last executing test programs: 14m40.69105689s ago: executing program 2 (id=2539): mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/io-timeout-fail\x00', 0x121201, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r1, 0xc0686611, &(0x7f0000000080)={0x101, 0x31, 0x7fff, 0x5, 0x8, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0xd}) 14m40.494199416s ago: executing program 2 (id=2543): mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/zram0/io-timeout-fail\x00', 0x121201, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000200)='5', 0x1) sendmsg$auto_OVS_FLOW_CMD_SET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/block/loop6/rqos/wbt/enabled\x00', 0x880, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000300)={{0x0, 0x6, 0x0, 0x607f640d, &(0x7f0000000440)="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", 0xabde, 0x7dcfb47}, 0xd}, 0x5, 0x7c1, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f00000001c0)=""/70, 0x46) r3 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x40302, 0x0) ioctl$auto_PROCMAP_QUERY(r3, 0xc0686611, &(0x7f0000000080)={0x101, 0x31, 0x7fff, 0x5, 0x8, 0x1, 0x800, 0x101, 0x5, 0x7f93, 0xfffffffe, 0x7ffffffd, 0x3, 0x7, 0xd}) 14m39.490072891s ago: executing program 2 (id=2548): mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000001c0)={0x0, 0x7}, 0x3) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x48002, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_COALESCE(0xffffffffffffffff, 0x0, 0x44860) openat$auto_clk_dump_fops_(0xffffffffffffff9c, 0x0, 0x80, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@batch={0x7, 0x444, 0x3, 0x10001, 0x10000000, 0xffffffffffffffff, 0x400, 0x1ff}, 0x96) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r3 = fcntl$auto(r2, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(r3, 0xffffffffffffffff, 0x0, 0xc01) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) lseek$auto(0x3, 0x6, 0x1) linkat$auto(0xffffffffffffffff, 0x0, r2, 0x0, 0x9) 14m38.670277124s ago: executing program 2 (id=2551): sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) (async) mmap$auto(0x0, 0xc, 0x4000000000df, 0x100000044eb2, 0x10006, 0x300000000000) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000240)='/dev/usbmon32\x00', 0x80440, 0x0) (async, rerun: 64) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/032/001\x00', 0x8202, 0x0) (rerun: 64) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x6}, 0x1) (async) r0 = socket(0x29, 0x2, 0x0) (async, rerun: 64) fanotify_mark$auto(0xffffffffffffffff, 0xf6b, 0x5, 0xffffffffffffffff, 0x0) (async, rerun: 64) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x5) (async, rerun: 64) memfd_create$auto(0x0, 0xffffffff) (async, rerun: 64) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000001, 0x0, 0xa, 0x0) (async, rerun: 32) ioctl$auto(0xffffffffffffffff, 0x900064b7, 0xffffffffffffffff) (async, rerun: 32) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) r4 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f0000000480)) (async, rerun: 32) mmap$auto(0x0, 0x10008, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) (async, rerun: 32) ioctl$auto(r0, 0x8929, 0x24) (rerun: 32) 14m36.957606002s ago: executing program 2 (id=2556): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x31) mmap$auto(0x1, 0x200, 0x400, 0x18, 0x3, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x01\x00\x01\x00\x00\x00\x00\x00\xc7k', 0x81) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(r1, 0x5, 0x0) getdents$auto(r1, &(0x7f00000004c0)={0x600, 0x7ffffffffffeffff, 0x5}, 0x62d4) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000100), 0x80080, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x40080, 0x0) ioctl$auto_UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000400)={{0xc, 0x23, 0xa6, 0x83}, "66ac010005000000000068d190eb0d4a4cada7272464294b9183349eef4c1f028fdcc8ecc66fdd02316f064ebd893007abb4c0bbc3b822f66eaf240963110d61771552c03de65800", 0x2}) ioctl$auto_UI_DEV_CREATE(r2, 0x5501, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) 14m35.779062218s ago: executing program 2 (id=2563): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x39db00, 0x0) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = bpf$auto(0x8000000, 0x0, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x40, 0x0) write$auto(r0, 0x0, 0x100000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x20000854) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL-\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x1) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x5, 0x20010, 0x7, 0xeb1, 0x404, 0x10008000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000000c0)="6bbe2e0946916180c1600089681f8f2fbc434b2b8422ca962366fdcba4ea1f13943057d4ff43837d5e6af0fe32ce9b293a73aa07d3c0fc09af5189a34d6e69270450765acf405454c65aafb57d35f5683436621bd7d9273534a19a2f2312d4fd0725fef4bbe783c7b3399a3139e8a7", 0x6f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x202003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@token_create={0x10}, 0xa3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0xd, 0x100000000e1, 0xdb74, 0xffffffffffffffff, 0x10000) io_uring_setup$auto(0x8008, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0xf, 0x6, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/bpq0/statistics/tx_fifo_errors\x00', 0x2062, 0x0) 14m19.963340152s ago: executing program 32 (id=2563): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x39db00, 0x0) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mouse0\x00', 0x181502, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r1 = bpf$auto(0x8000000, 0x0, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x40, 0x0) write$auto(r0, 0x0, 0x100000000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x20000854) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL-\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x1) ioctl$auto_BLKPG2(r1, 0x1269, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x5, 0x20010, 0x7, 0xeb1, 0x404, 0x10008000) write$auto_console_fops_tty_io(0xffffffffffffffff, &(0x7f00000000c0)="6bbe2e0946916180c1600089681f8f2fbc434b2b8422ca962366fdcba4ea1f13943057d4ff43837d5e6af0fe32ce9b293a73aa07d3c0fc09af5189a34d6e69270450765acf405454c65aafb57d35f5683436621bd7d9273534a19a2f2312d4fd0725fef4bbe783c7b3399a3139e8a7", 0x6f) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x202003, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$auto(0x0, &(0x7f0000000000)=@token_create={0x10}, 0xa3) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mseal$auto(0x0, 0x7dda, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) io_uring_register$auto(0x2, 0xe, 0x0, 0x20) mmap$auto(0x0, 0xd, 0x100000000e1, 0xdb74, 0xffffffffffffffff, 0x10000) io_uring_setup$auto(0x8008, 0x0) close_range$auto(0x2, 0x8, 0x0) clock_nanosleep$auto(0xf, 0x6, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/bpq0/statistics/tx_fifo_errors\x00', 0x2062, 0x0) 3m23.470642673s ago: executing program 1 (id=4737): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1001ff000) r1 = fsopen$auto(0x0, 0x1) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0xd73, 0x7) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) fanotify_mark$auto(r1, 0xf71, 0x4, r2, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES8, @ANYBLOB="06ff010000000000007809dc81ef9f55e170dd146797b2416d4b79961aeb49f961fcb1b481fe90da4b43d3611500c4ceaa9258fdba813c209e15348835f2007616d84ac4713e1bcc05defa240a546547c21b0ff4c3d65df3ae4c4b5d2504859e5ce346cf9eb97568b86871b9290513c983b903a0784bc668ecfb409f5c5957a96c086ab3bd4f1aae318f39949aaa3f559d1afda4660e61a20f1b3aa134148c12dbaef2724b0db179fc2c99c7d64f386b834bd18bd9783a073c4e2f7853a67330125a3f7502f9e9c31ec2a802bac990db3ac52aac53067a06", @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x18e5) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio1\x00', 0x6102, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) 3m20.156890459s ago: executing program 1 (id=4751): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x0, 0x4, 0x0, 0x0, 0x0, 0x400000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) writev$auto(r1, &(0x7f0000000080)={0x0, 0x1f00}, 0x3) syz_genetlink_get_family_id$auto_smbd_genl(0x0, 0xffffffffffffffff) sendmsg$auto_KSMBD_EVENT_LOGIN_RESPONSE(0xffffffffffffffff, 0x0, 0x30004850) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r2, 0x4b47, 0x1) newfstatat$auto(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000180)={0xcf68, 0x7, 0x6, 0x0, 0xee00, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x1f, 0x7d, 0x0, 0x1, 0x1, 0xfffffffffffffff9, 0xffffffffffff7fff, 0x1000}, 0x8) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x20000008000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40802, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0xe0301, 0x0) ioctl$auto(r3, 0x4b72, 0xffffffffffffffff) mmap$auto(0x0, 0x404008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="000227bd7000fbdbdf2503000000a70001002f4565762f617564696f31005649a3aab13b9d4ac6c027db56d4eec2dda7ee248dc4e964030d46ecb8b15a7cff47509729cf07fb5c6e89433a84441d75b49a62cea774551477b4141d559d8ba45595332e4fab22348abb5938405a3560a46dff6217bb7fea342aa4f4b490c0bfd46dbfc715be0198d76c4497297dfa4bdf3e66b82695392d0acc5777e29c4b0c4507cad336e8cb3f28fa49e2ae2c956b3883cfc544cc000c000200253a5ec62d3a7c0005000400a40000000500040009000000"], 0xd8}}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r4, 0xc0405626, r4) 3m17.323099509s ago: executing program 1 (id=4756): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, r0, 0x0) socket(0x10, 0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r3, 0x1, &(0x7f00000001c0)='+\x00', &(0x7f0000000280), 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) socket(0x2, 0x2, 0x0) madvise$auto(0x0, 0xfffffffffffeffff, 0x15) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_TIPC_NL_BEARER_SET(r4, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40044) sendmsg$auto_TIPC_NL_NET_SET(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xb0, r5, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x9b, 0x1, 0x0, 0x1, [@typed={0x8, 0x45, 0x0, 0x0, @fd=r1}, @generic="d757940a103d2f8f55454d5a4ab9fe305b43dc2d043f40e3e0472e08a88d70bb9391393bc7f4025904cdc21e97d1208c3d358b4f6ac4127b30bd317ce54416d7d8f1a3b96e037f1b9201cdebe65482eef75966d50ee01274599851eef3a9c827af7ccbc8a71af8aa267ff27c3ace5554f7431e2b3e116d85ed4c1d0859d0c5eaa3ea0ceaed72735d2b7359b663e519"]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x80}, 0x24004000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk\x00', 0x100, 0x0) 3m16.401697118s ago: executing program 1 (id=4765): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000009c0), 0x2001, 0x0) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r0, 0x83c0550b, 0x0) 3m16.283645639s ago: executing program 1 (id=4759): r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0\x00', 0x2, 0x0) ioctl$auto_MEMERASE64(r0, 0x40104d14, &(0x7f0000000040)={0x100000006, 0xa00000000010000}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) r1 = socket(0x1d, 0x2, 0x7) bpf$auto_BPF_MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)=@bpf_attr_11={0x5, 0x1, 0x204, 0x0, 0x3, 0x10000, 0xb8}, 0x8) r2 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$auto(r1, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x2}}, 0x6a) connect$auto(0x3, &(0x7f00000018c0)=@can, 0x18) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182b02, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xe6e43, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x20000, 0x0) prctl$auto(0x3e, 0xfffffffffffffffd, 0x0, 0x1, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) readv$auto(0x3, 0x0, 0x5) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x1f40) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) r5 = semctl$auto_GETPID(0x0, 0x2e3, 0xb, 0x10) prctl$auto(0x35, 0x0, 0x8, 0x0, 0x0) syz_open_procfs$namespace(r5, &(0x7f0000000480)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/uts\x00') 3m15.283270475s ago: executing program 1 (id=4760): r0 = socket(0x2c, 0x80003, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000100), r1) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), r3) sendmsg$auto_ETHTOOL_MSG_MM_SET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r5, 0xc3e, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0x64}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0xa}, @ETHTOOL_A_MM_VERIFY_ENABLED={0x5, 0x7, 0x1}, @ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0x1ff}, @ETHTOOL_A_MM_VERIFY_ENABLED={0x5, 0x7, 0x1}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0x800}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0x3}, @ETHTOOL_A_MM_PMAC_ENABLED={0x5, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8801}, 0x20000040) sendmsg$auto_OVS_DP_CMD_SET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) landlock_restrict_self$auto(r3, 0x8) mmap$auto(0x0, 0x4020005, 0xe3, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x6, 0x0, 0x0, 0x0) read$auto(r6, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x80000000, 0x7) prctl$auto_PR_SET_SECCOMP(0x16, 0x9, 0x15f, 0x8, 0x1) epoll_create1$auto(0x0) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) 2m59.649758714s ago: executing program 33 (id=4760): r0 = socket(0x2c, 0x80003, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44040}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0x1c}}, 0x4000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000100), r1) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000240), r3) sendmsg$auto_ETHTOOL_MSG_MM_SET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, r5, 0xc3e, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0x64}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0xa}, @ETHTOOL_A_MM_VERIFY_ENABLED={0x5, 0x7, 0x1}, @ETHTOOL_A_MM_TX_MIN_FRAG_SIZE={0x8, 0x5, 0x1ff}, @ETHTOOL_A_MM_VERIFY_ENABLED={0x5, 0x7, 0x1}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0x800}, @ETHTOOL_A_MM_VERIFY_TIME={0x8, 0x9, 0x3}, @ETHTOOL_A_MM_PMAC_ENABLED={0x5, 0x2, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x8801}, 0x20000040) sendmsg$auto_OVS_DP_CMD_SET(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) landlock_restrict_self$auto(r3, 0x8) mmap$auto(0x0, 0x4020005, 0xe3, 0xeb1, 0x401, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x6, 0x0, 0x0, 0x0) read$auto(r6, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x80000000, 0x7) prctl$auto_PR_SET_SECCOMP(0x16, 0x9, 0x15f, 0x8, 0x1) epoll_create1$auto(0x0) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, 0x0) 2m42.904322142s ago: executing program 4 (id=4846): openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00'}) bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x8000000000000001, 0x9, 0x5, 0xf870e9f, 0x7, 0x8}, 0x9) 2m42.75770294s ago: executing program 4 (id=4847): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex, r0, 0x5a, 0x9, r0, @relative_id=0x5, 0x80}, 0x2) ioctl$auto_TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000200)=0xfffffff6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.10/usb29/rx_lanes\x00', 0x4a502, 0x0) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) writev$auto(0x3, &(0x7f00000000c0)={0x0, 0x710f}, 0x6) write$auto(r2, &(0x7f00000003c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x14\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\xf8B^`\xf8\xc2\x0e\xfc>\xa1\xc5\x1dc\xb5S\xb0eX\xba\xe2\xb8\x17\xd1?\xec\xa3Rc2U\xc2OD\x1cl\xc6\xf0,4\x84A\x8f\xa0\xecJ\xb7\xfcnDO\n[^\xfc\xee\xf4\x98\xb3:K\x05\xd6ElP\xb1\xdc\xa2cg\xafENM\xb2\x1e\xfe\x0f}\xba\x83\x00\x81\x1at\xbf\x9ezF+x\xec\xe1`Qfm:\xfd\xeek\xa6#\xde\x16\x8f\xe9\xe9\xccbP\xb2z\xe1\xed\x97\x11\xaa\xea@\xee:\r\xb8\xe5\xd9CNG\x94\xe5\xcf\xfc3\xc7Z8\x03\x00\x00\x00\xc9\xe2ny\xa7\xd4\xb5A\x8e\xe2\x87\xf0\x17\x90%c\x1dE\xb1j2\x13\x10\xc2\x98\xeak\xa8\x10\xa0\x0f\xe8\x828\"9\xc1\xf2\xb6\x18\x9atD\xf13\xb2+$\x06q\xd6\x8e\xc18\x85\xd2\xd2\x1f\x97\x1d\xd7\x88\"\x01w\xaa\\\f\x98\xbf\xff\xeb\xceg\xa7\x8e\x84B\x7fn\xddu\xe0i\xd3\xf8\x8e\xf4\x111\x86\xfd\xcb\xa1\xd41\x8cI\xe0\xfa\xb3/(s\xd6\xd8\xcdCr\xf5MZ\xb8\xd4\x97\xae1\xc23ph\x84-@\xd4N_\n\xef\x86\x93T\\x\xf2\xce \xfe\v2E\xcatr\x00\xe5\xd7\xb2\x13\xe6\xd8\xd0\xe1|f\xaa\xadX@!\xc2]\xf9\x80\x9a\x1d\xcbt;\xfew\x14\x92\xc27\xbf\xad\x10\xa4\x93\xcd\xdc\x89\xa15\xe7r\x85\xcc\xd2p?\xf2\x0f`+\xb2\xcb\xf1\xddXw\xd2}Is%x\xbbJx\xebo{\x80\xc6o\x9e\xb2\"\x1c\vzL\"\x880|\v\xe0N\x8f\xd6\x8a\xaf', 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x1, 0x39bb, 0xfffffffd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x102, 0x0) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) sendfile$auto(0x3, r5, 0x0, 0x400000000006) swapon$auto(&(0x7f00000000c0)='/dev/ram5\x00', 0x0) lseek$auto(0x3, 0x2, 0x4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0xc034, 0xeb4, 0xfffffffffffffffa, 0x8000) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(r6, 0xc0f85403, &(0x7f0000000140)={{0x3, 0xffffff2c, 0x10001, 0x8, 0xffffff98}, 0x6, 0x8000, "75587f3f8cab0038cec94a366679d5e614d8fa9131d880b065ef33b4089790ea37afdda6b3942c1b05a4a746bddaa3c3e9416ff0768df32d020dadf60009e0bb", "f43abe13bd78888829019ad764acf6afa95e59d326d57e6c23c991a60f3d48fd32dbb998b40accadd0101b1717ab98639d7023f36c921c06f88f8ae8c00000ea55f4bd2067c7d292a2e01b6ffb274267", 0x8aa530, 0xc, 0x7, 0xbe, 0x1, "2e6fcbf9448f0002000000000000000000000900"}) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) 2m40.501613749s ago: executing program 4 (id=4851): mmap$auto(0x0, 0xe983, 0xa40b, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r0, 0x40305828, 0x0) 2m40.370436986s ago: executing program 4 (id=4853): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) socket(0x10, 0x2, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x2ff, 0x2, 0x7}]}) (async) mmap$auto(0x3, 0x20007, 0xdc, 0xeb1, 0x401, 0x8002) mmap$auto(0x0, 0x420009, 0x80000000000000e1, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) chmod$auto(&(0x7f0000000000)='./file0\x00', 0x6) (async) r3 = socket(0x200000000000011, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) (async) capset$auto(0x0, 0x0) (async) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r4, 0x2, 0x4) (async) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) (async) dup2$auto(0x0, 0x3) ioctl$sock_SIOCGIFINDEX(r3, 0x89b0, &(0x7f0000000140)={'vlan0\x00'}) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x10000}, 0x7, 0x0, 0x6, 0xb}, 0xfff}, 0x8, 0x311) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ieee80211/phy1/statistics/dot11ACKFailureCount\x00', 0x8800, 0x0) 2m39.91474084s ago: executing program 4 (id=4855): openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) io_uring_setup$auto(0x9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00'}) bpf$auto(0x2, &(0x7f0000000500)=@bpf_attr_11={0x5, 0x8000000000000001, 0x9, 0x5, 0xf870e9f, 0x7, 0x8}, 0x9) 2m39.877973651s ago: executing program 4 (id=4856): syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x88000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) lseek$auto(r3, 0x3, 0x3) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x11e, 0x1, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-subdev1\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0845658, r5) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) setuid$auto(0x800000000008) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_TCFLSH2(r2, 0x8924, 0x0) sendmsg$auto_IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000040) 2m24.430661218s ago: executing program 34 (id=4856): syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0xb, 0xd, 0xfffffffd, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xfffffffc}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x88000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) lseek$auto(r3, 0x3, 0x3) mmap$auto(0x0, 0x400008, 0x36, 0x1009b72, 0x2, 0x8000) mprotect$auto(0x0, 0x8000000000000001, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r4 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r4, 0x11e, 0x1, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r5 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/v4l-subdev1\x00', 0x0, 0x0) ioctl$auto(0x3, 0xc0845658, r5) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) setuid$auto(0x800000000008) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_TCFLSH2(r2, 0x8924, 0x0) sendmsg$auto_IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYRESOCT=r6, @ANYRESDEC=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000040) 7.032656707s ago: executing program 0 (id=5457): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r0, 0x5423, 0xffffffffffffffff) sendmsg$auto_GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54}, 0x894) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800008000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x8, &(0x7f0000000140)={0x1, 0x1, 0x9, 0x210001, 0xc, 0xc05, 0xffffffffffffffff, [0x7fd, 0x1001, 0x3], {0x9, 0x3, 0x6, 0x0, 0x4, 0x895, 0x3fdc, 0x70f, 0x5}, {0x7, 0x1d11, 0x54ed, 0x0, 0x101, 0xff, 0x7, 0xa, 0xb}}) sendmsg$auto_NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="000329bd7000fedbdf250900000008000c000100008008000300", @ANYRES32, @ANYBLOB="08002c000001000008001d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000828}, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x44010) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x3}, 0x3ef3}, 0x3, 0x0) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bpq0/ifindex\x00', 0xa022, 0x0) bpf$auto_BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=@test={r0, 0xffff, 0x2, 0x8, 0x0, 0xffffffffffffffff, 0x5, 0xfffffffd, 0x6, 0x6, 0x9, 0xa98, 0x80, 0x800, 0x200}, 0x3) request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000000)='!&$$\x00', &(0x7f0000000040)='^\x00', &(0x7f0000000080)='/dev/ppp\x00', 0xfffffffffffffff8) r4 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/stats\x00', 0x0, 0x0) pread64$auto(r5, 0x0, 0x8, 0x7fff) ioctl$auto_SNDRV_PCM_IOCTL_PVERSION(0xffffffffffffffff, 0x80044100, &(0x7f0000000240)) pwrite64$auto(r4, 0x0, 0x4, 0x3) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_min_pages_to_scan\x00', 0x88282, 0x0) sendfile$auto(r6, r6, 0x0, 0x1) pwrite64$auto(r3, &(0x7f00000000c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x7ffd, 0xe) 6.539154365s ago: executing program 0 (id=5452): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r1 = fsopen$auto(0x0, 0x1) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0xd73, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) fanotify_mark$auto(r1, 0xf71, 0x4, r2, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES8, @ANYBLOB="06ff010000000000007809dc81ef9f55e170dd146797b2416d4b79961aeb49f961fcb1b481fe90da4b43d3611500c4ceaa9258fdba813c209e15348835f2007616d84ac4713e1bcc05defa240a546547c21b0ff4c3d65df3ae4c4b5d2504859e5ce346cf9eb97568b86871b9290513c983b903a0784bc668ecfb409f5c5957a96c086ab3bd4f1aae318f39949aaa3f559d1afda4660e61a20f1b3aa134148c12dbaef2724b0db179fc2c99c7d64f386b834bd18bd9783a073c4e2f7853", @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x18e5) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio1\x00', 0x6102, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) 5.623357162s ago: executing program 0 (id=5455): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) landlock_restrict_self$auto(r0, 0xb) madvise$auto(0x200000, 0x20499d, 0x9) 5.287544534s ago: executing program 3 (id=5459): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x14f602, 0x0) ioctl$auto_VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f00000000c0)=r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_STOP_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002b9b617ff7bc552f4b00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040004) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x400007, 0xde, 0x9b72, 0xffffffffffffffff, 0x0) r7 = socket(0x11, 0x3, 0x2) getsockopt$auto(r7, 0x107, 0x14, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r6, 0x4068aea3, &(0x7f0000000440)={0x81, 0x0, [{0x5, 0x7}]}) sendmsg$auto_NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="18000000eed857e9369379a01406799f4bc8e4e03147593f1a52f9b569251e3ea54097a8c61c767369dfdc6c5b5152f1", @ANYRES16=r3, @ANYBLOB="000127bd7000fbdbdf253200000004000b00"], 0x18}, 0x1, 0x0, 0x0, 0x8840}, 0x800) r9 = setfsuid$auto(0xee00) setresuid$auto(r9, 0x0, r9) ioprio_set$auto(0x3, r9, 0x4b34) r10 = getpgrp(0xffffffffffffffff) shmctl$auto_SHM_UNLOCK(0x7, 0xc, &(0x7f0000000440)={{0xef, 0x0, 0xee01, 0x0, 0x10000, 0x3, 0x100}, 0xffff, 0x8, 0x6b50c0a, 0x8, @raw=0x5, @inferred, 0xfffb, 0x0, &(0x7f0000000340)="a3edd2e7a9ec67a49291783cb8b918b58669bb316dd6ecb28a9978cc28ffbdbfe484ed69", &(0x7f0000000380)="81e0a3308c55f4930aabb77525e6ca5b6f1e9d24727472b7cd668e2fcba4079b42089148c58aafcd86c867ca55f60b31611f7d54ffffffffffffffffc06da05e2dde3d11b826de0ddcab1814218a6492fd472f7f0bcdf90f511913e574f6eaf4b369a3381446720f9b3aae435c71dc45aced3bb0c63e843af9a8e2d4e7874852fa8dae96e2b5ac9f92a6ef71"}) sendmsg$auto_NL80211_CMD_REMOVE_LINK(r1, &(0x7f00000021c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002180)={&(0x7f0000002200)=ANY=[@ANYBLOB="a81c0000", @ANYRES16=r3, @ANYRES8=r1, @ANYRES32, @ANYBLOB="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", @ANYRES8=r4, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="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", @ANYRES32=r11, @ANYBLOB="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"], 0x1ca8}, 0x1, 0x0, 0x0, 0x4040001}, 0x881) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(r0, 0x0, 0x10007c) timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0x6) timer_settime$auto(0x0, 0x801, &(0x7f0000000000)={{0xa6, 0x400000000008}, {0x0, 0x8000003}}, 0x0) mmap$auto(0x0, 0x202000b, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 5.053695691s ago: executing program 5 (id=5460): read$auto(0xffffffffffffffff, 0x0, 0x20) socket(0x1d, 0x2, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x37, 0xfffffffffffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x1000000009, 0x10001, 0x6, 0x400, 0x7ffffffb, 0x5, 0xdd79, 0x10000, 0x3, 0x104}) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x9, 0x6, 0xffffffffffffffff, 0x7fffffffffffffff, 0xf20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr12/tx_queue_len\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zl10353/parameters/debug\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) unshare$auto(0x40000080) mmap$auto(0x7ffc, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) 3.733180281s ago: executing program 5 (id=5461): r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x210882, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x21, 0x2, 0x2) r2 = epoll_create$auto(0x8800001) epoll_ctl$auto(r2, 0x1, r1, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fsconfig$auto_HIDEPID_NOT_PTRACEABLE(r3, 0x1, &(0x7f0000000140)='MAC80211_HWSIM\x00', &(0x7f0000000300), 0x4) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) write$auto(r0, &(0x7f0000000040)='7\x00^\xa0\x06\xe7\x01\x00\xff\x03\x00\x00\x00F\x00'/26, 0x809) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002740), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r4, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="d10c4000", @ANYRES16=r5, @ANYBLOB="09032abd7000fedbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, r6, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x24, r8, 0xd0d58b333228212f, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_SCAN_SUPP_RATES={0x8, 0x7d, 0x0, 0x1, [@nested={0x4, 0x2c}]}]}, 0x24}}, 0x0) ioctl$auto_XFS_IOC_SWAPEXT(r3, 0xc0c0586d, &(0x7f0000000300)={0x8000000000000000, @raw=0x7, @raw=0x40, 0x50000000000, 0x7, '\x00', {0x6, 0x5, 0xda, 0xee00, 0xffffffffffffffff, 0x1, 0x69f, 0x5, {0xf9c, 0x7}, {0x8, 0xc}, {0x9, 0xc}, 0x838, 0x7, 0x6, 0x4, 0x4, 0xfff7, 0x3, 0x40, 0x10, 0x4, '\x00', 0x1000, 0xfff, 0xffff, 0xc}}) fcntl$getown(r0, 0x9) lstat$auto(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0xfffffffffffffc01, 0xa, 0xffffffff00000000, 0x2, 0xee00, 0xee01, 0x0, 0x5, 0x5, 0x3, 0x1, 0x9, 0x72, 0x4, 0x1, 0xff, 0x2}) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r3, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000800)={0x3b0, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x81}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x34d, 0x2b, 0x0, 0x1, [@typed={0x14, 0x16, 0x0, 0x0, @ipv6=@mcast2}, @generic="85ab58a6fd3dfbe0f1b8473ff3b0d114fda23c82c5ca23e00c06795563c07e2543a3ac229fb91004a453b2a2540cafc38070179581b8046ca95f78dbf85c8a331d9194465a16734fe14b62e71eb3425e89c3c342e62b07b18f2a2aa8aca8bf8ba71ed9aadea5b9ab58cc66f52a0c3a6ff1580ea92f59fe564407a764716e3a65d5545d233ea6a909e402e445b91c1a519d361dd1ee338421807853ad995aa827c090d8a2cb8f6bb7ed9e1f10076fab19d31da9c9b6687e0bb1365366a5656368b051dcb3b61d895c9447e8c7d88d89", @typed={0x8, 0xd9, 0x0, 0x0, @uid=r10}, @generic="831af9237e7a0bd5bd03c3c2ecaf2dfee90cc68d1c537b01aa530441c26f086e2a1f9add18939f83bcc6d0a56b8ae1523e90392a24ed2602bd792eaa942b2c9465f4d03f7f78a6ccffb39d8a8a672c0e6c50444055a6ba57368355cb54414024e5da46d05d0d00f5f6b48570e667b31f8a2001ba76edb336025b12d243ff98dc2f5ca5828d049458b270c4f3369e7b3c40adaa8d0dc167eb462e75a23a2bc6d0a5eda971ad3cd472d13c39f3ed565542bcc358f37f10d0e26450914879f18d3c5745", @typed={0x8, 0x72, 0x0, 0x0, @uid=r11}, @nested={0xe7, 0x132, 0x0, 0x1, [@nested={0x4, 0xbd}, @nested={0x4, 0x26}, @generic="1d1c124bf41a03d2b96815a99b55b1e640f72a3c107eb85af43c05d2013b5e0dffc7e85577ee6897b80b7c578b018d0d5fb9244d22442047337cc188035110deb43cd90839d2711e3b803adb41eb54369e1f9dbf3595c546cd500009324c35383d26da7c5058cab00eaceb2712289c047c8bf72c938a1f029da5c4eb81397071448a3cb415c43edee88c07d215fbf0e287ad1061b0216a2bbbc2f2ffaf10045e567d0455137269e302a5ee1f63f04f6ea8a3c28d78ba49", @generic="fa6dd18f753842eb92fb6aa414c1e2d529b6191c2fb6f54cf1b67e687bff82a81e817665"]}, @typed={0xa4, 0x150, 0x0, 0x0, @binary="8869809bab609151c5a2a2c3c03b616a316b49aa9926196f16c96fb4d3b71ea2c585b16347d97b298c2bd4b5fe96ed60796f422543586eb82f89494cdfb591aa516ec4d1d27ab63fe6c9c5ef8f5bd1f9897567f525b87822f00647982e3b2d3bf6428a9fa745a78af6cd10abe87b9edd9cdc56174ebe9ead56ad6ba9f54526fcd8a6c126b97de67b292bd80d30d9b49599a770c4d6b9b218ba95d651f265adcc"}, @nested={0x8, 0x2d, 0x0, 0x1, [@typed={0x4, 0x7c}]}]}, @NL802154_ATTR_SEC_ENABLED={0x5}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x80}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xfffffffc}, @NL802154_ATTR_SCAN_DONE_REASON={0x5, 0x25, 0xd7}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x3eb}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x8000}, 0x4004004) read$auto(r0, &(0x7f0000000080)='+&/\x00', 0x4) mremap$auto(0x110c22ffff, 0x4, 0x4, 0x7, 0x100000000) 3.732647544s ago: executing program 3 (id=5463): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) bpf$auto_BPF_TASK_FD_QUERY(0x14, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r1, 0x10e, 0x3, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) r3 = socket(0x3, 0x3, 0x4) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000300), r2) read$auto(r2, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="30002dbd7000ffdbdf2508000000"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x20048014) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'pimreg1\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xf4, r4, 0x2, 0x70bd2a, 0x25dfdbfb, {}, [@NET_SHAPER_A_HANDLE={0x1c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0xfffffffb}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x53c8}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x40000000}]}, @NET_SHAPER_A_HANDLE={0x2c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x800}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x5}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r5}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x3}]}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}, @NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x2}]}, @NET_SHAPER_A_HANDLE={0x2c, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x408}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x6}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0xfffffffd}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1ff}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1fae}]}, @NET_SHAPER_A_HANDLE={0x34, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0xff}, @NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x1}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x9}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x6}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x10}, @NET_SHAPER_A_HANDLE_SCOPE={0x8, 0x1, 0x1}]}, @NET_SHAPER_A_HANDLE={0x4}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4008014}, 0x24004841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="10"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.722837734s ago: executing program 0 (id=5469): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x11, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x4002008d, 0x1, 0x2, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001e, 0x7, 0xa, 0x9, 0x2, 0x6]}, 0x0) 3.499667085s ago: executing program 6 (id=5464): mmap$auto(0x6, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x400000000008004) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000002c0), 0x163202, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) prctl$auto_PR_SET_MM_START_BRK(0x4, 0x6, 0x0, 0x5, 0x3) r1 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x90802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x404c884}, 0x64044890) epoll_ctl$auto_EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x3, 0x40}) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) mmap$auto(0x9, 0xfffffffffffffffb, 0x2005a09b8d1, 0x112, r0, 0x40000000003) socket(0x1e, 0x5, 0x0) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, 0x0) close_range$auto(0x2, r0, 0xe10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x3, 0x6], {0xd74c, 0x10000, 0x10000001, 0x29f, 0x6, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10000, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(0xffffffffffffffff, 0x40043d14, 0x0) 3.383797905s ago: executing program 5 (id=5465): close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fcntl$auto_F_NOTIFY(0xffffffffffffffff, 0x402, 0x9000) r1 = fsopen$auto(0x0, 0x1) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0xd73, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) shutdown$auto(0x200000003, 0x2) madvise$auto(0x0, 0x2003f2, 0x15) fanotify_mark$auto(r1, 0xf71, 0x4, r2, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES8, @ANYBLOB="06ff010000000000007809dc81ef9f55e170dd146797b2416d4b79961aeb49f961fcb1b481fe90da4b43d3611500c4ceaa9258fdba813c209e15348835f2007616d84ac4713e1bcc05defa240a546547c21b0ff4c3d65df3ae4c4b5d2504859e5ce346cf9eb97568b86871b9290513c983b903a0784bc668ecfb409f5c5957a96c086ab3bd4f1aae318f39949aaa3f559d1afda4660e61a20f1b3aa134148c12dbaef2724b0db179fc2c99c7d64f386b834bd18bd9783a073c4e2f7853", @ANYRESDEC=r2], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x18e5) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/audio1\x00', 0x6102, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D0p\x00', 0x4000, 0x0) 2.996729979s ago: executing program 6 (id=5466): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x11, 0x3, 0x0) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) io_uring_setup$auto(0x89, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) select$auto(0x10, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x4002008d, 0x1, 0x2, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001e, 0x7, 0xa, 0x9, 0x2, 0x6]}, 0x0) 2.996632878s ago: executing program 3 (id=5467): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x11, &(0x7f0000000000)=@batch={0xfffffffffffffffb, 0x44, 0x2, 0x9, 0x1, 0xffffffffffffffff, 0xa, 0x6}, 0xcf) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8800}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/tty0\x00', 0x400100, 0x0) write$auto_console_fops_tty_io(r1, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x450982, 0x0) r2 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto(r2, 0x80044940, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 2.521431877s ago: executing program 0 (id=5468): mmap$auto(0x0, 0x4, 0x2, 0x17, 0xffffffffffffffff, 0x0) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) mq_unlink$auto(0x0) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x2, 0x8004) close_range$auto(r0, r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2503, &(0x7f00000002c0)={0x0}, 0x3, 0x0, 0x3, 0x3a32182}, 0x4}, 0x3, 0xc) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) 2.208634654s ago: executing program 5 (id=5470): mmap$auto(0x6, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x400000000008004) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000002c0), 0x163202, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) prctl$auto_PR_SET_MM_START_BRK(0x4, 0x6, 0x0, 0x5, 0x3) r1 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x90802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x404c884}, 0x64044890) epoll_ctl$auto_EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x3, 0x40}) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) mmap$auto(0x9, 0xfffffffffffffffb, 0x2005a09b8d1, 0x112, r0, 0x40000000003) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, 0x0) r4 = socket(0x1e, 0x5, 0x0) setsockopt$auto(0x3, 0x6, 0x4, 0xfffffffffffffffc, 0xa) mmap$auto(0x2, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8) close_range$auto(0x2, r0, 0xe10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video41\x00', 0x400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0x3}, 0x4}}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram2/partscan\x00', 0x400000, 0x0) connect$auto(r4, &(0x7f00000001c0)=@in={0x2, 0x3, @private=0xa010100}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x3, 0x6], {0xd74c, 0x10000, 0x10000001, 0x29f, 0x6, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10000, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x0, 0x0) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40043d14, 0x0) 2.072717444s ago: executing program 3 (id=5471): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) landlock_restrict_self$auto(r0, 0xb) madvise$auto(0x200000, 0x20499d, 0x9) 1.528716059s ago: executing program 0 (id=5472): read$auto(0xffffffffffffffff, 0x0, 0x20) socket(0x1d, 0x2, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x37, 0xfffffffffffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x1000000009, 0x10001, 0x6, 0x400, 0x7ffffffb, 0x5, 0xdd79, 0x10000, 0x3, 0x104}) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x9, 0x6, 0xffffffffffffffff, 0x7fffffffffffffff, 0xf20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr12/tx_queue_len\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zl10353/parameters/debug\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) unshare$auto(0x40000080) mmap$auto(0x7ffc, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) 1.528448707s ago: executing program 5 (id=5473): mmap$auto(0x0, 0x2000a, 0x20000000000df, 0x10, 0x40000000000a5, 0x1d) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) io_uring_setup$auto(0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f80, 0x0) r1 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) sendto$auto(r1, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@tipc=@nameseq={0x1d, 0x1, 0x2, {0x2, 0x0, 0x4}}, 0x36) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000140)={0x14, r3, 0x1, 0x71bd25, 0x25df9bfe}, 0x14}, 0x1, 0x0, 0x0, 0x40dc}, 0x0) write$auto(r1, &(0x7f0000000180)='\xafEev.audio1\x00VI\xa3\xaa\'\xdbV\xd4i\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\xe9\x04\x1f\xd2J\x15C*\xff\x83\x1e\xab\xf2+\x84\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\x05\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x95^\x8aO\xab\"4\x8a\xbbY8@Z5`vm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\xbdC\x16\xfbm\xbf\xc7\x17\xbe\x01\x98\xd7lD\x97)\x9c\xfaK\xdf\x18\x8f>f\xb8&\x95\x95\x03$U\xd9Z7/%*\xb6b9-\n\xccWwG\xed\x82\x83\xc3{\x89\xe7\xb7\xf3\xb7B4\xe2\x9c~=\\\x01\xc3l8]\xeaK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc.l\'\xcb\xc8\xd7\x9f\x03\xad\x86\x0fv', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x1, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x5, 0x5, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) write$auto(0x3, 0x0, 0x800) 1.45707882s ago: executing program 6 (id=5474): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002800)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x810) (fail_nth: 1) 986.018254ms ago: executing program 6 (id=5475): recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) 839.43451ms ago: executing program 6 (id=5476): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) msync$auto(0x7, 0x8, 0x400000004) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), 0xffffffffffffffff) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000001140)="15", 0x1) openat$auto_nst_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$auto_WG_CMD_SET_DEVICE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002800)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x810) 607.696231ms ago: executing program 6 (id=5477): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r0, 0x0, 0x20) socket(0x1d, 0x2, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200440c4}, 0x40048c5) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x37, 0xfffffffffffffffe, 0x80000001, 0x0, 0x0, 0x0, 0x1000000009, 0x10001, 0x6, 0x400, 0x7ffffffb, 0x5, 0xdd79, 0x10000, 0x3, 0x104}) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x9, 0x6, 0xffffffffffffffff, 0x7fffffffffffffff, 0xf20) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr12/tx_queue_len\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/hold_time\x00', 0x2, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zl10353/parameters/debug\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) unshare$auto(0x40000080) mmap$auto(0x7ffc, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) 218.513006ms ago: executing program 3 (id=5478): r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000009c0), 0x2001, 0x0) ioctl$auto_USB_RAW_IOCTL_EPS_INFO(r0, 0x83c0550b, 0x0) 51.919001ms ago: executing program 3 (id=5479): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x11, 0x3, 0x0) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) r1 = io_uring_setup$auto(0x89, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="da010000", @ANYRES16=r2, @ANYBLOB="020029bd7000fedbdf2559000000080035010000000071004e01a75ee966bb4e07e64012e5c11e03d05f852c67d8e238c861023c06a39deeff4c1298de726063c7671f306af2bf11901ff71a2cf2ab13136fddbf22df1a418303dd8deaf09b5fe37cbab0c73636adfb6a0ff4e3f693ba3a018850ce1dac063865a5368d15450e4c7da5b9ac28ba0000000400e2005600150184862451deafea6f76a8053574615face8d827b86d00e33737fa83129736592ac0dbc7bc08fd4271ec97b09e7568e64ab863e9ff94e41a8397a917762c48628aeca69b9708db71ae7ad5866cdbbb5cb4431c00001c00e700a683deda8da05395c7785d540971eb30c83838cdb45d036b1100f900cc47c79bf532aa6b4b04b8f10c0000000c0058000500000000000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000090}, 0x4891) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) 0s ago: executing program 5 (id=5480): mmap$auto(0x6, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x400000000008004) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000002c0), 0x163202, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb2, 0xffffffffffffffff, 0x8000) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) prctl$auto_PR_SET_MM_START_BRK(0x4, 0x6, 0x0, 0x5, 0x3) r1 = openat$auto_msft_opcode_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci7/msft_opcode\x00', 0x90802, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000200)=ANY=[@ANYRESOCT, @ANYRES16=r3, @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x404c884}, 0x64044890) epoll_ctl$auto_EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000080)={0x3, 0x40}) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, 0x0) mmap$auto(0x9, 0xfffffffffffffffb, 0x2005a09b8d1, 0x112, r0, 0x40000000003) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, 0x0) r4 = socket(0x1e, 0x5, 0x0) ioctl$auto_UBI_IOCDET(r0, 0x40046f41, 0x0) mmap$auto(0x2, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8) close_range$auto(0x2, r0, 0xe10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video41\x00', 0x400, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x1, {{0x0, 0x3}, 0x4}}, 0x6a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram2/partscan\x00', 0x400000, 0x0) connect$auto(r4, &(0x7f00000001c0)=@in={0x2, 0x3, @private=0xa010100}, 0x50) io_uring_setup$auto(0x5b, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x4, 0x8, 0xffffffffffffffff, [0x0, 0x3, 0x6], {0xd74c, 0x10000, 0x10000001, 0x29f, 0x6, 0xfff, 0x101, 0x6, 0x2}, {0xfb, 0x1, 0x10000, 0x7, 0x1, 0x40, 0x176c5, 0x400005, 0x100000005}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x0, 0x0) r5 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r5, 0x40043d14, 0x0) kernel console output (not intermixed with test programs): s_openat+0x12d/0x210 [ 1321.935793][T27868] ? __pfx___x64_sys_openat+0x10/0x10 [ 1321.935846][T27868] do_syscall_64+0x106/0xf80 [ 1321.935875][T27868] ? clear_bhb_loop+0x40/0x90 [ 1321.935910][T27868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1321.935945][T27868] RIP: 0033:0x7fe92bd9c819 [ 1321.935969][T27868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1321.935998][T27868] RSP: 002b:00007fe92cc1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1321.936027][T27868] RAX: ffffffffffffffda RBX: 00007fe92c015fa0 RCX: 00007fe92bd9c819 [ 1321.936047][T27868] RDX: 0000000000080802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1321.936066][T27868] RBP: 00007fe92be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1321.936083][T27868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1321.936100][T27868] R13: 00007fe92c016038 R14: 00007fe92c015fa0 R15: 00007ffc78cc6678 [ 1321.936139][T27868] [ 1322.733584][ T30] audit: type=1800 audit(1775517609.224:5): pid=27874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4826" name="dbroot" dev="configfs" ino=102264 res=0 errno=0 [ 1322.948653][T27887] zram: Cannot change disksize for initialized device [ 1323.560544][T27903] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1324.491445][T27914] FAULT_INJECTION: forcing a failure. [ 1324.491445][T27914] name failslab, interval 1, probability 0, space 0, times 0 [ 1324.524308][T27914] CPU: 1 UID: 0 PID: 27914 Comm: syz.4.4838 Tainted: G L syzkaller #0 PREEMPT(full) [ 1324.524348][T27914] Tainted: [L]=SOFTLOCKUP [ 1324.524357][T27914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1324.524372][T27914] Call Trace: [ 1324.524381][T27914] [ 1324.524391][T27914] dump_stack_lvl+0x100/0x190 [ 1324.524436][T27914] should_fail_ex.cold+0x5/0xa [ 1324.524469][T27914] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1324.524508][T27914] should_failslab+0xc2/0x120 [ 1324.524540][T27914] __kmalloc_noprof+0xe0/0x850 [ 1324.524589][T27914] tomoyo_realpath_from_path+0xb6/0x690 [ 1324.524637][T27914] tomoyo_path_number_perm+0x23c/0x580 [ 1324.524670][T27914] ? tomoyo_path_number_perm+0x22e/0x580 [ 1324.524706][T27914] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1324.524778][T27914] ? find_held_lock+0x2b/0x80 [ 1324.524805][T27914] ? __fget_files+0x215/0x3d0 [ 1324.524832][T27914] ? hook_file_ioctl_common+0x146/0x410 [ 1324.524875][T27914] ? __fget_files+0x21f/0x3d0 [ 1324.524910][T27914] security_file_ioctl+0xd3/0x230 [ 1324.524946][T27914] __x64_sys_ioctl+0xb7/0x210 [ 1324.524990][T27914] do_syscall_64+0x106/0xf80 [ 1324.525017][T27914] ? clear_bhb_loop+0x40/0x90 [ 1324.525051][T27914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1324.525079][T27914] RIP: 0033:0x7f0cfb39c819 [ 1324.525103][T27914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1324.525129][T27914] RSP: 002b:00007f0cfc324028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1324.525156][T27914] RAX: ffffffffffffffda RBX: 00007f0cfb615fa0 RCX: 00007f0cfb39c819 [ 1324.525175][T27914] RDX: 0000200000000080 RSI: 00000000c0686611 RDI: 0000000000000004 [ 1324.525192][T27914] RBP: 00007f0cfc324090 R08: 0000000000000000 R09: 0000000000000000 [ 1324.525208][T27914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1324.525222][T27914] R13: 00007f0cfb616038 R14: 00007f0cfb615fa0 R15: 00007ffdaf42fc58 [ 1324.525259][T27914] [ 1324.525338][T27914] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1325.669001][T27933] zram: Cannot change disksize for initialized device [ 1325.929396][T27929] FAULT_INJECTION: forcing a failure. [ 1325.929396][T27929] name failslab, interval 1, probability 0, space 0, times 0 [ 1325.968020][T27929] CPU: 1 UID: 0 PID: 27929 Comm: syz.0.4842 Tainted: G L syzkaller #0 PREEMPT(full) [ 1325.968062][T27929] Tainted: [L]=SOFTLOCKUP [ 1325.968072][T27929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1325.968088][T27929] Call Trace: [ 1325.968098][T27929] [ 1325.968109][T27929] dump_stack_lvl+0x100/0x190 [ 1325.968161][T27929] should_fail_ex.cold+0x5/0xa [ 1325.968195][T27929] should_failslab+0xc2/0x120 [ 1325.968226][T27929] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1325.968262][T27929] ? genl_start+0x1e8/0x970 [ 1325.968293][T27929] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1aa/0x280 [ 1325.968337][T27929] genl_start+0x1e8/0x970 [ 1325.968374][T27929] __netlink_dump_start+0x60e/0x990 [ 1325.968408][T27929] genl_family_rcv_msg_dumpit+0x1e2/0x2e0 [ 1325.968446][T27929] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1325.968488][T27929] ? rcu_is_watching+0x12/0xc0 [ 1325.968529][T27929] ? __pfx_genl_start+0x10/0x10 [ 1325.968559][T27929] ? __pfx_genl_dumpit+0x10/0x10 [ 1325.968589][T27929] ? __pfx_genl_done+0x10/0x10 [ 1325.968623][T27929] ? bpf_lsm_capable+0x9/0x10 [ 1325.968651][T27929] ? security_capable+0x80/0x260 [ 1325.968687][T27929] genl_rcv_msg+0x471/0x800 [ 1325.968725][T27929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1325.968759][T27929] ? __pfx_ip_vs_genl_dump_dests+0x10/0x10 [ 1325.968808][T27929] netlink_rcv_skb+0x159/0x420 [ 1325.968839][T27929] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1325.968875][T27929] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1325.968921][T27929] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1325.968956][T27929] genl_rcv+0x28/0x40 [ 1325.968986][T27929] netlink_unicast+0x5aa/0x870 [ 1325.969021][T27929] ? __pfx_netlink_unicast+0x10/0x10 [ 1325.969051][T27929] ? __pfx___might_resched+0x10/0x10 [ 1325.969091][T27929] ? __lock_acquire+0x4a5/0x2630 [ 1325.969141][T27929] netlink_sendmsg+0x8b0/0xda0 [ 1325.969177][T27929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.969204][T27929] ? __import_iovec+0x1d2/0x640 [ 1325.969243][T27929] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1325.969278][T27929] ____sys_sendmsg+0x9e1/0xb70 [ 1325.969310][T27929] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1325.969343][T27929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1325.969394][T27929] ___sys_sendmsg+0x190/0x1e0 [ 1325.969432][T27929] ? __pfx____sys_sendmsg+0x10/0x10 [ 1325.969512][T27929] __sys_sendmsg+0x170/0x220 [ 1325.969540][T27929] ? __pfx___sys_sendmsg+0x10/0x10 [ 1325.969591][T27929] do_syscall_64+0x106/0xf80 [ 1325.969620][T27929] ? clear_bhb_loop+0x40/0x90 [ 1325.969654][T27929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.969683][T27929] RIP: 0033:0x7f63bb99c819 [ 1325.969706][T27929] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.969733][T27929] RSP: 002b:00007f63bc77e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1325.969760][T27929] RAX: ffffffffffffffda RBX: 00007f63bbc16090 RCX: 00007f63bb99c819 [ 1325.969779][T27929] RDX: 0000000000040010 RSI: 0000200000003a40 RDI: 0000000000000004 [ 1325.969795][T27929] RBP: 00007f63bc77e090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.969813][T27929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.969829][T27929] R13: 00007f63bbc16128 R14: 00007f63bbc16090 R15: 00007ffd0bb9ce88 [ 1325.969868][T27929] [ 1327.120887][T27949] Unable to find swap-space signature [ 1327.429594][ T30] audit: type=1800 audit(1775517613.944:6): pid=27947 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4848" name="dbroot" dev="configfs" ino=102510 res=0 errno=0 [ 1327.811575][T27958] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 960 with max blocks 29 with error 117 [ 1327.903146][T27958] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1327.903146][T27958] [ 1329.053220][T27986] mkiss: ax0: crc mode is auto. [ 1330.152229][ T30] audit: type=1800 audit(1775517616.564:7): pid=27999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.4858" name="dbroot" dev="configfs" ino=102599 res=0 errno=0 [ 1330.401989][T28009] netlink: zone id is out of range [ 1330.434706][T28009] netlink: zone id is out of range [ 1330.452939][T28009] netlink: zone id is out of range [ 1330.504560][T28009] netlink: zone id is out of range [ 1330.531538][T28009] netlink: zone id is out of range [ 1330.591173][T28009] netlink: set zone limit has 8 unknown bytes [ 1330.823426][T28013] zram: Cannot change disksize for initialized device [ 1331.075051][T28024] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1331.140123][T28024] FAULT_INJECTION: forcing a failure. [ 1331.140123][T28024] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1331.186863][T28024] CPU: 1 UID: 0 PID: 28024 Comm: syz.3.4864 Tainted: G L syzkaller #0 PREEMPT(full) [ 1331.186906][T28024] Tainted: [L]=SOFTLOCKUP [ 1331.186916][T28024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1331.186932][T28024] Call Trace: [ 1331.186941][T28024] [ 1331.186952][T28024] dump_stack_lvl+0x100/0x190 [ 1331.186999][T28024] should_fail_ex.cold+0x5/0xa [ 1331.187026][T28024] ? prepare_alloc_pages+0x16d/0x5f0 [ 1331.187062][T28024] should_fail_alloc_page+0xeb/0x140 [ 1331.187094][T28024] prepare_alloc_pages+0x1f0/0x5f0 [ 1331.187125][T28024] ? look_up_lock_class+0x55/0x120 [ 1331.187157][T28024] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1331.187207][T28024] ? __lock_acquire+0x4a5/0x2630 [ 1331.187255][T28024] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1331.187311][T28024] ? __pfx___might_resched+0x10/0x10 [ 1331.187364][T28024] ? up_write+0x290/0x4f0 [ 1331.187401][T28024] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1331.187434][T28024] ? policy_nodemask+0xed/0x4f0 [ 1331.187467][T28024] alloc_pages_mpol+0x1fb/0x550 [ 1331.187499][T28024] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1331.187539][T28024] alloc_pages_noprof+0x136/0x390 [ 1331.187571][T28024] __pmd_alloc+0x3b/0x950 [ 1331.187607][T28024] __handle_mm_fault+0xa9e/0x2b60 [ 1331.187651][T28024] ? mt_find+0x45e/0x8e0 [ 1331.187682][T28024] ? __pfx___handle_mm_fault+0x10/0x10 [ 1331.187725][T28024] ? __pfx_mt_find+0x10/0x10 [ 1331.187774][T28024] ? find_vma+0xbf/0x140 [ 1331.187802][T28024] ? __pfx_find_vma+0x10/0x10 [ 1331.187833][T28024] handle_mm_fault+0x36d/0xa20 [ 1331.187890][T28024] do_user_addr_fault+0x74c/0x12f0 [ 1331.187928][T28024] exc_page_fault+0x6f/0xd0 [ 1331.187957][T28024] asm_exc_page_fault+0x26/0x30 [ 1331.187984][T28024] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1331.188021][T28024] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1331.188048][T28024] RSP: 0018:ffffc90004a77b90 EFLAGS: 00050206 [ 1331.188070][T28024] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000001000 [ 1331.188088][T28024] RDX: ffff888034583d00 RSI: 0000000000000000 RDI: ffff8880386b6000 [ 1331.188106][T28024] RBP: ffff888034583d00 R08: 0000000000000001 R09: 0000000000000000 [ 1331.188124][T28024] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1331.188139][T28024] R13: 0000000000001000 R14: 0000000000000001 R15: 0000000000000001 [ 1331.188173][T28024] trace_user_fault_read+0x54e/0x8a0 [ 1331.188223][T28024] ? __pfx_tracing_mark_write+0x10/0x10 [ 1331.188261][T28024] tracing_mark_write+0xe9/0x3b0 [ 1331.188308][T28024] ? __pfx_tracing_mark_write+0x10/0x10 [ 1331.188346][T28024] vfs_writev+0x5ea/0xe10 [ 1331.188381][T28024] ? __pfx_vfs_writev+0x10/0x10 [ 1331.188408][T28024] ? find_held_lock+0x2b/0x80 [ 1331.188456][T28024] ? __fget_files+0x21f/0x3d0 [ 1331.188498][T28024] ? do_writev+0x28a/0x340 [ 1331.188521][T28024] do_writev+0x28a/0x340 [ 1331.188547][T28024] ? __pfx_do_writev+0x10/0x10 [ 1331.188581][T28024] do_syscall_64+0x106/0xf80 [ 1331.188609][T28024] ? clear_bhb_loop+0x40/0x90 [ 1331.188642][T28024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1331.188670][T28024] RIP: 0033:0x7f66fc59c819 [ 1331.188693][T28024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1331.188719][T28024] RSP: 002b:00007f66fa7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1331.188743][T28024] RAX: ffffffffffffffda RBX: 00007f66fc815fa0 RCX: 00007f66fc59c819 [ 1331.188762][T28024] RDX: 0000000000000008 RSI: 0000200000000100 RDI: 0000000000000003 [ 1331.188779][T28024] RBP: 00007f66fa7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1331.188795][T28024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1331.188812][T28024] R13: 00007f66fc816038 R14: 00007f66fc815fa0 R15: 00007fff34ae33a8 [ 1331.188849][T28024] [ 1333.130231][T28045] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4869'. [ 1333.346410][ T12] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1410 with max blocks 20 with error 117 [ 1333.384283][ T12] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1333.384283][ T12] [ 1333.472193][T28052] FAULT_INJECTION: forcing a failure. [ 1333.472193][T28052] name failslab, interval 1, probability 0, space 0, times 0 [ 1333.507818][T28052] CPU: 1 UID: 0 PID: 28052 Comm: syz.3.4870 Tainted: G L syzkaller #0 PREEMPT(full) [ 1333.507861][T28052] Tainted: [L]=SOFTLOCKUP [ 1333.507871][T28052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1333.507885][T28052] Call Trace: [ 1333.507895][T28052] [ 1333.507905][T28052] dump_stack_lvl+0x100/0x190 [ 1333.507951][T28052] should_fail_ex.cold+0x5/0xa [ 1333.507984][T28052] should_failslab+0xc2/0x120 [ 1333.508015][T28052] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1333.508060][T28052] ? __alloc_skb+0x140/0x710 [ 1333.508112][T28052] __alloc_skb+0x140/0x710 [ 1333.508149][T28052] ? __alloc_skb+0x5b7/0x710 [ 1333.508187][T28052] ? __pfx___alloc_skb+0x10/0x10 [ 1333.508236][T28052] netlink_alloc_large_skb+0x69/0x150 [ 1333.508269][T28052] netlink_sendmsg+0x680/0xda0 [ 1333.508301][T28052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.508328][T28052] ? __import_iovec+0x1d2/0x640 [ 1333.508366][T28052] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1333.508401][T28052] ____sys_sendmsg+0x9e1/0xb70 [ 1333.508434][T28052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1333.508475][T28052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1333.508525][T28052] ___sys_sendmsg+0x190/0x1e0 [ 1333.508564][T28052] ? __pfx____sys_sendmsg+0x10/0x10 [ 1333.508640][T28052] __sys_sendmsg+0x170/0x220 [ 1333.508668][T28052] ? __pfx___sys_sendmsg+0x10/0x10 [ 1333.508721][T28052] do_syscall_64+0x106/0xf80 [ 1333.508748][T28052] ? clear_bhb_loop+0x40/0x90 [ 1333.508782][T28052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1333.508810][T28052] RIP: 0033:0x7f66fc59c819 [ 1333.508834][T28052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1333.508860][T28052] RSP: 002b:00007f66fa7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1333.508887][T28052] RAX: ffffffffffffffda RBX: 00007f66fc815fa0 RCX: 00007f66fc59c819 [ 1333.508907][T28052] RDX: 0000000004000050 RSI: 0000200000000180 RDI: 000000000000000a [ 1333.508924][T28052] RBP: 00007f66fa7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1333.508941][T28052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1333.508957][T28052] R13: 00007f66fc816038 R14: 00007f66fc815fa0 R15: 00007fff34ae33a8 [ 1333.508991][T28052] [ 1334.771118][T28067] zram: Cannot change disksize for initialized device [ 1335.427261][T28078] netlink: zone id is out of range [ 1335.435303][T28078] netlink: zone id is out of range [ 1335.440791][T28078] netlink: zone id is out of range [ 1335.457041][T28078] netlink: zone id is out of range [ 1335.488290][T28078] netlink: zone id is out of range [ 1335.526770][T28078] netlink: set zone limit has 8 unknown bytes [ 1336.034429][T28088] Unable to find swap-space signature [ 1337.541305][T28109] zram: Cannot change disksize for initialized device [ 1339.997517][T28125] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1340.322256][T28133] zram: Cannot change disksize for initialized device [ 1340.749942][T28137] netlink: zone id is out of range [ 1340.775685][T28137] netlink: zone id is out of range [ 1340.781498][T28137] netlink: zone id is out of range [ 1340.804667][T28137] netlink: zone id is out of range [ 1340.811758][T28137] netlink: zone id is out of range [ 1340.862876][T28137] netlink: set zone limit has 8 unknown bytes [ 1342.486631][T28166] FAULT_INJECTION: forcing a failure. [ 1342.486631][T28166] name failslab, interval 1, probability 0, space 0, times 0 [ 1342.524369][T28166] CPU: 1 UID: 0 PID: 28166 Comm: syz.3.4901 Tainted: G L syzkaller #0 PREEMPT(full) [ 1342.524413][T28166] Tainted: [L]=SOFTLOCKUP [ 1342.524423][T28166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1342.524439][T28166] Call Trace: [ 1342.524448][T28166] [ 1342.524459][T28166] dump_stack_lvl+0x100/0x190 [ 1342.524504][T28166] should_fail_ex.cold+0x5/0xa [ 1342.524538][T28166] should_failslab+0xc2/0x120 [ 1342.524568][T28166] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1342.524608][T28166] ? alloc_empty_file+0x55/0x1c0 [ 1342.524642][T28166] ? __pfx_stack_trace_save+0x10/0x10 [ 1342.524677][T28166] alloc_empty_file+0x55/0x1c0 [ 1342.524713][T28166] path_openat+0xe8/0x31a0 [ 1342.524741][T28166] ? kasan_save_stack+0x3f/0x50 [ 1342.524765][T28166] ? kasan_save_stack+0x30/0x50 [ 1342.524789][T28166] ? kasan_save_track+0x14/0x30 [ 1342.524813][T28166] ? __kasan_slab_alloc+0x89/0x90 [ 1342.524839][T28166] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1342.524879][T28166] ? do_getname+0x35/0x390 [ 1342.524911][T28166] ? do_sys_openat2+0xc5/0x1e0 [ 1342.524947][T28166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.524980][T28166] ? __pfx_path_openat+0x10/0x10 [ 1342.525022][T28166] do_file_open+0x20e/0x430 [ 1342.525055][T28166] ? __pfx_do_file_open+0x10/0x10 [ 1342.525109][T28166] ? alloc_fd+0x476/0x790 [ 1342.525141][T28166] ? do_getname+0x191/0x390 [ 1342.525178][T28166] do_sys_openat2+0x10d/0x1e0 [ 1342.525223][T28166] ? __pfx_do_sys_openat2+0x10/0x10 [ 1342.525258][T28166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1342.525293][T28166] ? __fget_files+0x21f/0x3d0 [ 1342.525326][T28166] __x64_sys_openat+0x12d/0x210 [ 1342.525363][T28166] ? __pfx___x64_sys_openat+0x10/0x10 [ 1342.525399][T28166] ? ksys_write+0x1ac/0x250 [ 1342.525437][T28166] do_syscall_64+0x106/0xf80 [ 1342.525464][T28166] ? clear_bhb_loop+0x40/0x90 [ 1342.525496][T28166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1342.525524][T28166] RIP: 0033:0x7f66fc59c819 [ 1342.525546][T28166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1342.525572][T28166] RSP: 002b:00007f66fa7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1342.525598][T28166] RAX: ffffffffffffffda RBX: 00007f66fc815fa0 RCX: 00007f66fc59c819 [ 1342.525616][T28166] RDX: 0000000000080802 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1342.525634][T28166] RBP: 00007f66fa7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1342.525650][T28166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1342.525666][T28166] R13: 00007f66fc816038 R14: 00007f66fc815fa0 R15: 00007fff34ae33a8 [ 1342.525702][T28166] [ 1343.778693][T28186] zram: Cannot change disksize for initialized device [ 1344.649179][T13980] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1344.658622][T13980] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1344.668255][T13980] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1344.676302][T13980] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1344.683874][T13980] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1345.440888][T28205] chnl_net:caif_netlink_parms(): no params data found [ 1345.843129][T28205] bridge0: port 1(bridge_slave_0) entered blocking state [ 1345.860542][T28205] bridge0: port 1(bridge_slave_0) entered disabled state [ 1345.894554][T28205] bridge_slave_0: entered allmulticast mode [ 1345.902385][T28205] bridge_slave_0: entered promiscuous mode [ 1345.929314][T28205] bridge0: port 2(bridge_slave_1) entered blocking state [ 1345.958794][T28205] bridge0: port 2(bridge_slave_1) entered disabled state [ 1345.984795][T28205] bridge_slave_1: entered allmulticast mode [ 1345.993448][T28205] bridge_slave_1: entered promiscuous mode [ 1346.100140][T28205] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1346.217065][T28205] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1346.364511][T28205] team0: Port device team_slave_0 added [ 1346.388204][T28205] team0: Port device team_slave_1 added [ 1346.468962][T28205] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.504243][T28205] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.612345][T28205] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.649271][T28205] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.664234][T28205] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.738558][T28205] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.774416][T26458] Bluetooth: hci5: command tx timeout [ 1346.931008][T28205] hsr_slave_0: entered promiscuous mode [ 1346.965113][T28205] hsr_slave_1: entered promiscuous mode [ 1346.971206][T28205] debugfs: 'hsr0' already exists in 'hsr' [ 1347.012276][T28205] Cannot create hsr debugfs directory [ 1347.599835][T28205] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1347.686897][T28205] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1347.764577][T28205] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1347.930886][T28205] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1348.362495][T28205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1348.575922][T28205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1348.595965][T16994] bridge0: port 1(bridge_slave_0) entered blocking state [ 1348.603126][T16994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1348.645484][T16994] bridge0: port 2(bridge_slave_1) entered blocking state [ 1348.652732][T16994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1348.855541][T26458] Bluetooth: hci5: command tx timeout [ 1349.319441][T28279] netlink: zone id is out of range [ 1349.352897][T28279] netlink: zone id is out of range [ 1349.384387][T28280] FAULT_INJECTION: forcing a failure. [ 1349.384387][T28280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1349.415164][T28279] netlink: zone id is out of range [ 1349.425085][T28279] netlink: zone id is out of range [ 1349.484703][T28279] netlink: zone id is out of range [ 1349.510621][T28280] CPU: 0 UID: 0 PID: 28280 Comm: syz.3.4925 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.510664][T28280] Tainted: [L]=SOFTLOCKUP [ 1349.510674][T28280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1349.510690][T28280] Call Trace: [ 1349.510699][T28280] [ 1349.510715][T28280] dump_stack_lvl+0x100/0x190 [ 1349.510760][T28280] should_fail_ex.cold+0x5/0xa [ 1349.510793][T28280] _copy_from_iter+0x1f4/0x1690 [ 1349.510835][T28280] ? rcu_is_watching+0x12/0xc0 [ 1349.510876][T28280] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1349.510904][T28280] ? __kasan_slab_alloc+0x89/0x90 [ 1349.510931][T28280] ? __pfx__copy_from_iter+0x10/0x10 [ 1349.510966][T28280] ? __asan_memset+0x23/0x50 [ 1349.511000][T28280] ? __build_skb_around+0x278/0x390 [ 1349.511038][T28280] ? is_vmalloc_addr+0x86/0xa0 [ 1349.511080][T28280] netlink_sendmsg+0x808/0xda0 [ 1349.511113][T28280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1349.511139][T28280] ? __import_iovec+0x1d2/0x640 [ 1349.511173][T28280] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1349.511204][T28280] ____sys_sendmsg+0x9e1/0xb70 [ 1349.511232][T28280] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1349.511261][T28280] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1349.511294][T28280] ? rcu_is_watching+0x12/0xc0 [ 1349.511329][T28280] ? ___sys_sendmsg+0x19d/0x1e0 [ 1349.511357][T28280] ? kfree+0x2ec/0x6b0 [ 1349.511393][T28280] ___sys_sendmsg+0x190/0x1e0 [ 1349.511426][T28280] ? __pfx____sys_sendmsg+0x10/0x10 [ 1349.511483][T28280] ? __pfx___might_resched+0x10/0x10 [ 1349.511526][T28280] __sys_sendmmsg+0x205/0x430 [ 1349.511553][T28280] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1349.511587][T28280] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1349.511627][T28280] ? fput+0x79/0x100 [ 1349.511658][T28280] ? ksys_write+0x1ac/0x250 [ 1349.511682][T28280] ? __pfx_ksys_write+0x10/0x10 [ 1349.511709][T28280] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1349.511745][T28280] __x64_sys_sendmmsg+0x9c/0x100 [ 1349.511768][T28280] ? lockdep_hardirqs_on+0x78/0x100 [ 1349.511794][T28280] do_syscall_64+0x106/0xf80 [ 1349.511818][T28280] ? clear_bhb_loop+0x40/0x90 [ 1349.511847][T28280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.511872][T28280] RIP: 0033:0x7f66fc59c819 [ 1349.511892][T28280] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.511915][T28280] RSP: 002b:00007f66fa7d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1349.511939][T28280] RAX: ffffffffffffffda RBX: 00007f66fc816090 RCX: 00007f66fc59c819 [ 1349.511956][T28280] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1349.511971][T28280] RBP: 00007f66fa7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1349.511987][T28280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1349.512001][T28280] R13: 00007f66fc816128 R14: 00007f66fc816090 R15: 00007fff34ae33a8 [ 1349.512033][T28280] [ 1349.845736][T28205] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1350.072451][T28279] netlink: set zone limit has 8 unknown bytes [ 1350.326322][T28290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4926'. [ 1350.349081][T28290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.416376][T28290] bridge_slave_1 (unregistering): left allmulticast mode [ 1350.458317][T28290] bridge_slave_1 (unregistering): left promiscuous mode [ 1350.482136][T28290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1350.831468][T28205] veth0_vlan: entered promiscuous mode [ 1350.896078][T28205] veth1_vlan: entered promiscuous mode [ 1350.934369][T26458] Bluetooth: hci5: command tx timeout [ 1350.967513][T28205] veth0_macvtap: entered promiscuous mode [ 1350.993194][T28205] veth1_macvtap: entered promiscuous mode [ 1351.067383][T28205] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1351.178196][T28315] FAULT_INJECTION: forcing a failure. [ 1351.178196][T28315] name failslab, interval 1, probability 0, space 0, times 0 [ 1351.199581][T28205] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1351.235721][T28315] CPU: 0 UID: 0 PID: 28315 Comm: syz.0.4933 Tainted: G L syzkaller #0 PREEMPT(full) [ 1351.235768][T28315] Tainted: [L]=SOFTLOCKUP [ 1351.235780][T28315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1351.235797][T28315] Call Trace: [ 1351.235807][T28315] [ 1351.235818][T28315] dump_stack_lvl+0x100/0x190 [ 1351.235872][T28315] should_fail_ex.cold+0x5/0xa [ 1351.235908][T28315] should_failslab+0xc2/0x120 [ 1351.235941][T28315] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1351.235986][T28315] ? proc_alloc_inode+0x25/0x200 [ 1351.236030][T28315] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1351.236073][T28315] proc_alloc_inode+0x25/0x200 [ 1351.236112][T28315] alloc_inode+0x68/0x250 [ 1351.236151][T28315] new_inode+0x22/0x1c0 [ 1351.236192][T28315] proc_pid_make_inode+0x22/0x160 [ 1351.236236][T28315] proc_pident_instantiate+0x85/0x310 [ 1351.236283][T28315] proc_pident_lookup+0x1e3/0x270 [ 1351.236334][T28315] __lookup_slow+0x251/0x460 [ 1351.236372][T28315] ? __pfx___lookup_slow+0x10/0x10 [ 1351.236440][T28315] lookup_slow+0x50/0x70 [ 1351.236479][T28315] link_path_walk+0x1377/0x1cc0 [ 1351.236536][T28315] path_openat+0x1be/0x31a0 [ 1351.236565][T28315] ? kasan_save_stack+0x3f/0x50 [ 1351.236588][T28315] ? kasan_save_stack+0x30/0x50 [ 1351.236619][T28315] ? kasan_save_track+0x14/0x30 [ 1351.236645][T28315] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1351.236700][T28315] ? __pfx_path_openat+0x10/0x10 [ 1351.236745][T28315] do_file_open+0x20e/0x430 [ 1351.236780][T28315] ? __pfx_do_file_open+0x10/0x10 [ 1351.236824][T28315] ? __pfx_kfree_link+0x10/0x10 [ 1351.236875][T28315] ? alloc_fd+0x476/0x790 [ 1351.236908][T28315] ? do_getname+0x191/0x390 [ 1351.236948][T28315] do_sys_openat2+0x10d/0x1e0 [ 1351.236987][T28315] ? __pfx_do_sys_openat2+0x10/0x10 [ 1351.237039][T28315] __x64_sys_openat+0x12d/0x210 [ 1351.237079][T28315] ? __pfx___x64_sys_openat+0x10/0x10 [ 1351.237133][T28315] do_syscall_64+0x106/0xf80 [ 1351.237162][T28315] ? clear_bhb_loop+0x40/0x90 [ 1351.237197][T28315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.237225][T28315] RIP: 0033:0x7f63bb95d04e [ 1351.237249][T28315] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1351.237276][T28315] RSP: 002b:00007f63bc77dec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1351.237303][T28315] RAX: ffffffffffffffda RBX: 00007f63bc77e6c0 RCX: 00007f63bb95d04e [ 1351.237323][T28315] RDX: 0000000000000002 RSI: 00007f63bc77df90 RDI: ffffffffffffff9c [ 1351.237342][T28315] RBP: 00007f63bba32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1351.237359][T28315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1351.237375][T28315] R13: 00007f63bbc16128 R14: 00007f63bbc16090 R15: 00007ffd0bb9ce88 [ 1351.237414][T28315] [ 1351.793009][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.885506][ T13] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.901186][ T13] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1351.934321][ T13] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1352.238669][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.254285][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1352.588412][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1352.606510][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.015560][T26458] Bluetooth: hci5: command tx timeout [ 1354.169812][T28341] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4940'. [ 1354.239066][T28341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.308628][T28341] bridge_slave_1 (unregistering): left allmulticast mode [ 1354.324409][T28341] bridge_slave_1 (unregistering): left promiscuous mode [ 1354.331501][T28341] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.787797][T28350] FAULT_INJECTION: forcing a failure. [ 1354.787797][T28350] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1354.894304][T28350] CPU: 1 UID: 0 PID: 28350 Comm: syz.3.4945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1354.894344][T28350] Tainted: [L]=SOFTLOCKUP [ 1354.894353][T28350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1354.894367][T28350] Call Trace: [ 1354.894381][T28350] [ 1354.894392][T28350] dump_stack_lvl+0x100/0x190 [ 1354.894437][T28350] should_fail_ex.cold+0x5/0xa [ 1354.894464][T28350] ? prepare_alloc_pages+0x16d/0x5f0 [ 1354.894500][T28350] should_fail_alloc_page+0xeb/0x140 [ 1354.894532][T28350] prepare_alloc_pages+0x1f0/0x5f0 [ 1354.894570][T28350] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1354.894624][T28350] ? stack_trace_save+0x8e/0xc0 [ 1354.894653][T28350] ? __pfx_stack_trace_save+0x10/0x10 [ 1354.894680][T28350] ? is_bpf_text_address+0x94/0x1a0 [ 1354.894722][T28350] ? stack_depot_save_flags+0x27/0x9d0 [ 1354.894759][T28350] ? __kernel_text_address+0xd/0x30 [ 1354.894799][T28350] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1354.894843][T28350] ? kasan_save_stack+0x3f/0x50 [ 1354.894868][T28350] ? kasan_save_track+0x14/0x30 [ 1354.894892][T28350] ? __kasan_kmalloc+0xaa/0xb0 [ 1354.894914][T28350] ? snd_pcm_attach_substream+0x451/0xd60 [ 1354.894948][T28350] ? snd_pcm_oss_open+0x735/0x1390 [ 1354.894993][T28350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.895030][T28350] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1354.895061][T28350] ? policy_nodemask+0xed/0x4f0 [ 1354.895094][T28350] alloc_pages_mpol+0x1fb/0x550 [ 1354.895126][T28350] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1354.895158][T28350] ? __split_page_owner+0x1fe/0x350 [ 1354.895193][T28350] alloc_pages_noprof+0x136/0x390 [ 1354.895226][T28350] alloc_pages_exact_noprof+0x32/0xf0 [ 1354.895263][T28350] snd_pcm_attach_substream+0x4cb/0xd60 [ 1354.895299][T28350] snd_pcm_open_substream+0x90/0x1850 [ 1354.895345][T28350] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 1354.895398][T28350] snd_pcm_oss_open+0x735/0x1390 [ 1354.895445][T28350] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1354.895481][T28350] ? __lock_acquire+0x4a5/0x2630 [ 1354.895518][T28350] ? __pfx_default_wake_function+0x10/0x10 [ 1354.895550][T28350] ? __lock_acquire+0x4a5/0x2630 [ 1354.895593][T28350] ? do_raw_spin_lock+0x128/0x260 [ 1354.895635][T28350] ? soundcore_open+0x231/0x5a0 [ 1354.895669][T28350] ? __pfx_snd_pcm_oss_open+0x10/0x10 [ 1354.895706][T28350] soundcore_open+0x2e3/0x5a0 [ 1354.895741][T28350] ? __pfx_soundcore_open+0x10/0x10 [ 1354.895773][T28350] chrdev_open+0x234/0x6a0 [ 1354.895801][T28350] ? __pfx_apparmor_file_open+0x10/0x10 [ 1354.895832][T28350] ? __pfx_chrdev_open+0x10/0x10 [ 1354.895863][T28350] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1354.895903][T28350] do_dentry_open+0x6d8/0x1660 [ 1354.895937][T28350] ? __pfx_chrdev_open+0x10/0x10 [ 1354.895975][T28350] vfs_open+0x82/0x3f0 [ 1354.896014][T28350] path_openat+0x208c/0x31a0 [ 1354.896055][T28350] ? __pfx_path_openat+0x10/0x10 [ 1354.896098][T28350] do_file_open+0x20e/0x430 [ 1354.896131][T28350] ? __pfx_do_file_open+0x10/0x10 [ 1354.896185][T28350] ? alloc_fd+0x476/0x790 [ 1354.896215][T28350] ? do_getname+0x191/0x390 [ 1354.896253][T28350] do_sys_openat2+0x10d/0x1e0 [ 1354.896289][T28350] ? __pfx_do_sys_openat2+0x10/0x10 [ 1354.896323][T28350] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1354.896359][T28350] ? __fget_files+0x21f/0x3d0 [ 1354.896392][T28350] __x64_sys_openat+0x12d/0x210 [ 1354.896430][T28350] ? __pfx___x64_sys_openat+0x10/0x10 [ 1354.896465][T28350] ? ksys_write+0x1ac/0x250 [ 1354.896505][T28350] do_syscall_64+0x106/0xf80 [ 1354.896531][T28350] ? clear_bhb_loop+0x40/0x90 [ 1354.896565][T28350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.896592][T28350] RIP: 0033:0x7f66fc59c819 [ 1354.896615][T28350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1354.896641][T28350] RSP: 002b:00007f66fa7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1354.896666][T28350] RAX: ffffffffffffffda RBX: 00007f66fc815fa0 RCX: 00007f66fc59c819 [ 1354.896684][T28350] RDX: 0000000000000002 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 1354.896701][T28350] RBP: 00007f66fa7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1354.896718][T28350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1354.896734][T28350] R13: 00007f66fc816038 R14: 00007f66fc815fa0 R15: 00007fff34ae33a8 [ 1354.896771][T28350] [ 1355.350578][T28354] ubi0: attaching mtd0 [ 1355.358661][T28354] ubi0: scanning is finished [ 1355.363346][T28354] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1356.093027][T28368] FAULT_INJECTION: forcing a failure. [ 1356.093027][T28368] name failslab, interval 1, probability 0, space 0, times 0 [ 1356.134430][T28368] CPU: 0 UID: 0 PID: 28368 Comm: syz.6.4949 Tainted: G L syzkaller #0 PREEMPT(full) [ 1356.134474][T28368] Tainted: [L]=SOFTLOCKUP [ 1356.134484][T28368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1356.134501][T28368] Call Trace: [ 1356.134511][T28368] [ 1356.134522][T28368] dump_stack_lvl+0x100/0x190 [ 1356.134570][T28368] should_fail_ex.cold+0x5/0xa [ 1356.134603][T28368] ? lsm_blob_alloc+0x68/0x90 [ 1356.134643][T28368] should_failslab+0xc2/0x120 [ 1356.134675][T28368] __kmalloc_noprof+0xe0/0x850 [ 1356.134715][T28368] ? trace_kmalloc+0x101/0x130 [ 1356.134749][T28368] lsm_blob_alloc+0x68/0x90 [ 1356.134803][T28368] security_sk_alloc+0x2d/0x290 [ 1356.134837][T28368] sk_prot_alloc+0x12a/0x2a0 [ 1356.134876][T28368] sk_alloc+0x36/0xe80 [ 1356.134920][T28368] __netlink_create+0x5e/0x2c0 [ 1356.134965][T28368] __netlink_kernel_create+0xed/0x750 [ 1356.134999][T28368] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1356.135038][T28368] ? __pfx_genl_pernet_init+0x10/0x10 [ 1356.135072][T28368] genl_pernet_init+0xbd/0x160 [ 1356.135107][T28368] ? __pfx_genl_pernet_init+0x10/0x10 [ 1356.135139][T28368] ? lockdep_init_map_type+0x5c/0x250 [ 1356.135178][T28368] ? __pfx_genl_rcv+0x10/0x10 [ 1356.135209][T28368] ? __pfx_genl_bind+0x10/0x10 [ 1356.135240][T28368] ? __pfx_genl_unbind+0x10/0x10 [ 1356.135270][T28368] ? __pfx_genl_release+0x10/0x10 [ 1356.135304][T28368] ? mutex_init_lockep+0x110/0x150 [ 1356.135349][T28368] ops_init+0x1e2/0x5f0 [ 1356.135382][T28368] setup_net+0x118/0x3a0 [ 1356.135413][T28368] ? __pfx_setup_net+0x10/0x10 [ 1356.135441][T28368] ? lockdep_init_map_type+0x5c/0x250 [ 1356.135480][T28368] ? mutex_init_lockep+0x110/0x150 [ 1356.135525][T28368] copy_net_ns+0x46f/0x7c0 [ 1356.135561][T28368] create_new_namespaces+0x3ea/0xac0 [ 1356.135600][T28368] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1356.135635][T28368] ksys_unshare+0x473/0xad0 [ 1356.135673][T28368] ? __pfx_ksys_unshare+0x10/0x10 [ 1356.135723][T28368] __x64_sys_unshare+0x31/0x40 [ 1356.135758][T28368] do_syscall_64+0x106/0xf80 [ 1356.135792][T28368] ? clear_bhb_loop+0x40/0x90 [ 1356.135828][T28368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.135858][T28368] RIP: 0033:0x7fd000b9c819 [ 1356.135882][T28368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1356.135910][T28368] RSP: 002b:00007fd0019b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1356.135937][T28368] RAX: ffffffffffffffda RBX: 00007fd000e15fa0 RCX: 00007fd000b9c819 [ 1356.135956][T28368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1356.135974][T28368] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1356.135992][T28368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1356.136010][T28368] R13: 00007fd000e16038 R14: 00007fd000e15fa0 R15: 00007ffdfebb5728 [ 1356.136048][T28368] [ 1356.604451][T28354] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1357.124718][T28377] FAULT_INJECTION: forcing a failure. [ 1357.124718][T28377] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.161406][T28377] CPU: 0 UID: 0 PID: 28377 Comm: syz.6.4950 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.161446][T28377] Tainted: [L]=SOFTLOCKUP [ 1357.161456][T28377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1357.161472][T28377] Call Trace: [ 1357.161481][T28377] [ 1357.161490][T28377] dump_stack_lvl+0x100/0x190 [ 1357.161537][T28377] should_fail_ex.cold+0x5/0xa [ 1357.161570][T28377] ? tomoyo_encode2+0xfb/0x3c0 [ 1357.161608][T28377] should_failslab+0xc2/0x120 [ 1357.161639][T28377] __kmalloc_noprof+0xe0/0x850 [ 1357.161679][T28377] ? d_absolute_path+0x136/0x1b0 [ 1357.161724][T28377] tomoyo_encode2+0xfb/0x3c0 [ 1357.161768][T28377] tomoyo_encode+0x29/0x50 [ 1357.161806][T28377] tomoyo_realpath_from_path+0x18c/0x690 [ 1357.161855][T28377] tomoyo_path_number_perm+0x23c/0x580 [ 1357.161888][T28377] ? tomoyo_path_number_perm+0x22e/0x580 [ 1357.161932][T28377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1357.162003][T28377] ? find_held_lock+0x2b/0x80 [ 1357.162031][T28377] ? __fget_files+0x215/0x3d0 [ 1357.162058][T28377] ? hook_file_ioctl_common+0x146/0x410 [ 1357.162101][T28377] ? __fget_files+0x21f/0x3d0 [ 1357.162136][T28377] security_file_ioctl+0xd3/0x230 [ 1357.162173][T28377] __x64_sys_ioctl+0xb7/0x210 [ 1357.162217][T28377] do_syscall_64+0x106/0xf80 [ 1357.162245][T28377] ? clear_bhb_loop+0x40/0x90 [ 1357.162280][T28377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.162313][T28377] RIP: 0033:0x7fd000b9c819 [ 1357.162336][T28377] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1357.162362][T28377] RSP: 002b:00007fd001997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1357.162389][T28377] RAX: ffffffffffffffda RBX: 00007fd000e16090 RCX: 00007fd000b9c819 [ 1357.162408][T28377] RDX: 0000000000000000 RSI: 0000000000005414 RDI: 0000000000000006 [ 1357.162425][T28377] RBP: 00007fd001997090 R08: 0000000000000000 R09: 0000000000000000 [ 1357.162442][T28377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1357.162459][T28377] R13: 00007fd000e16128 R14: 00007fd000e16090 R15: 00007ffdfebb5728 [ 1357.162498][T28377] [ 1357.162521][T28377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1357.241362][T28383] FAULT_INJECTION: forcing a failure. [ 1357.241362][T28383] name failslab, interval 1, probability 0, space 0, times 0 [ 1357.408228][T28383] CPU: 1 UID: 0 PID: 28383 Comm: syz.5.4953 Tainted: G L syzkaller #0 PREEMPT(full) [ 1357.408276][T28383] Tainted: [L]=SOFTLOCKUP [ 1357.408288][T28383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1357.408307][T28383] Call Trace: [ 1357.408318][T28383] [ 1357.408330][T28383] dump_stack_lvl+0x100/0x190 [ 1357.408381][T28383] should_fail_ex.cold+0x5/0xa [ 1357.408417][T28383] should_failslab+0xc2/0x120 [ 1357.408450][T28383] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1357.408493][T28383] ? security_inode_alloc+0x3b/0x2c0 [ 1357.408527][T28383] ? lockdep_init_map_type+0x5c/0x250 [ 1357.408572][T28383] security_inode_alloc+0x3b/0x2c0 [ 1357.408607][T28383] inode_init_always_gfp+0xced/0x1040 [ 1357.408643][T28383] alloc_inode+0x8e/0x250 [ 1357.408684][T28383] new_inode+0x22/0x1c0 [ 1357.408728][T28383] proc_pid_make_inode+0x22/0x160 [ 1357.408773][T28383] proc_ns_dir_lookup+0x25b/0x390 [ 1357.408822][T28383] lookup_open.isra.0+0x631/0x11b0 [ 1357.408874][T28383] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1357.408938][T28383] ? mnt_get_write_access+0x1e9/0x2f0 [ 1357.408978][T28383] path_openat+0xa98/0x31a0 [ 1357.409021][T28383] ? __pfx_path_openat+0x10/0x10 [ 1357.409064][T28383] do_file_open+0x20e/0x430 [ 1357.409094][T28383] ? __pfx_do_file_open+0x10/0x10 [ 1357.409134][T28383] ? __pfx_kfree_link+0x10/0x10 [ 1357.409186][T28383] ? alloc_fd+0x476/0x790 [ 1357.409221][T28383] ? do_getname+0x191/0x390 [ 1357.409261][T28383] do_sys_openat2+0x10d/0x1e0 [ 1357.409302][T28383] ? __pfx_do_sys_openat2+0x10/0x10 [ 1357.409354][T28383] __x64_sys_openat+0x12d/0x210 [ 1357.409390][T28383] ? __pfx___x64_sys_openat+0x10/0x10 [ 1357.409437][T28383] do_syscall_64+0x106/0xf80 [ 1357.409463][T28383] ? clear_bhb_loop+0x40/0x90 [ 1357.409497][T28383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1357.409524][T28383] RIP: 0033:0x7fe92bd5d04e [ 1357.409546][T28383] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1357.409572][T28383] RSP: 002b:00007fe92cbf8ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1357.409599][T28383] RAX: ffffffffffffffda RBX: 00007fe92cbf96c0 RCX: 00007fe92bd5d04e [ 1357.409618][T28383] RDX: 0000000000000002 RSI: 00007fe92cbf8f90 RDI: ffffffffffffff9c [ 1357.409635][T28383] RBP: 00007fe92be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1357.409651][T28383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1357.409666][T28383] R13: 00007fe92c016128 R14: 00007fe92c016090 R15: 00007ffc78cc6678 [ 1357.409704][T28383] [ 1358.757073][T28394] FAULT_INJECTION: forcing a failure. [ 1358.757073][T28394] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1358.807380][T28394] CPU: 0 UID: 0 PID: 28394 Comm: syz.0.4956 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.807428][T28394] Tainted: [L]=SOFTLOCKUP [ 1358.807439][T28394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1358.807457][T28394] Call Trace: [ 1358.807467][T28394] [ 1358.807478][T28394] dump_stack_lvl+0x100/0x190 [ 1358.807529][T28394] should_fail_ex.cold+0x5/0xa [ 1358.807565][T28394] get_futex_key+0x1d2/0x1620 [ 1358.807605][T28394] ? __pfx_get_futex_key+0x10/0x10 [ 1358.807638][T28394] ? rcu_is_watching+0x12/0xc0 [ 1358.807681][T28394] ? vfs_writev+0x1d5/0xe10 [ 1358.807705][T28394] ? kfree+0x2ec/0x6b0 [ 1358.807757][T28394] futex_wake+0xea/0x530 [ 1358.807806][T28394] ? __pfx_futex_wake+0x10/0x10 [ 1358.807854][T28394] ? do_writev+0x214/0x340 [ 1358.807888][T28394] do_futex+0x32b/0x350 [ 1358.807926][T28394] ? __pfx_do_futex+0x10/0x10 [ 1358.807967][T28394] ? __fget_files+0x21f/0x3d0 [ 1358.808000][T28394] __x64_sys_futex+0x34f/0x4d0 [ 1358.808043][T28394] ? __pfx___x64_sys_futex+0x10/0x10 [ 1358.808087][T28394] ? __pfx_do_writev+0x10/0x10 [ 1358.808123][T28394] do_syscall_64+0x106/0xf80 [ 1358.808153][T28394] ? clear_bhb_loop+0x40/0x90 [ 1358.808189][T28394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.808219][T28394] RIP: 0033:0x7f63bb99c819 [ 1358.808240][T28394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.808268][T28394] RSP: 002b:00007f63bc79f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1358.808293][T28394] RAX: ffffffffffffffda RBX: 00007f63bbc15fa8 RCX: 00007f63bb99c819 [ 1358.808307][T28394] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f63bbc15fac [ 1358.808322][T28394] RBP: 00007f63bbc15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1358.808337][T28394] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1358.808353][T28394] R13: 00007f63bbc16038 R14: 00007ffd0bb9cda0 R15: 00007ffd0bb9ce88 [ 1358.808395][T28394] [ 1359.491068][T28401] ima: policy update failed [ 1359.509281][ T30] audit: type=1802 audit(1775517646.014:8): pid=28401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.4959" res=0 errno=0 [ 1359.580519][T28404] zram: Cannot change disksize for initialized device [ 1361.115655][T28444] zram: Cannot change disksize for initialized device [ 1361.218495][T26458] Bluetooth: hci4: unexpected event 0x3e length: 509 > 260 [ 1361.218535][T26458] Bluetooth: hci4: unexpected subevent 0x0d length: 508 > 260 [ 1361.694733][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.701079][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.532492][T28460] FAULT_INJECTION: forcing a failure. [ 1362.532492][T28460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1362.614390][T28460] CPU: 0 UID: 0 PID: 28460 Comm: syz.5.4975 Tainted: G L syzkaller #0 PREEMPT(full) [ 1362.614432][T28460] Tainted: [L]=SOFTLOCKUP [ 1362.614442][T28460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1362.614457][T28460] Call Trace: [ 1362.614466][T28460] [ 1362.614476][T28460] dump_stack_lvl+0x100/0x190 [ 1362.614522][T28460] should_fail_ex.cold+0x5/0xa [ 1362.614554][T28460] _copy_from_user+0x2e/0xd0 [ 1362.614590][T28460] dvb_usercopy+0x27e/0x340 [ 1362.614619][T28460] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 1362.614652][T28460] ? __pfx_dvb_usercopy+0x10/0x10 [ 1362.614694][T28460] ? __fget_files+0x21f/0x3d0 [ 1362.614729][T28460] dvb_frontend_ioctl+0x50/0x80 [ 1362.614754][T28460] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 1362.614780][T28460] __x64_sys_ioctl+0x18e/0x210 [ 1362.614823][T28460] do_syscall_64+0x106/0xf80 [ 1362.614851][T28460] ? clear_bhb_loop+0x40/0x90 [ 1362.614884][T28460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1362.614911][T28460] RIP: 0033:0x7fe92bd9c819 [ 1362.614934][T28460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1362.614960][T28460] RSP: 002b:00007fe92cc1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1362.614986][T28460] RAX: ffffffffffffffda RBX: 00007fe92c015fa0 RCX: 00007fe92bd9c819 [ 1362.615004][T28460] RDX: 0000000000000004 RSI: 0000000080026f47 RDI: 0000000000000003 [ 1362.615020][T28460] RBP: 00007fe92cc1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1362.615037][T28460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1362.615054][T28460] R13: 00007fe92c016038 R14: 00007fe92c015fa0 R15: 00007ffc78cc6678 [ 1362.615089][T28460] [ 1363.831043][T16989] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1410 with max blocks 20 with error 117 [ 1363.857768][T16989] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1363.857768][T16989] [ 1363.899622][T28480] zram: Cannot change disksize for initialized device [ 1363.951696][T28485] ubi0: attaching mtd0 [ 1363.966342][T28485] ubi0: scanning is finished [ 1363.998672][T28485] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1364.400512][T28485] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1364.674803][T28490] ima: policy update failed [ 1364.679685][ T30] audit: type=1802 audit(1775517651.194:9): pid=28490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.4984" res=0 errno=0 [ 1364.986976][T28503] FAULT_INJECTION: forcing a failure. [ 1364.986976][T28503] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.066711][T28503] CPU: 1 UID: 0 PID: 28503 Comm: syz.6.4987 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.066754][T28503] Tainted: [L]=SOFTLOCKUP [ 1365.066764][T28503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1365.066780][T28503] Call Trace: [ 1365.066790][T28503] [ 1365.066800][T28503] dump_stack_lvl+0x100/0x190 [ 1365.066845][T28503] should_fail_ex.cold+0x5/0xa [ 1365.066886][T28503] should_failslab+0xc2/0x120 [ 1365.066917][T28503] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1365.066957][T28503] ? do_getname+0x35/0x390 [ 1365.066990][T28503] ? find_held_lock+0x2b/0x80 [ 1365.067024][T28503] do_getname+0x35/0x390 [ 1365.067062][T28503] do_sys_openat2+0xc5/0x1e0 [ 1365.067098][T28503] ? __pfx_do_sys_openat2+0x10/0x10 [ 1365.067133][T28503] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1365.067169][T28503] ? __fget_files+0x21f/0x3d0 [ 1365.067203][T28503] __x64_sys_openat+0x12d/0x210 [ 1365.067240][T28503] ? __pfx___x64_sys_openat+0x10/0x10 [ 1365.067275][T28503] ? ksys_write+0x1ac/0x250 [ 1365.067314][T28503] do_syscall_64+0x106/0xf80 [ 1365.067342][T28503] ? clear_bhb_loop+0x40/0x90 [ 1365.067376][T28503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.067404][T28503] RIP: 0033:0x7fd000b9c819 [ 1365.067427][T28503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.067453][T28503] RSP: 002b:00007fd001997028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1365.067479][T28503] RAX: ffffffffffffffda RBX: 00007fd000e16090 RCX: 00007fd000b9c819 [ 1365.067496][T28503] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 1365.067514][T28503] RBP: 00007fd001997090 R08: 0000000000000000 R09: 0000000000000000 [ 1365.067530][T28503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1365.067546][T28503] R13: 00007fd000e16128 R14: 00007fd000e16090 R15: 00007ffdfebb5728 [ 1365.067581][T28503] [ 1365.068769][T28497] FAULT_INJECTION: forcing a failure. [ 1365.068769][T28497] name failslab, interval 1, probability 0, space 0, times 0 [ 1365.434824][T28497] CPU: 0 UID: 0 PID: 28497 Comm: syz.6.4987 Tainted: G L syzkaller #0 PREEMPT(full) [ 1365.434869][T28497] Tainted: [L]=SOFTLOCKUP [ 1365.434879][T28497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1365.434895][T28497] Call Trace: [ 1365.434903][T28497] [ 1365.434914][T28497] dump_stack_lvl+0x100/0x190 [ 1365.434960][T28497] should_fail_ex.cold+0x5/0xa [ 1365.434992][T28497] should_failslab+0xc2/0x120 [ 1365.435023][T28497] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1365.435065][T28497] ? alloc_empty_file+0x55/0x1c0 [ 1365.435105][T28497] ? is_bpf_text_address+0x8a/0x1a0 [ 1365.435158][T28497] alloc_empty_file+0x55/0x1c0 [ 1365.435195][T28497] path_openat+0xe8/0x31a0 [ 1365.435222][T28497] ? __kernel_text_address+0xd/0x30 [ 1365.435263][T28497] ? unwind_get_return_address+0x59/0xa0 [ 1365.435294][T28497] ? arch_stack_walk+0xa6/0xf0 [ 1365.435328][T28497] ? __pfx_path_openat+0x10/0x10 [ 1365.435362][T28497] ? stack_trace_save+0x8e/0xc0 [ 1365.435389][T28497] ? __pfx_stack_trace_save+0x10/0x10 [ 1365.435423][T28497] do_file_open+0x20e/0x430 [ 1365.435456][T28497] ? __pfx_do_file_open+0x10/0x10 [ 1365.435484][T28497] ? kasan_save_track+0x14/0x30 [ 1365.435509][T28497] ? __kasan_slab_alloc+0x89/0x90 [ 1365.435535][T28497] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1365.435612][T28497] do_open_execat+0xd1/0x360 [ 1365.435653][T28497] ? __pfx_do_open_execat+0x10/0x10 [ 1365.435696][T28497] ? __might_fault+0xc5/0x140 [ 1365.435735][T28497] ? __might_fault+0xc5/0x140 [ 1365.435781][T28497] alloc_bprm+0x2d/0x710 [ 1365.435825][T28497] do_execveat_common.isra.0+0x19c/0x580 [ 1365.435872][T28497] ? do_getname+0x191/0x390 [ 1365.435909][T28497] __x64_sys_execve+0x93/0xd0 [ 1365.435954][T28497] do_syscall_64+0x106/0xf80 [ 1365.435981][T28497] ? clear_bhb_loop+0x40/0x90 [ 1365.436015][T28497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1365.436043][T28497] RIP: 0033:0x7fd000b9c819 [ 1365.436066][T28497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1365.436098][T28497] RSP: 002b:00007fd0019b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 1365.436124][T28497] RAX: ffffffffffffffda RBX: 00007fd000e15fa0 RCX: 00007fd000b9c819 [ 1365.436143][T28497] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 1365.436160][T28497] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1365.436177][T28497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1365.436194][T28497] R13: 00007fd000e16038 R14: 00007fd000e15fa0 R15: 00007ffdfebb5728 [ 1365.436231][T28497] [ 1366.516312][T28519] zram: Cannot change disksize for initialized device [ 1367.205040][T26458] Bluetooth: hci5: unexpected event 0x3e length: 509 > 260 [ 1367.205080][T26458] Bluetooth: hci5: unexpected subevent 0x0d length: 508 > 260 [ 1367.281529][T28538] FAULT_INJECTION: forcing a failure. [ 1367.281529][T28538] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.364420][T28538] CPU: 0 UID: 0 PID: 28538 Comm: syz.5.4999 Tainted: G L syzkaller #0 PREEMPT(full) [ 1367.364469][T28538] Tainted: [L]=SOFTLOCKUP [ 1367.364480][T28538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1367.364498][T28538] Call Trace: [ 1367.364508][T28538] [ 1367.364519][T28538] dump_stack_lvl+0x100/0x190 [ 1367.364569][T28538] should_fail_ex.cold+0x5/0xa [ 1367.364604][T28538] should_failslab+0xc2/0x120 [ 1367.364636][T28538] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1367.364681][T28538] ? proc_alloc_inode+0x25/0x200 [ 1367.364729][T28538] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1367.364774][T28538] proc_alloc_inode+0x25/0x200 [ 1367.364815][T28538] alloc_inode+0x68/0x250 [ 1367.364855][T28538] new_inode+0x22/0x1c0 [ 1367.364905][T28538] proc_pid_make_inode+0x22/0x160 [ 1367.364950][T28538] proc_pident_instantiate+0x85/0x310 [ 1367.364998][T28538] proc_pident_lookup+0x1e3/0x270 [ 1367.365049][T28538] __lookup_slow+0x251/0x460 [ 1367.365089][T28538] ? __pfx___lookup_slow+0x10/0x10 [ 1367.365159][T28538] lookup_slow+0x50/0x70 [ 1367.365198][T28538] link_path_walk+0x1377/0x1cc0 [ 1367.365257][T28538] path_openat+0x1be/0x31a0 [ 1367.365287][T28538] ? kasan_save_stack+0x3f/0x50 [ 1367.365313][T28538] ? kasan_save_stack+0x30/0x50 [ 1367.365338][T28538] ? kasan_save_track+0x14/0x30 [ 1367.365365][T28538] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1367.365418][T28538] ? __pfx_path_openat+0x10/0x10 [ 1367.365464][T28538] do_file_open+0x20e/0x430 [ 1367.365498][T28538] ? __pfx_do_file_open+0x10/0x10 [ 1367.365544][T28538] ? __pfx_kfree_link+0x10/0x10 [ 1367.365596][T28538] ? alloc_fd+0x476/0x790 [ 1367.365628][T28538] ? do_getname+0x191/0x390 [ 1367.365669][T28538] do_sys_openat2+0x10d/0x1e0 [ 1367.365708][T28538] ? __pfx_do_sys_openat2+0x10/0x10 [ 1367.365760][T28538] __x64_sys_openat+0x12d/0x210 [ 1367.365799][T28538] ? __pfx___x64_sys_openat+0x10/0x10 [ 1367.365853][T28538] do_syscall_64+0x106/0xf80 [ 1367.365888][T28538] ? clear_bhb_loop+0x40/0x90 [ 1367.365925][T28538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.365956][T28538] RIP: 0033:0x7fe92bd5d04e [ 1367.365981][T28538] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1367.366009][T28538] RSP: 002b:00007fe92cc19ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1367.366037][T28538] RAX: ffffffffffffffda RBX: 00007fe92cc1a6c0 RCX: 00007fe92bd5d04e [ 1367.366057][T28538] RDX: 0000000000000002 RSI: 00007fe92cc19f90 RDI: ffffffffffffff9c [ 1367.366076][T28538] RBP: 00007fe92be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1367.366094][T28538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1367.366113][T28538] R13: 00007fe92c016038 R14: 00007fe92c015fa0 R15: 00007ffc78cc6678 [ 1367.366153][T28538] [ 1371.761231][T28591] zram: Cannot change disksize for initialized device [ 1372.237496][T26458] Bluetooth: hci1: unexpected event 0x3e length: 509 > 260 [ 1372.237539][T26458] Bluetooth: hci1: unexpected subevent 0x0d length: 508 > 260 [ 1373.386897][T28622] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 950 with max blocks 39 with error 117 [ 1373.440297][T28622] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1373.440297][T28622] [ 1379.672000][T28701] ubi0: attaching mtd0 [ 1379.678226][T28701] ubi0: scanning is finished [ 1379.684627][T28701] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1380.212081][T28701] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1381.739102][T28740] tipc: Can't bind to reserved service type 0 [ 1382.561461][T28759] zram: Cannot change disksize for initialized device [ 1384.752648][T28795] ubi0: attaching mtd0 [ 1384.757915][T28795] ubi0: scanning is finished [ 1384.762524][T28795] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1385.088452][T28795] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1385.288083][T28805] netlink: 30 bytes leftover after parsing attributes in process `syz.6.5062'. [ 1385.968440][T28825] zram: Cannot change disksize for initialized device [ 1388.688344][T28868] zram: Cannot change disksize for initialized device [ 1389.308575][T28879] ubi0: attaching mtd0 [ 1389.325288][T28879] ubi0: scanning is finished [ 1389.337850][T28879] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1389.799262][T28879] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1392.832612][T28937] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1393.014988][T28941] netlink: 234 bytes leftover after parsing attributes in process `syz.3.5095'. [ 1393.656415][T28948] ubi0: attaching mtd0 [ 1393.715319][T28948] ubi0: scanning is finished [ 1393.732102][T28948] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1393.995554][T28948] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1394.114608][T28943] FAULT_INJECTION: forcing a failure. [ 1394.114608][T28943] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.170656][T28943] CPU: 0 UID: 0 PID: 28943 Comm: syz.6.5096 Tainted: G L syzkaller #0 PREEMPT(full) [ 1394.170700][T28943] Tainted: [L]=SOFTLOCKUP [ 1394.170710][T28943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1394.170725][T28943] Call Trace: [ 1394.170733][T28943] [ 1394.170744][T28943] dump_stack_lvl+0x100/0x190 [ 1394.170788][T28943] should_fail_ex.cold+0x5/0xa [ 1394.170824][T28943] should_failslab+0xc2/0x120 [ 1394.170856][T28943] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1394.170893][T28943] ? copy_ipcs+0x10d/0x7e0 [ 1394.170940][T28943] copy_ipcs+0x10d/0x7e0 [ 1394.170975][T28943] create_new_namespaces+0x20a/0xac0 [ 1394.171008][T28943] ? security_capable+0x80/0x260 [ 1394.171040][T28943] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1394.171074][T28943] ksys_unshare+0x473/0xad0 [ 1394.171113][T28943] ? __pfx_ksys_unshare+0x10/0x10 [ 1394.171160][T28943] __x64_sys_unshare+0x31/0x40 [ 1394.171195][T28943] do_syscall_64+0x106/0xf80 [ 1394.171223][T28943] ? clear_bhb_loop+0x40/0x90 [ 1394.171257][T28943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.171286][T28943] RIP: 0033:0x7fd000b9c819 [ 1394.171309][T28943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1394.171336][T28943] RSP: 002b:00007fd0019b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1394.171363][T28943] RAX: ffffffffffffffda RBX: 00007fd000e15fa0 RCX: 00007fd000b9c819 [ 1394.171382][T28943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006c000000 [ 1394.171398][T28943] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1394.171416][T28943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1394.171434][T28943] R13: 00007fd000e16038 R14: 00007fd000e15fa0 R15: 00007ffdfebb5728 [ 1394.171472][T28943] [ 1394.683699][ T150] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1411 with max blocks 19 with error 117 [ 1394.740245][ T150] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1394.740245][ T150] [ 1395.091326][T28974] FAULT_INJECTION: forcing a failure. [ 1395.091326][T28974] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.159537][T28974] CPU: 1 UID: 0 PID: 28974 Comm: syz.6.5101 Tainted: G L syzkaller #0 PREEMPT(full) [ 1395.159584][T28974] Tainted: [L]=SOFTLOCKUP [ 1395.159595][T28974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1395.159612][T28974] Call Trace: [ 1395.159621][T28974] [ 1395.159632][T28974] dump_stack_lvl+0x100/0x190 [ 1395.159676][T28974] should_fail_ex.cold+0x5/0xa [ 1395.159706][T28974] should_failslab+0xc2/0x120 [ 1395.159734][T28974] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1395.159772][T28974] ? security_inode_alloc+0x3b/0x2c0 [ 1395.159801][T28974] ? lockdep_init_map_type+0x5c/0x250 [ 1395.159840][T28974] security_inode_alloc+0x3b/0x2c0 [ 1395.159869][T28974] inode_init_always_gfp+0xced/0x1040 [ 1395.159913][T28974] alloc_inode+0x8e/0x250 [ 1395.159949][T28974] new_inode+0x22/0x1c0 [ 1395.159992][T28974] proc_pid_make_inode+0x22/0x160 [ 1395.160031][T28974] proc_ns_dir_lookup+0x25b/0x390 [ 1395.160074][T28974] lookup_open.isra.0+0x631/0x11b0 [ 1395.160119][T28974] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1395.160221][T28974] ? mnt_get_write_access+0x1e9/0x2f0 [ 1395.160266][T28974] path_openat+0xa98/0x31a0 [ 1395.160307][T28974] ? __pfx_path_openat+0x10/0x10 [ 1395.160348][T28974] do_file_open+0x20e/0x430 [ 1395.160378][T28974] ? __pfx_do_file_open+0x10/0x10 [ 1395.160417][T28974] ? __pfx_kfree_link+0x10/0x10 [ 1395.160468][T28974] ? alloc_fd+0x476/0x790 [ 1395.160499][T28974] ? do_getname+0x191/0x390 [ 1395.160535][T28974] do_sys_openat2+0x10d/0x1e0 [ 1395.160571][T28974] ? __pfx_do_sys_openat2+0x10/0x10 [ 1395.160618][T28974] __x64_sys_openat+0x12d/0x210 [ 1395.160653][T28974] ? __pfx___x64_sys_openat+0x10/0x10 [ 1395.160701][T28974] do_syscall_64+0x106/0xf80 [ 1395.160726][T28974] ? clear_bhb_loop+0x40/0x90 [ 1395.160757][T28974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.160783][T28974] RIP: 0033:0x7fd000b5d04e [ 1395.160832][T28974] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1395.160858][T28974] RSP: 002b:00007fd001996ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1395.160883][T28974] RAX: ffffffffffffffda RBX: 00007fd0019976c0 RCX: 00007fd000b5d04e [ 1395.160901][T28974] RDX: 0000000000000002 RSI: 00007fd001996f90 RDI: ffffffffffffff9c [ 1395.160918][T28974] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1395.160934][T28974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1395.160949][T28974] R13: 00007fd000e16128 R14: 00007fd000e16090 R15: 00007ffdfebb5728 [ 1395.160983][T28974] [ 1397.302482][T29009] ubi0: attaching mtd0 [ 1397.312812][T29009] ubi0: scanning is finished [ 1397.337104][T29009] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1397.374723][T29014] zram: Cannot change disksize for initialized device [ 1397.736678][T29009] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1398.228105][T29031] FAULT_INJECTION: forcing a failure. [ 1398.228105][T29031] name failslab, interval 1, probability 0, space 0, times 0 [ 1398.357086][T29031] CPU: 1 UID: 0 PID: 29031 Comm: syz.6.5115 Tainted: G L syzkaller #0 PREEMPT(full) [ 1398.357130][T29031] Tainted: [L]=SOFTLOCKUP [ 1398.357140][T29031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1398.357156][T29031] Call Trace: [ 1398.357165][T29031] [ 1398.357176][T29031] dump_stack_lvl+0x100/0x190 [ 1398.357221][T29031] should_fail_ex.cold+0x5/0xa [ 1398.357253][T29031] ? net_alloc_generic+0x1e/0x70 [ 1398.357280][T29031] should_failslab+0xc2/0x120 [ 1398.357310][T29031] __kmalloc_noprof+0xe0/0x850 [ 1398.357358][T29031] net_alloc_generic+0x1e/0x70 [ 1398.357385][T29031] copy_net_ns+0xc6/0x7c0 [ 1398.357413][T29031] ? copy_cgroup_ns+0x71/0x970 [ 1398.357448][T29031] create_new_namespaces+0x3ea/0xac0 [ 1398.357486][T29031] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1398.357525][T29031] ksys_unshare+0x473/0xad0 [ 1398.357557][T29031] ? __pfx_ksys_unshare+0x10/0x10 [ 1398.357586][T29031] ? ksys_write+0x1ac/0x250 [ 1398.357618][T29031] __x64_sys_unshare+0x31/0x40 [ 1398.357640][T29031] do_syscall_64+0x106/0xf80 [ 1398.357655][T29031] ? clear_bhb_loop+0x40/0x90 [ 1398.357673][T29031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1398.357688][T29031] RIP: 0033:0x7fd000b9c819 [ 1398.357701][T29031] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1398.357716][T29031] RSP: 002b:00007fd0019b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1398.357730][T29031] RAX: ffffffffffffffda RBX: 00007fd000e15fa0 RCX: 00007fd000b9c819 [ 1398.357741][T29031] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1398.357751][T29031] RBP: 00007fd0019b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1398.357760][T29031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1398.357769][T29031] R13: 00007fd000e16038 R14: 00007fd000e15fa0 R15: 00007ffdfebb5728 [ 1398.357787][T29031] [ 1399.433773][T29053] zram: Cannot change disksize for initialized device [ 1399.482593][T29054] netlink: 234 bytes leftover after parsing attributes in process `syz.0.5120'. [ 1399.533902][T29057] FAULT_INJECTION: forcing a failure. [ 1399.533902][T29057] name failslab, interval 1, probability 0, space 0, times 0 [ 1399.566209][T29057] CPU: 0 UID: 0 PID: 29057 Comm: syz.5.5121 Tainted: G L syzkaller #0 PREEMPT(full) [ 1399.566255][T29057] Tainted: [L]=SOFTLOCKUP [ 1399.566264][T29057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1399.566280][T29057] Call Trace: [ 1399.566289][T29057] [ 1399.566300][T29057] dump_stack_lvl+0x100/0x190 [ 1399.566348][T29057] should_fail_ex.cold+0x5/0xa [ 1399.566378][T29057] should_failslab+0xc2/0x120 [ 1399.566409][T29057] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1399.566452][T29057] ? proc_alloc_inode+0x25/0x200 [ 1399.566498][T29057] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1399.566543][T29057] proc_alloc_inode+0x25/0x200 [ 1399.566585][T29057] alloc_inode+0x68/0x250 [ 1399.566633][T29057] new_inode+0x22/0x1c0 [ 1399.566677][T29057] proc_pid_make_inode+0x22/0x160 [ 1399.566722][T29057] proc_pident_instantiate+0x85/0x310 [ 1399.566769][T29057] proc_pident_lookup+0x1e3/0x270 [ 1399.566820][T29057] __lookup_slow+0x251/0x460 [ 1399.566856][T29057] ? __pfx___lookup_slow+0x10/0x10 [ 1399.566923][T29057] lookup_slow+0x50/0x70 [ 1399.566954][T29057] link_path_walk+0x1377/0x1cc0 [ 1399.567005][T29057] path_openat+0x1be/0x31a0 [ 1399.567033][T29057] ? kasan_save_stack+0x3f/0x50 [ 1399.567056][T29057] ? kasan_save_stack+0x30/0x50 [ 1399.567077][T29057] ? kasan_save_track+0x14/0x30 [ 1399.567101][T29057] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1399.567153][T29057] ? __pfx_path_openat+0x10/0x10 [ 1399.567198][T29057] do_file_open+0x20e/0x430 [ 1399.567231][T29057] ? __pfx_do_file_open+0x10/0x10 [ 1399.567272][T29057] ? __pfx_kfree_link+0x10/0x10 [ 1399.567322][T29057] ? alloc_fd+0x476/0x790 [ 1399.567354][T29057] ? do_getname+0x191/0x390 [ 1399.567393][T29057] do_sys_openat2+0x10d/0x1e0 [ 1399.567430][T29057] ? __pfx_do_sys_openat2+0x10/0x10 [ 1399.567483][T29057] __x64_sys_openat+0x12d/0x210 [ 1399.567524][T29057] ? __pfx___x64_sys_openat+0x10/0x10 [ 1399.567571][T29057] do_syscall_64+0x106/0xf80 [ 1399.567598][T29057] ? clear_bhb_loop+0x40/0x90 [ 1399.567641][T29057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1399.567669][T29057] RIP: 0033:0x7fe92bd5d04e [ 1399.567693][T29057] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1399.567720][T29057] RSP: 002b:00007fe92cbf8ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1399.567747][T29057] RAX: ffffffffffffffda RBX: 00007fe92cbf96c0 RCX: 00007fe92bd5d04e [ 1399.567766][T29057] RDX: 0000000000000002 RSI: 00007fe92cbf8f90 RDI: ffffffffffffff9c [ 1399.567784][T29057] RBP: 00007fe92be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1399.567802][T29057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1399.567819][T29057] R13: 00007fe92c016128 R14: 00007fe92c016090 R15: 00007ffc78cc6678 [ 1399.567857][T29057] [ 1400.347546][T29063] ubi0: attaching mtd0 [ 1400.353666][T29063] ubi0: scanning is finished [ 1400.384450][T29063] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1400.632719][T29063] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1403.238124][T29116] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5135'. [ 1403.829641][T29134] zram: Cannot change disksize for initialized device [ 1404.810903][T29150] FAULT_INJECTION: forcing a failure. [ 1404.810903][T29150] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.904440][T29150] CPU: 1 UID: 0 PID: 29150 Comm: syz.6.5143 Tainted: G L syzkaller #0 PREEMPT(full) [ 1404.904488][T29150] Tainted: [L]=SOFTLOCKUP [ 1404.904500][T29150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1404.904518][T29150] Call Trace: [ 1404.904528][T29150] [ 1404.904539][T29150] dump_stack_lvl+0x100/0x190 [ 1404.904588][T29150] should_fail_ex.cold+0x5/0xa [ 1404.904623][T29150] should_failslab+0xc2/0x120 [ 1404.904655][T29150] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1404.904701][T29150] ? proc_alloc_inode+0x25/0x200 [ 1404.904748][T29150] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1404.904792][T29150] proc_alloc_inode+0x25/0x200 [ 1404.904835][T29150] alloc_inode+0x68/0x250 [ 1404.904875][T29150] new_inode+0x22/0x1c0 [ 1404.904916][T29150] proc_pid_make_inode+0x22/0x160 [ 1404.904959][T29150] proc_pident_instantiate+0x85/0x310 [ 1404.905005][T29150] proc_pident_lookup+0x1e3/0x270 [ 1404.905057][T29150] __lookup_slow+0x251/0x460 [ 1404.905096][T29150] ? __pfx___lookup_slow+0x10/0x10 [ 1404.905172][T29150] lookup_slow+0x50/0x70 [ 1404.905212][T29150] link_path_walk+0x1377/0x1cc0 [ 1404.905271][T29150] path_openat+0x1be/0x31a0 [ 1404.905301][T29150] ? kasan_save_stack+0x3f/0x50 [ 1404.905327][T29150] ? kasan_save_stack+0x30/0x50 [ 1404.905353][T29150] ? kasan_save_track+0x14/0x30 [ 1404.905379][T29150] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1404.905432][T29150] ? __pfx_path_openat+0x10/0x10 [ 1404.905476][T29150] do_file_open+0x20e/0x430 [ 1404.905509][T29150] ? __pfx_do_file_open+0x10/0x10 [ 1404.905550][T29150] ? __pfx_kfree_link+0x10/0x10 [ 1404.905623][T29150] ? alloc_fd+0x476/0x790 [ 1404.905658][T29150] ? do_getname+0x191/0x390 [ 1404.905701][T29150] do_sys_openat2+0x10d/0x1e0 [ 1404.905741][T29150] ? __pfx_do_sys_openat2+0x10/0x10 [ 1404.905794][T29150] __x64_sys_openat+0x12d/0x210 [ 1404.905835][T29150] ? __pfx___x64_sys_openat+0x10/0x10 [ 1404.905893][T29150] do_syscall_64+0x106/0xf80 [ 1404.905924][T29150] ? clear_bhb_loop+0x40/0x90 [ 1404.905960][T29150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.905990][T29150] RIP: 0033:0x7fd000b5d04e [ 1404.906013][T29150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1404.906043][T29150] RSP: 002b:00007fd001996ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1404.906071][T29150] RAX: ffffffffffffffda RBX: 00007fd0019976c0 RCX: 00007fd000b5d04e [ 1404.906090][T29150] RDX: 0000000000000002 RSI: 00007fd001996f90 RDI: ffffffffffffff9c [ 1404.906109][T29150] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1404.906126][T29150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1404.906143][T29150] R13: 00007fd000e16128 R14: 00007fd000e16090 R15: 00007ffdfebb5728 [ 1404.906187][T29150] [ 1407.250070][T29196] FAULT_INJECTION: forcing a failure. [ 1407.250070][T29196] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.263293][T29196] CPU: 0 UID: 0 PID: 29196 Comm: syz.6.5156 Tainted: G L syzkaller #0 PREEMPT(full) [ 1407.263339][T29196] Tainted: [L]=SOFTLOCKUP [ 1407.263350][T29196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1407.263367][T29196] Call Trace: [ 1407.263376][T29196] [ 1407.263388][T29196] dump_stack_lvl+0x100/0x190 [ 1407.263436][T29196] should_fail_ex.cold+0x5/0xa [ 1407.263472][T29196] should_failslab+0xc2/0x120 [ 1407.263505][T29196] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1407.263550][T29196] ? proc_alloc_inode+0x25/0x200 [ 1407.263596][T29196] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1407.263648][T29196] proc_alloc_inode+0x25/0x200 [ 1407.263690][T29196] alloc_inode+0x68/0x250 [ 1407.263730][T29196] new_inode+0x22/0x1c0 [ 1407.263771][T29196] proc_pid_make_inode+0x22/0x160 [ 1407.263815][T29196] proc_pident_instantiate+0x85/0x310 [ 1407.263862][T29196] proc_pident_lookup+0x1e3/0x270 [ 1407.263911][T29196] __lookup_slow+0x251/0x460 [ 1407.263949][T29196] ? __pfx___lookup_slow+0x10/0x10 [ 1407.264015][T29196] lookup_slow+0x50/0x70 [ 1407.264054][T29196] link_path_walk+0x1377/0x1cc0 [ 1407.264113][T29196] path_openat+0x1be/0x31a0 [ 1407.264146][T29196] ? kasan_save_stack+0x3f/0x50 [ 1407.264170][T29196] ? kasan_save_stack+0x30/0x50 [ 1407.264194][T29196] ? kasan_save_track+0x14/0x30 [ 1407.264218][T29196] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1407.264270][T29196] ? __pfx_path_openat+0x10/0x10 [ 1407.264315][T29196] do_file_open+0x20e/0x430 [ 1407.264349][T29196] ? __pfx_do_file_open+0x10/0x10 [ 1407.264393][T29196] ? __pfx_kfree_link+0x10/0x10 [ 1407.264443][T29196] ? alloc_fd+0x476/0x790 [ 1407.264477][T29196] ? do_getname+0x191/0x390 [ 1407.264518][T29196] do_sys_openat2+0x10d/0x1e0 [ 1407.264557][T29196] ? __pfx_do_sys_openat2+0x10/0x10 [ 1407.264610][T29196] __x64_sys_openat+0x12d/0x210 [ 1407.264658][T29196] ? __pfx___x64_sys_openat+0x10/0x10 [ 1407.264715][T29196] do_syscall_64+0x106/0xf80 [ 1407.264746][T29196] ? clear_bhb_loop+0x40/0x90 [ 1407.264781][T29196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.264811][T29196] RIP: 0033:0x7fd000b5d04e [ 1407.264835][T29196] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1407.264864][T29196] RSP: 002b:00007fd001996ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1407.264893][T29196] RAX: ffffffffffffffda RBX: 00007fd0019976c0 RCX: 00007fd000b5d04e [ 1407.264912][T29196] RDX: 0000000000000002 RSI: 00007fd001996f90 RDI: ffffffffffffff9c [ 1407.264930][T29196] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1407.264948][T29196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1407.264966][T29196] R13: 00007fd000e16128 R14: 00007fd000e16090 R15: 00007ffdfebb5728 [ 1407.265002][T29196] [ 1410.076011][T29236] FAULT_INJECTION: forcing a failure. [ 1410.076011][T29236] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1410.252722][T29236] CPU: 1 UID: 0 PID: 29236 Comm: syz.5.5166 Tainted: G L syzkaller #0 PREEMPT(full) [ 1410.252748][T29236] Tainted: [L]=SOFTLOCKUP [ 1410.252753][T29236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1410.252762][T29236] Call Trace: [ 1410.252767][T29236] [ 1410.252773][T29236] dump_stack_lvl+0x100/0x190 [ 1410.252799][T29236] should_fail_ex.cold+0x5/0xa [ 1410.252814][T29236] ? prepare_alloc_pages+0x16d/0x5f0 [ 1410.252834][T29236] should_fail_alloc_page+0xeb/0x140 [ 1410.252852][T29236] prepare_alloc_pages+0x1f0/0x5f0 [ 1410.252869][T29236] ? kernel_text_address+0x8d/0x100 [ 1410.252893][T29236] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1410.252923][T29236] ? copy_splice_read+0x1a3/0xb90 [ 1410.252938][T29236] ? stack_trace_save+0x8e/0xc0 [ 1410.252953][T29236] ? __pfx_stack_trace_save+0x10/0x10 [ 1410.252969][T29236] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1410.252994][T29236] ? copy_splice_read+0x1a3/0xb90 [ 1410.253007][T29236] ? kasan_save_stack+0x3f/0x50 [ 1410.253020][T29236] ? kasan_save_stack+0x30/0x50 [ 1410.253033][T29236] ? kasan_save_track+0x14/0x30 [ 1410.253045][T29236] ? __kasan_kmalloc+0xaa/0xb0 [ 1410.253060][T29236] ? __kmalloc_noprof+0x301/0x850 [ 1410.253082][T29236] ? copy_splice_read+0x1a3/0xb90 [ 1410.253095][T29236] ? do_splice_read+0x285/0x370 [ 1410.253110][T29236] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.253135][T29236] alloc_pages_bulk_noprof+0x782/0x1490 [ 1410.253165][T29236] ? __pfx_alloc_pages_bulk_noprof+0x10/0x10 [ 1410.253193][T29236] ? __kmalloc_noprof+0x320/0x850 [ 1410.253219][T29236] copy_splice_read+0x1e1/0xb90 [ 1410.253238][T29236] ? __pfx_copy_splice_read+0x10/0x10 [ 1410.253259][T29236] ? look_up_lock_class+0x55/0x120 [ 1410.253279][T29236] ? lockdep_init_map_type+0x5c/0x250 [ 1410.253300][T29236] ? __pfx_pipe_lock_cmp_fn+0x10/0x10 [ 1410.253316][T29236] ? __pfx_copy_splice_read+0x10/0x10 [ 1410.253331][T29236] do_splice_read+0x285/0x370 [ 1410.253347][T29236] splice_direct_to_actor+0x2a1/0xa30 [ 1410.253364][T29236] ? __pfx_direct_splice_actor+0x10/0x10 [ 1410.253382][T29236] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1410.253403][T29236] do_splice_direct+0x174/0x240 [ 1410.253419][T29236] ? __pfx_do_splice_direct+0x10/0x10 [ 1410.253435][T29236] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1410.253452][T29236] ? rw_verify_area+0xce/0x6d0 [ 1410.253475][T29236] do_sendfile+0xadc/0xe20 [ 1410.253502][T29236] ? __pfx_do_sendfile+0x10/0x10 [ 1410.253527][T29236] ? __fget_files+0x21f/0x3d0 [ 1410.253546][T29236] __x64_sys_sendfile64+0x1d8/0x220 [ 1410.253563][T29236] ? ksys_write+0x1ac/0x250 [ 1410.253576][T29236] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1410.253599][T29236] do_syscall_64+0x106/0xf80 [ 1410.253614][T29236] ? clear_bhb_loop+0x40/0x90 [ 1410.253631][T29236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.253646][T29236] RIP: 0033:0x7fe92bd9c819 [ 1410.253659][T29236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1410.253674][T29236] RSP: 002b:00007fe92cc1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1410.253688][T29236] RAX: ffffffffffffffda RBX: 00007fe92c015fa0 RCX: 00007fe92bd9c819 [ 1410.253698][T29236] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 1410.253707][T29236] RBP: 00007fe92cc1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.253716][T29236] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 1410.253724][T29236] R13: 00007fe92c016038 R14: 00007fe92c015fa0 R15: 00007ffc78cc6678 [ 1410.253755][T29236] [ 1410.894850][T29245] ubi0: attaching mtd0 [ 1410.900952][T29245] ubi0: scanning is finished [ 1410.954608][T29245] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1411.356196][T29245] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1412.907365][T29281] ubi0: attaching mtd0 [ 1412.913597][T29281] ubi0: scanning is finished [ 1412.921917][T29281] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1413.225542][T29281] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1414.854768][T13980] Bluetooth: hci4: command 0x0406 tx timeout [ 1416.072376][T29329] FAULT_INJECTION: forcing a failure. [ 1416.072376][T29329] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.104254][T29329] CPU: 0 UID: 0 PID: 29329 Comm: syz.5.5183 Tainted: G L syzkaller #0 PREEMPT(full) [ 1416.104298][T29329] Tainted: [L]=SOFTLOCKUP [ 1416.104309][T29329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1416.104325][T29329] Call Trace: [ 1416.104334][T29329] [ 1416.104346][T29329] dump_stack_lvl+0x100/0x190 [ 1416.104394][T29329] should_fail_ex.cold+0x5/0xa [ 1416.104428][T29329] should_failslab+0xc2/0x120 [ 1416.104460][T29329] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1416.104507][T29329] ? proc_alloc_inode+0x25/0x200 [ 1416.104553][T29329] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1416.104597][T29329] proc_alloc_inode+0x25/0x200 [ 1416.104638][T29329] alloc_inode+0x68/0x250 [ 1416.104677][T29329] new_inode+0x22/0x1c0 [ 1416.104720][T29329] proc_pid_make_inode+0x22/0x160 [ 1416.104761][T29329] proc_pident_instantiate+0x85/0x310 [ 1416.104808][T29329] proc_pident_lookup+0x1e3/0x270 [ 1416.104900][T29329] __lookup_slow+0x251/0x460 [ 1416.104940][T29329] ? __pfx___lookup_slow+0x10/0x10 [ 1416.105015][T29329] lookup_slow+0x50/0x70 [ 1416.105053][T29329] link_path_walk+0x1377/0x1cc0 [ 1416.105111][T29329] path_openat+0x1be/0x31a0 [ 1416.105140][T29329] ? kasan_save_stack+0x3f/0x50 [ 1416.105165][T29329] ? kasan_save_stack+0x30/0x50 [ 1416.105190][T29329] ? kasan_save_track+0x14/0x30 [ 1416.105215][T29329] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1416.105267][T29329] ? __pfx_path_openat+0x10/0x10 [ 1416.105311][T29329] do_file_open+0x20e/0x430 [ 1416.105359][T29329] ? __pfx_do_file_open+0x10/0x10 [ 1416.105402][T29329] ? __pfx_kfree_link+0x10/0x10 [ 1416.105451][T29329] ? alloc_fd+0x476/0x790 [ 1416.105483][T29329] ? do_getname+0x191/0x390 [ 1416.105533][T29329] do_sys_openat2+0x10d/0x1e0 [ 1416.105575][T29329] ? __pfx_do_sys_openat2+0x10/0x10 [ 1416.105629][T29329] __x64_sys_openat+0x12d/0x210 [ 1416.105669][T29329] ? __pfx___x64_sys_openat+0x10/0x10 [ 1416.105722][T29329] do_syscall_64+0x106/0xf80 [ 1416.105752][T29329] ? clear_bhb_loop+0x40/0x90 [ 1416.105789][T29329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.105818][T29329] RIP: 0033:0x7fe92bd5d04e [ 1416.105842][T29329] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1416.105869][T29329] RSP: 002b:00007fe92cbf8ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1416.105896][T29329] RAX: ffffffffffffffda RBX: 00007fe92cbf96c0 RCX: 00007fe92bd5d04e [ 1416.105916][T29329] RDX: 0000000000000002 RSI: 00007fe92cbf8f90 RDI: ffffffffffffff9c [ 1416.105934][T29329] RBP: 00007fe92be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1416.105952][T29329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1416.105970][T29329] R13: 00007fe92c016128 R14: 00007fe92c016090 R15: 00007ffc78cc6678 [ 1416.106013][T29329] [ 1416.809306][T29334] FAULT_INJECTION: forcing a failure. [ 1416.809306][T29334] name failslab, interval 1, probability 0, space 0, times 0 [ 1416.863528][T29334] CPU: 1 UID: 0 PID: 29334 Comm: syz.6.5189 Tainted: G L syzkaller #0 PREEMPT(full) [ 1416.863576][T29334] Tainted: [L]=SOFTLOCKUP [ 1416.863594][T29334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1416.863611][T29334] Call Trace: [ 1416.863621][T29334] [ 1416.863632][T29334] dump_stack_lvl+0x100/0x190 [ 1416.863681][T29334] should_fail_ex.cold+0x5/0xa [ 1416.863717][T29334] should_failslab+0xc2/0x120 [ 1416.863749][T29334] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1416.863795][T29334] ? proc_alloc_inode+0x25/0x200 [ 1416.863840][T29334] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1416.863884][T29334] proc_alloc_inode+0x25/0x200 [ 1416.863925][T29334] alloc_inode+0x68/0x250 [ 1416.863965][T29334] new_inode+0x22/0x1c0 [ 1416.864006][T29334] proc_pid_make_inode+0x22/0x160 [ 1416.864049][T29334] proc_pident_instantiate+0x85/0x310 [ 1416.864096][T29334] proc_pident_lookup+0x1e3/0x270 [ 1416.864149][T29334] __lookup_slow+0x251/0x460 [ 1416.864188][T29334] ? __pfx___lookup_slow+0x10/0x10 [ 1416.864257][T29334] lookup_slow+0x50/0x70 [ 1416.864295][T29334] link_path_walk+0x1377/0x1cc0 [ 1416.864351][T29334] path_openat+0x1be/0x31a0 [ 1416.864379][T29334] ? kasan_save_stack+0x3f/0x50 [ 1416.864405][T29334] ? kasan_save_stack+0x30/0x50 [ 1416.864428][T29334] ? kasan_save_track+0x14/0x30 [ 1416.864452][T29334] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1416.864504][T29334] ? __pfx_path_openat+0x10/0x10 [ 1416.864548][T29334] do_file_open+0x20e/0x430 [ 1416.864582][T29334] ? __pfx_do_file_open+0x10/0x10 [ 1416.864634][T29334] ? __pfx_kfree_link+0x10/0x10 [ 1416.864686][T29334] ? alloc_fd+0x476/0x790 [ 1416.864719][T29334] ? do_getname+0x191/0x390 [ 1416.864757][T29334] do_sys_openat2+0x10d/0x1e0 [ 1416.864794][T29334] ? __pfx_do_sys_openat2+0x10/0x10 [ 1416.864845][T29334] __x64_sys_openat+0x12d/0x210 [ 1416.864885][T29334] ? __pfx___x64_sys_openat+0x10/0x10 [ 1416.864943][T29334] do_syscall_64+0x106/0xf80 [ 1416.864973][T29334] ? clear_bhb_loop+0x40/0x90 [ 1416.865009][T29334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.865043][T29334] RIP: 0033:0x7fd000b5d04e [ 1416.865068][T29334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1416.865098][T29334] RSP: 002b:00007fd001996ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1416.865125][T29334] RAX: ffffffffffffffda RBX: 00007fd0019976c0 RCX: 00007fd000b5d04e [ 1416.865145][T29334] RDX: 0000000000000002 RSI: 00007fd001996f90 RDI: ffffffffffffff9c [ 1416.865164][T29334] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1416.865181][T29334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1416.865198][T29334] R13: 00007fd000e16128 R14: 00007fd000e16090 R15: 00007ffdfebb5728 [ 1416.865235][T29334] [ 1419.939358][T29389] ubi0: attaching mtd0 [ 1419.965756][T29389] ubi0: scanning is finished [ 1419.970432][T29389] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1420.258261][T29389] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1421.205821][T29416] ubi0: attaching mtd0 [ 1421.237594][T29416] ubi0: scanning is finished [ 1421.242214][T29416] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1421.631678][T29416] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1423.018027][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.027159][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.887907][T29460] FAULT_INJECTION: forcing a failure. [ 1423.887907][T29460] name failslab, interval 1, probability 0, space 0, times 0 [ 1423.903018][T29460] CPU: 0 UID: 0 PID: 29460 Comm: syz.6.5216 Tainted: G L syzkaller #0 PREEMPT(full) [ 1423.903065][T29460] Tainted: [L]=SOFTLOCKUP [ 1423.903087][T29460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1423.903106][T29460] Call Trace: [ 1423.903115][T29460] [ 1423.903127][T29460] dump_stack_lvl+0x100/0x190 [ 1423.903182][T29460] should_fail_ex.cold+0x5/0xa [ 1423.903218][T29460] should_failslab+0xc2/0x120 [ 1423.903251][T29460] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1423.903296][T29460] ? proc_alloc_inode+0x25/0x200 [ 1423.903342][T29460] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1423.903387][T29460] proc_alloc_inode+0x25/0x200 [ 1423.903428][T29460] alloc_inode+0x68/0x250 [ 1423.903467][T29460] new_inode+0x22/0x1c0 [ 1423.903510][T29460] proc_pid_make_inode+0x22/0x160 [ 1423.903554][T29460] proc_pident_instantiate+0x85/0x310 [ 1423.903600][T29460] proc_pident_lookup+0x1e3/0x270 [ 1423.903644][T29460] __lookup_slow+0x251/0x460 [ 1423.903681][T29460] ? __pfx___lookup_slow+0x10/0x10 [ 1423.903747][T29460] lookup_slow+0x50/0x70 [ 1423.903785][T29460] link_path_walk+0x1377/0x1cc0 [ 1423.903843][T29460] path_openat+0x1be/0x31a0 [ 1423.903872][T29460] ? kasan_save_stack+0x3f/0x50 [ 1423.903897][T29460] ? kasan_save_stack+0x30/0x50 [ 1423.903921][T29460] ? kasan_save_track+0x14/0x30 [ 1423.903947][T29460] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1423.904000][T29460] ? __pfx_path_openat+0x10/0x10 [ 1423.904046][T29460] do_file_open+0x20e/0x430 [ 1423.904080][T29460] ? __pfx_do_file_open+0x10/0x10 [ 1423.904126][T29460] ? __pfx_kfree_link+0x10/0x10 [ 1423.904185][T29460] ? alloc_fd+0x476/0x790 [ 1423.904220][T29460] ? do_getname+0x191/0x390 [ 1423.904261][T29460] do_sys_openat2+0x10d/0x1e0 [ 1423.904301][T29460] ? __pfx_do_sys_openat2+0x10/0x10 [ 1423.904354][T29460] __x64_sys_openat+0x12d/0x210 [ 1423.904394][T29460] ? __pfx___x64_sys_openat+0x10/0x10 [ 1423.904449][T29460] do_syscall_64+0x106/0xf80 [ 1423.904479][T29460] ? clear_bhb_loop+0x40/0x90 [ 1423.904516][T29460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.904546][T29460] RIP: 0033:0x7fd000b5d04e [ 1423.904570][T29460] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1423.904599][T29460] RSP: 002b:00007fd001996ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1423.904627][T29460] RAX: ffffffffffffffda RBX: 00007fd0019976c0 RCX: 00007fd000b5d04e [ 1423.904647][T29460] RDX: 0000000000000002 RSI: 00007fd001996f90 RDI: ffffffffffffff9c [ 1423.904666][T29460] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1423.904684][T29460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1423.904701][T29460] R13: 00007fd000e16128 R14: 00007fd000e16090 R15: 00007ffdfebb5728 [ 1423.904740][T29460] [ 1425.014532][T29472] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1425.127649][T29472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5222'. [ 1425.400709][T29477] ubi0: attaching mtd0 [ 1425.416705][T29477] ubi0: scanning is finished [ 1425.416882][T16989] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1425 with max blocks 5 with error 117 [ 1425.421362][T29477] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1425.466278][T16989] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1425.466278][T16989] [ 1425.749854][T29483] can: request_module (can-proto-0) failed. [ 1425.795821][T29477] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1425.981404][T29499] ubi0: attaching mtd0 [ 1426.006118][T29499] ubi0: scanning is finished [ 1426.010804][T29499] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1426.202444][T29499] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1426.234478][T29498] ubi0: attaching mtd0 [ 1426.240651][T29498] ubi0: scanning is finished [ 1426.277891][T29498] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1426.459353][T29498] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1426.689073][T29516] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1426.712457][T29516] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5233'. [ 1427.976631][T29548] ubi0: attaching mtd0 [ 1428.033009][T29548] ubi0: scanning is finished [ 1428.060163][T29548] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1428.326695][T29548] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1428.634613][T29560] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1428.670719][T29560] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5245'. [ 1429.728976][T29576] capability: warning: `syz.3.5251' uses 32-bit capabilities (legacy support in use) [ 1430.214743][T26458] Bluetooth: hci1: command 0x0406 tx timeout [ 1433.890452][T29663] ubi0: attaching mtd0 [ 1433.906969][T29663] ubi0: scanning is finished [ 1433.911647][T29663] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1433.986014][T29667] FAULT_INJECTION: forcing a failure. [ 1433.986014][T29667] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1434.018118][T29667] CPU: 0 UID: 0 PID: 29667 Comm: syz.5.5276 Tainted: G L syzkaller #0 PREEMPT(full) [ 1434.018159][T29667] Tainted: [L]=SOFTLOCKUP [ 1434.018168][T29667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1434.018183][T29667] Call Trace: [ 1434.018192][T29667] [ 1434.018201][T29667] dump_stack_lvl+0x100/0x190 [ 1434.018245][T29667] should_fail_ex.cold+0x5/0xa [ 1434.018276][T29667] get_futex_key+0x295/0x1620 [ 1434.018314][T29667] ? __pfx_get_futex_key+0x10/0x10 [ 1434.018344][T29667] ? lock_acquire+0x1cf/0x380 [ 1434.018388][T29667] futex_wake+0xea/0x530 [ 1434.018430][T29667] ? __pfx_futex_wake+0x10/0x10 [ 1434.018466][T29667] ? exit_mm_release+0x19/0x30 [ 1434.018508][T29667] do_futex+0x32b/0x350 [ 1434.018541][T29667] ? __pfx_do_futex+0x10/0x10 [ 1434.018572][T29667] ? __might_fault+0xc5/0x140 [ 1434.018619][T29667] mm_release+0x24a/0x2f0 [ 1434.018648][T29667] do_exit+0x704/0x2b60 [ 1434.018684][T29667] ? __pfx_do_exit+0x10/0x10 [ 1434.018719][T29667] ? do_raw_spin_lock+0x128/0x260 [ 1434.018757][T29667] ? find_held_lock+0x2b/0x80 [ 1434.018781][T29667] ? get_signal+0x7e0/0x21e0 [ 1434.018813][T29667] do_group_exit+0xd5/0x2a0 [ 1434.018861][T29667] get_signal+0x1ec7/0x21e0 [ 1434.018903][T29667] ? __pfx_get_signal+0x10/0x10 [ 1434.018934][T29667] ? do_futex+0x192/0x350 [ 1434.018973][T29667] arch_do_signal_or_restart+0x91/0x770 [ 1434.019009][T29667] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1434.019049][T29667] ? __pfx___x64_sys_futex+0x10/0x10 [ 1434.019091][T29667] exit_to_user_mode_loop+0x86/0x4a0 [ 1434.019129][T29667] do_syscall_64+0x668/0xf80 [ 1434.019156][T29667] ? clear_bhb_loop+0x40/0x90 [ 1434.019188][T29667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.019215][T29667] RIP: 0033:0x7fe92bd9c819 [ 1434.019237][T29667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1434.019262][T29667] RSP: 002b:00007fe92cc1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1434.019286][T29667] RAX: fffffffffffffe00 RBX: 00007fe92c015fa8 RCX: 00007fe92bd9c819 [ 1434.019304][T29667] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe92c015fa8 [ 1434.019320][T29667] RBP: 00007fe92c015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1434.019335][T29667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1434.019351][T29667] R13: 00007fe92c016038 R14: 00007ffc78cc6590 R15: 00007ffc78cc6678 [ 1434.019386][T29667] [ 1434.451277][T29663] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1434.623505][T29673] FAULT_INJECTION: forcing a failure. [ 1434.623505][T29673] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.701337][T29673] CPU: 1 UID: 0 PID: 29673 Comm: syz.5.5278 Tainted: G L syzkaller #0 PREEMPT(full) [ 1434.701368][T29673] Tainted: [L]=SOFTLOCKUP [ 1434.701373][T29673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1434.701382][T29673] Call Trace: [ 1434.701389][T29673] [ 1434.701396][T29673] dump_stack_lvl+0x100/0x190 [ 1434.701423][T29673] should_fail_ex.cold+0x5/0xa [ 1434.701441][T29673] should_failslab+0xc2/0x120 [ 1434.701458][T29673] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1434.701480][T29673] ? security_file_alloc+0x34/0x2c0 [ 1434.701499][T29673] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1434.701519][T29673] security_file_alloc+0x34/0x2c0 [ 1434.701538][T29673] init_file+0x95/0x480 [ 1434.701557][T29673] alloc_empty_file+0x73/0x1c0 [ 1434.701577][T29673] path_openat+0xe8/0x31a0 [ 1434.701592][T29673] ? kasan_save_stack+0x3f/0x50 [ 1434.701604][T29673] ? kasan_save_stack+0x30/0x50 [ 1434.701617][T29673] ? kasan_save_track+0x14/0x30 [ 1434.701629][T29673] ? __kasan_slab_alloc+0x89/0x90 [ 1434.701643][T29673] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1434.701664][T29673] ? do_getname+0x35/0x390 [ 1434.701681][T29673] ? do_sys_openat2+0xc5/0x1e0 [ 1434.701699][T29673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.701717][T29673] ? __pfx_path_openat+0x10/0x10 [ 1434.701739][T29673] do_file_open+0x20e/0x430 [ 1434.701756][T29673] ? __pfx_do_file_open+0x10/0x10 [ 1434.701792][T29673] ? alloc_fd+0x476/0x790 [ 1434.701810][T29673] ? do_getname+0x191/0x390 [ 1434.701832][T29673] do_sys_openat2+0x10d/0x1e0 [ 1434.701853][T29673] ? __pfx_do_sys_openat2+0x10/0x10 [ 1434.701880][T29673] __x64_sys_openat+0x12d/0x210 [ 1434.701901][T29673] ? __pfx___x64_sys_openat+0x10/0x10 [ 1434.701927][T29673] do_syscall_64+0x106/0xf80 [ 1434.701943][T29673] ? clear_bhb_loop+0x40/0x90 [ 1434.701960][T29673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.701975][T29673] RIP: 0033:0x7fe92bd9c819 [ 1434.701989][T29673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1434.702004][T29673] RSP: 002b:00007fe92cc1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1434.702018][T29673] RAX: ffffffffffffffda RBX: 00007fe92c015fa0 RCX: 00007fe92bd9c819 [ 1434.702028][T29673] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 1434.702037][T29673] RBP: 00007fe92be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1434.702046][T29673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1434.702055][T29673] R13: 00007fe92c016038 R14: 00007fe92c015fa0 R15: 00007ffc78cc6678 [ 1434.702074][T29673] [ 1435.334305][T26458] Bluetooth: hci3: command 0x0406 tx timeout [ 1435.654905][T29673] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1435.660953][T29673] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1435.724546][T29673] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1435.757379][T29673] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1435.789877][T29673] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1435.820985][T29673] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1435.932121][T29673] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1435.947311][T29673] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1435.991525][T29673] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1436.031610][T29673] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1436.115371][T29673] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1437.088399][T29704] ubi0: attaching mtd0 [ 1437.112916][T29704] ubi0: scanning is finished [ 1437.136586][T29704] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1437.416493][T29704] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1437.575386][T13980] Bluetooth: hci0: command 0x0406 tx timeout [ 1437.734465][T13980] Bluetooth: hci4: command 0x0406 tx timeout [ 1437.737883][T26458] Bluetooth: hci2: command 0x0406 tx timeout [ 1437.814289][T26458] Bluetooth: hci1: command 0x0406 tx timeout [ 1437.824824][T29724] ubi0: attaching mtd0 [ 1437.856574][T29724] ubi0: scanning is finished [ 1437.861241][T29724] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1437.974216][T26458] Bluetooth: hci3: command 0x0406 tx timeout [ 1438.054509][T26458] Bluetooth: hci5: command 0x0c1a tx timeout [ 1438.166151][T29724] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1439.205664][T29735] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1439.216617][T29735] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1439.222677][T29735] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1439.293416][T29735] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1439.353414][T29735] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1439.381509][T29735] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1440.614367][T26458] Bluetooth: hci0: command 0x0406 tx timeout [ 1441.254283][T26458] Bluetooth: hci4: command 0x0406 tx timeout [ 1441.254308][T13980] Bluetooth: hci2: command 0x0406 tx timeout [ 1441.344926][T13980] Bluetooth: hci1: command 0x0406 tx timeout [ 1441.367660][T29772] FAULT_INJECTION: forcing a failure. [ 1441.367660][T29772] name failslab, interval 1, probability 0, space 0, times 0 [ 1441.429604][T13980] Bluetooth: hci5: command 0x0c1a tx timeout [ 1441.435486][T26458] Bluetooth: hci3: command 0x0406 tx timeout [ 1441.446288][T29772] CPU: 1 UID: 0 PID: 29772 Comm: syz.5.5298 Tainted: G L syzkaller #0 PREEMPT(full) [ 1441.446314][T29772] Tainted: [L]=SOFTLOCKUP [ 1441.446319][T29772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1441.446330][T29772] Call Trace: [ 1441.446335][T29772] [ 1441.446342][T29772] dump_stack_lvl+0x100/0x190 [ 1441.446368][T29772] should_fail_ex.cold+0x5/0xa [ 1441.446388][T29772] should_failslab+0xc2/0x120 [ 1441.446404][T29772] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1441.446427][T29772] ? proc_alloc_inode+0x25/0x200 [ 1441.446451][T29772] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1441.446473][T29772] proc_alloc_inode+0x25/0x200 [ 1441.446493][T29772] alloc_inode+0x68/0x250 [ 1441.446513][T29772] new_inode+0x22/0x1c0 [ 1441.446534][T29772] proc_pid_make_inode+0x22/0x160 [ 1441.446556][T29772] proc_pident_instantiate+0x85/0x310 [ 1441.446580][T29772] proc_pident_lookup+0x1e3/0x270 [ 1441.446605][T29772] __lookup_slow+0x251/0x460 [ 1441.446625][T29772] ? __pfx___lookup_slow+0x10/0x10 [ 1441.446660][T29772] lookup_slow+0x50/0x70 [ 1441.446679][T29772] link_path_walk+0x1377/0x1cc0 [ 1441.446707][T29772] path_openat+0x1be/0x31a0 [ 1441.446722][T29772] ? kasan_save_stack+0x3f/0x50 [ 1441.446735][T29772] ? kasan_save_stack+0x30/0x50 [ 1441.446747][T29772] ? kasan_save_track+0x14/0x30 [ 1441.446760][T29772] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1441.446787][T29772] ? __pfx_path_openat+0x10/0x10 [ 1441.446810][T29772] do_file_open+0x20e/0x430 [ 1441.446827][T29772] ? __pfx_do_file_open+0x10/0x10 [ 1441.446850][T29772] ? __pfx_kfree_link+0x10/0x10 [ 1441.446875][T29772] ? alloc_fd+0x476/0x790 [ 1441.446892][T29772] ? do_getname+0x191/0x390 [ 1441.446913][T29772] do_sys_openat2+0x10d/0x1e0 [ 1441.446932][T29772] ? __pfx_do_sys_openat2+0x10/0x10 [ 1441.446959][T29772] __x64_sys_openat+0x12d/0x210 [ 1441.446979][T29772] ? __pfx___x64_sys_openat+0x10/0x10 [ 1441.447007][T29772] do_syscall_64+0x106/0xf80 [ 1441.447022][T29772] ? clear_bhb_loop+0x40/0x90 [ 1441.447040][T29772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.447055][T29772] RIP: 0033:0x7fe92bd5d04e [ 1441.447070][T29772] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1441.447084][T29772] RSP: 002b:00007fe92cbf8ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1441.447099][T29772] RAX: ffffffffffffffda RBX: 00007fe92cbf96c0 RCX: 00007fe92bd5d04e [ 1441.447109][T29772] RDX: 0000000000000002 RSI: 00007fe92cbf8f90 RDI: ffffffffffffff9c [ 1441.447126][T29772] RBP: 00007fe92be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1441.447135][T29772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1441.447145][T29772] R13: 00007fe92c016128 R14: 00007fe92c016090 R15: 00007ffc78cc6678 [ 1441.447164][T29772] [ 1443.498959][T26458] Bluetooth: hci5: command 0x0c1a tx timeout [ 1446.140053][T29860] futex_wake_op: syz.3.5316 tries to shift op by -2048; fix this program [ 1449.156489][T29918] FAULT_INJECTION: forcing a failure. [ 1449.156489][T29918] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.169461][T29918] CPU: 1 UID: 0 PID: 29918 Comm: syz.5.5330 Tainted: G L syzkaller #0 PREEMPT(full) [ 1449.169504][T29918] Tainted: [L]=SOFTLOCKUP [ 1449.169513][T29918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1449.169528][T29918] Call Trace: [ 1449.169537][T29918] [ 1449.169546][T29918] dump_stack_lvl+0x100/0x190 [ 1449.169590][T29918] should_fail_ex.cold+0x5/0xa [ 1449.169679][T29918] should_failslab+0xc2/0x120 [ 1449.169712][T29918] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1449.169754][T29918] ? proc_alloc_inode+0x25/0x200 [ 1449.169795][T29918] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1449.169868][T29918] proc_alloc_inode+0x25/0x200 [ 1449.169906][T29918] alloc_inode+0x68/0x250 [ 1449.169942][T29918] new_inode+0x22/0x1c0 [ 1449.169980][T29918] proc_pid_make_inode+0x22/0x160 [ 1449.170019][T29918] proc_pident_instantiate+0x85/0x310 [ 1449.170060][T29918] proc_pident_lookup+0x1e3/0x270 [ 1449.170106][T29918] __lookup_slow+0x251/0x460 [ 1449.170141][T29918] ? __pfx___lookup_slow+0x10/0x10 [ 1449.170202][T29918] lookup_slow+0x50/0x70 [ 1449.170236][T29918] link_path_walk+0x1377/0x1cc0 [ 1449.170287][T29918] path_openat+0x1be/0x31a0 [ 1449.170327][T29918] ? kasan_save_stack+0x3f/0x50 [ 1449.170351][T29918] ? kasan_save_stack+0x30/0x50 [ 1449.170378][T29918] ? kasan_save_track+0x14/0x30 [ 1449.170402][T29918] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1449.170454][T29918] ? __pfx_path_openat+0x10/0x10 [ 1449.170495][T29918] do_file_open+0x20e/0x430 [ 1449.170526][T29918] ? __pfx_do_file_open+0x10/0x10 [ 1449.170605][T29918] ? __pfx_kfree_link+0x10/0x10 [ 1449.170659][T29918] ? alloc_fd+0x476/0x790 [ 1449.170691][T29918] ? do_getname+0x191/0x390 [ 1449.170729][T29918] do_sys_openat2+0x10d/0x1e0 [ 1449.170767][T29918] ? __pfx_do_sys_openat2+0x10/0x10 [ 1449.170814][T29918] __x64_sys_openat+0x12d/0x210 [ 1449.170850][T29918] ? __pfx___x64_sys_openat+0x10/0x10 [ 1449.170907][T29918] do_syscall_64+0x106/0xf80 [ 1449.170934][T29918] ? clear_bhb_loop+0x40/0x90 [ 1449.170966][T29918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.170993][T29918] RIP: 0033:0x7fe92bd5d04e [ 1449.171015][T29918] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1449.171040][T29918] RSP: 002b:00007fe92cbf8ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1449.171065][T29918] RAX: ffffffffffffffda RBX: 00007fe92cbf96c0 RCX: 00007fe92bd5d04e [ 1449.171083][T29918] RDX: 0000000000000002 RSI: 00007fe92cbf8f90 RDI: ffffffffffffff9c [ 1449.171103][T29918] RBP: 00007fe92be32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1449.171119][T29918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1449.171134][T29918] R13: 00007fe92c016128 R14: 00007fe92c016090 R15: 00007ffc78cc6678 [ 1449.171168][T29918] [ 1451.486044][T29948] FAULT_INJECTION: forcing a failure. [ 1451.486044][T29948] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.504216][T29948] CPU: 1 UID: 0 PID: 29948 Comm: syz.6.5336 Tainted: G L syzkaller #0 PREEMPT(full) [ 1451.504260][T29948] Tainted: [L]=SOFTLOCKUP [ 1451.504271][T29948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1451.504288][T29948] Call Trace: [ 1451.504298][T29948] [ 1451.504308][T29948] dump_stack_lvl+0x100/0x190 [ 1451.504356][T29948] should_fail_ex.cold+0x5/0xa [ 1451.504389][T29948] should_failslab+0xc2/0x120 [ 1451.504419][T29948] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1451.504457][T29948] ? security_inode_alloc+0x3b/0x2c0 [ 1451.504486][T29948] ? lockdep_init_map_type+0x5c/0x250 [ 1451.504530][T29948] security_inode_alloc+0x3b/0x2c0 [ 1451.504563][T29948] inode_init_always_gfp+0xced/0x1040 [ 1451.504599][T29948] alloc_inode+0x8e/0x250 [ 1451.504639][T29948] new_inode+0x22/0x1c0 [ 1451.504681][T29948] proc_pid_make_inode+0x22/0x160 [ 1451.504726][T29948] proc_ns_dir_lookup+0x25b/0x390 [ 1451.504772][T29948] lookup_open.isra.0+0x631/0x11b0 [ 1451.504825][T29948] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1451.504889][T29948] ? mnt_get_write_access+0x1e9/0x2f0 [ 1451.504935][T29948] path_openat+0xa98/0x31a0 [ 1451.504979][T29948] ? __pfx_path_openat+0x10/0x10 [ 1451.505024][T29948] do_file_open+0x20e/0x430 [ 1451.505066][T29948] ? __pfx_do_file_open+0x10/0x10 [ 1451.505112][T29948] ? __pfx_kfree_link+0x10/0x10 [ 1451.505165][T29948] ? alloc_fd+0x476/0x790 [ 1451.505198][T29948] ? do_getname+0x191/0x390 [ 1451.505239][T29948] do_sys_openat2+0x10d/0x1e0 [ 1451.505279][T29948] ? __pfx_do_sys_openat2+0x10/0x10 [ 1451.505331][T29948] __x64_sys_openat+0x12d/0x210 [ 1451.505371][T29948] ? __pfx___x64_sys_openat+0x10/0x10 [ 1451.505422][T29948] do_syscall_64+0x106/0xf80 [ 1451.505451][T29948] ? clear_bhb_loop+0x40/0x90 [ 1451.505487][T29948] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.505516][T29948] RIP: 0033:0x7fd000b5d04e [ 1451.505540][T29948] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1451.505567][T29948] RSP: 002b:00007fd001996ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1451.505594][T29948] RAX: ffffffffffffffda RBX: 00007fd0019976c0 RCX: 00007fd000b5d04e [ 1451.505614][T29948] RDX: 0000000000000002 RSI: 00007fd001996f90 RDI: ffffffffffffff9c [ 1451.505631][T29948] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1451.505648][T29948] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1451.505665][T29948] R13: 00007fd000e16128 R14: 00007fd000e16090 R15: 00007ffdfebb5728 [ 1451.505704][T29948] [ 1454.555835][T29991] ubi0: attaching mtd0 [ 1454.611402][T29991] ubi0: scanning is finished [ 1454.662357][T29991] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1455.216906][T29991] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1455.975774][ T13] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1425 with max blocks 5 with error 117 [ 1455.994307][ T13] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1455.994307][ T13] [ 1458.253845][T30051] ubi0: attaching mtd0 [ 1458.267836][T30051] ubi0: scanning is finished [ 1458.292925][T30051] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1458.939904][T30051] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1459.414392][T30072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5362'. [ 1459.445253][T30072] netlink: 51505 bytes leftover after parsing attributes in process `syz.0.5362'. [ 1459.616658][T30079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5363'. [ 1462.276940][T30122] ubi0: attaching mtd0 [ 1462.327066][T30122] ubi0: scanning is finished [ 1462.340630][T30122] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1462.648612][T30122] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1463.764628][T30149] ubi0: attaching mtd0 [ 1463.798702][T30149] ubi0: scanning is finished [ 1463.813623][T30149] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1464.167580][T30149] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1464.391419][T30163] FAULT_INJECTION: forcing a failure. [ 1464.391419][T30163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1464.431198][T30163] CPU: 0 UID: 0 PID: 30163 Comm: syz.5.5381 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.431237][T30163] Tainted: [L]=SOFTLOCKUP [ 1464.431247][T30163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1464.431262][T30163] Call Trace: [ 1464.431271][T30163] [ 1464.431280][T30163] dump_stack_lvl+0x100/0x190 [ 1464.431319][T30163] should_fail_ex.cold+0x5/0xa [ 1464.431348][T30163] _copy_from_user+0x2e/0xd0 [ 1464.431381][T30163] dvb_usercopy+0x27e/0x340 [ 1464.431408][T30163] ? __pfx_dvb_frontend_do_ioctl+0x10/0x10 [ 1464.431439][T30163] ? __pfx_dvb_usercopy+0x10/0x10 [ 1464.431485][T30163] ? __fget_files+0x21f/0x3d0 [ 1464.431518][T30163] dvb_frontend_ioctl+0x50/0x80 [ 1464.431542][T30163] ? __pfx_dvb_frontend_ioctl+0x10/0x10 [ 1464.431568][T30163] __x64_sys_ioctl+0x18e/0x210 [ 1464.431609][T30163] do_syscall_64+0x106/0xf80 [ 1464.431635][T30163] ? clear_bhb_loop+0x40/0x90 [ 1464.431667][T30163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.431694][T30163] RIP: 0033:0x7fe92bd9c819 [ 1464.431715][T30163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1464.431739][T30163] RSP: 002b:00007fe92cc1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1464.431770][T30163] RAX: ffffffffffffffda RBX: 00007fe92c015fa0 RCX: 00007fe92bd9c819 [ 1464.431787][T30163] RDX: 0000000000000004 RSI: 0000000080046f49 RDI: 0000000000000003 [ 1464.431803][T30163] RBP: 00007fe92cc1a090 R08: 0000000000000000 R09: 0000000000000000 [ 1464.431819][T30163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1464.431835][T30163] R13: 00007fe92c016038 R14: 00007fe92c015fa0 R15: 00007ffc78cc6678 [ 1464.431868][T30163] [ 1464.868713][T30173] FAULT_INJECTION: forcing a failure. [ 1464.868713][T30173] name failslab, interval 1, probability 0, space 0, times 0 [ 1464.943382][T30173] CPU: 1 UID: 0 PID: 30173 Comm: syz.6.5383 Tainted: G L syzkaller #0 PREEMPT(full) [ 1464.943427][T30173] Tainted: [L]=SOFTLOCKUP [ 1464.943437][T30173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1464.943452][T30173] Call Trace: [ 1464.943462][T30173] [ 1464.943473][T30173] dump_stack_lvl+0x100/0x190 [ 1464.943519][T30173] should_fail_ex.cold+0x5/0xa [ 1464.943555][T30173] should_failslab+0xc2/0x120 [ 1464.943586][T30173] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1464.943630][T30173] ? __d_alloc+0x34/0xa80 [ 1464.943670][T30173] __d_alloc+0x34/0xa80 [ 1464.943705][T30173] d_alloc_parallel+0x111/0x14e0 [ 1464.943759][T30173] ? find_held_lock+0x2b/0x80 [ 1464.943788][T30173] ? __d_lookup+0x25c/0x4a0 [ 1464.943829][T30173] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1464.943879][T30173] ? __d_lookup+0x266/0x4a0 [ 1464.943928][T30173] lookup_open.isra.0+0x57c/0x11b0 [ 1464.943984][T30173] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1464.944047][T30173] ? mnt_get_write_access+0x1e9/0x2f0 [ 1464.944094][T30173] path_openat+0xa98/0x31a0 [ 1464.944139][T30173] ? __pfx_path_openat+0x10/0x10 [ 1464.944184][T30173] do_file_open+0x20e/0x430 [ 1464.944219][T30173] ? __pfx_do_file_open+0x10/0x10 [ 1464.944258][T30173] ? __pfx_kfree_link+0x10/0x10 [ 1464.944306][T30173] ? alloc_fd+0x476/0x790 [ 1464.944336][T30173] ? do_getname+0x191/0x390 [ 1464.944373][T30173] do_sys_openat2+0x10d/0x1e0 [ 1464.944413][T30173] ? __pfx_do_sys_openat2+0x10/0x10 [ 1464.944457][T30173] __x64_sys_openat+0x12d/0x210 [ 1464.944486][T30173] ? __pfx___x64_sys_openat+0x10/0x10 [ 1464.944538][T30173] do_syscall_64+0x106/0xf80 [ 1464.944557][T30173] ? clear_bhb_loop+0x40/0x90 [ 1464.944575][T30173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.944591][T30173] RIP: 0033:0x7fd000b5d04e [ 1464.944605][T30173] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1464.944619][T30173] RSP: 002b:00007fd001996ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1464.944634][T30173] RAX: ffffffffffffffda RBX: 00007fd0019976c0 RCX: 00007fd000b5d04e [ 1464.944644][T30173] RDX: 0000000000000002 RSI: 00007fd001996f90 RDI: ffffffffffffff9c [ 1464.944654][T30173] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1464.944663][T30173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1464.944672][T30173] R13: 00007fd000e16128 R14: 00007fd000e16090 R15: 00007ffdfebb5728 [ 1464.944692][T30173] [ 1470.401424][T30255] Invalid ELF header magic: != ELF [ 1470.568070][T30263] FAULT_INJECTION: forcing a failure. [ 1470.568070][T30263] name failslab, interval 1, probability 0, space 0, times 0 [ 1470.600746][T30263] CPU: 0 UID: 0 PID: 30263 Comm: syz.6.5406 Tainted: G L syzkaller #0 PREEMPT(full) [ 1470.600793][T30263] Tainted: [L]=SOFTLOCKUP [ 1470.600804][T30263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1470.600821][T30263] Call Trace: [ 1470.600831][T30263] [ 1470.600842][T30263] dump_stack_lvl+0x100/0x190 [ 1470.600895][T30263] should_fail_ex.cold+0x5/0xa [ 1470.600930][T30263] should_failslab+0xc2/0x120 [ 1470.600964][T30263] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1470.601009][T30263] ? proc_alloc_inode+0x25/0x200 [ 1470.601055][T30263] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1470.601100][T30263] proc_alloc_inode+0x25/0x200 [ 1470.601141][T30263] alloc_inode+0x68/0x250 [ 1470.601179][T30263] new_inode+0x22/0x1c0 [ 1470.601221][T30263] proc_pid_make_inode+0x22/0x160 [ 1470.601265][T30263] proc_pident_instantiate+0x85/0x310 [ 1470.601312][T30263] proc_pident_lookup+0x1e3/0x270 [ 1470.601368][T30263] __lookup_slow+0x251/0x460 [ 1470.601414][T30263] ? __pfx___lookup_slow+0x10/0x10 [ 1470.601483][T30263] lookup_slow+0x50/0x70 [ 1470.601522][T30263] link_path_walk+0x1377/0x1cc0 [ 1470.601580][T30263] path_openat+0x1be/0x31a0 [ 1470.601610][T30263] ? kasan_save_stack+0x3f/0x50 [ 1470.601635][T30263] ? kasan_save_stack+0x30/0x50 [ 1470.601660][T30263] ? kasan_save_track+0x14/0x30 [ 1470.601687][T30263] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 1470.601739][T30263] ? __pfx_path_openat+0x10/0x10 [ 1470.601784][T30263] do_file_open+0x20e/0x430 [ 1470.601819][T30263] ? __pfx_do_file_open+0x10/0x10 [ 1470.601864][T30263] ? __pfx_kfree_link+0x10/0x10 [ 1470.601919][T30263] ? alloc_fd+0x476/0x790 [ 1470.601953][T30263] ? do_getname+0x191/0x390 [ 1470.601993][T30263] do_sys_openat2+0x10d/0x1e0 [ 1470.602032][T30263] ? __pfx_do_sys_openat2+0x10/0x10 [ 1470.602084][T30263] __x64_sys_openat+0x12d/0x210 [ 1470.602135][T30263] ? __pfx___x64_sys_openat+0x10/0x10 [ 1470.602192][T30263] do_syscall_64+0x106/0xf80 [ 1470.602221][T30263] ? clear_bhb_loop+0x40/0x90 [ 1470.602256][T30263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.602285][T30263] RIP: 0033:0x7fd000b5d04e [ 1470.602310][T30263] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1470.602338][T30263] RSP: 002b:00007fd001996ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1470.602365][T30263] RAX: ffffffffffffffda RBX: 00007fd0019976c0 RCX: 00007fd000b5d04e [ 1470.602384][T30263] RDX: 0000000000000002 RSI: 00007fd001996f90 RDI: ffffffffffffff9c [ 1470.602402][T30263] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1470.602425][T30263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1470.602442][T30263] R13: 00007fd000e16128 R14: 00007fd000e16090 R15: 00007ffdfebb5728 [ 1470.602480][T30263] [ 1474.396169][T30306] zram: Cannot change disksize for initialized device [ 1476.162501][T30328] FAULT_INJECTION: forcing a failure. [ 1476.162501][T30328] name failslab, interval 1, probability 0, space 0, times 0 [ 1476.248350][T30328] CPU: 0 UID: 0 PID: 30328 Comm: syz.6.5421 Tainted: G L syzkaller #0 PREEMPT(full) [ 1476.248399][T30328] Tainted: [L]=SOFTLOCKUP [ 1476.248411][T30328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1476.248429][T30328] Call Trace: [ 1476.248440][T30328] [ 1476.248452][T30328] dump_stack_lvl+0x100/0x190 [ 1476.248502][T30328] should_fail_ex.cold+0x5/0xa [ 1476.248536][T30328] should_failslab+0xc2/0x120 [ 1476.248568][T30328] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1476.248607][T30328] ? landlock_init_hierarchy_log+0xa9/0x820 [ 1476.248658][T30328] landlock_init_hierarchy_log+0xa9/0x820 [ 1476.248709][T30328] landlock_merge_ruleset+0x67b/0x830 [ 1476.248743][T30328] ? prepare_creds+0x5ee/0x950 [ 1476.248789][T30328] __do_sys_landlock_restrict_self+0x2a6/0x9e0 [ 1476.248828][T30328] do_syscall_64+0x106/0xf80 [ 1476.248857][T30328] ? clear_bhb_loop+0x40/0x90 [ 1476.248900][T30328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1476.248930][T30328] RIP: 0033:0x7fd000b9c819 [ 1476.248953][T30328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1476.248983][T30328] RSP: 002b:00007fd001997028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 1476.249010][T30328] RAX: ffffffffffffffda RBX: 00007fd000e16090 RCX: 00007fd000b9c819 [ 1476.249031][T30328] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000000003 [ 1476.249048][T30328] RBP: 00007fd000c32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1476.249066][T30328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1476.249083][T30328] R13: 00007fd000e16128 R14: 00007fd000e16090 R15: 00007ffdfebb5728 [ 1476.249122][T30328] [ 1477.366346][T30345] ubi0: attaching mtd0 [ 1477.386263][T30345] ubi0: scanning is finished [ 1477.390940][T30345] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1477.652174][T30345] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1479.444023][T27552] NFSD: Failed to start, no listeners configured. [ 1484.459333][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.465764][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.420052][T30514] ubi0: attaching mtd0 [ 1485.446110][T30514] ubi0: scanning is finished [ 1485.450783][T30514] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1485.648598][T30514] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1486.601120][T30539] ubi0: attaching mtd0 [ 1486.613195][T30539] ubi0: scanning is finished [ 1486.628927][T30539] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1486.695152][ T150] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1425 with max blocks 5 with error 117 [ 1486.748197][ T150] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1486.748197][ T150] [ 1486.879708][T30539] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1487.322331][T30551] FAULT_INJECTION: forcing a failure. [ 1487.322331][T30551] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1487.363581][T30551] CPU: 0 UID: 0 PID: 30551 Comm: syz.6.5474 Tainted: G L syzkaller #0 PREEMPT(full) [ 1487.363625][T30551] Tainted: [L]=SOFTLOCKUP [ 1487.363635][T30551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1487.363652][T30551] Call Trace: [ 1487.363660][T30551] [ 1487.363672][T30551] dump_stack_lvl+0x100/0x190 [ 1487.363718][T30551] should_fail_ex.cold+0x5/0xa [ 1487.363750][T30551] _copy_from_user+0x2e/0xd0 [ 1487.363787][T30551] copy_msghdr_from_user+0x9f/0x4f0 [ 1487.363824][T30551] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1487.363876][T30551] ___sys_sendmsg+0x106/0x1e0 [ 1487.363914][T30551] ? __pfx____sys_sendmsg+0x10/0x10 [ 1487.363989][T30551] __sys_sendmsg+0x170/0x220 [ 1487.364017][T30551] ? __pfx___sys_sendmsg+0x10/0x10 [ 1487.364065][T30551] do_syscall_64+0x106/0xf80 [ 1487.364094][T30551] ? clear_bhb_loop+0x40/0x90 [ 1487.364128][T30551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1487.364153][T30551] RIP: 0033:0x7fd000b9c819 [ 1487.364173][T30551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1487.364196][T30551] RSP: 002b:00007fd0019b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1487.364219][T30551] RAX: ffffffffffffffda RBX: 00007fd000e15fa0 RCX: 00007fd000b9c819 [ 1487.364236][T30551] RDX: 0000000000000810 RSI: 0000200000000580 RDI: 0000000000000003 [ 1487.364252][T30551] RBP: 00007fd0019b8090 R08: 0000000000000000 R09: 0000000000000000 [ 1487.364267][T30551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1487.364283][T30551] R13: 00007fd000e16038 R14: 00007fd000e15fa0 R15: 00007ffdfebb5728 [ 1487.364317][T30551] [ 1487.957864][T30561] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 1488.839767][T30576] ubi0: attaching mtd0 [ 1488.861763][T30576] ubi0: scanning is finished [ 1488.904226][T30576] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1488.943921][ T31] INFO: task syz.4.4856:27983 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1488.984340][ T31] Tainted: G L syzkaller #0 [ 1488.991501][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1489.083265][ T31] task:syz.4.4856 state:D stack:27256 pid:27983 tgid:27982 ppid:15098 task_flags:0x400140 flags:0x00080002 [ 1489.139766][ T31] Call Trace: [ 1489.143091][ T31] [ 1489.184269][ T31] __schedule+0xfee/0x6120 [ 1489.192523][ T31] ? __lock_acquire+0x4a5/0x2630 [ 1489.201008][ T31] ? __pfx___schedule+0x10/0x10 [ 1489.214100][ T31] ? find_held_lock+0x2b/0x80 [ 1489.223973][ T31] ? schedule+0x2bf/0x390 [ 1489.232749][ T31] schedule+0xdd/0x390 [ 1489.241843][ T31] schedule_preempt_disabled+0x13/0x30 [ 1489.259823][ T31] __mutex_lock+0xc9a/0x1b90 [ 1489.266458][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1489.284182][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1489.292356][ T31] ? net_generic+0xea/0x2a0 [ 1489.302291][ T31] ? net_generic+0xea/0x2a0 [ 1489.313458][ T31] ? nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1489.326787][ T31] nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1489.348050][ T31] genl_family_rcv_msg_doit+0x214/0x300 [ 1489.362208][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1489.373519][ T31] ? genl_get_cmd+0x3ef/0x720 [ 1489.386173][ T31] ? bpf_lsm_capable+0x9/0x10 [ 1489.397988][ T31] ? security_capable+0x80/0x260 [ 1489.412213][ T31] genl_rcv_msg+0x560/0x800 [ 1489.422634][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1489.436974][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 1489.451348][ T31] netlink_rcv_skb+0x159/0x420 [ 1489.469380][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1489.482371][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1489.497787][ T31] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1489.510946][ T31] genl_rcv+0x28/0x40 [ 1489.521885][ T31] netlink_unicast+0x5aa/0x870 [ 1489.531998][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 1489.545253][ T31] netlink_sendmsg+0x8b0/0xda0 [ 1489.556297][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.567891][ T31] ? __import_iovec+0x1d2/0x640 [ 1489.580598][ T31] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1489.594173][ T31] ____sys_sendmsg+0x9e1/0xb70 [ 1489.604331][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1489.609625][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1489.628078][ T31] ? try_to_wake_up+0x644/0x1a80 [ 1489.641209][ T31] ___sys_sendmsg+0x190/0x1e0 [ 1489.654504][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 1489.674156][ T31] ? futex_private_hash_put+0x107/0x1c0 [ 1489.679818][ T31] __sys_sendmsg+0x170/0x220 [ 1489.699645][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 1489.711894][ T31] ? __x64_sys_futex+0x34f/0x4d0 [ 1489.722263][ T31] do_syscall_64+0x106/0xf80 [ 1489.734429][ T31] ? clear_bhb_loop+0x40/0x90 [ 1489.739134][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.764172][ T31] RIP: 0033:0x7f0cfb39c819 [ 1489.774436][ T31] RSP: 002b:00007f0cfc324028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1489.793290][ T31] RAX: ffffffffffffffda RBX: 00007f0cfb615fa0 RCX: 00007f0cfb39c819 [ 1489.809565][ T31] RDX: 0000000000040010 RSI: 0000200000000000 RDI: 0000000000000005 [ 1489.826406][ T31] RBP: 00007f0cfb432c91 R08: 0000000000000000 R09: 0000000000000000 [ 1489.854205][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1489.876966][ T31] R13: 00007f0cfb616038 R14: 00007f0cfb615fa0 R15: 00007ffdaf42fc58 [ 1489.894407][ T31] [ 1489.904398][ T31] [ 1489.904398][ T31] Showing all locks held in the system: [ 1489.919078][ T31] 1 lock held by khungtaskd/31: [ 1489.927659][ T31] #0: ffffffff8e7e7760 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1489.947904][ T31] 3 locks held by kworker/u8:5/86: [ 1489.966109][ T31] 2 locks held by kworker/u8:6/150: [ 1489.981505][ T31] #0: ffff88801f35c948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1490.004242][ T31] #1: ffffc90002f17d08 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1490.028340][ T31] 2 locks held by udevd/5192: [ 1490.039065][ T31] 1 lock held by syz-executor/5809: [ 1490.054270][ T31] 2 locks held by getty/6226: [ 1490.069366][ T31] #0: ffff88803346d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1490.091268][ T31] #1: ffffc9000445b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 1490.121954][ T31] 4 locks held by kworker/u8:13/16990: [ 1490.132074][ T31] #0: ffff88801c6b6948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1310/0x19a0 [ 1490.177213][ T31] #1: ffffc90013407d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x19a0 [ 1490.217331][ T31] #2: ffffffff905fe850 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 1490.256870][ T31] #3: ffffffff906170a8 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x7ec/0xab0 [ 1490.284258][ T31] 1 lock held by syz-executor/27499: [ 1490.294007][ T31] 2 locks held by syz.1.4760/27552: [ 1490.314171][ T31] #0: ffffffff906c33f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1490.322429][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1490.364209][ T31] 1 lock held by syz-executor/27664: [ 1490.369556][ T31] #0: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1490.409318][ T31] 2 locks held by syz.4.4856/27983: [ 1490.415733][ T31] #0: ffffffff906c33f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1490.423988][ T31] #1: ffffffff8ec58e28 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x6c1/0xc00 [ 1490.434454][ T31] 2 locks held by syz.3.5479/30573: [ 1490.439676][ T31] #0: ffff8880a0246f48 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1490.450561][ T31] #1: ffffffff8e7f32b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x19e/0x3c0 [ 1490.462277][ T31] 4 locks held by syz.5.5480/30576: [ 1490.467636][ T31] #0: ffffffff8f91af48 (ubi_devices_mutex){+.+.}-{4:4}, at: ctrl_cdev_ioctl+0x323/0x400 [ 1490.480769][ T31] #1: ffffffff8e67edf0 (cpu_hotplug_lock){++++}-{0:0}, at: kmem_cache_destroy+0x4b/0x180 [ 1490.493815][ T31] #2: ffffffff8e9784e8 (slab_mutex){+.+.}-{4:4}, at: kmem_cache_destroy+0x59/0x180 [ 1490.505106][ T31] #3: ffffffff8e7f3180 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x48/0x6d0 [ 1490.516397][ T31] 1 lock held by syz.5.5480/30580: [ 1490.521524][ T31] #0: ffffffff8f91af48 (ubi_devices_mutex){+.+.}-{4:4}, at: ctrl_cdev_ioctl+0x1ea/0x400 [ 1490.532149][ T31] 1 lock held by syz.5.5480/30581: [ 1490.537821][ T31] #0: ffffffff8f91af48 (ubi_devices_mutex){+.+.}-{4:4}, at: ctrl_cdev_ioctl+0x1ea/0x400 [ 1490.548248][ T31] [ 1490.581357][ T31] ============================================= [ 1490.581357][ T31] [ 1490.648327][T30576] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1490.664701][ T31] NMI backtrace for cpu 1 [ 1490.664727][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1490.664761][ T31] Tainted: [L]=SOFTLOCKUP [ 1490.664769][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1490.664784][ T31] Call Trace: [ 1490.664793][ T31] [ 1490.664803][ T31] dump_stack_lvl+0x100/0x190 [ 1490.664844][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1490.664881][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1490.664916][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1490.664956][ T31] sys_info+0x141/0x190 [ 1490.664988][ T31] watchdog+0xd25/0x1050 [ 1490.665024][ T31] ? __pfx_watchdog+0x10/0x10 [ 1490.665050][ T31] ? __kthread_parkme+0x18c/0x230 [ 1490.665083][ T31] ? kthread+0x13a/0x450 [ 1490.665113][ T31] ? __pfx_watchdog+0x10/0x10 [ 1490.665138][ T31] kthread+0x370/0x450 [ 1490.665168][ T31] ? __pfx_kthread+0x10/0x10 [ 1490.665195][ T31] ret_from_fork+0x754/0xd80 [ 1490.665226][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1490.665257][ T31] ? __switch_to+0x7b4/0x1120 [ 1490.665280][ T31] ? __pfx_kthread+0x10/0x10 [ 1490.665311][ T31] ret_from_fork_asm+0x1a/0x30 [ 1490.665366][ T31] [ 1490.665376][ T31] Sending NMI from CPU 1 to CPUs 0: [ 1490.794308][ C0] NMI backtrace for cpu 0 [ 1490.794329][ C0] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 1490.794363][ C0] Tainted: [L]=SOFTLOCKUP [ 1490.794372][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1490.794393][ C0] Workqueue: events delayed_vfree_work [ 1490.794426][ C0] RIP: 0010:__lock_acquire+0x34/0x2630 [ 1490.794460][ C0] Code: 48 83 ec 70 8b 1d 10 ec f5 0e 65 4c 8b 25 2c b9 29 12 4c 89 64 24 68 4c 8b a4 24 a8 00 00 00 85 db 0f 84 58 03 00 00 48 8b 07 <49> 89 fa 48 3d 40 d7 14 94 0f 84 46 03 00 00 44 8b 1d b6 02 8a 0c [ 1490.794484][ C0] RSP: 0018:ffffc900000f78c0 EFLAGS: 00000002 [ 1490.794502][ C0] RAX: ffffffff9b3664e0 RBX: 0000000000000001 RCX: 0000000000000000 [ 1490.794517][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff9b3844b0 [ 1490.794533][ C0] RBP: ffffffff9b3844b0 R08: 0000000000000001 R09: 0000000000000001 [ 1490.794549][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1490.794563][ C0] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 1490.794577][ C0] FS: 0000000000000000(0000) GS:ffff888124340000(0000) knlGS:0000000000000000 [ 1490.794599][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1490.794616][ C0] CR2: 00007f63bc747e20 CR3: 000000000e598000 CR4: 00000000003526f0 [ 1490.794632][ C0] Call Trace: [ 1490.794639][ C0] [ 1490.794650][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 1490.794686][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1490.794727][ C0] lock_acquire+0x1cf/0x380 [ 1490.794755][ C0] ? debug_check_no_obj_freed+0x1c9/0x630 [ 1490.794785][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 1490.794822][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 1490.794857][ C0] ? debug_check_no_obj_freed+0x1c9/0x630 [ 1490.794883][ C0] debug_check_no_obj_freed+0x1c9/0x630 [ 1490.794915][ C0] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1490.794944][ C0] ? _raw_spin_unlock+0x28/0x50 [ 1490.794979][ C0] ? find_unlink_vmap_area+0x306/0x3f0 [ 1490.795005][ C0] remove_vm_area+0x1b0/0x390 [ 1490.795034][ C0] vfree.part.0+0x1e/0x9d0 [ 1490.795062][ C0] ? __pfx___might_resched+0x10/0x10 [ 1490.795106][ C0] delayed_vfree_work+0x8e/0xd0 [ 1490.795137][ C0] process_one_work+0xa23/0x19a0 [ 1490.795177][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1490.795215][ C0] ? __pfx_delayed_vfree_work+0x10/0x10 [ 1490.795246][ C0] worker_thread+0x5ef/0xe50 [ 1490.795283][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1490.795318][ C0] ? kthread+0x13a/0x450 [ 1490.795347][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1490.795380][ C0] kthread+0x370/0x450 [ 1490.795410][ C0] ? __pfx_kthread+0x10/0x10 [ 1490.795441][ C0] ret_from_fork+0x754/0xd80 [ 1490.795477][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1490.795512][ C0] ? __switch_to+0x7b4/0x1120 [ 1490.795539][ C0] ? __pfx_kthread+0x10/0x10 [ 1490.795571][ C0] ret_from_fork_asm+0x1a/0x30 [ 1490.795605][ C0] [ 1491.082495][T27661] EXT4-fs error (device sda1): ext4_discard_preallocations:5702: comm syz-executor: Error -117 reading block bitmap for 2 [ 1491.130474][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1491.137374][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1491.148082][ T31] Tainted: [L]=SOFTLOCKUP [ 1491.152407][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1491.162468][ T31] Call Trace: [ 1491.165748][ T31] [ 1491.168676][ T31] dump_stack_lvl+0x100/0x190 [ 1491.173379][ T31] vpanic+0x552/0x970 [ 1491.177361][ T31] ? __pfx_vpanic+0x10/0x10 [ 1491.181868][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1491.188213][ T31] panic+0xd1/0xe0 [ 1491.191936][ T31] ? __pfx_panic+0x10/0x10 [ 1491.196357][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1491.202532][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1491.208702][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1491.214866][ T31] ? watchdog.cold+0x198/0x1ca [ 1491.219635][ T31] ? watchdog+0xd35/0x1050 [ 1491.224060][ T31] watchdog.cold+0x1a9/0x1ca [ 1491.228661][ T31] ? __pfx_watchdog+0x10/0x10 [ 1491.233340][ T31] ? __kthread_parkme+0x18c/0x230 [ 1491.238371][ T31] ? kthread+0x13a/0x450 [ 1491.242624][ T31] ? __pfx_watchdog+0x10/0x10 [ 1491.247301][ T31] kthread+0x370/0x450 [ 1491.251377][ T31] ? __pfx_kthread+0x10/0x10 [ 1491.255986][ T31] ret_from_fork+0x754/0xd80 [ 1491.260596][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1491.265728][ T31] ? __switch_to+0x7b4/0x1120 [ 1491.270411][ T31] ? __pfx_kthread+0x10/0x10 [ 1491.275038][ T31] ret_from_fork_asm+0x1a/0x30 [ 1491.279819][ T31] [ 1491.283155][ T31] Kernel Offset: disabled [ 1491.287474][ T31] Rebooting in 86400 seconds..