last executing test programs: 6m49.203680843s ago: executing program 2 (id=2811): mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x80000, 0x0) ppoll$auto(0x0, 0x3, 0x0, 0x0, 0x8) r1 = socket(0x11, 0x80003, 0x304) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x24) mmap$auto(0x0, 0x1, 0xdb, 0xeb1, 0x401, 0x8000) open_by_handle_at$auto(r0, &(0x7f00000001c0)={0xdf, 0x0, "f8bb781240750680a0b99313747e1f3ba34fac090f5894fc0c9b98b8ea23354ef26ab24b6d6c21b0de0df36b0fb3666581db9f9aa2b0b763335d0d2126085f69232d6e698395ca84ac3ea4fb2b82b755a3a5e390edc655e890a0f946446882b1aee9b6660fece1ad68db9346f783f1de65af000398cfd054b67298f2168775eb5278b20777e3ebfcd8fc302fdc0233a7ce9cb5335865ecf987acf704cb9a509d75ee94612e912f7f32cc0006f3bd948436e4f748d28eb68c9c86f40c4f0527dd8eecd3e197fbf8f4e76c0321f6a04e95a78fccae51f7bdb10266aef983b860"}, 0x6) r2 = prctl$auto_SECCOMP_MODE_FILTER(0x857, 0x2, 0xffffffffffffffff, 0xc79, 0x2) ioctl$auto_SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000040)="88264ba7d60336f1ee7ce8733177a64e2014973ff00d272f11fb281c32a4675b45c8268cd16fdb4d9d0f39f9b84ffb3ab51add2c1dfedf9690ef5a3a74b3781eb68cac57f3ced2456d09e951b97d07a04ca49d8800b768495db123fe6a8bf8c1526ae7b8b69a253acf258eae94586296168f00ad") r3 = open(0x0, 0x22240, 0x154) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000180)='/proc/cmdline\x00', 0x400, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8382, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000100)='8', 0x1) preadv$auto(0xffffffffffffffff, &(0x7f0000009180)={&(0x7f0000008180), 0x7}, 0x26, 0x80, 0x5) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r5 = socket(0xa, 0x1, 0x84) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@nl=@proc={0x10, 0x0, 0x25dfdbff, 0x2}, 0xe) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='v'], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x6, 0x1}, 0x5}, 0x3, 0x0) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r5, 0x0, 0x800) 6m48.206060721s ago: executing program 2 (id=2818): unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/misc/hw_random/rng_current\x00', 0x129102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0x7}, 0x800000001, &(0x7f0000000280)={&(0x7f0000000080), 0x1ffffffff}, 0x8, 0x0) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8955, 0x0) sendfile$auto(r0, 0x3, 0x0, 0x7cc) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) listen$auto(r3, 0x3) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x4, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) 6m47.208062383s ago: executing program 2 (id=2822): close_range$auto(0x0, 0xffffffffffffffff, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x4b72, r1) (fail_nth: 3) 6m46.475550712s ago: executing program 2 (id=2825): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/run_estimation\x00', 0x88042, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$auto_UI_SET_KEYBIT(r1, 0x40045565, &(0x7f0000000080)=0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) timer_settime$auto(0x0, 0x519a, &(0x7f0000000100)={{0xa6, 0x7}, {0x0, 0x3}}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x43, 0x4, 0x3}}, 0x100) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 6m45.67546508s ago: executing program 2 (id=2828): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/usbmon8\x00', 0x640, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x103800, 0x0) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000140), r0) r2 = syz_clone3(&(0x7f0000000440)={0x0, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000300), {0x18}, &(0x7f0000000340)=""/43, 0x2b, &(0x7f0000000380)=""/122, &(0x7f0000000400)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) r3 = getpgrp(0xffffffffffffffff) sendmsg$auto_IPVS_CMD_ZERO(r0, &(0x7f0000000700)={&(0x7f00000000c0), 0xc, &(0x7f00000006c0)={&(0x7f00000004c0)={0x1cc, r1, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@nested={0x5b, 0xf9, 0x0, 0x1, [@generic="535bd80a2e2c48d59d4eba4283142cc802713749b50402f4080ea2c2376aaf6b5ed593210a879810c2794d4f3d65d6bbb4f59337d02a830d85f863d2eda9ae8545d847d0e6763591309d07", @nested={0x4, 0xb0}, @typed={0x8, 0x23, 0x0, 0x0, @pid=r2}]}, @nested={0xc, 0x35, 0x0, 0x1, [@typed={0x8, 0x13b, 0x0, 0x0, @pid=r3}, @generic]}]}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@typed={0x11, 0x2b, 0x0, 0x0, @str='/dev/net/tun\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x131, 0x3, 0x0, 0x1, [@generic="a46473ad63261aa989a494512ef9a92ada1b0f85943f154caea8af62a3053156da2d2f7dceb9ed03cd086c0d5014", @typed={0xc, 0x9c, 0x0, 0x0, @u64=0x8}, @generic="f4fc64efdbfe6b89fab8944016636ee69f2de29342feb99883f8fdb362437c695c6aaf1d20c1916676354dcac09980631b62c4958392f39f07646fbb7d4182ced1cfa622c89c4c31ce9ee823f831175e55d20df8c3eba4c5b3b899ba64c2a3c3804ff26a118b07194377f30ad3238020f290944aaacebb71d89cd3489aade36155108d2b22dcef8d2a380b4adfc65ec10da55c8dc4bbca323a62b014e667196b12da074c8abbb8414ab779806dd7d65c4606fe", @generic="466f7ca56d301b477fd22e33570236929e4c46c52887c1de94ea4ff7a44bc597ffc1845940a8394aa8a04c504e677666", @typed={0xe, 0x12, 0x0, 0x0, @str='/dev/kmsg\x00'}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_UI_GET_VERSION(0xffffffffffffffff, 0x8004552d, &(0x7f0000000100)=0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) io_setup$auto(0x7ffe, &(0x7f0000000000)) mmap$auto(0xa0, 0x2000400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) sendfile$auto(r5, r5, 0x0, 0x4000000000001) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r6 = socket(0x2c, 0x3, 0x0) getsockopt$auto_SO_DEBUG(r6, 0x4, 0x1, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mlockall$auto(0x7) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000140), 0x40000000001243}, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) 6m45.27069173s ago: executing program 2 (id=2832): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x20000000000ffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0xe40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x7f, 0x3, 0x11) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) madvise$auto(0x0, 0xffffffffffff0001, 0x15) settimeofday$auto(0x0, 0x0) socket(0x8, 0x80000, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 6m45.037105506s ago: executing program 32 (id=2832): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0x20000000000ffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0xe40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x7f, 0x3, 0x11) r0 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$auto_rng_chrdev_ops_core(r0, &(0x7f0000000040)=""/4096, 0xfffffe82) madvise$auto(0x0, 0xffffffffffff0001, 0x15) settimeofday$auto(0x0, 0x0) socket(0x8, 0x80000, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 6m3.851890441s ago: executing program 4 (id=3002): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nullb0/queue/scheduler\x00', 0xca002, 0x0) sendfile$auto(r0, r0, 0x0, 0x7ffff000) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/6/smp_affinity_list\x00', 0xe0182, 0x0) readv$auto(r1, &(0x7f0000000140)={0x0, 0x8}, 0x200000000080003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/dev_snmp6/vlan1\x00', 0x109040, 0x0) ioctl$auto_FS_IOC_RESVSP(r2, 0x40305828, 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x2, 0x0) arch_prctl$auto_ARCH_MAP_VDSO_32(0x2002, 0x3) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0xdf, 0xfffffffffffffff9, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/watchdog_thresh\x00', 0x20402, 0x0) 6m2.664180547s ago: executing program 4 (id=3005): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x195101, 0x0) getsockopt$auto_SO_DONTROUTE(r0, 0x5, 0x5, &(0x7f0000000100)='[(\xfd\x00', &(0x7f0000000140)=0x7) lseek$auto(0x3, 0x20000, 0x1) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x20000000) socket(0x2, 0x3, 0xa) rseq$auto(&(0x7f0000000200)={0xe, 0x402, 0xfb82, 0x3, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x6) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) write$auto(r1, &(0x7f0000000340)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x81) mq_timedreceive$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, &(0x7f00000000c0)={0xfffffffffffffffd, 0x2}) setresgid$auto(0x81, 0x800000a0, 0x8) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb5, 0x401, 0x300000000000) ioctl$auto_SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0) io_uring_setup$auto(0x6, 0x0) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x800c000, 0x4800c000, 0x800c000}, 0x4) ioctl$auto(0x3, 0x80004509, 0x10000000000402) socket(0xa, 0x801, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x0}, 0x55) connect$auto(0x3, &(0x7f0000000040)=@vsock={0x28, 0x0, 0x2710, @local}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) 6m1.173588678s ago: executing program 4 (id=3009): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x201, 0x9, 0x200000000000e, 0xf55, 0x2, 0x80000001, 0x15f4da0a, 0x8000000005, 0x9, 0x8, 0x80000001, 0x7, 0x80, 0xc, 0x1, 0x1]}, 0x0) utimes$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)={0x1, 0x6}) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x300000}, 0x3) getsockopt$auto_SO_LINGER(r0, 0x5, 0xd, &(0x7f0000000140)='\xd0B\xe3\xb7\xde\xba`\xbdN\x028\x04\x01\x00\x00\x00\x8f\xda', &(0x7f00000000c0)=0x3) 6m1.117482627s ago: executing program 4 (id=3010): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/kfence/parameters/sample_interval\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) bpf$auto(0x2, 0x0, 0x1) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x10\b\x00'/21, 0x100000002, 0x100000001) 5m59.98081405s ago: executing program 4 (id=3013): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) sysfs$auto(0x2, 0xe, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) modify_ldt$auto(0x11, 0x0, 0x10) (fail_nth: 4) 5m59.41080601s ago: executing program 4 (id=3014): mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) mmap$auto(0x0, 0x20005, 0xa, 0x200eb1, 0x401, 0x8000) sysinfo$auto(&(0x7f0000000080)={0x1, [0xa3e, 0x5, 0x101], 0xc50, 0xb36, 0x6, 0x3ff, 0x74, 0x5, 0x2, 0x0, 0x12000000, 0x3, 0x5}) socket(0xf, 0x2, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0) getsockopt$auto(r0, 0x2000080, 0x3d, 0x0, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0x400454ca, r2) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x802, 0x1) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r4 = open(0x0, 0xa240, 0x1de) getsockopt$auto_SO_KEEPALIVE(r3, 0x0, 0x9, 0x0, &(0x7f0000000100)=0x401) socket(0x2, 0x2, 0x1) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x80000001, 0x9, 0x8, 0xffffffff, 0xfffffffffffffffe, 0x7fff, 0xfc2, 0x27f, @inferred=0xffffffffffffffff, @raw}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x268, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@OVS_PACKET_ATTR_ACTIONS={0x247, 0x3, 0x0, 0x1, [@nested={0xc, 0x62, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @pid=r6}]}, @typed={0x8, 0x114, 0x0, 0x0, @u32=0x9}, @nested={0x14, 0x131, 0x0, 0x1, [@nested={0x4, 0x9}, @nested={0x4, 0x118}, @nested={0x4, 0x2b}, @nested={0x4, 0x88}]}, @nested={0x14, 0x11c, 0x0, 0x1, [@nested={0x4, 0x111}, @nested={0x4, 0x4c}, @nested={0x4, 0x95}, @nested={0x4, 0x11c}]}, @nested={0xc, 0x30, 0x0, 0x1, [@nested={0x4, 0x4}, @nested={0x4, 0x6c}]}, @typed={0xc, 0xb4, 0x0, 0x0, @u64}, @nested={0x10, 0xbc, 0x0, 0x1, [@nested={0x4, 0x76}, @typed={0x8, 0x35, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0x113, 0x0, 0x0, @u32=0xe}, @nested={0x107, 0x54, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x1}, @typed={0x3e, 0xb9, 0x0, 0x0, @binary="d78462da99dbb130e2730f093c838106c5bfaecb4ccac21561a24f05f684991be6587d550df1dc2c2ac56f232a528bb30bc882180b92fad5021a"}, @typed={0x8, 0x141, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x64}, @generic="39514c9343e9865453475e5ed88ef42750d1381943222a990d19f0b543f8c25888edaeef92507d4f7c54789404be95b9e9cd5121a2af8f86b23aa5b9bba20a5babecb103b266ed2339408794046a7a511592e5ce59398544c9848b95316eb58a2f11ac9798bda11ce39f1547906472aa6e3f18b09b3c97615d31416675eb3328dd30e7ce0755db5a0631584074a130b003505f9401497ed05ce2106269270f5ebcc405", @nested={0x4, 0xfa}]}, @generic="7312f15a17504c2e537223a4c0b0834f886b805816bcf26b6af3217ba4dd59ebcb49fa51cb3138dff8694271cc17ba1eacc8e25a63807ccdb92cfdc433d6af578825f689146e242dca41a70f1eabd0701919e433d260ebcc2f5c94159fd6aa7d0969b3ceb89b4cfffe069a76b9a9a765fe2f574bd0d0816140add6caa9b718d43f4c8b5e7dd97cba5c2913f73b1e4a376f91f5b5248920f674ee544dc07f8b7c9aef93a80861767c2d3fb133be4c6295ae89b0f54eb3d347caf721aa6f6a72681ee4562b1ceb90271a5d2355de297a"]}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x1}]}, 0x268}, 0x1, 0x0, 0x0, 0x4c001}, 0x44000) bind$auto(0x3, &(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x67}, 0x6a) 5m44.335724501s ago: executing program 33 (id=3014): mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0xffffffffffffffff, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x81, 0x0) mmap$auto(0x0, 0x20005, 0xa, 0x200eb1, 0x401, 0x8000) sysinfo$auto(&(0x7f0000000080)={0x1, [0xa3e, 0x5, 0x101], 0xc50, 0xb36, 0x6, 0x3ff, 0x74, 0x5, 0x2, 0x0, 0x12000000, 0x3, 0x5}) socket(0xf, 0x2, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x42800, 0x0) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, 0x0) getsockopt$auto(r0, 0x2000080, 0x3d, 0x0, 0x0) r2 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r2, 0x400454ca, r2) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) io_uring_setup$auto(0x6, 0x0) r3 = socket(0x2, 0x802, 0x1) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8000, 0x0) open(0x0, 0xa22c0, 0x155) r4 = open(0x0, 0xa240, 0x1de) getsockopt$auto_SO_KEEPALIVE(r3, 0x0, 0x9, 0x0, &(0x7f0000000100)=0x401) socket(0x2, 0x2, 0x1) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x80000001, 0x9, 0x8, 0xffffffff, 0xfffffffffffffffe, 0x7fff, 0xfc2, 0x27f, @inferred=0xffffffffffffffff, @raw}) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x268, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {}, [@OVS_PACKET_ATTR_ACTIONS={0x247, 0x3, 0x0, 0x1, [@nested={0xc, 0x62, 0x0, 0x1, [@typed={0x8, 0xd8, 0x0, 0x0, @pid=r6}]}, @typed={0x8, 0x114, 0x0, 0x0, @u32=0x9}, @nested={0x14, 0x131, 0x0, 0x1, [@nested={0x4, 0x9}, @nested={0x4, 0x118}, @nested={0x4, 0x2b}, @nested={0x4, 0x88}]}, @nested={0x14, 0x11c, 0x0, 0x1, [@nested={0x4, 0x111}, @nested={0x4, 0x4c}, @nested={0x4, 0x95}, @nested={0x4, 0x11c}]}, @nested={0xc, 0x30, 0x0, 0x1, [@nested={0x4, 0x4}, @nested={0x4, 0x6c}]}, @typed={0xc, 0xb4, 0x0, 0x0, @u64}, @nested={0x10, 0xbc, 0x0, 0x1, [@nested={0x4, 0x76}, @typed={0x8, 0x35, 0x0, 0x0, @ipv4=@remote}]}, @typed={0x8, 0x113, 0x0, 0x0, @u32=0xe}, @nested={0x107, 0x54, 0x0, 0x1, [@nested={0x4, 0x10}, @typed={0xc, 0x8e, 0x0, 0x0, @u64=0x1}, @typed={0x3e, 0xb9, 0x0, 0x0, @binary="d78462da99dbb130e2730f093c838106c5bfaecb4ccac21561a24f05f684991be6587d550df1dc2c2ac56f232a528bb30bc882180b92fad5021a"}, @typed={0x8, 0x141, 0x0, 0x0, @uid=r5}, @nested={0x4, 0x64}, @generic="39514c9343e9865453475e5ed88ef42750d1381943222a990d19f0b543f8c25888edaeef92507d4f7c54789404be95b9e9cd5121a2af8f86b23aa5b9bba20a5babecb103b266ed2339408794046a7a511592e5ce59398544c9848b95316eb58a2f11ac9798bda11ce39f1547906472aa6e3f18b09b3c97615d31416675eb3328dd30e7ce0755db5a0631584074a130b003505f9401497ed05ce2106269270f5ebcc405", @nested={0x4, 0xfa}]}, @generic="7312f15a17504c2e537223a4c0b0834f886b805816bcf26b6af3217ba4dd59ebcb49fa51cb3138dff8694271cc17ba1eacc8e25a63807ccdb92cfdc433d6af578825f689146e242dca41a70f1eabd0701919e433d260ebcc2f5c94159fd6aa7d0969b3ceb89b4cfffe069a76b9a9a765fe2f574bd0d0816140add6caa9b718d43f4c8b5e7dd97cba5c2913f73b1e4a376f91f5b5248920f674ee544dc07f8b7c9aef93a80861767c2d3fb133be4c6295ae89b0f54eb3d347caf721aa6f6a72681ee4562b1ceb90271a5d2355de297a"]}, @OVS_PACKET_ATTR_HASH={0xc, 0xb, 0x1}]}, 0x268}, 0x1, 0x0, 0x0, 0x4c001}, 0x44000) bind$auto(0x3, &(0x7f0000000040)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x67}, 0x6a) 9.159637852s ago: executing program 3 (id=3998): socket(0x10, 0x2, 0x100) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = socket(0x29, 0x2, 0x0) select$auto(0x8, &(0x7f0000000340)={[0x7, 0x6, 0xfffc000000000000, 0x6, 0x1, 0x5, 0x8, 0x1ff, 0x9, 0x1, 0x5, 0x81, 0x5, 0x7fff, 0x5]}, 0x0, &(0x7f00000004c0)={[0xe3c6, 0x8, 0x2, 0x8, 0x7, 0x3ff, 0x3, 0xa, 0x0, 0x9, 0x6, 0x1, 0x7a, 0x8, 0x66960ada, 0xffff]}, &(0x7f00000000c0)={0xffffffffffffffff, 0x7}) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) futex_waitv$auto(&(0x7f0000000300)={0x0, 0x4, 0x2}, 0x1, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x62, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f0000000240)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p]\x12/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xfe\xb4\xd7A\xa5\xab\xcb\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5Q\x1f\xff3O\xe67Y\xd0\xfe$\x1f\x82\x8e\x9d\xb2>\xf7\xa8#\xa7+\xaf\x18\x97\x7f\xe3N\x9a\xe1\x02o\xeb\x92\xfd\xd5\x9bU\xe0\xb5\xd2\x95\x92CY\xf9\x99Gi\xdb\xe0m\x0f\xddk\x83\x87\\\x03<\xc0kl\xf6s@0xee00, 0xffffffffffffffff, 0x7ff, 0x0, 0x7ff, 0xff00}, &(0x7f0000000000)=0x80, &(0x7f0000000080)=0x1, 0x0, 0x3, 0x7f, 0x1, 0x1, 0xb33f, 0x7, 0x1, @raw=0x81, @inferred=0xffffffffffffffff}) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xb, 0x9, 0x63, r2, 0x0, 0x0, 0x2, 0xfffffffffffffff7, 0x80000000000080a, 0x0, 0x13, 0x9, 0xffffffff80000000, 0x20000000007, 0x6, 0x400002}) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0xe, 0x2, 0x100000001, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0x8, 0x7fffffffffffffff, 0x8000000004, 0x100000007fffffff, 0x5, 0x0, 0x7, 0x4, 0x3}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) r6 = io_uring_setup$auto(0x6, 0x0) r7 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r7, 0x0, 0x1f40) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) sendmsg$auto_IEEE802154_LLSEC_DEL_KEY(r6, 0x0, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x9}, 0x3) ioctl$auto_PPPIOCSNPMODE(r5, 0x4008744b, 0x0) close_range$auto(0x2, 0x8, 0x0) 8.301419325s ago: executing program 1 (id=4002): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) socket(0x1f, 0x5, 0x1) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/user\x00') r1 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000000)=0x1000) ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5404, &(0x7f0000000040)="8b9d0f255696d6b2b78bae671ffc4e2655fee0fabfa1b34f715818a14ff2e8456817fda675d838ce821e5666c6398568ac55c42c811477a5c5907e1eac5c468d85803e579a0d2125c3b090dee4fabd4209") setns(r0, 0x10000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x40000) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f00000000c0)={0x3c22, 0x2, 0x200000000, 0x4000000000000000, 0x1, 0xffffffffffffffff}) migrate_pages$auto(r3, 0xe, &(0x7f0000000240)=0xadc, 0x0) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0xd7f64ff, 0x0, 0x4, 0x0, 0x8000000000200000, 0x4}, 0x2}, 0xfffffff6, 0x14, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r5 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) waitid$auto_P_PID(0x1, r3, 0x0, 0x5, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x40, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) ioctl$auto_USBDEVFS_CONTROL(r7, 0xc0185500, 0x0) socket(0x25, 0x0, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto_nsim_psample_enable_fops_psample(r5, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x3ff, 0x20000000007, 0xd3e, 0x9, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x61, 0x8, 0x7, 0x6d3f, 0x2db, 0xa, 0xfffffffffffffffe]}, 0x0) ioctl$auto_USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000000080)={0x4, 0xf, 0x772, 0xfffc, 0x2, 0x1000, 0x0}) 8.239080998s ago: executing program 5 (id=4004): r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x9, &(0x7f0000000180)="668b4954e768f6c9be318087b8284973784dc2c869556b70ea5d327da07d029f66cf2bd55089cf71ecaec9d5c5b31377bd0c7443486d83e43dac40d617fc7994d80e8a4c09d522628fa7878f11e615") mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="5142651f911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb12dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666", 0x6ea) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x100000000000008, 0x20000007c9, 0xda46, 0xfffefffffffffffc, r1, 0x300000000002) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) r3 = socket(0x31, 0x6, 0x7fff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, 0x0, 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a1ae8", 0xfff}, 0x3) socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 8.095833403s ago: executing program 3 (id=4005): r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x9, &(0x7f0000000180)="668b4954e768f6c9be318087b8284973784dc2c869556b70ea5d327da07d029f66cf2bd55089cf71ecaec9d5c5b31377bd0c7443486d83e43dac40d617fc7994d80e8a4c09d522628fa7878f11e615") mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="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", 0x6ea) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x100000000000008, 0x20000007c9, 0xda46, 0xfffefffffffffffc, r1, 0x300000000002) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x31, 0x6, 0x7fff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a", 0xfff}, 0x3) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 7.264360825s ago: executing program 1 (id=4006): r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x9, &(0x7f0000000180)="668b4954e768f6c9be318087b8284973784dc2c869556b70ea5d327da07d029f66cf2bd55089cf71ecaec9d5c5b31377bd0c7443486d83e43dac40d617fc7994d80e8a4c09d522628fa7878f11e615") mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="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", 0x6ea) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x100000000000008, 0x20000007c9, 0xda46, 0xfffefffffffffffc, r1, 0x300000000002) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x31, 0x6, 0x7fff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, 0x0, 0x3a) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 7.230650583s ago: executing program 5 (id=4008): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) utime$auto(0x0, 0xfffffffffffffffc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0x0, 0x9, 0x5, 0x8, 0xe7}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfffffffffffffff8, 0x0, 0x800009, 0x9, 0x4, 0x8, 0xf, @inferred, @raw=0x8}) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x0, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x82d) write$auto(r4, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 5.779829547s ago: executing program 1 (id=4014): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x4, &(0x7f0000000180)={0x6, 0x0, 0xd57, 0xff, 0xee01, 0xffffffffffffffff, 0x5, 0x2, 0x444c59c2, 0x80, 0x6000000000, 0x9, {0xffffffffffffff38, 0xc78}, {0x0, 0x9}, {0x0, 0xfffffffd}, {0x7fffffff, 0x4}, 0xfffffff9, 0xfffffff9, 0x8f, 0x7c2b, 0x1000000000000004, 0x0, 0x0, 0x74a, 0x9, 0x9, 0x0, 0x40, [0x0, 0x10, 0xfffffffeffffffff, 0x3, 0x8, 0x9, 0x6, 0x1, 0x9]}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0xb4, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x30, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x7, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x100000, 0x800000001, 0x6, 0x7, 0x2, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x5, 0xffff, 0x50ce0883, 0xbd6, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="34020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x8000) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) sysfs$auto(0x1, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) pivot_root$auto(0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mq_open$auto(&(0x7f0000000240)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5, 0x3, 0x0) 5.709238928s ago: executing program 0 (id=4015): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/binderfs/binder0\x00', 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x800, 0x6, 0xeb1, 0x401, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty36\x00', 0x0, 0x0) r5 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000100), 0x80840, 0x0) readv$auto(r5, &(0x7f0000000a80)={0x0, 0x5b54}, 0x1) read$auto(r4, 0x0, 0x80) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000800)={0x321041, 0x1fe, 0x79}, 0x18) ioctl$auto_TIOCSTI2(r4, 0x5412, &(0x7f0000000000)='\n') fstatfs$auto(r3, &(0x7f0000000140)={0x100000000, 0x11b, 0x100000001, 0x300, 0x7, 0x100000000, 0x7f, {[0x3, 0x6]}, 0x9, 0x5, 0x9, [0x2, 0x9, 0x7, 0x6]}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'geneve1\x00'}) ioctl$auto(r2, 0x541c, r3) write$auto(r3, &(0x7f0000000280)='/sys/devices/platform/dummy_hcd.1/usb2/idProduct\x00', 0xd83) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x4, 0x8, 0xdf, 0x9b72, r0, 0x7) r6 = socket(0x2b, 0x3, 0x393e) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.1/usb2/idProduct\x00', 0x100000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000000000)=""/95, 0x5f) sendmmsg$auto(r6, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0), 0x48}, 0x6, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) pidfd_getfd$auto(r6, r1, 0x1) r8 = socket(0xa, 0x2, 0x73) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) read$auto_fragmentation_threshold_ops_(0xffffffffffffffff, &(0x7f00000002c0)=""/240, 0xf0) sendto$auto(r8, 0x0, 0x402, 0x0, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) connect$auto(0x3, 0x0, 0x54) select$auto(0x6, 0x0, 0x0, &(0x7f0000000200)={[0x40000008, 0x4, 0x100000001, 0x15, 0x6, 0x0, 0x7, 0x9, 0x14, 0x40000000000004, 0x2ddf, 0x8, 0xfffffffffffffffa, 0xab, 0xfff, 0x2]}, 0x0) close_range$auto(0x2, 0x8000, 0x0) 5.473308424s ago: executing program 5 (id=4016): r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x9, &(0x7f0000000180)="668b4954e768f6c9be318087b8284973784dc2c869556b70ea5d327da07d029f66cf2bd55089cf71ecaec9d5c5b31377bd0c7443486d83e43dac40d617fc7994d80e8a4c09d522628fa7878f11e615") mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="5142651f911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb12dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666", 0x6ea) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x100000000000008, 0x20000007c9, 0xda46, 0xfffefffffffffffc, r1, 0x300000000002) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) r3 = socket(0x31, 0x6, 0x7fff) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r4, 0x0, 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a1ae8", 0xfff}, 0x3) socket(0x18, 0x5, 0x1) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 4.849316577s ago: executing program 3 (id=4017): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) 4.571730845s ago: executing program 0 (id=4018): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x121d02, 0x0) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x622340, 0x0) openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) memfd_secret$auto(0x0) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, 0x0) close_range$auto(0x2, 0x8, 0x0) listmount$auto(&(0x7f0000000100)={0xba, @raw, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto_NVRAM_SETCKS(r0, 0x7041, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000002180), 0x100, 0x0) eventfd$auto(0x3) pipe$auto(0x0) socketpair$auto(0x1e, 0x1, 0x4, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x2, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_TCFLSH2(r1, 0x40384708, 0x0) 4.479451008s ago: executing program 3 (id=4019): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70090000004a0003000000000008"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="8b632abd7000fedbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) r4 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r5, 0xfd}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ipvlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket(0xa, 0x2, 0x88) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r10, r9, 0x8, 0x1, 0xffffffffffffffff, @relative_fd=r7, 0xe600}, 0xf) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) adjtimex$auto(&(0x7f0000000540)={0x8, 0x0, 0x3, 0x7, 0x11, 0x4, 0x8, 0x0, 0x6, 0x5, 0x4, {0x8, 0xda}, 0xfdde, 0xe642, 0x3, 0x0, 0x0, 0x7fffffff, 0x789, 0x3, 0x6, 0x7f, 0x7}) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r0, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000004c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="30010000", @ANYRES16=r2, @ANYBLOB="000228bd7000fddbdf2523000000050002004000000014000180080003004000000008000300770000007000018008000100", @ANYRES32=0x0, @ANYBLOB="080001005d395d7c625e419083f0abbf043f9b56b6cd72e36a10af343191ac", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRESDEC=0x0, @ANYBLOB="140002006e657464657673696d3000000000000014000200766574683000000000000000000000001400020070696d7265673000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="08000300ff01000008000100", @ANYRES32=r10, @ANYBLOB="280001801400020070696d72656731000000000000000000080003000500000008000300ba050000680001801400020076657468315f746f5f6873720000000008000300000100001400020077673000000000000000000000000000080003000800000008000300fcffffff08000100", @ANYRES32=r11, @ANYBLOB="140002006261746164765f736c6176655f31000008000300fcffffff"], 0x130}, 0x1, 0x0, 0x0, 0x8d0}, 0x40000e4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) timerfd_create$auto(0x9, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x19, 0x0, 0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0x2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1) 4.142965552s ago: executing program 5 (id=4020): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0xf500, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mprotect$auto(0x200000000000, 0x806121, 0x6) 4.121428743s ago: executing program 1 (id=4021): socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram11\x00', 0x20000, 0x0) mseal$auto(0x1ffff000, 0xfffffffffffffff3, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) madvise$auto(0x108000, 0x2, 0xa) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x498000, 0x40) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x100842, 0x0) ioctl$auto_SNDCTL_TMR_CONTINUE(r1, 0x5404, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000140)) 4.06741655s ago: executing program 0 (id=4022): r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x9, &(0x7f0000000180)="668b4954e768f6c9be318087b8284973784dc2c869556b70ea5d327da07d029f66cf2bd55089cf71ecaec9d5c5b31377bd0c7443486d83e43dac40d617fc7994d80e8a4c09d522628fa7878f11e615") mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="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", 0x6ea) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x100000000000008, 0x20000007c9, 0xda46, 0xfffefffffffffffc, r1, 0x300000000002) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) socket(0x31, 0x6, 0x7fff) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r3, 0x0, 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, 0x0, 0x3a) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 3.955427735s ago: executing program 3 (id=4023): r0 = socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) write$auto(0x3, 0x0, 0xffd8) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/orangefs/stats/reads\x00', 0x2002, 0x0) write$auto(r2, &(0x7f0000000100)='\x15!\xa8^J/\xddCx4\xa1\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\x9e\x14\xe4\xa5\xfe\xb5', 0x5) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x34, r3, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4044000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) r4 = socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x28000) ioctl$sock_SIOCGIFINDEX(r4, 0x8955, 0x0) read$auto(0x3, 0x0, 0x7fffffff) symlink$auto(&(0x7f0000000040)='./file0\x00', 0x0) 3.852492391s ago: executing program 1 (id=4024): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x4, &(0x7f0000000180)={0x6, 0x0, 0xd57, 0xff, 0xee01, 0xffffffffffffffff, 0x5, 0x2, 0x444c59c2, 0x80, 0x6000000000, 0x9, {0xffffffffffffff38, 0xc78}, {0x0, 0x9}, {0x0, 0xfffffffd}, {0x7fffffff, 0x4}, 0xfffffff9, 0xfffffff9, 0x8f, 0x7c2b, 0x1000000000000004, 0x0, 0x0, 0x74a, 0x9, 0x9, 0x0, 0x40, [0x0, 0x10, 0xfffffffeffffffff, 0x3, 0x8, 0x9, 0x6, 0x1, 0x9]}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0xb4, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x30, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x7, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x100000, 0x800000001, 0x6, 0x7, 0x2, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x5, 0xffff, 0x50ce0883, 0xbd6, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xdc5a}, 0x80000800}, 0x7, 0x4008) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="34020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x8000) open(0x0, 0x22040, 0x75) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x11, 0x0) sysfs$auto(0x1, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) pivot_root$auto(0x0, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mq_open$auto(&(0x7f0000000240)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5, 0x3, 0x0) 3.046086816s ago: executing program 3 (id=4025): set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) unshare$auto(0x40000080) socket(0xa, 0x5, 0x0) utime$auto(0x0, 0xfffffffffffffffc) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) msgctl$auto_IPC_RMID(0x4, 0x0, &(0x7f0000000240)={{0x0, 0xffffffffffffffff, 0x0, 0x9, 0x5, 0x8, 0xe7}, &(0x7f00000001c0)=0x6, &(0x7f0000000200)=0x1, 0x1, 0xfffffffffffffff8, 0x0, 0x800009, 0x9, 0x4, 0x8, 0xf, @inferred, @raw=0x8}) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) ioctl$auto_SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x40}, 0x8) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x109401, 0x0) ioctl$auto(r3, 0x540a, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x0, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/dev\x00', 0x40100, 0x0) pread64$auto(r5, 0x0, 0x10001, 0x82d) write$auto(r4, 0x0, 0xc) close_range$auto(0x2, 0x8, 0x0) msgrcv$auto(0x9, 0x0, 0xfffffffffffffffd, 0x6, 0x80008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 2.325632136s ago: executing program 0 (id=4026): r0 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x9, &(0x7f0000000180)="668b4954e768f6c9be318087b8284973784dc2c869556b70ea5d327da07d029f66cf2bd55089cf71ecaec9d5c5b31377bd0c7443486d83e43dac40d617fc7994d80e8a4c09d522628fa7878f11e615") mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, r0, 0x8000) socket(0xa, 0x2, 0x73) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x7, 0x12, 0xffffffffffffffff, 0xf4e) mmap$auto(0x3, 0x9, 0x7, 0xeb1, 0x404, 0x10008000) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000840)="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", 0x6ea) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x100000000000008, 0x20000007c9, 0xda46, 0xfffefffffffffffc, r1, 0x300000000002) write$auto(0x3, 0x0, 0x7fffffff) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1000000000000001, 0x0, 0x1, 0x0) unshare$auto(0x1) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) mmap$auto(0x80000000001002, 0x12000000000000, 0x4000000000df, 0xeb4, 0x6, 0x8000008003) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) r3 = socket(0x31, 0x6, 0x7fff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={&(0x7f0000000040)="32e3eec48051c4cc1bd9d90076d5507aee20a1ffccd1c9977b45b2ce215a", 0xfff}, 0x3) r4 = socket(0x18, 0x5, 0x1) connect$auto(r4, 0x0, 0x3a) syz_genetlink_get_family_id$auto_smbd_genl(&(0x7f0000000240), r3) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) 1.850852042s ago: executing program 5 (id=4027): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0xc, 0xfffffffffffffffd, 0x0, 0x1, 0x6) mmap$auto(0x0, 0x20009, 0xe3, 0x14, 0x40000000000a5, 0x7fff) unshare$auto(0xfffffffffff00000) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x4000, 0x400008, 0xdf, 0x1ff, 0x2, 0x7ffe) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x28, 0x800, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0xe54) r2 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r2, 0x0, 0x20000000001, 0xfffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x0, 0x0, 0x3, 0x403) madvise$auto(0x0, 0x240007, 0x19) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x3ff, 0xffffffffffff0007, 0x59) madvise$auto(0x8, 0x2003f2, 0x7) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="8048c9dad3cd006347a800000000", @ANYRESDEC, @ANYBLOB="010031bd7000fddbdf250c0000000c0003800800038004000580"], 0x20}}, 0x40088c0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/wakeup/wakeup7/wakeup_count\x00', 0xc0000, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x180000, 0x0) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(r4, 0x7cb, 0x0) 365.412716ms ago: executing program 0 (id=4028): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1e, 0x1, 0x0) getsockname$auto(r0, &(0x7f0000000000), &(0x7f0000000040)=0x3) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r1, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x4000000000000, 0x9}, 0x7}, 0x3, 0x0) 180.08011ms ago: executing program 0 (id=4029): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x601, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) mprotect$auto(0x110c230000, 0xa588, 0x6) mremap$auto(0x110c231000, 0xfffffffffffffffc, 0x101, 0x3, 0x0) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, 0x0) timer_settime$auto(0x0, 0xeb17, &(0x7f0000000180)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) read$auto(r1, 0x0, 0xb4d3) keyctl$auto(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8000000d) epoll_create1$auto(0x1) sendmsg$auto_NL802154_CMD_SET_BACKOFF_EXPONENT(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8404050}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYRES16=0x0, @ANYBLOB="020028bd7000fddbdf25100000001b012e805804863e0782330d9e0f1f1ea674ba2d1c3e48193a1661af4751807a7a650a351464188013944aee9c2a0590db369c25654473c09133df8fcf526396de271cf28b972eda94e5654fbf5d55997140343d97e1f5a0f1691bb3c83e7d2fc93051afac0acd8e2a4585ebd9bea05228344d972995bdcbca69f0b15462d6aa6702ef3f9a7f5a5524ef4a30389e6e77e646dc66a73fa92f730feeac9f26529c4bf76b88eed9d91cd0af3442e3d29fa5b4704765516f04f42f0673a403575aa201e06f980444e7c981a0", @ANYRES32=r0, @ANYBLOB="8055defc50c40cc58f45e88e458cbbc2ec31c8d67b7774c6605ea0d07cec0360663b7382b35e59b8b9c6d9098b5c205b9785701138f9e227d4334dfa6f427178c0207bdaa69da93cc40e0389816ee640fca9ed0578bbf7ffed12c75746d46da80d043cd176056cfb08801825227e4f7ac312a1877257bb732f97335aef9853429e25f81e69d2c12aaf12"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) getsockopt$auto_SO_LINGER(r0, 0x9, 0xd, &(0x7f0000000140)='/sys/devices/virtual/vtconsole/vtcon1/bind\x00', &(0x7f0000000180)=0x10001) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80980, 0x0) syz_genetlink_get_family_id$auto_smc_pnetid(0xfffffffffffffffc, 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001180)='/sys/devices/virtual/block/zram0/compact\x00', 0x20001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000000)="b2", 0x1) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/bond_slave_1/ucast_solicit\x00', 0x101202, 0x0) sendfile$auto(r0, r3, 0x0, 0x1) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000000), 0xffffffffffffffff) setsockopt$auto(0x3, 0x1, 0x48, 0x0, 0x9) socket(0x10, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x10002, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x40d81, 0x0) write$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0) 0s ago: executing program 1 (id=4030): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000140), r0) statx$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x4, &(0x7f0000000180)={0x6, 0x0, 0xd57, 0xff, 0xee01, 0xffffffffffffffff, 0x5, 0x2, 0x444c59c2, 0x80, 0x6000000000, 0x9, {0xffffffffffffff38, 0xc78}, {0x0, 0x9}, {0x0, 0xfffffffd}, {0x7fffffff, 0x4}, 0xfffffff9, 0xfffffff9, 0x8f, 0x7c2b, 0x1000000000000004, 0x0, 0x0, 0x74a, 0x9, 0x9, 0x0, 0x40, [0x0, 0x10, 0xfffffffeffffffff, 0x3, 0x8, 0x9, 0x6, 0x1, 0x9]}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000100)={{@raw=0xb, 0x3, 0xcf, 0x8, "16a0d89bf208384515b5375a677609aa1bc737276563c3d5a2fca999d5797ab7a10a4d2bc341c4bd369ae535", @raw=0x1}, 0x1, @integer=@value=[0x6d, 0x7, 0xb4, 0xbb, 0x4, 0x80000000, 0x1, 0x10001, 0x1, 0x400000000009, 0xc4, 0x9, 0x6, 0x4, 0x3, 0x6, 0x1, 0x3, 0x4, 0x401, 0x6, 0x0, 0xa0, 0x5, 0x2, 0x30, 0x5, 0xa, 0x8, 0x1, 0x8, 0x7f, 0xffffffffffffdb75, 0x100000000, 0x3, 0x7, 0x7fffffffffffffff, 0x7, 0xd, 0x1, 0x71, 0x0, 0x8, 0x2, 0x3, 0x3, 0x2d7, 0x1, 0x1, 0x6, 0x100000, 0x800000001, 0x6, 0x7, 0x2, 0x6, 0x4, 0x3, 0x40a, 0xd, 0x3fd, 0x8, 0x5, 0xffff, 0x50ce0883, 0xbd6, 0x5, 0x2, 0xd8f, 0x80000000, 0x0, 0x7, 0x46e, 0xa5cf, 0x8, 0x7, 0xc16b, 0x6, 0x9, 0x6, 0x8000002, 0x6, 0x1, 0x3, 0x3, 0xfffffffffffff16a, 0x6, 0xffffffffffff0001, 0x100000000, 0x4, 0x8, 0x4, 0x2, 0x2000000003, 0xfffffffffffffffe, 0x20007cf9, 0x40, 0x2, 0x7, 0x100, 0x14b, 0x2, 0x45f3, 0x0, 0x0, 0x4, 0x0, 0x8001, 0x0, 0x1, 0x7, 0xcf4, 0x1, 0x3, 0x0, 0x4, 0x7, 0x6, 0x25e2, 0xc9a, 0xd09, 0x40, 0x2, 0xffffffffffffff00, 0x7, 0x9, 0xfffffffffffffff8, 0x40], "f3fadb90a56b67d92a5b28b4b23f332550b1e5454e2027fb1a37efe81bbc27deaf7c3100aab088cdb3b40dad335c9174f18934845ac3152fef1e0f42b42471efc0225a4ebe7e05ce3d4ab429805d5921633ffbce8f1a82ff9dec6c288f431cb7005b85ca8633c55d49bbdf4bd9cac1046064001bca7ba37e4b5eacf1940c9a78"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x0, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x6, 0x5}, {0x2, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) sendmsg$auto_SMC_NETLINK_ADD_UEID(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000900)={&(0x7f0000000680)=ANY=[@ANYBLOB="34020000", @ANYRES16=0x0, @ANYBLOB="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"], 0x234}, 0x1, 0x0, 0x0, 0x5}, 0x8000) open(0x0, 0x22040, 0x75) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) sysfs$auto(0x1, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000e3d9) pivot_root$auto(0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) unshare$auto(0x40000080) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8402, 0x0) mq_open$auto(&(0x7f0000000240)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5, 0x3, 0x0) kernel console output (not intermixed with test programs): > 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1251.774881][T22661] RSP: 002b:00007fc532f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1251.774894][T22661] RAX: ffffffffffffffda RBX: 00007fc5323e6090 RCX: 00007fc53218f7c9 [ 1251.774903][T22661] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1251.774912][T22661] RBP: 00007fc532213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1251.774920][T22661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1251.774928][T22661] R13: 00007fc5323e6128 R14: 00007fc5323e6090 R15: 00007fff33959a78 [ 1251.774948][T22661] [ 1253.062622][T22682] FAULT_INJECTION: forcing a failure. [ 1253.062622][T22682] name failslab, interval 1, probability 0, space 0, times 0 [ 1253.107569][T22682] CPU: 0 UID: 0 PID: 22682 Comm: syz.3.3629 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1253.107598][T22682] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1253.107604][T22682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1253.107614][T22682] Call Trace: [ 1253.107620][T22682] [ 1253.107627][T22682] dump_stack_lvl+0x16c/0x1f0 [ 1253.107655][T22682] should_fail_ex+0x512/0x640 [ 1253.107673][T22682] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1253.107696][T22682] should_failslab+0xc2/0x120 [ 1253.107714][T22682] __kmalloc_cache_noprof+0x72/0x800 [ 1253.107734][T22682] ? allocate_file_region_entries+0x1a0/0x620 [ 1253.107752][T22682] ? allocate_file_region_entries+0x1a0/0x620 [ 1253.107766][T22682] allocate_file_region_entries+0x1a0/0x620 [ 1253.107785][T22682] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1253.107806][T22682] region_chg+0x85/0x140 [ 1253.107822][T22682] __vma_reservation_common+0x43b/0x740 [ 1253.107839][T22682] ? __pfx___vma_reservation_common+0x10/0x10 [ 1253.107862][T22682] alloc_hugetlb_folio+0x946/0x1560 [ 1253.107884][T22682] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1253.107902][T22682] ? _raw_spin_unlock+0x28/0x50 [ 1253.107925][T22682] ? __filemap_get_folio+0x32b/0xc30 [ 1253.107950][T22682] hugetlb_fault+0x1bce/0x2f30 [ 1253.107974][T22682] ? __pfx_hugetlb_fault+0x10/0x10 [ 1253.108001][T22682] ? find_vma+0xbf/0x140 [ 1253.108013][T22682] ? __pfx_find_vma+0x10/0x10 [ 1253.108028][T22682] handle_mm_fault+0x95d/0xad0 [ 1253.108049][T22682] do_user_addr_fault+0x2e4/0xda0 [ 1253.108069][T22682] ? rcu_is_watching+0x12/0xc0 [ 1253.108086][T22682] exc_page_fault+0x64/0xc0 [ 1253.108101][T22682] asm_exc_page_fault+0x26/0x30 [ 1253.108115][T22682] RIP: 0010:__put_user_4+0xd/0x20 [ 1253.108129][T22682] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1253.108143][T22682] RSP: 0018:ffffc9000c017d78 EFLAGS: 00050246 [ 1253.108155][T22682] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1253.108163][T22682] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1253.108173][T22682] RBP: 1ffff92001802fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1253.108182][T22682] R10: ffff88803153e6b0 R11: 00000000ffffffff R12: 0000000000000000 [ 1253.108190][T22682] R13: 00000000800455d1 R14: ffff8881446d1a10 R15: ffff8881446d1a00 [ 1253.108206][T22682] ? snd_ctl_ioctl+0x322/0x13c0 [ 1253.108229][T22682] snd_ctl_ioctl+0x32c/0x13c0 [ 1253.108249][T22682] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1253.108271][T22682] ? find_held_lock+0x2b/0x80 [ 1253.108292][T22682] ? hook_file_ioctl_common+0x144/0x410 [ 1253.108313][T22682] ? __fget_files+0x20e/0x3c0 [ 1253.108331][T22682] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1253.108352][T22682] __x64_sys_ioctl+0x18e/0x210 [ 1253.108375][T22682] do_syscall_64+0xcd/0xf80 [ 1253.108391][T22682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1253.108405][T22682] RIP: 0033:0x7fbd1678f7c9 [ 1253.108417][T22682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1253.108430][T22682] RSP: 002b:00007fbd175bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1253.108443][T22682] RAX: ffffffffffffffda RBX: 00007fbd169e6090 RCX: 00007fbd1678f7c9 [ 1253.108453][T22682] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000005 [ 1253.108461][T22682] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1253.108470][T22682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1253.108478][T22682] R13: 00007fbd169e6128 R14: 00007fbd169e6090 R15: 00007ffcbce99498 [ 1253.108498][T22682] [ 1255.989491][T22718] FAULT_INJECTION: forcing a failure. [ 1255.989491][T22718] name failslab, interval 1, probability 0, space 0, times 0 [ 1256.085630][T22718] CPU: 0 UID: 0 PID: 22718 Comm: syz.1.3636 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1256.085672][T22718] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1256.085683][T22718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1256.085696][T22718] Call Trace: [ 1256.085704][T22718] [ 1256.085715][T22718] dump_stack_lvl+0x16c/0x1f0 [ 1256.085746][T22718] should_fail_ex+0x512/0x640 [ 1256.085764][T22718] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1256.085788][T22718] should_failslab+0xc2/0x120 [ 1256.085806][T22718] __kmalloc_cache_noprof+0x72/0x800 [ 1256.085827][T22718] ? allocate_file_region_entries+0x1a0/0x620 [ 1256.085846][T22718] ? allocate_file_region_entries+0x1a0/0x620 [ 1256.085860][T22718] allocate_file_region_entries+0x1a0/0x620 [ 1256.085878][T22718] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1256.085899][T22718] region_chg+0x85/0x140 [ 1256.085915][T22718] __vma_reservation_common+0x43b/0x740 [ 1256.085933][T22718] ? __pfx___vma_reservation_common+0x10/0x10 [ 1256.085956][T22718] alloc_hugetlb_folio+0x946/0x1560 [ 1256.085977][T22718] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1256.085996][T22718] ? _raw_spin_unlock+0x28/0x50 [ 1256.086019][T22718] ? __filemap_get_folio+0x32b/0xc30 [ 1256.086043][T22718] hugetlb_fault+0x1bce/0x2f30 [ 1256.086067][T22718] ? __pfx_hugetlb_fault+0x10/0x10 [ 1256.086094][T22718] ? find_vma+0xbf/0x140 [ 1256.086106][T22718] ? __pfx_find_vma+0x10/0x10 [ 1256.086121][T22718] handle_mm_fault+0x95d/0xad0 [ 1256.086142][T22718] do_user_addr_fault+0x2e4/0xda0 [ 1256.086162][T22718] ? rcu_is_watching+0x12/0xc0 [ 1256.086179][T22718] exc_page_fault+0x64/0xc0 [ 1256.086194][T22718] asm_exc_page_fault+0x26/0x30 [ 1256.086208][T22718] RIP: 0010:__put_user_4+0xd/0x20 [ 1256.086223][T22718] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1256.086237][T22718] RSP: 0018:ffffc9000bf97d78 EFLAGS: 00050246 [ 1256.086249][T22718] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1256.086257][T22718] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1256.086266][T22718] RBP: 1ffff920017f2fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1256.086276][T22718] R10: ffff88805c2e0b30 R11: 00000000ffffffff R12: 0000000000000000 [ 1256.086284][T22718] R13: 00000000800455d1 R14: ffff88807cb6c610 R15: ffff88807cb6c600 [ 1256.086300][T22718] ? snd_ctl_ioctl+0x322/0x13c0 [ 1256.086324][T22718] snd_ctl_ioctl+0x32c/0x13c0 [ 1256.086343][T22718] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1256.086365][T22718] ? find_held_lock+0x2b/0x80 [ 1256.086386][T22718] ? hook_file_ioctl_common+0x144/0x410 [ 1256.086407][T22718] ? __fget_files+0x20e/0x3c0 [ 1256.086426][T22718] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1256.086446][T22718] __x64_sys_ioctl+0x18e/0x210 [ 1256.086469][T22718] do_syscall_64+0xcd/0xf80 [ 1256.086486][T22718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1256.086499][T22718] RIP: 0033:0x7fc53218f7c9 [ 1256.086512][T22718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1256.086525][T22718] RSP: 002b:00007fc532f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.086538][T22718] RAX: ffffffffffffffda RBX: 00007fc5323e6090 RCX: 00007fc53218f7c9 [ 1256.086556][T22718] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000005 [ 1256.086565][T22718] RBP: 00007fc532213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1256.086575][T22718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.086584][T22718] R13: 00007fc5323e6128 R14: 00007fc5323e6090 R15: 00007fff33959a78 [ 1256.086605][T22718] [ 1259.457610][T22777] FAULT_INJECTION: forcing a failure. [ 1259.457610][T22777] name failslab, interval 1, probability 0, space 0, times 0 [ 1259.531797][T22777] CPU: 0 UID: 0 PID: 22777 Comm: syz.3.3643 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1259.531845][T22777] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1259.531856][T22777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1259.531870][T22777] Call Trace: [ 1259.531879][T22777] [ 1259.531891][T22777] dump_stack_lvl+0x16c/0x1f0 [ 1259.531925][T22777] should_fail_ex+0x512/0x640 [ 1259.531955][T22777] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1259.531996][T22777] should_failslab+0xc2/0x120 [ 1259.532026][T22777] __kmalloc_cache_noprof+0x72/0x800 [ 1259.532061][T22777] ? allocate_file_region_entries+0x1a0/0x620 [ 1259.532091][T22777] ? allocate_file_region_entries+0x1a0/0x620 [ 1259.532116][T22777] allocate_file_region_entries+0x1a0/0x620 [ 1259.532150][T22777] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1259.532186][T22777] region_chg+0x85/0x140 [ 1259.532213][T22777] __vma_reservation_common+0x43b/0x740 [ 1259.532244][T22777] ? __pfx___vma_reservation_common+0x10/0x10 [ 1259.532271][T22777] alloc_hugetlb_folio+0x946/0x1560 [ 1259.532301][T22777] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1259.532320][T22777] ? _raw_spin_unlock+0x28/0x50 [ 1259.532345][T22777] ? __filemap_get_folio+0x32b/0xc30 [ 1259.532371][T22777] hugetlb_fault+0x1bce/0x2f30 [ 1259.532395][T22777] ? __pfx_hugetlb_fault+0x10/0x10 [ 1259.532422][T22777] ? find_vma+0xbf/0x140 [ 1259.532434][T22777] ? __pfx_find_vma+0x10/0x10 [ 1259.532449][T22777] handle_mm_fault+0x95d/0xad0 [ 1259.532471][T22777] do_user_addr_fault+0x2e4/0xda0 [ 1259.532491][T22777] ? rcu_is_watching+0x12/0xc0 [ 1259.532507][T22777] exc_page_fault+0x64/0xc0 [ 1259.532524][T22777] asm_exc_page_fault+0x26/0x30 [ 1259.532539][T22777] RIP: 0010:__put_user_4+0xd/0x20 [ 1259.532555][T22777] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1259.532570][T22777] RSP: 0018:ffffc9000b9f7d78 EFLAGS: 00050246 [ 1259.532583][T22777] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1259.532592][T22777] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1259.532602][T22777] RBP: 1ffff9200173efb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1259.532611][T22777] R10: ffff888026028b30 R11: 00000000ffffffff R12: 0000000000000000 [ 1259.532620][T22777] R13: 00000000800455d1 R14: ffff888077b65a10 R15: ffff888077b65a00 [ 1259.532637][T22777] ? snd_ctl_ioctl+0x322/0x13c0 [ 1259.532661][T22777] snd_ctl_ioctl+0x32c/0x13c0 [ 1259.532681][T22777] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1259.532703][T22777] ? find_held_lock+0x2b/0x80 [ 1259.532723][T22777] ? hook_file_ioctl_common+0x144/0x410 [ 1259.532745][T22777] ? __fget_files+0x20e/0x3c0 [ 1259.532763][T22777] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1259.532783][T22777] __x64_sys_ioctl+0x18e/0x210 [ 1259.532806][T22777] do_syscall_64+0xcd/0xf80 [ 1259.532822][T22777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1259.532836][T22777] RIP: 0033:0x7fbd1678f7c9 [ 1259.532848][T22777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1259.532862][T22777] RSP: 002b:00007fbd175bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1259.532874][T22777] RAX: ffffffffffffffda RBX: 00007fbd169e6090 RCX: 00007fbd1678f7c9 [ 1259.532884][T22777] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000005 [ 1259.532892][T22777] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1259.532901][T22777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1259.532909][T22777] R13: 00007fbd169e6128 R14: 00007fbd169e6090 R15: 00007ffcbce99498 [ 1259.532929][T22777] [ 1273.614201][T22960] FAULT_INJECTION: forcing a failure. [ 1273.614201][T22960] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.627151][T22960] CPU: 1 UID: 0 PID: 22960 Comm: syz.3.3675 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1273.627200][T22960] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1273.627210][T22960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1273.627227][T22960] Call Trace: [ 1273.627237][T22960] [ 1273.627249][T22960] dump_stack_lvl+0x16c/0x1f0 [ 1273.627285][T22960] should_fail_ex+0x512/0x640 [ 1273.627316][T22960] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1273.627356][T22960] should_failslab+0xc2/0x120 [ 1273.627388][T22960] __kmalloc_cache_noprof+0x72/0x800 [ 1273.627425][T22960] ? allocate_file_region_entries+0x1a0/0x620 [ 1273.627460][T22960] ? allocate_file_region_entries+0x1a0/0x620 [ 1273.627487][T22960] allocate_file_region_entries+0x1a0/0x620 [ 1273.627522][T22960] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1273.627558][T22960] region_chg+0x85/0x140 [ 1273.627589][T22960] __vma_reservation_common+0x43b/0x740 [ 1273.627621][T22960] ? __pfx___vma_reservation_common+0x10/0x10 [ 1273.627663][T22960] alloc_hugetlb_folio+0x946/0x1560 [ 1273.627704][T22960] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1273.627738][T22960] ? _raw_spin_unlock+0x28/0x50 [ 1273.627781][T22960] ? __filemap_get_folio+0x32b/0xc30 [ 1273.627838][T22960] hugetlb_fault+0x1bce/0x2f30 [ 1273.627884][T22960] ? __pfx_hugetlb_fault+0x10/0x10 [ 1273.627935][T22960] ? find_vma+0xbf/0x140 [ 1273.627958][T22960] ? __pfx_find_vma+0x10/0x10 [ 1273.627987][T22960] handle_mm_fault+0x95d/0xad0 [ 1273.628027][T22960] do_user_addr_fault+0x2e4/0xda0 [ 1273.628063][T22960] ? rcu_is_watching+0x12/0xc0 [ 1273.628095][T22960] exc_page_fault+0x64/0xc0 [ 1273.628123][T22960] asm_exc_page_fault+0x26/0x30 [ 1273.628149][T22960] RIP: 0010:__put_user_4+0xd/0x20 [ 1273.628177][T22960] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1273.628204][T22960] RSP: 0018:ffffc9000410fd78 EFLAGS: 00050246 [ 1273.628227][T22960] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1273.628244][T22960] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1273.628262][T22960] RBP: 1ffff92000821fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1273.628280][T22960] R10: ffff888029e2e6b0 R11: 00000000ffffffff R12: 0000000000000000 [ 1273.628297][T22960] R13: 00000000800455d1 R14: ffff88807cb6ca10 R15: ffff88807cb6ca00 [ 1273.628327][T22960] ? snd_ctl_ioctl+0x322/0x13c0 [ 1273.628369][T22960] snd_ctl_ioctl+0x32c/0x13c0 [ 1273.628406][T22960] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1273.628454][T22960] ? find_held_lock+0x2b/0x80 [ 1273.628494][T22960] ? hook_file_ioctl_common+0x144/0x410 [ 1273.628535][T22960] ? __fget_files+0x20e/0x3c0 [ 1273.628569][T22960] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1273.628607][T22960] __x64_sys_ioctl+0x18e/0x210 [ 1273.628651][T22960] do_syscall_64+0xcd/0xf80 [ 1273.628682][T22960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.628708][T22960] RIP: 0033:0x7fbd1678f7c9 [ 1273.628727][T22960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1273.628750][T22960] RSP: 002b:00007fbd175bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1273.628771][T22960] RAX: ffffffffffffffda RBX: 00007fbd169e6090 RCX: 00007fbd1678f7c9 [ 1273.628796][T22960] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1273.628811][T22960] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1273.628826][T22960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1273.628841][T22960] R13: 00007fbd169e6128 R14: 00007fbd169e6090 R15: 00007ffcbce99498 [ 1273.628878][T22960] [ 1274.573553][T22972] FAULT_INJECTION: forcing a failure. [ 1274.573553][T22972] name failslab, interval 1, probability 0, space 0, times 0 [ 1274.615458][T22972] CPU: 1 UID: 0 PID: 22972 Comm: syz.0.3677 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1274.615488][T22972] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1274.615494][T22972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1274.615503][T22972] Call Trace: [ 1274.615510][T22972] [ 1274.615517][T22972] dump_stack_lvl+0x16c/0x1f0 [ 1274.615538][T22972] should_fail_ex+0x512/0x640 [ 1274.615556][T22972] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1274.615587][T22972] should_failslab+0xc2/0x120 [ 1274.615605][T22972] __kmalloc_cache_noprof+0x72/0x800 [ 1274.615629][T22972] ? allocate_file_region_entries+0x1a0/0x620 [ 1274.615653][T22972] ? allocate_file_region_entries+0x1a0/0x620 [ 1274.615667][T22972] allocate_file_region_entries+0x1a0/0x620 [ 1274.615686][T22972] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1274.615707][T22972] region_chg+0x85/0x140 [ 1274.615723][T22972] __vma_reservation_common+0x43b/0x740 [ 1274.615740][T22972] ? __pfx___vma_reservation_common+0x10/0x10 [ 1274.615763][T22972] alloc_hugetlb_folio+0x946/0x1560 [ 1274.615784][T22972] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1274.615803][T22972] ? _raw_spin_unlock+0x28/0x50 [ 1274.615826][T22972] ? __filemap_get_folio+0x32b/0xc30 [ 1274.615851][T22972] hugetlb_fault+0x1bce/0x2f30 [ 1274.615875][T22972] ? __pfx_hugetlb_fault+0x10/0x10 [ 1274.615902][T22972] ? find_vma+0xbf/0x140 [ 1274.615914][T22972] ? __pfx_find_vma+0x10/0x10 [ 1274.615930][T22972] handle_mm_fault+0x95d/0xad0 [ 1274.615951][T22972] do_user_addr_fault+0x2e4/0xda0 [ 1274.615970][T22972] ? rcu_is_watching+0x12/0xc0 [ 1274.615987][T22972] exc_page_fault+0x64/0xc0 [ 1274.616003][T22972] asm_exc_page_fault+0x26/0x30 [ 1274.616017][T22972] RIP: 0010:__put_user_4+0xd/0x20 [ 1274.616032][T22972] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1274.616046][T22972] RSP: 0018:ffffc9000b147d78 EFLAGS: 00050246 [ 1274.616058][T22972] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1274.616067][T22972] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1274.616076][T22972] RBP: 1ffff92001628fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1274.616085][T22972] R10: ffff88802fb38b30 R11: 00000000ffffffff R12: 0000000000000000 [ 1274.616094][T22972] R13: 00000000800455d1 R14: ffff888075c75410 R15: ffff888075c75400 [ 1274.616115][T22972] ? snd_ctl_ioctl+0x322/0x13c0 [ 1274.616140][T22972] snd_ctl_ioctl+0x32c/0x13c0 [ 1274.616161][T22972] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1274.616186][T22972] ? find_held_lock+0x2b/0x80 [ 1274.616206][T22972] ? hook_file_ioctl_common+0x144/0x410 [ 1274.616228][T22972] ? __fget_files+0x20e/0x3c0 [ 1274.616247][T22972] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1274.616268][T22972] __x64_sys_ioctl+0x18e/0x210 [ 1274.616290][T22972] do_syscall_64+0xcd/0xf80 [ 1274.616306][T22972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1274.616320][T22972] RIP: 0033:0x7f7c5398f7c9 [ 1274.616333][T22972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1274.616346][T22972] RSP: 002b:00007f7c5487f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1274.616366][T22972] RAX: ffffffffffffffda RBX: 00007f7c53be6090 RCX: 00007f7c5398f7c9 [ 1274.616376][T22972] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1274.616385][T22972] RBP: 00007f7c53a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1274.616394][T22972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1274.616403][T22972] R13: 00007f7c53be6128 R14: 00007f7c53be6090 R15: 00007fff314826d8 [ 1274.616424][T22972] [ 1279.369204][T23045] FAULT_INJECTION: forcing a failure. [ 1279.369204][T23045] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.433972][T23045] CPU: 1 UID: 0 PID: 23045 Comm: syz.1.3686 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1279.434010][T23045] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1279.434018][T23045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1279.434028][T23045] Call Trace: [ 1279.434036][T23045] [ 1279.434043][T23045] dump_stack_lvl+0x16c/0x1f0 [ 1279.434065][T23045] should_fail_ex+0x512/0x640 [ 1279.434083][T23045] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1279.434108][T23045] should_failslab+0xc2/0x120 [ 1279.434125][T23045] __kmalloc_cache_noprof+0x72/0x800 [ 1279.434146][T23045] ? allocate_file_region_entries+0x1a0/0x620 [ 1279.434167][T23045] ? allocate_file_region_entries+0x1a0/0x620 [ 1279.434181][T23045] allocate_file_region_entries+0x1a0/0x620 [ 1279.434202][T23045] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1279.434223][T23045] region_chg+0x85/0x140 [ 1279.434239][T23045] __vma_reservation_common+0x43b/0x740 [ 1279.434257][T23045] ? __pfx___vma_reservation_common+0x10/0x10 [ 1279.434279][T23045] alloc_hugetlb_folio+0x946/0x1560 [ 1279.434301][T23045] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1279.434319][T23045] ? _raw_spin_unlock+0x28/0x50 [ 1279.434342][T23045] ? __filemap_get_folio+0x32b/0xc30 [ 1279.434367][T23045] hugetlb_fault+0x1bce/0x2f30 [ 1279.434390][T23045] ? __pfx_hugetlb_fault+0x10/0x10 [ 1279.434418][T23045] ? find_vma+0xbf/0x140 [ 1279.434431][T23045] ? __pfx_find_vma+0x10/0x10 [ 1279.434446][T23045] handle_mm_fault+0x95d/0xad0 [ 1279.434467][T23045] do_user_addr_fault+0x2e4/0xda0 [ 1279.434487][T23045] ? rcu_is_watching+0x12/0xc0 [ 1279.434504][T23045] exc_page_fault+0x64/0xc0 [ 1279.434519][T23045] asm_exc_page_fault+0x26/0x30 [ 1279.434533][T23045] RIP: 0010:__put_user_4+0xd/0x20 [ 1279.434547][T23045] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1279.434561][T23045] RSP: 0018:ffffc90003eefd78 EFLAGS: 00050246 [ 1279.434573][T23045] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1279.434582][T23045] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1279.434592][T23045] RBP: 1ffff920007ddfb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1279.434602][T23045] R10: ffff88805d73c830 R11: 00000000ffffffff R12: 0000000000000000 [ 1279.434611][T23045] R13: 00000000800455d1 R14: ffff88808ae25610 R15: ffff88808ae25600 [ 1279.434626][T23045] ? snd_ctl_ioctl+0x322/0x13c0 [ 1279.434650][T23045] snd_ctl_ioctl+0x32c/0x13c0 [ 1279.434669][T23045] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1279.434692][T23045] ? find_held_lock+0x2b/0x80 [ 1279.434712][T23045] ? hook_file_ioctl_common+0x144/0x410 [ 1279.434734][T23045] ? __fget_files+0x20e/0x3c0 [ 1279.434752][T23045] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1279.434772][T23045] __x64_sys_ioctl+0x18e/0x210 [ 1279.434795][T23045] do_syscall_64+0xcd/0xf80 [ 1279.434811][T23045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.434825][T23045] RIP: 0033:0x7fc53218f7c9 [ 1279.434837][T23045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1279.434850][T23045] RSP: 002b:00007fc532f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1279.434863][T23045] RAX: ffffffffffffffda RBX: 00007fc5323e6090 RCX: 00007fc53218f7c9 [ 1279.434873][T23045] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1279.434881][T23045] RBP: 00007fc532213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1279.434890][T23045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.434907][T23045] R13: 00007fc5323e6128 R14: 00007fc5323e6090 R15: 00007fff33959a78 [ 1279.434940][T23045] [ 1281.737499][T23081] FAULT_INJECTION: forcing a failure. [ 1281.737499][T23081] name failslab, interval 1, probability 0, space 0, times 0 [ 1281.771431][T23081] CPU: 0 UID: 0 PID: 23081 Comm: syz.5.3694 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1281.771459][T23081] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1281.771465][T23081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1281.771474][T23081] Call Trace: [ 1281.771479][T23081] [ 1281.771487][T23081] dump_stack_lvl+0x16c/0x1f0 [ 1281.771529][T23081] should_fail_ex+0x512/0x640 [ 1281.771547][T23081] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1281.771570][T23081] should_failslab+0xc2/0x120 [ 1281.771588][T23081] __kmalloc_cache_noprof+0x72/0x800 [ 1281.771607][T23081] ? allocate_file_region_entries+0x1a0/0x620 [ 1281.771626][T23081] ? allocate_file_region_entries+0x1a0/0x620 [ 1281.771640][T23081] allocate_file_region_entries+0x1a0/0x620 [ 1281.771658][T23081] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1281.771679][T23081] region_chg+0x85/0x140 [ 1281.771695][T23081] __vma_reservation_common+0x43b/0x740 [ 1281.771713][T23081] ? __pfx___vma_reservation_common+0x10/0x10 [ 1281.771740][T23081] alloc_hugetlb_folio+0x946/0x1560 [ 1281.771763][T23081] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1281.771782][T23081] ? _raw_spin_unlock+0x28/0x50 [ 1281.771807][T23081] ? __filemap_get_folio+0x32b/0xc30 [ 1281.771834][T23081] hugetlb_fault+0x1bce/0x2f30 [ 1281.771858][T23081] ? __pfx_hugetlb_fault+0x10/0x10 [ 1281.771885][T23081] ? find_vma+0xbf/0x140 [ 1281.771897][T23081] ? __pfx_find_vma+0x10/0x10 [ 1281.771913][T23081] handle_mm_fault+0x95d/0xad0 [ 1281.771935][T23081] do_user_addr_fault+0x2e4/0xda0 [ 1281.771954][T23081] ? rcu_is_watching+0x12/0xc0 [ 1281.771971][T23081] exc_page_fault+0x64/0xc0 [ 1281.771987][T23081] asm_exc_page_fault+0x26/0x30 [ 1281.772001][T23081] RIP: 0010:__put_user_4+0xd/0x20 [ 1281.772016][T23081] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1281.772030][T23081] RSP: 0018:ffffc900025afd78 EFLAGS: 00050246 [ 1281.772042][T23081] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1281.772051][T23081] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1281.772061][T23081] RBP: 1ffff920004b5fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1281.772070][T23081] R10: ffff88802f1e4830 R11: 00000000ffffffff R12: 0000000000000000 [ 1281.772080][T23081] R13: 00000000800455d1 R14: ffff88807750f010 R15: ffff88807750f000 [ 1281.772096][T23081] ? snd_ctl_ioctl+0x322/0x13c0 [ 1281.772119][T23081] snd_ctl_ioctl+0x32c/0x13c0 [ 1281.772139][T23081] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1281.772161][T23081] ? find_held_lock+0x2b/0x80 [ 1281.772182][T23081] ? hook_file_ioctl_common+0x144/0x410 [ 1281.772204][T23081] ? __fget_files+0x20e/0x3c0 [ 1281.772222][T23081] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1281.772242][T23081] __x64_sys_ioctl+0x18e/0x210 [ 1281.772265][T23081] do_syscall_64+0xcd/0xf80 [ 1281.772281][T23081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.772295][T23081] RIP: 0033:0x7fc39898f7c9 [ 1281.772307][T23081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1281.772320][T23081] RSP: 002b:00007fc39985f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1281.772333][T23081] RAX: ffffffffffffffda RBX: 00007fc398be6180 RCX: 00007fc39898f7c9 [ 1281.772342][T23081] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1281.772351][T23081] RBP: 00007fc398a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1281.772359][T23081] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.772368][T23081] R13: 00007fc398be6218 R14: 00007fc398be6180 R15: 00007ffdac5895d8 [ 1281.772388][T23081] [ 1285.742607][T23125] FAULT_INJECTION: forcing a failure. [ 1285.742607][T23125] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.780832][T23125] CPU: 1 UID: 0 PID: 23125 Comm: syz.3.3701 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1285.780860][T23125] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1285.780866][T23125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1285.780875][T23125] Call Trace: [ 1285.780881][T23125] [ 1285.780888][T23125] dump_stack_lvl+0x16c/0x1f0 [ 1285.780909][T23125] should_fail_ex+0x512/0x640 [ 1285.780927][T23125] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1285.780950][T23125] should_failslab+0xc2/0x120 [ 1285.780967][T23125] __kmalloc_cache_noprof+0x72/0x800 [ 1285.780988][T23125] ? allocate_file_region_entries+0x1a0/0x620 [ 1285.781007][T23125] ? allocate_file_region_entries+0x1a0/0x620 [ 1285.781021][T23125] allocate_file_region_entries+0x1a0/0x620 [ 1285.781039][T23125] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1285.781060][T23125] region_chg+0x85/0x140 [ 1285.781077][T23125] __vma_reservation_common+0x43b/0x740 [ 1285.781094][T23125] ? __pfx___vma_reservation_common+0x10/0x10 [ 1285.781116][T23125] alloc_hugetlb_folio+0x946/0x1560 [ 1285.781138][T23125] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1285.781156][T23125] ? _raw_spin_unlock+0x28/0x50 [ 1285.781179][T23125] ? __filemap_get_folio+0x32b/0xc30 [ 1285.781204][T23125] hugetlb_fault+0x1bce/0x2f30 [ 1285.781227][T23125] ? __pfx_hugetlb_fault+0x10/0x10 [ 1285.781254][T23125] ? find_vma+0xbf/0x140 [ 1285.781266][T23125] ? __pfx_find_vma+0x10/0x10 [ 1285.781281][T23125] handle_mm_fault+0x95d/0xad0 [ 1285.781313][T23125] do_user_addr_fault+0x2e4/0xda0 [ 1285.781334][T23125] ? rcu_is_watching+0x12/0xc0 [ 1285.781351][T23125] exc_page_fault+0x64/0xc0 [ 1285.781367][T23125] asm_exc_page_fault+0x26/0x30 [ 1285.781380][T23125] RIP: 0010:__put_user_4+0xd/0x20 [ 1285.781396][T23125] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1285.781409][T23125] RSP: 0018:ffffc90004817d78 EFLAGS: 00050246 [ 1285.781425][T23125] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1285.781434][T23125] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1285.781443][T23125] RBP: 1ffff92000902fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1285.781452][T23125] R10: ffff88802137c830 R11: 00000000ffffffff R12: 0000000000000000 [ 1285.781461][T23125] R13: 00000000800455d1 R14: ffff88804c225810 R15: ffff88804c225800 [ 1285.781477][T23125] ? snd_ctl_ioctl+0x322/0x13c0 [ 1285.781502][T23125] snd_ctl_ioctl+0x32c/0x13c0 [ 1285.781522][T23125] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1285.781544][T23125] ? find_held_lock+0x2b/0x80 [ 1285.781565][T23125] ? hook_file_ioctl_common+0x144/0x410 [ 1285.781587][T23125] ? __fget_files+0x20e/0x3c0 [ 1285.781605][T23125] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1285.781625][T23125] __x64_sys_ioctl+0x18e/0x210 [ 1285.781648][T23125] do_syscall_64+0xcd/0xf80 [ 1285.781665][T23125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.781679][T23125] RIP: 0033:0x7fbd1678f7c9 [ 1285.781690][T23125] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1285.781703][T23125] RSP: 002b:00007fbd175bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1285.781716][T23125] RAX: ffffffffffffffda RBX: 00007fbd169e6090 RCX: 00007fbd1678f7c9 [ 1285.781726][T23125] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1285.781734][T23125] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1285.781743][T23125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.781751][T23125] R13: 00007fbd169e6128 R14: 00007fbd169e6090 R15: 00007ffcbce99498 [ 1285.781771][T23125] [ 1291.084622][T23192] FAULT_INJECTION: forcing a failure. [ 1291.084622][T23192] name failslab, interval 1, probability 0, space 0, times 0 [ 1291.097624][T23192] CPU: 0 UID: 0 PID: 23192 Comm: syz.3.3714 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1291.097664][T23192] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1291.097670][T23192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1291.097680][T23192] Call Trace: [ 1291.097686][T23192] [ 1291.097692][T23192] dump_stack_lvl+0x16c/0x1f0 [ 1291.097712][T23192] should_fail_ex+0x512/0x640 [ 1291.097729][T23192] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1291.097752][T23192] should_failslab+0xc2/0x120 [ 1291.097770][T23192] __kmalloc_cache_noprof+0x72/0x800 [ 1291.097790][T23192] ? allocate_file_region_entries+0x1a0/0x620 [ 1291.097808][T23192] ? allocate_file_region_entries+0x1a0/0x620 [ 1291.097822][T23192] allocate_file_region_entries+0x1a0/0x620 [ 1291.097841][T23192] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1291.097862][T23192] region_chg+0x85/0x140 [ 1291.097877][T23192] __vma_reservation_common+0x43b/0x740 [ 1291.097894][T23192] ? __pfx___vma_reservation_common+0x10/0x10 [ 1291.097917][T23192] alloc_hugetlb_folio+0x946/0x1560 [ 1291.097938][T23192] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1291.097956][T23192] ? _raw_spin_unlock+0x28/0x50 [ 1291.097979][T23192] ? __filemap_get_folio+0x32b/0xc30 [ 1291.098013][T23192] hugetlb_fault+0x1bce/0x2f30 [ 1291.098037][T23192] ? __pfx_hugetlb_fault+0x10/0x10 [ 1291.098065][T23192] ? find_vma+0xbf/0x140 [ 1291.098079][T23192] ? __pfx_find_vma+0x10/0x10 [ 1291.098094][T23192] handle_mm_fault+0x95d/0xad0 [ 1291.098116][T23192] do_user_addr_fault+0x2e4/0xda0 [ 1291.098135][T23192] ? rcu_is_watching+0x12/0xc0 [ 1291.098152][T23192] exc_page_fault+0x64/0xc0 [ 1291.098167][T23192] asm_exc_page_fault+0x26/0x30 [ 1291.098181][T23192] RIP: 0010:__put_user_4+0xd/0x20 [ 1291.098196][T23192] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1291.098209][T23192] RSP: 0018:ffffc900046a7d78 EFLAGS: 00050246 [ 1291.098222][T23192] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1291.098231][T23192] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1291.098240][T23192] RBP: 1ffff920008d4fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1291.098249][T23192] R10: ffff88802a1c29b0 R11: 00000000ffffffff R12: 0000000000000000 [ 1291.098257][T23192] R13: 00000000800455d1 R14: ffff888034056a10 R15: ffff888034056a00 [ 1291.098272][T23192] ? snd_ctl_ioctl+0x322/0x13c0 [ 1291.098296][T23192] snd_ctl_ioctl+0x32c/0x13c0 [ 1291.098315][T23192] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1291.098338][T23192] ? find_held_lock+0x2b/0x80 [ 1291.098359][T23192] ? hook_file_ioctl_common+0x144/0x410 [ 1291.098381][T23192] ? __fget_files+0x20e/0x3c0 [ 1291.098399][T23192] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1291.098420][T23192] __x64_sys_ioctl+0x18e/0x210 [ 1291.098443][T23192] do_syscall_64+0xcd/0xf80 [ 1291.098458][T23192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.098472][T23192] RIP: 0033:0x7fbd1678f7c9 [ 1291.098484][T23192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1291.098497][T23192] RSP: 002b:00007fbd175bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1291.098510][T23192] RAX: ffffffffffffffda RBX: 00007fbd169e6090 RCX: 00007fbd1678f7c9 [ 1291.098519][T23192] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000005 [ 1291.098528][T23192] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1291.098536][T23192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1291.098544][T23192] R13: 00007fbd169e6128 R14: 00007fbd169e6090 R15: 00007ffcbce99498 [ 1291.098565][T23192] [ 1299.356864][T23289] FAULT_INJECTION: forcing a failure. [ 1299.356864][T23289] name failslab, interval 1, probability 0, space 0, times 0 [ 1299.381416][T23289] CPU: 1 UID: 0 PID: 23289 Comm: syz.5.3735 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1299.381461][T23289] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1299.381472][T23289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1299.381487][T23289] Call Trace: [ 1299.381496][T23289] [ 1299.381507][T23289] dump_stack_lvl+0x16c/0x1f0 [ 1299.381543][T23289] should_fail_ex+0x512/0x640 [ 1299.381572][T23289] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1299.381612][T23289] should_failslab+0xc2/0x120 [ 1299.381643][T23289] __kmalloc_cache_noprof+0x72/0x800 [ 1299.381678][T23289] ? allocate_file_region_entries+0x1a0/0x620 [ 1299.381710][T23289] ? allocate_file_region_entries+0x1a0/0x620 [ 1299.381734][T23289] allocate_file_region_entries+0x1a0/0x620 [ 1299.381767][T23289] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1299.381799][T23289] region_chg+0x85/0x140 [ 1299.381828][T23289] __vma_reservation_common+0x43b/0x740 [ 1299.381858][T23289] ? __pfx___vma_reservation_common+0x10/0x10 [ 1299.381898][T23289] alloc_hugetlb_folio+0x946/0x1560 [ 1299.381938][T23289] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1299.381972][T23289] ? _raw_spin_unlock+0x28/0x50 [ 1299.382015][T23289] ? __filemap_get_folio+0x32b/0xc30 [ 1299.382056][T23289] hugetlb_fault+0x1bce/0x2f30 [ 1299.382096][T23289] ? __pfx_hugetlb_fault+0x10/0x10 [ 1299.382152][T23289] ? find_vma+0xbf/0x140 [ 1299.382173][T23289] ? __pfx_find_vma+0x10/0x10 [ 1299.382198][T23289] handle_mm_fault+0x95d/0xad0 [ 1299.382235][T23289] do_user_addr_fault+0x2e4/0xda0 [ 1299.382269][T23289] ? rcu_is_watching+0x12/0xc0 [ 1299.382300][T23289] exc_page_fault+0x64/0xc0 [ 1299.382328][T23289] asm_exc_page_fault+0x26/0x30 [ 1299.382353][T23289] RIP: 0010:__put_user_4+0xd/0x20 [ 1299.382376][T23289] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1299.382408][T23289] RSP: 0018:ffffc9000408fd78 EFLAGS: 00050246 [ 1299.382430][T23289] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1299.382445][T23289] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1299.382462][T23289] RBP: 1ffff92000811fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1299.382478][T23289] R10: ffff88804d058b30 R11: 00000000ffffffff R12: 0000000000000000 [ 1299.382494][T23289] R13: 00000000800455d1 R14: ffff8880782c3e10 R15: ffff8880782c3e00 [ 1299.382523][T23289] ? snd_ctl_ioctl+0x322/0x13c0 [ 1299.382563][T23289] snd_ctl_ioctl+0x32c/0x13c0 [ 1299.382599][T23289] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1299.382640][T23289] ? find_held_lock+0x2b/0x80 [ 1299.382677][T23289] ? hook_file_ioctl_common+0x144/0x410 [ 1299.382716][T23289] ? __fget_files+0x20e/0x3c0 [ 1299.382750][T23289] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1299.382789][T23289] __x64_sys_ioctl+0x18e/0x210 [ 1299.382831][T23289] do_syscall_64+0xcd/0xf80 [ 1299.382862][T23289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.382888][T23289] RIP: 0033:0x7fc39898f7c9 [ 1299.382908][T23289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1299.382934][T23289] RSP: 002b:00007fc399880038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1299.382957][T23289] RAX: ffffffffffffffda RBX: 00007fc398be6090 RCX: 00007fc39898f7c9 [ 1299.382974][T23289] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000005 [ 1299.382989][T23289] RBP: 00007fc398a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1299.383005][T23289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1299.383018][T23289] R13: 00007fc398be6128 R14: 00007fc398be6090 R15: 00007ffdac5895d8 [ 1299.383052][T23289] [ 1300.052829][T23296] FAULT_INJECTION: forcing a failure. [ 1300.052829][T23296] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.133863][T23296] CPU: 0 UID: 0 PID: 23296 Comm: syz.0.3736 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1300.133903][T23296] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1300.133909][T23296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1300.133919][T23296] Call Trace: [ 1300.133926][T23296] [ 1300.133932][T23296] dump_stack_lvl+0x16c/0x1f0 [ 1300.133954][T23296] should_fail_ex+0x512/0x640 [ 1300.133972][T23296] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1300.133996][T23296] should_failslab+0xc2/0x120 [ 1300.134020][T23296] __kmalloc_cache_noprof+0x72/0x800 [ 1300.134042][T23296] ? allocate_file_region_entries+0x1a0/0x620 [ 1300.134061][T23296] ? allocate_file_region_entries+0x1a0/0x620 [ 1300.134076][T23296] allocate_file_region_entries+0x1a0/0x620 [ 1300.134095][T23296] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1300.134116][T23296] region_chg+0x85/0x140 [ 1300.134132][T23296] __vma_reservation_common+0x43b/0x740 [ 1300.134149][T23296] ? __pfx___vma_reservation_common+0x10/0x10 [ 1300.134171][T23296] alloc_hugetlb_folio+0x946/0x1560 [ 1300.134198][T23296] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1300.134217][T23296] ? _raw_spin_unlock+0x28/0x50 [ 1300.134242][T23296] ? __filemap_get_folio+0x32b/0xc30 [ 1300.134268][T23296] hugetlb_fault+0x1bce/0x2f30 [ 1300.134292][T23296] ? __pfx_hugetlb_fault+0x10/0x10 [ 1300.134320][T23296] ? find_vma+0xbf/0x140 [ 1300.134332][T23296] ? __pfx_find_vma+0x10/0x10 [ 1300.134347][T23296] handle_mm_fault+0x95d/0xad0 [ 1300.134368][T23296] do_user_addr_fault+0x2e4/0xda0 [ 1300.134388][T23296] ? rcu_is_watching+0x12/0xc0 [ 1300.134405][T23296] exc_page_fault+0x64/0xc0 [ 1300.134421][T23296] asm_exc_page_fault+0x26/0x30 [ 1300.134434][T23296] RIP: 0010:__put_user_4+0xd/0x20 [ 1300.134450][T23296] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1300.134464][T23296] RSP: 0018:ffffc90003fafd78 EFLAGS: 00050246 [ 1300.134476][T23296] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1300.134485][T23296] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1300.134495][T23296] RBP: 1ffff920007f5fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1300.134504][T23296] R10: ffff888087eca9b0 R11: 00000000ffffffff R12: 0000000000000000 [ 1300.134513][T23296] R13: 00000000800455d1 R14: ffff888031ce4e10 R15: ffff888031ce4e00 [ 1300.134528][T23296] ? snd_ctl_ioctl+0x322/0x13c0 [ 1300.134552][T23296] snd_ctl_ioctl+0x32c/0x13c0 [ 1300.134572][T23296] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1300.134594][T23296] ? find_held_lock+0x2b/0x80 [ 1300.134614][T23296] ? hook_file_ioctl_common+0x144/0x410 [ 1300.134636][T23296] ? __fget_files+0x20e/0x3c0 [ 1300.134654][T23296] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1300.134675][T23296] __x64_sys_ioctl+0x18e/0x210 [ 1300.134697][T23296] do_syscall_64+0xcd/0xf80 [ 1300.134713][T23296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.134727][T23296] RIP: 0033:0x7f7c5398f7c9 [ 1300.134740][T23296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1300.134753][T23296] RSP: 002b:00007f7c5487f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1300.134765][T23296] RAX: ffffffffffffffda RBX: 00007f7c53be6090 RCX: 00007f7c5398f7c9 [ 1300.134775][T23296] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1300.134783][T23296] RBP: 00007f7c53a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1300.134791][T23296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.134800][T23296] R13: 00007f7c53be6128 R14: 00007f7c53be6090 R15: 00007fff314826d8 [ 1300.134820][T23296] [ 1300.670938][T23304] FAULT_INJECTION: forcing a failure. [ 1300.670938][T23304] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.729299][T23304] CPU: 1 UID: 0 PID: 23304 Comm: syz.3.3737 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1300.729345][T23304] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1300.729358][T23304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1300.729373][T23304] Call Trace: [ 1300.729383][T23304] [ 1300.729394][T23304] dump_stack_lvl+0x16c/0x1f0 [ 1300.729428][T23304] should_fail_ex+0x512/0x640 [ 1300.729458][T23304] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1300.729497][T23304] should_failslab+0xc2/0x120 [ 1300.729529][T23304] __kmalloc_cache_noprof+0x72/0x800 [ 1300.729591][T23304] ? allocate_file_region_entries+0x1a0/0x620 [ 1300.729627][T23304] ? allocate_file_region_entries+0x1a0/0x620 [ 1300.729654][T23304] allocate_file_region_entries+0x1a0/0x620 [ 1300.729692][T23304] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1300.729732][T23304] region_chg+0x85/0x140 [ 1300.729760][T23304] __vma_reservation_common+0x43b/0x740 [ 1300.729789][T23304] ? __pfx___vma_reservation_common+0x10/0x10 [ 1300.729828][T23304] alloc_hugetlb_folio+0x946/0x1560 [ 1300.729868][T23304] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1300.729901][T23304] ? _raw_spin_unlock+0x28/0x50 [ 1300.729942][T23304] ? __filemap_get_folio+0x32b/0xc30 [ 1300.729988][T23304] hugetlb_fault+0x1bce/0x2f30 [ 1300.730032][T23304] ? __pfx_hugetlb_fault+0x10/0x10 [ 1300.730092][T23304] ? find_vma+0xbf/0x140 [ 1300.730116][T23304] ? __pfx_find_vma+0x10/0x10 [ 1300.730145][T23304] handle_mm_fault+0x95d/0xad0 [ 1300.730186][T23304] do_user_addr_fault+0x2e4/0xda0 [ 1300.730221][T23304] ? rcu_is_watching+0x12/0xc0 [ 1300.730252][T23304] exc_page_fault+0x64/0xc0 [ 1300.730280][T23304] asm_exc_page_fault+0x26/0x30 [ 1300.730306][T23304] RIP: 0010:__put_user_4+0xd/0x20 [ 1300.730332][T23304] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1300.730358][T23304] RSP: 0018:ffffc9000409fd78 EFLAGS: 00050246 [ 1300.730379][T23304] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1300.730395][T23304] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1300.730412][T23304] RBP: 1ffff92000813fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1300.730430][T23304] R10: ffff8880387029b0 R11: 00000000ffffffff R12: 0000000000000000 [ 1300.730446][T23304] R13: 00000000800455d1 R14: ffff8880782c3a10 R15: ffff8880782c3a00 [ 1300.730477][T23304] ? snd_ctl_ioctl+0x322/0x13c0 [ 1300.730519][T23304] snd_ctl_ioctl+0x32c/0x13c0 [ 1300.730555][T23304] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1300.730596][T23304] ? find_held_lock+0x2b/0x80 [ 1300.730646][T23304] ? hook_file_ioctl_common+0x144/0x410 [ 1300.730686][T23304] ? __fget_files+0x20e/0x3c0 [ 1300.730715][T23304] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1300.730748][T23304] __x64_sys_ioctl+0x18e/0x210 [ 1300.730785][T23304] do_syscall_64+0xcd/0xf80 [ 1300.730814][T23304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.730840][T23304] RIP: 0033:0x7fbd1678f7c9 [ 1300.730860][T23304] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1300.730884][T23304] RSP: 002b:00007fbd175bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1300.730907][T23304] RAX: ffffffffffffffda RBX: 00007fbd169e6090 RCX: 00007fbd1678f7c9 [ 1300.730923][T23304] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1300.730937][T23304] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1300.730954][T23304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.730969][T23304] R13: 00007fbd169e6128 R14: 00007fbd169e6090 R15: 00007ffcbce99498 [ 1300.731012][T23304] [ 1305.585092][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.592323][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1306.730653][T23389] FAULT_INJECTION: forcing a failure. [ 1306.730653][T23389] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.828397][T23389] CPU: 1 UID: 0 PID: 23389 Comm: syz.3.3755 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1306.828428][T23389] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1306.828434][T23389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1306.828445][T23389] Call Trace: [ 1306.828450][T23389] [ 1306.828457][T23389] dump_stack_lvl+0x16c/0x1f0 [ 1306.828477][T23389] should_fail_ex+0x512/0x640 [ 1306.828495][T23389] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1306.828518][T23389] should_failslab+0xc2/0x120 [ 1306.828536][T23389] __kmalloc_cache_noprof+0x72/0x800 [ 1306.828556][T23389] ? allocate_file_region_entries+0x1a0/0x620 [ 1306.828575][T23389] ? allocate_file_region_entries+0x1a0/0x620 [ 1306.828590][T23389] allocate_file_region_entries+0x1a0/0x620 [ 1306.828609][T23389] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1306.828630][T23389] region_chg+0x85/0x140 [ 1306.828646][T23389] __vma_reservation_common+0x43b/0x740 [ 1306.828663][T23389] ? __pfx___vma_reservation_common+0x10/0x10 [ 1306.828685][T23389] alloc_hugetlb_folio+0x946/0x1560 [ 1306.828707][T23389] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1306.828725][T23389] ? _raw_spin_unlock+0x28/0x50 [ 1306.828748][T23389] ? __filemap_get_folio+0x32b/0xc30 [ 1306.828772][T23389] hugetlb_fault+0x1bce/0x2f30 [ 1306.828796][T23389] ? __pfx_hugetlb_fault+0x10/0x10 [ 1306.828823][T23389] ? find_vma+0xbf/0x140 [ 1306.828835][T23389] ? __pfx_find_vma+0x10/0x10 [ 1306.828850][T23389] handle_mm_fault+0x95d/0xad0 [ 1306.828871][T23389] do_user_addr_fault+0x2e4/0xda0 [ 1306.828891][T23389] ? rcu_is_watching+0x12/0xc0 [ 1306.828908][T23389] exc_page_fault+0x64/0xc0 [ 1306.828924][T23389] asm_exc_page_fault+0x26/0x30 [ 1306.828960][T23389] RIP: 0010:__put_user_4+0xd/0x20 [ 1306.828976][T23389] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1306.828991][T23389] RSP: 0018:ffffc90003c9fd78 EFLAGS: 00050246 [ 1306.829009][T23389] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1306.829018][T23389] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1306.829027][T23389] RBP: 1ffff92000793fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1306.829040][T23389] R10: ffff88802fb0e6b0 R11: 00000000ffffffff R12: 0000000000000000 [ 1306.829049][T23389] R13: 00000000800455d1 R14: ffff888078226a10 R15: ffff888078226a00 [ 1306.829065][T23389] ? snd_ctl_ioctl+0x322/0x13c0 [ 1306.829089][T23389] snd_ctl_ioctl+0x32c/0x13c0 [ 1306.829109][T23389] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1306.829131][T23389] ? find_held_lock+0x2b/0x80 [ 1306.829152][T23389] ? hook_file_ioctl_common+0x144/0x410 [ 1306.829180][T23389] ? __fget_files+0x20e/0x3c0 [ 1306.829199][T23389] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1306.829221][T23389] __x64_sys_ioctl+0x18e/0x210 [ 1306.829245][T23389] do_syscall_64+0xcd/0xf80 [ 1306.829262][T23389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.829275][T23389] RIP: 0033:0x7fbd1678f7c9 [ 1306.829288][T23389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1306.829301][T23389] RSP: 002b:00007fbd175bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1306.829314][T23389] RAX: ffffffffffffffda RBX: 00007fbd169e6090 RCX: 00007fbd1678f7c9 [ 1306.829324][T23389] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1306.829332][T23389] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1306.829340][T23389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1306.829349][T23389] R13: 00007fbd169e6128 R14: 00007fbd169e6090 R15: 00007ffcbce99498 [ 1306.829369][T23389] [ 1310.101923][T23448] can: request_module (can-proto-5) failed. [ 1310.198403][T23448] FAULT_INJECTION: forcing a failure. [ 1310.198403][T23448] name failslab, interval 1, probability 0, space 0, times 0 [ 1310.364628][T23448] CPU: 1 UID: 0 PID: 23448 Comm: syz.0.3767 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1310.364675][T23448] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1310.364686][T23448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1310.364707][T23448] Call Trace: [ 1310.364716][T23448] [ 1310.364727][T23448] dump_stack_lvl+0x16c/0x1f0 [ 1310.364762][T23448] should_fail_ex+0x512/0x640 [ 1310.364792][T23448] ? __kmalloc_noprof+0xca/0x8f0 [ 1310.364831][T23448] should_failslab+0xc2/0x120 [ 1310.364861][T23448] __kmalloc_noprof+0xdd/0x8f0 [ 1310.364895][T23448] ? lsm_blob_alloc+0x68/0x90 [ 1310.364936][T23448] ? lsm_blob_alloc+0x68/0x90 [ 1310.364970][T23448] lsm_blob_alloc+0x68/0x90 [ 1310.365007][T23448] security_sk_alloc+0x2f/0x270 [ 1310.365042][T23448] sk_prot_alloc+0x1c7/0x2a0 [ 1310.365085][T23448] sk_alloc+0x36/0xc20 [ 1310.365117][T23448] __netlink_create+0x5e/0x2c0 [ 1310.365148][T23448] ? __wake_up+0x3f/0x60 [ 1310.365176][T23448] netlink_create+0x39e/0x620 [ 1310.365209][T23448] ? __pfx_genl_bind+0x10/0x10 [ 1310.365230][T23448] ? __pfx_genl_unbind+0x10/0x10 [ 1310.365252][T23448] ? __pfx_genl_release+0x10/0x10 [ 1310.365282][T23448] __sock_create+0x339/0x8a0 [ 1310.365312][T23448] __sys_socket+0x153/0x2d0 [ 1310.365336][T23448] ? __pfx___sys_socket+0x10/0x10 [ 1310.365360][T23448] ? xfd_validate_state+0x61/0x180 [ 1310.365392][T23448] __x64_sys_socket+0x72/0xb0 [ 1310.365415][T23448] ? lockdep_hardirqs_on+0x7c/0x110 [ 1310.365439][T23448] do_syscall_64+0xcd/0xf80 [ 1310.365468][T23448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1310.365494][T23448] RIP: 0033:0x7f7c539916e7 [ 1310.365516][T23448] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1310.365540][T23448] RSP: 002b:00007f7c5489efa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1310.365563][T23448] RAX: ffffffffffffffda RBX: 00007f7c53be5fa0 RCX: 00007f7c539916e7 [ 1310.365581][T23448] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1310.365597][T23448] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1310.365613][T23448] R10: 00002000000000c0 R11: 0000000000000286 R12: 0000000000000000 [ 1310.365630][T23448] R13: 00007f7c53be6038 R14: 00007f7c53be5fa0 R15: 00007fff314826d8 [ 1310.365664][T23448] [ 1316.019843][T23521] FAULT_INJECTION: forcing a failure. [ 1316.019843][T23521] name failslab, interval 1, probability 0, space 0, times 0 [ 1316.084949][T23521] CPU: 0 UID: 0 PID: 23521 Comm: syz.5.3782 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1316.084996][T23521] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1316.085007][T23521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1316.085024][T23521] Call Trace: [ 1316.085034][T23521] [ 1316.085047][T23521] dump_stack_lvl+0x16c/0x1f0 [ 1316.085081][T23521] should_fail_ex+0x512/0x640 [ 1316.085112][T23521] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1316.085154][T23521] should_failslab+0xc2/0x120 [ 1316.085184][T23521] __kmalloc_cache_noprof+0x72/0x800 [ 1316.085221][T23521] ? allocate_file_region_entries+0x1a0/0x620 [ 1316.085255][T23521] ? allocate_file_region_entries+0x1a0/0x620 [ 1316.085282][T23521] allocate_file_region_entries+0x1a0/0x620 [ 1316.085317][T23521] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1316.085357][T23521] region_chg+0x85/0x140 [ 1316.085391][T23521] __vma_reservation_common+0x43b/0x740 [ 1316.085425][T23521] ? __pfx___vma_reservation_common+0x10/0x10 [ 1316.085467][T23521] alloc_hugetlb_folio+0x946/0x1560 [ 1316.085515][T23521] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1316.085551][T23521] ? _raw_spin_unlock+0x28/0x50 [ 1316.085587][T23521] ? __filemap_get_folio+0x32b/0xc30 [ 1316.085626][T23521] hugetlb_fault+0x1bce/0x2f30 [ 1316.085664][T23521] ? __pfx_hugetlb_fault+0x10/0x10 [ 1316.085711][T23521] ? find_vma+0xbf/0x140 [ 1316.085732][T23521] ? __pfx_find_vma+0x10/0x10 [ 1316.085760][T23521] handle_mm_fault+0x95d/0xad0 [ 1316.085800][T23521] do_user_addr_fault+0x2e4/0xda0 [ 1316.085836][T23521] ? rcu_is_watching+0x12/0xc0 [ 1316.085867][T23521] exc_page_fault+0x64/0xc0 [ 1316.085895][T23521] asm_exc_page_fault+0x26/0x30 [ 1316.085921][T23521] RIP: 0010:__put_user_4+0xd/0x20 [ 1316.085947][T23521] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1316.085973][T23521] RSP: 0018:ffffc9000d6c7d78 EFLAGS: 00050246 [ 1316.085995][T23521] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1316.086011][T23521] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1316.086029][T23521] RBP: 1ffff92001ad8fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1316.086046][T23521] R10: ffff8880315aa9b0 R11: 00000000ffffffff R12: 0000000000000000 [ 1316.086063][T23521] R13: 00000000800455d1 R14: ffff888075dea210 R15: ffff888075dea200 [ 1316.086093][T23521] ? snd_ctl_ioctl+0x322/0x13c0 [ 1316.086136][T23521] snd_ctl_ioctl+0x32c/0x13c0 [ 1316.086172][T23521] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1316.086214][T23521] ? find_held_lock+0x2b/0x80 [ 1316.086251][T23521] ? hook_file_ioctl_common+0x144/0x410 [ 1316.086291][T23521] ? __fget_files+0x20e/0x3c0 [ 1316.086325][T23521] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1316.086364][T23521] __x64_sys_ioctl+0x18e/0x210 [ 1316.086407][T23521] do_syscall_64+0xcd/0xf80 [ 1316.086438][T23521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.086464][T23521] RIP: 0033:0x7fc39898f7c9 [ 1316.086493][T23521] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1316.086520][T23521] RSP: 002b:00007fc399880038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1316.086545][T23521] RAX: ffffffffffffffda RBX: 00007fc398be6090 RCX: 00007fc39898f7c9 [ 1316.086563][T23521] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1316.086579][T23521] RBP: 00007fc398a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1316.086596][T23521] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1316.086612][T23521] R13: 00007fc398be6128 R14: 00007fc398be6090 R15: 00007ffdac5895d8 [ 1316.086651][T23521] [ 1317.206561][T23533] FAULT_INJECTION: forcing a failure. [ 1317.206561][T23533] name failslab, interval 1, probability 0, space 0, times 0 [ 1317.284579][T23533] CPU: 1 UID: 0 PID: 23533 Comm: syz.1.3784 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1317.284607][T23533] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1317.284613][T23533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1317.284622][T23533] Call Trace: [ 1317.284628][T23533] [ 1317.284634][T23533] dump_stack_lvl+0x16c/0x1f0 [ 1317.284655][T23533] should_fail_ex+0x512/0x640 [ 1317.284672][T23533] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1317.284696][T23533] should_failslab+0xc2/0x120 [ 1317.284714][T23533] __kmalloc_cache_noprof+0x72/0x800 [ 1317.284734][T23533] ? allocate_file_region_entries+0x1a0/0x620 [ 1317.284753][T23533] ? allocate_file_region_entries+0x1a0/0x620 [ 1317.284767][T23533] allocate_file_region_entries+0x1a0/0x620 [ 1317.284786][T23533] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1317.284807][T23533] region_chg+0x85/0x140 [ 1317.284823][T23533] __vma_reservation_common+0x43b/0x740 [ 1317.284840][T23533] ? __pfx___vma_reservation_common+0x10/0x10 [ 1317.284863][T23533] alloc_hugetlb_folio+0x946/0x1560 [ 1317.284884][T23533] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1317.284903][T23533] ? _raw_spin_unlock+0x28/0x50 [ 1317.284926][T23533] ? __filemap_get_folio+0x32b/0xc30 [ 1317.284951][T23533] hugetlb_fault+0x1bce/0x2f30 [ 1317.284975][T23533] ? __pfx_hugetlb_fault+0x10/0x10 [ 1317.285002][T23533] ? find_vma+0xbf/0x140 [ 1317.285014][T23533] ? __pfx_find_vma+0x10/0x10 [ 1317.285029][T23533] handle_mm_fault+0x95d/0xad0 [ 1317.285051][T23533] do_user_addr_fault+0x2e4/0xda0 [ 1317.285079][T23533] ? rcu_is_watching+0x12/0xc0 [ 1317.285097][T23533] exc_page_fault+0x64/0xc0 [ 1317.285114][T23533] asm_exc_page_fault+0x26/0x30 [ 1317.285129][T23533] RIP: 0010:__put_user_4+0xd/0x20 [ 1317.285144][T23533] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1317.285157][T23533] RSP: 0018:ffffc9000d77fd78 EFLAGS: 00050246 [ 1317.285169][T23533] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1317.285178][T23533] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1317.285187][T23533] RBP: 1ffff92001aeffb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1317.285196][T23533] R10: ffff88805a748b30 R11: 00000000ffffffff R12: 0000000000000000 [ 1317.285205][T23533] R13: 00000000800455d1 R14: ffff888034316610 R15: ffff888034316600 [ 1317.285220][T23533] ? snd_ctl_ioctl+0x322/0x13c0 [ 1317.285244][T23533] snd_ctl_ioctl+0x32c/0x13c0 [ 1317.285264][T23533] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1317.285286][T23533] ? find_held_lock+0x2b/0x80 [ 1317.285307][T23533] ? hook_file_ioctl_common+0x144/0x410 [ 1317.285328][T23533] ? __fget_files+0x20e/0x3c0 [ 1317.285346][T23533] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1317.285367][T23533] __x64_sys_ioctl+0x18e/0x210 [ 1317.285390][T23533] do_syscall_64+0xcd/0xf80 [ 1317.285406][T23533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1317.285420][T23533] RIP: 0033:0x7fc53218f7c9 [ 1317.285432][T23533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1317.285446][T23533] RSP: 002b:00007fc532f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1317.285459][T23533] RAX: ffffffffffffffda RBX: 00007fc5323e6090 RCX: 00007fc53218f7c9 [ 1317.285468][T23533] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1317.285476][T23533] RBP: 00007fc532213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1317.285485][T23533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1317.285494][T23533] R13: 00007fc5323e6128 R14: 00007fc5323e6090 R15: 00007fff33959a78 [ 1317.285513][T23533] [ 1320.576598][T23583] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8165469a (__mcheck_cpu_init_prepare_banks+0x18a/0x380) [ 1320.592903][T23583] Call Trace: [ 1320.596203][T23583] [ 1320.599156][T23583] ? __pfx___mcheck_cpu_init_prepare_banks+0x10/0x10 [ 1320.605975][T23583] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1320.611806][T23583] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 1320.618328][T23583] mce_cpu_restart+0xd9/0x1f0 [ 1320.623038][T23583] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1320.628363][T23583] smp_call_function_many_cond+0x1200/0x15e0 [ 1320.634471][T23583] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1320.639867][T23583] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1320.645697][T23583] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1320.652295][T23583] ? __pfx___try_to_del_timer_sync+0x10/0x10 [ 1320.658300][T23583] ? __pfx_mce_cpu_restart+0x10/0x10 [ 1320.663597][T23583] on_each_cpu_cond_mask+0x40/0x90 [ 1320.668720][T23583] set_bank+0x240/0x3a0 [ 1320.672885][T23583] ? __pfx_set_bank+0x10/0x10 [ 1320.677569][T23583] ? find_held_lock+0x2b/0x80 [ 1320.682263][T23583] ? __pfx_set_bank+0x10/0x10 [ 1320.686944][T23583] dev_attr_store+0x58/0x80 [ 1320.691465][T23583] ? __pfx_dev_attr_store+0x10/0x10 [ 1320.696762][T23583] sysfs_kf_write+0xf2/0x150 [ 1320.701367][T23583] kernfs_fop_write_iter+0x3af/0x570 [ 1320.706661][T23583] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1320.711897][T23583] vfs_write+0x7d3/0x11d0 [ 1320.716245][T23583] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1320.722077][T23583] ? __pfx_vfs_write+0x10/0x10 [ 1320.726883][T23583] ksys_write+0x12a/0x250 [ 1320.731230][T23583] ? __pfx_ksys_write+0x10/0x10 [ 1320.736107][T23583] do_syscall_64+0xcd/0xf80 [ 1320.740625][T23583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1320.746542][T23583] RIP: 0033:0x7fbd1678f7c9 [ 1320.750976][T23583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1320.770607][T23583] RSP: 002b:00007fbd175bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1320.779051][T23583] RAX: ffffffffffffffda RBX: 00007fbd169e6090 RCX: 00007fbd1678f7c9 [ 1320.787202][T23583] RDX: 0000000000000003 RSI: 0000200000000240 RDI: 0000000000000004 [ 1320.795179][T23583] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1320.803161][T23583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1320.811149][T23583] R13: 00007fbd169e6128 R14: 00007fbd169e6090 R15: 00007ffcbce99498 [ 1320.819154][T23583] [ 1323.258875][T23617] FAULT_INJECTION: forcing a failure. [ 1323.258875][T23617] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1323.271952][T23617] CPU: 0 UID: 0 PID: 23617 Comm: syz.0.3797 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1323.271978][T23617] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1323.271985][T23617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1323.271994][T23617] Call Trace: [ 1323.272000][T23617] [ 1323.272006][T23617] dump_stack_lvl+0x16c/0x1f0 [ 1323.272027][T23617] should_fail_ex+0x512/0x640 [ 1323.272048][T23617] get_futex_key+0x1d0/0x15f0 [ 1323.272071][T23617] ? __pfx_get_futex_key+0x10/0x10 [ 1323.272088][T23617] ? find_held_lock+0x2b/0x80 [ 1323.272116][T23617] futex_wake+0xea/0x530 [ 1323.272139][T23617] ? __pfx_futex_wake+0x10/0x10 [ 1323.272168][T23617] do_futex+0x1e3/0x350 [ 1323.272187][T23617] ? __pfx_do_futex+0x10/0x10 [ 1323.272210][T23617] __x64_sys_futex+0x1e0/0x4c0 [ 1323.272230][T23617] ? fdget_pos+0x2b8/0x370 [ 1323.272247][T23617] ? __pfx___x64_sys_futex+0x10/0x10 [ 1323.272266][T23617] ? __pfx_do_writev+0x10/0x10 [ 1323.272285][T23617] do_syscall_64+0xcd/0xf80 [ 1323.272302][T23617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.272316][T23617] RIP: 0033:0x7f7c5398f7c9 [ 1323.272329][T23617] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1323.272343][T23617] RSP: 002b:00007f7c5485e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1323.272357][T23617] RAX: ffffffffffffffda RBX: 00007f7c53be6188 RCX: 00007f7c5398f7c9 [ 1323.272366][T23617] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7c53be618c [ 1323.272375][T23617] RBP: 00007f7c53be6180 R08: 00007f7c548a1000 R09: 0000000000000000 [ 1323.272384][T23617] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1323.272393][T23617] R13: 00007f7c53be6218 R14: 00007fff314825f0 R15: 00007fff314826d8 [ 1323.272412][T23617] [ 1324.520951][T23640] FAULT_INJECTION: forcing a failure. [ 1324.520951][T23640] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.535030][T23640] CPU: 1 UID: 0 PID: 23640 Comm: syz.3.3806 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1324.535076][T23640] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1324.535087][T23640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1324.535101][T23640] Call Trace: [ 1324.535110][T23640] [ 1324.535119][T23640] dump_stack_lvl+0x16c/0x1f0 [ 1324.535150][T23640] should_fail_ex+0x512/0x640 [ 1324.535176][T23640] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1324.535211][T23640] should_failslab+0xc2/0x120 [ 1324.535238][T23640] __kmalloc_cache_noprof+0x72/0x800 [ 1324.535272][T23640] ? allocate_file_region_entries+0x1a0/0x620 [ 1324.535309][T23640] ? allocate_file_region_entries+0x1a0/0x620 [ 1324.535332][T23640] allocate_file_region_entries+0x1a0/0x620 [ 1324.535362][T23640] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1324.535396][T23640] region_chg+0x85/0x140 [ 1324.535422][T23640] __vma_reservation_common+0x43b/0x740 [ 1324.535451][T23640] ? __pfx___vma_reservation_common+0x10/0x10 [ 1324.535487][T23640] alloc_hugetlb_folio+0x946/0x1560 [ 1324.535521][T23640] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1324.535551][T23640] ? _raw_spin_unlock+0x28/0x50 [ 1324.535586][T23640] ? __filemap_get_folio+0x32b/0xc30 [ 1324.535623][T23640] hugetlb_fault+0x1bce/0x2f30 [ 1324.535659][T23640] ? __pfx_hugetlb_fault+0x10/0x10 [ 1324.535701][T23640] ? find_vma+0xbf/0x140 [ 1324.535719][T23640] ? __pfx_find_vma+0x10/0x10 [ 1324.535742][T23640] handle_mm_fault+0x95d/0xad0 [ 1324.535774][T23640] do_user_addr_fault+0x2e4/0xda0 [ 1324.535803][T23640] ? rcu_is_watching+0x12/0xc0 [ 1324.535828][T23640] exc_page_fault+0x64/0xc0 [ 1324.535851][T23640] asm_exc_page_fault+0x26/0x30 [ 1324.535872][T23640] RIP: 0010:__put_user_4+0xd/0x20 [ 1324.535895][T23640] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1324.535915][T23640] RSP: 0018:ffffc9000e3afd78 EFLAGS: 00050246 [ 1324.535934][T23640] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1324.535948][T23640] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1324.535963][T23640] RBP: 1ffff92001c75fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1324.535978][T23640] R10: ffff888026954830 R11: 00000000ffffffff R12: 0000000000000000 [ 1324.535993][T23640] R13: 00000000800455d1 R14: ffff888077bfa610 R15: ffff888077bfa600 [ 1324.536017][T23640] ? snd_ctl_ioctl+0x322/0x13c0 [ 1324.536052][T23640] snd_ctl_ioctl+0x32c/0x13c0 [ 1324.536082][T23640] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1324.536116][T23640] ? find_held_lock+0x2b/0x80 [ 1324.536147][T23640] ? hook_file_ioctl_common+0x144/0x410 [ 1324.536180][T23640] ? __fget_files+0x20e/0x3c0 [ 1324.536207][T23640] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1324.536239][T23640] __x64_sys_ioctl+0x18e/0x210 [ 1324.536273][T23640] do_syscall_64+0xcd/0xf80 [ 1324.536303][T23640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.536326][T23640] RIP: 0033:0x7fbd1678f7c9 [ 1324.536344][T23640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1324.536365][T23640] RSP: 002b:00007fbd175bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1324.536384][T23640] RAX: ffffffffffffffda RBX: 00007fbd169e6090 RCX: 00007fbd1678f7c9 [ 1324.536399][T23640] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1324.536412][T23640] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1324.536425][T23640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1324.536438][T23640] R13: 00007fbd169e6128 R14: 00007fbd169e6090 R15: 00007ffcbce99498 [ 1324.536469][T23640] [ 1325.421304][T23650] vivid-007: ================= START STATUS ================= [ 1325.453680][T23650] vivid-007: Generate PTS: true [ 1325.458840][T23650] vivid-007: Generate SCR: true [ 1325.476050][T23650] tpg source WxH: 320x240 (Y'CbCr) [ 1325.493066][T23650] tpg field: 1 [ 1325.503209][T23650] tpg crop: (0,0)/320x240 [ 1325.531446][T23650] tpg compose: (0,0)/320x240 [ 1325.536072][T23650] tpg colorspace: 8 [ 1325.550529][T23650] tpg transfer function: 0/0 [ 1325.555565][T23650] tpg Y'CbCr encoding: 0/0 [ 1325.559973][T23650] tpg quantization: 0/0 [ 1325.612170][T23650] tpg RGB range: 0/2 [ 1325.616123][T23650] vivid-007: ================== END STATUS ================== [ 1328.055083][T23722] FAULT_INJECTION: forcing a failure. [ 1328.055083][T23722] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1328.106305][T23722] CPU: 0 UID: 0 PID: 23722 Comm: syz.0.3821 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1328.106350][T23722] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1328.106360][T23722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1328.106375][T23722] Call Trace: [ 1328.106384][T23722] [ 1328.106394][T23722] dump_stack_lvl+0x16c/0x1f0 [ 1328.106425][T23722] should_fail_ex+0x512/0x640 [ 1328.106462][T23722] get_futex_key+0x1d0/0x15f0 [ 1328.106498][T23722] ? __pfx_get_futex_key+0x10/0x10 [ 1328.106529][T23722] ? find_held_lock+0x2b/0x80 [ 1328.106576][T23722] futex_wake+0xea/0x530 [ 1328.106618][T23722] ? __pfx_futex_wake+0x10/0x10 [ 1328.106668][T23722] do_futex+0x1e3/0x350 [ 1328.106701][T23722] ? __pfx_do_futex+0x10/0x10 [ 1328.106745][T23722] __x64_sys_futex+0x1e0/0x4c0 [ 1328.106803][T23722] ? fdget_pos+0x2b8/0x370 [ 1328.106836][T23722] ? __pfx___x64_sys_futex+0x10/0x10 [ 1328.106874][T23722] ? __pfx_do_writev+0x10/0x10 [ 1328.106911][T23722] do_syscall_64+0xcd/0xf80 [ 1328.106942][T23722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.106968][T23722] RIP: 0033:0x7f7c5398f7c9 [ 1328.106990][T23722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1328.107015][T23722] RSP: 002b:00007f7c5487f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1328.107041][T23722] RAX: ffffffffffffffda RBX: 00007f7c53be6098 RCX: 00007f7c5398f7c9 [ 1328.107059][T23722] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f7c53be609c [ 1328.107076][T23722] RBP: 00007f7c53be6090 R08: 00007f7c548a1000 R09: 0000000000000000 [ 1328.107093][T23722] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1328.107109][T23722] R13: 00007f7c53be6128 R14: 00007fff314825f0 R15: 00007fff314826d8 [ 1328.107148][T23722] [ 1329.884042][T23769] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3831'. [ 1331.389144][T23793] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3837'. [ 1331.758066][T23796] zswap: compressor not available [ 1332.317924][T23808] FAULT_INJECTION: forcing a failure. [ 1332.317924][T23808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1332.332491][T23808] CPU: 1 UID: 0 PID: 23808 Comm: syz.5.3841 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1332.332541][T23808] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1332.332550][T23808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1332.332563][T23808] Call Trace: [ 1332.332571][T23808] [ 1332.332580][T23808] dump_stack_lvl+0x16c/0x1f0 [ 1332.332610][T23808] should_fail_ex+0x512/0x640 [ 1332.332641][T23808] _copy_from_iter+0x2a4/0x16c0 [ 1332.332677][T23808] ? __pfx__copy_from_iter+0x10/0x10 [ 1332.332702][T23808] ? rcu_is_watching+0x12/0xc0 [ 1332.332727][T23808] ? trace_kmalloc+0x2b/0xb0 [ 1332.332751][T23808] ? __kvmalloc_node_noprof+0x3bb/0xa50 [ 1332.332773][T23808] ? security_capable+0x7e/0x260 [ 1332.332811][T23808] ? proc_sys_call_handler+0x286/0x570 [ 1332.332834][T23808] ? ns_capable_noaudit+0x1/0x110 [ 1332.332876][T23808] proc_sys_call_handler+0x3b2/0x570 [ 1332.332903][T23808] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1332.332940][T23808] vfs_write+0x7d3/0x11d0 [ 1332.332968][T23808] ? __pfx_proc_sys_write+0x10/0x10 [ 1332.332996][T23808] ? __pfx_vfs_write+0x10/0x10 [ 1332.333045][T23808] ksys_write+0x12a/0x250 [ 1332.333075][T23808] ? __pfx_ksys_write+0x10/0x10 [ 1332.333113][T23808] do_syscall_64+0xcd/0xf80 [ 1332.333139][T23808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1332.333163][T23808] RIP: 0033:0x7fc39898f7c9 [ 1332.333184][T23808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1332.333208][T23808] RSP: 002b:00007fc3998a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1332.333232][T23808] RAX: ffffffffffffffda RBX: 00007fc398be5fa0 RCX: 00007fc39898f7c9 [ 1332.333249][T23808] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1332.333264][T23808] RBP: 00007fc3998a1090 R08: 0000000000000000 R09: 0000000000000000 [ 1332.333279][T23808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1332.333294][T23808] R13: 00007fc398be6038 R14: 00007fc398be5fa0 R15: 00007ffdac5895d8 [ 1332.333330][T23808] [ 1334.136531][T23825] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3845'. [ 1334.666815][T23834] usb usb36: usbfs: process 23834 (syz.0.3846) did not claim interface 0 before use [ 1335.644942][ T30] audit: type=1400 audit(4294967301.520:23): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=23849 comm="syz.3.3852" [ 1336.674704][T12892] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 1338.714619][T12892] Bluetooth: hci3: command 0x0406 tx timeout [ 1339.446954][T23896] FAULT_INJECTION: forcing a failure. [ 1339.446954][T23896] name failslab, interval 1, probability 0, space 0, times 0 [ 1339.503284][T23896] CPU: 0 UID: 0 PID: 23896 Comm: syz.0.3862 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1339.503314][T23896] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1339.503321][T23896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1339.503330][T23896] Call Trace: [ 1339.503336][T23896] [ 1339.503342][T23896] dump_stack_lvl+0x16c/0x1f0 [ 1339.503364][T23896] should_fail_ex+0x512/0x640 [ 1339.503382][T23896] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1339.503404][T23896] should_failslab+0xc2/0x120 [ 1339.503421][T23896] __kmalloc_cache_noprof+0x72/0x800 [ 1339.503440][T23896] ? ptrace_may_access+0x35/0x50 [ 1339.503454][T23896] ? sched_core_share_pid+0x3c1/0x9d0 [ 1339.503468][T23896] ? do_raw_spin_unlock+0x172/0x230 [ 1339.503489][T23896] ? sched_core_share_pid+0x3c1/0x9d0 [ 1339.503503][T23896] sched_core_share_pid+0x3c1/0x9d0 [ 1339.503516][T23896] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1339.503532][T23896] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1339.503547][T23896] ? static_key_count+0x5a/0x70 [ 1339.503560][T23896] ? security_task_prctl+0x11c/0x160 [ 1339.503583][T23896] __do_sys_prctl+0x317/0x2220 [ 1339.503603][T23896] ? __pfx___do_sys_prctl+0x10/0x10 [ 1339.503625][T23896] do_syscall_64+0xcd/0xf80 [ 1339.503642][T23896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.503657][T23896] RIP: 0033:0x7f7c5398f7c9 [ 1339.503669][T23896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1339.503683][T23896] RSP: 002b:00007f7c548a0038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1339.503697][T23896] RAX: ffffffffffffffda RBX: 00007f7c53be5fa0 RCX: 00007f7c5398f7c9 [ 1339.503706][T23896] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 1339.503714][T23896] RBP: 00007f7c53a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1339.503723][T23896] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1339.503731][T23896] R13: 00007f7c53be6038 R14: 00007f7c53be5fa0 R15: 00007fff314826d8 [ 1339.503750][T23896] [ 1340.805420][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 1341.106485][T23919] FAULT_INJECTION: forcing a failure. [ 1341.106485][T23919] name failslab, interval 1, probability 0, space 0, times 0 [ 1341.193346][T23919] CPU: 1 UID: 0 PID: 23919 Comm: syz.0.3868 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1341.193394][T23919] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1341.193406][T23919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1341.193423][T23919] Call Trace: [ 1341.193433][T23919] [ 1341.193445][T23919] dump_stack_lvl+0x16c/0x1f0 [ 1341.193480][T23919] should_fail_ex+0x512/0x640 [ 1341.193511][T23919] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1341.193553][T23919] should_failslab+0xc2/0x120 [ 1341.193584][T23919] __kmalloc_cache_noprof+0x72/0x800 [ 1341.193622][T23919] ? vkms_plane_duplicate_state+0x45/0x130 [ 1341.193672][T23919] ? vkms_plane_duplicate_state+0x45/0x130 [ 1341.193707][T23919] vkms_plane_duplicate_state+0x45/0x130 [ 1341.193744][T23919] drm_atomic_get_plane_state+0x279/0x760 [ 1341.193780][T23919] drm_client_modeset_commit_atomic+0x237/0x7e0 [ 1341.193825][T23919] ? __mutex_lock+0x27b/0x1b10 [ 1341.193855][T23919] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1341.193888][T23919] ? trace_contention_end+0xdd/0x110 [ 1341.193959][T23919] drm_client_modeset_commit_locked+0x14d/0x580 [ 1341.194000][T23919] drm_client_modeset_commit+0x4f/0x80 [ 1341.194036][T23919] __drm_fb_helper_restore_fbdev_mode_unlocked.part.0+0x137/0x160 [ 1341.194076][T23919] drm_fb_helper_restore_fbdev_mode_unlocked+0x93/0xc0 [ 1341.194114][T23919] drm_fbdev_client_restore+0x1b/0x30 [ 1341.194141][T23919] ? __pfx_drm_fbdev_client_restore+0x10/0x10 [ 1341.194164][T23919] drm_client_dev_restore+0x200/0x2a0 [ 1341.194204][T23919] drm_release+0x2c6/0x360 [ 1341.194237][T23919] ? __pfx_drm_release+0x10/0x10 [ 1341.194265][T23919] __fput+0x402/0xb70 [ 1341.194306][T23919] task_work_run+0x150/0x240 [ 1341.194340][T23919] ? __pfx_task_work_run+0x10/0x10 [ 1341.194371][T23919] ? __do_sys_close_range+0x278/0x730 [ 1341.194408][T23919] exit_to_user_mode_loop+0xfb/0x540 [ 1341.194447][T23919] do_syscall_64+0x4ee/0xf80 [ 1341.194478][T23919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1341.194504][T23919] RIP: 0033:0x7f7c5398f7c9 [ 1341.194527][T23919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1341.194551][T23919] RSP: 002b:00007f7c548a0038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1341.194577][T23919] RAX: 0000000000000000 RBX: 00007f7c53be5fa0 RCX: 00007f7c5398f7c9 [ 1341.194596][T23919] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1341.194612][T23919] RBP: 00007f7c53a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1341.194637][T23919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1341.194654][T23919] R13: 00007f7c53be6038 R14: 00007f7c53be5fa0 R15: 00007fff314826d8 [ 1341.194692][T23919] [ 1345.736409][T23986] netlink: 'syz.3.3882': attribute type 1 has an invalid length. [ 1351.310054][T24053] snd_virmidi snd_virmidi.0: control 1:268435465:0:IAªƒ>/Æ[k<÷ÎÇmgx­Ž¬<Ú5ºœ+-Cî°ÜYÈÝ5:0 is already present [ 1354.226458][T24101] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input50 [ 1355.033774][T24104] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input51 [ 1356.199119][T24130] netlink: zone id is out of range [ 1356.204383][T24130] netlink: zone id is out of range [ 1356.209578][T24130] netlink: zone id is out of range [ 1356.239251][T24130] netlink: zone id is out of range [ 1356.292534][T24130] netlink: zone id is out of range [ 1356.362248][T24130] netlink: zone id is out of range [ 1356.405482][T24130] netlink: zone id is out of range [ 1356.435080][T24130] netlink: zone id is out of range [ 1356.510078][T24130] netlink: zone id is out of range [ 1356.522020][T24130] netlink: zone id is out of range [ 1357.811778][T24163] usb usb4: usbfs: process 24163 (syz.3.3916) did not claim interface 0 before use [ 1358.566510][T24168] FAULT_INJECTION: forcing a failure. [ 1358.566510][T24168] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1358.603403][T24168] CPU: 1 UID: 0 PID: 24168 Comm: syz.1.3918 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1358.603450][T24168] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1358.603460][T24168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1358.603475][T24168] Call Trace: [ 1358.603484][T24168] [ 1358.603495][T24168] dump_stack_lvl+0x16c/0x1f0 [ 1358.603529][T24168] should_fail_ex+0x512/0x640 [ 1358.603560][T24168] ? __schedule+0x114c/0x6150 [ 1358.603588][T24168] get_futex_key+0x1d0/0x15f0 [ 1358.603642][T24168] ? __pfx_get_futex_key+0x10/0x10 [ 1358.603689][T24168] futex_wait_setup+0x9d/0x570 [ 1358.603725][T24168] __futex_wait+0x193/0x2f0 [ 1358.603750][T24168] ? __pfx___futex_wait+0x10/0x10 [ 1358.603778][T24168] ? __pfx_futex_wake_mark+0x10/0x10 [ 1358.603821][T24168] ? futex_hash+0x2c5/0x380 [ 1358.603856][T24168] ? futex_private_hash_put+0x160/0x1b0 [ 1358.603892][T24168] futex_wait+0xe8/0x380 [ 1358.603916][T24168] ? __pfx_futex_wait+0x10/0x10 [ 1358.603948][T24168] ? __might_fault+0xe3/0x190 [ 1358.603980][T24168] ? __might_fault+0x13b/0x190 [ 1358.604022][T24168] do_futex+0x229/0x350 [ 1358.604203][T24168] ? __pfx_do_futex+0x10/0x10 [ 1358.604238][T24168] ? fput+0x70/0xf0 [ 1358.604271][T24168] ? __sys_connect+0xe0/0x160 [ 1358.604304][T24168] __x64_sys_futex+0x1e0/0x4c0 [ 1358.604346][T24168] ? __pfx___x64_sys_futex+0x10/0x10 [ 1358.604381][T24168] ? xfd_validate_state+0x61/0x180 [ 1358.604405][T24168] ? __pfx_ksys_write+0x10/0x10 [ 1358.604444][T24168] do_syscall_64+0xcd/0xf80 [ 1358.604475][T24168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.604503][T24168] RIP: 0033:0x7fc53218f7c9 [ 1358.604525][T24168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1358.604551][T24168] RSP: 002b:00007fc532f690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1358.604577][T24168] RAX: ffffffffffffffda RBX: 00007fc5323e5fa8 RCX: 00007fc53218f7c9 [ 1358.604596][T24168] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc5323e5fa8 [ 1358.604612][T24168] RBP: 00007fc5323e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1358.604628][T24168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.604643][T24168] R13: 00007fc5323e6038 R14: 00007fff33959990 R15: 00007fff33959a78 [ 1358.604680][T24168] [ 1360.537347][T24201] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3923'. [ 1360.571209][T24201] __report_access: 55 callbacks suppressed [ 1360.571231][T24201] ptrace attach of "./syz-executor exec"[19602] was attempted by "./syz-executor exec"[24201] [ 1361.597935][T24224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3929'. [ 1361.678124][T24226] vivid-007: ================= START STATUS ================= [ 1361.753344][T24226] vivid-007: Enable Output Cropping: true [ 1361.762636][T24226] vivid-007: Enable Output Composing: true [ 1361.769313][T24226] vivid-007: Enable Output Scaler: true [ 1361.781633][T24226] vivid-007: Tx RGB Quantization Range: Automatic [ 1361.803434][T24226] vivid-007: Transmit Mode: HDMI [ 1361.831864][T24226] vivid-007: Hotplug Present: 0x00000000 [ 1361.853684][T24226] vivid-007: RxSense Present: 0x00000000 [ 1361.859660][T24226] vivid-007: EDID Present: 0x00000000 [ 1361.891872][T24234] FAULT_INJECTION: forcing a failure. [ 1361.891872][T24234] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.901682][T24233] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3931'. [ 1361.941531][T24226] vivid-007: ================== END STATUS ================== [ 1361.950142][T24234] CPU: 1 UID: 0 PID: 24234 Comm: syz.3.3933 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1361.950182][T24234] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1361.950191][T24234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1361.950204][T24234] Call Trace: [ 1361.950213][T24234] [ 1361.950223][T24234] dump_stack_lvl+0x16c/0x1f0 [ 1361.950258][T24234] should_fail_ex+0x512/0x640 [ 1361.950282][T24234] ? fs_reclaim_acquire+0xae/0x150 [ 1361.950311][T24234] should_failslab+0xc2/0x120 [ 1361.950339][T24234] __kmalloc_noprof+0xdd/0x8f0 [ 1361.950370][T24234] ? tomoyo_encode2+0x100/0x3e0 [ 1361.950408][T24234] ? tomoyo_encode2+0x100/0x3e0 [ 1361.950445][T24234] tomoyo_encode2+0x100/0x3e0 [ 1361.950480][T24234] tomoyo_encode+0x29/0x50 [ 1361.950510][T24234] tomoyo_realpath_from_path+0x18f/0x6e0 [ 1361.950552][T24234] tomoyo_check_open_permission+0x2ab/0x3c0 [ 1361.950581][T24234] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1361.950646][T24234] ? do_raw_spin_lock+0x12c/0x2b0 [ 1361.950689][T24234] tomoyo_file_open+0x6b/0x90 [ 1361.950727][T24234] security_file_open+0x84/0x1e0 [ 1361.950757][T24234] do_dentry_open+0x597/0x1590 [ 1361.950787][T24234] ? security_inode_permission+0xbf/0x260 [ 1361.950821][T24234] vfs_open+0x82/0x3f0 [ 1361.950860][T24234] path_openat+0x2078/0x3140 [ 1361.950896][T24234] ? __pfx_path_openat+0x10/0x10 [ 1361.950934][T24234] do_filp_open+0x20b/0x470 [ 1361.950963][T24234] ? __pfx_do_filp_open+0x10/0x10 [ 1361.951015][T24234] ? alloc_fd+0x471/0x7d0 [ 1361.951048][T24234] do_sys_openat2+0x11f/0x280 [ 1361.951075][T24234] ? __pfx_do_sys_openat2+0x10/0x10 [ 1361.951106][T24234] ? __fget_files+0x20e/0x3c0 [ 1361.951138][T24234] __x64_sys_openat+0x174/0x210 [ 1361.951166][T24234] ? __pfx___x64_sys_openat+0x10/0x10 [ 1361.951193][T24234] ? ksys_write+0x1ac/0x250 [ 1361.951225][T24234] do_syscall_64+0xcd/0xf80 [ 1361.951249][T24234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.951270][T24234] RIP: 0033:0x7fbd1678f7c9 [ 1361.951288][T24234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1361.951308][T24234] RSP: 002b:00007fbd175dc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1361.951328][T24234] RAX: ffffffffffffffda RBX: 00007fbd169e5fa0 RCX: 00007fbd1678f7c9 [ 1361.951342][T24234] RDX: 0000000000008080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1361.951356][T24234] RBP: 00007fbd175dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1361.951369][T24234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1361.951382][T24234] R13: 00007fbd169e6038 R14: 00007fbd169e5fa0 R15: 00007ffcbce99498 [ 1361.951411][T24234] [ 1361.952400][T24234] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1362.237243][T12892] Bluetooth: hci4: unexpected event 0x14 length: 16 > 6 [ 1362.867473][T12892] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 1363.385851][T24263] FAULT_INJECTION: forcing a failure. [ 1363.385851][T24263] name failslab, interval 1, probability 0, space 0, times 0 [ 1363.454643][T24263] CPU: 1 UID: 0 PID: 24263 Comm: syz.5.3939 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1363.454671][T24263] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1363.454676][T24263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1363.454686][T24263] Call Trace: [ 1363.454691][T24263] [ 1363.454697][T24263] dump_stack_lvl+0x16c/0x1f0 [ 1363.454719][T24263] should_fail_ex+0x512/0x640 [ 1363.454737][T24263] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1363.454760][T24263] should_failslab+0xc2/0x120 [ 1363.454778][T24263] __kmalloc_cache_noprof+0x72/0x800 [ 1363.454797][T24263] ? allocate_file_region_entries+0x1a0/0x620 [ 1363.454816][T24263] ? allocate_file_region_entries+0x1a0/0x620 [ 1363.454829][T24263] allocate_file_region_entries+0x1a0/0x620 [ 1363.454848][T24263] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1363.454869][T24263] region_chg+0x85/0x140 [ 1363.454885][T24263] __vma_reservation_common+0x43b/0x740 [ 1363.454902][T24263] ? __pfx___vma_reservation_common+0x10/0x10 [ 1363.454925][T24263] alloc_hugetlb_folio+0x946/0x1560 [ 1363.454946][T24263] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1363.454965][T24263] ? _raw_spin_unlock+0x28/0x50 [ 1363.454988][T24263] ? __filemap_get_folio+0x32b/0xc30 [ 1363.455012][T24263] hugetlb_fault+0x1bce/0x2f30 [ 1363.455036][T24263] ? __pfx_hugetlb_fault+0x10/0x10 [ 1363.455063][T24263] ? find_vma+0xbf/0x140 [ 1363.455075][T24263] ? __pfx_find_vma+0x10/0x10 [ 1363.455090][T24263] handle_mm_fault+0x95d/0xad0 [ 1363.455112][T24263] do_user_addr_fault+0x2e4/0xda0 [ 1363.455131][T24263] ? rcu_is_watching+0x12/0xc0 [ 1363.455148][T24263] exc_page_fault+0x64/0xc0 [ 1363.455163][T24263] asm_exc_page_fault+0x26/0x30 [ 1363.455177][T24263] RIP: 0010:__put_user_4+0xd/0x20 [ 1363.455192][T24263] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1363.455205][T24263] RSP: 0018:ffffc9000c8ffd78 EFLAGS: 00050246 [ 1363.455218][T24263] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1363.455227][T24263] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1363.455237][T24263] RBP: 1ffff9200191ffb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1363.455247][T24263] R10: ffff88802cd70b30 R11: 00000000ffffffff R12: 0000000000000000 [ 1363.455255][T24263] R13: 00000000800455d1 R14: ffff8880346c9210 R15: ffff8880346c9200 [ 1363.455271][T24263] ? snd_ctl_ioctl+0x322/0x13c0 [ 1363.455294][T24263] snd_ctl_ioctl+0x32c/0x13c0 [ 1363.455314][T24263] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1363.455336][T24263] ? find_held_lock+0x2b/0x80 [ 1363.455356][T24263] ? hook_file_ioctl_common+0x144/0x410 [ 1363.455378][T24263] ? __fget_files+0x20e/0x3c0 [ 1363.455396][T24263] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1363.455416][T24263] __x64_sys_ioctl+0x18e/0x210 [ 1363.455439][T24263] do_syscall_64+0xcd/0xf80 [ 1363.455455][T24263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.455469][T24263] RIP: 0033:0x7fc39898f7c9 [ 1363.455481][T24263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.455495][T24263] RSP: 002b:00007fc399880038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1363.455508][T24263] RAX: ffffffffffffffda RBX: 00007fc398be6090 RCX: 00007fc39898f7c9 [ 1363.455517][T24263] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1363.455526][T24263] RBP: 00007fc398a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1363.455535][T24263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1363.455543][T24263] R13: 00007fc398be6128 R14: 00007fc398be6090 R15: 00007ffdac5895d8 [ 1363.455563][T24263] [ 1364.484676][T24282] [U] [ 1364.487744][T24282] [U] [ 1364.490427][T24282] [U] [ 1364.493118][T24282] [U] [ 1364.495810][T24282] [U] [ 1364.521113][T24282] [U] [ 1364.523872][T24282] [U] [ 1364.526587][T24282] [U] [ 1364.529298][T24282] [U] [ 1364.621415][T24282] [U] [ 1364.624183][T24282] [U] [ 1364.627091][T24282] [U] [ 1364.629799][T24282] [U] [ 1364.707013][T24282] [U] [ 1364.709782][T24282] [U] [ 1364.712518][T24282] [U] [ 1364.715245][T24282] [U] [ 1364.753420][T24282] [U] [ 1364.756189][T24282] [U] [ 1364.758906][T24282] [U] [ 1364.761618][T24282] [U] [ 1364.794079][T24282] [U] [ 1364.796797][T24282] [U] [ 1364.799509][T24282] [U] [ 1364.802220][T24282] [U] [ 1364.805909][T24282] [U] [ 1364.808648][T24282] [U] [ 1364.811364][T24282] [U] [ 1364.814127][T24282] [U] [ 1364.830313][T24282] [U] [ 1364.833058][T24282] [U] [ 1364.835758][T24282] [U] [ 1364.838458][T24282] [U] [ 1364.875889][T24282] [U] [ 1364.879380][T24282] [U] [ 1364.882110][T24282] [U] [ 1364.884980][T24282] [U] [ 1364.953331][T12892] Bluetooth: hci1: command 0x0c1a tx timeout [ 1364.995972][T24282] [U] [ 1364.998737][T24282] [U] [ 1365.001458][T24282] [U] [ 1365.004184][T24282] [U] [ 1365.037587][T24282] [U] [ 1365.040339][T24282] [U] [ 1365.043057][T24282] [U] [ 1365.045752][T24282] [U] [ 1365.094548][T24282] [U] [ 1365.097281][T24282] [U] [ 1365.099969][T24282] [U] [ 1365.102645][T24282] [U] [ 1365.127102][T24282] [U] [ 1365.129855][T24282] [U] [ 1365.132572][T24282] [U] [ 1365.135298][T24282] [U] [ 1365.180109][T24282] [U] [ 1365.182873][T24282] [U] [ 1365.185590][T24282] [U] [ 1365.188310][T24282] [U] [ 1365.196937][T24282] [U] [ 1365.199699][T24282] [U] [ 1365.202414][T24282] [U] [ 1365.205127][T24282] [U] [ 1365.210057][T24282] [U] [ 1365.212788][T24282] [U] [ 1365.215503][T24282] [U] [ 1365.218233][T24282] [U] [ 1365.222239][T24282] [U] [ 1365.224970][T24282] [U] [ 1365.227694][T24282] [U] [ 1365.230413][T24282] [U] [ 1365.263536][T24282] [U] [ 1365.266295][T24282] [U] [ 1365.269462][T24282] [U] [ 1365.272189][T24282] [U] [ 1365.344252][T24282] [U] [ 1365.347006][T24282] [U] [ 1365.349713][T24282] [U] [ 1365.352422][T24282] [U] [ 1365.476796][T24282] [U] [ 1365.479573][T24282] [U] [ 1365.482291][T24282] [U] [ 1365.485026][T24282] [U] [ 1365.554563][T24282] [U] [ 1365.557305][T24282] [U] [ 1365.560008][T24282] [U] [ 1365.562694][T24282] [U] [ 1365.666374][T24282] [U] [ 1367.041678][T12892] Bluetooth: hci1: command 0x0c1a tx timeout [ 1367.053597][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.060019][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.381857][T24324] FAULT_INJECTION: forcing a failure. [ 1367.381857][T24324] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.396840][T24324] CPU: 0 UID: 0 PID: 24324 Comm: syz.3.3951 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1367.396885][T24324] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1367.396896][T24324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1367.396916][T24324] Call Trace: [ 1367.396925][T24324] [ 1367.396936][T24324] dump_stack_lvl+0x16c/0x1f0 [ 1367.396970][T24324] should_fail_ex+0x512/0x640 [ 1367.397000][T24324] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1367.397040][T24324] should_failslab+0xc2/0x120 [ 1367.397071][T24324] __kmalloc_cache_noprof+0x72/0x800 [ 1367.397103][T24324] ? ptrace_may_access+0x35/0x50 [ 1367.397128][T24324] ? sched_core_share_pid+0x3c1/0x9d0 [ 1367.397154][T24324] ? do_raw_spin_unlock+0x172/0x230 [ 1367.397197][T24324] ? sched_core_share_pid+0x3c1/0x9d0 [ 1367.397223][T24324] sched_core_share_pid+0x3c1/0x9d0 [ 1367.397248][T24324] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1367.397279][T24324] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1367.397306][T24324] ? static_key_count+0x5a/0x70 [ 1367.397329][T24324] ? security_task_prctl+0x11c/0x160 [ 1367.397370][T24324] __do_sys_prctl+0x317/0x2220 [ 1367.397404][T24324] ? __pfx___do_sys_prctl+0x10/0x10 [ 1367.397437][T24324] ? fput+0x70/0xf0 [ 1367.397474][T24324] do_syscall_64+0xcd/0xf80 [ 1367.397504][T24324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.397529][T24324] RIP: 0033:0x7fbd1678f7c9 [ 1367.397551][T24324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1367.397576][T24324] RSP: 002b:00007fbd1759a038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1367.397600][T24324] RAX: ffffffffffffffda RBX: 00007fbd169e6180 RCX: 00007fbd1678f7c9 [ 1367.397618][T24324] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 1367.397633][T24324] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1367.397650][T24324] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1367.397665][T24324] R13: 00007fbd169e6218 R14: 00007fbd169e6180 R15: 00007ffcbce99498 [ 1367.397702][T24324] [ 1367.638286][T24328] FAULT_INJECTION: forcing a failure. [ 1367.638286][T24328] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.658024][T24328] CPU: 1 UID: 0 PID: 24328 Comm: syz.1.3952 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1367.658073][T24328] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1367.658084][T24328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1367.658101][T24328] Call Trace: [ 1367.658111][T24328] [ 1367.658123][T24328] dump_stack_lvl+0x16c/0x1f0 [ 1367.658168][T24328] should_fail_ex+0x512/0x640 [ 1367.658200][T24328] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1367.658242][T24328] should_failslab+0xc2/0x120 [ 1367.658274][T24328] __kmalloc_cache_noprof+0x72/0x800 [ 1367.658310][T24328] ? allocate_file_region_entries+0x1a0/0x620 [ 1367.658344][T24328] ? allocate_file_region_entries+0x1a0/0x620 [ 1367.658370][T24328] allocate_file_region_entries+0x1a0/0x620 [ 1367.658406][T24328] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1367.658446][T24328] region_chg+0x85/0x140 [ 1367.658476][T24328] __vma_reservation_common+0x43b/0x740 [ 1367.658510][T24328] ? __pfx___vma_reservation_common+0x10/0x10 [ 1367.658553][T24328] alloc_hugetlb_folio+0x946/0x1560 [ 1367.658594][T24328] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1367.658629][T24328] ? _raw_spin_unlock+0x28/0x50 [ 1367.658672][T24328] ? __filemap_get_folio+0x32b/0xc30 [ 1367.658718][T24328] hugetlb_fault+0x1bce/0x2f30 [ 1367.658763][T24328] ? __pfx_hugetlb_fault+0x10/0x10 [ 1367.658814][T24328] ? find_vma+0xbf/0x140 [ 1367.658837][T24328] ? __pfx_find_vma+0x10/0x10 [ 1367.658866][T24328] handle_mm_fault+0x95d/0xad0 [ 1367.658906][T24328] do_user_addr_fault+0x2e4/0xda0 [ 1367.658944][T24328] ? rcu_is_watching+0x12/0xc0 [ 1367.658975][T24328] exc_page_fault+0x64/0xc0 [ 1367.659004][T24328] asm_exc_page_fault+0x26/0x30 [ 1367.659036][T24328] RIP: 0010:__put_user_4+0xd/0x20 [ 1367.659064][T24328] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1367.659090][T24328] RSP: 0018:ffffc9000d4afd78 EFLAGS: 00050246 [ 1367.659113][T24328] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1367.659128][T24328] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1367.659153][T24328] RBP: 1ffff92001a95fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1367.659171][T24328] R10: ffff8880261829b0 R11: 00000000ffffffff R12: 0000000000000000 [ 1367.659189][T24328] R13: 00000000800455d1 R14: ffff888077cc9a10 R15: ffff888077cc9a00 [ 1367.659220][T24328] ? snd_ctl_ioctl+0x322/0x13c0 [ 1367.659265][T24328] snd_ctl_ioctl+0x32c/0x13c0 [ 1367.659303][T24328] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1367.659346][T24328] ? find_held_lock+0x2b/0x80 [ 1367.659384][T24328] ? hook_file_ioctl_common+0x144/0x410 [ 1367.659425][T24328] ? __fget_files+0x20e/0x3c0 [ 1367.659459][T24328] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1367.659498][T24328] __x64_sys_ioctl+0x18e/0x210 [ 1367.659540][T24328] do_syscall_64+0xcd/0xf80 [ 1367.659571][T24328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.659597][T24328] RIP: 0033:0x7fc53218f7c9 [ 1367.659619][T24328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1367.659646][T24328] RSP: 002b:00007fc532f48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1367.659670][T24328] RAX: ffffffffffffffda RBX: 00007fc5323e6090 RCX: 00007fc53218f7c9 [ 1367.659688][T24328] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1367.659704][T24328] RBP: 00007fc532213f91 R08: 0000000000000000 R09: 0000000000000000 [ 1367.659721][T24328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1367.659737][T24328] R13: 00007fc5323e6128 R14: 00007fc5323e6090 R15: 00007fff33959a78 [ 1367.659777][T24328] [ 1368.487316][T24337] FAULT_INJECTION: forcing a failure. [ 1368.487316][T24337] name failslab, interval 1, probability 0, space 0, times 0 [ 1368.512536][T24337] CPU: 0 UID: 0 PID: 24337 Comm: syz.5.3953 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1368.512565][T24337] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1368.512571][T24337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1368.512581][T24337] Call Trace: [ 1368.512588][T24337] [ 1368.512594][T24337] dump_stack_lvl+0x16c/0x1f0 [ 1368.512615][T24337] should_fail_ex+0x512/0x640 [ 1368.512632][T24337] ? __kmalloc_noprof+0xca/0x8f0 [ 1368.512654][T24337] should_failslab+0xc2/0x120 [ 1368.512671][T24337] __kmalloc_noprof+0xdd/0x8f0 [ 1368.512690][T24337] ? __register_sysctl_table+0xb3/0x1900 [ 1368.512709][T24337] ? __register_sysctl_table+0xb3/0x1900 [ 1368.512723][T24337] __register_sysctl_table+0xb3/0x1900 [ 1368.512738][T24337] ? is_module_address+0x5f/0xf0 [ 1368.512761][T24337] ? __pfx___register_sysctl_table+0x10/0x10 [ 1368.512782][T24337] ? is_module_address+0x69/0xf0 [ 1368.512802][T24337] ? register_net_sysctl_sz+0x222/0x3d0 [ 1368.512826][T24337] ? nr_free_zone_pages+0xcf/0x210 [ 1368.512843][T24337] ip_vs_control_net_init+0x1506/0x1d20 [ 1368.512867][T24337] __ip_vs_init+0x217/0x520 [ 1368.512887][T24337] ? __pfx___ip_vs_init+0x10/0x10 [ 1368.512905][T24337] ops_init+0x1e2/0x5f0 [ 1368.512926][T24337] setup_net+0x11d/0x3a0 [ 1368.512945][T24337] ? __pfx_setup_net+0x10/0x10 [ 1368.512962][T24337] ? lockdep_init_map_type+0x5c/0x270 [ 1368.512980][T24337] ? mutex_init_lockep+0x110/0x150 [ 1368.513000][T24337] copy_net_ns+0x351/0x5d0 [ 1368.513026][T24337] create_new_namespaces+0x3ea/0xab0 [ 1368.513051][T24337] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1368.513078][T24337] ksys_unshare+0x45b/0xa40 [ 1368.513094][T24337] ? __pfx_ksys_unshare+0x10/0x10 [ 1368.513110][T24337] ? xfd_validate_state+0x61/0x180 [ 1368.513130][T24337] __x64_sys_unshare+0x31/0x40 [ 1368.513145][T24337] do_syscall_64+0xcd/0xf80 [ 1368.513161][T24337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1368.513176][T24337] RIP: 0033:0x7fc39898f7c9 [ 1368.513190][T24337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1368.513204][T24337] RSP: 002b:00007fc3998a1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1368.513218][T24337] RAX: ffffffffffffffda RBX: 00007fc398be5fa0 RCX: 00007fc39898f7c9 [ 1368.513227][T24337] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1368.513236][T24337] RBP: 00007fc398a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1368.513245][T24337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1368.513253][T24337] R13: 00007fc398be6038 R14: 00007fc398be5fa0 R15: 00007ffdac5895d8 [ 1368.513274][T24337] [ 1370.084286][T24363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3959'. [ 1371.425854][ T30] audit: type=1800 audit(4294967337.300:24): pid=24388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3965" name="members" dev="configfs" ino=306049 res=0 errno=0 [ 1371.484465][T24391] FAULT_INJECTION: forcing a failure. [ 1371.484465][T24391] name failslab, interval 1, probability 0, space 0, times 0 [ 1371.484540][T24391] CPU: 1 UID: 0 PID: 24391 Comm: syz.1.3963 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1371.484562][T24391] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1371.484568][T24391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1371.484577][T24391] Call Trace: [ 1371.484582][T24391] [ 1371.484588][T24391] dump_stack_lvl+0x16c/0x1f0 [ 1371.484607][T24391] should_fail_ex+0x512/0x640 [ 1371.484624][T24391] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1371.484645][T24391] should_failslab+0xc2/0x120 [ 1371.484662][T24391] __kmalloc_cache_noprof+0x72/0x800 [ 1371.484682][T24391] ? drm_atomic_state_alloc+0xb8/0x120 [ 1371.484702][T24391] ? drm_atomic_state_alloc+0xb8/0x120 [ 1371.484718][T24391] drm_atomic_state_alloc+0xb8/0x120 [ 1371.484737][T24391] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 1371.484767][T24391] ? trace_contention_end+0xdd/0x110 [ 1371.484798][T24391] ? __mutex_lock+0x27b/0x1b10 [ 1371.484824][T24391] ? drm_master_internal_acquire+0x21/0x80 [ 1371.484846][T24391] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1371.484885][T24391] drm_client_modeset_dpms+0x17e/0x210 [ 1371.484905][T24391] drm_fb_helper_blank+0x13d/0x260 [ 1371.484929][T24391] fb_blank+0xbb/0x200 [ 1371.484947][T24391] do_fb_ioctl+0x430/0x7e0 [ 1371.484966][T24391] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1371.484987][T24391] ? find_held_lock+0x2b/0x80 [ 1371.485012][T24391] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1371.485047][T24391] ? __fget_files+0x20e/0x3c0 [ 1371.485066][T24391] fb_ioctl+0xe5/0x150 [ 1371.485082][T24391] ? __pfx_fb_ioctl+0x10/0x10 [ 1371.485100][T24391] __x64_sys_ioctl+0x18e/0x210 [ 1371.485123][T24391] do_syscall_64+0xcd/0xf80 [ 1371.485140][T24391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1371.485154][T24391] RIP: 0033:0x7fc53218f7c9 [ 1371.485166][T24391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1371.485180][T24391] RSP: 002b:00007fc5303f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1371.485193][T24391] RAX: ffffffffffffffda RBX: 00007fc5323e6180 RCX: 00007fc53218f7c9 [ 1371.485203][T24391] RDX: 0000000000000003 RSI: 0000000000004611 RDI: 0000000000000003 [ 1371.485211][T24391] RBP: 00007fc5303f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1371.485219][T24391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1371.485227][T24391] R13: 00007fc5323e6218 R14: 00007fc5323e6180 R15: 00007fff33959a78 [ 1371.485248][T24391] [ 1372.420140][T24415] FAULT_INJECTION: forcing a failure. [ 1372.420140][T24415] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.438289][T24415] CPU: 1 UID: 0 PID: 24415 Comm: syz.3.3972 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1372.438340][T24415] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1372.438351][T24415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1372.438368][T24415] Call Trace: [ 1372.438377][T24415] [ 1372.438388][T24415] dump_stack_lvl+0x16c/0x1f0 [ 1372.438423][T24415] should_fail_ex+0x512/0x640 [ 1372.438462][T24415] ? __kmalloc_noprof+0xca/0x8f0 [ 1372.438501][T24415] should_failslab+0xc2/0x120 [ 1372.438533][T24415] __kmalloc_noprof+0xdd/0x8f0 [ 1372.438568][T24415] ? lsm_blob_alloc+0x68/0x90 [ 1372.438612][T24415] ? lsm_blob_alloc+0x68/0x90 [ 1372.438646][T24415] lsm_blob_alloc+0x68/0x90 [ 1372.438684][T24415] security_prepare_creds+0x2f/0x270 [ 1372.438721][T24415] prepare_creds+0x501/0x740 [ 1372.438760][T24415] cap_task_prctl+0x559/0xa80 [ 1372.438791][T24415] security_task_prctl+0xc2/0x160 [ 1372.438834][T24415] __do_sys_prctl+0xaa/0x2220 [ 1372.438871][T24415] ? __pfx___do_sys_prctl+0x10/0x10 [ 1372.438916][T24415] do_syscall_64+0xcd/0xf80 [ 1372.438947][T24415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.438974][T24415] RIP: 0033:0x7fbd1678f7c9 [ 1372.438996][T24415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1372.439022][T24415] RSP: 002b:00007fbd175dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1372.439049][T24415] RAX: ffffffffffffffda RBX: 00007fbd169e5fa0 RCX: 00007fbd1678f7c9 [ 1372.439069][T24415] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000018 [ 1372.439086][T24415] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1372.439103][T24415] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1372.439119][T24415] R13: 00007fbd169e6038 R14: 00007fbd169e5fa0 R15: 00007ffcbce99498 [ 1372.439155][T24415] [ 1374.158123][T24443] FAULT_INJECTION: forcing a failure. [ 1374.158123][T24443] name failslab, interval 1, probability 0, space 0, times 0 [ 1374.243285][T24443] CPU: 0 UID: 0 PID: 24443 Comm: syz.5.3977 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1374.243329][T24443] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1374.243341][T24443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1374.243355][T24443] Call Trace: [ 1374.243364][T24443] [ 1374.243373][T24443] dump_stack_lvl+0x16c/0x1f0 [ 1374.243407][T24443] should_fail_ex+0x512/0x640 [ 1374.243437][T24443] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1374.243475][T24443] should_failslab+0xc2/0x120 [ 1374.243504][T24443] __kmalloc_cache_noprof+0x72/0x800 [ 1374.243536][T24443] ? ptrace_may_access+0x35/0x50 [ 1374.243561][T24443] ? sched_core_share_pid+0x3c1/0x9d0 [ 1374.243587][T24443] ? do_raw_spin_unlock+0x172/0x230 [ 1374.243624][T24443] ? sched_core_share_pid+0x3c1/0x9d0 [ 1374.243649][T24443] sched_core_share_pid+0x3c1/0x9d0 [ 1374.243672][T24443] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1374.243700][T24443] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1374.243723][T24443] ? static_key_count+0x5a/0x70 [ 1374.243745][T24443] ? security_task_prctl+0x11c/0x160 [ 1374.243787][T24443] __do_sys_prctl+0x317/0x2220 [ 1374.243820][T24443] ? __pfx___do_sys_prctl+0x10/0x10 [ 1374.243863][T24443] do_syscall_64+0xcd/0xf80 [ 1374.243891][T24443] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1374.243916][T24443] RIP: 0033:0x7fc39898f7c9 [ 1374.243935][T24443] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1374.243959][T24443] RSP: 002b:00007fc399880038 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1374.243984][T24443] RAX: ffffffffffffffda RBX: 00007fc398be6090 RCX: 00007fc39898f7c9 [ 1374.244002][T24443] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000003e [ 1374.244017][T24443] RBP: 00007fc398a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1374.244032][T24443] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1374.244047][T24443] R13: 00007fc398be6128 R14: 00007fc398be6090 R15: 00007ffdac5895d8 [ 1374.244084][T24443] [ 1374.580921][T24450] zswap: compressor çinX‘©½Ëò¨±ÂÚjFBç³IXk¬,GiBnë‰Ð€zƒ,Â, not available [ 1375.884372][T24482] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1376.957955][T24508] FAULT_INJECTION: forcing a failure. [ 1376.957955][T24508] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1377.014918][T24508] CPU: 0 UID: 0 PID: 24508 Comm: syz.5.3993 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1377.014964][T24508] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1377.014975][T24508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1377.014992][T24508] Call Trace: [ 1377.015002][T24508] [ 1377.015012][T24508] dump_stack_lvl+0x16c/0x1f0 [ 1377.015047][T24508] should_fail_ex+0x512/0x640 [ 1377.015084][T24508] get_futex_key+0x1d0/0x15f0 [ 1377.015124][T24508] ? __pfx_get_futex_key+0x10/0x10 [ 1377.015172][T24508] futex_wake+0xea/0x530 [ 1377.015216][T24508] ? __pfx___schedule+0x10/0x10 [ 1377.015244][T24508] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1377.015271][T24508] ? __pfx_futex_wake+0x10/0x10 [ 1377.015319][T24508] ? preempt_schedule_thunk+0x16/0x30 [ 1377.015353][T24508] do_futex+0x1e3/0x350 [ 1377.015388][T24508] ? __pfx_do_futex+0x10/0x10 [ 1377.015426][T24508] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1377.015458][T24508] __x64_sys_futex+0x1e0/0x4c0 [ 1377.015499][T24508] ? __pfx___x64_sys_futex+0x10/0x10 [ 1377.015534][T24508] ? __pfx___do_sys_prctl+0x10/0x10 [ 1377.015577][T24508] do_syscall_64+0xcd/0xf80 [ 1377.015608][T24508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.015634][T24508] RIP: 0033:0x7fc39898f7c9 [ 1377.015656][T24508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.015682][T24508] RSP: 002b:00007fc39985f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1377.015707][T24508] RAX: ffffffffffffffda RBX: 00007fc398be6188 RCX: 00007fc39898f7c9 [ 1377.015725][T24508] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc398be618c [ 1377.015742][T24508] RBP: 00007fc398be6180 R08: 00007fc3998a2000 R09: 0000000000000000 [ 1377.015759][T24508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.015775][T24508] R13: 00007fc398be6218 R14: 00007ffdac5894f0 R15: 00007ffdac5895d8 [ 1377.015812][T24508] [ 1377.545789][T24515] usb usb36: usbfs: process 24515 (syz.0.3995) did not claim interface 0 before use [ 1377.639854][T24518] Invalid ELF header magic: != ELF [ 1377.748660][T24524] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 1377.870457][T24524] FAULT_INJECTION: forcing a failure. [ 1377.870457][T24524] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.893438][T24524] CPU: 0 UID: 0 PID: 24524 Comm: syz.5.3999 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1377.893482][T24524] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1377.893492][T24524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1377.893507][T24524] Call Trace: [ 1377.893516][T24524] [ 1377.893527][T24524] dump_stack_lvl+0x16c/0x1f0 [ 1377.893563][T24524] should_fail_ex+0x512/0x640 [ 1377.893593][T24524] ? kmem_cache_alloc_node_noprof+0x65/0x7f0 [ 1377.893639][T24524] should_failslab+0xc2/0x120 [ 1377.893670][T24524] kmem_cache_alloc_node_noprof+0x78/0x7f0 [ 1377.893702][T24524] ? __alloc_skb+0x156/0x410 [ 1377.893737][T24524] ? __alloc_skb+0x156/0x410 [ 1377.893764][T24524] __alloc_skb+0x156/0x410 [ 1377.893790][T24524] ? __alloc_skb+0x35d/0x410 [ 1377.893817][T24524] ? __pfx___alloc_skb+0x10/0x10 [ 1377.893844][T24524] ? lockdep_hardirqs_on+0x7c/0x110 [ 1377.893886][T24524] ? kfree+0x2f8/0x6e0 [ 1377.893923][T24524] inet6_netconf_notify_devconf+0x87/0x180 [ 1377.893967][T24524] addrconf_sysctl_unregister+0x134/0x1c0 [ 1377.893998][T24524] addrconf_ifdown.isra.0+0x1621/0x1b90 [ 1377.894030][T24524] ? __mutex_unlock_slowpath+0x161/0x790 [ 1377.894062][T24524] ? __pfx_addrconf_ifdown.isra.0+0x10/0x10 [ 1377.894090][T24524] ? tls_dev_event+0xfd/0x10b0 [ 1377.894130][T24524] addrconf_notify+0x220/0x19b0 [ 1377.894159][T24524] ? ip6mr_device_event+0x1bc/0x230 [ 1377.894196][T24524] notifier_call_chain+0xbc/0x3e0 [ 1377.894223][T24524] ? __pfx_addrconf_notify+0x10/0x10 [ 1377.894259][T24524] call_netdevice_notifiers_info+0xbe/0x110 [ 1377.894299][T24524] unregister_netdevice_many_notify+0xf5c/0x2570 [ 1377.894349][T24524] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1377.894411][T24524] unregister_netdevice_queue+0x305/0x3c0 [ 1377.894448][T24524] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1377.894485][T24524] ? __pfx_locks_remove_file+0x10/0x10 [ 1377.894512][T24524] ? kmem_cache_free+0x171/0x770 [ 1377.894552][T24524] ? __pfx_ppp_release+0x10/0x10 [ 1377.894588][T24524] ppp_release+0x209/0x230 [ 1377.894625][T24524] __fput+0x402/0xb70 [ 1377.894666][T24524] task_work_run+0x150/0x240 [ 1377.894698][T24524] ? __pfx_task_work_run+0x10/0x10 [ 1377.894726][T24524] ? __do_sys_close_range+0x278/0x730 [ 1377.894766][T24524] exit_to_user_mode_loop+0xfb/0x540 [ 1377.894808][T24524] do_syscall_64+0x4ee/0xf80 [ 1377.894838][T24524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.894875][T24524] RIP: 0033:0x7fc39898f7c9 [ 1377.894898][T24524] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.894923][T24524] RSP: 002b:00007fc3998a1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1377.894950][T24524] RAX: 0000000000000000 RBX: 00007fc398be5fa0 RCX: 00007fc39898f7c9 [ 1377.894968][T24524] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1377.894984][T24524] RBP: 00007fc398a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1377.895002][T24524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1377.895018][T24524] R13: 00007fc398be6038 R14: 00007fc398be5fa0 R15: 00007ffdac5895d8 [ 1377.895057][T24524] [ 1378.782797][T24545] vhci_hcd: default hub control req: 2205 v2008 i0000 l0 [ 1379.079558][T24552] vhci_hcd: invalid port number 252 [ 1379.150527][T24552] vhci_hcd: default hub control req: 040f v0772 i00fc l2 [ 1379.907431][T24573] netlink: 'syz.0.4009': attribute type 1 has an invalid length. [ 1381.286463][T24593] FAULT_INJECTION: forcing a failure. [ 1381.286463][T24593] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1381.309660][T24593] CPU: 1 UID: 0 PID: 24593 Comm: syz.0.4015 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1381.309689][T24593] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1381.309695][T24593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1381.309704][T24593] Call Trace: [ 1381.309710][T24593] [ 1381.309716][T24593] dump_stack_lvl+0x16c/0x1f0 [ 1381.309742][T24593] should_fail_ex+0x512/0x640 [ 1381.309763][T24593] get_futex_key+0x1d0/0x15f0 [ 1381.309783][T24593] ? destroy_inode+0x12c/0x1b0 [ 1381.309801][T24593] ? evict+0x599/0xad0 [ 1381.309819][T24593] ? __pfx_get_futex_key+0x10/0x10 [ 1381.309835][T24593] ? __sock_create+0x27b/0x8a0 [ 1381.309848][T24593] ? __x64_sys_socket+0x72/0xb0 [ 1381.309861][T24593] ? do_syscall_64+0xcd/0xf80 [ 1381.309875][T24593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.309895][T24593] futex_wait_setup+0x9d/0x570 [ 1381.309916][T24593] __futex_wait+0x193/0x2f0 [ 1381.309930][T24593] ? __pfx___futex_wait+0x10/0x10 [ 1381.309946][T24593] ? __pfx_futex_wake_mark+0x10/0x10 [ 1381.309970][T24593] ? futex_hash+0x2c5/0x380 [ 1381.309989][T24593] ? futex_private_hash_put+0x160/0x1b0 [ 1381.310009][T24593] futex_wait+0xe8/0x380 [ 1381.310022][T24593] ? __pfx_futex_wait+0x10/0x10 [ 1381.310046][T24593] do_futex+0x229/0x350 [ 1381.310065][T24593] ? __pfx_do_futex+0x10/0x10 [ 1381.310082][T24593] ? iput+0x35/0x40 [ 1381.310099][T24593] ? __sock_release+0x20b/0x270 [ 1381.310121][T24593] __x64_sys_futex+0x1e0/0x4c0 [ 1381.310140][T24593] ? __sys_socket+0xad/0x2d0 [ 1381.310152][T24593] ? fput+0x70/0xf0 [ 1381.310169][T24593] ? __pfx___x64_sys_futex+0x10/0x10 [ 1381.310187][T24593] ? xfd_validate_state+0x61/0x180 [ 1381.310201][T24593] ? __pfx_ksys_write+0x10/0x10 [ 1381.310221][T24593] do_syscall_64+0xcd/0xf80 [ 1381.310236][T24593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.310250][T24593] RIP: 0033:0x7f7c5398f7c9 [ 1381.310263][T24593] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1381.310277][T24593] RSP: 002b:00007f7c548a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1381.310291][T24593] RAX: ffffffffffffffda RBX: 00007f7c53be5fa8 RCX: 00007f7c5398f7c9 [ 1381.310301][T24593] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7c53be5fa8 [ 1381.310310][T24593] RBP: 00007f7c53be5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1381.310319][T24593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1381.310327][T24593] R13: 00007f7c53be6038 R14: 00007fff314825f0 R15: 00007fff314826d8 [ 1381.310346][T24593] [ 1382.315908][T24607] can0: slcan on ptm0. [ 1382.488931][T24602] can0 (unregistered): slcan off ptm0. [ 1384.235542][T24646] FAULT_INJECTION: forcing a failure. [ 1384.235542][T24646] name failslab, interval 1, probability 0, space 0, times 0 [ 1384.441133][T24646] CPU: 0 UID: 0 PID: 24646 Comm: syz.3.4025 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1384.441187][T24646] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1384.441198][T24646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1384.441214][T24646] Call Trace: [ 1384.441223][T24646] [ 1384.441234][T24646] dump_stack_lvl+0x16c/0x1f0 [ 1384.441266][T24646] should_fail_ex+0x512/0x640 [ 1384.441295][T24646] ? __kmalloc_cache_noprof+0x5f/0x800 [ 1384.441333][T24646] should_failslab+0xc2/0x120 [ 1384.441363][T24646] __kmalloc_cache_noprof+0x72/0x800 [ 1384.441397][T24646] ? allocate_file_region_entries+0x1a0/0x620 [ 1384.441429][T24646] ? allocate_file_region_entries+0x1a0/0x620 [ 1384.441454][T24646] allocate_file_region_entries+0x1a0/0x620 [ 1384.441486][T24646] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1384.441524][T24646] region_chg+0x85/0x140 [ 1384.441551][T24646] __vma_reservation_common+0x43b/0x740 [ 1384.441583][T24646] ? __pfx___vma_reservation_common+0x10/0x10 [ 1384.441623][T24646] alloc_hugetlb_folio+0x946/0x1560 [ 1384.441661][T24646] ? __pfx_alloc_hugetlb_folio+0x10/0x10 [ 1384.441693][T24646] ? _raw_spin_unlock+0x28/0x50 [ 1384.441732][T24646] ? __filemap_get_folio+0x32b/0xc30 [ 1384.441777][T24646] hugetlb_fault+0x1bce/0x2f30 [ 1384.441820][T24646] ? __pfx_hugetlb_fault+0x10/0x10 [ 1384.441870][T24646] ? find_vma+0xbf/0x140 [ 1384.441892][T24646] ? __pfx_find_vma+0x10/0x10 [ 1384.441920][T24646] handle_mm_fault+0x95d/0xad0 [ 1384.441959][T24646] do_user_addr_fault+0x2e4/0xda0 [ 1384.441994][T24646] ? rcu_is_watching+0x12/0xc0 [ 1384.442024][T24646] exc_page_fault+0x64/0xc0 [ 1384.442051][T24646] asm_exc_page_fault+0x26/0x30 [ 1384.442076][T24646] RIP: 0010:__put_user_4+0xd/0x20 [ 1384.442102][T24646] Code: 66 89 01 31 c9 0f 01 ca e9 10 b8 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 [ 1384.442129][T24646] RSP: 0018:ffffc90004ca7d78 EFLAGS: 00050246 [ 1384.442150][T24646] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1384.442165][T24646] RDX: 0000000000080000 RSI: ffffffff88f2ede2 RDI: ffffffff8bf21680 [ 1384.442191][T24646] RBP: 1ffff92000994fb1 R08: 000000005a52c59b R09: 00000000ffffffff [ 1384.442207][T24646] R10: ffff8880309ae6b0 R11: 00000000ffffffff R12: 0000000000000000 [ 1384.442224][T24646] R13: 00000000800455d1 R14: ffff888031688610 R15: ffff888031688600 [ 1384.442253][T24646] ? snd_ctl_ioctl+0x322/0x13c0 [ 1384.442294][T24646] snd_ctl_ioctl+0x32c/0x13c0 [ 1384.442329][T24646] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1384.442369][T24646] ? find_held_lock+0x2b/0x80 [ 1384.442407][T24646] ? hook_file_ioctl_common+0x144/0x410 [ 1384.442444][T24646] ? __fget_files+0x20e/0x3c0 [ 1384.442478][T24646] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 1384.442515][T24646] __x64_sys_ioctl+0x18e/0x210 [ 1384.442556][T24646] do_syscall_64+0xcd/0xf80 [ 1384.442585][T24646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.442609][T24646] RIP: 0033:0x7fbd1678f7c9 [ 1384.442630][T24646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.442655][T24646] RSP: 002b:00007fbd175bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1384.442677][T24646] RAX: ffffffffffffffda RBX: 00007fbd169e6090 RCX: 00007fbd1678f7c9 [ 1384.442694][T24646] RDX: 0000000000000000 RSI: 00000000800455d1 RDI: 0000000000000006 [ 1384.442710][T24646] RBP: 00007fbd16813f91 R08: 0000000000000000 R09: 0000000000000000 [ 1384.442726][T24646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.442741][T24646] R13: 00007fbd169e6128 R14: 00007fbd169e6090 R15: 00007ffcbce99498 [ 1384.442779][T24646] [ 1386.630490][T24684] block2mtd: error: cannot open device  [ 1386.800276][T24685] ================================================================== [ 1386.800292][T24685] BUG: KASAN: slab-use-after-free in fbcon_prepare_logo+0xa03/0xc70 [ 1386.800318][T24685] Read of size 256 at addr ffff888077c3a3c0 by task syz.0.4029/24685 [ 1386.800331][T24685] [ 1386.800341][T24685] CPU: 1 UID: 0 PID: 24685 Comm: syz.0.4029 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1386.800363][T24685] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1386.800369][T24685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1386.800379][T24685] Call Trace: [ 1386.800384][T24685] [ 1386.800391][T24685] dump_stack_lvl+0x116/0x1f0 [ 1386.800413][T24685] print_report+0xcd/0x630 [ 1386.800430][T24685] ? __virt_addr_valid+0x81/0x610 [ 1386.800445][T24685] ? __phys_addr+0xe8/0x180 [ 1386.800463][T24685] ? fbcon_prepare_logo+0xa03/0xc70 [ 1386.800479][T24685] kasan_report+0xe0/0x110 [ 1386.800494][T24685] ? fbcon_prepare_logo+0xa03/0xc70 [ 1386.800516][T24685] kasan_check_range+0x100/0x1b0 [ 1386.800535][T24685] __asan_memcpy+0x23/0x60 [ 1386.800556][T24685] fbcon_prepare_logo+0xa03/0xc70 [ 1386.800575][T24685] fbcon_init+0xda0/0x1930 [ 1386.800590][T24685] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1386.800608][T24685] visual_init+0x320/0x620 [ 1386.800629][T24685] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1386.800650][T24685] store_bind+0x61d/0x760 [ 1386.800669][T24685] ? sysfs_file_kobj+0xe4/0x290 [ 1386.800687][T24685] ? __pfx_store_bind+0x10/0x10 [ 1386.800705][T24685] dev_attr_store+0x58/0x80 [ 1386.800724][T24685] ? __pfx_dev_attr_store+0x10/0x10 [ 1386.800760][T24685] sysfs_kf_write+0xf2/0x150 [ 1386.800779][T24685] kernfs_fop_write_iter+0x3af/0x570 [ 1386.800796][T24685] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1386.800816][T24685] iter_file_splice_write+0xa24/0x12b0 [ 1386.800842][T24685] ? copy_splice_read+0x89c/0xc20 [ 1386.800857][T24685] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1386.800874][T24685] ? __pfx_copy_splice_read+0x10/0x10 [ 1386.800893][T24685] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1386.800910][T24685] direct_splice_actor+0x192/0x6c0 [ 1386.800926][T24685] splice_direct_to_actor+0x345/0xa30 [ 1386.800942][T24685] ? __pfx_direct_splice_actor+0x10/0x10 [ 1386.800958][T24685] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1386.800976][T24685] do_splice_direct+0x174/0x240 [ 1386.800990][T24685] ? __pfx_do_splice_direct+0x10/0x10 [ 1386.801006][T24685] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1386.801021][T24685] ? rw_verify_area+0xcf/0x6c0 [ 1386.801044][T24685] do_sendfile+0xb06/0xe50 [ 1386.801058][T24685] ? __pfx_do_sendfile+0x10/0x10 [ 1386.801073][T24685] ? __x64_sys_futex+0x1e0/0x4c0 [ 1386.801092][T24685] ? __x64_sys_futex+0x1e9/0x4c0 [ 1386.801111][T24685] __x64_sys_sendfile64+0x1d8/0x220 [ 1386.801135][T24685] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1386.801157][T24685] do_syscall_64+0xcd/0xf80 [ 1386.801173][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.801188][T24685] RIP: 0033:0x7f7c5398f7c9 [ 1386.801201][T24685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1386.801215][T24685] RSP: 002b:00007f7c5487f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1386.801229][T24685] RAX: ffffffffffffffda RBX: 00007f7c53be6090 RCX: 00007f7c5398f7c9 [ 1386.801239][T24685] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 1386.801248][T24685] RBP: 00007f7c53a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1386.801258][T24685] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1386.801267][T24685] R13: 00007f7c53be6128 R14: 00007f7c53be6090 R15: 00007fff314826d8 [ 1386.801281][T24685] [ 1386.801287][T24685] [ 1386.801291][T24685] Allocated by task 15890: [ 1386.801298][T24685] kasan_save_stack+0x33/0x60 [ 1386.801311][T24685] kasan_save_track+0x14/0x30 [ 1386.801323][T24685] __kasan_slab_alloc+0x89/0x90 [ 1386.801337][T24685] kmem_cache_alloc_noprof+0x250/0x760 [ 1386.801357][T24685] anon_vma_fork+0xe6/0x620 [ 1386.801375][T24685] dup_mmap+0x151f/0x2250 [ 1386.801389][T24685] copy_process+0x6476/0x74e0 [ 1386.801402][T24685] kernel_clone+0xfc/0x910 [ 1386.801413][T24685] __do_sys_clone+0xce/0x120 [ 1386.801425][T24685] do_syscall_64+0xcd/0xf80 [ 1386.801438][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.801451][T24685] [ 1386.801454][T24685] Freed by task 15890: [ 1386.801461][T24685] kasan_save_stack+0x33/0x60 [ 1386.801473][T24685] kasan_save_track+0x14/0x30 [ 1386.801485][T24685] __kasan_save_free_info+0x3b/0x60 [ 1386.801503][T24685] __kasan_slab_free+0x5f/0x80 [ 1386.801516][T24685] slab_free_after_rcu_debug+0x10c/0x300 [ 1386.801535][T24685] rcu_core+0x79c/0x1500 [ 1386.801554][T24685] handle_softirqs+0x219/0x8b0 [ 1386.801573][T24685] __irq_exit_rcu+0x109/0x170 [ 1386.801591][T24685] irq_exit_rcu+0x9/0x30 [ 1386.801610][T24685] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1386.801624][T24685] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1386.801638][T24685] [ 1386.801641][T24685] Last potentially related work creation: [ 1386.801647][T24685] kasan_save_stack+0x33/0x60 [ 1386.801659][T24685] kasan_record_aux_stack+0xa7/0xc0 [ 1386.801677][T24685] kmem_cache_free+0x15e/0x770 [ 1386.801695][T24685] __put_anon_vma+0x114/0x3a0 [ 1386.801711][T24685] unlink_anon_vmas+0x58a/0x820 [ 1386.801727][T24685] free_pgtables+0x1d7/0xc00 [ 1386.801738][T24685] exit_mmap+0x3f4/0xb60 [ 1386.801750][T24685] __mmput+0x12a/0x410 [ 1386.801768][T24685] mmput+0x62/0x70 [ 1386.801786][T24685] do_exit+0x7d7/0x2bd0 [ 1386.801799][T24685] do_group_exit+0xd3/0x2a0 [ 1386.801813][T24685] get_signal+0x2671/0x26d0 [ 1386.801832][T24685] arch_do_signal_or_restart+0x8f/0x7a0 [ 1386.801851][T24685] exit_to_user_mode_loop+0x8c/0x540 [ 1386.801869][T24685] do_syscall_64+0x4ee/0xf80 [ 1386.801882][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.801895][T24685] [ 1386.801898][T24685] The buggy address belongs to the object at ffff888077c3a330 [ 1386.801898][T24685] which belongs to the cache anon_vma of size 208 [ 1386.801909][T24685] The buggy address is located 144 bytes inside of [ 1386.801909][T24685] freed 208-byte region [ffff888077c3a330, ffff888077c3a400) [ 1386.801924][T24685] [ 1386.801928][T24685] The buggy address belongs to the physical page: [ 1386.801935][T24685] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77c3a [ 1386.801948][T24685] memcg:ffff888065ae3201 [ 1386.801954][T24685] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1386.801966][T24685] page_type: f5(slab) [ 1386.801979][T24685] raw: 00fff00000000000 ffff888140407140 ffffea0001deee80 dead000000000002 [ 1386.801992][T24685] raw: 0000000000000000 00000000000f000f 00000000f5000000 ffff888065ae3201 [ 1386.802000][T24685] page dumped because: kasan: bad access detected [ 1386.802009][T24685] page_owner tracks the page as allocated [ 1386.802014][T24685] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 19750, tgid 19750 (modprobe), ts 1051959459925, free_ts 1051948602811 [ 1386.802038][T24685] post_alloc_hook+0x1af/0x220 [ 1386.802055][T24685] get_page_from_freelist+0xd0b/0x31a0 [ 1386.802075][T24685] __alloc_frozen_pages_noprof+0x25f/0x2440 [ 1386.802095][T24685] alloc_pages_mpol+0x1fb/0x550 [ 1386.802109][T24685] new_slab+0x2c3/0x430 [ 1386.802130][T24685] ___slab_alloc+0xe18/0x1c90 [ 1386.802149][T24685] __slab_alloc.constprop.0+0x63/0x110 [ 1386.802166][T24685] kmem_cache_alloc_noprof+0x43f/0x760 [ 1386.802185][T24685] __anon_vma_prepare+0x344/0x5e0 [ 1386.802203][T24685] __vmf_anon_prepare+0x11c/0x240 [ 1386.802217][T24685] do_pte_missing+0x8be/0x4000 [ 1386.802233][T24685] __handle_mm_fault+0x154b/0x2ad0 [ 1386.802249][T24685] handle_mm_fault+0x3fe/0xad0 [ 1386.802264][T24685] do_user_addr_fault+0x423/0xda0 [ 1386.802281][T24685] exc_page_fault+0x64/0xc0 [ 1386.802294][T24685] asm_exc_page_fault+0x26/0x30 [ 1386.802308][T24685] page last free pid 19689 tgid 19689 stack trace: [ 1386.802318][T24685] __free_frozen_pages+0x7df/0x1160 [ 1386.802334][T24685] vfree+0x1fd/0xb50 [ 1386.802348][T24685] snd_dma_free_pages+0x54/0x70 [ 1386.802365][T24685] snd_pcm_lib_free_pages+0x172/0x390 [ 1386.802381][T24685] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 1386.802399][T24685] snd_pcm_release_substream+0x5b/0x70 [ 1386.802414][T24685] snd_pcm_oss_release+0x16f/0x310 [ 1386.802427][T24685] __fput+0x402/0xb70 [ 1386.802444][T24685] task_work_run+0x150/0x240 [ 1386.802469][T24685] exit_to_user_mode_loop+0xfb/0x540 [ 1386.802490][T24685] do_syscall_64+0x4ee/0xf80 [ 1386.802503][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.802517][T24685] [ 1386.802521][T24685] Memory state around the buggy address: [ 1386.802528][T24685] ffff888077c3a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 1386.802539][T24685] ffff888077c3a300: fc fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb [ 1386.802549][T24685] >ffff888077c3a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1386.802557][T24685] ^ [ 1386.802565][T24685] ffff888077c3a400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 1386.802575][T24685] ffff888077c3a480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1386.802584][T24685] ================================================================== [ 1386.802594][T24685] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1386.802606][T24685] CPU: 1 UID: 0 PID: 24685 Comm: syz.0.4029 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1386.802629][T24685] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1386.802634][T24685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1386.802643][T24685] Call Trace: [ 1386.802649][T24685] [ 1386.802655][T24685] dump_stack_lvl+0x3d/0x1f0 [ 1386.802670][T24685] vpanic+0x640/0x6f0 [ 1386.802687][T24685] panic+0xca/0xd0 [ 1386.802702][T24685] ? __pfx_panic+0x10/0x10 [ 1386.802725][T24685] check_panic_on_warn+0xab/0xb0 [ 1386.802743][T24685] end_report+0x107/0x160 [ 1386.802758][T24685] kasan_report+0xee/0x110 [ 1386.802775][T24685] ? fbcon_prepare_logo+0xa03/0xc70 [ 1386.802794][T24685] kasan_check_range+0x100/0x1b0 [ 1386.802813][T24685] __asan_memcpy+0x23/0x60 [ 1386.802834][T24685] fbcon_prepare_logo+0xa03/0xc70 [ 1386.802853][T24685] fbcon_init+0xda0/0x1930 [ 1386.802869][T24685] ? __pfx_drm_fb_helper_set_par+0x10/0x10 [ 1386.802889][T24685] visual_init+0x320/0x620 [ 1386.802907][T24685] do_bind_con_driver.isra.0+0x57a/0xbf0 [ 1386.802929][T24685] store_bind+0x61d/0x760 [ 1386.802949][T24685] ? sysfs_file_kobj+0xe4/0x290 [ 1386.802968][T24685] ? __pfx_store_bind+0x10/0x10 [ 1386.802987][T24685] dev_attr_store+0x58/0x80 [ 1386.803007][T24685] ? __pfx_dev_attr_store+0x10/0x10 [ 1386.803026][T24685] sysfs_kf_write+0xf2/0x150 [ 1386.803045][T24685] kernfs_fop_write_iter+0x3af/0x570 [ 1386.803080][T24685] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1386.803110][T24685] iter_file_splice_write+0xa24/0x12b0 [ 1386.803147][T24685] ? copy_splice_read+0x89c/0xc20 [ 1386.803170][T24685] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1386.803194][T24685] ? __pfx_copy_splice_read+0x10/0x10 [ 1386.803213][T24685] ? __pfx_iter_file_splice_write+0x10/0x10 [ 1386.803231][T24685] direct_splice_actor+0x192/0x6c0 [ 1386.803248][T24685] splice_direct_to_actor+0x345/0xa30 [ 1386.803264][T24685] ? __pfx_direct_splice_actor+0x10/0x10 [ 1386.803282][T24685] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1386.803301][T24685] do_splice_direct+0x174/0x240 [ 1386.803317][T24685] ? __pfx_do_splice_direct+0x10/0x10 [ 1386.803333][T24685] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1386.803350][T24685] ? rw_verify_area+0xcf/0x6c0 [ 1386.803373][T24685] do_sendfile+0xb06/0xe50 [ 1386.803388][T24685] ? __pfx_do_sendfile+0x10/0x10 [ 1386.803403][T24685] ? __x64_sys_futex+0x1e0/0x4c0 [ 1386.803423][T24685] ? __x64_sys_futex+0x1e9/0x4c0 [ 1386.803443][T24685] __x64_sys_sendfile64+0x1d8/0x220 [ 1386.803461][T24685] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1386.803482][T24685] do_syscall_64+0xcd/0xf80 [ 1386.803498][T24685] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.803513][T24685] RIP: 0033:0x7f7c5398f7c9 [ 1386.803525][T24685] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1386.803539][T24685] RSP: 002b:00007f7c5487f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1386.803553][T24685] RAX: ffffffffffffffda RBX: 00007f7c53be6090 RCX: 00007f7c5398f7c9 [ 1386.803564][T24685] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000004 [ 1386.803573][T24685] RBP: 00007f7c53a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 1386.803582][T24685] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 1386.803591][T24685] R13: 00007f7c53be6128 R14: 00007f7c53be6090 R15: 00007fff314826d8 [ 1386.803606][T24685] [ 1386.804383][T24685] Kernel Offset: disabled