last executing test programs: 3m31.709575275s ago: executing program 1 (id=1002): r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/cmdline\x00', 0x600000, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x400ebd, r0, 0x8000) symlink$auto(&(0x7f00000010c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') openat2$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x400, 0x0, 0x31}, 0x18) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) io_uring_setup$auto(0x59, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TCSBRKP2(0xffffffffffffffff, 0x5425, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x1, 0x84) pwrite64$auto(0xc8, 0x0, 0xedef, 0x3) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000080)='/dev/\x0e?^\xd8[\xa1~\xf5\xdfaudio1\x00\x11I\x9f\xabA\a\x1c\xc4\x06\xde@z\xe0\xf9\xc3R\"\x06a\xa7\xe5\x03\x00\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da08, 0x6, 0x4, 0x94, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0xd8]}, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000001200)='/proc/sys/vm/nr_hugepages_mempolicy\x00', 0x68202, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bbf, 0x7ff, 0x3, 0xff, 0x10001, 0x1, 0x3, 0x8001, 0xfffffffffffffffe, 0x80000000, 0x335b0ef1, 0xffffdfffffffff81, 0x7]}, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf28020000000c00018008000500", @ANYRES32, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x4880}, 0x2002c810) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r5) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYBLOB="0103beadc25d56259e31d0e0"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtd0ro\x00', 0x48100, 0x0) 3m30.529764661s ago: executing program 1 (id=1006): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x40000000000001, 0x0, 0x1, 0x4) recvmmsg$auto(r0, 0x0, 0xfff9, 0x2, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) r3 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ftruncate$auto(r1, 0x1) write$auto(0xffffffffffffffff, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRES64=r2, @ANYRES16=0x0, @ANYBLOB="1c082dbd7000fedbdf250300000008000400b70a0000070000800000080d020000003e6a0e99c6a200005525c57c094b68b34a3f6869469b2c556605c55a51bde978e96d57d13705a1b0319cf71a82e312e12eb032e597215c8bb4d204e8b11611b71464f26006ae3acb9367fd189b8100cb6363d753af5a9e8289e8f4d582d2c41c12c579a2be71d36a0a115fce330b08cabed06a1a48fbded52499cad36f73719f7195ba3979faaf721b7b8ac5a48b3680f5f980971773a5", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a0001000180c200000e00000a000100aaaaaaaaaa35000008000200", @ANYRES16=r3], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x440c0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="f2000000", @ANYRESHEX=r4], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_0={0x1e, 0xb5, 0x4, 0x48d0, 0x4, 0xffffffffffffffff, 0x74b, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x4, 0xe5, 0x3}, 0x10) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd6\x00', 0x14be42, 0x0) mmap$auto(0x200000000, 0x810004, 0x8000000000000ffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r6, &(0x7f0000000040)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) 3m29.215486538s ago: executing program 1 (id=1010): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x9, 0x0) close_range$auto(0x2, r0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x181742, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) ioctl$auto_XFS_IOC_SWAPEXT(r0, 0xc0c0586d, &(0x7f00000000c0)={0x38fd, @raw=0xeafd, @inferred=r0, 0x59, 0x7, '\x00', {0x9, 0x2, 0x6, 0xffffffffffffffff, 0x0, 0x4, 0x3d, 0x24, {0x8000, 0x7fff}, {0x0, 0x2}, {0xffffffff, 0x8}, 0x10, 0xb, 0x8, 0x3483, 0x2, 0xff, 0xa42, 0x1b, 0x7, 0x3, '\x00', 0x9, 0x1, 0xcf6d, 0xa}}) socket(0x2, 0xa, 0x1) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) preadv$auto(0xffffffffffffffff, 0x0, 0x5, 0x0, 0x4) setsockopt$auto(0xffffffffffffffff, 0x6, 0x6, &(0x7f0000000700)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\x03J:\x1e\xe5f\xcaq\xdf`\x01;\xf9{d2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f.\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b\x19I\x87\xbb/1\xf9\x84\xbf\xcc\x0e5\xba\x9a\xba\xfb\xde\x16kU\x97\xec\xc6\xe15u\xd5\x94D\xab\xec.K\xfbD\x0f\xc16g\xf3`\x03O\xae]B@\x0e!n\x8dy\x97\xaa\xa7\x12\xbbyD\xd3\x82\xb3\x9a\x88L\x1b\x8b\xfb\xe7\xc8\xa8\xf66\x16\xe1\x04T\'/8a\xeb\xe6\xe6+!\x97\b\xc8;P\f~\x88\x02\x91 \xd3\x93\xa7.xCNA\xcax)\xb4\xdf\xfe/\xe40\xc6y\x13\x8d\bfJ\x85\x05\xf5\x9f\xea\x15\xe9{3\xcc\xac\x94w.%\x11_\xd3\xe2\xe9\x8c\x9c\xb1\xfb\xf9o\xf4\xc9\x88\xbd\x90p\xae\x8ap\xb9\xa4\xb7\xadv&\x999\xdf\x83\xae\xff\xa5\xfc\xd3\xc0!\xdc\xc4\xa0\xce8:\xeb~\x9b_F\x8f\xcaY\xa9\x89@\x99)\x1c\x8b\xc5\xb7\x10\xd1\xc8`\xb6\x8f\x136\xc3\x1e\xbd\x8e$\"\xbfJ\n\xd6\x0f\x9d\xcbr\xb7\xa8\xed\r+$\x94\x9b\xfe8\x8ao\xf8\xba\'i\xf1\xd3\x9c7P\xe3\x14\xa2\x1b-\xbb\xae\xe3P#:$\xaf\aB\xd2\x95\x18\\r\xd1\x80\x9fD\xd5\xaba\xc8\xd4\xd1\xb6\xf5\xb9\x16\xbb\xbc\xd6\xb3+\xdf\xfc\x89\x1f\xe9M|\x0e?g\x18\v\"', 0x7) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) write$auto(r4, 0x0, 0x9) unshare$auto(0x40000080) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638828712, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/free_buffer\x00', 0x109100, 0xebff) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0x2003f2, 0x15) unshare$auto(0x20000) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(r2, &(0x7f0000001940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001900)={&(0x7f0000001980)={0x1674, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY={0x266, 0x50, 0x0, 0x1, [@nested={0x14d, 0x9a, 0x0, 0x1, [@typed={0x8, 0x67, 0x0, 0x0, @u32=0x5}, @generic="48080b29cf8497601258d60e3abc546d64a3a80e6c258900269cf0fcf6dc4dd4d3ef9ac93839e8c543a0ef78b4aba065d7d0b9a716d1380a875c21bb5b7bad246f15165035b55d4280cf1e626c08c7dfa75bd7b004752abc6409c1d32f355bafd72407a513e99b7e0996cf781650c8133bc9983c35b4b54f8fcd0624803c597e687ae61a28eb22184368922f", @typed={0x14, 0x1b, 0x0, 0x0, @ipv6=@remote}, @typed={0x14, 0x71, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="af92cfb26bca8eef9e5fa92fd8d6503de79fdc0c04099193aacecf63fff4e6ac9141d7dc0e6062ffdfe02b58ca9eaca90a5d8c93e193dbbac2375276298220a66e649bebb8a7bd9c7d4396669aca36c360616680b5572e95df5a69de67afc688fcf61b8cabfaa9ff6fb04e6e460c299c061ebe203e92bcc2b68f625a4a8737b99d5de860b5", @nested={0x4, 0x153}, @nested={0x4, 0x106}]}, @generic="2501015c36f34d5e2ef0d6c1cd11ba45978b1046711dd2a1379e42f805edf71240999f0773f704f81c890136505a7d40469b4dcef36499a635bbcee687d63569480a501e5e141057fe9e42ac1c1e5018a2752bd812c3e5644cc19d66b6fdea5bbb92ae28ba9eb6ca3fa10f48740ec78653e0cf1a9ff26ed924919b6c72c0752bbc12f519a5256fb44515a199418647e7b5c756f1b5b95f0bf704ff4b925ff261d32e61207f17", @typed={0x4, 0x168}, @typed={0xc, 0xae, 0x0, 0x0, @u64=0x60000000000000}, @typed={0x4, 0x120}, @typed={0x56, 0xa4, 0x0, 0x0, @binary="7520aedf13733a7965e5e66ab8151351e951febc2c54c75837d8c44e2f2f056d9d4e5133737012d0526f180176aa98616f8fca5c98eb44442671bac9b1bd14116c0d0dcf9713eb16cbf488c14a7a81644b13"}]}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x13ee, 0x75, 0x0, 0x1, [@nested={0x1204, 0x8f, 0x0, 0x1, [@generic="fd67929e2e3272c30766225377f6001d189fe73c1c84b994811d4c3eda04906ea42e2d31506d2ee18f6a23833ea603bc08961fa96cf8935a60eb19d5eda69053a7340e5d0eb89fe13cfb11fb4631f7be32d5b5d4f74a0bde420cf6511405a2740cb96a98b57e77e643d9ca68700e79afde96cdecdf2625566315cd0a681c5901da2d6d021fe033ae7603e6ffd10b7eabf95e81a6b6f4f7e6a2914fe41e9ac6", @typed={0x4, 0x94}, @generic="825570bcd1ee66949522c61efe1c973a2acfe48634037ca8ba11db20d8594e65348e21a44161de4019cbdff76de02c8f79e9f04fd1d3229c702ae29b23cf6952702100335de21556b2aa8c9eeaa9a89ba573b058f96e2716d83d45bacf002e431287a05a9e86ec8c616299c934330ebc8e8c2d5e11050ebdbc57d679223a35ed45290eaba12435498ab8e3c5bb7d017eed9e09d68a8342132d4e294773f00a57ee9aa4c693226d66b63e24e817304b5fd46de90ae878b95c96cd7ca8c3f33c6fc135223474084f80bd19f68b4ed82ff762597ff835bf5ab84bb7f1cf888d8094d86bf6f3d39372d32648500f456c46b9c14601eb143b05c2ecfce6ed23aed7806ef5e4be203a06818dee981fb7d7c9d0bc4d946dfd98698d1fd5a0949f7a998c104eab53fa4667c71ec9122d60a2001d5032adc87b552d6c180c6e1b0caa191b4b863142c5f28201b0e3645b0008b5d30a8535521cafe1d1830671e5d6c26df6cbd5791df547bf5a8a4950160c3e1930b9bd1f02c92d5149254ca6deefa5eed86e4ca13ecb1f13de55d043ec4517c2f638c0ab72f6b40ab2f652e14ad3dc9226d60673622cda099715deb61c9d0fdd90f6ec023765c155df29bea4463c8f274c7cec0dd14604fc73f118ebc8e69ef8ccde65634f66c5767d614c83190e8c7f32b46af09ea1a2b7ee13aca20ba4763410e780a00450e14c12b46244610b8c9e3e78f31bb6bf0c8511a02e08dc3f38b47af47bae4f56d6b97d68d0c7638728e5427f9ae46159dcbf8fe382ea6e9e0896f28deb7b19561a279b7594cdf92d32ae7fc84a912f6e324a2453bb9dbe002b45e09fe927544efc4a8357edd9c07bd35237297b420640834376f349246f016dfc98c5af5bad2071f0796c656928705ba44ebedb616163a86e6b14054414be1c3467c15e9c7212edbc8309386b66bcae69331838f308550b0bbc5c83f1cbf47b78379a865e6cd053f1e2d55b98861dcb53ef189646a1be514eb741c387d87a4b4bb5d8aa4b1ed655c2b9cac7920d031c8b3ef6ec1104739c0e013544123e970f0b6dd1bd417a22e4b6e53c3cf315fbafcd23ab8c463427be470350d84b5c9257ec72ab61fe042f79691cdf1cd7ccd07ba875af16b02358a65676965e5c153bb720489cff921a20b4950a46d55173fb1e9c6f5d83de4eadc8ed4de4c6a4126574ec6fc5ca36a66a74f4362139a9c16dd7abb4d583a7488e547ed771f00d919745a30e85bde83f9eaa10624b94dec4ea9afa0de7710356f488390e437e93c9cb7078f4816ca4ddb790148677822050bfd8387fedf3a0616594ef6c666e936b6f718274b94e8b10b736dd8ec2ce68c78e6271430c13a453b490ad7c2b2572a5c537fb0dad38980fcf0f9a7303e8a1777e6823b9027ae9163de93417890eb4d725c613c4fea15f07b97d4f0554178fe51b2935e17344206d552c7ccbc3f3599125d940c30faec3abf67d9d71c1f41e88ebb9a3685fb93345082ced5a34cae5be6ac84887db126617e8cf23b7c21a786aa1bbead4b28c9d34bcd7a2a8b6e9e1f6e9302f84f0fe882f30f9daa1b02827b09f04b36463e181f6b3ef8595642a16e8fa21519f3084d3fe1e47d2e6a8385395ba7d8823a8691e421b5d39f4e536027ccd808c87f8638a59701b23afa31077c0fc79ef413f139b131001b568411540207b05b8d7681447ef5eaf17475a402e0f3ec1a8abeffb54cb94fbacd1d8e73e6a358bfa37f368c1c5c5a40a19e1944ee2006985bae80f99fcb83d7aaf7947fc6093b2cfe5179eedfc04f96c3d4ff47570868ff92cfcf2aab413c43aab8846e384619361d068d1b1f0c1460e51275b79765c78c8585a564f81fd4434df3548cd98d4376f7c13aad7099acae5b721c6d8e9dbf6073e73ec17d9b3f7d059fcd559107aac29bb92f307bf1873bddfe5aafedda5b653da103632b0ed77fc2b7afc85ba078b775fc661e5b06f1c0b65b13cf6e663a39700b6e0a72ba474be6945044d8f4cdac525223b843ef6b1677fca36aafe9b6af0ea0bd6b138225d6907754822dd34e9e9b50b75b905870437d6a1ead7aef826b98d5b105dd644dc87893767d1c555e2cf2e68d73af375a55ef865b6ac28042f98e1a8f7beb54dfeb34d98755e1953795e06268dec518dccc4f2319a98bc38cc32bdd8b8ff5290f366d3abe360e4e10803b27a880262eaf152fd7af10d71e6d2d76ee30c2565816fc3397799003ead58857590f2661f9198b838c7d6bf4b01f7f071f6fdc115f3cfe26ec6d69efdafeeba05e0d3f4d15702fc25708cba7439b08e9c00b2615ceb953e80d23e3b24b6e6796389d4e2282e8be9be1f98847073abf3d618faa6eedc5d76402f97fb60afab2a73131df78ffac72c8183bd6fef4b36af78b1c06f4116995a1e69ab2d932ecaeee0e99406e232fdff19309cf8c1e1e74e4c978d6b6cf50d9a9c00b7d3d1d049c6ea112e0e7b1e16c330c18bfc8b42dd06789886195651ae99432f67337aa991b7904432502ed070ae575d0f355a9343ba9d19c2a0fc534234060772bb13c1f1a49bd220a85e01a83bc013daf39ea68ab3f3aecf53975d97c22be4b85b42fce109cad6a4d1eb098b88a4cdc57b01a832136e842aef1e5d0c473180c43753fed0dc0810e3f9c50f600c32633b46248da91bb7f78a87079592ae856b54111b079b80f66eb1a322a3f9e766dc4cb5989d7f3ed4b9d955e06d636a1e06ed3159a7e3270781ef0441b9c21598070780d657b6ea9e5f2bf7ab86cb212956dccdea9c74f2416bb97f88b4d3783fc86889d34a81a5ff171b44f45a2f287916b557ff4c594714ad7c3ddb8901724bd9f79e3675674a7dcbb859b2f0dc8009350f1a4966080228b31cc41007b82e647ad965cee4997cc267f66b738c3a78239f80ec6a447cf8c613d3c828018b19d6f0de20b33a7b7fffab2ff6ec3b89317327e59f488176b91bcae9c3c93cbb9027e191e1607295c3b1c1955a1feabdd821192cdfce7a063939fb717c7cea21fe79cc18807020308db5c110358ab97533b816c320282d915c963ffaed72f8e88f287679c6f7eede0964039417249166335effdd8b62f123f5cfc61ff8e778259b32f5c639325098551e044205f7109b31db6ea50530c511bccb7253fc4ead83f092b51150079b2a11f2f4cd166b1df3544a7e038c3fb9c4e52ed3f944737f43ed48129b26caab402f5f0f546a1a38ff41a2e3d4584ee2a0da5e9ac248547a1c5d03c7a5ff667f1580b4e9235ddaa961d7970fa76d9498d37a65566dd99d708b54a8c09842ce5292c98f537f40bd369b281a8ec3b0f0fc0165902eb9ab1403febaf3fe2470e22687ef51a1e43f1477d6febf8f140b8af1292508e412c42b8f981436304f86721235a353fc9c6ecfbe1f2706ec872c4261c4cc5fd5696e3732f43547920962c7b3e0840a6692914a09bb1374e1d2bcc3d9f8a9e009d48020b01a0b01247bde339504917af9b53d55f3c0571bf62c1a37032da16502fd0814571dce9417b4ca93d9e0c8b356f95b92e05c085be6c62c58a21b217fa497efb96504593197349b29bef8989e0729d9b2d6ea61f33543f4ceadd248b14f139523dd4d9749aa63aaaf04cd3f3a8a916ece1f9b45b4e0958f9bda7157ec6d69ab12ae21a19fff987ab7153ed291819b6233cc98056a5e17978f2799a7770c915ac9bfa9e701112cfa2658477e3049876b9bf18308ef03196dd7eb28b0a26e66f547cda63a7899f5e3ef246eeb8cfe5085506508bbb3b71dbacbef0afcb726c4c4705ad8f618e40c3a66bde0c3778fcc56a9c164675d2c3252e33d6cfb4ff3295ccd0699e3f505c2322e589caa6a7563f36ade893b252d034a5939cf3e8deb76322877f1392334779c3a6891e362753887c1898bd6e45737ddf724367707ad436c547b70847fd4acbe1b36ac7f2414bbbc80209962580e22978c4cb3c75fbe001052d8711c57ba6e76446702f14df4540aa6bf0e2905eeb0946fc0c098b18d87e01b510f2dfbc5319c2ac6eb644bb983d4c805026c20a28cd8347cfb6ca58ac60ee276b9e0170585e243d057f8b6cb77ac93c8014bcad5697addc633a619f392dce5b84f87cf94027fecec6bdc9ac6cc419fa9a43e4a2006897bc29ed342fad7edf5dcb9b07c4bf9ec0d5db89a4f366682fb0b83f284dc95fd37672271f1303ae15aa87b5865819d15786b2cbe9d34333ed3a30459720a104d24577da48e7d398e8303f2c06c75b4755c8edd223a2a5a45f0489ff725ab60b9fdff34f0b8cce470bab5bfd269eebaff90d8a940dd9a3f8e750f8fe46651906f9813e08c89f994dc6d9b2c9a86d4ed552c91de2ec115fb5603122f8d1383d5a679720868f34afc6862c38da240bab9436d508874efaae81ac1785a6b14c2f2893f46e76b08e3a83d3acc5e3303543eb6972c149974ce6478e5ccd8ad155bf9539015180948c9619a89e1604af62e80187faa056d30ab6161fb81fe036864249e595e44574a0371deefc14a433de29bbe9fb9952f55de5c0bb98de1230f93e38913a60430a6e1903041a4f38404b1d6bb567fe653bb799cd6d2deb06b5b7fef7400a11ccf2c04297a0b7ade7df267ed007192430aa3de028af48bbfa6778a2f7f65678a9448feeecaa0c93eb7dc32e5c676dec2ab7f84228d311f1d1dfe9b409e3cfdd4f83407f60d940ff284e92983bfc834bd4a02ecedffbaf6d652c7891e478efbcf6c1a374724cdf54b53c18b200f0e0a556bde2bd2bef2ed9972fa7898b068a4c7902232173c9531fdd940c1810dc0ecc60c80c4a0295ed32fb74226ebcb034af3735774deb65056e92f6784d13eba930765fd9cd4075a980a6639a6c2f0d94043b6fbb78c7db20aaffac899014e6445c39011ced739e3f22d6be6cabbcf3a9a263bba1ced3f82736df929947526596b9fbbfc1d8e24f842efbe5a6e2bb4828a2500464d55828e22657fff5efedc616b7eb695f845c823b0b8289ef8f069c30f6686047bccf766ae3c3bf271763cdc1e01dacaaf80ead623bcc29372301c2e994fb4dcba667c35ad77839f9bb0b90969bb712c6745cab19968658ffa76a71745d94cc73b7b7002adb643c77bff7bd56b1e0996747d376c6ced71fe21451e0e43fb0d37c29c8d74b1bf0260b477288811e4a42b61c08d4c2415632ad1311920a0794f0514a00dc48b6eb58c307b185ce179b58853cbe2c880e4fdb33d2b4bb0c3fbfab0fa0436cae83a4a21f2ea304062b43261e3d24df50d76c4bcba2341944cb1cc73b90c1205422631bf258052fc4e349b0a1e94d20b5a20835422e8063c7274e7845db81705598de6eddb87ab5e88f755aba8ae50048c25cee423fc583ba5c3c8b906d735896ef4f60b39b69023583fbb656186868548d14bcfd6fa89e3e14ea8bc5bdfc28ec9a8c0736a2e869b14ed0a2e7990385ae618d3028e10b05a2639e87656e250458f165bcd7cfae8395b4f7d2bcac570fcc1532ecdf7fb64e260006607853e1e01aa24c9a3e4e7bbfcd1ee7b925a4fcdad91cfbe9ea152b4265c0a19ab226f549c3fa9ff8cae90f94edeeb7b3cf2135b049bdd353faa770a142b4d93eccf7798d714d4a589d44c3956052ed92683b9f723645a35c3b9a352d408f3d6657820677ff2e6b6853ec8e42d5b58319014e36be635fa6857abf1839defc28c10e9d5e529f58a88082661a39943d87284586413b010bfc68cafcb60eba23ff20d3726615bb386ee68e572609efe35d497", @typed={0xc, 0x3a, 0x0, 0x0, @u64=0xa37a}, @generic="a1d6df851b6ed27743a98c2607ac4fcaa98ea4a446fe4ee99900411805405ee59e186c25ac631a76961ec84b39c6696b21a87f628532916475ddb64a7d390816c0dc06d400ab818f493b2d59a517dfa197d5b8f1a974f5f4c2ef0a4e0817375b47b67f7e4775f085cc1c99cd17b9d08cf726f64afddeea7de0226a5a9c2a4257b445c631316b94f817fc6affb58356c9448e624132af046072b4f4eb8f038fa5567d7d2860d75ce9ac9baca308ad76993c694688098e298e29b7ae89ef2d6bcda6c0ec90bebf78a1065c3cef08886ed25940a77ba2", @generic="e3bf18b0a6c77022e7505a8c2643d3892a310fddd879b3a9921b5773a3b23ab27c12126dc917946e650c2680b29455201e9a5bc9b414b5763b19f647040e5588fd817170546205815abd720f8a7bf8b64044f1c5b5f502eaf587ed514fa2eea37fbd7f6be47d9edbef7a0d921295f157f024a917362078fb24f7026830b33270f72fae8ef8a34db43929167319614dd0b589f8fc", @typed={0x4, 0x110}, @nested={0x4, 0xfd}]}, @generic="3f76af3841e58cf2d1ac291867dc1b8e6025aa00ad68432f66bab4319ab3e32fe5e49e4e40a94799d4a388f0cf8425ece840b0c5d85bcac6fce1cafdb8c4df3cb337039f97710be2d3e6fb55b7990cea57a6524a2dc769a8506d8de615", @nested={0xb1, 0xa2, 0x0, 0x1, [@typed={0x14, 0xa6, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x6}, @nested={0x4, 0x73}, @nested={0x4, 0x58}, @generic="f6fa0d63c78cdf1a06de667f4f1308402acc9a4dcad0538bb75c952c69b33091d279bc274878093c8dfdf0d2106705b6d9d6f519d1047d1ed6022b76198355b53b476ef643ddcd5c72674ae7d0f6a1fe3cd73749499fbf04ec93b1", @generic="5c53b32b0677c3d1a52b01e1e0dcca63cbbf547474ff53b60d41900e811be857720cf3fb30f8fb63f156dc382429", @nested={0x4, 0x15}]}, @generic="bf21bde73ef679e067a60fd63ab444dd04355855ef2293687ccad1c9dd9fdbebe265546d1c63b39c34b58c5f776e09c32282d1a5c47f7449a256c71448f2cacf14e80c600ac9a4eb00f7852ccaa2f661c628d4f69c56e8d2bbf7b8db13a137026d474884109c401b1557ddc20e082d482629648022671df4b32118065eda6891b15ff1e0badd752d692143f63ef20f113f7c20f9a967e821346ff8bcd1e31d0e6c", @typed={0x4, 0x156}, @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x8, 0x14f, 0x0, 0x0, @uid=r3}, @typed={0x8, 0xc2, 0x0, 0x0, @fd=r2}, @typed={0xa, 0x119, 0x0, 0x0, @str='\xcd.&+-\x00'}]}]}, 0x1674}, 0x1, 0x0, 0x0, 0x40}, 0x20000844) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x68000, 0x0) 3m25.884981481s ago: executing program 1 (id=1015): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000100)=""/4096, 0x1000) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8900, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, r2) 3m25.393684177s ago: executing program 1 (id=1018): r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x426a2, 0x0) r1 = socket(0x11, 0x3, 0x2) getsockopt$auto(r1, 0x107, 0x7, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vivid.0/video4linux/video62/name\x00', 0x100, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, r2) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/base_reachable_time\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x200) r5 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r5, 0xc0a85320, 0x38) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x62a6, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x73) socket(0xa, 0x2, 0x0) set_mempolicy$auto(0xc000, 0x0, 0x3) write$auto_dfs_global_fops_debug(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) semop$auto(0x1, &(0x7f0000000000)={0xf0d2, 0xbffe, 0x8001}, 0x3) 3m23.803405726s ago: executing program 1 (id=1020): madvise$auto(0x6, 0x101, 0xe000) socket(0x2c, 0x5, 0x2000006) (async) mmap$auto(0x0, 0x80000001, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mlockall$auto(0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) shmget$auto(0x8, 0x10569, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async) inotify_init1$auto(0x4) 3m8.482559398s ago: executing program 32 (id=1020): madvise$auto(0x6, 0x101, 0xe000) socket(0x2c, 0x5, 0x2000006) (async) mmap$auto(0x0, 0x80000001, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mlockall$auto(0x7) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) shmget$auto(0x8, 0x10569, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async) inotify_init1$auto(0x4) 9.843915602s ago: executing program 0 (id=1492): r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r0, &(0x7f0000000180)="632d1bfe595046ab5c40bd6163307acb6d16baef6176e669a216aae1964ccafdd80500ffffffffdfff1a0e00fffffffe0000000000000000", 0xfffffd6c) (fail_nth: 4) 9.812343245s ago: executing program 2 (id=1493): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, 0xffffffffffffffff, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0x5, 0x7, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x7}, 0x3) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0xe, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) 9.132600896s ago: executing program 0 (id=1494): mmap$auto(0x0, 0x2020009, 0x6, 0x800000000000eb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/008/001\x00', 0x402, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) mmap$auto(0x0, 0x2020009, 0x2, 0xf8, 0xfffffffffffffffa, 0x8000) sendmsg$auto_VDPA_CMD_DEV_DEL(0xffffffffffffffff, 0x0, 0x40050) ioctl$auto_FS_IOC_UNRESVSP64(0xffffffffffffffff, 0x4030582b, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x3, 0x6) r3 = socket(0x2, 0x1, 0x0) bind$auto(r3, &(0x7f0000000040)=@in={0x2, 0x4e24, @remote}, 0x6a) sendmsg$auto_GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002d00080007000000000000000000", @ANYRES32, @ANYBLOB="0800080004"], 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0xfffffffe, &(0x7f0000000100)={&(0x7f0000000080), 0x180}, 0x2, &(0x7f0000000340), 0x7, 0xa505}, 0x800}, 0x7, 0x6) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800008}, 0x5, 0x20000000) bpf$auto(0x401, &(0x7f0000000180)=@raw_tracepoint={0x4, r2, 0x0, 0x400}, 0x4) socketpair$auto(0x10401e, 0x5, 0xfffffffc, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x70bd2d, 0x25dfdc00, {0x1, 0x0, 0x3f00}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x59}, @L2TP_ATTR_IP6_SADDR={0x0, 0x1f, @remote}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0xa}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x5}]}, 0xae}, 0x1, 0x0, 0x0, 0x44000}, 0x90) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x280, 0x0) 7.533114259s ago: executing program 2 (id=1497): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x24048004) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) r2 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/environ\x00', 0x200480, 0x0) read$auto_proc_environ_operations_base(r2, &(0x7f0000000180)=""/125, 0x7d) pread64$auto(r1, 0x0, 0x8, 0x7fff) socket(0x2, 0xa, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) capset$auto(0x0, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchown$auto(r3, 0x0, 0x400) r4 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) close_range$auto(0x2, 0x8, 0x0) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bcb, 0xfff, 0x9, 0x3, 0xffffffff, 0xd3, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(r4, 0x6b, 0x804, 0x0, 0x10000) r5 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000340)='3\x00', 0x6) r6 = fcntl$auto_F_RDLCK(r5, 0x1, 0x0) shutdown$auto(r6, 0x8) 7.291085062s ago: executing program 2 (id=1498): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) keyctl$auto_KEYCTL_UPDATE(0x2, 0x3, 0x6, 0x1, 0x100000000) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16=0xffffffffffffffff, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04700395778e7935c99f6a38f6f3e56e7d8a18d15791b3b4f9378d743a8f0cbbe1c604a782030626ead26826f4790233f19c29fbaf1da77e1b84522d05ca0f4237b24aead87b47d41805fa9967d02ad2deba1895652b8d630c30213ed8f72c1066f1bb9fb1b242d08a55d32398d8d3c635008f2c61049c8abf600a98d1d2d0b0027aecaf27d20b6ff4129883e111e1c858000000dc00090069fccb38f57447a8af8c40a03b92af7adc0c48af4308483b99aa587ed8711b4a79a383c263698842365af6807d1be1800fd492770983a6df345fb472e9fa41b667af43bc36d7063b6b93ab7661925e8d71452acd95b788c31a32ae903b96b9ed9a5e3542c625105e8f21a5b41ff3d17f8704581f4b8b75ae741d0fba8cab2e187c93eeea89f6cf6ab7cc496e0bd9759cc0b408bbe0c6eae2aa29c2d97d48a55fc0ff937c90173d61cf652f97cb301e4d7e3bac0026732e22eadd3a6c5ffa4faed6855a86814c920a650a61936305d2713db1c92a238e265c080001007f0e00000c0002"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRES16=r0, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) r3 = socket(0x10, 0x2, 0x0) connect$auto(r3, &(0x7f0000000000)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x2100}, 0x6) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000380), r3) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/zswap/parameters/enabled\x00', 0x62, 0x0) write$auto(r6, &(0x7f0000000440)='ON\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf0F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\xed\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0xb8c5) r7 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/sockcreate\x00', 0x101102, 0x0) write$auto_proc_pid_attr_operations_base(r7, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x20, r9, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001e40)={0x14, r5, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x220000c1}, 0x20000050) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r10 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/maps\x00', 0x0, 0x0) pread64$auto(r10, 0x0, 0xeda5, 0xc86) 6.352126629s ago: executing program 3 (id=1500): ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000001400)={0x7f, 0xe}) 6.212006493s ago: executing program 4 (id=1501): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/asound/card2/id\x00', 0x68a00, 0x0) mprotect$auto(0x200000000000, 0x806122, 0xc) sched_setscheduler$auto(0x0, 0x5, &(0x7f0000000040)={0x2}) shmctl$auto_IPC_INFO(0x5, 0x3, &(0x7f00000002c0)={{0x7, 0xee01, 0xee01, 0x9, 0x6, 0xb32, 0x1}, 0x900000, 0x1, 0x2, 0x7, @inferred=0xffffffffffffffff, @raw=0x3, 0x7f, 0x0, &(0x7f0000000080)="ac08710a339abf78337403306b1cfd5d728431b80c08a31bf6cd1f09e4e2dc37ed7b160869b275cc70259178e5c3252a63a479e18c892bedd084be5a44192a6701204fe7f6581237f891f5e52de2d4ede5cf448be7d224b0b2a95b67036f5da6dcf349be7e640b1fc66eece2ec6ce78918649d87c3b0cd9cf703a9b2dc93b6f46bee61279363887c3d6d433c612394332dfd0fd742540506e7e91077a9fa998cf5da41e70fcb619c11df8c06792194c92e", &(0x7f0000000200)="1685cd179c4e75fb5ffeee457de8b4c05b03b9e7238e825c13eb1b00da28691ec09c6c4ef5a4a489bca71a6cb890b59b23c7883aa4f822a6dd2574256f35e4109249cc849114b501da188767a842cc0d40047dc87420a6089c4bcd0b7a528c12045ef72fde1c6a7d2b954f710e12a273c6f2d66fde63f2b705d456a553da5be0e176a5fd266e1ede0d90a7822bf40b"}) msgctl$auto_IPC_RMID(0x1, 0x0, &(0x7f00000003c0)={{0x8, 0xee01, 0xee00, 0x9, 0x9, 0x92d9, 0xf}, &(0x7f0000000340)=0x4, &(0x7f0000000380)=0x9, 0x1, 0x2, 0x3, 0x4, 0x7, 0x16, 0x7, 0x4, @raw=0x4, @raw=0x6}) shmctl$auto(0x2, 0x1, &(0x7f0000000580)={{0x3, r1, r2, 0x2, 0x10001, 0x66e, 0x80}, 0x4, 0x3, 0x10, 0xfffffffffffffffb, @raw=0x818, @raw=0x6, 0x5, 0x0, &(0x7f0000000440)="a95c7f68df415d431d314ddd8c87cf7fd670e937d5fe1a05653859183abb31ee04f702bdb77faa74c4f83c021751370c0ef27b4ab3ccbb628ab383a8d4a095ddcec5f1bfe5b70f0500cf8add298ca7dffa65f397030ba48c66444e07f377d6e67b98c75db162a1b88b0017d27be2fa88d6f7a2853eb03e603f48da8459c25f0c05da6a717bf026f5972ddbf80b4e778423bbb4f267c2f64505cbba9b31cac78951f0af159301f62bf453e891d489c75b64f8db22ba31b8", &(0x7f0000000500)="39e6de2a0b8bf4edc6e7cebda973636cae78ee83036a7aabe8fcfb4a19233bdbe6504ceb348f45b8a588c5794c630e7afc441c5b73ef75d950fcd66feb6c8ff3ba86dd11bda6492a8dcbf5f210ea1e8121e8a4302d509f936cf712dadbe938f7"}) ioprio_set$auto(0x2, 0x800000000, 0x8) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) 6.00374738s ago: executing program 3 (id=1502): semctl$auto_SETALL(0x1, 0x20010002, 0x11, 0xe33) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/renderD128\x00', 0x300, 0x0) 5.840425151s ago: executing program 4 (id=1503): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/17s\x00', 0xa42, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, &(0x7f0000000040)={0x80}) (fail_nth: 1) 5.725792239s ago: executing program 3 (id=1504): select$auto(0x9, 0x0, &(0x7f0000000080)={[0x209c, 0x2e7d11ca, 0x6, 0x8000, 0xfffffffffffffffc, 0x100000004, 0x9, 0x800002017d, 0x4, 0xdfdffdff, 0x3ff, 0xd59, 0xfb, 0x1, 0x7f, 0x7]}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES64=r0, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x40890) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x2d76, 0xf7ffffffffff0005, 0x19) iopl$auto(0x3) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ram0\x00', 0x16f300, 0x0) sendfile$auto(0x3, r1, 0x0, 0x400000000006) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x100, 0x0) prctl$auto_SECCOMP_MODE_FILTER(0xffff, 0x2, 0x0, 0x100000000, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 5.123219295s ago: executing program 2 (id=1505): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r0, &(0x7f00000002c0)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7kh\\\x1a\x12\xb6\xf6\bb*P\x0fS\x1e\xe2\x05)e@\xe0\xff\x811\xd5&\xf3\xa09\x8d\xa21lH4\xb0C\x89Q\xdd\f3\xa2\xa6\x13\x80m\x8bzP\x8bZA,\xae\xe7\x98^\xe1I\xe4\x960\x9c*\x02\xe9\xa2-\xd3w:)\x9e\x00\xf7\xc3\x89|\xcb\x03\xc4\xd1(\xbd\ntq\xa0V\xdcy$\x1b1\xa8\xb0\xa4\xe3\xba\xf4\'<\xc1bE\xb0#\xf3\xe7E\xbf\xd1\xa9\n\xdd\xb8E\xad\x94\xfaM\xf4\vFe\x0f\x14\x8eU\xee\x82X\x93?\xd9r\xfd\xc6\xa1g8Q\xf4E\xe5\x01\x8al\xd3\x01\xdb0\x01\xe7\xed\x81\\_\xb8k\xfc\xadtx\x82j@d\xaf]\xb2_\xf3=\xc8z1\x95\xdf\xa3,\xc0X\xc7\x03\xb96', 0xc) mbind$auto(0xb8e, 0x0, 0x5, &(0x7f00000000c0)=0x1, 0x67, 0x5) r1 = openat$auto_fops_u32_ro_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim4/ports/3/bpf_offloaded_id\x00', 0x2, 0x0) close_range$auto(r1, 0xfffffffffffff000, 0x3) r2 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x40002, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0xe) bind$auto(0xffffffffffffffff, 0x0, 0x4006b) unshare$auto(0x40000080) semctl$auto(0xa, 0x2, 0x13, 0xde) r3 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) ioctl$auto_I2C_SMBUS(r3, 0x720, 0x0) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) socket(0x11, 0xa, 0x9) sendmsg$auto_OVS_FLOW_CMD_SET(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4041001}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x90}, 0x10) listen$auto(0x3, 0x81) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x1000}, 0x100000007) sigaltstack$auto(&(0x7f0000002200)={&(0x7f0000001200)="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", 0x5, 0x9}, &(0x7f0000002300)={&(0x7f0000002240)="0f9e53b3d5840ce00088f515914a2a2dc7866bbe19110229320f31aef084cc4bf0f73f7162de17880400b57319ff6c6292d451a7e7027a5d5e50e789707d3c62df07c50e01895329b666668891984ca42b9395bd9258aa0953b23bc336ba89ca425b29f1121faa2d65a40eeda0e692dd24b60d733dca34f146a2e1dc4e94bec0855e77cec873303fb32f24d3483409aad46096774f4ff3d0beed75a1349365f352dc95a195370b77cc4a4efe7013", 0x1, 0x8}) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/006/001\x00', 0x40942, 0x0) mmap$auto(0x2000, 0x9, 0x8, 0x8000000008011, r4, 0x0) ioctl$auto_KVM_GET_MSRS(r2, 0x4068aea3, &(0x7f0000000080)={0xc1, 0x0, [{0x87, 0x6, 0x5}, {0x8, 0x32664ab9, 0x5}, {0xfffffff2, 0xa, 0x8}, {0x6, 0xfffffffa, 0x6}, {0x2bc1, 0x2, 0x346}, {0xfffffe01, 0x2, 0x29e23345}, {0xffff, 0x8, 0x80000001}]}) 4.732019606s ago: executing program 0 (id=1506): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x24048004) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) r2 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/environ\x00', 0x200480, 0x0) read$auto_proc_environ_operations_base(r2, &(0x7f0000000180)=""/125, 0x7d) pread64$auto(r1, 0x0, 0x8, 0x7fff) socket(0x2, 0xa, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) capset$auto(0x0, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchown$auto(r3, 0x0, 0x400) r4 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) close_range$auto(0x2, 0x8, 0x0) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bcb, 0xfff, 0x9, 0x3, 0xffffffff, 0xd3, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(r4, 0x6b, 0x804, 0x0, 0x10000) r5 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000340)='3\x00', 0x6) r6 = fcntl$auto_F_RDLCK(r5, 0x1, 0x0) shutdown$auto(r6, 0x8) 4.488139224s ago: executing program 0 (id=1507): mmap$auto(0x0, 0x3, 0x4000000000df, 0x7fff, 0xffffffffffffffff, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) unshare$auto(0x40000080) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40100, 0x0) mmap$auto(0x0, 0x520009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) getpgrp(0xffffffffffffffff) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES16=r1, @ANYRESDEC=r0, @ANYBLOB="080025bd70ffffffdf2504000000"], 0xc}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002180)=ANY=[@ANYBLOB="e0020000", @ANYRES16=r4, @ANYBLOB="01002ebd5100fbcbdf250100000004000180c802018004000680bd020480fc921cf096b39f43034e2db36a74c0ade1e6a4dafab35aa84881d05d1662bd8a8f48943ea4276b7e1465958d17dd9c9706336d0f4a94c7de9fa79cb659b67f43fa331b6f98fa8ad43a943eac1b528ba83992018ecb03ba5dba6660c32c87b1dc86b69a7f6e747504f11d7688a74c47a4ba4802228004003b0040028b8008002600", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400af80cee0bd49dab2a617b70e1a2e040e6ba448f301800a8999cec0bec67eb0617ad3f9a0977d09fa35f0e26b923a2713f1104ff7a5b18a2629bbee5de69b17f06e13870462f79e9deb527b97fd65fc8b156b0f525dfca9340f14dc75ef0881c14f5b87a6c615ee754d72289dcac3c322002b00", @ANYRES32=0x0, @ANYBLOB="6000f68004004880f6c5cccd25852c755b4331229a68ba8457bb2c5bc855fc277901cc018a78610faf86906cfd8f50da20a3cfe74a23710a32b0bd28cfddfe8fbcc03a4f9178ec9a0400de8004004380040078800c00a700feffffffffffffff0000"], 0x2e0}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000480)={{&(0x7f00000001c0)="8d10a50b60e1380b545f89c54bab4fbfb3e0feda7edd7e46ae550aa997ff56be56fea27cb83751daf5f24ad06844d84862e0d8ddb179f76038831d67eaac8ab77003e5fc4eaf9d788521bd99b2729d94e367eabcdce535dd22dee07e455f0d28213b56b89d026239a1a68f51487800b3643829c256b36302e01c43618a797b05025b5feebfc59d59d2d916fd4248245863a0fd01593abab17301a9c36f0ec8bcbd4d8e6757f5b19d5092696e8e3e7ae1179791a4d12d4b6e213364b1f45cbae151889a10e446fe3ddc6e35545780a45518a4", 0x3, &(0x7f00000003c0)={&(0x7f00000002c0)="a05773e17fc3f097c1dda9674cdda8495227c3f6143b1c9dae28868eb2521113ee53fe55139a6cafe81097998f467936029d7cc2a59bd8df4aac7fbffdb54dfbc4dabe4693db529a457b072d24a74a8cc4064a179611df8dbc3eb7d0d68f653f5c970fe5e8039b309bf88b2d95319ac03fe3fed98f97feb30230ed7bc44c009694c3a27e9526df2fdf2b2d30adf6f4e00f90211708f37043fdc4153b871250e305e2c21184eaa67cb94b2d8e79f89ec13959f9918ffa08e8a519c2ad073327cf5ae99cbd9397b8187ea2e9c37e5535d88c6ce6ca1e247930b3585aa92c14", 0x100}, 0x1, &(0x7f0000000400)="2491e2f933b13df8b9767a34918374d206e5f3c766ee0baae721e41d7b28fc255fc9387e8c68e335e84ca7720ac49cdfdff203042b32ffe2ddf3fee62aa25966f135af5acda0f5ee35af2663f7f69d40ea81d8bce8fc80c0add9", 0x1, 0x1}, 0x401}, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) ioctl$auto(r5, 0x4018620d, 0x9) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) lsm_list_modules$auto(&(0x7f0000000140)=0x4, &(0x7f00000004c0)=0x8, 0x5) lsm_list_modules$auto(0x0, 0x0, 0x0) r7 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC2\x00', 0x80101, 0x0) ioctl$auto(r7, 0x80dc5521, 0xffffffffffffffff) write$auto(r6, &(0x7f0000000200)='1\x00\\\xa0\x04\x06\x00\x00\x00*\x8d\x14\xfa 3\x00\xad1\xcc\xeb&{q\xe0$\xcd\x81Zm\xeb\xe39LC{\xf8\xa09\xe9\x05\xfc\xddUw4e\xc6\t}k\x14\xcah\xba\x16\xdc\x00\x88\x11\x008\xb3z\xe4\xb9\x97\x90z\xb41&YH\xd6\xaa\x06\xbc \b\xd7\xee\x8a:\xd9\x88\x8f\x06)l\xe4\x83\xbc\xd1wOa\xb6\x93\xe7\xb7\xbb\xdc\x98\xba\\\x15\xc2\xdc1D\x8b@\x9btfi\xaf\xdf\xee\v\x8e\xa2P\x93\x19\xea\x84T]<]+\x04N5=\xc0\x9d-\xaf\xfd\xc7\x87\x00\x00\x00\x00\xa4q\xec\x82\x95\x01\xfc7\x86\xd0\xd2\x93\xa7?\xc5\xf3\xaf\xe5\x17\x96\xc6\xbd=\x9a=\xe8\xf22\xab\x83\x9f\xc2\xc2\x8f\x1fQ|\x91&\x15\x0f\x18\xbc\xd3\xd6\xd7P\bTb\xfaY\xfcio\xa3\xe1d#-R\x91}\xe4\x88\xf6\xcc\xd5e\xb1Va\xa4Z\'w\xee\x94`>\x99\x00\xef\xe5\x9csXS<\x96\xafgM\xadY\xae\xf5\xe4\xb3\x9d\x18\x0f\xcc\xbb\tGb\xf5\x8c\xf4\xbc\xaf\x7f\x87\'\x9f\x8ff\x03m\xaf+D\xee\xcd\xd9\xfe\xe2)\x830}\xcc\xadC\xdd\xea\xb1\x8d\x06xj^U\xc0<\xfe\xc3U\xf8\x1ff\xe1\xd8\x14\t\xa8l]\xeb\xb6\xef\x04\x8f\xff\xfc\x97\x91\xdbN\x81\xfd\xf2\x9e\x18\x85G\xc7\xef\x86;\xd5\xd9\xd8\x18wq.%\xa9l\xc8\xdaC\x93\xc6\xc6\xd5p8\xa5\xb1\xd7:<\x8aCP\xd08\xcf', 0x4) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x34, r8, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@ETHTOOL_A_RSS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x800}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) 4.226690987s ago: executing program 4 (id=1508): openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/asound/card0/pcm0p/sub0/status\x00', 0x40e00, 0x0) pread64$auto(r0, 0x0, 0x3, 0x5ef6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x400c000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/devices/platform/vhci_hcd.10/usb29/29-0:1.0/usb29-port2/location\x00', 0x20461, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000000)='-7', 0xfffffc49) sendmsg$auto_NETDEV_CMD_BIND_RX(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="d0bf8efd72629ae41b6a062824213ae880b4ae59cfb264b2a9d9cbbade95", @ANYRES16=r1, @ANYBLOB="010027bd7000fedbdf250d00000008000100", @ANYRES32, @ANYBLOB="08cbf864259fcde205c63d59cf422f85", @ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc048854}, 0x4) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) r3 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0x14) r4 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) getsockopt$auto_SO_NOFCS(0xffffffffffffffff, 0x19, 0x2b, 0x0, 0x0) mmap$auto(0x0, 0xa00004, 0xfffffffffffffff7, 0x40eb1, 0x602, 0x300000000000) bpf$auto_BPF_ENABLE_STATS(0x20, &(0x7f0000000280)=@token_create={0x1, r0}, 0x7) r5 = openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x1110c1, 0x0) read$auto_drm_connector_fops_drm_debugfs(r5, &(0x7f0000000340)=""/182, 0xb6) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) 3.817615627s ago: executing program 3 (id=1509): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0xfffffffffffffff7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fcdbdf2503000000790008805b4f2525b2dc3a73ec37e7122e6f0d55382854d419b883b7ed64bd3c7b9fb15273e787030718751e0a22cc6cabcae114aa6448d0356183e1ca7c01536c5c6f37915b26a3e75515ab02807fe932b8a415a581dcdc7800f91e231c001d800400d3800c002000f3000000002b3c0c7e9b"], 0x100}, 0x1, 0x0, 0x0, 0x8000}, 0x42) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x9, 0x8209c25d4bd731ab, 0x13) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) r1 = prctl$auto(0x8, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x80, 0xdf, 0x17, 0x2, 0x8000) r2 = socket(0x2, 0x1, 0x106) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(r1, 0x400454cc, r0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) syz_genetlink_get_family_id$auto_nfsd(0x0, r1) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r3, 0x8000) bind$auto(0xffffffffffffffff, 0x0, 0x6b) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x100000000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="7201"], 0x1ac}}, 0x4001) sendmmsg$auto(0x3, 0x0, 0x2000003, 0x0) 3.556343553s ago: executing program 4 (id=1510): ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(0xffffffffffffffff, 0xc008551b, &(0x7f0000001400)={0x7f, 0xe}) 3.283452308s ago: executing program 4 (id=1511): r0 = gettid() r1 = prctl$auto(0x3e, 0x1, r0, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x727d, 0xfffffffffffffffa, 0x2008000) close_range$auto(0x2, 0x8, 0x0) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap$auto(0x4, 0x100020005, 0x3, 0x72, r1, 0x7ffd) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, 0x0) setfsuid$auto(0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x1880, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x1000, 0x8000000000000000, 0x6, 0x100000010, 0xffffffffffffffff, 0x5) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r3, r3, 0x0, 0x2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/bConfigurationValue\x00', 0x63102, 0x0) sendfile$auto(r4, r4, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r5, 0x0, 0x1ff) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002340), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) listmount$auto(&(0x7f0000000080)={0x1f, @raw, 0x80000002, 0xfffffffffffffff7, 0x8}, 0x0, 0xf4240, 0x1) lsm_set_self_attr$auto(0x9, 0x0, 0x80, 0x0) timer_settime$auto(0x0, 0x8, &(0x7f00000000c0)={{0x8}, {0x0, 0x87}}, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) syz_clone(0x60011, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r7, 0x0, 0x20) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/vkms/Writeback-1/edid_override\x00', 0x400, 0x0) 3.231114528s ago: executing program 2 (id=1512): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40080, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0x3, 0x100) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x29, 0x2, 0x0) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(0xffffffffffffffff, 0x40085503, &(0x7f00000000c0)={0x1000, 0xc, 0x80000000, "8ea03b73a78e70e12dbfaed19f1ba76e8f6ec61d1e8f680d582d8bea5c6660fe6ff070e316b41d6a179df34f3fff4a8c7bedcdb4476693085e143df890282a39f320a7f0b1c2d0c65ba2660b1ed898080e99631be78fddaeb8c573ddfc3b7215bd71468442ce65e87dbc5ef3105b2610a56213873e7e348d68bbd3ad76a05bec01b32bff11055fb835d62443ff09bcb3905d"}) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x8002, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000040)=0x3) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) r6 = clone$auto(0x6d8, 0xffe, 0x0, 0x0, 0x4000000a) migrate_pages$auto(r6, 0x4, 0x0, 0x0) prctl$auto_SECCOMP_MODE_STRICT(0x9fb7, 0x1, r6, 0x8, 0x8000) shmctl$auto_IPC_INFO(0xfffffff8, 0x3, &(0x7f0000000400)={{0x3, 0xee00, 0xffffffffffffffff, 0x400, 0x101, 0x1, 0x8001}, 0x9, 0x9, 0x9, 0x5, @raw=0x2, @inferred=r6, 0x4, 0x0, &(0x7f0000000280)="2d37153d73b3a92a8713de1b1211c9a8219231a3693a0ad633a5d1e46384ef061a7e14453625bafdeb1a8e47304bf692ed948d1c8762d3ba048e5758ce110b0a72a1c3227c84dba91d0386fe6ccd0bf52bf83f0a722351e2f9191bfc3f64b04f11185752de2b48ed52", &(0x7f0000000340)="1085c0e3c37d126d17d1ed0f50890b4e70aa27d491ed7eb251a57af490a1333331b74d11b7a6056b2c874f24de6f504714f30271f798acbc650f20ed6766bb0b66302b415866f2880c8d76a99da91330e6a012b70889bcb896af00f66e32e02721b02191535eaef40c64480da9508c83d2f87b52906bde82073ddeef5d716a340f6cfad3c1413efa851446fd3228fcf245f1669d1649cae7f4cd9cfda3db2ddf"}) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010027bd7000fc64337aca0000000c000784080001008c8251edebdc29ea32cc4e54c2306d59631ed9257f958ac1fdc35074f3faba97f81e6185306abadee84635d0a353c4cbfbc2b44bdc0a6c314f2422a7cb2e9893c6", @ANYRES32=r6, @ANYBLOB], 0x20}}, 0x4002) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_1={0x3, 0xca96, @next_key=0xfffffffffffffffb, 0x6}, 0x1) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r7}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) 2.558173854s ago: executing program 2 (id=1513): madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x40201, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5517, 0x0}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 2.550240794s ago: executing program 0 (id=1514): madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_u32_array_fops_file(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/netdevsim/netdevsim4/ports/2/udp_ports_table0\x00', 0x40201, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/027/001\x00', 0x4a901, 0x0) ioctl$auto_USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f00000001c0)={0x0, 0x5517, 0x0}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1.005121902s ago: executing program 4 (id=1515): r0 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, 0x0, 0x426a2, 0x0) r1 = socket(0x11, 0x3, 0x2) getsockopt$auto(r1, 0x107, 0x7, 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/statistics/tx_compressed\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4048aec9, 0xffffffffffffffff) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_to_bridge/base_reachable_time\x00', 0x202, 0x0) sendfile$auto(r3, r3, 0x0, 0x200) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r4, 0xc0a85320, 0x38) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop13\x00', 0x8202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x62a6, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x73) socket(0xa, 0x2, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r5, 0x4c00, 0x0) set_mempolicy$auto(0xc000, 0x0, 0x3) write$auto_dfs_global_fops_debug(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) semop$auto(0x1, &(0x7f0000000000)={0xf0d2, 0xbffe, 0x8001}, 0x3) 994.054582ms ago: executing program 3 (id=1516): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, 0x0, 0x24048004) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) r2 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/environ\x00', 0x200480, 0x0) read$auto_proc_environ_operations_base(r2, &(0x7f0000000180)=""/125, 0x7d) pread64$auto(r1, 0x0, 0x8, 0x7fff) socket(0x2, 0xa, 0x1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) capset$auto(0x0, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1f, 0x0, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchown$auto(r3, 0x0, 0x400) r4 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) close_range$auto(0x2, 0x8, 0x0) pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bcb, 0xfff, 0x9, 0x3, 0xffffffff, 0xd3, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) futex_requeue$auto(&(0x7f0000000040)={0xb, 0x6, 0x2}, 0x0, 0xf, 0x9) socket(0x1e, 0x4, 0x0) socket(0x1d, 0x2, 0x7) setsockopt$auto(r4, 0x6b, 0x804, 0x0, 0x10000) r5 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto(r5, &(0x7f0000000340)='3\x00', 0x6) r6 = fcntl$auto_F_RDLCK(r5, 0x1, 0x0) shutdown$auto(r6, 0x8) 297.994416ms ago: executing program 0 (id=1517): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x20000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x2ffffffffffe) io_uring_setup$auto(0xf0, &(0x7f0000000180)={0x6, 0x18, 0xd64, 0xc852, 0x6, 0x7, 0xffffffffffffffff, [0x1, 0x401, 0x1000], {0x7, 0x5, 0x1, 0x4, 0x95, 0x5, 0x7, 0xfffffffb, 0x65f29f6d}, {0x3, 0xadc, 0x10000, 0x0, 0x5, 0xffffffff, 0x1000, 0x54f, 0x5}}) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24040000}, 0x4000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) mq_getsetattr$auto(0x3, 0x0, &(0x7f0000000100)={0x8, 0x8, 0x2, 0x1}) lsm_list_modules$auto(0x0, 0x0, 0x0) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000280), 0x141182, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r2, 0x403c6f2b, 0x0) 0s ago: executing program 3 (id=1518): futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, &(0x7f0000000340)={0x225c17d03, 0x800006}, 0x0) r0 = socket(0x2, 0x1, 0x106) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x4001, @empty}, 0x4c) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x0, 0x20, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000) kernel console output (not intermixed with test programs): [ 461.223380][T10742] ? __fget_files+0x21f/0x3d0 [ 461.223414][T10742] dvb_demux_ioctl+0x29/0x40 [ 461.223449][T10742] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 461.223472][T10742] __x64_sys_ioctl+0x18e/0x210 [ 461.223498][T10742] do_syscall_64+0x115/0x840 [ 461.223531][T10742] ? clear_bhb_loop+0x40/0x90 [ 461.223560][T10742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.223584][T10742] RIP: 0033:0x7fc50d19ce59 [ 461.223603][T10742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.223626][T10742] RSP: 002b:00007fc50dff3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.223649][T10742] RAX: ffffffffffffffda RBX: 00007fc50d416180 RCX: 00007fc50d19ce59 [ 461.223665][T10742] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 461.223680][T10742] RBP: 00007fc50d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 461.223694][T10742] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.223708][T10742] R13: 00007fc50d416218 R14: 00007fc50d416180 R15: 00007ffdee4a3578 [ 461.223738][T10742] [ 461.574479][T10720] vhci_hcd vhci_hcd.1: invalid port number 99 [ 461.580771][T10720] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 461.912064][T10730] kexec: Could not allocate control_code_buffer [ 462.577270][T10753] capability: warning: `syz.2.995' uses deprecated v2 capabilities in a way that may be insecure [ 464.257424][T10778] ovs_: entered promiscuous mode [ 464.313131][T10778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 464.864670][T10788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1003'. [ 466.127046][T10776] vhci_hcd vhci_hcd.1: invalid port number 99 [ 466.155563][T10776] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 467.165364][ T30] audit: type=1804 audit(1779941071.882:9): pid=10818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1009" name="/newroot/258/file0" dev="tmpfs" ino=1388 res=1 errno=0 [ 468.621547][T10832] FAULT_INJECTION: forcing a failure. [ 468.621547][T10832] name failslab, interval 1, probability 0, space 0, times 0 [ 468.695553][T10832] CPU: 0 UID: 0 PID: 10832 Comm: syz.2.1013 Tainted: G L syzkaller #0 PREEMPT(full) [ 468.695594][T10832] Tainted: [L]=SOFTLOCKUP [ 468.695603][T10832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 468.695618][T10832] Call Trace: [ 468.695627][T10832] [ 468.695636][T10832] dump_stack_lvl+0x100/0x190 [ 468.695682][T10832] should_fail_ex.cold+0x5/0xa [ 468.695713][T10832] should_failslab+0xc2/0x120 [ 468.695742][T10832] __kmalloc_cache_noprof+0x7a/0x6f0 [ 468.695777][T10832] ? fscontext_alloc_log+0x4a/0x1b0 [ 468.695818][T10832] ? nilfs_init_fs_context+0xbd/0x100 [ 468.695850][T10832] fscontext_alloc_log+0x4a/0x1b0 [ 468.695890][T10832] __x64_sys_fsopen+0x159/0x220 [ 468.695930][T10832] do_syscall_64+0x115/0x840 [ 468.695965][T10832] ? clear_bhb_loop+0x40/0x90 [ 468.695993][T10832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.696018][T10832] RIP: 0033:0x7f5cff99ce59 [ 468.696037][T10832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.696061][T10832] RSP: 002b:00007f5d007f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 468.696084][T10832] RAX: ffffffffffffffda RBX: 00007f5cffc15fa0 RCX: 00007f5cff99ce59 [ 468.696100][T10832] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 468.696120][T10832] RBP: 00007f5cffa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 468.696134][T10832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 468.696148][T10832] R13: 00007f5cffc16038 R14: 00007f5cffc15fa0 R15: 00007ffd6cab5338 [ 468.696178][T10832] [ 469.058258][T10772] Process accounting paused [ 470.099575][T10832] Process accounting paused [ 470.922852][T10850] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1014'. [ 471.483428][T10854] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1019'. [ 472.129459][ T30] audit: type=1800 audit(1779941076.852:10): pid=10861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1020" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 473.505148][T10883] FAULT_INJECTION: forcing a failure. [ 473.505148][T10883] name failslab, interval 1, probability 0, space 0, times 0 [ 473.680927][T10883] CPU: 0 UID: 0 PID: 10883 Comm: syz.0.1023 Tainted: G L syzkaller #0 PREEMPT(full) [ 473.680966][T10883] Tainted: [L]=SOFTLOCKUP [ 473.680974][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 473.680989][T10883] Call Trace: [ 473.680997][T10883] [ 473.681006][T10883] dump_stack_lvl+0x100/0x190 [ 473.681053][T10883] should_fail_ex.cold+0x5/0xa [ 473.681084][T10883] should_failslab+0xc2/0x120 [ 473.681114][T10883] __kmalloc_cache_noprof+0x7a/0x6f0 [ 473.681150][T10883] ? vidtv_psi_service_list_desc_init+0x52/0x550 [ 473.681188][T10883] vidtv_psi_service_list_desc_init+0x52/0x550 [ 473.681226][T10883] vidtv_psi_nit_table_init+0x39a/0x5f0 [ 473.681260][T10883] ? kasan_save_track+0x14/0x30 [ 473.681288][T10883] vidtv_channel_si_init+0xccf/0x18f0 [ 473.681335][T10883] vidtv_mux_init+0x526/0xbf0 [ 473.681376][T10883] vidtv_start_feed+0x34e/0x500 [ 473.681405][T10883] ? __pfx_vidtv_start_feed+0x10/0x10 [ 473.681433][T10883] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 473.681477][T10883] dmx_section_feed_start_filtering+0x3a8/0x660 [ 473.681518][T10883] dvb_dmxdev_filter_start+0x767/0xdd0 [ 473.681554][T10883] dvb_demux_do_ioctl+0xe64/0x1200 [ 473.681589][T10883] dvb_usercopy+0x167/0x340 [ 473.681611][T10883] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 473.681639][T10883] ? __pfx_dvb_usercopy+0x10/0x10 [ 473.681672][T10883] ? __fget_files+0x21f/0x3d0 [ 473.681710][T10883] dvb_demux_ioctl+0x29/0x40 [ 473.681732][T10883] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 473.681756][T10883] __x64_sys_ioctl+0x18e/0x210 [ 473.681783][T10883] do_syscall_64+0x115/0x840 [ 473.681817][T10883] ? clear_bhb_loop+0x40/0x90 [ 473.681852][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.681878][T10883] RIP: 0033:0x7fd4aaf9ce59 [ 473.681897][T10883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.681921][T10883] RSP: 002b:00007fd4a91d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 473.681944][T10883] RAX: ffffffffffffffda RBX: 00007fd4ab216180 RCX: 00007fd4aaf9ce59 [ 473.681960][T10883] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 473.681974][T10883] RBP: 00007fd4ab032d6f R08: 0000000000000000 R09: 0000000000000000 [ 473.681988][T10883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.682002][T10883] R13: 00007fd4ab216218 R14: 00007fd4ab216180 R15: 00007ffc5dd75a68 [ 473.682033][T10883] [ 475.202015][T10893] Process accounting paused [ 475.398318][T10898] netlink: 202 bytes leftover after parsing attributes in process `syz.3.1028'. [ 476.688770][T10917] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(952733139.2315469323.585024), cmd(5) [ 479.343827][T10949] FAULT_INJECTION: forcing a failure. [ 479.343827][T10949] name failslab, interval 1, probability 0, space 0, times 0 [ 479.483765][T10949] CPU: 0 UID: 0 PID: 10949 Comm: syz.2.1039 Tainted: G L syzkaller #0 PREEMPT(full) [ 479.483804][T10949] Tainted: [L]=SOFTLOCKUP [ 479.483813][T10949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 479.483827][T10949] Call Trace: [ 479.483836][T10949] [ 479.483844][T10949] dump_stack_lvl+0x100/0x190 [ 479.483892][T10949] should_fail_ex.cold+0x5/0xa [ 479.483921][T10949] ? aa_label_asxprint+0x75/0x130 [ 479.483947][T10949] should_failslab+0xc2/0x120 [ 479.483976][T10949] __kmalloc_noprof+0xe0/0x850 [ 479.483998][T10949] ? __pfx_vsnprintf+0x10/0x10 [ 479.484033][T10949] aa_label_asxprint+0x75/0x130 [ 479.484062][T10949] apparmor_lsmprop_to_secctx+0xb2/0x1a0 [ 479.484100][T10949] security_lsmprop_to_secctx+0x146/0x1a0 [ 479.484143][T10949] audit_log_subj_ctx+0x34f/0x460 [ 479.484173][T10949] ? map_id_range_up+0x2ce/0x3b0 [ 479.484207][T10949] ? __pfx_audit_log_subj_ctx+0x10/0x10 [ 479.484240][T10949] ? audit_log_format+0xe8/0x130 [ 479.484276][T10949] ? apparmor_current_getlsmprop_subj+0x107/0x3c0 [ 479.484311][T10949] audit_log_task_context+0x88/0xb0 [ 479.484341][T10949] ? __pfx_audit_log_task_context+0x10/0x10 [ 479.484378][T10949] audit_log_task+0x1b7/0x3a0 [ 479.484414][T10949] ? __pfx_audit_log_task+0x10/0x10 [ 479.484451][T10949] ? native_tss_update_io_bitmap+0x3d6/0x740 [ 479.484484][T10949] audit_seccomp+0x79/0x190 [ 479.484515][T10949] __secure_computing+0x26d/0x2c0 [ 479.484544][T10949] do_syscall_64+0x5ce/0x840 [ 479.484577][T10949] ? clear_bhb_loop+0x40/0x90 [ 479.484607][T10949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.484632][T10949] RIP: 0033:0x7f5cff99ce59 [ 479.484651][T10949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.484674][T10949] RSP: 002b:00007f5d0078e9f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 479.484697][T10949] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00007f5cff99ce59 [ 479.484713][T10949] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 000000000000000b [ 479.484727][T10949] RBP: 00007f5d0078f030 R08: 0000000000000001 R09: 000000000000000b [ 479.484742][T10949] R10: 0000000000000081 R11: 0000000000000246 R12: 0000000000000000 [ 479.484756][T10949] R13: 00007f5cffc16308 R14: 00007f5cffc16270 R15: 00007ffd6cab5338 [ 479.484786][T10949] [ 479.484807][T10949] audit: error in audit_log_subj_ctx [ 480.442358][ T30] audit: type=1326 audit(1779941084.072:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10941 comm="syz.2.1039" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cff99ce59 code=0x0 [ 481.528422][T10968] vhci_hcd: not connected 4 [ 483.925179][T10999] FAULT_INJECTION: forcing a failure. [ 483.925179][T10999] name failslab, interval 1, probability 0, space 0, times 0 [ 484.018574][T10999] CPU: 0 UID: 0 PID: 10999 Comm: syz.3.1054 Tainted: G L syzkaller #0 PREEMPT(full) [ 484.018615][T10999] Tainted: [L]=SOFTLOCKUP [ 484.018623][T10999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 484.018637][T10999] Call Trace: [ 484.018645][T10999] [ 484.018654][T10999] dump_stack_lvl+0x100/0x190 [ 484.018700][T10999] should_fail_ex.cold+0x5/0xa [ 484.018730][T10999] ? constrain_params_by_rules+0x175/0xcc0 [ 484.018773][T10999] should_failslab+0xc2/0x120 [ 484.018802][T10999] __kmalloc_noprof+0xe0/0x850 [ 484.018823][T10999] ? unwind_get_return_address+0x59/0xa0 [ 484.018867][T10999] constrain_params_by_rules+0x175/0xcc0 [ 484.018914][T10999] ? stack_trace_save+0x8e/0xc0 [ 484.018949][T10999] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 484.018988][T10999] ? stack_depot_save_flags+0x27/0x9d0 [ 484.019032][T10999] ? __kasan_kmalloc+0xaa/0xb0 [ 484.019055][T10999] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 484.019091][T10999] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 484.019124][T10999] ? snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 484.019167][T10999] ? rcu_is_watching+0x12/0xc0 [ 484.019195][T10999] ? snd_interval_refine+0x2d0/0x580 [ 484.019227][T10999] snd_pcm_hw_refine+0x7e7/0xad0 [ 484.019271][T10999] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 484.019318][T10999] ? __asan_memset+0x23/0x50 [ 484.019356][T10999] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 484.019393][T10999] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 484.019441][T10999] ? trace_contention_end+0x122/0x170 [ 484.019465][T10999] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 484.019506][T10999] ? __pfx___mutex_lock+0x10/0x10 [ 484.019544][T10999] ? __mutex_lock+0x26d/0x1b10 [ 484.019579][T10999] ? find_held_lock+0x2b/0x80 [ 484.019610][T10999] ? snd_pcm_oss_poll+0x3ba/0xb00 [ 484.019643][T10999] ? snd_pcm_oss_poll+0x3ba/0xb00 [ 484.019695][T10999] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 484.019732][T10999] snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 484.019773][T10999] snd_pcm_oss_poll+0x417/0xb00 [ 484.019807][T10999] ? __pfx___pollwait+0x10/0x10 [ 484.019836][T10999] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 484.019878][T10999] ? __fget_files+0x21f/0x3d0 [ 484.019911][T10999] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 484.019947][T10999] do_select+0xd54/0x1850 [ 484.019995][T10999] ? __pfx_do_select+0x10/0x10 [ 484.020023][T10999] ? hrtimer_start_range_ns+0x860/0x1a50 [ 484.020052][T10999] ? __pfx___pollwait+0x10/0x10 [ 484.020082][T10999] ? __pfx_pollwake+0x10/0x10 [ 484.020110][T10999] ? __pfx_pollwake+0x10/0x10 [ 484.020174][T10999] ? find_held_lock+0x2b/0x80 [ 484.020204][T10999] ? __might_fault+0xc5/0x140 [ 484.020241][T10999] ? __might_fault+0xc5/0x140 [ 484.020288][T10999] ? core_sys_select+0x55b/0xbb0 [ 484.020315][T10999] core_sys_select+0x55b/0xbb0 [ 484.020349][T10999] ? __pfx_core_sys_select+0x10/0x10 [ 484.020406][T10999] ? do_futex+0x192/0x350 [ 484.020432][T10999] ? __pfx_do_futex+0x10/0x10 [ 484.020461][T10999] kern_select+0x1d0/0x280 [ 484.020492][T10999] ? __pfx_kern_select+0x10/0x10 [ 484.020520][T10999] ? xfd_validate_state+0x129/0x190 [ 484.020551][T10999] __x64_sys_select+0xbd/0x160 [ 484.020579][T10999] ? do_syscall_64+0x90/0x840 [ 484.020612][T10999] ? lockdep_hardirqs_on+0x78/0x100 [ 484.020646][T10999] do_syscall_64+0x115/0x840 [ 484.020679][T10999] ? clear_bhb_loop+0x40/0x90 [ 484.020709][T10999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 484.020734][T10999] RIP: 0033:0x7f3da639ce59 [ 484.020755][T10999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 484.020778][T10999] RSP: 002b:00007f3da45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 484.020801][T10999] RAX: ffffffffffffffda RBX: 00007f3da6616090 RCX: 00007f3da639ce59 [ 484.020817][T10999] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007 [ 484.020832][T10999] RBP: 00007f3da6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 484.020853][T10999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 484.020867][T10999] R13: 00007f3da6616128 R14: 00007f3da6616090 R15: 00007ffc1d6e9638 [ 484.020899][T10999] [ 485.865348][T11007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1056'. [ 486.565880][ T8136] bridge_slave_1: left allmulticast mode [ 486.593400][ T8136] bridge_slave_1: left promiscuous mode [ 486.623001][ T8136] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.388018][ T5637] Process accounting resumed [ 487.406446][ T8136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 487.459031][ T8136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 487.503900][ T8136] bond0 (unregistering): Released all slaves [ 487.909639][ T4948] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 487.923314][ T4948] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 487.934700][ T4948] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 487.948521][ T4948] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 487.956241][ T4948] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 488.231492][T11033] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff81b0deaa (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 488.247209][T11033] Call Trace: [ 488.250503][T11033] [ 488.253446][T11033] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 488.260148][T11033] ? __pfx___schedule+0x10/0x10 [ 488.265019][T11033] ? irqentry_exit+0x24d/0x970 [ 488.269811][T11033] mce_cpu_restart+0xd5/0x1f0 [ 488.274503][T11033] ? __pfx_mce_cpu_restart+0x10/0x10 [ 488.279803][T11033] smp_call_function_many_cond+0x13d4/0x1700 [ 488.285811][T11033] ? __pfx_mce_cpu_restart+0x10/0x10 [ 488.291117][T11033] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 488.296945][T11033] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 488.303301][T11033] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 488.309317][T11033] ? __timer_delete_sync+0x151/0x1c0 [ 488.314711][T11033] ? __pfx_mce_cpu_restart+0x10/0x10 [ 488.320013][T11033] on_each_cpu_cond_mask+0x40/0x90 [ 488.325151][T11033] set_bank+0x240/0x3a0 [ 488.329322][T11033] ? __pfx_set_bank+0x10/0x10 [ 488.334046][T11033] ? find_held_lock+0x2b/0x80 [ 488.338746][T11033] ? sysfs_file_kobj+0xe4/0x290 [ 488.343629][T11033] ? sysfs_file_kobj+0xe4/0x290 [ 488.348506][T11033] ? __pfx_set_bank+0x10/0x10 [ 488.353196][T11033] dev_attr_store+0x58/0x80 [ 488.357718][T11033] ? __pfx_dev_attr_store+0x10/0x10 [ 488.362951][T11033] sysfs_kf_write+0xf2/0x150 [ 488.367634][T11033] kernfs_fop_write_iter+0x3e0/0x5f0 [ 488.372962][T11033] ? __pfx_sysfs_kf_write+0x10/0x10 [ 488.378200][T11033] vfs_write+0x6ac/0x1070 [ 488.382551][T11033] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 488.388388][T11033] ? __pfx_vfs_write+0x10/0x10 [ 488.393194][T11033] ksys_write+0x12a/0x250 [ 488.397564][T11033] ? __pfx_ksys_write+0x10/0x10 [ 488.402453][T11033] ? rcu_is_watching+0x12/0xc0 [ 488.407244][T11033] do_syscall_64+0x115/0x840 [ 488.411860][T11033] ? clear_bhb_loop+0x40/0x90 [ 488.416591][T11033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.422512][T11033] RIP: 0033:0x7fd4aaf9ce59 [ 488.426943][T11033] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.446587][T11033] RSP: 002b:00007fd4abd8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 488.455028][T11033] RAX: ffffffffffffffda RBX: 00007fd4ab215fa0 RCX: 00007fd4aaf9ce59 [ 488.463012][T11033] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000003 [ 488.471004][T11033] RBP: 00007fd4ab032d6f R08: 0000000000000000 R09: 0000000000000000 [ 488.478982][T11033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 488.486962][T11033] R13: 00007fd4ab216038 R14: 00007fd4ab215fa0 R15: 00007ffc5dd75a68 [ 488.494958][T11033] [ 489.674358][ T8136] hsr_slave_0: left promiscuous mode [ 489.705847][ T8136] hsr_slave_1: left promiscuous mode [ 489.749931][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.822567][ T8136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 489.874756][ T8136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 489.924589][ T8136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 490.011827][ T4948] Bluetooth: hci4: command tx timeout [ 490.058953][T11048] netlink: 146 bytes leftover after parsing attributes in process `syz.0.1065'. [ 490.081090][ T8136] veth1_vlan: left promiscuous mode [ 490.104674][ T8136] veth0_vlan: left promiscuous mode [ 490.863743][T11034] Process accounting resumed [ 490.943950][ T8136] team0 (unregistering): Port device team_slave_1 removed [ 491.033431][ T8136] team0 (unregistering): Port device team_slave_0 removed [ 492.094011][ T4948] Bluetooth: hci4: command tx timeout [ 493.814363][T11027] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.852441][T11027] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.889788][T11027] bridge_slave_0: entered allmulticast mode [ 493.922351][T11027] bridge_slave_0: entered promiscuous mode [ 493.962014][T11027] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.004943][T11027] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.044827][T11027] bridge_slave_1: entered allmulticast mode [ 494.087006][T11027] bridge_slave_1: entered promiscuous mode [ 494.171899][ T4948] Bluetooth: hci4: command tx timeout [ 494.274554][T11027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.394116][T11027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.636103][T11064] vhci_hcd vhci_hcd.1: invalid port number 99 [ 494.636135][T11064] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 494.735655][T11027] team0: Port device team_slave_0 added [ 494.743380][T11027] team0: Port device team_slave_1 added [ 495.309630][T11027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.347743][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.486947][T11027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.656361][T11027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.699164][T11027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 495.841368][T11027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.174555][T11027] hsr_slave_0: entered promiscuous mode [ 496.217227][T11027] hsr_slave_1: entered promiscuous mode [ 496.249904][ T4948] Bluetooth: hci4: command tx timeout [ 496.276833][T11027] debugfs: 'hsr0' already exists in 'hsr' [ 496.318154][T11027] Cannot create hsr debugfs directory [ 496.387610][T11104] FAULT_INJECTION: forcing a failure. [ 496.387610][T11104] name failslab, interval 1, probability 0, space 0, times 0 [ 496.471486][T11104] CPU: 0 UID: 0 PID: 11104 Comm: syz.2.1077 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.471525][T11104] Tainted: [L]=SOFTLOCKUP [ 496.471533][T11104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 496.471548][T11104] Call Trace: [ 496.471555][T11104] [ 496.471564][T11104] dump_stack_lvl+0x100/0x190 [ 496.471612][T11104] should_fail_ex.cold+0x5/0xa [ 496.471644][T11104] should_failslab+0xc2/0x120 [ 496.471681][T11104] __kmalloc_cache_noprof+0x7a/0x6f0 [ 496.471718][T11104] ? io_uring_alloc_task_context+0xa7/0x51f [ 496.471766][T11104] io_uring_alloc_task_context+0xa7/0x51f [ 496.471809][T11104] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 496.471854][T11104] ? alloc_file_pseudo+0x1a5/0x230 [ 496.471895][T11104] __io_uring_add_tctx_node.cold+0x15/0x1a1 [ 496.471936][T11104] ? security_inode_init_security_anon+0x7b/0x230 [ 496.471968][T11104] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 496.472003][T11104] ? __anon_inode_getfile+0x17c/0x280 [ 496.472043][T11104] io_uring_setup.cold+0x1993/0x1c6e [ 496.472112][T11104] ? __pfx_io_uring_setup+0x10/0x10 [ 496.472156][T11104] ? __pfx_do_futex+0x10/0x10 [ 496.472194][T11104] ? xfd_validate_state+0x129/0x190 [ 496.472217][T11104] ? exit_to_user_mode_loop+0xf3/0x670 [ 496.472278][T11104] __x64_sys_io_uring_setup+0xc2/0x170 [ 496.472317][T11104] do_syscall_64+0x115/0x840 [ 496.472350][T11104] ? clear_bhb_loop+0x40/0x90 [ 496.472378][T11104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.472402][T11104] RIP: 0033:0x7f5cff99ce59 [ 496.472420][T11104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.472443][T11104] RSP: 002b:00007f5d007f2028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 496.472465][T11104] RAX: ffffffffffffffda RBX: 00007f5cffc15fa0 RCX: 00007f5cff99ce59 [ 496.472480][T11104] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 496.472493][T11104] RBP: 00007f5cffa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 496.472508][T11104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.472522][T11104] R13: 00007f5cffc16038 R14: 00007f5cffc15fa0 R15: 00007ffd6cab5338 [ 496.472551][T11104] [ 497.903176][T11027] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 497.954468][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 497.997767][T11027] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 498.129096][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 498.220542][T11027] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 498.255968][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 498.312563][T11027] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 498.383412][T11027] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 499.032694][T11129] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 499.354334][T11107] Process accounting resumed [ 500.283981][T11125] Process accounting resumed [ 500.532693][T11150] syz.3.1085 (11150): attempted to duplicate a private mapping with mremap. This is not supported. [ 500.638626][T11027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.659624][T11152] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 500.745654][T11027] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.809251][ T8136] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.816509][ T8136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.917354][ T8136] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.924559][ T8136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.630505][T11141] vhci_hcd vhci_hcd.1: invalid port number 99 [ 501.674745][T11141] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 501.691484][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.697842][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.145567][T11176] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 502.319363][T11175] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 502.855935][T11177] random: crng reseeded on system resumption [ 503.755127][T11027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.887584][T11164] vhci_hcd vhci_hcd.1: invalid port number 99 [ 503.947663][T11164] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 505.368373][T11182] Process accounting resumed [ 506.194501][T11027] veth0_vlan: entered promiscuous mode [ 506.931187][T11027] veth1_vlan: entered promiscuous mode [ 507.068567][T11211] vhci_hcd vhci_hcd.1: invalid port number 99 [ 507.124749][T11211] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 507.240878][T11027] veth0_macvtap: entered promiscuous mode [ 507.295961][T11027] veth1_macvtap: entered promiscuous mode [ 507.824800][T11027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 507.897785][T11027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 507.953448][ T8139] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 507.989292][ T8139] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.026690][ T8139] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.062041][ T8139] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 508.104185][T11247] openvswitch: netlink: IP tunnel dst address not specified [ 508.395367][ T9827] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.453927][ T9827] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 508.627395][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 508.666610][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 510.474841][T11280] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1104'. [ 510.554071][T11265] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 510.647671][T11249] Process accounting resumed [ 512.147803][ T30] audit: type=1800 audit(1779941116.872:12): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1107" name="dbroot" dev="configfs" ino=38090 res=0 errno=0 [ 512.515841][T11265] vhci_hcd vhci_hcd.1: invalid port number 99 [ 512.576813][T11265] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 516.164272][T11357] input: jJǸ-9%vJ86 as /devices/virtual/input/input11 [ 518.251484][T11385] FAULT_INJECTION: forcing a failure. [ 518.251484][T11385] name failslab, interval 1, probability 0, space 0, times 0 [ 518.367318][T11385] CPU: 0 UID: 0 PID: 11385 Comm: syz.0.1119 Tainted: G L syzkaller #0 PREEMPT(full) [ 518.367365][T11385] Tainted: [L]=SOFTLOCKUP [ 518.367373][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 518.367388][T11385] Call Trace: [ 518.367395][T11385] [ 518.367405][T11385] dump_stack_lvl+0x100/0x190 [ 518.367452][T11385] should_fail_ex.cold+0x5/0xa [ 518.367483][T11385] should_failslab+0xc2/0x120 [ 518.367512][T11385] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 518.367552][T11385] ? mas_preallocate+0x1105/0x14a0 [ 518.367581][T11385] mas_preallocate+0x1105/0x14a0 [ 518.367615][T11385] ? __pfx_mas_preallocate+0x10/0x10 [ 518.367645][T11385] ? vm_area_alloc+0x1f/0x160 [ 518.367683][T11385] ? lockdep_init_map_type+0x5c/0x250 [ 518.367727][T11385] __mmap_region+0x124a/0x2dd0 [ 518.367771][T11385] ? __pfx___mmap_region+0x10/0x10 [ 518.367835][T11385] ? find_held_lock+0x2b/0x80 [ 518.367865][T11385] ? ima_match_policy+0x8c4/0x2350 [ 518.367895][T11385] ? ima_match_policy+0x8c4/0x2350 [ 518.367953][T11385] ? process_measurement+0x4c8/0x2350 [ 518.368024][T11385] mmap_region+0x527/0x620 [ 518.368049][T11385] ? __pfx_mmap_region+0x10/0x10 [ 518.368076][T11385] ? cap_mmap_addr+0x4b/0x120 [ 518.368098][T11385] ? bpf_lsm_mmap_addr+0x9/0x30 [ 518.368120][T11385] ? security_mmap_addr+0x71/0x1e0 [ 518.368153][T11385] ? __get_unmapped_area+0x255/0x3e0 [ 518.368188][T11385] do_mmap+0xc63/0x12f0 [ 518.368223][T11385] ? __pfx_do_mmap+0x10/0x10 [ 518.368252][T11385] ? __pfx_down_write_killable+0x10/0x10 [ 518.368298][T11385] vm_mmap_pgoff+0x29e/0x470 [ 518.368334][T11385] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 518.368363][T11385] ? __fget_files+0x215/0x3d0 [ 518.368397][T11385] ? __fget_files+0x21f/0x3d0 [ 518.368431][T11385] ksys_mmap_pgoff+0x3cb/0x610 [ 518.368461][T11385] ? __x64_sys_futex+0x358/0x4d0 [ 518.368487][T11385] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 518.368516][T11385] ? xfd_validate_state+0x129/0x190 [ 518.368539][T11385] ? ksys_write+0x1ac/0x250 [ 518.368572][T11385] __x64_sys_mmap+0x125/0x190 [ 518.368606][T11385] do_syscall_64+0x115/0x840 [ 518.368640][T11385] ? clear_bhb_loop+0x40/0x90 [ 518.368670][T11385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.368695][T11385] RIP: 0033:0x7fd4aaf9ce59 [ 518.368715][T11385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.368739][T11385] RSP: 002b:00007fd4a91f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 518.368762][T11385] RAX: ffffffffffffffda RBX: 00007fd4ab216090 RCX: 00007fd4aaf9ce59 [ 518.368779][T11385] RDX: 0000000000000007 RSI: 00000000003fffff RDI: 0000000000000000 [ 518.368793][T11385] RBP: 00007fd4ab032d6f R08: 00000000000000dd R09: 0000000000000000 [ 518.368808][T11385] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000000 [ 518.368823][T11385] R13: 00007fd4ab216128 R14: 00007fd4ab216090 R15: 00007ffc5dd75a68 [ 518.368854][T11385] [ 518.912379][T10860] Process accounting paused [ 519.249149][ T4948] Bluetooth: hci0: command 0x0406 tx timeout [ 520.811385][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.338561][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.658866][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.036779][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.144985][T11418] vhci_hcd: not connected 4 [ 522.772768][T11408] Process accounting resumed [ 522.990639][T11425] netlink: NAT attribute has 5 unknown bytes [ 523.162125][ T13] team0: left allmulticast mode [ 523.202275][ T13] team_slave_0: left allmulticast mode [ 523.239584][ T13] team_slave_1: left allmulticast mode [ 523.293765][ T13] team0: left promiscuous mode [ 523.329323][ T13] team_slave_0: left promiscuous mode [ 523.371974][ T13] team_slave_1: left promiscuous mode [ 523.413261][ T13] bridge0: port 3(team0) entered disabled state [ 523.489570][ T13] bridge_slave_1: left allmulticast mode [ 523.543070][ T13] bridge_slave_1: left promiscuous mode [ 523.584204][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.623371][T11432] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1130'. [ 523.684837][ T13] bridge_slave_0: left allmulticast mode [ 523.734435][ T13] bridge_slave_0: left promiscuous mode [ 523.780190][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.954732][T11407] Process accounting paused [ 524.195499][T11442] FAULT_INJECTION: forcing a failure. [ 524.195499][T11442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.318762][T11442] CPU: 0 UID: 0 PID: 11442 Comm: syz.2.1133 Tainted: G L syzkaller #0 PREEMPT(full) [ 524.318800][T11442] Tainted: [L]=SOFTLOCKUP [ 524.318808][T11442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 524.318821][T11442] Call Trace: [ 524.318828][T11442] [ 524.318837][T11442] dump_stack_lvl+0x100/0x190 [ 524.318882][T11442] should_fail_ex.cold+0x5/0xa [ 524.318911][T11442] _copy_from_user+0x2e/0xd0 [ 524.318946][T11442] copy_msghdr_from_user+0x9f/0x4f0 [ 524.318998][T11442] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 524.319042][T11442] ? __lock_acquire+0x4a5/0x2630 [ 524.319088][T11442] ___sys_recvmsg+0xdd/0x1a0 [ 524.319122][T11442] ? __pfx____sys_recvmsg+0x10/0x10 [ 524.319158][T11442] ? find_held_lock+0x2b/0x80 [ 524.319204][T11442] do_recvmmsg+0x301/0x760 [ 524.319241][T11442] ? __pfx_do_recvmmsg+0x10/0x10 [ 524.319272][T11442] ? ksys_write+0x190/0x250 [ 524.319304][T11442] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 524.319339][T11442] ? kernel_write+0x603/0x6c0 [ 524.319372][T11442] ? __fget_files+0x21f/0x3d0 [ 524.319407][T11442] __x64_sys_recvmmsg+0x22a/0x280 [ 524.319436][T11442] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 524.319465][T11442] ? rcu_is_watching+0x12/0xc0 [ 524.319496][T11442] do_syscall_64+0x115/0x840 [ 524.319528][T11442] ? clear_bhb_loop+0x40/0x90 [ 524.319556][T11442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.319580][T11442] RIP: 0033:0x7f5cff99ce59 [ 524.319599][T11442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.319622][T11442] RSP: 002b:00007f5d007f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 524.319645][T11442] RAX: ffffffffffffffda RBX: 00007f5cffc15fa0 RCX: 00007f5cff99ce59 [ 524.319661][T11442] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 524.319675][T11442] RBP: 00007f5d007f2090 R08: 0000000000000000 R09: 0000000000000000 [ 524.319689][T11442] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000001 [ 524.319703][T11442] R13: 00007f5cffc16038 R14: 00007f5cffc15fa0 R15: 00007ffd6cab5338 [ 524.319732][T11442] [ 524.610645][T11443] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 524.889095][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.918969][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.943540][ T13] bond0 (unregistering): Released all slaves [ 525.092791][ T13] ovs_: left promiscuous mode [ 525.485954][ T13] tipc: Left network mode [ 525.492612][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 526.177409][ T13] hsr_slave_0: left promiscuous mode [ 526.197612][ T13] hsr_slave_1: left promiscuous mode [ 526.216560][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.241486][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.280211][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.298734][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.352327][ T13] veth1_macvtap: left promiscuous mode [ 526.372348][ T13] veth0_macvtap: left promiscuous mode [ 526.391663][ T13] veth1_vlan: left promiscuous mode [ 526.408604][ T13] veth0_vlan: left promiscuous mode [ 526.996694][ T13] team0 (unregistering): Port device team_slave_1 removed [ 527.035163][ T13] team0 (unregistering): Port device team_slave_0 removed [ 528.652271][T11497] FAULT_INJECTION: forcing a failure. [ 528.652271][T11497] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 528.740654][T11497] CPU: 0 UID: 0 PID: 11497 Comm: syz.3.1141 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.740693][T11497] Tainted: [L]=SOFTLOCKUP [ 528.740702][T11497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 528.740717][T11497] Call Trace: [ 528.740724][T11497] [ 528.740733][T11497] dump_stack_lvl+0x100/0x190 [ 528.740779][T11497] should_fail_ex.cold+0x5/0xa [ 528.740805][T11497] ? prepare_alloc_pages+0x16d/0x5f0 [ 528.740839][T11497] should_fail_alloc_page+0xeb/0x140 [ 528.740871][T11497] prepare_alloc_pages+0x1f0/0x5f0 [ 528.740907][T11497] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 528.740952][T11497] ? __pfx_stack_trace_save+0x10/0x10 [ 528.740986][T11497] ? stack_depot_save_flags+0x27/0x9d0 [ 528.741026][T11497] ? kasan_save_stack+0x3f/0x50 [ 528.741049][T11497] ? kasan_save_stack+0x30/0x50 [ 528.741071][T11497] ? kasan_save_track+0x14/0x30 [ 528.741099][T11497] ? kasan_save_stack+0x3f/0x50 [ 528.741126][T11497] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 528.741173][T11497] ? __lock_acquire+0x4a5/0x2630 [ 528.741211][T11497] ? __lock_acquire+0x4a5/0x2630 [ 528.741249][T11497] ? __css_rstat_updated+0x1ce/0x5a0 [ 528.741295][T11497] ? lock_acquire+0x1b1/0x370 [ 528.741333][T11497] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 528.741370][T11497] ? policy_nodemask+0xed/0x4f0 [ 528.741401][T11497] alloc_pages_mpol+0x1fb/0x540 [ 528.741432][T11497] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 528.741464][T11497] ? __lock_acquire+0x4a5/0x2630 [ 528.741505][T11497] folio_alloc_mpol_noprof+0x36/0x260 [ 528.741542][T11497] vma_alloc_folio_noprof+0xed/0x1d0 [ 528.741583][T11497] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 528.741627][T11497] do_anonymous_page+0xb46/0x2050 [ 528.741666][T11497] ? rcu_read_unlock+0x2d/0xb0 [ 528.741712][T11497] __handle_mm_fault+0x1d2c/0x2a00 [ 528.741754][T11497] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 528.741785][T11497] ? __pfx___handle_mm_fault+0x10/0x10 [ 528.741824][T11497] ? pte_offset_map_lock+0x174/0x320 [ 528.741853][T11497] ? find_held_lock+0x2b/0x80 [ 528.741892][T11497] ? follow_page_pte+0x4d0/0x13f0 [ 528.741928][T11497] handle_mm_fault+0x37b/0xa30 [ 528.741971][T11497] __get_user_pages+0x1178/0x32a0 [ 528.742012][T11497] ? __pfx___get_user_pages+0x10/0x10 [ 528.742051][T11497] populate_vma_page_range+0x267/0x3f0 [ 528.742087][T11497] ? __pfx_populate_vma_page_range+0x10/0x10 [ 528.742123][T11497] ? __pfx_find_vma_intersection+0x10/0x10 [ 528.742154][T11497] ? do_mmap+0x93f/0x12f0 [ 528.742187][T11497] __mm_populate+0x107/0x3a0 [ 528.742221][T11497] ? __pfx___mm_populate+0x10/0x10 [ 528.742255][T11497] ? up_write+0x28c/0x4f0 [ 528.742284][T11497] vm_mmap_pgoff+0x37f/0x470 [ 528.742319][T11497] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 528.742353][T11497] ? do_futex+0x192/0x350 [ 528.742378][T11497] ? __pfx_do_futex+0x10/0x10 [ 528.742401][T11497] ? __pfx_do_sys_openat2+0x10/0x10 [ 528.742445][T11497] ksys_mmap_pgoff+0xe4/0x610 [ 528.742475][T11497] ? __x64_sys_futex+0x358/0x4d0 [ 528.742501][T11497] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 528.742531][T11497] ? xfd_validate_state+0x129/0x190 [ 528.742554][T11497] ? ksys_write+0x1ac/0x250 [ 528.742593][T11497] __x64_sys_mmap+0x125/0x190 [ 528.742622][T11497] do_syscall_64+0x115/0x840 [ 528.742657][T11497] ? clear_bhb_loop+0x40/0x90 [ 528.742687][T11497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.742712][T11497] RIP: 0033:0x7f3da639ce59 [ 528.742732][T11497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 528.742755][T11497] RSP: 002b:00007f3da717e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 528.742779][T11497] RAX: ffffffffffffffda RBX: 00007f3da6615fa0 RCX: 00007f3da639ce59 [ 528.742795][T11497] RDX: 0000000000000003 RSI: 0000000000040009 RDI: 0000000002000000 [ 528.742810][T11497] RBP: 00007f3da6432d6f R08: 0000000000000007 R09: 0000000000028000 [ 528.742824][T11497] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 528.742838][T11497] R13: 00007f3da6616038 R14: 00007f3da6615fa0 R15: 00007ffc1d6e9638 [ 528.742869][T11497] [ 530.385942][T11521] Process accounting paused [ 530.796141][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 531.484866][T11534] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 532.808072][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 533.077700][T11567] FAULT_INJECTION: forcing a failure. [ 533.077700][T11567] name failslab, interval 1, probability 0, space 0, times 0 [ 533.134838][T11567] CPU: 0 UID: 0 PID: 11567 Comm: syz.2.1151 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.134878][T11567] Tainted: [L]=SOFTLOCKUP [ 533.134886][T11567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 533.134902][T11567] Call Trace: [ 533.134909][T11567] [ 533.134918][T11567] dump_stack_lvl+0x100/0x190 [ 533.134964][T11567] should_fail_ex.cold+0x5/0xa [ 533.134995][T11567] should_failslab+0xc2/0x120 [ 533.135025][T11567] __kmalloc_cache_noprof+0x7a/0x6f0 [ 533.135061][T11567] ? snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 533.135099][T11567] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 533.135142][T11567] snd_pcm_oss_change_params_locked+0x81c/0x39f0 [ 533.135199][T11567] ? trace_contention_end+0x122/0x170 [ 533.135224][T11567] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 533.135262][T11567] ? __pfx___mutex_lock+0x10/0x10 [ 533.135299][T11567] ? __mutex_lock+0x26d/0x1b10 [ 533.135333][T11567] ? find_held_lock+0x2b/0x80 [ 533.135363][T11567] ? snd_pcm_oss_poll+0x3ba/0xb00 [ 533.135396][T11567] ? snd_pcm_oss_poll+0x3ba/0xb00 [ 533.135446][T11567] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 533.135483][T11567] snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 533.135524][T11567] snd_pcm_oss_poll+0x417/0xb00 [ 533.135557][T11567] ? __pfx___pollwait+0x10/0x10 [ 533.135586][T11567] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 533.135618][T11567] ? __fget_files+0x21f/0x3d0 [ 533.135652][T11567] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 533.135688][T11567] do_select+0xd54/0x1850 [ 533.135736][T11567] ? __pfx_do_select+0x10/0x10 [ 533.135764][T11567] ? tick_program_event+0xb0/0x140 [ 533.135797][T11567] ? __pfx___pollwait+0x10/0x10 [ 533.135827][T11567] ? __pfx_pollwake+0x10/0x10 [ 533.135855][T11567] ? __pfx_pollwake+0x10/0x10 [ 533.135920][T11567] ? find_held_lock+0x2b/0x80 [ 533.135949][T11567] ? __might_fault+0xc5/0x140 [ 533.135986][T11567] ? __might_fault+0xc5/0x140 [ 533.136033][T11567] ? core_sys_select+0x55b/0xbb0 [ 533.136061][T11567] core_sys_select+0x55b/0xbb0 [ 533.136095][T11567] ? __pfx_core_sys_select+0x10/0x10 [ 533.136130][T11567] ? futex_hash_put+0x43/0x50 [ 533.136197][T11567] ? do_futex+0x192/0x350 [ 533.136222][T11567] ? __pfx_do_futex+0x10/0x10 [ 533.136253][T11567] kern_select+0x1d0/0x280 [ 533.136284][T11567] ? __pfx_kern_select+0x10/0x10 [ 533.136312][T11567] ? xfd_validate_state+0x129/0x190 [ 533.136343][T11567] __x64_sys_select+0xbd/0x160 [ 533.136371][T11567] ? do_syscall_64+0x90/0x840 [ 533.136404][T11567] ? lockdep_hardirqs_on+0x78/0x100 [ 533.136439][T11567] do_syscall_64+0x115/0x840 [ 533.136472][T11567] ? clear_bhb_loop+0x40/0x90 [ 533.136501][T11567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.136527][T11567] RIP: 0033:0x7f5cff99ce59 [ 533.136546][T11567] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.136569][T11567] RSP: 002b:00007f5d007d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 533.136592][T11567] RAX: ffffffffffffffda RBX: 00007f5cffc16090 RCX: 00007f5cff99ce59 [ 533.136609][T11567] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007 [ 533.136624][T11567] RBP: 00007f5cffa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 533.136638][T11567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.136652][T11567] R13: 00007f5cffc16128 R14: 00007f5cffc16090 R15: 00007ffd6cab5338 [ 533.136682][T11567] [ 536.938053][T11627] ubi0: attaching mtd0 [ 537.203384][T11627] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 537.317437][ T5293] 8021q: adding VLAN 0 to HW filter on device eth4 [ 537.324524][T11627] eraseblock attaching information dump: [ 537.434355][T11627] ec 1 [ 537.494800][T11627] pnum 0 [ 537.556038][T11627] lnum 0 [ 537.596387][T11627] scrub 0 [ 537.635036][T11627] sqnum 1 [ 537.709094][T11627] Volume identifier header dump: [ 537.782889][T11627] magic 55424921 [ 537.817917][T11627] version 1 [ 537.839100][T11627] vol_type 1 [ 537.863993][T11627] copy_flag 0 [ 537.890982][T11627] compat 5 [ 537.917807][T11627] vol_id 2147479551 [ 537.949032][T11627] lnum 0 [ 537.976653][T11627] data_size 0 [ 538.013780][T11627] used_ebs 0 [ 538.057415][T11627] data_pad 0 [ 538.094848][T11627] sqnum 1 [ 538.125260][T11627] hdr_crc 65b3bd2d [ 538.154971][T11627] Volume identifier header hexdump: [ 538.392221][T11627] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 539.799391][T11663] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[11027] was attempted by ""[11663] [ 540.521006][T11657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1168'. [ 540.853962][T11695] FAULT_INJECTION: forcing a failure. [ 540.853962][T11695] name failslab, interval 1, probability 0, space 0, times 0 [ 540.941242][T11695] CPU: 0 UID: 0 PID: 11695 Comm: syz.0.1172 Tainted: G L syzkaller #0 PREEMPT(full) [ 540.941280][T11695] Tainted: [L]=SOFTLOCKUP [ 540.941288][T11695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 540.941303][T11695] Call Trace: [ 540.941310][T11695] [ 540.941319][T11695] dump_stack_lvl+0x100/0x190 [ 540.941364][T11695] should_fail_ex.cold+0x5/0xa [ 540.941395][T11695] should_failslab+0xc2/0x120 [ 540.941423][T11695] __kmalloc_cache_noprof+0x7a/0x6f0 [ 540.941465][T11695] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 540.941511][T11695] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 540.941553][T11695] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 540.941595][T11695] vidtv_mux_init+0x72d/0xbf0 [ 540.941636][T11695] vidtv_start_feed+0x34e/0x500 [ 540.941664][T11695] ? __pfx_vidtv_start_feed+0x10/0x10 [ 540.941691][T11695] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 540.941734][T11695] dmx_section_feed_start_filtering+0x3a8/0x660 [ 540.941773][T11695] dvb_dmxdev_filter_start+0x767/0xdd0 [ 540.941808][T11695] dvb_demux_do_ioctl+0xe64/0x1200 [ 540.941842][T11695] dvb_usercopy+0x167/0x340 [ 540.941862][T11695] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 540.941890][T11695] ? __pfx_dvb_usercopy+0x10/0x10 [ 540.941922][T11695] ? __fget_files+0x21f/0x3d0 [ 540.941956][T11695] dvb_demux_ioctl+0x29/0x40 [ 540.941978][T11695] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 540.942000][T11695] __x64_sys_ioctl+0x18e/0x210 [ 540.942027][T11695] do_syscall_64+0x115/0x840 [ 540.942059][T11695] ? clear_bhb_loop+0x40/0x90 [ 540.942088][T11695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.942112][T11695] RIP: 0033:0x7fd4aaf9ce59 [ 540.942132][T11695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 540.942155][T11695] RSP: 002b:00007fd4a91d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 540.942177][T11695] RAX: ffffffffffffffda RBX: 00007fd4ab216180 RCX: 00007fd4aaf9ce59 [ 540.942193][T11695] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 540.942207][T11695] RBP: 00007fd4ab032d6f R08: 0000000000000000 R09: 0000000000000000 [ 540.942221][T11695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 540.942234][T11695] R13: 00007fd4ab216218 R14: 00007fd4ab216180 R15: 00007ffc5dd75a68 [ 540.942268][T11695] [ 541.717645][T11684] vhci_hcd vhci_hcd.1: invalid port number 99 [ 541.732026][T11684] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 543.088361][T11703] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 543.812593][T11729] FAULT_INJECTION: forcing a failure. [ 543.812593][T11729] name failslab, interval 1, probability 0, space 0, times 0 [ 543.812637][T11729] CPU: 0 UID: 0 PID: 11729 Comm: syz.2.1178 Tainted: G L syzkaller #0 PREEMPT(full) [ 543.812671][T11729] Tainted: [L]=SOFTLOCKUP [ 543.812679][T11729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 543.812694][T11729] Call Trace: [ 543.812702][T11729] [ 543.812711][T11729] dump_stack_lvl+0x100/0x190 [ 543.812757][T11729] should_fail_ex.cold+0x5/0xa [ 543.812788][T11729] should_failslab+0xc2/0x120 [ 543.812818][T11729] __kmalloc_cache_noprof+0x7a/0x6f0 [ 543.812854][T11729] ? alloc_pipe_info+0x10e/0x590 [ 543.812886][T11729] ? find_held_lock+0x2b/0x80 [ 543.812921][T11729] alloc_pipe_info+0x10e/0x590 [ 543.812956][T11729] splice_direct_to_actor+0x78f/0xa30 [ 543.812989][T11729] ? __lock_acquire+0x4a5/0x2630 [ 543.813026][T11729] ? __pfx_direct_splice_actor+0x10/0x10 [ 543.813059][T11729] ? __pfx_aa_file_perm+0x10/0x10 [ 543.813097][T11729] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 543.813137][T11729] do_splice_direct+0x174/0x240 [ 543.813177][T11729] ? __pfx_do_splice_direct+0x10/0x10 [ 543.813210][T11729] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 543.813241][T11729] ? bpf_lsm_file_permission+0x9/0x10 [ 543.813264][T11729] ? security_file_permission+0x76/0x210 [ 543.813298][T11729] ? rw_verify_area+0xce/0x6d0 [ 543.813325][T11729] do_sendfile+0xadc/0xe20 [ 543.813356][T11729] ? __pfx_do_sendfile+0x10/0x10 [ 543.813388][T11729] ? __x64_sys_futex+0x34f/0x4d0 [ 543.813412][T11729] ? __x64_sys_futex+0x358/0x4d0 [ 543.813440][T11729] __x64_sys_sendfile64+0x1d8/0x220 [ 543.813472][T11729] ? ksys_write+0x1ac/0x250 [ 543.813500][T11729] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 543.813537][T11729] ? rcu_is_watching+0x12/0xc0 [ 543.813568][T11729] do_syscall_64+0x115/0x840 [ 543.813602][T11729] ? clear_bhb_loop+0x40/0x90 [ 543.813632][T11729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.813657][T11729] RIP: 0033:0x7f5cff99ce59 [ 543.813676][T11729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.813700][T11729] RSP: 002b:00007f5d007f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 543.813723][T11729] RAX: ffffffffffffffda RBX: 00007f5cffc15fa0 RCX: 00007f5cff99ce59 [ 543.813739][T11729] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 543.813753][T11729] RBP: 00007f5cffa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 543.813768][T11729] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000000 [ 543.813782][T11729] R13: 00007f5cffc16038 R14: 00007f5cffc15fa0 R15: 00007ffd6cab5338 [ 543.813813][T11729] [ 545.308441][ T30] audit: type=1800 audit(1779941150.032:13): pid=11757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1183" name="members" dev="configfs" ino=40652 res=0 errno=0 [ 545.550905][T11760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1184'. [ 545.595789][T11760] bridge0: port 3(bond0) entered blocking state [ 545.595863][T11760] bridge0: port 3(bond0) entered disabled state [ 545.595962][T11760] bond0: entered allmulticast mode [ 545.595980][T11760] bond_slave_0: entered allmulticast mode [ 545.595998][T11760] bond_slave_1: entered allmulticast mode [ 545.605647][T11760] bond0: entered promiscuous mode [ 545.605669][T11760] bond_slave_0: entered promiscuous mode [ 545.605817][T11760] bond_slave_1: entered promiscuous mode [ 545.609057][T11760] bridge0: port 3(bond0) entered blocking state [ 545.609135][T11760] bridge0: port 3(bond0) entered forwarding state [ 546.131115][T11768] FAULT_INJECTION: forcing a failure. [ 546.131115][T11768] name failslab, interval 1, probability 0, space 0, times 0 [ 546.131164][T11768] CPU: 0 UID: 0 PID: 11768 Comm: syz.3.1185 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.131215][T11768] Tainted: [L]=SOFTLOCKUP [ 546.131223][T11768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.131237][T11768] Call Trace: [ 546.131244][T11768] [ 546.131253][T11768] dump_stack_lvl+0x100/0x190 [ 546.131309][T11768] should_fail_ex.cold+0x5/0xa [ 546.131338][T11768] should_failslab+0xc2/0x120 [ 546.131365][T11768] __kmalloc_cache_noprof+0x7a/0x6f0 [ 546.131397][T11768] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 546.131458][T11768] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 546.131500][T11768] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 546.131553][T11768] vidtv_mux_init+0x748/0xbf0 [ 546.131589][T11768] vidtv_start_feed+0x34e/0x500 [ 546.131615][T11768] ? __pfx_vidtv_start_feed+0x10/0x10 [ 546.131640][T11768] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 546.131680][T11768] dmx_section_feed_start_filtering+0x3a8/0x660 [ 546.131717][T11768] dvb_dmxdev_filter_start+0x767/0xdd0 [ 546.131749][T11768] dvb_demux_do_ioctl+0xe64/0x1200 [ 546.131781][T11768] dvb_usercopy+0x167/0x340 [ 546.131800][T11768] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 546.131825][T11768] ? __pfx_dvb_usercopy+0x10/0x10 [ 546.131855][T11768] ? __fget_files+0x21f/0x3d0 [ 546.131905][T11768] dvb_demux_ioctl+0x29/0x40 [ 546.131926][T11768] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 546.131949][T11768] __x64_sys_ioctl+0x18e/0x210 [ 546.131987][T11768] do_syscall_64+0x115/0x840 [ 546.132020][T11768] ? clear_bhb_loop+0x40/0x90 [ 546.132049][T11768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.132073][T11768] RIP: 0033:0x7f3da639ce59 [ 546.132092][T11768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.132114][T11768] RSP: 002b:00007f3da45d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.132137][T11768] RAX: ffffffffffffffda RBX: 00007f3da6616180 RCX: 00007f3da639ce59 [ 546.132152][T11768] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 546.132166][T11768] RBP: 00007f3da6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 546.132180][T11768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.132193][T11768] R13: 00007f3da6616218 R14: 00007f3da6616180 R15: 00007ffc1d6e9638 [ 546.132224][T11768] [ 546.812252][T11774] FAULT_INJECTION: forcing a failure. [ 546.812252][T11774] name failslab, interval 1, probability 0, space 0, times 0 [ 546.812293][T11774] CPU: 0 UID: 0 PID: 11774 Comm: syz.2.1186 Tainted: G L syzkaller #0 PREEMPT(full) [ 546.812331][T11774] Tainted: [L]=SOFTLOCKUP [ 546.812340][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 546.812355][T11774] Call Trace: [ 546.812362][T11774] [ 546.812371][T11774] dump_stack_lvl+0x100/0x190 [ 546.812418][T11774] should_fail_ex.cold+0x5/0xa [ 546.812449][T11774] should_failslab+0xc2/0x120 [ 546.812479][T11774] __kmalloc_cache_noprof+0x7a/0x6f0 [ 546.812515][T11774] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 546.812563][T11774] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 546.812606][T11774] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 546.812648][T11774] vidtv_mux_init+0x748/0xbf0 [ 546.812696][T11774] vidtv_start_feed+0x34e/0x500 [ 546.812725][T11774] ? __pfx_vidtv_start_feed+0x10/0x10 [ 546.812753][T11774] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 546.812797][T11774] dmx_section_feed_start_filtering+0x3a8/0x660 [ 546.812842][T11774] dvb_dmxdev_filter_start+0x767/0xdd0 [ 546.812884][T11774] dvb_demux_do_ioctl+0xe64/0x1200 [ 546.812920][T11774] dvb_usercopy+0x167/0x340 [ 546.812941][T11774] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 546.812969][T11774] ? __pfx_dvb_usercopy+0x10/0x10 [ 546.813003][T11774] ? __fget_files+0x21f/0x3d0 [ 546.813038][T11774] dvb_demux_ioctl+0x29/0x40 [ 546.813061][T11774] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 546.813084][T11774] __x64_sys_ioctl+0x18e/0x210 [ 546.813111][T11774] do_syscall_64+0x115/0x840 [ 546.813144][T11774] ? clear_bhb_loop+0x40/0x90 [ 546.813174][T11774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.813198][T11774] RIP: 0033:0x7f5cff99ce59 [ 546.813218][T11774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.813243][T11774] RSP: 002b:00007f5d007b0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.813265][T11774] RAX: ffffffffffffffda RBX: 00007f5cffc16180 RCX: 00007f5cff99ce59 [ 546.813282][T11774] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 546.813296][T11774] RBP: 00007f5cffa32d6f R08: 0000000000000000 R09: 0000000000000000 [ 546.813311][T11774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.813325][T11774] R13: 00007f5cffc16218 R14: 00007f5cffc16180 R15: 00007ffd6cab5338 [ 546.813356][T11774] [ 547.822660][T11785] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 549.282905][T11790] vhci_hcd vhci_hcd.1: invalid port number 99 [ 549.282933][T11790] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 550.197418][T11818] netlink: 'syz.2.1191': attribute type 2 has an invalid length. [ 551.201473][T11828] random: crng reseeded on system resumption [ 554.722680][T11877] Process accounting paused [ 555.100981][T11917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1206'. [ 555.480262][T11885] vhci_hcd vhci_hcd.1: invalid port number 99 [ 555.539066][T11911] Process accounting resumed [ 555.575879][T11885] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 556.028718][T11893] vhci_hcd vhci_hcd.1: invalid port number 99 [ 556.040926][T11936] FAULT_INJECTION: forcing a failure. [ 556.040926][T11936] name failslab, interval 1, probability 0, space 0, times 0 [ 556.107988][T11893] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 556.134639][T11936] CPU: 0 UID: 0 PID: 11936 Comm: syz.0.1207 Tainted: G L syzkaller #0 PREEMPT(full) [ 556.134678][T11936] Tainted: [L]=SOFTLOCKUP [ 556.134687][T11936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 556.134701][T11936] Call Trace: [ 556.134709][T11936] [ 556.134718][T11936] dump_stack_lvl+0x100/0x190 [ 556.134765][T11936] should_fail_ex.cold+0x5/0xa [ 556.134796][T11936] should_failslab+0xc2/0x120 [ 556.134826][T11936] __kmalloc_cache_noprof+0x7a/0x6f0 [ 556.134862][T11936] ? vidtv_psi_service_list_desc_init+0x52/0x550 [ 556.134901][T11936] vidtv_psi_service_list_desc_init+0x52/0x550 [ 556.134939][T11936] vidtv_psi_nit_table_init+0x39a/0x5f0 [ 556.134973][T11936] ? kasan_save_track+0x14/0x30 [ 556.135000][T11936] vidtv_channel_si_init+0xccf/0x18f0 [ 556.135053][T11936] vidtv_mux_init+0x526/0xbf0 [ 556.135095][T11936] vidtv_start_feed+0x34e/0x500 [ 556.135131][T11936] ? __pfx_vidtv_start_feed+0x10/0x10 [ 556.135160][T11936] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 556.135204][T11936] dmx_section_feed_start_filtering+0x3a8/0x660 [ 556.135245][T11936] dvb_dmxdev_filter_start+0x767/0xdd0 [ 556.135282][T11936] dvb_demux_do_ioctl+0xe64/0x1200 [ 556.135323][T11936] dvb_usercopy+0x167/0x340 [ 556.135345][T11936] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 556.135373][T11936] ? __pfx_dvb_usercopy+0x10/0x10 [ 556.135406][T11936] ? __fget_files+0x21f/0x3d0 [ 556.135441][T11936] dvb_demux_ioctl+0x29/0x40 [ 556.135463][T11936] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 556.135487][T11936] __x64_sys_ioctl+0x18e/0x210 [ 556.135514][T11936] do_syscall_64+0x115/0x840 [ 556.135548][T11936] ? clear_bhb_loop+0x40/0x90 [ 556.135578][T11936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.135603][T11936] RIP: 0033:0x7fd4aaf9ce59 [ 556.135622][T11936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 556.135646][T11936] RSP: 002b:00007fd4a91d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.135674][T11936] RAX: ffffffffffffffda RBX: 00007fd4ab216180 RCX: 00007fd4aaf9ce59 [ 556.135690][T11936] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 556.135704][T11936] RBP: 00007fd4ab032d6f R08: 0000000000000000 R09: 0000000000000000 [ 556.135719][T11936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.135733][T11936] R13: 00007fd4ab216218 R14: 00007fd4ab216180 R15: 00007ffc5dd75a68 [ 556.135764][T11936] [ 558.231615][T11965] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1212'. [ 559.398489][T11981] netlink: 9144 bytes leftover after parsing attributes in process `syz.4.1216'. [ 559.448179][T11981] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 560.051873][T11971] hub 27-0:1.0: USB hub found [ 560.116363][T11971] hub 27-0:1.0: 1 port detected [ 561.943810][T11969] Process accounting resumed [ 562.952040][T12014] ubi0: attaching mtd0 [ 563.131951][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.138663][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.187872][T12014] ubi0 error: ubi_add_to_av: two LEBs with same sequence number 1 [ 563.223871][T12024] random: crng reseeded on system resumption [ 563.312367][T12014] eraseblock attaching information dump: [ 563.345327][T11997] vhci_hcd vhci_hcd.1: invalid port number 99 [ 563.405748][T12014] ec 1 [ 563.425575][T11997] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 563.464865][T12014] pnum 0 [ 563.561232][T12014] lnum 0 [ 563.647884][T12014] scrub 0 [ 563.707877][T12014] sqnum 1 [ 563.819840][T12014] Volume identifier header dump: [ 563.923858][T12014] magic 55424921 [ 563.980955][T12014] version 1 [ 564.029339][T12014] vol_type 1 [ 564.087786][T12014] copy_flag 0 [ 564.160650][T12014] compat 5 [ 564.216689][T12014] vol_id 2147479551 [ 564.295951][T12014] lnum 0 [ 564.375753][T12014] data_size 0 [ 564.455820][T12014] used_ebs 0 [ 564.509016][T12014] data_pad 0 [ 564.558209][T12014] sqnum 1 [ 564.600551][T12014] hdr_crc 65b3bd2d [ 564.657981][T12014] Volume identifier header hexdump: [ 565.198110][T12014] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 566.701948][T12063] FAULT_INJECTION: forcing a failure. [ 566.701948][T12063] name failslab, interval 1, probability 0, space 0, times 0 [ 566.811796][T12063] CPU: 0 UID: 0 PID: 12063 Comm: syz.3.1234 Tainted: G L syzkaller #0 PREEMPT(full) [ 566.811835][T12063] Tainted: [L]=SOFTLOCKUP [ 566.811844][T12063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 566.811859][T12063] Call Trace: [ 566.811867][T12063] [ 566.811877][T12063] dump_stack_lvl+0x100/0x190 [ 566.811925][T12063] should_fail_ex.cold+0x5/0xa [ 566.811957][T12063] should_failslab+0xc2/0x120 [ 566.811987][T12063] __kmalloc_cache_noprof+0x7a/0x6f0 [ 566.812023][T12063] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 566.812071][T12063] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 566.812115][T12063] vidtv_mux_create_pid_ctx_once+0xe6/0x140 [ 566.812157][T12063] vidtv_mux_init+0x748/0xbf0 [ 566.812199][T12063] vidtv_start_feed+0x34e/0x500 [ 566.812227][T12063] ? __pfx_vidtv_start_feed+0x10/0x10 [ 566.812263][T12063] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 566.812309][T12063] dmx_section_feed_start_filtering+0x3a8/0x660 [ 566.812350][T12063] dvb_dmxdev_filter_start+0x767/0xdd0 [ 566.812387][T12063] dvb_demux_do_ioctl+0xe64/0x1200 [ 566.812423][T12063] dvb_usercopy+0x167/0x340 [ 566.812445][T12063] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 566.812474][T12063] ? __pfx_dvb_usercopy+0x10/0x10 [ 566.812507][T12063] ? __fget_files+0x21f/0x3d0 [ 566.812542][T12063] dvb_demux_ioctl+0x29/0x40 [ 566.812564][T12063] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 566.812588][T12063] __x64_sys_ioctl+0x18e/0x210 [ 566.812615][T12063] do_syscall_64+0x115/0x840 [ 566.812649][T12063] ? clear_bhb_loop+0x40/0x90 [ 566.812679][T12063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 566.812704][T12063] RIP: 0033:0x7f3da639ce59 [ 566.812725][T12063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 566.812749][T12063] RSP: 002b:00007f3da45d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 566.812771][T12063] RAX: ffffffffffffffda RBX: 00007f3da6616180 RCX: 00007f3da639ce59 [ 566.812787][T12063] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 566.812802][T12063] RBP: 00007f3da6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 566.812817][T12063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 566.812831][T12063] R13: 00007f3da6616218 R14: 00007f3da6616180 R15: 00007ffc1d6e9638 [ 566.812862][T12063] [ 569.276948][T12075] vhci_hcd vhci_hcd.1: invalid port number 99 [ 569.343421][T12075] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 569.813387][T12070] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 569.886071][T12070] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 569.959476][T12096] nbd: must specify a size in bytes for the device [ 570.476582][T12096] FAULT_INJECTION: forcing a failure. [ 570.476582][T12096] name failslab, interval 1, probability 0, space 0, times 0 [ 570.538098][T12096] CPU: 0 UID: 0 PID: 12096 Comm: syz.4.1241 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.538137][T12096] Tainted: [L]=SOFTLOCKUP [ 570.538146][T12096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 570.538160][T12096] Call Trace: [ 570.538168][T12096] [ 570.538178][T12096] dump_stack_lvl+0x100/0x190 [ 570.538225][T12096] should_fail_ex.cold+0x5/0xa [ 570.538256][T12096] ? mpi_resize+0x1ac/0x250 [ 570.538288][T12096] should_failslab+0xc2/0x120 [ 570.538318][T12096] __kmalloc_noprof+0xe0/0x850 [ 570.538340][T12096] ? __kasan_kmalloc+0xaa/0xb0 [ 570.538369][T12096] mpi_resize+0x1ac/0x250 [ 570.538405][T12096] mpi_powm+0x9ff/0x1e50 [ 570.538451][T12096] ? __pfx_mpi_powm+0x10/0x10 [ 570.538483][T12096] ? mpi_free+0x40/0x150 [ 570.538513][T12096] ? mpi_free+0xe1/0x150 [ 570.538543][T12096] ? kfree+0x223/0x6c0 [ 570.538582][T12096] ? mpi_free+0xe6/0x150 [ 570.538618][T12096] rsa_enc+0x1fe/0x3b0 [ 570.538644][T12096] ? __pfx_rsa_enc+0x10/0x10 [ 570.538669][T12096] ? __virt_addr_valid+0x239/0x430 [ 570.538715][T12096] ? sg_init_one+0xf5/0x1b0 [ 570.538745][T12096] rsassa_pkcs1_verify+0x4eb/0xc20 [ 570.538783][T12096] ? __pfx_rsassa_pkcs1_verify+0x10/0x10 [ 570.538828][T12096] ? rsa_max_size+0xd/0x70 [ 570.538851][T12096] ? rsassa_pkcs1_set_pub_key+0x17d/0x1f0 [ 570.538885][T12096] public_key_verify_signature+0x5ee/0x910 [ 570.538926][T12096] ? __pfx_public_key_verify_signature+0x10/0x10 [ 570.538975][T12096] ? __kmalloc_noprof+0x320/0x850 [ 570.539004][T12096] x509_check_for_self_signed+0x325/0x510 [ 570.539046][T12096] x509_cert_parse+0x60c/0x910 [ 570.539080][T12096] ? kasan_save_stack+0x3f/0x50 [ 570.539106][T12096] ? kasan_save_stack+0x30/0x50 [ 570.539129][T12096] ? kasan_save_track+0x14/0x30 [ 570.539155][T12096] pkcs7_extract_cert+0xa4/0x380 [ 570.539199][T12096] asn1_ber_decoder+0x12b3/0x2170 [ 570.539237][T12096] ? __pfx_asn1_ber_decoder+0x10/0x10 [ 570.539281][T12096] pkcs7_parse_message+0x289/0x870 [ 570.539325][T12096] verify_pkcs7_signature+0x30/0xa0 [ 570.539354][T12096] valid_regdb+0x211/0x590 [ 570.539384][T12096] ? __pfx_valid_regdb+0x10/0x10 [ 570.539416][T12096] reg_reload_regdb+0x11a/0x460 [ 570.539447][T12096] ? __pfx_reg_reload_regdb+0x10/0x10 [ 570.539480][T12096] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 570.539517][T12096] ? nl80211_pre_doit+0x19a/0xae0 [ 570.539558][T12096] genl_family_rcv_msg_doit+0x214/0x300 [ 570.539600][T12096] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 570.539637][T12096] ? genl_get_cmd+0x3e7/0x760 [ 570.539683][T12096] ? bpf_lsm_capable+0x9/0x10 [ 570.539709][T12096] ? security_capable+0x80/0x260 [ 570.539738][T12096] genl_rcv_msg+0x560/0x800 [ 570.539778][T12096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 570.539816][T12096] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 570.539852][T12096] ? __pfx_nl80211_reload_regdb+0x10/0x10 [ 570.539880][T12096] ? __pfx_nl80211_post_doit+0x10/0x10 [ 570.539928][T12096] netlink_rcv_skb+0x159/0x420 [ 570.539961][T12096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 570.540000][T12096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 570.540044][T12096] ? netlink_deliver_tap+0x1ae/0xcc0 [ 570.540079][T12096] genl_rcv+0x28/0x40 [ 570.540112][T12096] netlink_unicast+0x585/0x850 [ 570.540148][T12096] ? __pfx_netlink_unicast+0x10/0x10 [ 570.540190][T12096] netlink_sendmsg+0x8b0/0xda0 [ 570.540227][T12096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.540258][T12096] ? __import_iovec+0x1d2/0x640 [ 570.540295][T12096] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 570.540325][T12096] ____sys_sendmsg+0x9e1/0xb70 [ 570.540356][T12096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 570.540391][T12096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 570.540422][T12096] ? preempt_schedule_thunk+0x16/0x30 [ 570.540464][T12096] ? try_to_wake_up+0x5f6/0x1900 [ 570.540500][T12096] ___sys_sendmsg+0x190/0x1e0 [ 570.540536][T12096] ? __pfx____sys_sendmsg+0x10/0x10 [ 570.540570][T12096] ? futex_private_hash_put+0x107/0x1c0 [ 570.540642][T12096] __sys_sendmsg+0x170/0x220 [ 570.540669][T12096] ? __pfx___sys_sendmsg+0x10/0x10 [ 570.540698][T12096] ? __x64_sys_futex+0x34f/0x4d0 [ 570.540734][T12096] ? rcu_is_watching+0x12/0xc0 [ 570.540766][T12096] do_syscall_64+0x115/0x840 [ 570.540800][T12096] ? clear_bhb_loop+0x40/0x90 [ 570.540860][T12096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.540885][T12096] RIP: 0033:0x7ff67d19ce59 [ 570.540906][T12096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.540929][T12096] RSP: 002b:00007ff67b3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 570.540952][T12096] RAX: ffffffffffffffda RBX: 00007ff67d415fa0 RCX: 00007ff67d19ce59 [ 570.540968][T12096] RDX: 0000000000008000 RSI: 0000200000000200 RDI: 0000000000000007 [ 570.540982][T12096] RBP: 00007ff67d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 570.540997][T12096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 570.541011][T12096] R13: 00007ff67d416038 R14: 00007ff67d415fa0 R15: 00007fff51bb2928 [ 570.541042][T12096] [ 571.734343][T12104] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 575.151967][T12138] vhci_hcd vhci_hcd.1: invalid port number 99 [ 575.220209][T12138] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 577.609411][T12161] vhci_hcd vhci_hcd.1: invalid port number 99 [ 577.640073][T12161] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 578.564693][T12217] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1264'. [ 579.088575][T12218] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1264'. [ 580.357109][ T30] audit: type=1326 audit(1779941185.072:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12222 comm="syz.2.1265" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5cff99ce59 code=0x0 [ 585.302209][T12305] FAULT_INJECTION: forcing a failure. [ 585.302209][T12305] name fail_futex, interval 1, probability 0, space 0, times 0 [ 585.373030][T12305] CPU: 0 UID: 0 PID: 12305 Comm: syz.4.1279 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.373069][T12305] Tainted: [L]=SOFTLOCKUP [ 585.373078][T12305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 585.373093][T12305] Call Trace: [ 585.373100][T12305] [ 585.373110][T12305] dump_stack_lvl+0x100/0x190 [ 585.373157][T12305] should_fail_ex.cold+0x5/0xa [ 585.373204][T12305] get_futex_key+0x1d2/0x1510 [ 585.373277][T12305] ? __pfx_get_futex_key+0x10/0x10 [ 585.373315][T12305] ? futex_hash+0x2ad/0x370 [ 585.373356][T12305] ? futex_hash+0x141/0x370 [ 585.373398][T12305] futex_wake+0xea/0x530 [ 585.373428][T12305] ? __pfx_futex_wait+0x10/0x10 [ 585.373459][T12305] ? __pfx_futex_wake+0x10/0x10 [ 585.373494][T12305] ? poll_select_finish+0x36e/0x670 [ 585.373521][T12305] ? ksys_shmctl.constprop.0+0x19b/0x390 [ 585.373565][T12305] do_futex+0x32b/0x350 [ 585.373590][T12305] ? __pfx_do_futex+0x10/0x10 [ 585.373623][T12305] __x64_sys_futex+0x34f/0x4d0 [ 585.373652][T12305] ? __pfx___x64_sys_futex+0x10/0x10 [ 585.373684][T12305] ? rcu_is_watching+0x12/0xc0 [ 585.373716][T12305] do_syscall_64+0x115/0x840 [ 585.373750][T12305] ? clear_bhb_loop+0x40/0x90 [ 585.373780][T12305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.373805][T12305] RIP: 0033:0x7ff67d19ce59 [ 585.373825][T12305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.373849][T12305] RSP: 002b:00007ff67b3d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 585.373873][T12305] RAX: ffffffffffffffda RBX: 00007ff67d416098 RCX: 00007ff67d19ce59 [ 585.373889][T12305] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff67d41609c [ 585.373904][T12305] RBP: 00007ff67d416090 R08: 0000000000000001 R09: 0000000000000000 [ 585.373918][T12305] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 585.373932][T12305] R13: 00007ff67d416128 R14: 00007fff51bb2840 R15: 00007fff51bb2928 [ 585.373963][T12305] [ 586.830799][T12319] FAULT_INJECTION: forcing a failure. [ 586.830799][T12319] name failslab, interval 1, probability 0, space 0, times 0 [ 586.909991][T12319] CPU: 0 UID: 0 PID: 12319 Comm: syz.4.1282 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.910029][T12319] Tainted: [L]=SOFTLOCKUP [ 586.910036][T12319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 586.910050][T12319] Call Trace: [ 586.910057][T12319] [ 586.910066][T12319] dump_stack_lvl+0x100/0x190 [ 586.910117][T12319] should_fail_ex.cold+0x5/0xa [ 586.910146][T12319] ? tomoyo_realpath_from_path+0xb6/0x690 [ 586.910180][T12319] should_failslab+0xc2/0x120 [ 586.910208][T12319] __kmalloc_noprof+0xe0/0x850 [ 586.910229][T12319] ? kfree+0x1dd/0x6c0 [ 586.910266][T12319] tomoyo_realpath_from_path+0xb6/0x690 [ 586.910311][T12319] tomoyo_check_open_permission+0x2af/0x3c0 [ 586.910342][T12319] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 586.910382][T12319] ? hook_file_open+0x24e/0x7a0 [ 586.910425][T12319] ? lock_acquire+0x1b1/0x370 [ 586.910471][T12319] tomoyo_file_open+0x6b/0x90 [ 586.910494][T12319] security_file_open+0xb5/0x1e0 [ 586.910527][T12319] do_dentry_open+0x588/0x14d0 [ 586.910565][T12319] vfs_open+0x82/0x3f0 [ 586.910603][T12319] path_openat+0x208c/0x31a0 [ 586.910642][T12319] ? __pfx_path_openat+0x10/0x10 [ 586.910683][T12319] do_file_open+0x20e/0x430 [ 586.910716][T12319] ? __pfx_do_file_open+0x10/0x10 [ 586.910755][T12319] ? __pfx_kfree_link+0x10/0x10 [ 586.910787][T12319] ? alloc_fd+0x476/0x790 [ 586.910820][T12319] ? do_getname+0x191/0x390 [ 586.910858][T12319] do_sys_openat2+0x10d/0x1e0 [ 586.910895][T12319] ? __pfx_do_sys_openat2+0x10/0x10 [ 586.910942][T12319] __x64_sys_openat+0x12d/0x210 [ 586.910980][T12319] ? __pfx___x64_sys_openat+0x10/0x10 [ 586.911017][T12319] ? ksys_write+0x1ac/0x250 [ 586.911048][T12319] ? rcu_is_watching+0x12/0xc0 [ 586.911079][T12319] do_syscall_64+0x115/0x840 [ 586.911116][T12319] ? clear_bhb_loop+0x40/0x90 [ 586.911144][T12319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.911168][T12319] RIP: 0033:0x7ff67d15d68e [ 586.911186][T12319] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 586.911210][T12319] RSP: 002b:00007ff67b3d4f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 586.911232][T12319] RAX: ffffffffffffffda RBX: 00007ff67b3d56c0 RCX: 00007ff67d15d68e [ 586.911248][T12319] RDX: 0000000000000002 RSI: 00007ff67d232676 RDI: ffffffffffffff9c [ 586.911262][T12319] RBP: 00007ff67d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 586.911277][T12319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 586.911291][T12319] R13: 00007ff67d416128 R14: 00007ff67d416090 R15: 00007fff51bb2928 [ 586.911321][T12319] [ 586.914920][T12319] ERROR: Out of memory at tomoyo_realpath_from_path. [ 587.646251][T12303] Process accounting resumed [ 588.922896][T12310] Process accounting paused [ 592.014815][T12373] Process accounting paused [ 592.572615][T12372] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 598.326838][T12452] FAULT_INJECTION: forcing a failure. [ 598.326838][T12452] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.397323][T12452] CPU: 0 UID: 0 PID: 12452 Comm: syz.0.1313 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.397360][T12452] Tainted: [L]=SOFTLOCKUP [ 598.397369][T12452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.397383][T12452] Call Trace: [ 598.397390][T12452] [ 598.397399][T12452] dump_stack_lvl+0x100/0x190 [ 598.397444][T12452] should_fail_ex.cold+0x5/0xa [ 598.397474][T12452] _copy_from_user+0x2e/0xd0 [ 598.397509][T12452] snd_seq_write+0x413/0x6d0 [ 598.397549][T12452] ? __pfx_snd_seq_write+0x10/0x10 [ 598.397583][T12452] ? bpf_lsm_file_permission+0x9/0x10 [ 598.397605][T12452] ? security_file_permission+0x76/0x210 [ 598.397638][T12452] ? rw_verify_area+0xce/0x6d0 [ 598.397664][T12452] vfs_write+0x2aa/0x1070 [ 598.397691][T12452] ? __pfx_snd_seq_write+0x10/0x10 [ 598.397725][T12452] ? __pfx_vfs_write+0x10/0x10 [ 598.397750][T12452] ? find_held_lock+0x2b/0x80 [ 598.397779][T12452] ? __fget_files+0x215/0x3d0 [ 598.397805][T12452] ? __fget_files+0x215/0x3d0 [ 598.397837][T12452] ? __fget_files+0x21f/0x3d0 [ 598.397872][T12452] ksys_write+0x1f8/0x250 [ 598.397899][T12452] ? __pfx_ksys_write+0x10/0x10 [ 598.397928][T12452] ? rcu_is_watching+0x12/0xc0 [ 598.397959][T12452] do_syscall_64+0x115/0x840 [ 598.397998][T12452] ? clear_bhb_loop+0x40/0x90 [ 598.398027][T12452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.398051][T12452] RIP: 0033:0x7fd4aaf9ce59 [ 598.398069][T12452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.398092][T12452] RSP: 002b:00007fd4abd8b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 598.398114][T12452] RAX: ffffffffffffffda RBX: 00007fd4ab215fa0 RCX: 00007fd4aaf9ce59 [ 598.398129][T12452] RDX: 00000000fffffd6c RSI: 0000200000000180 RDI: 0000000000000003 [ 598.398143][T12452] RBP: 00007fd4abd8b090 R08: 0000000000000000 R09: 0000000000000000 [ 598.398157][T12452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.398171][T12452] R13: 00007fd4ab216038 R14: 00007fd4ab215fa0 R15: 00007ffc5dd75a68 [ 598.398201][T12452] [ 600.862329][T12488] vhci_hcd vhci_hcd.2: invalid port number 194 [ 600.960192][T12488] vhci_hcd vhci_hcd.2: invalid port number 194 [ 601.305440][ T30] audit: type=1804 audit(1779941206.032:15): pid=12488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1319" name="/newroot/333/file0" dev="tmpfs" ino=1781 res=1 errno=0 [ 601.315689][ T30] audit: type=1804 audit(1779941206.042:16): pid=12496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1319" name="/newroot/333/file0" dev="tmpfs" ino=1781 res=1 errno=0 [ 603.520217][T12527] sd 0:0:1:0: PR command failed: 1026 [ 603.555400][T12527] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 603.596154][T12527] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 603.906616][T12518] Process accounting resumed [ 605.967733][T12584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1339'. [ 606.118706][T12578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1338'. [ 606.207018][T12584] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.387742][T12582] ptp ptp0: only physical clock in use now [ 606.458846][T12584] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.542273][T12576] zswap: compressor not available [ 607.178019][T12605] FAULT_INJECTION: forcing a failure. [ 607.178019][T12605] name failslab, interval 1, probability 0, space 0, times 0 [ 607.395543][T12605] CPU: 0 UID: 0 PID: 12605 Comm: syz.0.1342 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.395580][T12605] Tainted: [L]=SOFTLOCKUP [ 607.395588][T12605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 607.395602][T12605] Call Trace: [ 607.395609][T12605] [ 607.395617][T12605] dump_stack_lvl+0x100/0x190 [ 607.395663][T12605] should_fail_ex.cold+0x5/0xa [ 607.395693][T12605] should_failslab+0xc2/0x120 [ 607.395722][T12605] __kmalloc_cache_noprof+0x7a/0x6f0 [ 607.395758][T12605] ? vidtv_psi_pmt_table_init+0x4c/0x430 [ 607.395796][T12605] vidtv_psi_pmt_table_init+0x4c/0x430 [ 607.395830][T12605] vidtv_psi_pmt_create_sec_for_each_pat_entry+0x293/0x670 [ 607.395872][T12605] vidtv_channel_si_init+0xf2d/0x18f0 [ 607.395916][T12605] vidtv_mux_init+0x526/0xbf0 [ 607.395955][T12605] vidtv_start_feed+0x34e/0x500 [ 607.395983][T12605] ? __pfx_vidtv_start_feed+0x10/0x10 [ 607.396010][T12605] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 607.396052][T12605] dmx_section_feed_start_filtering+0x3a8/0x660 [ 607.396092][T12605] dvb_dmxdev_filter_start+0x767/0xdd0 [ 607.396126][T12605] dvb_demux_do_ioctl+0xe64/0x1200 [ 607.396196][T12605] dvb_usercopy+0x167/0x340 [ 607.396218][T12605] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 607.396246][T12605] ? __pfx_dvb_usercopy+0x10/0x10 [ 607.396281][T12605] ? __fget_files+0x21f/0x3d0 [ 607.396315][T12605] dvb_demux_ioctl+0x29/0x40 [ 607.396337][T12605] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 607.396361][T12605] __x64_sys_ioctl+0x18e/0x210 [ 607.396388][T12605] do_syscall_64+0x115/0x840 [ 607.396421][T12605] ? clear_bhb_loop+0x40/0x90 [ 607.396450][T12605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.396475][T12605] RIP: 0033:0x7fd4aaf9ce59 [ 607.396495][T12605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.396519][T12605] RSP: 002b:00007fd4a91d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 607.396542][T12605] RAX: ffffffffffffffda RBX: 00007fd4ab216180 RCX: 00007fd4aaf9ce59 [ 607.396559][T12605] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 607.396573][T12605] RBP: 00007fd4ab032d6f R08: 0000000000000000 R09: 0000000000000000 [ 607.396588][T12605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.396602][T12605] R13: 00007fd4ab216218 R14: 00007fd4ab216180 R15: 00007ffc5dd75a68 [ 607.396633][T12605] [ 609.785898][T12631] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 610.176790][T12641] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 611.294109][T12643] Bluetooth: hci4: command 0x0406 tx timeout [ 616.392598][T12741] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 618.642489][T12722] Process accounting paused [ 619.365083][T12768] Process accounting resumed [ 619.693330][T12784] tc_dump_action: action bad kind [ 620.475561][T12796] nfs4: Unknown parameter 'ECH];^YىZL`~^g ' [ 620.516211][T12802] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 622.215460][T12836] FAULT_INJECTION: forcing a failure. [ 622.215460][T12836] name fail_futex, interval 1, probability 0, space 0, times 0 [ 622.307280][T12837] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'. [ 622.328409][T12836] CPU: 0 UID: 0 PID: 12836 Comm: syz.4.1379 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.328448][T12836] Tainted: [L]=SOFTLOCKUP [ 622.328456][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 622.328471][T12836] Call Trace: [ 622.328478][T12836] [ 622.328487][T12836] dump_stack_lvl+0x100/0x190 [ 622.328533][T12836] should_fail_ex.cold+0x5/0xa [ 622.328559][T12836] ? rcu_is_watching+0x12/0xc0 [ 622.328591][T12836] get_futex_key+0x1d2/0x1510 [ 622.328633][T12836] ? __pfx_get_futex_key+0x10/0x10 [ 622.328683][T12836] futex_wait_setup+0x83/0x510 [ 622.328737][T12836] __futex_wait+0x19f/0x300 [ 622.328771][T12836] ? __pfx___futex_wait+0x10/0x10 [ 622.328806][T12836] ? __pfx_futex_wake_mark+0x10/0x10 [ 622.328842][T12836] ? find_held_lock+0x2b/0x80 [ 622.328872][T12836] ? futex_wake+0x456/0x530 [ 622.328908][T12836] futex_wait+0xe6/0x370 [ 622.328939][T12836] ? __pfx_futex_wait+0x10/0x10 [ 622.328975][T12836] ? rcu_is_watching+0x12/0xc0 [ 622.329002][T12836] ? dvb_usercopy+0x1c0/0x340 [ 622.329023][T12836] ? kfree+0x1dd/0x6c0 [ 622.329061][T12836] do_futex+0x1ef/0x350 [ 622.329086][T12836] ? __pfx_do_futex+0x10/0x10 [ 622.329119][T12836] __x64_sys_futex+0x34f/0x4d0 [ 622.329148][T12836] ? __pfx___x64_sys_futex+0x10/0x10 [ 622.329180][T12836] ? rcu_is_watching+0x12/0xc0 [ 622.329214][T12836] do_syscall_64+0x115/0x840 [ 622.329249][T12836] ? clear_bhb_loop+0x40/0x90 [ 622.329279][T12836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.329304][T12836] RIP: 0033:0x7ff67d19ce59 [ 622.329323][T12836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.329347][T12836] RSP: 002b:00007ff67b3b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 622.329370][T12836] RAX: ffffffffffffffda RBX: 00007ff67d416188 RCX: 00007ff67d19ce59 [ 622.329386][T12836] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff67d416188 [ 622.329401][T12836] RBP: 00007ff67d416180 R08: 0000000000000000 R09: 0000000000000000 [ 622.329416][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.329430][T12836] R13: 00007ff67d416218 R14: 00007fff51bb2840 R15: 00007fff51bb2928 [ 622.329459][T12836] [ 623.133077][T12827] zswap: compressor not available [ 623.213046][T12824] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 623.252946][T12824] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 624.580892][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.587247][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.267334][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1392'. [ 626.501984][T12896] zswap: compressor not available [ 627.178272][T12910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1395'. [ 628.328555][T12923] netlink: 'syz.0.1399': attribute type 4 has an invalid length. [ 629.763368][T12942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 630.099877][T12940] zswap: compressor not available [ 630.350420][T12927] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 630.390356][T12927] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 632.981288][T12981] FAULT_INJECTION: forcing a failure. [ 632.981288][T12981] name fail_futex, interval 1, probability 0, space 0, times 0 [ 633.044372][T12981] CPU: 0 UID: 0 PID: 12981 Comm: syz.4.1409 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.044427][T12981] Tainted: [L]=SOFTLOCKUP [ 633.044435][T12981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 633.044448][T12981] Call Trace: [ 633.044455][T12981] [ 633.044464][T12981] dump_stack_lvl+0x100/0x190 [ 633.044508][T12981] should_fail_ex.cold+0x5/0xa [ 633.044550][T12981] get_futex_key+0xf78/0x1510 [ 633.044589][T12981] ? __pfx_get_futex_key+0x10/0x10 [ 633.044624][T12981] ? lock_acquire+0x1b1/0x370 [ 633.044668][T12981] futex_wake+0xea/0x530 [ 633.044703][T12981] ? __pfx_futex_wake+0x10/0x10 [ 633.044731][T12981] ? exit_mm_release+0x19/0x30 [ 633.044771][T12981] do_futex+0x32b/0x350 [ 633.044794][T12981] ? __pfx_do_futex+0x10/0x10 [ 633.044818][T12981] ? __might_fault+0xc5/0x140 [ 633.044860][T12981] mm_release+0x24a/0x2f0 [ 633.044888][T12981] do_exit+0x707/0x2af0 [ 633.044925][T12981] ? __pfx_do_exit+0x10/0x10 [ 633.044978][T12981] ? do_raw_spin_lock+0x128/0x260 [ 633.045003][T12981] ? find_held_lock+0x2b/0x80 [ 633.045031][T12981] ? get_signal+0x7e5/0x2210 [ 633.045062][T12981] do_group_exit+0xd5/0x2a0 [ 633.045099][T12981] get_signal+0x20ff/0x2210 [ 633.045134][T12981] ? rcu_is_watching+0x12/0xc0 [ 633.045160][T12981] ? ath10k_add_interface+0x17c0/0x48b0 [ 633.045195][T12981] ? __pfx_get_signal+0x10/0x10 [ 633.045226][T12981] ? do_futex+0x192/0x350 [ 633.045251][T12981] arch_do_signal_or_restart+0x91/0x7a0 [ 633.045287][T12981] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 633.045331][T12981] ? rcu_is_watching+0x12/0xc0 [ 633.045360][T12981] exit_to_user_mode_loop+0x98/0x670 [ 633.045397][T12981] ? rcu_is_watching+0x12/0xc0 [ 633.045425][T12981] do_syscall_64+0x652/0x840 [ 633.045457][T12981] ? clear_bhb_loop+0x40/0x90 [ 633.045485][T12981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.045509][T12981] RIP: 0033:0x7ff67d19ce59 [ 633.045527][T12981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.045549][T12981] RSP: 002b:00007ff67b3b40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 633.045571][T12981] RAX: fffffffffffffe00 RBX: 00007ff67d416188 RCX: 00007ff67d19ce59 [ 633.045586][T12981] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff67d416188 [ 633.045601][T12981] RBP: 00007ff67d416180 R08: 0000000000000000 R09: 0000000000000000 [ 633.045615][T12981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.045628][T12981] R13: 00007ff67d416218 R14: 00007fff51bb2840 R15: 00007fff51bb2928 [ 633.045656][T12981] [ 633.356127][T12985] FAULT_INJECTION: forcing a failure. [ 633.356127][T12985] name fail_futex, interval 1, probability 0, space 0, times 0 [ 633.369046][T12985] CPU: 0 UID: 0 PID: 12985 Comm: syz.0.1410 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.369080][T12985] Tainted: [L]=SOFTLOCKUP [ 633.369087][T12985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 633.369101][T12985] Call Trace: [ 633.369109][T12985] [ 633.369117][T12985] dump_stack_lvl+0x100/0x190 [ 633.369161][T12985] should_fail_ex.cold+0x5/0xa [ 633.369191][T12985] get_futex_key+0x1d2/0x1510 [ 633.369233][T12985] ? __pfx_get_futex_key+0x10/0x10 [ 633.369270][T12985] ? lock_acquire+0x1b1/0x370 [ 633.369316][T12985] futex_wake+0xea/0x530 [ 633.369348][T12985] ? __pfx_futex_wake+0x10/0x10 [ 633.369376][T12985] ? exit_mm_release+0x19/0x30 [ 633.369417][T12985] do_futex+0x32b/0x350 [ 633.369442][T12985] ? __pfx_do_futex+0x10/0x10 [ 633.369464][T12985] ? __might_fault+0xc5/0x140 [ 633.369508][T12985] mm_release+0x24a/0x2f0 [ 633.369536][T12985] do_exit+0x707/0x2af0 [ 633.369576][T12985] ? __pfx_do_exit+0x10/0x10 [ 633.369610][T12985] ? do_raw_spin_lock+0x128/0x260 [ 633.369635][T12985] ? find_held_lock+0x2b/0x80 [ 633.369672][T12985] ? get_signal+0x7e5/0x2210 [ 633.369703][T12985] do_group_exit+0xd5/0x2a0 [ 633.369741][T12985] get_signal+0x20ff/0x2210 [ 633.369776][T12985] ? rcu_is_watching+0x12/0xc0 [ 633.369803][T12985] ? ath10k_add_interface+0x17c0/0x48b0 [ 633.369839][T12985] ? __pfx_get_signal+0x10/0x10 [ 633.369870][T12985] ? do_futex+0x192/0x350 [ 633.369896][T12985] arch_do_signal_or_restart+0x91/0x7a0 [ 633.369933][T12985] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 633.369978][T12985] ? rcu_is_watching+0x12/0xc0 [ 633.370008][T12985] exit_to_user_mode_loop+0x98/0x670 [ 633.370046][T12985] ? rcu_is_watching+0x12/0xc0 [ 633.370075][T12985] do_syscall_64+0x652/0x840 [ 633.370107][T12985] ? clear_bhb_loop+0x40/0x90 [ 633.370135][T12985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.370159][T12985] RIP: 0033:0x7fd4aaf9ce59 [ 633.370178][T12985] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.370202][T12985] RSP: 002b:00007fd4a91d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 633.370224][T12985] RAX: fffffffffffffe00 RBX: 00007fd4ab216188 RCX: 00007fd4aaf9ce59 [ 633.370240][T12985] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4ab216188 [ 633.370254][T12985] RBP: 00007fd4ab216180 R08: 0000000000000000 R09: 0000000000000000 [ 633.370268][T12985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.370294][T12985] R13: 00007fd4ab216218 R14: 00007ffc5dd75980 R15: 00007ffc5dd75a68 [ 633.370322][T12985] [ 634.643769][T12999] Process accounting paused [ 635.268747][T13014] FAULT_INJECTION: forcing a failure. [ 635.268747][T13014] name failslab, interval 1, probability 0, space 0, times 0 [ 635.369135][T13014] CPU: 0 UID: 0 PID: 13014 Comm: syz.3.1416 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.369174][T13014] Tainted: [L]=SOFTLOCKUP [ 635.369183][T13014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 635.369198][T13014] Call Trace: [ 635.369205][T13014] [ 635.369215][T13014] dump_stack_lvl+0x100/0x190 [ 635.369261][T13014] should_fail_ex.cold+0x5/0xa [ 635.369291][T13014] ? security_inode_init_security+0x113/0x370 [ 635.369332][T13014] should_failslab+0xc2/0x120 [ 635.369362][T13014] __kmalloc_noprof+0xe0/0x850 [ 635.369394][T13014] security_inode_init_security+0x113/0x370 [ 635.369436][T13014] ? __pfx_shmem_initxattrs+0x10/0x10 [ 635.369476][T13014] ? __pfx_security_inode_init_security+0x10/0x10 [ 635.369520][T13014] ? make_vfsgid+0xf1/0x140 [ 635.369547][T13014] shmem_mknod+0x2ce/0x480 [ 635.369585][T13014] ? __pfx_shmem_mknod+0x10/0x10 [ 635.369638][T13014] vfs_mknod+0x3a5/0x7f0 [ 635.369666][T13014] filename_mknodat+0x5aa/0x7f0 [ 635.369702][T13014] ? __pfx_filename_mknodat+0x10/0x10 [ 635.369734][T13014] ? strncpy_from_user+0x19d/0x2d0 [ 635.369772][T13014] ? do_getname+0x191/0x390 [ 635.369810][T13014] __x64_sys_mknod+0x8f/0xc0 [ 635.369848][T13014] do_syscall_64+0x115/0x840 [ 635.369883][T13014] ? clear_bhb_loop+0x40/0x90 [ 635.369932][T13014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.369958][T13014] RIP: 0033:0x7f3da639ce59 [ 635.369978][T13014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.370003][T13014] RSP: 002b:00007f3da45f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 635.370026][T13014] RAX: ffffffffffffffda RBX: 00007f3da6616090 RCX: 00007f3da639ce59 [ 635.370043][T13014] RDX: 0000000000000004 RSI: 0000000000001001 RDI: 0000000000000000 [ 635.370058][T13014] RBP: 00007f3da6432d6f R08: 0000000000000000 R09: 0000000000000000 [ 635.370073][T13014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.370088][T13014] R13: 00007f3da6616128 R14: 00007f3da6616090 R15: 00007ffc1d6e9638 [ 635.370120][T13014] [ 637.680676][T13028] vhci_hcd vhci_hcd.1: invalid port number 99 [ 637.752647][T13028] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 638.998650][T13067] random: crng reseeded on system resumption [ 639.635497][T13069] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 639.949417][T13069] File: /dev/ram7 PID: 13069 Comm: syz.0.1425 [ 641.283491][T13101] FAULT_INJECTION: forcing a failure. [ 641.283491][T13101] name fail_futex, interval 1, probability 0, space 0, times 0 [ 641.345345][T13101] CPU: 0 UID: 0 PID: 13101 Comm: syz.3.1432 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.345385][T13101] Tainted: [L]=SOFTLOCKUP [ 641.345395][T13101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.345410][T13101] Call Trace: [ 641.345418][T13101] [ 641.345428][T13101] dump_stack_lvl+0x100/0x190 [ 641.345474][T13101] should_fail_ex.cold+0x5/0xa [ 641.345506][T13101] get_futex_key+0x1d2/0x1510 [ 641.345549][T13101] ? __pfx_get_futex_key+0x10/0x10 [ 641.345589][T13101] ? unwind_get_return_address+0x59/0xa0 [ 641.345623][T13101] ? arch_stack_walk+0xa6/0xf0 [ 641.345659][T13101] futex_wait_setup+0x83/0x510 [ 641.345698][T13101] __futex_wait+0x19f/0x300 [ 641.345732][T13101] ? __pfx___futex_wait+0x10/0x10 [ 641.345768][T13101] ? kasan_save_stack+0x3f/0x50 [ 641.345792][T13101] ? kasan_save_stack+0x30/0x50 [ 641.345820][T13101] ? __pfx_futex_wake_mark+0x10/0x10 [ 641.345855][T13101] ? futex_hash+0x2ad/0x370 [ 641.345896][T13101] ? futex_hash+0x141/0x370 [ 641.345938][T13101] futex_wait+0xe6/0x370 [ 641.345978][T13101] ? __pfx_futex_wait+0x10/0x10 [ 641.346016][T13101] ? _copy_from_user+0x59/0xd0 [ 641.346058][T13101] do_futex+0x1ef/0x350 [ 641.346083][T13101] ? __pfx_do_futex+0x10/0x10 [ 641.346116][T13101] __x64_sys_futex+0x34f/0x4d0 [ 641.346146][T13101] ? __pfx___x64_sys_futex+0x10/0x10 [ 641.346171][T13101] ? ksys_write+0x1ac/0x250 [ 641.346203][T13101] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 641.346242][T13101] ? syscall_user_dispatch+0x76/0x130 [ 641.346272][T13101] do_syscall_64+0x115/0x840 [ 641.346307][T13101] ? clear_bhb_loop+0x40/0x90 [ 641.346338][T13101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.346364][T13101] RIP: 0033:0x7f3da639ce59 [ 641.346384][T13101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.346409][T13101] RSP: 002b:00007f3da45f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 641.346434][T13101] RAX: ffffffffffffffda RBX: 00007f3da6616098 RCX: 00007f3da639ce59 [ 641.346451][T13101] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3da6616098 [ 641.346467][T13101] RBP: 00007f3da6616090 R08: 0000000000000000 R09: 0000000000000000 [ 641.346482][T13101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 641.346496][T13101] R13: 00007f3da6616128 R14: 00007ffc1d6e9550 R15: 00007ffc1d6e9638 [ 641.346527][T13101] [ 642.383927][T13113] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 642.417411][T13116] FAULT_INJECTION: forcing a failure. [ 642.417411][T13116] name failslab, interval 1, probability 0, space 0, times 0 [ 642.490813][T13116] CPU: 0 UID: 0 PID: 13116 Comm: syz.0.1435 Tainted: G L syzkaller #0 PREEMPT(full) [ 642.490860][T13116] Tainted: [L]=SOFTLOCKUP [ 642.490870][T13116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 642.490885][T13116] Call Trace: [ 642.490893][T13116] [ 642.490902][T13116] dump_stack_lvl+0x100/0x190 [ 642.490949][T13116] should_fail_ex.cold+0x5/0xa [ 642.490981][T13116] should_failslab+0xc2/0x120 [ 642.491012][T13116] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 642.491040][T13116] ? vidtv_psi_network_name_desc_init+0x183/0x310 [ 642.491079][T13116] kstrdup+0x51/0xe0 [ 642.491107][T13116] vidtv_psi_network_name_desc_init+0x183/0x310 [ 642.491145][T13116] vidtv_psi_nit_table_init+0x291/0x5f0 [ 642.491180][T13116] ? kasan_save_track+0x14/0x30 [ 642.491209][T13116] vidtv_channel_si_init+0xccf/0x18f0 [ 642.491256][T13116] vidtv_mux_init+0x526/0xbf0 [ 642.491298][T13116] vidtv_start_feed+0x34e/0x500 [ 642.491326][T13116] ? __pfx_vidtv_start_feed+0x10/0x10 [ 642.491356][T13116] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 642.491400][T13116] dmx_section_feed_start_filtering+0x3a8/0x660 [ 642.491442][T13116] dvb_dmxdev_filter_start+0x767/0xdd0 [ 642.491479][T13116] dvb_demux_do_ioctl+0xe64/0x1200 [ 642.491516][T13116] dvb_usercopy+0x167/0x340 [ 642.491538][T13116] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 642.491568][T13116] ? __pfx_dvb_usercopy+0x10/0x10 [ 642.491602][T13116] ? __fget_files+0x21f/0x3d0 [ 642.491638][T13116] dvb_demux_ioctl+0x29/0x40 [ 642.491661][T13116] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 642.491686][T13116] __x64_sys_ioctl+0x18e/0x210 [ 642.491713][T13116] do_syscall_64+0x115/0x840 [ 642.491748][T13116] ? clear_bhb_loop+0x40/0x90 [ 642.491779][T13116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.491805][T13116] RIP: 0033:0x7fd4aaf9ce59 [ 642.491830][T13116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 642.491856][T13116] RSP: 002b:00007fd4a91d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.491879][T13116] RAX: ffffffffffffffda RBX: 00007fd4ab216180 RCX: 00007fd4aaf9ce59 [ 642.491896][T13116] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 642.491911][T13116] RBP: 00007fd4ab032d6f R08: 0000000000000000 R09: 0000000000000000 [ 642.491926][T13116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.491941][T13116] R13: 00007fd4ab216218 R14: 00007fd4ab216180 R15: 00007ffc5dd75a68 [ 642.491973][T13116] [ 645.768944][T13132] vhci_hcd vhci_hcd.1: invalid port number 99 [ 645.864310][T13132] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 646.075653][T13154] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1445'. [ 646.100028][T13155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 646.379828][T13151] zswap: compressor not available [ 647.445135][T13154] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1445'. [ 648.808898][T13174] vhci_hcd vhci_hcd.1: invalid port number 99 [ 648.850916][T13174] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 649.893461][T13164] Process accounting resumed [ 650.366453][T13199] Process accounting paused [ 651.164564][T13215] FAULT_INJECTION: forcing a failure. [ 651.164564][T13215] name failslab, interval 1, probability 0, space 0, times 0 [ 651.234321][T13217] vhci_hcd: not connected 4 [ 651.240565][T13215] CPU: 0 UID: 0 PID: 13215 Comm: syz.0.1452 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.240603][T13215] Tainted: [L]=SOFTLOCKUP [ 651.240613][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 651.240628][T13215] Call Trace: [ 651.240637][T13215] [ 651.240646][T13215] dump_stack_lvl+0x100/0x190 [ 651.240696][T13215] should_fail_ex.cold+0x5/0xa [ 651.240729][T13215] should_failslab+0xc2/0x120 [ 651.240760][T13215] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 651.240787][T13215] ? vidtv_psi_service_desc_init+0x38d/0x4c0 [ 651.240826][T13215] kstrdup+0x51/0xe0 [ 651.240854][T13215] vidtv_psi_service_desc_init+0x38d/0x4c0 [ 651.240891][T13215] vidtv_psi_desc_clone+0x496/0x5d0 [ 651.240935][T13215] vidtv_channel_si_init+0x4b7/0x18f0 [ 651.240983][T13215] vidtv_mux_init+0x526/0xbf0 [ 651.241025][T13215] vidtv_start_feed+0x34e/0x500 [ 651.241054][T13215] ? __pfx_vidtv_start_feed+0x10/0x10 [ 651.241084][T13215] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 651.241130][T13215] dmx_section_feed_start_filtering+0x3a8/0x660 [ 651.241174][T13215] dvb_dmxdev_filter_start+0x767/0xdd0 [ 651.241210][T13215] dvb_demux_do_ioctl+0xe64/0x1200 [ 651.241248][T13215] dvb_usercopy+0x167/0x340 [ 651.241270][T13215] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 651.241299][T13215] ? __pfx_dvb_usercopy+0x10/0x10 [ 651.241333][T13215] ? __fget_files+0x21f/0x3d0 [ 651.241369][T13215] dvb_demux_ioctl+0x29/0x40 [ 651.241391][T13215] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 651.241415][T13215] __x64_sys_ioctl+0x18e/0x210 [ 651.241443][T13215] do_syscall_64+0x115/0x840 [ 651.241477][T13215] ? clear_bhb_loop+0x40/0x90 [ 651.241514][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.241539][T13215] RIP: 0033:0x7fd4aaf9ce59 [ 651.241560][T13215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.241585][T13215] RSP: 002b:00007fd4a91d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 651.241609][T13215] RAX: ffffffffffffffda RBX: 00007fd4ab216180 RCX: 00007fd4aaf9ce59 [ 651.241626][T13215] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000009 [ 651.241641][T13215] RBP: 00007fd4ab032d6f R08: 0000000000000000 R09: 0000000000000000 [ 651.241656][T13215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.241671][T13215] R13: 00007fd4ab216218 R14: 00007fd4ab216180 R15: 00007ffc5dd75a68 [ 651.241702][T13215] [ 651.988975][ T30] audit: type=1804 audit(1779941256.712:17): pid=13222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1454" name="/newroot/sys/kernel/tracing/trace" dev="tracefs" ino=3963 res=1 errno=0 [ 652.275350][T13235] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1457'. [ 653.856589][T13251] FAULT_INJECTION: forcing a failure. [ 653.856589][T13251] name failslab, interval 1, probability 0, space 0, times 0 [ 653.939822][T13251] CPU: 0 UID: 0 PID: 13251 Comm: syz.0.1459 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.939860][T13251] Tainted: [L]=SOFTLOCKUP [ 653.939869][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 653.939883][T13251] Call Trace: [ 653.939891][T13251] [ 653.939900][T13251] dump_stack_lvl+0x100/0x190 [ 653.939945][T13251] should_fail_ex.cold+0x5/0xa [ 653.939976][T13251] should_failslab+0xc2/0x120 [ 653.940005][T13251] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 653.940044][T13251] ? taskstats_exit+0x67b/0xc10 [ 653.940075][T13251] ? rcu_is_watching+0x12/0xc0 [ 653.940107][T13251] taskstats_exit+0x67b/0xc10 [ 653.940138][T13251] ? __pfx_acct_update_integrals+0x10/0x10 [ 653.940173][T13251] ? __pfx_taskstats_exit+0x10/0x10 [ 653.940206][T13251] ? rcu_read_lock_any_held+0x6a/0xa0 [ 653.940236][T13251] ? exit_signals+0x395/0xaf0 [ 653.940267][T13251] do_exit+0x65c/0x2af0 [ 653.940307][T13251] ? __pfx_do_exit+0x10/0x10 [ 653.940342][T13251] ? do_raw_spin_lock+0x128/0x260 [ 653.940367][T13251] ? find_held_lock+0x2b/0x80 [ 653.940396][T13251] ? get_signal+0x7e5/0x2210 [ 653.940426][T13251] do_group_exit+0xd5/0x2a0 [ 653.940464][T13251] get_signal+0x20ff/0x2210 [ 653.940503][T13251] ? __pfx_get_signal+0x10/0x10 [ 653.940534][T13251] ? do_futex+0x192/0x350 [ 653.940560][T13251] arch_do_signal_or_restart+0x91/0x7a0 [ 653.940598][T13251] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 653.940642][T13251] ? rcu_is_watching+0x12/0xc0 [ 653.940672][T13251] exit_to_user_mode_loop+0x98/0x670 [ 653.940716][T13251] ? rcu_is_watching+0x12/0xc0 [ 653.940746][T13251] do_syscall_64+0x652/0x840 [ 653.940779][T13251] ? clear_bhb_loop+0x40/0x90 [ 653.940807][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.940831][T13251] RIP: 0033:0x7fd4aaf9ce59 [ 653.940850][T13251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.940873][T13251] RSP: 002b:00007fd4a91f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 653.940897][T13251] RAX: fffffffffffffe00 RBX: 00007fd4ab216098 RCX: 00007fd4aaf9ce59 [ 653.940913][T13251] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd4ab216098 [ 653.940928][T13251] RBP: 00007fd4ab216090 R08: 0000000000000000 R09: 0000000000000000 [ 653.940943][T13251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.940957][T13251] R13: 00007fd4ab216128 R14: 00007ffc5dd75980 R15: 00007ffc5dd75a68 [ 653.940989][T13251] [ 654.278600][T13246] kAFS: unparsable volume name [ 655.365705][T13270] [U] ^@ [ 655.514910][T13273] FAULT_INJECTION: forcing a failure. [ 655.514910][T13273] name fail_futex, interval 1, probability 0, space 0, times 0 [ 655.612144][T13273] CPU: 0 UID: 0 PID: 13273 Comm: syz.4.1464 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.612183][T13273] Tainted: [L]=SOFTLOCKUP [ 655.612192][T13273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 655.612208][T13273] Call Trace: [ 655.612216][T13273] [ 655.612226][T13273] dump_stack_lvl+0x100/0x190 [ 655.612274][T13273] should_fail_ex.cold+0x5/0xa [ 655.612306][T13273] get_futex_key+0x1d2/0x1510 [ 655.612349][T13273] ? __pfx_get_futex_key+0x10/0x10 [ 655.612390][T13273] ? putname+0xb1/0x110 [ 655.612422][T13273] ? kasan_save_stack+0x3f/0x50 [ 655.612446][T13273] ? kasan_save_stack+0x30/0x50 [ 655.612469][T13273] ? kasan_save_track+0x14/0x30 [ 655.612493][T13273] ? kasan_save_free_info+0x3b/0x70 [ 655.612527][T13273] ? __kasan_slab_free+0x5f/0x80 [ 655.612552][T13273] ? kmem_cache_free+0x127/0x6c0 [ 655.612593][T13273] futex_wake+0xea/0x530 [ 655.612626][T13273] ? __pfx_futex_wake+0x10/0x10 [ 655.612668][T13273] do_futex+0x32b/0x350 [ 655.612694][T13273] ? __pfx_do_futex+0x10/0x10 [ 655.612727][T13273] __x64_sys_futex+0x34f/0x4d0 [ 655.612757][T13273] ? __pfx___x64_sys_futex+0x10/0x10 [ 655.612789][T13273] ? rcu_is_watching+0x12/0xc0 [ 655.612821][T13273] do_syscall_64+0x115/0x840 [ 655.612863][T13273] ? clear_bhb_loop+0x40/0x90 [ 655.612894][T13273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.612920][T13273] RIP: 0033:0x7ff67d19ce59 [ 655.612941][T13273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.612965][T13273] RSP: 002b:00007ff67b3d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 655.612989][T13273] RAX: ffffffffffffffda RBX: 00007ff67d416098 RCX: 00007ff67d19ce59 [ 655.613006][T13273] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff67d41609c [ 655.613022][T13273] RBP: 00007ff67d416090 R08: 0000000000000001 R09: 0000000000000000 [ 655.613037][T13273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.613052][T13273] R13: 00007ff67d416128 R14: 00007fff51bb2840 R15: 00007fff51bb2928 [ 655.613082][T13273] [ 656.774677][T13283] openvswitch: netlink: IP tunnel dst address not specified [ 658.708961][T13312] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1474'. [ 662.953162][T13357] FAULT_INJECTION: forcing a failure. [ 662.953162][T13357] name failslab, interval 1, probability 0, space 0, times 0 [ 663.009297][T13357] CPU: 0 UID: 0 PID: 13357 Comm: syz.4.1483 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.009335][T13357] Tainted: [L]=SOFTLOCKUP [ 663.009344][T13357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 663.009359][T13357] Call Trace: [ 663.009366][T13357] [ 663.009375][T13357] dump_stack_lvl+0x100/0x190 [ 663.009422][T13357] should_fail_ex.cold+0x5/0xa [ 663.009452][T13357] should_failslab+0xc2/0x120 [ 663.009482][T13357] __kmalloc_cache_noprof+0x7a/0x6f0 [ 663.009517][T13357] ? snd_seq_oss_open+0x54/0xa10 [ 663.009554][T13357] snd_seq_oss_open+0x54/0xa10 [ 663.009592][T13357] odev_open+0x6f/0x90 [ 663.009619][T13357] ? __pfx_odev_open+0x10/0x10 [ 663.009650][T13357] soundcore_open+0x2e3/0x5a0 [ 663.009683][T13357] ? __pfx_soundcore_open+0x10/0x10 [ 663.009713][T13357] chrdev_open+0x234/0x6a0 [ 663.009746][T13357] ? __pfx_apparmor_file_open+0x10/0x10 [ 663.009773][T13357] ? __pfx_chrdev_open+0x10/0x10 [ 663.009804][T13357] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 663.009842][T13357] do_dentry_open+0x6ab/0x14d0 [ 663.009876][T13357] ? __pfx_chrdev_open+0x10/0x10 [ 663.009913][T13357] vfs_open+0x82/0x3f0 [ 663.009951][T13357] path_openat+0x208c/0x31a0 [ 663.009991][T13357] ? __pfx_path_openat+0x10/0x10 [ 663.010032][T13357] do_file_open+0x20e/0x430 [ 663.010064][T13357] ? __pfx_do_file_open+0x10/0x10 [ 663.010115][T13357] ? alloc_fd+0x476/0x790 [ 663.010146][T13357] ? do_getname+0x191/0x390 [ 663.010184][T13357] do_sys_openat2+0x10d/0x1e0 [ 663.010222][T13357] ? __pfx_do_sys_openat2+0x10/0x10 [ 663.010257][T13357] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 663.010297][T13357] ? __fget_files+0x21f/0x3d0 [ 663.010329][T13357] __x64_sys_openat+0x12d/0x210 [ 663.010367][T13357] ? __pfx___x64_sys_openat+0x10/0x10 [ 663.010403][T13357] ? ksys_write+0x1ac/0x250 [ 663.010434][T13357] ? rcu_is_watching+0x12/0xc0 [ 663.010466][T13357] do_syscall_64+0x115/0x840 [ 663.010498][T13357] ? clear_bhb_loop+0x40/0x90 [ 663.010527][T13357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.010551][T13357] RIP: 0033:0x7ff67d19ce59 [ 663.010571][T13357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.010594][T13357] RSP: 002b:00007ff67b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 663.010618][T13357] RAX: ffffffffffffffda RBX: 00007ff67d415fa0 RCX: 00007ff67d19ce59 [ 663.010634][T13357] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 663.010648][T13357] RBP: 00007ff67b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 663.010663][T13357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.010677][T13357] R13: 00007ff67d416038 R14: 00007ff67d415fa0 R15: 00007fff51bb2928 [ 663.010707][T13357] [ 664.920870][T13379] netlink: 334 bytes leftover after parsing attributes in process `syz.4.1489'. [ 665.867087][T13366] Process accounting resumed [ 666.020430][T13403] FAULT_INJECTION: forcing a failure. [ 666.020430][T13403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 666.092267][T13403] CPU: 0 UID: 0 PID: 13403 Comm: syz.0.1492 Tainted: G L syzkaller #0 PREEMPT(full) [ 666.092305][T13403] Tainted: [L]=SOFTLOCKUP [ 666.092314][T13403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 666.092328][T13403] Call Trace: [ 666.092336][T13403] [ 666.092346][T13403] dump_stack_lvl+0x100/0x190 [ 666.092391][T13403] should_fail_ex.cold+0x5/0xa [ 666.092422][T13403] _copy_to_user+0x32/0xd0 [ 666.092462][T13403] simple_read_from_buffer+0xcb/0x170 [ 666.092492][T13403] proc_fail_nth_read+0x1af/0x230 [ 666.092532][T13403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 666.092578][T13403] ? rw_verify_area+0xce/0x6d0 [ 666.092602][T13403] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 666.092640][T13403] vfs_read+0x1e4/0xb30 [ 666.092670][T13403] ? __pfx_vfs_read+0x10/0x10 [ 666.092696][T13403] ? __fget_files+0x215/0x3d0 [ 666.092731][T13403] ? __fget_files+0x21f/0x3d0 [ 666.092767][T13403] ksys_read+0x12a/0x250 [ 666.092793][T13403] ? __pfx_ksys_read+0x10/0x10 [ 666.092823][T13403] ? rcu_is_watching+0x12/0xc0 [ 666.092854][T13403] do_syscall_64+0x115/0x840 [ 666.092888][T13403] ? clear_bhb_loop+0x40/0x90 [ 666.092918][T13403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.092943][T13403] RIP: 0033:0x7fd4aaf5d68e [ 666.092962][T13403] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 666.092986][T13403] RSP: 002b:00007fd4abd8afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 666.093009][T13403] RAX: ffffffffffffffda RBX: 00007fd4abd8b6c0 RCX: 00007fd4aaf5d68e [ 666.093026][T13403] RDX: 000000000000000f RSI: 00007fd4abd8b0a0 RDI: 0000000000000004 [ 666.093040][T13403] RBP: 00007fd4abd8b090 R08: 0000000000000000 R09: 0000000000000000 [ 666.093054][T13403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 666.093069][T13403] R13: 00007fd4ab216038 R14: 00007fd4ab215fa0 R15: 00007ffc5dd75a68 [ 666.093099][T13403] [ 667.062506][T13413] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1494'. [ 669.012664][T13435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1498'. [ 669.132495][T13416] vhci_hcd vhci_hcd.1: invalid port number 99 [ 669.164668][T13416] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 669.299929][T13432] zswap: compressor not available [ 670.108849][T13450] FAULT_INJECTION: forcing a failure. [ 670.108849][T13450] name failslab, interval 1, probability 0, space 0, times 0 [ 670.187485][T13450] CPU: 0 UID: 0 PID: 13450 Comm: syz.4.1503 Tainted: G L syzkaller #0 PREEMPT(full) [ 670.187523][T13450] Tainted: [L]=SOFTLOCKUP [ 670.187531][T13450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 670.187546][T13450] Call Trace: [ 670.187554][T13450] [ 670.187564][T13450] dump_stack_lvl+0x100/0x190 [ 670.187609][T13450] should_fail_ex.cold+0x5/0xa [ 670.187640][T13450] ? tomoyo_realpath_from_path+0xb6/0x690 [ 670.187675][T13450] should_failslab+0xc2/0x120 [ 670.187704][T13450] __kmalloc_noprof+0xe0/0x850 [ 670.187726][T13450] ? kfree+0x1dd/0x6c0 [ 670.187764][T13450] tomoyo_realpath_from_path+0xb6/0x690 [ 670.187806][T13450] tomoyo_path_number_perm+0x23c/0x580 [ 670.187835][T13450] ? tomoyo_path_number_perm+0x22e/0x580 [ 670.187866][T13450] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 670.187924][T13450] ? find_held_lock+0x2b/0x80 [ 670.187954][T13450] ? __fget_files+0x215/0x3d0 [ 670.187982][T13450] ? hook_file_ioctl_common+0x149/0x410 [ 670.188012][T13450] ? __fget_files+0x215/0x3d0 [ 670.188044][T13450] ? __fget_files+0x21f/0x3d0 [ 670.188076][T13450] security_file_ioctl+0xd3/0x230 [ 670.188108][T13450] __x64_sys_ioctl+0xb7/0x210 [ 670.188134][T13450] do_syscall_64+0x115/0x840 [ 670.188173][T13450] ? clear_bhb_loop+0x40/0x90 [ 670.188202][T13450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 670.188226][T13450] RIP: 0033:0x7ff67d19ce59 [ 670.188245][T13450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 670.188268][T13450] RSP: 002b:00007ff67b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.188290][T13450] RAX: ffffffffffffffda RBX: 00007ff67d415fa0 RCX: 00007ff67d19ce59 [ 670.188306][T13450] RDX: 0000200000000040 RSI: 000000004068aea3 RDI: 0000000000000005 [ 670.188321][T13450] RBP: 00007ff67b3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 670.188336][T13450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.188350][T13450] R13: 00007ff67d416038 R14: 00007ff67d415fa0 R15: 00007fff51bb2928 [ 670.188380][T13450] [ 670.188389][T13450] ERROR: Out of memory at tomoyo_realpath_from_path. [ 671.483331][T13466] netlink: zone id is out of range [ 671.519435][T13466] netlink: zone id is out of range [ 671.586752][T13466] netlink: zone id is out of range [ 671.674689][T13466] netlink: zone id is out of range [ 671.742235][T13466] netlink: zone id is out of range [ 671.825705][T13466] netlink: zone id is out of range [ 671.858951][T13466] netlink: zone id is out of range [ 671.946600][T13466] netlink: zone id is out of range [ 672.039402][T13466] netlink: zone id is out of range [ 672.131504][T13466] netlink: zone id is out of range [ 672.872052][T13482] hub 1-0:1.0: USB hub found [ 672.928806][T13482] hub 1-0:1.0: 1 port detected [ 673.581412][T13485] hub 1-0:1.0: USB hub found [ 673.664862][T13485] hub 1-0:1.0: 1 port detected [ 674.119608][T13482] FAULT_INJECTION: forcing a failure. [ 674.119608][T13482] name failslab, interval 1, probability 0, space 0, times 0 [ 674.185216][T13482] CPU: 0 UID: 0 PID: 13482 Comm: syz.4.1511 Tainted: G L syzkaller #0 PREEMPT(full) [ 674.185257][T13482] Tainted: [L]=SOFTLOCKUP [ 674.185266][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 674.185281][T13482] Call Trace: [ 674.185290][T13482] [ 674.185299][T13482] dump_stack_lvl+0x100/0x190 [ 674.185347][T13482] should_fail_ex.cold+0x5/0xa [ 674.185379][T13482] should_failslab+0xc2/0x120 [ 674.185410][T13482] __kmalloc_cache_noprof+0x7a/0x6f0 [ 674.185447][T13482] ? single_open+0x4d/0x1d0 [ 674.185468][T13482] ? __pfx___debugfs_file_get+0x10/0x10 [ 674.185509][T13482] ? __pfx_edid_show+0x10/0x10 [ 674.185537][T13482] ? __pfx_edid_open+0x10/0x10 [ 674.185560][T13482] single_open+0x4d/0x1d0 [ 674.185584][T13482] full_proxy_open_regular+0x1b6/0x370 [ 674.185625][T13482] do_dentry_open+0x6ab/0x14d0 [ 674.185655][T13482] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 674.185700][T13482] vfs_open+0x82/0x3f0 [ 674.185741][T13482] path_openat+0x208c/0x31a0 [ 674.185782][T13482] ? __pfx_path_openat+0x10/0x10 [ 674.185830][T13482] do_file_open+0x20e/0x430 [ 674.185864][T13482] ? __pfx_do_file_open+0x10/0x10 [ 674.185916][T13482] ? alloc_fd+0x476/0x790 [ 674.185949][T13482] ? do_getname+0x191/0x390 [ 674.185989][T13482] do_sys_openat2+0x10d/0x1e0 [ 674.186027][T13482] ? __pfx_do_sys_openat2+0x10/0x10 [ 674.186068][T13482] ? __fget_files+0x21f/0x3d0 [ 674.186104][T13482] __x64_sys_openat+0x12d/0x210 [ 674.186143][T13482] ? __pfx___x64_sys_openat+0x10/0x10 [ 674.186188][T13482] ? rcu_is_watching+0x12/0xc0 [ 674.186223][T13482] do_syscall_64+0x115/0x840 [ 674.186258][T13482] ? clear_bhb_loop+0x40/0x90 [ 674.186288][T13482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.186314][T13482] RIP: 0033:0x7ff67d19ce59 [ 674.186334][T13482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.186359][T13482] RSP: 002b:00007ff67b3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 674.186383][T13482] RAX: ffffffffffffffda RBX: 00007ff67d415fa0 RCX: 00007ff67d19ce59 [ 674.186400][T13482] RDX: 0000000000000400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 674.186416][T13482] RBP: 00007ff67d232d6f R08: 0000000000000000 R09: 0000000000000000 [ 674.186432][T13482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.186448][T13482] R13: 00007ff67d416038 R14: 00007ff67d415fa0 R15: 00007fff51bb2928 [ 674.186479][T13482] [ 675.809364][T13520] FAULT_INJECTION: forcing a failure. [ 675.809364][T13520] name failslab, interval 1, probability 0, space 0, times 0 [ 675.953399][T13520] CPU: 0 UID: 0 PID: 13520 Comm: syz.0.1517 Tainted: G L syzkaller #0 PREEMPT(full) [ 675.953437][T13520] Tainted: [L]=SOFTLOCKUP [ 675.953446][T13520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 675.953461][T13520] Call Trace: [ 675.953470][T13520] [ 675.953480][T13520] dump_stack_lvl+0x100/0x190 [ 675.953528][T13520] should_fail_ex.cold+0x5/0xa [ 675.953560][T13520] should_failslab+0xc2/0x120 [ 675.953596][T13520] __kmalloc_cache_noprof+0x7a/0x6f0 [ 675.953633][T13520] ? vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 675.953680][T13520] vidtv_mux_create_pid_ctx_once.part.0+0x49/0x200 [ 675.953725][T13520] vidtv_mux_init+0x8a6/0xbf0 [ 675.953767][T13520] vidtv_start_feed+0x34e/0x500 [ 675.953795][T13520] ? __pfx_vidtv_start_feed+0x10/0x10 [ 675.953825][T13520] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 675.953869][T13520] dmx_section_feed_start_filtering+0x3a8/0x660 [ 675.953911][T13520] dvb_dmxdev_filter_start+0x767/0xdd0 [ 675.953947][T13520] dvb_demux_do_ioctl+0xe64/0x1200 [ 675.953984][T13520] dvb_usercopy+0x167/0x340 [ 675.954006][T13520] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 675.954035][T13520] ? __pfx_dvb_usercopy+0x10/0x10 [ 675.954070][T13520] ? __fget_files+0x21f/0x3d0 [ 675.954105][T13520] dvb_demux_ioctl+0x29/0x40 [ 675.954127][T13520] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 675.954152][T13520] __x64_sys_ioctl+0x18e/0x210 [ 675.954179][T13520] do_syscall_64+0x115/0x840 [ 675.954214][T13520] ? clear_bhb_loop+0x40/0x90 [ 675.954244][T13520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 675.954271][T13520] RIP: 0033:0x7fd4aaf9ce59 [ 675.954291][T13520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 675.954316][T13520] RSP: 002b:00007fd4a91d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 675.954340][T13520] RAX: ffffffffffffffda RBX: 00007fd4ab216180 RCX: 00007fd4aaf9ce59 [ 675.954357][T13520] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000007 [ 675.954373][T13520] RBP: 00007fd4ab032d6f R08: 0000000000000000 R09: 0000000000000000 [ 675.954388][T13520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 675.954403][T13520] R13: 00007fd4ab216218 R14: 00007fd4ab216180 R15: 00007ffc5dd75a68 [ 675.954438][T13520] [ 676.274871][ T808] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 676.286816][ T808] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 676.295264][ T808] CPU: 0 UID: 0 PID: 808 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.306125][ T808] Tainted: [L]=SOFTLOCKUP [ 676.310453][ T808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 676.320524][ T808] Workqueue: events vidtv_mux_tick [ 676.325678][ T808] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 676.332282][ T808] Code: 6b 10 d8 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 676.351902][ T808] RSP: 0018:ffffc90004a4f3f0 EFLAGS: 00010202 [ 676.357993][ T808] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 676.365974][ T808] RDX: 0000000000000000 RSI: ffffffff882fec95 RDI: ffff8880271f9f00 [ 676.373983][ T808] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 676.381976][ T808] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004a4f690 [ 676.389963][ T808] R13: ffffc90004a4f670 R14: 0000000000000178 R15: 0000000000000000 [ 676.397962][ T808] FS: 0000000000000000(0000) GS:ffff88812438d000(0000) knlGS:0000000000000000 [ 676.406910][ T808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 676.413593][ T808] CR2: 0000001b34e00ff8 CR3: 000000000e596000 CR4: 00000000003526f0 [ 676.421572][ T808] Call Trace: [ 676.424859][ T808] [ 676.427826][ T808] ? __pfx_vidtv_psi_ts_psi_write_into+0x10/0x10 [ 676.434271][ T808] vidtv_psi_pmt_write_into+0x3b2/0xa70 [ 676.439839][ T808] ? __pfx_vidtv_psi_pmt_write_into+0x10/0x10 [ 676.445923][ T808] ? vidtv_psi_pat_write_into+0x56a/0x690 [ 676.451664][ T808] ? __pfx_vidtv_psi_pat_write_into+0x10/0x10 [ 676.457751][ T808] ? __lock_acquire+0x4a5/0x2630 [ 676.462725][ T808] vidtv_mux_push_si+0x932/0xe80 [ 676.467692][ T808] ? __pfx_vidtv_mux_push_si+0x10/0x10 [ 676.473174][ T808] ? nfc_urelease_event_work+0x22d/0x330 [ 676.478830][ T808] ? stack_depot_save_flags+0x27/0x9d0 [ 676.484319][ T808] ? vidtv_memset+0x50/0x90 [ 676.488835][ T808] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 676.494482][ T808] ? drain_workqueue+0x180/0x3b0 [ 676.499456][ T808] ? kthread+0x370/0x450 [ 676.503732][ T808] vidtv_mux_tick+0xe93/0x1460 [ 676.508542][ T808] ? __lock_acquire+0x4a5/0x2630 [ 676.513511][ T808] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 676.518741][ T808] ? __lock_acquire+0x4a5/0x2630 [ 676.523732][ T808] ? do_raw_spin_unlock+0x145/0x1e0 [ 676.528949][ T808] ? debug_object_deactivate+0x2e4/0x3b0 [ 676.534614][ T808] ? rcu_is_watching+0x12/0xc0 [ 676.539392][ T808] process_one_work+0xa0e/0x1980 [ 676.544349][ T808] ? __pfx_process_one_work+0x10/0x10 [ 676.549735][ T808] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 676.554959][ T808] worker_thread+0x5ef/0xe50 [ 676.559582][ T808] ? __pfx_worker_thread+0x10/0x10 [ 676.564754][ T808] ? kthread+0x13a/0x450 [ 676.569040][ T808] ? __pfx_worker_thread+0x10/0x10 [ 676.574188][ T808] kthread+0x370/0x450 [ 676.578287][ T808] ? __pfx_kthread+0x10/0x10 [ 676.582905][ T808] ret_from_fork+0x72b/0xd50 [ 676.587521][ T808] ? __pfx_ret_from_fork+0x10/0x10 [ 676.592649][ T808] ? __switch_to+0x800/0x1100 [ 676.597355][ T808] ? __switch_to_asm+0x39/0x70 [ 676.602138][ T808] ? __pfx_kthread+0x10/0x10 [ 676.606768][ T808] ret_from_fork_asm+0x1a/0x30 [ 676.611578][ T808] [ 676.614623][ T808] Modules linked in: [ 676.619493][ T808] ---[ end trace 0000000000000000 ]--- [ 676.726543][ T808] RIP: 0010:vidtv_psi_ts_psi_write_into+0x4bb/0xb40 [ 676.749159][ T808] Code: 6b 10 d8 f9 4d 8d 65 20 4c 89 e0 48 c1 e8 03 80 3c 18 00 0f 85 fe 04 00 00 49 8b 45 20 48 89 c2 48 89 c1 48 c1 ea 03 83 e1 07 <0f> b6 14 1a 38 ca 7f 08 84 d2 0f 85 c6 04 00 00 0f b6 10 48 8b 7c [ 676.801379][ T808] RSP: 0018:ffffc90004a4f3f0 EFLAGS: 00010202 [ 676.880915][ T808] RAX: 0000000000000002 RBX: dffffc0000000000 RCX: 0000000000000002 [ 676.902014][ T808] RDX: 0000000000000000 RSI: ffffffff882fec95 RDI: ffff8880271f9f00 [ 676.923006][ T808] RBP: 0000000000000008 R08: 0000000000000005 R09: 0000000000000000 [ 676.942747][ T808] R10: 0000000000000000 R11: 0000000000000000 R12: ffffc90004a4f690 [ 676.966333][ T808] R13: ffffc90004a4f670 R14: 0000000000000178 R15: 0000000000000000 [ 676.994034][ T808] FS: 0000000000000000(0000) GS:ffff88812438d000(0000) knlGS:0000000000000000 [ 677.012364][ T808] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 677.026711][ T808] CR2: 00007f5cffbea2f8 CR3: 00000000755a0000 CR4: 00000000003526f0 [ 677.042819][ T808] Kernel panic - not syncing: Fatal exception [ 677.048994][ T808] Kernel Offset: disabled [ 677.053332][ T808] Rebooting in 86400 seconds..