last executing test programs:

6.814560724s ago: executing program 3 (id=8851):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2)
socket(0xf, 0x3, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r2 = gettid()
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
kill$auto(r2, 0x11)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10b142, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
sysfs$auto(0x2, 0x2000000000040, 0x0)
r5 = socket(0x2, 0x3, 0xa)
setsockopt$auto(r5, 0x0, 0x19, 0x0, 0x9)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/controlC1\x00', 0x0, 0x0)
sendfile$auto(r3, r4, 0x0, 0x1000200)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)

6.430251467s ago: executing program 0 (id=8854):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

5.822956525s ago: executing program 3 (id=8856):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

5.781644443s ago: executing program 1 (id=8857):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
socket(0x2b, 0x800, 0x76)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r1 = socket(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r1)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r3, 0x1269, 0x0)

5.65485923s ago: executing program 2 (id=8858):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

5.332836206s ago: executing program 0 (id=8859):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

4.530912028s ago: executing program 3 (id=8860):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

4.451595665s ago: executing program 2 (id=8861):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), 0xffffffffffffffff)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r3, 0x1269, 0x0)

4.385524249s ago: executing program 1 (id=8862):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

4.023083817s ago: executing program 0 (id=8863):
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

3.27738964s ago: executing program 1 (id=8864):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2)
socket(0xf, 0x3, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r2 = gettid()
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
kill$auto(r2, 0x11)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
sysfs$auto(0x2, 0x2000000000040, 0x0)
r5 = socket(0x2, 0x3, 0xa)
setsockopt$auto(r5, 0x0, 0x19, 0x0, 0x9)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile$auto(r3, r4, 0x0, 0x1000200)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)

3.207868835s ago: executing program 2 (id=8865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r1 = socket(0x10, 0x2, 0x4)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek$auto(r3, 0x7fd, 0x1)
sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0)
set_mempolicy$auto(0x6, 0x0, 0x21)
r4 = pidfd_open$auto(0x1, 0x0)
setns(r4, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
read$auto(r6, 0x0, 0xb4d3)
write$auto(0x3, 0x0, 0xffd8)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

3.172145997s ago: executing program 3 (id=8866):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r1 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r1)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r3, 0x1269, 0x0)

2.40745302s ago: executing program 0 (id=8867):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

2.168027568s ago: executing program 1 (id=8868):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

2.11863594s ago: executing program 2 (id=8869):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, 0x0, 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

1.415651726s ago: executing program 1 (id=8870):
r0 = openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0xa0040, 0x0)
bpf$auto(0x80000001, &(0x7f0000000100)=@batch={0x7, 0x1000, 0x1dcd, 0x100000001, 0x5, r0, 0x97, 0x10001}, 0x1)
openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/event0\x00', 0x2f01, 0x0)
mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000)
openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000140), 0x100040, 0x0)
r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0)
ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
select$auto(0xd, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x948b, 0x7, 0x1, 0x10001, 0x3, 0x5e, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0)
write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9)
select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948e, 0xffffffffffffffff, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x6, 0x2, 0x6]}, 0x0)

1.415464393s ago: executing program 3 (id=8871):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
socket(0x2b, 0x800, 0x76)
r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r1 = socket(0x2, 0x1, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r1)
read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r3, 0x1269, 0x0)

1.368582445s ago: executing program 2 (id=8872):
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00'})
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

1.334074438s ago: executing program 0 (id=8873):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

106.724475ms ago: executing program 1 (id=8874):
close_range$auto(0x2, 0x8, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptyu7\x00', 0x103040, 0x0)
ioctl$auto(0x3, 0x540f, 0xffffffffffffffff)
mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000)
mmap$auto(0xffffffffffffff80, 0x20000a00004, 0x400002, 0x15, 0x602, 0x300000000000)
io_uring_setup$auto(0x6, 0x0)
close_range$auto(0x2, 0xa, 0x0)
openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f)
openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x96141, 0x0)
r0 = socket(0x2b, 0x800, 0x76)
r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0x80100, 0x0)
r2 = socket(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000b00), r2)
read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/122, 0x7a)
write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000)
r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/midiC2D3\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
fsetxattr$auto(0x1, 0x0, 0x0, 0x4, 0x6)
write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0)
openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/ip_vs_conn\x00', 0x121040, 0x0)
mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000)
futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005)
r4 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0)
ioctl$auto_BLKPG2(r4, 0x1269, 0x0)

50.159363ms ago: executing program 3 (id=8875):
mmap$auto(0x0, 0x20008, 0x4000000000df, 0x2000eb1, 0xffffffffffffffff, 0x3)
move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000)
r0 = socket(0x1d, 0x1, 0x7fff)
r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0)
writev$auto(r3, &(0x7f0000000080)={&(0x7f0000000040), 0x1000}, 0x3)
r4 = socket(0x18, 0x5, 0x1)
syz_genetlink_get_family_id$auto_smbd_genl(0x0, r0)
sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(r4, 0x0, 0x30004850)
pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x1)
close_range$auto(0x0, 0xfffffffffffff000, 0x2)
bpf$auto(0x6210d6b5, &(0x7f0000000100)=@link_detach={r4}, 0xffff)
bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0x0, 0xffffffffffffffff, 0xffffffff, 0x800}, 0x92)
msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004)
close_range$auto(0x2, 0x8, 0x0)
openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0)
ioctl$auto(r0, 0x9, r2)
mmap$auto(0x0, 0x5, 0x4000000000df, 0x1000000eb4, 0x401, 0x8000)
r5 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/bus/usb/037/001\x00', 0x40001, 0x0)
ioctl$auto_USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000040)={0xa0, 0x6, 0x5, 0xd102, 0x5, 0x80000, 0x0})

29.785797ms ago: executing program 0 (id=8876):
socket(0x2, 0x3, 0xa)
connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), r0)
openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0)
sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001e40)={0x18, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x220000c1}, 0xc0)
mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000)
recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0)
sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000)
mmap$auto(0x0, 0x10000000400008, 0xdf, 0x9b72, 0x2, 0x40000008000)
write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="1100", 0x2)
socket(0xf, 0x3, 0x2)
openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x20401, 0x0)
mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000)
io_uring_setup$auto(0x1, 0x0)
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
r2 = gettid()
futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001)
kill$auto(r2, 0x11)
r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0)
r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/43:288/max_ratio_fine\x00', 0x10b142, 0x0)
mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000)
sysfs$auto(0x2, 0x2000000000040, 0x0)
r5 = socket(0x2, 0x3, 0xa)
setsockopt$auto(r5, 0x0, 0x19, 0x0, 0x9)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile$auto(r3, r4, 0x0, 0x1000200)
openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x8600, 0x0)
fcntl$auto(0x3, 0x4, 0xa553)

0s ago: executing program 2 (id=8877):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00'})
sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000)
r1 = socket(0x10, 0x2, 0x4)
write$auto(r1, &(0x7f0000000000)='-\x00', 0x2fb)
openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0)
r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0)
lseek$auto(r3, 0x7fd, 0x1)
sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x400007ffff000)
bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3)
mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x0)
set_mempolicy$auto(0x6, 0x0, 0x21)
r4 = pidfd_open$auto(0x1, 0x0)
setns(r4, 0x0)
r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0)
sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0)
prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0)
write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9)
r6 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0)
read$auto(r6, 0x0, 0xb4d3)
write$auto(0x3, 0x0, 0xffd8)
msync$auto(0x1ffff000, 0x180000000000000, 0x400000004)
fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

215/0x3d0
[ 3142.185320][T25550]  ? __fget_files+0x215/0x3d0
[ 3142.185360][T25550]  ? __fget_files+0x21f/0x3d0
[ 3142.185403][T25550]  ksys_write+0x12a/0x250
[ 3142.185438][T25550]  ? __pfx_ksys_write+0x10/0x10
[ 3142.185484][T25550]  do_syscall_64+0xc9/0xf80
[ 3142.185523][T25550]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3142.185555][T25550] RIP: 0033:0x7f73f779acb9
[ 3142.185580][T25550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3142.185612][T25550] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3142.185643][T25550] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3142.185664][T25550] RDX: 00000000000002f8 RSI: 0000200000000040 RDI: 0000000000000008
[ 3142.185683][T25550] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3142.185703][T25550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3142.185723][T25550] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3142.185761][T25550]  </TASK>
[ 3142.744471][T25557] FAULT_INJECTION: forcing a failure.
[ 3142.744471][T25557] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3142.907218][T25557] CPU: 1 UID: 0 PID: 25557 Comm: syz.2.8126 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3142.907254][T25557] Tainted: [L]=SOFTLOCKUP
[ 3142.907261][T25557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3142.907274][T25557] Call Trace:
[ 3142.907281][T25557]  <TASK>
[ 3142.907290][T25557]  dump_stack_lvl+0x100/0x190
[ 3142.907320][T25557]  should_fail_ex.cold+0x5/0xa
[ 3142.907355][T25557]  _copy_from_user+0x2e/0xd0
[ 3142.907388][T25557]  snd_seq_oss_write+0x395/0x7f0
[ 3142.907422][T25557]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 3142.907455][T25557]  ? bpf_lsm_file_permission+0x9/0x10
[ 3142.907489][T25557]  odev_write+0x51/0xa0
[ 3142.907511][T25557]  vfs_write+0x2aa/0x1070
[ 3142.907535][T25557]  ? __pfx_odev_write+0x10/0x10
[ 3142.907559][T25557]  ? __pfx_vfs_write+0x10/0x10
[ 3142.907581][T25557]  ? find_held_lock+0x2b/0x80
[ 3142.907601][T25557]  ? __fget_files+0x215/0x3d0
[ 3142.907623][T25557]  ? __fget_files+0x215/0x3d0
[ 3142.907650][T25557]  ? __fget_files+0x21f/0x3d0
[ 3142.907678][T25557]  ksys_write+0x12a/0x250
[ 3142.907702][T25557]  ? __pfx_ksys_write+0x10/0x10
[ 3142.907732][T25557]  do_syscall_64+0xc9/0xf80
[ 3142.907760][T25557]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3142.907782][T25557] RIP: 0033:0x7f296319acb9
[ 3142.907798][T25557] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3142.907819][T25557] RSP: 002b:00007f29613f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3142.907840][T25557] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319acb9
[ 3142.907854][T25557] RDX: 00000000000002f8 RSI: 0000200000000040 RDI: 0000000000000009
[ 3142.907867][T25557] RBP: 00007f2963208bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3142.907881][T25557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3142.907894][T25557] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007ffe6fad1a18
[ 3142.907921][T25557]  </TASK>
[ 3143.914178][T25570] FAULT_INJECTION: forcing a failure.
[ 3143.914178][T25570] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3143.927580][T25570] CPU: 1 UID: 0 PID: 25570 Comm: syz.0.8131 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3143.927615][T25570] Tainted: [L]=SOFTLOCKUP
[ 3143.927623][T25570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3143.927637][T25570] Call Trace:
[ 3143.927645][T25570]  <TASK>
[ 3143.927654][T25570]  dump_stack_lvl+0x100/0x190
[ 3143.927686][T25570]  should_fail_ex.cold+0x5/0xa
[ 3143.927720][T25570]  ? prepare_alloc_pages+0x16d/0x5f0
[ 3143.927767][T25570]  should_fail_alloc_page+0xeb/0x140
[ 3143.927798][T25570]  prepare_alloc_pages+0x1f0/0x5f0
[ 3143.927831][T25570]  ? __pfx___up_read+0x10/0x10
[ 3143.927865][T25570]  __alloc_frozen_pages_noprof+0x193/0x2410
[ 3143.927899][T25570]  ? irqentry_exit+0x180/0x670
[ 3143.927923][T25570]  ? lockdep_hardirqs_on+0x78/0x100
[ 3143.927947][T25570]  ? irqentry_exit+0x180/0x670
[ 3143.927989][T25570]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 3143.928027][T25570]  ? rep_movs_alternative+0x4a/0x90
[ 3143.928062][T25570]  ? _copy_from_iter+0x270/0x1690
[ 3143.928097][T25570]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 3143.928123][T25570]  ? policy_nodemask+0xed/0x4f0
[ 3143.928157][T25570]  alloc_pages_mpol+0x1fb/0x550
[ 3143.928190][T25570]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 3143.928229][T25570]  alloc_pages_noprof+0x131/0x390
[ 3143.928263][T25570]  anon_pipe_write+0xabf/0x1d40
[ 3143.928303][T25570]  ? __pfx___schedule+0x10/0x10
[ 3143.928327][T25570]  ? __pfx_anon_pipe_write+0x10/0x10
[ 3143.928356][T25570]  ? preempt_schedule_thunk+0x16/0x30
[ 3143.928379][T25570]  ? preempt_schedule_common+0x42/0xc0
[ 3143.928404][T25570]  ? preempt_schedule_thunk+0x16/0x30
[ 3143.928429][T25570]  do_iter_readv_writev+0x6ee/0x920
[ 3143.928454][T25570]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3143.928476][T25570]  ? common_file_perm+0x1ab/0x4f0
[ 3143.928513][T25570]  ? bpf_lsm_file_permission+0x9/0x10
[ 3143.928544][T25570]  ? security_file_permission+0x76/0x210
[ 3143.928581][T25570]  ? rw_verify_area+0xce/0x6d0
[ 3143.928604][T25570]  vfs_writev+0x360/0xe10
[ 3143.928626][T25570]  ? futex_hash_put+0x43/0x50
[ 3143.928660][T25570]  ? __pfx_vfs_writev+0x10/0x10
[ 3143.928684][T25570]  ? io_uring_setup+0xd7/0x160
[ 3143.928731][T25570]  ? __fget_files+0x21f/0x3d0
[ 3143.928781][T25570]  ? do_writev+0x28a/0x340
[ 3143.928804][T25570]  do_writev+0x28a/0x340
[ 3143.928848][T25570]  ? __pfx_do_writev+0x10/0x10
[ 3143.928883][T25570]  do_syscall_64+0xc9/0xf80
[ 3143.928915][T25570]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3143.928941][T25570] RIP: 0033:0x7f73f779acb9
[ 3143.928961][T25570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3143.928986][T25570] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 3143.929010][T25570] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3143.929027][T25570] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000001
[ 3143.929042][T25570] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3143.929058][T25570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3143.929074][T25570] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3143.929105][T25570]  </TASK>
[ 3147.711582][T25615] FAULT_INJECTION: forcing a failure.
[ 3147.711582][T25615] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3147.779841][T25615] CPU: 1 UID: 0 PID: 25615 Comm: syz.2.8139 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3147.779879][T25615] Tainted: [L]=SOFTLOCKUP
[ 3147.779887][T25615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3147.779920][T25615] Call Trace:
[ 3147.779934][T25615]  <TASK>
[ 3147.779943][T25615]  dump_stack_lvl+0x100/0x190
[ 3147.779977][T25615]  should_fail_ex.cold+0x5/0xa
[ 3147.780017][T25615]  _copy_from_user+0x2e/0xd0
[ 3147.780055][T25615]  snd_seq_oss_write+0x4f6/0x7f0
[ 3147.780111][T25615]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 3147.780151][T25615]  ? bpf_lsm_file_permission+0x9/0x10
[ 3147.780191][T25615]  odev_write+0x51/0xa0
[ 3147.780216][T25615]  vfs_write+0x2aa/0x1070
[ 3147.780245][T25615]  ? __pfx_odev_write+0x10/0x10
[ 3147.780272][T25615]  ? __pfx_vfs_write+0x10/0x10
[ 3147.780298][T25615]  ? find_held_lock+0x2b/0x80
[ 3147.780322][T25615]  ? __fget_files+0x215/0x3d0
[ 3147.780348][T25615]  ? __fget_files+0x215/0x3d0
[ 3147.780379][T25615]  ? __fget_files+0x21f/0x3d0
[ 3147.780414][T25615]  ksys_write+0x12a/0x250
[ 3147.780441][T25615]  ? __pfx_ksys_write+0x10/0x10
[ 3147.780477][T25615]  do_syscall_64+0xc9/0xf80
[ 3147.780509][T25615]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3147.780535][T25615] RIP: 0033:0x7f296319acb9
[ 3147.780554][T25615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3147.780578][T25615] RSP: 002b:00007f29613f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3147.780602][T25615] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319acb9
[ 3147.780618][T25615] RDX: 00000000000002f8 RSI: 0000200000000040 RDI: 0000000000000009
[ 3147.780634][T25615] RBP: 00007f2963208bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3147.780649][T25615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3147.780664][T25615] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007ffe6fad1a18
[ 3147.780697][T25615]  </TASK>
[ 3148.482043][T25621] FAULT_INJECTION: forcing a failure.
[ 3148.482043][T25621] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3148.544721][T25621] CPU: 1 UID: 0 PID: 25621 Comm: syz.2.8141 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3148.544768][T25621] Tainted: [L]=SOFTLOCKUP
[ 3148.544779][T25621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3148.544793][T25621] Call Trace:
[ 3148.544801][T25621]  <TASK>
[ 3148.544810][T25621]  dump_stack_lvl+0x100/0x190
[ 3148.544842][T25621]  should_fail_ex.cold+0x5/0xa
[ 3148.544881][T25621]  ? prepare_alloc_pages+0x16d/0x5f0
[ 3148.544919][T25621]  should_fail_alloc_page+0xeb/0x140
[ 3148.544952][T25621]  prepare_alloc_pages+0x1f0/0x5f0
[ 3148.544987][T25621]  ? rcu_is_watching+0x12/0xc0
[ 3148.545013][T25621]  __alloc_frozen_pages_noprof+0x193/0x2410
[ 3148.545042][T25621]  ? __lock_acquire+0x4a5/0x2630
[ 3148.545083][T25621]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 3148.545112][T25621]  ? do_raw_spin_lock+0x128/0x260
[ 3148.545147][T25621]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3148.545181][T25621]  ? find_held_lock+0x2b/0x80
[ 3148.545211][T25621]  ? __lock_acquire+0x4a5/0x2630
[ 3148.545240][T25621]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 3148.545266][T25621]  ? policy_nodemask+0xed/0x4f0
[ 3148.545300][T25621]  alloc_pages_mpol+0x1fb/0x550
[ 3148.545333][T25621]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 3148.545373][T25621]  folio_alloc_mpol_noprof+0x36/0x340
[ 3148.545410][T25621]  shmem_alloc_folio+0x135/0x160
[ 3148.545434][T25621]  shmem_alloc_and_add_folio+0x371/0xd40
[ 3148.545469][T25621]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 3148.545499][T25621]  ? shmem_allowable_huge_orders+0x2bd/0x400
[ 3148.545555][T25621]  shmem_get_folio_gfp+0x6ab/0x1900
[ 3148.545604][T25621]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 3148.545634][T25621]  ? filemap_map_pages+0x9e0/0x2110
[ 3148.545667][T25621]  shmem_fault+0x1f9/0xa20
[ 3148.545693][T25621]  ? __lock_acquire+0x4a5/0x2630
[ 3148.545723][T25621]  ? __pfx_shmem_fault+0x10/0x10
[ 3148.545755][T25621]  ? __pfx_filemap_map_pages+0x10/0x10
[ 3148.545790][T25621]  __do_fault+0x10d/0x550
[ 3148.545824][T25621]  do_fault+0xaf9/0x1990
[ 3148.545867][T25621]  __handle_mm_fault+0x1807/0x2b50
[ 3148.545896][T25621]  ? mt_find+0x45e/0x8e0
[ 3148.545927][T25621]  ? __pfx___handle_mm_fault+0x10/0x10
[ 3148.545950][T25621]  ? __pfx_mt_find+0x10/0x10
[ 3148.545992][T25621]  ? find_vma+0xbf/0x140
[ 3148.546021][T25621]  ? __pfx_find_vma+0x10/0x10
[ 3148.546055][T25621]  handle_mm_fault+0x36d/0xa20
[ 3148.546095][T25621]  do_user_addr_fault+0x74c/0x12f0
[ 3148.546126][T25621]  exc_page_fault+0x6f/0xd0
[ 3148.546150][T25621]  asm_exc_page_fault+0x26/0x30
[ 3148.546170][T25621] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 3148.546203][T25621] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 4f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 3148.546223][T25621] RSP: 0018:ffffc9000483f898 EFLAGS: 00050206
[ 3148.546240][T25621] RAX: 0000000000000001 RBX: ffff888078bbd000 RCX: 0000000000001000
[ 3148.546254][T25621] RDX: 0000000000000001 RSI: 000000000000b000 RDI: ffff888078bbd000
[ 3148.546267][T25621] RBP: 000000000000b000 R08: 0000000000000001 R09: ffffed100f177bff
[ 3148.546280][T25621] R10: ffff888078bbdfff R11: 0000000000000000 R12: ffffc9000483fd18
[ 3148.546294][T25621] R13: 000000000000b000 R14: 0000000000001000 R15: 0000000000000000
[ 3148.546319][T25621]  _copy_from_iter+0x355/0x1690
[ 3148.546357][T25621]  ? policy_nodemask+0xed/0x4f0
[ 3148.546386][T25621]  ? __pfx__copy_from_iter+0x10/0x10
[ 3148.546420][T25621]  ? alloc_pages_mpol+0x25a/0x550
[ 3148.546451][T25621]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 3148.546487][T25621]  copy_page_from_iter+0xde/0x180
[ 3148.546522][T25621]  anon_pipe_write+0xae4/0x1d40
[ 3148.546557][T25621]  ? __pfx_anon_pipe_write+0x10/0x10
[ 3148.546583][T25621]  ? futex_unqueue+0x13d/0x2c0
[ 3148.546612][T25621]  ? __futex_wait+0x256/0x300
[ 3148.546636][T25621]  do_iter_readv_writev+0x6ee/0x920
[ 3148.546659][T25621]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3148.546680][T25621]  ? common_file_perm+0x1ab/0x4f0
[ 3148.546715][T25621]  ? bpf_lsm_file_permission+0x9/0x10
[ 3148.546744][T25621]  ? security_file_permission+0x76/0x210
[ 3148.546779][T25621]  ? rw_verify_area+0xce/0x6d0
[ 3148.546801][T25621]  vfs_writev+0x360/0xe10
[ 3148.546829][T25621]  ? __pfx_vfs_writev+0x10/0x10
[ 3148.546852][T25621]  ? io_uring_setup+0xd7/0x160
[ 3148.546897][T25621]  ? __fget_files+0x21f/0x3d0
[ 3148.546927][T25621]  ? do_writev+0x28a/0x340
[ 3148.546947][T25621]  do_writev+0x28a/0x340
[ 3148.546969][T25621]  ? __pfx_do_writev+0x10/0x10
[ 3148.546998][T25621]  do_syscall_64+0xc9/0xf80
[ 3148.547026][T25621]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3148.547047][T25621] RIP: 0033:0x7f296319acb9
[ 3148.547063][T25621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3148.547083][T25621] RSP: 002b:00007f29613f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 3148.547102][T25621] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319acb9
[ 3148.547116][T25621] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000001
[ 3148.547129][T25621] RBP: 00007f2963208bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3148.547142][T25621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3148.547154][T25621] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007ffe6fad1a18
[ 3148.547181][T25621]  </TASK>
[ 3153.765578][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 3153.773230][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 3157.109733][T25754] FAULT_INJECTION: forcing a failure.
[ 3157.109733][T25754] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3157.337571][T25754] CPU: 0 UID: 0 PID: 25754 Comm: syz.2.8167 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3157.337610][T25754] Tainted: [L]=SOFTLOCKUP
[ 3157.337618][T25754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3157.337632][T25754] Call Trace:
[ 3157.337640][T25754]  <TASK>
[ 3157.337649][T25754]  dump_stack_lvl+0x100/0x190
[ 3157.337680][T25754]  should_fail_ex.cold+0x5/0xa
[ 3157.337713][T25754]  ? prepare_alloc_pages+0x16d/0x5f0
[ 3157.337751][T25754]  should_fail_alloc_page+0xeb/0x140
[ 3157.337790][T25754]  prepare_alloc_pages+0x1f0/0x5f0
[ 3157.337830][T25754]  ? rcu_is_watching+0x12/0xc0
[ 3157.337857][T25754]  __alloc_frozen_pages_noprof+0x193/0x2410
[ 3157.337887][T25754]  ? __lock_acquire+0x4a5/0x2630
[ 3157.337927][T25754]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 3157.337984][T25754]  ? do_raw_spin_lock+0x128/0x260
[ 3157.338031][T25754]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3157.338066][T25754]  ? find_held_lock+0x2b/0x80
[ 3157.338097][T25754]  ? __lock_acquire+0x4a5/0x2630
[ 3157.338126][T25754]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 3157.338152][T25754]  ? policy_nodemask+0xed/0x4f0
[ 3157.338185][T25754]  alloc_pages_mpol+0x1fb/0x550
[ 3157.338218][T25754]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 3157.338258][T25754]  folio_alloc_mpol_noprof+0x36/0x340
[ 3157.338296][T25754]  shmem_alloc_folio+0x135/0x160
[ 3157.338319][T25754]  shmem_alloc_and_add_folio+0x371/0xd40
[ 3157.338354][T25754]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 3157.338384][T25754]  ? shmem_allowable_huge_orders+0x2bd/0x400
[ 3157.338418][T25754]  shmem_get_folio_gfp+0x6ab/0x1900
[ 3157.338451][T25754]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 3157.338480][T25754]  ? filemap_map_pages+0x9e0/0x2110
[ 3157.338513][T25754]  shmem_fault+0x1f9/0xa20
[ 3157.338539][T25754]  ? __lock_acquire+0x4a5/0x2630
[ 3157.338568][T25754]  ? __pfx_shmem_fault+0x10/0x10
[ 3157.338600][T25754]  ? __pfx_filemap_map_pages+0x10/0x10
[ 3157.338636][T25754]  __do_fault+0x10d/0x550
[ 3157.338669][T25754]  do_fault+0xaf9/0x1990
[ 3157.338708][T25754]  __handle_mm_fault+0x1807/0x2b50
[ 3157.338736][T25754]  ? mt_find+0x45e/0x8e0
[ 3157.338766][T25754]  ? __pfx___handle_mm_fault+0x10/0x10
[ 3157.338788][T25754]  ? __pfx_mt_find+0x10/0x10
[ 3157.338835][T25754]  ? find_vma+0xbf/0x140
[ 3157.338865][T25754]  ? __pfx_find_vma+0x10/0x10
[ 3157.338900][T25754]  handle_mm_fault+0x36d/0xa20
[ 3157.338930][T25754]  do_user_addr_fault+0x74c/0x12f0
[ 3157.338989][T25754]  exc_page_fault+0x6f/0xd0
[ 3157.339024][T25754]  asm_exc_page_fault+0x26/0x30
[ 3157.339046][T25754] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 3157.339083][T25754] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 4f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 3157.339105][T25754] RSP: 0018:ffffc900043af898 EFLAGS: 00050206
[ 3157.339123][T25754] RAX: 0000000000000001 RBX: ffff888034b36000 RCX: 0000000000001000
[ 3157.339138][T25754] RDX: 0000000000000001 RSI: 000000000000b000 RDI: ffff888034b36000
[ 3157.339152][T25754] RBP: 000000000000b000 R08: 0000000000000001 R09: ffffed1006966dff
[ 3157.339165][T25754] R10: ffff888034b36fff R11: 0000000000000000 R12: ffffc900043afd18
[ 3157.339180][T25754] R13: 000000000000b000 R14: 0000000000001000 R15: 0000000000000000
[ 3157.339207][T25754]  _copy_from_iter+0x355/0x1690
[ 3157.339247][T25754]  ? policy_nodemask+0xed/0x4f0
[ 3157.339278][T25754]  ? __pfx__copy_from_iter+0x10/0x10
[ 3157.339314][T25754]  ? alloc_pages_mpol+0x25a/0x550
[ 3157.339347][T25754]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 3157.339386][T25754]  copy_page_from_iter+0xde/0x180
[ 3157.339424][T25754]  anon_pipe_write+0xae4/0x1d40
[ 3157.339461][T25754]  ? __pfx_anon_pipe_write+0x10/0x10
[ 3157.339489][T25754]  ? futex_unqueue+0x13d/0x2c0
[ 3157.339519][T25754]  ? __futex_wait+0x256/0x300
[ 3157.339546][T25754]  do_iter_readv_writev+0x6ee/0x920
[ 3157.339572][T25754]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3157.339593][T25754]  ? common_file_perm+0x1ab/0x4f0
[ 3157.339630][T25754]  ? bpf_lsm_file_permission+0x9/0x10
[ 3157.339662][T25754]  ? security_file_permission+0x76/0x210
[ 3157.339699][T25754]  ? rw_verify_area+0xce/0x6d0
[ 3157.339723][T25754]  vfs_writev+0x360/0xe10
[ 3157.339753][T25754]  ? __pfx_vfs_writev+0x10/0x10
[ 3157.339778][T25754]  ? io_uring_setup+0xd7/0x160
[ 3157.339819][T25754]  ? __fget_files+0x21f/0x3d0
[ 3157.339856][T25754]  ? do_writev+0x28a/0x340
[ 3157.339877][T25754]  do_writev+0x28a/0x340
[ 3157.339902][T25754]  ? __pfx_do_writev+0x10/0x10
[ 3157.339932][T25754]  do_syscall_64+0xc9/0xf80
[ 3157.339986][T25754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3157.340022][T25754] RIP: 0033:0x7f296319acb9
[ 3157.340040][T25754] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3157.340063][T25754] RSP: 002b:00007f29613f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 3157.340115][T25754] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319acb9
[ 3157.340132][T25754] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000001
[ 3157.340148][T25754] RBP: 00007f2963208bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3157.340163][T25754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3157.340178][T25754] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007ffe6fad1a18
[ 3157.340210][T25754]  </TASK>
[ 3162.938362][T25821] FAULT_INJECTION: forcing a failure.
[ 3162.938362][T25821] name failslab, interval 1, probability 0, space 0, times 0
[ 3163.054159][T25821] CPU: 0 UID: 0 PID: 25821 Comm: syz.3.8182 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3163.054196][T25821] Tainted: [L]=SOFTLOCKUP
[ 3163.054204][T25821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3163.054218][T25821] Call Trace:
[ 3163.054225][T25821]  <TASK>
[ 3163.054234][T25821]  dump_stack_lvl+0x100/0x190
[ 3163.054266][T25821]  should_fail_ex.cold+0x5/0xa
[ 3163.054315][T25821]  should_failslab+0xc2/0x120
[ 3163.054347][T25821]  __kmalloc_cache_noprof+0x80/0x810
[ 3163.054371][T25821]  ? snd_seq_kernel_client_ctl+0x7e/0xd0
[ 3163.054395][T25821]  ? snd_seq_oss_writeq_new+0xb5/0x2b0
[ 3163.054545][T25821]  ? snd_seq_oss_writeq_new+0xb5/0x2b0
[ 3163.054592][T25821]  snd_seq_oss_writeq_new+0xb5/0x2b0
[ 3163.054639][T25821]  ? __pfx_snd_seq_oss_writeq_new+0x10/0x10
[ 3163.054695][T25821]  ? mark_held_locks+0x40/0x70
[ 3163.054734][T25821]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3163.054756][T25821]  ? lockdep_hardirqs_on+0x78/0x100
[ 3163.054783][T25821]  snd_seq_oss_open+0x7bc/0xa10
[ 3163.054811][T25821]  odev_open+0x79/0xc0
[ 3163.054830][T25821]  ? __pfx_odev_open+0x10/0x10
[ 3163.054850][T25821]  soundcore_open+0x2e3/0x5a0
[ 3163.054876][T25821]  ? __pfx_soundcore_open+0x10/0x10
[ 3163.054898][T25821]  chrdev_open+0x234/0x6a0
[ 3163.054924][T25821]  ? __pfx_apparmor_file_open+0x10/0x10
[ 3163.054952][T25821]  ? __pfx_chrdev_open+0x10/0x10
[ 3163.055006][T25821]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 3163.055050][T25821]  do_dentry_open+0x73e/0x1570
[ 3163.055083][T25821]  ? __pfx_chrdev_open+0x10/0x10
[ 3163.055109][T25821]  ? security_inode_permission+0xbf/0x250
[ 3163.055145][T25821]  vfs_open+0x82/0x3f0
[ 3163.055179][T25821]  path_openat+0x21dc/0x3120
[ 3163.055212][T25821]  ? __pfx_path_openat+0x10/0x10
[ 3163.055246][T25821]  do_filp_open+0x1f7/0x420
[ 3163.055272][T25821]  ? __pfx_do_filp_open+0x10/0x10
[ 3163.055320][T25821]  ? _raw_spin_unlock+0x28/0x50
[ 3163.055340][T25821]  ? alloc_fd+0x476/0x790
[ 3163.055371][T25821]  do_sys_openat2+0x12e/0x220
[ 3163.055403][T25821]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3163.055445][T25821]  __x64_sys_openat+0x12d/0x210
[ 3163.055478][T25821]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3163.055510][T25821]  ? xfd_validate_state+0x129/0x190
[ 3163.055553][T25821]  do_syscall_64+0xc9/0xf80
[ 3163.055579][T25821]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3163.055602][T25821] RIP: 0033:0x7fd96879acb9
[ 3163.055619][T25821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3163.055639][T25821] RSP: 002b:00007fd969642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3163.055660][T25821] RAX: ffffffffffffffda RBX: 00007fd968a15fa0 RCX: 00007fd96879acb9
[ 3163.055674][T25821] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3163.055688][T25821] RBP: 00007fd968808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3163.055701][T25821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3163.055714][T25821] R13: 00007fd968a16038 R14: 00007fd968a15fa0 R15: 00007ffc57f2af88
[ 3163.055740][T25821]  </TASK>
[ 3173.086432][T25947] FAULT_INJECTION: forcing a failure.
[ 3173.086432][T25947] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3173.274287][T25947] CPU: 1 UID: 0 PID: 25947 Comm: syz.1.8208 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3173.274338][T25947] Tainted: [L]=SOFTLOCKUP
[ 3173.274347][T25947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3173.274361][T25947] Call Trace:
[ 3173.274370][T25947]  <TASK>
[ 3173.274380][T25947]  dump_stack_lvl+0x100/0x190
[ 3173.274415][T25947]  should_fail_ex.cold+0x5/0xa
[ 3173.274455][T25947]  _copy_from_user+0x2e/0xd0
[ 3173.274532][T25947]  snd_seq_oss_write+0x4f6/0x7f0
[ 3173.274580][T25947]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 3173.274619][T25947]  ? bpf_lsm_file_permission+0x9/0x10
[ 3173.274664][T25947]  odev_write+0x51/0xa0
[ 3173.274689][T25947]  vfs_write+0x2aa/0x1070
[ 3173.274717][T25947]  ? __pfx_odev_write+0x10/0x10
[ 3173.274744][T25947]  ? __pfx_vfs_write+0x10/0x10
[ 3173.274769][T25947]  ? find_held_lock+0x2b/0x80
[ 3173.274793][T25947]  ? __fget_files+0x215/0x3d0
[ 3173.274818][T25947]  ? __fget_files+0x215/0x3d0
[ 3173.274848][T25947]  ? __fget_files+0x21f/0x3d0
[ 3173.274881][T25947]  ksys_write+0x12a/0x250
[ 3173.274909][T25947]  ? __pfx_ksys_write+0x10/0x10
[ 3173.274944][T25947]  do_syscall_64+0xc9/0xf80
[ 3173.274974][T25947]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3173.275000][T25947] RIP: 0033:0x7fdf0059acb9
[ 3173.275018][T25947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3173.275042][T25947] RSP: 002b:00007fdf013a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3173.275065][T25947] RAX: ffffffffffffffda RBX: 00007fdf00815fa0 RCX: 00007fdf0059acb9
[ 3173.275081][T25947] RDX: 00000000000002f8 RSI: 0000200000000040 RDI: 0000000000000009
[ 3173.275096][T25947] RBP: 00007fdf00608bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3173.275111][T25947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3173.275125][T25947] R13: 00007fdf00816038 R14: 00007fdf00815fa0 R15: 00007ffecda1d088
[ 3173.275156][T25947]  </TASK>
[ 3175.936380][T25977] FAULT_INJECTION: forcing a failure.
[ 3175.936380][T25977] name failslab, interval 1, probability 0, space 0, times 0
[ 3176.054668][T25977] CPU: 1 UID: 0 PID: 25977 Comm: syz.0.8215 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3176.054704][T25977] Tainted: [L]=SOFTLOCKUP
[ 3176.054711][T25977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3176.054725][T25977] Call Trace:
[ 3176.054732][T25977]  <TASK>
[ 3176.054740][T25977]  dump_stack_lvl+0x100/0x190
[ 3176.054771][T25977]  should_fail_ex.cold+0x5/0xa
[ 3176.054806][T25977]  should_failslab+0xc2/0x120
[ 3176.054836][T25977]  ? tomoyo_encode2+0xfb/0x3c0
[ 3176.054855][T25977]  __kmalloc_noprof+0xf6/0x9c0
[ 3176.054884][T25977]  ? tomoyo_encode2+0xfb/0x3c0
[ 3176.054903][T25977]  tomoyo_encode2+0xfb/0x3c0
[ 3176.054927][T25977]  tomoyo_encode+0x29/0x50
[ 3176.054946][T25977]  tomoyo_realpath_from_path+0x18c/0x690
[ 3176.054974][T25977]  tomoyo_check_open_permission+0x2af/0x3c0
[ 3176.055007][T25977]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 3176.055063][T25977]  ? do_raw_spin_lock+0x128/0x260
[ 3176.055097][T25977]  ? path_get+0x61/0x80
[ 3176.055127][T25977]  tomoyo_file_open+0x6b/0x90
[ 3176.055164][T25977]  security_file_open+0xb5/0x1e0
[ 3176.055184][T25977]  do_dentry_open+0x58c/0x1570
[ 3176.055212][T25977]  ? security_inode_permission+0xbf/0x250
[ 3176.055248][T25977]  vfs_open+0x82/0x3f0
[ 3176.055281][T25977]  path_openat+0x21dc/0x3120
[ 3176.055332][T25977]  ? __pfx_path_openat+0x10/0x10
[ 3176.055368][T25977]  do_filp_open+0x1f7/0x420
[ 3176.055396][T25977]  ? __pfx_do_filp_open+0x10/0x10
[ 3176.055443][T25977]  ? _raw_spin_unlock+0x28/0x50
[ 3176.055464][T25977]  ? alloc_fd+0x476/0x790
[ 3176.055497][T25977]  do_sys_openat2+0x12e/0x220
[ 3176.055531][T25977]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3176.055567][T25977]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 3176.055602][T25977]  __x64_sys_openat+0x12d/0x210
[ 3176.055637][T25977]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3176.055670][T25977]  ? xfd_validate_state+0x129/0x190
[ 3176.055715][T25977]  do_syscall_64+0xc9/0xf80
[ 3176.055744][T25977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3176.055767][T25977] RIP: 0033:0x7f73f779acb9
[ 3176.055785][T25977] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3176.055808][T25977] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3176.055831][T25977] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3176.055846][T25977] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3176.055861][T25977] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3176.055875][T25977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3176.055889][T25977] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3176.055918][T25977]  </TASK>
[ 3176.055943][T25977] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3176.609815][T25982] FAULT_INJECTION: forcing a failure.
[ 3176.609815][T25982] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3176.623225][T25982] CPU: 1 UID: 0 PID: 25982 Comm: syz.2.8218 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3176.623262][T25982] Tainted: [L]=SOFTLOCKUP
[ 3176.623271][T25982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3176.623286][T25982] Call Trace:
[ 3176.623295][T25982]  <TASK>
[ 3176.623304][T25982]  dump_stack_lvl+0x100/0x190
[ 3176.623337][T25982]  should_fail_ex.cold+0x5/0xa
[ 3176.623372][T25982]  ? prepare_alloc_pages+0x16d/0x5f0
[ 3176.623412][T25982]  should_fail_alloc_page+0xeb/0x140
[ 3176.623447][T25982]  prepare_alloc_pages+0x1f0/0x5f0
[ 3176.623485][T25982]  ? rcu_is_watching+0x12/0xc0
[ 3176.623512][T25982]  __alloc_frozen_pages_noprof+0x193/0x2410
[ 3176.623543][T25982]  ? __lock_acquire+0x4a5/0x2630
[ 3176.623586][T25982]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 3176.623628][T25982]  ? do_raw_spin_lock+0x128/0x260
[ 3176.623662][T25982]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3176.623695][T25982]  ? find_held_lock+0x2b/0x80
[ 3176.623724][T25982]  ? __lock_acquire+0x4a5/0x2630
[ 3176.623753][T25982]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 3176.623778][T25982]  ? policy_nodemask+0xed/0x4f0
[ 3176.623812][T25982]  alloc_pages_mpol+0x1fb/0x550
[ 3176.623844][T25982]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 3176.623883][T25982]  folio_alloc_mpol_noprof+0x36/0x340
[ 3176.623921][T25982]  shmem_alloc_folio+0x135/0x160
[ 3176.623944][T25982]  shmem_alloc_and_add_folio+0x371/0xd40
[ 3176.623979][T25982]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 3176.624009][T25982]  ? shmem_allowable_huge_orders+0x2bd/0x400
[ 3176.624042][T25982]  shmem_get_folio_gfp+0x6ab/0x1900
[ 3176.624075][T25982]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 3176.624111][T25982]  ? filemap_map_pages+0x9e0/0x2110
[ 3176.624145][T25982]  shmem_fault+0x1f9/0xa20
[ 3176.624172][T25982]  ? __lock_acquire+0x4a5/0x2630
[ 3176.624202][T25982]  ? __pfx_shmem_fault+0x10/0x10
[ 3176.624234][T25982]  ? __pfx_filemap_map_pages+0x10/0x10
[ 3176.624281][T25982]  __do_fault+0x10d/0x550
[ 3176.624331][T25982]  do_fault+0xaf9/0x1990
[ 3176.624370][T25982]  __handle_mm_fault+0x1807/0x2b50
[ 3176.624398][T25982]  ? mt_find+0x45e/0x8e0
[ 3176.624428][T25982]  ? __pfx___handle_mm_fault+0x10/0x10
[ 3176.624451][T25982]  ? __pfx_mt_find+0x10/0x10
[ 3176.624529][T25982]  ? find_vma+0xbf/0x140
[ 3176.624571][T25982]  ? __pfx_find_vma+0x10/0x10
[ 3176.624622][T25982]  handle_mm_fault+0x36d/0xa20
[ 3176.624653][T25982]  do_user_addr_fault+0x74c/0x12f0
[ 3176.624685][T25982]  exc_page_fault+0x6f/0xd0
[ 3176.624712][T25982]  asm_exc_page_fault+0x26/0x30
[ 3176.624734][T25982] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 3176.624769][T25982] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 4f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 3176.624792][T25982] RSP: 0018:ffffc9000b3c7898 EFLAGS: 00050206
[ 3176.624810][T25982] RAX: 0000000000000001 RBX: ffff8880acb63000 RCX: 0000000000001000
[ 3176.624825][T25982] RDX: 0000000000000001 RSI: 000000000000a000 RDI: ffff8880acb63000
[ 3176.624839][T25982] RBP: 000000000000a000 R08: 0000000000000001 R09: ffffed101596c7ff
[ 3176.624852][T25982] R10: ffff8880acb63fff R11: 0000000000000000 R12: ffffc9000b3c7d18
[ 3176.624866][T25982] R13: 000000000000a000 R14: 0000000000001000 R15: 0000000000000000
[ 3176.624893][T25982]  _copy_from_iter+0x355/0x1690
[ 3176.624933][T25982]  ? policy_nodemask+0xed/0x4f0
[ 3176.624964][T25982]  ? __pfx__copy_from_iter+0x10/0x10
[ 3176.625000][T25982]  ? alloc_pages_mpol+0x25a/0x550
[ 3176.625033][T25982]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 3176.625070][T25982]  copy_page_from_iter+0xde/0x180
[ 3176.625115][T25982]  anon_pipe_write+0xae4/0x1d40
[ 3176.625152][T25982]  ? __pfx_anon_pipe_write+0x10/0x10
[ 3176.625179][T25982]  ? futex_unqueue+0x13d/0x2c0
[ 3176.625211][T25982]  ? __futex_wait+0x256/0x300
[ 3176.625238][T25982]  do_iter_readv_writev+0x6ee/0x920
[ 3176.625262][T25982]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3176.625284][T25982]  ? common_file_perm+0x1ab/0x4f0
[ 3176.625321][T25982]  ? bpf_lsm_file_permission+0x9/0x10
[ 3176.625352][T25982]  ? security_file_permission+0x76/0x210
[ 3176.625389][T25982]  ? rw_verify_area+0xce/0x6d0
[ 3176.625413][T25982]  vfs_writev+0x360/0xe10
[ 3176.625443][T25982]  ? __pfx_vfs_writev+0x10/0x10
[ 3176.625468][T25982]  ? io_uring_setup+0xd7/0x160
[ 3176.625509][T25982]  ? __fget_files+0x21f/0x3d0
[ 3176.625540][T25982]  ? do_writev+0x28a/0x340
[ 3176.625561][T25982]  do_writev+0x28a/0x340
[ 3176.625584][T25982]  ? __pfx_do_writev+0x10/0x10
[ 3176.625615][T25982]  do_syscall_64+0xc9/0xf80
[ 3176.625643][T25982]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3176.625666][T25982] RIP: 0033:0x7f296319acb9
[ 3176.625683][T25982] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3176.625706][T25982] RSP: 002b:00007f29613f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 3176.625726][T25982] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319acb9
[ 3176.625741][T25982] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000001
[ 3176.625755][T25982] RBP: 00007f2963208bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3176.625769][T25982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3176.625783][T25982] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007ffe6fad1a18
[ 3176.625811][T25982]  </TASK>
[ 3181.577821][T26026] FAULT_INJECTION: forcing a failure.
[ 3181.577821][T26026] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3181.754559][T26026] CPU: 1 UID: 0 PID: 26026 Comm: syz.2.8227 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3181.754611][T26026] Tainted: [L]=SOFTLOCKUP
[ 3181.754620][T26026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3181.754634][T26026] Call Trace:
[ 3181.754642][T26026]  <TASK>
[ 3181.754651][T26026]  dump_stack_lvl+0x100/0x190
[ 3181.754688][T26026]  should_fail_ex.cold+0x5/0xa
[ 3181.754722][T26026]  ? prepare_alloc_pages+0x16d/0x5f0
[ 3181.754758][T26026]  should_fail_alloc_page+0xeb/0x140
[ 3181.754817][T26026]  prepare_alloc_pages+0x1f0/0x5f0
[ 3181.754864][T26026]  ? rcu_is_watching+0x12/0xc0
[ 3181.754903][T26026]  __alloc_frozen_pages_noprof+0x193/0x2410
[ 3181.754941][T26026]  ? __lock_acquire+0x4a5/0x2630
[ 3181.754981][T26026]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 3181.755009][T26026]  ? do_raw_spin_lock+0x128/0x260
[ 3181.755044][T26026]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3181.755078][T26026]  ? find_held_lock+0x2b/0x80
[ 3181.755107][T26026]  ? __lock_acquire+0x4a5/0x2630
[ 3181.755136][T26026]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 3181.755165][T26026]  ? policy_nodemask+0xed/0x4f0
[ 3181.755199][T26026]  alloc_pages_mpol+0x1fb/0x550
[ 3181.755232][T26026]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 3181.755271][T26026]  folio_alloc_mpol_noprof+0x36/0x340
[ 3181.755309][T26026]  shmem_alloc_folio+0x135/0x160
[ 3181.755332][T26026]  shmem_alloc_and_add_folio+0x371/0xd40
[ 3181.755366][T26026]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 3181.755396][T26026]  ? shmem_allowable_huge_orders+0x2bd/0x400
[ 3181.755430][T26026]  shmem_get_folio_gfp+0x6ab/0x1900
[ 3181.755463][T26026]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 3181.755492][T26026]  ? filemap_map_pages+0x9e0/0x2110
[ 3181.755525][T26026]  shmem_fault+0x1f9/0xa20
[ 3181.755552][T26026]  ? __lock_acquire+0x4a5/0x2630
[ 3181.755581][T26026]  ? __pfx_shmem_fault+0x10/0x10
[ 3181.755613][T26026]  ? __pfx_filemap_map_pages+0x10/0x10
[ 3181.755685][T26026]  __do_fault+0x10d/0x550
[ 3181.755731][T26026]  do_fault+0xaf9/0x1990
[ 3181.755770][T26026]  __handle_mm_fault+0x1807/0x2b50
[ 3181.755798][T26026]  ? mt_find+0x45e/0x8e0
[ 3181.755828][T26026]  ? __pfx___handle_mm_fault+0x10/0x10
[ 3181.755851][T26026]  ? __pfx_mt_find+0x10/0x10
[ 3181.755893][T26026]  ? find_vma+0xbf/0x140
[ 3181.755924][T26026]  ? __pfx_find_vma+0x10/0x10
[ 3181.755957][T26026]  handle_mm_fault+0x36d/0xa20
[ 3181.755986][T26026]  do_user_addr_fault+0x74c/0x12f0
[ 3181.756019][T26026]  exc_page_fault+0x6f/0xd0
[ 3181.756045][T26026]  asm_exc_page_fault+0x26/0x30
[ 3181.756066][T26026] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 3181.756100][T26026] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 4f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 3181.756123][T26026] RSP: 0018:ffffc9000b11f898 EFLAGS: 00050206
[ 3181.756142][T26026] RAX: 0000000000000001 RBX: ffff88802a7e9000 RCX: 0000000000001000
[ 3181.756157][T26026] RDX: 0000000000000001 RSI: 000000000000a000 RDI: ffff88802a7e9000
[ 3181.756171][T26026] RBP: 000000000000a000 R08: 0000000000000001 R09: ffffed10054fd3ff
[ 3181.756185][T26026] R10: ffff88802a7e9fff R11: 0000000000000000 R12: ffffc9000b11fd18
[ 3181.756200][T26026] R13: 000000000000a000 R14: 0000000000001000 R15: 0000000000000000
[ 3181.756227][T26026]  _copy_from_iter+0x355/0x1690
[ 3181.756267][T26026]  ? policy_nodemask+0xed/0x4f0
[ 3181.756299][T26026]  ? __pfx__copy_from_iter+0x10/0x10
[ 3181.756334][T26026]  ? alloc_pages_mpol+0x25a/0x550
[ 3181.756367][T26026]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 3181.756405][T26026]  copy_page_from_iter+0xde/0x180
[ 3181.756443][T26026]  anon_pipe_write+0xae4/0x1d40
[ 3181.756480][T26026]  ? __pfx_anon_pipe_write+0x10/0x10
[ 3181.756508][T26026]  ? futex_unqueue+0x13d/0x2c0
[ 3181.756539][T26026]  ? __futex_wait+0x256/0x300
[ 3181.756565][T26026]  do_iter_readv_writev+0x6ee/0x920
[ 3181.756590][T26026]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3181.756612][T26026]  ? common_file_perm+0x1ab/0x4f0
[ 3181.756649][T26026]  ? bpf_lsm_file_permission+0x9/0x10
[ 3181.756685][T26026]  ? security_file_permission+0x76/0x210
[ 3181.756723][T26026]  ? rw_verify_area+0xce/0x6d0
[ 3181.756772][T26026]  vfs_writev+0x360/0xe10
[ 3181.756815][T26026]  ? __pfx_vfs_writev+0x10/0x10
[ 3181.756847][T26026]  ? io_uring_setup+0xd7/0x160
[ 3181.756888][T26026]  ? __fget_files+0x21f/0x3d0
[ 3181.756922][T26026]  ? do_writev+0x28a/0x340
[ 3181.756942][T26026]  do_writev+0x28a/0x340
[ 3181.756966][T26026]  ? __pfx_do_writev+0x10/0x10
[ 3181.756996][T26026]  do_syscall_64+0xc9/0xf80
[ 3181.757025][T26026]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3181.757048][T26026] RIP: 0033:0x7f296319acb9
[ 3181.757065][T26026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3181.757086][T26026] RSP: 002b:00007f29613f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 3181.757107][T26026] RAX: ffffffffffffffda RBX: 00007f2963415fa0 RCX: 00007f296319acb9
[ 3181.757121][T26026] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000001
[ 3181.757135][T26026] RBP: 00007f2963208bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3181.757148][T26026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3181.757162][T26026] R13: 00007f2963416038 R14: 00007f2963415fa0 R15: 00007ffe6fad1a18
[ 3181.757190][T26026]  </TASK>
[ 3185.008440][T26054] FAULT_INJECTION: forcing a failure.
[ 3185.008440][T26054] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 3185.095123][T26054] CPU: 0 UID: 0 PID: 26054 Comm: syz.0.8232 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3185.095160][T26054] Tainted: [L]=SOFTLOCKUP
[ 3185.095169][T26054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3185.095183][T26054] Call Trace:
[ 3185.095202][T26054]  <TASK>
[ 3185.095210][T26054]  dump_stack_lvl+0x100/0x190
[ 3185.095240][T26054]  should_fail_ex.cold+0x5/0xa
[ 3185.095272][T26054]  ? prepare_alloc_pages+0x16d/0x5f0
[ 3185.095307][T26054]  should_fail_alloc_page+0xeb/0x140
[ 3185.095339][T26054]  prepare_alloc_pages+0x1f0/0x5f0
[ 3185.095378][T26054]  ? rcu_is_watching+0x12/0xc0
[ 3185.095402][T26054]  __alloc_frozen_pages_noprof+0x193/0x2410
[ 3185.095430][T26054]  ? __lock_acquire+0x4a5/0x2630
[ 3185.095468][T26054]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 3185.095495][T26054]  ? do_raw_spin_lock+0x128/0x260
[ 3185.095528][T26054]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 3185.095560][T26054]  ? find_held_lock+0x2b/0x80
[ 3185.095588][T26054]  ? __lock_acquire+0x4a5/0x2630
[ 3185.095615][T26054]  ? __sanitizer_cov_trace_switch+0x54/0x90
[ 3185.095640][T26054]  ? policy_nodemask+0xed/0x4f0
[ 3185.095671][T26054]  alloc_pages_mpol+0x1fb/0x550
[ 3185.095702][T26054]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 3185.095739][T26054]  folio_alloc_mpol_noprof+0x36/0x340
[ 3185.095774][T26054]  shmem_alloc_folio+0x135/0x160
[ 3185.095796][T26054]  shmem_alloc_and_add_folio+0x371/0xd40
[ 3185.095827][T26054]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[ 3185.095855][T26054]  ? shmem_allowable_huge_orders+0x2bd/0x400
[ 3185.095887][T26054]  shmem_get_folio_gfp+0x6ab/0x1900
[ 3185.095918][T26054]  ? __pfx_shmem_get_folio_gfp+0x10/0x10
[ 3185.095945][T26054]  ? filemap_map_pages+0x9e0/0x2110
[ 3185.095976][T26054]  shmem_fault+0x1f9/0xa20
[ 3185.096001][T26054]  ? __lock_acquire+0x4a5/0x2630
[ 3185.096029][T26054]  ? __pfx_shmem_fault+0x10/0x10
[ 3185.096058][T26054]  ? __pfx_filemap_map_pages+0x10/0x10
[ 3185.096092][T26054]  __do_fault+0x10d/0x550
[ 3185.096123][T26054]  do_fault+0xaf9/0x1990
[ 3185.096159][T26054]  __handle_mm_fault+0x1807/0x2b50
[ 3185.096185][T26054]  ? mt_find+0x45e/0x8e0
[ 3185.096213][T26054]  ? __pfx___handle_mm_fault+0x10/0x10
[ 3185.096234][T26054]  ? __pfx_mt_find+0x10/0x10
[ 3185.096274][T26054]  ? find_vma+0xbf/0x140
[ 3185.096301][T26054]  ? __pfx_find_vma+0x10/0x10
[ 3185.096332][T26054]  handle_mm_fault+0x36d/0xa20
[ 3185.096360][T26054]  do_user_addr_fault+0x74c/0x12f0
[ 3185.096397][T26054]  exc_page_fault+0x6f/0xd0
[ 3185.096422][T26054]  asm_exc_page_fault+0x26/0x30
[ 3185.096442][T26054] RIP: 0010:rep_movs_alternative+0x4a/0x90
[ 3185.096475][T26054] Code: 7d 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 4f 7d 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 3185.096496][T26054] RSP: 0018:ffffc9000b947898 EFLAGS: 00050206
[ 3185.096513][T26054] RAX: 0000000000000001 RBX: ffff88809545b000 RCX: 0000000000001000
[ 3185.096527][T26054] RDX: 0000000000000001 RSI: 0000000000003000 RDI: ffff88809545b000
[ 3185.096540][T26054] RBP: 0000000000003000 R08: 0000000000000001 R09: ffffed1012a8b7ff
[ 3185.096554][T26054] R10: ffff88809545bfff R11: 0000000000000000 R12: ffffc9000b947d18
[ 3185.096567][T26054] R13: 0000000000003000 R14: 0000000000001000 R15: 0000000000000000
[ 3185.096593][T26054]  _copy_from_iter+0x355/0x1690
[ 3185.096630][T26054]  ? policy_nodemask+0xed/0x4f0
[ 3185.096660][T26054]  ? __pfx__copy_from_iter+0x10/0x10
[ 3185.096693][T26054]  ? alloc_pages_mpol+0x25a/0x550
[ 3185.096724][T26054]  ? __pfx_alloc_pages_mpol+0x10/0x10
[ 3185.096759][T26054]  copy_page_from_iter+0xde/0x180
[ 3185.096795][T26054]  anon_pipe_write+0xae4/0x1d40
[ 3185.096829][T26054]  ? __pfx_anon_pipe_write+0x10/0x10
[ 3185.096855][T26054]  ? futex_unqueue+0x13d/0x2c0
[ 3185.096884][T26054]  ? __futex_wait+0x256/0x300
[ 3185.096909][T26054]  do_iter_readv_writev+0x6ee/0x920
[ 3185.096933][T26054]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 3185.096953][T26054]  ? common_file_perm+0x1ab/0x4f0
[ 3185.096988][T26054]  ? bpf_lsm_file_permission+0x9/0x10
[ 3185.097017][T26054]  ? security_file_permission+0x76/0x210
[ 3185.097051][T26054]  ? rw_verify_area+0xce/0x6d0
[ 3185.097073][T26054]  vfs_writev+0x360/0xe10
[ 3185.097101][T26054]  ? __pfx_vfs_writev+0x10/0x10
[ 3185.097124][T26054]  ? io_uring_setup+0xd7/0x160
[ 3185.097163][T26054]  ? __fget_files+0x21f/0x3d0
[ 3185.097192][T26054]  ? do_writev+0x28a/0x340
[ 3185.097212][T26054]  do_writev+0x28a/0x340
[ 3185.097233][T26054]  ? __pfx_do_writev+0x10/0x10
[ 3185.097262][T26054]  do_syscall_64+0xc9/0xf80
[ 3185.097289][T26054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3185.097310][T26054] RIP: 0033:0x7f73f779acb9
[ 3185.097326][T26054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3185.097347][T26054] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 3185.097375][T26054] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3185.097390][T26054] RDX: 0000000000000001 RSI: 0000200000000100 RDI: 0000000000000001
[ 3185.097403][T26054] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3185.097416][T26054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3185.097429][T26054] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3185.097456][T26054]  </TASK>
[ 3187.164150][T26073] FAULT_INJECTION: forcing a failure.
[ 3187.164150][T26073] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3187.212725][T26073] CPU: 0 UID: 0 PID: 26073 Comm: syz.3.8237 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3187.212785][T26073] Tainted: [L]=SOFTLOCKUP
[ 3187.212799][T26073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3187.212821][T26073] Call Trace:
[ 3187.212834][T26073]  <TASK>
[ 3187.212848][T26073]  dump_stack_lvl+0x100/0x190
[ 3187.212898][T26073]  should_fail_ex.cold+0x5/0xa
[ 3187.212955][T26073]  _copy_from_user+0x2e/0xd0
[ 3187.213010][T26073]  snd_seq_oss_write+0x395/0x7f0
[ 3187.213065][T26073]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 3187.213121][T26073]  ? bpf_lsm_file_permission+0x9/0x10
[ 3187.213175][T26073]  odev_write+0x51/0xa0
[ 3187.213212][T26073]  vfs_write+0x2aa/0x1070
[ 3187.213253][T26073]  ? __pfx_odev_write+0x10/0x10
[ 3187.213293][T26073]  ? __pfx_vfs_write+0x10/0x10
[ 3187.213329][T26073]  ? find_held_lock+0x2b/0x80
[ 3187.213364][T26073]  ? __fget_files+0x215/0x3d0
[ 3187.213401][T26073]  ? __fget_files+0x215/0x3d0
[ 3187.213463][T26073]  ? __fget_files+0x21f/0x3d0
[ 3187.213510][T26073]  ksys_write+0x12a/0x250
[ 3187.213547][T26073]  ? __pfx_ksys_write+0x10/0x10
[ 3187.213596][T26073]  do_syscall_64+0xc9/0xf80
[ 3187.213641][T26073]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3187.213675][T26073] RIP: 0033:0x7fd96879acb9
[ 3187.213703][T26073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3187.213736][T26073] RSP: 002b:00007fd969642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3187.213769][T26073] RAX: ffffffffffffffda RBX: 00007fd968a15fa0 RCX: 00007fd96879acb9
[ 3187.213791][T26073] RDX: 000000000000017c RSI: 0000200000000040 RDI: 0000000000000008
[ 3187.213812][T26073] RBP: 00007fd968808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3187.213833][T26073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3187.213853][T26073] R13: 00007fd968a16038 R14: 00007fd968a15fa0 R15: 00007ffc57f2af88
[ 3187.213897][T26073]  </TASK>
[ 3189.915566][T26106] FAULT_INJECTION: forcing a failure.
[ 3189.915566][T26106] name failslab, interval 1, probability 0, space 0, times 0
[ 3189.944617][T26106] CPU: 1 UID: 0 PID: 26106 Comm: syz.3.8246 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3189.944669][T26106] Tainted: [L]=SOFTLOCKUP
[ 3189.944699][T26106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3189.944718][T26106] Call Trace:
[ 3189.944744][T26106]  <TASK>
[ 3189.944756][T26106]  dump_stack_lvl+0x100/0x190
[ 3189.944804][T26106]  should_fail_ex.cold+0x5/0xa
[ 3189.944871][T26106]  should_failslab+0xc2/0x120
[ 3189.944937][T26106]  __kmalloc_cache_noprof+0x80/0x810
[ 3189.944974][T26106]  ? __pfx_sprintf+0x10/0x10
[ 3189.945008][T26106]  ? snd_seq_queue_alloc+0x56/0x590
[ 3189.945063][T26106]  ? snd_seq_queue_alloc+0x56/0x590
[ 3189.945106][T26106]  snd_seq_queue_alloc+0x56/0x590
[ 3189.945158][T26106]  snd_seq_ioctl_create_queue+0xa9/0x370
[ 3189.945229][T26106]  call_seq_client_ctl+0xa3/0x130
[ 3189.945267][T26106]  snd_seq_kernel_client_ctl+0x77/0xd0
[ 3189.945305][T26106]  alloc_seq_queue+0xdb/0x180
[ 3189.945344][T26106]  ? __pfx_alloc_seq_queue+0x10/0x10
[ 3189.945414][T26106]  ? mark_held_locks+0x40/0x70
[ 3189.945458][T26106]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3189.945489][T26106]  ? lockdep_hardirqs_on+0x78/0x100
[ 3189.945540][T26106]  snd_seq_oss_open+0x2b2/0xa10
[ 3189.945579][T26106]  odev_open+0x79/0xc0
[ 3189.945606][T26106]  ? __pfx_odev_open+0x10/0x10
[ 3189.945635][T26106]  soundcore_open+0x2e3/0x5a0
[ 3189.945671][T26106]  ? __pfx_soundcore_open+0x10/0x10
[ 3189.945704][T26106]  chrdev_open+0x234/0x6a0
[ 3189.945741][T26106]  ? __pfx_apparmor_file_open+0x10/0x10
[ 3189.945800][T26106]  ? __pfx_chrdev_open+0x10/0x10
[ 3189.945842][T26106]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 3189.945891][T26106]  do_dentry_open+0x73e/0x1570
[ 3189.945929][T26106]  ? __pfx_chrdev_open+0x10/0x10
[ 3189.945983][T26106]  ? security_inode_permission+0xbf/0x250
[ 3189.946035][T26106]  vfs_open+0x82/0x3f0
[ 3189.946104][T26106]  path_openat+0x21dc/0x3120
[ 3189.946156][T26106]  ? __pfx_path_openat+0x10/0x10
[ 3189.946218][T26106]  do_filp_open+0x1f7/0x420
[ 3189.946270][T26106]  ? __pfx_do_filp_open+0x10/0x10
[ 3189.946331][T26106]  ? _raw_spin_unlock+0x28/0x50
[ 3189.946361][T26106]  ? alloc_fd+0x476/0x790
[ 3189.946407][T26106]  do_sys_openat2+0x12e/0x220
[ 3189.946454][T26106]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3189.946504][T26106]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 3189.946553][T26106]  __x64_sys_openat+0x12d/0x210
[ 3189.946601][T26106]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3189.946666][T26106]  ? xfd_validate_state+0x129/0x190
[ 3189.946733][T26106]  do_syscall_64+0xc9/0xf80
[ 3189.946776][T26106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3189.946810][T26106] RIP: 0033:0x7fd96879acb9
[ 3189.946837][T26106] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3189.946870][T26106] RSP: 002b:00007fd969642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3189.946902][T26106] RAX: ffffffffffffffda RBX: 00007fd968a15fa0 RCX: 00007fd96879acb9
[ 3189.946926][T26106] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3189.946947][T26106] RBP: 00007fd968808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3189.946968][T26106] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3189.946988][T26106] R13: 00007fd968a16038 R14: 00007fd968a15fa0 R15: 00007ffc57f2af88
[ 3189.947032][T26106]  </TASK>
[ 3191.619514][T26122] FAULT_INJECTION: forcing a failure.
[ 3191.619514][T26122] name failslab, interval 1, probability 0, space 0, times 0
[ 3191.782958][T26122] CPU: 0 UID: 0 PID: 26122 Comm: syz.0.8248 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3191.783002][T26122] Tainted: [L]=SOFTLOCKUP
[ 3191.783012][T26122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3191.783026][T26122] Call Trace:
[ 3191.783034][T26122]  <TASK>
[ 3191.783042][T26122]  dump_stack_lvl+0x100/0x190
[ 3191.783074][T26122]  should_fail_ex.cold+0x5/0xa
[ 3191.783112][T26122]  should_failslab+0xc2/0x120
[ 3191.783144][T26122]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 3191.783168][T26122]  __kmalloc_noprof+0xf6/0x9c0
[ 3191.783190][T26122]  ? kfree+0x2a9/0x690
[ 3191.783216][T26122]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 3191.783239][T26122]  tomoyo_realpath_from_path+0xb6/0x690
[ 3191.783277][T26122]  tomoyo_check_open_permission+0x2af/0x3c0
[ 3191.783347][T26122]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 3191.783433][T26122]  ? do_raw_spin_lock+0x128/0x260
[ 3191.783485][T26122]  ? path_get+0x61/0x80
[ 3191.783531][T26122]  tomoyo_file_open+0x6b/0x90
[ 3191.783573][T26122]  security_file_open+0xb5/0x1e0
[ 3191.783604][T26122]  do_dentry_open+0x58c/0x1570
[ 3191.783647][T26122]  ? security_inode_permission+0xbf/0x250
[ 3191.783695][T26122]  vfs_open+0x82/0x3f0
[ 3191.783730][T26122]  path_openat+0x21dc/0x3120
[ 3191.783782][T26122]  ? __pfx_path_openat+0x10/0x10
[ 3191.783818][T26122]  do_filp_open+0x1f7/0x420
[ 3191.783862][T26122]  ? __pfx_do_filp_open+0x10/0x10
[ 3191.783907][T26122]  ? _raw_spin_unlock+0x28/0x50
[ 3191.783930][T26122]  ? alloc_fd+0x476/0x790
[ 3191.783962][T26122]  do_sys_openat2+0x12e/0x220
[ 3191.783997][T26122]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3191.784034][T26122]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 3191.784069][T26122]  __x64_sys_openat+0x12d/0x210
[ 3191.784104][T26122]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3191.784138][T26122]  ? xfd_validate_state+0x129/0x190
[ 3191.784183][T26122]  do_syscall_64+0xc9/0xf80
[ 3191.784211][T26122]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3191.784235][T26122] RIP: 0033:0x7f73f779acb9
[ 3191.784253][T26122] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3191.784275][T26122] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3191.784296][T26122] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3191.784311][T26122] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3191.784326][T26122] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3191.784339][T26122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3191.784353][T26122] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3191.784382][T26122]  </TASK>
[ 3191.854749][T26122] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3194.602556][T26150] FAULT_INJECTION: forcing a failure.
[ 3194.602556][T26150] name failslab, interval 1, probability 0, space 0, times 0
[ 3194.842780][T26150] CPU: 0 UID: 0 PID: 26150 Comm: syz.1.8253 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3194.842832][T26150] Tainted: [L]=SOFTLOCKUP
[ 3194.842841][T26150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3194.842856][T26150] Call Trace:
[ 3194.842864][T26150]  <TASK>
[ 3194.842873][T26150]  dump_stack_lvl+0x100/0x190
[ 3194.842906][T26150]  should_fail_ex.cold+0x5/0xa
[ 3194.842946][T26150]  should_failslab+0xc2/0x120
[ 3194.842980][T26150]  kmem_cache_alloc_noprof+0x83/0x780
[ 3194.843012][T26150]  ? security_file_alloc+0x34/0x2c0
[ 3194.843056][T26150]  ? security_file_alloc+0x34/0x2c0
[ 3194.843092][T26150]  security_file_alloc+0x34/0x2c0
[ 3194.843131][T26150]  init_file+0x93/0x4c0
[ 3194.843176][T26150]  alloc_empty_file+0x73/0x1c0
[ 3194.843208][T26150]  path_openat+0xe8/0x3120
[ 3194.843233][T26150]  ? getname_flags+0x93/0xf0
[ 3194.843253][T26150]  ? do_sys_openat2+0xc5/0x220
[ 3194.843285][T26150]  ? __x64_sys_openat+0x12d/0x210
[ 3194.843318][T26150]  ? do_syscall_64+0xc9/0xf80
[ 3194.843343][T26150]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3194.843373][T26150]  ? __pfx_path_openat+0x10/0x10
[ 3194.843408][T26150]  do_filp_open+0x1f7/0x420
[ 3194.843437][T26150]  ? __pfx_do_filp_open+0x10/0x10
[ 3194.843481][T26150]  ? _raw_spin_unlock+0x28/0x50
[ 3194.843508][T26150]  ? alloc_fd+0x476/0x790
[ 3194.843541][T26150]  do_sys_openat2+0x12e/0x220
[ 3194.843575][T26150]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3194.843611][T26150]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 3194.843646][T26150]  __x64_sys_openat+0x12d/0x210
[ 3194.843681][T26150]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3194.843714][T26150]  ? xfd_validate_state+0x129/0x190
[ 3194.843765][T26150]  do_syscall_64+0xc9/0xf80
[ 3194.843793][T26150]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3194.843816][T26150] RIP: 0033:0x7fdf0059acb9
[ 3194.843834][T26150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3194.843856][T26150] RSP: 002b:00007fdf013a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3194.843878][T26150] RAX: ffffffffffffffda RBX: 00007fdf00815fa0 RCX: 00007fdf0059acb9
[ 3194.843893][T26150] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3194.843907][T26150] RBP: 00007fdf00608bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3194.843922][T26150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3194.843935][T26150] R13: 00007fdf00816038 R14: 00007fdf00815fa0 R15: 00007ffecda1d088
[ 3194.843964][T26150]  </TASK>
[ 3200.700264][T26215] FAULT_INJECTION: forcing a failure.
[ 3200.700264][T26215] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3200.713416][T26215] CPU: 0 UID: 0 PID: 26215 Comm: syz.0.8264 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3200.713448][T26215] Tainted: [L]=SOFTLOCKUP
[ 3200.713455][T26215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3200.713469][T26215] Call Trace:
[ 3200.713476][T26215]  <TASK>
[ 3200.713484][T26215]  dump_stack_lvl+0x100/0x190
[ 3200.713518][T26215]  should_fail_ex.cold+0x5/0xa
[ 3200.713553][T26215]  _copy_from_user+0x2e/0xd0
[ 3200.713589][T26215]  snd_seq_oss_write+0x395/0x7f0
[ 3200.713623][T26215]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 3200.713657][T26215]  ? bpf_lsm_file_permission+0x9/0x10
[ 3200.713691][T26215]  odev_write+0x51/0xa0
[ 3200.713713][T26215]  vfs_write+0x2aa/0x1070
[ 3200.713738][T26215]  ? __pfx_odev_write+0x10/0x10
[ 3200.713761][T26215]  ? __pfx_vfs_write+0x10/0x10
[ 3200.713783][T26215]  ? find_held_lock+0x2b/0x80
[ 3200.713804][T26215]  ? __fget_files+0x215/0x3d0
[ 3200.713826][T26215]  ? __fget_files+0x215/0x3d0
[ 3200.713853][T26215]  ? __fget_files+0x21f/0x3d0
[ 3200.713882][T26215]  ksys_write+0x12a/0x250
[ 3200.713905][T26215]  ? __pfx_ksys_write+0x10/0x10
[ 3200.713936][T26215]  do_syscall_64+0xc9/0xf80
[ 3200.713965][T26215]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3200.713988][T26215] RIP: 0033:0x7f73f779acb9
[ 3200.714005][T26215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3200.714026][T26215] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3200.714047][T26215] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3200.714061][T26215] RDX: 000000000000017c RSI: 0000200000000040 RDI: 0000000000000008
[ 3200.714075][T26215] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3200.714088][T26215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3200.714101][T26215] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3200.714127][T26215]  </TASK>
[ 3215.213320][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 3215.220988][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 3219.591065][T26419] FAULT_INJECTION: forcing a failure.
[ 3219.591065][T26419] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3219.830577][T26419] CPU: 1 UID: 0 PID: 26419 Comm: syz.3.8298 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3219.830632][T26419] Tainted: [L]=SOFTLOCKUP
[ 3219.830645][T26419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3219.830666][T26419] Call Trace:
[ 3219.830678][T26419]  <TASK>
[ 3219.830691][T26419]  dump_stack_lvl+0x100/0x190
[ 3219.830737][T26419]  should_fail_ex.cold+0x5/0xa
[ 3219.830812][T26419]  _copy_from_user+0x2e/0xd0
[ 3219.830866][T26419]  snd_seq_oss_write+0x395/0x7f0
[ 3219.830918][T26419]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 3219.830957][T26419]  ? bpf_lsm_file_permission+0x9/0x10
[ 3219.830997][T26419]  odev_write+0x51/0xa0
[ 3219.831023][T26419]  vfs_write+0x2aa/0x1070
[ 3219.831051][T26419]  ? __pfx_odev_write+0x10/0x10
[ 3219.831079][T26419]  ? __pfx_vfs_write+0x10/0x10
[ 3219.831104][T26419]  ? find_held_lock+0x2b/0x80
[ 3219.831128][T26419]  ? __fget_files+0x215/0x3d0
[ 3219.831154][T26419]  ? __fget_files+0x215/0x3d0
[ 3219.831185][T26419]  ? __fget_files+0x21f/0x3d0
[ 3219.831219][T26419]  ksys_write+0x12a/0x250
[ 3219.831257][T26419]  ? __pfx_ksys_write+0x10/0x10
[ 3219.831289][T26419]  do_syscall_64+0xc9/0xf80
[ 3219.831320][T26419]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3219.831344][T26419] RIP: 0033:0x7fd96879acb9
[ 3219.831361][T26419] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3219.831382][T26419] RSP: 002b:00007fd969642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3219.831404][T26419] RAX: ffffffffffffffda RBX: 00007fd968a15fa0 RCX: 00007fd96879acb9
[ 3219.831419][T26419] RDX: 00000000000002f3 RSI: 0000200000000040 RDI: 0000000000000008
[ 3219.831433][T26419] RBP: 00007fd968808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3219.831447][T26419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3219.831460][T26419] R13: 00007fd968a16038 R14: 00007fd968a15fa0 R15: 00007ffc57f2af88
[ 3219.831488][T26419]  </TASK>
[ 3221.293488][T26433] FAULT_INJECTION: forcing a failure.
[ 3221.293488][T26433] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3221.374809][T26433] CPU: 1 UID: 0 PID: 26433 Comm: syz.0.8302 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3221.374865][T26433] Tainted: [L]=SOFTLOCKUP
[ 3221.374877][T26433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3221.374898][T26433] Call Trace:
[ 3221.374909][T26433]  <TASK>
[ 3221.374921][T26433]  dump_stack_lvl+0x100/0x190
[ 3221.374966][T26433]  should_fail_ex.cold+0x5/0xa
[ 3221.375020][T26433]  _copy_from_user+0x2e/0xd0
[ 3221.375070][T26433]  snd_seq_oss_write+0x395/0x7f0
[ 3221.375120][T26433]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 3221.375170][T26433]  ? bpf_lsm_file_permission+0x9/0x10
[ 3221.375223][T26433]  odev_write+0x51/0xa0
[ 3221.375258][T26433]  vfs_write+0x2aa/0x1070
[ 3221.375296][T26433]  ? __pfx_odev_write+0x10/0x10
[ 3221.375333][T26433]  ? __pfx_vfs_write+0x10/0x10
[ 3221.375367][T26433]  ? find_held_lock+0x2b/0x80
[ 3221.375412][T26433]  ? __fget_files+0x215/0x3d0
[ 3221.375458][T26433]  ? __fget_files+0x215/0x3d0
[ 3221.375498][T26433]  ? __fget_files+0x21f/0x3d0
[ 3221.375542][T26433]  ksys_write+0x12a/0x250
[ 3221.375575][T26433]  ? __pfx_ksys_write+0x10/0x10
[ 3221.375619][T26433]  do_syscall_64+0xc9/0xf80
[ 3221.375660][T26433]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3221.375690][T26433] RIP: 0033:0x7f73f779acb9
[ 3221.375715][T26433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3221.375745][T26433] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3221.375773][T26433] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3221.375795][T26433] RDX: 00000000000002f3 RSI: 0000200000000040 RDI: 0000000000000008
[ 3221.375813][T26433] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3221.375831][T26433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3221.375848][T26433] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3221.375886][T26433]  </TASK>
[ 3242.664648][T26689] FAULT_INJECTION: forcing a failure.
[ 3242.664648][T26689] name failslab, interval 1, probability 0, space 0, times 0
[ 3242.677442][T26689] CPU: 1 UID: 0 PID: 26689 Comm: syz.0.8344 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3242.677481][T26689] Tainted: [L]=SOFTLOCKUP
[ 3242.677490][T26689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3242.677506][T26689] Call Trace:
[ 3242.677520][T26689]  <TASK>
[ 3242.677531][T26689]  dump_stack_lvl+0x100/0x190
[ 3242.677565][T26689]  should_fail_ex.cold+0x5/0xa
[ 3242.677607][T26689]  should_failslab+0xc2/0x120
[ 3242.677643][T26689]  __kmalloc_cache_noprof+0x80/0x810
[ 3242.677670][T26689]  ? snd_seq_oss_open+0x54/0xa10
[ 3242.677716][T26689]  ? snd_seq_oss_open+0x54/0xa10
[ 3242.677743][T26689]  snd_seq_oss_open+0x54/0xa10
[ 3242.677774][T26689]  odev_open+0x79/0xc0
[ 3242.677797][T26689]  ? __pfx_odev_open+0x10/0x10
[ 3242.677820][T26689]  soundcore_open+0x2e3/0x5a0
[ 3242.677849][T26689]  ? __pfx_soundcore_open+0x10/0x10
[ 3242.677874][T26689]  chrdev_open+0x234/0x6a0
[ 3242.677903][T26689]  ? __pfx_apparmor_file_open+0x10/0x10
[ 3242.677937][T26689]  ? __pfx_chrdev_open+0x10/0x10
[ 3242.677986][T26689]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 3242.678023][T26689]  do_dentry_open+0x73e/0x1570
[ 3242.678052][T26689]  ? __pfx_chrdev_open+0x10/0x10
[ 3242.678082][T26689]  ? security_inode_permission+0xbf/0x250
[ 3242.678126][T26689]  vfs_open+0x82/0x3f0
[ 3242.678165][T26689]  path_openat+0x21dc/0x3120
[ 3242.678204][T26689]  ? __pfx_path_openat+0x10/0x10
[ 3242.678245][T26689]  do_filp_open+0x1f7/0x420
[ 3242.678276][T26689]  ? __pfx_do_filp_open+0x10/0x10
[ 3242.678325][T26689]  ? _raw_spin_unlock+0x28/0x50
[ 3242.678349][T26689]  ? alloc_fd+0x476/0x790
[ 3242.678384][T26689]  do_sys_openat2+0x12e/0x220
[ 3242.678423][T26689]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3242.678462][T26689]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 3242.678501][T26689]  __x64_sys_openat+0x12d/0x210
[ 3242.678548][T26689]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3242.678585][T26689]  ? xfd_validate_state+0x129/0x190
[ 3242.678636][T26689]  do_syscall_64+0xc9/0xf80
[ 3242.678668][T26689]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3242.678693][T26689] RIP: 0033:0x7f73f779acb9
[ 3242.678713][T26689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3242.678738][T26689] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3242.678762][T26689] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3242.678778][T26689] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3242.678795][T26689] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3242.678810][T26689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3242.678825][T26689] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3242.678857][T26689]  </TASK>
[ 3247.663549][T26756] FAULT_INJECTION: forcing a failure.
[ 3247.663549][T26756] name failslab, interval 1, probability 0, space 0, times 0
[ 3247.922794][T26756] CPU: 1 UID: 0 PID: 26756 Comm: syz.3.8354 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3247.922853][T26756] Tainted: [L]=SOFTLOCKUP
[ 3247.922866][T26756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3247.922886][T26756] Call Trace:
[ 3247.922897][T26756]  <TASK>
[ 3247.922909][T26756]  dump_stack_lvl+0x100/0x190
[ 3247.922954][T26756]  should_fail_ex.cold+0x5/0xa
[ 3247.923004][T26756]  should_failslab+0xc2/0x120
[ 3247.923046][T26756]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 3247.923080][T26756]  __kmalloc_noprof+0xf6/0x9c0
[ 3247.923110][T26756]  ? kfree+0x2a9/0x690
[ 3247.923157][T26756]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 3247.923183][T26756]  tomoyo_realpath_from_path+0xb6/0x690
[ 3247.923216][T26756]  tomoyo_check_open_permission+0x2af/0x3c0
[ 3247.923257][T26756]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 3247.923324][T26756]  ? do_raw_spin_lock+0x128/0x260
[ 3247.923365][T26756]  ? path_get+0x61/0x80
[ 3247.923401][T26756]  tomoyo_file_open+0x6b/0x90
[ 3247.923433][T26756]  security_file_open+0xb5/0x1e0
[ 3247.923457][T26756]  do_dentry_open+0x58c/0x1570
[ 3247.923489][T26756]  ? security_inode_permission+0xbf/0x250
[ 3247.923531][T26756]  vfs_open+0x82/0x3f0
[ 3247.923570][T26756]  path_openat+0x21dc/0x3120
[ 3247.923611][T26756]  ? __pfx_path_openat+0x10/0x10
[ 3247.923651][T26756]  do_filp_open+0x1f7/0x420
[ 3247.923683][T26756]  ? __pfx_do_filp_open+0x10/0x10
[ 3247.923734][T26756]  ? _raw_spin_unlock+0x28/0x50
[ 3247.923759][T26756]  ? alloc_fd+0x476/0x790
[ 3247.923798][T26756]  do_sys_openat2+0x12e/0x220
[ 3247.923866][T26756]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3247.923911][T26756]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 3247.923944][T26756]  __x64_sys_openat+0x12d/0x210
[ 3247.923978][T26756]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3247.924009][T26756]  ? xfd_validate_state+0x129/0x190
[ 3247.924052][T26756]  do_syscall_64+0xc9/0xf80
[ 3247.924081][T26756]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3247.924102][T26756] RIP: 0033:0x7fd96879acb9
[ 3247.924119][T26756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3247.924140][T26756] RSP: 002b:00007fd969642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3247.924160][T26756] RAX: ffffffffffffffda RBX: 00007fd968a15fa0 RCX: 00007fd96879acb9
[ 3247.924174][T26756] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3247.924191][T26756] RBP: 00007fd968808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3247.924205][T26756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3247.924221][T26756] R13: 00007fd968a16038 R14: 00007fd968a15fa0 R15: 00007ffc57f2af88
[ 3247.924248][T26756]  </TASK>
[ 3248.485122][T26756] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3259.071784][T26893] FAULT_INJECTION: forcing a failure.
[ 3259.071784][T26893] name fail_futex, interval 1, probability 0, space 0, times 0
[ 3259.204621][T26893] CPU: 0 UID: 0 PID: 26893 Comm: syz.2.8384 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3259.204676][T26893] Tainted: [L]=SOFTLOCKUP
[ 3259.204695][T26893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3259.204710][T26893] Call Trace:
[ 3259.204719][T26893]  <TASK>
[ 3259.204729][T26893]  dump_stack_lvl+0x100/0x190
[ 3259.204763][T26893]  should_fail_ex.cold+0x5/0xa
[ 3259.204803][T26893]  get_futex_key+0x1d2/0x1620
[ 3259.204839][T26893]  ? __pfx_get_futex_key+0x10/0x10
[ 3259.204874][T26893]  ? __fsnotify_parent+0x2b4/0xca0
[ 3259.204911][T26893]  futex_wake+0xea/0x530
[ 3259.204951][T26893]  ? __pfx_futex_wake+0x10/0x10
[ 3259.204992][T26893]  ? vfs_write+0x911/0x1070
[ 3259.205028][T26893]  ? vfs_write+0x15d/0x1070
[ 3259.205054][T26893]  ? __pfx_odev_write+0x10/0x10
[ 3259.205080][T26893]  do_futex+0x32b/0x350
[ 3259.205113][T26893]  ? __pfx_do_futex+0x10/0x10
[ 3259.205154][T26893]  __x64_sys_futex+0x34f/0x4d0
[ 3259.205188][T26893]  ? fput+0x79/0x100
[ 3259.205217][T26893]  ? __pfx___x64_sys_futex+0x10/0x10
[ 3259.205248][T26893]  ? ksys_write+0x1ac/0x250
[ 3259.205272][T26893]  ? __pfx_ksys_write+0x10/0x10
[ 3259.205328][T26893]  do_syscall_64+0xc9/0xf80
[ 3259.205369][T26893]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3259.205401][T26893] RIP: 0033:0x7f296319acb9
[ 3259.205423][T26893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3259.205454][T26893] RSP: 002b:00007f29613f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 3259.205482][T26893] RAX: ffffffffffffffda RBX: 00007f2963415fa8 RCX: 00007f296319acb9
[ 3259.205502][T26893] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2963415fac
[ 3259.205522][T26893] RBP: 00007f2963415fa0 R08: 0000000000000000 R09: 0000000000000000
[ 3259.205541][T26893] R10: 0000000000000124 R11: 0000000000000246 R12: 0000000000000000
[ 3259.205561][T26893] R13: 00007f2963416038 R14: 00007ffe6fad1930 R15: 00007ffe6fad1a18
[ 3259.205601][T26893]  </TASK>
[ 3259.955161][T26901] FAULT_INJECTION: forcing a failure.
[ 3259.955161][T26901] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3260.034596][T26901] CPU: 0 UID: 0 PID: 26901 Comm: syz.0.8393 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3260.034645][T26901] Tainted: [L]=SOFTLOCKUP
[ 3260.034656][T26901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3260.034674][T26901] Call Trace:
[ 3260.034684][T26901]  <TASK>
[ 3260.034695][T26901]  dump_stack_lvl+0x100/0x190
[ 3260.034737][T26901]  should_fail_ex.cold+0x5/0xa
[ 3260.034793][T26901]  _copy_from_user+0x2e/0xd0
[ 3260.034841][T26901]  snd_seq_oss_write+0x395/0x7f0
[ 3260.034889][T26901]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 3260.034936][T26901]  ? bpf_lsm_file_permission+0x9/0x10
[ 3260.034983][T26901]  odev_write+0x51/0xa0
[ 3260.035014][T26901]  vfs_write+0x2aa/0x1070
[ 3260.035048][T26901]  ? __pfx_odev_write+0x10/0x10
[ 3260.035080][T26901]  ? __pfx_vfs_write+0x10/0x10
[ 3260.035115][T26901]  ? find_held_lock+0x2b/0x80
[ 3260.035144][T26901]  ? __fget_files+0x215/0x3d0
[ 3260.035175][T26901]  ? __fget_files+0x215/0x3d0
[ 3260.035212][T26901]  ? __fget_files+0x21f/0x3d0
[ 3260.035253][T26901]  ksys_write+0x12a/0x250
[ 3260.035286][T26901]  ? __pfx_ksys_write+0x10/0x10
[ 3260.035328][T26901]  do_syscall_64+0xc9/0xf80
[ 3260.035366][T26901]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3260.035395][T26901] RIP: 0033:0x7f73f779acb9
[ 3260.035418][T26901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3260.035447][T26901] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3260.035476][T26901] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3260.035496][T26901] RDX: 0000000000000131 RSI: 0000200000000040 RDI: 0000000000000005
[ 3260.035515][T26901] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3260.035533][T26901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3260.035550][T26901] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3260.035588][T26901]  </TASK>
[ 3263.164411][T26944] FAULT_INJECTION: forcing a failure.
[ 3263.164411][T26944] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3263.317734][T26944] CPU: 0 UID: 0 PID: 26944 Comm: syz.0.8395 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3263.317769][T26944] Tainted: [L]=SOFTLOCKUP
[ 3263.317777][T26944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3263.317790][T26944] Call Trace:
[ 3263.317798][T26944]  <TASK>
[ 3263.317806][T26944]  dump_stack_lvl+0x100/0x190
[ 3263.317837][T26944]  should_fail_ex.cold+0x5/0xa
[ 3263.317872][T26944]  _copy_from_user+0x2e/0xd0
[ 3263.317924][T26944]  snd_seq_oss_write+0x4f6/0x7f0
[ 3263.317960][T26944]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 3263.317997][T26944]  ? bpf_lsm_file_permission+0x9/0x10
[ 3263.318033][T26944]  odev_write+0x51/0xa0
[ 3263.318056][T26944]  vfs_write+0x2aa/0x1070
[ 3263.318088][T26944]  ? __pfx_odev_write+0x10/0x10
[ 3263.318132][T26944]  ? __pfx_vfs_write+0x10/0x10
[ 3263.318158][T26944]  ? find_held_lock+0x2b/0x80
[ 3263.318182][T26944]  ? __fget_files+0x215/0x3d0
[ 3263.318209][T26944]  ? __fget_files+0x215/0x3d0
[ 3263.318240][T26944]  ? __fget_files+0x21f/0x3d0
[ 3263.318274][T26944]  ksys_write+0x12a/0x250
[ 3263.318302][T26944]  ? __pfx_ksys_write+0x10/0x10
[ 3263.318338][T26944]  do_syscall_64+0xc9/0xf80
[ 3263.318390][T26944]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3263.318427][T26944] RIP: 0033:0x7f73f779acb9
[ 3263.318613][T26944] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3263.318640][T26944] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3263.318665][T26944] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3263.318682][T26944] RDX: 000000000000012f RSI: 0000200000000040 RDI: 0000000000000005
[ 3263.318700][T26944] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3263.318716][T26944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3263.318732][T26944] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3263.318767][T26944]  </TASK>
[ 3266.886878][T26986] FAULT_INJECTION: forcing a failure.
[ 3266.886878][T26986] name failslab, interval 1, probability 0, space 0, times 0
[ 3266.899681][T26986] CPU: 1 UID: 0 PID: 26986 Comm: syz.0.8404 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3266.899727][T26986] Tainted: [L]=SOFTLOCKUP
[ 3266.899738][T26986] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3266.899756][T26986] Call Trace:
[ 3266.899766][T26986]  <TASK>
[ 3266.899778][T26986]  dump_stack_lvl+0x100/0x190
[ 3266.899821][T26986]  should_fail_ex.cold+0x5/0xa
[ 3266.899874][T26986]  should_failslab+0xc2/0x120
[ 3266.899918][T26986]  ? tomoyo_encode2+0xfb/0x3c0
[ 3266.899947][T26986]  __kmalloc_noprof+0xf6/0x9c0
[ 3266.899991][T26986]  ? tomoyo_encode2+0xfb/0x3c0
[ 3266.900021][T26986]  tomoyo_encode2+0xfb/0x3c0
[ 3266.900057][T26986]  tomoyo_encode+0x29/0x50
[ 3266.900086][T26986]  tomoyo_realpath_from_path+0x18c/0x690
[ 3266.900153][T26986]  tomoyo_check_open_permission+0x2af/0x3c0
[ 3266.900207][T26986]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 3266.900299][T26986]  ? do_raw_spin_lock+0x128/0x260
[ 3266.900352][T26986]  ? path_get+0x61/0x80
[ 3266.900401][T26986]  tomoyo_file_open+0x6b/0x90
[ 3266.900442][T26986]  security_file_open+0xb5/0x1e0
[ 3266.900474][T26986]  do_dentry_open+0x58c/0x1570
[ 3266.900518][T26986]  ? security_inode_permission+0xbf/0x250
[ 3266.900577][T26986]  vfs_open+0x82/0x3f0
[ 3266.900631][T26986]  path_openat+0x21dc/0x3120
[ 3266.900686][T26986]  ? __pfx_path_openat+0x10/0x10
[ 3266.900740][T26986]  do_filp_open+0x1f7/0x420
[ 3266.900785][T26986]  ? __pfx_do_filp_open+0x10/0x10
[ 3266.900855][T26986]  ? _raw_spin_unlock+0x28/0x50
[ 3266.900889][T26986]  ? alloc_fd+0x476/0x790
[ 3266.900939][T26986]  do_sys_openat2+0x12e/0x220
[ 3266.900992][T26986]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3266.901053][T26986]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 3266.901108][T26986]  __x64_sys_openat+0x12d/0x210
[ 3266.901168][T26986]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3266.901218][T26986]  ? xfd_validate_state+0x129/0x190
[ 3266.901284][T26986]  do_syscall_64+0xc9/0xf80
[ 3266.901329][T26986]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3266.901364][T26986] RIP: 0033:0x7f73f779acb9
[ 3266.901392][T26986] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3266.901427][T26986] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3266.901461][T26986] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3266.901484][T26986] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3266.901506][T26986] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3266.901528][T26986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3266.901549][T26986] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3266.901592][T26986]  </TASK>
[ 3266.901624][T26986] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3268.095180][T27005] FAULT_INJECTION: forcing a failure.
[ 3268.095180][T27005] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 3268.254745][T27005] CPU: 1 UID: 0 PID: 27005 Comm: syz.0.8406 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3268.254801][T27005] Tainted: [L]=SOFTLOCKUP
[ 3268.254813][T27005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3268.254833][T27005] Call Trace:
[ 3268.254846][T27005]  <TASK>
[ 3268.254859][T27005]  dump_stack_lvl+0x100/0x190
[ 3268.254908][T27005]  should_fail_ex.cold+0x5/0xa
[ 3268.254961][T27005]  _copy_from_user+0x2e/0xd0
[ 3268.255041][T27005]  snd_seq_oss_write+0x4f6/0x7f0
[ 3268.255096][T27005]  ? __pfx_snd_seq_oss_write+0x10/0x10
[ 3268.255155][T27005]  ? bpf_lsm_file_permission+0x9/0x10
[ 3268.255211][T27005]  odev_write+0x51/0xa0
[ 3268.255248][T27005]  vfs_write+0x2aa/0x1070
[ 3268.255288][T27005]  ? __pfx_odev_write+0x10/0x10
[ 3268.255326][T27005]  ? __pfx_vfs_write+0x10/0x10
[ 3268.255368][T27005]  ? find_held_lock+0x2b/0x80
[ 3268.255403][T27005]  ? __fget_files+0x215/0x3d0
[ 3268.255439][T27005]  ? __fget_files+0x215/0x3d0
[ 3268.255484][T27005]  ? __fget_files+0x21f/0x3d0
[ 3268.255543][T27005]  ksys_write+0x12a/0x250
[ 3268.255580][T27005]  ? __pfx_ksys_write+0x10/0x10
[ 3268.255650][T27005]  do_syscall_64+0xc9/0xf80
[ 3268.255695][T27005]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3268.255730][T27005] RIP: 0033:0x7f73f779acb9
[ 3268.255757][T27005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3268.255792][T27005] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 3268.255825][T27005] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3268.255849][T27005] RDX: 000000000000012e RSI: 0000200000000040 RDI: 0000000000000005
[ 3268.255871][T27005] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3268.255893][T27005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3268.255914][T27005] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3268.255958][T27005]  </TASK>
[ 3275.657780][T27099] FAULT_INJECTION: forcing a failure.
[ 3275.657780][T27099] name fail_futex, interval 1, probability 0, space 0, times 0
[ 3275.703691][T27099] CPU: 0 UID: 0 PID: 27099 Comm: syz.3.8422 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3275.703734][T27099] Tainted: [L]=SOFTLOCKUP
[ 3275.703742][T27099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3275.703757][T27099] Call Trace:
[ 3275.703765][T27099]  <TASK>
[ 3275.703773][T27099]  dump_stack_lvl+0x100/0x190
[ 3275.703804][T27099]  should_fail_ex.cold+0x5/0xa
[ 3275.703841][T27099]  get_futex_key+0x1d2/0x1620
[ 3275.703873][T27099]  ? __pfx_get_futex_key+0x10/0x10
[ 3275.703911][T27099]  futex_wake+0xea/0x530
[ 3275.703945][T27099]  ? rcu_is_watching+0x12/0xc0
[ 3275.703968][T27099]  ? lockdep_hardirqs_on+0x78/0x100
[ 3275.703994][T27099]  ? __pfx_futex_wake+0x10/0x10
[ 3275.704032][T27099]  ? fd_install+0x223/0x580
[ 3275.704056][T27099]  ? putname+0xf5/0x1a0
[ 3275.704091][T27099]  do_futex+0x32b/0x350
[ 3275.704122][T27099]  ? __pfx_do_futex+0x10/0x10
[ 3275.704152][T27099]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3275.704193][T27099]  __x64_sys_futex+0x34f/0x4d0
[ 3275.704225][T27099]  ? __x64_sys_openat+0x12d/0x210
[ 3275.704260][T27099]  ? __pfx___x64_sys_futex+0x10/0x10
[ 3275.704290][T27099]  ? xfd_validate_state+0x129/0x190
[ 3275.704335][T27099]  do_syscall_64+0xc9/0xf80
[ 3275.704364][T27099]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3275.704393][T27099] RIP: 0033:0x7fd96879acb9
[ 3275.704411][T27099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3275.704463][T27099] RSP: 002b:00007fd9696420e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 3275.704493][T27099] RAX: ffffffffffffffda RBX: 00007fd968a15fa8 RCX: 00007fd96879acb9
[ 3275.704515][T27099] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd968a15fac
[ 3275.704537][T27099] RBP: 00007fd968a15fa0 R08: 0000000000000000 R09: 0000000000000000
[ 3275.704551][T27099] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000000
[ 3275.704566][T27099] R13: 00007fd968a16038 R14: 00007ffc57f2aea0 R15: 00007ffc57f2af88
[ 3275.704595][T27099]  </TASK>
[ 3276.628194][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 3276.634708][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 3277.762861][T27130] FAULT_INJECTION: forcing a failure.
[ 3277.762861][T27130] name failslab, interval 1, probability 0, space 0, times 0
[ 3277.894346][T27130] CPU: 1 UID: 0 PID: 27130 Comm: syz.0.8428 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3277.894397][T27130] Tainted: [L]=SOFTLOCKUP
[ 3277.894409][T27130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3277.894432][T27130] Call Trace:
[ 3277.894442][T27130]  <TASK>
[ 3277.894455][T27130]  dump_stack_lvl+0x100/0x190
[ 3277.894499][T27130]  should_fail_ex.cold+0x5/0xa
[ 3277.894551][T27130]  should_failslab+0xc2/0x120
[ 3277.894597][T27130]  __kmalloc_cache_noprof+0x80/0x810
[ 3277.894632][T27130]  ? snd_seq_create_port+0xf7/0xa80
[ 3277.894662][T27130]  ? vsnprintf+0x4ee/0x1240
[ 3277.894700][T27130]  ? snd_seq_create_port+0xf7/0xa80
[ 3277.894731][T27130]  snd_seq_create_port+0xf7/0xa80
[ 3277.894774][T27130]  snd_seq_ioctl_create_port+0x253/0x940
[ 3277.894829][T27130]  ? __pfx_snd_seq_ioctl_create_port+0x10/0x10
[ 3277.894881][T27130]  ? __pfx_sprintf+0x10/0x10
[ 3277.894910][T27130]  ? __lock_acquire+0x4a5/0x2630
[ 3277.894960][T27130]  call_seq_client_ctl+0xa3/0x130
[ 3277.894995][T27130]  snd_seq_kernel_client_ctl+0x77/0xd0
[ 3277.895029][T27130]  create_port+0x19b/0x270
[ 3277.895062][T27130]  ? __pfx_create_port+0x10/0x10
[ 3277.895101][T27130]  ? __pfx_snd_seq_oss_event_input+0x10/0x10
[ 3277.895141][T27130]  ? __pfx_free_devinfo+0x10/0x10
[ 3277.895209][T27130]  ? mark_held_locks+0x40/0x70
[ 3277.895250][T27130]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3277.895282][T27130]  ? lockdep_hardirqs_on+0x78/0x100
[ 3277.895340][T27130]  snd_seq_oss_open+0x292/0xa10
[ 3277.895387][T27130]  odev_open+0x79/0xc0
[ 3277.895418][T27130]  ? __pfx_odev_open+0x10/0x10
[ 3277.895452][T27130]  soundcore_open+0x2e3/0x5a0
[ 3277.895501][T27130]  ? __pfx_soundcore_open+0x10/0x10
[ 3277.895535][T27130]  chrdev_open+0x234/0x6a0
[ 3277.895572][T27130]  ? __pfx_apparmor_file_open+0x10/0x10
[ 3277.895615][T27130]  ? __pfx_chrdev_open+0x10/0x10
[ 3277.895656][T27130]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 3277.895703][T27130]  do_dentry_open+0x73e/0x1570
[ 3277.895741][T27130]  ? __pfx_chrdev_open+0x10/0x10
[ 3277.895780][T27130]  ? security_inode_permission+0xbf/0x250
[ 3277.895835][T27130]  vfs_open+0x82/0x3f0
[ 3277.895872][T27130]  path_openat+0x21dc/0x3120
[ 3277.895907][T27130]  ? __pfx_path_openat+0x10/0x10
[ 3277.895943][T27130]  do_filp_open+0x1f7/0x420
[ 3277.895972][T27130]  ? __pfx_do_filp_open+0x10/0x10
[ 3277.896017][T27130]  ? _raw_spin_unlock+0x28/0x50
[ 3277.896039][T27130]  ? alloc_fd+0x476/0x790
[ 3277.896071][T27130]  do_sys_openat2+0x12e/0x220
[ 3277.896105][T27130]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3277.896141][T27130]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 3277.896181][T27130]  __x64_sys_openat+0x12d/0x210
[ 3277.896217][T27130]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3277.896251][T27130]  ? xfd_validate_state+0x129/0x190
[ 3277.896297][T27130]  do_syscall_64+0xc9/0xf80
[ 3277.896325][T27130]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3277.896348][T27130] RIP: 0033:0x7f73f779acb9
[ 3277.896367][T27130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3277.896389][T27130] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3277.896411][T27130] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3277.896427][T27130] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3277.896441][T27130] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3277.896455][T27130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3277.896469][T27130] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3277.896498][T27130]  </TASK>
[ 3278.698396][T27130] ALSA: seq_oss: can't create port
[ 3279.791606][T27156] FAULT_INJECTION: forcing a failure.
[ 3279.791606][T27156] name failslab, interval 1, probability 0, space 0, times 0
[ 3279.804783][T27156] CPU: 0 UID: 0 PID: 27156 Comm: syz.3.8433 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3279.804828][T27156] Tainted: [L]=SOFTLOCKUP
[ 3279.804839][T27156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3279.804855][T27156] Call Trace:
[ 3279.804866][T27156]  <TASK>
[ 3279.804877][T27156]  dump_stack_lvl+0x100/0x190
[ 3279.804918][T27156]  should_fail_ex.cold+0x5/0xa
[ 3279.804968][T27156]  should_failslab+0xc2/0x120
[ 3279.804999][T27156]  __kmalloc_cache_noprof+0x80/0x810
[ 3279.805023][T27156]  ? snd_hrtimer_open+0x43/0xf0
[ 3279.805057][T27156]  ? snd_hrtimer_open+0x43/0xf0
[ 3279.805084][T27156]  ? __pfx_snd_hrtimer_open+0x10/0x10
[ 3279.805111][T27156]  snd_hrtimer_open+0x43/0xf0
[ 3279.805140][T27156]  snd_timer_open+0xb0b/0x1020
[ 3279.805170][T27156]  ? __pfx_snd_timer_open+0x10/0x10
[ 3279.805198][T27156]  ? kstrdup+0xb3/0xe0
[ 3279.805228][T27156]  snd_seq_timer_open+0x289/0x600
[ 3279.805264][T27156]  ? __pfx_snd_seq_timer_open+0x10/0x10
[ 3279.805312][T27156]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 3279.805335][T27156]  ? lockdep_hardirqs_on+0x78/0x100
[ 3279.805359][T27156]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 3279.805384][T27156]  queue_use+0xdc/0x1f0
[ 3279.805410][T27156]  snd_seq_queue_alloc+0x2e5/0x590
[ 3279.805442][T27156]  snd_seq_ioctl_create_queue+0xa9/0x370
[ 3279.805480][T27156]  call_seq_client_ctl+0xa3/0x130
[ 3279.805502][T27156]  snd_seq_kernel_client_ctl+0x77/0xd0
[ 3279.805526][T27156]  alloc_seq_queue+0xdb/0x180
[ 3279.805548][T27156]  ? __pfx_alloc_seq_queue+0x10/0x10
[ 3279.805584][T27156]  ? mark_held_locks+0x40/0x70
[ 3279.805612][T27156]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3279.805632][T27156]  ? lockdep_hardirqs_on+0x78/0x100
[ 3279.805659][T27156]  snd_seq_oss_open+0x2b2/0xa10
[ 3279.805687][T27156]  odev_open+0x79/0xc0
[ 3279.805705][T27156]  ? __pfx_odev_open+0x10/0x10
[ 3279.805725][T27156]  soundcore_open+0x2e3/0x5a0
[ 3279.805750][T27156]  ? __pfx_soundcore_open+0x10/0x10
[ 3279.805772][T27156]  chrdev_open+0x234/0x6a0
[ 3279.805797][T27156]  ? __pfx_apparmor_file_open+0x10/0x10
[ 3279.805826][T27156]  ? __pfx_chrdev_open+0x10/0x10
[ 3279.805853][T27156]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 3279.805883][T27156]  do_dentry_open+0x73e/0x1570
[ 3279.805907][T27156]  ? __pfx_chrdev_open+0x10/0x10
[ 3279.805934][T27156]  ? security_inode_permission+0xbf/0x250
[ 3279.805970][T27156]  vfs_open+0x82/0x3f0
[ 3279.806004][T27156]  path_openat+0x21dc/0x3120
[ 3279.806037][T27156]  ? __pfx_path_openat+0x10/0x10
[ 3279.806071][T27156]  do_filp_open+0x1f7/0x420
[ 3279.806098][T27156]  ? __pfx_do_filp_open+0x10/0x10
[ 3279.806140][T27156]  ? _raw_spin_unlock+0x28/0x50
[ 3279.806159][T27156]  ? alloc_fd+0x476/0x790
[ 3279.806190][T27156]  do_sys_openat2+0x12e/0x220
[ 3279.806222][T27156]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3279.806263][T27156]  __x64_sys_openat+0x12d/0x210
[ 3279.806303][T27156]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3279.806334][T27156]  ? xfd_validate_state+0x129/0x190
[ 3279.806377][T27156]  do_syscall_64+0xc9/0xf80
[ 3279.806404][T27156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3279.806426][T27156] RIP: 0033:0x7fd96879acb9
[ 3279.806443][T27156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3279.806464][T27156] RSP: 002b:00007fd969642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3279.806484][T27156] RAX: ffffffffffffffda RBX: 00007fd968a15fa0 RCX: 00007fd96879acb9
[ 3279.806499][T27156] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3279.806513][T27156] RBP: 00007fd968808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3279.806526][T27156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3279.806539][T27156] R13: 00007fd968a16038 R14: 00007fd968a15fa0 R15: 00007ffc57f2af88
[ 3279.806566][T27156]  </TASK>
[ 3280.932084][T27166] FAULT_INJECTION: forcing a failure.
[ 3280.932084][T27166] name failslab, interval 1, probability 0, space 0, times 0
[ 3281.014535][T27166] CPU: 1 UID: 0 PID: 27166 Comm: syz.3.8436 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3281.014583][T27166] Tainted: [L]=SOFTLOCKUP
[ 3281.014595][T27166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3281.014617][T27166] Call Trace:
[ 3281.014627][T27166]  <TASK>
[ 3281.014640][T27166]  dump_stack_lvl+0x100/0x190
[ 3281.014685][T27166]  should_fail_ex.cold+0x5/0xa
[ 3281.014738][T27166]  should_failslab+0xc2/0x120
[ 3281.014781][T27166]  __kmalloc_cache_noprof+0x80/0x810
[ 3281.014814][T27166]  ? snd_seq_create_port+0xf7/0xa80
[ 3281.014843][T27166]  ? vsnprintf+0x4ee/0x1240
[ 3281.014881][T27166]  ? snd_seq_create_port+0xf7/0xa80
[ 3281.014912][T27166]  snd_seq_create_port+0xf7/0xa80
[ 3281.014954][T27166]  snd_seq_ioctl_create_port+0x253/0x940
[ 3281.015020][T27166]  ? __pfx_snd_seq_ioctl_create_port+0x10/0x10
[ 3281.015074][T27166]  ? __pfx_sprintf+0x10/0x10
[ 3281.015102][T27166]  ? __lock_acquire+0x4a5/0x2630
[ 3281.015150][T27166]  call_seq_client_ctl+0xa3/0x130
[ 3281.015183][T27166]  snd_seq_kernel_client_ctl+0x77/0xd0
[ 3281.015216][T27166]  create_port+0x19b/0x270
[ 3281.015247][T27166]  ? __pfx_create_port+0x10/0x10
[ 3281.015285][T27166]  ? __pfx_snd_seq_oss_event_input+0x10/0x10
[ 3281.015321][T27166]  ? __pfx_free_devinfo+0x10/0x10
[ 3281.015375][T27166]  ? mark_held_locks+0x40/0x70
[ 3281.015414][T27166]  ? _raw_spin_unlock_irq+0x23/0x50
[ 3281.015445][T27166]  ? lockdep_hardirqs_on+0x78/0x100
[ 3281.015485][T27166]  snd_seq_oss_open+0x292/0xa10
[ 3281.015526][T27166]  odev_open+0x79/0xc0
[ 3281.015553][T27166]  ? __pfx_odev_open+0x10/0x10
[ 3281.015582][T27166]  soundcore_open+0x2e3/0x5a0
[ 3281.015617][T27166]  ? __pfx_soundcore_open+0x10/0x10
[ 3281.015651][T27166]  chrdev_open+0x234/0x6a0
[ 3281.015689][T27166]  ? __pfx_apparmor_file_open+0x10/0x10
[ 3281.015731][T27166]  ? __pfx_chrdev_open+0x10/0x10
[ 3281.015775][T27166]  ? fsnotify_open_perm_and_set_mode+0x17a/0xa80
[ 3281.015821][T27166]  do_dentry_open+0x73e/0x1570
[ 3281.015856][T27166]  ? __pfx_chrdev_open+0x10/0x10
[ 3281.015895][T27166]  ? security_inode_permission+0xbf/0x250
[ 3281.015948][T27166]  vfs_open+0x82/0x3f0
[ 3281.016008][T27166]  path_openat+0x21dc/0x3120
[ 3281.016052][T27166]  ? __pfx_path_openat+0x10/0x10
[ 3281.016097][T27166]  do_filp_open+0x1f7/0x420
[ 3281.016131][T27166]  ? __pfx_do_filp_open+0x10/0x10
[ 3281.016183][T27166]  ? _raw_spin_unlock+0x28/0x50
[ 3281.016209][T27166]  ? alloc_fd+0x476/0x790
[ 3281.016248][T27166]  do_sys_openat2+0x12e/0x220
[ 3281.016288][T27166]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3281.016329][T27166]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 3281.016370][T27166]  __x64_sys_openat+0x12d/0x210
[ 3281.016411][T27166]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3281.016451][T27166]  ? xfd_validate_state+0x129/0x190
[ 3281.016506][T27166]  do_syscall_64+0xc9/0xf80
[ 3281.016544][T27166]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3281.016575][T27166] RIP: 0033:0x7fd96879acb9
[ 3281.016599][T27166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3281.016629][T27166] RSP: 002b:00007fd969642028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3281.016657][T27166] RAX: ffffffffffffffda RBX: 00007fd968a15fa0 RCX: 00007fd96879acb9
[ 3281.016674][T27166] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3281.016694][T27166] RBP: 00007fd968808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3281.016714][T27166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3281.016734][T27166] R13: 00007fd968a16038 R14: 00007fd968a15fa0 R15: 00007ffc57f2af88
[ 3281.016775][T27166]  </TASK>
[ 3281.019062][T27166] ALSA: seq_oss: can't create port
[ 3282.073228][T27179] FAULT_INJECTION: forcing a failure.
[ 3282.073228][T27179] name failslab, interval 1, probability 0, space 0, times 0
[ 3282.094797][T27179] CPU: 0 UID: 0 PID: 27179 Comm: syz.0.8438 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3282.094841][T27179] Tainted: [L]=SOFTLOCKUP
[ 3282.094853][T27179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3282.094871][T27179] Call Trace:
[ 3282.094881][T27179]  <TASK>
[ 3282.094893][T27179]  dump_stack_lvl+0x100/0x190
[ 3282.094935][T27179]  should_fail_ex.cold+0x5/0xa
[ 3282.094985][T27179]  should_failslab+0xc2/0x120
[ 3282.095026][T27179]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 3282.095072][T27179]  __kmalloc_noprof+0xf6/0x9c0
[ 3282.095102][T27179]  ? kfree+0x2a9/0x690
[ 3282.095138][T27179]  ? tomoyo_realpath_from_path+0xb6/0x690
[ 3282.095168][T27179]  tomoyo_realpath_from_path+0xb6/0x690
[ 3282.095207][T27179]  tomoyo_check_open_permission+0x2af/0x3c0
[ 3282.095252][T27179]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 3282.095330][T27179]  ? do_raw_spin_lock+0x128/0x260
[ 3282.095377][T27179]  ? path_get+0x61/0x80
[ 3282.095420][T27179]  tomoyo_file_open+0x6b/0x90
[ 3282.095456][T27179]  security_file_open+0xb5/0x1e0
[ 3282.095484][T27179]  do_dentry_open+0x58c/0x1570
[ 3282.095522][T27179]  ? security_inode_permission+0xbf/0x250
[ 3282.095570][T27179]  vfs_open+0x82/0x3f0
[ 3282.095616][T27179]  path_openat+0x21dc/0x3120
[ 3282.095662][T27179]  ? __pfx_path_openat+0x10/0x10
[ 3282.095710][T27179]  do_filp_open+0x1f7/0x420
[ 3282.095748][T27179]  ? __pfx_do_filp_open+0x10/0x10
[ 3282.095807][T27179]  ? _raw_spin_unlock+0x28/0x50
[ 3282.095837][T27179]  ? alloc_fd+0x476/0x790
[ 3282.095881][T27179]  do_sys_openat2+0x12e/0x220
[ 3282.095925][T27179]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3282.095970][T27179]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 3282.096016][T27179]  __x64_sys_openat+0x12d/0x210
[ 3282.096070][T27179]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3282.096113][T27179]  ? xfd_validate_state+0x129/0x190
[ 3282.096172][T27179]  do_syscall_64+0xc9/0xf80
[ 3282.096211][T27179]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3282.096241][T27179] RIP: 0033:0x7f73f779acb9
[ 3282.096264][T27179] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3282.096293][T27179] RSP: 002b:00007f73f8598028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3282.096323][T27179] RAX: ffffffffffffffda RBX: 00007f73f7a15fa0 RCX: 00007f73f779acb9
[ 3282.096342][T27179] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3282.096361][T27179] RBP: 00007f73f7808bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3282.096379][T27179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3282.096397][T27179] R13: 00007f73f7a16038 R14: 00007f73f7a15fa0 R15: 00007ffd650e46d8
[ 3282.096434][T27179]  </TASK>
[ 3282.096446][T27179] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3290.074709][T27260] FAULT_INJECTION: forcing a failure.
[ 3290.074709][T27260] name failslab, interval 1, probability 0, space 0, times 0
[ 3290.233732][T27260] CPU: 0 UID: 0 PID: 27260 Comm: syz.1.8451 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3290.233789][T27260] Tainted: [L]=SOFTLOCKUP
[ 3290.233802][T27260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3290.233824][T27260] Call Trace:
[ 3290.233836][T27260]  <TASK>
[ 3290.233849][T27260]  dump_stack_lvl+0x100/0x190
[ 3290.233897][T27260]  should_fail_ex.cold+0x5/0xa
[ 3290.233953][T27260]  should_failslab+0xc2/0x120
[ 3290.234001][T27260]  ? tomoyo_encode2+0xfb/0x3c0
[ 3290.234032][T27260]  __kmalloc_noprof+0xf6/0x9c0
[ 3290.234092][T27260]  ? tomoyo_encode2+0xfb/0x3c0
[ 3290.234125][T27260]  tomoyo_encode2+0xfb/0x3c0
[ 3290.234166][T27260]  tomoyo_encode+0x29/0x50
[ 3290.234198][T27260]  tomoyo_realpath_from_path+0x18c/0x690
[ 3290.234245][T27260]  tomoyo_check_open_permission+0x2af/0x3c0
[ 3290.234298][T27260]  ? __pfx_tomoyo_check_open_permission+0x10/0x10
[ 3290.234392][T27260]  ? do_raw_spin_lock+0x128/0x260
[ 3290.234452][T27260]  ? path_get+0x61/0x80
[ 3290.234500][T27260]  tomoyo_file_open+0x6b/0x90
[ 3290.234543][T27260]  security_file_open+0xb5/0x1e0
[ 3290.234575][T27260]  do_dentry_open+0x58c/0x1570
[ 3290.234620][T27260]  ? security_inode_permission+0xbf/0x250
[ 3290.234680][T27260]  vfs_open+0x82/0x3f0
[ 3290.234743][T27260]  path_openat+0x21dc/0x3120
[ 3290.234797][T27260]  ? __pfx_path_openat+0x10/0x10
[ 3290.234854][T27260]  do_filp_open+0x1f7/0x420
[ 3290.234897][T27260]  ? __pfx_do_filp_open+0x10/0x10
[ 3290.234968][T27260]  ? _raw_spin_unlock+0x28/0x50
[ 3290.235001][T27260]  ? alloc_fd+0x476/0x790
[ 3290.235051][T27260]  do_sys_openat2+0x12e/0x220
[ 3290.235111][T27260]  ? __pfx_do_sys_openat2+0x10/0x10
[ 3290.235167][T27260]  ? blkcg_maybe_throttle_current+0x5df/0xeb0
[ 3290.235219][T27260]  __x64_sys_openat+0x12d/0x210
[ 3290.235271][T27260]  ? __pfx___x64_sys_openat+0x10/0x10
[ 3290.235321][T27260]  ? xfd_validate_state+0x129/0x190
[ 3290.235389][T27260]  do_syscall_64+0xc9/0xf80
[ 3290.235435][T27260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3290.235472][T27260] RIP: 0033:0x7fdf0059acb9
[ 3290.235499][T27260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3290.235535][T27260] RSP: 002b:00007fdf013a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 3290.235569][T27260] RAX: ffffffffffffffda RBX: 00007fdf00815fa0 RCX: 00007fdf0059acb9
[ 3290.235593][T27260] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c
[ 3290.235616][T27260] RBP: 00007fdf00608bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3290.235637][T27260] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3290.235657][T27260] R13: 00007fdf00816038 R14: 00007fdf00815fa0 R15: 00007ffecda1d088
[ 3290.235699][T27260]  </TASK>
[ 3290.574667][T27260] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 3338.068436][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 3338.074854][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 3348.978749][T27943] syz.3.8578 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 3362.482809][T28153] zswap: compressor  not available
[ 3367.035090][T28212] zswap: compressor  not available
[ 3368.341967][T28237] zswap: compressor  not available
[ 3370.982194][T28270] zswap: compressor  not available
[ 3371.206176][T28275] zswap: compressor  not available
[ 3374.911834][T28304] zswap: compressor  not available
[ 3378.495649][T28344] nvme_fcloop: unknown parameter or missing value '7'
[ 3378.530323][T28344] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 3378.564837][T28344] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 3378.900257][T28351] zswap: compressor  not available
[ 3379.039960][T28354] nvme_fcloop: unknown parameter or missing value '7'
[ 3379.056343][T28354] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 3379.098723][T28354] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 3379.546842][T28362] nvme_fcloop: unknown parameter or missing value '7'
[ 3379.555862][T28362] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 3379.563197][T28362] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 3379.861785][T28368] nvme_fcloop: unknown parameter or missing value '7'
[ 3379.889843][T28368] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 3379.897382][T28368] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 3380.352057][T28373] nvme_fcloop: unknown parameter or missing value '7'
[ 3380.387124][T28373] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 3380.394974][T28373] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 3380.574978][T28375] nvme_fcloop: unknown parameter or missing value '7'
[ 3380.607690][T28375] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 3380.615121][T28375] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 3380.790856][T28382] zswap: compressor  not available
[ 3383.047450][T28407] nvme_fcloop: unknown parameter or missing value '7'
[ 3383.066302][T28407] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 3383.074506][T28407] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 3383.602691][T28411] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 3383.612144][T28411] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 3385.828492][T28439] zswap: compressor  not available
[ 3386.156524][T28448] zswap: compressor  not available
[ 3388.970643][T28477] zswap: compressor  not available
[ 3389.527341][T28494] zswap: compressor  not available
[ 3391.856931][T28509] zswap: compressor  not available
[ 3392.262194][T28513] zswap: compressor  not available
[ 3393.905192][T28555] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 3393.916070][T28555] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 3397.948333][T28601] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 3397.955817][T28601] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 3399.019332][T28626] zswap: compressor  not available
[ 3399.512948][ T1304] ieee802154 phy0 wpan0: encryption failed: -22
[ 3399.519617][ T1304] ieee802154 phy1 wpan1: encryption failed: -22
[ 3401.765317][T28662] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed
[ 3401.772715][T28662] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff)
[ 3405.805428][T28733] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3405.822305][T28733] Bluetooth: hci2: Opcode 0x0406 failed: -4
[ 3405.921528][T28733] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3405.944331][T28733] Bluetooth: hci0: Opcode 0x0406 failed: -4
[ 3405.996722][T28733] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3406.037386][T28733] Bluetooth: hci3: Opcode 0x0406 failed: -4
[ 3406.086876][T28733] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3406.148587][T28733] Bluetooth: hci1: Opcode 0x0406 failed: -4
[ 3407.290208][T28763] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3407.315887][T28763] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3407.346744][T28763] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3407.379826][T28763] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3408.632537][T28780] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3408.690706][T28780] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3408.744814][T28780] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3408.776030][T28780] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3410.708423][T10220] Bluetooth: hci0: command 0x0406 tx timeout
[ 3410.714919][T10220] Bluetooth: hci2: command 0x0406 tx timeout
[ 3410.794484][T28814] Bluetooth: hci1: command 0x0406 tx timeout
[ 3410.800576][T28814] Bluetooth: hci3: command 0x0406 tx timeout
[ 3410.933518][T28815] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3410.969258][T28815] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3411.005988][T28815] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3411.016429][T28815] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3411.527993][T28825] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3411.536083][T28825] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3411.553194][T28825] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3411.574326][T28825] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3411.660013][T28825] futex_wake_op: syz.1.8741 tries to shift op by -2048; fix this program
[ 3411.668607][T28825] futex_wake_op: syz.1.8741 tries to shift op by -2048; fix this program
[ 3412.016818][T28831] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3412.044843][T28831] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3412.070881][T28831] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3412.081636][T28831] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3413.649575][T28859] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3413.655757][T28859] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3413.661964][T28862] futex_wake_op: syz.3.8747 tries to shift op by -2048; fix this program
[ 3413.662387][T28859] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3413.681778][T28862] futex_wake_op: syz.3.8747 tries to shift op by -2048; fix this program
[ 3413.682040][T28859] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3415.598557][T28874] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3415.616618][T28874] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3415.672105][T28874] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3415.738183][T28874] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3416.499634][T28908] futex_wake_op: syz.3.8755 tries to shift op by -2048; fix this program
[ 3416.533997][T28908] futex_wake_op: syz.3.8755 tries to shift op by -2048; fix this program
[ 3416.719521][T28894] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3416.742819][T28894] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3416.817561][T28894] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3416.834999][T28894] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3417.728026][T28919] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3417.753316][T28919] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3417.816693][T28919] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3417.826464][T28919] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3419.487426][T28948] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3419.494604][T28948] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3419.501363][T28948] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3419.520363][T28948] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3419.565325][T28952] futex_wake_op: syz.1.8766 tries to shift op by -2048; fix this program
[ 3419.616740][T28952] futex_wake_op: syz.1.8766 tries to shift op by -2048; fix this program
[ 3419.886050][T28960] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3419.940828][T28960] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3420.001523][T28960] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3420.011934][T28960] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3420.200376][T28960] futex_wake_op: syz.3.8767 tries to shift op by -2048; fix this program
[ 3420.210882][T28960] futex_wake_op: syz.3.8767 tries to shift op by -2048; fix this program
[ 3420.705092][T28965] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3420.734637][T28965] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3420.741310][T28965] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3420.750604][T28965] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3420.914476][T28965] futex_wake_op: syz.1.8768 tries to shift op by -2048; fix this program
[ 3420.949310][T28965] futex_wake_op: syz.1.8768 tries to shift op by -2048; fix this program
[ 3421.967414][T28987] futex_wake_op: syz.1.8778 tries to shift op by -2048; fix this program
[ 3421.976444][T28987] futex_wake_op: syz.1.8778 tries to shift op by -2048; fix this program
[ 3422.167615][T28981] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3422.174266][T28981] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3422.185110][T28981] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3422.191147][T28981] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3424.234576][T21375] Bluetooth: hci1: command 0x0406 tx timeout
[ 3424.240716][T28814] Bluetooth: hci3: command 0x0406 tx timeout
[ 3424.247128][T28814] Bluetooth: hci0: command 0x0406 tx timeout
[ 3424.253272][T10220] Bluetooth: hci2: command 0x0406 tx timeout
[ 3424.326399][T29009] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3424.332581][T29009] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3424.388451][T29009] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3424.407318][T29009] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3424.674189][T29012] futex_wake_op: syz.0.8775 tries to shift op by -2048; fix this program
[ 3424.725883][T29012] futex_wake_op: syz.0.8775 tries to shift op by -2048; fix this program
[ 3424.775212][T29017] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3424.818978][T29017] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3424.864688][T29017] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3424.904703][T29017] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3425.056655][T29019] futex_wake_op: syz.3.8779 tries to shift op by -2048; fix this program
[ 3425.084805][T29019] futex_wake_op: syz.3.8779 tries to shift op by -2048; fix this program
[ 3425.182924][T29025] futex_wake_op: syz.2.8780 tries to shift op by -2048; fix this program
[ 3425.195084][T29025] futex_wake_op: syz.2.8780 tries to shift op by -2048; fix this program
[ 3425.354653][T29028] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3425.396595][T29028] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3425.424329][T29028] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3425.442855][T29028] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3425.595508][T29033] futex_wake_op: syz.1.8781 tries to shift op by -2048; fix this program
[ 3425.604341][T29033] futex_wake_op: syz.1.8781 tries to shift op by -2048; fix this program
[ 3425.636467][T29031] futex_wake_op: syz.2.8782 tries to shift op by -2048; fix this program
[ 3425.655831][T29031] futex_wake_op: syz.2.8782 tries to shift op by -2048; fix this program
[ 3426.616103][T29050] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3426.623944][T29050] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3426.682198][T29050] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3426.707099][T29050] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3427.406422][T29063] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3427.432518][T29063] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3427.458992][T29063] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3427.477359][T29063] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3428.664750][T29080] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3428.674108][T29080] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3428.685018][T29096] 0x000000000001-0x000000020000 : ""
[ 3428.691359][T29080] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3428.700265][T29080] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3428.733329][T29096] ftl_cs: FTL header corrupt!
[ 3429.792824][T29103] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3429.798922][T29103] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3429.829456][T29103] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3429.841582][T29103] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3429.938990][T29115] futex_atomic_op_inuser: 14 callbacks suppressed
[ 3429.939021][T29115] futex_wake_op: syz.2.8801 tries to shift op by -2048; fix this program
[ 3429.963308][T29115] futex_wake_op: syz.2.8801 tries to shift op by -2048; fix this program
[ 3430.003296][T29115] 0x000000000001-0x000000020000 : ""
[ 3430.024342][T29113] futex_wake_op: syz.0.8800 tries to shift op by -2048; fix this program
[ 3430.050974][T29113] futex_wake_op: syz.0.8800 tries to shift op by -2048; fix this program
[ 3430.181238][T29115] ftl_cs: FTL header corrupt!
[ 3430.793744][T29120] futex_wake_op: syz.3.8802 tries to shift op by -2048; fix this program
[ 3430.806359][T29123] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3430.813410][T29123] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3430.813525][T29120] futex_wake_op: syz.3.8802 tries to shift op by -2048; fix this program
[ 3430.844620][T29123] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3430.896072][T29123] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3430.920044][T29125] futex_wake_op: syz.0.8804 tries to shift op by -2048; fix this program
[ 3430.983123][T29125] futex_wake_op: syz.0.8804 tries to shift op by -2048; fix this program
[ 3431.009471][T29123] futex_wake_op: syz.1.8803 tries to shift op by -2048; fix this program
[ 3431.021878][T29125] 0x000000000001-0x000000020000 : ""
[ 3431.076378][T29132] futex_wake_op: syz.2.8805 tries to shift op by -2048; fix this program
[ 3431.101392][T29125] ftl_cs: FTL header corrupt!
[ 3431.935536][T29138] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3431.944888][T29138] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3431.968961][T29138] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3432.024235][T29138] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3432.177136][T29138] 0x000000000001-0x000000020000 : ""
[ 3432.194861][T29138] ftl_cs: FTL header corrupt!
[ 3433.055158][T29169] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3433.072800][T29169] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3433.100956][T29169] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3433.123186][T29169] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3433.567902][T29178] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3433.620702][T29178] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3433.721658][T29178] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3433.731989][T29178] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3433.856266][T29178] 0x000000000001-0x000000020000 : ""
[ 3433.910045][T29178] ftl_cs: FTL header corrupt!
[ 3434.747814][T29183] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3434.762759][T29183] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3434.771132][T29183] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3434.791132][T29183] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3435.005126][T29201] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3435.034647][T29201] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3435.054149][T29201] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3435.083800][T29201] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3435.112497][T29207] futex_atomic_op_inuser: 14 callbacks suppressed
[ 3435.112515][T29207] futex_wake_op: syz.0.8818 tries to shift op by -2048; fix this program
[ 3435.145900][T29207] futex_wake_op: syz.0.8818 tries to shift op by -2048; fix this program
[ 3435.256260][T29206] futex_wake_op: syz.3.8819 tries to shift op by -2048; fix this program
[ 3435.265934][T29206] futex_wake_op: syz.3.8819 tries to shift op by -2048; fix this program
[ 3435.282680][T29206] 0x000000000001-0x000000020000 : ""
[ 3435.304250][T29206] ftl_cs: FTL header corrupt!
[ 3435.862766][T29216] futex_wake_op: syz.1.8821 tries to shift op by -2048; fix this program
[ 3435.889142][T29216] futex_wake_op: syz.1.8821 tries to shift op by -2048; fix this program
[ 3436.114872][T29222] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3436.130159][T29222] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3436.162717][T29222] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3436.169654][T29222] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3436.434409][T29228] futex_wake_op: syz.2.8824 tries to shift op by -2048; fix this program
[ 3436.481920][T29228] futex_wake_op: syz.2.8824 tries to shift op by -2048; fix this program
[ 3437.327388][T29243] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3437.345708][T29243] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3437.380466][T29243] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3437.414469][T29243] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3437.625219][T29249] futex_wake_op: syz.0.8827 tries to shift op by -2048; fix this program
[ 3437.633849][T29249] futex_wake_op: syz.0.8827 tries to shift op by -2048; fix this program
[ 3437.644100][T29249] 0x000000000001-0x000000020000 : ""
[ 3437.698960][T29249] ftl_cs: FTL header corrupt!
[ 3438.352549][T29261] 0x000000000001-0x000000020000 : ""
[ 3438.412048][T29261] ftl_cs: FTL header corrupt!
[ 3438.633899][T29251] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3438.664293][T29251] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3438.674920][T29251] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3438.710349][T29251] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3438.799865][T29264] 0x000000000001-0x000000020000 : ""
[ 3438.807987][T29264] ftl_cs: FTL header corrupt!
[ 3438.940039][T29268] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3438.952179][T29268] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3438.982905][T29268] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3438.989513][T29268] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3439.142803][T29278] 0x000000000001-0x000000020000 : ""
[ 3439.217571][T29278] ftl_cs: FTL header corrupt!
[ 3439.975089][T29285] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3439.996294][T29285] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3440.023306][T29285] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3440.029677][T29285] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3440.160315][T29297] futex_atomic_op_inuser: 12 callbacks suppressed
[ 3440.160336][T29297] futex_wake_op: syz.2.8836 tries to shift op by -2048; fix this program
[ 3440.175750][T29297] futex_wake_op: syz.2.8836 tries to shift op by -2048; fix this program
[ 3440.229142][T29299] futex_wake_op: syz.0.8835 tries to shift op by -2048; fix this program
[ 3440.247337][T29299] futex_wake_op: syz.0.8835 tries to shift op by -2048; fix this program
[ 3440.268276][T29300] futex_wake_op: syz.1.8838 tries to shift op by -2048; fix this program
[ 3440.276951][T29300] futex_wake_op: syz.1.8838 tries to shift op by -2048; fix this program
[ 3440.292994][T29289] 0x000000000001-0x000000020000 : ""
[ 3440.319266][T29289] ftl_cs: FTL header corrupt!
[ 3441.235499][T29307] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3441.242747][T29307] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3441.249217][T29307] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3441.287104][T29307] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3441.354992][T29307] futex_wake_op: syz.0.8839 tries to shift op by -2048; fix this program
[ 3441.363676][T29307] futex_wake_op: syz.0.8839 tries to shift op by -2048; fix this program
[ 3441.390375][T29315] futex_wake_op: syz.1.8841 tries to shift op by -2048; fix this program
[ 3441.413803][T29315] futex_wake_op: syz.1.8841 tries to shift op by -2048; fix this program
[ 3441.820130][T29331] 0x000000000001-0x000000020000 : ""
[ 3441.947976][T29318] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3442.131482][T29318] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3442.144407][T29318] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3442.154990][T29331] ftl_cs: FTL header corrupt!
[ 3442.388401][T29318] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3442.589709][T29332] 0x000000000001-0x000000020000 : ""
[ 3442.629941][T29332] ftl_cs: FTL header corrupt!
[ 3442.832075][T29339] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3442.848809][T29339] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3442.866035][T29339] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3442.875784][T29339] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3443.012440][T29345] 0x000000000001-0x000000020000 : ""
[ 3443.058254][T29345] ftl_cs: FTL header corrupt!
[ 3444.008446][T29358] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3444.051236][T29358] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3444.071967][T29358] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3444.091467][T29358] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3444.465780][T29371] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3444.477611][T29371] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3444.506648][T29371] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3444.532437][T29371] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3444.914946][T29371] 0x000000000001-0x000000020000 : ""
[ 3444.943325][T29371] ftl_cs: FTL header corrupt!
[ 3445.085190][T29376] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3445.091404][T29376] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3445.177405][T29376] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3445.227341][T29376] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3445.252063][T29379] futex_atomic_op_inuser: 22 callbacks suppressed
[ 3445.252088][T29379] futex_wake_op: syz.3.8856 tries to shift op by -2048; fix this program
[ 3445.347083][T29379] futex_wake_op: syz.3.8856 tries to shift op by -2048; fix this program
[ 3445.391786][T29386] futex_wake_op: syz.2.8858 tries to shift op by -2048; fix this program
[ 3445.414208][T29386] futex_wake_op: syz.2.8858 tries to shift op by -2048; fix this program
[ 3445.433978][T29388] futex_wake_op: syz.1.8857 tries to shift op by -2048; fix this program
[ 3445.445036][T29386] 0x000000000001-0x000000020000 : ""
[ 3445.453591][T29386] ftl_cs: FTL header corrupt!
[ 3445.454770][T29388] futex_wake_op: syz.1.8857 tries to shift op by -2048; fix this program
[ 3445.544633][T29389] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3445.583273][T29389] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3445.619449][T29389] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3445.668621][T29389] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3445.839108][T29393] futex_wake_op: syz.0.8859 tries to shift op by -2048; fix this program
[ 3445.862378][T29393] futex_wake_op: syz.0.8859 tries to shift op by -2048; fix this program
[ 3445.897447][T29393] 0x000000000001-0x000000020000 : ""
[ 3445.921495][T29393] ftl_cs: FTL header corrupt!
[ 3446.444968][T29398] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3446.451182][T29398] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3446.459005][T29398] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3446.468131][T29398] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3446.482788][T29402] futex_wake_op: syz.3.8860 tries to shift op by -2048; fix this program
[ 3446.502736][T29402] futex_wake_op: syz.3.8860 tries to shift op by -2048; fix this program
[ 3446.559956][T29399] 0x000000000001-0x000000020000 : ""
[ 3446.599311][T29399] ftl_cs: FTL header corrupt!
[ 3446.935174][T29410] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3446.983677][T29410] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3447.009541][T29410] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3447.015942][T29410] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3447.140655][T29412] 0x000000000001-0x000000020000 : ""
[ 3447.250791][T29412] ftl_cs: FTL header corrupt!
[ 3447.814904][T29420] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3447.839122][T29420] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3447.879320][T29420] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3447.885690][T29420] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3448.066696][T29420] 0x000000000001-0x000000020000 : ""
[ 3448.083718][T29420] ftl_cs: FTL header corrupt!
[ 3448.490852][T29433] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3448.497978][T29433] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3448.504274][T29433] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3448.526054][T29433] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3448.678241][T29435] 0x000000000001-0x000000020000 : ""
[ 3448.758406][T29435] ftl_cs: FTL header corrupt!
[ 3448.892974][T29444] 0x000000000001-0x000000020000 : ""
[ 3448.918135][T29444] ftl_cs: FTL header corrupt!
[ 3449.415159][T29447] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3449.422625][T29447] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3449.431142][T29447] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3449.440710][T29447] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3449.611937][T29458] 0x000000000001-0x000000020000 : ""
[ 3449.695879][T29458] ftl_cs: FTL header corrupt!
[ 3450.044811][T29459] 0x000000000001-0x000000020000 : ""
[ 3450.141380][T29459] ftl_cs: FTL header corrupt!
[ 3450.982344][T29468] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 3450.989472][T29468] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 3451.010349][T29468] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 3451.019506][T29468] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 3451.171034][T29478] futex_atomic_op_inuser: 20 callbacks suppressed
[ 3451.171055][T29478] futex_wake_op: syz.1.8874 tries to shift op by -2048; fix this program
[ 3451.209426][T29478] futex_wake_op: syz.1.8874 tries to shift op by -2048; fix this program
[ 3451.337129][T29468] 0x000000000001-0x000000020000 : ""
[ 3451.539174][T29468] ftl_cs: FTL header corrupt!
[ 3451.801946][T29468] ------------[ cut here ]------------
[ 3451.807797][T29468] wbt_init(disk)
[ 3451.807829][T29468] WARNING: block/blk-wbt.c:741 at wbt_init_enable_default+0x53/0x60, CPU#1: syz.1.8874/29468
[ 3451.822872][T29468] Modules linked in:
[ 3451.827626][T29468] CPU: 1 UID: 0 PID: 29468 Comm: syz.1.8874 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3451.838625][T29468] Tainted: [L]=SOFTLOCKUP
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 3451.842952][T29468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3451.853066][T29468] RIP: 0010:wbt_init_enable_default+0x53/0x60
[ 3451.859206][T29468] Code: fd 5b 5d e9 bf b4 9f 06 e8 1a ef 2e fd 48 89 ef e8 a2 fa ff ff 31 ff 89 c3 89 c6 e8 b7 e9 2e fd 85 db 74 d8 e8 fe ee 2e fd 90 <0f> 0b 90 eb cd 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90
[ 3451.879143][T29468] RSP: 0018:ffffc900049df5a0 EFLAGS: 00010283
[ 3451.885301][T29468] RAX: 000000000001d8a4 RBX: 00000000fffffff4 RCX: ffffc9000cb0b000
[ 3451.893310][T29468] RDX: 0000000000080000 RSI: ffffffff84d75b82 RDI: ffff888025e1bd00
[ 3451.901458][T29468] RBP: ffff888046da4000 R08: 0000000000000005 R09: 0000000000000000
[ 3451.909737][T29468] R10: 00000000fffffff4 R11: ffffffff8b736149 R12: ffff88807dd18988
[ 3451.917759][T29468] R13: ffff888046da4390 R14: ffff88807dd18998 R15: ffff888046da4090
[ 3451.926666][T29468] FS:  00007fdf013a86c0(0000) GS:ffff8881246e3000(0000) knlGS:0000000000000000
[ 3451.936772][T29468] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 3451.943407][T29468] CR2: 0000001b33ee6ff8 CR3: 0000000030fac000 CR4: 00000000003526f0
[ 3451.951432][T29468] Call Trace:
[ 3451.954768][T29468]  <TASK>
[ 3451.957714][T29468]  blk_register_queue+0x39e/0x4e0
[ 3451.962877][T29468]  __add_disk+0x73f/0xe40
[ 3451.967307][T29468]  add_disk_fwnode+0x118/0x5c0
[ 3451.972100][T29468]  add_mtd_blktrans_dev+0xd0b/0x1520
[ 3451.977528][T29468]  ? __pfx_add_mtd_blktrans_dev+0x10/0x10
[ 3451.983310][T29468]  mtdblock_add_mtd+0x1cc/0x270
[ 3451.988277][T29468]  blktrans_notify_add+0xa2/0xf0
[ 3451.993235][T29468]  add_mtd_device+0xbe3/0x1750
[ 3451.998134][T29468]  ? __pfx_add_mtd_device+0x10/0x10
[ 3452.003379][T29468]  mtd_add_partition+0x30a/0x660
[ 3452.008389][T29468]  ? __pfx_mtd_add_partition+0x10/0x10
[ 3452.013899][T29468]  ? __might_fault+0xc5/0x140
[ 3452.018633][T29468]  ? __might_fault+0xc5/0x140
[ 3452.023326][T29468]  mtdchar_blkpg_ioctl+0x207/0x250
[ 3452.029256][T29468]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 3452.035497][T29468]  mtdchar_ioctl+0x1670/0x1fd0
[ 3452.040275][T29468]  ? __pfx_mtdchar_ioctl+0x10/0x10
[ 3452.045443][T29468]  ? lock_acquire+0x17c/0x330
[ 3452.050143][T29468]  ? __pfx___might_resched+0x10/0x10
[ 3452.055521][T29468]  ? trace_contention_end+0xd6/0x110
[ 3452.060841][T29468]  ? do_vfs_ioctl+0x226/0x13e0
[ 3452.065726][T29468]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[ 3452.071108][T29468]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 3452.076198][T29468]  ? __pfx___mutex_lock+0x10/0x10
[ 3452.081250][T29468]  ? hook_file_ioctl_common+0x146/0x410
[ 3452.086924][T29468]  ? __fget_files+0x21f/0x3d0
[ 3452.091612][T29468]  mtdchar_unlocked_ioctl+0xb0/0xf0
[ 3452.096856][T29468]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 3452.102786][T29468]  __x64_sys_ioctl+0x18e/0x210
[ 3452.107612][T29468]  do_syscall_64+0xc9/0xf80
[ 3452.112128][T29468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3452.118172][T29468] RIP: 0033:0x7fdf0059acb9
[ 3452.122604][T29468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3452.143102][T29468] RSP: 002b:00007fdf013a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3452.152123][T29468] RAX: ffffffffffffffda RBX: 00007fdf00815fa0 RCX: 00007fdf0059acb9
[ 3452.160146][T29468] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000004
[ 3452.168175][T29468] RBP: 00007fdf00608bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3452.176254][T29468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3452.184276][T29468] R13: 00007fdf00816038 R14: 00007fdf00815fa0 R15: 00007ffecda1d088
[ 3452.192346][T29468]  </TASK>
[ 3452.195445][T29468] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 3452.202765][T29468] CPU: 1 UID: 0 PID: 29468 Comm: syz.1.8874 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 3452.213762][T29468] Tainted: [L]=SOFTLOCKUP
[ 3452.218133][T29468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026
[ 3452.228213][T29468] Call Trace:
[ 3452.231517][T29468]  <TASK>
[ 3452.234468][T29468]  dump_stack_lvl+0x100/0x190
[ 3452.239199][T29468]  vpanic+0x20d/0x630
[ 3452.243215][T29468]  panic+0xd1/0xd1
[ 3452.246961][T29468]  ? __pfx_panic+0x10/0x10
[ 3452.251432][T29468]  check_panic_on_warn.cold+0x19/0x34
[ 3452.256831][T29468]  ? wbt_init_enable_default+0x53/0x60
[ 3452.262325][T29468]  __warn.cold+0x191/0x2f8
[ 3452.266772][T29468]  __report_bug+0x296/0x3d0
[ 3452.271380][T29468]  ? wbt_init_enable_default+0x53/0x60
[ 3452.276904][T29468]  ? __pfx___report_bug+0x10/0x10
[ 3452.282003][T29468]  ? wbt_init_enable_default+0x53/0x60
[ 3452.287490][T29468]  report_bug+0xb2/0x220
[ 3452.291747][T29468]  ? wbt_init_enable_default+0x53/0x60
[ 3452.297235][T29468]  handle_bug+0x166/0x2a0
[ 3452.301596][T29468]  exc_invalid_op+0x17/0x50
[ 3452.306127][T29468]  asm_exc_invalid_op+0x1a/0x20
[ 3452.311007][T29468] RIP: 0010:wbt_init_enable_default+0x53/0x60
[ 3452.317109][T29468] Code: fd 5b 5d e9 bf b4 9f 06 e8 1a ef 2e fd 48 89 ef e8 a2 fa ff ff 31 ff 89 c3 89 c6 e8 b7 e9 2e fd 85 db 74 d8 e8 fe ee 2e fd 90 <0f> 0b 90 eb cd 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90
[ 3452.336741][T29468] RSP: 0018:ffffc900049df5a0 EFLAGS: 00010283
[ 3452.342836][T29468] RAX: 000000000001d8a4 RBX: 00000000fffffff4 RCX: ffffc9000cb0b000
[ 3452.350827][T29468] RDX: 0000000000080000 RSI: ffffffff84d75b82 RDI: ffff888025e1bd00
[ 3452.358832][T29468] RBP: ffff888046da4000 R08: 0000000000000005 R09: 0000000000000000
[ 3452.366824][T29468] R10: 00000000fffffff4 R11: ffffffff8b736149 R12: ffff88807dd18988
[ 3452.374814][T29468] R13: ffff888046da4390 R14: ffff88807dd18998 R15: ffff888046da4090
[ 3452.382806][T29468]  ? do_syscall_64+0xc9/0xf80
[ 3452.387517][T29468]  ? wbt_init_enable_default+0x52/0x60
[ 3452.393010][T29468]  blk_register_queue+0x39e/0x4e0
[ 3452.398086][T29468]  __add_disk+0x73f/0xe40
[ 3452.402450][T29468]  add_disk_fwnode+0x118/0x5c0
[ 3452.407246][T29468]  add_mtd_blktrans_dev+0xd0b/0x1520
[ 3452.412561][T29468]  ? __pfx_add_mtd_blktrans_dev+0x10/0x10
[ 3452.418359][T29468]  mtdblock_add_mtd+0x1cc/0x270
[ 3452.423243][T29468]  blktrans_notify_add+0xa2/0xf0
[ 3452.428199][T29468]  add_mtd_device+0xbe3/0x1750
[ 3452.433018][T29468]  ? __pfx_add_mtd_device+0x10/0x10
[ 3452.438287][T29468]  mtd_add_partition+0x30a/0x660
[ 3452.443300][T29468]  ? __pfx_mtd_add_partition+0x10/0x10
[ 3452.448811][T29468]  ? __might_fault+0xc5/0x140
[ 3452.453523][T29468]  ? __might_fault+0xc5/0x140
[ 3452.458253][T29468]  mtdchar_blkpg_ioctl+0x207/0x250
[ 3452.463394][T29468]  ? __pfx_mtdchar_blkpg_ioctl+0x10/0x10
[ 3452.469076][T29468]  mtdchar_ioctl+0x1670/0x1fd0
[ 3452.473950][T29468]  ? __pfx_mtdchar_ioctl+0x10/0x10
[ 3452.479089][T29468]  ? lock_acquire+0x17c/0x330
[ 3452.483800][T29468]  ? __pfx___might_resched+0x10/0x10
[ 3452.489129][T29468]  ? trace_contention_end+0xd6/0x110
[ 3452.494460][T29468]  ? do_vfs_ioctl+0x226/0x13e0
[ 3452.499270][T29468]  ? mtdchar_unlocked_ioctl+0xa2/0xf0
[ 3452.504671][T29468]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 3452.509747][T29468]  ? __pfx___mutex_lock+0x10/0x10
[ 3452.514809][T29468]  ? hook_file_ioctl_common+0x146/0x410
[ 3452.520416][T29468]  ? __fget_files+0x21f/0x3d0
[ 3452.525127][T29468]  mtdchar_unlocked_ioctl+0xb0/0xf0
[ 3452.530347][T29468]  ? __pfx_mtdchar_unlocked_ioctl+0x10/0x10
[ 3452.536271][T29468]  __x64_sys_ioctl+0x18e/0x210
[ 3452.541087][T29468]  do_syscall_64+0xc9/0xf80
[ 3452.545629][T29468]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 3452.551554][T29468] RIP: 0033:0x7fdf0059acb9
[ 3452.555995][T29468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 3452.575638][T29468] RSP: 002b:00007fdf013a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 3452.584069][T29468] RAX: ffffffffffffffda RBX: 00007fdf00815fa0 RCX: 00007fdf0059acb9
[ 3452.592056][T29468] RDX: 0000000000000000 RSI: 0000000000001269 RDI: 0000000000000004
[ 3452.600039][T29468] RBP: 00007fdf00608bf7 R08: 0000000000000000 R09: 0000000000000000
[ 3452.608049][T29468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 3452.616036][T29468] R13: 00007fdf00816038 R14: 00007fdf00815fa0 R15: 00007ffecda1d088
[ 3452.624061][T29468]  </TASK>
[ 3452.627737][T29468] Kernel Offset: disabled
[ 3452.632089][T29468] Rebooting in 86400 seconds..