21f/0x3d0 [ 865.073181][T18123] ? __pfx_ksys_write+0x10/0x10 [ 865.073212][T18123] __x64_sys_connect+0x72/0xb0 [ 865.073233][T18123] ? lockdep_hardirqs_on+0x78/0x100 [ 865.073268][T18123] do_syscall_64+0x10b/0xf80 [ 865.073287][T18123] ? clear_bhb_loop+0x40/0x90 [ 865.073313][T18123] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.073335][T18123] RIP: 0033:0x7fe66599ce59 [ 865.073352][T18123] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.073374][T18123] RSP: 002b:00007fe663bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 865.073395][T18123] RAX: ffffffffffffffda RBX: 00007fe665c15fa0 RCX: 00007fe66599ce59 [ 865.073410][T18123] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 865.073423][T18123] RBP: 00007fe663bee090 R08: 0000000000000000 R09: 0000000000000000 [ 865.073436][T18123] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 865.073448][T18123] R13: 00007fe665c16038 R14: 00007fe665c15fa0 R15: 00007ffd38374a78 [ 865.073475][T18123] [ 866.542673][T18132] process 'syz.1.2869' launched './file0' with NULL argv: empty string added [ 866.727652][T18133] ERROR: Out of memory at tomoyo_memory_ok. [ 866.877501][T18132] ERROR: Out of memory at tomoyo_memory_ok. [ 868.510793][T18168] ERROR: Out of memory at tomoyo_memory_ok. [ 868.835247][T18173] Setting dangerous option i915.mitigations - tainting kernel [ 868.866186][T18173] Bad "i915.mitigations=!CmâUQF\ ", 'CmâUQF\' is unknown [ 870.643194][ T30] audit: type=1800 audit(1779623317.192:13): pid=18207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2886" name="dbroot" dev="configfs" ino=73560 res=0 errno=0 [ 870.667911][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.679360][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.809587][T18207] db_root: cannot open: /sy] [ 871.232899][T18214] process 'syz.2.2887' launched ':,' with NULL argv: empty string added [ 871.273886][T18214] ERROR: Out of memory at tomoyo_memory_ok. [ 872.124181][T18233] ERROR: Out of memory at tomoyo_memory_ok. [ 872.317926][T18234] ERROR: Out of memory at tomoyo_memory_ok. [ 873.842312][T18248] Zero length message leads to an empty skb [ 874.800087][T18243] Process accounting paused [ 875.087650][T18274] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 875.087650][T18274] program syz.4.2900 not setting count and/or reply_len properly [ 875.184110][T18277] No such timeout policy "" [ 875.230298][T18277] netlink: Failed to associated timeout policy '' [ 875.275339][T18263] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2898'. [ 875.691483][T18292] process 'syz.0.2904' launched './file0' with NULL argv: empty string added [ 875.770916][T18292] ERROR: Out of memory at tomoyo_memory_ok. [ 875.877892][T18296] ERROR: Out of memory at tomoyo_memory_ok. [ 875.946567][T18292] ERROR: Out of memory at tomoyo_memory_ok. [ 876.786093][T18316] FAULT_INJECTION: forcing a failure. [ 876.786093][T18316] name failslab, interval 1, probability 0, space 0, times 0 [ 876.841931][T18316] CPU: 0 UID: 0 PID: 18316 Comm: syz.4.2912 Tainted: G U L syzkaller #0 PREEMPT(full) [ 876.841967][T18316] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 876.841976][T18316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 876.841989][T18316] Call Trace: [ 876.841997][T18316] [ 876.842005][T18316] dump_stack_lvl+0x100/0x190 [ 876.842033][T18316] should_fail_ex.cold+0x5/0xa [ 876.842061][T18316] should_failslab+0xc2/0x120 [ 876.842087][T18316] __kmalloc_cache_noprof+0x7a/0x6f0 [ 876.842119][T18316] ? sctp_add_bind_addr+0xae/0x3e0 [ 876.842147][T18316] sctp_add_bind_addr+0xae/0x3e0 [ 876.842174][T18316] sctp_copy_local_addr_list+0x349/0x550 [ 876.842206][T18316] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 876.842236][T18316] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 876.842265][T18316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 876.842301][T18316] sctp_bind_addr_copy+0xe0/0x530 [ 876.842353][T18316] sctp_connect_new_asoc+0x1c9/0x770 [ 876.842388][T18316] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 876.842420][T18316] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 876.842449][T18316] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 876.842486][T18316] __sctp_connect+0x3e7/0xc70 [ 876.842524][T18316] ? __pfx___sctp_connect+0x10/0x10 [ 876.842561][T18316] ? __pfx_sctp_inet_connect+0x10/0x10 [ 876.842595][T18316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 876.842629][T18316] ? __pfx_sctp_inet_connect+0x10/0x10 [ 876.842660][T18316] sctp_inet_connect+0x15f/0x220 [ 876.842694][T18316] __sys_connect_file+0x141/0x1a0 [ 876.842721][T18316] __sys_connect+0x141/0x170 [ 876.842744][T18316] ? __pfx___sys_connect+0x10/0x10 [ 876.842766][T18316] ? __fget_files+0x21f/0x3d0 [ 876.842801][T18316] ? __pfx_ksys_write+0x10/0x10 [ 876.842832][T18316] __x64_sys_connect+0x72/0xb0 [ 876.842853][T18316] ? lockdep_hardirqs_on+0x78/0x100 [ 876.842888][T18316] do_syscall_64+0x10b/0xf80 [ 876.842907][T18316] ? clear_bhb_loop+0x40/0x90 [ 876.842934][T18316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.842956][T18316] RIP: 0033:0x7fee1159ce59 [ 876.842973][T18316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 876.842994][T18316] RSP: 002b:00007fee12519028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 876.843014][T18316] RAX: ffffffffffffffda RBX: 00007fee11815fa0 RCX: 00007fee1159ce59 [ 876.843029][T18316] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 876.843042][T18316] RBP: 00007fee12519090 R08: 0000000000000000 R09: 0000000000000000 [ 876.843055][T18316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 876.843067][T18316] R13: 00007fee11816038 R14: 00007fee11815fa0 R15: 00007fff8d20d848 [ 876.843094][T18316] [ 880.438692][T18342] FAULT_INJECTION: forcing a failure. [ 880.438692][T18342] name failslab, interval 1, probability 0, space 0, times 0 [ 880.498484][T18342] CPU: 0 UID: 0 PID: 18342 Comm: syz.4.2918 Tainted: G U L syzkaller #0 PREEMPT(full) [ 880.498525][T18342] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 880.498539][T18342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 880.498553][T18342] Call Trace: [ 880.498561][T18342] [ 880.498571][T18342] dump_stack_lvl+0x100/0x190 [ 880.498602][T18342] should_fail_ex.cold+0x5/0xa [ 880.498632][T18342] should_failslab+0xc2/0x120 [ 880.498661][T18342] __kmalloc_cache_noprof+0x7a/0x6f0 [ 880.498696][T18342] ? __devlink_region_snapshot_create+0x1ec/0x620 [ 880.498736][T18342] __devlink_region_snapshot_create+0x1ec/0x620 [ 880.498775][T18342] devlink_region_snapshot_create+0x34/0x50 [ 880.498808][T18342] nsim_dev_take_snapshot_write+0x11d/0x1b0 [ 880.498834][T18342] ? __debugfs_file_get+0x1fc/0x860 [ 880.498866][T18342] ? __pfx_nsim_dev_take_snapshot_write+0x10/0x10 [ 880.498900][T18342] full_proxy_write+0x135/0x1a0 [ 880.498934][T18342] vfs_write+0x2aa/0x1070 [ 880.498963][T18342] ? __pfx_full_proxy_write+0x10/0x10 [ 880.499005][T18342] ? __pfx_vfs_write+0x10/0x10 [ 880.499032][T18342] ? __fget_files+0x215/0x3d0 [ 880.499067][T18342] ? __fget_files+0x21f/0x3d0 [ 880.499102][T18342] ksys_write+0x12a/0x250 [ 880.499130][T18342] ? __pfx_ksys_write+0x10/0x10 [ 880.499160][T18342] ? rcu_is_watching+0x12/0xc0 [ 880.499194][T18342] do_syscall_64+0x10b/0xf80 [ 880.499216][T18342] ? clear_bhb_loop+0x40/0x90 [ 880.499246][T18342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 880.499270][T18342] RIP: 0033:0x7fee1159ce59 [ 880.499289][T18342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.499313][T18342] RSP: 002b:00007fee12519028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 880.499335][T18342] RAX: ffffffffffffffda RBX: 00007fee11815fa0 RCX: 00007fee1159ce59 [ 880.499352][T18342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 880.499366][T18342] RBP: 00007fee12519090 R08: 0000000000000000 R09: 0000000000000000 [ 880.499380][T18342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 880.499395][T18342] R13: 00007fee11816038 R14: 00007fee11815fa0 R15: 00007fff8d20d848 [ 880.499425][T18342] [ 880.499441][T18342] Failed to create region snapshot [ 882.937966][T18363] vivid-007: ================= START STATUS ================= [ 883.016292][T18363] vivid-007: Generate PTS: true [ 883.169862][T18349] Process accounting resumed [ 883.222822][T18363] vivid-007: Generate SCR: true [ 883.314775][T18363] tpg source WxH: 320x240 (Y'CbCr) [ 883.435714][T18363] tpg field: 1 [ 883.517993][T18363] tpg crop: (0,0)/320x240 [ 883.604876][T18363] tpg compose: (0,0)/320x240 [ 883.677302][T18363] tpg colorspace: 8 [ 883.739703][T18363] tpg transfer function: 0/0 [ 883.803596][T18363] tpg Y'CbCr encoding: 0/0 [ 883.903049][T18363] tpg quantization: 0/0 [ 883.971986][T18363] tpg RGB range: 0/2 [ 884.038051][T18363] vivid-007: ================== END STATUS ================== [ 885.355621][T18415] ERROR: Out of memory at tomoyo_memory_ok. [ 887.812367][T18451] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 887.812367][T18451] program syz.4.2945 not setting count and/or reply_len properly [ 888.554574][ T30] audit: type=1326 audit(4294967306.805:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18460 comm="syz.0.2948" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe66599ce59 code=0x0 [ 888.785464][T18469] FAULT_INJECTION: forcing a failure. [ 888.785464][T18469] name failslab, interval 1, probability 0, space 0, times 0 [ 888.840256][T18469] CPU: 0 UID: 0 PID: 18469 Comm: syz.0.2949 Tainted: G U L syzkaller #0 PREEMPT(full) [ 888.840295][T18469] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 888.840304][T18469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 888.840318][T18469] Call Trace: [ 888.840326][T18469] [ 888.840334][T18469] dump_stack_lvl+0x100/0x190 [ 888.840364][T18469] should_fail_ex.cold+0x5/0xa [ 888.840393][T18469] should_failslab+0xc2/0x120 [ 888.840421][T18469] __kmalloc_cache_noprof+0x7a/0x6f0 [ 888.840455][T18469] ? sctp_add_bind_addr+0xae/0x3e0 [ 888.840485][T18469] sctp_add_bind_addr+0xae/0x3e0 [ 888.840512][T18469] sctp_copy_local_addr_list+0x349/0x550 [ 888.840546][T18469] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 888.840579][T18469] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 888.840610][T18469] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 888.840648][T18469] sctp_bind_addr_copy+0xe0/0x530 [ 888.840683][T18469] sctp_connect_new_asoc+0x1c9/0x770 [ 888.840720][T18469] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 888.840755][T18469] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 888.840786][T18469] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 888.840826][T18469] __sctp_connect+0x3e7/0xc70 [ 888.840866][T18469] ? __pfx___sctp_connect+0x10/0x10 [ 888.840904][T18469] ? __pfx_sctp_inet_connect+0x10/0x10 [ 888.840940][T18469] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 888.840976][T18469] ? __pfx_sctp_inet_connect+0x10/0x10 [ 888.841009][T18469] sctp_inet_connect+0x15f/0x220 [ 888.841045][T18469] __sys_connect_file+0x141/0x1a0 [ 888.841074][T18469] __sys_connect+0x141/0x170 [ 888.841097][T18469] ? __pfx___sys_connect+0x10/0x10 [ 888.841138][T18469] ? __fget_files+0x21f/0x3d0 [ 888.841182][T18469] ? __pfx_ksys_write+0x10/0x10 [ 888.841215][T18469] __x64_sys_connect+0x72/0xb0 [ 888.841239][T18469] ? lockdep_hardirqs_on+0x78/0x100 [ 888.841275][T18469] do_syscall_64+0x10b/0xf80 [ 888.841295][T18469] ? clear_bhb_loop+0x40/0x90 [ 888.841323][T18469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.841347][T18469] RIP: 0033:0x7fe66599ce59 [ 888.841365][T18469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.841387][T18469] RSP: 002b:00007fe663bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 888.841409][T18469] RAX: ffffffffffffffda RBX: 00007fe665c15fa0 RCX: 00007fe66599ce59 [ 888.841424][T18469] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 888.841438][T18469] RBP: 00007fe663bee090 R08: 0000000000000000 R09: 0000000000000000 [ 888.841452][T18469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 888.841465][T18469] R13: 00007fe665c16038 R14: 00007fe665c15fa0 R15: 00007ffd38374a78 [ 888.841494][T18469] [ 890.274963][T18483] random: crng reseeded on system resumption [ 890.394588][T18483] hub 1-0:1.0: USB hub found [ 890.433352][T18483] hub 1-0:1.0: 1 port detected [ 891.635773][T18505] Zero length message leads to an empty skb [ 892.881519][T18528] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input84 [ 893.153356][ T4981] ERROR: Out of memory at tomoyo_memory_ok. [ 893.475474][T18541] queue_state_write: unsupported operation '' [ 893.611728][T18541] queue_state_write: use 'run', 'start' or 'kick' [ 893.910346][T18541] Process accounting resumed [ 893.939913][T18537] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 893.939913][T18537] program syz.4.2965 not setting count and/or reply_len properly [ 893.972623][T18526] ERROR: Out of memory at tomoyo_memory_ok. [ 894.229091][T17337] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 894.337970][T18558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2968'. [ 896.439909][T18599] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 896.575033][T18599] pci 0000:00:01.3: PCI INT A: no GSI [ 897.335722][T18610] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 897.335722][T18610] program syz.4.2980 not setting count and/or reply_len properly [ 897.421298][T18623] netlink: 'syz.1.2983': attribute type 11 has an invalid length. [ 899.338995][T18655] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 900.581891][T18674] syz.2.2994 uses obsolete (PF_INET,SOCK_PACKET) [ 900.649222][T18680] ERROR: Out of memory at tomoyo_memory_ok. [ 901.889659][T18697] netlink: 'syz.0.2999': attribute type 11 has an invalid length. [ 903.058581][T18703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 903.174580][T18703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 903.307799][ T30] audit: type=1800 audit(4294967321.547:15): pid=18712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3001" name="dbroot" dev="configfs" ino=75838 res=0 errno=0 [ 905.031735][T18719] Process accounting resumed [ 905.551344][T18738] ERROR: Out of memory at tomoyo_memory_ok. [ 905.620993][T18738] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 905.629339][T18738] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 905.941477][T18744] FAULT_INJECTION: forcing a failure. [ 905.941477][T18744] name failslab, interval 1, probability 0, space 0, times 0 [ 906.012226][T18744] CPU: 0 UID: 0 PID: 18744 Comm: syz.0.3012 Tainted: G U L syzkaller #0 PREEMPT(full) [ 906.012262][T18744] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 906.012271][T18744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 906.012283][T18744] Call Trace: [ 906.012291][T18744] [ 906.012300][T18744] dump_stack_lvl+0x100/0x190 [ 906.012328][T18744] should_fail_ex.cold+0x5/0xa [ 906.012373][T18744] should_failslab+0xc2/0x120 [ 906.012401][T18744] __kmalloc_cache_noprof+0x7a/0x6f0 [ 906.012441][T18744] ? sctp_add_bind_addr+0xae/0x3e0 [ 906.012483][T18744] sctp_add_bind_addr+0xae/0x3e0 [ 906.012508][T18744] sctp_copy_local_addr_list+0x349/0x550 [ 906.012540][T18744] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 906.012569][T18744] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 906.012599][T18744] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 906.012634][T18744] sctp_bind_addr_copy+0xe0/0x530 [ 906.012663][T18744] sctp_connect_new_asoc+0x1c9/0x770 [ 906.012697][T18744] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 906.012728][T18744] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 906.012756][T18744] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 906.012793][T18744] __sctp_connect+0x3e7/0xc70 [ 906.012831][T18744] ? __pfx___sctp_connect+0x10/0x10 [ 906.012864][T18744] ? __pfx_sctp_inet_connect+0x10/0x10 [ 906.012897][T18744] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 906.012930][T18744] ? __pfx_sctp_inet_connect+0x10/0x10 [ 906.012961][T18744] sctp_inet_connect+0x15f/0x220 [ 906.012994][T18744] __sys_connect_file+0x141/0x1a0 [ 906.013021][T18744] __sys_connect+0x141/0x170 [ 906.013043][T18744] ? __pfx___sys_connect+0x10/0x10 [ 906.013065][T18744] ? __fget_files+0x21f/0x3d0 [ 906.013099][T18744] ? __pfx_ksys_write+0x10/0x10 [ 906.013130][T18744] __x64_sys_connect+0x72/0xb0 [ 906.013152][T18744] ? lockdep_hardirqs_on+0x78/0x100 [ 906.013186][T18744] do_syscall_64+0x10b/0xf80 [ 906.013204][T18744] ? clear_bhb_loop+0x40/0x90 [ 906.013231][T18744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.013253][T18744] RIP: 0033:0x7fe66599ce59 [ 906.013270][T18744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.013290][T18744] RSP: 002b:00007fe663bee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 906.013311][T18744] RAX: ffffffffffffffda RBX: 00007fe665c15fa0 RCX: 00007fe66599ce59 [ 906.013326][T18744] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 906.013339][T18744] RBP: 00007fe663bee090 R08: 0000000000000000 R09: 0000000000000000 [ 906.013352][T18744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 906.013364][T18744] R13: 00007fe665c16038 R14: 00007fe665c15fa0 R15: 00007ffd38374a78 [ 906.013395][T18744] [ 906.732611][T18748] FAULT_INJECTION: forcing a failure. [ 906.732611][T18748] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 906.749215][T18749] ERROR: Out of memory at tomoyo_memory_ok. [ 906.801526][T18748] CPU: 0 UID: 0 PID: 18748 Comm: syz.2.3014 Tainted: G U L syzkaller #0 PREEMPT(full) [ 906.801567][T18748] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 906.801576][T18748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 906.801591][T18748] Call Trace: [ 906.801599][T18748] [ 906.801608][T18748] dump_stack_lvl+0x100/0x190 [ 906.801643][T18748] should_fail_ex.cold+0x5/0xa [ 906.801673][T18748] _copy_from_user+0x2e/0xd0 [ 906.801701][T18748] simple_attr_write_xsigned.isra.0+0x10e/0x310 [ 906.801738][T18748] ? __pfx_simple_attr_write_xsigned.isra.0+0x10/0x10 [ 906.801780][T18748] debugfs_attr_write+0x74/0xb0 [ 906.801818][T18748] vfs_write+0x2aa/0x1070 [ 906.801847][T18748] ? __pfx_debugfs_attr_write+0x10/0x10 [ 906.801884][T18748] ? __pfx_vfs_write+0x10/0x10 [ 906.801912][T18748] ? __fget_files+0x215/0x3d0 [ 906.801946][T18748] ? __fget_files+0x21f/0x3d0 [ 906.801994][T18748] ksys_write+0x12a/0x250 [ 906.802020][T18748] ? __pfx_ksys_write+0x10/0x10 [ 906.802049][T18748] ? rcu_is_watching+0x12/0xc0 [ 906.802081][T18748] do_syscall_64+0x10b/0xf80 [ 906.802102][T18748] ? clear_bhb_loop+0x40/0x90 [ 906.802129][T18748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.802153][T18748] RIP: 0033:0x7f53ae39ce59 [ 906.802171][T18748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.802194][T18748] RSP: 002b:00007f53ac5ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 906.802215][T18748] RAX: ffffffffffffffda RBX: 00007f53ae615fa0 RCX: 00007f53ae39ce59 [ 906.802231][T18748] RDX: 0000000000040400 RSI: 0000200000000080 RDI: 0000000000000003 [ 906.802245][T18748] RBP: 00007f53ac5ee090 R08: 0000000000000000 R09: 0000000000000000 [ 906.802259][T18748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 906.802272][T18748] R13: 00007f53ae616038 R14: 00007f53ae615fa0 R15: 00007ffd77f09a78 [ 906.802321][T18748] [ 907.928278][T18773] ERROR: Out of memory at tomoyo_memory_ok. [ 908.051652][T18774] ERROR: Out of memory at tomoyo_memory_ok. [ 908.150799][T18773] ERROR: Out of memory at tomoyo_memory_ok. [ 910.194396][T18799] bridge0: port 3(syz_tun) entered blocking state [ 910.244732][T18799] bridge0: port 3(syz_tun) entered disabled state [ 910.278237][T18799] syz_tun: entered allmulticast mode [ 910.367671][T18799] syz_tun: entered promiscuous mode [ 911.480375][T18812] ERROR: Out of memory at tomoyo_memory_ok. [ 911.653257][T18814] ERROR: Out of memory at tomoyo_memory_ok. [ 911.762403][T18812] ERROR: Out of memory at tomoyo_memory_ok. [ 912.023162][T18820] FAULT_INJECTION: forcing a failure. [ 912.023162][T18820] name failslab, interval 1, probability 0, space 0, times 0 [ 912.086695][T18820] CPU: 0 UID: 0 PID: 18820 Comm: syz.4.3030 Tainted: G U L syzkaller #0 PREEMPT(full) [ 912.086731][T18820] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 912.086740][T18820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 912.086752][T18820] Call Trace: [ 912.086760][T18820] [ 912.086768][T18820] dump_stack_lvl+0x100/0x190 [ 912.086797][T18820] should_fail_ex.cold+0x5/0xa [ 912.086830][T18820] should_failslab+0xc2/0x120 [ 912.086856][T18820] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 912.086879][T18820] ? __alloc_skb+0x140/0x710 [ 912.086902][T18820] ? __alloc_skb+0x5b7/0x710 [ 912.086930][T18820] __alloc_skb+0x140/0x710 [ 912.086953][T18820] ? __alloc_skb+0x5b7/0x710 [ 912.086976][T18820] ? __pfx___alloc_skb+0x10/0x10 [ 912.087001][T18820] ? __pfx___might_resched+0x10/0x10 [ 912.087026][T18820] ? __lock_acquire+0x4a5/0x2630 [ 912.087051][T18820] netlink_alloc_large_skb+0x69/0x150 [ 912.087099][T18820] netlink_sendmsg+0x680/0xda0 [ 912.087134][T18820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.087163][T18820] ? __import_iovec+0x1d2/0x640 [ 912.087188][T18820] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 912.087225][T18820] ____sys_sendmsg+0x9e1/0xb70 [ 912.087255][T18820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 912.087290][T18820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 912.087332][T18820] ___sys_sendmsg+0x190/0x1e0 [ 912.087387][T18820] ? __pfx____sys_sendmsg+0x10/0x10 [ 912.087458][T18820] __sys_sendmsg+0x170/0x220 [ 912.087507][T18820] ? __pfx___sys_sendmsg+0x10/0x10 [ 912.087549][T18820] ? rcu_is_watching+0x12/0xc0 [ 912.087581][T18820] do_syscall_64+0x10b/0xf80 [ 912.087602][T18820] ? clear_bhb_loop+0x40/0x90 [ 912.087630][T18820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.087655][T18820] RIP: 0033:0x7fee1159ce59 [ 912.087673][T18820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 912.087697][T18820] RSP: 002b:00007fee12519028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 912.087719][T18820] RAX: ffffffffffffffda RBX: 00007fee11815fa0 RCX: 00007fee1159ce59 [ 912.087735][T18820] RDX: 0000000000004802 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 912.087750][T18820] RBP: 00007fee12519090 R08: 0000000000000000 R09: 0000000000000000 [ 912.087764][T18820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.087778][T18820] R13: 00007fee11816038 R14: 00007fee11815fa0 R15: 00007fff8d20d848 [ 912.087808][T18820] [ 913.772483][T18835] Process accounting paused [ 914.276096][T18844] ERROR: Out of memory at tomoyo_memory_ok. [ 914.579119][T18849] ERROR: Out of memory at tomoyo_memory_ok. [ 914.859102][T18840] ERROR: Out of memory at tomoyo_memory_ok. [ 915.584302][T18869] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3039'. [ 916.763222][T18884] process 'syz.2.3043' launched ':,' with NULL argv: empty string added [ 916.871142][T18884] ERROR: Out of memory at tomoyo_memory_ok. [ 917.218038][T18889] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 917.218038][T18889] program syz.0.3044 not setting count and/or reply_len properly [ 917.627279][T18899] FAULT_INJECTION: forcing a failure. [ 917.627279][T18899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 917.692119][T18899] CPU: 0 UID: 0 PID: 18899 Comm: syz.1.3047 Tainted: G U L syzkaller #0 PREEMPT(full) [ 917.692157][T18899] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 917.692166][T18899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 917.692179][T18899] Call Trace: [ 917.692187][T18899] [ 917.692196][T18899] dump_stack_lvl+0x100/0x190 [ 917.692229][T18899] should_fail_ex.cold+0x5/0xa [ 917.692258][T18899] _copy_to_user+0x32/0xd0 [ 917.692285][T18899] simple_read_from_buffer+0xcb/0x170 [ 917.692315][T18899] proc_fail_nth_read+0x1af/0x230 [ 917.692372][T18899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 917.692409][T18899] ? rw_verify_area+0xce/0x6d0 [ 917.692431][T18899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 917.692465][T18899] vfs_read+0x1e4/0xb30 [ 917.692493][T18899] ? __pfx_vfs_read+0x10/0x10 [ 917.692516][T18899] ? __fget_files+0x215/0x3d0 [ 917.692568][T18899] ? __fget_files+0x21f/0x3d0 [ 917.692602][T18899] ksys_read+0x12a/0x250 [ 917.692627][T18899] ? __pfx_ksys_read+0x10/0x10 [ 917.692656][T18899] ? rcu_is_watching+0x12/0xc0 [ 917.692689][T18899] do_syscall_64+0x10b/0xf80 [ 917.692710][T18899] ? clear_bhb_loop+0x40/0x90 [ 917.692739][T18899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.692762][T18899] RIP: 0033:0x7f135ad5d68e [ 917.692780][T18899] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 917.692802][T18899] RSP: 002b:00007f135bd2bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 917.692824][T18899] RAX: ffffffffffffffda RBX: 00007f135bd2c6c0 RCX: 00007f135ad5d68e [ 917.692839][T18899] RDX: 000000000000000f RSI: 00007f135bd2c0a0 RDI: 0000000000000004 [ 917.692853][T18899] RBP: 00007f135bd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 917.692867][T18899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 917.692880][T18899] R13: 00007f135b016038 R14: 00007f135b015fa0 R15: 00007ffd16fd8498 [ 917.692909][T18899] [ 918.550183][T18909] Zero length message leads to an empty skb [ 918.821651][T18916] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 918.978901][T18918] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 919.059809][T18924] ERROR: Out of memory at tomoyo_memory_ok. [ 919.280438][T18927] netlink: 'syz.4.3055': attribute type 11 has an invalid length. [ 920.099018][T18942] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 920.099018][T18942] program syz.0.3058 not setting count and/or reply_len properly [ 920.613438][T18960] process 'syz.2.3062' launched './file0' with NULL argv: empty string added [ 920.760146][T18961] ERROR: Out of memory at tomoyo_memory_ok. [ 920.851790][T18960] ERROR: Out of memory at tomoyo_memory_ok. [ 921.000327][T18965] ERROR: Out of memory at tomoyo_memory_ok. [ 923.917879][T19013] process 'syz.1.3074' launched ':,' with NULL argv: empty string added [ 923.956117][T19013] ERROR: Out of memory at tomoyo_memory_ok. [ 924.211948][T19016] FAULT_INJECTION: forcing a failure. [ 924.211948][T19016] name failslab, interval 1, probability 0, space 0, times 0 [ 924.273437][T19016] CPU: 0 UID: 0 PID: 19016 Comm: syz.1.3075 Tainted: G U L syzkaller #0 PREEMPT(full) [ 924.273474][T19016] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 924.273483][T19016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 924.273496][T19016] Call Trace: [ 924.273503][T19016] [ 924.273512][T19016] dump_stack_lvl+0x100/0x190 [ 924.273540][T19016] should_fail_ex.cold+0x5/0xa [ 924.273568][T19016] should_failslab+0xc2/0x120 [ 924.273606][T19016] __kmalloc_cache_noprof+0x7a/0x6f0 [ 924.273638][T19016] ? sctp_add_bind_addr+0xae/0x3e0 [ 924.273666][T19016] sctp_add_bind_addr+0xae/0x3e0 [ 924.273692][T19016] sctp_copy_local_addr_list+0x349/0x550 [ 924.273724][T19016] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 924.273754][T19016] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 924.273784][T19016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 924.273819][T19016] sctp_bind_addr_copy+0xe0/0x530 [ 924.273849][T19016] sctp_connect_new_asoc+0x1c9/0x770 [ 924.273883][T19016] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 924.273915][T19016] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 924.273946][T19016] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 924.273984][T19016] __sctp_connect+0x3e7/0xc70 [ 924.274021][T19016] ? __pfx___sctp_connect+0x10/0x10 [ 924.274055][T19016] ? __pfx_sctp_inet_connect+0x10/0x10 [ 924.274087][T19016] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 924.274121][T19016] ? __pfx_sctp_inet_connect+0x10/0x10 [ 924.274152][T19016] sctp_inet_connect+0x15f/0x220 [ 924.274185][T19016] __sys_connect_file+0x141/0x1a0 [ 924.274212][T19016] __sys_connect+0x141/0x170 [ 924.274235][T19016] ? __pfx___sys_connect+0x10/0x10 [ 924.274257][T19016] ? __fget_files+0x21f/0x3d0 [ 924.274291][T19016] ? __pfx_ksys_write+0x10/0x10 [ 924.274322][T19016] __x64_sys_connect+0x72/0xb0 [ 924.274344][T19016] ? lockdep_hardirqs_on+0x78/0x100 [ 924.274379][T19016] do_syscall_64+0x10b/0xf80 [ 924.274398][T19016] ? clear_bhb_loop+0x40/0x90 [ 924.274424][T19016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.274447][T19016] RIP: 0033:0x7f135ad9ce59 [ 924.274464][T19016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 924.274485][T19016] RSP: 002b:00007f135bd2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 924.274505][T19016] RAX: ffffffffffffffda RBX: 00007f135b015fa0 RCX: 00007f135ad9ce59 [ 924.274520][T19016] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 924.274533][T19016] RBP: 00007f135bd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 924.274546][T19016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 924.274559][T19016] R13: 00007f135b016038 R14: 00007f135b015fa0 R15: 00007ffd16fd8498 [ 924.274590][T19016] [ 924.564565][T19019] ERROR: Out of memory at tomoyo_memory_ok. [ 925.092160][T19029] ERROR: Out of memory at tomoyo_memory_ok. [ 925.151800][T19032] ERROR: Out of memory at tomoyo_memory_ok. [ 925.221086][T19029] ERROR: Out of memory at tomoyo_memory_ok. [ 925.229322][T19028] netlink: 262 bytes leftover after parsing attributes in process `syz.0.3076'. [ 926.565723][T19043] Zero length message leads to an empty skb [ 926.785833][T19048] syz.0.3084 uses obsolete (PF_INET,SOCK_PACKET) [ 927.272232][T19057] ubi0: attaching mtd0 [ 927.301987][T19061] FAULT_INJECTION: forcing a failure. [ 927.301987][T19061] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 927.339552][T19057] ubi0: scanning is finished [ 927.365607][T19061] CPU: 0 UID: 0 PID: 19061 Comm: syz.1.3088 Tainted: G U L syzkaller #0 PREEMPT(full) [ 927.365664][T19061] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 927.365673][T19061] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 927.365686][T19061] Call Trace: [ 927.365693][T19061] [ 927.365702][T19061] dump_stack_lvl+0x100/0x190 [ 927.365732][T19061] should_fail_ex.cold+0x5/0xa [ 927.365760][T19061] _copy_from_iter+0x1f4/0x1690 [ 927.365789][T19061] ? __asan_memset+0x23/0x50 [ 927.365825][T19061] ? __pfx__copy_from_iter+0x10/0x10 [ 927.365850][T19061] ? __pfx___alloc_skb+0x10/0x10 [ 927.365887][T19061] ? __pfx___might_resched+0x10/0x10 [ 927.365912][T19061] ? __lock_acquire+0x4a5/0x2630 [ 927.365939][T19061] netlink_sendmsg+0x808/0xda0 [ 927.365978][T19061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.366009][T19061] ? __import_iovec+0x1d2/0x640 [ 927.366035][T19061] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 927.366073][T19061] ____sys_sendmsg+0x9e1/0xb70 [ 927.366105][T19061] ? __pfx_netlink_sendmsg+0x10/0x10 [ 927.366139][T19061] ? __pfx_____sys_sendmsg+0x10/0x10 [ 927.366183][T19061] ___sys_sendmsg+0x190/0x1e0 [ 927.366218][T19061] ? __pfx____sys_sendmsg+0x10/0x10 [ 927.366282][T19061] __sys_sendmsg+0x170/0x220 [ 927.366317][T19061] ? __pfx___sys_sendmsg+0x10/0x10 [ 927.366354][T19061] ? rcu_is_watching+0x12/0xc0 [ 927.366384][T19061] do_syscall_64+0x10b/0xf80 [ 927.366403][T19061] ? clear_bhb_loop+0x40/0x90 [ 927.366428][T19061] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.366450][T19061] RIP: 0033:0x7f135ad9ce59 [ 927.366467][T19061] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 927.366488][T19061] RSP: 002b:00007f135bd2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.366509][T19061] RAX: ffffffffffffffda RBX: 00007f135b015fa0 RCX: 00007f135ad9ce59 [ 927.366524][T19061] RDX: 0000000000004802 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 927.366538][T19061] RBP: 00007f135bd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 927.366551][T19061] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 927.366564][T19061] R13: 00007f135b016038 R14: 00007f135b015fa0 R15: 00007ffd16fd8498 [ 927.366591][T19061] [ 927.856466][T19057] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 928.362794][T19057] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 929.453462][T19104] ERROR: Out of memory at tomoyo_memory_ok. [ 929.607741][T19109] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 929.607741][T19109] program syz.0.3098 not setting count and/or reply_len properly [ 929.674438][T19111] ERROR: Out of memory at tomoyo_memory_ok. [ 929.826347][T19104] ERROR: Out of memory at tomoyo_memory_ok. [ 931.567628][ T30] audit: type=1800 audit(4294967349.803:16): pid=19127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3103" name="dbroot" dev="configfs" ino=77887 res=0 errno=0 [ 932.122228][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.128627][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.299154][T19140] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 932.299154][T19140] program syz.1.3109 not setting count and/or reply_len properly [ 935.202973][T19170] kexec: Could not allocate control_code_buffer [ 935.502262][T19179] FAULT_INJECTION: forcing a failure. [ 935.502262][T19179] name failslab, interval 1, probability 0, space 0, times 0 [ 935.568165][T19179] CPU: 0 UID: 0 PID: 19179 Comm: syz.1.3117 Tainted: G U L syzkaller #0 PREEMPT(full) [ 935.568206][T19179] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 935.568215][T19179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 935.568230][T19179] Call Trace: [ 935.568238][T19179] [ 935.568248][T19179] dump_stack_lvl+0x100/0x190 [ 935.568279][T19179] should_fail_ex.cold+0x5/0xa [ 935.568309][T19179] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 935.568336][T19179] should_failslab+0xc2/0x120 [ 935.568365][T19179] __kmalloc_noprof+0xe0/0x850 [ 935.568394][T19179] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 935.568428][T19179] genl_family_rcv_msg_doit+0xc7/0x300 [ 935.568457][T19179] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 935.568488][T19179] ? genl_get_cmd+0x3e7/0x760 [ 935.568530][T19179] ? bpf_lsm_capable+0x9/0x10 [ 935.568556][T19179] ? security_capable+0x80/0x260 [ 935.568597][T19179] genl_rcv_msg+0x560/0x800 [ 935.568624][T19179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 935.568649][T19179] ? __pfx_macsec_del_txsa+0x10/0x10 [ 935.568682][T19179] netlink_rcv_skb+0x159/0x420 [ 935.568718][T19179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 935.568742][T19179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 935.568789][T19179] ? netlink_deliver_tap+0x1ae/0xcc0 [ 935.568826][T19179] genl_rcv+0x28/0x40 [ 935.568846][T19179] netlink_unicast+0x585/0x850 [ 935.568885][T19179] ? __pfx_netlink_unicast+0x10/0x10 [ 935.568928][T19179] netlink_sendmsg+0x8b0/0xda0 [ 935.568968][T19179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.569002][T19179] ? __import_iovec+0x1d2/0x640 [ 935.569030][T19179] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 935.569072][T19179] ____sys_sendmsg+0x9e1/0xb70 [ 935.569106][T19179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 935.569144][T19179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 935.569195][T19179] ___sys_sendmsg+0x190/0x1e0 [ 935.569234][T19179] ? __pfx____sys_sendmsg+0x10/0x10 [ 935.569302][T19179] __sys_sendmsg+0x170/0x220 [ 935.569331][T19179] ? __pfx___sys_sendmsg+0x10/0x10 [ 935.569372][T19179] ? rcu_is_watching+0x12/0xc0 [ 935.569403][T19179] do_syscall_64+0x10b/0xf80 [ 935.569424][T19179] ? clear_bhb_loop+0x40/0x90 [ 935.569452][T19179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.569481][T19179] RIP: 0033:0x7f135ad9ce59 [ 935.569499][T19179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 935.569522][T19179] RSP: 002b:00007f135bd2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.569544][T19179] RAX: ffffffffffffffda RBX: 00007f135b015fa0 RCX: 00007f135ad9ce59 [ 935.569559][T19179] RDX: 0000000000004802 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 935.569585][T19179] RBP: 00007f135bd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 935.569598][T19179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.569611][T19179] R13: 00007f135b016038 R14: 00007f135b015fa0 R15: 00007ffd16fd8498 [ 935.569638][T19179] [ 936.098091][T19124] Process accounting paused [ 937.757330][T19204] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 937.757330][T19204] program syz.0.3125 not setting count and/or reply_len properly [ 938.098486][T19205] ERROR: Out of memory at tomoyo_memory_ok. [ 940.919294][T19257] program syz.0.3140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 941.897781][T19274] FAULT_INJECTION: forcing a failure. [ 941.897781][T19274] name failslab, interval 1, probability 0, space 0, times 0 [ 942.033541][T19274] CPU: 0 UID: 0 PID: 19274 Comm: syz.1.3146 Tainted: G U L syzkaller #0 PREEMPT(full) [ 942.033578][T19274] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 942.033586][T19274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 942.033599][T19274] Call Trace: [ 942.033606][T19274] [ 942.033615][T19274] dump_stack_lvl+0x100/0x190 [ 942.033643][T19274] should_fail_ex.cold+0x5/0xa [ 942.033670][T19274] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 942.033695][T19274] should_failslab+0xc2/0x120 [ 942.033721][T19274] __kmalloc_noprof+0xe0/0x850 [ 942.033747][T19274] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 942.033778][T19274] genl_family_rcv_msg_doit+0xc7/0x300 [ 942.033808][T19274] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 942.033831][T19274] ? genl_get_cmd+0x3e7/0x760 [ 942.033858][T19274] ? bpf_lsm_capable+0x9/0x10 [ 942.033883][T19274] ? security_capable+0x80/0x260 [ 942.033922][T19274] genl_rcv_msg+0x560/0x800 [ 942.033947][T19274] ? __pfx_genl_rcv_msg+0x10/0x10 [ 942.033970][T19274] ? __pfx_macsec_del_txsa+0x10/0x10 [ 942.034002][T19274] netlink_rcv_skb+0x159/0x420 [ 942.034036][T19274] ? __pfx_genl_rcv_msg+0x10/0x10 [ 942.034060][T19274] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 942.034104][T19274] ? netlink_deliver_tap+0x1ae/0xcc0 [ 942.034139][T19274] genl_rcv+0x28/0x40 [ 942.034158][T19274] netlink_unicast+0x585/0x850 [ 942.034195][T19274] ? __pfx_netlink_unicast+0x10/0x10 [ 942.034236][T19274] netlink_sendmsg+0x8b0/0xda0 [ 942.034274][T19274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.034306][T19274] ? __import_iovec+0x1d2/0x640 [ 942.034333][T19274] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 942.034373][T19274] ____sys_sendmsg+0x9e1/0xb70 [ 942.034404][T19274] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.034440][T19274] ? __pfx_____sys_sendmsg+0x10/0x10 [ 942.034485][T19274] ___sys_sendmsg+0x190/0x1e0 [ 942.034521][T19274] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.034590][T19274] __sys_sendmsg+0x170/0x220 [ 942.034618][T19274] ? __pfx___sys_sendmsg+0x10/0x10 [ 942.034656][T19274] ? rcu_is_watching+0x12/0xc0 [ 942.034685][T19274] do_syscall_64+0x10b/0xf80 [ 942.034705][T19274] ? clear_bhb_loop+0x40/0x90 [ 942.034731][T19274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.034753][T19274] RIP: 0033:0x7f135ad9ce59 [ 942.034770][T19274] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.034792][T19274] RSP: 002b:00007f135bd2c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.034816][T19274] RAX: ffffffffffffffda RBX: 00007f135b015fa0 RCX: 00007f135ad9ce59 [ 942.034830][T19274] RDX: 0000000000004802 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 942.034844][T19274] RBP: 00007f135bd2c090 R08: 0000000000000000 R09: 0000000000000000 [ 942.034858][T19274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.034871][T19274] R13: 00007f135b016038 R14: 00007f135b015fa0 R15: 00007ffd16fd8498 [ 942.034898][T19274] [ 943.239515][T19280] process 'syz.1.3147' launched './file0' with NULL argv: empty string added [ 943.318563][T19281] ERROR: Out of memory at tomoyo_memory_ok. [ 943.517005][T19282] ERROR: Out of memory at tomoyo_memory_ok. [ 943.721408][T19280] ERROR: Out of memory at tomoyo_memory_ok. [ 945.963379][T19283] Process accounting resumed [ 946.151133][T19316] FAULT_INJECTION: forcing a failure. [ 946.151133][T19316] name failslab, interval 1, probability 0, space 0, times 0 [ 946.232980][T19316] CPU: 0 UID: 0 PID: 19316 Comm: syz.4.3157 Tainted: G U L syzkaller #0 PREEMPT(full) [ 946.233016][T19316] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 946.233024][T19316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 946.233037][T19316] Call Trace: [ 946.233044][T19316] [ 946.233052][T19316] dump_stack_lvl+0x100/0x190 [ 946.233080][T19316] should_fail_ex.cold+0x5/0xa [ 946.233107][T19316] should_failslab+0xc2/0x120 [ 946.233134][T19316] __kmalloc_cache_noprof+0x7a/0x6f0 [ 946.233166][T19316] ? sctp_add_bind_addr+0xae/0x3e0 [ 946.233194][T19316] sctp_add_bind_addr+0xae/0x3e0 [ 946.233220][T19316] sctp_copy_local_addr_list+0x349/0x550 [ 946.233251][T19316] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 946.233281][T19316] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 946.233311][T19316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 946.233347][T19316] sctp_bind_addr_copy+0xe0/0x530 [ 946.233377][T19316] sctp_connect_new_asoc+0x1c9/0x770 [ 946.233417][T19316] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 946.233449][T19316] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 946.233478][T19316] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 946.233528][T19316] __sctp_connect+0x3e7/0xc70 [ 946.233563][T19316] ? __pfx___sctp_connect+0x10/0x10 [ 946.233594][T19316] ? __pfx_sctp_inet_connect+0x10/0x10 [ 946.233625][T19316] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 946.233656][T19316] ? __pfx_sctp_inet_connect+0x10/0x10 [ 946.233685][T19316] sctp_inet_connect+0x15f/0x220 [ 946.233716][T19316] __sys_connect_file+0x141/0x1a0 [ 946.233741][T19316] __sys_connect+0x141/0x170 [ 946.233762][T19316] ? __pfx___sys_connect+0x10/0x10 [ 946.233782][T19316] ? __fget_files+0x21f/0x3d0 [ 946.233815][T19316] ? __pfx_ksys_write+0x10/0x10 [ 946.233843][T19316] __x64_sys_connect+0x72/0xb0 [ 946.233864][T19316] ? lockdep_hardirqs_on+0x78/0x100 [ 946.233895][T19316] do_syscall_64+0x10b/0xf80 [ 946.233913][T19316] ? clear_bhb_loop+0x40/0x90 [ 946.233938][T19316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.233958][T19316] RIP: 0033:0x7fee1159ce59 [ 946.233974][T19316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.233994][T19316] RSP: 002b:00007fee12519028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 946.234014][T19316] RAX: ffffffffffffffda RBX: 00007fee11815fa0 RCX: 00007fee1159ce59 [ 946.234027][T19316] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 946.234039][T19316] RBP: 00007fee12519090 R08: 0000000000000000 R09: 0000000000000000 [ 946.234052][T19316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 946.234063][T19316] R13: 00007fee11816038 R14: 00007fee11815fa0 R15: 00007fff8d20d848 [ 946.234089][T19316] [ 947.231822][T19321] zswap: compressor not available [ 947.556256][T19334] Zero length message leads to an empty skb [ 947.942623][T19342] ERROR: Out of memory at tomoyo_memory_ok. [ 948.033217][T19344] ERROR: Out of memory at tomoyo_memory_ok. [ 948.128266][T19342] ERROR: Out of memory at tomoyo_memory_ok. [ 949.045248][T19355] sg_write: data in/out 262108/1 bytes for SCSI command 0x7f-- guessing data in; [ 949.045248][T19355] program syz.0.3166 not setting count and/or reply_len properly [ 949.146487][T19356] FAULT_INJECTION: forcing a failure. [ 949.146487][T19356] name failslab, interval 1, probability 0, space 0, times 0 [ 949.235725][T19356] CPU: 0 UID: 0 PID: 19356 Comm: syz.0.3166 Tainted: G U L syzkaller #0 PREEMPT(full) [ 949.235765][T19356] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 949.235775][T19356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 949.235790][T19356] Call Trace: [ 949.235798][T19356] [ 949.235808][T19356] dump_stack_lvl+0x100/0x190 [ 949.235839][T19356] should_fail_ex.cold+0x5/0xa [ 949.235870][T19356] should_failslab+0xc2/0x120 [ 949.235899][T19356] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 949.235923][T19356] ? __d_alloc+0x34/0xa40 [ 949.235962][T19356] __d_alloc+0x34/0xa40 [ 949.235998][T19356] d_alloc_pseudo+0x1c/0xc0 [ 949.236022][T19356] alloc_file_pseudo+0xcf/0x230 [ 949.236061][T19356] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 949.236105][T19356] ? alloc_fd+0x476/0x790 [ 949.236141][T19356] sock_alloc_file+0x50/0x210 [ 949.236174][T19356] __sys_socket+0x1c0/0x260 [ 949.236196][T19356] ? __pfx___sys_socket+0x10/0x10 [ 949.236218][T19356] ? ksys_write+0x1ac/0x250 [ 949.236253][T19356] __x64_sys_socket+0x72/0xb0 [ 949.236287][T19356] ? lockdep_hardirqs_on+0x78/0x100 [ 949.236322][T19356] do_syscall_64+0x10b/0xf80 [ 949.236342][T19356] ? clear_bhb_loop+0x40/0x90 [ 949.236369][T19356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.236392][T19356] RIP: 0033:0x7fe66599ce59 [ 949.236409][T19356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.236432][T19356] RSP: 002b:00007fe663bcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 949.236454][T19356] RAX: ffffffffffffffda RBX: 00007fe665c16090 RCX: 00007fe66599ce59 [ 949.236469][T19356] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000015 [ 949.236482][T19356] RBP: 00007fe665a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 949.236495][T19356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 949.236508][T19356] R13: 00007fe665c16128 R14: 00007fe665c16090 R15: 00007ffd38374a78 [ 949.236536][T19356] [ 949.831886][T17337] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 950.084334][T19367] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 950.113480][T19367] random: crng reseeded on system resumption [ 950.381006][T19378] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 950.432756][T19377] mmap: syz.1.3172 (19377) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 950.769685][T19378] File: /dev/nullb0 PID: 19378 Comm: syz.1.3172 [ 951.096791][T19393] ERROR: Out of memory at tomoyo_memory_ok. [ 951.203950][T19396] ERROR: Out of memory at tomoyo_memory_ok. [ 951.286714][T19393] ERROR: Out of memory at tomoyo_memory_ok. [ 951.346827][T19401] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3180'. [ 951.961175][T17337] Bluetooth: hci1: command 0x0c1a tx timeout [ 952.216464][T19422] netlink: 'syz.0.3182': attribute type 2 has an invalid length. [ 952.314656][T19422] : entered promiscuous mode [ 954.031315][T19444] ERROR: Out of memory at tomoyo_memory_ok. [ 954.046837][ T6995] Bluetooth: hci1: command 0x0c1a tx timeout [ 954.700641][T19463] ======================================================= [ 954.700641][T19463] WARNING: The mand mount option has been deprecated and [ 954.700641][T19463] and is ignored by this kernel. Remove the mand [ 954.700641][T19463] option from the mount to silence this warning. [ 954.700641][T19463] ======================================================= [ 956.632497][T19489] mmap: syz.2.3201 (19489) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 956.695828][T19494] process 'syz.4.3203' launched './file0' with NULL argv: empty string added [ 956.778440][T19496] ERROR: Out of memory at tomoyo_memory_ok. [ 956.810742][T19494] ERROR: Out of memory at tomoyo_memory_ok. [ 956.884425][T19499] ERROR: Out of memory at tomoyo_memory_ok. [ 957.816186][T19508] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3207'. [ 958.005269][T19513] FAULT_INJECTION: forcing a failure. [ 958.005269][T19513] name failslab, interval 1, probability 0, space 0, times 0 [ 958.081160][T19513] CPU: 0 UID: 0 PID: 19513 Comm: syz.4.3209 Tainted: G U L syzkaller #0 PREEMPT(full) [ 958.081196][T19513] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 958.081211][T19513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 958.081224][T19513] Call Trace: [ 958.081231][T19513] [ 958.081240][T19513] dump_stack_lvl+0x100/0x190 [ 958.081268][T19513] should_fail_ex.cold+0x5/0xa [ 958.081295][T19513] should_failslab+0xc2/0x120 [ 958.081322][T19513] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 958.081357][T19513] ? skb_clone+0x190/0x400 [ 958.081388][T19513] skb_clone+0x190/0x400 [ 958.081415][T19513] netlink_deliver_tap+0xaed/0xcc0 [ 958.081453][T19513] netlink_unicast+0x6a5/0x850 [ 958.081490][T19513] ? __pfx_netlink_unicast+0x10/0x10 [ 958.081521][T19513] ? genl_rcv_msg+0x4be/0x800 [ 958.081550][T19513] netlink_ack+0x655/0xb80 [ 958.081589][T19513] netlink_rcv_skb+0x333/0x420 [ 958.081622][T19513] ? __pfx_genl_rcv_msg+0x10/0x10 [ 958.081645][T19513] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 958.081688][T19513] ? netlink_deliver_tap+0x1ae/0xcc0 [ 958.081726][T19513] genl_rcv+0x28/0x40 [ 958.081745][T19513] netlink_unicast+0x585/0x850 [ 958.081781][T19513] ? __pfx_netlink_unicast+0x10/0x10 [ 958.081821][T19513] netlink_sendmsg+0x8b0/0xda0 [ 958.081859][T19513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.081890][T19513] ? __import_iovec+0x1d2/0x640 [ 958.081917][T19513] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 958.081956][T19513] ____sys_sendmsg+0x9e1/0xb70 [ 958.081987][T19513] ? __pfx_netlink_sendmsg+0x10/0x10 [ 958.082022][T19513] ? __pfx_____sys_sendmsg+0x10/0x10 [ 958.082067][T19513] ___sys_sendmsg+0x190/0x1e0 [ 958.082102][T19513] ? __pfx____sys_sendmsg+0x10/0x10 [ 958.082166][T19513] __sys_sendmsg+0x170/0x220 [ 958.082194][T19513] ? __pfx___sys_sendmsg+0x10/0x10 [ 958.082236][T19513] ? rcu_is_watching+0x12/0xc0 [ 958.082267][T19513] do_syscall_64+0x10b/0xf80 [ 958.082287][T19513] ? clear_bhb_loop+0x40/0x90 [ 958.082312][T19513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.082334][T19513] RIP: 0033:0x7fee1159ce59 [ 958.082352][T19513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.082373][T19513] RSP: 002b:00007fee12519028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 958.082394][T19513] RAX: ffffffffffffffda RBX: 00007fee11815fa0 RCX: 00007fee1159ce59 [ 958.082408][T19513] RDX: 0000000000004802 RSI: 0000200000000fc0 RDI: 0000000000000003 [ 958.082422][T19513] RBP: 00007fee12519090 R08: 0000000000000000 R09: 0000000000000000 [ 958.082435][T19513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.082447][T19513] R13: 00007fee11816038 R14: 00007fee11815fa0 R15: 00007fff8d20d848 [ 958.082475][T19513] [ 958.552480][T19519] ERROR: Out of memory at tomoyo_memory_ok. [ 958.595597][T19520] netlink: 'syz.2.3212': attribute type 11 has an invalid length. [ 958.659079][T19523] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 958.685563][T19522] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 958.860590][T19531] netlink: 'syz.2.3215': attribute type 11 has an invalid length. [ 959.113490][T19536] ERROR: Out of memory at tomoyo_memory_ok. [ 959.235838][T19539] ERROR: Out of memory at tomoyo_memory_ok. [ 959.351719][T19536] ERROR: Out of memory at tomoyo_memory_ok. [ 959.878889][T19555] process 'syz.4.3223' launched './file0' with NULL argv: empty string added [ 960.000693][T19555] ERROR: Out of memory at tomoyo_memory_ok. [ 961.269357][T19581] FAULT_INJECTION: forcing a failure. [ 961.269357][T19581] name failslab, interval 1, probability 0, space 0, times 0 [ 961.356414][T19581] CPU: 0 UID: 0 PID: 19581 Comm: syz.4.3230 Tainted: G U L syzkaller #0 PREEMPT(full) [ 961.356454][T19581] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 961.356463][T19581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 961.356477][T19581] Call Trace: [ 961.356485][T19581] [ 961.356494][T19581] dump_stack_lvl+0x100/0x190 [ 961.356524][T19581] should_fail_ex.cold+0x5/0xa [ 961.356552][T19581] should_failslab+0xc2/0x120 [ 961.356580][T19581] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 961.356602][T19581] ? __d_alloc+0x34/0xa40 [ 961.356639][T19581] __d_alloc+0x34/0xa40 [ 961.356668][T19581] ? __pfx_stack_trace_save+0x10/0x10 [ 961.356703][T19581] d_alloc_parallel+0x111/0x14e0 [ 961.356728][T19581] ? kasan_save_stack+0x3f/0x50 [ 961.356768][T19581] ? kasan_save_stack+0x30/0x50 [ 961.356791][T19581] ? kasan_save_free_info+0x3b/0x70 [ 961.356825][T19581] ? link_path_walk+0x161f/0x1cc0 [ 961.356858][T19581] ? __pfx_d_alloc_parallel+0x10/0x10 [ 961.356886][T19581] ? lockdep_init_map_type+0x5c/0x250 [ 961.356912][T19581] ? lockdep_init_map_type+0x5c/0x250 [ 961.356941][T19581] __lookup_slow+0x193/0x460 [ 961.356981][T19581] ? __pfx___lookup_slow+0x10/0x10 [ 961.357041][T19581] lookup_slow+0x50/0x70 [ 961.357080][T19581] link_path_walk+0x1377/0x1cc0 [ 961.357115][T19581] path_openat+0x1be/0x31a0 [ 961.357144][T19581] ? kasan_save_stack+0x3f/0x50 [ 961.357167][T19581] ? kasan_save_stack+0x30/0x50 [ 961.357189][T19581] ? kasan_save_track+0x14/0x30 [ 961.357212][T19581] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 961.357258][T19581] ? __pfx_path_openat+0x10/0x10 [ 961.357301][T19581] do_file_open+0x20e/0x430 [ 961.357353][T19581] ? __pfx_do_file_open+0x10/0x10 [ 961.357395][T19581] ? __pfx_kfree_link+0x10/0x10 [ 961.357442][T19581] ? alloc_fd+0x476/0x790 [ 961.357474][T19581] ? do_getname+0x191/0x390 [ 961.357513][T19581] do_sys_openat2+0x10d/0x1e0 [ 961.357551][T19581] ? __pfx_do_sys_openat2+0x10/0x10 [ 961.357599][T19581] __x64_sys_openat+0x12d/0x210 [ 961.357638][T19581] ? __pfx___x64_sys_openat+0x10/0x10 [ 961.357686][T19581] ? rcu_is_watching+0x12/0xc0 [ 961.357719][T19581] do_syscall_64+0x10b/0xf80 [ 961.357740][T19581] ? clear_bhb_loop+0x40/0x90 [ 961.357769][T19581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.357794][T19581] RIP: 0033:0x7fee1155d68e [ 961.357814][T19581] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 961.357837][T19581] RSP: 002b:00007fee12518ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 961.357865][T19581] RAX: ffffffffffffffda RBX: 00007fee125196c0 RCX: 00007fee1155d68e [ 961.357882][T19581] RDX: 0000000000000002 RSI: 00007fee12518f90 RDI: ffffffffffffff9c [ 961.357898][T19581] RBP: 00007fee11632d6f R08: 0000000000000000 R09: 0000000000000000 [ 961.357912][T19581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 961.357927][T19581] R13: 00007fee11816038 R14: 00007fee11815fa0 R15: 00007fff8d20d848 [ 961.357957][T19581] [ 961.866475][T19590] Zero length message leads to an empty skb [ 961.972653][T19594] ERROR: Out of memory at tomoyo_memory_ok. [ 962.021386][T19590] Console: switching to colour frame buffer device 13x6 [ 962.969725][T19625] ubi3: attaching mtd1 [ 963.795671][T19647] process 'syz.1.3251' launched './file0' with NULL argv: empty string added [ 963.906480][T19652] ERROR: Out of memory at tomoyo_memory_ok. [ 964.047860][T19645] ERROR: Out of memory at tomoyo_memory_ok. [ 964.097176][T19649] ERROR: Out of memory at tomoyo_memory_ok. [ 964.123000][T19657] FAULT_INJECTION: forcing a failure. [ 964.123000][T19657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 964.173978][T19647] ERROR: Out of memory at tomoyo_memory_ok. [ 964.271036][T19657] CPU: 0 UID: 0 PID: 19657 Comm: syz.0.3252 Tainted: G U L syzkaller #0 PREEMPT(full) [ 964.271074][T19657] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 964.271083][T19657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 964.271097][T19657] Call Trace: [ 964.271105][T19657] [ 964.271113][T19657] dump_stack_lvl+0x100/0x190 [ 964.271143][T19657] should_fail_ex.cold+0x5/0xa [ 964.271172][T19657] _copy_from_user+0x2e/0xd0 [ 964.271198][T19657] move_addr_to_kernel+0x65/0x170 [ 964.271237][T19657] __sys_sendto+0x1c9/0x4b0 [ 964.271264][T19657] ? __pfx___sys_sendto+0x10/0x10 [ 964.271298][T19657] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 964.271338][T19657] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 964.271380][T19657] __x64_sys_sendto+0xe0/0x1c0 [ 964.271403][T19657] ? do_syscall_64+0x90/0xf80 [ 964.271423][T19657] ? lockdep_hardirqs_on+0x78/0x100 [ 964.271457][T19657] do_syscall_64+0x10b/0xf80 [ 964.271475][T19657] ? clear_bhb_loop+0x40/0x90 [ 964.271506][T19657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 964.271528][T19657] RIP: 0033:0x7fe66595d68e [ 964.271545][T19657] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 964.271574][T19657] RSP: 002b:00007fe663bece88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 964.271594][T19657] RAX: ffffffffffffffda RBX: 00007fe663bee6c0 RCX: 00007fe66595d68e [ 964.271608][T19657] RDX: 0000000000000020 RSI: 00007fe663bed000 RDI: 0000000000000006 [ 964.271621][T19657] RBP: 0000000000000000 R08: 00007fe663becf04 R09: 000000000000000c [ 964.271635][T19657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 964.271647][T19657] R13: 00007fe663becf58 R14: 00007fe663bed000 R15: 0000000000000000 [ 964.271674][T19657] [ 964.495019][T19661] ERROR: Out of memory at tomoyo_memory_ok. [ 966.166042][T19674] kexec: Could not allocate control_code_buffer [ 966.332984][T19697] Process accounting resumed [ 966.605193][T19706] netlink: 'syz.0.3259': attribute type 4 has an invalid length. [ 966.645138][T19706] Zero length message leads to an empty skb [ 967.070941][T19716] MTRR 1 not used [ 967.134831][T19720] ERROR: Out of memory at tomoyo_memory_ok. [ 967.224766][T19723] ERROR: Out of memory at tomoyo_memory_ok. [ 967.293653][T19720] ERROR: Out of memory at tomoyo_memory_ok. [ 971.410803][T19780] ERROR: Out of memory at tomoyo_memory_ok. [ 973.807847][T19817] netlink: 'syz.0.3283': attribute type 11 has an invalid length. [ 976.997823][T19874] ERROR: Out of memory at tomoyo_memory_ok. [ 978.613194][T19898] netlink: 318 bytes leftover after parsing attributes in process `syz.1.3304'. [ 979.845580][T19915] netlink: 'syz.2.3311': attribute type 11 has an invalid length. [ 980.501025][T19930] netlink: 54 bytes leftover after parsing attributes in process `syz.0.3323'. [ 980.672105][T19938] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3317'. [ 980.697542][T19939] futex_wake_op: syz.0.3323 tries to shift op by -2048; fix this program [ 980.767020][T19930] 0x000000000001-0x000000020000 : "" [ 980.800781][T19930] ftl_cs: FTL header corrupt! [ 981.046584][T19942] ERROR: Out of memory at tomoyo_memory_ok. [ 981.573257][T19950] netlink: 318 bytes leftover after parsing attributes in process `syz.0.3318'. [ 982.163549][T19964] ERROR: Out of memory at tomoyo_memory_ok. [ 982.295259][T19966] ERROR: Out of memory at tomoyo_memory_ok. [ 982.391219][T19969] netlink: 'syz.4.3325': attribute type 11 has an invalid length. [ 982.470859][T19972] ERROR: Out of memory at tomoyo_memory_ok. [ 982.878299][T19981] syz.4.3327 uses obsolete (PF_INET,SOCK_PACKET) [ 982.946828][T19983] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3328'. [ 983.285245][T19991] ERROR: Out of memory at tomoyo_memory_ok. [ 983.386066][T19992] ERROR: Out of memory at tomoyo_memory_ok. [ 983.448850][T19991] ERROR: Out of memory at tomoyo_memory_ok. [ 984.705473][T20008] netlink: 318 bytes leftover after parsing attributes in process `syz.4.3331'. [ 985.986427][T20035] netlink: 342 bytes leftover after parsing attributes in process `syz.1.3344'. [ 986.251533][T20043] netlink: 'syz.2.3346': attribute type 11 has an invalid length. [ 986.968682][T20065] netlink: 318 bytes leftover after parsing attributes in process `syz.2.3351'. [ 987.835336][T20077] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 987.951025][T20078] netlink: 'syz.0.3365': attribute type 11 has an invalid length. [ 988.989527][T20097] process 'syz.2.3363' launched ':,' with NULL argv: empty string added [ 989.007139][T20093] netlink: 'syz.0.3360': attribute type 11 has an invalid length. [ 989.032059][T20097] ERROR: Out of memory at tomoyo_memory_ok. [ 990.252013][T20123] Zero length message leads to an empty skb [ 991.249598][T20150] ERROR: Out of memory at tomoyo_memory_ok. [ 991.404394][T20153] ERROR: Out of memory at tomoyo_memory_ok. [ 991.590520][T20157] No such timeout policy "" [ 991.614418][T20157] netlink: Failed to associated timeout policy '' [ 993.564616][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.571743][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.355452][T20200] No such timeout policy "" [ 994.413507][T20200] netlink: Failed to associated timeout policy '' [ 997.538974][T20220] Process accounting paused [ 998.396658][T20247] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3403'. [ 998.678019][T20253] syz.2.3402 uses obsolete (PF_INET,SOCK_PACKET) [ 999.157023][T20261] ERROR: Out of memory at tomoyo_memory_ok. [ 1001.596536][T20275] ERROR: Out of memory at tomoyo_memory_ok. [ 1004.176043][T20319] netlink: 'syz.2.3420': attribute type 11 has an invalid length. [ 1006.556970][T20351] No such timeout policy "" [ 1006.608830][T20351] netlink: Failed to associated timeout policy '' [ 1007.334242][T20369] ERROR: Out of memory at tomoyo_memory_ok. [ 1008.761753][T20387] No such timeout policy "" [ 1008.786658][T20387] netlink: Failed to associated timeout policy '' [ 1008.845436][T20388] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3438'. [ 1010.245266][T20410] ERROR: Out of memory at tomoyo_memory_ok. [ 1010.360536][T20404] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3443'. [ 1014.423987][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3453'. [ 1014.965985][T20442] netlink: 'syz.4.3457': attribute type 11 has an invalid length. [ 1015.960700][T20456] No such timeout policy "" [ 1016.026528][T20456] netlink: Failed to associated timeout policy '' [ 1016.134447][ T6995] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1016.160109][ T6995] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1016.170386][ T6995] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1016.181746][ T6995] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1016.189312][ T6995] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1018.252192][T20486] ERROR: Out of memory at tomoyo_memory_ok. [ 1018.280913][ T6995] Bluetooth: hci2: command tx timeout [ 1018.377391][ T6995] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 1019.023582][T10572] bridge_slave_1: left allmulticast mode [ 1019.080542][T10572] bridge_slave_1: left promiscuous mode [ 1019.107717][T10572] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.276229][T10572] bridge_slave_0: left allmulticast mode [ 1019.299461][T10572] bridge_slave_0: left promiscuous mode [ 1019.337750][T10572] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.914277][T10572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1019.943998][T10572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1019.976191][T10572] bond0 (unregistering): Released all slaves [ 1020.074955][T20458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1020.098995][T20458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1020.123322][T20458] bridge_slave_0: entered allmulticast mode [ 1020.153257][T20458] bridge_slave_0: entered promiscuous mode [ 1020.230007][T20458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1020.254269][T20458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1020.289697][T20458] bridge_slave_1: entered allmulticast mode [ 1020.315300][T20458] bridge_slave_1: entered promiscuous mode [ 1020.361139][ T6995] Bluetooth: hci2: command tx timeout [ 1020.379275][T10572] ovs_: left promiscuous mode [ 1020.637981][T20458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.711319][T20458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.976495][T20509] hub 3-0:1.0: USB hub found [ 1021.005174][T20515] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3474'. [ 1021.047339][T20509] hub 3-0:1.0: 1 port detected [ 1021.056453][T20516] netlink: 'syz.1.3476': attribute type 11 has an invalid length. [ 1021.169583][T20458] team0: Port device team_slave_0 added [ 1021.200156][T20458] team0: Port device team_slave_1 added [ 1021.517433][T20509] usb usb3: authorized to connect [ 1021.583035][T20458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1021.608542][T20458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.691544][T20458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1021.929331][T20458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1021.963092][T20458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1021.999997][T20517] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 1022.083715][T20458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1022.127424][T20528] ERROR: Out of memory at tomoyo_memory_ok. [ 1022.203230][T20528] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1022.209693][T20528] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1022.433502][T20533] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3481'. [ 1022.442698][ T6995] Bluetooth: hci2: command tx timeout [ 1022.457980][T20535] No such timeout policy "" [ 1022.471373][T20535] netlink: Failed to associated timeout policy '' [ 1023.134415][T20458] hsr_slave_0: entered promiscuous mode [ 1023.170993][T20458] hsr_slave_1: entered promiscuous mode [ 1023.193587][T20458] debugfs: 'hsr0' already exists in 'hsr' [ 1023.221406][T20458] Cannot create hsr debugfs directory [ 1024.520432][ T6995] Bluetooth: hci2: command tx timeout [ 1025.262560][T10572] hsr_slave_0: left promiscuous mode [ 1025.288935][T10572] hsr_slave_1: left promiscuous mode [ 1025.317217][T10572] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1025.359090][T10572] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1025.410870][T10572] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1025.441942][T10572] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1025.523120][T20562] No such timeout policy "" [ 1025.555867][T20562] netlink: Failed to associated timeout policy '' [ 1025.888878][T10572] team0 (unregistering): Port device team_slave_1 removed [ 1025.946681][T10572] team0 (unregistering): Port device team_slave_0 removed [ 1026.763700][T20458] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1026.830909][T20458] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1026.862566][T20458] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1026.927357][T20458] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1026.982398][T20458] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1027.042340][T20458] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1027.354189][T20458] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1027.410089][T20458] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1027.492546][ T6995] Bluetooth: hci1: unexpected subevent 0x03 length: 253 > 9 [ 1028.043582][T20574] Process accounting resumed [ 1028.529055][T20567] kexec: Could not allocate control_code_buffer [ 1029.274291][T20458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1029.442725][T20458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.483040][T20601] No such timeout policy "" [ 1029.514922][T20601] netlink: Failed to associated timeout policy '' [ 1029.727764][T10560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.735077][T10560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.809207][T10560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.816427][T10560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1029.967424][T20609] bridge0: port 3(syz_tun) entered blocking state [ 1030.044963][T20609] bridge0: port 3(syz_tun) entered disabled state [ 1030.111530][T20609] syz_tun: entered allmulticast mode [ 1030.166711][T20609] syz_tun: entered promiscuous mode [ 1030.200743][T20609] bridge0: port 3(syz_tun) entered blocking state [ 1030.207325][T20609] bridge0: port 3(syz_tun) entered forwarding state [ 1031.679998][T20458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1031.916310][T20624] ERROR: Out of memory at tomoyo_memory_ok. [ 1031.923665][T20458] veth0_vlan: entered promiscuous mode [ 1031.961392][T20458] veth1_vlan: entered promiscuous mode [ 1032.097061][T20458] veth0_macvtap: entered promiscuous mode [ 1032.144308][T20458] veth1_macvtap: entered promiscuous mode [ 1032.223611][T20458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.267553][T20458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.377689][ T7841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.407210][ T7841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.446959][ T7841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.508977][ T7841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1033.649490][ T7841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1033.667956][ T7841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.046657][T10561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.084042][T10561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.248408][T20458] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 1034.969548][T20644] kexec: Could not allocate control_code_buffer [ 1034.996176][T20664] FAULT_INJECTION: forcing a failure. [ 1034.996176][T20664] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1035.080887][T20664] CPU: 0 UID: 0 PID: 20664 Comm: syz.0.3510 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1035.080928][T20664] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1035.080938][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1035.080952][T20664] Call Trace: [ 1035.080961][T20664] [ 1035.080970][T20664] dump_stack_lvl+0x100/0x190 [ 1035.081002][T20664] should_fail_ex.cold+0x5/0xa [ 1035.081033][T20664] get_futex_key+0x1d2/0x1510 [ 1035.081061][T20664] ? __pfx_get_futex_key+0x10/0x10 [ 1035.081095][T20664] futex_wake+0xea/0x530 [ 1035.081126][T20664] ? find_held_lock+0x2b/0x80 [ 1035.081159][T20664] ? __pfx_futex_wake+0x10/0x10 [ 1035.081195][T20664] ? __might_fault+0x111/0x140 [ 1035.081234][T20664] ? sg_ioctl+0x96e/0x26c0 [ 1035.081269][T20664] do_futex+0x32b/0x350 [ 1035.081296][T20664] ? __pfx_do_futex+0x10/0x10 [ 1035.081325][T20664] ? find_held_lock+0x2b/0x80 [ 1035.081360][T20664] __x64_sys_futex+0x34f/0x4d0 [ 1035.081389][T20664] ? __fget_files+0x21f/0x3d0 [ 1035.081418][T20664] ? __pfx___x64_sys_futex+0x10/0x10 [ 1035.081450][T20664] ? rcu_is_watching+0x12/0xc0 [ 1035.081483][T20664] do_syscall_64+0x10b/0xf80 [ 1035.081506][T20664] ? clear_bhb_loop+0x40/0x90 [ 1035.081535][T20664] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.081560][T20664] RIP: 0033:0x7fe66599ce59 [ 1035.081580][T20664] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.081605][T20664] RSP: 002b:00007fe663bee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1035.081628][T20664] RAX: ffffffffffffffda RBX: 00007fe665c15fa8 RCX: 00007fe66599ce59 [ 1035.081645][T20664] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe665c15fac [ 1035.081660][T20664] RBP: 00007fe665c15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1035.081674][T20664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1035.081688][T20664] R13: 00007fe665c16038 R14: 00007ffd38374990 R15: 00007ffd38374a78 [ 1035.081717][T20664] [ 1035.613575][T20668] ERROR: Out of memory at tomoyo_memory_ok. [ 1036.853965][T20674] ERROR: Out of memory at tomoyo_memory_ok. [ 1037.152706][T20684] ERROR: Out of memory at tomoyo_memory_ok. [ 1037.269993][T20686] ERROR: Out of memory at tomoyo_memory_ok. [ 1039.231497][ T30] audit: type=1800 audit(4294967457.472:17): pid=20697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3518" name="file0" dev="tmpfs" ino=1742 res=0 errno=0 [ 1040.699141][T20715] ubi0: attaching mtd0 [ 1040.726626][T20715] ubi0: scanning is finished [ 1040.759798][T20715] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1040.795981][T20719] ERROR: Out of memory at tomoyo_memory_ok. [ 1040.966495][T20722] ERROR: Out of memory at tomoyo_memory_ok. [ 1041.052319][T20715] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1041.085700][T20719] ERROR: Out of memory at tomoyo_memory_ok. [ 1042.684585][T20754] No such timeout policy "" [ 1042.708578][T20754] netlink: Failed to associated timeout policy '' [ 1043.117482][T20738] ERROR: Out of memory at tomoyo_memory_ok. [ 1043.469217][T20765] No such timeout policy "" [ 1043.496734][T20765] netlink: Failed to associated timeout policy '' [ 1044.661948][T20781] ERROR: Out of memory at tomoyo_memory_ok. [ 1044.892367][T20782] ERROR: Out of memory at tomoyo_memory_ok. [ 1045.088091][T20781] ERROR: Out of memory at tomoyo_memory_ok. [ 1049.204528][T20821] No such timeout policy "" [ 1049.284906][T20821] netlink: Failed to associated timeout policy '' [ 1052.091421][T20854] Zero length message leads to an empty skb [ 1054.768843][T20866] netlink: 'syz.1.3562': attribute type 11 has an invalid length. [ 1054.952865][T20871] process 'syz.2.3555' launched ':,' with NULL argv: empty string added [ 1054.994270][T20871] ERROR: Out of memory at tomoyo_memory_ok. [ 1055.004214][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.015770][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.571275][T20885] FAULT_INJECTION: forcing a failure. [ 1055.571275][T20885] name failslab, interval 1, probability 0, space 0, times 0 [ 1055.697309][T20885] CPU: 0 UID: 0 PID: 20885 Comm: syz.2.3559 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1055.697346][T20885] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1055.697354][T20885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1055.697367][T20885] Call Trace: [ 1055.697374][T20885] [ 1055.697402][T20885] dump_stack_lvl+0x100/0x190 [ 1055.697431][T20885] should_fail_ex.cold+0x5/0xa [ 1055.697467][T20885] should_failslab+0xc2/0x120 [ 1055.697495][T20885] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1055.697532][T20885] ? do_getname+0x35/0x390 [ 1055.697586][T20885] ? fput+0x79/0x100 [ 1055.697622][T20885] do_getname+0x35/0x390 [ 1055.697660][T20885] __x64_sys_execve+0x76/0xd0 [ 1055.697688][T20885] do_syscall_64+0x10b/0xf80 [ 1055.697709][T20885] ? clear_bhb_loop+0x40/0x90 [ 1055.697738][T20885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1055.697762][T20885] RIP: 0033:0x7f05f019ce59 [ 1055.697781][T20885] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1055.697805][T20885] RSP: 002b:00007f05f10b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1055.697828][T20885] RAX: ffffffffffffffda RBX: 00007f05f0416090 RCX: 00007f05f019ce59 [ 1055.697844][T20885] RDX: 0000200000000100 RSI: 0000000000000000 RDI: 00002000000001c0 [ 1055.697859][T20885] RBP: 00007f05f10b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1055.697874][T20885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1055.697888][T20885] R13: 00007f05f0416128 R14: 00007f05f0416090 R15: 00007ffd5c19bf68 [ 1055.697917][T20885] [ 1058.400590][T20874] Process accounting paused [ 1059.988888][T20925] vivid-007: ================= START STATUS ================= [ 1060.021418][T20925] vivid-007: Enable Output Cropping: true [ 1060.066238][T20925] vivid-007: Enable Output Composing: true [ 1060.092166][T20925] vivid-007: Enable Output Scaler: true [ 1060.127117][T20925] vivid-007: Tx RGB Quantization Range: Automatic [ 1060.159541][T20925] vivid-007: Transmit Mode: HDMI [ 1060.182039][T20925] vivid-007: Hotplug Present: 0x00000000 [ 1060.203050][T20925] vivid-007: RxSense Present: 0x00000000 [ 1060.248731][T20925] vivid-007: EDID Present: 0x00000000 [ 1060.273306][T20925] vivid-007: ================== END STATUS ================== [ 1060.531929][T20937] No such timeout policy "" [ 1060.547824][T20937] netlink: Failed to associated timeout policy '' [ 1061.529788][T20946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3576'. [ 1061.597022][T20946] netlink: Conntrack attr has 4 unknown bytes [ 1061.817166][T20951] process 'syz.4.3578' launched ':,' with NULL argv: empty string added [ 1061.861708][T20951] ERROR: Out of memory at tomoyo_memory_ok. [ 1062.021484][T20953] netlink: 'syz.1.3577': attribute type 11 has an invalid length. [ 1063.813300][T20982] ERROR: Out of memory at tomoyo_memory_ok. [ 1063.899914][T20984] ERROR: Out of memory at tomoyo_memory_ok. [ 1064.467138][T20994] No such timeout policy "" [ 1064.529743][T20994] netlink: Failed to associated timeout policy '' [ 1064.615914][T20993] FAULT_INJECTION: forcing a failure. [ 1064.615914][T20993] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1064.776196][T20993] CPU: 0 UID: 0 PID: 20993 Comm: syz.0.3592 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1064.776235][T20993] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1064.776244][T20993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1064.776258][T20993] Call Trace: [ 1064.776265][T20993] [ 1064.776274][T20993] dump_stack_lvl+0x100/0x190 [ 1064.776303][T20993] should_fail_ex.cold+0x5/0xa [ 1064.776332][T20993] get_futex_key+0x1d2/0x1510 [ 1064.776358][T20993] ? __pfx_get_futex_key+0x10/0x10 [ 1064.776389][T20993] futex_wake+0xea/0x530 [ 1064.776419][T20993] ? find_held_lock+0x2b/0x80 [ 1064.776450][T20993] ? __pfx_futex_wake+0x10/0x10 [ 1064.776483][T20993] ? __might_fault+0x111/0x140 [ 1064.776520][T20993] ? sg_ioctl+0x96e/0x26c0 [ 1064.776563][T20993] do_futex+0x32b/0x350 [ 1064.776588][T20993] ? __pfx_do_futex+0x10/0x10 [ 1064.776615][T20993] ? find_held_lock+0x2b/0x80 [ 1064.776647][T20993] __x64_sys_futex+0x34f/0x4d0 [ 1064.776675][T20993] ? __fget_files+0x21f/0x3d0 [ 1064.776703][T20993] ? __pfx___x64_sys_futex+0x10/0x10 [ 1064.776733][T20993] ? rcu_is_watching+0x12/0xc0 [ 1064.776764][T20993] do_syscall_64+0x10b/0xf80 [ 1064.776785][T20993] ? clear_bhb_loop+0x40/0x90 [ 1064.776812][T20993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.776835][T20993] RIP: 0033:0x7fe66599ce59 [ 1064.776854][T20993] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.776877][T20993] RSP: 002b:00007fe663bee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1064.776898][T20993] RAX: ffffffffffffffda RBX: 00007fe665c15fa8 RCX: 00007fe66599ce59 [ 1064.776913][T20993] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe665c15fac [ 1064.776927][T20993] RBP: 00007fe665c15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1064.776941][T20993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1064.776955][T20993] R13: 00007fe665c16038 R14: 00007ffd38374990 R15: 00007ffd38374a78 [ 1064.776983][T20993] [ 1065.416598][T21002] ERROR: Out of memory at tomoyo_memory_ok. [ 1066.154620][T21018] ERROR: Out of memory at tomoyo_memory_ok. [ 1066.442413][T21022] Zero length message leads to an empty skb [ 1066.698937][T21028] No such timeout policy "" [ 1066.730008][T21028] netlink: Failed to associated timeout policy '' [ 1068.146020][T21053] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1069.585142][T21075] netlink: 'syz.2.3612': attribute type 11 has an invalid length. [ 1069.891038][T21077] ERROR: Out of memory at tomoyo_memory_ok. [ 1071.063176][T21087] zram: Removed device: zram0 [ 1072.458517][T21092] ERROR: Out of memory at tomoyo_memory_ok. [ 1075.869856][T21131] No such timeout policy "" [ 1075.952375][T21131] netlink: Failed to associated timeout policy '' [ 1076.813281][T21142] ERROR: Out of memory at tomoyo_memory_ok. [ 1078.229060][T21157] ERROR: Out of memory at tomoyo_memory_ok. [ 1081.447525][T21200] netlink: 'syz.1.3646': attribute type 11 has an invalid length. [ 1082.051659][T21216] futex_wake_op: syz.1.3648 tries to shift op by -2048; fix this program [ 1082.111498][T21216] futex_wake_op: syz.1.3648 tries to shift op by -2048; fix this program [ 1082.559443][T21222] netlink: 'syz.1.3649': attribute type 11 has an invalid length. [ 1083.577445][T21237] ERROR: Out of memory at tomoyo_memory_ok. [ 1086.203842][T21264] ERROR: Out of memory at tomoyo_memory_ok. [ 1086.555681][T21276] mmap: syz.2.3659 (21276) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1086.585890][T21277] FAULT_INJECTION: forcing a failure. [ 1086.585890][T21277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1086.706961][T21277] CPU: 0 UID: 0 PID: 21277 Comm: syz.0.3663 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1086.707001][T21277] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1086.707010][T21277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1086.707025][T21277] Call Trace: [ 1086.707032][T21277] [ 1086.707042][T21277] dump_stack_lvl+0x100/0x190 [ 1086.707072][T21277] should_fail_ex.cold+0x5/0xa [ 1086.707100][T21277] strncpy_from_user+0x3b/0x2d0 [ 1086.707130][T21277] path_removexattrat+0xc8/0x5f0 [ 1086.707162][T21277] ? __pfx_path_removexattrat+0x10/0x10 [ 1086.707214][T21277] ? ksys_write+0x1ac/0x250 [ 1086.707242][T21277] ? __pfx_ksys_write+0x10/0x10 [ 1086.707274][T21277] __x64_sys_fremovexattr+0x5a/0x80 [ 1086.707310][T21277] do_syscall_64+0x10b/0xf80 [ 1086.707331][T21277] ? clear_bhb_loop+0x40/0x90 [ 1086.707367][T21277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.707409][T21277] RIP: 0033:0x7fe66599ce59 [ 1086.707429][T21277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.707452][T21277] RSP: 002b:00007fe663bcd028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c7 [ 1086.707475][T21277] RAX: ffffffffffffffda RBX: 00007fe665c16090 RCX: 00007fe66599ce59 [ 1086.707492][T21277] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1086.707507][T21277] RBP: 00007fe663bcd090 R08: 0000000000000000 R09: 0000000000000000 [ 1086.707521][T21277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1086.707535][T21277] R13: 00007fe665c16128 R14: 00007fe665c16090 R15: 00007ffd38374a78 [ 1086.707565][T21277] [ 1087.277715][T21282] ERROR: Out of memory at tomoyo_memory_ok. [ 1089.060648][T21285] Process accounting resumed [ 1093.115808][T21366] ERROR: Out of memory at tomoyo_memory_ok. [ 1093.450339][T21372] ERROR: Out of memory at tomoyo_memory_ok. [ 1094.458104][T21392] FAULT_INJECTION: forcing a failure. [ 1094.458104][T21392] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.515561][T21392] CPU: 0 UID: 0 PID: 21392 Comm: syz.2.3696 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1094.515602][T21392] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1094.515617][T21392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1094.515632][T21392] Call Trace: [ 1094.515640][T21392] [ 1094.515649][T21392] dump_stack_lvl+0x100/0x190 [ 1094.515680][T21392] should_fail_ex.cold+0x5/0xa [ 1094.515710][T21392] ? tomoyo_encode2+0xfb/0x3c0 [ 1094.515741][T21392] should_failslab+0xc2/0x120 [ 1094.515770][T21392] __kmalloc_noprof+0xe0/0x850 [ 1094.515791][T21392] ? d_absolute_path+0x136/0x1b0 [ 1094.515820][T21392] tomoyo_encode2+0xfb/0x3c0 [ 1094.515855][T21392] tomoyo_encode+0x29/0x50 [ 1094.515886][T21392] tomoyo_realpath_from_path+0x18c/0x690 [ 1094.515925][T21392] tomoyo_check_open_permission+0x2af/0x3c0 [ 1094.515955][T21392] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1094.515993][T21392] ? hook_file_open+0x24e/0x7a0 [ 1094.516040][T21392] ? path_get+0x61/0x80 [ 1094.516076][T21392] tomoyo_file_open+0x6b/0x90 [ 1094.516113][T21392] security_file_open+0xb5/0x1e0 [ 1094.516144][T21392] do_dentry_open+0x5aa/0x1660 [ 1094.516176][T21392] ? security_inode_permission+0xbf/0x250 [ 1094.516207][T21392] vfs_open+0x82/0x3f0 [ 1094.516246][T21392] path_openat+0x208c/0x31a0 [ 1094.516287][T21392] ? __pfx_path_openat+0x10/0x10 [ 1094.516327][T21392] do_file_open+0x20e/0x430 [ 1094.516360][T21392] ? __pfx_do_file_open+0x10/0x10 [ 1094.516411][T21392] ? alloc_fd+0x476/0x790 [ 1094.516443][T21392] ? do_getname+0x191/0x390 [ 1094.516481][T21392] do_sys_openat2+0x10d/0x1e0 [ 1094.516518][T21392] ? __pfx_do_sys_openat2+0x10/0x10 [ 1094.516568][T21392] ? __fget_files+0x21f/0x3d0 [ 1094.516600][T21392] __x64_sys_openat+0x12d/0x210 [ 1094.516641][T21392] ? __pfx___x64_sys_openat+0x10/0x10 [ 1094.516682][T21392] ? rcu_is_watching+0x12/0xc0 [ 1094.516713][T21392] do_syscall_64+0x10b/0xf80 [ 1094.516733][T21392] ? clear_bhb_loop+0x40/0x90 [ 1094.516760][T21392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.516782][T21392] RIP: 0033:0x7f05f019ce59 [ 1094.516800][T21392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.516821][T21392] RSP: 002b:00007f05f10d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1094.516842][T21392] RAX: ffffffffffffffda RBX: 00007f05f0415fa0 RCX: 00007f05f019ce59 [ 1094.516857][T21392] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 1094.516871][T21392] RBP: 00007f05f0232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1094.516885][T21392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.516898][T21392] R13: 00007f05f0416038 R14: 00007f05f0415fa0 R15: 00007ffd5c19bf68 [ 1094.516926][T21392] [ 1094.842245][T21392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1095.691731][T21415] netlink: 'syz.1.3702': attribute type 11 has an invalid length. [ 1097.784748][T21454] netlink: 'syz.4.3714': attribute type 11 has an invalid length. [ 1101.327796][T21512] FAULT_INJECTION: forcing a failure. [ 1101.327796][T21512] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.502323][T21512] CPU: 0 UID: 0 PID: 21512 Comm: syz.2.3726 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1101.502361][T21512] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1101.502370][T21512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1101.502384][T21512] Call Trace: [ 1101.502391][T21512] [ 1101.502400][T21512] dump_stack_lvl+0x100/0x190 [ 1101.502429][T21512] should_fail_ex.cold+0x5/0xa [ 1101.502459][T21512] should_failslab+0xc2/0x120 [ 1101.502487][T21512] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1101.502520][T21512] ? snd_virmidi_output_open+0xc4/0x670 [ 1101.502561][T21512] snd_virmidi_output_open+0xc4/0x670 [ 1101.502599][T21512] open_substream+0x480/0x9b0 [ 1101.502625][T21512] rawmidi_open_priv+0x595/0x6f0 [ 1101.502655][T21512] snd_rawmidi_open+0x4c9/0xba0 [ 1101.502686][T21512] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1101.502713][T21512] ? __pfx_default_wake_function+0x10/0x10 [ 1101.502748][T21512] ? kobject_get_unless_zero+0x156/0x200 [ 1101.502777][T21512] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 1101.502802][T21512] snd_open+0x201/0x450 [ 1101.502843][T21512] ? __pfx_snd_open+0x10/0x10 [ 1101.502877][T21512] chrdev_open+0x234/0x6a0 [ 1101.502906][T21512] ? __pfx_apparmor_file_open+0x10/0x10 [ 1101.502929][T21512] ? __pfx_chrdev_open+0x10/0x10 [ 1101.502960][T21512] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1101.502996][T21512] do_dentry_open+0x6d8/0x1660 [ 1101.503044][T21512] ? __pfx_chrdev_open+0x10/0x10 [ 1101.503081][T21512] vfs_open+0x82/0x3f0 [ 1101.503141][T21512] path_openat+0x208c/0x31a0 [ 1101.503183][T21512] ? __pfx_path_openat+0x10/0x10 [ 1101.503226][T21512] do_file_open+0x20e/0x430 [ 1101.503260][T21512] ? __pfx_do_file_open+0x10/0x10 [ 1101.503313][T21512] ? alloc_fd+0x476/0x790 [ 1101.503347][T21512] ? do_getname+0x191/0x390 [ 1101.503387][T21512] do_sys_openat2+0x10d/0x1e0 [ 1101.503426][T21512] ? __pfx_do_sys_openat2+0x10/0x10 [ 1101.503476][T21512] __x64_sys_openat+0x12d/0x210 [ 1101.503516][T21512] ? __pfx___x64_sys_openat+0x10/0x10 [ 1101.503554][T21512] ? exit_to_user_mode_loop+0xe2/0x4f0 [ 1101.503583][T21512] ? rcu_is_watching+0x12/0xc0 [ 1101.503617][T21512] do_syscall_64+0x10b/0xf80 [ 1101.503638][T21512] ? clear_bhb_loop+0x40/0x90 [ 1101.503668][T21512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.503693][T21512] RIP: 0033:0x7f05f019ce59 [ 1101.503714][T21512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.503739][T21512] RSP: 002b:00007f05f10d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1101.503767][T21512] RAX: ffffffffffffffda RBX: 00007f05f0415fa0 RCX: 00007f05f019ce59 [ 1101.503784][T21512] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 1101.503800][T21512] RBP: 00007f05f0232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1101.503816][T21512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1101.503830][T21512] R13: 00007f05f0416038 R14: 00007f05f0415fa0 R15: 00007ffd5c19bf68 [ 1101.503869][T21512] [ 1103.487876][T21523] ERROR: Out of memory at tomoyo_memory_ok. [ 1103.579136][T21526] ERROR: Out of memory at tomoyo_memory_ok. [ 1104.361328][T21533] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3738'. [ 1104.659082][T21533] ipvlan1: entered promiscuous mode [ 1104.737093][T21533] ipvlan1: entered allmulticast mode [ 1104.819208][T21533] veth0_vlan: entered allmulticast mode [ 1106.018343][T21574] syz.1.3741 uses obsolete (PF_INET,SOCK_PACKET) [ 1106.694470][T21592] ERROR: Out of memory at tomoyo_memory_ok. [ 1106.970040][T21594] No such timeout policy "" [ 1107.054672][T21594] netlink: Failed to associated timeout policy '' [ 1107.452088][T21608] netlink: 'syz.4.3751': attribute type 11 has an invalid length. [ 1107.788767][T21615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3753'. [ 1108.485690][T21630] ERROR: Out of memory at tomoyo_memory_ok. [ 1109.486047][T21654] : Can't lookup blockdev [ 1110.233634][T21663] netlink: 330 bytes leftover after parsing attributes in process `syz.0.3767'. [ 1111.526663][T21669] block nbd2: not configured, cannot reconfigure [ 1111.655936][T21673] nbd: couldn't find a device at index 2542 [ 1113.168668][T21703] No such timeout policy "" [ 1113.201895][T21703] netlink: Failed to associated timeout policy '' [ 1113.596608][T21707] ERROR: Out of memory at tomoyo_memory_ok. [ 1113.889288][T21711] FAULT_INJECTION: forcing a failure. [ 1113.889288][T21711] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1113.965470][T21711] CPU: 0 UID: 0 PID: 21711 Comm: syz.0.3778 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1113.965509][T21711] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1113.965518][T21711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1113.965532][T21711] Call Trace: [ 1113.965540][T21711] [ 1113.965549][T21711] dump_stack_lvl+0x100/0x190 [ 1113.965578][T21711] should_fail_ex.cold+0x5/0xa [ 1113.965603][T21711] ? prepare_alloc_pages+0x16d/0x5f0 [ 1113.965636][T21711] should_fail_alloc_page+0xeb/0x140 [ 1113.965676][T21711] prepare_alloc_pages+0x1f0/0x5f0 [ 1113.965710][T21711] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1113.965749][T21711] ? do_raw_spin_unlock+0x145/0x1e0 [ 1113.965778][T21711] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1113.965813][T21711] ? debug_object_assert_init+0x1c4/0x300 [ 1113.965840][T21711] ? do_raw_spin_lock+0x128/0x260 [ 1113.965867][T21711] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1113.965895][T21711] ? find_held_lock+0x2b/0x80 [ 1113.965925][T21711] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1113.965963][T21711] ? rcu_is_watching+0x12/0xc0 [ 1113.965995][T21711] ? hrtimer_start_range_ns+0x860/0x1a50 [ 1113.966025][T21711] ? find_held_lock+0x2b/0x80 [ 1113.966060][T21711] ? rcu_is_watching+0x12/0xc0 [ 1113.966087][T21711] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1113.966118][T21711] ? lockdep_hardirqs_on+0x78/0x100 [ 1113.966154][T21711] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1113.966184][T21711] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1113.966219][T21711] ? policy_nodemask+0xed/0x4f0 [ 1113.966248][T21711] alloc_pages_mpol+0x1fb/0x540 [ 1113.966276][T21711] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1113.966305][T21711] ? trace_pid_list_is_set+0x22c/0x390 [ 1113.966339][T21711] folio_alloc_mpol_noprof+0x36/0x260 [ 1113.966373][T21711] vma_alloc_folio_noprof+0xed/0x1d0 [ 1113.966403][T21711] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1113.966434][T21711] ? rcu_read_unlock+0x2d/0xb0 [ 1113.966469][T21711] ? rcu_read_unlock+0x2d/0xb0 [ 1113.966510][T21711] do_wp_page+0x1ee1/0x4380 [ 1113.966546][T21711] ? __pfx_do_wp_page+0x10/0x10 [ 1113.966578][T21711] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1113.966611][T21711] __handle_mm_fault+0x1ab6/0x2a00 [ 1113.966656][T21711] ? reacquire_held_locks+0xce/0x1e0 [ 1113.966679][T21711] ? __pfx___handle_mm_fault+0x10/0x10 [ 1113.966737][T21711] ? lock_vma_under_rcu+0x17c/0x590 [ 1113.966789][T21711] handle_mm_fault+0x36d/0xa20 [ 1113.966831][T21711] do_user_addr_fault+0x5a3/0x12f0 [ 1113.966869][T21711] exc_page_fault+0x6f/0xd0 [ 1113.966907][T21711] asm_exc_page_fault+0x26/0x30 [ 1113.966931][T21711] RIP: 0033:0x7fe66595cc45 [ 1113.966951][T21711] Code: 00 00 00 66 90 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 1d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 0c 01 00 00 a8 01 0f 85 84 00 00 [ 1113.966974][T21711] RSP: 002b:00007fe663becde0 EFLAGS: 00010293 [ 1113.966994][T21711] RAX: 0000000000000008 RBX: 00007fe666747e20 RCX: 0000000000000000 [ 1113.967010][T21711] RDX: 0000000000000000 RSI: 00007fe665a304a8 RDI: 00007fe666747e20 [ 1113.967025][T21711] RBP: ffffffffffffffff R08: 0000000000000000 R09: 0000000000000005 [ 1113.967040][T21711] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe665a4fd4d [ 1113.967055][T21711] R13: ffffffffffffffe8 R14: 0000000000000058 R15: 00007fe665a304a8 [ 1113.967084][T21711] [ 1114.624700][T21711] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1116.443176][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.449543][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.470017][T21755] FAULT_INJECTION: forcing a failure. [ 1117.470017][T21755] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1117.545097][T21755] CPU: 0 UID: 0 PID: 21755 Comm: syz.0.3784 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1117.545140][T21755] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1117.545149][T21755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1117.545163][T21755] Call Trace: [ 1117.545170][T21755] [ 1117.545179][T21755] dump_stack_lvl+0x100/0x190 [ 1117.545209][T21755] should_fail_ex.cold+0x5/0xa [ 1117.545237][T21755] get_futex_key+0x1d2/0x1510 [ 1117.545270][T21755] ? __pfx_get_futex_key+0x10/0x10 [ 1117.545302][T21755] futex_wake+0xea/0x530 [ 1117.545332][T21755] ? find_held_lock+0x2b/0x80 [ 1117.545362][T21755] ? __pfx_futex_wake+0x10/0x10 [ 1117.545396][T21755] ? __might_fault+0x111/0x140 [ 1117.545433][T21755] ? sg_ioctl+0x96e/0x26c0 [ 1117.545466][T21755] do_futex+0x32b/0x350 [ 1117.545491][T21755] ? __pfx_do_futex+0x10/0x10 [ 1117.545517][T21755] ? find_held_lock+0x2b/0x80 [ 1117.545550][T21755] __x64_sys_futex+0x34f/0x4d0 [ 1117.545577][T21755] ? __fget_files+0x21f/0x3d0 [ 1117.545603][T21755] ? __pfx___x64_sys_futex+0x10/0x10 [ 1117.545633][T21755] ? rcu_is_watching+0x12/0xc0 [ 1117.545664][T21755] do_syscall_64+0x10b/0xf80 [ 1117.545684][T21755] ? clear_bhb_loop+0x40/0x90 [ 1117.545711][T21755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.545735][T21755] RIP: 0033:0x7fe66599ce59 [ 1117.545753][T21755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.545774][T21755] RSP: 002b:00007fe663bee0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1117.545796][T21755] RAX: ffffffffffffffda RBX: 00007fe665c15fa8 RCX: 00007fe66599ce59 [ 1117.545829][T21755] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe665c15fac [ 1117.545844][T21755] RBP: 00007fe665c15fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1117.545859][T21755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.545873][T21755] R13: 00007fe665c16038 R14: 00007ffd38374990 R15: 00007ffd38374a78 [ 1117.545902][T21755] [ 1118.417254][T21767] netlink: 'syz.1.3788': attribute type 11 has an invalid length. [ 1118.493991][T21771] FAULT_INJECTION: forcing a failure. [ 1118.493991][T21771] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1118.527478][T21760] ERROR: Out of memory at tomoyo_memory_ok. [ 1118.578717][T21771] CPU: 0 UID: 0 PID: 21771 Comm: syz.0.3789 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1118.578759][T21771] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1118.578768][T21771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1118.578781][T21771] Call Trace: [ 1118.578789][T21771] [ 1118.578798][T21771] dump_stack_lvl+0x100/0x190 [ 1118.578827][T21771] should_fail_ex.cold+0x5/0xa [ 1118.578852][T21771] ? prepare_alloc_pages+0x16d/0x5f0 [ 1118.578884][T21771] should_fail_alloc_page+0xeb/0x140 [ 1118.578913][T21771] prepare_alloc_pages+0x1f0/0x5f0 [ 1118.578943][T21771] ? do_raw_spin_lock+0x128/0x260 [ 1118.578972][T21771] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1118.579013][T21771] ? rcu_is_watching+0x12/0xc0 [ 1118.579040][T21771] ? trace_hrtimer_start+0x79/0x230 [ 1118.579068][T21771] ? hrtimer_start_range_ns+0x860/0x1a50 [ 1118.579098][T21771] ? find_held_lock+0x2b/0x80 [ 1118.579126][T21771] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1118.579157][T21771] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1118.579194][T21771] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1118.579233][T21771] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1118.579263][T21771] ? lockdep_hardirqs_on+0x78/0x100 [ 1118.579300][T21771] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1118.579332][T21771] ? rcu_is_watching+0x12/0xc0 [ 1118.579361][T21771] ? __schedule+0x12a7/0x67a0 [ 1118.579399][T21771] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1118.579435][T21771] ? policy_nodemask+0xed/0x4f0 [ 1118.579464][T21771] alloc_pages_mpol+0x1fb/0x540 [ 1118.579492][T21771] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1118.579521][T21771] ? __lock_acquire+0x4a5/0x2630 [ 1118.579546][T21771] folio_alloc_mpol_noprof+0x36/0x260 [ 1118.579579][T21771] vma_alloc_folio_noprof+0xed/0x1d0 [ 1118.579610][T21771] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1118.579649][T21771] do_anonymous_page+0xb46/0x2050 [ 1118.579685][T21771] ? rcu_read_unlock+0x2d/0xb0 [ 1118.579726][T21771] __handle_mm_fault+0x1d2c/0x2a00 [ 1118.579767][T21771] ? reacquire_held_locks+0xce/0x1e0 [ 1118.579790][T21771] ? __pfx___handle_mm_fault+0x10/0x10 [ 1118.579829][T21771] ? lock_vma_under_rcu+0x17c/0x590 [ 1118.579877][T21771] handle_mm_fault+0x36d/0xa20 [ 1118.579917][T21771] do_user_addr_fault+0x5a3/0x12f0 [ 1118.579952][T21771] exc_page_fault+0x6f/0xd0 [ 1118.579988][T21771] asm_exc_page_fault+0x26/0x30 [ 1118.580011][T21771] RIP: 0033:0x7fe66585e60b [ 1118.580031][T21771] Code: 00 00 00 48 8d 3d 8d a0 1a 00 48 89 c1 31 c0 e8 cb 2e ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d c1 a0 1a 00 48 89 34 24 48 8b 14 24 48 8b [ 1118.580054][T21771] RSP: 002b:00007fe663bcbfa0 EFLAGS: 00010206 [ 1118.580072][T21771] RAX: 0000000000000000 RBX: 00007fe665c16090 RCX: 0000000000000000 [ 1118.580087][T21771] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000140 [ 1118.580101][T21771] RBP: 00007fe665a32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1118.580115][T21771] R10: 0000200000000140 R11: 0000000000000000 R12: 0000000000000000 [ 1118.580129][T21771] R13: 00007fe665c16128 R14: 00007fe665c16090 R15: 00007ffd38374a78 [ 1118.580158][T21771] [ 1119.531592][T21777] netlink: 'syz.1.3790': attribute type 11 has an invalid length. [ 1120.069876][T21784] No such timeout policy "" [ 1120.104222][T21784] netlink: Failed to associated timeout policy '' [ 1120.415185][T21771] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1120.609662][T21768] Process accounting paused [ 1121.188639][T21810] ERROR: Out of memory at tomoyo_memory_ok. [ 1121.385906][T21812] netlink: 'syz.0.3799': attribute type 11 has an invalid length. [ 1122.811201][T21823] ecryptfs_miscdev_write: Invalid packet size [0] [ 1122.818066][T21828] No such timeout policy "" [ 1122.835979][T21828] netlink: Failed to associated timeout policy '' [ 1122.894559][T21821] ERROR: Out of memory at tomoyo_memory_ok. [ 1123.924610][T21845] ERROR: Out of memory at tomoyo_memory_ok. [ 1125.003565][ T30] audit: type=1800 audit(4294967543.232:18): pid=21849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3806" name="dbroot" dev="configfs" ino=92377 res=0 errno=0 [ 1125.688005][T21867] No such timeout policy "" [ 1125.710119][T21867] netlink: Failed to associated timeout policy '' [ 1126.864555][T21892] netlink: 'syz.4.3819': attribute type 11 has an invalid length. [ 1127.615354][T21899] ERROR: Out of memory at tomoyo_memory_ok. [ 1127.841950][T21907] No such timeout policy "" [ 1127.863122][T21907] netlink: Failed to associated timeout policy '' [ 1128.326257][T21906] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3824'. [ 1128.895090][T21932] ERROR: Out of memory at tomoyo_memory_ok. [ 1129.715875][T21941] ERROR: Out of memory at tomoyo_memory_ok. [ 1130.265891][T21958] ERROR: Out of memory at tomoyo_memory_ok. [ 1131.287961][T21972] ERROR: Out of memory at tomoyo_memory_ok. [ 1131.501528][T21979] No such timeout policy "" [ 1131.521572][T21980] ERROR: Out of memory at tomoyo_memory_ok. [ 1131.532539][T21979] netlink: Failed to associated timeout policy '' [ 1132.626625][T21986] bridge0: port 4(bond0) entered blocking state [ 1132.767057][T21986] bridge0: port 4(bond0) entered disabled state [ 1132.877993][T21986] bond0: entered allmulticast mode [ 1132.982942][T21986] bond_slave_0: entered allmulticast mode [ 1133.034934][T21986] bond_slave_1: entered allmulticast mode [ 1133.110236][T21986] bond0: entered promiscuous mode [ 1133.157178][T21986] bond_slave_0: entered promiscuous mode [ 1133.180250][T21986] bond_slave_1: entered promiscuous mode [ 1133.198604][T21986] bridge0: port 4(bond0) entered blocking state [ 1133.205035][T21986] bridge0: port 4(bond0) entered forwarding state [ 1133.509476][T22008] netlink: 'syz.4.3852': attribute type 11 has an invalid length. [ 1134.058222][T22015] ERROR: Out of memory at tomoyo_memory_ok. [ 1134.090542][T22013] netlink: 'syz.4.3853': attribute type 11 has an invalid length. [ 1134.295077][T22018] ERROR: Out of memory at tomoyo_memory_ok. [ 1134.546787][T22023] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1134.817492][T22030] futex_wake_op: syz.1.3857 tries to shift op by -2048; fix this program [ 1134.902620][T22030] futex_wake_op: syz.1.3857 tries to shift op by -2048; fix this program [ 1135.567325][ T6995] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1136.794903][T22065] No such timeout policy "" [ 1136.824462][T22065] netlink: Failed to associated timeout policy '' [ 1137.214908][T22075] ERROR: Out of memory at tomoyo_memory_ok. [ 1137.640516][ T6995] Bluetooth: hci4: command 0x0406 tx timeout [ 1138.097902][T22094] ERROR: Out of memory at tomoyo_memory_ok. [ 1138.118418][T22093] netlink: 'syz.4.3873': attribute type 11 has an invalid length. [ 1139.009536][T22069] Bluetooth: hci2: command 0x0406 tx timeout [ 1139.083792][T22105] capability: warning: `syz.4.3879' uses 32-bit capabilities (legacy support in use) [ 1139.720404][T22046] Bluetooth: hci4: command 0x0406 tx timeout [ 1139.921910][T22127] netlink: 'syz.2.3877': attribute type 11 has an invalid length. [ 1141.359025][T22138] netlink: 'syz.1.3886': attribute type 11 has an invalid length. [ 1142.198490][T22158] ERROR: Out of memory at tomoyo_memory_ok. [ 1143.598178][T22171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3890'. [ 1144.621473][T22182] netlink: 'syz.1.3898': attribute type 11 has an invalid length. [ 1145.253440][ T6995] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1145.933262][ T30] audit: type=1800 audit(4294967564.162:19): pid=22200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3905" name="features" dev="configfs" ino=94484 res=0 errno=0 [ 1146.332614][T22216] ERROR: Out of memory at tomoyo_memory_ok. [ 1147.323056][ T6995] Bluetooth: hci3: command 0x0406 tx timeout [ 1147.666943][T22231] ERROR: Out of memory at tomoyo_memory_ok. [ 1149.400328][T22046] Bluetooth: hci3: command 0x0406 tx timeout [ 1149.944777][T22258] Line length is too long: Should be less than 4094 [ 1150.034276][T22260] ERROR: Out of memory at tomoyo_memory_ok. [ 1150.918361][T21494] syz.2.3721 (21494) used greatest stack depth: 18616 bytes left [ 1151.071619][T22276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3923'. [ 1151.082819][T22268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3920'. [ 1151.873295][T22281] ERROR: Out of memory at tomoyo_memory_ok. [ 1152.600635][T22264] Process accounting resumed [ 1152.616292][T22283] ecryptfs_miscdev_write: Invalid packet size [0] [ 1153.126304][T22294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3928'. [ 1154.054786][T22309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1154.418695][T10572] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1155.110332][ T5740] ================================================================== [ 1155.110360][ T5740] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 1155.110405][ T5740] Write of size 8 at addr ffffc90004c29080 by task kworker/0:5/5740 [ 1155.110424][ T5740] [ 1155.110439][ T5740] CPU: 0 UID: 0 PID: 5740 Comm: kworker/0:5 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1155.110473][ T5740] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1155.110482][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1155.110498][ T5740] Workqueue: events_power_efficient fb_flashcursor [ 1155.110531][ T5740] Call Trace: [ 1155.110539][ T5740] [ 1155.110548][ T5740] dump_stack_lvl+0x100/0x190 [ 1155.110573][ T5740] print_report+0x13d/0x4b0 [ 1155.110605][ T5740] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1155.110643][ T5740] ? sys_imageblit+0x19fb/0x1d60 [ 1155.110677][ T5740] kasan_report+0xdf/0x1d0 [ 1155.110704][ T5740] ? sys_imageblit+0x19fb/0x1d60 [ 1155.110743][ T5740] sys_imageblit+0x19fb/0x1d60 [ 1155.110783][ T5740] ? __pfx_sys_imageblit+0x10/0x10 [ 1155.110821][ T5740] ? do_raw_spin_lock+0x128/0x260 [ 1155.110851][ T5740] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1155.110882][ T5740] soft_cursor+0x524/0xa10 [ 1155.110915][ T5740] ? fb_get_color_depth+0x120/0x250 [ 1155.110944][ T5740] bit_cursor+0xca1/0x1490 [ 1155.110978][ T5740] ? __pfx_bit_cursor+0x10/0x10 [ 1155.111012][ T5740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1155.111047][ T5740] ? get_color+0x1da/0x450 [ 1155.111071][ T5740] ? __pfx_bit_cursor+0x10/0x10 [ 1155.111100][ T5740] fb_flashcursor+0x338/0x430 [ 1155.111129][ T5740] process_one_work+0xa0e/0x1980 [ 1155.111158][ T5740] ? __pfx_process_one_work+0x10/0x10 [ 1155.111185][ T5740] ? __pfx_fb_flashcursor+0x10/0x10 [ 1155.111212][ T5740] worker_thread+0x5ef/0xe50 [ 1155.111238][ T5740] ? __pfx_worker_thread+0x10/0x10 [ 1155.111261][ T5740] ? kthread+0x13a/0x450 [ 1155.111280][ T5740] ? __pfx_worker_thread+0x10/0x10 [ 1155.111302][ T5740] kthread+0x370/0x450 [ 1155.111321][ T5740] ? __pfx_kthread+0x10/0x10 [ 1155.111342][ T5740] ret_from_fork+0x72b/0xd50 [ 1155.111367][ T5740] ? __pfx_ret_from_fork+0x10/0x10 [ 1155.111393][ T5740] ? __switch_to+0x800/0x1100 [ 1155.111424][ T5740] ? __switch_to_asm+0x39/0x70 [ 1155.111455][ T5740] ? __pfx_kthread+0x10/0x10 [ 1155.111476][ T5740] ret_from_fork_asm+0x1a/0x30 [ 1155.111513][ T5740] [ 1155.111525][ T5740] [ 1155.111531][ T5740] The buggy address belongs to a vmalloc virtual mapping [ 1155.111551][ T5740] Memory state around the buggy address: [ 1155.111564][ T5740] ffffc90004c28f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1155.111584][ T5740] ffffc90004c29000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1155.111601][ T5740] >ffffc90004c29080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1155.111614][ T5740] ^ [ 1155.111625][ T5740] ffffc90004c29100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1155.111642][ T5740] ffffc90004c29180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1155.111655][ T5740] ================================================================== [ 1155.111677][ T5740] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1155.111693][ T5740] CPU: 0 UID: 0 PID: 5740 Comm: kworker/0:5 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1155.111726][ T5740] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1155.111735][ T5740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1155.111751][ T5740] Workqueue: events_power_efficient fb_flashcursor [ 1155.111782][ T5740] Call Trace: [ 1155.111790][ T5740] [ 1155.111798][ T5740] dump_stack_lvl+0x100/0x190 [ 1155.111822][ T5740] vpanic+0x552/0x970 [ 1155.111843][ T5740] ? __pfx_vpanic+0x10/0x10 [ 1155.111864][ T5740] ? mark_held_locks+0x40/0x70 [ 1155.111885][ T5740] ? irqentry_exit+0x24d/0x7e0 [ 1155.111907][ T5740] ? sys_imageblit+0x19fb/0x1d60 [ 1155.111942][ T5740] panic+0xd1/0xe0 [ 1155.111962][ T5740] ? __pfx_panic+0x10/0x10 [ 1155.111987][ T5740] ? check_panic_on_warn+0x1f/0x90 [ 1155.112010][ T5740] check_panic_on_warn.cold+0x19/0x34 [ 1155.112035][ T5740] end_report.part.0+0x3a/0x90 [ 1155.112066][ T5740] kasan_report.cold+0xe/0x18 [ 1155.112099][ T5740] ? sys_imageblit+0x19fb/0x1d60 [ 1155.112137][ T5740] sys_imageblit+0x19fb/0x1d60 [ 1155.112177][ T5740] ? __pfx_sys_imageblit+0x10/0x10 [ 1155.112214][ T5740] ? do_raw_spin_lock+0x128/0x260 [ 1155.112243][ T5740] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1155.112272][ T5740] soft_cursor+0x524/0xa10 [ 1155.112304][ T5740] ? fb_get_color_depth+0x120/0x250 [ 1155.112332][ T5740] bit_cursor+0xca1/0x1490 [ 1155.112385][ T5740] ? __pfx_bit_cursor+0x10/0x10 [ 1155.112420][ T5740] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1155.112455][ T5740] ? get_color+0x1da/0x450 [ 1155.112480][ T5740] ? __pfx_bit_cursor+0x10/0x10 [ 1155.112510][ T5740] fb_flashcursor+0x338/0x430 [ 1155.112542][ T5740] process_one_work+0xa0e/0x1980 [ 1155.112572][ T5740] ? __pfx_process_one_work+0x10/0x10 [ 1155.112600][ T5740] ? __pfx_fb_flashcursor+0x10/0x10 [ 1155.112628][ T5740] worker_thread+0x5ef/0xe50 [ 1155.112654][ T5740] ? __pfx_worker_thread+0x10/0x10 [ 1155.112678][ T5740] ? kthread+0x13a/0x450 [ 1155.112697][ T5740] ? __pfx_worker_thread+0x10/0x10 [ 1155.112720][ T5740] kthread+0x370/0x450 [ 1155.112739][ T5740] ? __pfx_kthread+0x10/0x10 [ 1155.112760][ T5740] ret_from_fork+0x72b/0xd50 [ 1155.112786][ T5740] ? __pfx_ret_from_fork+0x10/0x10 [ 1155.112812][ T5740] ? __switch_to+0x800/0x1100 [ 1155.112843][ T5740] ? __switch_to_asm+0x39/0x70 [ 1155.112874][ T5740] ? __pfx_kthread+0x10/0x10 [ 1155.112896][ T5740] ret_from_fork_asm+0x1a/0x30 [ 1155.112933][ T5740] [ 1155.112999][ T5740] Kernel Offset: disabled