last executing test programs: 16m7.950813171s ago: executing program 1 (id=2884): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x1ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r2 = gettid() pidfd_open$auto(r2, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip6_tables_matches\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/190, 0xbe) getsockopt$auto_SO_SNDTIMEO_NEW(r3, 0x3, 0x43, &(0x7f0000000040)='\'\x00', &(0x7f0000000100)=0x8) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/122, 0x7a) 16m6.260454269s ago: executing program 1 (id=2889): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card0/pcm0p/oss\x00', 0x88400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/209, 0xd1) read$auto_tracing_cpumask_fops_trace(0xffffffffffffffff, &(0x7f0000001340)=""/48, 0x30) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x480, 0x400, 0x9}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/snd_hda_intel/parameters/align_buffer_size\x00', 0xc0481, 0x0) write$auto(r2, &(0x7f0000000000)='\x14\xf4\xb6\xc6\x97\xdb\x18B\f\xef\x1dQZ\xa66\xe7\x06\\\xe0)+\x86\xa7\x9bv\xe1\x18\xf5\x83\b\x11\x19\xdd\x1c', 0x7e) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129882, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/waiting_for_supplier\x00', 0x80800, 0x0) sendfile$auto(0x1, r5, 0x0, 0x400007ffff000) epoll_ctl$auto_EPOLL_CTL_DEL(r5, 0x2, r2, &(0x7f0000001040)={0x9, 0xff}) socketpair$auto(0x6d, 0x2, 0x8000000000000000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x610841, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001380)='/sys/devices/pci0000:00/0000:00:01.3/rescan\x00', 0x1a1181, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mknod$auto(&(0x7f0000001100)=':,\x00', 0xca, 0xfffffffa) r7 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r7, &(0x7f0000000040)=""/4096, 0xfffffe82) r8 = openat2$dir(0xffffffffffffff9c, &(0x7f00000011c0)=':,\x00', &(0x7f0000001200)={0x503240, 0x80, 0x10}, 0x18) copy_file_range$auto(0xffffffffffffffff, 0x0, r7, 0x0, 0xffffffffffffffff, 0x8) futimesat$auto(r8, &(0x7f0000001240)=':,\x00', &(0x7f0000001280)={0xa, 0x1000}) ioctl$auto_SNDRV_RAWMIDI_IOCTL_USER_PVERSION(r4, 0x40045702, &(0x7f0000001080)=0x10000) execve$auto(&(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000200)=&(0x7f00000013c0)=':,\x00HL\xb1\x89\xdc\x1b^\ny\xc3\xa9\xb0\xb3\x02r\xd7Y\xc7u)q\xd2&\xf7\x10Z\x0f:\x04\x93\ny:\x1c\n\xe6\xa3\xb3\x1cDE`\x97\x1f\xdc\xda \xc7CO\xc0\xd90I\xf3\xf8p\xaa\x00\x01|\x87\xa6kI\xdf]Lq\x00\x00\x00\x00\x00\x00KR\x86\xdc\xb8Uy\xaa2>nz\xde\x8e\xc5\r\xd3 \x83kJ\x1a+\x1d\x93\xd2\xf0\xf5>\xd3\xde\xc4\xc9\xd7\xb6\x85\xe6+\xc3R\xa0\x18(F\x0f\xc5\xcf\xd7!\x1f\xa28\x85\x89\xea\xeaA\xefeG\bpK\x1b\xa1\xd5\x93\x14\x9b\xad\xd5\x80\"d\xef,\xd6\xb3\xf6\xe3\xcc\rr\x85\xd0\xe9\x80\xa3\xfe*\x974\xdb3\xab\x03\xbc\f\xbd\x05\xaf\a\x19\xc8\xd4\x9f\xc6\xdb\x11\x17\xcd\"\xc96l[L\x97\x11\v\x87\xeb\x1e\xe1\xc9\xb7\xd7\x17\xdd\xad\x8d\xab\xfa\xf1?;\x8e`_\x00\xd8\xdfb\xb7\xc0zd\x92\x9fz\x89B6\xdc\v\x9b\x96\x8cG\x86\x9f\x04\xe2\f\xf0') 16m4.550579344s ago: executing program 1 (id=2894): mmap$auto(0x0, 0x2, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0xa, 0x801, 0x84) setsockopt$auto(r0, 0x10000000084, 0x3, 0x0, 0x5) open(0x0, 0x22240, 0x147) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0x1, 0x5, 0xdf, 0xeb3, 0x401, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000029, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x154) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x16240, 0x0) execve$auto(&(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000100)=&(0x7f0000000440)='#\xdc\xfe\xd8E\xc8\x8bu4\xd9n\xcb\xca\xc7zw \x96\xee\xf0e\x96\x8e<\xf1\xaf]\x9ejh\xad\x9eEc\xae\x1e\x89\x92\x9a\xbbP[B\xae\x9cf)\x15\xac\x90)l\x06\xf0\t\x12\x05zz\xa6\xb3\xce=\x00\x1f\x00\x00\x00/\xc4T\x1f\xe5P\xff\xb4\xb7s0\x02\xc5\x81\x93\xc6\xc8\xb6Sp\x1a{8\xfc\xe0,X\xc7BU\xd0\x97\x7f1\x16\x99\x04\xabu/a(\x02\x7f\xbb\xbd\x906\xa8\xce\xee\xcd\xd7\t\x00\xfb\x83\xc8\x8aO\xe9\xbe=\xf7\xf4\x84,\x06\xd3j\x99b\xe6\"Y3A\xbb\xa4\xb2\f\x1b\xc3\x8a,g\xc6\xe8[\xdf\x88\x01\x9f7\xb5\x19m\xd8L\x84j\x8c\xec\xdf\x1a\xbd\xc5\x94\xb9\xb7\xd5\xa4\xc0\f-6\xfe\xa8\xed/u\x81_G\xfeR\xbb\x12\x16\xb8*\xa9\xc9\xe81\x9d\x06\xbbC\x17\xbb\xe6|\x97\xabB4J\xed+-\xf8u0/n\xcf\x8b\x95\x9d\xab\xa8\xc47\xa6\x0e\xdeOq\\\xc3\'{\b\xd3m\x94\xc2\xdd{\xeaO\x0e\xe4\xe0\xb9\x18^\xcf\v\x97\x97\x06c\x1c\x8fi\x0e\xe4\xd7\x98\x9bN:\xd60\x17,\x06\xc7B#Y0\x99\xeb\x874\xab?\xc8\x82\xe5\x8f\xb7\x91\xc2\x00\xcc5\xb0\xd3k\xd5\xdcZ\xdcP\x8e+\xd8\xc7C\xcb\x15\x13c\xbf\xe8\xbd\"\x8f3\"\x14\xf8(\xda\x19\xcd\xec\x03.\xd9^\xc3A\xda\r[\x1a\xda\\#/\xd4\xaf\xd0\xe8\xff\xff\xff\xff\x00\x00\x00\x00\x99lQ\xec\x84h^\x11+\x93\b\xe0c\xe6\xd22\xf9\xa5') 16m1.438455539s ago: executing program 1 (id=2902): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @inferred=r0}, 0x287) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=@bpf_attr_7={@start_id, 0x2, 0x10000, r1}, 0xac) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close_range$auto(r2, r2, 0x6) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) sendfile$auto(r3, r3, 0x0, 0x1) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) close_range$auto(0x2, 0x8, 0x0) 15m52.069108167s ago: executing program 1 (id=2923): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) process_mrelease$auto(0xffffffffffffffff, 0xa) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', &(0x7f0000001cc0)='\x00', 0x0, 0x0, 0xfffffffffffffffc) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r1, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) 15m47.681496715s ago: executing program 1 (id=2935): timer_create$auto(0x9, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(0x3, 0x0, 0x8080) timerfd_create$auto(0x7, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = io_uring_setup$auto(0xa, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffe}, 0x1) socket(0xa, 0x1, 0x0) unshare$auto(0x40000080) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2800, 0x0) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(r0, 0x40084146, &(0x7f0000000100)=0x8) close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee00) r5 = setfsuid$auto(0xee01) setresuid$auto(r4, r5, r4) 15m32.603524049s ago: executing program 32 (id=2935): timer_create$auto(0x9, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(0x3, 0x0, 0x8080) timerfd_create$auto(0x7, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = io_uring_setup$auto(0xa, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffe}, 0x1) socket(0xa, 0x1, 0x0) unshare$auto(0x40000080) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2800, 0x0) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(r0, 0x40084146, &(0x7f0000000100)=0x8) close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0xee00) r4 = setfsuid$auto(0xee00) r5 = setfsuid$auto(0xee01) setresuid$auto(r4, r5, r4) 15m9.252007645s ago: executing program 2 (id=3018): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x1ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r2 = gettid() pidfd_open$auto(r2, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip6_tables_matches\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/190, 0xbe) getsockopt$auto_SO_SNDTIMEO_NEW(r4, 0x3, 0x43, &(0x7f0000000040)='\'\x00', &(0x7f0000000100)=0x8) fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0x1000) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/122, 0x7a) 15m8.956278945s ago: executing program 2 (id=3019): r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r0, 0x0, 0x18, 0x28001) 15m8.063326671s ago: executing program 2 (id=3022): r0 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto(0x3, 0xae60, 0x10000000000402) pread64$auto(r0, 0x0, 0x18, 0x28001) 15m7.887771116s ago: executing program 2 (id=3024): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) process_mrelease$auto(0xffffffffffffffff, 0xa) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r0, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) add_key$auto_KEY_SPEC_USER_KEYRING(&(0x7f0000001c80)='\\\x00', &(0x7f0000001cc0)='\x00', 0x0, 0x0, 0xfffffffffffffffc) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x100000400008, 0x1000000000000df, 0x4000009b73, r1, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000001780)={0x0, 0x400}, 0x7f) 15m5.830167312s ago: executing program 2 (id=3029): unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/auth.unix.gid/channel\x00', 0x481, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="5c7820d1027e0dc0023af10e9bfa1babfa3a3753ca9aee370a", 0x19) socket(0x2b, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/machinecheck/machinecheck0/check_interval\x00', 0x102, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x3) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x1ffffffff000, 0x100017, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) setxattrat$auto(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x1000, &(0x7f00000000c0)='ns/mnt\x00', 0x0, 0xa7) 15m4.916530907s ago: executing program 2 (id=3032): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x4a002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000180)={0x9, 0x3, 0xa5e7, 0x10000, 0x3, 0x8000000000000000, 0x10, 0x7, 0x10000, 0x1ff, 0x5185}, 0x3ff) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r2, 0x92106405, r2) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x100000000000004, 0x4000000000df, 0x40ebe, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x40104d06, 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x40d00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) 14m49.384625719s ago: executing program 33 (id=3032): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x4a002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = clone3$auto(&(0x7f0000000180)={0x9, 0x3, 0xa5e7, 0x10000, 0x3, 0x8000000000000000, 0x10, 0x7, 0x10000, 0x1ff, 0x5185}, 0x3ff) prctl$auto(0x3e, 0x1, r1, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r2, 0x92106405, r2) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x2}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x123002, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xfffffffffffffffe, 0x240007, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x100000000000004, 0x4000000000df, 0x40ebe, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000200)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) ioctl$auto(0x3, 0x40104d06, 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x40d00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) 8m3.854642755s ago: executing program 3 (id=3911): r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="13000000", @ANYBLOB='N\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000000)="70203c2e5920eb2c56973a7ccf4cb3026581de38be4fdcfb26d7aeb87cbcd3be", 0x5, &(0x7f00000000c0)={&(0x7f0000000080)="f564ab10d9e5256d8db8dd46eb8ef5b86c29743819f5a223c292228486", 0x7f}, 0x7, &(0x7f0000000340)="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", 0x0, 0x26}, 0x8000}, 0xf574, 0x4, &(0x7f0000000180)={0x19, 0xf370}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = socket(0xa, 0x801, 0x84) r2 = socket(0xa, 0x5, 0x84) getsockopt$auto(r2, 0x84, 0x9, 0x0, &(0x7f0000000000)=0x9b) r3 = socket$nl_generic(0x10, 0x3, 0x10) fchmod$auto(r3, 0x7) setsockopt$auto(r1, 0x10000000084, 0x9, 0x0, 0x9c) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4241, 0x0) mmap$auto(0x0, 0x1, 0x8, 0xeb1, r0, 0x10000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/ums-sddr55/uevent\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x400000000000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x1b) unshare$auto(0x40000080) openat$auto_cpuid_fops_cpuid(0xffffffffffffff9c, 0x0, 0x101500, 0x0) mmap$auto(0x0, 0x20009, 0x44000000000df, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xc9\xb3\xbc\x8c\x1dga08\x90\x86\xdde\x1cJ\x99\x00\x11:\x14\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xfe\x80\x12\x00\x00\x00\x00\x00\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd8\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) r4 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$auto_PR_SET_MM_START_BRK(0xe, 0x6, 0xffffffffffffffff, 0x0, 0x8) ioctl$auto_RNDADDENTROPY(r4, 0x40085203, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto_dfs_global_fops_debug(0xffffffffffffffff, 0x0, 0x0) msgget$auto(0x0, 0x5) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) msgsnd$auto(0x0, &(0x7f0000000040)={0x40000007fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x1, 0xf1) 8m0.295528055s ago: executing program 3 (id=3918): mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r0, 0x0, 0x1ff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r2 = gettid() pidfd_open$auto(r2, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip6_tables_matches\x00', 0x43102, 0x0) read$auto_proc_iter_file_ops_compat_inode(r4, &(0x7f0000000180)=""/190, 0xbe) getsockopt$auto_SO_SNDTIMEO_NEW(r4, 0x3, 0x43, &(0x7f0000000040)='\'\x00', 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000240)=""/122, 0x7a) 7m56.050636905s ago: executing program 3 (id=3922): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/mq/0/nr_tags\x00', 0x20000, 0x0) mount_setattr$auto(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000640)={0x10002c, 0x7f, 0x0, @inferred=r0}, 0x287) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) bpf$auto_BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=@bpf_attr_7={@start_id, 0x2, 0x10000, r1}, 0xac) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close_range$auto(r2, r2, 0x6) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) socket(0x2, 0x801, 0x106) unshare$auto(0x40000080) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x697) mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x20000000) sendmsg$auto_KSMBD_EVENT_HEARTBEAT_REQUEST(0xffffffffffffffff, 0x0, 0x4c014) r3 = socket(0x1f, 0x4, 0xa) sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x40) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/midi2\x00', 0x88042, 0x0) socket(0x10, 0x3, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x802, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x2, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd4, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffffb}) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x20200, 0x0) 7m51.975784049s ago: executing program 3 (id=3928): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) write$auto(0x3, 0x0, 0xfdef) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x5609, r1) mmap$auto(0x0, 0x2020009, 0x10, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x6c88967c, 0x4040000000df, 0xeb1, r0, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0x2}) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7000fbdbdf250300000004000800100003800c00038008001c00", @ANYRES32, @ANYBLOB="12000000893c0d00009f17790485908286dd000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/8, 0x8) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0\x00') 7m44.013368678s ago: executing program 3 (id=3938): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) bpf$auto_BPF_LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000340)=@link_update={r1, @new_prog_fd, 0xb, @old_prog_fd=r0}, 0xd) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x80, 0xee00, 0xee00, 0xca6d, 0x8, 0x4bd6, 0x5}, 0xd21, 0x5, 0x8000000000000000, 0x1, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919", &(0x7f0000000200)="e3ac9b01ee8d985b677531eeeee5cb5bf774d2df4d9ae6dccbc98def20b72c7c2826a585ba3a8d67815abade214708a4ade77c6faa2f2889ca3e7989f32645dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25"}) process_mrelease$auto(0xffffffffffffffff, 0xa) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f80, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) mremap$auto(0x1ff000, 0x100008, 0x843, 0x3, 0xfffff002) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x4a42, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) mmap$auto(0x1000000000, 0x39, 0x6, 0x4000009b73, 0xffffffffffffffff, 0x1c740000000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/admmidi2\x00', 0x40080, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x8, 0x1ff, 0x20, 0x9687, 0x100000000000003, 0x3c0a19d5, 0xffffffffffffffff, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x80000000003ffffe, 0x3, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x80442, 0x0) 7m39.538189875s ago: executing program 3 (id=3945): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) read$auto(r3, 0x0, 0x20) 7m24.079267454s ago: executing program 34 (id=3945): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) write$auto(r0, 0x0, 0x2) getrlimit$auto(0x3, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.0/usb1/avoid_reset_quirk\x00', 0x68006, 0x0) read$auto(r3, 0x0, 0x20) 9.551725516s ago: executing program 5 (id=5062): sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) r0 = ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f00000000c0)=0x9) mmap$auto(0x0, 0x400008, 0x53, 0x9b74, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_SET_BSS(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_VENDOR_DATA={0x92, 0xc5, "d53c261e143c53e6594d28b0f2c01b9a72c851851befdb5098d9ec9554a157d46dab9b1b7c2dc07473f440abc5ab6e1c543a051e1834e85607c13114fad32b4445e1142b35825bc8425a62fdca267939318f20b7bec1be38545babef5b399070b84c26fbc57da762b81d7c2290e1576d467084dfa9cdd98b80823c971f225d35a7970117844e5fb5c0c3c4a264c0"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x1}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x17, 0xbe, "005cf9a8bf3ba2c0d4461a6238e541d6941bd5"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40850}, 0x24008004) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) write$auto(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 9.005525932s ago: executing program 5 (id=5065): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x2}]}, 0x1c}, 0x1, 0x3e7, 0x0, 0x8000}, 0x8000) 8.481235211s ago: executing program 5 (id=5067): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0x2, 0x83ff) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000740)='./file0\x00', 0x4080, 0x144) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop5\x00', 0x24040, 0x0) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, 0x0) mmap$auto(0x8, 0x6, 0x3, 0x13, 0xffffffffffffffff, 0x400) r3 = prctl$auto(0x3d, 0x40005, 0x0, 0x6, 0x0) ioctl$auto_XFS_IOC_ALLOCSP(r3, 0x4030580a, &(0x7f00000004c0)={0xe4e, 0x788, 0x3, 0x4a, 0xdd66, r1}) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5o\x91p\xe6\x1eRN8\x99\x00\b\xaa\x1c\x00\x00\x00\x00c\x14\xaf\r\x94\x1a\xd3\xd3\x1d\xf8\xbebR\xddL\'\x03\xf1`\x9f5\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\x9d*\xd1\x14^\xbe\xa2\x00\x00\x00\x01\x00\x00\x00\x00\x00\xe8\xff\x00\x00\x00\x00\x00', 0xfdef, 0x500000000000) unshare$auto(0xff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0xb00, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf257e9692744cdf0000000500d5"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000600), r3) sendmsg$auto_IEEE802154_LLSEC_LIST_DEV(r6, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="08002abd7000fbdbdf2529000000140001007663616e3000000000dc0febcdd6282c7b0000000000000005002e000f0000000500250005000000"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x8000) r8 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000000), r0) sendmsg$auto_OVS_FLOW_CMD_SET(r6, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000000340)=ANY=[@ANYBLOB="00020000", @ANYRES16=r8, @ANYBLOB="010028bd7000fedbcf250400000032010280040037006db690e6748f783256b655aa3f418e6793a305886508985520256965b51ede01b868f53b73ef8f713f260e4c12e7d39c405bd75aa597079e6b803d0504ed4018c4da384ccd443b9c58f50a4cebfcd18101ab5179e70b4c75612a1888686c7aeabb3828980a4a95db4ae875b38ca5e923b1d50889a37732ce7994e9ca0327a810612c595c0e94e18814c5a2daa7ceab5e8655d7908909a9c9d75f1df15ae1f79d63c269ecf2cc9b490832d0c50cd8c4c977e4bcfd99c2819255326f58bc4bf4877a734800072c12ce2ce2d797a5a514739ad098feab77c2013f19127b0ab49dcb04f1411536e9b9c2f1ca73743e12a96a5a3492bf0a02571ecc671715abd11a315458a7c82f37562b172c3b91f17f169867972a63665f5ea21ec2540c72430c00b3006e6c38303231310000000400018004000800"], 0x150}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'netdevsim0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESOCT=r2, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x20040894) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfe, {}, "7517267209e404c3e721ecaf50961784573cff00852e1ae223ab1d2577d9b08425e1629b"}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) r10 = epoll_create$auto(0x4) ioctl$auto_USB_RAW_IOCTL_EP_SET_HALT(r10, 0x4004550d, &(0x7f0000000180)=0x798) ioctl$auto_TIOCGICOUNT(r10, 0x545d, &(0x7f0000000780)="16f723f83fa445082f3a6c0892eeb7afb1b8831bd5fffbd3fe2e03ef0022a1708551c9109cb9c0ce4d6aa7c59cd4417eaca85df5adb16859362b925d50840ba2e2a534ca30b49fb531ab37fb4474134f1f84abbdfa3dbcfd7bc106bbbd502894f44a8758d0c4c27bf340b0e559c729da13da01ed09496bd28553710f366c99bbf012d9b4ecdcc3ca4223f4f43d5f5f6992bc5663c5ae9825") r11 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="251729bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4041081}, 0x64810) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r3, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x34, r11, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r1}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x7}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0xffc00000}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x14) 8.195155335s ago: executing program 0 (id=5068): mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/usb-serial/drivers/omninet/new_id\x00', 0x40180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, 0x0, 0x2) getrlimit$auto(0x3, 0x0) fdatasync$auto(r1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop8\x00', 0x4000, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/aud\x85o!\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc07\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x02\'\x8d\x16h\xad\x16\xe6\xa5\xf0\xa4\x88h\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>\x05\x00\x00\x00\x00\x00\x00\x00Ww\xe2\x9cK\fE\a\xca\xd3\x94\xb4Z\xac6\xe8\x00\x80(\xfaI\xe2\xae,\x95kl\x82\xd2\xe6\x8b\xe8\xee\xe7]\xd1\xfe\xd0;\"\x96\xba\x98h%\xca\v\xd1\x9f9\xc7\xad)Oz}\xb0\x1d\xb3\x01\xc9\xd2\x02\xe4\xd7{\x8d\xa9\xc3\x94\xaf5D\x84\x06/\xbe)(~w-\x87\xd8\xf1\xd4\xba\xdc\xa9b\xed\xec\xecs\xb0P\xa4X\xef\xd3\x8b\xac\x8am:\x9f\x85\x80\xabI\x9d\xf0H#2\xc5\x8bP\xf9kp}iw\xe0\xc6\x8e\xb9\x14\xd2\xbe\xa0\xc1!\x8c\\\xa9k\n\xb9\x01\xac\xe7\x89.\xc4\x8e\xb7\xaa\xc2sF4', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap$auto(0x0, 0x4802020006, 0x3, 0xeb1, r3, 0x4) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(r3, 0x8, 0x3) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';') pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 7.394727035s ago: executing program 5 (id=5069): mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/bus/usb-serial/drivers/omninet/new_id\x00', 0x40180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getrlimit$auto(0x3, 0x0) fdatasync$auto(r1) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/loop8\x00', 0x4000, 0x0) ioctl$auto_BLKZEROOUT(r3, 0x127f, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) write$auto(r0, &(0x7f0000000180)='/Eev/aud\x85o!\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc07\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x02\'\x8d\x16h\xad\x16\xe6\xa5\xf0\xa4\x88h\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>\x05\x00\x00\x00\x00\x00\x00\x00Ww\xe2\x9cK\fE\a\xca\xd3\x94\xb4Z\xac6\xe8\x00\x80(\xfaI\xe2\xae,\x95kl\x82\xd2\xe6\x8b\xe8\xee\xe7]\xd1\xfe\xd0;\"\x96\xba\x98h%\xca\v\xd1\x9f9\xc7\xad)Oz}\xb0\x1d\xb3\x01\xc9\xd2\x02\xe4\xd7{\x8d\xa9\xc3\x94\xaf5D\x84\x06/\xbe)(~w-\x87\xd8\xf1\xd4\xba\xdc\xa9b\xed\xec\xecs\xb0P\xa4X\xef\xd3\x8b\xac\x8am:\x9f\x85\x80\xabI\x9d\xf0H#2\xc5\x8bP\xf9kp}iw\xe0\xc6\x8e\xb9\x14\xd2\xbe\xa0\xc1!\x8c\\\xa9k\n\xb9\x01\xac\xe7\x89.\xc4\x8e\xb7\xaa\xc2sF4', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap$auto(0x0, 0x4802020006, 0x3, 0xeb1, r3, 0x4) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) close_range$auto(r3, 0x8, 0x3) r4 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r4, 0xffffffffffdffe00, &(0x7f0000000140)=';') pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) 6.416920743s ago: executing program 0 (id=5072): timer_create$auto(0x9, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(0x3, 0x0, 0x8080) timerfd_create$auto(0x7, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = io_uring_setup$auto(0xa, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x4) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffe}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x0) unshare$auto(0x40000080) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2800, 0x0) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(r0, 0x40084146, &(0x7f0000000100)=0x8) close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0xee00) setfsuid$auto(0xee00) socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x4, 0x0) r4 = socket(0xa, 0x5, 0x0) getsockopt$auto(r4, 0x84, 0x12, 0x0, 0x0) 5.795949098s ago: executing program 6 (id=5074): socket(0x2c, 0x3, 0x0) socket(0x2c, 0x80003, 0x0) close_range$auto(0x2, 0x8000, 0x0) r0 = prctl$auto(0x3, 0x1002, 0x0, 0x0, 0xfffffffffffffff7) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000000)='/dev/usbmon4\x00', 0x20080, 0x0) r1 = socket(0x22, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x80044944, 0x0) syz_clone3(&(0x7f00000006c0)={0x208200700, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 5.37833064s ago: executing program 6 (id=5077): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003540)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_FEC_GET(r0, &(0x7f0000003600)={0x0, 0x0, &(0x7f00000035c0)={&(0x7f0000003580)={0x20, r1, 0xbc97558ef77b14af, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_FEC_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0xc000) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x8200, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000140)='/dev/usbmon20\x00', 0x60501, 0x0) ioctl$auto_MON_IOCG_STATS(r4, 0x80089203, 0x0) r5 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000080), 0x20082, 0x0) writev$auto(r5, 0x0, 0x3) 5.151024576s ago: executing program 4 (id=5078): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = epoll_create$auto(0x4) r1 = socket(0x2, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000800), r2) connect$auto(r2, &(0x7f0000000940)=@nl=@proc={0x10, 0x0, 0x25dfdbfd}, 0x1e) epoll_ctl$auto(r0, 0x1, r1, 0x0) syslog$auto_SYSLOG_ACTION_CLEAR(0x9, &(0x7f0000000000)='\x00', 0x8) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, r0, 0x0) shutdown$auto(0x200000003, 0x2) 4.862070802s ago: executing program 4 (id=5079): timer_create$auto(0x9, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(0x3, 0x0, 0x8080) timerfd_create$auto(0x7, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = io_uring_setup$auto(0xa, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x4) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffe}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x0) unshare$auto(0x40000080) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2800, 0x0) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(r0, 0x40084146, &(0x7f0000000100)=0x8) close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0xee00) setfsuid$auto(0xee00) socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x4, 0x0) socket(0xa, 0x5, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 4.510140958s ago: executing program 0 (id=5080): r0 = socket(0x15, 0x1, 0x84) unshare$auto(0x40000080) r1 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r1, r1, 0x0, 0x10000800000003) unshare$auto(0x8000000000000001) setsockopt$auto_SO_LOCK_FILTER(r1, 0x9, 0x2c, &(0x7f0000000200)='**{}\x00', 0x0) fchown$auto(0x2, 0xffffffff, 0xa1a9) r2 = ioctl$auto_TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f00000000c0)=0x5) epoll_ctl$auto_EPOLL_CTL_MOD(r0, 0x3, r2, &(0x7f0000000180)={0x5, 0x1c}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0xffffffffffffffff, 0x5, 0xffb, 0x18, 0x3, 0x2) preadv2$auto(r1, &(0x7f0000000080)={0x0, 0x80000000}, 0x8, 0x4000003, 0x4, 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000200), 0xffffffffffffffff) write$auto(0xca, &(0x7f00000002c0)='\x04>2\x1e!\xe2\x00\x94\xf2\xa2\x00\x00\x8d\xa9p\xcc\xccV\xf9ozi\xb2:\x19\x92r\xcc9\x99f\xc5\xed\x84fe\x8a\x8c\xd3*\xfe\x1dE\xa1W8\x03\xcb\tSK\xb4\x893\xf3Q\x7f\xd1|\xefp\xb1\xb3\xcer8\b=\xa4y\xd4\x88\xbc\xe0\xd1\x03\x108a\x90KG,\xf8\v\x88\xe2+\xcb\xf2v\x8bL\xa6\xaa}\x1b\xa5\xd8\x98\xc9\\f\xccT\xa1\x05\x14\x84\xbb\aF,\xc8\xc7u\x93\xe8?\x92\t\xa9`\xff\x93l\x93\xac\n\xdd\xa4\n\x8e\xec\x14\x02|\xf7\xc4\xa0\x06h\xc0\x8f\xf3g6\xb8\x1a\x18\xf2\x93\t\xe8ips\xa7\x9a\x1cFPi\x13\x89DRSO\x97\xb1\xc3\xb8Q\xa2\xb2\xa8\xc3\xd3\xf9\xd4Y\x8d\x8d\xad\x8f[\xbe\xe5\xf1\x9f\x01s\x8eg\x05\xe8\xf9\x8f\xa6g\v', 0x80) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8000000", @ANYRES16, @ANYBLOB="01"], 0xc8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x20058894) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000280), r3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'macvtap0\x00', 0x0}) r7 = socket(0x2a, 0x2, 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getsockname$auto(r7, 0x0, 0x0) r8 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r8, 0x107, 0x1, 0x0, 0x8004) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_IFINDEX={0x8, 0x2, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x40000) r9 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r9, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x80, 0x4008) 3.07243509s ago: executing program 5 (id=5081): syz_genetlink_get_family_id$auto_net_shaper(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0) io_uring_setup$auto(0x5, 0x0) rt_tgsigqueueinfo$auto(0x0, 0x0, 0xffff7fff, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) ioctl$auto_SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc0002, 0x0) getrandom$auto(0x0, 0x3, 0x80000001) statmount$auto(0x0, &(0x7f0000000180)={0x9, 0xfffffffe, 0x44f, 0xa, 0x10, 0x1007181, 0x0, 0x62, 0x7, 0x800, 0x0, 0x26, 0x4, 0x200003fffffe, 0xfffffffffffffff5, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x862, 0xf, 0x22002, 0x200, 0x0, 0x62f, 0x6, 0x0, 0x0, 0x0, 0xb626, [0xfffffffffffffffe, 0xffffffffffff04ef, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e, 0x0, 0xa7, 0xfffffffffffffffd, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffd, 0x40, 0x81, 0x8a0, 0xb, 0x81, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100002, 0x0, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x800000000000b, 0xbc) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0xfffffff7effffd0c, &(0x7f00000001c0)) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) madvise$auto(0x9, 0x7, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 2.469003316s ago: executing program 4 (id=5082): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio18\x00', 0x8aa40, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="f50128bd7000fbdbdfe30a00000a372e1047f2359aa8a6d16a0f1e8d6e4133a010664dbade1f8936159a65309480d639bcc961d4bf50378d42d562c0044ac3ba825bf4b6ce71a2d6ea074f5e024b2f13bacca0111d9078eca4a63f2b4cb3f63d7ff6e24987ea96850a70c8822440f2358846002cc96f223af1c082f83a931b671a107b4d9a86f5b8"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) ioctl$auto(r0, 0x5646, r0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000)=""/22, 0x16) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) bind$auto(0x3, 0x0, 0x2) 2.468399078s ago: executing program 6 (id=5083): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x4, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) bind$auto(0x3, 0x0, 0x6a) io_uring_setup$auto(0xa, 0x0) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) socket(0x29, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x40000) read$auto(r0, 0x0, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x7) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x4785, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mprotect$auto(0x0, 0x8000000000000001, 0x8) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0xc0ed0000, 0x0) (fail_nth: 27) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x3c}}, 0x4000000) 2.305792198s ago: executing program 0 (id=5084): sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002f80)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010028bdefb2e3c97000ffdbdf250500000005"], 0x24}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000802) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x0, 0x0) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) capset$auto(&(0x7f0000000900)={0x8}, 0x0) getpid() r0 = socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) statmount$auto(0x0, &(0x7f0000000180)={0x88e, 0xb8, 0x100000000, 0x5, 0x1b, 0x93c, 0x1ffdc, 0x7, 0x2000000000000006, 0x3, 0x9, 0x8, 0x2, 0x8001, 0xae, 0x5, 0x922, 0x7, 0x8005, 0x5, 0x3, 0xfffffffe, 0xfffffffc, 0x1fd, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, [0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x15a6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x4, 0x0, 0x0, 0x4, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000, 0x400, 0x7ffffffffffffffc, 0x0, 0x10, 0x0, 0x0, 0x7]}, 0x8, 0x83) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) pwrite64$auto(0xffffffffffffffff, &(0x7f0000000040)=':\'*&\x04!\x00', 0x2001, 0x27) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x60000000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0x10000}, 0x80000904}, 0xa, 0x400c) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.545372341s ago: executing program 0 (id=5085): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/radio18\x00', 0x8aa40, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0xf5, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="f50128bd7000fbdbdfe30a00000a372e1047f2359aa8a6d16a0f1e8d6e4133a010664dbade1f8936159a65309480d639bcc961d4bf50378d42d562c0044ac3ba825bf4b6ce71a2d6ea074f5e024b2f13bacca0111d9078eca4a63f2b4cb3f63d7ff6e24987ea96850a70c8822440f2358846002cc96f223af1c082f83a931b671a107b4d9a86f5b8"], 0xfdef}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) ioctl$auto(r0, 0x5646, r0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000000)=""/22, 0x16) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) bind$auto(0x3, 0x0, 0x2) 1.416699662s ago: executing program 4 (id=5086): r0 = io_uring_setup$auto(0x6, 0x0) getsockopt$auto_SO_PASSCRED(r0, 0x9, 0x10, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x10, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8004b708, 0x1) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1ff}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 921.606401ms ago: executing program 6 (id=5087): r0 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000080), 0x20082, 0x0) writev$auto(r0, 0x0, 0x3) 918.435071ms ago: executing program 4 (id=5088): r0 = io_uring_setup$auto(0x6, 0x0) getsockopt$auto_SO_PASSCRED(r0, 0x9, 0x10, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/fib_trie\x00', 0x0, 0x0) mmap$auto(0xfffffffffffffffc, 0x2020009, 0x10, 0xfffffffffffffff8, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x800, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket(0x11, 0x80003, 0x300) socket(0x1d, 0x2, 0x7) socket(0x2, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, 0x0, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) bpf$auto(0x9, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x71c, 0xfaae, 0x468, 0x2, 0x8000000000000001, 0x80, 0x7, 0x1, 0x1fc, 0xff, 0xb5, 0x4, 0x40004, 0xd9ee}, 0xe3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/reset\x00', 0x82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xffffffffffffffff, 0x8004b708, 0x1) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0x1ff}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) 899.854807ms ago: executing program 5 (id=5089): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) fallocate$auto(r0, 0x1, 0x820, 0x7fff) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40342, 0x22) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) futex$auto(0x0, 0x86, 0x8, 0x0, 0x0, 0x7) close_range$auto(0x2, 0xa, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000140), 0x4a002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x0) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) mmap$auto(0x0, 0x2020007, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) shmctl$auto_IPC_INFO(0x1, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x3, 0x5) lseek$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfdef) munmap$auto(0x8000, 0xffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, 0x0, 0x4000000) read$auto(r1, 0x0, 0x1ff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) statmount$auto(&(0x7f0000000040)={0x7f, @inferred=r1, 0x55, 0x4000, 0x8}, &(0x7f0000000240)={0xf1f, 0x9, 0x82, 0x3, 0x6, 0x10000000000000, 0x56, 0x9, 0x5, 0x9, 0x3, 0x6, 0x8, 0x7fffffffffffffff, 0x19, 0x6b8, 0xe43, 0x6, 0x80, 0x3ff, 0x1, 0xff, 0x7, 0x8, 0x7ff, 0x5, 0x7fff, 0x4, 0x0, 0x4, 0xc, [0xfffffffffffffee2, 0x6, 0x5, 0x8, 0x5, 0xb, 0xe000000000000000, 0x0, 0xfffffffffffffffa, 0x3, 0x401, 0xffffffffffffffff, 0x7, 0x3, 0x7, 0x1, 0xffffffff7fffffff, 0x800000, 0x5, 0x588ddc1d, 0x4, 0x10001, 0x8, 0x0, 0x8000, 0x9, 0x6, 0x200000000, 0x0, 0x6, 0x239, 0x400, 0xf4c1, 0x3, 0x7, 0x8000000000000001, 0x9, 0x80000001, 0x400, 0x0, 0xff, 0x28, 0x4], "e98e6c6011021e87b1983fccef2f38ab785f155ab24a0e394cf203bb2c15d0ac4f06d4510050d2572d554ce8e8d297d34c5f832ab3fa8d380e"}, 0xb, 0xc) setsockopt$auto(0xffffffffffffffff, 0x29, 0x13, 0x0, 0x0) 765.119631ms ago: executing program 0 (id=5090): timer_create$auto(0x9, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$auto(0x3, 0x0, 0x8080) timerfd_create$auto(0x7, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = io_uring_setup$auto(0xa, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x4) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xfffe}, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x1, 0x0) unshare$auto(0x40000080) connect$auto(0xffffffffffffffff, 0x0, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/event0\x00', 0x40000, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2800, 0x0) ioctl$auto_EVIOCGRAB(r2, 0x40044590, &(0x7f0000000000)=0x5) ioctl$auto_EVIOCGMASK(r3, 0x80104592, &(0x7f0000000140)={0x4, 0x800005, 0x400007}) ioctl$auto_SNDRV_PCM_IOCTL_REWIND2(r0, 0x40084146, &(0x7f0000000100)=0x8) close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0xee00) setfsuid$auto(0xee00) socket(0x11, 0x80003, 0x300) sysfs$auto(0x2, 0x4, 0x0) socket(0xa, 0x5, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 524.222731ms ago: executing program 6 (id=5091): sendmmsg$auto(0xffffffffffffffff, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) setitimer$auto(0x2, &(0x7f0000000040)={{0x0, 0x5}, {0x0, 0x8}}, 0x0) setitimer$auto_ITIMER_PROF(0x2, 0x0, 0x0) r0 = ioctl$auto_TUNSETNOCSUM(0xffffffffffffffff, 0x400454c8, &(0x7f00000000c0)=0x9) mmap$auto(0x0, 0x400008, 0x53, 0x9b74, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x4, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01002dbd0900fedbdf257e"], 0x14}, 0x1, 0x68, 0x0, 0x24000000}, 0xd0) sendmsg$auto_NL80211_CMD_SET_BSS(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r3, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@NL80211_ATTR_VENDOR_DATA={0x92, 0xc5, "d53c261e143c53e6594d28b0f2c01b9a72c851851befdb5098d9ec9554a157d46dab9b1b7c2dc07473f440abc5ab6e1c543a051e1834e85607c13114fad32b4445e1142b35825bc8425a62fdca267939318f20b7bec1be38545babef5b399070b84c26fbc57da762b81d7c2290e1576d467084dfa9cdd98b80823c971f225d35a7970117844e5fb5c0c3c4a264c0"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x1}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x17, 0xbe, "005cf9a8bf3ba2c0d4461a6238e541d6941bd5"}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40850}, 0x24008004) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000000), 0x24000, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) write$auto(r1, &(0x7f0000000140)='/dev/loop-control\x00', 0x1) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 347.404446ms ago: executing program 4 (id=5092): mmap$auto(0x0, 0x400008, 0x6, 0x209b72, 0x2, 0x1000000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_freeze_timeout\x00', 0x8242, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket(0x11, 0x80000, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) fspick$auto(0xffffffffffffffff, 0x0, 0x9) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) open(0x0, 0x161342, 0x130) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r2, 0x0, 0x101, 0x103) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) write$auto(r0, 0x0, 0x100000a3d7) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=ANY=[@ANYRESDEC=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB, @ANYRESOCT=r0, @ANYRESOCT, @ANYRES16, @ANYRES64=r3, @ANYRES16], 0xb4}}, 0x20000054) write$auto(r3, 0x0, 0x98c7) madvise$auto(0x0, 0x8, 0x15) unshare$auto(0x40000080) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/rt_cache\x00', 0x2000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000400), 0x181040, 0x0) mmap$auto(0x0, 0x2000d, 0x7, 0xeb1, 0x404, 0x10008000) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000001bc0)="51426572911c17e9dd66bf94ea32689283bb895dbc0a97721ed6e250c974356905898b7d48acecddf280cf6dd4ba18c1aa3928071c6585025ceab0e2f34f37ddec138ea587fc4def825608b0ab2a6ecac42062bd3c58ba606307b7471b20a40ffa168b91dde6727571c4ec94bfbde1df90ccb265ffda374c98ffb1ee22069af38a3f200532dbbe5e98f4455170e9a137517b9b7b8840359940ab00f37125c2bec0ac36606b6c69edb35967d723fb81a15faea2bd280d1581ad1ef597bb4dc09f6a5d53aaff1877b77c4e425761dc09d34498c1fce72c0ba1041a99b8748a37597b9567cda1de2cbf6962798e5ee11bf7cb2c70a9502f33c43b8e5dc54de743a2e24cb94c22d669b434888a7ce4cb16cd77b324258e07af32adc0cb38f8c622085783f6804edc3913fb9e98c55713fa0bf8101ad0f6f43407ce4be0001d1bb201bec283ade79ab23484c1076e703864629ac9a6031533dc956f705f89f0e0ef7d3109e46859d1f2ad1b8cb3cfcedf868a3be101e8b9acd75e39e6a27a541aa9fe86ad3119b7049c3fad2a901222eb948cabb4b5c3e5ba6ffc02a15bf7d550b00ab0f3dd3002924f7bd0701269ae293c4cb231b9127d1f6b38dd6fbb3429905384eed7eed9330a9c5e732bdd510169d9ca3e420ea2102be3770a0ab598c037b8f01e8910cf8b0942aafb156ac90724cf552df158a7f59c26e62f3fcf32d860c2259cb1b3118a773ff3cfbaf9c5b068dade5cd7778f1ea98700629b62534735fef3071c30afa6ea26f7e651ec140936c07d9e90f1c9faef3e05376b1e121af6a6691616c10e19fd4f16b1858b44d99e597908cda0e8fa8c21d8b700987d7723a4b5a4ff3c371f2d1cb9fb2f054abc58727239ba67a173f1431083fedc7c4304488c13c75e4995a58ac9de085377356ddc5338aeb44e7f3d06f82a5e0c846159c881a0395a3dbf32a9f2530a520721431a752b13b01a89bdf2b38387b72e8a533936623ec396f6ef94ddfcca047bf20a6fe450a03dedb36a57355e2519ff579b5c63095f48407ece8a7c6c4f5b2582616f0a6bba059810c0a28355fb08dceec9e290026452c3135f8ad93f9617f22e590122d43f6fdc1ea0f9ec12c551b5127108443bb081f7a89660034ea4f3c4305108428cc91918dbb28c2a117f09609e40903b13055e92a727afa767b1f97df335ee729686c0113e4cc18aa50f4ad82b1d403cc6c11ac3bf63415560417d7d488df01b69c925ca3fce60ca7ac767fd11df61caf62f3ab67dad043faf1cc334903e0f419c2e97553ecaad5814bf097192e76e9a16bc5c9be932718aba32cd7dbcc6bc634a463c6f709cc81963b39442e710c14c7e107b0aeb7b6a0e3f3757860d10dd741863277c43ce4dcec49f4558959b08f59182baf4f250aa045fee383ceaec280817bf222dfbeeca8c1ec8473176326c1ffd49ea072b5f3c73f36865b6052a1595c1bb76cfe37f976848fbcb408381ddeff9c318a2e6bbfe6c18ef16531fec3c47874a5391238c0d6b0e033db3fce94127cc9c98a4211e5d873f7b4810846d96be2d6cac532fce0ddee737e4d1ddb65b8b2449984a897e4090449ed4fb4006fb9d133e51396d4664a3f0c395c5b24781f8389979ccb565c6461b66db7134d15cff5ae8f935a5bcb23caace2edd2b37a726575e3cb0528de05edd9f03e30feb617767b6a557280a0a288b52af44a1607b6063867e5c9d8d56c44968fd509b5983fa06e6b1eefb2f8cee0c1cb49b8b569cf13b77adbc22ce972cd718167ac571ee41a446d13931f849d5636c729996b36ec84171fde260a4e01e9770cf687591a79833ae6473c51e12c0faab96ef093e6178d485526dbf775c94324c76bd4af2652e9036b1cc0d3df05c9232ee6eef7c4f46a6cf8ad160ad087aba6928bf156bf3ade1d135a965c4a2b283485737da67fe99227f2fbfb3baa74d75fe29122adfd82fcb9325b7ea826a52559654e76d494a374d9535facfcd4ab248e388c516bb8a0dc151b1557e418fd7c625c67ab1c50d6f05b97ba15c55631aeea44b21131aa93ead176f7bfd1418856e38782f004f272738827a64bb695f6b6a08cff8d1917be52a8851bd2bfd57d08bb0660e2ffc23792a419c2e9b006e3b0ad05044d99b97391fd2cceb86cf26acebe089a861340b04fd01e1baa70583032a30ea2e605217b80f7ee16d7e28be43d12bb2b67937dd26a8aeb84fef2f2d52f75232a400e7b279dcfc01953b0c46203477a50b5853e8f7b14b2ba31db742504bca6ed95b18846706c9fd85bf2a3a2642029b9ff2828bf0f7cbd96109a237961be8fe5c62f0fcc04c994f123f4a22f048403eac9308cfd2f2e4350c72e9ef83416ce973d3aa90d281a0275886dd3858b5869784ae58e257aa5af6d373dcc9cf520e364be748833adbb10daa6f6a334b51d27529d86ea5ce874562f9f93da45d244224b936fced3b658abbe7aa1f0d502fffce823f528ab47ea3540722f144733666229ae08cfc7e61247742ea4e3c180938ae7c7b81c1ee975c831f79672e044cefc49894c2ab73bba2580ac476cc0e56b6748b8edbb37a3f8dda7ffad4ec07abce7c4d10fc32e40d5a9db37f7b1e3a6eabedbefa9dd8eef189b92363d3391d384af26b7d47958d3d82845c9b668da5bcbd64058dc9e1c6d903ab5d2aa049d197116a11309a1abe9e5b3f9e7f1c623242b1d8089bc369d145a7070e8a9bdf543dbffe899ff9366009a3b0424a634681b530dad9ef23f136a10c7287068e57f3c2de45adf0a105c328e0035b97168f4c17aa4610b2e6e1a6ba0b71c06417b7a9497be4a009b19d7162adfd4d7b6490faf3782a920281333ad09b848ab5f4d15534b8c4e43dc9604b0630f8d349b2c80a98fde04693c31cbed7d460edfc0138dcc5d3974e682bbd555ac19625bf6e0607d8803391ec9c2dc41fc4e8bceae4f53507137324dd02914a067d52a577b812ddac4a34765c26a98839b3edb6290abff0c75991d6f8c1bd7540f38a7f25fec2f3539f894c938e1f3cf0ff1e6994d6a6ecc457a482f045ba712a85e8e31afd49c8e3480dc1c36d56ab2eceac6e5a847455d8ef4e3d45cd463c421bd1bce2ca57dd88f0e7ab3446cdfa8cb3914c240936f1738af7009e9131b240b59af55d7e38307b91fc8f00410cfdcfacaa341607a801afa63640091eb00b860700ea882878a8d9838f5597b970366be7d167ddebfe3c9253b5dbf7f30a67ee4d87dccb3c723c20200aa5fc036caf12811b19ce49c81ce328d7b24587353ecb99bafd327e33303cf447b36800d1bed8ee10df527d55c0d5f7506fb11cb133", 0x930) ioctl$auto_TIOCSTI2(r1, 0x5412, &(0x7f0000000100)="bc8f1a1f6b2c7bb90417a07663efab3324d7fcd2fd27127726bedf5d54326b4cd4c6b58746d87e764b38cc39b064ad6da27cb2900b20cc190a9a84cfa8a2df9646cf54f877951829bc2eeffdf437be7fb6e3fb0b1a1bb1f27d1c5d0c4b0802d437ac41db3637d21bebc7f0680ee9862f5d8576420c934e366f1ba608b28be5b7b01bddcb0308caff3c491e7026") openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x20c002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptytf\x00', 0x109401, 0x0) 0s ago: executing program 6 (id=5093): r0 = openat$auto_ns_file_operations_nsfs(0xffffffffffffff9c, &(0x7f0000005dc0)='/proc/thread-self/ns/cgroup\x00', 0x800, 0x0) r1 = open_by_handle_at$auto(r0, &(0x7f0000005e00)={0x10, 0xf1, "ceaa24796e00"/16}, 0x80000001) mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = getpid() sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24040004}, 0x800) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0x103001, 0x0) ioctl$auto_I2C_RDWR(r3, 0x707, 0x0) r4 = getpgid(0xffffffffffffffff) shmctl$auto_IPC_RMID(0x0, 0x0, &(0x7f0000000180)={{0xa069, 0xee01, 0xffffffffffffffff, 0x1, 0x400, 0x40, 0x7}, 0x1, 0x80, 0x4, 0x5, @inferred=r4, @raw=0x401, 0x9, 0x0, &(0x7f0000000040)="81bb9b573887efbbd94faedeafd33ff8fd8c92dc08807377b4d33cc30021173865c96c834a311c3404310a51959f1cc6281c161e6919cdda5da2772f82235ce4339f177e80128c590f255e76f39a1f48169e387c2a47ea9c79f0d681cfde82b5818e9be38d21b415e22c5372c0c0874c27456125c4495f83858cc42817c9491713e714138b9c8fdd3915625edfb295a280ec8a76b4d4733ca25fdc54b583b4b8ee8090d114ba641d692a84c4892f0fab28d6178514e7ed48b7602142412305065ae040b03e94dd3fc85bbce1f0619f629dea2f25c30f166e586cc2a70d22e9092af6911a191d050926f05b27ba6d0fbed966f067fc58", &(0x7f0000000140)="5243d2630ca8ed5960c2e5fe44f4fa82cef3808a1afd6b7ea38494dd265056db68fccd1c956efc0cd4f25356f682c680819b4393aa1da0357d6c955fef"}) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f0000000200)={0xbaa, @raw=0x10001, @inferred=r1, 0x1, 0xe, '\x00', {0x1, 0x400, 0x0, r5, 0x0, 0x9, 0x80000000, 0x5, {0x9, 0x1}, {0x5, 0x3}, {0x2f, 0x1}, 0x0, 0xa, 0x7fffffff, 0x9, 0x1, 0x3, 0x0, 0x8, 0xffff, 0xb, '\x00', 0x40, 0x8, 0x8, 0xf}}) kernel console output (not intermixed with test programs): ][T28414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1782.296544][T28414] Call Trace: [ 1782.296552][T28414] [ 1782.296561][T28414] dump_stack_lvl+0x100/0x190 [ 1782.296598][T28414] should_fail_ex.cold+0x5/0xa [ 1782.296625][T28414] get_futex_key+0x1d2/0x1620 [ 1782.296665][T28414] ? __pfx_get_futex_key+0x10/0x10 [ 1782.296704][T28414] ? kasan_quarantine_put+0x104/0x240 [ 1782.296728][T28414] ? lockdep_hardirqs_on+0x78/0x100 [ 1782.296769][T28414] futex_wake+0xea/0x530 [ 1782.296797][T28414] ? find_held_lock+0x2b/0x80 [ 1782.296829][T28414] ? __pfx_futex_wake+0x10/0x10 [ 1782.296860][T28414] ? ksys_write+0x190/0x250 [ 1782.296894][T28414] ? ksys_write+0x190/0x250 [ 1782.296923][T28414] do_futex+0x32b/0x350 [ 1782.296946][T28414] ? __pfx_do_futex+0x10/0x10 [ 1782.296989][T28414] __x64_sys_futex+0x34f/0x4d0 [ 1782.297014][T28414] ? fput+0x79/0x100 [ 1782.297043][T28414] ? __pfx___x64_sys_futex+0x10/0x10 [ 1782.297065][T28414] ? ksys_write+0x1ac/0x250 [ 1782.297087][T28414] ? __pfx_ksys_write+0x10/0x10 [ 1782.297119][T28414] do_syscall_64+0x106/0xf80 [ 1782.297153][T28414] ? clear_bhb_loop+0x40/0x90 [ 1782.297181][T28414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1782.297204][T28414] RIP: 0033:0x7f71c4d9bf79 [ 1782.297223][T28414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1782.297246][T28414] RSP: 002b:00007f71c5bf50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1782.297269][T28414] RAX: ffffffffffffffda RBX: 00007f71c5015fa8 RCX: 00007f71c4d9bf79 [ 1782.297285][T28414] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f71c5015fac [ 1782.297300][T28414] RBP: 00007f71c5015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1782.297315][T28414] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 1782.297330][T28414] R13: 00007f71c5016038 R14: 00007ffdfd8037f0 R15: 00007ffdfd8038d8 [ 1782.297360][T28414] [ 1782.742426][T28420] Process accounting resumed [ 1783.428682][T28446] Invalid ELF header magic: != ELF [ 1783.483847][T28458] Invalid ELF header magic: != ELF [ 1783.730205][ T30] audit: type=1800 audit(4294967505.560:109): pid=28418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4574" name="lu_gp_id" dev="configfs" ino=133468 res=0 errno=0 [ 1784.095430][T28462] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1784.315580][T28467] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 1784.538119][T28474] FAULT_INJECTION: forcing a failure. [ 1784.538119][T28474] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.573493][T28474] CPU: 0 UID: 0 PID: 28474 Comm: syz.4.4579 Tainted: G L syzkaller #0 PREEMPT(full) [ 1784.573530][T28474] Tainted: [L]=SOFTLOCKUP [ 1784.573539][T28474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1784.573554][T28474] Call Trace: [ 1784.573562][T28474] [ 1784.573572][T28474] dump_stack_lvl+0x100/0x190 [ 1784.573609][T28474] should_fail_ex.cold+0x5/0xa [ 1784.573635][T28474] should_failslab+0xc2/0x120 [ 1784.573664][T28474] __kvmalloc_node_noprof+0xfa/0xa00 [ 1784.573690][T28474] ? proc_sys_call_handler+0x2c7/0x5a0 [ 1784.573744][T28474] ? proc_sys_call_handler+0x169/0x5a0 [ 1784.573785][T28474] proc_sys_call_handler+0x2c7/0x5a0 [ 1784.573826][T28474] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 1784.573862][T28474] ? trace_kmalloc+0x83/0xb0 [ 1784.573888][T28474] ? __kmalloc_noprof+0x320/0x850 [ 1784.573922][T28474] copy_splice_read+0x4ba/0xb90 [ 1784.573952][T28474] ? __pfx_copy_splice_read+0x10/0x10 [ 1784.573978][T28474] ? look_up_lock_class+0x64/0x120 [ 1784.574018][T28474] ? lockdep_init_map_type+0x5c/0x250 [ 1784.574045][T28474] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1784.574071][T28474] ? __pfx_copy_splice_read+0x10/0x10 [ 1784.574094][T28474] do_splice_read+0x285/0x370 [ 1784.574121][T28474] splice_direct_to_actor+0x2a1/0xa30 [ 1784.574147][T28474] ? __pfx_direct_splice_actor+0x10/0x10 [ 1784.574178][T28474] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1784.574211][T28474] do_splice_direct+0x174/0x240 [ 1784.574236][T28474] ? __pfx_do_splice_direct+0x10/0x10 [ 1784.574258][T28474] ? common_file_perm+0x1ab/0x4f0 [ 1784.574284][T28474] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1784.574313][T28474] ? rw_verify_area+0xce/0x6d0 [ 1784.574352][T28474] do_sendfile+0xadc/0xe20 [ 1784.574379][T28474] ? __pfx_do_sendfile+0x10/0x10 [ 1784.574401][T28474] ? __fget_files+0x21f/0x3d0 [ 1784.574432][T28474] __x64_sys_sendfile64+0x1d8/0x220 [ 1784.574466][T28474] ? ksys_write+0x1ac/0x250 [ 1784.574492][T28474] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1784.574529][T28474] do_syscall_64+0x106/0xf80 [ 1784.574563][T28474] ? clear_bhb_loop+0x40/0x90 [ 1784.574592][T28474] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1784.574615][T28474] RIP: 0033:0x7fb88059bf79 [ 1784.574635][T28474] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1784.574658][T28474] RSP: 002b:00007fb881453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1784.574680][T28474] RAX: ffffffffffffffda RBX: 00007fb880815fa0 RCX: 00007fb88059bf79 [ 1784.574696][T28474] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005 [ 1784.574710][T28474] RBP: 00007fb881453090 R08: 0000000000000000 R09: 0000000000000000 [ 1784.574725][T28474] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1784.574745][T28474] R13: 00007fb880816038 R14: 00007fb880815fa0 R15: 00007ffd808a0c38 [ 1784.574776][T28474] [ 1786.354475][T28480] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1786.385141][T28480] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1786.431197][T28480] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1786.459365][T28480] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1786.495890][T28480] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1786.526346][T28480] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1786.599052][T28480] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1787.810902][T28506] Invalid ELF header magic: != ELF [ 1788.046878][T23808] Bluetooth: hci4: command 0x0406 tx timeout [ 1788.450195][T23808] Bluetooth: hci2: command 0x0406 tx timeout [ 1788.458985][T12655] Bluetooth: hci1: command 0x0406 tx timeout [ 1788.527128][T23808] Bluetooth: hci3: command 0x0c1a tx timeout [ 1788.534674][T12655] Bluetooth: hci5: command 0x0c1a tx timeout [ 1789.537777][T28542] Invalid ELF header magic: != ELF [ 1789.877789][T28546] FAULT_INJECTION: forcing a failure. [ 1789.877789][T28546] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.966404][T28546] CPU: 0 UID: 0 PID: 28546 Comm: syz.4.4591 Tainted: G L syzkaller #0 PREEMPT(full) [ 1789.966447][T28546] Tainted: [L]=SOFTLOCKUP [ 1789.966456][T28546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1789.966481][T28546] Call Trace: [ 1789.966492][T28546] [ 1789.966503][T28546] dump_stack_lvl+0x100/0x190 [ 1789.966541][T28546] should_fail_ex.cold+0x5/0xa [ 1789.966572][T28546] should_failslab+0xc2/0x120 [ 1789.966605][T28546] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1789.966641][T28546] ? acpi_evaluate_object+0xf5/0xe00 [ 1789.966679][T28546] ? __lock_acquire+0x4a5/0x2630 [ 1789.966708][T28546] acpi_evaluate_object+0xf5/0xe00 [ 1789.966745][T28546] ? kasan_save_stack+0x30/0x50 [ 1789.966768][T28546] ? kasan_save_track+0x14/0x30 [ 1789.966797][T28546] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1789.966839][T28546] ? __pfx___might_resched+0x10/0x10 [ 1789.966872][T28546] acpi_evaluate_integer+0xdf/0x220 [ 1789.966906][T28546] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1789.966951][T28546] ? __pfx_status_show+0x10/0x10 [ 1789.967052][T28546] status_show+0xa0/0x120 [ 1789.967094][T28546] ? __pfx_status_show+0x10/0x10 [ 1789.967139][T28546] dev_attr_show+0x52/0xa0 [ 1789.967171][T28546] ? __pfx_dev_attr_show+0x10/0x10 [ 1789.967194][T28546] sysfs_kf_seq_show+0x217/0x3a0 [ 1789.967228][T28546] seq_read_iter+0x32f/0x1270 [ 1789.967267][T28546] kernfs_fop_read_iter+0x46c/0x610 [ 1789.967292][T28546] ? rw_verify_area+0xce/0x6d0 [ 1789.967329][T28546] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1789.967356][T28546] vfs_read+0x825/0xb30 [ 1789.967384][T28546] ? __pfx_vfs_read+0x10/0x10 [ 1789.967429][T28546] ksys_read+0x12a/0x250 [ 1789.967452][T28546] ? __pfx_ksys_read+0x10/0x10 [ 1789.967485][T28546] do_syscall_64+0x106/0xf80 [ 1789.967529][T28546] ? clear_bhb_loop+0x40/0x90 [ 1789.967558][T28546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.967583][T28546] RIP: 0033:0x7fb88059bf79 [ 1789.967604][T28546] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1789.967629][T28546] RSP: 002b:00007fb881453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1789.967653][T28546] RAX: ffffffffffffffda RBX: 00007fb880815fa0 RCX: 00007fb88059bf79 [ 1789.967669][T28546] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000004 [ 1789.967684][T28546] RBP: 00007fb8806327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1789.967699][T28546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1789.967714][T28546] R13: 00007fb880816038 R14: 00007fb880815fa0 R15: 00007ffd808a0c38 [ 1789.967745][T28546] [ 1790.723770][T23808] Bluetooth: hci3: command 0x0c1a tx timeout [ 1790.829089][T28550] FAULT_INJECTION: forcing a failure. [ 1790.829089][T28550] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.868272][T28550] CPU: 0 UID: 0 PID: 28550 Comm: syz.4.4592 Tainted: G L syzkaller #0 PREEMPT(full) [ 1790.868319][T28550] Tainted: [L]=SOFTLOCKUP [ 1790.868327][T28550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1790.868343][T28550] Call Trace: [ 1790.868351][T28550] [ 1790.868361][T28550] dump_stack_lvl+0x100/0x190 [ 1790.868400][T28550] should_fail_ex.cold+0x5/0xa [ 1790.868426][T28550] should_failslab+0xc2/0x120 [ 1790.868456][T28550] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1790.868494][T28550] ? tty_open+0x139/0xfa0 [ 1790.868530][T28550] ? __pfx_tty_open+0x10/0x10 [ 1790.868563][T28550] tty_open+0x139/0xfa0 [ 1790.868600][T28550] ? __pfx_tty_open+0x10/0x10 [ 1790.868631][T28550] ? chrdev_open+0x10b/0x6a0 [ 1790.868656][T28550] ? chrdev_open+0x10b/0x6a0 [ 1790.868686][T28550] ? __pfx_tty_open+0x10/0x10 [ 1790.868719][T28550] chrdev_open+0x234/0x6a0 [ 1790.868744][T28550] ? __pfx_apparmor_file_open+0x10/0x10 [ 1790.868783][T28550] ? __pfx_chrdev_open+0x10/0x10 [ 1790.868812][T28550] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1790.868846][T28550] do_dentry_open+0x6d8/0x1660 [ 1790.868872][T28550] ? __pfx_chrdev_open+0x10/0x10 [ 1790.868906][T28550] vfs_open+0x82/0x3f0 [ 1790.868942][T28550] path_openat+0x208c/0x31a0 [ 1790.868978][T28550] ? __pfx_path_openat+0x10/0x10 [ 1790.869015][T28550] do_file_open+0x20e/0x430 [ 1790.869044][T28550] ? __pfx_do_file_open+0x10/0x10 [ 1790.869091][T28550] ? alloc_fd+0x476/0x790 [ 1790.869119][T28550] ? do_getname+0x191/0x390 [ 1790.869153][T28550] do_sys_openat2+0x10d/0x1e0 [ 1790.869194][T28550] ? __pfx_do_sys_openat2+0x10/0x10 [ 1790.869239][T28550] __x64_sys_openat+0x12d/0x210 [ 1790.869278][T28550] ? __pfx___x64_sys_openat+0x10/0x10 [ 1790.869311][T28550] ? xfd_validate_state+0x129/0x190 [ 1790.869351][T28550] do_syscall_64+0x106/0xf80 [ 1790.869386][T28550] ? clear_bhb_loop+0x40/0x90 [ 1790.869415][T28550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.869440][T28550] RIP: 0033:0x7fb88059bf79 [ 1790.869460][T28550] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1790.869484][T28550] RSP: 002b:00007fb881453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1790.869507][T28550] RAX: ffffffffffffffda RBX: 00007fb880815fa0 RCX: 00007fb88059bf79 [ 1790.869524][T28550] RDX: 0000000000101000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1790.869540][T28550] RBP: 00007fb8806327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1790.869555][T28550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1790.869570][T28550] R13: 00007fb880816038 R14: 00007fb880815fa0 R15: 00007ffd808a0c38 [ 1790.869601][T28550] [ 1792.765609][T23808] Bluetooth: hci3: command 0x0c1a tx timeout [ 1793.546249][T28594] FAULT_INJECTION: forcing a failure. [ 1793.546249][T28594] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.637838][T28594] CPU: 0 UID: 0 PID: 28594 Comm: syz.5.4600 Tainted: G L syzkaller #0 PREEMPT(full) [ 1793.637884][T28594] Tainted: [L]=SOFTLOCKUP [ 1793.637892][T28594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1793.637907][T28594] Call Trace: [ 1793.637915][T28594] [ 1793.637924][T28594] dump_stack_lvl+0x100/0x190 [ 1793.637966][T28594] should_fail_ex.cold+0x5/0xa [ 1793.637992][T28594] should_failslab+0xc2/0x120 [ 1793.638021][T28594] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1793.638045][T28594] ? __d_alloc+0x34/0xa80 [ 1793.638079][T28594] __d_alloc+0x34/0xa80 [ 1793.638109][T28594] d_alloc+0x4a/0x1e0 [ 1793.638139][T28594] d_alloc_name+0x83/0xb0 [ 1793.638166][T28594] ? __pfx_d_alloc_name+0x10/0x10 [ 1793.638196][T28594] ? d_instantiate+0x95/0xb0 [ 1793.638228][T28594] simple_fill_super+0x4c3/0x680 [ 1793.638256][T28594] ? nfsd_mkdir+0x455/0x460 [ 1793.638291][T28594] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1793.638328][T28594] nfsd_fill_super+0x98/0x560 [ 1793.638362][T28594] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1793.638399][T28594] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1793.638435][T28594] get_tree_keyed+0x10e/0x1d0 [ 1793.638459][T28594] vfs_get_tree+0x92/0x320 [ 1793.638494][T28594] path_mount+0x7d0/0x23d0 [ 1793.638528][T28594] ? __pfx_path_mount+0x10/0x10 [ 1793.638555][T28594] ? lockdep_hardirqs_on+0x78/0x100 [ 1793.638594][T28594] ? putname+0xb1/0x110 [ 1793.638619][T28594] ? kmem_cache_free+0x124/0x670 [ 1793.638664][T28594] ? __x64_sys_mount+0x293/0x310 [ 1793.638692][T28594] __x64_sys_mount+0x293/0x310 [ 1793.638722][T28594] ? __pfx___x64_sys_mount+0x10/0x10 [ 1793.638761][T28594] do_syscall_64+0x106/0xf80 [ 1793.638795][T28594] ? clear_bhb_loop+0x40/0x90 [ 1793.638824][T28594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.638847][T28594] RIP: 0033:0x7fcd0099bf79 [ 1793.638867][T28594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.638896][T28594] RSP: 002b:00007fcd01830028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1793.638919][T28594] RAX: ffffffffffffffda RBX: 00007fcd00c16090 RCX: 00007fcd0099bf79 [ 1793.638935][T28594] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 1793.638951][T28594] RBP: 00007fcd01830090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.638966][T28594] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000002 [ 1793.638981][T28594] R13: 00007fcd00c16128 R14: 00007fcd00c16090 R15: 00007ffdfe2cf4e8 [ 1793.639011][T28594] [ 1794.732209][T28612] FAULT_INJECTION: forcing a failure. [ 1794.732209][T28612] name failslab, interval 1, probability 0, space 0, times 0 [ 1794.810685][T28612] CPU: 0 UID: 0 PID: 28612 Comm: syz.0.4603 Tainted: G L syzkaller #0 PREEMPT(full) [ 1794.810727][T28612] Tainted: [L]=SOFTLOCKUP [ 1794.810736][T28612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1794.810751][T28612] Call Trace: [ 1794.810760][T28612] [ 1794.810769][T28612] dump_stack_lvl+0x100/0x190 [ 1794.810815][T28612] should_fail_ex.cold+0x5/0xa [ 1794.810843][T28612] should_failslab+0xc2/0x120 [ 1794.810873][T28612] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1794.810910][T28612] ? newseg+0x25a/0xe60 [ 1794.810943][T28612] newseg+0x25a/0xe60 [ 1794.810975][T28612] ? __pfx_newseg+0x10/0x10 [ 1794.811002][T28612] ? __sched_setaffinity+0x17c/0x280 [ 1794.811039][T28612] ? __pfx___sched_setaffinity+0x10/0x10 [ 1794.811079][T28612] ipcget+0xee/0xf50 [ 1794.811107][T28612] ? do_futex+0x192/0x350 [ 1794.811130][T28612] ? __pfx_do_futex+0x10/0x10 [ 1794.811155][T28612] ? sched_setaffinity+0xe0/0x400 [ 1794.811188][T28612] ? __might_fault+0xc5/0x140 [ 1794.811211][T28612] ? __pfx_ipcget+0x10/0x10 [ 1794.811241][T28612] ? __x64_sys_futex+0x34f/0x4d0 [ 1794.811264][T28612] ? __x64_sys_futex+0x358/0x4d0 [ 1794.811292][T28612] __x64_sys_shmget+0x13b/0x1b0 [ 1794.811322][T28612] ? __pfx___x64_sys_shmget+0x10/0x10 [ 1794.811362][T28612] ? rcu_is_watching+0x12/0xc0 [ 1794.811395][T28612] do_syscall_64+0x106/0xf80 [ 1794.811431][T28612] ? clear_bhb_loop+0x40/0x90 [ 1794.811460][T28612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.811484][T28612] RIP: 0033:0x7f71c4d9bf79 [ 1794.811504][T28612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1794.811528][T28612] RSP: 002b:00007f71c5bf5028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 1794.811552][T28612] RAX: ffffffffffffffda RBX: 00007f71c5015fa0 RCX: 00007f71c4d9bf79 [ 1794.811568][T28612] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 1794.811584][T28612] RBP: 00007f71c4e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1794.811600][T28612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1794.811615][T28612] R13: 00007f71c5016038 R14: 00007f71c5015fa0 R15: 00007ffdfd8038d8 [ 1794.811647][T28612] [ 1795.268226][T28616] ksmbd: Unknown IPC event: 14, ignore. [ 1796.248453][T28625] Process accounting paused [ 1797.043165][T28643] FAULT_INJECTION: forcing a failure. [ 1797.043165][T28643] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.122009][T28643] CPU: 0 UID: 0 PID: 28643 Comm: syz.4.4611 Tainted: G L syzkaller #0 PREEMPT(full) [ 1797.122047][T28643] Tainted: [L]=SOFTLOCKUP [ 1797.122056][T28643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1797.122070][T28643] Call Trace: [ 1797.122078][T28643] [ 1797.122088][T28643] dump_stack_lvl+0x100/0x190 [ 1797.122125][T28643] should_fail_ex.cold+0x5/0xa [ 1797.122150][T28643] ? tomoyo_encode2+0xfb/0x3c0 [ 1797.122178][T28643] should_failslab+0xc2/0x120 [ 1797.122206][T28643] __kmalloc_noprof+0xe0/0x850 [ 1797.122229][T28643] ? d_absolute_path+0x136/0x1b0 [ 1797.122267][T28643] tomoyo_encode2+0xfb/0x3c0 [ 1797.122301][T28643] tomoyo_encode+0x29/0x50 [ 1797.122328][T28643] tomoyo_realpath_from_path+0x18c/0x690 [ 1797.122370][T28643] tomoyo_path_number_perm+0x23c/0x580 [ 1797.122395][T28643] ? tomoyo_path_number_perm+0x22e/0x580 [ 1797.122421][T28643] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1797.122473][T28643] ? find_held_lock+0x2b/0x80 [ 1797.122504][T28643] ? __fget_files+0x215/0x3d0 [ 1797.122525][T28643] ? hook_file_ioctl_common+0x146/0x410 [ 1797.122556][T28643] ? __fget_files+0x21f/0x3d0 [ 1797.122583][T28643] security_file_ioctl+0xd3/0x230 [ 1797.122609][T28643] __x64_sys_ioctl+0xb7/0x210 [ 1797.122646][T28643] do_syscall_64+0x106/0xf80 [ 1797.122680][T28643] ? clear_bhb_loop+0x40/0x90 [ 1797.122709][T28643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.122732][T28643] RIP: 0033:0x7fb88059bf79 [ 1797.122750][T28643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1797.122773][T28643] RSP: 002b:00007fb881453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1797.122795][T28643] RAX: ffffffffffffffda RBX: 00007fb880815fa0 RCX: 00007fb88059bf79 [ 1797.122818][T28643] RDX: 0000000000000000 RSI: 00000000000054a2 RDI: 0000000000000003 [ 1797.122832][T28643] RBP: 00007fb881453090 R08: 0000000000000000 R09: 0000000000000000 [ 1797.122847][T28643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1797.122861][T28643] R13: 00007fb880816038 R14: 00007fb880815fa0 R15: 00007ffd808a0c38 [ 1797.122895][T28643] [ 1797.124071][T28643] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1798.458819][T28659] program syz.0.4609 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1798.866580][T28668] FAULT_INJECTION: forcing a failure. [ 1798.866580][T28668] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1799.028680][T28668] CPU: 0 UID: 0 PID: 28668 Comm: syz.6.4616 Tainted: G L syzkaller #0 PREEMPT(full) [ 1799.028720][T28668] Tainted: [L]=SOFTLOCKUP [ 1799.028730][T28668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1799.028744][T28668] Call Trace: [ 1799.028753][T28668] [ 1799.028762][T28668] dump_stack_lvl+0x100/0x190 [ 1799.028801][T28668] should_fail_ex.cold+0x5/0xa [ 1799.028828][T28668] get_futex_key+0x1d2/0x1620 [ 1799.028871][T28668] ? __pfx_get_futex_key+0x10/0x10 [ 1799.028907][T28668] ? futex_hash+0x2c5/0x380 [ 1799.028953][T28668] futex_wake+0xea/0x530 [ 1799.028981][T28668] ? __pfx_futex_wait+0x10/0x10 [ 1799.029010][T28668] ? __pfx_futex_wake+0x10/0x10 [ 1799.029042][T28668] ? ksys_write+0x190/0x250 [ 1799.029066][T28668] ? ksys_write+0x190/0x250 [ 1799.029095][T28668] do_futex+0x32b/0x350 [ 1799.029119][T28668] ? __pfx_do_futex+0x10/0x10 [ 1799.029142][T28668] ? cap_task_prctl+0x104/0xa50 [ 1799.029180][T28668] ? __pfx_sched_core_share_pid+0x10/0x10 [ 1799.029221][T28668] __x64_sys_futex+0x34f/0x4d0 [ 1799.029248][T28668] ? __pfx___x64_sys_futex+0x10/0x10 [ 1799.029273][T28668] ? __pfx___do_sys_prctl+0x10/0x10 [ 1799.029311][T28668] do_syscall_64+0x106/0xf80 [ 1799.029348][T28668] ? clear_bhb_loop+0x40/0x90 [ 1799.029393][T28668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1799.029458][T28668] RIP: 0033:0x7f267999bf79 [ 1799.029478][T28668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1799.029502][T28668] RSP: 002b:00007f267a8440e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1799.029526][T28668] RAX: ffffffffffffffda RBX: 00007f2679c16098 RCX: 00007f267999bf79 [ 1799.029543][T28668] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f2679c1609c [ 1799.029558][T28668] RBP: 00007f2679c16090 R08: 0000000000000000 R09: 0000000000000000 [ 1799.029573][T28668] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1799.029589][T28668] R13: 00007f2679c16128 R14: 00007ffcf5cc1010 R15: 00007ffcf5cc10f8 [ 1799.029619][T28668] [ 1799.345867][T28674] Invalid ELF header magic: != ELF [ 1799.958859][T28683] vivid-009: ================= START STATUS ================= [ 1799.994937][T28683] vivid-009: Radio HW Seek Mode: Bounded [ 1800.001377][T28683] vivid-009: Radio Programmable HW Seek: false [ 1800.021626][T28683] vivid-009: RDS Rx I/O Mode: Block I/O [ 1800.041862][T28683] vivid-009: Generate RBDS Instead of RDS: false [ 1800.066428][T28683] vivid-009: RDS Reception: true [ 1800.086567][T28683] vivid-009: RDS Program Type: 0 inactive [ 1800.136161][T28683] vivid-009: RDS PS Name: inactive [ 1800.182192][T28683] vivid-009: RDS Radio Text: inactive [ 1800.208214][T28683] vivid-009: RDS Traffic Announcement: false inactive [ 1800.242469][T28683] vivid-009: RDS Traffic Program: false inactive [ 1800.279585][T28683] vivid-009: RDS Music: false inactive [ 1800.322906][T28683] vivid-009: ================== END STATUS ================== [ 1800.452137][T28683] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(7.0.1084227584), cmd(5) [ 1800.669813][T28689] FAULT_INJECTION: forcing a failure. [ 1800.669813][T28689] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1800.760260][T28689] CPU: 0 UID: 0 PID: 28689 Comm: syz.4.4620 Tainted: G L syzkaller #0 PREEMPT(full) [ 1800.760300][T28689] Tainted: [L]=SOFTLOCKUP [ 1800.760310][T28689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1800.760325][T28689] Call Trace: [ 1800.760333][T28689] [ 1800.760342][T28689] dump_stack_lvl+0x100/0x190 [ 1800.760381][T28689] should_fail_ex.cold+0x5/0xa [ 1800.760407][T28689] get_futex_key+0x1d2/0x1620 [ 1800.760449][T28689] ? __pfx_get_futex_key+0x10/0x10 [ 1800.760490][T28689] ? __lock_acquire+0x4a5/0x2630 [ 1800.760520][T28689] futex_wake+0xea/0x530 [ 1800.760547][T28689] ? find_held_lock+0x2b/0x80 [ 1800.760583][T28689] ? __pfx_futex_wake+0x10/0x10 [ 1800.760609][T28689] ? lock_acquire+0x17c/0x330 [ 1800.760635][T28689] ? fd_install+0x223/0x580 [ 1800.760666][T28689] do_futex+0x32b/0x350 [ 1800.760690][T28689] ? __pfx_do_futex+0x10/0x10 [ 1800.760713][T28689] ? do_fcntl+0x811/0x1670 [ 1800.760751][T28689] __x64_sys_futex+0x34f/0x4d0 [ 1800.760779][T28689] ? __pfx___x64_sys_futex+0x10/0x10 [ 1800.760802][T28689] ? xfd_validate_state+0x129/0x190 [ 1800.760830][T28689] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1800.760881][T28689] do_syscall_64+0x106/0xf80 [ 1800.760918][T28689] ? clear_bhb_loop+0x40/0x90 [ 1800.760947][T28689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.760971][T28689] RIP: 0033:0x7fb88059bf79 [ 1800.760990][T28689] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1800.761014][T28689] RSP: 002b:00007fb8814530e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1800.761037][T28689] RAX: ffffffffffffffda RBX: 00007fb880815fa8 RCX: 00007fb88059bf79 [ 1800.761053][T28689] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb880815fac [ 1800.761069][T28689] RBP: 00007fb880815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1800.761084][T28689] R10: 00000000000000a8 R11: 0000000000000246 R12: 0000000000000000 [ 1800.761100][T28689] R13: 00007fb880816038 R14: 00007ffd808a0b50 R15: 00007ffd808a0c38 [ 1800.761130][T28689] [ 1801.307462][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1801.335676][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1801.579076][T28694] vivid-009: ================= START STATUS ================= [ 1801.633722][T28694] vivid-009: Radio HW Seek Mode: Bounded [ 1801.714504][T28694] vivid-009: Radio Programmable HW Seek: false [ 1801.754056][T28694] vivid-009: RDS Rx I/O Mode: Block I/O [ 1801.817182][T28694] vivid-009: Generate RBDS Instead of RDS: false [ 1801.823641][T28694] vivid-009: RDS Reception: true [ 1801.893422][T28694] vivid-009: RDS Program Type: 0 inactive [ 1801.925034][T28694] vivid-009: RDS PS Name: inactive [ 1801.952007][T28694] vivid-009: RDS Radio Text: inactive [ 1801.980810][T28694] vivid-009: RDS Traffic Announcement: false inactive [ 1802.017172][T28694] vivid-009: RDS Traffic Program: false inactive [ 1802.052277][T28694] vivid-009: RDS Music: false inactive [ 1802.091760][T28694] vivid-009: ================== END STATUS ================== [ 1802.360769][T28701] FAULT_INJECTION: forcing a failure. [ 1802.360769][T28701] name failslab, interval 1, probability 0, space 0, times 0 [ 1802.475174][T28701] CPU: 0 UID: 0 PID: 28701 Comm: syz.0.4623 Tainted: G L syzkaller #0 PREEMPT(full) [ 1802.475213][T28701] Tainted: [L]=SOFTLOCKUP [ 1802.475222][T28701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1802.475236][T28701] Call Trace: [ 1802.475244][T28701] [ 1802.475253][T28701] dump_stack_lvl+0x100/0x190 [ 1802.475291][T28701] should_fail_ex.cold+0x5/0xa [ 1802.475316][T28701] should_failslab+0xc2/0x120 [ 1802.475345][T28701] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1802.475380][T28701] ? proc_thread_self_get_link+0x1a6/0x210 [ 1802.475419][T28701] proc_thread_self_get_link+0x1a6/0x210 [ 1802.475453][T28701] pick_link+0xac2/0x13c0 [ 1802.475486][T28701] ? link_path_walk+0xf28/0x1cc0 [ 1802.475523][T28701] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 1802.475559][T28701] step_into_slowpath+0x9ba/0xf90 [ 1802.475602][T28701] ? __pfx_step_into_slowpath+0x10/0x10 [ 1802.475645][T28701] ? lookup_fast+0x2da/0x600 [ 1802.475678][T28701] ? inode_permission+0x374/0x620 [ 1802.475714][T28701] link_path_walk+0xf28/0x1cc0 [ 1802.475762][T28701] path_openat+0x1be/0x31a0 [ 1802.475786][T28701] ? kasan_save_stack+0x3f/0x50 [ 1802.475808][T28701] ? kasan_save_stack+0x30/0x50 [ 1802.475830][T28701] ? kasan_save_track+0x14/0x30 [ 1802.475853][T28701] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1802.475883][T28701] ? __pfx_path_openat+0x10/0x10 [ 1802.475920][T28701] do_file_open+0x20e/0x430 [ 1802.475948][T28701] ? __pfx_do_file_open+0x10/0x10 [ 1802.475995][T28701] ? alloc_fd+0x476/0x790 [ 1802.476023][T28701] ? do_getname+0x191/0x390 [ 1802.476056][T28701] do_sys_openat2+0x10d/0x1e0 [ 1802.476098][T28701] ? __pfx_do_sys_openat2+0x10/0x10 [ 1802.476142][T28701] __x64_sys_openat+0x12d/0x210 [ 1802.476176][T28701] ? __pfx___x64_sys_openat+0x10/0x10 [ 1802.476209][T28701] ? xfd_validate_state+0x129/0x190 [ 1802.476247][T28701] do_syscall_64+0x106/0xf80 [ 1802.476282][T28701] ? clear_bhb_loop+0x40/0x90 [ 1802.476310][T28701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1802.476334][T28701] RIP: 0033:0x7f71c4d5c84e [ 1802.476353][T28701] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1802.476377][T28701] RSP: 002b:00007f71c5bf4f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1802.476400][T28701] RAX: ffffffffffffffda RBX: 00007f71c5bf56c0 RCX: 00007f71c4d5c84e [ 1802.476416][T28701] RDX: 0000000000000002 RSI: 00007f71c4e320e7 RDI: ffffffffffffff9c [ 1802.476431][T28701] RBP: 00007f71c4e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1802.476446][T28701] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 1802.476460][T28701] R13: 00007f71c5016038 R14: 00007f71c5015fa0 R15: 00007ffdfd8038d8 [ 1802.476491][T28701] [ 1803.105271][T28705] random: crng reseeded on system resumption [ 1803.382549][T28711] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4625'. [ 1804.637813][T28721] bonding: no command found in bonding_masters - use +ifname or -ifname [ 1805.087874][T28716] zswap: compressor not available [ 1805.097206][T28730] netlink: 'syz.6.4629': attribute type 2 has an invalid length. [ 1805.365176][T28725] input: ¶š9ã%v”ûJ,6Ö‘ as /devices/virtual/input/input29 [ 1805.710893][T28741] FAULT_INJECTION: forcing a failure. [ 1805.710893][T28741] name failslab, interval 1, probability 0, space 0, times 0 [ 1805.796919][T28741] CPU: 0 UID: 0 PID: 28741 Comm: syz.0.4633 Tainted: G L syzkaller #0 PREEMPT(full) [ 1805.796958][T28741] Tainted: [L]=SOFTLOCKUP [ 1805.796967][T28741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1805.796982][T28741] Call Trace: [ 1805.796991][T28741] [ 1805.797001][T28741] dump_stack_lvl+0x100/0x190 [ 1805.797040][T28741] should_fail_ex.cold+0x5/0xa [ 1805.797068][T28741] should_failslab+0xc2/0x120 [ 1805.797098][T28741] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1805.797122][T28741] ? __anon_vma_prepare+0xae/0x5e0 [ 1805.797167][T28741] __anon_vma_prepare+0xae/0x5e0 [ 1805.797204][T28741] ? do_raw_spin_lock+0x128/0x260 [ 1805.797236][T28741] __vmf_anon_prepare+0x11f/0x250 [ 1805.797270][T28741] do_huge_pmd_anonymous_page+0x161/0x1c00 [ 1805.797313][T28741] ? __pmd_alloc+0x6aa/0x9c0 [ 1805.797349][T28741] __handle_mm_fault+0x1e96/0x2b50 [ 1805.797391][T28741] ? mt_find+0x45e/0x8e0 [ 1805.797421][T28741] ? __pfx___handle_mm_fault+0x10/0x10 [ 1805.797459][T28741] ? __pfx_mt_find+0x10/0x10 [ 1805.797503][T28741] handle_mm_fault+0x36d/0xa20 [ 1805.797547][T28741] __get_user_pages+0xf9c/0x34d0 [ 1805.797595][T28741] ? __pfx___get_user_pages+0x10/0x10 [ 1805.797635][T28741] populate_vma_page_range+0x267/0x3f0 [ 1805.797672][T28741] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1805.797707][T28741] ? __pfx_find_vma_intersection+0x10/0x10 [ 1805.797739][T28741] ? do_mmap+0x93f/0x12f0 [ 1805.797779][T28741] __mm_populate+0x107/0x3a0 [ 1805.797815][T28741] ? __pfx___mm_populate+0x10/0x10 [ 1805.797856][T28741] ? up_write+0x290/0x4f0 [ 1805.797887][T28741] vm_mmap_pgoff+0x37f/0x470 [ 1805.797924][T28741] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1805.797963][T28741] ? __x64_sys_futex+0x34f/0x4d0 [ 1805.797986][T28741] ? __x64_sys_futex+0x358/0x4d0 [ 1805.798015][T28741] ksys_mmap_pgoff+0x7d/0x5b0 [ 1805.798050][T28741] __x64_sys_mmap+0x125/0x190 [ 1805.798084][T28741] do_syscall_64+0x106/0xf80 [ 1805.798119][T28741] ? clear_bhb_loop+0x40/0x90 [ 1805.798149][T28741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1805.798173][T28741] RIP: 0033:0x7f71c4d9bf79 [ 1805.798193][T28741] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1805.798217][T28741] RSP: 002b:00007f71c5bf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1805.798241][T28741] RAX: ffffffffffffffda RBX: 00007f71c5015fa0 RCX: 00007f71c4d9bf79 [ 1805.798257][T28741] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1805.798273][T28741] RBP: 00007f71c4e327e0 R08: ffffffffffffffff R09: 0000000000000000 [ 1805.798289][T28741] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1805.798304][T28741] R13: 00007f71c5016038 R14: 00007f71c5015fa0 R15: 00007ffdfd8038d8 [ 1805.798335][T28741] [ 1806.923320][T28751] Process accounting paused [ 1808.673783][T28781] vivid-009: ================= START STATUS ================= [ 1808.726384][T28781] vivid-009: Radio HW Seek Mode: Bounded [ 1808.732076][T28781] vivid-009: Radio Programmable HW Seek: false [ 1808.815919][T28781] vivid-009: RDS Rx I/O Mode: Block I/O [ 1808.841897][T28781] vivid-009: Generate RBDS Instead of RDS: false [ 1808.918207][T28781] vivid-009: RDS Reception: true [ 1808.953218][T28781] vivid-009: RDS Program Type: 0 inactive [ 1809.045350][T28781] vivid-009: RDS PS Name: inactive [ 1809.050635][T28781] vivid-009: RDS Radio Text: inactive [ 1809.175829][T28781] vivid-009: RDS Traffic Announcement: false inactive [ 1809.225561][T28781] vivid-009: RDS Traffic Program: false inactive [ 1809.277540][T28781] vivid-009: RDS Music: false inactive [ 1809.291091][T28781] vivid-009: ================== END STATUS ================== [ 1809.688796][T28801] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1810.779138][T28814] netlink: Setting conntrack mark requires 'commit' flag. [ 1812.269724][T28832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4665'. [ 1812.932784][T28851] netlink: 'syz.6.4668': attribute type 1 has an invalid length. [ 1813.763074][T28873] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4680'. [ 1815.217548][T28885] program syz.6.4672 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1815.356765][T28845] Process accounting paused [ 1816.231156][T28904] usbip-vudc usbip-vudc.0: gadget not bound [ 1816.353912][T28907] vivid-009: ================= START STATUS ================= [ 1816.412984][T28907] vivid-009: Radio HW Seek Mode: Bounded [ 1816.456857][T28907] vivid-009: Radio Programmable HW Seek: false [ 1816.484660][T28907] vivid-009: RDS Rx I/O Mode: Block I/O [ 1816.524973][T28907] vivid-009: Generate RBDS Instead of RDS: false [ 1816.531363][T28907] vivid-009: RDS Reception: true [ 1816.609652][T28907] vivid-009: RDS Program Type: 0 inactive [ 1816.707029][T28907] vivid-009: RDS PS Name: inactive [ 1816.756766][T28907] vivid-009: RDS Radio Text: inactive [ 1816.809467][T28907] vivid-009: RDS Traffic Announcement: false inactive [ 1816.840818][T28907] vivid-009: RDS Traffic Program: false inactive [ 1816.909052][T28907] vivid-009: RDS Music: false inactive [ 1816.969790][T28907] vivid-009: ================== END STATUS ================== [ 1817.735945][T28922] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input30 [ 1818.657975][T28935] Invalid ELF header magic: != ELF [ 1820.470154][T28959] FAULT_INJECTION: forcing a failure. [ 1820.470154][T28959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1820.566828][T28959] CPU: 0 UID: 0 PID: 28959 Comm: syz.4.4692 Tainted: G L syzkaller #0 PREEMPT(full) [ 1820.566866][T28959] Tainted: [L]=SOFTLOCKUP [ 1820.566874][T28959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1820.566888][T28959] Call Trace: [ 1820.566897][T28959] [ 1820.566906][T28959] dump_stack_lvl+0x100/0x190 [ 1820.566943][T28959] should_fail_ex.cold+0x5/0xa [ 1820.566970][T28959] _copy_to_user+0x32/0xd0 [ 1820.566997][T28959] simple_read_from_buffer+0xcb/0x170 [ 1820.567038][T28959] proc_fail_nth_read+0x1af/0x230 [ 1820.567066][T28959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1820.567094][T28959] ? rw_verify_area+0xce/0x6d0 [ 1820.567130][T28959] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1820.567156][T28959] vfs_read+0x1e4/0xb30 [ 1820.567182][T28959] ? __pfx_vfs_read+0x10/0x10 [ 1820.567204][T28959] ? __fget_files+0x215/0x3d0 [ 1820.567235][T28959] ? __fget_files+0x21f/0x3d0 [ 1820.567266][T28959] ksys_read+0x12a/0x250 [ 1820.567289][T28959] ? __pfx_ksys_read+0x10/0x10 [ 1820.567320][T28959] do_syscall_64+0x106/0xf80 [ 1820.567372][T28959] ? clear_bhb_loop+0x40/0x90 [ 1820.567410][T28959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1820.567433][T28959] RIP: 0033:0x7fb88055c84e [ 1820.567452][T28959] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1820.567476][T28959] RSP: 002b:00007fb881452fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1820.567499][T28959] RAX: ffffffffffffffda RBX: 00007fb8814536c0 RCX: 00007fb88055c84e [ 1820.567515][T28959] RDX: 000000000000000f RSI: 00007fb8814530a0 RDI: 0000000000000004 [ 1820.567530][T28959] RBP: 00007fb881453090 R08: 0000000000000000 R09: 0000000000000000 [ 1820.567545][T28959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1820.567559][T28959] R13: 00007fb880816038 R14: 00007fb880815fa0 R15: 00007ffd808a0c38 [ 1820.567590][T28959] [ 1822.487636][T28974] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=2424827650 (310377939200 ns) > initial count (223122034688 ns). Using initial count to start timer. [ 1823.806149][T28986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1823.838100][T28986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1823.861812][T28986] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1823.894666][T28986] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1823.935301][T28986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1823.974644][T28988] random: crng reseeded on system resumption [ 1824.770501][T29012] FAULT_INJECTION: forcing a failure. [ 1824.770501][T29012] name failslab, interval 1, probability 0, space 0, times 0 [ 1824.892818][T29012] CPU: 0 UID: 0 PID: 29012 Comm: syz.5.4704 Tainted: G L syzkaller #0 PREEMPT(full) [ 1824.892857][T29012] Tainted: [L]=SOFTLOCKUP [ 1824.892867][T29012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1824.892882][T29012] Call Trace: [ 1824.892890][T29012] [ 1824.892900][T29012] dump_stack_lvl+0x100/0x190 [ 1824.892940][T29012] should_fail_ex.cold+0x5/0xa [ 1824.892967][T29012] should_failslab+0xc2/0x120 [ 1824.892997][T29012] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1824.893032][T29012] ? __alloc_skb+0x140/0x710 [ 1824.893072][T29012] __alloc_skb+0x140/0x710 [ 1824.893105][T29012] ? __alloc_skb+0x5b7/0x710 [ 1824.893138][T29012] ? __pfx___alloc_skb+0x10/0x10 [ 1824.893175][T29012] ? __local_bh_enable_ip+0x9e/0x120 [ 1824.893218][T29012] kcm_sendmsg+0x2213/0x2fe0 [ 1824.893268][T29012] ? __pfx_kcm_sendmsg+0x10/0x10 [ 1824.893305][T29012] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1824.893348][T29012] __sys_sendto+0x4aa/0x520 [ 1824.893383][T29012] ? __pfx___sys_sendto+0x10/0x10 [ 1824.893425][T29012] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1824.893455][T29012] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 1824.893505][T29012] __x64_sys_sendto+0xe0/0x1c0 [ 1824.893538][T29012] ? do_syscall_64+0x95/0xf80 [ 1824.893574][T29012] ? lockdep_hardirqs_on+0x78/0x100 [ 1824.893611][T29012] do_syscall_64+0x106/0xf80 [ 1824.893646][T29012] ? clear_bhb_loop+0x40/0x90 [ 1824.893675][T29012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1824.893700][T29012] RIP: 0033:0x7fcd0095c84e [ 1824.893719][T29012] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1824.893743][T29012] RSP: 002b:00007fcd0182ee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1824.893766][T29012] RAX: ffffffffffffffda RBX: 00007fcd018306c0 RCX: 00007fcd0095c84e [ 1824.893783][T29012] RDX: 0000000000000020 RSI: 00007fcd0182f000 RDI: 0000000000000003 [ 1824.893798][T29012] RBP: 0000000000000000 R08: 00007fcd0182ef04 R09: 000000000000000c [ 1824.893813][T29012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1824.893828][T29012] R13: 00007fcd0182ef58 R14: 00007fcd0182f000 R15: 0000000000000000 [ 1824.893859][T29012] [ 1825.460886][T23808] Bluetooth: hci4: command 0x0406 tx timeout [ 1825.634517][T23808] Bluetooth: hci1: unexpected event 0x10 length: 440 > 1 [ 1825.637719][T23808] Bluetooth: hci1: hardware error 0x00 [ 1825.958968][T12655] Bluetooth: hci2: command 0x0406 tx timeout [ 1825.966492][T12655] Bluetooth: hci3: command 0x0c1a tx timeout [ 1825.972535][T12655] Bluetooth: hci5: command 0x0c1a tx timeout [ 1826.343581][T29013] Process accounting resumed [ 1826.649503][T29040] FAULT_INJECTION: forcing a failure. [ 1826.649503][T29040] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.649542][T29040] CPU: 0 UID: 0 PID: 29040 Comm: syz.4.4708 Tainted: G L syzkaller #0 PREEMPT(full) [ 1826.649576][T29040] Tainted: [L]=SOFTLOCKUP [ 1826.649584][T29040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1826.649599][T29040] Call Trace: [ 1826.649606][T29040] [ 1826.649615][T29040] dump_stack_lvl+0x100/0x190 [ 1826.649652][T29040] should_fail_ex.cold+0x5/0xa [ 1826.649678][T29040] should_failslab+0xc2/0x120 [ 1826.649706][T29040] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1826.649730][T29040] ? alloc_inode+0x183/0x250 [ 1826.649769][T29040] alloc_inode+0x183/0x250 [ 1826.649810][T29040] new_inode+0x22/0x1c0 [ 1826.649844][T29040] simple_fill_super+0x2d9/0x680 [ 1826.649873][T29040] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1826.649911][T29040] nfsd_fill_super+0x98/0x560 [ 1826.649945][T29040] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1826.649982][T29040] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1826.650017][T29040] get_tree_keyed+0x10e/0x1d0 [ 1826.650041][T29040] vfs_get_tree+0x92/0x320 [ 1826.650075][T29040] path_mount+0x7d0/0x23d0 [ 1826.650108][T29040] ? __pfx_path_mount+0x10/0x10 [ 1826.650135][T29040] ? lockdep_hardirqs_on+0x78/0x100 [ 1826.650173][T29040] ? putname+0xb1/0x110 [ 1826.650198][T29040] ? kmem_cache_free+0x124/0x670 [ 1826.650250][T29040] ? __x64_sys_mount+0x293/0x310 [ 1826.650287][T29040] __x64_sys_mount+0x293/0x310 [ 1826.650317][T29040] ? __pfx___x64_sys_mount+0x10/0x10 [ 1826.650355][T29040] do_syscall_64+0x106/0xf80 [ 1826.650389][T29040] ? clear_bhb_loop+0x40/0x90 [ 1826.650418][T29040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.650441][T29040] RIP: 0033:0x7fb88059bf79 [ 1826.650460][T29040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1826.650484][T29040] RSP: 002b:00007fb881432028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1826.650512][T29040] RAX: ffffffffffffffda RBX: 00007fb880816090 RCX: 00007fb88059bf79 [ 1826.650528][T29040] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 1826.650543][T29040] RBP: 00007fb881432090 R08: 0000000000000000 R09: 0000000000000000 [ 1826.650557][T29040] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000002 [ 1826.650572][T29040] R13: 00007fb880816128 R14: 00007fb880816090 R15: 00007ffd808a0c38 [ 1826.650608][T29040] [ 1827.728700][T23808] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1828.148064][T29045] binder: 29043:29045 ioctl c018620c 0 returned -1 [ 1829.758903][T29064] random: crng reseeded on system resumption [ 1829.826818][T29069] vivid-009: ================= START STATUS ================= [ 1829.957952][T29069] vivid-009: Radio HW Seek Mode: Bounded [ 1830.046627][T29069] vivid-009: Radio Programmable HW Seek: false [ 1830.143278][T29069] vivid-009: RDS Rx I/O Mode: Block I/O [ 1830.225542][T29069] vivid-009: Generate RBDS Instead of RDS: false [ 1830.301610][T29069] vivid-009: RDS Reception: true [ 1830.370825][T29069] vivid-009: RDS Program Type: 0 inactive [ 1830.491929][T29069] vivid-009: RDS PS Name: inactive [ 1830.586738][T29069] vivid-009: RDS Radio Text: inactive [ 1830.655805][T29069] vivid-009: RDS Traffic Announcement: false inactive [ 1830.771950][T29069] vivid-009: RDS Traffic Program: false inactive [ 1830.826317][T29069] vivid-009: RDS Music: false inactive [ 1830.831858][T29069] vivid-009: ================== END STATUS ================== [ 1832.244773][T29095] Invalid ELF header magic: != ELF [ 1832.499749][T29088] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4719'. [ 1832.883549][T29105] FAULT_INJECTION: forcing a failure. [ 1832.883549][T29105] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1833.064368][T29105] CPU: 0 UID: 0 PID: 29105 Comm: syz.4.4722 Tainted: G L syzkaller #0 PREEMPT(full) [ 1833.064406][T29105] Tainted: [L]=SOFTLOCKUP [ 1833.064415][T29105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1833.064430][T29105] Call Trace: [ 1833.064438][T29105] [ 1833.064448][T29105] dump_stack_lvl+0x100/0x190 [ 1833.064485][T29105] should_fail_ex.cold+0x5/0xa [ 1833.064511][T29105] _copy_from_user+0x2e/0xd0 [ 1833.064538][T29105] kstrtouint_from_user+0xd6/0x1d0 [ 1833.064571][T29105] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1833.064603][T29105] ? __lock_acquire+0x4a5/0x2630 [ 1833.064630][T29105] ? lock_acquire+0x17c/0x330 [ 1833.064660][T29105] proc_fail_nth_write+0x83/0x220 [ 1833.064687][T29105] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1833.064722][T29105] vfs_write+0x2aa/0x1070 [ 1833.064747][T29105] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1833.064776][T29105] ? __pfx_vfs_write+0x10/0x10 [ 1833.064802][T29105] ? __fget_files+0x215/0x3d0 [ 1833.064833][T29105] ? __fget_files+0x21f/0x3d0 [ 1833.064864][T29105] ksys_write+0x12a/0x250 [ 1833.064888][T29105] ? __pfx_ksys_write+0x10/0x10 [ 1833.064919][T29105] do_syscall_64+0x106/0xf80 [ 1833.064953][T29105] ? clear_bhb_loop+0x40/0x90 [ 1833.064982][T29105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1833.065006][T29105] RIP: 0033:0x7fb88055c84e [ 1833.065025][T29105] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1833.065048][T29105] RSP: 002b:00007fb881452fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1833.065071][T29105] RAX: ffffffffffffffda RBX: 00007fb8814536c0 RCX: 00007fb88055c84e [ 1833.065087][T29105] RDX: 0000000000000001 RSI: 00007fb8814530a0 RDI: 0000000000000004 [ 1833.065101][T29105] RBP: 00007fb881453090 R08: 0000000000000000 R09: 0000000000000000 [ 1833.065117][T29105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1833.065131][T29105] R13: 00007fb880816038 R14: 00007fb880815fa0 R15: 00007ffd808a0c38 [ 1833.065161][T29105] [ 1835.526339][T29128] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input31 [ 1837.271341][T29127] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input32 [ 1839.775531][T29157] vivid-009: ================= START STATUS ================= [ 1839.815739][T29157] vivid-009: Radio HW Seek Mode: Bounded [ 1839.821571][T29157] vivid-009: Radio Programmable HW Seek: false [ 1839.901858][T29157] vivid-009: RDS Rx I/O Mode: Block I/O [ 1839.941618][T29157] vivid-009: Generate RBDS Instead of RDS: false [ 1839.995185][T29157] vivid-009: RDS Reception: true [ 1840.051959][T29157] vivid-009: RDS Program Type: 0 inactive [ 1840.460781][T29157] vivid-009: RDS PS Name: inactive [ 1840.480764][T29159] zswap: compressor -Ž not available [ 1840.611413][T29157] vivid-009: RDS Radio Text: inactive [ 1840.650056][T29157] vivid-009: RDS Traffic Announcement: false inactive [ 1840.787284][T29157] vivid-009: RDS Traffic Program: false inactive [ 1840.793746][T29157] vivid-009: RDS Music: false inactive [ 1840.965242][T29157] vivid-009: ================== END STATUS ================== [ 1840.973129][T29170] vivid-009: ================= START STATUS ================= [ 1841.145828][T29170] vivid-009: Radio HW Seek Mode: Bounded [ 1841.724408][T29170] vivid-009: Radio Programmable HW Seek: false [ 1841.854140][T29165] zswap: compressor not available [ 1841.916947][T29170] vivid-009: RDS Rx I/O Mode: Block I/O [ 1842.355031][T29170] vivid-009: Generate RBDS Instead of RDS: false [ 1842.479969][T29170] vivid-009: RDS Reception: true [ 1842.612645][T29170] vivid-009: RDS Program Type: 0 inactive [ 1842.919290][T29170] vivid-009: RDS PS Name: inactive [ 1842.924625][T29170] vivid-009: RDS Radio Text: inactive [ 1843.015039][T29170] vivid-009: RDS Traffic Announcement: false inactive [ 1843.021942][T29170] vivid-009: RDS Traffic Program: false inactive [ 1843.080688][T29170] vivid-009: RDS Music: false inactive [ 1843.100299][T29170] vivid-009: ================== END STATUS ================== [ 1843.435846][T29186] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1843.820464][T29192] Invalid ELF header magic: != ELF [ 1843.841476][T29190] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4742'. [ 1843.882699][T29190] vlan1: entered promiscuous mode [ 1843.926120][T29190] vlan1: entered allmulticast mode [ 1843.983988][T29190] veth0_vlan: entered allmulticast mode [ 1847.552121][T29238] vivid-009: ================= START STATUS ================= [ 1847.552143][T29238] vivid-009: Radio HW Seek Mode: Bounded [ 1847.552171][T29238] vivid-009: Radio Programmable HW Seek: false [ 1847.552196][T29238] vivid-009: RDS Rx I/O Mode: Block I/O [ 1847.552221][T29238] vivid-009: Generate RBDS Instead of RDS: false [ 1847.552247][T29238] vivid-009: RDS Reception: true [ 1847.552272][T29238] vivid-009: RDS Program Type: 0 inactive [ 1847.552303][T29238] vivid-009: RDS PS Name: inactive [ 1847.552332][T29238] vivid-009: RDS Radio Text: inactive [ 1847.552360][T29238] vivid-009: RDS Traffic Announcement: false inactive [ 1847.552391][T29238] vivid-009: RDS Traffic Program: false inactive [ 1847.552420][T29238] vivid-009: RDS Music: false inactive [ 1847.552450][T29238] vivid-009: ================== END STATUS ================== [ 1847.689249][T29229] Process accounting resumed [ 1848.869907][T23808] Bluetooth: hci5: unexpected event 0x10 length: 440 > 1 [ 1848.872903][T19048] Bluetooth: hci5: hardware error 0x00 [ 1849.660883][T29279] vivid-009: ================= START STATUS ================= [ 1849.678837][T29266] Bluetooth: hci5: unexpected event 0x10 length: 440 > 1 [ 1849.705144][T29279] vivid-009: Radio HW Seek Mode: Bounded [ 1849.754042][T29279] vivid-009: Radio Programmable HW Seek: false [ 1849.836527][T29279] vivid-009: RDS Rx I/O Mode: Block I/O [ 1849.893517][T29279] vivid-009: Generate RBDS Instead of RDS: false [ 1849.923314][T29279] vivid-009: RDS Reception: true [ 1849.945722][T29279] vivid-009: RDS Program Type: 0 inactive [ 1849.963771][T29279] vivid-009: RDS PS Name: inactive [ 1849.993765][T29279] vivid-009: RDS Radio Text: inactive [ 1850.015040][T29279] vivid-009: RDS Traffic Announcement: false inactive [ 1850.043434][T29279] vivid-009: RDS Traffic Program: false inactive [ 1850.061631][T29279] vivid-009: RDS Music: false inactive [ 1850.084910][T29279] vivid-009: ================== END STATUS ================== [ 1850.930226][T19048] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1850.938074][T19048] Bluetooth: hci5: hardware error 0x00 [ 1852.051078][T29323] FAULT_INJECTION: forcing a failure. [ 1852.051078][T29323] name failslab, interval 1, probability 0, space 0, times 0 [ 1852.126874][T29323] CPU: 0 UID: 0 PID: 29323 Comm: syz.0.4772 Tainted: G L syzkaller #0 PREEMPT(full) [ 1852.126914][T29323] Tainted: [L]=SOFTLOCKUP [ 1852.126924][T29323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1852.126939][T29323] Call Trace: [ 1852.126947][T29323] [ 1852.126957][T29323] dump_stack_lvl+0x100/0x190 [ 1852.126996][T29323] should_fail_ex.cold+0x5/0xa [ 1852.127023][T29323] should_failslab+0xc2/0x120 [ 1852.127053][T29323] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1852.127090][T29323] ? pagemap_read+0x225/0x830 [ 1852.127118][T29323] ? security_capable+0xbd/0x260 [ 1852.127158][T29323] pagemap_read+0x225/0x830 [ 1852.127188][T29323] ? common_file_perm+0x1ab/0x4f0 [ 1852.127214][T29323] ? __pfx_pagemap_read+0x10/0x10 [ 1852.127248][T29323] ? rw_verify_area+0xce/0x6d0 [ 1852.127285][T29323] ? __pfx_pagemap_read+0x10/0x10 [ 1852.127315][T29323] vfs_read+0x1e4/0xb30 [ 1852.127342][T29323] ? __pfx_vfs_read+0x10/0x10 [ 1852.127364][T29323] ? __fget_files+0x215/0x3d0 [ 1852.127395][T29323] ? __fget_files+0x21f/0x3d0 [ 1852.127431][T29323] ksys_read+0x12a/0x250 [ 1852.127454][T29323] ? __pfx_ksys_read+0x10/0x10 [ 1852.127491][T29323] do_syscall_64+0x106/0xf80 [ 1852.127529][T29323] ? clear_bhb_loop+0x40/0x90 [ 1852.127559][T29323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1852.127583][T29323] RIP: 0033:0x7f71c4d9bf79 [ 1852.127603][T29323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1852.127632][T29323] RSP: 002b:00007f71c5bf5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1852.127656][T29323] RAX: ffffffffffffffda RBX: 00007f71c5015fa0 RCX: 00007f71c4d9bf79 [ 1852.127673][T29323] RDX: 00000000000039b8 RSI: 0000000000000000 RDI: 0000000000000004 [ 1852.127688][T29323] RBP: 00007f71c4e327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1852.127703][T29323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1852.127718][T29323] R13: 00007f71c5016038 R14: 00007f71c5015fa0 R15: 00007ffdfd8038d8 [ 1852.127750][T29323] [ 1852.132600][ T30] audit: type=1800 audit(4294967573.950:110): pid=29330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4772" name="lu_gp_id" dev="configfs" ino=138721 res=0 errno=0 [ 1852.737208][T29337] vivid-009: ================= START STATUS ================= [ 1852.792771][T29337] vivid-009: Radio HW Seek Mode: Bounded [ 1852.835414][T29337] vivid-009: Radio Programmable HW Seek: false [ 1852.912761][T29337] vivid-009: RDS Rx I/O Mode: Block I/O [ 1852.975601][T29337] vivid-009: Generate RBDS Instead of RDS: false [ 1853.022684][T29337] vivid-009: RDS Reception: true [ 1853.065936][T29337] vivid-009: RDS Program Type: 0 inactive [ 1853.080816][T19048] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1853.114992][T29337] vivid-009: RDS PS Name: inactive [ 1853.145158][T29337] vivid-009: RDS Radio Text: inactive [ 1853.194924][T29337] vivid-009: RDS Traffic Announcement: false inactive [ 1853.234986][T29337] vivid-009: RDS Traffic Program: false inactive [ 1853.272421][T29337] vivid-009: RDS Music: false inactive [ 1853.314962][T29337] vivid-009: ================== END STATUS ================== [ 1856.554145][T29382] binder: BINDER_SET_CONTEXT_MGR already set [ 1856.599734][T29382] binder: 29381:29382 ioctl 4018620d 9 returned -16 [ 1857.022082][T29394] vivid-009: ================= START STATUS ================= [ 1857.096675][T29394] vivid-009: Radio HW Seek Mode: Bounded [ 1857.160392][T29394] vivid-009: Radio Programmable HW Seek: false [ 1857.259026][T29394] vivid-009: RDS Rx I/O Mode: Block I/O [ 1857.304463][T29394] vivid-009: Generate RBDS Instead of RDS: false [ 1857.355003][T29394] vivid-009: RDS Reception: true [ 1857.385201][T29394] vivid-009: RDS Program Type: 0 inactive [ 1857.425104][T29394] vivid-009: RDS PS Name: inactive [ 1857.457765][T29394] vivid-009: RDS Radio Text: inactive [ 1857.497652][T29394] vivid-009: RDS Traffic Announcement: false inactive [ 1857.555763][T29394] vivid-009: RDS Traffic Program: false inactive [ 1857.594738][T29394] vivid-009: RDS Music: false inactive [ 1857.624977][T29394] vivid-009: ================== END STATUS ================== [ 1858.746946][T29415] Invalid ELF header magic: != ELF [ 1859.262306][T29429] FAULT_INJECTION: forcing a failure. [ 1859.262306][T29429] name failslab, interval 1, probability 0, space 0, times 0 [ 1859.342095][T29429] CPU: 0 UID: 0 PID: 29429 Comm: syz.4.4796 Tainted: G L syzkaller #0 PREEMPT(full) [ 1859.342135][T29429] Tainted: [L]=SOFTLOCKUP [ 1859.342144][T29429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1859.342160][T29429] Call Trace: [ 1859.342168][T29429] [ 1859.342178][T29429] dump_stack_lvl+0x100/0x190 [ 1859.342217][T29429] should_fail_ex.cold+0x5/0xa [ 1859.342245][T29429] should_failslab+0xc2/0x120 [ 1859.342275][T29429] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1859.342299][T29429] ? vm_area_alloc+0x1f/0x160 [ 1859.342336][T29429] ? vma_merge_new_range+0x38b/0xa30 [ 1859.342385][T29429] vm_area_alloc+0x1f/0x160 [ 1859.342422][T29429] __mmap_region+0x101e/0x2820 [ 1859.342467][T29429] ? __pfx___mmap_region+0x10/0x10 [ 1859.342529][T29429] ? finish_task_switch.isra.0+0x205/0xb80 [ 1859.342566][T29429] ? lockdep_hardirqs_on+0x78/0x100 [ 1859.342603][T29429] ? finish_task_switch.isra.0+0x205/0xb80 [ 1859.342691][T29429] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1859.342725][T29429] ? rcu_is_watching+0x12/0xc0 [ 1859.342769][T29429] mmap_region+0x180/0x3e0 [ 1859.342799][T29429] do_mmap+0xc63/0x12f0 [ 1859.342836][T29429] ? __pfx_do_mmap+0x10/0x10 [ 1859.342868][T29429] ? __pfx_down_write_killable+0x10/0x10 [ 1859.342899][T29429] vm_mmap_pgoff+0x29e/0x470 [ 1859.342937][T29429] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1859.342976][T29429] ? __x64_sys_futex+0x34f/0x4d0 [ 1859.342999][T29429] ? __x64_sys_futex+0x358/0x4d0 [ 1859.343026][T29429] ksys_mmap_pgoff+0x7d/0x5b0 [ 1859.343055][T29429] ? __pfx_from_kuid_munged+0x10/0x10 [ 1859.343093][T29429] __x64_sys_mmap+0x125/0x190 [ 1859.343128][T29429] do_syscall_64+0x106/0xf80 [ 1859.343164][T29429] ? clear_bhb_loop+0x40/0x90 [ 1859.343194][T29429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1859.343219][T29429] RIP: 0033:0x7fb88059bf79 [ 1859.343239][T29429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1859.343262][T29429] RSP: 002b:00007fb881453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1859.343286][T29429] RAX: ffffffffffffffda RBX: 00007fb880815fa0 RCX: 00007fb88059bf79 [ 1859.343302][T29429] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1859.343318][T29429] RBP: 00007fb8806327e0 R08: fffffffffffffffa R09: 0000000000008000 [ 1859.343334][T29429] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1859.343349][T29429] R13: 00007fb880816038 R14: 00007fb880815fa0 R15: 00007ffd808a0c38 [ 1859.343381][T29429] [ 1860.170553][T29434] FAULT_INJECTION: forcing a failure. [ 1860.170553][T29434] name failslab, interval 1, probability 0, space 0, times 0 [ 1860.222352][T29434] CPU: 0 UID: 0 PID: 29434 Comm: syz.5.4797 Tainted: G L syzkaller #0 PREEMPT(full) [ 1860.222392][T29434] Tainted: [L]=SOFTLOCKUP [ 1860.222401][T29434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1860.222416][T29434] Call Trace: [ 1860.222424][T29434] [ 1860.222434][T29434] dump_stack_lvl+0x100/0x190 [ 1860.222473][T29434] should_fail_ex.cold+0x5/0xa [ 1860.222500][T29434] should_failslab+0xc2/0x120 [ 1860.222530][T29434] __kvmalloc_node_noprof+0xfa/0xa00 [ 1860.222556][T29434] ? seq_read_iter+0x819/0x1270 [ 1860.222579][T29434] ? __pfx_try_to_wake_up+0x10/0x10 [ 1860.222619][T29434] seq_read_iter+0x819/0x1270 [ 1860.222660][T29434] kernfs_fop_read_iter+0x46c/0x610 [ 1860.222686][T29434] ? rw_verify_area+0xce/0x6d0 [ 1860.222724][T29434] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1860.222752][T29434] vfs_read+0x825/0xb30 [ 1860.222779][T29434] ? __pfx_vfs_read+0x10/0x10 [ 1860.222821][T29434] ksys_read+0x12a/0x250 [ 1860.222845][T29434] ? __pfx_ksys_read+0x10/0x10 [ 1860.222881][T29434] do_syscall_64+0x106/0xf80 [ 1860.222918][T29434] ? clear_bhb_loop+0x40/0x90 [ 1860.222947][T29434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1860.222972][T29434] RIP: 0033:0x7fcd0099bf79 [ 1860.222991][T29434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1860.223017][T29434] RSP: 002b:00007fcd01851028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1860.223040][T29434] RAX: ffffffffffffffda RBX: 00007fcd00c15fa0 RCX: 00007fcd0099bf79 [ 1860.223056][T29434] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000005 [ 1860.223071][T29434] RBP: 00007fcd00a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1860.223087][T29434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1860.223101][T29434] R13: 00007fcd00c16038 R14: 00007fcd00c15fa0 R15: 00007ffdfe2cf4e8 [ 1860.223133][T29434] [ 1862.007614][T29458] FAULT_INJECTION: forcing a failure. [ 1862.007614][T29458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1862.109672][T29458] CPU: 0 UID: 0 PID: 29458 Comm: syz.5.4803 Tainted: G L syzkaller #0 PREEMPT(full) [ 1862.109710][T29458] Tainted: [L]=SOFTLOCKUP [ 1862.109719][T29458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1862.109733][T29458] Call Trace: [ 1862.109742][T29458] [ 1862.109751][T29458] dump_stack_lvl+0x100/0x190 [ 1862.109788][T29458] should_fail_ex.cold+0x5/0xa [ 1862.109814][T29458] _copy_from_iter+0x1f4/0x1690 [ 1862.109843][T29458] ? __asan_memset+0x23/0x50 [ 1862.109881][T29458] ? __pfx__copy_from_iter+0x10/0x10 [ 1862.109906][T29458] ? __pfx___alloc_skb+0x10/0x10 [ 1862.109949][T29458] netlink_sendmsg+0x808/0xda0 [ 1862.109992][T29458] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1862.110028][T29458] ? __import_iovec+0x1d2/0x640 [ 1862.110056][T29458] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1862.110097][T29458] ____sys_sendmsg+0xa54/0xc30 [ 1862.110125][T29458] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1862.110163][T29458] ___sys_sendmsg+0x190/0x1e0 [ 1862.110192][T29458] ? __pfx____sys_sendmsg+0x10/0x10 [ 1862.110252][T29458] __sys_sendmsg+0x170/0x220 [ 1862.110288][T29458] ? __pfx___sys_sendmsg+0x10/0x10 [ 1862.110340][T29458] do_syscall_64+0x106/0xf80 [ 1862.110376][T29458] ? clear_bhb_loop+0x40/0x90 [ 1862.110404][T29458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1862.110428][T29458] RIP: 0033:0x7fcd0099bf79 [ 1862.110447][T29458] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1862.110470][T29458] RSP: 002b:00007fcd01851028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1862.110499][T29458] RAX: ffffffffffffffda RBX: 00007fcd00c15fa0 RCX: 00007fcd0099bf79 [ 1862.110515][T29458] RDX: 0000000004048090 RSI: 0000200000000d80 RDI: 0000000000000003 [ 1862.110530][T29458] RBP: 00007fcd01851090 R08: 0000000000000000 R09: 0000000000000000 [ 1862.110545][T29458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1862.110559][T29458] R13: 00007fcd00c16038 R14: 00007fcd00c15fa0 R15: 00007ffdfe2cf4e8 [ 1862.110589][T29458] [ 1863.492375][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1863.498792][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1864.053191][T29485] FAULT_INJECTION: forcing a failure. [ 1864.053191][T29485] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1864.145800][T29485] CPU: 0 UID: 0 PID: 29485 Comm: syz.0.4808 Tainted: G L syzkaller #0 PREEMPT(full) [ 1864.145839][T29485] Tainted: [L]=SOFTLOCKUP [ 1864.145847][T29485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1864.145862][T29485] Call Trace: [ 1864.145870][T29485] [ 1864.145879][T29485] dump_stack_lvl+0x100/0x190 [ 1864.145917][T29485] should_fail_ex.cold+0x5/0xa [ 1864.145943][T29485] _copy_to_user+0x32/0xd0 [ 1864.145970][T29485] simple_read_from_buffer+0xcb/0x170 [ 1864.146011][T29485] proc_fail_nth_read+0x1af/0x230 [ 1864.146039][T29485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1864.146066][T29485] ? rw_verify_area+0xce/0x6d0 [ 1864.146102][T29485] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1864.146127][T29485] vfs_read+0x1e4/0xb30 [ 1864.146153][T29485] ? __pfx_vfs_read+0x10/0x10 [ 1864.146174][T29485] ? __fget_files+0x215/0x3d0 [ 1864.146204][T29485] ? __fget_files+0x21f/0x3d0 [ 1864.146234][T29485] ksys_read+0x12a/0x250 [ 1864.146257][T29485] ? __pfx_ksys_read+0x10/0x10 [ 1864.146280][T29485] ? do_user_addr_fault+0x8d6/0x12f0 [ 1864.146319][T29485] do_syscall_64+0x106/0xf80 [ 1864.146353][T29485] ? clear_bhb_loop+0x40/0x90 [ 1864.146390][T29485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.146413][T29485] RIP: 0033:0x7f71c4d5c84e [ 1864.146432][T29485] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1864.146455][T29485] RSP: 002b:00007f71c5bf4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1864.146478][T29485] RAX: ffffffffffffffda RBX: 00007f71c5bf56c0 RCX: 00007f71c4d5c84e [ 1864.146494][T29485] RDX: 000000000000000f RSI: 00007f71c5bf50a0 RDI: 0000000000000003 [ 1864.146508][T29485] RBP: 00007f71c5bf5090 R08: 0000000000000000 R09: 0000000000000000 [ 1864.146523][T29485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1864.146537][T29485] R13: 00007f71c5016038 R14: 00007f71c5015fa0 R15: 00007ffdfd8038d8 [ 1864.146568][T29485] [ 1865.804042][T29498] vivid-009: ================= START STATUS ================= [ 1865.848341][T29498] vivid-009: Radio HW Seek Mode: Bounded [ 1865.877869][T29498] vivid-009: Radio Programmable HW Seek: false [ 1865.907135][T29498] vivid-009: RDS Rx I/O Mode: Block I/O [ 1865.943718][T29498] vivid-009: Generate RBDS Instead of RDS: false [ 1865.995719][T29498] vivid-009: RDS Reception: true [ 1866.061124][T29498] vivid-009: RDS Program Type: 0 inactive [ 1866.095831][T29498] vivid-009: RDS PS Name: inactive [ 1866.147887][T29498] vivid-009: RDS Radio Text: inactive [ 1866.175034][T29498] vivid-009: RDS Traffic Announcement: false inactive [ 1866.227726][T29498] vivid-009: RDS Traffic Program: false inactive [ 1866.253446][T29498] vivid-009: RDS Music: false inactive [ 1866.298631][T29498] vivid-009: ================== END STATUS ================== [ 1866.553206][T29507] vivid-009: ================= START STATUS ================= [ 1866.641253][T29507] vivid-009: Radio HW Seek Mode: Bounded [ 1866.825155][T29507] vivid-009: Radio Programmable HW Seek: false [ 1866.831368][T29507] vivid-009: RDS Rx I/O Mode: Block I/O [ 1866.940847][T29507] vivid-009: Generate RBDS Instead of RDS: false [ 1867.031515][T29507] vivid-009: RDS Reception: true [ 1867.089316][T29507] vivid-009: RDS Program Type: 0 inactive [ 1867.128885][T29521] FAULT_INJECTION: forcing a failure. [ 1867.128885][T29521] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1867.155078][T29507] vivid-009: RDS PS Name: inactive [ 1867.203625][T29507] vivid-009: RDS Radio Text: inactive [ 1867.214156][T29521] CPU: 0 UID: 0 PID: 29521 Comm: syz.5.4819 Tainted: G L syzkaller #0 PREEMPT(full) [ 1867.214195][T29521] Tainted: [L]=SOFTLOCKUP [ 1867.214204][T29521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1867.214219][T29521] Call Trace: [ 1867.214227][T29521] [ 1867.214236][T29521] dump_stack_lvl+0x100/0x190 [ 1867.214275][T29521] should_fail_ex.cold+0x5/0xa [ 1867.214301][T29521] get_futex_key+0x1d2/0x1620 [ 1867.214343][T29521] ? __pfx_get_futex_key+0x10/0x10 [ 1867.214381][T29521] ? __pfx_kernel_waitid_prepare+0x10/0x10 [ 1867.214420][T29521] futex_wake+0xea/0x530 [ 1867.214445][T29521] ? kernel_waitid+0xca/0x190 [ 1867.214474][T29521] ? __pfx_kernel_waitid+0x10/0x10 [ 1867.214502][T29521] ? __pfx_futex_wake+0x10/0x10 [ 1867.214534][T29521] ? fd_install+0x223/0x580 [ 1867.214565][T29521] do_futex+0x32b/0x350 [ 1867.214588][T29521] ? __pfx_do_futex+0x10/0x10 [ 1867.214609][T29521] ? __pfx___do_sys_waitid+0x10/0x10 [ 1867.214638][T29521] ? do_fcntl+0x811/0x1670 [ 1867.214676][T29521] __x64_sys_futex+0x34f/0x4d0 [ 1867.214703][T29521] ? __pfx___x64_sys_futex+0x10/0x10 [ 1867.214727][T29521] ? tomoyo_file_fcntl+0x6c/0xc0 [ 1867.214775][T29521] do_syscall_64+0x106/0xf80 [ 1867.214811][T29521] ? clear_bhb_loop+0x40/0x90 [ 1867.214840][T29521] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1867.214865][T29521] RIP: 0033:0x7fcd0099bf79 [ 1867.214885][T29521] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1867.214910][T29521] RSP: 002b:00007fcd018510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1867.214934][T29521] RAX: ffffffffffffffda RBX: 00007fcd00c15fa8 RCX: 00007fcd0099bf79 [ 1867.214950][T29521] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcd00c15fac [ 1867.214965][T29521] RBP: 00007fcd00c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1867.214980][T29521] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1867.214995][T29521] R13: 00007fcd00c16038 R14: 00007ffdfe2cf400 R15: 00007ffdfe2cf4e8 [ 1867.215026][T29521] [ 1867.690225][T29507] vivid-009: RDS Traffic Announcement: false inactive [ 1867.747957][T29507] vivid-009: RDS Traffic Program: false inactive [ 1867.754357][T29507] vivid-009: RDS Music: false inactive [ 1867.775153][T29526] binder: BINDER_SET_CONTEXT_MGR already set [ 1867.781392][T29526] binder: 29523:29526 ioctl 4018620d 9 returned -16 [ 1867.816009][T29507] vivid-009: ================== END STATUS ================== [ 1868.972218][T29545] vivid-009: ================= START STATUS ================= [ 1868.993143][T29545] vivid-009: Radio HW Seek Mode: Bounded [ 1869.040821][T29545] vivid-009: Radio Programmable HW Seek: false [ 1869.091367][T29545] vivid-009: RDS Rx I/O Mode: Block I/O [ 1869.186855][T29545] vivid-009: Generate RBDS Instead of RDS: false [ 1869.311234][T29545] vivid-009: RDS Reception: true [ 1869.363375][T29545] vivid-009: RDS Program Type: 0 inactive [ 1869.425303][T29545] vivid-009: RDS PS Name: inactive [ 1869.447587][T29554] FAULT_INJECTION: forcing a failure. [ 1869.447587][T29554] name failslab, interval 1, probability 0, space 0, times 0 [ 1869.507132][T29545] vivid-009: RDS Radio Text: inactive [ 1869.527356][T29545] vivid-009: RDS Traffic Announcement: false inactive [ 1869.537666][T29554] CPU: 0 UID: 0 PID: 29554 Comm: syz.4.4826 Tainted: G L syzkaller #0 PREEMPT(full) [ 1869.537703][T29554] Tainted: [L]=SOFTLOCKUP [ 1869.537713][T29554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1869.537728][T29554] Call Trace: [ 1869.537737][T29554] [ 1869.537746][T29554] dump_stack_lvl+0x100/0x190 [ 1869.537785][T29554] should_fail_ex.cold+0x5/0xa [ 1869.537812][T29554] ? tomoyo_encode2+0xfb/0x3c0 [ 1869.537847][T29554] should_failslab+0xc2/0x120 [ 1869.537877][T29554] __kmalloc_noprof+0xe0/0x850 [ 1869.537900][T29554] ? d_absolute_path+0x136/0x1b0 [ 1869.537941][T29554] tomoyo_encode2+0xfb/0x3c0 [ 1869.537975][T29554] tomoyo_encode+0x29/0x50 [ 1869.538004][T29554] tomoyo_realpath_from_path+0x18c/0x690 [ 1869.538042][T29554] tomoyo_path_number_perm+0x23c/0x580 [ 1869.538066][T29554] ? tomoyo_path_number_perm+0x22e/0x580 [ 1869.538093][T29554] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1869.538117][T29554] ? futex_wait+0x125/0x380 [ 1869.538173][T29554] ? find_held_lock+0x2b/0x80 [ 1869.538205][T29554] ? __fget_files+0x215/0x3d0 [ 1869.538227][T29554] ? hook_file_ioctl_common+0x146/0x410 [ 1869.538258][T29554] ? __fget_files+0x21f/0x3d0 [ 1869.538287][T29554] security_file_ioctl+0xd3/0x230 [ 1869.538313][T29554] __x64_sys_ioctl+0xb7/0x210 [ 1869.538353][T29554] do_syscall_64+0x106/0xf80 [ 1869.538389][T29554] ? clear_bhb_loop+0x40/0x90 [ 1869.538419][T29554] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1869.538443][T29554] RIP: 0033:0x7fb88059bf79 [ 1869.538462][T29554] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1869.538487][T29554] RSP: 002b:00007fb881453028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1869.538510][T29554] RAX: ffffffffffffffda RBX: 00007fb880815fa0 RCX: 00007fb88059bf79 [ 1869.538526][T29554] RDX: 0000000000000000 RSI: 0000000000004c80 RDI: 0000000000000003 [ 1869.538541][T29554] RBP: 00007fb8806327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1869.538556][T29554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1869.538571][T29554] R13: 00007fb880816038 R14: 00007fb880815fa0 R15: 00007ffd808a0c38 [ 1869.538602][T29554] [ 1869.538622][T29554] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1869.817646][T29545] vivid-009: RDS Traffic Program: false inactive [ 1869.824214][T29545] vivid-009: RDS Music: false inactive [ 1869.902318][T29545] vivid-009: ================== END STATUS ================== [ 1871.288296][T29570] netlink: 'syz.4.4831': attribute type 33 has an invalid length. [ 1872.146464][T29588] vivid-009: ================= START STATUS ================= [ 1872.185513][T29588] vivid-009: Radio HW Seek Mode: Bounded [ 1872.223020][T19048] Bluetooth: hci2: unexpected event 0x10 length: 440 > 1 [ 1872.226496][T29266] Bluetooth: hci2: hardware error 0x00 [ 1872.250568][T29588] vivid-009: Radio Programmable HW Seek: false [ 1872.312021][T29588] vivid-009: RDS Rx I/O Mode: Block I/O [ 1872.390469][T29588] vivid-009: Generate RBDS Instead of RDS: false [ 1872.429961][T29588] vivid-009: RDS Reception: true [ 1872.460037][T29588] vivid-009: RDS Program Type: 0 inactive [ 1872.484959][T29588] vivid-009: RDS PS Name: inactive [ 1872.512135][T29588] vivid-009: RDS Radio Text: inactive [ 1872.537032][T29588] vivid-009: RDS Traffic Announcement: false inactive [ 1872.569362][T29588] vivid-009: RDS Traffic Program: false inactive [ 1872.588439][T29588] vivid-009: RDS Music: false inactive [ 1872.607594][T29588] vivid-009: ================== END STATUS ================== [ 1873.047219][T29605] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1873.128054][T29606] Invalid ELF header magic: != ELF [ 1873.634631][T29614] netlink: 'syz.4.4843': attribute type 11 has an invalid length. [ 1873.687657][T29614] netlink: 'syz.4.4843': attribute type 11 has an invalid length. [ 1873.716761][T29614] netlink: 'syz.4.4843': attribute type 11 has an invalid length. [ 1874.285458][T29266] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1874.633433][T29625] Invalid ELF header magic: != ELF [ 1874.843535][T29631] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1874.958921][T29631] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1875.778472][T29651] vivid-009: ================= START STATUS ================= [ 1875.903004][T29651] vivid-009: Radio HW Seek Mode: Bounded [ 1876.057048][T29651] vivid-009: Radio Programmable HW Seek: false [ 1876.199595][T29651] vivid-009: RDS Rx I/O Mode: Block I/O [ 1876.330399][T29651] vivid-009: Generate RBDS Instead of RDS: false [ 1876.363598][T29657] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input34 [ 1876.441049][T29651] vivid-009: RDS Reception: true [ 1876.536108][T29651] vivid-009: RDS Program Type: 0 inactive [ 1876.602850][T29651] vivid-009: RDS PS Name: inactive [ 1876.667793][T29651] vivid-009: RDS Radio Text: inactive [ 1876.751076][T29651] vivid-009: RDS Traffic Announcement: false inactive [ 1876.765143][T29266] Bluetooth: hci4: command 0x0406 tx timeout [ 1876.893063][T29651] vivid-009: RDS Traffic Program: false inactive [ 1876.954884][T29651] vivid-009: RDS Music: false inactive [ 1877.005745][T29266] Bluetooth: hci3: command 0x0c1a tx timeout [ 1877.034248][T29651] vivid-009: ================== END STATUS ================== [ 1877.837842][T29666] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4854'. [ 1878.752940][T29681] zswap: compressor not available [ 1878.890276][T29668] Process accounting paused [ 1880.577627][T29708] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4865'. [ 1881.171757][T29717] Invalid ELF header magic: != ELF [ 1882.280842][T29727] FAULT_INJECTION: forcing a failure. [ 1882.280842][T29727] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1882.357538][T29727] CPU: 0 UID: 0 PID: 29727 Comm: syz.5.4869 Tainted: G L syzkaller #0 PREEMPT(full) [ 1882.357578][T29727] Tainted: [L]=SOFTLOCKUP [ 1882.357587][T29727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1882.357608][T29727] Call Trace: [ 1882.357617][T29727] [ 1882.357627][T29727] dump_stack_lvl+0x100/0x190 [ 1882.357665][T29727] should_fail_ex.cold+0x5/0xa [ 1882.357693][T29727] get_futex_key+0x1d2/0x1620 [ 1882.357735][T29727] ? __pfx_get_futex_key+0x10/0x10 [ 1882.357776][T29727] ? kasan_quarantine_put+0x104/0x240 [ 1882.357802][T29727] ? lockdep_hardirqs_on+0x78/0x100 [ 1882.357843][T29727] futex_wake+0xea/0x530 [ 1882.357872][T29727] ? find_held_lock+0x2b/0x80 [ 1882.357910][T29727] ? __pfx_futex_wake+0x10/0x10 [ 1882.357942][T29727] ? ksys_write+0x190/0x250 [ 1882.357965][T29727] ? ksys_write+0x190/0x250 [ 1882.357994][T29727] do_futex+0x32b/0x350 [ 1882.358018][T29727] ? __pfx_do_futex+0x10/0x10 [ 1882.358050][T29727] __x64_sys_futex+0x34f/0x4d0 [ 1882.358076][T29727] ? fput+0x79/0x100 [ 1882.358104][T29727] ? __pfx___x64_sys_futex+0x10/0x10 [ 1882.358128][T29727] ? ksys_write+0x1ac/0x250 [ 1882.358151][T29727] ? __pfx_ksys_write+0x10/0x10 [ 1882.358184][T29727] do_syscall_64+0x106/0xf80 [ 1882.358219][T29727] ? clear_bhb_loop+0x40/0x90 [ 1882.358249][T29727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1882.358273][T29727] RIP: 0033:0x7fcd0099bf79 [ 1882.358292][T29727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1882.358316][T29727] RSP: 002b:00007fcd018510e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1882.358339][T29727] RAX: ffffffffffffffda RBX: 00007fcd00c15fa8 RCX: 00007fcd0099bf79 [ 1882.358356][T29727] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcd00c15fac [ 1882.358371][T29727] RBP: 00007fcd00c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1882.358387][T29727] R10: 0000000000001000 R11: 0000000000000246 R12: 0000000000000000 [ 1882.358402][T29727] R13: 00007fcd00c16038 R14: 00007ffdfe2cf400 R15: 00007ffdfe2cf4e8 [ 1882.358432][T29727] [ 1882.576927][T29727] futex_wake_op: syz.5.4869 tries to shift op by -2048; fix this program [ 1883.578919][T29747] random: crng reseeded on system resumption [ 1883.797912][T29266] Bluetooth: hci3: unexpected event 0x10 length: 440 > 1 [ 1883.800601][T29266] Bluetooth: hci3: hardware error 0x00 [ 1884.619553][T29755] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4875'. [ 1885.885597][T29266] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1886.091602][T29777] vivid-009: ================= START STATUS ================= [ 1886.202406][T29777] vivid-009: Radio HW Seek Mode: Bounded [ 1886.309904][T29777] vivid-009: Radio Programmable HW Seek: false [ 1886.445206][T29777] vivid-009: RDS Rx I/O Mode: Block I/O [ 1886.582379][T29777] vivid-009: Generate RBDS Instead of RDS: false [ 1886.682308][T29777] vivid-009: RDS Reception: true [ 1886.793474][T29777] vivid-009: RDS Program Type: 0 inactive [ 1886.962072][T29777] vivid-009: RDS PS Name: inactive [ 1887.002709][T29777] vivid-009: RDS Radio Text: inactive [ 1887.121924][T29777] vivid-009: RDS Traffic Announcement: false inactive [ 1887.262792][T29777] vivid-009: RDS Traffic Program: false inactive [ 1887.335093][T29777] vivid-009: RDS Music: false inactive [ 1887.340648][T29777] vivid-009: ================== END STATUS ================== [ 1888.296094][T29818] nbd: must specify a device to reconfigure [ 1888.303692][T29814] FAULT_INJECTION: forcing a failure. [ 1888.303692][T29814] name failslab, interval 1, probability 0, space 0, times 0 [ 1888.419780][T29814] CPU: 0 UID: 0 PID: 29814 Comm: syz.4.4883 Tainted: G L syzkaller #0 PREEMPT(full) [ 1888.419820][T29814] Tainted: [L]=SOFTLOCKUP [ 1888.419829][T29814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1888.419845][T29814] Call Trace: [ 1888.419853][T29814] [ 1888.419862][T29814] dump_stack_lvl+0x100/0x190 [ 1888.419901][T29814] should_fail_ex.cold+0x5/0xa [ 1888.419928][T29814] should_failslab+0xc2/0x120 [ 1888.419957][T29814] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1888.419981][T29814] ? security_inode_alloc+0x3b/0x2c0 [ 1888.420021][T29814] ? lockdep_init_map_type+0x5c/0x250 [ 1888.420051][T29814] security_inode_alloc+0x3b/0x2c0 [ 1888.420092][T29814] inode_init_always_gfp+0xced/0x1040 [ 1888.420121][T29814] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1888.420159][T29814] alloc_inode+0x8e/0x250 [ 1888.420194][T29814] new_inode+0x22/0x1c0 [ 1888.420228][T29814] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1888.420266][T29814] nfsd_fill_super+0x145/0x560 [ 1888.420311][T29814] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1888.420348][T29814] get_tree_keyed+0x10e/0x1d0 [ 1888.420373][T29814] vfs_get_tree+0x92/0x320 [ 1888.420410][T29814] path_mount+0x7d0/0x23d0 [ 1888.420445][T29814] ? __pfx_path_mount+0x10/0x10 [ 1888.420474][T29814] ? lockdep_hardirqs_on+0x78/0x100 [ 1888.420514][T29814] ? putname+0xb1/0x110 [ 1888.420540][T29814] ? kmem_cache_free+0x124/0x670 [ 1888.420588][T29814] ? __x64_sys_mount+0x293/0x310 [ 1888.420617][T29814] __x64_sys_mount+0x293/0x310 [ 1888.420649][T29814] ? __pfx___x64_sys_mount+0x10/0x10 [ 1888.420692][T29814] do_syscall_64+0x106/0xf80 [ 1888.420728][T29814] ? clear_bhb_loop+0x40/0x90 [ 1888.420758][T29814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1888.420783][T29814] RIP: 0033:0x7fb88059bf79 [ 1888.420803][T29814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1888.420828][T29814] RSP: 002b:00007fb881432028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1888.420852][T29814] RAX: ffffffffffffffda RBX: 00007fb880816090 RCX: 00007fb88059bf79 [ 1888.420869][T29814] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 1888.420885][T29814] RBP: 00007fb8806327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1888.420900][T29814] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000000 [ 1888.420915][T29814] R13: 00007fb880816128 R14: 00007fb880816090 R15: 00007ffd808a0c38 [ 1888.420946][T29814] [ 1890.562658][T29839] FAULT_INJECTION: forcing a failure. [ 1890.562658][T29839] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.645557][T29839] CPU: 0 UID: 0 PID: 29839 Comm: syz.5.4890 Tainted: G L syzkaller #0 PREEMPT(full) [ 1890.645596][T29839] Tainted: [L]=SOFTLOCKUP [ 1890.645604][T29839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1890.645619][T29839] Call Trace: [ 1890.645627][T29839] [ 1890.645636][T29839] dump_stack_lvl+0x100/0x190 [ 1890.645681][T29839] should_fail_ex.cold+0x5/0xa [ 1890.645706][T29839] should_failslab+0xc2/0x120 [ 1890.645735][T29839] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1890.645759][T29839] ? __d_alloc+0x34/0xa80 [ 1890.645786][T29839] ? __pfx_inode_set_ctime_to_ts+0x10/0x10 [ 1890.645818][T29839] __d_alloc+0x34/0xa80 [ 1890.645847][T29839] d_alloc+0x4a/0x1e0 [ 1890.645876][T29839] d_alloc_name+0x83/0xb0 [ 1890.645910][T29839] ? __pfx_d_alloc_name+0x10/0x10 [ 1890.645944][T29839] ? dput.part.0+0xdd/0x570 [ 1890.645978][T29839] simple_fill_super+0x4c3/0x680 [ 1890.646007][T29839] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1890.646044][T29839] nfsd_fill_super+0x98/0x560 [ 1890.646079][T29839] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1890.646116][T29839] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1890.646152][T29839] get_tree_keyed+0x10e/0x1d0 [ 1890.646175][T29839] vfs_get_tree+0x92/0x320 [ 1890.646209][T29839] path_mount+0x7d0/0x23d0 [ 1890.646244][T29839] ? __pfx_path_mount+0x10/0x10 [ 1890.646271][T29839] ? lockdep_hardirqs_on+0x78/0x100 [ 1890.646309][T29839] ? putname+0xb1/0x110 [ 1890.646334][T29839] ? kmem_cache_free+0x124/0x670 [ 1890.646380][T29839] ? __x64_sys_mount+0x293/0x310 [ 1890.646407][T29839] __x64_sys_mount+0x293/0x310 [ 1890.646437][T29839] ? __pfx___x64_sys_mount+0x10/0x10 [ 1890.646475][T29839] do_syscall_64+0x106/0xf80 [ 1890.646508][T29839] ? clear_bhb_loop+0x40/0x90 [ 1890.646537][T29839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1890.646561][T29839] RIP: 0033:0x7fcd0099bf79 [ 1890.646579][T29839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1890.646603][T29839] RSP: 002b:00007fcd01851028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1890.646625][T29839] RAX: ffffffffffffffda RBX: 00007fcd00c15fa0 RCX: 00007fcd0099bf79 [ 1890.646641][T29839] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 1890.646656][T29839] RBP: 00007fcd01851090 R08: 0000000000000000 R09: 0000000000000000 [ 1890.646670][T29839] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000002 [ 1890.646685][T29839] R13: 00007fcd00c16038 R14: 00007fcd00c15fa0 R15: 00007ffdfe2cf4e8 [ 1890.646716][T29839] [ 1891.505890][T29852] vivid-009: ================= START STATUS ================= [ 1891.535026][T29852] vivid-009: Radio HW Seek Mode: Bounded [ 1891.554904][T29852] vivid-009: Radio Programmable HW Seek: false [ 1891.581670][T29852] vivid-009: RDS Rx I/O Mode: Block I/O [ 1891.604935][T29852] vivid-009: Generate RBDS Instead of RDS: false [ 1891.611483][T29852] vivid-009: RDS Reception: true [ 1891.666943][T29852] vivid-009: RDS Program Type: 0 inactive [ 1891.734890][T29852] vivid-009: RDS PS Name: inactive [ 1891.740302][T29852] vivid-009: RDS Radio Text: inactive [ 1891.805340][T29852] vivid-009: RDS Traffic Announcement: false inactive [ 1891.812203][T29852] vivid-009: RDS Traffic Program: false inactive [ 1891.903481][T29852] vivid-009: RDS Music: false inactive [ 1891.936501][T29852] vivid-009: ================== END STATUS ================== [ 1893.480490][T29880] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input35 [ 1894.332318][T29886] warning: `syz.5.4900' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1895.790354][T29910] FAULT_INJECTION: forcing a failure. [ 1895.790354][T29910] name failslab, interval 1, probability 0, space 0, times 0 [ 1895.816478][T29912] vivid-009: ================= START STATUS ================= [ 1895.883981][T29912] vivid-009: Radio HW Seek Mode: Bounded [ 1895.914712][T29910] CPU: 0 UID: 0 PID: 29910 Comm: syz.5.4905 Tainted: G L syzkaller #0 PREEMPT(full) [ 1895.914751][T29910] Tainted: [L]=SOFTLOCKUP [ 1895.914764][T29910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1895.914779][T29910] Call Trace: [ 1895.914787][T29910] [ 1895.914798][T29910] dump_stack_lvl+0x100/0x190 [ 1895.914837][T29910] should_fail_ex.cold+0x5/0xa [ 1895.914864][T29910] should_failslab+0xc2/0x120 [ 1895.914894][T29910] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1895.914919][T29910] ? __d_alloc+0x34/0xa80 [ 1895.914948][T29910] ? security_inode_alloc+0xcf/0x2c0 [ 1895.914992][T29910] __d_alloc+0x34/0xa80 [ 1895.915019][T29910] ? __ns_ref_active_get+0x9f/0x1b0 [ 1895.915046][T29910] path_from_stashed+0x427/0x750 [ 1895.915073][T29910] ? do_raw_spin_unlock+0x145/0x1e0 [ 1895.915109][T29910] ns_get_path+0x60/0x80 [ 1895.915135][T29910] proc_ns_get_link+0x121/0x230 [ 1895.915167][T29910] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1895.915202][T29910] ? atime_needs_update+0x8b/0x6b0 [ 1895.915241][T29910] pick_link+0xd17/0x13c0 [ 1895.915278][T29910] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1895.915313][T29910] step_into_slowpath+0x9ba/0xf90 [ 1895.915365][T29910] ? __pfx_step_into_slowpath+0x10/0x10 [ 1895.915403][T29910] ? find_held_lock+0x2b/0x80 [ 1895.915447][T29910] path_openat+0xf95/0x31a0 [ 1895.915483][T29910] ? __pfx_path_openat+0x10/0x10 [ 1895.915520][T29910] do_file_open+0x20e/0x430 [ 1895.915550][T29910] ? __pfx_do_file_open+0x10/0x10 [ 1895.915597][T29910] ? alloc_fd+0x476/0x790 [ 1895.915625][T29910] ? do_getname+0x191/0x390 [ 1895.915660][T29910] do_sys_openat2+0x10d/0x1e0 [ 1895.915695][T29910] ? __pfx_do_sys_openat2+0x10/0x10 [ 1895.915732][T29910] ? __fget_files+0x21f/0x3d0 [ 1895.915762][T29910] __x64_sys_openat+0x12d/0x210 [ 1895.915798][T29910] ? __pfx___x64_sys_openat+0x10/0x10 [ 1895.915831][T29910] ? xfd_validate_state+0x129/0x190 [ 1895.915871][T29910] do_syscall_64+0x106/0xf80 [ 1895.915907][T29910] ? clear_bhb_loop+0x40/0x90 [ 1895.915936][T29910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1895.915961][T29910] RIP: 0033:0x7fcd0095c84e [ 1895.915981][T29910] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1895.916005][T29910] RSP: 002b:00007fcd01850ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1895.916029][T29910] RAX: ffffffffffffffda RBX: 00007fcd018516c0 RCX: 00007fcd0095c84e [ 1895.916046][T29910] RDX: 0000000000000002 RSI: 00007fcd01850f90 RDI: ffffffffffffff9c [ 1895.916063][T29910] RBP: 00007fcd00a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1895.916079][T29910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1895.916094][T29910] R13: 00007fcd00c16038 R14: 00007fcd00c15fa0 R15: 00007ffdfe2cf4e8 [ 1895.916125][T29910] [ 1896.500992][T29912] vivid-009: Radio Programmable HW Seek: false [ 1896.537049][T29912] vivid-009: RDS Rx I/O Mode: Block I/O [ 1896.542790][T29912] vivid-009: Generate RBDS Instead of RDS: false [ 1896.585480][T29912] vivid-009: RDS Reception: true [ 1896.615222][T29912] vivid-009: RDS Program Type: 0 inactive [ 1896.654908][T29912] vivid-009: RDS PS Name: inactive [ 1896.669429][T29912] vivid-009: RDS Radio Text: inactive [ 1896.695885][T29912] vivid-009: RDS Traffic Announcement: false inactive [ 1896.735158][T29912] vivid-009: RDS Traffic Program: false inactive [ 1896.761503][T29912] vivid-009: RDS Music: false inactive [ 1896.782117][T29912] vivid-009: ================== END STATUS ================== [ 1897.347137][T29925] udc dummy_udc.0: soft-connect without a gadget driver [ 1898.000631][T29933] FAULT_INJECTION: forcing a failure. [ 1898.000631][T29933] name failslab, interval 1, probability 0, space 0, times 0 [ 1898.077197][T29933] CPU: 0 UID: 0 PID: 29933 Comm: syz.6.4911 Tainted: G L syzkaller #0 PREEMPT(full) [ 1898.077237][T29933] Tainted: [L]=SOFTLOCKUP [ 1898.077246][T29933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1898.077261][T29933] Call Trace: [ 1898.077270][T29933] [ 1898.077280][T29933] dump_stack_lvl+0x100/0x190 [ 1898.077324][T29933] should_fail_ex.cold+0x5/0xa [ 1898.077350][T29933] ? acpi_ns_get_normalized_pathname+0x95/0x250 [ 1898.077383][T29933] should_failslab+0xc2/0x120 [ 1898.077413][T29933] __kmalloc_noprof+0xe0/0x850 [ 1898.077448][T29933] acpi_ns_get_normalized_pathname+0x95/0x250 [ 1898.077485][T29933] acpi_ds_call_control_method+0x5d4/0xab0 [ 1898.077527][T29933] acpi_ps_parse_aml+0xacd/0x1120 [ 1898.077559][T29933] acpi_ps_execute_method+0x5c4/0xe90 [ 1898.077594][T29933] acpi_ns_evaluate+0x640/0x1670 [ 1898.077631][T29933] acpi_evaluate_object+0x420/0xe00 [ 1898.077668][T29933] ? kasan_save_stack+0x30/0x50 [ 1898.077691][T29933] ? kasan_save_track+0x14/0x30 [ 1898.077721][T29933] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1898.077762][T29933] ? __pfx___might_resched+0x10/0x10 [ 1898.077796][T29933] acpi_evaluate_integer+0xdf/0x220 [ 1898.077830][T29933] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1898.077876][T29933] ? __pfx_status_show+0x10/0x10 [ 1898.077913][T29933] status_show+0xa0/0x120 [ 1898.077950][T29933] ? __pfx_status_show+0x10/0x10 [ 1898.077996][T29933] dev_attr_show+0x52/0xa0 [ 1898.078019][T29933] ? __pfx_dev_attr_show+0x10/0x10 [ 1898.078041][T29933] sysfs_kf_seq_show+0x217/0x3a0 [ 1898.078080][T29933] seq_read_iter+0x32f/0x1270 [ 1898.078116][T29933] kernfs_fop_read_iter+0x46c/0x610 [ 1898.078141][T29933] ? rw_verify_area+0xce/0x6d0 [ 1898.078184][T29933] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 1898.078211][T29933] vfs_read+0x825/0xb30 [ 1898.078238][T29933] ? __pfx_vfs_read+0x10/0x10 [ 1898.078280][T29933] ksys_read+0x12a/0x250 [ 1898.078303][T29933] ? __pfx_ksys_read+0x10/0x10 [ 1898.078336][T29933] do_syscall_64+0x106/0xf80 [ 1898.078372][T29933] ? clear_bhb_loop+0x40/0x90 [ 1898.078402][T29933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1898.078426][T29933] RIP: 0033:0x7f267999bf79 [ 1898.078446][T29933] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1898.078471][T29933] RSP: 002b:00007f267a865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1898.078495][T29933] RAX: ffffffffffffffda RBX: 00007f2679c15fa0 RCX: 00007f267999bf79 [ 1898.078512][T29933] RDX: 000000000000007a RSI: 0000200000000240 RDI: 0000000000000006 [ 1898.078529][T29933] RBP: 00007f2679a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1898.078544][T29933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1898.078560][T29933] R13: 00007f2679c16038 R14: 00007f2679c15fa0 R15: 00007ffcf5cc10f8 [ 1898.078592][T29933] [ 1898.609879][T29933] ACPI Error: Could not allocate 10 bytes (20251212/nsnames-308) [ 1899.691074][T29953] vhci_hcd vhci_hcd.0: default hub control req: 0000 v0000 i0000 l0 [ 1899.780045][T29953] sg_write: data in/out 732/1048664 bytes for SCSI command 0x0-- guessing data in; [ 1899.780045][T29953] program syz.0.4914 not setting count and/or reply_len properly [ 1900.340962][T29962] random: crng reseeded on system resumption [ 1900.458508][T29964] netlink: 330 bytes leftover after parsing attributes in process `syz.6.4917'. [ 1901.398466][T29977] netlink: 334 bytes leftover after parsing attributes in process `syz.6.4920'. [ 1902.776375][T29982] bond0: invalid ARP target specified [ 1904.070215][T30012] Invalid ELF header magic: != ELF [ 1904.469696][T30020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4933'. [ 1904.703653][T30025] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4934'. [ 1906.018336][T30038] zswap: compressor not available [ 1908.045159][T29266] Bluetooth: hci4: command 0x0406 tx timeout [ 1908.064901][T30047] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1908.438056][T30065] Invalid ELF header magic: != ELF [ 1909.992343][T30092] FAULT_INJECTION: forcing a failure. [ 1909.992343][T30092] name failslab, interval 1, probability 0, space 0, times 0 [ 1910.174551][T30092] CPU: 0 UID: 0 PID: 30092 Comm: syz.6.4951 Tainted: G L syzkaller #0 PREEMPT(full) [ 1910.174592][T30092] Tainted: [L]=SOFTLOCKUP [ 1910.174602][T30092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1910.174617][T30092] Call Trace: [ 1910.174625][T30092] [ 1910.174635][T30092] dump_stack_lvl+0x100/0x190 [ 1910.174674][T30092] should_fail_ex.cold+0x5/0xa [ 1910.174702][T30092] should_failslab+0xc2/0x120 [ 1910.174731][T30092] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1910.174759][T30092] ? security_inode_alloc+0x3b/0x2c0 [ 1910.174800][T30092] ? lockdep_init_map_type+0x5c/0x250 [ 1910.174831][T30092] security_inode_alloc+0x3b/0x2c0 [ 1910.174873][T30092] inode_init_always_gfp+0xced/0x1040 [ 1910.174904][T30092] alloc_inode+0x8e/0x250 [ 1910.174939][T30092] new_inode+0x22/0x1c0 [ 1910.174976][T30092] __debugfs_create_file+0x105/0x4f0 [ 1910.175020][T30092] debugfs_create_file_full+0x41/0x60 [ 1910.175055][T30092] kvm_dev_ioctl+0x14bb/0x1a80 [ 1910.175091][T30092] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1910.175126][T30092] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1910.175153][T30092] __x64_sys_ioctl+0x18e/0x210 [ 1910.175193][T30092] do_syscall_64+0x106/0xf80 [ 1910.175229][T30092] ? clear_bhb_loop+0x40/0x90 [ 1910.175259][T30092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1910.175283][T30092] RIP: 0033:0x7f267999bf79 [ 1910.175303][T30092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1910.175327][T30092] RSP: 002b:00007f267a865028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1910.175351][T30092] RAX: ffffffffffffffda RBX: 00007f2679c15fa0 RCX: 00007f267999bf79 [ 1910.175368][T30092] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1910.175383][T30092] RBP: 00007f2679a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1910.175399][T30092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1910.175413][T30092] R13: 00007f2679c16038 R14: 00007f2679c15fa0 R15: 00007ffcf5cc10f8 [ 1910.175444][T30092] [ 1910.877647][T30097] vivid-009: ================= START STATUS ================= [ 1910.905156][T30097] vivid-009: Radio HW Seek Mode: Bounded [ 1910.941271][T30097] vivid-009: Radio Programmable HW Seek: false [ 1910.958642][T30097] vivid-009: RDS Rx I/O Mode: Block I/O [ 1910.964245][T30097] vivid-009: Generate RBDS Instead of RDS: false [ 1911.056658][T30097] vivid-009: RDS Reception: true [ 1911.061656][T30097] vivid-009: RDS Program Type: 0 inactive [ 1911.134347][T30097] vivid-009: RDS PS Name: inactive [ 1911.181665][T30097] vivid-009: RDS Radio Text: inactive [ 1911.268872][T30097] vivid-009: RDS Traffic Announcement: false inactive [ 1911.293920][T30097] vivid-009: RDS Traffic Program: false inactive [ 1911.411533][T30097] vivid-009: RDS Music: false inactive [ 1911.489479][T30097] vivid-009: ================== END STATUS ================== [ 1911.543181][T30077] Process accounting resumed [ 1912.046557][T30104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4954'. [ 1912.561180][T30111] Invalid ELF header magic: != ELF [ 1912.774985][T30092] debugfs: out of free dentries, can not create file 'mmu_cache_miss' [ 1913.328376][T30126] vivid-009: ================= START STATUS ================= [ 1913.344425][T30127] random: crng reseeded on system resumption [ 1913.364208][T30126] vivid-009: Radio HW Seek Mode: Bounded [ 1913.406909][T30126] vivid-009: Radio Programmable HW Seek: false [ 1913.455982][T30126] vivid-009: RDS Rx I/O Mode: Block I/O [ 1913.496302][T30126] vivid-009: Generate RBDS Instead of RDS: false [ 1913.562239][T30126] vivid-009: RDS Reception: true [ 1913.619998][T30126] vivid-009: RDS Program Type: 0 inactive [ 1913.662399][T30126] vivid-009: RDS PS Name: inactive [ 1913.691925][T30126] vivid-009: RDS Radio Text: inactive [ 1913.728319][T30126] vivid-009: RDS Traffic Announcement: false inactive [ 1913.775140][T30126] vivid-009: RDS Traffic Program: false inactive [ 1913.814949][T30126] vivid-009: RDS Music: false inactive [ 1913.851576][T30126] vivid-009: ================== END STATUS ================== [ 1914.472971][T30138] Invalid ELF header magic: != ELF [ 1917.431643][T30158] random: crng reseeded on system resumption [ 1917.465376][T30159] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4965'. [ 1918.590000][T30174] FAULT_INJECTION: forcing a failure. [ 1918.590000][T30174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1918.686367][T30174] CPU: 0 UID: 0 PID: 30174 Comm: syz.5.4970 Tainted: G L syzkaller #0 PREEMPT(full) [ 1918.686407][T30174] Tainted: [L]=SOFTLOCKUP [ 1918.686416][T30174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1918.686431][T30174] Call Trace: [ 1918.686439][T30174] [ 1918.686448][T30174] dump_stack_lvl+0x100/0x190 [ 1918.686487][T30174] should_fail_ex.cold+0x5/0xa [ 1918.686514][T30174] _copy_to_user+0x32/0xd0 [ 1918.686542][T30174] put_timespec64+0xb5/0x130 [ 1918.686580][T30174] ? __pfx_put_timespec64+0x10/0x10 [ 1918.686615][T30174] ? lockdep_hardirqs_on+0x78/0x100 [ 1918.686652][T30174] ? read_tsc+0x9/0x20 [ 1918.686672][T30174] ? ktime_get_ts64+0x256/0x3f0 [ 1918.686708][T30174] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1918.686743][T30174] poll_select_finish+0x54b/0x670 [ 1918.686768][T30174] ? __pfx_poll_select_finish+0x10/0x10 [ 1918.686790][T30174] ? timespec64_add_safe+0x192/0x220 [ 1918.686828][T30174] ? __pfx_timespec64_add_safe+0x10/0x10 [ 1918.686865][T30174] ? set_user_sigmask+0x1e1/0x270 [ 1918.686897][T30174] ? __pfx_set_user_sigmask+0x10/0x10 [ 1918.686931][T30174] ? read_tsc+0x9/0x20 [ 1918.686951][T30174] ? ktime_get_ts64+0x256/0x3f0 [ 1918.686990][T30174] __x64_sys_ppoll+0x2c7/0x350 [ 1918.687018][T30174] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 1918.687042][T30174] ? xfd_validate_state+0x129/0x190 [ 1918.687109][T30174] do_syscall_64+0x106/0xf80 [ 1918.687147][T30174] ? clear_bhb_loop+0x40/0x90 [ 1918.687180][T30174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1918.687211][T30174] RIP: 0033:0x7fcd0099bf79 [ 1918.687230][T30174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1918.687255][T30174] RSP: 002b:00007fcd01851028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 1918.687279][T30174] RAX: ffffffffffffffda RBX: 00007fcd00c15fa0 RCX: 00007fcd0099bf79 [ 1918.687296][T30174] RDX: 0000200000003640 RSI: 00000000000000d6 RDI: 0000200000003600 [ 1918.687312][T30174] RBP: 00007fcd00a327e0 R08: 0000000000000008 R09: 0000000000000000 [ 1918.687327][T30174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1918.687341][T30174] R13: 00007fcd00c16038 R14: 00007fcd00c15fa0 R15: 00007ffdfe2cf4e8 [ 1918.687372][T30174] [ 1918.972789][T30173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4968'. [ 1919.849675][T30190] vivid-009: ================= START STATUS ================= [ 1919.923215][T30190] vivid-009: Radio HW Seek Mode: Bounded [ 1920.117961][T30190] vivid-009: Radio Programmable HW Seek: false [ 1920.124265][T30190] vivid-009: RDS Rx I/O Mode: Block I/O [ 1920.334422][T30190] vivid-009: Generate RBDS Instead of RDS: false [ 1920.485434][T30190] vivid-009: RDS Reception: true [ 1920.525204][T30190] vivid-009: RDS Program Type: 0 inactive [ 1920.622134][T30190] vivid-009: RDS PS Name: inactive [ 1920.724887][T30190] vivid-009: RDS Radio Text: inactive [ 1920.817721][T30190] vivid-009: RDS Traffic Announcement: false inactive [ 1920.824707][T30190] vivid-009: RDS Traffic Program: false inactive [ 1920.959874][T30190] vivid-009: RDS Music: false inactive [ 1921.076805][T30190] vivid-009: ================== END STATUS ================== [ 1923.350477][T30237] __vm_enough_memory: pid: 30237, comm: syz.0.4983, bytes: 4398046511104 not enough memory for the allocation [ 1924.318627][T30253] FAULT_INJECTION: forcing a failure. [ 1924.318627][T30253] name failslab, interval 1, probability 0, space 0, times 0 [ 1924.365927][T30251] vivid-009: ================= START STATUS ================= [ 1924.425075][T30253] CPU: 0 UID: 0 PID: 30253 Comm: syz.5.4987 Tainted: G L syzkaller #0 PREEMPT(full) [ 1924.425113][T30253] Tainted: [L]=SOFTLOCKUP [ 1924.425121][T30253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1924.425136][T30253] Call Trace: [ 1924.425144][T30253] [ 1924.425153][T30253] dump_stack_lvl+0x100/0x190 [ 1924.425191][T30253] should_fail_ex.cold+0x5/0xa [ 1924.425217][T30253] should_failslab+0xc2/0x120 [ 1924.425246][T30253] __kvmalloc_node_noprof+0xfa/0xa00 [ 1924.425271][T30253] ? seq_read_iter+0x819/0x1270 [ 1924.425292][T30253] ? find_held_lock+0x2b/0x80 [ 1924.425322][T30253] ? aa_file_perm+0x268/0x1530 [ 1924.425357][T30253] seq_read_iter+0x819/0x1270 [ 1924.425391][T30253] seq_read+0x33b/0x4c0 [ 1924.425415][T30253] ? __pfx_seq_read+0x10/0x10 [ 1924.425458][T30253] full_proxy_read+0x135/0x1a0 [ 1924.425497][T30253] ? __pfx_full_proxy_read+0x10/0x10 [ 1924.425536][T30253] vfs_read+0x1e4/0xb30 [ 1924.425563][T30253] ? __pfx_vfs_read+0x10/0x10 [ 1924.425585][T30253] ? __fget_files+0x215/0x3d0 [ 1924.425616][T30253] ? __fget_files+0x21f/0x3d0 [ 1924.425648][T30253] ksys_read+0x12a/0x250 [ 1924.425671][T30253] ? __pfx_ksys_read+0x10/0x10 [ 1924.425702][T30253] do_syscall_64+0x106/0xf80 [ 1924.425738][T30253] ? clear_bhb_loop+0x40/0x90 [ 1924.425767][T30253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1924.425791][T30253] RIP: 0033:0x7fcd0099bf79 [ 1924.425810][T30253] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1924.425832][T30253] RSP: 002b:00007fcd01851028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1924.425854][T30253] RAX: ffffffffffffffda RBX: 00007fcd00c15fa0 RCX: 00007fcd0099bf79 [ 1924.425870][T30253] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000004 [ 1924.425885][T30253] RBP: 00007fcd01851090 R08: 0000000000000000 R09: 0000000000000000 [ 1924.425900][T30253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1924.425920][T30253] R13: 00007fcd00c16038 R14: 00007fcd00c15fa0 R15: 00007ffdfe2cf4e8 [ 1924.425951][T30253] [ 1924.653162][T30251] vivid-009: Radio HW Seek Mode: Bounded [ 1924.658934][T30251] vivid-009: Radio Programmable HW Seek: false [ 1924.665245][T30251] vivid-009: RDS Rx I/O Mode: Block I/O [ 1924.671683][T30251] vivid-009: Generate RBDS Instead of RDS: false [ 1924.678177][T30251] vivid-009: RDS Reception: true [ 1924.683139][T30251] vivid-009: RDS Program Type: 0 inactive [ 1924.689142][T30251] vivid-009: RDS PS Name: inactive [ 1924.694381][T30251] vivid-009: RDS Radio Text: inactive [ 1924.699961][T30251] vivid-009: RDS Traffic Announcement: false inactive [ 1924.718296][T30251] vivid-009: RDS Traffic Program: false inactive [ 1924.725331][T30251] vivid-009: RDS Music: false inactive [ 1924.731335][T30251] vivid-009: ================== END STATUS ================== [ 1924.761580][T30257] Invalid ELF header magic: != ELF [ 1924.827291][T30258] cgroup: fork rejected by pids controller in /syz0 [ 1925.005362][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1925.011703][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1925.470100][T30319] vhci_hcd vhci_hcd.2: USB_PORT_FEAT_BH_PORT_RESET req not supported for USB 2.0 roothub [ 1926.686780][T30424] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4997'. [ 1926.776279][T30426] FAULT_INJECTION: forcing a failure. [ 1926.776279][T30426] name failslab, interval 1, probability 0, space 0, times 0 [ 1926.833405][T30426] CPU: 0 UID: 0 PID: 30426 Comm: syz.4.4998 Tainted: G L syzkaller #0 PREEMPT(full) [ 1926.833447][T30426] Tainted: [L]=SOFTLOCKUP [ 1926.833456][T30426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1926.833472][T30426] Call Trace: [ 1926.833479][T30426] [ 1926.833489][T30426] dump_stack_lvl+0x100/0x190 [ 1926.833528][T30426] should_fail_ex.cold+0x5/0xa [ 1926.833555][T30426] should_failslab+0xc2/0x120 [ 1926.833585][T30426] __kvmalloc_node_noprof+0xfa/0xa00 [ 1926.833611][T30426] ? alloc_fdtable+0x17f/0x2d0 [ 1926.833641][T30426] alloc_fdtable+0x17f/0x2d0 [ 1926.833666][T30426] dup_fd+0x995/0xd10 [ 1926.833701][T30426] ? apparmor_task_alloc+0x2c1/0x3b0 [ 1926.833744][T30426] copy_process+0x2631/0x79b0 [ 1926.833782][T30426] ? __pfx_copy_process+0x10/0x10 [ 1926.833819][T30426] kernel_clone+0xfc/0x930 [ 1926.833841][T30426] ? __pfx_futex_wait+0x10/0x10 [ 1926.833869][T30426] ? madvise_unlock+0x172/0x220 [ 1926.833901][T30426] ? __pfx_kernel_clone+0x10/0x10 [ 1926.833939][T30426] __do_sys_clone+0xd9/0x120 [ 1926.833963][T30426] ? __pfx___do_sys_clone+0x10/0x10 [ 1926.833986][T30426] ? find_held_lock+0x2b/0x80 [ 1926.834029][T30426] ? xfd_validate_state+0x129/0x190 [ 1926.834069][T30426] do_syscall_64+0x106/0xf80 [ 1926.834104][T30426] ? clear_bhb_loop+0x40/0x90 [ 1926.834133][T30426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1926.834158][T30426] RIP: 0033:0x7fb88059bf79 [ 1926.834178][T30426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1926.834202][T30426] RSP: 002b:00007fb881452fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1926.834226][T30426] RAX: ffffffffffffffda RBX: 00007fb880815fa0 RCX: 00007fb88059bf79 [ 1926.834243][T30426] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000004001000 [ 1926.834258][T30426] RBP: 00007fb8806327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1926.834273][T30426] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1926.834288][T30426] R13: 00007fb880816038 R14: 00007fb880815fa0 R15: 00007ffd808a0c38 [ 1926.834319][T30426] [ 1927.885149][T30438] FAULT_INJECTION: forcing a failure. [ 1927.885149][T30438] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1927.935067][T30438] CPU: 0 UID: 0 PID: 30438 Comm: syz.6.5002 Tainted: G L syzkaller #0 PREEMPT(full) [ 1927.935105][T30438] Tainted: [L]=SOFTLOCKUP [ 1927.935114][T30438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1927.935128][T30438] Call Trace: [ 1927.935136][T30438] [ 1927.935144][T30438] dump_stack_lvl+0x100/0x190 [ 1927.935180][T30438] should_fail_ex.cold+0x5/0xa [ 1927.935206][T30438] get_futex_key+0x295/0x1620 [ 1927.935246][T30438] ? __pfx_get_futex_key+0x10/0x10 [ 1927.935280][T30438] ? lock_acquire+0x17c/0x330 [ 1927.935312][T30438] futex_wake+0xea/0x530 [ 1927.935342][T30438] ? __pfx_futex_wake+0x10/0x10 [ 1927.935369][T30438] ? exit_mm_release+0x19/0x30 [ 1927.935406][T30438] do_futex+0x32b/0x350 [ 1927.935430][T30438] ? __pfx_do_futex+0x10/0x10 [ 1927.935450][T30438] ? __might_fault+0xc5/0x140 [ 1927.935479][T30438] mm_release+0x24a/0x2f0 [ 1927.935515][T30438] do_exit+0x675/0x2a30 [ 1927.935544][T30438] ? __pfx_do_exit+0x10/0x10 [ 1927.935570][T30438] ? do_raw_spin_lock+0x128/0x260 [ 1927.935597][T30438] ? find_held_lock+0x2b/0x80 [ 1927.935627][T30438] ? get_signal+0x7e0/0x21e0 [ 1927.935664][T30438] do_group_exit+0xd5/0x2a0 [ 1927.935692][T30438] get_signal+0x1ec7/0x21e0 [ 1927.935737][T30438] ? __pfx_get_signal+0x10/0x10 [ 1927.935772][T30438] ? do_futex+0x192/0x350 [ 1927.935797][T30438] arch_do_signal_or_restart+0x91/0x770 [ 1927.935823][T30438] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1927.935856][T30438] ? __pfx___x64_sys_futex+0x10/0x10 [ 1927.935877][T30438] ? ksys_mmap_pgoff+0x85/0x5b0 [ 1927.935911][T30438] exit_to_user_mode_loop+0x86/0x4a0 [ 1927.935934][T30438] ? rcu_is_watching+0x12/0xc0 [ 1927.935964][T30438] do_syscall_64+0x668/0xf80 [ 1927.935999][T30438] ? clear_bhb_loop+0x40/0x90 [ 1927.936027][T30438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1927.936050][T30438] RIP: 0033:0x7f267999bf79 [ 1927.936070][T30438] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1927.936092][T30438] RSP: 002b:00007f267a8650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1927.936115][T30438] RAX: fffffffffffffe00 RBX: 00007f2679c15fa8 RCX: 00007f267999bf79 [ 1927.936131][T30438] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2679c15fa8 [ 1927.936146][T30438] RBP: 00007f2679c15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1927.936160][T30438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1927.936175][T30438] R13: 00007f2679c16038 R14: 00007ffcf5cc1010 R15: 00007ffcf5cc10f8 [ 1927.936205][T30438] [ 1929.768586][T30458] tipc: Started in network mode [ 1929.799525][T30458] tipc: Node identity ffffffff, cluster identity 4711 [ 1929.844855][T30458] tipc: Node number set to 4294967295 [ 1930.131808][T30469] bond0: invalid ARP target specified [ 1930.906592][T30477] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5011'. [ 1931.109606][T30481] FAULT_INJECTION: forcing a failure. [ 1931.109606][T30481] name failslab, interval 1, probability 0, space 0, times 0 [ 1931.210793][T30481] CPU: 0 UID: 0 PID: 30481 Comm: syz.5.5012 Tainted: G L syzkaller #0 PREEMPT(full) [ 1931.210833][T30481] Tainted: [L]=SOFTLOCKUP [ 1931.210842][T30481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1931.210857][T30481] Call Trace: [ 1931.210866][T30481] [ 1931.210875][T30481] dump_stack_lvl+0x100/0x190 [ 1931.210915][T30481] should_fail_ex.cold+0x5/0xa [ 1931.210942][T30481] ? kvm_io_bus_register_dev+0x1d2/0x710 [ 1931.210968][T30481] should_failslab+0xc2/0x120 [ 1931.210998][T30481] __kmalloc_noprof+0xe0/0x850 [ 1931.211028][T30481] kvm_io_bus_register_dev+0x1d2/0x710 [ 1931.211065][T30481] kvm_pic_init+0x22f/0x380 [ 1931.211103][T30481] kvm_arch_vm_ioctl+0xec4/0x18d0 [ 1931.211133][T30481] ? __lock_acquire+0x4a5/0x2630 [ 1931.211158][T30481] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1931.211193][T30481] ? __lock_acquire+0x4a5/0x2630 [ 1931.211221][T30481] ? __lock_acquire+0x4a5/0x2630 [ 1931.211251][T30481] ? __lock_acquire+0x4a5/0x2630 [ 1931.211281][T30481] ? __lock_acquire+0x4a5/0x2630 [ 1931.211322][T30481] ? is_bpf_text_address+0x8a/0x1a0 [ 1931.211358][T30481] ? bpf_ksym_find+0x124/0x1c0 [ 1931.211395][T30481] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1931.211432][T30481] ? is_bpf_text_address+0x94/0x1a0 [ 1931.211461][T30481] ? kernel_text_address+0x8d/0x100 [ 1931.211496][T30481] ? __kernel_text_address+0xd/0x30 [ 1931.211525][T30481] ? unwind_get_return_address+0x59/0xa0 [ 1931.211563][T30481] ? arch_stack_walk+0xa6/0xf0 [ 1931.211608][T30481] ? tomoyo_path_number_perm+0x46d/0x580 [ 1931.211634][T30481] ? stack_trace_save+0x8e/0xc0 [ 1931.211666][T30481] ? __pfx_stack_trace_save+0x10/0x10 [ 1931.211702][T30481] ? stack_depot_save_flags+0x27/0x9d0 [ 1931.211730][T30481] ? __lock_acquire+0x4a5/0x2630 [ 1931.211755][T30481] ? tomoyo_path_number_perm+0x46d/0x580 [ 1931.211780][T30481] ? kasan_save_stack+0x3f/0x50 [ 1931.211804][T30481] ? kasan_save_stack+0x30/0x50 [ 1931.211830][T30481] ? kasan_save_track+0x14/0x30 [ 1931.211853][T30481] ? kasan_save_free_info+0x3b/0x70 [ 1931.211888][T30481] ? __kasan_slab_free+0x5f/0x80 [ 1931.211917][T30481] kvm_vm_ioctl+0x1564/0x4020 [ 1931.211951][T30481] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1931.211991][T30481] ? tomoyo_path_number_perm+0x46d/0x580 [ 1931.212018][T30481] ? kasan_quarantine_put+0x104/0x240 [ 1931.212041][T30481] ? lockdep_hardirqs_on+0x78/0x100 [ 1931.212081][T30481] ? find_held_lock+0x2b/0x80 [ 1931.212121][T30481] ? tomoyo_path_number_perm+0x28f/0x580 [ 1931.212152][T30481] ? tomoyo_path_number_perm+0x28f/0x580 [ 1931.212191][T30481] ? tomoyo_path_number_perm+0x188/0x580 [ 1931.212225][T30481] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1931.212257][T30481] ? futex_wake+0x1ad/0x530 [ 1931.212303][T30481] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1931.212354][T30481] ? do_vfs_ioctl+0x226/0x13e0 [ 1931.212401][T30481] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1931.212459][T30481] ? find_held_lock+0x2b/0x80 [ 1931.212499][T30481] ? __fget_files+0x215/0x3d0 [ 1931.212529][T30481] ? hook_file_ioctl_common+0x146/0x410 [ 1931.212569][T30481] ? __fget_files+0x21f/0x3d0 [ 1931.212605][T30481] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1931.212636][T30481] __x64_sys_ioctl+0x18e/0x210 [ 1931.212686][T30481] do_syscall_64+0x106/0xf80 [ 1931.212730][T30481] ? clear_bhb_loop+0x40/0x90 [ 1931.212768][T30481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1931.212799][T30481] RIP: 0033:0x7fcd0099bf79 [ 1931.212825][T30481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1931.212856][T30481] RSP: 002b:00007fcd01851028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1931.212886][T30481] RAX: ffffffffffffffda RBX: 00007fcd00c15fa0 RCX: 00007fcd0099bf79 [ 1931.212907][T30481] RDX: 0010000000000402 RSI: 000000000000ae60 RDI: 0000000000000003 [ 1931.212927][T30481] RBP: 00007fcd00a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1931.212946][T30481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1931.212964][T30481] R13: 00007fcd00c16038 R14: 00007fcd00c15fa0 R15: 00007ffdfe2cf4e8 [ 1931.213003][T30481] [ 1931.855744][T30488] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1932.075901][T30494] vivid-009: ================= START STATUS ================= [ 1932.102209][T30494] vivid-009: Radio HW Seek Mode: Bounded [ 1932.115097][T30494] vivid-009: Radio Programmable HW Seek: false [ 1932.131913][T30494] vivid-009: RDS Rx I/O Mode: Block I/O [ 1932.138977][T30494] vivid-009: Generate RBDS Instead of RDS: false [ 1932.145533][T30494] vivid-009: RDS Reception: true [ 1932.151753][T30494] vivid-009: RDS Program Type: 0 inactive [ 1932.170464][T30494] vivid-009: RDS PS Name: inactive [ 1932.224849][T30494] vivid-009: RDS Radio Text: inactive [ 1932.234994][T30494] vivid-009: RDS Traffic Announcement: false inactive [ 1932.250580][T30494] vivid-009: RDS Traffic Program: false inactive [ 1932.258488][T30494] vivid-009: RDS Music: false inactive [ 1932.325010][T30494] vivid-009: ================== END STATUS ================== [ 1934.489437][T30545] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5022'. [ 1935.778779][T30560] zswap: compressor not available [ 1936.455022][T30581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5032'. [ 1936.743017][T30594] Invalid ELF header magic: != ELF [ 1936.845381][T30596] FAULT_INJECTION: forcing a failure. [ 1936.845381][T30596] name failslab, interval 1, probability 0, space 0, times 0 [ 1937.085904][T30596] CPU: 0 UID: 0 PID: 30596 Comm: syz.6.5035 Tainted: G L syzkaller #0 PREEMPT(full) [ 1937.085944][T30596] Tainted: [L]=SOFTLOCKUP [ 1937.085953][T30596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1937.085968][T30596] Call Trace: [ 1937.085976][T30596] [ 1937.085986][T30596] dump_stack_lvl+0x100/0x190 [ 1937.086025][T30596] should_fail_ex.cold+0x5/0xa [ 1937.086052][T30596] should_failslab+0xc2/0x120 [ 1937.086082][T30596] __kvmalloc_node_noprof+0xfa/0xa00 [ 1937.086108][T30596] ? file_tty_write.isra.0+0x64e/0x890 [ 1937.086147][T30596] file_tty_write.isra.0+0x64e/0x890 [ 1937.086178][T30596] ? security_file_permission+0x76/0x210 [ 1937.086208][T30596] ? rw_verify_area+0xce/0x6d0 [ 1937.086249][T30596] vfs_write+0x6ac/0x1070 [ 1937.086273][T30596] ? __pfx_tty_write+0x10/0x10 [ 1937.086306][T30596] ? __pfx_vfs_write+0x10/0x10 [ 1937.086328][T30596] ? find_held_lock+0x2b/0x80 [ 1937.086404][T30596] ksys_write+0x12a/0x250 [ 1937.086428][T30596] ? __pfx_ksys_write+0x10/0x10 [ 1937.086461][T30596] do_syscall_64+0x106/0xf80 [ 1937.086503][T30596] ? clear_bhb_loop+0x40/0x90 [ 1937.086533][T30596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1937.086558][T30596] RIP: 0033:0x7f267999bf79 [ 1937.086578][T30596] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1937.086603][T30596] RSP: 002b:00007f267a823028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1937.086627][T30596] RAX: ffffffffffffffda RBX: 00007f2679c16180 RCX: 00007f267999bf79 [ 1937.086644][T30596] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 1937.086660][T30596] RBP: 00007f2679a327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1937.086675][T30596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1937.086690][T30596] R13: 00007f2679c16218 R14: 00007f2679c16180 R15: 00007ffcf5cc10f8 [ 1937.086722][T30596] [ 1937.396373][T30594] usbip-vudc usbip-vudc.0: gadget not bound [ 1937.532514][T30607] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5038'. [ 1940.107488][T30647] kvm: vcpu 3: requested lapic timer restore with starting count register 0x390=2424827650 (310377939200 ns) > initial count (223122034688 ns). Using initial count to start timer. [ 1941.108983][T30660] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5053'. [ 1942.513081][T30683] random: crng reseeded on system resumption [ 1942.720701][T30688] vivid-009: ================= START STATUS ================= [ 1942.771979][T30688] vivid-009: Radio HW Seek Mode: Bounded [ 1942.805373][T30688] vivid-009: Radio Programmable HW Seek: false [ 1942.811675][T30688] vivid-009: RDS Rx I/O Mode: Block I/O [ 1942.890053][T30688] vivid-009: Generate RBDS Instead of RDS: false [ 1942.935070][T30688] vivid-009: RDS Reception: true [ 1943.004909][T30688] vivid-009: RDS Program Type: 0 inactive [ 1943.010717][T30688] vivid-009: RDS PS Name: inactive [ 1943.093689][T30688] vivid-009: RDS Radio Text: inactive [ 1943.133359][T30688] vivid-009: RDS Traffic Announcement: false inactive [ 1943.156792][T30688] vivid-009: RDS Traffic Program: false inactive [ 1943.198678][T30688] vivid-009: RDS Music: false inactive [ 1943.229459][T30688] vivid-009: ================== END STATUS ================== [ 1943.612755][T30664] Process accounting paused [ 1944.022162][T30697] syz.5.5062 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1945.384467][T30715] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5067'. [ 1945.633136][T30723] Invalid ELF header magic: != ELF [ 1946.758735][T30735] Invalid ELF header magic: != ELF [ 1951.164684][T30785] FAULT_INJECTION: forcing a failure. [ 1951.164684][T30785] name failslab, interval 1, probability 0, space 0, times 0 [ 1951.193409][T30784] vivid-009: ================= START STATUS ================= [ 1951.234979][T30784] vivid-009: Radio HW Seek Mode: Bounded [ 1951.240715][T30784] vivid-009: Radio Programmable HW Seek: false [ 1951.275503][T30785] CPU: 0 UID: 0 PID: 30785 Comm: syz.6.5083 Tainted: G L syzkaller #0 PREEMPT(full) [ 1951.275540][T30785] Tainted: [L]=SOFTLOCKUP [ 1951.275548][T30785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1951.275563][T30785] Call Trace: [ 1951.275571][T30785] [ 1951.275580][T30785] dump_stack_lvl+0x100/0x190 [ 1951.275617][T30785] should_fail_ex.cold+0x5/0xa [ 1951.275643][T30785] should_failslab+0xc2/0x120 [ 1951.275672][T30785] __kmalloc_node_noprof+0xe6/0x850 [ 1951.275696][T30785] ? alloc_slab_obj_exts+0x4e/0x1c0 [ 1951.275729][T30785] ? find_held_lock+0x2b/0x80 [ 1951.275766][T30785] alloc_slab_obj_exts+0x4e/0x1c0 [ 1951.275803][T30785] __memcg_slab_post_alloc_hook+0x24a/0x9a0 [ 1951.275840][T30785] ? kasan_save_track+0x14/0x30 [ 1951.275868][T30785] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 1951.275891][T30785] ? alloc_inode+0x183/0x250 [ 1951.275931][T30785] alloc_inode+0x183/0x250 [ 1951.275963][T30785] new_inode+0x22/0x1c0 [ 1951.275993][T30785] ? dput.part.0+0xdd/0x570 [ 1951.276028][T30785] simple_fill_super+0x2d9/0x680 [ 1951.276057][T30785] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1951.276095][T30785] nfsd_fill_super+0x98/0x560 [ 1951.276138][T30785] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1951.276176][T30785] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1951.276211][T30785] get_tree_keyed+0x10e/0x1d0 [ 1951.276235][T30785] vfs_get_tree+0x92/0x320 [ 1951.276270][T30785] path_mount+0x7d0/0x23d0 [ 1951.276305][T30785] ? __pfx_path_mount+0x10/0x10 [ 1951.276332][T30785] ? lockdep_hardirqs_on+0x78/0x100 [ 1951.276370][T30785] ? putname+0xb1/0x110 [ 1951.276395][T30785] ? kmem_cache_free+0x124/0x670 [ 1951.276440][T30785] ? __x64_sys_mount+0x293/0x310 [ 1951.276468][T30785] __x64_sys_mount+0x293/0x310 [ 1951.276499][T30785] ? __pfx___x64_sys_mount+0x10/0x10 [ 1951.276537][T30785] do_syscall_64+0x106/0xf80 [ 1951.276572][T30785] ? clear_bhb_loop+0x40/0x90 [ 1951.276600][T30785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1951.276631][T30785] RIP: 0033:0x7f267999bf79 [ 1951.276649][T30785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1951.276674][T30785] RSP: 002b:00007f267a844028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1951.276696][T30785] RAX: ffffffffffffffda RBX: 00007f2679c16090 RCX: 00007f267999bf79 [ 1951.276712][T30785] RDX: 0000200000000140 RSI: 0000200000000040 RDI: 0000000000000000 [ 1951.276728][T30785] RBP: 00007f267a844090 R08: 0000000000000000 R09: 0000000000000000 [ 1951.276742][T30785] R10: 00000000c0ed0000 R11: 0000000000000246 R12: 0000000000000002 [ 1951.276756][T30785] R13: 00007f2679c16128 R14: 00007f2679c16090 R15: 00007ffcf5cc10f8 [ 1951.276787][T30785] [ 1951.572067][T30788] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5084'. [ 1951.611765][T30784] vivid-009: RDS Rx I/O Mode: Block I/O [ 1951.617415][T30784] vivid-009: Generate RBDS Instead of RDS: false [ 1951.623989][T30784] vivid-009: RDS Reception: true [ 1951.629056][T30784] vivid-009: RDS Program Type: 0 inactive [ 1951.634941][T30784] vivid-009: RDS PS Name: inactive [ 1951.640197][T30784] vivid-009: RDS Radio Text: inactive [ 1951.646074][T30784] vivid-009: RDS Traffic Announcement: false inactive [ 1951.652881][T30784] vivid-009: RDS Traffic Program: false inactive [ 1951.659905][T30784] vivid-009: RDS Music: false inactive [ 1951.679590][T30784] vivid-009: ================== END STATUS ================== [ 1952.106016][T30795] vivid-009: ================= START STATUS ================= [ 1952.114576][T30795] vivid-009: Radio HW Seek Mode: Bounded [ 1952.144918][T30795] vivid-009: Radio Programmable HW Seek: false [ 1952.151189][T30795] vivid-009: RDS Rx I/O Mode: Block I/O [ 1952.166767][T30795] vivid-009: Generate RBDS Instead of RDS: false [ 1952.173151][T30795] vivid-009: RDS Reception: true [ 1952.198965][T30795] vivid-009: RDS Program Type: 0 inactive [ 1952.215155][T30795] vivid-009: RDS PS Name: inactive [ 1952.244893][T30795] vivid-009: RDS Radio Text: inactive [ 1952.264841][T30795] vivid-009: RDS Traffic Announcement: false inactive [ 1952.320119][T30795] vivid-009: RDS Traffic Program: false inactive [ 1952.336003][T30795] vivid-009: RDS Music: false inactive [ 1952.351884][T30795] vivid-009: ================== END STATUS ================== [ 1953.444593][T30826] ================================================================== [ 1953.444618][T30826] BUG: KASAN: vmalloc-out-of-bounds in sys_imageblit+0x19fb/0x1d60 [ 1953.444664][T30826] Write of size 8 at addr ffffc900035e90a0 by task syz.4.5092/30826 [ 1953.444685][T30826] [ 1953.444700][T30826] CPU: 0 UID: 0 PID: 30826 Comm: syz.4.5092 Tainted: G L syzkaller #0 PREEMPT(full) [ 1953.444735][T30826] Tainted: [L]=SOFTLOCKUP [ 1953.444744][T30826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1953.444761][T30826] Call Trace: [ 1953.444770][T30826] [ 1953.444781][T30826] dump_stack_lvl+0x100/0x190 [ 1953.444815][T30826] print_report+0x156/0x4c9 [ 1953.444850][T30826] ? __virt_addr_valid+0x81/0x620 [ 1953.444878][T30826] ? sys_imageblit+0x19fb/0x1d60 [ 1953.444910][T30826] kasan_report+0xdf/0x1a0 [ 1953.444948][T30826] ? sys_imageblit+0x19fb/0x1d60 [ 1953.444984][T30826] sys_imageblit+0x19fb/0x1d60 [ 1953.445022][T30826] ? __pfx_sys_imageblit+0x10/0x10 [ 1953.445055][T30826] ? prb_read_valid+0x78/0xa0 [ 1953.445081][T30826] ? __pfx_prb_read_valid+0x10/0x10 [ 1953.445109][T30826] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1953.445147][T30826] soft_cursor+0x524/0xa10 [ 1953.445176][T30826] ? fb_get_color_depth+0x120/0x250 [ 1953.445202][T30826] bit_cursor+0xe58/0x16f0 [ 1953.445231][T30826] ? __pfx_bit_cursor+0x10/0x10 [ 1953.445258][T30826] ? __lock_acquire+0x4a5/0x2630 [ 1953.445284][T30826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1953.445318][T30826] ? get_color+0x1da/0x450 [ 1953.445355][T30826] ? __pfx_bit_cursor+0x10/0x10 [ 1953.445380][T30826] fbcon_cursor+0x43c/0x5e0 [ 1953.445401][T30826] ? add_softcursor+0x150/0x290 [ 1953.445427][T30826] set_cursor+0x1db/0x250 [ 1953.445452][T30826] con_write+0x89/0xb0 [ 1953.445504][T30826] n_tty_write+0x44f/0x12d0 [ 1953.445549][T30826] ? __pfx_n_tty_write+0x10/0x10 [ 1953.445587][T30826] ? __pfx_woken_wake_function+0x10/0x10 [ 1953.445618][T30826] ? rcu_is_watching+0x12/0xc0 [ 1953.445648][T30826] ? kfree+0x2a0/0x670 [ 1953.445683][T30826] ? __pfx_n_tty_write+0x10/0x10 [ 1953.445721][T30826] file_tty_write.isra.0+0x4d2/0x890 [ 1953.445755][T30826] redirected_tty_write+0xd4/0x120 [ 1953.445787][T30826] vfs_write+0x6ac/0x1070 [ 1953.445810][T30826] ? __pfx_redirected_tty_write+0x10/0x10 [ 1953.445843][T30826] ? __pfx_vfs_write+0x10/0x10 [ 1953.445865][T30826] ? find_held_lock+0x2b/0x80 [ 1953.445907][T30826] ksys_write+0x12a/0x250 [ 1953.445930][T30826] ? __pfx_ksys_write+0x10/0x10 [ 1953.445963][T30826] do_syscall_64+0x106/0xf80 [ 1953.446000][T30826] ? clear_bhb_loop+0x40/0x90 [ 1953.446027][T30826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.446052][T30826] RIP: 0033:0x7fb88059bf79 [ 1953.446072][T30826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1953.446097][T30826] RSP: 002b:00007fb881432028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1953.446120][T30826] RAX: ffffffffffffffda RBX: 00007fb880816090 RCX: 00007fb88059bf79 [ 1953.446137][T30826] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000009 [ 1953.446153][T30826] RBP: 00007fb8806327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1953.446170][T30826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1953.446185][T30826] R13: 00007fb880816128 R14: 00007fb880816090 R15: 00007ffd808a0c38 [ 1953.446210][T30826] [ 1953.446219][T30826] [ 1953.446226][T30826] The buggy address belongs to a 4-page vmalloc region starting at 0xffffc900035ea000 allocated at vcalloc_noprof+0x43/0x70 [ 1953.446272][T30826] Memory state around the buggy address: [ 1953.446286][T30826] ffffc900035e8f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1953.446305][T30826] ffffc900035e9000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1953.446323][T30826] >ffffc900035e9080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1953.446337][T30826] ^ [ 1953.446351][T30826] ffffc900035e9100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1953.446368][T30826] ffffc900035e9180: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 1953.446383][T30826] ================================================================== [ 1953.505749][T30826] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1953.505775][T30826] CPU: 0 UID: 0 PID: 30826 Comm: syz.4.5092 Tainted: G L syzkaller #0 PREEMPT(full) [ 1953.505811][T30826] Tainted: [L]=SOFTLOCKUP [ 1953.505821][T30826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 1953.505837][T30826] Call Trace: [ 1953.505845][T30826] [ 1953.505855][T30826] dump_stack_lvl+0x100/0x190 [ 1953.505893][T30826] vpanic+0x20d/0x630 [ 1953.505918][T30826] panic+0xd1/0xd1 [ 1953.505948][T30826] ? __pfx_panic+0x10/0x10 [ 1953.505972][T30826] ? sys_imageblit+0x19fb/0x1d60 [ 1953.506006][T30826] ? preempt_schedule_common+0x42/0xc0 [ 1953.506047][T30826] check_panic_on_warn.cold+0x19/0x34 [ 1953.506074][T30826] end_report.part.0+0x3a/0x90 [ 1953.506108][T30826] kasan_report.cold+0xe/0x18 [ 1953.506143][T30826] ? sys_imageblit+0x19fb/0x1d60 [ 1953.506180][T30826] sys_imageblit+0x19fb/0x1d60 [ 1953.506218][T30826] ? __pfx_sys_imageblit+0x10/0x10 [ 1953.506252][T30826] ? prb_read_valid+0x78/0xa0 [ 1953.506278][T30826] ? __pfx_prb_read_valid+0x10/0x10 [ 1953.506306][T30826] drm_fbdev_shmem_defio_imageblit+0x20/0x130 [ 1953.506345][T30826] soft_cursor+0x524/0xa10 [ 1953.506375][T30826] ? fb_get_color_depth+0x120/0x250 [ 1953.506401][T30826] bit_cursor+0xe58/0x16f0 [ 1953.506431][T30826] ? __pfx_bit_cursor+0x10/0x10 [ 1953.506457][T30826] ? __lock_acquire+0x4a5/0x2630 [ 1953.506486][T30826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1953.506520][T30826] ? get_color+0x1da/0x450 [ 1953.506558][T30826] ? __pfx_bit_cursor+0x10/0x10 [ 1953.506583][T30826] fbcon_cursor+0x43c/0x5e0 [ 1953.506605][T30826] ? add_softcursor+0x150/0x290 [ 1953.506633][T30826] set_cursor+0x1db/0x250 [ 1953.506658][T30826] con_write+0x89/0xb0 [ 1953.506690][T30826] n_tty_write+0x44f/0x12d0 [ 1953.506734][T30826] ? __pfx_n_tty_write+0x10/0x10 [ 1953.506773][T30826] ? __pfx_woken_wake_function+0x10/0x10 [ 1953.506805][T30826] ? rcu_is_watching+0x12/0xc0 [ 1953.506835][T30826] ? kfree+0x2a0/0x670 [ 1953.506871][T30826] ? __pfx_n_tty_write+0x10/0x10 [ 1953.506909][T30826] file_tty_write.isra.0+0x4d2/0x890 [ 1953.506952][T30826] redirected_tty_write+0xd4/0x120 [ 1953.506984][T30826] vfs_write+0x6ac/0x1070 [ 1953.507009][T30826] ? __pfx_redirected_tty_write+0x10/0x10 [ 1953.507043][T30826] ? __pfx_vfs_write+0x10/0x10 [ 1953.507066][T30826] ? find_held_lock+0x2b/0x80 [ 1953.507109][T30826] ksys_write+0x12a/0x250 [ 1953.507133][T30826] ? __pfx_ksys_write+0x10/0x10 [ 1953.507162][T30826] do_syscall_64+0x106/0xf80 [ 1953.507199][T30826] ? clear_bhb_loop+0x40/0x90 [ 1953.507227][T30826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1953.507253][T30826] RIP: 0033:0x7fb88059bf79 [ 1953.507272][T30826] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1953.507298][T30826] RSP: 002b:00007fb881432028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1953.507323][T30826] RAX: ffffffffffffffda RBX: 00007fb880816090 RCX: 00007fb88059bf79 [ 1953.507341][T30826] RDX: 0000000000000930 RSI: 0000200000001bc0 RDI: 0000000000000009 [ 1953.507357][T30826] RBP: 00007fb8806327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1953.507373][T30826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1953.507389][T30826] R13: 00007fb880816128 R14: 00007fb880816090 R15: 00007ffd808a0c38 [ 1953.507415][T30826] [ 1953.507478][T30826] Kernel Offset: disabled