last executing test programs: 20m8.62586198s ago: executing program 2 (id=3983): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/trace_pipe\x00', 0x40b00, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8000ffff}, 0x3) syz_genetlink_get_family_id$auto_tcp_metrics(0x0, 0xffffffffffffffff) unshare$auto(0x40000080) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video7\x00', 0x8280, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000)=""/130, 0x82) 20m8.096743754s ago: executing program 2 (id=3986): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pwrite64$auto(0xffffffffffffffff, 0x0, 0x3, 0xd) syz_clone3(0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) setreuid$auto(0x0, 0x7) 20m6.83028617s ago: executing program 2 (id=3992): openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) waitid$auto_P_PID(0x1, 0xffffffffffffffff, 0x0, 0x7, 0x0) setsockopt$auto(0xffffffffffffffff, 0xa6a, 0x4, 0x0, 0x0) fcntl$auto_F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x1) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) 20m6.597991335s ago: executing program 2 (id=3995): close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) mkdir$auto(0x0, 0x353) 20m5.669402868s ago: executing program 2 (id=4005): mmap$auto(0x0, 0x2000b, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) r0 = socket(0x1, 0x1, 0x0) bind$auto(r0, 0x0, 0xe) 20m5.510706582s ago: executing program 2 (id=3997): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f1, 0x24) 20m5.078307286s ago: executing program 32 (id=3997): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89f1, 0x24) 15m22.817851358s ago: executing program 0 (id=5994): waitid$auto(0x8, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x5, 0x98, 0x10, @_timer={0x0, 0x2, @sival_int=0x7, 0x2}}}, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/ip6_vti0/stable_secret\x00', 0x2, 0x0) writev$auto(r0, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3) 15m21.459142321s ago: executing program 0 (id=6001): r0 = socket(0x2, 0x2, 0x88) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) writev$auto(r0, &(0x7f0000000380)={&(0x7f0000000280), 0x400}, 0x4) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = socket(0x29, 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) rseq$auto(0x0, 0xc93, 0x1, 0x2) sendfile$auto(r1, r2, 0x0, 0x7) 15m20.566997254s ago: executing program 0 (id=6009): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketcall$auto(0x8000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4004ae86, &(0x7f00000000c0)={0xdd}) 15m20.358596763s ago: executing program 0 (id=6013): mmap$auto(0x0, 0x4020009, 0xdf, 0x400000000e31, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x54) sysfs$auto(0x2, 0x2, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x6c, 0x697c}, 0xed71390}, 0x9a6, 0x0) shutdown$auto(0x200000003, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) 15m20.113396294s ago: executing program 0 (id=6014): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x400, 0x0) epoll_create$auto(0x20003f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) rename$auto(&(0x7f0000000480)='./file0\x00', 0x0) 15m19.800653903s ago: executing program 0 (id=6016): mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x106) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x40101, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 15m4.613923021s ago: executing program 33 (id=6016): mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) socket(0x2, 0x1, 0x106) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x40101, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) 2m46.766101296s ago: executing program 1 (id=8879): mmap$auto(0x7ffffffd, 0x40000c, 0x11, 0x9b72, 0x2, 0x8000) epoll_create$auto(0x4) close_range$auto(0x2, 0x8, 0x0) pipe2$auto(&(0x7f00000000c0), 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) close_range$auto(0x2, 0x8, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x3) r0 = socket(0x1d, 0x1, 0x7fff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) writev$auto(r2, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3) socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r0) kexec_load$auto(0xf, 0x0, 0x0, 0x80000001) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) 2m45.103013586s ago: executing program 1 (id=8895): socket(0xa, 0x3, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x10, 0x2, 0x0) socket(0x15, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x801, 0x84) socket(0x1d, 0x2, 0x6) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x1, 0x0, 0x7) 2m44.720049042s ago: executing program 1 (id=8897): mmap$auto(0x0, 0x4, 0x10000, 0x40eb3, 0x401, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/gid_map\x00', 0xd8180, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) r1 = socket(0x2b, 0x1, 0x1) socketpair$auto(0xfffffffe, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x8) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) lstat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0x4, 0x8000000000000001, 0x21, 0x2, 0xffffffffffffffff, 0xee01, 0x0, 0x0, 0x9, 0xdae, 0x9, 0x1000, 0xffffffffffffffff, 0x7, 0x9, 0xff, 0x3}) 2m41.908507041s ago: executing program 1 (id=8905): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_show_traces_fops_trace(0xffffffffffffff9c, 0x0, 0x826c0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) modify_ldt$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) 2m40.682690251s ago: executing program 1 (id=8908): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x3, 0x100) r2 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={r0, @new_map_fd=r1, 0xa, @old_map_fd=r3}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) 2m40.39979057s ago: executing program 1 (id=8899): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2b, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x5}, 0xa) 2m25.150197127s ago: executing program 34 (id=8899): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socket(0x2b, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x104, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0xe5, 0x4, 'nfs\x81\x9b\xb6$\x10\x16\xfb:\xb3\x15Y\x90\xf9\xc0\xc0\x88.!s\x1f\xe9\x1d\'&Hvn\xb1\x88\xbf\x15<\xa6e\xbc\xa1\xfa\xbeG\t*_kW_m\x1b:,\xc6\xa6\xfd\xba\xcd\xbe\xbe=\xc3\xbf\xd3f2!\xc4\x05EA\xac\x04\x83\xf1\x99\xa05\xfb\xf3\xf4?(\x9c\x8b\x9d\xdcV\xc5\x00\tm\xdez\xc9\xdbn\xb1\t\n\xe7\x8cd\xca\xd89\r\x1a@\xe1_\xb1_\xf8\xf3\xb1]\xad\xaf\xd9\xd0\xa8:\xd4<\x8d\xbc\rg[\x1d\x98\xb2r\xac\x83\xf8s\xafh@\x8c\xa7\xcd\xb3+Qy\"\xe8\x8ah,\xca|\xd9\xb3?Ha\xdb\xa3F\nGU&7\x15\x19\xeb\x9b\x9eU\xab\x86\x10\x9d\xaf>\xda(R\xcb\xe6\xf7\x8c\xf8\xb1\xdf\xe4t\xe6\x9f\x81\xb3\xbb\xc3\xbf\x8e\xd9VC\xa7\x03rJ.\xf6L\x94b\xc5\x03\xea\x84u\x92\xc0\xcd\x16\xfb<\x03\x00\x00'}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x104}}, 0x4000) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/tty/ttyr3/dev\x00', 0x40200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x8000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/nfsd.fh/flush\x00', 0x4a141, 0x0) writev$auto(r2, &(0x7f0000000240)={0x0, 0x5}, 0xa) 21.23314509s ago: executing program 5 (id=9218): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sda\x00', 0x48001, 0x0) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0xa, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c804}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x4}, 0x1, 0x0, 0x0, 0x9}, 0x2}, 0x4, 0x6) 20.596328824s ago: executing program 5 (id=9221): socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0c01, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r0, 0x4008af00, 0x0) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) getsockopt$auto(r1, 0x84, 0x9, 0x0, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0xfffe, @rand_addr=0x64010102}, 0x55) mmap$auto(0x0, 0xda, 0x1, 0xeb1, 0x40000000000a5, 0x8000) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r2, 0x0, 0x7, 0x4cbd5d) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) getdents$auto(r3, 0x0, 0x62d4) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) 16.059232752s ago: executing program 5 (id=9240): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) prctl$auto_PR_SCHED_CORE_GET(0x476, 0x0, 0x0, 0x5, 0x7) socket(0xa, 0x1, 0x84) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x100000, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) shmctl$auto_SHM_STAT(0x5, 0xd, &(0x7f0000000140)={{0x10001, 0xffffffffffffffff, 0x0, 0x2, 0x3, 0x3, 0x6}, 0x5, 0x9, 0x1, 0x9, @inferred, @inferred, 0x0, 0x0, &(0x7f0000000000)="a92cc5b95cbadeeec0c80a78f129b552aff38f501076b376c850e3181d7ab078b9c2a74d949545259b5a23079c5ddb423ec48eaac2ce48768e1ea76aa84b74416a50", &(0x7f0000000100)="899f6eff00"}) msgctl$auto_IPC_SET(0x7f7, 0x1, &(0x7f0000000240)={{0x1000, 0xee00, 0xee01, 0x8, 0x40, 0x81, 0x786}, &(0x7f00000001c0)=0x54, &(0x7f0000000200)=0x53, 0x100, 0x5, 0xd48b, 0x4056, 0x3, 0xffff, 0x8, 0xff, @raw=0x4}) setregid$auto(r4, r5) 12.027863759s ago: executing program 5 (id=9238): connect$auto(0x3, &(0x7f0000000080)=@qipcrtr={0x2a, 0x0, 0x8000}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x1e, 0x0, 0xfffffeff) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) setgroups$auto(0xac2e, &(0x7f0000000180)=0x6) r0 = fcntl$auto(0x0, 0x407, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xcb1, r0, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x1, 0x0) epoll_create$auto(0x3e) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/veth0_macvtap/addr_gen_mode\x00', 0x202, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/conf/ip6gre0/send_redirects\x00', 0x20202, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x18, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004040}, 0x20000800) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto_PTRACE_PEEKSIGINFO(0x4209, r1, 0x8, 0x6) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xf3, 0x4, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyp6\x00', 0xa0102, 0x0) 6.334084859s ago: executing program 6 (id=9250): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_adjustment\x00', 0x400, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0xb, 0xc, 0x1000, 0x0) semctl$auto(0x1, 0xfffffffe, 0x3, 0x5) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 6.164945426s ago: executing program 3 (id=9251): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mounts\x00', 0x105442, 0x0) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000100)=""/4096, 0x1000) mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_SNDRV_PCM_IOCTL_INFO(r0, 0x81204101, &(0x7f0000001200)={0x9, 0xfff, 0x3ff, 0x6, "d0b5e9742783bed89b6be52b58b0063615e565f7cad9c6697b568081594847026c814f659db07c04e8577a4f403ae6cab4e6f041d1f2ed3d9e1819156154c517", "93b1aedaeb445ff30f58aaad5478af4c6d9ad70a17ecfd21718b009d7adb70d1e951f08c80f08cec162d15ee328b172a02e064ed033af95c0683c38e04ec0b0ef7df8784aa475e46afe24ea064e8cd7d", "05520fce609f945404e368d0a8a5a69c913a8d984960cd95866bf6a9a26b88b1", 0x5, 0x8000, 0x7, 0x8, '\x00', "a034bcc3c3a10b3e5c43308211ff20245bfd61dd50b36c76475bff2a84759105fea989c4d001c8d3cfb61e63ab866d361b908f304c2df5c4ccfa72cdff4e877f"}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r1 = socket(0x1e, 0x1, 0x0) socketpair$auto(0x8, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi0\x00', 0x80382, 0x0) ioctl$auto(r2, 0xc0045627, r1) close_range$auto(0x0, 0xfffffffffffff000, 0x2) ioctl$auto_USB_RAW_IOCTL_EP0_READ(0xffffffffffffffff, 0xc0085504, &(0x7f0000001100)={0x0, 0x1, 0x0, "1dd856a19ef964bc601a2f7134246fa5c038b621d8d73387f8159f52d0f8f88b6125271c9995b5637e095302bfca39993337a32745379d723e1d830e5a7eddbd01d57bc1aa0c2789572357355d2dd18fd3177e748589cf5f8111c282a5532931a72cb855e0417deceaaf6f0d09fa0b876fe0ae05975d5235c2034449c9afc18ac5bf1e831b39d8c5f160e28a59ae8532e6e8b9e4bc3ddefbfddb3c451db11b5c4b88a02815c3d5e401000c7c1cc69d3677a92a6fff0a9857e2042e492d2d4289935145b01f49c3d30fba3e6273b76c0c6af84f6e474152"}) 6.102032615s ago: executing program 6 (id=9252): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) clock_settime$auto(0x10, &(0x7f0000002d80)={0x9, 0x2}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop6\x00', 0x580, 0x0) sendfile$auto(0x1, r1, 0x0, 0x1f) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b45, 0xffffffffffffffff) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) close_range$auto(0x2, 0xa, 0x0) fanotify_init$auto(0x65, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20a42, 0x0) vmsplice$auto(0x4, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) semctl$auto(0xc, 0x2, 0x13, 0x100004) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/queues/tx-0/traffic_class\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 6.069823391s ago: executing program 5 (id=9253): mlock$auto(0xfff, 0xde7f) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) kill$auto(0x0, 0x11) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x1ff, 0x20000000) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sync_file_range$auto(0xffffffffffffffff, 0x4, 0xa31e, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) 5.253603863s ago: executing program 4 (id=9255): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) ioctl$auto(0x3, 0x40085400, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x0) unshare$auto(0x40000080) unshare$auto(0x2) close_range$auto(0x2, 0x8, 0x0) write$auto_dfs_global_fops_debug(0xffffffffffffffff, 0x0, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0xd) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) 5.246819077s ago: executing program 3 (id=9256): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) madvise$auto(0x108000, 0x800032, 0x4) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) rt_sigsuspend$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x105}) ioctl$auto(0x3, 0x80004509, 0x10000000000402) ioctl$auto(0x3, 0x800005411, 0x38) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$auto(0x1, 0x890b, 0x8) 4.976793713s ago: executing program 6 (id=9257): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$auto_TIOCVHANGUP(r0, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r1, 0x3, 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0x1ff, 0x0, 0xff, 0x7, 0x8, 0x0, 0x10, 0x0, 0x2, 0xbf, 0x1f6a, {0x0, 0x3}, 0x9, 0x1, 0x2, 0x80000001, 0x0, 0x8, 0x545, 0x1, 0x0, 0x8}) ioctl$auto(0x3, 0x40085400, 0x38) 4.444715715s ago: executing program 6 (id=9258): socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) gettid() rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) rt_sigtimedwait$auto(&(0x7f0000000100)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, 0x0, 0x5a1380, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000040)=0x5) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x1c1080, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x5393, r1) 4.190554605s ago: executing program 4 (id=9259): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) clock_settime$auto(0x10, &(0x7f0000002d80)={0x9, 0x2}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop6\x00', 0x580, 0x0) sendfile$auto(0x1, r1, 0x0, 0x1f) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b45, 0xffffffffffffffff) fanotify_init$auto(0x65, 0x0) vmsplice$auto(0x4, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) semctl$auto(0xc, 0x2, 0x13, 0x100004) 3.639981361s ago: executing program 4 (id=9260): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/ptp/ptp0/max_adjustment\x00', 0x400, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/001/001\x00', 0x29202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x3) open(0x0, 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101840, 0x0) socketpair$auto(0xb, 0xc, 0x1000, 0x0) semctl$auto(0x1, 0xfffffffe, 0x3, 0x5) r0 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r0, 0x0, 0xc3) 3.391705212s ago: executing program 4 (id=9261): mmap$auto(0x0, 0x420009, 0xfff, 0xeb1, 0x401, 0x7ffd) r0 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x19, 0x4, 0x4, 0x880b, 0x8, 0xd, 0x66b, 0x4, 0x7ff}, 0x6f4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_GET_STATION(0xffffffffffffffff, 0x0, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) pread64$auto(r2, 0x0, 0x2, 0x3) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\x97U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) fanotify_mark$auto(0xffffffffffffffff, 0x9, 0x1000000009, r0, 0x0) getdents$auto(0xffffffffffffffff, 0x0, 0x400018) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IPVS_CMD_GET_DAEMON(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x40000) writev$auto(0xffffffffffffffff, 0x0, 0x8) openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, 0x0, 0x0) 3.070060764s ago: executing program 3 (id=9262): openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) readv$auto(r0, 0x0, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) socket(0x11, 0x80003, 0x300) pidfd_open$auto(0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto_full_fops_mem(0xffffffffffffffff, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x3, 0x6, 0x3, 0x3, 0x3, 0x8003, 0x6, 0x2, 0x6d3c, 0x1, 0x2, 0x44a03baf]}, 0x0) clock_gettime$auto(0x80000020, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) pread64$auto(r2, &(0x7f0000000340)='t\xa7\x81\xce2)\x8c>A\x8e\x1f\xdc\x96F=Pp\x04\xa6<\xd6\xe3\xf4\xa8\x91\xb8\x8f>\xc9\xe4\a\xcacg\x10\xa0\xd6\xad1\x17{c\x14=\xc1\x10\xa1\x19\xe6\x80\xa8b[\x83E]>\xea\'~\xd4b\xb7\xd2c\xb3\xcf\x16g(-\x89\x9b\xe9W\v\xec\x1f\xc2\xda/\xc5\x89w;.%\b\x05\x9b\xd1\x01\xe0\xdb\x06&\xc5\x8elFJ\x178m\xb9\xceQ\x8f\xa4K.RK5:;T\xad\xa9m\x02#?\xe9\xd6\xc9\xbc\xfd\x98\x86\xa9\x85K\xb9\xddF\x00\xe1\xa5\x96\xda\xfd\xab\xfcq\xcb\x81\x02EuR-\r\xab\x8c\x91D\xd7$\x9d\xc4\xeb\xa8A[\x01\x04\xcb\xd0\x1f\xeb\xc5\xb0\xa4\xc2=\x9f\x9d\xa9\'+\xc3\x92', 0x1, 0x40000000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13/path\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) 2.176009999s ago: executing program 4 (id=9263): openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20904, 0x0) readv$auto(r0, 0x0, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, 0x0) socket(0x11, 0x80003, 0x300) pidfd_open$auto(0x1, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x7, 0x6d3f, 0x9, 0x6, 0xfffffffffffffffe]}, 0x0) write$auto_full_fops_mem(0xffffffffffffffff, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x3, 0x6, 0x3, 0x35a, 0x3, 0x8003, 0x6, 0x2, 0x6d3c, 0x1, 0x2, 0x1ff]}, 0x0) prctl$auto(0x59616d61, 0xffffffffffffffff, 0x1, 0x1004, 0xfffffffffffffffb) unshare$auto(0x40000080) unshare$auto(0x40000080) pread64$auto(r2, &(0x7f0000000340)='t\xa7\x81\xce2)\x8c>A\x8e\x1f\xdc\x96F=Pp\x04\xa6<\xd6\xe3\xf4\xa8\x91\xb8\x8f>\xc9\xe4\a\xcacg\x10\xa0\xd6\xad1\x17{c\x14=\xc1\x10\xa1\x19\xe6\x80\xa8b[\x83E]>\xea\'~\xd4b\xb7\xd2c\xb3\xcf\x16g(-\x89\x9b\xe9W\v\xec\x1f\xc2\xda/\xc5\x89w;.%\b\x05\x9b\xd1\x01\xe0\xdb\x06&\xc5\x8elFJ\x178m\xb9\xceQ\x8f\xa4K.RK5:;T\xad\xa9m\x02#?\xe9\xd6\xc9\xbc\xfd\x98\x86\xa9\x85K\xb9\xddF\x00\xe1\xa5\x96\xda\xfd\xab\xfcq\xcb\x81\x02EuR-\r\xab\x8c\x91D\xd7$\x9d\xc4\xeb\xa8A[\x01\x04\xcb\xd0\x1f\xeb\xc5\xb0\xa4\xc2=\x9f\x9d\xa9\'+\xc3\x92', 0x1, 0x40000000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:13/path\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x2, 0x1) close_range$auto(0x2, 0x8, 0x0) 841.779136ms ago: executing program 6 (id=9264): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0) set_mempolicy$auto(0x6, 0x0, 0x21) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) pidfd_open$auto(0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop15/queue/rotational\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) write$auto(0x3, 0x0, 0xfdf3) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x4048800) syz_genetlink_get_family_id$auto_nfc(0x0, r1) setfsuid$auto(0xee00) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 841.675462ms ago: executing program 3 (id=9265): r0 = socket(0x2, 0x1, 0x106) bind$auto(r0, 0x0, 0x6a) clock_settime$auto(0x10, &(0x7f0000002d80)={0x9, 0x2}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop6\x00', 0x580, 0x0) sendfile$auto(0x1, r1, 0x0, 0x1f) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b45, 0xffffffffffffffff) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) close_range$auto(0x2, 0xa, 0x0) fanotify_init$auto(0x65, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x20a42, 0x0) vmsplice$auto(0x4, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) semctl$auto(0xc, 0x2, 0x13, 0x100004) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/queues/tx-0/traffic_class\x00', 0x0, 0x0) read$auto(r2, 0x0, 0xe8) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 728.747166ms ago: executing program 4 (id=9266): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) socket(0x10, 0x2, 0xff) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) modify_ldt$auto(0x3, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) recvmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000040)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x1000}, 0xffffffff, 0x4, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x230) 311.334234ms ago: executing program 5 (id=9267): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) close_range$auto(0xffffffffffffffff, 0xa, 0x0) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r1, 0x80204d01, 0x0) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x40200, 0x0) mmap$auto(0x0, 0x402000b, 0x4af, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_batadv(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SNDBUF(r2, 0x73, 0x7, &(0x7f0000000100)='SEG\x85\x00', &(0x7f0000000140)=0x9d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x1c0000, 0x800097, 0x1, 0x0, 0x3, 0x1) mbind$auto(0x0, 0x800605, 0x1, &(0x7f0000000500)=0xffff, 0xa, 0x3) read$auto(0x3, 0x0, 0x7fffffff) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) 240.945747ms ago: executing program 3 (id=9268): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) ioctl$auto_TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$auto_TIOCVHANGUP(r0, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x10, 0x80002, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) timerfd_create$auto(0x0, 0x0) timerfd_settime$auto(r1, 0x3, 0x0, 0x0) adjtimex$auto(&(0x7f0000000000)={0x1ff, 0x0, 0xff, 0x7, 0x8, 0x0, 0x10, 0x0, 0x2, 0xbf, 0x1f6a, {0x0, 0x3}, 0x9, 0x1, 0x2, 0x80000001, 0x0, 0x8, 0x545, 0x1, 0x0, 0x8}) ioctl$auto(0x3, 0x40085400, 0x38) 142.893329ms ago: executing program 6 (id=9269): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x0) unshare$auto(0x40000080) unshare$auto(0x2) close_range$auto(0x2, 0x8, 0x0) write$auto_dfs_global_fops_debug(0xffffffffffffffff, 0x0, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0xd) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) 0s ago: executing program 3 (id=9270): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) setregid$auto(0xffffffffffffffff, 0xfffe) setresgid$auto(0xffffffffffffffff, 0x0, 0x0) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x80002, 0x0) write$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f00000024c0)="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", 0xfff) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x929, 0x4001, 0x7, 0x5, 0x100717e, 0x3, 0x7, 0x6, 0x7ff, 0xfffffffe, 0x80000001, 0x4, 0x200000000001, 0x1, 0xfffffffffffffffb, 0x8, 0x0, 0x2, 0x2, 0x864, 0xe, 0x22000, 0x200, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, [0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x4000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffff4f3, 0x0, 0x0, 0x2f, 0x0, 0x0, 0xfffffffffffffffc]}, 0xa, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r2 = socket(0x10, 0x2, 0x0) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_id=0x4, 0x400000000005}, 0x3fc) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='f\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x803}, 0x2004, 0x8) r3 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) write$auto_proc_clear_refs_operations_internal(r0, &(0x7f0000000000)="73d6cc4fdf406742386dd72ff1428a506f5cd946a3", 0x15) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffff7effffd01, &(0x7f00000001c0)) kernel console output (not intermixed with test programs): B inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1217.169700][T28740] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1217.221644][T28740] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1217.249420][T28740] Node 0 DMA32 free:1290784kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56620kB inactive_anon:15408kB active_file:94412kB inactive_file:149672kB unevictable:1536kB writepending:1568kB zspages:812kB present:3129332kB managed:2539576kB mlocked:0kB bounce:0kB free_pcp:34832kB local_pcp:16560kB free_cma:0kB [ 1217.384029][T28740] lowmem_reserve[]: 0 0 1 1 1 [ 1217.388848][T28740] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1217.530226][T28740] lowmem_reserve[]: 0 0 0 0 0 [ 1217.545288][T28740] Node 1 Normal free:3908908kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:4132kB local_pcp:4132kB free_cma:0kB [ 1217.669160][T28740] lowmem_reserve[]: 0 0 0 0 0 [ 1217.686732][T28740] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1217.719401][T28740] Node 0 DMA32: 4044*4kB (UM) 4725*8kB (UME) 3023*16kB (UME) 2480*32kB (UM) 1148*64kB (UM) 495*128kB (UM) 243*256kB (UME) 161*512kB (UME) 83*1024kB (UME) 14*2048kB (UM) 173*4096kB (UM) = 1285448kB [ 1217.808877][T28740] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1217.868532][T28740] Node 1 Normal: 208*4kB (UME) 64*8kB (UME) 50*16kB (UME) 202*32kB (UME) 103*64kB (UME) 36*128kB (UM) 20*256kB (UME) 2*512kB (UM) 4*1024kB (UE) 4*2048kB (UME) 945*4096kB (UM) = 3908960kB [ 1217.938251][T28740] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1217.947873][T28740] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1218.025425][T28740] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1218.117654][T28740] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1218.139785][T28740] 67011 total pagecache pages [ 1218.156019][T28740] 58 pages in swap cache [ 1218.167413][T28740] Free swap = 124496kB [ 1218.175315][T28740] Total swap = 124996kB [ 1218.185250][T28740] 2097051 pages RAM [ 1218.200427][T28740] 0 pages HighMem/MovableOnly [ 1218.213226][T28740] 430195 pages reserved [ 1218.224526][T28740] 0 pages cma reserved [ 1218.894131][T28768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7640'. [ 1219.319035][T28781] FAULT_INJECTION: forcing a failure. [ 1219.319035][T28781] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.389211][T28781] CPU: 1 UID: 0 PID: 28781 Comm: syz.1.7644 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1219.389259][T28781] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1219.389270][T28781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1219.389288][T28781] Call Trace: [ 1219.389297][T28781] [ 1219.389308][T28781] dump_stack_lvl+0x100/0x190 [ 1219.389384][T28781] should_fail_ex.cold+0x5/0xa [ 1219.389439][T28781] should_failslab+0xc2/0x120 [ 1219.389495][T28781] kmem_cache_alloc_noprof+0x83/0x780 [ 1219.389539][T28781] ? __proc_create+0xc2/0x8c0 [ 1219.389590][T28781] ? __proc_create+0x2cb/0x8c0 [ 1219.389649][T28781] ? __proc_create+0x2cb/0x8c0 [ 1219.389698][T28781] __proc_create+0x2cb/0x8c0 [ 1219.389756][T28781] ? __pfx___proc_create+0x10/0x10 [ 1219.389818][T28781] ? _raw_write_unlock+0x28/0x50 [ 1219.389854][T28781] ? proc_register+0x559/0x8a0 [ 1219.389912][T28781] proc_create_reg+0x75/0x170 [ 1219.389949][T28781] proc_create_data+0x86/0x110 [ 1219.389982][T28781] ? __pfx_proc_create_data+0x10/0x10 [ 1219.390013][T28781] ? cache_register_net+0x137/0x5e0 [ 1219.390065][T28781] ? cache_register_net+0x137/0x5e0 [ 1219.390129][T28781] cache_register_net+0x2d6/0x5e0 [ 1219.390185][T28781] nfsd_idmap_init+0x16e/0x250 [ 1219.390221][T28781] ? __pfx_nfsd_net_init+0x10/0x10 [ 1219.390279][T28781] nfsd_net_init+0x69/0x3d0 [ 1219.390328][T28781] ? __pfx_nfsd_net_init+0x10/0x10 [ 1219.390376][T28781] ops_init+0x1e2/0x5f0 [ 1219.390433][T28781] setup_net+0x118/0x3a0 [ 1219.390497][T28781] ? __pfx_setup_net+0x10/0x10 [ 1219.390548][T28781] ? lockdep_init_map_type+0x5c/0x250 [ 1219.390598][T28781] ? mutex_init_lockep+0x110/0x150 [ 1219.390652][T28781] copy_net_ns+0x46f/0x7c0 [ 1219.390690][T28781] create_new_namespaces+0x3ea/0xab0 [ 1219.390740][T28781] copy_namespaces+0x468/0x5e0 [ 1219.390781][T28781] copy_process+0x32d5/0x7890 [ 1219.390843][T28781] ? __pfx_copy_process+0x10/0x10 [ 1219.390888][T28781] ? find_held_lock+0x2b/0x80 [ 1219.390939][T28781] kernel_clone+0xfc/0x930 [ 1219.390983][T28781] ? __pfx_futex_wait+0x10/0x10 [ 1219.391018][T28781] ? __pfx_kernel_clone+0x10/0x10 [ 1219.391095][T28781] __do_sys_clone+0xd9/0x120 [ 1219.391142][T28781] ? __pfx___do_sys_clone+0x10/0x10 [ 1219.391207][T28781] ? __fget_files+0x21f/0x3d0 [ 1219.391258][T28781] ? xfd_validate_state+0x129/0x190 [ 1219.391324][T28781] do_syscall_64+0xc9/0xf80 [ 1219.391370][T28781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.391405][T28781] RIP: 0033:0x7f91f219aeb9 [ 1219.391432][T28781] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1219.391475][T28781] RSP: 002b:00007f91f30c0fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1219.391509][T28781] RAX: ffffffffffffffda RBX: 00007f91f2416090 RCX: 00007f91f219aeb9 [ 1219.391532][T28781] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040180211 [ 1219.391555][T28781] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1219.391576][T28781] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1219.391598][T28781] R13: 00007f91f2416128 R14: 00007f91f2416090 R15: 00007fff63d13838 [ 1219.391643][T28781] [ 1223.400087][T28833] ERROR: Out of memory at tomoyo_memory_ok. [ 1223.613848][T28844] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7662'. [ 1225.731394][T28867] ptrace attach of "./syz-executor exec"[5829] was attempted by ""[28867] [ 1226.738836][T28893] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7676'. [ 1229.792764][T28914] netlink: 98 bytes leftover after parsing attributes in process `syz.5.7682'. [ 1233.316058][T28937] could not allocate digest TFM handle [ 1234.050560][T28953] zswap: compressor  not available [ 1234.621306][T28962] ERROR: Out of memory at tomoyo_memory_ok. [ 1236.676658][T28986] netlink: 'syz.1.7698': attribute type 1 has an invalid length. [ 1236.709997][T28986] netlink: 9 bytes leftover after parsing attributes in process `syz.1.7698'. [ 1237.941438][T29001] zswap: compressor  not available [ 1238.342951][T29012] ERROR: Out of memory at tomoyo_memory_ok. [ 1239.749024][T29021] could not allocate digest TFM handle [ 1240.586534][T29038] netlink: 'syz.5.7711': attribute type 4 has an invalid length. [ 1240.636361][T29038] netlink: 'syz.5.7711': attribute type 5 has an invalid length. [ 1240.731577][T29038] netlink: 10 bytes leftover after parsing attributes in process `syz.5.7711'. [ 1241.504476][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1241.510927][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1243.438671][T29058] zswap: compressor  not available [ 1244.708748][T29080] [U]  [ 1244.711638][T29080] [U] [ 1244.714402][T29080] [U] [ 1244.717148][T29080] [U] [ 1244.775883][T29080] [U] [ 1244.778620][T29080] [U] [ 1244.781321][T29080] [U] [ 1244.784052][T29080] [U] [ 1244.871741][T29080] [U] [ 1244.874519][T29080] [U] [ 1244.877268][T29080] [U] [ 1244.880016][T29080] [U] [ 1244.991268][T29080] [U] [ 1244.994051][T29080] [U] [ 1244.996804][T29080] [U] [ 1244.999553][T29080] [U] [ 1245.101459][T29080] [U] [ 1245.104332][T29080] [U] [ 1245.107092][T29080] [U] [ 1245.109852][T29080] [U] [ 1245.200766][T29080] [U] [ 1245.203573][T29080] [U] [ 1245.206320][T29080] [U] [ 1245.209079][T29080] [U] [ 1245.262266][T29080] [U] [ 1245.265070][T29080] [U] [ 1245.267842][T29080] [U] [ 1245.270581][T29080] [U] [ 1245.349180][T29080] [U] [ 1245.351976][T29080] [U] [ 1245.354720][T29080] [U] [ 1245.357466][T29080] [U] [ 1245.411737][T29080] [U] [ 1245.414516][T29080] [U] [ 1245.417279][T29080] [U] [ 1245.420029][T29080] [U] [ 1245.508951][T29080] [U] [ 1245.511760][T29080] [U] [ 1245.514513][T29080] [U] [ 1245.517243][T29080] [U] [ 1245.578690][T29080] [U] [ 1245.581466][T29080] [U] [ 1245.584218][T29080] [U] [ 1245.586964][T29080] [U] [ 1245.658390][T29080] [U] [ 1245.661173][T29080] [U] [ 1245.663913][T29080] [U] [ 1245.666656][T29080] [U] [ 1245.757749][T29085] ERROR: Out of memory at tomoyo_memory_ok. [ 1245.784291][T29080] [U] [ 1245.787085][T29080] [U] [ 1245.789839][T29080] [U] [ 1245.792594][T29080] [U] [ 1245.897046][T29080] [U] [ 1245.899850][T29080] [U] [ 1245.902595][T29080] [U] [ 1245.905337][T29080] [U] [ 1246.026541][T29080] [U] [ 1246.029414][T29080] [U] [ 1246.032164][T29080] [U] [ 1246.034916][T29080] [U] [ 1246.135728][T29080] [U] [ 1247.505179][T29103] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7727'. [ 1247.550410][T29103] netlink: 25 bytes leftover after parsing attributes in process `syz.1.7727'. [ 1248.843149][T29102] could not allocate digest TFM handle [ 1252.050943][T29150] FAULT_INJECTION: forcing a failure. [ 1252.050943][T29150] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.157401][T29150] CPU: 1 UID: 0 PID: 29150 Comm: syz.1.7739 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1252.157459][T29150] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1252.157473][T29150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1252.157493][T29150] Call Trace: [ 1252.157504][T29150] [ 1252.157517][T29150] dump_stack_lvl+0x100/0x190 [ 1252.157561][T29150] should_fail_ex.cold+0x5/0xa [ 1252.157616][T29150] should_failslab+0xc2/0x120 [ 1252.157661][T29150] ? tomoyo_encode2+0xfb/0x3c0 [ 1252.157692][T29150] __kmalloc_noprof+0xf6/0x9c0 [ 1252.157738][T29150] ? tomoyo_encode2+0xfb/0x3c0 [ 1252.157768][T29150] tomoyo_encode2+0xfb/0x3c0 [ 1252.157805][T29150] tomoyo_encode+0x29/0x50 [ 1252.157836][T29150] tomoyo_realpath_from_path+0x18c/0x690 [ 1252.157880][T29150] tomoyo_mkdev_perm+0x231/0x570 [ 1252.157926][T29150] ? tomoyo_mkdev_perm+0x21d/0x570 [ 1252.157976][T29150] ? __pfx_tomoyo_mkdev_perm+0x10/0x10 [ 1252.158039][T29150] ? do_raw_spin_unlock+0x145/0x1e0 [ 1252.158111][T29150] ? __pfx_current_check_access_path+0x10/0x10 [ 1252.158179][T29150] ? simple_lookup+0x105/0x1d0 [ 1252.158221][T29150] tomoyo_path_mknod+0xe2/0x190 [ 1252.158260][T29150] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 1252.158302][T29150] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1252.158344][T29150] security_path_mknod+0x161/0x300 [ 1252.158381][T29150] do_mknodat+0x247/0x7a0 [ 1252.158423][T29150] ? __pfx_do_mknodat+0x10/0x10 [ 1252.158456][T29150] ? strncpy_from_user+0x19d/0x2d0 [ 1252.158507][T29150] ? getname_flags.part.0+0x1c5/0x540 [ 1252.158561][T29150] __x64_sys_mknod+0x118/0x170 [ 1252.158603][T29150] do_syscall_64+0xc9/0xf80 [ 1252.158648][T29150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.158682][T29150] RIP: 0033:0x7f91f219aeb9 [ 1252.158725][T29150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.158769][T29150] RSP: 002b:00007f91f30e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 1252.158805][T29150] RAX: ffffffffffffffda RBX: 00007f91f2415fa0 RCX: 00007f91f219aeb9 [ 1252.158833][T29150] RDX: 0000000000000103 RSI: 00000000000020e9 RDI: 00002000000003c0 [ 1252.158854][T29150] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1252.158874][T29150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1252.158894][T29150] R13: 00007f91f2416038 R14: 00007f91f2415fa0 R15: 00007fff63d13838 [ 1252.158936][T29150] [ 1252.159008][T29150] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1253.432408][T29161] netlink: 25 bytes leftover after parsing attributes in process `syz.5.7742'. [ 1254.466613][ T30] audit: type=1800 audit(4294967659.445:40): pid=29175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7747" name="lu_gp_id" dev="configfs" ino=192812 res=0 errno=0 [ 1256.994701][T29197] ERROR: Out of memory at tomoyo_memory_ok. [ 1261.302775][T17228] Bluetooth: hci3: SCO packet for unknown connection handle 0 [ 1261.497678][T29229] zswap: compressor not available [ 1261.566917][T29236] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7760'. [ 1264.296677][T29272] netlink: 158 bytes leftover after parsing attributes in process `syz.5.7767'. [ 1265.146852][T29279] HfR: entered promiscuous mode [ 1266.389300][T29301] zswap: compressor not available [ 1267.101376][T29311] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7780'. [ 1267.189941][T29312] netlink: 354 bytes leftover after parsing attributes in process `syz.5.7780'. [ 1268.078487][T29319] ERROR: Out of memory at tomoyo_memory_ok. [ 1270.426037][T29344] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7788'. [ 1270.456587][T29344] netlink: 25 bytes leftover after parsing attributes in process `syz.1.7788'. [ 1271.422983][T29357] ERROR: Out of memory at tomoyo_memory_ok. [ 1273.194737][T29382] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7798'. [ 1275.392189][T29419] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7808'. [ 1275.446913][T29419] netlink: 25 bytes leftover after parsing attributes in process `syz.5.7808'. [ 1275.769729][T29421] Invalid ELF header magic: != ELF [ 1276.757715][T29433] ERROR: Out of memory at tomoyo_memory_ok. [ 1278.853395][T29463] netlink: 146 bytes leftover after parsing attributes in process `syz.1.7819'. [ 1279.237319][T29472] ERROR: Out of memory at tomoyo_memory_ok. [ 1280.210311][T29485] netlink: 2468 bytes leftover after parsing attributes in process `syz.3.7824'. [ 1281.143171][T29507] netlink: 186 bytes leftover after parsing attributes in process `syz.4.7831'. [ 1282.096976][T29520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1282.148069][T29520] netlink: 25 bytes leftover after parsing attributes in process `syz.3.7834'. [ 1283.341077][T29534] mmap: syz.5.7839 (29534): VmData 45879296 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 1284.260689][T29550] vcan0: tx drop: invalid sa for name 0x00000000000000fd [ 1285.677583][T29567] mkiss: ax0: crc mode is auto. [ 1287.334948][T29584] FAULT_INJECTION: forcing a failure. [ 1287.334948][T29584] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.500920][T29584] CPU: 1 UID: 0 PID: 29584 Comm: syz.1.7851 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1287.500982][T29584] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1287.500996][T29584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1287.501034][T29584] Call Trace: [ 1287.501046][T29584] [ 1287.501059][T29584] dump_stack_lvl+0x100/0x190 [ 1287.501122][T29584] should_fail_ex.cold+0x5/0xa [ 1287.501180][T29584] should_failslab+0xc2/0x120 [ 1287.501229][T29584] __kmalloc_cache_noprof+0x80/0x810 [ 1287.501266][T29584] ? snd_hrtimer_open+0x43/0xf0 [ 1287.501320][T29584] ? snd_hrtimer_open+0x43/0xf0 [ 1287.501365][T29584] ? __pfx_snd_hrtimer_open+0x10/0x10 [ 1287.501410][T29584] snd_hrtimer_open+0x43/0xf0 [ 1287.501456][T29584] snd_timer_open+0xb0b/0x1020 [ 1287.501506][T29584] ? __pfx_snd_timer_open+0x10/0x10 [ 1287.501553][T29584] ? kstrdup+0xb3/0xe0 [ 1287.501603][T29584] snd_seq_timer_open+0x289/0x600 [ 1287.501662][T29584] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1287.501728][T29584] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1287.501765][T29584] ? lockdep_hardirqs_on+0x78/0x100 [ 1287.501804][T29584] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1287.501844][T29584] queue_use+0xdc/0x1f0 [ 1287.501893][T29584] snd_seq_queue_alloc+0x2e5/0x590 [ 1287.501946][T29584] snd_seq_ioctl_create_queue+0xa9/0x370 [ 1287.502006][T29584] call_seq_client_ctl+0xa3/0x130 [ 1287.502044][T29584] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1287.502081][T29584] alloc_seq_queue+0xdb/0x180 [ 1287.502127][T29584] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1287.502188][T29584] ? mark_held_locks+0x40/0x70 [ 1287.502243][T29584] ? _raw_spin_unlock_irq+0x23/0x50 [ 1287.502278][T29584] ? lockdep_hardirqs_on+0x78/0x100 [ 1287.502320][T29584] snd_seq_oss_open+0x2b2/0xa10 [ 1287.502366][T29584] odev_open+0x79/0xc0 [ 1287.502396][T29584] ? __pfx_odev_open+0x10/0x10 [ 1287.502428][T29584] soundcore_open+0x2e3/0x5a0 [ 1287.502466][T29584] ? __pfx_soundcore_open+0x10/0x10 [ 1287.502503][T29584] chrdev_open+0x234/0x6a0 [ 1287.502544][T29584] ? __pfx_apparmor_file_open+0x10/0x10 [ 1287.502599][T29584] ? __pfx_chrdev_open+0x10/0x10 [ 1287.502659][T29584] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1287.502707][T29584] do_dentry_open+0x73e/0x1570 [ 1287.502746][T29584] ? __pfx_chrdev_open+0x10/0x10 [ 1287.502787][T29584] ? security_inode_permission+0xbf/0x250 [ 1287.502842][T29584] vfs_open+0x82/0x3f0 [ 1287.502897][T29584] path_openat+0x21dc/0x3120 [ 1287.502951][T29584] ? __pfx_path_openat+0x10/0x10 [ 1287.503005][T29584] do_filp_open+0x1f7/0x420 [ 1287.503047][T29584] ? __pfx_do_filp_open+0x10/0x10 [ 1287.503137][T29584] ? _raw_spin_unlock+0x28/0x50 [ 1287.503168][T29584] ? alloc_fd+0x476/0x790 [ 1287.503214][T29584] do_sys_openat2+0x12e/0x220 [ 1287.503261][T29584] ? __pfx_do_sys_openat2+0x10/0x10 [ 1287.503322][T29584] __x64_sys_openat+0x12d/0x210 [ 1287.503370][T29584] ? __pfx___x64_sys_openat+0x10/0x10 [ 1287.503415][T29584] ? xfd_validate_state+0x129/0x190 [ 1287.503476][T29584] do_syscall_64+0xc9/0xf80 [ 1287.503516][T29584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.503547][T29584] RIP: 0033:0x7f91f219aeb9 [ 1287.503572][T29584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1287.503602][T29584] RSP: 002b:00007f91f30e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1287.503633][T29584] RAX: ffffffffffffffda RBX: 00007f91f2415fa0 RCX: 00007f91f219aeb9 [ 1287.503654][T29584] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1287.503674][T29584] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1287.503694][T29584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1287.503713][T29584] R13: 00007f91f2416038 R14: 00007f91f2415fa0 R15: 00007fff63d13838 [ 1287.503755][T29584] [ 1288.476171][T29594] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7857'. [ 1288.712712][T29600] netlink: 146 bytes leftover after parsing attributes in process `syz.4.7855'. [ 1290.449389][T29623] ERROR: Out of memory at tomoyo_memory_ok. [ 1291.794826][T29650] FAULT_INJECTION: forcing a failure. [ 1291.794826][T29650] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1291.842085][T29650] CPU: 1 UID: 0 PID: 29650 Comm: syz.1.7864 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1291.842122][T29650] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1291.842130][T29650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1291.842143][T29650] Call Trace: [ 1291.842150][T29650] [ 1291.842159][T29650] dump_stack_lvl+0x100/0x190 [ 1291.842188][T29650] should_fail_ex.cold+0x5/0xa [ 1291.842219][T29650] ? prepare_alloc_pages+0x16d/0x5f0 [ 1291.842254][T29650] should_fail_alloc_page+0xeb/0x140 [ 1291.842285][T29650] prepare_alloc_pages+0x1f0/0x5f0 [ 1291.842317][T29650] ? rcu_is_watching+0x12/0xc0 [ 1291.842341][T29650] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1291.842370][T29650] ? rcu_is_watching+0x12/0xc0 [ 1291.842391][T29650] ? trace_mm_page_alloc+0x10e/0x160 [ 1291.842422][T29650] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1291.842448][T29650] ? __pfx_stack_trace_save+0x10/0x10 [ 1291.842472][T29650] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1291.842515][T29650] ? stack_depot_save_flags+0x27/0x9c0 [ 1291.842566][T29650] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1291.842593][T29650] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1291.842615][T29650] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1291.842637][T29650] ? do_alloc_pages+0x113/0x250 [ 1291.842666][T29650] ? snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 1291.842709][T29650] ? snd_pcm_hw_params+0x1729/0x1cb0 [ 1291.842739][T29650] ? snd_pcm_kernel_ioctl+0x167/0x2e0 [ 1291.842769][T29650] ? snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 1291.842795][T29650] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1291.842820][T29650] ? snd_pcm_oss_sync+0x1de/0x840 [ 1291.842847][T29650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.842872][T29650] alloc_pages_bulk_noprof+0x777/0x1500 [ 1291.842901][T29650] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1291.842931][T29650] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1291.842966][T29650] ? alloc_pages_noprof+0x233/0x390 [ 1291.842998][T29650] __kasan_populate_vmalloc+0xf0/0x210 [ 1291.843029][T29650] alloc_vmap_area+0x935/0x2a00 [ 1291.843068][T29650] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1291.843105][T29650] __get_vm_area_node+0x1ca/0x330 [ 1291.843142][T29650] __vmalloc_node_range_noprof+0x213/0x1530 [ 1291.843164][T29650] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1291.843186][T29650] ? lock_acquire+0x17c/0x330 [ 1291.843216][T29650] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1291.843238][T29650] ? trace_contention_end+0xd6/0x110 [ 1291.843269][T29650] ? exit_to_user_mode_loop+0x100/0x4b0 [ 1291.843299][T29650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1291.843321][T29650] ? do_alloc_pages+0xd1/0x250 [ 1291.843348][T29650] ? do_alloc_pages+0xd1/0x250 [ 1291.843380][T29650] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1291.843409][T29650] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1291.843429][T29650] __vmalloc_node_noprof+0xad/0xf0 [ 1291.843449][T29650] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1291.843470][T29650] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1291.843523][T29650] __snd_dma_alloc_pages+0xd2/0x150 [ 1291.843554][T29650] snd_dma_alloc_dir_pages+0x151/0x240 [ 1291.843580][T29650] do_alloc_pages+0x113/0x250 [ 1291.843616][T29650] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 1291.843654][T29650] snd_pcm_hw_params+0x1729/0x1cb0 [ 1291.843703][T29650] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1291.843735][T29650] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 1291.843765][T29650] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1291.843797][T29650] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 1291.843829][T29650] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 1291.843868][T29650] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1291.843895][T29650] ? __pfx___mutex_lock+0x10/0x10 [ 1291.843938][T29650] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1291.843966][T29650] snd_pcm_oss_sync+0x1de/0x840 [ 1291.843996][T29650] snd_pcm_oss_release+0x238/0x300 [ 1291.844022][T29650] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1291.844049][T29650] __fput+0x3ff/0xb40 [ 1291.844084][T29650] task_work_run+0x150/0x240 [ 1291.844118][T29650] ? __pfx_task_work_run+0x10/0x10 [ 1291.844157][T29650] exit_to_user_mode_loop+0x100/0x4b0 [ 1291.844186][T29650] ? rcu_is_watching+0x12/0xc0 [ 1291.844208][T29650] do_syscall_64+0x4ea/0xf80 [ 1291.844236][T29650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.844258][T29650] RIP: 0033:0x7f91f219aeb9 [ 1291.844275][T29650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1291.844297][T29650] RSP: 002b:00007f91f30a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1291.844318][T29650] RAX: 0000000000000000 RBX: 00007f91f2416180 RCX: 00007f91f219aeb9 [ 1291.844333][T29650] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1291.844345][T29650] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1291.844358][T29650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.844371][T29650] R13: 00007f91f2416218 R14: 00007f91f2416180 R15: 00007fff63d13838 [ 1291.844398][T29650] [ 1292.542983][T29650] syz.1.7864: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1292.562082][T29650] CPU: 1 UID: 0 PID: 29650 Comm: syz.1.7864 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1292.562133][T29650] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1292.562141][T29650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1292.562154][T29650] Call Trace: [ 1292.562162][T29650] [ 1292.562170][T29650] dump_stack_lvl+0x100/0x190 [ 1292.562199][T29650] warn_alloc.cold+0x95/0x1c1 [ 1292.562234][T29650] ? __pfx_warn_alloc+0x10/0x10 [ 1292.562267][T29650] ? __get_vm_area_node+0x2c5/0x330 [ 1292.562298][T29650] ? __get_vm_area_node+0x208/0x330 [ 1292.562337][T29650] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1292.562360][T29650] ? lock_acquire+0x17c/0x330 [ 1292.562393][T29650] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1292.562418][T29650] ? trace_contention_end+0xd6/0x110 [ 1292.562449][T29650] ? exit_to_user_mode_loop+0x100/0x4b0 [ 1292.562482][T29650] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1292.562503][T29650] ? do_alloc_pages+0xd1/0x250 [ 1292.562531][T29650] ? do_alloc_pages+0xd1/0x250 [ 1292.562564][T29650] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1292.562594][T29650] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1292.562614][T29650] __vmalloc_node_noprof+0xad/0xf0 [ 1292.562640][T29650] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1292.562662][T29650] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1292.562695][T29650] __snd_dma_alloc_pages+0xd2/0x150 [ 1292.562719][T29650] snd_dma_alloc_dir_pages+0x151/0x240 [ 1292.562750][T29650] do_alloc_pages+0x113/0x250 [ 1292.562783][T29650] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 1292.562819][T29650] snd_pcm_hw_params+0x1729/0x1cb0 [ 1292.562857][T29650] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1292.562889][T29650] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 1292.562919][T29650] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1292.562951][T29650] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 1292.562984][T29650] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 1292.563022][T29650] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1292.563049][T29650] ? __pfx___mutex_lock+0x10/0x10 [ 1292.563092][T29650] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1292.563145][T29650] snd_pcm_oss_sync+0x1de/0x840 [ 1292.563186][T29650] snd_pcm_oss_release+0x238/0x300 [ 1292.563221][T29650] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1292.563264][T29650] __fput+0x3ff/0xb40 [ 1292.563299][T29650] task_work_run+0x150/0x240 [ 1292.563333][T29650] ? __pfx_task_work_run+0x10/0x10 [ 1292.563372][T29650] exit_to_user_mode_loop+0x100/0x4b0 [ 1292.563404][T29650] ? rcu_is_watching+0x12/0xc0 [ 1292.563426][T29650] do_syscall_64+0x4ea/0xf80 [ 1292.563453][T29650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.563475][T29650] RIP: 0033:0x7f91f219aeb9 [ 1292.563492][T29650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.563513][T29650] RSP: 002b:00007f91f30a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1292.563534][T29650] RAX: 0000000000000000 RBX: 00007f91f2416180 RCX: 00007f91f219aeb9 [ 1292.563548][T29650] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1292.563560][T29650] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1292.563572][T29650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1292.563585][T29650] R13: 00007f91f2416218 R14: 00007f91f2416180 R15: 00007fff63d13838 [ 1292.563612][T29650] [ 1292.563620][T29650] Mem-Info: [ 1293.343048][T29650] active_anon:14163 inactive_anon:17221 isolated_anon:0 [ 1293.343048][T29650] active_file:23623 inactive_file:37451 isolated_file:0 [ 1293.343048][T29650] unevictable:768 dirty:533 writeback:0 [ 1293.343048][T29650] slab_reclaimable:14218 slab_unreclaimable:100150 [ 1293.343048][T29650] mapped:29167 shmem:16157 pagetables:1708 [ 1293.343048][T29650] sec_pagetables:0 bounce:0 [ 1293.343048][T29650] kernel_misc_reclaimable:0 [ 1293.343048][T29650] free:1286098 free_pcp:12663 free_cma:0 [ 1293.361199][T29636] nvme_fabrics: missing parameter 'transport=%s' [ 1293.461356][T29650] Node 0 active_anon:56652kB inactive_anon:68884kB active_file:94488kB inactive_file:149672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116668kB dirty:2128kB writeback:0kB shmem:63092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12352kB pagetables:6676kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1293.517196][T29650] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1293.595930][T29650] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1293.660030][T29650] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1293.673370][T29650] Node 0 DMA32 free:1217824kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:56652kB inactive_anon:66084kB active_file:94488kB inactive_file:149672kB unevictable:1536kB writepending:2128kB zspages:664kB present:3129332kB managed:2539576kB mlocked:0kB bounce:0kB free_pcp:51884kB local_pcp:20984kB free_cma:0kB [ 1293.707662][T29650] lowmem_reserve[]: 0 0 1 1 1 [ 1293.783050][T29650] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1293.829447][T29636] nvme_fabrics: missing parameter 'nqn=%s' [ 1293.877095][T29650] lowmem_reserve[]: 0 0 0 0 0 [ 1293.881944][T29650] Node 1 Normal free:3913092kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1293.975081][T29650] lowmem_reserve[]: 0 0 0 0 0 [ 1293.984831][T29650] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1294.006378][T29650] Node 0 DMA32: 5839*4kB (UME) 4479*8kB (UME) 2526*16kB (UM) 1294*32kB (UME) 1316*64kB (UME) 660*128kB (UME) 367*256kB (UM) 261*512kB (UME) 136*1024kB (UM) 31*2048kB (UME) 117*4096kB (UM) = 1219284kB [ 1294.070015][T29650] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1294.104110][T29650] Node 1 Normal: 203*4kB (UME) 61*8kB (UME) 47*16kB (UME) 212*32kB (UME) 102*64kB (UME) 37*128kB (UM) 21*256kB (UME) 3*512kB (UM) 5*1024kB (UME) 5*2048kB (UME) 945*4096kB (UM) = 3913092kB [ 1294.123009][T29650] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1294.240849][T29650] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1294.280891][T29650] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1294.300826][T29650] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1294.369148][T29650] 75418 total pagecache pages [ 1294.382762][T29650] 25 pages in swap cache [ 1294.388562][T29650] Free swap = 124620kB [ 1294.432470][T29650] Total swap = 124996kB [ 1294.444070][T29650] 2097051 pages RAM [ 1294.458255][T29650] 0 pages HighMem/MovableOnly [ 1294.468318][T29650] 430195 pages reserved [ 1294.478543][T29650] 0 pages cma reserved [ 1295.367086][T29663] netlink: 146 bytes leftover after parsing attributes in process `syz.5.7868'. [ 1295.470308][T29666] random: crng reseeded on system resumption [ 1297.423254][T29693] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7880'. [ 1298.922205][T29715] FAULT_INJECTION: forcing a failure. [ 1298.922205][T29715] name failslab, interval 1, probability 0, space 0, times 0 [ 1298.965406][T29715] CPU: 1 UID: 0 PID: 29715 Comm: syz.4.7886 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1298.965495][T29715] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1298.965509][T29715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1298.965528][T29715] Call Trace: [ 1298.965541][T29715] [ 1298.965554][T29715] dump_stack_lvl+0x100/0x190 [ 1298.965600][T29715] should_fail_ex.cold+0x5/0xa [ 1298.965653][T29715] should_failslab+0xc2/0x120 [ 1298.965703][T29715] __kmalloc_cache_noprof+0x80/0x810 [ 1298.965739][T29715] ? snd_timer_instance_new+0x47/0x2e0 [ 1298.965796][T29715] ? __lock_acquire+0x4a5/0x2630 [ 1298.965850][T29715] ? snd_timer_instance_new+0x47/0x2e0 [ 1298.965903][T29715] snd_timer_instance_new+0x47/0x2e0 [ 1298.965944][T29715] snd_seq_timer_open+0x1d4/0x600 [ 1298.965997][T29715] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 1298.966062][T29715] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1298.966130][T29715] ? lockdep_hardirqs_on+0x78/0x100 [ 1298.966171][T29715] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1298.966213][T29715] queue_use+0xdc/0x1f0 [ 1298.966257][T29715] snd_seq_queue_alloc+0x2e5/0x590 [ 1298.966310][T29715] snd_seq_ioctl_create_queue+0xa9/0x370 [ 1298.966369][T29715] call_seq_client_ctl+0xa3/0x130 [ 1298.966408][T29715] snd_seq_kernel_client_ctl+0x77/0xd0 [ 1298.966446][T29715] alloc_seq_queue+0xdb/0x180 [ 1298.966483][T29715] ? __pfx_alloc_seq_queue+0x10/0x10 [ 1298.966544][T29715] ? mark_held_locks+0x40/0x70 [ 1298.966587][T29715] ? _raw_spin_unlock_irq+0x23/0x50 [ 1298.966622][T29715] ? lockdep_hardirqs_on+0x78/0x100 [ 1298.966666][T29715] snd_seq_oss_open+0x2b2/0xa10 [ 1298.966713][T29715] odev_open+0x79/0xc0 [ 1298.966756][T29715] ? __pfx_odev_open+0x10/0x10 [ 1298.966787][T29715] soundcore_open+0x2e3/0x5a0 [ 1298.966826][T29715] ? __pfx_soundcore_open+0x10/0x10 [ 1298.966862][T29715] chrdev_open+0x234/0x6a0 [ 1298.966901][T29715] ? __pfx_apparmor_file_open+0x10/0x10 [ 1298.966945][T29715] ? __pfx_chrdev_open+0x10/0x10 [ 1298.966987][T29715] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1298.967033][T29715] do_dentry_open+0x73e/0x1570 [ 1298.967070][T29715] ? __pfx_chrdev_open+0x10/0x10 [ 1298.967134][T29715] ? security_inode_permission+0xbf/0x250 [ 1298.967207][T29715] vfs_open+0x82/0x3f0 [ 1298.967260][T29715] path_openat+0x21dc/0x3120 [ 1298.967313][T29715] ? __pfx_path_openat+0x10/0x10 [ 1298.967376][T29715] do_filp_open+0x1f7/0x420 [ 1298.967415][T29715] ? __pfx_do_filp_open+0x10/0x10 [ 1298.967499][T29715] ? _raw_spin_unlock+0x28/0x50 [ 1298.967531][T29715] ? alloc_fd+0x476/0x790 [ 1298.967579][T29715] do_sys_openat2+0x12e/0x220 [ 1298.967628][T29715] ? __pfx_do_sys_openat2+0x10/0x10 [ 1298.967691][T29715] __x64_sys_openat+0x12d/0x210 [ 1298.967743][T29715] ? __pfx___x64_sys_openat+0x10/0x10 [ 1298.967793][T29715] ? xfd_validate_state+0x129/0x190 [ 1298.967858][T29715] do_syscall_64+0xc9/0xf80 [ 1298.967900][T29715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.967935][T29715] RIP: 0033:0x7f7dfb99aeb9 [ 1298.967963][T29715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.967996][T29715] RSP: 002b:00007f7dfc942028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1298.968028][T29715] RAX: ffffffffffffffda RBX: 00007f7dfbc15fa0 RCX: 00007f7dfb99aeb9 [ 1298.968050][T29715] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1298.968071][T29715] RBP: 00007f7dfba08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1298.968091][T29715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1298.968111][T29715] R13: 00007f7dfbc16038 R14: 00007f7dfbc15fa0 R15: 00007ffdd5b19eb8 [ 1298.968162][T29715] [ 1299.452617][T29697] kexec: Could not allocate control_code_buffer [ 1300.026805][T29716] netlink: 504 bytes leftover after parsing attributes in process `syz.1.7894'. [ 1301.678708][T29756] ERROR: Out of memory at tomoyo_memory_ok. [ 1302.644085][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.650547][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1303.796797][T29791] netlink: 25 bytes leftover after parsing attributes in process `syz.4.7907'. [ 1303.826398][T29789] netlink: 158 bytes leftover after parsing attributes in process `syz.1.7906'. [ 1303.902986][T29789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7906'. [ 1305.766910][T29816] crash hp: kexec_trylock() failed, kdump image may be inaccurate [ 1307.628049][T29815] kexec: Could not allocate control_code_buffer [ 1309.593393][T29862] netlink: 93 bytes leftover after parsing attributes in process `syz.5.7932'. [ 1309.769393][T29858] netlink: 93 bytes leftover after parsing attributes in process `syz.5.7932'. [ 1309.897816][T29846] kexec: Could not allocate control_code_buffer [ 1311.720748][T29860] nvme_fabrics: missing parameter 'transport=%s' [ 1311.779659][T29860] nvme_fabrics: missing parameter 'nqn=%s' [ 1312.265481][T29891] random: crng reseeded on system resumption [ 1312.275074][T29893] tipc: Can't bind to reserved service type 0 [ 1312.811984][T29900] ERROR: Out of memory at tomoyo_memory_ok. [ 1317.531565][T29968] netlink: 25 bytes leftover after parsing attributes in process `syz.4.7947'. [ 1317.775926][T29971] netlink: 'syz.3.7949': attribute type 4 has an invalid length. [ 1317.805235][T29971] netlink: 314 bytes leftover after parsing attributes in process `syz.3.7949'. [ 1318.832449][T29981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7952'. [ 1319.049552][T29981] hsr_slave_0 (unregistering): left promiscuous mode [ 1321.825169][T30013] netlink: 504 bytes leftover after parsing attributes in process `syz.3.7961'. [ 1323.916006][T30038] ERROR: Out of memory at tomoyo_memory_ok. [ 1328.666399][T30091] FAULT_INJECTION: forcing a failure. [ 1328.666399][T30091] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1328.727983][T30091] CPU: 0 UID: 0 PID: 30091 Comm: syz.4.7979 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1328.728036][T30091] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1328.728058][T30091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1328.728072][T30091] Call Trace: [ 1328.728080][T30091] [ 1328.728089][T30091] dump_stack_lvl+0x100/0x190 [ 1328.728120][T30091] should_fail_ex.cold+0x5/0xa [ 1328.728153][T30091] ? prepare_alloc_pages+0x16d/0x5f0 [ 1328.728190][T30091] should_fail_alloc_page+0xeb/0x140 [ 1328.728223][T30091] prepare_alloc_pages+0x1f0/0x5f0 [ 1328.728257][T30091] ? rcu_is_watching+0x12/0xc0 [ 1328.728282][T30091] __alloc_frozen_pages_noprof+0x193/0x2410 [ 1328.728318][T30091] ? rcu_is_watching+0x12/0xc0 [ 1328.728340][T30091] ? trace_mm_page_alloc+0x10e/0x160 [ 1328.728374][T30091] ? __alloc_frozen_pages_noprof+0x2a0/0x2410 [ 1328.728402][T30091] ? __pfx_stack_trace_save+0x10/0x10 [ 1328.728427][T30091] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1328.728454][T30091] ? stack_depot_save_flags+0x27/0x9c0 [ 1328.728498][T30091] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1328.728525][T30091] ? __vmalloc_node_range_noprof+0x213/0x1530 [ 1328.728547][T30091] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1328.728570][T30091] ? do_alloc_pages+0x113/0x250 [ 1328.728599][T30091] ? snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 1328.728630][T30091] ? snd_pcm_hw_params+0x1729/0x1cb0 [ 1328.728662][T30091] ? snd_pcm_kernel_ioctl+0x167/0x2e0 [ 1328.728693][T30091] ? snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 1328.728722][T30091] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1328.728747][T30091] ? snd_pcm_oss_sync+0x1de/0x840 [ 1328.728776][T30091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.728804][T30091] alloc_pages_bulk_noprof+0x777/0x1500 [ 1328.728832][T30091] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1328.728863][T30091] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1328.728900][T30091] ? alloc_pages_noprof+0x233/0x390 [ 1328.728935][T30091] __kasan_populate_vmalloc+0xf0/0x210 [ 1328.728967][T30091] alloc_vmap_area+0x935/0x2a00 [ 1328.729009][T30091] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1328.729048][T30091] __get_vm_area_node+0x1ca/0x330 [ 1328.729089][T30091] __vmalloc_node_range_noprof+0x213/0x1530 [ 1328.729113][T30091] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1328.729136][T30091] ? lock_acquire+0x17c/0x330 [ 1328.729168][T30091] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1328.729193][T30091] ? trace_contention_end+0xd6/0x110 [ 1328.729226][T30091] ? exit_to_user_mode_loop+0x100/0x4b0 [ 1328.729259][T30091] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1328.729281][T30091] ? do_alloc_pages+0xd1/0x250 [ 1328.729315][T30091] ? do_alloc_pages+0xd1/0x250 [ 1328.729350][T30091] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1328.729382][T30091] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1328.729405][T30091] __vmalloc_node_noprof+0xad/0xf0 [ 1328.729426][T30091] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1328.729448][T30091] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1328.729484][T30091] __snd_dma_alloc_pages+0xd2/0x150 [ 1328.729508][T30091] snd_dma_alloc_dir_pages+0x151/0x240 [ 1328.729534][T30091] do_alloc_pages+0x113/0x250 [ 1328.729569][T30091] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 1328.729606][T30091] snd_pcm_hw_params+0x1729/0x1cb0 [ 1328.729644][T30091] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1328.729677][T30091] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 1328.729709][T30091] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1328.729743][T30091] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 1328.729777][T30091] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 1328.729828][T30091] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1328.729856][T30091] ? __pfx___mutex_lock+0x10/0x10 [ 1328.729898][T30091] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1328.729926][T30091] snd_pcm_oss_sync+0x1de/0x840 [ 1328.729975][T30091] snd_pcm_oss_release+0x238/0x300 [ 1328.730003][T30091] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1328.730032][T30091] __fput+0x3ff/0xb40 [ 1328.730068][T30091] task_work_run+0x150/0x240 [ 1328.730103][T30091] ? __pfx_task_work_run+0x10/0x10 [ 1328.730145][T30091] exit_to_user_mode_loop+0x100/0x4b0 [ 1328.730176][T30091] ? rcu_is_watching+0x12/0xc0 [ 1328.730199][T30091] do_syscall_64+0x4ea/0xf80 [ 1328.730228][T30091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.730251][T30091] RIP: 0033:0x7f7dfb99aeb9 [ 1328.730269][T30091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.730291][T30091] RSP: 002b:00007f7dfc921028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1328.730319][T30091] RAX: 0000000000000000 RBX: 00007f7dfbc16090 RCX: 00007f7dfb99aeb9 [ 1328.730333][T30091] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1328.730347][T30091] RBP: 00007f7dfba08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1328.730361][T30091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1328.730374][T30091] R13: 00007f7dfbc16128 R14: 00007f7dfbc16090 R15: 00007ffdd5b19eb8 [ 1328.730403][T30091] [ 1328.730863][T30091] syz.4.7979: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1330.066788][T30091] CPU: 0 UID: 0 PID: 30091 Comm: syz.4.7979 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1330.066837][T30091] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1330.066849][T30091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1330.066866][T30091] Call Trace: [ 1330.066875][T30091] [ 1330.066887][T30091] dump_stack_lvl+0x100/0x190 [ 1330.066927][T30091] warn_alloc.cold+0x95/0x1c1 [ 1330.066987][T30091] ? __pfx_warn_alloc+0x10/0x10 [ 1330.067035][T30091] ? __get_vm_area_node+0x2c5/0x330 [ 1330.067080][T30091] ? __get_vm_area_node+0x208/0x330 [ 1330.067134][T30091] __vmalloc_node_range_noprof+0xbf4/0x1530 [ 1330.067167][T30091] ? lock_acquire+0x17c/0x330 [ 1330.067220][T30091] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1330.067256][T30091] ? trace_contention_end+0xd6/0x110 [ 1330.067300][T30091] ? exit_to_user_mode_loop+0x100/0x4b0 [ 1330.067344][T30091] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1330.067374][T30091] ? do_alloc_pages+0xd1/0x250 [ 1330.067415][T30091] ? do_alloc_pages+0xd1/0x250 [ 1330.067462][T30091] ? __mutex_unlock_slowpath+0x15c/0x790 [ 1330.067504][T30091] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1330.067534][T30091] __vmalloc_node_noprof+0xad/0xf0 [ 1330.067563][T30091] ? __snd_dma_alloc_pages+0xd2/0x150 [ 1330.067595][T30091] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1330.067643][T30091] __snd_dma_alloc_pages+0xd2/0x150 [ 1330.067677][T30091] snd_dma_alloc_dir_pages+0x151/0x240 [ 1330.067713][T30091] do_alloc_pages+0x113/0x250 [ 1330.067759][T30091] snd_pcm_lib_malloc_pages+0x4bd/0x9b0 [ 1330.067812][T30091] snd_pcm_hw_params+0x1729/0x1cb0 [ 1330.067865][T30091] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1330.067911][T30091] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 1330.067956][T30091] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1330.068002][T30091] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 1330.068050][T30091] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 1330.068107][T30091] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1330.068147][T30091] ? __pfx___mutex_lock+0x10/0x10 [ 1330.068213][T30091] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1330.068251][T30091] snd_pcm_oss_sync+0x1de/0x840 [ 1330.068291][T30091] snd_pcm_oss_release+0x238/0x300 [ 1330.068325][T30091] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1330.068360][T30091] __fput+0x3ff/0xb40 [ 1330.068406][T30091] task_work_run+0x150/0x240 [ 1330.068453][T30091] ? __pfx_task_work_run+0x10/0x10 [ 1330.068510][T30091] exit_to_user_mode_loop+0x100/0x4b0 [ 1330.068552][T30091] ? rcu_is_watching+0x12/0xc0 [ 1330.068585][T30091] do_syscall_64+0x4ea/0xf80 [ 1330.068623][T30091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1330.068654][T30091] RIP: 0033:0x7f7dfb99aeb9 [ 1330.068679][T30091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1330.068711][T30091] RSP: 002b:00007f7dfc921028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1330.068740][T30091] RAX: 0000000000000000 RBX: 00007f7dfbc16090 RCX: 00007f7dfb99aeb9 [ 1330.068760][T30091] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1330.068779][T30091] RBP: 00007f7dfba08c1f R08: 0000000000000000 R09: 0000000000000000 [ 1330.068799][T30091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1330.068817][T30091] R13: 00007f7dfbc16128 R14: 00007f7dfbc16090 R15: 00007ffdd5b19eb8 [ 1330.068867][T30091] [ 1330.068877][T30091] Mem-Info: [ 1330.538200][T30091] active_anon:15449 inactive_anon:28538 isolated_anon:0 [ 1330.538200][T30091] active_file:23644 inactive_file:37451 isolated_file:0 [ 1330.538200][T30091] unevictable:768 dirty:655 writeback:0 [ 1330.538200][T30091] slab_reclaimable:14317 slab_unreclaimable:101498 [ 1330.538200][T30091] mapped:31018 shmem:29220 pagetables:1735 [ 1330.538200][T30091] sec_pagetables:0 bounce:0 [ 1330.538200][T30091] kernel_misc_reclaimable:0 [ 1330.538200][T30091] free:1275480 free_pcp:9651 free_cma:0 [ 1330.894607][T30091] Node 0 active_anon:70496kB inactive_anon:99552kB active_file:94572kB inactive_file:149672kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108372kB dirty:2620kB writeback:0kB shmem:108244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12128kB pagetables:6784kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1331.060306][T30091] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1331.200740][T30091] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1331.399829][T30091] lowmem_reserve[]: 0 2480 2481 2481 2481 [ 1331.405667][T30091] Node 0 DMA32 free:1216956kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:62916kB inactive_anon:77044kB active_file:94572kB inactive_file:149672kB unevictable:1536kB writepending:2624kB zspages:664kB present:3129332kB managed:2539576kB mlocked:0kB bounce:0kB free_pcp:33352kB local_pcp:16260kB free_cma:0kB [ 1331.570635][T30091] lowmem_reserve[]: 0 0 1 1 1 [ 1331.618930][T30091] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 1331.726313][T30091] lowmem_reserve[]: 0 0 0 0 0 [ 1331.751341][T30091] Node 1 Normal free:3911324kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:132kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:1760kB local_pcp:0kB free_cma:0kB [ 1331.875091][T30091] lowmem_reserve[]: 0 0 0 0 0 [ 1331.917867][T30091] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1331.989380][T30091] Node 0 DMA32: 12734*4kB (UME) 5037*8kB (UME) 3234*16kB (UME) 1748*32kB (UME) 693*64kB (UME) 256*128kB (UME) 269*256kB (UME) 226*512kB (UME) 108*1024kB (UME) 27*2048kB (UM) 151*4096kB (UM) = 1244992kB [ 1332.072595][T30091] Node 0 Normal: 4*4kB (U) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1332.125907][T30091] Node 1 Normal: 4*4kB (UME) 7*8kB (UME) 31*16kB (UME) 211*32kB (UME) 102*64kB (UME) 37*128kB (UM) 21*256kB (UME) 3*512kB (UM) 5*1024kB (UME) 5*2048kB (UME) 945*4096kB (UM) = 3911576kB [ 1332.235355][T30091] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1332.282154][T30091] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 1332.408053][T30091] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1332.483604][T30091] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1332.599117][T30091] 69939 total pagecache pages [ 1332.646179][T30091] 25 pages in swap cache [ 1332.656513][T30091] Free swap = 124620kB [ 1332.685159][T30091] Total swap = 124996kB [ 1332.701987][T30091] 2097051 pages RAM [ 1332.726964][T30091] 0 pages HighMem/MovableOnly [ 1332.772492][T30091] 430195 pages reserved [ 1332.801846][T30091] 0 pages cma reserved [ 1333.081045][T30111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7985'. [ 1333.122384][T30111] netlink: 354 bytes leftover after parsing attributes in process `syz.1.7985'. [ 1333.359978][T30119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7986'. [ 1333.398680][T30119] netlink: 354 bytes leftover after parsing attributes in process `syz.4.7986'. [ 1335.036345][T30143] ERROR: Out of memory at tomoyo_memory_ok. [ 1335.150219][T30145] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7996'. [ 1335.849086][T30151] netlink: 9 bytes leftover after parsing attributes in process `syz.3.7998'. [ 1336.598394][T30159] ERROR: Out of memory at tomoyo_memory_ok. [ 1337.447249][T30174] random: crng reseeded on system resumption [ 1338.107674][T30187] FAULT_INJECTION: forcing a failure. [ 1338.107674][T30187] name failslab, interval 1, probability 0, space 0, times 0 [ 1338.164544][T30187] CPU: 0 UID: 0 PID: 30187 Comm: syz.1.8007 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1338.164610][T30187] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1338.164622][T30187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1338.164642][T30187] Call Trace: [ 1338.164652][T30187] [ 1338.164665][T30187] dump_stack_lvl+0x100/0x190 [ 1338.164710][T30187] should_fail_ex.cold+0x5/0xa [ 1338.164762][T30187] should_failslab+0xc2/0x120 [ 1338.164806][T30187] kmem_cache_alloc_noprof+0x83/0x780 [ 1338.164847][T30187] ? __proc_create+0xc2/0x8c0 [ 1338.164893][T30187] ? __proc_create+0x2cb/0x8c0 [ 1338.164947][T30187] ? __proc_create+0x2cb/0x8c0 [ 1338.164993][T30187] __proc_create+0x2cb/0x8c0 [ 1338.165041][T30187] ? __pfx___proc_create+0x10/0x10 [ 1338.165087][T30187] ? proc_register+0x554/0x8a0 [ 1338.165140][T30187] ? _raw_write_unlock+0x28/0x50 [ 1338.165190][T30187] proc_create_reg+0x75/0x170 [ 1338.165223][T30187] proc_create_net_data+0x8e/0x1c0 [ 1338.165276][T30187] ? __pfx_proc_create_net_data+0x10/0x10 [ 1338.165328][T30187] ? __pfx_proc_create_net_data+0x10/0x10 [ 1338.165376][T30187] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1338.165425][T30187] ? __pfx_dev_proc_net_init+0x10/0x10 [ 1338.165469][T30187] dev_proc_net_init+0x5e/0x230 [ 1338.165511][T30187] ops_init+0x1e2/0x5f0 [ 1338.165565][T30187] setup_net+0x118/0x3a0 [ 1338.165614][T30187] ? __pfx_setup_net+0x10/0x10 [ 1338.165660][T30187] ? lockdep_init_map_type+0x5c/0x250 [ 1338.165704][T30187] ? mutex_init_lockep+0x110/0x150 [ 1338.165753][T30187] copy_net_ns+0x46f/0x7c0 [ 1338.165788][T30187] create_new_namespaces+0x3ea/0xab0 [ 1338.165843][T30187] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1338.165881][T30187] ksys_unshare+0x455/0xab0 [ 1338.165926][T30187] ? __pfx_ksys_unshare+0x10/0x10 [ 1338.165968][T30187] ? xfd_validate_state+0x129/0x190 [ 1338.166025][T30187] __x64_sys_unshare+0x31/0x40 [ 1338.166068][T30187] do_syscall_64+0xc9/0xf80 [ 1338.166107][T30187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1338.166138][T30187] RIP: 0033:0x7f91f219aeb9 [ 1338.166170][T30187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1338.166201][T30187] RSP: 002b:00007f91f30e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1338.166231][T30187] RAX: ffffffffffffffda RBX: 00007f91f2415fa0 RCX: 00007f91f219aeb9 [ 1338.166251][T30187] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1338.166270][T30187] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1338.166289][T30187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1338.166307][T30187] R13: 00007f91f2416038 R14: 00007f91f2415fa0 R15: 00007fff63d13838 [ 1338.166347][T30187] [ 1340.593981][T30201] nvme_fabrics: missing parameter 'transport=%s' [ 1340.669408][T30201] nvme_fabrics: missing parameter 'nqn=%s' [ 1344.841164][T30269] block nbd0: NBD_DISCONNECT [ 1344.880633][T30269] block nbd0: Send disconnect failed -32 [ 1344.880735][T30269] block nbd0: shutting down sockets [ 1345.115670][T30274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8031'. [ 1345.512921][T20735] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1345.620705][T30274] bond0: entered promiscuous mode [ 1345.620726][T30274] bond_slave_0: entered promiscuous mode [ 1345.620874][T30274] bond_slave_1: entered promiscuous mode [ 1345.621021][T30274] bond0: entered allmulticast mode [ 1345.621036][T30274] bond_slave_0: entered allmulticast mode [ 1345.621051][T30274] bond_slave_1: entered allmulticast mode [ 1345.622734][T30274] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1346.233757][T30286] ERROR: Out of memory at tomoyo_memory_ok. [ 1346.293179][T20735] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.653509][T20735] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.872844][T30294] futex_wake_op: syz.5.8039 tries to shift op by -1; fix this program [ 1347.140827][T20735] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.202703][T30303] netlink: 'syz.5.8041': attribute type 3 has an invalid length. [ 1347.217430][T30303] netlink: 306 bytes leftover after parsing attributes in process `syz.5.8041'. [ 1347.696225][T20735] bond0: left allmulticast mode [ 1347.705979][T20735] bond_slave_0: left allmulticast mode [ 1347.742323][T20735] bond_slave_1: left allmulticast mode [ 1347.766379][T20735] bond0: left promiscuous mode [ 1347.771217][T20735] bond_slave_0: left promiscuous mode [ 1347.806297][T20735] bond_slave_1: left promiscuous mode [ 1347.824596][T20735] bridge0: port 3(bond0) entered disabled state [ 1347.884854][T20735] bridge_slave_1: left allmulticast mode [ 1347.890558][T20735] bridge_slave_1: left promiscuous mode [ 1347.930666][T20735] bridge0: port 2(bridge_slave_1) entered disabled state [ 1348.004917][T20735] bridge_slave_0: left allmulticast mode [ 1348.010629][T20735] bridge_slave_0: left promiscuous mode [ 1348.047481][T20735] bridge0: port 1(bridge_slave_0) entered disabled state [ 1348.328572][T30323] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1349.657370][T20735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1349.698520][T20735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1349.750219][T20735] bond0 (unregistering): Released all slaves [ 1350.808001][T30348] HSR: entered promiscuous mode [ 1351.173737][T30363] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8051'. [ 1352.926651][T30397] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8058'. [ 1354.345738][T20735] hsr_slave_0: left promiscuous mode [ 1354.441569][T20735] hsr_slave_1: left promiscuous mode [ 1354.590630][T20735] veth1_macvtap: left promiscuous mode [ 1354.618102][T20735] veth1_vlan: left promiscuous mode [ 1354.665107][T20735] veth0_vlan: left promiscuous mode [ 1355.479636][T20735] pim6reg (unregistering): left allmulticast mode [ 1355.544688][T30437] netlink: 'syz.4.8067': attribute type 3 has an invalid length. [ 1355.575637][T30437] netlink: 306 bytes leftover after parsing attributes in process `syz.4.8067'. [ 1357.381579][T30459] ERROR: Out of memory at tomoyo_memory_ok. [ 1357.512389][T30455] ima: policy update failed [ 1357.562836][ T30] audit: type=1802 audit(4294967373.064:41): pid=30455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.8072" res=0 errno=0 [ 1357.715055][T30462] netlink: 'syz.4.8074': attribute type 12 has an invalid length. [ 1358.236851][T20735] team0 (unregistering): Port device team_slave_1 removed [ 1358.337270][T17228] Bluetooth: hci3: Malformed Event: 0x13 [ 1358.455466][T20735] team0 (unregistering): Port device team_slave_0 removed [ 1360.891254][ T30] audit: type=1800 audit(4294967376.411:42): pid=30484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8079" name="features" dev="configfs" ino=236190 res=0 errno=0 [ 1363.395383][T30541] FAULT_INJECTION: forcing a failure. [ 1363.395383][T30541] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1363.444696][T30541] CPU: 0 UID: 0 PID: 30541 Comm: syz.3.8102 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1363.444751][T30541] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1363.444766][T30541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1363.444787][T30541] Call Trace: [ 1363.444798][T30541] [ 1363.444811][T30541] dump_stack_lvl+0x100/0x190 [ 1363.444861][T30541] should_fail_ex.cold+0x5/0xa [ 1363.444917][T30541] get_futex_key+0x1d2/0x1620 [ 1363.444966][T30541] ? __pfx_get_futex_key+0x10/0x10 [ 1363.445024][T30541] futex_wake+0xea/0x530 [ 1363.445083][T30541] ? rcu_is_watching+0x12/0xc0 [ 1363.445118][T30541] ? lockdep_hardirqs_on+0x78/0x100 [ 1363.445158][T30541] ? __pfx_futex_wake+0x10/0x10 [ 1363.445216][T30541] ? fd_install+0x223/0x580 [ 1363.445252][T30541] ? putname+0xf5/0x1a0 [ 1363.445302][T30541] do_futex+0x32b/0x350 [ 1363.445350][T30541] ? __pfx_do_futex+0x10/0x10 [ 1363.445393][T30541] ? __pfx_do_sys_openat2+0x10/0x10 [ 1363.445447][T30541] ? __fget_files+0x21f/0x3d0 [ 1363.445487][T30541] __x64_sys_futex+0x34f/0x4d0 [ 1363.445537][T30541] ? __x64_sys_openat+0x12d/0x210 [ 1363.445591][T30541] ? __pfx___x64_sys_futex+0x10/0x10 [ 1363.445637][T30541] ? xfd_validate_state+0x129/0x190 [ 1363.445703][T30541] do_syscall_64+0xc9/0xf80 [ 1363.445747][T30541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.445782][T30541] RIP: 0033:0x7f607d59aeb9 [ 1363.445809][T30541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1363.445845][T30541] RSP: 002b:00007f607e4220e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1363.445877][T30541] RAX: ffffffffffffffda RBX: 00007f607d815fa8 RCX: 00007f607d59aeb9 [ 1363.445899][T30541] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f607d815fac [ 1363.445919][T30541] RBP: 00007f607d815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1363.445939][T30541] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 1363.445959][T30541] R13: 00007f607d816038 R14: 00007ffdcdb110e0 R15: 00007ffdcdb111c8 [ 1363.446000][T30541] [ 1363.922593][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1363.934713][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1364.141003][T30556] sp0: Synchronizing with TNC [ 1365.534307][T30578] netlink: 9 bytes leftover after parsing attributes in process `syz.1.8103'. [ 1365.601046][ T30] audit: type=1800 audit(4294967381.095:43): pid=30581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8104" name="lu_gp_id" dev="configfs" ino=242995 res=0 errno=0 [ 1366.775971][T30597] FAULT_INJECTION: forcing a failure. [ 1366.775971][T30597] name failslab, interval 1, probability 0, space 0, times 0 [ 1366.835197][T30597] CPU: 1 UID: 0 PID: 30597 Comm: syz.3.8107 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1366.835256][T30597] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1366.835271][T30597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1366.835290][T30597] Call Trace: [ 1366.835301][T30597] [ 1366.835314][T30597] dump_stack_lvl+0x100/0x190 [ 1366.835362][T30597] should_fail_ex.cold+0x5/0xa [ 1366.835416][T30597] should_failslab+0xc2/0x120 [ 1366.835465][T30597] ? __seq_open_private+0x22/0xd0 [ 1366.835495][T30597] __kmalloc_noprof+0xf6/0x9c0 [ 1366.835528][T30597] ? do_raw_spin_lock+0x128/0x260 [ 1366.835587][T30597] ? __seq_open_private+0x22/0xd0 [ 1366.835616][T30597] __seq_open_private+0x22/0xd0 [ 1366.835648][T30597] pid_maps_open+0x29/0xf0 [ 1366.835689][T30597] do_dentry_open+0x73e/0x1570 [ 1366.835728][T30597] ? __pfx_pid_maps_open+0x10/0x10 [ 1366.835781][T30597] ? security_inode_permission+0xbf/0x250 [ 1366.835838][T30597] vfs_open+0x82/0x3f0 [ 1366.835891][T30597] path_openat+0x21dc/0x3120 [ 1366.835942][T30597] ? __pfx_path_openat+0x10/0x10 [ 1366.835997][T30597] do_filp_open+0x1f7/0x420 [ 1366.836041][T30597] ? __pfx_do_filp_open+0x10/0x10 [ 1366.836096][T30597] ? __pfx_kfree_link+0x10/0x10 [ 1366.836157][T30597] ? _raw_spin_unlock+0x28/0x50 [ 1366.836190][T30597] ? alloc_fd+0x476/0x790 [ 1366.836238][T30597] do_sys_openat2+0x12e/0x220 [ 1366.836290][T30597] ? __pfx_do_sys_openat2+0x10/0x10 [ 1366.836343][T30597] ? __fget_files+0x21f/0x3d0 [ 1366.836387][T30597] __x64_sys_openat+0x12d/0x210 [ 1366.836439][T30597] ? __pfx___x64_sys_openat+0x10/0x10 [ 1366.836487][T30597] ? xfd_validate_state+0x129/0x190 [ 1366.836553][T30597] do_syscall_64+0xc9/0xf80 [ 1366.836596][T30597] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1366.836631][T30597] RIP: 0033:0x7f607d59aeb9 [ 1366.836658][T30597] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1366.836691][T30597] RSP: 002b:00007f607e422028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1366.836724][T30597] RAX: ffffffffffffffda RBX: 00007f607d815fa0 RCX: 00007f607d59aeb9 [ 1366.836746][T30597] RDX: 0000000000000840 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1366.836776][T30597] RBP: 00007f607d608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1366.836797][T30597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1366.836818][T30597] R13: 00007f607d816038 R14: 00007f607d815fa0 R15: 00007ffdcdb111c8 [ 1366.836862][T30597] [ 1367.699153][T30608] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 1367.765467][T30608] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1367.801226][T30608] vhci_hcd vhci_hcd.1: invalid port number 50 [ 1367.843572][T30608] vhci_hcd vhci_hcd.1: default hub control req: 0400 v0000 i0032 l0 [ 1368.580654][T30619] ERROR: Out of memory at tomoyo_memory_ok. [ 1370.225667][T30628] synth uevent: /module/orangefs: unknown uevent action string [ 1371.310132][T30644] netlink: 9 bytes leftover after parsing attributes in process `syz.4.8119'. [ 1372.038927][T30651] netlink: 334 bytes leftover after parsing attributes in process `syz.3.8120'. [ 1374.749036][T30688] Invalid ELF header magic: != ELF [ 1376.941195][T30727] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8135'. [ 1377.529050][T17228] Bluetooth: hci1: unexpected subevent 0x01 length: 3 < 18 [ 1377.617488][T30744] netlink: zone id is out of range [ 1377.687000][T30744] netlink: del zone limit has 4 unknown bytes [ 1378.385946][T30738] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8138'. [ 1379.867998][T30787] ERROR: Out of memory at tomoyo_memory_ok. [ 1380.854092][T30812] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8148'. [ 1384.168549][T30822] kexec: Could not allocate control_code_buffer [ 1384.403985][T30870] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 1386.496445][T30912] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8167'. [ 1387.388538][T30925] netlink: 306 bytes leftover after parsing attributes in process `syz.1.8171'. [ 1387.407071][T30929] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8170'. [ 1387.431386][T30929] vlan1: entered promiscuous mode [ 1387.450649][T30929] vlan1: entered allmulticast mode [ 1388.183094][T30935] Invalid ELF header magic: != ELF [ 1388.198960][T30934] delete_channel: no stack [ 1388.548821][T30948] netlink: 17 bytes leftover after parsing attributes in process `syz.5.8186'. [ 1390.892713][T30981] ERROR: Out of memory at tomoyo_memory_ok. [ 1391.602451][T30993] Invalid ELF header magic: != ELF [ 1392.185695][T31003] tipc: Started in network mode [ 1392.190620][T31003] tipc: Node identity ffffffff, cluster identity 4711 [ 1392.431562][T31005] ERROR: Out of memory at tomoyo_memory_ok. [ 1392.471474][T31003] tipc: Node number set to 4294967295 [ 1393.378191][T31017] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8205'. [ 1393.453906][T31017] netlink: 354 bytes leftover after parsing attributes in process `syz.5.8205'. [ 1393.584135][T31025] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8197'. [ 1393.821734][T31025] vlan1: entered promiscuous mode [ 1393.848351][T31025] vlan1: entered allmulticast mode [ 1394.446736][T31030] ubi0: attaching mtd0 [ 1394.458134][T31030] ubi0: scanning is finished [ 1394.462931][T31030] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1394.669190][T31030] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1394.691149][T31035] vivid-007: ================= START STATUS ================= [ 1394.705015][T31035] vivid-007: Generate PTS: true [ 1394.749809][T31035] vivid-007: Generate SCR: true [ 1394.773727][T31035] tpg source WxH: 320x240 (Y'CbCr) [ 1394.795903][T31035] tpg field: 1 [ 1394.820627][T31035] tpg crop: (0,0)/320x240 [ 1394.914603][T31035] tpg compose: (0,0)/320x240 [ 1394.946429][T31035] tpg colorspace: 8 [ 1394.960787][T31035] tpg transfer function: 0/0 [ 1394.978864][T31035] tpg Y'CbCr encoding: 0/0 [ 1395.006100][T31035] tpg quantization: 0/0 [ 1395.016396][T31035] tpg RGB range: 0/2 [ 1395.030696][T31035] vivid-007: ================== END STATUS ================== [ 1397.431636][T31085] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8214'. [ 1397.517663][T31089] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8215'. [ 1397.621022][T31089] hsr_slave_0: left promiscuous mode [ 1397.685064][T31089] hsr_slave_1: left promiscuous mode [ 1400.700833][T31138] netlink: 334 bytes leftover after parsing attributes in process `syz.4.8225'. [ 1401.322107][T31143] futex_wake_op: syz.1.8226 tries to shift op by -2048; fix this program [ 1401.429287][T31143] futex_wake_op: syz.1.8226 tries to shift op by -2048; fix this program [ 1402.031072][T31158] ERROR: Out of memory at tomoyo_memory_ok. [ 1406.260445][T17228] Bluetooth: hci1: command 0x0406 tx timeout [ 1406.266592][T31172] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1406.478857][T31172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1406.509319][T31172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1406.515521][T31172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1408.339182][T17228] Bluetooth: hci2: command 0x0406 tx timeout [ 1408.570296][T17228] Bluetooth: hci4: command 0x0406 tx timeout [ 1408.576370][T17228] Bluetooth: hci3: command 0x0c1a tx timeout [ 1413.205769][T31274] ERROR: Out of memory at tomoyo_memory_ok. [ 1415.056041][T31299] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8263'. [ 1415.181564][T31295] Invalid ELF header magic: != ELF [ 1415.233925][T31302] input: jJǸ;9%vlQ J86 as /devices/virtual/input/input32 [ 1415.252079][ T5180] ERROR: Out of memory at tomoyo_memory_ok. [ 1415.313911][T31302] FAULT_INJECTION: forcing a failure. [ 1415.313911][T31302] name failslab, interval 1, probability 0, space 0, times 0 [ 1415.407906][T31302] CPU: 0 UID: 0 PID: 31302 Comm: syz.3.8260 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1415.407968][T31302] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1415.407988][T31302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1415.408008][T31302] Call Trace: [ 1415.408018][T31302] [ 1415.408031][T31302] dump_stack_lvl+0x100/0x190 [ 1415.408076][T31302] should_fail_ex.cold+0x5/0xa [ 1415.408131][T31302] should_failslab+0xc2/0x120 [ 1415.408176][T31302] ? kobject_get_path+0xcf/0x2c0 [ 1415.408224][T31302] __kmalloc_noprof+0xf6/0x9c0 [ 1415.408271][T31302] ? kobject_get_path+0xcf/0x2c0 [ 1415.408311][T31302] kobject_get_path+0xcf/0x2c0 [ 1415.408360][T31302] kobject_uevent_env+0x287/0x18b0 [ 1415.408413][T31302] ? kernfs_put+0x3f/0x60 [ 1415.408456][T31302] ? sysfs_do_create_link_sd+0xbb/0x140 [ 1415.408503][T31302] ? bus_to_subsys+0x114/0x150 [ 1415.408557][T31302] device_add+0x116e/0x1950 [ 1415.408606][T31302] ? __pfx_device_add+0x10/0x10 [ 1415.408659][T31302] ? kobject_get+0xbb/0x150 [ 1415.408705][T31302] cdev_device_add+0x12b/0x270 [ 1415.408748][T31302] evdev_connect+0x3a8/0x4b0 [ 1415.408795][T31302] input_attach_handler.isra.0+0x177/0x1e0 [ 1415.408842][T31302] input_register_device.cold+0x139/0x375 [ 1415.408901][T31302] uinput_ioctl_handler.isra.0+0x8d8/0x1d10 [ 1415.408956][T31302] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1415.409015][T31302] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1415.409078][T31302] ? find_held_lock+0x2b/0x80 [ 1415.409108][T31302] ? hook_file_ioctl_common+0x146/0x410 [ 1415.409176][T31302] ? __pfx_uinput_ioctl+0x10/0x10 [ 1415.409237][T31302] __x64_sys_ioctl+0x18e/0x210 [ 1415.409295][T31302] do_syscall_64+0xc9/0xf80 [ 1415.409350][T31302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.409382][T31302] RIP: 0033:0x7f607d59aeb9 [ 1415.409407][T31302] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.409438][T31302] RSP: 002b:00007f607e401028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1415.409468][T31302] RAX: ffffffffffffffda RBX: 00007f607d816090 RCX: 00007f607d59aeb9 [ 1415.409490][T31302] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000007 [ 1415.409510][T31302] RBP: 00007f607d608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1415.409530][T31302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.409550][T31302] R13: 00007f607d816128 R14: 00007f607d816090 R15: 00007ffdcdb111c8 [ 1415.409592][T31302] [ 1415.758077][T31309] FAULT_INJECTION: forcing a failure. [ 1415.758077][T31309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1415.852666][T31309] CPU: 1 UID: 0 PID: 31309 Comm: syz.1.8264 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1415.852717][T31309] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1415.852726][T31309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1415.852740][T31309] Call Trace: [ 1415.852748][T31309] [ 1415.852757][T31309] dump_stack_lvl+0x100/0x190 [ 1415.852787][T31309] should_fail_ex.cold+0x5/0xa [ 1415.852823][T31309] _copy_to_user+0x32/0xd0 [ 1415.852860][T31309] dma_heap_ioctl+0x413/0x5e0 [ 1415.852899][T31309] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1415.852933][T31309] ? find_held_lock+0x2b/0x80 [ 1415.852982][T31309] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1415.853018][T31309] __x64_sys_ioctl+0x18e/0x210 [ 1415.853057][T31309] do_syscall_64+0xc9/0xf80 [ 1415.853086][T31309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.853109][T31309] RIP: 0033:0x7f91f219aeb9 [ 1415.853126][T31309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1415.853148][T31309] RSP: 002b:00007f91f30a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1415.853170][T31309] RAX: ffffffffffffffda RBX: 00007f91f2416180 RCX: 00007f91f219aeb9 [ 1415.853184][T31309] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000008 [ 1415.853199][T31309] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1415.853212][T31309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1415.853225][T31309] R13: 00007f91f2416218 R14: 00007f91f2416180 R15: 00007fff63d13838 [ 1415.853253][T31309] [ 1419.080151][T31357] FAULT_INJECTION: forcing a failure. [ 1419.080151][T31357] name failslab, interval 1, probability 0, space 0, times 0 [ 1419.224062][T31357] CPU: 1 UID: 0 PID: 31357 Comm: syz.3.8277 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1419.224116][T31357] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1419.224129][T31357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1419.224148][T31357] Call Trace: [ 1419.224159][T31357] [ 1419.224171][T31357] dump_stack_lvl+0x100/0x190 [ 1419.224214][T31357] should_fail_ex.cold+0x5/0xa [ 1419.224257][T31357] ? __lock_acquire+0x4a5/0x2630 [ 1419.224302][T31357] should_failslab+0xc2/0x120 [ 1419.224346][T31357] __kmalloc_cache_noprof+0x80/0x810 [ 1419.224380][T31357] ? tipc_sub_subscribe+0x15c/0x730 [ 1419.224426][T31357] ? tipc_sub_subscribe+0x15c/0x730 [ 1419.224466][T31357] tipc_sub_subscribe+0x15c/0x730 [ 1419.224512][T31357] tipc_conn_rcv_sub+0x21e/0x3d0 [ 1419.224552][T31357] tipc_topsrv_kern_subscr+0x20b/0x3c0 [ 1419.224592][T31357] ? __pfx_tipc_topsrv_kern_subscr+0x10/0x10 [ 1419.224639][T31357] ? net_generic+0xea/0x2a0 [ 1419.224691][T31357] tipc_group_create+0x4ab/0x660 [ 1419.224758][T31357] tipc_setsockopt+0x611/0xe30 [ 1419.224814][T31357] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1419.224889][T31357] ? __pfx_tipc_setsockopt+0x10/0x10 [ 1419.224944][T31357] do_sock_setsockopt+0xf3/0x1d0 [ 1419.224986][T31357] __sys_setsockopt+0x119/0x190 [ 1419.225047][T31357] __x64_sys_setsockopt+0xbd/0x160 [ 1419.225094][T31357] ? do_syscall_64+0x94/0xf80 [ 1419.225141][T31357] ? lockdep_hardirqs_on+0x78/0x100 [ 1419.225185][T31357] do_syscall_64+0xc9/0xf80 [ 1419.225229][T31357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.225263][T31357] RIP: 0033:0x7f607d59aeb9 [ 1419.225292][T31357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.225325][T31357] RSP: 002b:00007f607e401028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1419.225360][T31357] RAX: ffffffffffffffda RBX: 00007f607d816090 RCX: 00007f607d59aeb9 [ 1419.225383][T31357] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 1419.225405][T31357] RBP: 00007f607d608c1f R08: 0000000000000014 R09: 0000000000000000 [ 1419.225427][T31357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1419.225447][T31357] R13: 00007f607d816128 R14: 00007f607d816090 R15: 00007ffdcdb111c8 [ 1419.225493][T31357] [ 1419.231416][T31357] tipc: Subscription rejected, no memory [ 1419.820506][T31362] random: crng reseeded on system resumption [ 1424.201057][T31386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1424.227407][T31386] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1424.233571][T31386] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1424.273662][T31386] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1424.335340][T31400] ERROR: Out of memory at tomoyo_memory_ok. [ 1424.724268][T31220] Bluetooth: hci1: command 0x0406 tx timeout [ 1424.895154][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.901501][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1426.236505][T31220] Bluetooth: hci3: command 0x0c1a tx timeout [ 1426.242594][T31220] Bluetooth: hci2: command 0x0406 tx timeout [ 1426.315929][T31220] Bluetooth: hci4: command 0x0406 tx timeout [ 1426.603094][T31416] netlink: 30 bytes leftover after parsing attributes in process `syz.4.8289'. [ 1429.811203][T31458] futex_wake_op: syz.3.8304 tries to shift op by -1; fix this program [ 1432.137981][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c409800: rx timeout, send abort [ 1432.158961][ T5177] ERROR: Out of memory at tomoyo_memory_ok. [ 1432.455124][T31492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8313'. [ 1432.638842][T31220] Bluetooth: hci4: unexpected event 0x0b length: 440 > 11 [ 1432.643664][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805c409800: abort rx timeout. Force session deactivation [ 1432.815327][T31499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8316'. [ 1433.329990][T31505] netlink: 25 bytes leftover after parsing attributes in process `syz.3.8319'. [ 1434.013102][T31511] ERROR: Out of memory at tomoyo_memory_ok. [ 1434.922216][T31527] FAULT_INJECTION: forcing a failure. [ 1434.922216][T31527] name failslab, interval 1, probability 0, space 0, times 0 [ 1435.011197][T31527] CPU: 0 UID: 0 PID: 31527 Comm: syz.1.8325 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1435.011252][T31527] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1435.011266][T31527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1435.011285][T31527] Call Trace: [ 1435.011296][T31527] [ 1435.011308][T31527] dump_stack_lvl+0x100/0x190 [ 1435.011353][T31527] should_fail_ex.cold+0x5/0xa [ 1435.011405][T31527] should_failslab+0xc2/0x120 [ 1435.011450][T31527] kmem_cache_alloc_lru_noprof+0x8e/0x7d0 [ 1435.011491][T31527] ? __d_lookup+0x25c/0x4a0 [ 1435.011539][T31527] ? __d_alloc+0x34/0xa80 [ 1435.011582][T31527] ? __d_alloc+0x34/0xa80 [ 1435.011617][T31527] __d_alloc+0x34/0xa80 [ 1435.011663][T31527] d_alloc+0x4a/0x1e0 [ 1435.011703][T31527] lookup_one_qstr_excl+0x175/0x250 [ 1435.011754][T31527] start_dirop+0x59/0xb0 [ 1435.011786][T31527] simple_start_creating+0xf9/0x110 [ 1435.011819][T31527] ? __pfx_simple_start_creating+0x10/0x10 [ 1435.011853][T31527] ? mntput+0x70/0xa0 [ 1435.011883][T31527] ? simple_pin_fs+0xa3/0x190 [ 1435.011912][T31527] debugfs_start_creating.part.0+0x82/0x170 [ 1435.011952][T31527] __debugfs_create_file+0xb3/0x4f0 [ 1435.011995][T31527] debugfs_create_file_full+0x41/0x60 [ 1435.012037][T31527] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 1435.012088][T31527] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 1435.012170][T31527] ? lockdep_init_map_type+0x5c/0x250 [ 1435.012226][T31527] preinit_net.part.0+0x24e/0x8f0 [ 1435.012278][T31527] copy_net_ns+0x339/0x7c0 [ 1435.012312][T31527] create_new_namespaces+0x3ea/0xab0 [ 1435.012357][T31527] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1435.012396][T31527] ksys_unshare+0x455/0xab0 [ 1435.012442][T31527] ? __pfx_ksys_unshare+0x10/0x10 [ 1435.012486][T31527] ? xfd_validate_state+0x129/0x190 [ 1435.012545][T31527] __x64_sys_unshare+0x31/0x40 [ 1435.012589][T31527] do_syscall_64+0xc9/0xf80 [ 1435.012630][T31527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1435.012662][T31527] RIP: 0033:0x7f91f219aeb9 [ 1435.012688][T31527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1435.012719][T31527] RSP: 002b:00007f91f30e2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1435.012751][T31527] RAX: ffffffffffffffda RBX: 00007f91f2415fa0 RCX: 00007f91f219aeb9 [ 1435.012772][T31527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1435.012793][T31527] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1435.012813][T31527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1435.012832][T31527] R13: 00007f91f2416038 R14: 00007f91f2415fa0 R15: 00007fff63d13838 [ 1435.012873][T31527] [ 1435.554518][T31533] ERROR: Out of memory at tomoyo_memory_ok. [ 1437.370172][T31562] ovs_: entered promiscuous mode [ 1437.526540][T31562] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8333'. [ 1438.146614][T31568] zswap: compressor not available [ 1442.512626][T31612] ERROR: Out of memory at tomoyo_memory_ok. [ 1442.553523][T31621] ERROR: Out of memory at tomoyo_memory_ok. [ 1443.009835][T31634] ERROR: Out of memory at tomoyo_memory_ok. [ 1446.752348][T31671] ERROR: Out of memory at tomoyo_memory_ok. [ 1447.708322][T31682] netlink: 25 bytes leftover after parsing attributes in process `syz.3.8364'. [ 1447.994931][T31674] ERROR: Out of memory at tomoyo_memory_ok. [ 1448.470490][ T30] audit: type=1804 audit(4294967365.921:44): pid=31688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8365" name="/newroot/2087/file0" dev="tmpfs" ino=10766 res=1 errno=0 [ 1448.535678][ T30] audit: type=1804 audit(4294967365.971:45): pid=31689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.8365" name="/newroot/2087/file0" dev="tmpfs" ino=10766 res=1 errno=0 [ 1455.902916][T31735] sctp: [Deprecated]: syz.1.8378 (pid 31735) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1455.902916][T31735] Use struct sctp_sack_info instead [ 1457.003116][T31754] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 1457.094696][T31761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8385'. [ 1457.994189][T31770] ERROR: Out of memory at tomoyo_memory_ok. [ 1458.259615][T31774] can0: slcan on ptm0. [ 1458.479950][T31773] can0 (unregistered): slcan off ptm0. [ 1463.702417][T31869] FAULT_INJECTION: forcing a failure. [ 1463.702417][T31869] name failslab, interval 1, probability 0, space 0, times 0 [ 1463.719286][T31869] CPU: 0 UID: 0 PID: 31869 Comm: syz.1.8404 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1463.719325][T31869] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1463.719333][T31869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1463.719347][T31869] Call Trace: [ 1463.719354][T31869] [ 1463.719362][T31869] dump_stack_lvl+0x100/0x190 [ 1463.719393][T31869] should_fail_ex.cold+0x5/0xa [ 1463.719429][T31869] should_failslab+0xc2/0x120 [ 1463.719460][T31869] ? sg_kmalloc+0x35/0x70 [ 1463.719486][T31869] __kmalloc_noprof+0xf6/0x9c0 [ 1463.719507][T31869] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1463.719545][T31869] ? sg_kmalloc+0x35/0x70 [ 1463.719570][T31869] ? __asan_memset+0x23/0x50 [ 1463.719591][T31869] sg_kmalloc+0x35/0x70 [ 1463.719618][T31869] __sg_alloc_table+0x31c/0x490 [ 1463.719651][T31869] sg_alloc_table+0x37/0x1c0 [ 1463.719677][T31869] ? __pfx_sg_kmalloc+0x10/0x10 [ 1463.719707][T31869] system_heap_allocate+0x732/0x10e0 [ 1463.719735][T31869] ? __pfx_system_heap_allocate+0x10/0x10 [ 1463.719765][T31869] ? rep_movs_alternative+0x4a/0x90 [ 1463.719804][T31869] dma_heap_ioctl+0x37f/0x5e0 [ 1463.719841][T31869] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1463.719875][T31869] ? __do_sys_close_range+0x230/0x740 [ 1463.719915][T31869] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1463.719952][T31869] __x64_sys_ioctl+0x18e/0x210 [ 1463.719990][T31869] do_syscall_64+0xc9/0xf80 [ 1463.720018][T31869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1463.720041][T31869] RIP: 0033:0x7f91f219aeb9 [ 1463.720058][T31869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1463.720080][T31869] RSP: 002b:00007f91f30c1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1463.720102][T31869] RAX: ffffffffffffffda RBX: 00007f91f2416090 RCX: 00007f91f219aeb9 [ 1463.720117][T31869] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000001 [ 1463.720132][T31869] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1463.720146][T31869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1463.720160][T31869] R13: 00007f91f2416128 R14: 00007f91f2416090 R15: 00007fff63d13838 [ 1463.720188][T31869] [ 1466.173477][T31888] ptrace attach of "./syz-executor exec"[5833] was attempted by "n(:V|wrJgJ W揊\x5cgV諯V7I¯J;}_M\x0c`fKɒ9,h;0aIc\x0c{*W,rInv_? `8x>29Z-ϟ|M@4|GTq\x0b-':v,Zpj=foKLfG\x0cԶS]k\x0cC=00q0x‡j\x07*\x07+2k^@~M漸%Fq0ndEJ- VF,\x09䋁gqlͯ\x5c&L_ז\x09#\x09?\x0cm͝e\x0dOCjS$rc U^6˴\x0b5'rCpx\x074\x0aʄnfm#nԣE<ٛ҈O'R?v5rdq`l܄nĦk\x5c2d2.0^,nk=QviW-*2\x5cE;%񞹾M\x0cxQH1@tيq\x0dB5ͻ's[47HX7U [H԰@2\x1bRԋT\x07YH-\x0c#)ENR\x0be41S)qnͪumNGb%:<ه\x0b\x5ct\x07!fI\x0b*Km944SwR D^Dz_cs3*z1̗eFI@]GP-yL\x1bDoe t\x0bpԚS*F$%\x0c?gǖDjw\x5c\x0a!2q^d$iD+j y>%\x1bc8 6\x09Dx\x07vvy [ 1466.603707][ T30] audit: type=1800 audit(4294967384.155:46): pid=31897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8412" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1468.553939][T31930] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 1468.553939][T31930] M' is too long [ 1468.588407][T31932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8420'. [ 1468.625020][T31930] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 1468.625020][T31930] W ' is too long [ 1469.046712][T31933] ERROR: Out of memory at tomoyo_memory_ok. [ 1469.155572][T31939] ERROR: Out of memory at tomoyo_memory_ok. [ 1469.446610][T31945] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 1473.949324][T32019] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8448'. [ 1474.558519][ T30] audit: type=1804 audit(4294967392.156:47): pid=32027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.8441" name="file0" dev="tmpfs" ino=3261 res=1 errno=0 [ 1475.004387][ T30] audit: type=1804 audit(4294967392.609:48): pid=32026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.8441" name="file0" dev="tmpfs" ino=3261 res=1 errno=0 [ 1477.253727][T32057] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8449'. [ 1477.311010][T32057] netlink: 25 bytes leftover after parsing attributes in process `syz.5.8449'. [ 1477.720883][T32061] netlink: 'syz.5.8451': attribute type 1 has an invalid length. [ 1478.217541][T32067] kAFS: bad VL server IP address [ 1480.320693][T32100] ERROR: Out of memory at tomoyo_memory_ok. [ 1484.511757][T32149] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1484.692044][ T30] audit: type=1800 audit(4294967402.339:49): pid=32151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8473" name="dbroot" dev="configfs" ino=290011 res=0 errno=0 [ 1486.009805][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1486.016292][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.716525][T32187] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1490.316606][T32218] FAULT_INJECTION: forcing a failure. [ 1490.316606][T32218] name failslab, interval 1, probability 0, space 0, times 0 [ 1490.411049][T32218] CPU: 1 UID: 0 PID: 32218 Comm: syz.1.8488 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1490.411103][T32218] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1490.411117][T32218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1490.411137][T32218] Call Trace: [ 1490.411147][T32218] [ 1490.411160][T32218] dump_stack_lvl+0x100/0x190 [ 1490.411205][T32218] should_fail_ex.cold+0x5/0xa [ 1490.411258][T32218] should_failslab+0xc2/0x120 [ 1490.411321][T32218] __kvmalloc_node_noprof+0x101/0xac0 [ 1490.411360][T32218] ? io_alloc_cache_init+0x38/0x170 [ 1490.411409][T32218] ? io_alloc_cache_init+0x38/0x170 [ 1490.411447][T32218] io_alloc_cache_init+0x38/0x170 [ 1490.411489][T32218] io_uring_setup.cold+0x3cd/0x1a89 [ 1490.411533][T32218] ? __pfx_io_uring_setup+0x10/0x10 [ 1490.411572][T32218] ? do_futex+0x192/0x350 [ 1490.411616][T32218] ? __pfx_do_futex+0x10/0x10 [ 1490.411673][T32218] ? fput+0x79/0x100 [ 1490.411712][T32218] ? __pfx___x64_sys_futex+0x10/0x10 [ 1490.411754][T32218] ? ksys_write+0x1ac/0x250 [ 1490.411788][T32218] ? __pfx_ksys_write+0x10/0x10 [ 1490.411831][T32218] __x64_sys_io_uring_setup+0xc2/0x170 [ 1490.411869][T32218] do_syscall_64+0xc9/0xf80 [ 1490.411908][T32218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.411941][T32218] RIP: 0033:0x7f91f219aeb9 [ 1490.411966][T32218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1490.411998][T32218] RSP: 002b:00007f91f30c1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 1490.412029][T32218] RAX: ffffffffffffffda RBX: 00007f91f2416090 RCX: 00007f91f219aeb9 [ 1490.412050][T32218] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000059 [ 1490.412070][T32218] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1490.412090][T32218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1490.412109][T32218] R13: 00007f91f2416128 R14: 00007f91f2416090 R15: 00007fff63d13838 [ 1490.412149][T32218] [ 1491.381828][T32213] FAULT_INJECTION: forcing a failure. [ 1491.381828][T32213] name failslab, interval 1, probability 0, space 0, times 0 [ 1491.450556][T32230] ERROR: Out of memory at tomoyo_memory_ok. [ 1491.526922][T32213] CPU: 0 UID: 0 PID: 32213 Comm: syz.1.8488 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1491.526991][T32213] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1491.527004][T32213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1491.527023][T32213] Call Trace: [ 1491.527033][T32213] [ 1491.527045][T32213] dump_stack_lvl+0x100/0x190 [ 1491.527088][T32213] should_fail_ex.cold+0x5/0xa [ 1491.527138][T32213] should_failslab+0xc2/0x120 [ 1491.527181][T32213] kmem_cache_alloc_noprof+0x83/0x780 [ 1491.527222][T32213] ? __pfx_map_id_range_down+0x10/0x10 [ 1491.527253][T32213] ? security_inode_alloc+0x3b/0x2c0 [ 1491.527302][T32213] ? security_inode_alloc+0x3b/0x2c0 [ 1491.527353][T32213] security_inode_alloc+0x3b/0x2c0 [ 1491.527393][T32213] inode_init_always_gfp+0xced/0x1040 [ 1491.527433][T32213] alloc_inode+0x8e/0x250 [ 1491.527475][T32213] alloc_anon_inode+0x2a/0x3e0 [ 1491.527511][T32213] ioctx_alloc+0x4dc/0x21e0 [ 1491.527559][T32213] ? find_held_lock+0x2b/0x80 [ 1491.527588][T32213] ? __pfx_ioctx_alloc+0x10/0x10 [ 1491.527634][T32213] __x64_sys_io_setup+0xc9/0x220 [ 1491.527673][T32213] do_syscall_64+0xc9/0xf80 [ 1491.527711][T32213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1491.527741][T32213] RIP: 0033:0x7f91f219aeb9 [ 1491.527770][T32213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1491.527817][T32213] RSP: 002b:00007f91f30e2028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1491.527847][T32213] RAX: ffffffffffffffda RBX: 00007f91f2415fa0 RCX: 00007f91f219aeb9 [ 1491.527869][T32213] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000e [ 1491.527888][T32213] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1491.527908][T32213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1491.527927][T32213] R13: 00007f91f2416038 R14: 00007f91f2415fa0 R15: 00007fff63d13838 [ 1491.527984][T32213] [ 1492.718237][T32233] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 1492.985087][T32239] netlink: 17 bytes leftover after parsing attributes in process `syz.4.8494'. [ 1496.419210][T32278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8505'. [ 1497.085648][T32292] ubi31: attaching mtd0 [ 1497.205098][T32292] ubi31: scanning is finished [ 1497.224770][T32292] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 1497.600405][T32292] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1498.691242][T32309] FAULT_INJECTION: forcing a failure. [ 1498.691242][T32309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1498.815772][T32309] CPU: 1 UID: 0 PID: 32309 Comm: syz.3.8515 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1498.815811][T32309] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1498.815820][T32309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1498.815833][T32309] Call Trace: [ 1498.815841][T32309] [ 1498.815850][T32309] dump_stack_lvl+0x100/0x190 [ 1498.815881][T32309] should_fail_ex.cold+0x5/0xa [ 1498.815918][T32309] _copy_to_user+0x32/0xd0 [ 1498.815955][T32309] dma_heap_ioctl+0x413/0x5e0 [ 1498.815993][T32309] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1498.816027][T32309] ? __do_sys_close_range+0x230/0x740 [ 1498.816068][T32309] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 1498.816105][T32309] __x64_sys_ioctl+0x18e/0x210 [ 1498.816142][T32309] do_syscall_64+0xc9/0xf80 [ 1498.816171][T32309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1498.816194][T32309] RIP: 0033:0x7f607d59aeb9 [ 1498.816212][T32309] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1498.816234][T32309] RSP: 002b:00007f607e401028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1498.816256][T32309] RAX: ffffffffffffffda RBX: 00007f607d816090 RCX: 00007f607d59aeb9 [ 1498.816276][T32309] RDX: 0000200000000140 RSI: ffffffffffdffe00 RDI: 0000000000000001 [ 1498.816291][T32309] RBP: 00007f607d608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1498.816306][T32309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1498.816320][T32309] R13: 00007f607d816128 R14: 00007f607d816090 R15: 00007ffdcdb111c8 [ 1498.816348][T32309] [ 1501.745090][T32349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8523'. [ 1501.804218][T32350] netlink: 354 bytes leftover after parsing attributes in process `syz.1.8523'. [ 1502.655218][T32358] ERROR: Out of memory at tomoyo_memory_ok. [ 1503.848691][T32376] input: jJǸ-9%v as /devices/virtual/input/input34 [ 1506.301909][T32415] ubi31: attaching mtd0 [ 1506.330339][T32414] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8541'. [ 1506.332922][T32415] ubi31: scanning is finished [ 1506.332979][T32415] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 1507.472611][T32415] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1508.014966][T31220] Bluetooth: hci3: unexpected event 0x07 length: 435 > 255 [ 1508.867040][T32437] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8546'. [ 1509.155869][T32444] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8548'. [ 1509.195960][T32444] macsec0: entered promiscuous mode [ 1509.201469][T32444] macsec0: entered allmulticast mode [ 1512.081411][T32478] sp0: Synchronizing with TNC [ 1513.669496][T32498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8563'. [ 1513.817856][T32501] ERROR: Out of memory at tomoyo_memory_ok. [ 1514.428685][T32514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8567'. [ 1520.065070][T32592] netlink: 'syz.4.8576': attribute type 2 has an invalid length. [ 1520.122785][T32592] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8576'. [ 1521.145327][ T30] audit: type=1326 audit(4294967438.989:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32600 comm="syz.4.8580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7dfb99aeb9 code=0x0 [ 1521.727718][T32613] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8586'. [ 1524.451020][T32644] sysfs_service_op_show: Client not running :-5: [ 1525.185635][T32652] ERROR: Out of memory at tomoyo_memory_ok. [ 1526.017043][T32670] netlink: zone id is out of range [ 1526.088186][T32670] netlink: zone id is out of range [ 1526.093363][T32670] netlink: zone id is out of range [ 1526.206204][T32670] netlink: zone id is out of range [ 1526.229749][T32670] netlink: zone id is out of range [ 1526.234932][T32670] netlink: zone id is out of range [ 1526.374984][T32664] netlink: set zone limit has 8 unknown bytes [ 1526.406382][T32670] netlink: zone id is out of range [ 1526.491895][T32670] netlink: zone id is out of range [ 1526.564624][T32670] netlink: zone id is out of range [ 1528.674045][T32707] zswap: compressor not available [ 1530.785291][T32734] Invalid ELF header magic: != ELF [ 1532.900306][T32761] device-mapper: ioctl: Unable to rename non-existent device,  to [ 1536.559450][ T343] ERROR: Out of memory at tomoyo_memory_ok. [ 1536.724122][ T347] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 1536.724122][ T347] M' is too long [ 1536.771370][ T347] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 1536.771370][ T347] W ' is too long [ 1537.043182][ T354] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8634'. [ 1537.139676][ T354] veth0_macvtap: left promiscuous mode [ 1537.279135][ T354] macvtap0: entered promiscuous mode [ 1537.284593][ T354] macvtap0: entered allmulticast mode [ 1537.567107][ T350] ERROR: Out of memory at tomoyo_memory_ok. [ 1538.114595][T31220] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1538.114638][T31220] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 1538.133141][T31220] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1538.133179][T31220] Bluetooth: hci2: adv larger than maximum supported [ 1538.144161][T31220] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 1538.150870][T31220] Bluetooth: hci2: adv larger than maximum supported [ 1538.158786][T31220] Bluetooth: hci2: adv larger than maximum supported [ 1538.165793][T31220] Bluetooth: hci2: Malformed LE Event: 0x0d [ 1539.413754][T31220] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 1539.413786][T31220] Bluetooth: hci2: unexpected subevent 0x0e length: 725 > 15 [ 1539.434053][T31220] Bluetooth: hci2: Unable to find connection for dst 00:a2:f2:94:be:c8 sid 0x4f [ 1539.595326][ T386] zram: Added device: zram0 [ 1544.285040][ T435] netlink: 350 bytes leftover after parsing attributes in process `syz.4.8653'. [ 1546.823916][ T467] FAULT_INJECTION: forcing a failure. [ 1546.823916][ T467] name failslab, interval 1, probability 0, space 0, times 0 [ 1546.837365][ T467] CPU: 1 UID: 0 PID: 467 Comm: syz.3.8661 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1546.837419][ T467] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1546.837432][ T467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1546.837452][ T467] Call Trace: [ 1546.837464][ T467] [ 1546.837477][ T467] dump_stack_lvl+0x100/0x190 [ 1546.837523][ T467] should_fail_ex.cold+0x5/0xa [ 1546.837577][ T467] should_failslab+0xc2/0x120 [ 1546.837624][ T467] __kmalloc_cache_noprof+0x80/0x810 [ 1546.837660][ T467] ? vidtv_psi_network_name_desc_init+0x68/0x310 [ 1546.837723][ T467] ? vidtv_psi_network_name_desc_init+0x68/0x310 [ 1546.837786][ T467] vidtv_psi_network_name_desc_init+0x68/0x310 [ 1546.837853][ T467] vidtv_psi_nit_table_init+0x291/0x5f0 [ 1546.837890][ T467] ? kasan_save_track+0x14/0x30 [ 1546.837936][ T467] vidtv_channel_si_init+0xcd0/0x18d0 [ 1546.837989][ T467] vidtv_mux_init+0x526/0xbf0 [ 1546.838034][ T467] vidtv_start_feed+0x33e/0x4c0 [ 1546.838084][ T467] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1546.838134][ T467] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1546.838187][ T467] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 1546.838247][ T467] ? mark_held_locks+0x40/0x70 [ 1546.838298][ T467] ? __pfx_vidtv_start_feed+0x10/0x10 [ 1546.838348][ T467] dmx_ts_feed_start_filtering+0xf6/0x220 [ 1546.838411][ T467] dvb_dmxdev_start_feed+0x273/0x3f0 [ 1546.838462][ T467] dvb_dmxdev_filter_start+0x1b6/0xdd0 [ 1546.838516][ T467] ? dvb_dmxdev_add_pid+0x2a1/0x380 [ 1546.838567][ T467] dvb_demux_do_ioctl+0xe64/0x1200 [ 1546.838627][ T467] dvb_usercopy+0x167/0x340 [ 1546.838672][ T467] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 1546.838722][ T467] ? __pfx_dvb_usercopy+0x10/0x10 [ 1546.838797][ T467] dvb_demux_ioctl+0x29/0x40 [ 1546.838846][ T467] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 1546.838891][ T467] __x64_sys_ioctl+0x18e/0x210 [ 1546.838946][ T467] do_syscall_64+0xc9/0xf80 [ 1546.838993][ T467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1546.839028][ T467] RIP: 0033:0x7f607d59aeb9 [ 1546.839056][ T467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1546.839091][ T467] RSP: 002b:00007f607e401028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1546.839126][ T467] RAX: ffffffffffffffda RBX: 00007f607d816090 RCX: 00007f607d59aeb9 [ 1546.839149][ T467] RDX: 0000000000000000 RSI: 0000000040146f2c RDI: 0000000000000003 [ 1546.839171][ T467] RBP: 00007f607d608c1f R08: 0000000000000000 R09: 0000000000000000 [ 1546.839192][ T467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1546.839213][ T467] R13: 00007f607d816128 R14: 00007f607d816090 R15: 00007ffdcdb111c8 [ 1546.839258][ T467] [ 1547.215501][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.225367][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.424458][ T472] Invalid ELF header magic: != ELF [ 1547.802121][ T476] ERROR: Out of memory at tomoyo_memory_ok. [ 1549.962421][ T504] netlink: 50 bytes leftover after parsing attributes in process `syz.4.8669'. [ 1552.785585][ T555] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8682'. [ 1552.831795][ T555] netlink: 354 bytes leftover after parsing attributes in process `syz.5.8682'. [ 1557.232407][ T633] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8701'. [ 1557.319363][ T631] HfR: entered promiscuous mode [ 1557.406952][ T637] netlink: 'syz.3.8701': attribute type 1 has an invalid length. [ 1557.430523][ T633] HfR: left promiscuous mode [ 1557.457603][ T637] nbd: error processing sock list [ 1558.103694][ T641] FAULT_INJECTION: forcing a failure. [ 1558.103694][ T641] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.137175][ T641] CPU: 1 UID: 0 PID: 641 Comm: syz.1.8702 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1558.137231][ T641] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1558.137244][ T641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1558.137283][ T641] Call Trace: [ 1558.137294][ T641] [ 1558.137309][ T641] dump_stack_lvl+0x100/0x190 [ 1558.137356][ T641] should_fail_ex.cold+0x5/0xa [ 1558.137417][ T641] should_failslab+0xc2/0x120 [ 1558.137468][ T641] kmem_cache_alloc_noprof+0x83/0x780 [ 1558.137513][ T641] ? kmem_cache_alloc_noprof+0x2e1/0x780 [ 1558.137558][ T641] ? anon_vma_fork+0xe8/0x620 [ 1558.137601][ T641] ? anon_vma_fork+0xe8/0x620 [ 1558.137636][ T641] anon_vma_fork+0xe8/0x620 [ 1558.137671][ T641] ? vm_area_dup+0x59d/0x8e0 [ 1558.137711][ T641] dup_mmap+0x1182/0x1e20 [ 1558.137759][ T641] ? __pfx_dup_mmap+0x10/0x10 [ 1558.137817][ T641] copy_process+0x7451/0x7890 [ 1558.137883][ T641] ? __pfx_copy_process+0x10/0x10 [ 1558.137949][ T641] kernel_clone+0xfc/0x930 [ 1558.137993][ T641] ? __pfx_futex_wait+0x10/0x10 [ 1558.138034][ T641] ? lockdep_hardirqs_on+0x78/0x100 [ 1558.138078][ T641] ? __pfx_kernel_clone+0x10/0x10 [ 1558.138148][ T641] __do_sys_clone+0xd9/0x120 [ 1558.138201][ T641] ? __pfx___do_sys_clone+0x10/0x10 [ 1558.138248][ T641] ? __sys_sendmsg+0x18f/0x220 [ 1558.138315][ T641] ? xfd_validate_state+0x129/0x190 [ 1558.138385][ T641] do_syscall_64+0xc9/0xf80 [ 1558.138431][ T641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.138467][ T641] RIP: 0033:0x7f91f219aeb9 [ 1558.138496][ T641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.138531][ T641] RSP: 002b:00007f91f30c0fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1558.138565][ T641] RAX: ffffffffffffffda RBX: 00007f91f2416090 RCX: 00007f91f219aeb9 [ 1558.138589][ T641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000002360411 [ 1558.138610][ T641] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1558.138633][ T641] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1558.138653][ T641] R13: 00007f91f2416128 R14: 00007f91f2416090 R15: 00007fff63d13838 [ 1558.138700][ T641] [ 1558.960529][ T657] ERROR: Out of memory at tomoyo_memory_ok. [ 1560.016996][ T677] zram0: detected capacity change from 0 to 8 [ 1560.070173][ T677] zram: Cannot change disksize for initialized device [ 1562.061310][T31220] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 1564.375769][ T720] Invalid ELF header magic: != ELF [ 1565.514233][ T728] zswap: compressor not available [ 1566.401003][ T751] netlink: 25 bytes leftover after parsing attributes in process `syz.4.8729'. [ 1567.421980][T31220] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1567.785736][ T769] netlink: 186 bytes leftover after parsing attributes in process `syz.1.8733'. [ 1567.803171][ T769] netlink: 186 bytes leftover after parsing attributes in process `syz.1.8733'. [ 1570.166829][ T795] ERROR: Out of memory at tomoyo_memory_ok. [ 1571.742044][ T807] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8742'. [ 1571.810464][ T811] netlink: 5 bytes leftover after parsing attributes in process `syz.4.8742'. [ 1572.466705][ T822] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8746'. [ 1572.831949][ T822] team0: Port device team_slave_0 removed [ 1573.162617][ T833] ERROR: Out of memory at tomoyo_memory_ok. [ 1574.095599][ T841] netlink: 330 bytes leftover after parsing attributes in process `syz.1.8752'. [ 1574.157990][ T841] : renamed from bond_slave_0 (while UP) [ 1574.203950][ T841] netlink: 330 bytes leftover after parsing attributes in process `syz.1.8752'. [ 1576.468807][ T877] input: jJǸ-9%vJ86 as /devices/virtual/input/input36 [ 1578.771897][ T915] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8772'. [ 1578.816254][ T915] netlink: 354 bytes leftover after parsing attributes in process `syz.5.8772'. [ 1579.139914][ T30] audit: type=1800 audit(4294967497.167:51): pid=919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.8773" name="dbroot" dev="configfs" ino=327024 res=0 errno=0 [ 1581.491743][ T962] ERROR: Out of memory at tomoyo_memory_ok. [ 1583.521379][ T984] sp0: Synchronizing with TNC [ 1589.536341][ T1070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8802'. [ 1590.147213][ T1077] netlink: 'syz.3.8803': attribute type 21 has an invalid length. [ 1590.180564][ T1077] netlink: 326 bytes leftover after parsing attributes in process `syz.3.8803'. [ 1591.246318][ T1097] sp0: Synchronizing with TNC [ 1592.674672][ T1115] ERROR: Out of memory at tomoyo_memory_ok. [ 1594.119329][ T1127] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8825'. [ 1594.189804][ T1127] HfR: entered promiscuous mode [ 1594.220912][ T1127] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8825'. [ 1594.275422][ T1127] HfR: left promiscuous mode [ 1594.343228][ T1134] netlink: 'syz.5.8825': attribute type 1 has an invalid length. [ 1594.367937][ T1134] nbd: error processing sock list [ 1598.055841][ T1171] netlink: 5 bytes leftover after parsing attributes in process `syz.5.8828'. [ 1598.634527][ T1184] futex_wake_op: syz.1.8832 tries to shift op by -2048; fix this program [ 1598.671770][ T1184] futex_wake_op: syz.1.8832 tries to shift op by -2048; fix this program [ 1599.169155][ T1193] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8835'. [ 1599.190829][ T1195] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8834'. [ 1599.216624][ T1193] macsec0: entered promiscuous mode [ 1599.232401][ T1193] macsec0: entered allmulticast mode [ 1599.583015][ T1205] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8836'. [ 1599.618592][T31220] Bluetooth: hci1: unexpected event 0x09 length: 435 > 3 [ 1601.098820][T31220] Bluetooth: hci1: ACL packet too small [ 1602.011570][ T1248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8856'. [ 1602.043180][ T1248] netlink: 'syz.1.8856': attribute type 1 has an invalid length. [ 1602.076124][ T1248] netlink: 'syz.1.8856': attribute type 6 has an invalid length. [ 1602.141904][ T1255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8848'. [ 1602.409273][ T1263] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input37 [ 1602.568881][ T5180] ERROR: Out of memory at tomoyo_memory_ok. [ 1602.782631][ T1269] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8850'. [ 1602.882083][ T1264] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input38 [ 1603.325750][T31220] Bluetooth: hci4: unexpected event 0x07 length: 435 > 255 [ 1603.960437][ T1289] ERROR: Out of memory at tomoyo_memory_ok. [ 1608.263013][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.269890][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1609.351106][ T1338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8865'. [ 1609.412042][ T1336] net_ratelimit: 5 callbacks suppressed [ 1609.412065][ T1336] netlink: set zone limit has 8 unknown bytes [ 1610.573353][ T1356] netlink: 'syz.3.8869': attribute type 2 has an invalid length. [ 1610.593827][ T1356] netlink: 5 bytes leftover after parsing attributes in process `syz.3.8869'. [ 1612.987267][ T1392] netlink: 'syz.5.8883': attribute type 2 has an invalid length. [ 1613.594163][ T1399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8885'. [ 1615.311746][ T1425] ERROR: Out of memory at tomoyo_memory_ok. [ 1615.730343][ T1437] netlink: set zone limit has 8 unknown bytes [ 1615.760385][ T1443] netlink: zone id is out of range [ 1615.778025][ T1443] netlink: zone id is out of range [ 1615.790284][ T1443] netlink: zone id is out of range [ 1615.795448][ T1443] netlink: zone id is out of range [ 1615.811351][ T1443] netlink: zone id is out of range [ 1615.823303][ T1443] netlink: zone id is out of range [ 1615.854766][ T1443] netlink: zone id is out of range [ 1615.882318][ T1443] netlink: zone id is out of range [ 1615.889278][ T1443] netlink: zone id is out of range [ 1617.009799][T31220] Bluetooth: hci2: unexpected event 0x07 length: 435 > 255 [ 1618.649781][ T1475] smc: net device dummy0 applied user defined pnetid DUMMY0 [ 1626.329581][ T1492] ERROR: Out of memory at tomoyo_memory_ok. [ 1634.386043][T25667] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1634.399771][T25667] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1634.414196][T25667] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1634.422095][T25667] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1634.429918][T25667] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1635.432321][ T1511] chnl_net:caif_netlink_parms(): no params data found [ 1635.589836][ T1511] bridge0: port 1(bridge_slave_0) entered blocking state [ 1635.607441][ T1511] bridge0: port 1(bridge_slave_0) entered disabled state [ 1635.614703][ T1511] bridge_slave_0: entered allmulticast mode [ 1635.629684][ T1511] bridge_slave_0: entered promiscuous mode [ 1635.678064][ T1511] bridge0: port 2(bridge_slave_1) entered blocking state [ 1635.685256][ T1511] bridge0: port 2(bridge_slave_1) entered disabled state [ 1635.733939][ T1511] bridge_slave_1: entered allmulticast mode [ 1635.761931][ T1511] bridge_slave_1: entered promiscuous mode [ 1635.980424][ T1511] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1636.029238][ T1511] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1636.154235][ T1511] team0: Port device team_slave_0 added [ 1636.187948][ T1511] team0: Port device team_slave_1 added [ 1636.380130][ T1511] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1636.398873][ T1511] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1636.428424][ T1511] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1636.442020][ T1511] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1636.450839][ T1511] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1636.478600][ T1511] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1636.512717][T25667] Bluetooth: hci0: command tx timeout [ 1636.545590][ T1511] hsr_slave_0: entered promiscuous mode [ 1636.748696][ T1511] hsr_slave_1: entered promiscuous mode [ 1636.765886][ T1511] debugfs: 'hsr0' already exists in 'hsr' [ 1636.786811][ T1511] Cannot create hsr debugfs directory [ 1636.848686][ T1544] Invalid ELF header magic: != ELF [ 1637.494711][ T1554] ERROR: Out of memory at tomoyo_memory_ok. [ 1638.394070][ T1511] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1638.433116][ T1511] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1638.751325][T31220] Bluetooth: hci0: command tx timeout [ 1638.860733][ T1511] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1638.978192][ T1511] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1640.475845][ T1511] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1640.559608][ T1511] 8021q: adding VLAN 0 to HW filter on device team0 [ 1640.607011][T17203] bridge0: port 1(bridge_slave_0) entered blocking state [ 1640.614173][T17203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1640.695010][T17202] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.702235][T17202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1640.800467][T31220] Bluetooth: hci0: command tx timeout [ 1640.988771][ T30] audit: type=1800 audit(4294967559.449:52): pid=1584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.8932" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 1641.491962][ T1595] netlink: 350 bytes leftover after parsing attributes in process `syz.5.8927'. [ 1642.748148][ T1511] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1642.879039][T31220] Bluetooth: hci0: command tx timeout [ 1644.640114][ T1511] veth0_vlan: entered promiscuous mode [ 1644.698051][ T1511] veth1_vlan: entered promiscuous mode [ 1644.803229][ T1511] veth0_macvtap: entered promiscuous mode [ 1644.833788][ T1511] veth1_macvtap: entered promiscuous mode [ 1644.976645][ T1511] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1645.012938][ T1511] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1645.026692][T20735] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.073066][T20735] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.108254][T20735] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.117388][T20735] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1645.256971][T17202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.292935][T17202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1645.342534][T17440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1645.371204][T17440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1648.664168][ T1667] ERROR: Out of memory at tomoyo_memory_ok. [ 1654.332480][T31220] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1657.019425][ T1739] Invalid ELF header magic: != ELF [ 1659.833019][ T1760] ERROR: Out of memory at tomoyo_memory_ok. [ 1660.349025][ T1771] sysfs_service_op_show: Client not running :-5: [ 1662.811741][ T1785] __vm_enough_memory: pid: 1785, comm: syz.3.8967, bytes: 8589938688 not enough memory for the allocation [ 1663.460186][ T30] audit: type=1800 audit(4294967582.036:53): pid=1797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8966" name="file0" dev="tmpfs" ino=6620 res=0 errno=0 [ 1665.927924][ T1833] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1665.967806][ T1833] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1666.041531][ T1833] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1666.287953][ T1833] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1666.367499][ T1833] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1666.463980][ T1833] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1666.801719][ T1833] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1667.939159][T31220] Bluetooth: hci1: command 0x0406 tx timeout [ 1668.018859][T31220] Bluetooth: hci2: command 0x0406 tx timeout [ 1668.105139][T31220] Bluetooth: hci3: command 0x0c1a tx timeout [ 1668.337323][T31220] Bluetooth: hci4: command 0x0406 tx timeout [ 1668.416696][T31220] Bluetooth: hci0: command 0x0c1a tx timeout [ 1669.378942][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.385366][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.208409][ T1879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1670.214734][ T1879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1670.240559][ T1879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1670.264842][ T1879] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1670.271555][ T1879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1671.066974][ T1895] ERROR: Out of memory at tomoyo_memory_ok. [ 1672.237069][T25667] Bluetooth: hci1: command 0x0406 tx timeout [ 1672.243306][T25667] Bluetooth: hci2: command 0x0406 tx timeout [ 1672.249533][T31220] Bluetooth: hci3: command 0x0c1a tx timeout [ 1672.325679][T25667] Bluetooth: hci0: command 0x0c1a tx timeout [ 1672.332545][T31220] Bluetooth: hci4: command 0x0406 tx timeout [ 1674.386047][T31220] Bluetooth: hci0: command 0x0c1a tx timeout [ 1675.547543][ T30] audit: type=1804 audit(4294967594.189:54): pid=1962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.9001" name="file0" dev="tmpfs" ino=4059 res=1 errno=0 [ 1675.649019][ T30] audit: type=1804 audit(4294967594.209:55): pid=1964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.9001" name="file0" dev="tmpfs" ino=4059 res=1 errno=0 [ 1675.924489][ T1972] netlink: 504 bytes leftover after parsing attributes in process `syz.4.9004'. [ 1676.234898][ T1980] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9006'. [ 1676.315960][T31220] Bluetooth: hci2: unexpected event 0x31 length: 19 > 6 [ 1682.542776][ T2059] ERROR: Out of memory at tomoyo_memory_ok. [ 1686.402359][ T2106] netlink: 330 bytes leftover after parsing attributes in process `syz.5.9042'. [ 1686.598476][ T2106] : renamed from bond_slave_0 (while UP) [ 1687.165507][ T2106] netlink: 330 bytes leftover after parsing attributes in process `syz.5.9042'. [ 1688.596422][ T2119] ERROR: Out of memory at tomoyo_memory_ok. [ 1693.720123][ T2173] ERROR: Out of memory at tomoyo_memory_ok. [ 1695.828770][ T2201] netlink: 330 bytes leftover after parsing attributes in process `syz.6.9058'. [ 1695.941479][ T2201] : renamed from bond_slave_0 (while UP) [ 1696.002249][ T2201] netlink: 330 bytes leftover after parsing attributes in process `syz.6.9058'. [ 1702.908781][ T2280] HfR: entered promiscuous mode [ 1702.974819][ T2280] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9079'. [ 1703.065636][ T2280] HfR: left promiscuous mode [ 1703.091658][ T2283] netlink: 'syz.6.9079': attribute type 1 has an invalid length. [ 1703.123210][ T2283] nbd: error processing sock list [ 1703.650700][ T2293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9082'. [ 1703.825397][ T2293] HfR: entered promiscuous mode [ 1703.851033][ T2293] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9082'. [ 1703.860214][ T2293] HfR: left promiscuous mode [ 1703.912388][ T2296] netlink: 'syz.3.9082': attribute type 1 has an invalid length. [ 1703.951946][ T2296] nbd: error processing sock list [ 1704.942625][ T2314] ERROR: Out of memory at tomoyo_memory_ok. [ 1705.767267][ T2330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9092'. [ 1706.238417][ T2333] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9093'. [ 1706.320471][ T2334] netlink: 'syz.5.9093': attribute type 1 has an invalid length. [ 1706.320879][ T2330] team0: Port device team_slave_0 removed [ 1706.408988][ T2334] nbd: error processing sock list [ 1706.655942][ T2332] HfR: entered promiscuous mode [ 1706.689477][ T2333] HfR: left promiscuous mode [ 1711.050093][ T2387] HfR: entered promiscuous mode [ 1711.127143][ T2387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9103'. [ 1711.166068][ T2387] HfR: left promiscuous mode [ 1711.222255][ T2394] netlink: 'syz.4.9103': attribute type 1 has an invalid length. [ 1711.266956][ T2394] nbd: error processing sock list [ 1711.543980][ T2396] netlink: 28 bytes leftover after parsing attributes in process `syz.6.9107'. [ 1711.950831][ T2396] team0: Port device team_slave_0 removed [ 1716.107260][ T2454] ERROR: Out of memory at tomoyo_memory_ok. [ 1723.932063][ T2562] netlink: 'syz.4.9140': attribute type 21 has an invalid length. [ 1723.957920][ T2562] netlink: 326 bytes leftover after parsing attributes in process `syz.4.9140'. [ 1724.496058][ T2573] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9141'. [ 1724.725140][ T2579] netlink: 12 bytes leftover after parsing attributes in process `syz.6.9141'. [ 1724.753882][ T2573] HfR: entered promiscuous mode [ 1724.833435][ T2579] HfR: left promiscuous mode [ 1724.894995][ T2573] netlink: 'syz.6.9141': attribute type 1 has an invalid length. [ 1724.933082][ T2573] nbd: error processing sock list [ 1727.328711][ T2630] ERROR: Out of memory at tomoyo_memory_ok. [ 1729.437869][ T2645] futex_wake_op: syz.4.9154 tries to shift op by -2048; fix this program [ 1729.477898][ T2645] futex_wake_op: syz.4.9154 tries to shift op by -2048; fix this program [ 1730.507167][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.523685][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.600985][ T2700] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9163'. [ 1737.345825][ T2771] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9180'. [ 1738.431833][ T2775] ERROR: Out of memory at tomoyo_memory_ok. [ 1738.680562][ T2774] netlink: 5 bytes leftover after parsing attributes in process `syz.3.9182'. [ 1746.239490][ T2834] Invalid ELF header magic: != ELF [ 1749.620687][ T2886] ERROR: Out of memory at tomoyo_memory_ok. [ 1752.959591][T31220] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1754.557200][ T2934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9211'. [ 1756.624593][ T2951] futex_wake_op: syz.3.9214 tries to shift op by -2048; fix this program [ 1756.670003][ T2951] futex_wake_op: syz.3.9214 tries to shift op by -2048; fix this program [ 1757.950201][ T2968] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9218'. [ 1760.795572][ T3012] ERROR: Out of memory at tomoyo_memory_ok. [ 1771.936347][ T3111] ERROR: Out of memory at tomoyo_memory_ok. [ 1778.849581][ T3194] futex_wake_op: syz.5.9267 tries to shift op by -2048; fix this program [ 1778.892210][ T31] INFO: task syz.1.8899:1481 blocked for more than 143 seconds. [ 1779.071304][ T31] Tainted: G U L syzkaller #0 [ 1779.131199][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1779.132050][ T3194] futex_wake_op: syz.5.9267 tries to shift op by -2048; fix this program [ 1779.202233][ T31] task:syz.1.8899 state:D stack:26872 pid:1481 tgid:1470 ppid:5829 task_flags:0x400140 flags:0x00080002 [ 1779.251917][ T31] Call Trace: [ 1779.260430][ T31] [ 1779.271004][ T31] ? __schedule+0xf65/0x5e10 [ 1779.285857][ T31] __schedule+0xfe4/0x5e10 [ 1779.381136][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1779.389529][ T31] ? __pfx___schedule+0x10/0x10 [ 1779.409409][ T31] ? find_held_lock+0x2b/0x80 [ 1779.414231][ T31] ? schedule+0x2bf/0x390 [ 1779.424673][ T31] schedule+0xdd/0x390 [ 1779.450101][ T31] schedule_preempt_disabled+0x13/0x30 [ 1779.479086][ T31] __mutex_lock+0xc9a/0x1b90 [ 1779.494001][ T31] ? expkey_flush+0x18/0x90 [ 1779.498667][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1779.550993][ T31] ? do_raw_spin_unlock+0x145/0x1e0 [ 1779.598013][ T31] ? _raw_spin_unlock+0x28/0x50 [ 1779.603089][ T31] ? __pfx_cache_clean+0x10/0x10 [ 1779.618317][ T31] ? __pfx___might_resched+0x10/0x10 [ 1779.623706][ T31] ? __pfx_expkey_flush+0x10/0x10 [ 1779.651325][ T31] ? expkey_flush+0x18/0x90 [ 1779.673094][ T31] expkey_flush+0x18/0x90 [ 1779.681680][ T31] write_flush.isra.0+0x2af/0x3d0 [ 1779.698062][ T31] ? __pfx_write_flush.isra.0+0x10/0x10 [ 1779.739998][ T31] ? iovec_from_user+0xbb/0x140 [ 1779.751616][ T31] ? __pfx_write_flush_procfs+0x10/0x10 [ 1779.772341][ T31] proc_reg_write+0x240/0x330 [ 1779.777106][ T31] ? __pfx_proc_reg_write+0x10/0x10 [ 1779.801370][ T31] vfs_writev+0x5ea/0xe10 [ 1779.805800][ T31] ? __pfx_vfs_writev+0x10/0x10 [ 1779.842510][ T31] ? fdget_pos+0x2aa/0x380 [ 1779.863551][ T31] ? fd_install+0x223/0x580 [ 1779.870911][ T31] ? __fget_files+0x21f/0x3d0 [ 1779.875675][ T31] ? do_writev+0x13e/0x340 [ 1779.896898][ T31] do_writev+0x13e/0x340 [ 1779.910484][ T31] ? __pfx_do_writev+0x10/0x10 [ 1779.924704][ T31] do_syscall_64+0xc9/0xf80 [ 1779.942683][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1779.963175][ T31] RIP: 0033:0x7f91f219aeb9 [ 1779.974649][ T31] RSP: 002b:00007f91f30a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1780.006010][ T31] RAX: ffffffffffffffda RBX: 00007f91f2416180 RCX: 00007f91f219aeb9 [ 1780.050928][ T31] RDX: 000000000000000a RSI: 0000200000000240 RDI: 000000000000000b [ 1780.090706][ T31] RBP: 00007f91f2208c1f R08: 0000000000000000 R09: 0000000000000000 [ 1780.120360][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1780.147810][ T31] R13: 00007f91f2416218 R14: 00007f91f2416180 R15: 00007fff63d13838 [ 1780.191710][ T31] [ 1780.199453][ T31] [ 1780.199453][ T31] Showing all locks held in the system: [ 1780.256236][ T31] 1 lock held by khungtaskd/31: [ 1780.270169][ T31] #0: ffffffff8e5e3120 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1780.301461][ T31] 4 locks held by kworker/u10:6/17541: [ 1780.320499][ T31] #0: ffff88801c29f148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x11ae/0x1840 [ 1780.376735][ T31] #1: ffffc90003e5fc98 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x927/0x1840 [ 1780.402215][ T31] #2: ffffffff903dd0b0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xab/0x830 [ 1780.434098][ T31] #3: ffffffff8e5ef8f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 1780.463948][ T31] 2 locks held by kworker/u10:8/20735: [ 1780.469469][ T31] 2 locks held by syz.1.8899/1471: [ 1780.503768][ T31] #0: ffffffff904a2850 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1780.512067][ T31] #1: ffffffff8ea470e8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x687/0xbc0 [ 1780.563439][ T31] 3 locks held by syz.1.8899/1481: [ 1780.568635][ T31] #0: ffff88806ae5d5f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1780.603199][ T31] #1: ffff8880297d0420 (sb_writers#3){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 1780.612191][ T31] #2: ffffffff8ea470e8 (nfsd_mutex){+.+.}-{4:4}, at: expkey_flush+0x18/0x90 [ 1780.662884][ T31] 2 locks held by syz.6.9250/3121: [ 1780.668055][ T31] 5 locks held by syz.4.9260/3160: [ 1780.692833][ T31] [ 1780.695218][ T31] ============================================= [ 1780.695218][ T31] [ 1780.722652][ T31] NMI backtrace for cpu 1 [ 1780.722678][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1780.722720][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1780.722731][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1780.722747][ T31] Call Trace: [ 1780.722756][ T31] [ 1780.722767][ T31] dump_stack_lvl+0x100/0x190 [ 1780.722805][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1780.722842][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1780.722888][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1780.722934][ T31] sys_info+0x141/0x190 [ 1780.722969][ T31] watchdog+0xcc3/0xfe0 [ 1780.723006][ T31] ? __pfx_watchdog+0x10/0x10 [ 1780.723036][ T31] ? __kthread_parkme+0x18c/0x230 [ 1780.723071][ T31] ? __pfx_watchdog+0x10/0x10 [ 1780.723100][ T31] ? __pfx_watchdog+0x10/0x10 [ 1780.723136][ T31] kthread+0x3b3/0x730 [ 1780.723176][ T31] ? __pfx_kthread+0x10/0x10 [ 1780.723213][ T31] ? ret_from_fork+0x79/0xaf0 [ 1780.723237][ T31] ? ret_from_fork+0x79/0xaf0 [ 1780.723263][ T31] ? rcu_is_watching+0x12/0xc0 [ 1780.723289][ T31] ? __pfx_kthread+0x10/0x10 [ 1780.723330][ T31] ret_from_fork+0x754/0xaf0 [ 1780.723359][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1780.723389][ T31] ? __switch_to+0x7b9/0x10c0 [ 1780.723426][ T31] ? __pfx_kthread+0x10/0x10 [ 1780.723469][ T31] ret_from_fork_asm+0x1a/0x30 [ 1780.723528][ T31] [ 1780.723546][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1780.874442][ C0] NMI backtrace for cpu 0 [ 1780.874463][ C0] CPU: 0 UID: 0 PID: 20735 Comm: kworker/u10:8 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1780.874498][ C0] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1780.874508][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1780.874527][ C0] Workqueue: krdsd rds_send_worker [ 1780.874554][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70 [ 1780.874580][ C0] Code: 5d 00 be 03 00 00 00 5b e9 32 a5 de 02 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 a5 85 dd 11 <48> 8b 34 24 65 48 8b 15 81 85 dd 11 a9 00 01 ff 00 74 1b f6 c4 01 [ 1780.874602][ C0] RSP: 0018:ffffc90000006e40 EFLAGS: 00000246 [ 1780.874619][ C0] RAX: 0000000000000302 RBX: ffff88807c20f640 RCX: ffffffff8949f7cf [ 1780.874634][ C0] RDX: ffff8880260bdb80 RSI: ffffffff8949f7dd RDI: ffff8880260bdb80 [ 1780.874650][ C0] RBP: 0000000000000008 R08: 0000000000000004 R09: 0000000000000000 [ 1780.874663][ C0] R10: 0000000000000042 R11: 0000000000000000 R12: 0000000000000000 [ 1780.874677][ C0] R13: 0000000000000042 R14: 0000000000000000 R15: 0000000000000042 [ 1780.874692][ C0] FS: 0000000000000000(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000 [ 1780.874713][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1780.874729][ C0] CR2: 0000000000000000 CR3: 0000000075f9e000 CR4: 00000000003526f0 [ 1780.874743][ C0] Call Trace: [ 1780.874750][ C0] [ 1780.874757][ C0] skb_network_protocol+0x126/0x6d0 [ 1780.874791][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1780.874820][ C0] ? __pfx_skb_network_protocol+0x10/0x10 [ 1780.874851][ C0] netif_skb_features+0x3a1/0x1310 [ 1780.874878][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1780.874907][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1780.874936][ C0] ? __pfx_netif_skb_features+0x10/0x10 [ 1780.874964][ C0] ? __pfx_qdisc_pkt_len_segs_init+0x10/0x10 [ 1780.874991][ C0] validate_xmit_skb+0x8c/0x1560 [ 1780.875023][ C0] __dev_queue_xmit+0x5f3/0x46f0 [ 1780.875054][ C0] ? irqentry_exit+0x180/0x670 [ 1780.875080][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1780.875107][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1780.875136][ C0] ? mark_held_locks+0x40/0x70 [ 1780.875166][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1780.875201][ C0] ? lock_acquire+0x17c/0x330 [ 1780.875233][ C0] ? mark_held_locks+0x40/0x70 [ 1780.875263][ C0] ip_finish_output2+0xf34/0x24b0 [ 1780.875303][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 1780.875339][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 1780.875383][ C0] __ip_finish_output.part.0+0x444/0x6f0 [ 1780.875420][ C0] ip_output+0x39b/0xec0 [ 1780.875455][ C0] ? __pfx_ip_output+0x10/0x10 [ 1780.875488][ C0] ? lock_acquire+0x17c/0x330 [ 1780.875517][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 1780.875551][ C0] ? ip4_dst_hoplimit+0x1a9/0x400 [ 1780.875589][ C0] __ip_queue_xmit+0x1b73/0x22b0 [ 1780.875612][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1780.875633][ C0] __tcp_transmit_skb+0x2c62/0x43c0 [ 1780.875669][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1780.875699][ C0] ? __build_skb_around+0x278/0x390 [ 1780.875737][ C0] __tcp_send_ack.part.0+0x4c5/0x930 [ 1780.875768][ C0] tcp_send_ack+0x84/0xa0 [ 1780.875797][ C0] __tcp_ack_snd_check+0x1fe/0x9f0 [ 1780.875830][ C0] tcp_rcv_established+0xc26/0x36c0 [ 1780.875859][ C0] ? __pfx_tcp_rcv_established+0x10/0x10 [ 1780.875887][ C0] ? __pfx_ipv4_dst_check+0x10/0x10 [ 1780.875910][ C0] tcp_v4_do_rcv+0xc64/0x10a0 [ 1780.875936][ C0] tcp_v4_rcv+0x30fd/0x4d50 [ 1780.875971][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1780.876000][ C0] ? __pfx_raw_local_deliver+0x10/0x10 [ 1780.876029][ C0] ? __pfx_tcp_v4_rcv+0x10/0x10 [ 1780.876056][ C0] ip_protocol_deliver_rcu+0xba/0x4d0 [ 1780.876087][ C0] ip_local_deliver_finish+0x3f2/0x6e0 [ 1780.876120][ C0] ip_local_deliver+0x19a/0x1f0 [ 1780.876150][ C0] ip_rcv+0x2d9/0x5d0 [ 1780.876178][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1780.876224][ C0] __netif_receive_skb_one_core+0x197/0x1e0 [ 1780.876256][ C0] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 1780.876288][ C0] ? lock_acquire+0x17c/0x330 [ 1780.876320][ C0] ? process_backlog+0x32a/0x1580 [ 1780.876351][ C0] ? process_backlog+0x32a/0x1580 [ 1780.876384][ C0] __netif_receive_skb+0x1f/0x120 [ 1780.876415][ C0] process_backlog+0x37a/0x1580 [ 1780.876449][ C0] __napi_poll.constprop.0+0xaf/0x450 [ 1780.876481][ C0] net_rx_action+0xa40/0xf20 [ 1780.876517][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1780.876547][ C0] ? mark_held_locks+0x40/0x70 [ 1780.876579][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1780.876604][ C0] ? sched_clock+0x38/0x60 [ 1780.876648][ C0] ? sched_clock_cpu+0x6c/0x570 [ 1780.876684][ C0] ? mark_held_locks+0x40/0x70 [ 1780.876714][ C0] handle_softirqs+0x1ea/0x910 [ 1780.876744][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1780.876772][ C0] ? __dev_queue_xmit+0x7dc/0x46f0 [ 1780.876798][ C0] do_softirq+0xac/0xe0 [ 1780.876823][ C0] [ 1780.876830][ C0] [ 1780.876838][ C0] __local_bh_enable_ip+0xf8/0x120 [ 1780.876865][ C0] ? __dev_queue_xmit+0x7dc/0x46f0 [ 1780.876891][ C0] __dev_queue_xmit+0x7f1/0x46f0 [ 1780.876918][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1780.876950][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1780.876979][ C0] ? __local_bh_enable_ip+0x9e/0x120 [ 1780.877008][ C0] ? __lock_acquire+0x4a5/0x2630 [ 1780.877045][ C0] ? find_held_lock+0x2b/0x80 [ 1780.877071][ C0] ip_finish_output2+0xf34/0x24b0 [ 1780.877110][ C0] ? __pfx_ip_finish_output2+0x10/0x10 [ 1780.877146][ C0] ? __pfx_ip_dst_mtu_maybe_forward+0x10/0x10 [ 1780.877185][ C0] __ip_finish_output.part.0+0x444/0x6f0 [ 1780.877223][ C0] ip_output+0x39b/0xec0 [ 1780.877257][ C0] ? __pfx_ip_output+0x10/0x10 [ 1780.877292][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 1780.877326][ C0] ? ip4_dst_hoplimit+0x1a9/0x400 [ 1780.877368][ C0] __ip_queue_xmit+0x1b73/0x22b0 [ 1780.877391][ C0] ? __pfx_ip_queue_xmit+0x10/0x10 [ 1780.877412][ C0] __tcp_transmit_skb+0x2c62/0x43c0 [ 1780.877447][ C0] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 1780.877484][ C0] ? ktime_get+0x200/0x300 [ 1780.877509][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 1780.877538][ C0] tcp_write_xmit+0x12a2/0x86f0 [ 1780.877580][ C0] __tcp_push_pending_frames+0xaf/0x3b0 [ 1780.877611][ C0] __tcp_sock_set_cork.part.0+0x105/0x140 [ 1780.877634][ C0] tcp_sock_set_cork+0x9b/0xc0 [ 1780.877653][ C0] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 1780.877685][ C0] rds_send_xmit+0x169e/0x2610 [ 1780.877729][ C0] ? __pfx_rds_send_xmit+0x10/0x10 [ 1780.877765][ C0] ? process_one_work+0x80b/0x1840 [ 1780.877802][ C0] rds_send_worker+0x94/0x2e0 [ 1780.877823][ C0] process_one_work+0x9c2/0x1840 [ 1780.877863][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1780.877902][ C0] ? assign_work+0x19c/0x250 [ 1780.877935][ C0] worker_thread+0x5da/0xe40 [ 1780.877972][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1780.878007][ C0] ? kthread+0x17d/0x730 [ 1780.878037][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1780.878069][ C0] kthread+0x3b3/0x730 [ 1780.878101][ C0] ? __pfx_kthread+0x10/0x10 [ 1780.878131][ C0] ? ret_from_fork+0x79/0xaf0 [ 1780.878151][ C0] ? ret_from_fork+0x79/0xaf0 [ 1780.878171][ C0] ? rcu_is_watching+0x12/0xc0 [ 1780.878192][ C0] ? __pfx_kthread+0x10/0x10 [ 1780.878224][ C0] ret_from_fork+0x754/0xaf0 [ 1780.878245][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1780.878265][ C0] ? rcu_is_watching+0x12/0xc0 [ 1780.878287][ C0] ? __switch_to+0x7b9/0x10c0 [ 1780.878314][ C0] ? __pfx_kthread+0x10/0x10 [ 1780.878346][ C0] ret_from_fork_asm+0x1a/0x30 [ 1780.878391][ C0] [ 1782.115705][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1782.122619][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1782.133356][ T31] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1782.138749][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1782.148871][ T31] Call Trace: [ 1782.152179][ T31] [ 1782.155136][ T31] dump_stack_lvl+0x100/0x190 [ 1782.159873][ T31] vpanic+0x20d/0x630 [ 1782.163925][ T31] panic+0xd1/0xd1 [ 1782.167689][ T31] ? __pfx_panic+0x10/0x10 [ 1782.172150][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1782.178364][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1782.184590][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1782.190804][ T31] ? watchdog.cold+0x198/0x1ca [ 1782.195618][ T31] ? watchdog+0xcd3/0xfe0 [ 1782.200010][ T31] watchdog.cold+0x1a9/0x1ca [ 1782.204663][ T31] ? __pfx_watchdog+0x10/0x10 [ 1782.209392][ T31] ? __kthread_parkme+0x18c/0x230 [ 1782.214476][ T31] ? __pfx_watchdog+0x10/0x10 [ 1782.219208][ T31] ? __pfx_watchdog+0x10/0x10 [ 1782.223934][ T31] kthread+0x3b3/0x730 [ 1782.228052][ T31] ? __pfx_kthread+0x10/0x10 [ 1782.232681][ T31] ? ret_from_fork+0x79/0xaf0 [ 1782.237386][ T31] ? ret_from_fork+0x79/0xaf0 [ 1782.242089][ T31] ? rcu_is_watching+0x12/0xc0 [ 1782.246880][ T31] ? __pfx_kthread+0x10/0x10 [ 1782.251513][ T31] ret_from_fork+0x754/0xaf0 [ 1782.256129][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1782.261266][ T31] ? __switch_to+0x7b9/0x10c0 [ 1782.265989][ T31] ? __pfx_kthread+0x10/0x10 [ 1782.270632][ T31] ret_from_fork_asm+0x1a/0x30 [ 1782.275459][ T31] [ 1782.279106][ T31] Kernel Offset: disabled [ 1782.283442][ T31] Rebooting in 86400 seconds..