last executing test programs: 10m1.29664392s ago: executing program 2 (id=1140): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/mm/ksm/advisor_max_pages_to_scan\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x100082) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x0) mremap$auto(0x0, 0x3, 0x3fda, 0x6, 0x7fffffffb000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0p/sub7/info\x00', 0x8040, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000100)=""/184, 0xb8) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x14) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x5d, 0x0) socket(0xa, 0x1, 0x84) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r2, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) listen$auto(0x3, 0x83) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 9m59.805378999s ago: executing program 2 (id=1146): mmap$auto(0x0, 0x2020009, 0x100003, 0x9000000eb1, 0xfffffffffffffffa, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x10, 0x2, 0x9) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/thermal/cooling_device1/type\x00', 0x101000, 0x0) listen$auto(0x3, 0x81) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x4000091) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2400c001) r0 = socket(0x10, 0x800, 0x4) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) r1 = memfd_create$auto(&(0x7f0000000300)='/sys/kernel/debug/x86/boot_params/data\x00\"F\xb6\xcd\x06\xd6\x97\\L\xe1\xb2\xee\xb8\x8e\xd6O\xa1j\x90w\xc7\x94\xb7yi\x01&\x04b/\xaa\xfb#s\xc4\xa3\xa7\xacj\xc6\x8e\xf4L\x9a\xf8\xcc\xdcy\x9f\x93\xbc\xf6\xc8\xdb\x05w,|B\xfc\x04\x97\xd3\x0f\x8b\x81\xe8\xbc\x81\x0e\xd7o\xd2\xcd\x18z\xc2\xb7|\xe1\xa6\x9a~\x96\x10rnLnt\xdb\xdb-\x1b\x99\xd4\xed;\xf8\x13a\r\xf2\a\x85%\xef\xa7\x7f#\x96\xf2S\xb0\xf1Hq\x0f;\x83\xb7\x0fz\x9dN\xc9\x1e\x15r\x97|\xbfE\xce\"', 0xc) r2 = pipe2$auto(0x0, 0x80) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x0, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x63, 0xffffffff, 0x1, 0x3, 0x1, 0x7, 0xfff7, 0x12, 0x200, @inferred, @raw=0x5}) r5 = setfsgid$auto(r4) statx$auto(r2, &(0x7f0000000000)='./file1\x00', 0x4, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, r3, r5, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x2, 0x9}, {0x7378, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x40, 0x6, 0x0, 0x9, [0x61, 0x10, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x0, 0x9]}) quotactl_fd$auto(r1, 0x80000000, r5, &(0x7f0000000000)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r6) sendmsg$auto_NETDEV_CMD_DEV_GET(r6, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r7, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000500), r6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'ipvlan0\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r10, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01002abd7400fcdbdf25140000000c00018008000100", @ANYRES32=r12, @ANYBLOB="080004000000"], 0x28}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000580)={'pimreg0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'veth0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0x8c, r8, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0xd, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_FILE_NAME={0xd, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x4}, @ETHTOOL_A_MODULE_FW_FLASH_PASSWORD={0x8, 0x3, 0x5}, @ETHTOOL_A_MODULE_FW_FLASH_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) 9m59.401087662s ago: executing program 2 (id=1148): pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\f\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) 9m59.275157642s ago: executing program 2 (id=1149): setfsuid$auto(0xee00) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r2], 0x20}}, 0x4000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x121681, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r3, 0x107, 0x17, 0x0, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x1c, r5, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x4000000) mmap$auto(0x0, 0x7ffffffff000, 0x8004, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x8000, 0x0) read$auto(r7, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x102, 0x0) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r8, 0x0, 0x81) open_tree_attr$auto(0xffffffffffffff9c, 0x0, 0x9, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) read$auto(0xffffffffffffffff, 0x0, 0xe) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 9m58.909792437s ago: executing program 2 (id=1150): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x16, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000380), r0) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/snd_hda_intel/parameters/pm_blacklist\x00', 0x80502, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/renderD128\x00', 0x129800, 0x0) ioctl$auto(r3, 0x901064ae, 0x4) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) fcntl$auto(r3, 0x40000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1a3) socket(0xa, 0x3, 0x3b) prctl$auto(0x3d, 0xfffffffffffffffe, 0x0, 0x0, 0xfffffffffffffffd) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r4, 0xc0405626, r4) r5 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000098c0)='/dev/sg0\x00', 0x40, 0x0) ioctl$auto_BLKTRACESETUP2(r5, 0xc0481273, &(0x7f0000009900)={"9c79bece76127589a33a968f51b2aaadc76a2d360a5d6917323688f527ff0804", 0x5, 0x2, 0x5a, 0xe57, 0x7fff}) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) r6 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x181f82, 0x0) readv$auto(r6, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x9, 0x42000a, 0x5, 0x10, r5, 0x10000008000) modify_ldt$auto(0x7, 0x0, 0x9) 9m57.883953417s ago: executing program 2 (id=1155): r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x800d) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x468280, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000000)={"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", 0x3, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r2, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r3, 0x400454ca, 0x38) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24040, 0x0) r5 = socket(0x1d, 0x3, 0x1) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a) setsockopt$auto(r5, 0x65, 0x1, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x7, 0x2, 0x64, 0x2, 0x1000, 0xb, 0x9, 0x2, 0x101]}, 0x0) 9m42.760493516s ago: executing program 32 (id=1155): r0 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x2, 0x0) write$auto(r0, 0x0, 0x800d) mmap$auto(0x0, 0x202000a, 0x5, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x468280, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000000)={"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", 0x3, 0x6}) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r2, r2, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r3, 0x400454ca, 0x38) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x24040, 0x0) r5 = socket(0x1d, 0x3, 0x1) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a) setsockopt$auto(r5, 0x65, 0x1, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x7, 0x2, 0x64, 0x2, 0x1000, 0xb, 0x9, 0x2, 0x101]}, 0x0) 8m19.567671164s ago: executing program 4 (id=1511): read$auto(0xffffffffffffffff, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) lsetxattr$auto(0x0, &(0x7f00000008c0)='security.caility\xf6\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&#\x9f\x8d1\x13NZ2\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\b\x00\x00\x009\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\tV\xf3\xa3T\x90\f-\xdd\\\xcf\x10\'\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\a\x00\x00\x00\x00\x00\x00\x00)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x03\x00\x00\x00\x00\x00\x00\x00!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f\xd0\xa9\x9e\xa0\xc7\xf7\'\x8d\xab\xae\x035\xa8f\xe5\xfe\xfc\xc0\xb1rR\xae54\x13\x1c8=\x92\xc3=w\x89\xbb\xfb)\x94p\xc18`G', 0x0, 0xf4e9, 0x2) write$auto(0xffffffffffffffff, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) 8m19.51815921s ago: executing program 4 (id=1512): socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async, rerun: 32) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async, rerun: 32) bpf$auto(0x1, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x7c, 0x2, 0xd, 0x81, 0xffffffffffffffff, 0x2, 0x8}, 0x100000cf) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200"], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) modify_ldt$auto(0x11, 0x0, 0x10) (async) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) stat$auto(0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20008080}, 0x4000) (async) io_uring_setup$auto(0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) (async) mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) (async, rerun: 32) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x141001, 0x0) (rerun: 32) write$auto(r2, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x6) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x121042, 0x0) write$auto(r3, &(0x7f0000000280)='\\\x00\xddqCb\xaf`\xd5\to\tn\x04\xaeP\xaf\xe3\x1a\x9c\xdaK\x88\xd2\xb6Z\x93\xf7\x13E\xa4\xe6\xf1\x01&^C\x9d\xa8\xcaQ\xaf\x11\xc6\xe6p\xa7\x97\xa6\xe8H\xdc\x13\x1a4\xde\\\xc18\x94\xf0\xdcQ\xfc\x97\xde\x9c$zW\xb6i\xb8\x12X\x18\x9e\r\xd0T\xb3\xcd?c\xc3\xe0W\"\xb6\xa1\xa4Z\"#I\a[\xb0\x03\xf5\v`/\x0f\x8d\x18\xdd\x00\xb5\xd9U\r\xc3\xf4\x1e\xd0\xdb:\x9e\x02\xad\x86\v\xae\x13-G\x83\xc3\xd5\f_\"\x8fDqe\xea\xcc\x80V\x8f\x1d\xdf:-\xf4\xc6\xc3\xd6L_\x7f\x84\xfa;\xa8\x1c\xa5^@\x12\xfd\'L\x87\t\xc8\xc9*\x16\x83\xf0\xac\xb9\xa0\xcfI\x15\x88]\x9b\xd8<{h5\x92!|!\x1c\xba\x83\xf5\xacZ\x03R\xcb\x19\x9cr\xca', 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip_vti0/threaded\x00', 0x1a1842, 0x0) (async) write$auto(r1, &(0x7f0000000140)='9\x00d1L\xff\x15\xba\xa1\xbe\xd2\xf5\x1fram\xe3^\xa1v\x9b\x00\xdb\x95\x87\x9c\xd7\xe7\x11\xb5\x10\xb3q\xcc\xc74c\t\xb5eQ\x18\x1eT\x9a9\x80\x7f\xcb\xae\xadv[\x05\xbb\xb2=\xd3de\xa5\xbb$2\xe3B00\x1f=)=\xff?lm\x9b\xc9~\x10\xc0\xd8DK\xedf\x17\xf2\x8bzH\xacv\x1c\xf9\x19\x87\xec\xad\x15\x96\x89\x93\x7f\xca\xde\xd2\xaaY\xe8\xe4\x8d\xd7\x89\x80\x93\xaf\xf3\xc4\x1a\x94\xe6\xa4\xe5\x80\x83p\x9d\x04f\xb3\xc4\xaa\xe7\x95Xe\xfc;;\xf0(\xdb\x03\xcd)\x81\xb3ta{\x80\xb8\xbb\xeaS\xa8\x89\xec\x90\x83]u\xb8\x97\'\x80\xd0\xe8G\x01\x11\xf0\xd9\x12\xe6\xb6Kb\xab\xa5\xd5\xa4\xaf.\x90w\xfc\xbd\x8e\xb1x\xf2\xfd\xdd@6\xa1Gc\xa5`\xc5\x8cs\x05\xf3um~\x9a_\x14+e\xa68\xdaW\x9b\xd4\xd0Q\xb1tG\x00\x00\x00\x00\x00\x00\x00', 0x9) 8m19.303796778s ago: executing program 4 (id=1514): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram13\x00', 0x1e3a02, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) socket(0x11, 0x3, 0x9) r1 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$auto(r1, 0x6f41, 0x38) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/ports/0/pp_hold\x00', 0x2201c3, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_CEC_RECEIVE(r2, 0xc0386106, &(0x7f00000001c0)={0x3, 0x8000, 0xb34f790c, 0x4, 0x2, 0x8, "632e98055ab385e0fddc981ceed44d3f", 0x8, 0x3, 0x7f, 0x8, 0x80, 0x1}) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) setrlimit$auto(0x1, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty34\x00', 0x101840, 0x0) ioctl$auto(r3, 0x541c, 0xffffffffffffffff) 8m17.87808675s ago: executing program 4 (id=1519): fcntl$auto(0xffffffffffffffff, 0x407, 0x100000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/compaction_proactiveness\x00', 0xc0781, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r1, 0x0, 0x7, 0x4cbd5d) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x80040, 0x40, 0xe}, 0x18) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0x5, 0x0) fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(r2, 0x5, 0x8, 0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00') mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) removexattr$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00') mmap$auto(0xea88, 0x810004, 0xd, 0x10, 0x3, 0x8000) unshare$auto(0x40000080) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) keyctl$auto_KEYCTL_INSTANTIATE_IOV(0x14, 0x80, 0x1, 0x31, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = open(&(0x7f0000000180)='./file0\x00', 0x440, 0x57e) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000001c0), r3) r4 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/features/extended_error\x00', 0x18000, 0x0) fcntl$auto_F_WRLCK(r4, 0x2, 0x1) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x1940, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r5, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) unshare$auto(0x40000080) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon5\x00', 0x105000, 0x0) 8m16.032414886s ago: executing program 4 (id=1529): r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x208042, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x141702, 0x0) write$auto(r1, &(0x7f0000000400)='\xfd\xf6\xff]\xe1@\xef\x84\xfe\xa0\xed\x06\x00\xf2\x894z\xaa`\xe0_e\xa33\xeafr\xe3{\x17&\xe5\xd9\xd9\x9dr\xd9\xbc\xdbq\x81\xa2\x970\x10\xaa\xc2\x1d{z\\\a\x94\xf5<:\xcc\xe8\xc0\xdd\xd4\t\xfb\xae\xc8h/\xf7\f:$\xe5w\x05\xfd]\x97A\x1d(`]\xe8o1\x85\xb9\x05\xb4i\xe2\x9b(\xe0\vw\x98\x124\xff\\\xc8\xb4d^\xa0\x1b@)\xe6*\x1aSF\xff\xa1\x86\x99;\xaa\xb1\x01;\x0e\xe20TLg\x94\x90\f\x1d\x98\xffulN\x0e\xa4\xe7\xd5\"D\xc2\xe0.\xbe\xbd\x82\xba\xc6\xd5e\xaajG\xbe!\x86\xb9\xe5\xa2\xc2\xdb\xb9\xe9qX\xf9\xb9\x01f\n\x87\x15\xd3\xcf9a*\xb4w\xaf\xab7\x9f\x0e\xba\x02\x95\xd4\\-\x04\xa3\x80\x8b\xae\r\xe4\xc6:\xb4\xa4b\x90Ow\xa7L\xb3\xa2\xf5\xa7\xc6\x8f4\xe9\xb9)\xa2I\x14GS\xd8\xa8Z\x8er', 0x7ffffffd) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0x2020049, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0xf) bpf$auto(0x3, &(0x7f00000001c0)=@link_update={0xffffffffffffffff, @new_prog_fd, 0x403, @old_map_fd}, 0x9) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/smc/smcr_buf_type\x00', 0x181601, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) r4 = socket(0x29, 0x2, 0x0) ioctl$auto(r4, 0x89f0, 0x24) landlock_restrict_self$auto(r2, 0x8) 8m14.698571053s ago: executing program 4 (id=1534): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x7) (async) fspick$auto(0xffffffffffffffff, 0x0, 0x7) io_setup$auto(0x7ffe, 0x0) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) r1 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401070cd, 0x5) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r1) (async) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r1) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) (async) setresuid$auto(r3, r4, r3) setfsuid$auto(0xee00) (async) r5 = setfsuid$auto(0xee00) setreuid$auto(r5, 0x0) (async) setreuid$auto(r5, 0x0) syz_clone(0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x2, 0x107) (async) ptrace$auto(0x10, r6, 0x2, 0x107) move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) (async) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r7, r7, 0x0, 0x8) (async) sendfile$auto(r7, r7, 0x0, 0x8) 7m59.257442057s ago: executing program 33 (id=1534): openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon33\x00', 0x121200, 0x0) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) sendmsg$auto_NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x40}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) fspick$auto(0xffffffffffffffff, 0x0, 0x7) (async) fspick$auto(0xffffffffffffffff, 0x0, 0x7) io_setup$auto(0x7ffe, 0x0) mmap$auto(0x0, 0x4005, 0xb, 0x40eb2, 0x401, 0x300000000000) r1 = socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x401070cd, 0x5) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r1) (async) syz_genetlink_get_family_id$auto_ovs_flow(0x0, r1) r3 = setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee01) setresuid$auto(r3, r4, r3) (async) setresuid$auto(r3, r4, r3) setfsuid$auto(0xee00) (async) r5 = setfsuid$auto(0xee00) setreuid$auto(r5, 0x0) (async) setreuid$auto(r5, 0x0) syz_clone(0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x2, 0x107) (async) ptrace$auto(0x10, r6, 0x2, 0x107) move_pages$auto(0x0, 0x40000000000001, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) (async) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r7, r7, 0x0, 0x8) (async) sendfile$auto(r7, r7, 0x0, 0x8) 6m11.295894603s ago: executing program 1 (id=1952): r0 = epoll_create1$auto(0x5) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000000)={0x2c, 0xd1c, 0x2}) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0x80080, 0x0) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_MAC_ACL(r0, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xa0000c}, 0xc, &(0x7f0000000680)={&(0x7f0000000140)={0x524, r1, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_BEACON_HEAD={0x50c, 0xe, "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"}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0x524}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) (async) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000700)="4232fa38feb9b7611b28e426cacb188b6fefd6a4ae6ed43ad0f38558e51923a3dd9eded26344eca4ec7a51550679d71c26291a12b6acb61900952d9ddb9b8341d833903671b8d3c07d8b997ee9c8e7cbb095bf1302ce3118f9b29e72d216e7a4d1491bfcd880630add6086090ea996585c3ebc6cf969733684b3386352bc69e8b1296e57c2af5a3755d5569912419c4aabc3024dec4334c7a21dedf65dc8eabeb1828f9be595fbe359e35df7ca88bfb3d102514e57f1d2", 0xb7) ioctl$auto_EVIOCSKEYCODE_V2(r0, 0x40284504, &(0x7f00000007c0)={0x5, 0x3, 0x7, 0x0, "49f945cdc707de6181c881d705047ace5747c8503873377966d0d7457b0ac069"}) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000800)="1ca310be48ca9b71ab74855ddfca3d0efb8ba0ee90ee8cb49703f0652d9651465b17966a9fafda8f42c6080a0c72ce716b14c42773bacf5dfc1bbbb52a934b71cf4daeb42be537d422818bcd2ce2d902b81b98d182994e5c2531f35512b1e68b09aa32b86e4ec47c3828994ce34b98cd94a93ed692f9d94a1b3ee83ca8db6395ae2cff1038e862de785e5b892207e0f9ef457b06acfd95b71bb505c3d362d39b5d9dea33207b636b1f") (async) r2 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000900), r0) sendmsg$auto_NFC_CMD_LLC_SDREQ(r0, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x74, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0xec}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x6}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0x6}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0xf2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x401}, @NFC_ATTR_LLC_PARAM_RW={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, 0x5}, @NFC_ATTR_FIRMWARE_NAME={0x15, 0x14, '/dev/vga_arbiter\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x2404c000}, 0x1090) (async) r3 = open(&(0x7f0000000a40)='./file0\x00', 0x0, 0x6) prctl$auto_PR_SET_VMA(0x53564d41, 0x3, 0x6d, 0x2, 0x1718) read$auto_u32_array_fops_file(r3, &(0x7f0000000a80)=""/24, 0x18) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000b00), r0) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r4, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x158, r5, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_FILS_CACHE_ID={0xe9, 0xfd, "eccd400f1411a213a16a464c252867f6c12d2eedf69899541e14982f567081c19d07b74ea8d086467c7253bde11898bbeeda4abfafb36c4deb77fe7c6431dd690105bea6966d9160ada1366f010756101c145c5ede4c5b59b3a89714635e5a5c7806d72dd114285b681fb4b488f9779c31d8ce28577dbdb3670366490368e6a3681e3273163c41cb2b2012ecbb3caff44b5ac6de8def27ca1258ac30c05ae9dd829635e909aea5876ecd22d716ade33ab837acfe5ebf122891723ad0d03599bad778533ae2a9bde4cedc202389608a81005bc3b89a8446206b00005c7ed399fba58b7bdb9b"}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x401}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_AUTH_DATA={0x3d, 0x9c, "8dc93d30a51605917d8e6794427c02324aea23f4ce4eacb96d709bc41a82633591a12e14f457e44aa3fb5c6cb6f1aff6cc40a3a23d0072d61b"}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x82a}]}, 0x158}, 0x1, 0x0, 0x0, 0x20000010}, 0x408c4) (async) prctl$auto_PR_SET_VMA(0x53564d41, 0x7f, 0x95e, 0x22, 0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000d80), r4) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r6, &(0x7f0000000e40)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, r7, 0x9aa8b6432fd00341, 0x70bd28, 0x25dfdbfe, {}, [@IOAM6_ATTR_NS_ID={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x80) (async) r8 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/cpu/1/msr\x00', 0x80000, 0x0) (async) ioctl$auto_XFS_IOC_COMMIT_RANGE(r3, 0x40585883, &(0x7f0000000ec0)={r3, 0x0, 0x689, 0x1, 0x1, 0x63, [0xb9, 0x2, 0x200, 0x0, 0x3, 0x1]}) sync_file_range$auto(r9, 0xff, 0x10, 0x0) (async) madvise$auto(0x1000, 0x1, 0x10) r10 = openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000000f40), 0x1000, 0x0) syncfs$auto(r10) (async) io_uring_setup$auto(0x8, &(0x7f0000000f80)={0xfffffffe, 0x5, 0x7, 0x80000000, 0x3, 0x1, r8, [0x2, 0x8, 0x10000], {0x0, 0x200, 0x9, 0x2, 0x80000001, 0xb, 0x6, 0x80000000, 0x2}, {0xc, 0x41, 0x1, 0x8, 0x6, 0x6, 0xfffffffe, 0x6, 0x3a2}}) madvise$auto(0xfffffffffffffffc, 0x472, 0x9a32) sendmsg$auto_NET_SHAPER_CMD_DELETE(r9, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xb4, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NET_SHAPER_A_HANDLE={0x44, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xfffffff7}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x7}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xd}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x40}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0xffff}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xffff37cf}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xffffffff}]}, @NET_SHAPER_A_HANDLE={0x14, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x9}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xfffffc00}]}, @NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_IFINDEX={0x8}, @NET_SHAPER_A_HANDLE={0x2c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x4}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x530ef207}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x3}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x4}]}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x4) 6m10.844699295s ago: executing program 1 (id=1954): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mbind$auto(0x2000, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_fd=0x2, 0x80}, 0x96) bpf$auto(0x15, 0x0, 0x0) r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000020c0)=""/4093, 0xffd) 6m6.303246049s ago: executing program 1 (id=1974): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptye9\x00', 0x101e81, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) fsconfig$auto_FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000080)='\x00', &(0x7f0000000840)="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", 0x80000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}, 0x1, 0x0, 0x0, 0x4000804}, 0x40000) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) io_uring_register$auto_IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, 0x0, 0x401) r2 = io_uring_setup$auto(0x3, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), r2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x1ac}, 0x1, 0x0, 0x0, 0xc4}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0xa, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r4, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x9, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3}, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x2000040080000004, 0xe) 6m4.75165025s ago: executing program 1 (id=1978): socket(0x5, 0x1, 0xfffbffdb) (async) shmctl$auto_IPC_STAT(0x200, 0x2, &(0x7f0000000200)={{0x39, 0x0, 0x0, 0x1, 0x4, 0x5, 0x4}, 0x4, 0x3, 0xbd, 0x1, @inferred, @raw=0x9, 0xb, 0x0, &(0x7f0000000040)="7e5d40aa7954e274de3fa929f4712df39a0ad1b3bdc45f208f7205dada9579d74e155e2dfc8ecb1b3350c218dd545cb801cc9015c7308c8761bf8dc639c2adfecf3769e5261500b0a6baba8b50ca4172e70b9c19093e170ab22f88aadf9fb6c37c259baa2478b0b5792a98e6475b839eae2d9997c3405b8911078e3bbfd9b193aab6f2405daaf3c292bfc53847ecb0fe8d1785cd4177e5387a39ab80f18fef6a4c31aa3c3acf6fe5b748ff8aba9275688691c46e0a2596473dd494b2017cd78ed1d5d314f3f8b2cf", &(0x7f0000000140)="c723e1420b6a490003c9a6310aa1e16da73b1753d75466436e281d36b47fb069a7ebbdf63253659cb1e99917f618e83545934640ec6c7a71c05fb429332dd2ed4d995307bfb8d27f3f3d0865dde98da9fe43d54e2fbd02b5c93c03bc3f93c98f14cfd0ba3617d992ee6798bfc05d7148d24d8be48c77489a8afe68734bb674203498"}) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x27, 0x0) (async) fsopen$auto(0x0, 0x1) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/ram2/queue/atomic_write_unit_min_bytes\x00', 0x9a2c0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) (async, rerun: 32) socket(0x18, 0x2, 0x0) (rerun: 32) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x62142, 0x0) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 64) socket(0x2, 0x2, 0x73) socket(0x2, 0x80002, 0x73) (async) socket(0xa, 0x2, 0x3a) (async) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x2142, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/user\x00') openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x1, 0x0) socketpair$auto(0xc6, 0x3, 0xfff, &(0x7f0000000000)=0x1) (async) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x11, 0x3, 0xb) close_range$auto(0x2, r0, 0x0) (async) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x14, 0x0, 0x4) 6m3.459646469s ago: executing program 1 (id=1985): r0 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x208042, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x141702, 0x0) write$auto(r1, &(0x7f0000000400)='\xfd\xf6\xff]\xe1@\xef\x84\xfe\xa0\xed\x06\x00\xf2\x894z\xaa`\xe0_e\xa33\xeafr\xe3{\x17&\xe5\xd9\xd9\x9dr\xd9\xbc\xdbq\x81\xa2\x970\x10\xaa\xc2\x1d{z\\\a\x94\xf5<:\xcc\xe8\xc0\xdd\xd4\t\xfb\xae\xc8h/\xf7\f:$\xe5w\x05\xfd]\x97A\x1d(`]\xe8o1\x85\xb9\x05\xb4i\xe2\x9b(\xe0\vw\x98\x124\xff\\\xc8\xb4d^\xa0\x1b@)\xe6*\x1aSF\xff\xa1\x86\x99;\xaa\xb1\x01;\x0e\xe20TLg\x94\x90\f\x1d\x98\xffulN\x0e\xa4\xe7\xd5\"D\xc2\xe0.\xbe\xbd\x82\xba\xc6\xd5e\xaajG\xbe!\x86\xb9\xe5\xa2\xc2\xdb\xb9\xe9qX\xf9\xb9\x01f\n\x87\x15\xd3\xcf9a*\xb4w\xaf\xab7\x9f\x0e\xba\x02\x95\xd4\\-\x04\xa3\x80\x8b\xae\r\xe4\xc6:\xb4\xa4b\x90Ow\xa7L\xb3\xa2\xf5\xa7\xc6\x8f4\xe9\xb9)\xa2I\x14GS\xd8\xa8Z\x8er', 0x7ffffffd) r2 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) mmap$auto(0x0, 0x2020049, 0xf8, 0xffffffffffffffff, 0xfffffffffffffffa, 0x7ffd) socket(0x10, 0x2, 0xf) bpf$auto(0x3, 0x0, 0x9) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/smc/smcr_buf_type\x00', 0x181601, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x2, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) r4 = socket(0x29, 0x2, 0x0) ioctl$auto(r4, 0x89f0, 0x24) landlock_restrict_self$auto(r2, 0x8) 6m0.357091034s ago: executing program 1 (id=1994): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop11\x00', 0x4ea02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1f0881ae) (async) socket(0x2b, 0x5, 0x4) (async) bind$auto(0x3, 0x0, 0x6a) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x9) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x315102, 0x0) write$auto(r3, 0x0, 0xc3) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4008af83, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x31400010}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x3}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x2c74}]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x50) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2400000) (async) sendfile$auto(r0, r0, 0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 5m45.275668142s ago: executing program 34 (id=1994): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop11\x00', 0x4ea02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000002f80), r1) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80802, 0x0) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x1f0881ae) (async) socket(0x2b, 0x5, 0x4) (async) bind$auto(0x3, 0x0, 0x6a) (async) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x9) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x315102, 0x0) write$auto(r3, 0x0, 0xc3) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_MEM_TABLE(r4, 0x4008af83, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'dummy0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x1}, @NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x31400010}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x3}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x2c74}]}, 0x24}, 0x1, 0x0, 0x0, 0x8050}, 0x50) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r6, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x3c}, 0x1, 0x1000000, 0x0, 0x4}, 0x8880) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2400000) (async) sendfile$auto(r0, r0, 0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 6.804851186s ago: executing program 3 (id=3256): r0 = openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x250000, 0x0) mmap$auto(0xfffffffffffffffd, 0x400004, 0xdf, 0x12, r0, 0x8000) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r1, 0xc04c5349, 0x38) 6.618478941s ago: executing program 3 (id=3257): time$auto(0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/notify_on_release\x00', 0x121281, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = bpf$auto(0x5, &(0x7f00000007c0)=@batch={0x2, 0x4336, 0x139735f4, 0x1, 0x80000001, r0, 0x2000, 0xd9}, 0x101) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40380, 0x0) pread64$auto(r3, 0x0, 0x10001, 0x2000000000830) statmount$auto(&(0x7f0000000080)={0x602f, @inferred=r2, 0x5, 0x40, 0x290}, &(0x7f0000000500)={0xa, 0x98c, 0x0, 0xa, 0x200, 0x8, 0x0, 0xf37, 0x8001, 0x9, 0x2, 0x0, 0x7fffffffffffffff, 0x46bb, 0x0, 0x1, 0x3, 0x8000, 0x7, 0x0, 0x4, 0x6, 0xbd9, 0x9, 0x1, 0x8, 0x3, 0xb87, 0x400, 0x3, 0xffffffff, [0x2, 0x2, 0x9, 0x4, 0x0, 0x20000000007, 0x1, 0x7, 0x0, 0x1, 0x5, 0x8, 0x10, 0xa21, 0x80000001, 0x8, 0x8000000000000001, 0x0, 0x8, 0x9, 0x4, 0x6, 0x0, 0xab4, 0x77, 0x5, 0x4, 0x7f, 0xfe8a, 0x8, 0x4, 0x95, 0x2d7, 0x7, 0x7, 0x7, 0x1, 0x8000000000000000, 0x1, 0x7, 0x5, 0x3ff, 0x9], "e23845cc80a6299ec9352d281014b9d1f16b57857b8268551970aa13ac15e9dc6fc69491337a610c4e760f0cd59d5c330f3ed4d50075c731be3c73521a56fc115a9dc562276f983067e842a5aba52e6bb3886b115791aa19e5f0205af30336f127102f25461aea00d89bb46db7b6f34ca19c9e0789d50b8c9ddf3d91cebbf5ef63ddc962a869d77d830b9acf9a"}, 0x1, 0x4) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000000)={@siginfo_0_0={0x7f, 0x8, 0x5, @_timer={0xffffffffffffffff, 0x5, @sival_int=0x5, 0x7fffffff}}}, 0x7fffffff, &(0x7f0000000240)={{0x4, 0x4}, {0xfffffffffffffffe, 0x700000000}, 0x435, 0x5, 0x7fff, 0x1, 0x5, 0x6, 0xef, 0x7, 0xd697, 0xfd02, 0xf03e, 0x2927c87d, 0x0, 0x2}) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) io_uring_setup$auto(0x100006, 0x0) close_range$auto(r2, r0, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setresuid$auto(0x8, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001840)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40000) write$auto(r4, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) getsockopt$auto_SO_SNDTIMEO_NEW(r4, 0x8, 0x43, 0x0, 0x0) keyctl$auto(0x12, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 5.754910364s ago: executing program 3 (id=3259): mmap$auto(0x0, 0xac1, 0xdf, 0x100000009b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x15, 0x5, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x8, 0x8, 0xfffffff8) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x6, 0x4002008d, 0x1, 0x2, 0x3, 0x115f4da0a, 0x3, 0xffc, 0x62, 0x4000008000001e, 0x7, 0xa, 0x9, 0x2, 0x6]}, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) write$auto(r1, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) bind$auto(0x3, 0x0, 0x6a) sendmsg$auto(r0, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x810007, 0xffb, 0x8000000008011, 0x3, 0x0) waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x5, 0x0, 0x23, @_sigsys={0x0, 0x3, 0xf}}}, 0x8, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) process_madvise$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, &(0x7f00000000c0)={0x0, 0x5}, 0x4, 0x4, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/smbd_send_credit_target\x00', 0x28102, 0x0) socketcall$auto(0x2, &(0x7f00000001c0)=0x8000000000000000) mmap$auto(0x0, 0x20009, 0xfffffffffffffffe, 0xeb1, 0x401, 0x7ffe) mmap$auto(0x0, 0x2020009, 0xb4b, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x11, 0x800000003, 0x0) getsockopt$auto(r3, 0x107, 0xa, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10044810) socket$nl_generic(0x10, 0x3, 0x10) 5.01705143s ago: executing program 5 (id=3264): close_range$auto(0x0, 0xfffffffffffff001, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_PEERPIDFD(0xffffffffffffffff, 0x6, 0x4d, 0x0, 0x0) r1 = socket(0x2, 0x80002, 0x73) r2 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x13}}, 0x57) r3 = io_uring_setup$auto(0x89, 0x0) uname$auto(&(0x7f0000000000)={"94cc9722afb522a98e858030365ed92ab89306efe384a20d71e300cb1c508bc870a9a4b84e7f1ca41f999a6379237082d6768f980d3f33de4646a8f1ebeeca15bf", "38e383904ea86c9933e9d7e064b0550600000000000000a0fbed58ef6fb19193d70e497c6d2f046d4eb5af7300", "f97ade924a06a62e97c4aeb7a67a2296cdf8b7bbd381d911ccf3fe97481a08be5f5e6983e31c98d834fa81d0e696e41c1a6a00", "7f4d1cd3d8873504031be24207e98792374255ae55b488e067810cd4d18379ac432e2f868bfda64b5c62baaa5c905c996d4ea95b70567c215e1cf3706874b815de", "02479756de75addea4dd0ce6b31411ef92f3d201417055935ee51d552f7f4c86bdaac10b56dcdc45b2f999b3d9ac039d2f2947ed62cbc65c73b6d5b10432ebc979", "b54f83a0546668487dd19a0e2b69cc7d72570fd5b450322ed8ca16b1aa8f6bc38c26b78c7997f9f3f0697ea521051a7c40b88f8d873858402f0be3d6c84174efab"}) setsockopt$auto(0x3, 0x1, 0x2e, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0, 0x144}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x4) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000240), r0) sendmsg$auto_CTRL_CMD_GETFAMILY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=r1, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES64, @ANYRES8=r1, @ANYRES32=r1, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x4005}, 0x880) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1004, 0x6) mlockall$auto(0x800000000000005) madvise$auto(0x0, 0x200007, 0x19) socket(0x1e, 0x800, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) mmap$auto(0x400000000000, 0x9, 0x7, 0x800000000c812, 0x3, 0x0) ftruncate$auto(0x3, 0x0) 4.813347638s ago: executing program 3 (id=3266): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) ioctl$auto_BLKRRPART(0xffffffffffffffff, 0x125f, 0x700000000000000) mmap$auto(0x0, 0x202000d, 0x6, 0x16, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/admmidi2\x00', 0x430740, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b73, r0, 0x8000) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = open(0x0, 0x163340, 0x16e) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4e23, @loopback}, 0x55) sendmmsg$auto(0x3, 0x0, 0x6, 0x5e82) fcntl$auto(r2, 0x80000001, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002bbd7000fbdbdf257a00000000002580735dca0be8efac2acfa8ed9babe75b4c066888c977e1f804d326d18c1f1858ecc7f9812e724ef8ae71d65629160000698000003780c9c1542337f12bcaa479b8a567a2e3855fbe6eab21aad28b2d79199a8c276acfb41370ed724198db3c8d1b97c67d856dae2a234b352a006fd43701de720743e14accf95d9ee954c45a833ce4e0a6f58d200734dc066305c532d8505e29a0aee47a1631bd1088247e6ecb8ab245c7ab9ded772f75052eb2f3765147eb5083ff97bbf20b83cc81be2425b3a761f4ce659d36eddf1ef34063eafe764e687c8afff87aa5f5c6856421f7ecf58e9fadf549ca316ecd008bec437b92d76c8fd8c8a5c7ce1d5282b4d665e2ab97e54b89368b61bae09164a796e7a7121e1c6d70aad98001e96c467c7b0000db000500000000002700fe8000000000000000000000000000150000af00", @ANYRES32=0x0, @ANYBLOB="00003500285d2c403a5c0000a5532ef14bf78e7a72612723d8579ee189bd12629ca13c49a489d0bdeb0a08338b1353f21afc5462f005c7e592687b6ccc10222f250f2ab87f4775ee0cdd4dfebac3c3891127fd8cd6e105c06cb873eb9239c5620cb98fa7a5058a9598649c6d901b50b2e3f47e9a05cadd11530ad55d2f4d3811e9efeedd78aaec763837d378a8d9016a33e7dcb9d2f938f527ef19b86767bdc7f0588b93bdbb3e3276b55169313557ba55ca85c33cca394500504f17d2a9b02615924b28d01827ea4562bb62c956267f63c200009980000000009000"/234, @ANYRES32=r1, @ANYBLOB="00001c00ff0200000000000000000000000000010000e000", @ANYRES32=r3, @ANYBLOB="0000c0800000c3800000b9800000208012fa0aca61298ac6b39e94bda7f5d24aa5b53ab37c42283524b1f3444caf1dbea5a82fdd1128ef23c97e4d2d6f73bf364a0447391e23b9c75941659492ff10cfbb15593f3bc1ab458b85354a8e2e07414488b82ab9f58c1a940da1151cdfe4e2ef098045a182dce172638a84be69cbe7e80397afb6bcba83fd6083384133261c1fbf75ae28dcda35b91716ea9edd7e0788984e186e0e4b5de1f34d4367d7000000002f80000050800000a48000004a000900000035556b8e789c22295a6423182ede01ba8d9baacd4f966a65558c9ca4a59dc9b9218cd16702d4b4f8dc09db29f14d57bdda793d8a4b09e738910159af8de673eddaec6f5204e910f18e11b77c9b257996013241f7b5895c488a4ae32d39dad10845d0195bcc79f386695836a2fed38a3d1e438d8014be8f3fd4ce10ffcc20f2ea3b6969f340f2bb7a9212978de9ca05ce99e02845cb6e1f54795a8808711da751153ad54927e26c07fbee212cfae7389ae78c2e51c285600fb48d0e9f62735431a9659c055585212f504ebd16855709f3cb35f527e04496d61b3ee8bc919fed2acbdaea651b027405d17e50b1fedde3dbec7ce16f47674a9366000004000501040087002500430031924ebda1caf5c6e21e7a35768f899344e991e374111f3081ffaba8a74fdc72e1000000060012014eff000008006100ffffffff0000960007000000"], 0x70}, 0x1, 0x0, 0x0, 0x80}, 0x40) mmap$auto(0x0, 0xfffffffffffffffb, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffd, 0x2000b, 0xa169, 0x16, r2, 0x3) mq_open$auto(&(0x7f00000001c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\x89h\xc5\xba\xff\xc8u5\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) 2.222714004s ago: executing program 5 (id=3276): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x218000, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7\xe6\x04\x8c\x83k', 0x1000000007e) pread64$auto(r1, 0x0, 0x0, 0x5) setsockopt$auto_SO_ERROR(r1, 0x7ff, 0x4, 0x0, 0x7f) mremap$auto(0x200001000000, 0x4, 0x4, 0x3, 0x100000000) timer_create$auto(0x2, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0x0, 0x5, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x3ef, 0x9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x60580, 0x0) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy13/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats_csv\x00', 0x800, 0x0) write$auto(r2, 0x0, 0xffffffbf) ioctl$auto(0xc8, 0x400454cb, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r3 = pidfd_open$auto(0x1, 0x0) setns(r3, 0x2000000) r4 = syz_genetlink_get_family_id$auto_nfc(0x0, 0xffffffffffffffff) unshare$auto(0x2) sendmsg$auto_NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r3, @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf250248addf"], 0x14}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) sendmsg$auto_NFC_CMD_LLC_SDREQ(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000bc11f077039d209073a511a481ed3ca2b7c0d93d5d446ddec772d0094ebfd6fb55c289c5d896c2e8d50c758f29ee41e4e6df69bf5198883144b42bc16348a9b5d16d09a42f395bf9b5b2a9edbcf47a31bbca5fec0058f049e1dc6b07a1933e51de7f06bd", @ANYRES16=r4, @ANYBLOB="000125bd7000fedbdf251300000008000100010000000500100005000000"], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dmmidi2\x00', 0x200201, 0x0) 2.003949146s ago: executing program 6 (id=3277): mmap$auto(0xff2d, 0x99f3, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mbind$auto(0x8000, 0xfa99, 0x7, &(0x7f0000000280)=0x20000000000000f7, 0x3, 0x2) r0 = open(&(0x7f0000000340)='./cgroup\x00', 0x0, 0x0) r1 = fcntl$auto(r0, 0x7, 0x9ec0000000000000) mmap$auto(0x0, 0x8, 0x8000000000000000, 0xeb1, 0x0, 0x8000) (async) close_range$auto(r1, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) socket(0x26, 0x1, 0x84) (async) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(0x3, 0x0, 0x100082) (async) getsockopt$auto_SO_WIFI_STATUS(r2, 0x80000001, 0x29, &(0x7f0000000380)='/proc/thread-self/fail-nth\x00', &(0x7f00000003c0)=0x8d) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) (async) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r4, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYRES32, @ANYRESOCT=r2, @ANYRESDEC], 0x14}}, 0x4000000) (async) setuid$auto(0xe) ioctl$auto(0x3, 0x4188aec6, 0x38) (async) tee$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2000006, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) setregid$auto(0xffffffffffffffff, 0xfffe) ioctl$auto_VHOST_SET_FEATURES2(r0, 0x4008af00, &(0x7f0000000300)=0x6) (async) setresgid$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r5, 0x2284, 0xffffffffffffffff) (async) unshare$auto(0x40000080) (async) rename$auto(&(0x7f0000000440)='./cgroup/../file0\x00', &(0x7f0000000080)='./cgroup/../file0\x00') readv$auto(r3, &(0x7f00000001c0)={&(0x7f00000000c0)="a1e2a0c51cd2ea38fea1ac89f3b4dab618818e9a4b6d6d2d12090000d81081cca21e9f2cdc29ee94ab7b7668499e055fba238e8de0f5d33425ffc9e93c25f73789c94ff4f60471ca0aa68a8bfc439b0a663639c5f71e301a709a755424f98fb240ac08d45a43ea9972beec3c0620bd35de8123dc20e3f8ab97a13fd377bc4cdf0c9a6d82637f3c8228a96a31a78fca04e58db7cdcec29f658de9105ad5f051fa644acb8d375079ab85324473c0c1c66abb2aedf13bc5a5dff56c9bbd432220c4ea3b3389d0f425fe85130d499144b10b4df01c9d71835343d33acea9e1eb54843363", 0x46ce1ce3}, 0x5) 1.945106839s ago: executing program 3 (id=3278): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x4, 0x4d, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x109401, 0x0) ioctl$auto(r0, 0x540a, 0x0) socket(0xa, 0x5, 0x0) ioctl$auto_TIOCMSET2(r0, 0x5418, &(0x7f0000000180)="fd82d960ef6b2ab78a21f5f077a23c9d868bd2f2f386ce8cdf2c4afb3e43d8a4532059f7a59db620382a8f403213402e31365a5f2dd46b9c61f16626c3bc63382f841b7a22897ef4c14a5219dfdd4217337dea7042a7790a46e6cd2aae16bb751d89e842e771046d282a545edf7abc50ba63937e324c4c558eb1fba39deb417be2572893406f4f39c0e70460bac20e066a09bf5b512cfd0d18f3d68e5a81934b2b3f88b92c928e75c7a6f93ce8a6ba7477ca37cfa95e7dee3496ad29a009") timer_create$auto(0x0, 0x0, 0x0) mmap$auto(0x7, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000340)='3\x00', 0x40000000006) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/conf/hsr_slave_0/ignore_routes_with_linkdown\x00', 0x4002, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000100)={0x80000001, 0xd, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0xfffffffd], {0x6, 0x6, 0xf, 0x29f, 0x102, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f0000000140)) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) mmap$auto(0x0, 0x477, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket(0x1d, 0x2, 0x9) getsockopt$auto(r4, 0x6b, 0xdc5a, 0xfffffffffffffffe, 0x0) prctl$auto_PR_SET_MM_START_CODE(0x80, 0x1, 0xffffffffffffffff, 0x7, 0x410) madvise$auto(0x8, 0x6, 0x8) 1.815030898s ago: executing program 6 (id=3279): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r0, 0x5425, &(0x7f0000000000)) close_range$auto(0x2, 0xffffffffffffffff, 0x0) keyctl$auto_KEYCTL_ASSUME_AUTHORITY(0x10, 0x0, 0x4, 0x46ddf4ca, 0x8) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) socket(0xa, 0x1, 0x84) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x119500, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r2 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r2, 0x0, 0x28, 0x0, 0xc) write$auto_console_fops_tty_io(r1, &(0x7f00000000c0)="c80d1b5d399b58116143ff9d524529f94c9b16d4a3444befb1767965a7b84b407741f36c8abe079d5f089ad5f0be89ae4b277ef6417c16a45b8e3a9907ed045a695e6517db43475709e0ffcc1d40689b503600d12f142b098f80864904cbc8c703c0ee645564962683e5a24d167cbdb9b145a1ee2552dac57b50bee0bbe351584981c54da4b181f84727739c8e727cabecadffb6cf34d025c6b2035316a45970e6a95f3856f1353395320a1b9da849fa42ce63d95bf6900fe217af", 0xbb) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x50100, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmctl$auto_IPC_INFO(0x5, 0x3, 0x0) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r3, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) madvise$auto(0x0, 0x400053, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) io_uring_setup$auto(0x4000000d, 0x0) fstatfs$auto(0x3, 0x0) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r4, 0x7ab, 0x0) ioctl$auto_BLKRRPART(r3, 0x125f, 0x0) openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000014c0)='/sys/kernel/tracing/uprobe_profile\x00', 0x40001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/vhci_hcd.5/power/autosuspend_delay_ms\x00', 0x0, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) 1.53502458s ago: executing program 0 (id=3280): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r0, 0x5646, r0) r1 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) ppoll$auto(&(0x7f0000000080)={r1, 0x11b, 0x801}, 0xc, &(0x7f00000000c0)={0x3, 0x7f}, 0x0, 0x8) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', 0x0, 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) 1.524610085s ago: executing program 6 (id=3281): r0 = socket(0x10, 0x2, 0xc) (async, rerun: 32) write$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff) (async, rerun: 32) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) process_vm_readv$auto(0x0, &(0x7f00000001c0)={&(0x7f0000000100)="18361a55f254dd2b7c594882957598497271959dc53b1f3fdd49d70c975169c3832df2e51e930c90772fcfd4a68824b88b20c6ccd72e432e660e66e1b3cba3d98ecae352fbe2be1b599f199ba1b8f6ce5dec4ae5baf200850539d504eee72bf7d233daf06ebf003de92fb74ceed5ef36e231e2504f161dffe729eaee2cc1543800d264c940a8da0f9ebc651b266156da6e02c78e06e7b8d5dfb16477ac93b1f68a3e27c5f38462791c4a6803d185d5018a", 0x2}, 0x0, &(0x7f0000000280)={&(0x7f0000000200)="41d55a3b34da3a18afc8b9bf73bd64f9418d6c57bc8dbfd6f2d1859328f21b7315457ed08da4add9223951267f06c13c4d51b1cfade4aa2ab036584874ce99de4f2ccc01ee"}, 0x5, 0x0) (rerun: 64) madvise$auto(0x0, 0x200007, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='p'], 0x1ac}}, 0x40000) (async) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x1fffffffe000, 0x400005, 0x0, 0x3132, 0x9, 0x0) (async) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x201, 0x0) (rerun: 32) mbind$auto(0xf000, 0x8000000000000002, 0x100000000, 0x0, 0x6, 0x2) (async) futex_wake$auto(0x0, 0x5, 0x4, 0xa) (async) futex_wake$auto(0x0, 0xffffffffffffbff8, 0xfff, 0x6) (async, rerun: 32) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="24000003", @ANYRES16=r2, @ANYBLOB="10002cbd7000fadbdf250a00000a00000200252f00e2a85c41e75a02715b2df500001100df28fffe65c31770799fdab838aaf6712a82e628c9e6429a4a38320b2d692863927bd744b4f7b409b29862d3257675d4fd09d74a831929b1005bdd28ef3fc5ae2884ef6a78fedbebbc656141771e57124268c37932c90ec99923926a97bb444f6903a41102463c79baf78c35827f46efb37be97277d81130bd43e31c60347610f3e65f3d60d3d1e231c0cc23ad56ff23565d95cfafc7a92a64da18c0c01c0600010006000000"], 0x51}, 0x1, 0x0, 0x0, 0x24050803}, 0x10004010) 1.254436311s ago: executing program 0 (id=3282): unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = fanotify_init$auto(0x3, 0x3) ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) madvise$auto(0x0, 0x200007, 0x19) socket(0xa, 0x1, 0x84) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_3={0x7, 0x1, 0xfffffffffffffff8, 0xfd, 0x401, 0x39bb, 0x1e, 0x2, 0xffff, "f3f97f851fd1618108a569eaadec7108", 0x0, 0xb, 0xffffffffffffffff, 0x3, 0x8, 0x8001, 0x8, 0xff, 0x9, 0x7159, @attach_prog_fd, 0x0, 0x0, 0x50000000000, 0x53, 0x1780}, 0xf) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fstat$auto(0x2, 0x0) ioctl$auto(0xc8, 0x401054d5, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, &(0x7f0000000840)="13") r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) read$auto_uinput_fops_uinput(r1, 0x0, 0x0) ioctl$auto_TIOCSTI2(0xffffffffffffffff, 0x5412, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 1.094225586s ago: executing program 5 (id=3283): r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r0, &(0x7f0000000180)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b4241ee46870ca4b468af9c39ee2011", 0x3}, 0x1, 0x15, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x9, 0x80000000000000df, 0xeb1, 0x401, 0x8080) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) read$auto_ftrace_enable_fops_trace_events(r0, &(0x7f0000000600)=""/189, 0xbd) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) set_mempolicy$auto(0x6, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0xe01, 0x0) setresgid$auto(0xffffffffffffffff, 0xee00, 0x0) read$auto_mISDN_fops_timerdev(0xffffffffffffffff, &(0x7f0000000500)=""/196, 0xc4) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r1) sendmsg$auto_NL80211_CMD_FRAME(r1, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYRESHEX=r2, @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf253b0000004c00f0801628ec2e80dcb2b55336697750ede57f8c85d0e4e3f9211b81a0df1660c997147598dc822f3bd8c43748f72b3cc9a4bc04005a0014006700200100000000000000000000000000020800ef000500000008000c0180000000"], 0x70}, 0x1, 0x0, 0x0, 0xc4884}, 0x8001) read$auto(r3, &(0x7f00000002c0)='N\xd5\f\xb9GC*(,\x00\xc4bAL\xa3`\xb1\xf2T\xc0\x1d\xa4\x10r\xc4\xa2\xb1y\t\x05\xe7\xc04b$\x99.\xb4\xcc\xc0%\xaa\xd3\xd5\xef\xa4\xd35u\xc0\xa6\r\xcaJ\x11\xaf\x93\xde\xc3|\x17\x96\xd1\x15g\x10\x1ai1(=!\xf1\xe8\xe4\xcdm\xed\rW\xe7\xfbL\\\xf2sj(\v\xcd\xe5\x02B\x81ss\xdd\x8199\xa5\x1e\xb0A\xa3\xcbj7\xe9\xc9L\xcc\xc6\xa4\xaf%\xba\xda\xee\xd8%:bXj\xd5[UG\x8a\x8ab\x9a\x18\xe8K\xafU\x8d\xb1\f~\xaa\xab(\x86(\xf9\b\xf7$%\xf2\x11\xa4\x9bj\xc1)\n\x1ft\xb6\xaf\xe2\xd4\x95\xa3\xe1', 0x100000001) write$auto(0xffffffffffffffff, &(0x7f0000001440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3\xb8\xc0\x1f\xe6\x9f\x9cy\xa9\xad\x96\x19Fy\x11}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdf\x17\xe4\xcbA\xa5[\x1aG\xa6\x94\xe0\xdf\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(W| \xce\xcc\xdd%\xcf\xab\xa8\xafhM\x0f%\xc4C9~\xfe\x02]\xedVfQ', 0xf) ioctl$auto_TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040)) mmap$auto(0x537f, 0x3fffffff800, 0x0, 0xfb, r1, 0x2) write$auto(r3, &(0x7f0000000080)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x0, 0x0) 290.297725ms ago: executing program 0 (id=3284): syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc40, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0x40505330, 0x38) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x8800, 0x0) socket(0x21, 0x6, 0x10) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyv9\x00', 0x4401, 0x0) ioctl$auto_TIOCNXCL(r0, 0x540d, &(0x7f0000000140)="2ca4cf") r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1e2102, 0x0) socket(0x10, 0x2, 0xc) write$auto(r1, &(0x7f0000000000)='a:h\x18\x00', 0xfdef) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="250f00000000fbdbdf25030016fd04"], 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2000c044) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) 259.572875ms ago: executing program 3 (id=3285): time$auto(0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/notify_on_release\x00', 0x121281, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x42, 0x0) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x18000) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB="00005514", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf250a0000001800018014000200776c616e31"], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = bpf$auto(0x5, &(0x7f00000007c0)=@batch={0x2, 0x4336, 0x139735f4, 0x1, 0x80000001, r0, 0x2000, 0xd9}, 0x101) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/device_info\x00', 0x40380, 0x0) pread64$auto(r3, 0x0, 0x10001, 0x2000000000830) statmount$auto(&(0x7f0000000080)={0x602f, @inferred=r2, 0x5, 0x40, 0x290}, &(0x7f0000000500)={0xa, 0x98c, 0x0, 0xa, 0x200, 0x8, 0x0, 0xf37, 0x8001, 0x9, 0x2, 0x0, 0x7fffffffffffffff, 0x46bb, 0x0, 0x1, 0x3, 0x8000, 0x7, 0x0, 0x4, 0x6, 0xbd9, 0x9, 0x1, 0x8, 0x3, 0xb87, 0x400, 0x3, 0xffffffff, [0x2, 0x2, 0x9, 0x4, 0x0, 0x20000000007, 0x1, 0x7, 0x0, 0x1, 0x5, 0x8, 0x10, 0xa21, 0x80000001, 0x8, 0x8000000000000001, 0x0, 0x8, 0x9, 0x4, 0x6, 0x0, 0xab4, 0x77, 0x5, 0x4, 0x7f, 0xfe8a, 0x8, 0x4, 0x95, 0x2d7, 0x7, 0x7, 0x7, 0x1, 0x8000000000000000, 0x1, 0x7, 0x5, 0x3ff, 0x9], "e23845cc80a6299ec9352d281014b9d1f16b57857b8268551970aa13ac15e9dc6fc69491337a610c4e760f0cd59d5c330f3ed4d50075c731be3c73521a56fc115a9dc562276f983067e842a5aba52e6bb3886b115791aa19e5f0205af30336f127102f25461aea00d89bb46db7b6f34ca19c9e0789d50b8c9ddf3d91cebbf5ef63ddc962a869d77d830b9acf9a"}, 0x1, 0x4) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000000)={@siginfo_0_0={0x7f, 0x8, 0x5, @_timer={0xffffffffffffffff, 0x5, @sival_int=0x5, 0x7fffffff}}}, 0x7fffffff, &(0x7f0000000240)={{0x4, 0x4}, {0xfffffffffffffffe, 0x700000000}, 0x435, 0x5, 0x7fff, 0x1, 0x5, 0x6, 0xef, 0x7, 0xd697, 0xfd02, 0xf03e, 0x2927c87d, 0x0, 0x2}) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) io_uring_setup$auto(0x100006, 0x0) close_range$auto(r2, r0, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) setresuid$auto(0x8, 0x8, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_RECONFIGURE(r5, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001840)=ANY=[@ANYBLOB='3\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010027bd7000fbdbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x40000) write$auto(r4, &(0x7f0000000180)='7\x00\\\xa0\x04|4\x00\x00\x03\x00\x00\x00\x10\x01\x00\x00\x00\x00\x00\x00\x00\x00rRVr\xc4O\xdc1\x9b%\x10Z\'\xb9\'\xa3stC=\x85\xc6\xf6\x13 \xeb\xff%\x11\x82\x05\xdfV\x02\xca&\xd8$<\xab&\xc8B-\xcc\x15\x04&\x13;\xfe\xbdQ\xaa\x16o\x1f\xc7\x94\xa3\xc9\x9a\xe1d\xf5\n\xe2\x88\x84\vT?\x98\xa2\x00'/206, 0x5) getsockopt$auto_SO_SNDTIMEO_NEW(r4, 0x8, 0x43, 0x0, 0x0) keyctl$auto(0x12, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) 241.56868ms ago: executing program 5 (id=3286): preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) preadv$auto(0x40000000000003, 0x0, 0x6, 0x5ff4, 0x1) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x1, 0x0) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x1, 0x0) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) (async) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/028/001\x00', 0x400, 0x0) read$auto_usbdev_file_operations_usb(r3, 0x0, 0x0) socket(0x2c, 0x80003, 0x0) (async) r4 = socket(0x2c, 0x80003, 0x0) r5 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec8\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r5, 0xc0506107, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r6, 0x0, 0x20) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xffffffff]}, 0x0) (async) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xffffffff]}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x110c230000, 0x1fffffe, 0x9) (async) madvise$auto(0x110c230000, 0x1fffffe, 0x9) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r4) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x68, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_BSS_BASIC_RATES={0x24, 0x24, "bfb9a91840580b35bf72963541ceba9dbb6e3b4ac1ab974e84c8dc815e972967"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8000}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc4ba}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x5}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x82}, 0x41) (async) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x68, r7, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x3ff}, @NL80211_ATTR_BSS_BASIC_RATES={0x24, 0x24, "bfb9a91840580b35bf72963541ceba9dbb6e3b4ac1ab974e84c8dc815e972967"}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8000}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc4ba}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x5}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0xb}]}, 0x68}, 0x1, 0x0, 0x0, 0x82}, 0x41) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000001c0)='/\x00', 0x0, 0x0, 0x1001) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x400000, 0x0) 0s ago: executing program 6 (id=3287): mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x69) listen$auto(0x3, 0x81) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48085}, 0x20008000) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) accept$auto(0x3, 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x7, 0x1}, 0x3}, 0x4, 0x20000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): 03][T20267] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 853.047213][T20267] RBP: 00007fbbd4232e6f R08: 0000000000000000 R09: 0000000000000000 [ 853.047222][T20267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 853.047231][T20267] R13: 00007fbbd4416038 R14: 00007fbbd4415fa0 R15: 00007ffc60d80768 [ 853.047251][T20267] [ 853.962616][T20284] random: crng reseeded on system resumption [ 853.982375][T20285] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2771'. [ 854.014462][T20285] netlink: 'syz.3.2771': attribute type 1 has an invalid length. [ 854.055535][T20285] netlink: 'syz.3.2771': attribute type 6 has an invalid length. [ 854.140157][T20288] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 854.249963][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2773'. [ 854.553985][T20298] FAULT_INJECTION: forcing a failure. [ 854.553985][T20298] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 854.635345][T20298] CPU: 0 UID: 0 PID: 20298 Comm: syz.5.2775 Tainted: G L syzkaller #0 PREEMPT(full) [ 854.635373][T20298] Tainted: [L]=SOFTLOCKUP [ 854.635379][T20298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 854.635389][T20298] Call Trace: [ 854.635395][T20298] [ 854.635402][T20298] dump_stack_lvl+0x100/0x190 [ 854.635427][T20298] should_fail_ex.cold+0x5/0xa [ 854.635445][T20298] ? prepare_alloc_pages+0x16d/0x5f0 [ 854.635468][T20298] should_fail_alloc_page+0xeb/0x140 [ 854.635490][T20298] prepare_alloc_pages+0x1f0/0x5f0 [ 854.635515][T20298] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 854.635550][T20298] ? __lock_acquire+0x49f/0x1a40 [ 854.635577][T20298] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 854.635596][T20298] ? __css_rstat_updated+0x1ce/0x5a0 [ 854.635624][T20298] ? do_raw_spin_lock+0x128/0x260 [ 854.635641][T20298] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 854.635658][T20298] ? find_held_lock+0x2b/0x80 [ 854.635683][T20298] ? __lock_acquire+0x49f/0x1a40 [ 854.635706][T20298] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 854.635729][T20298] ? policy_nodemask+0xed/0x4f0 [ 854.635752][T20298] alloc_pages_mpol+0x1fb/0x540 [ 854.635774][T20298] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 854.635800][T20298] folio_alloc_mpol_noprof+0x36/0x260 [ 854.635825][T20298] shmem_alloc_folio+0x135/0x160 [ 854.635849][T20298] shmem_alloc_and_add_folio+0x371/0xd40 [ 854.635870][T20298] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 854.635888][T20298] ? shmem_allowable_huge_orders+0x2bd/0x400 [ 854.635909][T20298] shmem_get_folio_gfp+0x6ad/0x1910 [ 854.635930][T20298] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 854.635947][T20298] ? ktime_get_coarse_real_ts64_mg+0x235/0x300 [ 854.635964][T20298] ? lockdep_hardirqs_on+0x78/0x100 [ 854.635984][T20298] shmem_fault+0x1f9/0xa20 [ 854.636000][T20298] ? __lock_acquire+0x49f/0x1a40 [ 854.636023][T20298] ? __pfx_shmem_fault+0x10/0x10 [ 854.636038][T20298] ? rcu_is_watching+0x12/0xc0 [ 854.636067][T20298] ? __pfx_filemap_map_pages+0x10/0x10 [ 854.636090][T20298] __do_fault+0x10b/0x440 [ 854.636108][T20298] ? find_held_lock+0x2b/0x80 [ 854.636127][T20298] do_fault+0x2db/0x1750 [ 854.636151][T20298] __handle_mm_fault+0x187d/0x2a00 [ 854.636169][T20298] ? mt_find+0x45e/0x8e0 [ 854.636190][T20298] ? __pfx___handle_mm_fault+0x10/0x10 [ 854.636204][T20298] ? __pfx_mt_find+0x10/0x10 [ 854.636234][T20298] ? find_vma+0xbf/0x140 [ 854.636251][T20298] ? __pfx_find_vma+0x10/0x10 [ 854.636272][T20298] handle_mm_fault+0x37b/0xa30 [ 854.636291][T20298] do_user_addr_fault+0x74c/0x12f0 [ 854.636320][T20298] exc_page_fault+0x6f/0xd0 [ 854.636337][T20298] asm_exc_page_fault+0x26/0x30 [ 854.636353][T20298] RIP: 0010:rep_movs_alternative+0x4a/0xa0 [ 854.636376][T20298] Code: 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 8f 9d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 854.636391][T20298] RSP: 0018:ffffc900041276e0 EFLAGS: 00050206 [ 854.636404][T20298] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000000ffd [ 854.636413][T20298] RDX: 0000000000000001 RSI: ffff8880743a3003 RDI: 0000000000008000 [ 854.636423][T20298] RBP: ffffc90004127d10 R08: 0000000000000000 R09: ffffed100e8747ff [ 854.636432][T20298] R10: ffff8880743a3fff R11: 0000000000000000 R12: ffff8880743a3000 [ 854.636441][T20298] R13: 0000000000007ffd R14: 0000000000007ffd R15: 0000000000001000 [ 854.636460][T20298] _copy_to_iter+0x4c5/0x1720 [ 854.636484][T20298] ? __pfx__copy_to_iter+0x10/0x10 [ 854.636500][T20298] ? do_raw_spin_unlock+0x145/0x1e0 [ 854.636525][T20298] ? folio_mark_accessed+0xf3/0x1040 [ 854.636542][T20298] ? __pfx_filemap_get_pages+0x10/0x10 [ 854.636558][T20298] ? __pfx_folio_mark_accessed+0x10/0x10 [ 854.636579][T20298] copy_page_to_iter+0x285/0x370 [ 854.636599][T20298] filemap_read+0x7a9/0x10a0 [ 854.636624][T20298] ? __pfx_filemap_read+0x10/0x10 [ 854.636654][T20298] ? __pfx_down_read+0x10/0x10 [ 854.636671][T20298] ? find_held_lock+0x2b/0x80 [ 854.636690][T20298] ? futex_unqueue+0x133/0x2c0 [ 854.636706][T20298] ? __pfx_aa_file_perm+0x10/0x10 [ 854.636726][T20298] blkdev_read_iter+0x2c4/0x4f0 [ 854.636749][T20298] do_iter_readv_writev+0x616/0x930 [ 854.636774][T20298] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 854.636800][T20298] ? bpf_lsm_file_permission+0x9/0x10 [ 854.636814][T20298] ? security_file_permission+0x76/0x210 [ 854.636831][T20298] ? rw_verify_area+0xce/0x6d0 [ 854.636853][T20298] vfs_readv+0x4d3/0x8d0 [ 854.636880][T20298] ? __pfx_vfs_readv+0x10/0x10 [ 854.636900][T20298] ? __pfx_futex_wait+0x10/0x10 [ 854.636934][T20298] ? __fget_files+0x21f/0x3d0 [ 854.636962][T20298] ? do_preadv+0x1ac/0x270 [ 854.636982][T20298] do_preadv+0x1ac/0x270 [ 854.637004][T20298] ? __pfx_do_preadv+0x10/0x10 [ 854.637026][T20298] ? xfd_validate_state+0x129/0x190 [ 854.637053][T20298] __x64_sys_preadv2+0xef/0x160 [ 854.637071][T20298] do_syscall_64+0x115/0x840 [ 854.637091][T20298] ? clear_bhb_loop+0x40/0x90 [ 854.637109][T20298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.637125][T20298] RIP: 0033:0x7fb9da59ce59 [ 854.637139][T20298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.637153][T20298] RSP: 002b:00007fb9db491028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 854.637168][T20298] RAX: ffffffffffffffda RBX: 00007fb9da815fa0 RCX: 00007fb9da59ce59 [ 854.637178][T20298] RDX: 0000000000000006 RSI: 0000200000000280 RDI: 0000000000000005 [ 854.637187][T20298] RBP: 00007fb9da632e6f R08: 0000000000000004 R09: 000000000000002a [ 854.637198][T20298] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 854.637208][T20298] R13: 00007fb9da816038 R14: 00007fb9da815fa0 R15: 00007ffc8b867278 [ 854.637228][T20298] [ 855.785556][T20302] random: crng reseeded on system resumption [ 856.368738][T20310] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 856.509423][T20310] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2777'. [ 857.194288][T20322] FAULT_INJECTION: forcing a failure. [ 857.194288][T20322] name failslab, interval 1, probability 0, space 0, times 0 [ 857.250939][T20322] CPU: 0 UID: 8 PID: 20322 Comm: syz.3.2779 Tainted: G L syzkaller #0 PREEMPT(full) [ 857.250966][T20322] Tainted: [L]=SOFTLOCKUP [ 857.250972][T20322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 857.250981][T20322] Call Trace: [ 857.250988][T20322] [ 857.250994][T20322] dump_stack_lvl+0x100/0x190 [ 857.251018][T20322] should_fail_ex.cold+0x5/0xa [ 857.251040][T20322] should_failslab+0xc2/0x120 [ 857.251061][T20322] kmem_cache_alloc_noprof+0x91/0x6a0 [ 857.251079][T20322] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 857.251103][T20322] ? prepare_creds+0x2c/0x950 [ 857.251129][T20322] prepare_creds+0x2c/0x950 [ 857.251153][T20322] lookup_user_key+0xfb2/0x1300 [ 857.251178][T20322] ? ksys_write+0x190/0x250 [ 857.251192][T20322] ? __pfx_lookup_user_key+0x10/0x10 [ 857.251215][T20322] ? do_futex+0x190/0x440 [ 857.251235][T20322] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 857.251263][T20322] ? __x64_sys_futex+0x34f/0x4d0 [ 857.251286][T20322] ? __x64_sys_futex+0x358/0x4d0 [ 857.251307][T20322] keyctl_session_to_parent+0x28/0xae0 [ 857.251332][T20322] __do_sys_keyctl+0x2b1/0x5a0 [ 857.251355][T20322] do_syscall_64+0x115/0x840 [ 857.251372][T20322] ? clear_bhb_loop+0x40/0x90 [ 857.251391][T20322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.251407][T20322] RIP: 0033:0x7fbbd419ce59 [ 857.251421][T20322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.251435][T20322] RSP: 002b:00007fbbd50f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 857.251450][T20322] RAX: ffffffffffffffda RBX: 00007fbbd4415fa0 RCX: 00007fbbd419ce59 [ 857.251463][T20322] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 857.251473][T20322] RBP: 00007fbbd4232e6f R08: 0000000000000001 R09: 0000000000000000 [ 857.251482][T20322] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 857.251491][T20322] R13: 00007fbbd4416038 R14: 00007fbbd4415fa0 R15: 00007ffc60d80768 [ 857.251511][T20322] [ 857.825260][T20326] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 859.208897][T20350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2787'. [ 859.231651][T20351] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2786'. [ 859.257617][T20350] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2787'. [ 859.391688][T20351] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2786'. [ 860.333364][T20361] CIFS: VFS: Invalid SecurityFlags: ‰±Ž: [ 861.228025][T20375] hub 1-0:1.0: USB hub found [ 861.268666][T20375] hub 1-0:1.0: 1 port detected [ 861.743915][T20392] syz.6.2795 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 861.947879][T20388] hugetlbfs: syz.6.2795 (20388): Using mlock ulimits for SHM_HUGETLB is obsolete [ 862.127735][T20397] vivid-007: ================= START STATUS ================= [ 862.154539][T20397] vivid-007: Generate PTS: true [ 862.177315][T20397] vivid-007: Generate SCR: true [ 862.195299][T20397] tpg source WxH: 320x240 (Y'CbCr) [ 862.226617][T20397] tpg field: 1 [ 862.238218][T20397] tpg crop: (0,0)/320x240 [ 862.266807][T20397] tpg compose: (0,0)/320x240 [ 862.311347][T20397] tpg colorspace: 8 [ 862.338378][T20397] tpg transfer function: 0/0 [ 862.368982][T20397] tpg Y'CbCr encoding: 0/0 [ 862.396186][T20397] tpg quantization: 0/0 [ 862.420559][T20397] tpg RGB range: 0/2 [ 862.447740][T20397] vivid-007: ================== END STATUS ================== [ 863.028110][T20423] FAULT_INJECTION: forcing a failure. [ 863.028110][T20423] name failslab, interval 1, probability 0, space 0, times 0 [ 863.136559][T20422] input: f¬ as /devices/virtual/input/input20 [ 863.363390][T20423] CPU: 0 UID: 0 PID: 20423 Comm: syz.5.2803 Tainted: G L syzkaller #0 PREEMPT(full) [ 863.363418][T20423] Tainted: [L]=SOFTLOCKUP [ 863.363424][T20423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 863.363434][T20423] Call Trace: [ 863.363439][T20423] [ 863.363446][T20423] dump_stack_lvl+0x100/0x190 [ 863.363470][T20423] should_fail_ex.cold+0x5/0xa [ 863.363490][T20423] should_failslab+0xc2/0x120 [ 863.363512][T20423] kmem_cache_alloc_noprof+0x91/0x6a0 [ 863.363531][T20423] ? trace_kmem_cache_alloc+0xdd/0x100 [ 863.363554][T20423] ? security_file_alloc+0x34/0x2c0 [ 863.363574][T20423] security_file_alloc+0x34/0x2c0 [ 863.363590][T20423] init_file+0x95/0x480 [ 863.363608][T20423] alloc_empty_file+0x79/0x1c0 [ 863.363627][T20423] alloc_file_pseudo+0x183/0x290 [ 863.363647][T20423] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 863.363666][T20423] ? alloc_fd+0x471/0x7a0 [ 863.363684][T20423] sock_alloc_file+0x50/0x210 [ 863.363709][T20423] __sys_socket+0x1c0/0x260 [ 863.363733][T20423] ? __pfx___sys_socket+0x10/0x10 [ 863.363757][T20423] __x64_sys_socket+0x72/0xb0 [ 863.363774][T20423] ? lockdep_hardirqs_on+0x78/0x100 [ 863.363792][T20423] do_syscall_64+0x115/0x840 [ 863.363809][T20423] ? clear_bhb_loop+0x40/0x90 [ 863.363827][T20423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.363843][T20423] RIP: 0033:0x7fb9da59ce59 [ 863.363857][T20423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.363870][T20423] RSP: 002b:00007fb9db470028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 863.363885][T20423] RAX: ffffffffffffffda RBX: 00007fb9da816090 RCX: 00007fb9da59ce59 [ 863.363896][T20423] RDX: 0000000000000084 RSI: 0000000000000801 RDI: 000000000000000a [ 863.363905][T20423] RBP: 00007fb9da632e6f R08: 0000000000000000 R09: 0000000000000000 [ 863.363914][T20423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.363923][T20423] R13: 00007fb9da816128 R14: 00007fb9da816090 R15: 00007ffc8b867278 [ 863.363942][T20423] [ 864.669263][T20454] vivid-007: ================= START STATUS ================= [ 864.704953][T20454] vivid-007: Generate PTS: true [ 864.728194][T20454] vivid-007: Generate SCR: true [ 864.750513][T20454] tpg source WxH: 320x240 (Y'CbCr) [ 864.790907][T20454] tpg field: 1 [ 864.801765][T20454] tpg crop: (0,0)/320x240 [ 864.825512][T20454] tpg compose: (0,0)/320x240 [ 864.863585][T20454] tpg colorspace: 8 [ 864.889261][T20454] tpg transfer function: 0/0 [ 864.914365][T20454] tpg Y'CbCr encoding: 0/0 [ 864.937808][T20454] tpg quantization: 0/0 [ 864.960457][T20454] tpg RGB range: 0/2 [ 864.986186][T20454] vivid-007: ================== END STATUS ================== [ 865.572937][T20468] hub 1-0:1.0: USB hub found [ 865.623381][T20468] hub 1-0:1.0: 1 port detected [ 866.048468][T20462] Process accounting paused [ 866.234238][T20485] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 866.374043][T20486] FAULT_INJECTION: forcing a failure. [ 866.374043][T20486] name failslab, interval 1, probability 0, space 0, times 0 [ 866.466140][T20486] CPU: 0 UID: 8 PID: 20486 Comm: syz.6.2818 Tainted: G L syzkaller #0 PREEMPT(full) [ 866.466168][T20486] Tainted: [L]=SOFTLOCKUP [ 866.466174][T20486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 866.466183][T20486] Call Trace: [ 866.466189][T20486] [ 866.466195][T20486] dump_stack_lvl+0x100/0x190 [ 866.466219][T20486] should_fail_ex.cold+0x5/0xa [ 866.466240][T20486] should_failslab+0xc2/0x120 [ 866.466262][T20486] kmem_cache_alloc_noprof+0x91/0x6a0 [ 866.466282][T20486] ? cred_alloc_blank+0x1c/0xa0 [ 866.466309][T20486] cred_alloc_blank+0x1c/0xa0 [ 866.466331][T20486] keyctl_session_to_parent+0x55/0xae0 [ 866.466358][T20486] __do_sys_keyctl+0x2b1/0x5a0 [ 866.466380][T20486] do_syscall_64+0x115/0x840 [ 866.466397][T20486] ? clear_bhb_loop+0x40/0x90 [ 866.466416][T20486] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 866.466431][T20486] RIP: 0033:0x7fc15c19ce59 [ 866.466445][T20486] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 866.466460][T20486] RSP: 002b:00007fc15cfcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 866.466475][T20486] RAX: ffffffffffffffda RBX: 00007fc15c415fa0 RCX: 00007fc15c19ce59 [ 866.466486][T20486] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 866.466495][T20486] RBP: 00007fc15c232e6f R08: 0000000000000001 R09: 0000000000000000 [ 866.466505][T20486] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 866.466514][T20486] R13: 00007fc15c416038 R14: 00007fc15c415fa0 R15: 00007fffbf3ff808 [ 866.466534][T20486] [ 866.993657][T20445] Process accounting paused [ 867.537918][T20503] random: crng reseeded on system resumption [ 869.259356][T20538] vivid-007: ================= START STATUS ================= [ 869.292439][T20538] vivid-007: Generate PTS: true [ 869.321839][T20538] vivid-007: Generate SCR: true [ 869.343461][T20538] tpg source WxH: 320x240 (Y'CbCr) [ 869.363862][T20538] tpg field: 1 [ 869.384028][T20538] tpg crop: (0,0)/320x240 [ 869.407555][T20538] tpg compose: (0,0)/320x240 [ 869.428708][T20538] tpg colorspace: 8 [ 869.448876][T20538] tpg transfer function: 0/0 [ 869.467898][T20538] tpg Y'CbCr encoding: 0/0 [ 869.487655][T20538] tpg quantization: 0/0 [ 869.507415][T20538] tpg RGB range: 0/2 [ 869.532921][T20538] vivid-007: ================== END STATUS ================== [ 870.083690][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.093033][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.926636][T20569] FAULT_INJECTION: forcing a failure. [ 870.926636][T20569] name failslab, interval 1, probability 0, space 0, times 0 [ 870.993197][T20569] CPU: 0 UID: 8 PID: 20569 Comm: syz.0.2834 Tainted: G L syzkaller #0 PREEMPT(full) [ 870.993226][T20569] Tainted: [L]=SOFTLOCKUP [ 870.993232][T20569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 870.993242][T20569] Call Trace: [ 870.993249][T20569] [ 870.993255][T20569] dump_stack_lvl+0x100/0x190 [ 870.993280][T20569] should_fail_ex.cold+0x5/0xa [ 870.993302][T20569] should_failslab+0xc2/0x120 [ 870.993323][T20569] kmem_cache_alloc_noprof+0x91/0x6a0 [ 870.993342][T20569] ? cred_alloc_blank+0x1c/0xa0 [ 870.993378][T20569] cred_alloc_blank+0x1c/0xa0 [ 870.993402][T20569] keyctl_session_to_parent+0x55/0xae0 [ 870.993428][T20569] __do_sys_keyctl+0x2b1/0x5a0 [ 870.993451][T20569] do_syscall_64+0x115/0x840 [ 870.993468][T20569] ? clear_bhb_loop+0x40/0x90 [ 870.993487][T20569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 870.993502][T20569] RIP: 0033:0x7f9aaed9ce59 [ 870.993517][T20569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 870.993532][T20569] RSP: 002b:00007f9aafce1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 870.993547][T20569] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9ce59 [ 870.993557][T20569] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 870.993567][T20569] RBP: 00007f9aaee32e6f R08: 0000000000000001 R09: 0000000000000000 [ 870.993576][T20569] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 870.993585][T20569] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff2bc3db18 [ 870.993604][T20569] [ 871.985490][T20586] FAULT_INJECTION: forcing a failure. [ 871.985490][T20586] name failslab, interval 1, probability 0, space 0, times 0 [ 872.067283][T20586] CPU: 0 UID: 0 PID: 20586 Comm: syz.0.2838 Tainted: G L syzkaller #0 PREEMPT(full) [ 872.067310][T20586] Tainted: [L]=SOFTLOCKUP [ 872.067316][T20586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.067325][T20586] Call Trace: [ 872.067331][T20586] [ 872.067337][T20586] dump_stack_lvl+0x100/0x190 [ 872.067361][T20586] should_fail_ex.cold+0x5/0xa [ 872.067381][T20586] should_failslab+0xc2/0x120 [ 872.067403][T20586] __kmalloc_noprof+0xfc/0x820 [ 872.067422][T20586] ? security_inode_init_security+0x113/0x370 [ 872.067446][T20586] security_inode_init_security+0x113/0x370 [ 872.067467][T20586] ? __pfx_shmem_initxattrs+0x10/0x10 [ 872.067488][T20586] ? __pfx_security_inode_init_security+0x10/0x10 [ 872.067509][T20586] ? __pfx_make_vfsuid+0x10/0x10 [ 872.067533][T20586] shmem_symlink+0x163/0xa00 [ 872.067553][T20586] ? generic_permission+0xae/0x800 [ 872.067573][T20586] ? __pfx_shmem_symlink+0x10/0x10 [ 872.067589][T20586] ? security_inode_permission+0xbf/0x250 [ 872.067613][T20586] ? inode_permission+0x374/0x620 [ 872.067631][T20586] ? tomoyo_path_symlink+0x97/0xe0 [ 872.067656][T20586] vfs_symlink+0x178/0x4d0 [ 872.067678][T20586] filename_symlinkat+0x2a6/0x560 [ 872.067697][T20586] ? __pfx_filename_symlinkat+0x10/0x10 [ 872.067715][T20586] ? strncpy_from_user+0x19d/0x2d0 [ 872.067734][T20586] ? do_getname+0x191/0x390 [ 872.067761][T20586] __x64_sys_symlink+0x79/0xb0 [ 872.067778][T20586] do_syscall_64+0x115/0x840 [ 872.067796][T20586] ? clear_bhb_loop+0x40/0x90 [ 872.067815][T20586] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.067831][T20586] RIP: 0033:0x7f9aaed9ce59 [ 872.067844][T20586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.067859][T20586] RSP: 002b:00007f9aafcc0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 872.067874][T20586] RAX: ffffffffffffffda RBX: 00007f9aaf016090 RCX: 00007f9aaed9ce59 [ 872.067884][T20586] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 872.067894][T20586] RBP: 00007f9aaee32e6f R08: 0000000000000000 R09: 0000000000000000 [ 872.067903][T20586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 872.067912][T20586] R13: 00007f9aaf016128 R14: 00007f9aaf016090 R15: 00007fff2bc3db18 [ 872.067931][T20586] [ 874.052309][T20613] vivid-007: ================= START STATUS ================= [ 874.080696][T20613] vivid-007: Generate PTS: true [ 874.097788][T20613] vivid-007: Generate SCR: true [ 874.114825][T20613] tpg source WxH: 320x240 (Y'CbCr) [ 874.130465][T20613] tpg field: 1 [ 874.146270][T20613] tpg crop: (0,0)/320x240 [ 874.160818][T20613] tpg compose: (0,0)/320x240 [ 874.174562][T20613] tpg colorspace: 8 [ 874.190113][T20613] tpg transfer function: 0/0 [ 874.211899][T20613] tpg Y'CbCr encoding: 0/0 [ 874.226552][T20613] tpg quantization: 0/0 [ 874.239532][T20613] tpg RGB range: 0/2 [ 874.254170][T20613] vivid-007: ================== END STATUS ================== [ 876.351555][T20667] vivid-007: ================= START STATUS ================= [ 876.389088][T20667] vivid-007: Generate PTS: true [ 876.419575][T20667] vivid-007: Generate SCR: true [ 876.441042][T20667] tpg source WxH: 320x240 (Y'CbCr) [ 876.469217][T20667] tpg field: 1 [ 876.492538][T20667] tpg crop: (0,0)/320x240 [ 876.510993][T20667] tpg compose: (0,0)/320x240 [ 876.532446][T20667] tpg colorspace: 8 [ 876.549184][T20667] tpg transfer function: 0/0 [ 876.574761][T20667] tpg Y'CbCr encoding: 0/0 [ 876.599695][T20667] tpg quantization: 0/0 [ 876.620828][T20667] tpg RGB range: 0/2 [ 876.640470][T20667] vivid-007: ================== END STATUS ================== [ 877.646855][T20691] FAULT_INJECTION: forcing a failure. [ 877.646855][T20691] name failslab, interval 1, probability 0, space 0, times 0 [ 877.834300][T20691] CPU: 0 UID: 0 PID: 20691 Comm: syz.5.2859 Tainted: G L syzkaller #0 PREEMPT(full) [ 877.834328][T20691] Tainted: [L]=SOFTLOCKUP [ 877.834334][T20691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 877.834344][T20691] Call Trace: [ 877.834350][T20691] [ 877.834356][T20691] dump_stack_lvl+0x100/0x190 [ 877.834380][T20691] should_fail_ex.cold+0x5/0xa [ 877.834401][T20691] should_failslab+0xc2/0x120 [ 877.834423][T20691] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 877.834443][T20691] ? __d_alloc+0x35/0xa50 [ 877.834462][T20691] __d_alloc+0x35/0xa50 [ 877.834477][T20691] ? security_inode_alloc+0xcf/0x2c0 [ 877.834502][T20691] d_alloc_pseudo+0x1c/0xc0 [ 877.834522][T20691] alloc_file_pseudo+0x118/0x290 [ 877.834543][T20691] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 877.834563][T20691] ? security_inode_init_security_anon+0x7b/0x230 [ 877.834591][T20691] __do_sys_memfd_secret+0x11d/0x3d0 [ 877.834613][T20691] do_syscall_64+0x115/0x840 [ 877.834631][T20691] ? clear_bhb_loop+0x40/0x90 [ 877.834649][T20691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.834665][T20691] RIP: 0033:0x7fb9da59ce59 [ 877.834680][T20691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.834694][T20691] RSP: 002b:00007fb9db42e028 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 877.834710][T20691] RAX: ffffffffffffffda RBX: 00007fb9da816270 RCX: 00007fb9da59ce59 [ 877.834720][T20691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 877.834729][T20691] RBP: 00007fb9da632e6f R08: 0000000000000000 R09: 0000000000000000 [ 877.834739][T20691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.834748][T20691] R13: 00007fb9da816308 R14: 00007fb9da816270 R15: 00007ffc8b867278 [ 877.834767][T20691] [ 878.067472][T20669] kexec: Could not allocate control_code_buffer [ 878.086516][T20669] Process accounting paused [ 878.295201][T20685] Process accounting resumed [ 879.668574][T20734] ubi0: attaching mtd0 [ 879.700572][T20734] ubi0: scanning is finished [ 879.743109][T20734] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 880.309528][T20734] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 880.501681][T20754] vivid-007: ================= START STATUS ================= [ 880.539111][T20754] vivid-007: Generate PTS: true [ 880.577937][T20754] vivid-007: Generate SCR: true [ 880.583585][T17643] Bluetooth: hci2: unexpected event 0x02 length: 1021 > 260 [ 880.608113][T20754] tpg source WxH: 320x240 (Y'CbCr) [ 880.649049][T20754] tpg field: 1 [ 880.662560][T20754] tpg crop: (0,0)/320x240 [ 880.677919][T20754] tpg compose: (0,0)/320x240 [ 880.694177][T20754] tpg colorspace: 8 [ 880.712054][T20754] tpg transfer function: 0/0 [ 880.743721][T20754] tpg Y'CbCr encoding: 0/0 [ 880.784141][T20754] tpg quantization: 0/0 [ 880.815607][T20754] tpg RGB range: 0/2 [ 880.839198][T20754] vivid-007: ================== END STATUS ================== [ 881.650294][T20771] FAULT_INJECTION: forcing a failure. [ 881.650294][T20771] name failslab, interval 1, probability 0, space 0, times 0 [ 881.781757][T20771] CPU: 0 UID: 0 PID: 20771 Comm: syz.5.2880 Tainted: G L syzkaller #0 PREEMPT(full) [ 881.781792][T20771] Tainted: [L]=SOFTLOCKUP [ 881.781798][T20771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 881.781808][T20771] Call Trace: [ 881.781814][T20771] [ 881.781821][T20771] dump_stack_lvl+0x100/0x190 [ 881.781846][T20771] should_fail_ex.cold+0x5/0xa [ 881.781868][T20771] should_failslab+0xc2/0x120 [ 881.781889][T20771] __kmalloc_cache_noprof+0x91/0x6c0 [ 881.781905][T20771] ? apparmor_capable+0x1d7/0x4d0 [ 881.781926][T20771] ? fsnotify_alloc_group+0x8d/0x320 [ 881.781947][T20771] fsnotify_alloc_group+0x8d/0x320 [ 881.781965][T20771] __do_sys_fanotify_init+0x271/0xe30 [ 881.781993][T20771] do_syscall_64+0x115/0x840 [ 881.782010][T20771] ? clear_bhb_loop+0x40/0x90 [ 881.782029][T20771] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.782045][T20771] RIP: 0033:0x7fb9da59ce59 [ 881.782059][T20771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.782074][T20771] RSP: 002b:00007fb9db470028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 881.782089][T20771] RAX: ffffffffffffffda RBX: 00007fb9da816090 RCX: 00007fb9da59ce59 [ 881.782099][T20771] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 881.782108][T20771] RBP: 00007fb9da632e6f R08: 0000000000000000 R09: 0000000000000000 [ 881.782117][T20771] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 881.782126][T20771] R13: 00007fb9da816128 R14: 00007fb9da816090 R15: 00007ffc8b867278 [ 881.782145][T20771] [ 883.986656][T20823] random: crng reseeded on system resumption [ 885.206398][T20853] FAULT_INJECTION: forcing a failure. [ 885.206398][T20853] name failslab, interval 1, probability 0, space 0, times 0 [ 885.308503][T20853] CPU: 0 UID: 0 PID: 20853 Comm: syz.3.2895 Tainted: G L syzkaller #0 PREEMPT(full) [ 885.308530][T20853] Tainted: [L]=SOFTLOCKUP [ 885.308535][T20853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 885.308545][T20853] Call Trace: [ 885.308550][T20853] [ 885.308557][T20853] dump_stack_lvl+0x100/0x190 [ 885.308581][T20853] should_fail_ex.cold+0x5/0xa [ 885.308601][T20853] should_failslab+0xc2/0x120 [ 885.308622][T20853] kmem_cache_alloc_noprof+0x91/0x6a0 [ 885.308640][T20853] ? __pfx_map_id_range_down+0x10/0x10 [ 885.308662][T20853] ? security_inode_alloc+0x3b/0x2c0 [ 885.308689][T20853] security_inode_alloc+0x3b/0x2c0 [ 885.308712][T20853] inode_init_always_gfp+0xc77/0xfb0 [ 885.308740][T20853] alloc_inode+0x8e/0x250 [ 885.308760][T20853] new_inode+0x22/0x1c0 [ 885.308780][T20853] __debugfs_create_file+0x105/0x4f0 [ 885.308805][T20853] debugfs_create_file_full+0x41/0x60 [ 885.308827][T20853] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 885.308847][T20853] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 885.308866][T20853] ? ida_alloc_range+0x70d/0x830 [ 885.308965][T20853] ? kasan_save_track+0x14/0x30 [ 885.308983][T20853] ? __kasan_kmalloc+0xaa/0xb0 [ 885.309002][T20853] ? lockdep_init_map_type+0x5c/0x250 [ 885.309021][T20853] preinit_net.part.0+0x252/0x920 [ 885.309046][T20853] copy_net_ns+0x339/0x7c0 [ 885.309064][T20853] create_new_namespaces+0x3ea/0xac0 [ 885.309085][T20853] unshare_nsproxy_namespaces+0xf2/0x220 [ 885.309104][T20853] ksys_unshare+0x438/0xab0 [ 885.309125][T20853] ? __pfx_ksys_unshare+0x10/0x10 [ 885.309151][T20853] __x64_sys_unshare+0x31/0x40 [ 885.309170][T20853] do_syscall_64+0x115/0x840 [ 885.309188][T20853] ? clear_bhb_loop+0x40/0x90 [ 885.309208][T20853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 885.309228][T20853] RIP: 0033:0x7fbbd419ce59 [ 885.309242][T20853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 885.309257][T20853] RSP: 002b:00007fbbd508e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 885.309272][T20853] RAX: ffffffffffffffda RBX: 00007fbbd4416270 RCX: 00007fbbd419ce59 [ 885.309282][T20853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 885.309291][T20853] RBP: 00007fbbd4232e6f R08: 0000000000000000 R09: 0000000000000000 [ 885.309304][T20853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 885.309313][T20853] R13: 00007fbbd4416308 R14: 00007fbbd4416270 R15: 00007ffc60d80768 [ 885.309333][T20853] [ 885.309358][T20853] debugfs: out of free dentries, can not create file 'net_refcnt@ffff8880320f29c0' [ 886.610518][T20868] netlink: 'syz.5.2899': attribute type 19 has an invalid length. [ 886.638559][T20868] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2899'. [ 886.917898][T20874] netlink: 334 bytes leftover after parsing attributes in process `syz.5.2902'. [ 887.615980][T20892] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2900'. [ 887.679568][T20891] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2900'. [ 889.696905][T20933] vivid-007: ================= START STATUS ================= [ 889.744588][T20933] vivid-007: Generate PTS: true [ 889.778277][T20933] vivid-007: Generate SCR: true [ 889.814829][T20936] netlink: 186 bytes leftover after parsing attributes in process `syz.6.2915'. [ 889.830078][T20933] tpg source WxH: 320x240 (Y'CbCr) [ 889.848496][T20933] tpg field: 1 [ 889.890377][T20933] tpg crop: (0,0)/320x240 [ 889.923205][T20933] tpg compose: (0,0)/320x240 [ 889.956888][T20933] tpg colorspace: 8 [ 889.977867][T20933] tpg transfer function: 0/0 [ 890.013997][T20933] tpg Y'CbCr encoding: 0/0 [ 890.043068][T20933] tpg quantization: 0/0 [ 890.098521][T20933] tpg RGB range: 0/2 [ 890.121935][T20933] vivid-007: ================== END STATUS ================== [ 890.700770][T20959] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 891.280247][T20967] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2921'. [ 892.116755][T20981] futex_wake_op: syz.5.2924 tries to shift op by -2048; fix this program [ 892.183946][T20981] futex_wake_op: syz.5.2924 tries to shift op by -2048; fix this program [ 892.236936][T20981] 0x000000000001-0x000000020000 : "" [ 892.304838][T20981] ftl_cs: FTL header corrupt! [ 892.528469][T20982] ubi0: attaching mtd0 [ 892.611319][T20982] ubi0: scanning is finished [ 892.643102][T20982] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 892.799505][T20982] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 893.422432][T20995] FAULT_INJECTION: forcing a failure. [ 893.422432][T20995] name failslab, interval 1, probability 0, space 0, times 0 [ 893.458436][T20998] FAULT_INJECTION: forcing a failure. [ 893.458436][T20998] name failslab, interval 1, probability 0, space 0, times 0 [ 893.492023][T20995] CPU: 0 UID: 0 PID: 20995 Comm: syz.5.2929 Tainted: G L syzkaller #0 PREEMPT(full) [ 893.492050][T20995] Tainted: [L]=SOFTLOCKUP [ 893.492055][T20995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 893.492064][T20995] Call Trace: [ 893.492070][T20995] [ 893.492076][T20995] dump_stack_lvl+0x100/0x190 [ 893.492100][T20995] should_fail_ex.cold+0x5/0xa [ 893.492123][T20995] should_failslab+0xc2/0x120 [ 893.492144][T20995] kmem_cache_alloc_noprof+0x91/0x6a0 [ 893.492162][T20995] ? __pfx_acct_collect+0x10/0x10 [ 893.492182][T20995] ? taskstats_exit+0x6d3/0xca0 [ 893.492207][T20995] taskstats_exit+0x6d3/0xca0 [ 893.492227][T20995] ? __pfx_acct_update_integrals+0x10/0x10 [ 893.492249][T20995] ? __pfx_taskstats_exit+0x10/0x10 [ 893.492272][T20995] ? rcu_read_lock_any_held+0x6a/0xa0 [ 893.492295][T20995] do_exit+0x65c/0x2ae0 [ 893.492319][T20995] ? __pfx_do_exit+0x10/0x10 [ 893.492339][T20995] ? do_raw_spin_lock+0x128/0x260 [ 893.492356][T20995] ? find_held_lock+0x2b/0x80 [ 893.492375][T20995] ? get_signal+0x7e0/0x21e0 [ 893.492393][T20995] do_group_exit+0xd5/0x2a0 [ 893.492416][T20995] get_signal+0x1ec7/0x21e0 [ 893.492437][T20995] ? lookup_user_key+0x3f3/0x1300 [ 893.492462][T20995] ? __pfx_get_signal+0x10/0x10 [ 893.492480][T20995] ? do_futex+0x190/0x440 [ 893.492499][T20995] arch_do_signal_or_restart+0x91/0x7a0 [ 893.492515][T20995] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 893.492539][T20995] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 893.492564][T20995] exit_to_user_mode_loop+0x139/0x6f0 [ 893.492580][T20995] ? rcu_is_watching+0x12/0xc0 [ 893.492600][T20995] do_syscall_64+0x652/0x840 [ 893.492624][T20995] ? clear_bhb_loop+0x40/0x90 [ 893.492643][T20995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.492658][T20995] RIP: 0033:0x7fb9da59ce59 [ 893.492672][T20995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.492687][T20995] RSP: 002b:00007fb9db4910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 893.492702][T20995] RAX: fffffffffffffe00 RBX: 00007fb9da815fa8 RCX: 00007fb9da59ce59 [ 893.492712][T20995] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb9da815fa8 [ 893.492721][T20995] RBP: 00007fb9da815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 893.492730][T20995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.492739][T20995] R13: 00007fb9da816038 R14: 00007ffc8b867190 R15: 00007ffc8b867278 [ 893.492759][T20995] [ 893.809037][T20998] CPU: 0 UID: 0 PID: 20998 Comm: syz.0.2930 Tainted: G L syzkaller #0 PREEMPT(full) [ 893.809064][T20998] Tainted: [L]=SOFTLOCKUP [ 893.809070][T20998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 893.809080][T20998] Call Trace: [ 893.809087][T20998] [ 893.809093][T20998] dump_stack_lvl+0x100/0x190 [ 893.809118][T20998] should_fail_ex.cold+0x5/0xa [ 893.809139][T20998] should_failslab+0xc2/0x120 [ 893.809160][T20998] __kmalloc_noprof+0xfc/0x820 [ 893.809181][T20998] ? __register_sysctl_table+0xac/0x1650 [ 893.809199][T20998] ? __pfx_mpls_net_init+0x10/0x10 [ 893.809296][T20998] __register_sysctl_table+0xac/0x1650 [ 893.809312][T20998] ? is_module_address+0x5f/0xf0 [ 893.809332][T20998] ? __pfx___register_sysctl_table+0x10/0x10 [ 893.809347][T20998] ? is_module_address+0x69/0xf0 [ 893.809361][T20998] ? register_net_sysctl_sz+0x222/0x430 [ 893.809434][T20998] ? __asan_memcpy+0x3c/0x60 [ 893.809451][T20998] ? __pfx_mpls_net_init+0x10/0x10 [ 893.809468][T20998] mpls_net_init+0x21f/0x2e0 [ 893.809486][T20998] ops_init+0x1e2/0x5f0 [ 893.809512][T20998] setup_net+0x118/0x3a0 [ 893.809535][T20998] ? __pfx_setup_net+0x10/0x10 [ 893.809558][T20998] ? mutex_init_lockdep+0xf1/0x120 [ 893.809579][T20998] copy_net_ns+0x46f/0x7c0 [ 893.809603][T20998] create_new_namespaces+0x3ea/0xac0 [ 893.809627][T20998] unshare_nsproxy_namespaces+0xf2/0x220 [ 893.809646][T20998] ksys_unshare+0x438/0xab0 [ 893.809668][T20998] ? __pfx_ksys_unshare+0x10/0x10 [ 893.809699][T20998] __x64_sys_unshare+0x31/0x40 [ 893.809717][T20998] do_syscall_64+0x115/0x840 [ 893.809735][T20998] ? clear_bhb_loop+0x40/0x90 [ 893.809754][T20998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.809770][T20998] RIP: 0033:0x7f9aaed9ce59 [ 893.809784][T20998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.809799][T20998] RSP: 002b:00007f9aafce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 893.809815][T20998] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9ce59 [ 893.809825][T20998] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 893.809835][T20998] RBP: 00007f9aaee32e6f R08: 0000000000000000 R09: 0000000000000000 [ 893.809845][T20998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.809854][T20998] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff2bc3db18 [ 893.809875][T20998] [ 894.059659][T20971] Process accounting resumed [ 894.767747][T21005] hub 1-0:1.0: USB hub found [ 894.813928][T21005] hub 1-0:1.0: 1 port detected [ 895.187590][T21018] FAULT_INJECTION: forcing a failure. [ 895.187590][T21018] name fail_futex, interval 1, probability 0, space 0, times 0 [ 895.288165][T21018] CPU: 0 UID: 0 PID: 21018 Comm: syz.5.2936 Tainted: G L syzkaller #0 PREEMPT(full) [ 895.288192][T21018] Tainted: [L]=SOFTLOCKUP [ 895.288197][T21018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 895.288206][T21018] Call Trace: [ 895.288212][T21018] [ 895.288218][T21018] dump_stack_lvl+0x100/0x190 [ 895.288241][T21018] should_fail_ex.cold+0x5/0xa [ 895.288262][T21018] get_futex_key+0xf74/0x14f0 [ 895.288282][T21018] ? __pfx_get_futex_key+0x10/0x10 [ 895.288298][T21018] ? lock_acquire+0x1b9/0x370 [ 895.288327][T21018] futex_wake+0xf4/0x5e0 [ 895.288353][T21018] ? __pfx_futex_wake+0x10/0x10 [ 895.288373][T21018] ? find_held_lock+0x2b/0x80 [ 895.288391][T21018] ? exit_mm_release+0x19/0x30 [ 895.288414][T21018] do_futex+0x2b2/0x440 [ 895.288432][T21018] ? __pfx_do_futex+0x10/0x10 [ 895.288447][T21018] ? __might_fault+0xc5/0x140 [ 895.288467][T21018] mm_release+0x24a/0x2f0 [ 895.288484][T21018] do_exit+0x707/0x2ae0 [ 895.288508][T21018] ? __pfx_do_exit+0x10/0x10 [ 895.288528][T21018] ? do_raw_spin_lock+0x128/0x260 [ 895.288545][T21018] ? find_held_lock+0x2b/0x80 [ 895.288562][T21018] ? get_signal+0x7e0/0x21e0 [ 895.288582][T21018] do_group_exit+0xd5/0x2a0 [ 895.288604][T21018] get_signal+0x1ec7/0x21e0 [ 895.288627][T21018] ? __pfx_get_signal+0x10/0x10 [ 895.288645][T21018] ? do_futex+0x190/0x440 [ 895.288664][T21018] arch_do_signal_or_restart+0x91/0x7a0 [ 895.288680][T21018] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 895.288706][T21018] exit_to_user_mode_loop+0x139/0x6f0 [ 895.288722][T21018] ? rcu_is_watching+0x12/0xc0 [ 895.288742][T21018] do_syscall_64+0x652/0x840 [ 895.288759][T21018] ? clear_bhb_loop+0x40/0x90 [ 895.288778][T21018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 895.288794][T21018] RIP: 0033:0x7fb9da59ce59 [ 895.288807][T21018] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 895.288821][T21018] RSP: 002b:00007fb9db4910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 895.288837][T21018] RAX: fffffffffffffe00 RBX: 00007fb9da815fa8 RCX: 00007fb9da59ce59 [ 895.288847][T21018] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb9da815fa8 [ 895.288856][T21018] RBP: 00007fb9da815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 895.288865][T21018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 895.288874][T21018] R13: 00007fb9da816038 R14: 00007ffc8b867190 R15: 00007ffc8b867278 [ 895.288893][T21018] [ 896.100323][T21031] Process accounting resumed [ 896.135892][T21029] FAULT_INJECTION: forcing a failure. [ 896.135892][T21029] name failslab, interval 1, probability 0, space 0, times 0 [ 896.296105][T21029] CPU: 0 UID: 0 PID: 21029 Comm: syz.0.2938 Tainted: G L syzkaller #0 PREEMPT(full) [ 896.296134][T21029] Tainted: [L]=SOFTLOCKUP [ 896.296140][T21029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 896.296150][T21029] Call Trace: [ 896.296155][T21029] [ 896.296162][T21029] dump_stack_lvl+0x100/0x190 [ 896.296187][T21029] should_fail_ex.cold+0x5/0xa [ 896.296208][T21029] should_failslab+0xc2/0x120 [ 896.296228][T21029] kmem_cache_alloc_noprof+0x91/0x6a0 [ 896.296247][T21029] ? dup_fd+0x4d/0xd10 [ 896.296265][T21029] dup_fd+0x4d/0xd10 [ 896.296279][T21029] ? __pfx_get_nodes+0x10/0x10 [ 896.296303][T21029] __x64_sys_close_range+0x405/0x5d0 [ 896.296321][T21029] ? __pfx___x64_sys_close_range+0x10/0x10 [ 896.296343][T21029] do_syscall_64+0x115/0x840 [ 896.296360][T21029] ? clear_bhb_loop+0x40/0x90 [ 896.296378][T21029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.296393][T21029] RIP: 0033:0x7f9aaed9ce59 [ 896.296415][T21029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.296430][T21029] RSP: 002b:00007f9aafc9f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 896.296446][T21029] RAX: ffffffffffffffda RBX: 00007f9aaf016180 RCX: 00007f9aaed9ce59 [ 896.296457][T21029] RDX: 0004000000000002 RSI: fffffffffffff000 RDI: 0000000000000000 [ 896.296467][T21029] RBP: 00007f9aaee32e6f R08: 0000000000000000 R09: 0000000000000000 [ 896.296477][T21029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 896.296487][T21029] R13: 00007f9aaf016218 R14: 00007f9aaf016180 R15: 00007fff2bc3db18 [ 896.296507][T21029] [ 897.440717][T21043] vivid-007: ================= START STATUS ================= [ 897.483815][T21043] vivid-007: Generate PTS: true [ 897.511658][T21043] vivid-007: Generate SCR: true [ 897.564087][T21043] tpg source WxH: 320x240 (Y'CbCr) [ 897.608964][T21043] tpg field: 1 [ 897.615396][T21048] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2941'. [ 897.643967][T21043] tpg crop: (0,0)/320x240 [ 897.671307][T21043] tpg compose: (0,0)/320x240 [ 897.704201][T21043] tpg colorspace: 8 [ 897.726507][T21043] tpg transfer function: 0/0 [ 897.752092][T21043] tpg Y'CbCr encoding: 0/0 [ 897.776720][T21043] tpg quantization: 0/0 [ 897.811895][T21043] tpg RGB range: 0/2 [ 897.818481][T21029] Process accounting resumed [ 897.846610][T21043] vivid-007: ================== END STATUS ================== [ 898.983491][T21044] Process accounting resumed [ 899.762406][T21101] vivid-007: ================= START STATUS ================= [ 899.818063][T21101] vivid-007: Generate PTS: true [ 899.841983][T21101] vivid-007: Generate SCR: true [ 899.880139][T21101] tpg source WxH: 320x240 (Y'CbCr) [ 899.916773][T21101] tpg field: 1 [ 899.972539][T21101] tpg crop: (0,0)/320x240 [ 900.036047][T21101] tpg compose: (0,0)/320x240 [ 900.062607][T21101] tpg colorspace: 8 [ 900.093063][T21101] tpg transfer function: 0/0 [ 900.133169][T21101] tpg Y'CbCr encoding: 0/0 [ 900.157648][T21101] tpg quantization: 0/0 [ 900.179897][T21101] tpg RGB range: 0/2 [ 900.211128][T21101] vivid-007: ================== END STATUS ================== [ 900.895817][T21128] hub 1-0:1.0: USB hub found [ 900.938172][T21128] hub 1-0:1.0: 1 port detected [ 901.061644][T21124] hub 1-0:1.0: USB hub found [ 901.121708][T21124] hub 1-0:1.0: 1 port detected [ 901.820283][T21152] vivid-007: ================= START STATUS ================= [ 901.846700][T21152] vivid-007: Generate PTS: true [ 901.862615][T21152] vivid-007: Generate SCR: true [ 901.881107][T21152] tpg source WxH: 320x240 (Y'CbCr) [ 901.896508][T21152] tpg field: 1 [ 901.910291][T21152] tpg crop: (0,0)/320x240 [ 901.925118][T21152] tpg compose: (0,0)/320x240 [ 901.940546][T21152] tpg colorspace: 8 [ 901.955451][T21152] tpg transfer function: 0/0 [ 901.979715][T21152] tpg Y'CbCr encoding: 0/0 [ 901.995450][T21152] tpg quantization: 0/0 [ 902.008822][T21152] tpg RGB range: 0/2 [ 902.022135][T21152] vivid-007: ================== END STATUS ================== [ 902.246415][T21159] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2966'. [ 904.134012][T21194] vivid-007: ================= START STATUS ================= [ 904.185574][T21194] vivid-007: Generate PTS: true [ 904.207634][T21194] vivid-007: Generate SCR: true [ 904.228110][T21194] tpg source WxH: 320x240 (Y'CbCr) [ 904.254484][T21194] tpg field: 1 [ 904.268993][T21194] tpg crop: (0,0)/320x240 [ 904.285544][T21194] tpg compose: (0,0)/320x240 [ 904.311560][T21194] tpg colorspace: 8 [ 904.324339][T21194] tpg transfer function: 0/0 [ 904.339610][T21194] tpg Y'CbCr encoding: 0/0 [ 904.353597][T21194] tpg quantization: 0/0 [ 904.368222][T21194] tpg RGB range: 0/2 [ 904.381644][T21194] vivid-007: ================== END STATUS ================== [ 904.619390][T21209] random: crng reseeded on system resumption [ 904.811632][ T30] audit: type=1800 audit(8277292148.787:42): pid=21216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2973" name="version" dev="configfs" ino=92048 res=0 errno=0 [ 905.730836][T21236] vivid-007: ================= START STATUS ================= [ 905.765849][T21236] vivid-007: Generate PTS: true [ 905.790343][T21236] vivid-007: Generate SCR: true [ 905.829061][T21236] tpg source WxH: 320x240 (Y'CbCr) [ 905.858209][T21236] tpg field: 1 [ 905.873639][T21236] tpg crop: (0,0)/320x240 [ 905.912941][T21236] tpg compose: (0,0)/320x240 [ 905.938124][T21236] tpg colorspace: 8 [ 905.956334][T21236] tpg transfer function: 0/0 [ 905.980625][T21236] tpg Y'CbCr encoding: 0/0 [ 906.001234][T21236] tpg quantization: 0/0 [ 906.021041][T21236] tpg RGB range: 0/2 [ 906.044338][T21236] vivid-007: ================== END STATUS ================== [ 906.057484][T21241] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 906.256381][T21241] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 906.423190][T21241] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 906.437332][T21232] FAULT_INJECTION: forcing a failure. [ 906.437332][T21232] name failslab, interval 1, probability 0, space 0, times 0 [ 906.475604][T21241] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 906.562386][T21232] CPU: 0 UID: 0 PID: 21232 Comm: syz.6.2983 Tainted: G L syzkaller #0 PREEMPT(full) [ 906.562414][T21232] Tainted: [L]=SOFTLOCKUP [ 906.562421][T21232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 906.562430][T21232] Call Trace: [ 906.562436][T21232] [ 906.562443][T21232] dump_stack_lvl+0x100/0x190 [ 906.562469][T21232] should_fail_ex.cold+0x5/0xa [ 906.562489][T21232] should_failslab+0xc2/0x120 [ 906.562510][T21232] __kmalloc_cache_noprof+0x91/0x6c0 [ 906.562526][T21232] ? apparmor_capable+0x1d7/0x4d0 [ 906.562550][T21232] ? fsnotify_alloc_group+0x8d/0x320 [ 906.562571][T21232] fsnotify_alloc_group+0x8d/0x320 [ 906.562589][T21232] __do_sys_fanotify_init+0x271/0xe30 [ 906.562615][T21232] do_syscall_64+0x115/0x840 [ 906.562633][T21232] ? clear_bhb_loop+0x40/0x90 [ 906.562651][T21232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 906.562666][T21232] RIP: 0033:0x7fc15c19ce59 [ 906.562680][T21232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 906.562694][T21232] RSP: 002b:00007fc15cfab028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 906.562709][T21232] RAX: ffffffffffffffda RBX: 00007fc15c416090 RCX: 00007fc15c19ce59 [ 906.562719][T21232] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00000000000004f1 [ 906.562728][T21232] RBP: 00007fc15c232e6f R08: 0000000000000000 R09: 0000000000000000 [ 906.562737][T21232] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 906.562746][T21232] R13: 00007fc15c416128 R14: 00007fc15c416090 R15: 00007fffbf3ff808 [ 906.562766][T21232] [ 906.913434][T21241] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 906.942005][T21241] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 907.791129][T21262] random: crng reseeded on system resumption [ 909.254034][T21239] Process accounting paused [ 909.381743][T21288] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 909.419544][T21288] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 909.525935][T21297] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 912.184834][T21335] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3012'. [ 913.188756][T21344] FAULT_INJECTION: forcing a failure. [ 913.188756][T21344] name fail_futex, interval 1, probability 0, space 0, times 0 [ 913.234001][T21344] CPU: 0 UID: 8 PID: 21344 Comm: syz.5.3015 Tainted: G L syzkaller #0 PREEMPT(full) [ 913.234028][T21344] Tainted: [L]=SOFTLOCKUP [ 913.234034][T21344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 913.234044][T21344] Call Trace: [ 913.234050][T21344] [ 913.234057][T21344] dump_stack_lvl+0x100/0x190 [ 913.234084][T21344] should_fail_ex.cold+0x5/0xa [ 913.234106][T21344] get_futex_key+0x1d2/0x14f0 [ 913.234126][T21344] ? __pfx_get_futex_key+0x10/0x10 [ 913.234141][T21344] ? kasan_save_stack+0x3f/0x50 [ 913.234160][T21344] ? kasan_save_stack+0x30/0x50 [ 913.234178][T21344] ? kasan_record_aux_stack+0xa7/0xc0 [ 913.234192][T21344] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 913.234209][T21344] ? __put_cred+0x10c/0x180 [ 913.234230][T21344] ? keyctl_session_to_parent+0x95a/0xae0 [ 913.234253][T21344] ? __do_sys_keyctl+0x2b1/0x5a0 [ 913.234273][T21344] ? do_syscall_64+0x115/0x840 [ 913.234293][T21344] futex_wake+0xf4/0x5e0 [ 913.234315][T21344] ? __pfx_futex_wake+0x10/0x10 [ 913.234342][T21344] do_futex+0x2b2/0x440 [ 913.234359][T21344] ? __pfx_do_futex+0x10/0x10 [ 913.234381][T21344] __x64_sys_futex+0x34f/0x4d0 [ 913.234401][T21344] ? __pfx___x64_sys_futex+0x10/0x10 [ 913.234417][T21344] ? __put_cred+0x111/0x180 [ 913.234438][T21344] ? keyctl_session_to_parent+0x39a/0xae0 [ 913.234465][T21344] do_syscall_64+0x115/0x840 [ 913.234482][T21344] ? clear_bhb_loop+0x40/0x90 [ 913.234501][T21344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.234516][T21344] RIP: 0033:0x7fb9da59ce59 [ 913.234531][T21344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.234544][T21344] RSP: 002b:00007fb9db4910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 913.234559][T21344] RAX: ffffffffffffffda RBX: 00007fb9da815fa8 RCX: 00007fb9da59ce59 [ 913.234569][T21344] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb9da815fac [ 913.234579][T21344] RBP: 00007fb9da815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 913.234588][T21344] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 913.234597][T21344] R13: 00007fb9da816038 R14: 00007ffc8b867190 R15: 00007ffc8b867278 [ 913.234616][T21344] [ 913.615052][T21349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 914.973326][T21373] FAULT_INJECTION: forcing a failure. [ 914.973326][T21373] name failslab, interval 1, probability 0, space 0, times 0 [ 915.007405][T21373] CPU: 0 UID: 8 PID: 21373 Comm: syz.0.3022 Tainted: G L syzkaller #0 PREEMPT(full) [ 915.007433][T21373] Tainted: [L]=SOFTLOCKUP [ 915.007439][T21373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 915.007457][T21373] Call Trace: [ 915.007463][T21373] [ 915.007470][T21373] dump_stack_lvl+0x100/0x190 [ 915.007494][T21373] should_fail_ex.cold+0x5/0xa [ 915.007514][T21373] should_failslab+0xc2/0x120 [ 915.007536][T21373] kmem_cache_alloc_noprof+0x91/0x6a0 [ 915.007555][T21373] ? cred_alloc_blank+0x1c/0xa0 [ 915.007586][T21373] cred_alloc_blank+0x1c/0xa0 [ 915.007612][T21373] keyctl_session_to_parent+0x55/0xae0 [ 915.007638][T21373] __do_sys_keyctl+0x2b1/0x5a0 [ 915.007661][T21373] do_syscall_64+0x115/0x840 [ 915.007678][T21373] ? clear_bhb_loop+0x40/0x90 [ 915.007696][T21373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.007712][T21373] RIP: 0033:0x7f9aaed9ce59 [ 915.007727][T21373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.007741][T21373] RSP: 002b:00007f9aafce1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 915.007757][T21373] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9ce59 [ 915.007768][T21373] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 915.007778][T21373] RBP: 00007f9aaee32e6f R08: 0000000000000001 R09: 0000000000000000 [ 915.007787][T21373] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 915.007796][T21373] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff2bc3db18 [ 915.007815][T21373] [ 915.496125][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3026'. [ 915.705139][T21377] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 915.714236][T21377] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 915.767886][T21377] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 915.801493][T21377] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 915.945661][T21394] FAULT_INJECTION: forcing a failure. [ 915.945661][T21394] name failslab, interval 1, probability 0, space 0, times 0 [ 916.031355][T21394] CPU: 0 UID: 8 PID: 21394 Comm: syz.6.3028 Tainted: G L syzkaller #0 PREEMPT(full) [ 916.031382][T21394] Tainted: [L]=SOFTLOCKUP [ 916.031388][T21394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 916.031398][T21394] Call Trace: [ 916.031405][T21394] [ 916.031412][T21394] dump_stack_lvl+0x100/0x190 [ 916.031436][T21394] should_fail_ex.cold+0x5/0xa [ 916.031458][T21394] should_failslab+0xc2/0x120 [ 916.031486][T21394] kmem_cache_alloc_noprof+0x91/0x6a0 [ 916.031507][T21394] ? cred_alloc_blank+0x1c/0xa0 [ 916.031535][T21394] cred_alloc_blank+0x1c/0xa0 [ 916.031558][T21394] keyctl_session_to_parent+0x55/0xae0 [ 916.031584][T21394] __do_sys_keyctl+0x2b1/0x5a0 [ 916.031606][T21394] do_syscall_64+0x115/0x840 [ 916.031623][T21394] ? clear_bhb_loop+0x40/0x90 [ 916.031642][T21394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 916.031658][T21394] RIP: 0033:0x7fc15c19ce59 [ 916.031672][T21394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 916.031686][T21394] RSP: 002b:00007fc15cfcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 916.031701][T21394] RAX: ffffffffffffffda RBX: 00007fc15c415fa0 RCX: 00007fc15c19ce59 [ 916.031711][T21394] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 916.031721][T21394] RBP: 00007fc15c232e6f R08: 0000000000000001 R09: 0000000000000000 [ 916.031730][T21394] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 916.031740][T21394] R13: 00007fc15c416038 R14: 00007fc15c415fa0 R15: 00007fffbf3ff808 [ 916.031759][T21394] [ 916.341976][T21400] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3030'. [ 916.678185][T21404] binder: 21401:21404 ioctl c0306201 200000000000 returned -14 [ 917.403881][T21403] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 917.439578][T21403] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 917.494597][T21403] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 917.520168][T21403] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 918.136802][T21431] zswap: compressor not available [ 918.695205][T17643] Bluetooth: hci1: command 0x0c1a tx timeout [ 919.494680][T17643] Bluetooth: hci4: command 0x0c1a tx timeout [ 919.576069][T17643] Bluetooth: hci3: command 0x0c1a tx timeout [ 919.582137][T17787] Bluetooth: hci2: command 0x0c1a tx timeout [ 920.364575][T17643] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 920.382594][T21484] FAULT_INJECTION: forcing a failure. [ 920.382594][T21484] name fail_futex, interval 1, probability 0, space 0, times 0 [ 920.447426][T21484] CPU: 0 UID: 8 PID: 21484 Comm: syz.5.3051 Tainted: G L syzkaller #0 PREEMPT(full) [ 920.447456][T21484] Tainted: [L]=SOFTLOCKUP [ 920.447462][T21484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 920.447471][T21484] Call Trace: [ 920.447477][T21484] [ 920.447484][T21484] dump_stack_lvl+0x100/0x190 [ 920.447509][T21484] should_fail_ex.cold+0x5/0xa [ 920.447530][T21484] get_futex_key+0x1d2/0x14f0 [ 920.447547][T21484] ? __pfx_get_futex_key+0x10/0x10 [ 920.447563][T21484] ? kasan_save_stack+0x3f/0x50 [ 920.447582][T21484] ? kasan_save_stack+0x30/0x50 [ 920.447599][T21484] ? kasan_record_aux_stack+0xa7/0xc0 [ 920.447613][T21484] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 920.447629][T21484] ? __put_cred+0x10c/0x180 [ 920.447650][T21484] ? keyctl_session_to_parent+0x95a/0xae0 [ 920.447672][T21484] ? __do_sys_keyctl+0x2b1/0x5a0 [ 920.447692][T21484] ? do_syscall_64+0x115/0x840 [ 920.447712][T21484] futex_wake+0xf4/0x5e0 [ 920.447734][T21484] ? __pfx_futex_wake+0x10/0x10 [ 920.447761][T21484] do_futex+0x2b2/0x440 [ 920.447782][T21484] ? __pfx_do_futex+0x10/0x10 [ 920.447804][T21484] __x64_sys_futex+0x34f/0x4d0 [ 920.447824][T21484] ? __pfx___x64_sys_futex+0x10/0x10 [ 920.447840][T21484] ? __put_cred+0x111/0x180 [ 920.447861][T21484] ? keyctl_session_to_parent+0x39a/0xae0 [ 920.447889][T21484] do_syscall_64+0x115/0x840 [ 920.447905][T21484] ? clear_bhb_loop+0x40/0x90 [ 920.447931][T21484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.447947][T21484] RIP: 0033:0x7fb9da59ce59 [ 920.447962][T21484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.447978][T21484] RSP: 002b:00007fb9db4910e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 920.447993][T21484] RAX: ffffffffffffffda RBX: 00007fb9da815fa8 RCX: 00007fb9da59ce59 [ 920.448004][T21484] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb9da815fac [ 920.448013][T21484] RBP: 00007fb9da815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 920.448023][T21484] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 920.448033][T21484] R13: 00007fb9da816038 R14: 00007ffc8b867190 R15: 00007ffc8b867278 [ 920.448053][T21484] [ 923.293916][T21526] vhci_hcd: not connected 4 [ 924.059933][T21532] Process accounting paused [ 924.253968][T21550] netlink: 'syz.3.3066': attribute type 22 has an invalid length. [ 924.307716][T21550] netlink: 330 bytes leftover after parsing attributes in process `syz.3.3066'. [ 924.465025][T21550] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3066'. [ 924.523655][T21550] macvlan0: entered promiscuous mode [ 924.542363][T21550] macvlan0: entered allmulticast mode [ 924.569597][T21550] veth1_vlan: entered allmulticast mode [ 927.984778][T21618] Process accounting paused [ 928.624411][T21632] FAULT_INJECTION: forcing a failure. [ 928.624411][T21632] name failslab, interval 1, probability 0, space 0, times 0 [ 928.779145][T21632] CPU: 0 UID: 8 PID: 21632 Comm: syz.0.3081 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.779173][T21632] Tainted: [L]=SOFTLOCKUP [ 928.779179][T21632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 928.779189][T21632] Call Trace: [ 928.779195][T21632] [ 928.779202][T21632] dump_stack_lvl+0x100/0x190 [ 928.779227][T21632] should_fail_ex.cold+0x5/0xa [ 928.779248][T21632] should_failslab+0xc2/0x120 [ 928.779269][T21632] kmem_cache_alloc_noprof+0x91/0x6a0 [ 928.779289][T21632] ? cred_alloc_blank+0x1c/0xa0 [ 928.779315][T21632] cred_alloc_blank+0x1c/0xa0 [ 928.779338][T21632] keyctl_session_to_parent+0x55/0xae0 [ 928.779364][T21632] __do_sys_keyctl+0x2b1/0x5a0 [ 928.779387][T21632] do_syscall_64+0x115/0x840 [ 928.779407][T21632] ? clear_bhb_loop+0x40/0x90 [ 928.779425][T21632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.779441][T21632] RIP: 0033:0x7f9aaed9ce59 [ 928.779455][T21632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.779469][T21632] RSP: 002b:00007f9aafce1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 928.779488][T21632] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9ce59 [ 928.779498][T21632] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 928.779509][T21632] RBP: 00007f9aaee32e6f R08: 0000000000000001 R09: 0000000000000000 [ 928.779518][T21632] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 928.779527][T21632] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff2bc3db18 [ 928.779547][T21632] [ 929.691429][T21634] FAULT_INJECTION: forcing a failure. [ 929.691429][T21634] name failslab, interval 1, probability 0, space 0, times 0 [ 929.744112][T21634] CPU: 0 UID: 0 PID: 21634 Comm: syz.3.3082 Tainted: G L syzkaller #0 PREEMPT(full) [ 929.744140][T21634] Tainted: [L]=SOFTLOCKUP [ 929.744146][T21634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 929.744157][T21634] Call Trace: [ 929.744163][T21634] [ 929.744176][T21634] dump_stack_lvl+0x100/0x190 [ 929.744201][T21634] should_fail_ex.cold+0x5/0xa [ 929.744223][T21634] should_failslab+0xc2/0x120 [ 929.744244][T21634] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 929.744263][T21634] ? kasan_save_free_info+0x3b/0x70 [ 929.744277][T21634] ? __kasan_slab_free+0x5f/0x80 [ 929.744295][T21634] ? kfree+0x22b/0x6c0 [ 929.744308][T21634] ? __d_alloc+0x35/0xa50 [ 929.744329][T21634] __d_alloc+0x35/0xa50 [ 929.744347][T21634] d_alloc_parallel+0x105/0x14b0 [ 929.744375][T21634] ? __pfx_d_alloc_parallel+0x10/0x10 [ 929.744396][T21634] ? __pfx___might_resched+0x10/0x10 [ 929.744419][T21634] ? try_to_unlazy+0x296/0x910 [ 929.744442][T21634] ? down_read+0x13b/0x4c0 [ 929.744463][T21634] ? __pfx_down_read+0x10/0x10 [ 929.744483][T21634] __lookup_slow+0x98/0x320 [ 929.744504][T21634] lookup_slow+0x50/0x70 [ 929.744524][T21634] link_path_walk+0x1377/0x1cc0 [ 929.744554][T21634] path_openat+0x1c9/0x4280 [ 929.744569][T21634] ? __kasan_slab_alloc+0x89/0x90 [ 929.744588][T21634] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 929.744605][T21634] ? do_getname+0x35/0x390 [ 929.744622][T21634] ? __x64_sys_openat+0x12d/0x210 [ 929.744647][T21634] ? __pfx_path_openat+0x10/0x10 [ 929.744668][T21634] do_file_open+0x20e/0x430 [ 929.744684][T21634] ? __pfx_do_file_open+0x10/0x10 [ 929.744706][T21634] ? __pfx_kfree_link+0x10/0x10 [ 929.744733][T21634] ? alloc_fd+0x471/0x7a0 [ 929.744749][T21634] ? do_getname+0x191/0x390 [ 929.744769][T21634] do_sys_openat2+0x10f/0x1e0 [ 929.744789][T21634] ? __pfx_do_sys_openat2+0x10/0x10 [ 929.744810][T21634] ? __fget_files+0x21f/0x3d0 [ 929.744837][T21634] __x64_sys_openat+0x12d/0x210 [ 929.744857][T21634] ? __pfx___x64_sys_openat+0x10/0x10 [ 929.744884][T21634] do_syscall_64+0x115/0x840 [ 929.744900][T21634] ? clear_bhb_loop+0x40/0x90 [ 929.744919][T21634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.744935][T21634] RIP: 0033:0x7fbbd419ce59 [ 929.744949][T21634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.744964][T21634] RSP: 002b:00007fbbd50f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 929.744980][T21634] RAX: ffffffffffffffda RBX: 00007fbbd4415fa0 RCX: 00007fbbd419ce59 [ 929.744990][T21634] RDX: 0000000000000080 RSI: 0000200000002c80 RDI: ffffffffffffff9c [ 929.745001][T21634] RBP: 00007fbbd4232e6f R08: 0000000000000000 R09: 0000000000000000 [ 929.745011][T21634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.745020][T21634] R13: 00007fbbd4416038 R14: 00007fbbd4415fa0 R15: 00007ffc60d80768 [ 929.745041][T21634] [ 930.045525][T21604] Process accounting paused [ 930.436109][ T30] audit: type=1804 audit(1843104522.101:43): pid=21634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3082" name="/newroot/174/file0" dev="tmpfs" ino=939 res=1 errno=0 [ 931.114168][T21645] vhci_hcd: not connected 4 [ 931.364075][T21671] vivid-007: ================= START STATUS ================= [ 931.426536][T21671] vivid-007: Generate PTS: true [ 931.445192][T21671] vivid-007: Generate SCR: true [ 931.514161][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.521895][T21671] tpg source WxH: 320x240 (Y'CbCr) [ 931.533065][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.559838][T21671] tpg field: 1 [ 931.579988][T21671] tpg crop: (0,0)/320x240 [ 931.595890][T21671] tpg compose: (0,0)/320x240 [ 931.608207][T21671] tpg colorspace: 8 [ 931.621789][T21671] tpg transfer function: 0/0 [ 931.636573][T21671] tpg Y'CbCr encoding: 0/0 [ 931.653518][T21671] tpg quantization: 0/0 [ 931.666727][T21671] tpg RGB range: 0/2 [ 931.679985][T21671] vivid-007: ================== END STATUS ================== [ 931.794763][T21679] vivid-007: ================= START STATUS ================= [ 931.836135][T21679] vivid-007: Generate PTS: true [ 931.863594][T21679] vivid-007: Generate SCR: true [ 931.912150][T21679] tpg source WxH: 320x240 (Y'CbCr) [ 931.940002][T21679] tpg field: 1 [ 931.953752][T21679] tpg crop: (0,0)/320x240 [ 931.980313][T21679] tpg compose: (0,0)/320x240 [ 931.995283][T21679] tpg colorspace: 8 [ 932.013657][T21679] tpg transfer function: 0/0 [ 932.034364][T21679] tpg Y'CbCr encoding: 0/0 [ 932.055292][T21679] tpg quantization: 0/0 [ 932.071297][T21679] tpg RGB range: 0/2 [ 932.090271][T21679] vivid-007: ================== END STATUS ================== [ 932.876035][T21706] FAULT_INJECTION: forcing a failure. [ 932.876035][T21706] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 933.086019][T21706] CPU: 0 UID: 0 PID: 21706 Comm: syz.0.3097 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.086047][T21706] Tainted: [L]=SOFTLOCKUP [ 933.086053][T21706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 933.086062][T21706] Call Trace: [ 933.086069][T21706] [ 933.086075][T21706] dump_stack_lvl+0x100/0x190 [ 933.086100][T21706] should_fail_ex.cold+0x5/0xa [ 933.086118][T21706] ? prepare_alloc_pages+0x16d/0x5f0 [ 933.086142][T21706] should_fail_alloc_page+0xeb/0x140 [ 933.086164][T21706] prepare_alloc_pages+0x1f0/0x5f0 [ 933.086185][T21706] ? rcu_is_watching+0x12/0xc0 [ 933.086206][T21706] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 933.086232][T21706] ? find_held_lock+0x2b/0x80 [ 933.086251][T21706] ? rcu_read_unlock+0x17/0x60 [ 933.086273][T21706] ? rcu_read_unlock+0x17/0x60 [ 933.086295][T21706] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 933.086313][T21706] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 933.086332][T21706] ? rcu_is_watching+0x12/0xc0 [ 933.086350][T21706] ? trace_mm_page_alloc+0x164/0x1c0 [ 933.086371][T21706] ? __alloc_frozen_pages_noprof+0x2d1/0x2dc0 [ 933.086393][T21706] ? __lock_acquire+0x49f/0x1a40 [ 933.086414][T21706] ? __css_rstat_updated+0x1ce/0x5a0 [ 933.086440][T21706] ? __lock_acquire+0x49f/0x1a40 [ 933.086461][T21706] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 933.086484][T21706] ? policy_nodemask+0xed/0x4f0 [ 933.086506][T21706] alloc_pages_mpol+0x1fb/0x540 [ 933.086528][T21706] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 933.086549][T21706] ? find_held_lock+0x2b/0x80 [ 933.086567][T21706] ? __pud_alloc+0x4f6/0x690 [ 933.086587][T21706] ? __pud_alloc+0x4f6/0x690 [ 933.086609][T21706] alloc_pages_noprof+0x1a/0x160 [ 933.086633][T21706] __pmd_alloc+0x3b/0x950 [ 933.086653][T21706] ? __pud_alloc+0x4fb/0x690 [ 933.086675][T21706] walk_to_pmd+0x3a3/0x4c0 [ 933.086698][T21706] get_locked_pte+0x25/0xc0 [ 933.086721][T21706] map_ldt_struct+0x3c1/0xa70 [ 933.086748][T21706] ? __pfx_map_ldt_struct+0x10/0x10 [ 933.086770][T21706] ? alloc_pages_noprof+0xf9/0x160 [ 933.086805][T21706] write_ldt+0x6d3/0xd40 [ 933.086830][T21706] ? __pfx_write_ldt+0x10/0x10 [ 933.086853][T21706] ? xfd_validate_state+0x129/0x190 [ 933.086879][T21706] __x64_sys_modify_ldt+0xb1/0x170 [ 933.086902][T21706] do_syscall_64+0x115/0x840 [ 933.086919][T21706] ? clear_bhb_loop+0x40/0x90 [ 933.086938][T21706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.086953][T21706] RIP: 0033:0x7f9aaed9ce59 [ 933.086969][T21706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.086984][T21706] RSP: 002b:00007f9aafce1028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 933.087000][T21706] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9ce59 [ 933.087011][T21706] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 933.087021][T21706] RBP: 00007f9aaee32e6f R08: 0000000000000000 R09: 0000000000000000 [ 933.087031][T21706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.087041][T21706] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff2bc3db18 [ 933.087062][T21706] [ 934.232940][T21722] vivid-007: ================= START STATUS ================= [ 934.248924][T21722] vivid-007: Generate PTS: true [ 934.277755][T21722] vivid-007: Generate SCR: true [ 934.292431][T21722] tpg source WxH: 320x240 (Y'CbCr) [ 934.305907][T21722] tpg field: 1 [ 934.313621][T21722] tpg crop: (0,0)/320x240 [ 934.323379][T21722] tpg compose: (0,0)/320x240 [ 934.349383][T21722] tpg colorspace: 8 [ 934.369673][T21722] tpg transfer function: 0/0 [ 934.396000][T21722] tpg Y'CbCr encoding: 0/0 [ 934.405427][T21722] tpg quantization: 0/0 [ 934.414532][T21722] tpg RGB range: 0/2 [ 934.423313][T21722] vivid-007: ================== END STATUS ================== [ 934.735963][T21728] netlink: 345 bytes leftover after parsing attributes in process `syz.6.3102'. [ 934.865557][T21735] vivid-011: ================= START STATUS ================= [ 934.893998][T21735] vivid-011: Radio HW Seek Mode: Bounded [ 934.912129][T21735] vivid-011: Radio Programmable HW Seek: false [ 934.933013][T21735] vivid-011: RDS Rx I/O Mode: Block I/O [ 934.953864][T21735] vivid-011: Generate RBDS Instead of RDS: false [ 934.973523][T21735] vivid-011: RDS Reception: true [ 934.992097][T21735] vivid-011: RDS Program Type: 0 inactive [ 935.019165][T21735] vivid-011: RDS PS Name: inactive [ 935.037551][T21735] vivid-011: RDS Radio Text: inactive [ 935.055239][T21735] vivid-011: RDS Traffic Announcement: false inactive [ 935.092250][T21735] vivid-011: RDS Traffic Program: false inactive [ 935.143201][T21735] vivid-011: RDS Music: false inactive [ 935.179779][T21735] vivid-011: ================== END STATUS ================== [ 935.966571][T17643] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 936.591070][T21768] FAULT_INJECTION: forcing a failure. [ 936.591070][T21768] name failslab, interval 1, probability 0, space 0, times 0 [ 936.650427][T21768] CPU: 0 UID: 8 PID: 21768 Comm: syz.6.3108 Tainted: G L syzkaller #0 PREEMPT(full) [ 936.650457][T21768] Tainted: [L]=SOFTLOCKUP [ 936.650463][T21768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 936.650473][T21768] Call Trace: [ 936.650479][T21768] [ 936.650486][T21768] dump_stack_lvl+0x100/0x190 [ 936.650511][T21768] should_fail_ex.cold+0x5/0xa [ 936.650532][T21768] should_failslab+0xc2/0x120 [ 936.650553][T21768] kmem_cache_alloc_noprof+0x91/0x6a0 [ 936.650573][T21768] ? cred_alloc_blank+0x1c/0xa0 [ 936.650599][T21768] cred_alloc_blank+0x1c/0xa0 [ 936.650622][T21768] keyctl_session_to_parent+0x55/0xae0 [ 936.650648][T21768] __do_sys_keyctl+0x2b1/0x5a0 [ 936.650671][T21768] do_syscall_64+0x115/0x840 [ 936.650689][T21768] ? clear_bhb_loop+0x40/0x90 [ 936.650708][T21768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.650724][T21768] RIP: 0033:0x7fc15c19ce59 [ 936.650738][T21768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 936.650753][T21768] RSP: 002b:00007fc15cfcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 936.650768][T21768] RAX: ffffffffffffffda RBX: 00007fc15c415fa0 RCX: 00007fc15c19ce59 [ 936.650778][T21768] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 936.650788][T21768] RBP: 00007fc15c232e6f R08: 0000000000000001 R09: 0000000000000000 [ 936.650798][T21768] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 936.650808][T21768] R13: 00007fc15c416038 R14: 00007fc15c415fa0 R15: 00007fffbf3ff808 [ 936.650828][T21768] [ 937.353499][T21786] vivid-007: ================= START STATUS ================= [ 937.389259][T21786] vivid-007: Generate PTS: true [ 937.409588][T21786] vivid-007: Generate SCR: true [ 937.436317][T21786] tpg source WxH: 320x240 (Y'CbCr) [ 937.487923][T21786] tpg field: 1 [ 937.507176][T21786] tpg crop: (0,0)/320x240 [ 937.546046][T21786] tpg compose: (0,0)/320x240 [ 937.571290][T21786] tpg colorspace: 8 [ 937.590265][T21786] tpg transfer function: 0/0 [ 937.618554][T21786] tpg Y'CbCr encoding: 0/0 [ 937.641430][T21786] tpg quantization: 0/0 [ 937.677581][T21786] tpg RGB range: 0/2 [ 937.701623][T21786] vivid-007: ================== END STATUS ================== [ 938.401619][T21809] Setting dangerous option i915.mitigations - tainting kernel [ 939.697115][T21828] FAULT_INJECTION: forcing a failure. [ 939.697115][T21828] name failslab, interval 1, probability 0, space 0, times 0 [ 939.752225][T21802] Process accounting resumed [ 939.761568][T21828] CPU: 0 UID: 0 PID: 21828 Comm: syz.3.3121 Tainted: G U L syzkaller #0 PREEMPT(full) [ 939.761596][T21828] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 939.761603][T21828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 939.761613][T21828] Call Trace: [ 939.761619][T21828] [ 939.761625][T21828] dump_stack_lvl+0x100/0x190 [ 939.761650][T21828] should_fail_ex.cold+0x5/0xa [ 939.761671][T21828] should_failslab+0xc2/0x120 [ 939.761695][T21828] kmem_cache_alloc_noprof+0x91/0x6a0 [ 939.761715][T21828] ? __thp_vma_allowable_orders+0x1d9/0xf00 [ 939.761739][T21828] ? ptlock_alloc+0x1f/0x70 [ 939.761756][T21828] ptlock_alloc+0x1f/0x70 [ 939.761771][T21828] pte_alloc_one+0x82/0x3d0 [ 939.761796][T21828] do_fault+0x86c/0x1750 [ 939.761816][T21828] ? __pmd_alloc+0x3fb/0x950 [ 939.761839][T21828] __handle_mm_fault+0x187d/0x2a00 [ 939.761858][T21828] ? mt_find+0x45e/0x8e0 [ 939.761880][T21828] ? __pfx___handle_mm_fault+0x10/0x10 [ 939.761894][T21828] ? __pfx_mt_find+0x10/0x10 [ 939.761924][T21828] ? find_vma+0xbf/0x140 [ 939.761942][T21828] ? __pfx_find_vma+0x10/0x10 [ 939.761963][T21828] handle_mm_fault+0x37b/0xa30 [ 939.761983][T21828] do_user_addr_fault+0x74c/0x12f0 [ 939.762010][T21828] exc_page_fault+0x6f/0xd0 [ 939.762028][T21828] asm_exc_page_fault+0x26/0x30 [ 939.762043][T21828] RIP: 0010:rep_movs_alternative+0x30/0xa0 [ 939.762067][T21828] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 bd 9d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 939.762082][T21828] RSP: 0018:ffffc9000552fb78 EFLAGS: 00050212 [ 939.762094][T21828] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000022 [ 939.762104][T21828] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc9000552fbd8 [ 939.762113][T21828] RBP: 0000000000000022 R08: 0000000000000001 R09: fffff52000aa5f7f [ 939.762122][T21828] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000000 [ 939.762131][T21828] R13: ffffc9000552fbd8 R14: ffffc9000552fca0 R15: ffffc9000552fbd8 [ 939.762151][T21828] _copy_from_user+0x98/0xd0 [ 939.762180][T21828] kstrtouint_from_user+0xd6/0x1d0 [ 939.762203][T21828] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 939.762225][T21828] ? __lock_acquire+0x49f/0x1a40 [ 939.762258][T21828] proc_fail_nth_write+0x83/0x220 [ 939.762280][T21828] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 939.762305][T21828] vfs_write+0x2aa/0x1050 [ 939.762329][T21828] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 939.762351][T21828] ? __pfx_vfs_write+0x10/0x10 [ 939.762374][T21828] ? __fget_files+0x215/0x3d0 [ 939.762401][T21828] ? __fget_files+0x21f/0x3d0 [ 939.762429][T21828] ksys_write+0x12a/0x250 [ 939.762443][T21828] ? __pfx_ksys_write+0x10/0x10 [ 939.762462][T21828] do_syscall_64+0x115/0x840 [ 939.762479][T21828] ? clear_bhb_loop+0x40/0x90 [ 939.762497][T21828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 939.762512][T21828] RIP: 0033:0x7fbbd419ce59 [ 939.762525][T21828] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 939.762539][T21828] RSP: 002b:00007fbbd50f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 939.762553][T21828] RAX: ffffffffffffffda RBX: 00007fbbd4415fa0 RCX: 00007fbbd419ce59 [ 939.762563][T21828] RDX: 000000000000b6bd RSI: 0000000000000000 RDI: 0000000000000003 [ 939.762572][T21828] RBP: 00007fbbd4232e6f R08: 0000000000000000 R09: 0000000000000000 [ 939.762581][T21828] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 939.762590][T21828] R13: 00007fbbd4416038 R14: 00007fbbd4415fa0 R15: 00007ffc60d80768 [ 939.762610][T21828] [ 940.904236][T21841] vivid-007: ================= START STATUS ================= [ 940.936521][T21841] vivid-007: Generate PTS: true [ 940.959295][T21841] vivid-007: Generate SCR: true [ 940.974859][T21841] tpg source WxH: 320x240 (Y'CbCr) [ 940.989306][T21841] tpg field: 1 [ 941.003990][T21841] tpg crop: (0,0)/320x240 [ 941.014227][T21841] tpg compose: (0,0)/320x240 [ 941.028909][T21841] tpg colorspace: 8 [ 941.047383][T21841] tpg transfer function: 0/0 [ 941.070478][T21841] tpg Y'CbCr encoding: 0/0 [ 941.085149][T21841] tpg quantization: 0/0 [ 941.101782][T21841] tpg RGB range: 0/2 [ 941.116216][T21841] vivid-007: ================== END STATUS ================== [ 941.790846][T21856] FAULT_INJECTION: forcing a failure. [ 941.790846][T21856] name failslab, interval 1, probability 0, space 0, times 0 [ 942.025651][T21856] CPU: 0 UID: 0 PID: 21856 Comm: syz.5.3127 Tainted: G U L syzkaller #0 PREEMPT(full) [ 942.025680][T21856] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 942.025686][T21856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 942.025696][T21856] Call Trace: [ 942.025702][T21856] [ 942.025709][T21856] dump_stack_lvl+0x100/0x190 [ 942.025734][T21856] should_fail_ex.cold+0x5/0xa [ 942.025755][T21856] should_failslab+0xc2/0x120 [ 942.025783][T21856] __kmalloc_noprof+0xfc/0x820 [ 942.025802][T21856] ? __d_alloc+0x650/0xa50 [ 942.025823][T21856] __d_alloc+0x650/0xa50 [ 942.025841][T21856] d_alloc_parallel+0x105/0x14b0 [ 942.025869][T21856] ? __pfx_d_alloc_parallel+0x10/0x10 [ 942.025890][T21856] ? __pfx___might_resched+0x10/0x10 [ 942.025913][T21856] ? try_to_unlazy+0x296/0x910 [ 942.025937][T21856] ? down_read+0x13b/0x4c0 [ 942.025957][T21856] ? __pfx_down_read+0x10/0x10 [ 942.025978][T21856] __lookup_slow+0x98/0x320 [ 942.025999][T21856] lookup_slow+0x50/0x70 [ 942.026019][T21856] link_path_walk+0x1377/0x1cc0 [ 942.026048][T21856] path_openat+0x1c9/0x4280 [ 942.026063][T21856] ? mark_held_locks+0x40/0x70 [ 942.026090][T21856] ? stack_depot_save_flags+0x479/0x9d0 [ 942.026113][T21856] ? __pfx_path_openat+0x10/0x10 [ 942.026127][T21856] ? kasan_save_stack+0x3f/0x50 [ 942.026144][T21856] ? kasan_save_stack+0x30/0x50 [ 942.026161][T21856] ? kasan_save_track+0x14/0x30 [ 942.026179][T21856] ? __kasan_kmalloc+0xaa/0xb0 [ 942.026195][T21856] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 942.026210][T21856] ? do_getname+0x238/0x390 [ 942.026227][T21856] ? acct_on+0x93/0xa00 [ 942.026245][T21856] ? __x64_sys_acct+0x81/0x1e0 [ 942.026266][T21856] do_file_open+0x20e/0x430 [ 942.026283][T21856] ? __pfx_do_file_open+0x10/0x10 [ 942.026314][T21856] ? find_held_lock+0x2b/0x80 [ 942.026332][T21856] ? __might_fault+0xc5/0x140 [ 942.026347][T21856] ? __might_fault+0xc5/0x140 [ 942.026365][T21856] file_open_name+0x1c3/0x3e0 [ 942.026385][T21856] ? __pfx_file_open_name+0x10/0x10 [ 942.026407][T21856] ? do_getname+0x191/0x390 [ 942.026427][T21856] acct_on+0xa6/0xa00 [ 942.026447][T21856] ? __pfx_acct_on+0x10/0x10 [ 942.026466][T21856] ? bpf_lsm_capable+0x9/0x10 [ 942.026483][T21856] ? security_capable+0x80/0x260 [ 942.026506][T21856] __x64_sys_acct+0x81/0x1e0 [ 942.026524][T21856] ? lockdep_hardirqs_on+0x78/0x100 [ 942.026541][T21856] do_syscall_64+0x115/0x840 [ 942.026557][T21856] ? clear_bhb_loop+0x40/0x90 [ 942.026576][T21856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.026592][T21856] RIP: 0033:0x7fb9da59ce59 [ 942.026606][T21856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.026622][T21856] RSP: 002b:00007fb9db470028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 942.026638][T21856] RAX: ffffffffffffffda RBX: 00007fb9da816090 RCX: 00007fb9da59ce59 [ 942.026649][T21856] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000440 [ 942.026659][T21856] RBP: 00007fb9da632e6f R08: 0000000000000000 R09: 0000000000000000 [ 942.026668][T21856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 942.026678][T21856] R13: 00007fb9da816128 R14: 00007fb9da816090 R15: 00007ffc8b867278 [ 942.026698][T21856] [ 942.896064][T21863] vivid-007: ================= START STATUS ================= [ 942.920115][T21863] vivid-007: Generate PTS: true [ 942.935930][T21863] vivid-007: Generate SCR: true [ 942.962485][T21863] tpg source WxH: 320x240 (Y'CbCr) [ 942.996830][T21863] tpg field: 1 [ 943.018849][T21863] tpg crop: (0,0)/320x240 [ 943.036368][T21863] tpg compose: (0,0)/320x240 [ 943.056376][T21863] tpg colorspace: 8 [ 943.072497][T21863] tpg transfer function: 0/0 [ 943.089253][T21863] tpg Y'CbCr encoding: 0/0 [ 943.104323][T21863] tpg quantization: 0/0 [ 943.124725][T21863] tpg RGB range: 0/2 [ 943.148423][T21863] vivid-007: ================== END STATUS ================== [ 943.761466][T21870] Process accounting resumed [ 944.696055][T21894] vivid-007: ================= START STATUS ================= [ 944.758166][T21894] vivid-007: Generate PTS: true [ 944.790633][T21894] vivid-007: Generate SCR: true [ 944.857249][T21894] tpg source WxH: 320x240 (Y'CbCr) [ 944.904555][T21894] tpg field: 1 [ 944.931697][T21894] tpg crop: (0,0)/320x240 [ 944.957001][T21894] tpg compose: (0,0)/320x240 [ 945.000553][T21894] tpg colorspace: 8 [ 945.018647][T21894] tpg transfer function: 0/0 [ 945.043065][T21894] tpg Y'CbCr encoding: 0/0 [ 945.064596][T21894] tpg quantization: 0/0 [ 945.092469][T21894] tpg RGB range: 0/2 [ 945.118832][T21894] vivid-007: ================== END STATUS ================== [ 945.218257][T21901] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 945.259692][T21904] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3138'. [ 945.346972][T21904] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.421393][T21901] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 945.465485][T21904] bridge_slave_0 (unregistering): left allmulticast mode [ 945.505133][T21904] bridge_slave_0 (unregistering): left promiscuous mode [ 945.571925][T21904] bridge0: port 1(bridge_slave_0) entered disabled state [ 945.594452][T21901] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 945.837299][T21901] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 945.996027][T21911] FAULT_INJECTION: forcing a failure. [ 945.996027][T21911] name failslab, interval 1, probability 0, space 0, times 0 [ 946.015864][T21901] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 946.059981][T21911] CPU: 0 UID: 8 PID: 21911 Comm: syz.6.3140 Tainted: G U L syzkaller #0 PREEMPT(full) [ 946.060011][T21911] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 946.060017][T21911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 946.060027][T21911] Call Trace: [ 946.060033][T21911] [ 946.060039][T21911] dump_stack_lvl+0x100/0x190 [ 946.060064][T21911] should_fail_ex.cold+0x5/0xa [ 946.060085][T21911] should_failslab+0xc2/0x120 [ 946.060106][T21911] kmem_cache_alloc_noprof+0x91/0x6a0 [ 946.060126][T21911] ? cred_alloc_blank+0x1c/0xa0 [ 946.060153][T21911] cred_alloc_blank+0x1c/0xa0 [ 946.060175][T21911] keyctl_session_to_parent+0x55/0xae0 [ 946.060202][T21911] __do_sys_keyctl+0x2b1/0x5a0 [ 946.060225][T21911] do_syscall_64+0x115/0x840 [ 946.060242][T21911] ? clear_bhb_loop+0x40/0x90 [ 946.060261][T21911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.060276][T21911] RIP: 0033:0x7fc15c19ce59 [ 946.060290][T21911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 946.060305][T21911] RSP: 002b:00007fc15cfcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 946.060320][T21911] RAX: ffffffffffffffda RBX: 00007fc15c415fa0 RCX: 00007fc15c19ce59 [ 946.060331][T21911] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 946.060340][T21911] RBP: 00007fc15c232e6f R08: 0000000000000001 R09: 0000000000000000 [ 946.060357][T21911] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 946.060367][T21911] R13: 00007fc15c416038 R14: 00007fc15c415fa0 R15: 00007fffbf3ff808 [ 946.060387][T21911] [ 946.341723][T21901] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 946.431423][T21921] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3142'. [ 946.479952][ T30] audit: type=1804 audit(1843104538.309:44): pid=21926 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3143" name="/newroot/281/file0" dev="tmpfs" ino=1478 res=1 errno=0 [ 947.033056][ T30] audit: type=1800 audit(1843104538.869:45): pid=21939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3145" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 947.202176][T21948] ubi0: attaching mtd0 [ 947.221946][T21948] ubi0: scanning is finished [ 947.262349][T21948] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 947.794441][T21948] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 947.918267][T18740] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 900 with max blocks 6 with error 117 [ 948.003948][T18740] EXT4-fs (sda1): This should not happen!! Data will be lost [ 948.003948][T18740] [ 948.014631][T21959] can: request_module (can-proto-4) failed. [ 948.694744][T21974] vivid-007: ================= START STATUS ================= [ 948.827591][T21974] vivid-007: Generate PTS: true [ 948.896744][T21974] vivid-007: Generate SCR: true [ 948.951496][T21974] tpg source WxH: 320x240 (Y'CbCr) [ 948.996920][T21974] tpg field: 1 [ 949.037175][T21974] tpg crop: (0,0)/320x240 [ 949.082696][T21974] tpg compose: (0,0)/320x240 [ 949.131746][T21974] tpg colorspace: 8 [ 949.186677][T21974] tpg transfer function: 0/0 [ 949.240800][T21974] tpg Y'CbCr encoding: 0/0 [ 949.278844][T21974] tpg quantization: 0/0 [ 949.332263][T21974] tpg RGB range: 0/2 [ 949.368154][T21974] vivid-007: ================== END STATUS ================== [ 949.389676][T21991] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 949.497730][T21991] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 949.555167][T21991] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 949.603081][T21991] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 949.661935][T21991] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 949.777296][T21991] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 950.376198][T21999] vivid-007: ================= START STATUS ================= [ 950.492737][T21999] vivid-007: Generate PTS: true [ 950.570373][T21999] vivid-007: Generate SCR: true [ 950.628456][T21999] tpg source WxH: 320x240 (Y'CbCr) [ 950.698566][T21999] tpg field: 1 [ 950.744971][T21999] tpg crop: (0,0)/320x240 [ 950.805662][T21999] tpg compose: (0,0)/320x240 [ 950.869007][T21999] tpg colorspace: 8 [ 950.906218][T21999] tpg transfer function: 0/0 [ 950.964107][T21999] tpg Y'CbCr encoding: 0/0 [ 951.015994][T21999] tpg quantization: 0/0 [ 951.082343][T21999] tpg RGB range: 0/2 [ 951.183803][T21999] vivid-007: ================== END STATUS ================== [ 951.830501][T22034] FAULT_INJECTION: forcing a failure. [ 951.830501][T22034] name failslab, interval 1, probability 0, space 0, times 0 [ 951.884550][T22034] CPU: 0 UID: 8 PID: 22034 Comm: syz.0.3164 Tainted: G U L syzkaller #0 PREEMPT(full) [ 951.884581][T22034] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 951.884588][T22034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 951.884597][T22034] Call Trace: [ 951.884603][T22034] [ 951.884610][T22034] dump_stack_lvl+0x100/0x190 [ 951.884634][T22034] should_fail_ex.cold+0x5/0xa [ 951.884655][T22034] should_failslab+0xc2/0x120 [ 951.884676][T22034] kmem_cache_alloc_noprof+0x91/0x6a0 [ 951.884696][T22034] ? cred_alloc_blank+0x1c/0xa0 [ 951.884722][T22034] cred_alloc_blank+0x1c/0xa0 [ 951.884747][T22034] keyctl_session_to_parent+0x55/0xae0 [ 951.884780][T22034] __do_sys_keyctl+0x2b1/0x5a0 [ 951.884804][T22034] do_syscall_64+0x115/0x840 [ 951.884822][T22034] ? clear_bhb_loop+0x40/0x90 [ 951.884841][T22034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.884857][T22034] RIP: 0033:0x7f9aaed9ce59 [ 951.884871][T22034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.884886][T22034] RSP: 002b:00007f9aafce1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 951.884902][T22034] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9ce59 [ 951.884912][T22034] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 951.884922][T22034] RBP: 00007f9aaee32e6f R08: 0000000000000001 R09: 0000000000000000 [ 951.884931][T22034] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 951.884940][T22034] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff2bc3db18 [ 951.884960][T22034] [ 955.921403][T22042] Process accounting resumed [ 956.350790][T22079] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 956.558895][T22079] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 956.731470][T22079] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 956.845659][T22079] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 956.968612][T22079] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 957.035719][T22088] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3175'. [ 957.066222][T22079] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 957.086074][T22088] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.124509][T22088] bridge_slave_0 (unregistering): left allmulticast mode [ 957.153145][T22088] bridge_slave_0 (unregistering): left promiscuous mode [ 957.180796][T22088] bridge0: port 1(bridge_slave_0) entered disabled state [ 957.698279][T22111] FAULT_INJECTION: forcing a failure. [ 957.698279][T22111] name fail_futex, interval 1, probability 0, space 0, times 0 [ 957.909832][T22111] CPU: 0 UID: 8 PID: 22111 Comm: syz.3.3182 Tainted: G U L syzkaller #0 PREEMPT(full) [ 957.909862][T22111] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 957.909868][T22111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 957.909878][T22111] Call Trace: [ 957.909884][T22111] [ 957.909891][T22111] dump_stack_lvl+0x100/0x190 [ 957.909915][T22111] should_fail_ex.cold+0x5/0xa [ 957.909936][T22111] get_futex_key+0x1d2/0x14f0 [ 957.909955][T22111] ? __pfx_get_futex_key+0x10/0x10 [ 957.909970][T22111] ? kasan_save_stack+0x3f/0x50 [ 957.909988][T22111] ? kasan_save_stack+0x30/0x50 [ 957.910004][T22111] ? kasan_record_aux_stack+0xa7/0xc0 [ 957.910018][T22111] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 957.910034][T22111] ? __put_cred+0x10c/0x180 [ 957.910055][T22111] ? keyctl_session_to_parent+0x95a/0xae0 [ 957.910077][T22111] ? __do_sys_keyctl+0x2b1/0x5a0 [ 957.910097][T22111] ? do_syscall_64+0x115/0x840 [ 957.910117][T22111] futex_wake+0xf4/0x5e0 [ 957.910140][T22111] ? __pfx_futex_wake+0x10/0x10 [ 957.910167][T22111] do_futex+0x2b2/0x440 [ 957.910184][T22111] ? __pfx_do_futex+0x10/0x10 [ 957.910207][T22111] __x64_sys_futex+0x34f/0x4d0 [ 957.910227][T22111] ? __pfx___x64_sys_futex+0x10/0x10 [ 957.910243][T22111] ? __put_cred+0x111/0x180 [ 957.910265][T22111] ? keyctl_session_to_parent+0x39a/0xae0 [ 957.910292][T22111] do_syscall_64+0x115/0x840 [ 957.910308][T22111] ? clear_bhb_loop+0x40/0x90 [ 957.910326][T22111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.910342][T22111] RIP: 0033:0x7fbbd419ce59 [ 957.910362][T22111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 957.910377][T22111] RSP: 002b:00007fbbd50f10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 957.910393][T22111] RAX: ffffffffffffffda RBX: 00007fbbd4415fa8 RCX: 00007fbbd419ce59 [ 957.910405][T22111] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbbd4415fac [ 957.910415][T22111] RBP: 00007fbbd4415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 957.910425][T22111] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 957.910434][T22111] R13: 00007fbbd4416038 R14: 00007ffc60d80680 R15: 00007ffc60d80768 [ 957.910454][T22111] [ 958.456299][T22095] Process accounting resumed [ 959.089638][T22132] FAULT_INJECTION: forcing a failure. [ 959.089638][T22132] name failslab, interval 1, probability 0, space 0, times 0 [ 959.119795][T22132] CPU: 0 UID: 8 PID: 22132 Comm: syz.6.3190 Tainted: G U L syzkaller #0 PREEMPT(full) [ 959.119824][T22132] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 959.119830][T22132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 959.119840][T22132] Call Trace: [ 959.119846][T22132] [ 959.119853][T22132] dump_stack_lvl+0x100/0x190 [ 959.119877][T22132] should_fail_ex.cold+0x5/0xa [ 959.119898][T22132] should_failslab+0xc2/0x120 [ 959.119919][T22132] kmem_cache_alloc_noprof+0x91/0x6a0 [ 959.119938][T22132] ? cred_alloc_blank+0x1c/0xa0 [ 959.119965][T22132] cred_alloc_blank+0x1c/0xa0 [ 959.119989][T22132] keyctl_session_to_parent+0x55/0xae0 [ 959.120015][T22132] __do_sys_keyctl+0x2b1/0x5a0 [ 959.120038][T22132] do_syscall_64+0x115/0x840 [ 959.120056][T22132] ? clear_bhb_loop+0x40/0x90 [ 959.120078][T22132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.120095][T22132] RIP: 0033:0x7fc15c19ce59 [ 959.120117][T22132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.120132][T22132] RSP: 002b:00007fc15cfcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 959.120148][T22132] RAX: ffffffffffffffda RBX: 00007fc15c415fa0 RCX: 00007fc15c19ce59 [ 959.120158][T22132] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 959.120169][T22132] RBP: 00007fc15c232e6f R08: 0000000000000001 R09: 0000000000000000 [ 959.120179][T22132] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 959.120188][T22132] R13: 00007fc15c416038 R14: 00007fc15c415fa0 R15: 00007fffbf3ff808 [ 959.120208][T22132] [ 960.682442][T22168] netlink: zone id is out of range [ 960.710126][T22168] netlink: zone id is out of range [ 960.727217][T22168] netlink: zone id is out of range [ 960.742539][T22168] netlink: zone id is out of range [ 960.779882][T22168] netlink: zone id is out of range [ 960.809913][T22168] netlink: zone id is out of range [ 960.827743][T22168] netlink: zone id is out of range [ 960.847680][T22168] netlink: zone id is out of range [ 960.862382][T22168] netlink: zone id is out of range [ 960.880066][T22168] netlink: zone id is out of range [ 961.591505][T22182] futex_wake_op: syz.5.3200 tries to shift op by -2048; fix this program [ 961.690413][T22182] 0x000000000001-0x000000020000 : "" [ 961.718987][T22181] FAULT_INJECTION: forcing a failure. [ 961.718987][T22181] name failslab, interval 1, probability 0, space 0, times 0 [ 961.735107][T22183] ubi1: attaching mtd0 [ 961.772614][T22183] ubi1: scanning is finished [ 961.792344][T22181] CPU: 0 UID: 8 PID: 22181 Comm: syz.6.3201 Tainted: G U L syzkaller #0 PREEMPT(full) [ 961.792373][T22181] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 961.792380][T22181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 961.792391][T22181] Call Trace: [ 961.792397][T22181] [ 961.792403][T22181] dump_stack_lvl+0x100/0x190 [ 961.792427][T22181] should_fail_ex.cold+0x5/0xa [ 961.792455][T22181] should_failslab+0xc2/0x120 [ 961.792477][T22181] kmem_cache_alloc_noprof+0x91/0x6a0 [ 961.792497][T22181] ? cred_alloc_blank+0x1c/0xa0 [ 961.792524][T22181] cred_alloc_blank+0x1c/0xa0 [ 961.792546][T22181] keyctl_session_to_parent+0x55/0xae0 [ 961.792573][T22181] __do_sys_keyctl+0x2b1/0x5a0 [ 961.792596][T22181] do_syscall_64+0x115/0x840 [ 961.792613][T22181] ? clear_bhb_loop+0x40/0x90 [ 961.792631][T22181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 961.792647][T22181] RIP: 0033:0x7fc15c19ce59 [ 961.792661][T22181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 961.792676][T22181] RSP: 002b:00007fc15cfcc028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 961.792691][T22181] RAX: ffffffffffffffda RBX: 00007fc15c415fa0 RCX: 00007fc15c19ce59 [ 961.792701][T22181] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 961.792711][T22181] RBP: 00007fc15c232e6f R08: 0000000000000001 R09: 0000000000000000 [ 961.792721][T22181] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 961.792730][T22181] R13: 00007fc15c416038 R14: 00007fc15c415fa0 R15: 00007fffbf3ff808 [ 961.792750][T22181] [ 961.957398][T22183] ubi1 error: ubi_read_volume_table: the layout volume was not found [ 962.079966][T22182] ftl_cs: FTL header corrupt! [ 962.188540][T22194] tipc: Started in network mode [ 962.224800][T22194] tipc: Node identity ee00, cluster identity 4711 [ 962.258707][T22194] tipc: Node number set to 60928 [ 962.331706][T22183] ubi1 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 962.437924][T22197] FAULT_INJECTION: forcing a failure. [ 962.437924][T22197] name failslab, interval 1, probability 0, space 0, times 0 [ 962.534715][T22197] CPU: 0 UID: 0 PID: 22197 Comm: syz.3.3205 Tainted: G U L syzkaller #0 PREEMPT(full) [ 962.534746][T22197] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 962.534752][T22197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 962.534762][T22197] Call Trace: [ 962.534768][T22197] [ 962.534775][T22197] dump_stack_lvl+0x100/0x190 [ 962.534799][T22197] should_fail_ex.cold+0x5/0xa [ 962.534821][T22197] should_failslab+0xc2/0x120 [ 962.534850][T22197] __kmalloc_noprof+0xfc/0x820 [ 962.534870][T22197] ? get_callchain_buffers+0x123/0x380 [ 962.534894][T22197] get_callchain_buffers+0x123/0x380 [ 962.534913][T22197] ? bpf_lsm_capable+0x9/0x10 [ 962.534929][T22197] ? security_capable+0x80/0x260 [ 962.534952][T22197] stack_map_alloc+0x316/0x610 [ 962.534971][T22197] map_create+0x874/0x3120 [ 962.534998][T22197] ? __lock_acquire+0x49f/0x1a40 [ 962.535025][T22197] ? __pfx_map_create+0x10/0x10 [ 962.535053][T22197] ? __might_fault+0xc5/0x140 [ 962.535078][T22197] __sys_bpf+0x2a6e/0x4e80 [ 962.535101][T22197] ? __pfx___sys_bpf+0x10/0x10 [ 962.535116][T22197] ? __pfx_futex_hash+0x10/0x10 [ 962.535131][T22197] ? get_pid_task+0xfc/0x250 [ 962.535150][T22197] ? get_pid_task+0xfc/0x250 [ 962.535173][T22197] ? futex_wait+0x11e/0x370 [ 962.535193][T22197] ? __pfx_futex_wait+0x10/0x10 [ 962.535217][T22197] ? rcu_read_lock_any_held+0x6a/0xa0 [ 962.535252][T22197] ? __x64_sys_futex+0x34f/0x4d0 [ 962.535268][T22197] ? __x64_sys_futex+0x358/0x4d0 [ 962.535286][T22197] ? xfd_validate_state+0x129/0x190 [ 962.535307][T22197] ? __x64_sys_bpf+0xce/0x140 [ 962.535323][T22197] __x64_sys_bpf+0xce/0x140 [ 962.535340][T22197] ? do_syscall_64+0x90/0x840 [ 962.535359][T22197] do_syscall_64+0x115/0x840 [ 962.535375][T22197] ? clear_bhb_loop+0x40/0x90 [ 962.535394][T22197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 962.535410][T22197] RIP: 0033:0x7fbbd419ce59 [ 962.535425][T22197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 962.535439][T22197] RSP: 002b:00007fbbd50f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 962.535454][T22197] RAX: ffffffffffffffda RBX: 00007fbbd4415fa0 RCX: 00007fbbd419ce59 [ 962.535465][T22197] RDX: 00000000000006f4 RSI: 0000200000000580 RDI: 0000000000000000 [ 962.535474][T22197] RBP: 00007fbbd4232e6f R08: 0000000000000000 R09: 0000000000000000 [ 962.535484][T22197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 962.535494][T22197] R13: 00007fbbd4416038 R14: 00007fbbd4415fa0 R15: 00007ffc60d80768 [ 962.535515][T22197] [ 963.415531][T22204] FAULT_INJECTION: forcing a failure. [ 963.415531][T22204] name failslab, interval 1, probability 0, space 0, times 0 [ 963.460303][T22204] CPU: 0 UID: 0 PID: 22204 Comm: syz.0.3207 Tainted: G U L syzkaller #0 PREEMPT(full) [ 963.460331][T22204] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 963.460338][T22204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 963.460347][T22204] Call Trace: [ 963.460352][T22204] [ 963.460359][T22204] dump_stack_lvl+0x100/0x190 [ 963.460383][T22204] should_fail_ex.cold+0x5/0xa [ 963.460404][T22204] should_failslab+0xc2/0x120 [ 963.460425][T22204] kmem_cache_alloc_noprof+0x91/0x6a0 [ 963.460443][T22204] ? __proc_create+0xc1/0x8f0 [ 963.460458][T22204] ? __proc_create+0xc1/0x8f0 [ 963.460473][T22204] ? __proc_create+0x247/0x8f0 [ 963.460490][T22204] __proc_create+0x247/0x8f0 [ 963.460506][T22204] ? __pfx___proc_create+0x10/0x10 [ 963.460524][T22204] ? __pfx_can_rcvlist_sff_proc_show+0x10/0x10 [ 963.460665][T22204] _proc_mkdir+0xb9/0x210 [ 963.460681][T22204] ? __pfx__proc_mkdir+0x10/0x10 [ 963.460701][T22204] ? can_init_proc+0x3a5/0x4b0 [ 963.460721][T22204] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 963.460742][T22204] canbcm_pernet_init+0x4d/0xa0 [ 963.460764][T22204] ops_init+0x1e2/0x5f0 [ 963.460791][T22204] setup_net+0x118/0x3a0 [ 963.460814][T22204] ? __pfx_setup_net+0x10/0x10 [ 963.460837][T22204] ? mutex_init_lockdep+0xf1/0x120 [ 963.460857][T22204] copy_net_ns+0x46f/0x7c0 [ 963.460874][T22204] create_new_namespaces+0x3ea/0xac0 [ 963.460895][T22204] unshare_nsproxy_namespaces+0xf2/0x220 [ 963.460914][T22204] ksys_unshare+0x438/0xab0 [ 963.460935][T22204] ? __pfx_ksys_unshare+0x10/0x10 [ 963.460962][T22204] __x64_sys_unshare+0x31/0x40 [ 963.460981][T22204] do_syscall_64+0x115/0x840 [ 963.460998][T22204] ? clear_bhb_loop+0x40/0x90 [ 963.461017][T22204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.461033][T22204] RIP: 0033:0x7f9aaed9ce59 [ 963.461046][T22204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 963.461060][T22204] RSP: 002b:00007f9aafce1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 963.461075][T22204] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9ce59 [ 963.461086][T22204] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 963.461095][T22204] RBP: 00007f9aaee32e6f R08: 0000000000000000 R09: 0000000000000000 [ 963.461104][T22204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 963.461113][T22204] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff2bc3db18 [ 963.461132][T22204] [ 963.714363][T22217] FAULT_INJECTION: forcing a failure. [ 963.714363][T22217] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 963.727542][T22217] CPU: 0 UID: 0 PID: 22217 Comm: syz.3.3210 Tainted: G U L syzkaller #0 PREEMPT(full) [ 963.727568][T22217] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 963.727574][T22217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 963.727583][T22217] Call Trace: [ 963.727590][T22217] [ 963.727601][T22217] dump_stack_lvl+0x100/0x190 [ 963.727625][T22217] should_fail_ex.cold+0x5/0xa [ 963.727647][T22217] _copy_to_user+0x32/0xd0 [ 963.727666][T22217] simple_read_from_buffer+0xcb/0x170 [ 963.727693][T22217] proc_fail_nth_read+0x1af/0x230 [ 963.727714][T22217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 963.727736][T22217] ? rw_verify_area+0xce/0x6d0 [ 963.727757][T22217] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 963.727776][T22217] vfs_read+0x1e4/0xb40 [ 963.727801][T22217] ? __pfx_vfs_read+0x10/0x10 [ 963.727824][T22217] ? __fget_files+0x215/0x3d0 [ 963.727851][T22217] ? __fget_files+0x21f/0x3d0 [ 963.727879][T22217] ksys_read+0x12a/0x250 [ 963.727902][T22217] ? __pfx_ksys_read+0x10/0x10 [ 963.727930][T22217] do_syscall_64+0x115/0x840 [ 963.727948][T22217] ? clear_bhb_loop+0x40/0x90 [ 963.727967][T22217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 963.727983][T22217] RIP: 0033:0x7fbbd415d68e [ 963.727996][T22217] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 963.728011][T22217] RSP: 002b:00007fbbd50cffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 963.728026][T22217] RAX: ffffffffffffffda RBX: 00007fbbd50d06c0 RCX: 00007fbbd415d68e [ 963.728036][T22217] RDX: 000000000000000f RSI: 00007fbbd50d00a0 RDI: 0000000000000004 [ 963.728046][T22217] RBP: 00007fbbd50d0090 R08: 0000000000000000 R09: 0000000000000000 [ 963.728055][T22217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 963.728064][T22217] R13: 00007fbbd4416128 R14: 00007fbbd4416090 R15: 00007ffc60d80768 [ 963.728084][T22217] [ 965.258134][T22235] vivid-007: ================= START STATUS ================= [ 965.298826][T22235] vivid-007: Generate PTS: true [ 965.320459][T22235] vivid-007: Generate SCR: true [ 965.347761][T22235] tpg source WxH: 320x240 (Y'CbCr) [ 965.369035][T22235] tpg field: 1 [ 965.387355][T22235] tpg crop: (0,0)/320x240 [ 965.413331][T22235] tpg compose: (0,0)/320x240 [ 965.439536][T22235] tpg colorspace: 8 [ 965.452888][T22235] tpg transfer function: 0/0 [ 965.472737][T22235] tpg Y'CbCr encoding: 0/0 [ 965.494660][T22235] tpg quantization: 0/0 [ 965.518485][T22235] tpg RGB range: 0/2 [ 965.531762][T22235] vivid-007: ================== END STATUS ================== [ 966.074661][T22258] FAULT_INJECTION: forcing a failure. [ 966.074661][T22258] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 966.176016][T22258] CPU: 0 UID: 0 PID: 22258 Comm: syz.5.3217 Tainted: G U L syzkaller #0 PREEMPT(full) [ 966.176045][T22258] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 966.176052][T22258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 966.176061][T22258] Call Trace: [ 966.176068][T22258] [ 966.176075][T22258] dump_stack_lvl+0x100/0x190 [ 966.176099][T22258] should_fail_ex.cold+0x5/0xa [ 966.176118][T22258] ? prepare_alloc_pages+0x16d/0x5f0 [ 966.176141][T22258] should_fail_alloc_page+0xeb/0x140 [ 966.176164][T22258] prepare_alloc_pages+0x1f0/0x5f0 [ 966.176189][T22258] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 966.176215][T22258] ? __lock_acquire+0x49f/0x1a40 [ 966.176238][T22258] ? __css_rstat_updated+0x1ce/0x5a0 [ 966.176262][T22258] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 966.176284][T22258] ? xas_create+0x1f4/0x14e0 [ 966.176306][T22258] ? rcu_is_watching+0x12/0xc0 [ 966.176325][T22258] ? __mod_memcg_lruvec_state+0x18c/0x5b0 [ 966.176344][T22258] ? find_held_lock+0x2b/0x80 [ 966.176376][T22258] ? __lock_acquire+0x49f/0x1a40 [ 966.176398][T22258] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 966.176423][T22258] ? policy_nodemask+0xed/0x4f0 [ 966.176446][T22258] alloc_pages_mpol+0x1fb/0x540 [ 966.176469][T22258] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 966.176490][T22258] ? filemap_get_entry+0x22d/0x450 [ 966.176506][T22258] ? filemap_get_entry+0x22d/0x450 [ 966.176524][T22258] folio_alloc_noprof+0x22/0x250 [ 966.176548][T22258] filemap_alloc_folio_noprof.part.0+0x377/0x450 [ 966.176572][T22258] ? __pfx_filemap_alloc_folio_noprof.part.0+0x10/0x10 [ 966.176593][T22258] ? rcu_is_watching+0x12/0xc0 [ 966.176611][T22258] ? trace_kmalloc+0xeb/0x110 [ 966.176631][T22258] ? __kmalloc_large_node_noprof+0x5d/0x70 [ 966.176655][T22258] __filemap_get_folio_mpol+0x653/0x1320 [ 966.176676][T22258] ioctx_alloc+0x7e1/0x21a0 [ 966.176700][T22258] ? __pfx_ioctx_alloc+0x10/0x10 [ 966.176722][T22258] __x64_sys_io_setup+0xc9/0x220 [ 966.176739][T22258] do_syscall_64+0x115/0x840 [ 966.176756][T22258] ? clear_bhb_loop+0x40/0x90 [ 966.176774][T22258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.176790][T22258] RIP: 0033:0x7fb9da59ce59 [ 966.176804][T22258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 966.176819][T22258] RSP: 002b:00007fb9db44f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 966.176835][T22258] RAX: ffffffffffffffda RBX: 00007fb9da816180 RCX: 00007fb9da59ce59 [ 966.176845][T22258] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 966.176855][T22258] RBP: 00007fb9da632e6f R08: 0000000000000000 R09: 0000000000000000 [ 966.176865][T22258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 966.176875][T22258] R13: 00007fb9da816218 R14: 00007fb9da816180 R15: 00007ffc8b867278 [ 966.176896][T22258] [ 968.767942][T22314] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 968.825033][T22314] File: /dev/mtdblock0 PID: 22314 Comm: syz.3.3232 [ 969.497004][T22337] FAULT_INJECTION: forcing a failure. [ 969.497004][T22337] name failslab, interval 1, probability 0, space 0, times 0 [ 969.552868][T22337] CPU: 0 UID: 8 PID: 22337 Comm: syz.0.3236 Tainted: G U L syzkaller #0 PREEMPT(full) [ 969.552896][T22337] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 969.552903][T22337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 969.552913][T22337] Call Trace: [ 969.552919][T22337] [ 969.552926][T22337] dump_stack_lvl+0x100/0x190 [ 969.552951][T22337] should_fail_ex.cold+0x5/0xa [ 969.552971][T22337] should_failslab+0xc2/0x120 [ 969.552993][T22337] __kmalloc_noprof+0xfc/0x820 [ 969.553012][T22337] ? trace_kmem_cache_alloc+0xdd/0x100 [ 969.553033][T22337] ? lsm_blob_alloc+0x68/0x90 [ 969.553055][T22337] lsm_blob_alloc+0x68/0x90 [ 969.553074][T22337] security_cred_alloc_blank+0x28/0x260 [ 969.553092][T22337] cred_alloc_blank+0x61/0xa0 [ 969.553125][T22337] keyctl_session_to_parent+0x55/0xae0 [ 969.553152][T22337] __do_sys_keyctl+0x2b1/0x5a0 [ 969.553177][T22337] do_syscall_64+0x115/0x840 [ 969.553195][T22337] ? clear_bhb_loop+0x40/0x90 [ 969.553214][T22337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.553230][T22337] RIP: 0033:0x7f9aaed9ce59 [ 969.553244][T22337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.553260][T22337] RSP: 002b:00007f9aafce1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 969.553275][T22337] RAX: ffffffffffffffda RBX: 00007f9aaf015fa0 RCX: 00007f9aaed9ce59 [ 969.553286][T22337] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 969.553295][T22337] RBP: 00007f9aaee32e6f R08: 0000000000000001 R09: 0000000000000000 [ 969.553304][T22337] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 969.553314][T22337] R13: 00007f9aaf016038 R14: 00007f9aaf015fa0 R15: 00007fff2bc3db18 [ 969.553333][T22337] [ 969.642636][T22341] ubi31: attaching mtd0 [ 969.691569][T22341] ubi31: scanning is finished [ 969.691609][T22341] ubi31 error: ubi_read_volume_table: the layout volume was not found [ 970.142092][T22341] ubi31 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 970.745423][T22320] Process accounting paused [ 971.683829][T22388] FAULT_INJECTION: forcing a failure. [ 971.683829][T22388] name fail_futex, interval 1, probability 0, space 0, times 0 [ 971.882912][T22388] CPU: 0 UID: 0 PID: 22388 Comm: syz.3.3245 Tainted: G U L syzkaller #0 PREEMPT(full) [ 971.882957][T22388] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 971.882967][T22388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 971.882984][T22388] Call Trace: [ 971.882994][T22388] [ 971.883005][T22388] dump_stack_lvl+0x100/0x190 [ 971.883044][T22388] should_fail_ex.cold+0x5/0xa [ 971.883082][T22388] get_futex_key+0x1d2/0x14f0 [ 971.883111][T22388] ? __pfx_get_futex_key+0x10/0x10 [ 971.883126][T22388] ? wakeup_preempt_fair+0x640/0x1060 [ 971.883148][T22388] futex_wait_setup+0x91/0x540 [ 971.883174][T22388] __futex_wait+0x19f/0x300 [ 971.883195][T22388] ? __pfx___futex_wait+0x10/0x10 [ 971.883214][T22388] ? __pfx_try_to_wake_up+0x10/0x10 [ 971.883229][T22388] ? futex_hash+0x311/0x400 [ 971.883245][T22388] ? __pfx_futex_wake_mark+0x10/0x10 [ 971.883268][T22388] ? find_held_lock+0x2b/0x80 [ 971.883286][T22388] ? futex_wake+0x4ea/0x5e0 [ 971.883310][T22388] futex_wait+0xe6/0x370 [ 971.883329][T22388] ? __pfx_futex_wait+0x10/0x10 [ 971.883355][T22388] ? madvise_unlock+0xa9/0x220 [ 971.883380][T22388] do_futex+0x265/0x440 [ 971.883397][T22388] ? __pfx_do_futex+0x10/0x10 [ 971.883418][T22388] __x64_sys_futex+0x34f/0x4d0 [ 971.883437][T22388] ? __pfx___x64_sys_futex+0x10/0x10 [ 971.883461][T22388] do_syscall_64+0x115/0x840 [ 971.883479][T22388] ? clear_bhb_loop+0x40/0x90 [ 971.883497][T22388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.883513][T22388] RIP: 0033:0x7fbbd419ce59 [ 971.883526][T22388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.883541][T22388] RSP: 002b:00007fbbd506d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 971.883556][T22388] RAX: ffffffffffffffda RBX: 00007fbbd4416368 RCX: 00007fbbd419ce59 [ 971.883566][T22388] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbbd4416368 [ 971.883576][T22388] RBP: 00007fbbd4416360 R08: 0000000000000000 R09: 0000000000000000 [ 971.883585][T22388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 971.883594][T22388] R13: 00007fbbd44163f8 R14: 00007ffc60d80680 R15: 00007ffc60d80768 [ 971.883613][T22388] [ 972.811781][T22402] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 972.844601][T22402] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 972.998790][T22402] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 973.082155][T22402] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 973.135554][T22402] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 973.185032][T22402] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 973.495660][T22417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3252'. [ 973.564851][T22416] HfR: entered promiscuous mode [ 973.602722][T22417] HfR: left promiscuous mode [ 973.820708][T22426] tipc: Started in network mode [ 973.895652][T22426] tipc: Node identity ee00, cluster identity 4711 [ 973.950505][T22426] tipc: Node number set to 60928 [ 974.405497][T22438] FAULT_INJECTION: forcing a failure. [ 974.405497][T22438] name fail_futex, interval 1, probability 0, space 0, times 0 [ 974.479105][T22438] CPU: 0 UID: 8 PID: 22438 Comm: syz.3.3257 Tainted: G U L syzkaller #0 PREEMPT(full) [ 974.479136][T22438] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 974.479142][T22438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 974.479152][T22438] Call Trace: [ 974.479159][T22438] [ 974.479165][T22438] dump_stack_lvl+0x100/0x190 [ 974.479190][T22438] should_fail_ex.cold+0x5/0xa [ 974.479210][T22438] get_futex_key+0x1d2/0x14f0 [ 974.479230][T22438] ? __pfx_get_futex_key+0x10/0x10 [ 974.479246][T22438] ? kasan_save_stack+0x3f/0x50 [ 974.479263][T22438] ? kasan_save_stack+0x30/0x50 [ 974.479280][T22438] ? kasan_record_aux_stack+0xa7/0xc0 [ 974.479295][T22438] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 974.479311][T22438] ? __put_cred+0x10c/0x180 [ 974.479332][T22438] ? keyctl_session_to_parent+0x95a/0xae0 [ 974.479354][T22438] ? __do_sys_keyctl+0x2b1/0x5a0 [ 974.479374][T22438] ? do_syscall_64+0x115/0x840 [ 974.479393][T22438] futex_wake+0xf4/0x5e0 [ 974.479415][T22438] ? __pfx_futex_wake+0x10/0x10 [ 974.479442][T22438] do_futex+0x2b2/0x440 [ 974.479460][T22438] ? __pfx_do_futex+0x10/0x10 [ 974.479483][T22438] __x64_sys_futex+0x34f/0x4d0 [ 974.479502][T22438] ? __pfx___x64_sys_futex+0x10/0x10 [ 974.479519][T22438] ? __put_cred+0x111/0x180 [ 974.479540][T22438] ? keyctl_session_to_parent+0x39a/0xae0 [ 974.479575][T22438] do_syscall_64+0x115/0x840 [ 974.479592][T22438] ? clear_bhb_loop+0x40/0x90 [ 974.479612][T22438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.479628][T22438] RIP: 0033:0x7fbbd419ce59 [ 974.479642][T22438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 974.479656][T22438] RSP: 002b:00007fbbd50f10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 974.479671][T22438] RAX: ffffffffffffffda RBX: 00007fbbd4415fa8 RCX: 00007fbbd419ce59 [ 974.479682][T22438] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbbd4415fac [ 974.479691][T22438] RBP: 00007fbbd4415fa0 R08: 0000000000000001 R09: 0000000000000000 [ 974.479700][T22438] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 974.479710][T22438] R13: 00007fbbd4416038 R14: 00007ffc60d80680 R15: 00007ffc60d80768 [ 974.479729][T22438] [ 975.233908][T22423] Process accounting paused [ 975.385249][T22449] zswap: compressor not available [ 975.458861][T22453] sd 0:0:1:0: PR command failed: 1026 [ 975.464461][T22453] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 975.485079][T22453] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 975.617997][T17643] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 976.084090][T22472] kmem.tcp.limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 976.155785][T22475] FAULT_INJECTION: forcing a failure. [ 976.155785][T22475] name fail_futex, interval 1, probability 0, space 0, times 0 [ 976.229592][T22475] CPU: 0 UID: 8 PID: 22475 Comm: syz.0.3267 Tainted: G U L syzkaller #0 PREEMPT(full) [ 976.229621][T22475] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 976.229627][T22475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 976.229637][T22475] Call Trace: [ 976.229643][T22475] [ 976.229649][T22475] dump_stack_lvl+0x100/0x190 [ 976.229674][T22475] should_fail_ex.cold+0x5/0xa [ 976.229695][T22475] get_futex_key+0x1d2/0x14f0 [ 976.229713][T22475] ? __pfx_get_futex_key+0x10/0x10 [ 976.229729][T22475] ? kasan_save_stack+0x3f/0x50 [ 976.229747][T22475] ? kasan_save_stack+0x30/0x50 [ 976.229765][T22475] ? kasan_record_aux_stack+0xa7/0xc0 [ 976.229779][T22475] ? __call_rcu_common.constprop.0+0xa5/0x9b0 [ 976.229795][T22475] ? __put_cred+0x10c/0x180 [ 976.229816][T22475] ? keyctl_session_to_parent+0x95a/0xae0 [ 976.229837][T22475] ? __do_sys_keyctl+0x2b1/0x5a0 [ 976.229868][T22475] ? do_syscall_64+0x115/0x840 [ 976.229888][T22475] futex_wake+0xf4/0x5e0 [ 976.229911][T22475] ? __pfx_futex_wake+0x10/0x10 [ 976.229939][T22475] do_futex+0x2b2/0x440 [ 976.229957][T22475] ? __pfx_do_futex+0x10/0x10 [ 976.229979][T22475] __x64_sys_futex+0x34f/0x4d0 [ 976.229998][T22475] ? __pfx___x64_sys_futex+0x10/0x10 [ 976.230015][T22475] ? __put_cred+0x111/0x180 [ 976.230036][T22475] ? keyctl_session_to_parent+0x39a/0xae0 [ 976.230063][T22475] do_syscall_64+0x115/0x840 [ 976.230079][T22475] ? clear_bhb_loop+0x40/0x90 [ 976.230098][T22475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.230114][T22475] RIP: 0033:0x7f9aaed9ce59 [ 976.230127][T22475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 976.230142][T22475] RSP: 002b:00007f9aafce10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 976.230157][T22475] RAX: ffffffffffffffda RBX: 00007f9aaf015fa8 RCX: 00007f9aaed9ce59 [ 976.230167][T22475] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9aaf015fac [ 976.230177][T22475] RBP: 00007f9aaf015fa0 R08: 0000000000000001 R09: 0000000000000000 [ 976.230186][T22475] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 976.230195][T22475] R13: 00007f9aaf016038 R14: 00007fff2bc3da30 R15: 00007fff2bc3db18 [ 976.230214][T22475] [ 977.499071][T22497] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 977.960499][T22501] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 978.889099][T22533] random: crng reseeded on system resumption [ 980.691093][T22573] FAULT_INJECTION: forcing a failure. [ 980.691093][T22573] name failslab, interval 1, probability 0, space 0, times 0 [ 980.783365][T22573] CPU: 0 UID: 8 PID: 22573 Comm: syz.3.3285 Tainted: G U L syzkaller #0 PREEMPT(full) [ 980.783394][T22573] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 980.783401][T22573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 980.783410][T22573] Call Trace: [ 980.783416][T22573] [ 980.783422][T22573] dump_stack_lvl+0x100/0x190 [ 980.783447][T22573] should_fail_ex.cold+0x5/0xa [ 980.783468][T22573] should_failslab+0xc2/0x120 [ 980.783490][T22573] kmem_cache_alloc_noprof+0x91/0x6a0 [ 980.783509][T22573] ? cred_alloc_blank+0x1c/0xa0 [ 980.783536][T22573] cred_alloc_blank+0x1c/0xa0 [ 980.783558][T22573] keyctl_session_to_parent+0x55/0xae0 [ 980.783585][T22573] __do_sys_keyctl+0x2b1/0x5a0 [ 980.783607][T22573] do_syscall_64+0x115/0x840 [ 980.783625][T22573] ? clear_bhb_loop+0x40/0x90 [ 980.783643][T22573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.783659][T22573] RIP: 0033:0x7fbbd419ce59 [ 980.783673][T22573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.783687][T22573] RSP: 002b:00007fbbd50f1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 980.783703][T22573] RAX: ffffffffffffffda RBX: 00007fbbd4415fa0 RCX: 00007fbbd419ce59 [ 980.783713][T22573] RDX: fffffffffffffffd RSI: fffffffffffffffc RDI: 0000000000000012 [ 980.783723][T22573] RBP: 00007fbbd4232e6f R08: 0000000000000001 R09: 0000000000000000 [ 980.783732][T22573] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 980.783741][T22573] R13: 00007fbbd4416038 R14: 00007fbbd4415fa0 R15: 00007ffc60d80768 [ 980.783760][T22573] [ 981.199019][T22580] [ 981.201365][T22580] ====================================================== [ 981.208364][T22580] WARNING: possible circular locking dependency detected [ 981.215361][T22580] syzkaller #0 Tainted: G U L [ 981.221316][T22580] ------------------------------------------------------ [ 981.228309][T22580] syz.6.3287/22580 is trying to acquire lock: [ 981.234351][T22580] ffff888069c1d568 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 981.245822][T22580] [ 981.245822][T22580] but task is already holding lock: [ 981.253164][T22580] ffff888069c1b460 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 981.262225][T22580] [ 981.262225][T22580] which lock already depends on the new lock. [ 981.262225][T22580] [ 981.272605][T22580] [ 981.272605][T22580] the existing dependency chain (in reverse order) is: [ 981.281596][T22580] [ 981.281596][T22580] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 981.289323][T22580] lock_acquire+0x1b9/0x370 [ 981.294340][T22580] lock_sock_nested+0x41/0xf0 [ 981.299534][T22580] smc_listen_out+0x1f5/0x4b0 [ 981.304717][T22580] smc_listen_work+0x4c2/0x50e0 [ 981.310068][T22580] process_one_work+0xa23/0x1940 [ 981.315515][T22580] worker_thread+0x5ef/0xe50 [ 981.320613][T22580] kthread+0x370/0x450 [ 981.325187][T22580] ret_from_fork+0x72b/0xd50 [ 981.330283][T22580] ret_from_fork_asm+0x1a/0x30 [ 981.335555][T22580] [ 981.335555][T22580] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 981.345698][T22580] check_prev_add+0xeb/0xe60 [ 981.350802][T22580] __lock_acquire+0x136c/0x1a40 [ 981.356164][T22580] lock_acquire+0x1b9/0x370 [ 981.361180][T22580] __flush_work+0x4de/0xcb0 [ 981.366193][T22580] cancel_work_sync+0xd1/0xf0 [ 981.371398][T22580] smc_clcsock_release+0x5f/0xe0 [ 981.376909][T22580] __smc_release+0x5c2/0x880 [ 981.382004][T22580] smc_close_non_accepted+0xda/0x200 [ 981.387793][T22580] smc_close_active+0x4ff/0x1070 [ 981.393245][T22580] __smc_release+0x634/0x880 [ 981.398336][T22580] smc_release+0x1fc/0x620 [ 981.403254][T22580] __sock_release+0xb3/0x260 [ 981.408383][T22580] sock_close+0x1c/0x30 [ 981.413047][T22580] __fput+0x3ff/0xb50 [ 981.417531][T22580] task_work_run+0x150/0x240 [ 981.422629][T22580] get_signal+0x1bd/0x21e0 [ 981.427552][T22580] arch_do_signal_or_restart+0x91/0x7a0 [ 981.433600][T22580] exit_to_user_mode_loop+0x139/0x6f0 [ 981.439494][T22580] do_syscall_64+0x652/0x840 [ 981.444590][T22580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.450984][T22580] [ 981.450984][T22580] other info that might help us debug this: [ 981.450984][T22580] [ 981.461190][T22580] Possible unsafe locking scenario: [ 981.461190][T22580] [ 981.468635][T22580] CPU0 CPU1 [ 981.473977][T22580] ---- ---- [ 981.479317][T22580] lock(sk_lock-AF_SMC/1); [ 981.483808][T22580] lock((work_completion)(&new_smc->smc_listen_work)); [ 981.493248][T22580] lock(sk_lock-AF_SMC/1); [ 981.500254][T22580] lock((work_completion)(&new_smc->smc_listen_work)); [ 981.507171][T22580] [ 981.507171][T22580] *** DEADLOCK *** [ 981.507171][T22580] [ 981.515291][T22580] 3 locks held by syz.6.3287/22580: [ 981.520464][T22580] #0: ffff88807658e9c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 981.530986][T22580] #1: ffff888069c1b460 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 981.540364][T22580] #2: ffffffff8e7e5ec0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 981.549488][T22580] [ 981.549488][T22580] stack backtrace: [ 981.555375][T22580] CPU: 0 UID: 0 PID: 22580 Comm: syz.6.3287 Tainted: G U L syzkaller #0 PREEMPT(full) [ 981.555400][T22580] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 981.555406][T22580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 981.555415][T22580] Call Trace: [ 981.555422][T22580] [ 981.555429][T22580] dump_stack_lvl+0x100/0x190 [ 981.555448][T22580] print_circular_bug.cold+0x178/0x1c7 [ 981.555474][T22580] check_noncircular+0x146/0x160 [ 981.555498][T22580] check_prev_add+0xeb/0xe60 [ 981.555521][T22580] __lock_acquire+0x136c/0x1a40 [ 981.555547][T22580] lock_acquire+0x1b9/0x370 [ 981.555569][T22580] ? __flush_work+0x4ca/0xcb0 [ 981.555591][T22580] ? mark_held_locks+0x40/0x70 [ 981.555613][T22580] ? __flush_work+0x4ca/0xcb0 [ 981.555635][T22580] __flush_work+0x4de/0xcb0 [ 981.555656][T22580] ? __flush_work+0x4ca/0xcb0 [ 981.555678][T22580] ? __pfx___flush_work+0x10/0x10 [ 981.555700][T22580] ? __lock_acquire+0x49f/0x1a40 [ 981.555723][T22580] ? __pfx_wq_barrier_func+0x10/0x10 [ 981.555742][T22580] ? __pfx___might_resched+0x10/0x10 [ 981.555765][T22580] ? __smc_release+0x5ba/0x880 [ 981.555780][T22580] cancel_work_sync+0xd1/0xf0 [ 981.555796][T22580] smc_clcsock_release+0x5f/0xe0 [ 981.555813][T22580] __smc_release+0x5c2/0x880 [ 981.555834][T22580] ? __pfx_sock_def_readable+0x10/0x10 [ 981.555854][T22580] smc_close_non_accepted+0xda/0x200 [ 981.555871][T22580] smc_close_active+0x4ff/0x1070 [ 981.555889][T22580] __smc_release+0x634/0x880 [ 981.555904][T22580] smc_release+0x1fc/0x620 [ 981.555919][T22580] __sock_release+0xb3/0x260 [ 981.555941][T22580] ? __pfx_sock_close+0x10/0x10 [ 981.555963][T22580] sock_close+0x1c/0x30 [ 981.555984][T22580] __fput+0x3ff/0xb50 [ 981.556003][T22580] task_work_run+0x150/0x240 [ 981.556025][T22580] ? __pfx_task_work_run+0x10/0x10 [ 981.556048][T22580] get_signal+0x1bd/0x21e0 [ 981.556064][T22580] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 981.556088][T22580] ? __pfx_task_work_add+0x10/0x10 [ 981.556110][T22580] ? __pfx_get_signal+0x10/0x10 [ 981.556128][T22580] arch_do_signal_or_restart+0x91/0x7a0 [ 981.556143][T22580] ? __sys_accept4+0x1cb/0x200 [ 981.556162][T22580] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 981.556182][T22580] exit_to_user_mode_loop+0x139/0x6f0 [ 981.556198][T22580] ? rcu_is_watching+0x12/0xc0 [ 981.556216][T22580] do_syscall_64+0x652/0x840 [ 981.556233][T22580] ? clear_bhb_loop+0x40/0x90 [ 981.556250][T22580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.556266][T22580] RIP: 0033:0x7fc15c19ce59 [ 981.556280][T22580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 981.556296][T22580] RSP: 002b:00007fc15cfcc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 981.556310][T22580] RAX: fffffffffffffe00 RBX: 00007fc15c415fa0 RCX: 00007fc15c19ce59 [ 981.556321][T22580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 981.556330][T22580] RBP: 00007fc15c232e6f R08: 0000000000000000 R09: 0000000000000000 [ 981.556340][T22580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 981.556349][T22580] R13: 00007fc15c416038 R14: 00007fc15c415fa0 R15: 00007fffbf3ff808 [ 981.556363][T22580] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 983.390082][T18749] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.478602][T18749] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.569699][T18749] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.654302][T18749] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 983.788143][T18749] bridge_slave_1: left allmulticast mode [ 983.809527][T18749] bridge_slave_1: left promiscuous mode [ 983.841121][T18749] bridge0: port 2(bridge_slave_1) entered disabled state [ 983.849743][T18749] bridge_slave_0: left allmulticast mode [ 983.855632][T18749] bridge_slave_0: left promiscuous mode [ 983.872800][T18749] bridge0: port 1(bridge_slave_0) entered disabled state [ 983.967825][T18749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 983.995910][T18749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 984.019274][T18749] bond0 (unregistering): Released all slaves [ 984.169570][T18749] hsr_slave_0: left promiscuous mode [ 984.182604][T18749] hsr_slave_1: left promiscuous mode [ 984.213767][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 984.223044][T18749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 984.241104][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 984.256324][T18749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 984.286020][T18749] veth1_macvtap: left promiscuous mode [ 984.293231][T18749] veth0_macvtap: left promiscuous mode [ 984.306442][T18749] veth1_vlan: left allmulticast mode [ 984.322352][T18749] veth1_vlan: left promiscuous mode [ 984.329528][T18749] veth0_vlan: left promiscuous mode [ 984.471357][T18749] team0 (unregistering): Port device team_slave_1 removed [ 984.488646][T18749] team0 (unregistering): Port device team_slave_0 removed [ 984.536594][ T5287] 8021q: adding VLAN 0 to HW filter on device eth9 [ 984.697292][T18749] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.765201][T18749] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.831684][T18749] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.866113][T18749] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 984.965959][T18749] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.008385][ T5287] 8021q: adding VLAN 0 to HW filter on device eth10 [ 985.018782][T18749] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.055121][T18749] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.086096][T18749] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.153998][T18749] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.195139][T18749] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.235434][T18749] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.276641][T18749] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 985.352324][T18749] bridge_slave_1: left allmulticast mode [ 985.365414][T18749] bridge_slave_1: left promiscuous mode [ 985.377021][T18749] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.398534][T18749] bridge_slave_1: left allmulticast mode [ 985.414796][T18749] bridge_slave_1: left promiscuous mode [ 985.434723][T18749] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.449118][T18749] bridge_slave_1: left allmulticast mode [ 985.465861][T18749] bridge_slave_1: left promiscuous mode [ 985.473178][T18749] bridge0: port 2(bridge_slave_1) entered disabled state [ 985.481103][T18749] bridge_slave_0: left allmulticast mode [ 985.488872][T18749] bridge_slave_0: left promiscuous mode [ 985.494769][T18749] bridge0: port 1(bridge_slave_0) entered disabled state [ 985.577310][T18749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.587025][T18749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.597799][T18749] bond0 (unregistering): Released all slaves [ 985.626998][T18749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.640358][T18749] bond0 (unregistering): Released all slaves [ 985.673089][T18749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 985.685105][T18749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 985.694633][T18749] bond0 (unregistering): Released all slaves [ 985.703128][ T5287] 8021q: adding VLAN 0 to HW filter on device eth11 [ 985.754890][T18749] &#$@\]\-: left promiscuous mode [ 985.792852][T18749] ovs_ÿþ: left promiscuous mode [ 985.825769][T18749] tipc: Left network mode [ 985.832408][T18749] tipc: Left network mode [ 986.226093][ T5287] 8021q: adding VLAN 0 to HW filter on device eth12 [ 986.262301][T18749] hsr_slave_0: left promiscuous mode [ 986.268589][T18749] hsr_slave_1: left promiscuous mode [ 986.275467][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.283105][T18749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.290527][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.298372][T18749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.306523][T18749] hsr_slave_0: left promiscuous mode [ 986.312223][T18749] hsr_slave_1: left promiscuous mode [ 986.317757][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.325829][T18749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.333490][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.343022][T18749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.352036][T18749] hsr_slave_0: left promiscuous mode [ 986.357595][T18749] hsr_slave_1: left promiscuous mode [ 986.363545][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 986.370920][T18749] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 986.378904][T18749] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 986.387225][T18749] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 986.397649][T18749] veth1_macvtap: left promiscuous mode [ 986.403293][T18749] veth0_macvtap: left promiscuous mode [ 986.408789][T18749] veth1_vlan: left promiscuous mode [ 986.414423][T18749] veth0_vlan: left promiscuous mode [ 986.420477][T18749] veth1_macvtap: left promiscuous mode [ 986.426214][T18749] veth0_macvtap: left promiscuous mode [ 986.431993][T18749] veth1_vlan: left promiscuous mode [ 986.437209][T18749] veth0_vlan: left promiscuous mode [ 986.568588][T18749] team0 (unregistering): Port device team_slave_1 removed [ 986.583438][T18749] team0 (unregistering): Port device team_slave_0 removed [ 986.660850][T18749] team0 (unregistering): Port device team_slave_1 removed [ 986.670761][T18749] team0 (unregistering): Port device team_slave_0 removed [ 986.771564][T18749] team0 (unregistering): Port device team_slave_1 removed [ 986.784517][T18749] team0 (unregistering): Port device team_slave_0 removed [ 987.312233][ T5287] 8021q: adding VLAN 0 to HW filter on device eth14 [ 987.695058][ T5287] 8021q: adding VLAN 0 to HW filter on device eth15 [ 987.924554][ T5287] 8021q: adding VLAN 0 to HW filter on device eth16 [ 988.141907][ T5287] 8021q: adding VLAN 0 to HW filter on device eth17 [ 988.359915][ T5287] 8021q: adding VLAN 0 to HW filter on device eth19 [ 988.577026][ T5287] 8021q: adding VLAN 0 to HW filter on device eth18 [ 988.798516][ T5287] 8021q: adding VLAN 0 to HW filter on device eth20 [ 989.039330][ T5287] 8021q: adding VLAN 0 to HW filter on device eth21 [ 989.258503][ T5287] 8021q: adding VLAN 0 to HW filter on device eth22 [ 989.476896][ T5287] 8021q: adding VLAN 0 to HW filter on device eth23 [ 989.695899][ T5287] 8021q: adding VLAN 0 to HW filter on device eth24 [ 989.918109][ T5287] 8021q: adding VLAN 0 to HW filter on device eth25