last executing test programs: 4m56.251878946s ago: executing program 0 (id=1137): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/neigh/team_slave_1/unres_qlen\x00', 0x446a02, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) socket(0x2, 0x1, 0x106) setfsuid$auto(0xee00) mmap$auto(0xfff, 0x5, 0xffffffffffffffc0, 0x100000000000017, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r2, 0x5, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x4, 0x8, 0x0, 0x3, @attach_prog_fd=0xffffffffffffffff, 0x4, 0xffff, 0x8, 0x4}, 0x47) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r6 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy1/airtime_flags\x00', 0x8000, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r6, 0x0, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) statx$auto(r3, 0x0, 0xa, 0x7, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x49, 0x4000001, 0x6, 0x1, 0x5, 0x7181, 0x3ffde, 0xbb41, 0x10, 0x9, 0x80006, 0x80803, 0x4, 0x11ffffffffffd, 0x85, 0xfffffffffffffffe, 0x9, 0x50007, 0x0, 0x0, 0x0, 0x80000001, 0x10000, 0x202, 0x9, 0x7ffc, 0x0, 0x0, 0x7fffffff, 0x3, 0xfffffffc, [0x1, 0x0, 0x0, 0x0, 0xd, 0xdff, 0x3, 0x2, 0x800005, 0x6, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x2000000800000000, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0xfffffffffffffffe, 0x3, 0x4, 0x6, 0x80000000, 0x0, 0x20000000, 0x4, 0x1, 0x0, 0x0, 0x800000009, 0xfffffffffffffffe, 0x4, 0x8001, 0x6, 0x0, 0x1000000000000001, 0x7ff, 0xbffffffffffffffb, 0xfffffffffffffffc, 0x6]}, 0x8, 0xd) r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r8, 0xfffffffffffffd02, &(0x7f00000001c0)) mmap$auto(0x4, 0x9f, 0x419, 0xf6, r7, 0x0) lseek$auto(r6, 0x4, 0x2781c) r9 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) write$auto_uinput_fops_uinput(r4, &(0x7f0000000040)="65504fd66509acc5c3cc3d60b77e1c6a3b4102fd6f86f57c8a1cf219cf0d9983c952833e2fcc656f9a95296c9316fff0990e769a516a679236440e72c7c40949b9d09171350e", 0x46) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="01002ebd7000fbdbdf250300000304000180dcfe6263753753fe9fd3447aea982953d55766b71a193964e1a421e0f3183e3211cd2668daf1bb17"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24040804) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4m55.774462375s ago: executing program 0 (id=1140): close_range$auto(0x2, 0x8, 0x0) socket(0x8, 0x1, 0x6) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ip6tnl0/statistics/rx_bytes\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/82, 0x52) mmap$auto(0xfffffffffffffffc, 0x6, 0xdb, 0x10, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x3, 0x4, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) ioctl$auto(r1, 0x404c534a, 0x38) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/read_ahead_kb\x00', 0x5e30523b26a2a748, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x202000d, 0x8000000002, 0xeb1, 0xffffffffffffffff, 0x40000000008000) getpid() set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) futex$auto(0x0, 0x8, 0x3d, 0x0, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) write$auto(r3, &(0x7f0000000100)='9\x00d1L\xff\x15\xba\xa17=w\xc1\xf8\xff\xff\v\xb5^\xa1/\xfb\xaf\xc8\xfc\\\xa9@\xc0\xee\xa2[', 0x1) sendmsg$auto_IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x4000000) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) 4m54.936070012s ago: executing program 0 (id=1143): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f0000000000)={0x1a0b, r1}) ioctl$auto(r0, 0x4b68, r1) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), r1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x8001) 4m54.784333451s ago: executing program 0 (id=1145): mmap$auto(0x0, 0x20009, 0x3c00000000000, 0x12, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xffffffffffff10d6, 0xeb1, 0xffffffffffffffff, 0x80000000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)="7a47301037954c081c9a0bb84bb7b04ef84993eab91abe1686f43e43d786e964e8f04455bd620de9f3fb6d65e6c078c1a672c549dbc7876cb528ba081a81d884bfc00dd4eef57cedc0cc4156ff6a5b0aa8ba9511fe2b07c6e7f4732fe36ba218aa5b0ff402f2e6adb8ea60886c1e52c60d7d87e4c0551386501763ad098eb2b9602f83b2a643399f10dfdb0f4018b401be4db675d0acf8d348c26acf338cbe20fcb76439ca602a3c022f4463a8820f1c6f865d24e058af98f0c48bf552c3f6cc28c09d9054347db3c28701c67fa1e57d81b881638b518dd8e24969b7fd10406fcf6eb9bb66bf56ed7568510c72b380fa6efbca845bde90f76727080000000000") mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) readv$auto(0x3, &(0x7f0000000100)={0x0, 0xffff}, 0x4) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r1 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x59, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000180)='M\xea\xae\xa0\xc8Q\x9aZ\xf0\xe4\xdf\x80\xba\xbe\xd1\x15$\xb5\xf3\xd74\xad\xba\xd8ng\xd3\x84\xa5\xebcnI/Q`\xbd\x91\xdd8y!Q^\xb6\x91\n\xc7]\r\xc0V \x12:W]0\xe5\xee\x9e\x1a', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r3, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x6}, 0xd9d, 0x966, 0x3, @raw=0x404, @enumerated={0x8008, 0x80000000, "033beddd1805dc258af41c3905ba65603854aabf973f037f0896c0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd496600e0ff00", 0x44, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1e61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r4, 0xc008551b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) waitid$auto_P_ALL(0x0, 0xa44e, &(0x7f0000000200)={@_si_pad}, 0x9, &(0x7f0000000480)={{0xb4a, 0xffffffff}, {0x1, 0x6}, 0x8, 0x2, 0x7, 0xfff, 0x4, 0xfff, 0xfffffffffffffff9, 0x3, 0x1, 0x8, 0xf, 0x1, 0x3, 0xfffffffffffffffd}) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 4m54.151695202s ago: executing program 0 (id=1149): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/neigh/team_slave_1/unres_qlen\x00', 0x446a02, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) socket(0x2, 0x1, 0x106) setfsuid$auto(0xee00) mmap$auto(0xfff, 0x5, 0xffffffffffffffc0, 0x100000000000017, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usbip-host/rebind\x00', 0x121681, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'team_slave_0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x24, 0xf, 0x63, 0x400, 0x0, 0xffffffffffffffff, 0x80f0c8, 0x20, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r2, 0x5, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x4, 0x8, 0x0, 0x3, @attach_prog_fd=0xffffffffffffffff, 0x4, 0xffff, 0x8, 0x4}, 0x47) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x40000003, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r6 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy1/airtime_flags\x00', 0x8000, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r6, 0x0, 0x0) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) statx$auto(r3, 0x0, 0xa, 0x7, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x49, 0x4000001, 0x6, 0x1, 0x5, 0x7181, 0x3ffde, 0xbb41, 0x10, 0x9, 0x80006, 0x80803, 0x4, 0x11ffffffffffd, 0x85, 0xfffffffffffffffe, 0x9, 0x50007, 0x0, 0x0, 0x0, 0x80000001, 0x10000, 0x202, 0x9, 0x7ffc, 0x0, 0x0, 0x7fffffff, 0x3, 0xfffffffc, [0x1, 0x0, 0x0, 0x0, 0xd, 0xdff, 0x3, 0x2, 0x800005, 0x6, 0x4, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x2000000800000000, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0x2, 0xfffffffffffffffe, 0x3, 0x4, 0x6, 0x80000000, 0x0, 0x20000000, 0x4, 0x1, 0x0, 0x0, 0x800000009, 0xfffffffffffffffe, 0x4, 0x8001, 0x6, 0x0, 0x1000000000000001, 0x7ff, 0xbffffffffffffffb, 0xfffffffffffffffc, 0x6]}, 0x8, 0xd) r8 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r8, 0xfffffffffffffd02, &(0x7f00000001c0)) mmap$auto(0x4, 0x9f, 0x419, 0xf6, r7, 0x0) lseek$auto(r6, 0x4, 0x2781c) r9 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000001f00), 0xffffffffffffffff) write$auto_uinput_fops_uinput(r4, &(0x7f0000000040)="65504fd66509acc5c3cc3d60b77e1c6a3b4102fd6f86f57c8a1cf219cf0d9983c952833e2fcc656f9a95296c9316fff0990e769a516a679236440e72c7c40949b9d09171350e", 0x46) prctl$auto(0x23, 0x4, 0x7fffffffefff, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r5, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r9, @ANYBLOB="01002ebd7000fbdbdf250300000304000180dcfe6263753753fe9fd3447aea982953d55766b71a193964e1a421e0f3183e3211cd2668daf1bb17"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x24040804) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4m54.006239312s ago: executing program 0 (id=1151): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x3, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) ioctl$auto(0x3, 0x400454ca, 0x38) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) (async, rerun: 32) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000da", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000012}, 0x810) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) migrate_pages$auto(0x0, 0x5, 0x0, &(0x7f00000001c0)=0x7b) (async, rerun: 64) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) (async, rerun: 32) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (rerun: 32) recvfrom$auto(r1, &(0x7f0000000200), 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x4000000000003, 0x20009, 0x9, 0xeb1, 0x405, 0x8000) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) (async, rerun: 64) r2 = socket(0x2b, 0x3, 0x40) (rerun: 64) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000280), r2) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8d1a073", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r4, 0x0, 0x800000008) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r5 = socket(0x25, 0x4, 0x1) setsockopt$auto(r5, 0x29, 0x20, 0x0, 0x8002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket(0x2, 0x1, 0x106) setsockopt$auto(r7, 0x6, 0x6, &(0x7f0000000180)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', 0x7) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000900", @ANYRES16=r8, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x163881, 0x0) 4m38.829337991s ago: executing program 32 (id=1151): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x3, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async, rerun: 32) ioctl$auto(0x3, 0x400454ca, 0x38) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) (async, rerun: 32) sendmsg$auto_NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="000000da", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000012}, 0x810) (async) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) migrate_pages$auto(0x0, 0x5, 0x0, &(0x7f00000001c0)=0x7b) (async, rerun: 64) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) (async, rerun: 32) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) (rerun: 32) recvfrom$auto(r1, &(0x7f0000000200), 0x4, 0x10001, 0x0, &(0x7f0000000480)=0xc) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) mmap$auto(0x4000000000003, 0x20009, 0x9, 0xeb1, 0x405, 0x8000) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) (async, rerun: 64) r2 = socket(0x2b, 0x3, 0x40) (rerun: 64) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000280), r2) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="a8d1a073", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf2505000000"], 0x14}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) write$auto(r4, 0x0, 0x800000008) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r5 = socket(0x25, 0x4, 0x1) setsockopt$auto(r5, 0x29, 0x20, 0x0, 0x8002) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket(0x2, 0x1, 0x106) setsockopt$auto(r7, 0x6, 0x6, &(0x7f0000000180)='\b\x00\x00\x00\xe4\x15\rq\tW\x9d=\x1e\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\x9b\xdd\x1cp\x19\xa0\x9dHN\xb4\x7f\x7f\xa0\xeaI\xa1\x0f/\xfc\x8e\xf9\xa6x\xa0\xdeo\t\x826Xe(\x0e\xffr\r\x8d\xefh\xdbG\x8b\xde\xfd$\'\a ]\x91YP\x94\xd0\xd0\x02\x10\xb1_z\xa2Ql\x8c\x91\xca4\x118\xcd\xc3\x97\xdaJ:\x1e\xe5f\xcaq\xdf`\x01;\xf9{D2\xc9WV)\xa3JH\xf5\xf9\x16\xac\xa4\x155\x80\x01I\xd9\xa5\xd0\xf1\xbd\xa0\xa4\xa5q\xc6F\x940\x00\xf8\xef\xa4\xfd\xd2z\xf5\x91z<\x9f\xf0\x8f/\x81\x84\xed J&\x8f\xd9\xab-\xf8\xd0\xd3\xcea\x91pM0\xcd\x18\xb4\xe0u\x99\b', 0x7) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000900", @ANYRES16=r8, @ANYBLOB="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"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) (async) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000100), 0x163881, 0x0) 3m42.465759006s ago: executing program 3 (id=1437): sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f00000004c0)={0xcb8, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0xca3, 0xa, 0x0, 0x1, [@nested={0x17c, 0xd8, 0x0, 0x1, [@typed={0x14, 0x10a, 0x0, 0x0, @ipv6=@loopback}, @generic="8c5e7904b62ded848c5a778ccb9fcd960d5745f5cea399f1393201d03ff61c8faad2714a3f3cb433cf059ecaabcadab9b937fa6270f5834c8977b164f51f8a5010c2391b321a51ed2e59e62b82050afea490c39f241c0bccc4eca2a23856a7463f5922c1e87d7c003922ae40afeb062934923dd36f2ebb228b936966e22c6ef66079c2fc3021977473b17d917d82c4b34eb65f", @generic="20bd151f080442ea1e9e9145df1e2826836b038d77a91cf3bc1c8e336491d9e593c9de15e694a026b12d4b60593ccff1177b10e75c4ddc060f10dd75faa446540cd4d2789346397d7ec6ef83a74728f306d8a679df003a270e6bbe6d9d34a5c5bff4578c2b78df5f7a0108d105b44a38f769e5a4266a314301bc9d1f94d274645b0c1e5912937fa615ad900e00f090e3c8983552b54cea92f0821b21b88777ffb0b5bf967a7fb3d02a41fdbbbb8516b63c42db43e832d8619d2907d24873200a68c154338a239ec64a", @nested={0x4, 0x3ff8}, @nested={0x4, 0xe5}]}, @generic="cea3b1eb5035f2ada7a6b369d9cae80acbce4557f0a5750e99a779e2b15337c19c29137b5f3c8b42c22922d5fc413ad50eac5db9d9600a977494ac571a4cc04d4ef62f297b19171852125f670e0986874ebd14c9069aa95a53648686fd3687a6e1b112d0f14449ee614bc9253faa00f7e2cb1278c5cb429df67247106ca668", @typed={0x8, 0x33, 0x0, 0x0, @ipv4=@broadcast}, @generic="a2e51c731e48c1c636ffffe1588d1951c13ab2c929acd0618de874f0", @nested={0xa6c, 0x4b, 0x0, 0x1, [@nested={0x4, 0x74}, @typed={0x14, 0x105, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0x146}, @generic="a00d8ff41cccbf55c36b5d5793b6ad42435e2cc5368e1f7460d84ab4104519e965f9ddc2952e5c7833887d56fbf664f0c427fe74c8e656a2c630037a9b04033ce61f32864a8ca1909fb177864116d7e5b835df404cde2e7b18d069155563fbbe8c295df3fb0e4b465f9ad68cac8994bd7cb152b40f837efa7f8155c887cc82b77054893cb8183bd7d5283ad5b395492caad2d0e6114d4d314b6968b6858a1e20094f7e7c5243ebbaea2f639e9f0bf971a18f68326f7844933654971c4f0156eb94fd978405a40ea23d0e0fbfcd88be971646", @generic="5ff77e4ad21dd42b1392491d534b63fb1aae4e2e5f3ffcd818ed6693a63d260bf76118ebdb0907505a66d6c8cd91e916af9c590fad10485dca7b11b67b7aa70069d9b8b1192e04635a0b4ce37724474ee086", @generic="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", @generic="ade57f643a14595b914c973a369390e6bfb2fe25a488f8967b8d2912c14299b8b4f9d6d8a46c6c6bd54c6c937a45a412bc7311a20162a1ee859a7ec087e3c4895833e0323c4837d09ce4f000672e1fa0ebeb59fb041bcf4d6d46fc508712950a58514d6151b7675cbf7ba9eaaf23cd9e9bf56ab078b56d0ed50b1839e3db54d3420c1b4042dddd7867fcb86f3abed33f49040326091e384f124cc9d0afeceefa55525b630647420f1fb7764ba6909c52d36d58e188e5aa204bc9aa96081303a5d8b8bf603147f0617a97437db03901171e66970c3da1", @typed={0x8, 0x5b, 0x0, 0x0, @pid}, @nested={0x4, 0x12b}, @generic="adf48e04e73054f71b07a4239ba09ad16e9dce9003cd01e018d9d0ea489e666d38b2ac571a354aadd3b421b6bbaf6679abcf99079928a799cdae635b5a5e829be1c44a06dc28517ecf045ad2b5433644a384b2e2fc573d77a8f1322f17af348a71626c3abc72"]}, @typed={0x14, 0x11c, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}]}]}, 0xcb8}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r3, r3, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fd, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xf90, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x2000000008000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x4bd, 0x0, 0x1000, &(0x7f0000000040)=0x2) write$auto(0xffffffffffffffff, 0x0, 0xfdef) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 3m39.289540793s ago: executing program 3 (id=1448): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x50, 0x1d, 0xa9, 0x0, 0x4, 0x9, 0xc, 0xb, 0x6}, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x20000000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000540)={0x5, 0x0, '\x00', "1aef09f075b8e6b77c3fa8db259056a2", "9649efcec918d7563fb34bf487b99df832fed7b3dee7edc8c7a06ac8ed714648", "ef86743334004e34ded7f4f918c1ae2728d423746ae9388e833447898844020468166e720aa18e9e8bf939fb69fa37f8cb1a373793ff0f00007aca4980b6dd6a49ec893b4a14c1870013dce4ee7bb313", "1bdd1bd1e7c93fb23eec09c0fd894efd", "cfc574487a9ea54410cef23d4fe7ca3e78d158c240515f8735c415b6011c4201335554d8a56f185263367dea284aa2cfd1186f7918f367d0329159d3cd2419a890b4840be7dda3125c4f826a8ee0ef22", "c403966e25bae3ea9e00000000005ed727190a9b59c895c6fd3f4857dd7652acc9fc8eaaf6552ac0128d06000000000300000000000000699577b2ad1a822a23d98d5dcef24a81ad3101f9c69ebdea766c97d5a8214e6804939ac95778faffffffc4da43984d0b0f00"}) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x1, 0x4000010, 0x100, 0x6, 0x1, 0x80a, 0xffffffffffffffff, [0x0, 0x3ff, 0x8], {0x4, 0x10001, 0x3, 0x2de, 0x8e, 0x1, 0x101, 0x8, 0x200000d}, {0x6, 0x3, 0x52, 0x1a4, 0x10001, 0x9, 0x76c5, 0x8, 0x400}}) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0) r2 = getpid() r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x88800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r3, 0xc0405519, &(0x7f0000000040)={@inferred=r2, 0x555c, 0xffff, 0x1, "8f9638544ae4bbdf48e497dbb5a3760f9b6b2c854e493a712fcbb4034dde3ba72adae5bfa41dba811bf5488f", @inferred=r2}) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={r2, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x3, 0x803}, 0xee) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r4 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r4, 0x8) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/rt6_stats\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000001880)=""/4101, 0x1005) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) 3m37.786346474s ago: executing program 3 (id=1451): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000440), 0xffffffffffffffff) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40043d04, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:09/sun\x00', 0xc0a00, 0x0) pread64$auto(r2, 0x0, 0x6, 0x40008) madvise$auto(0x0, 0xffffffffffff0005, 0x17) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r3 = socket(0x2, 0xa, 0x5) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x10002, 0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_ON(0x9, 0x1, r0, 0x6, 0x2) r4 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/current_tracer\x00', 0x8000, 0x0) timerfd_settime$auto(r4, 0x4, &(0x7f0000000240)={{0x7fffffff, 0xffffffffffffffff}, {0x1, 0xfffffffffffffffb}}, &(0x7f0000000280)={{0x6, 0xb382}, {0x78b, 0xbd78}}) getsockopt$auto_SO_TXREHASH(r3, 0x1, 0x4a, 0x0, &(0x7f0000000080)=0x9) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) msgrcv$auto(0x0, 0x0, 0x4, 0x9, 0x3) msgctl$auto(0x0, 0x1, 0x0) r5 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000040), 0x202402, 0x0) preadv2$auto(r5, 0x0, 0x2, 0x91b, 0x8f8, 0x3) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 3m34.84214404s ago: executing program 3 (id=1464): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x9, 0x1, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HSR_C_GET_NODE_LIST(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40400, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001180)='/dev/snd/controlC2\x00', 0x40, 0x0) read$auto(r1, 0x0, 0x1ff) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) 3m34.514472159s ago: executing program 3 (id=1466): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000", @ANYRES16, @ANYBLOB="df350abb827483"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/loop6/hctx0/tags_bitmap\x00', 0x5eb182, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x3, 0x0) rt_sigsuspend$auto(&(0x7f0000000140)={0x8}, 0x8) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/usb/usbmon/0u\x00', 0x22202, 0x0) pread64$auto(r1, 0x0, 0xffffff7f, 0x8000000000009) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_generic(0xffffffffffffff9c, 0x0, 0x101000, 0x0) clock_gettime$auto(0xfffffffffffffff0, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_SAR_SPECS(0xffffffffffffffff, 0x0, 0x44) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000300), r2) socketpair$auto(0x5, 0xc3800000, 0x9, &(0x7f0000000000)=0x95) 3m33.813682656s ago: executing program 3 (id=1468): mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x2, 0x6) unshare$auto(0x40000080) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x22, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x8, 0x0, 0x40) fanotify_init$auto(0x6a1, 0x2000000000002) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb0, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) getdents$auto(r0, &(0x7f0000000040)={0xd2, 0x7, 0xc, "8f9a1c6889204eda60dca95f17c33c9a17369f14"}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250200000008001c000800000008001500b8000000f1cba956479a814874a86ec1c885ff72647776c5fd6d87bed8756bb43f9571885f5932aa0b760627a947dfa1147e78961c2cf3bd461e3deb779866372844e6ad1c177ca7a180149d4a1b954b54a7501feb0f6a73db79b4ece2302c4b7cadad112c77887902f13dae276be960b16392e5059b8d09f0a4fbffdafd37d9ae2e7d853251390526a89fb2750eb1b2cb41"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x40088c0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) 3m18.651039298s ago: executing program 33 (id=1468): mmap$auto(0x0, 0x400005, 0xe2, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x2, 0x6) unshare$auto(0x40000080) mmap$auto(0x0, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x22, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x8, 0x0, 0x40) fanotify_init$auto(0x6a1, 0x2000000000002) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x2000a, 0x4000000000df, 0xeb0, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) ioctl$auto_TUNSETVNETLE2(r0, 0x400454dc, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) getdents$auto(r0, &(0x7f0000000040)={0xd2, 0x7, 0xc, "8f9a1c6889204eda60dca95f17c33c9a17369f14"}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250200000008001c000800000008001500b8000000f1cba956479a814874a86ec1c885ff72647776c5fd6d87bed8756bb43f9571885f5932aa0b760627a947dfa1147e78961c2cf3bd461e3deb779866372844e6ad1c177ca7a180149d4a1b954b54a7501feb0f6a73db79b4ece2302c4b7cadad112c77887902f13dae276be960b16392e5059b8d09f0a4fbffdafd37d9ae2e7d853251390526a89fb2750eb1b2cb41"], 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x40088c0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) 8.066816049s ago: executing program 1 (id=2280): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r0, 0x4b4a, 0x9) 7.860709972s ago: executing program 1 (id=2281): sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x6, 0xd, 0xfffffffe, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x10001, 0xb, 0x2de, 0x504, 0x1, 0x80, 0x6, 0x6}, {0xfff7ffff, 0x2, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x8000000000000000}}) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) close_range$auto(r0, 0x8, 0x0) socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000001a80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001a00)={&(0x7f00000004c0)={0x18, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {}, [@OVS_VPORT_ATTR_UPCALL_STATS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x408c4}, 0x99) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0xc0842, 0x95) sendfile$auto(r3, r3, 0x0, 0x1) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x3, 0x1, 0x9488, 0x9, 0x15f4da07, 0x6, 0x2, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0xecf, 0xd8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0x1000000000000bc3, 0x7fd, 0x3, 0xff, 0x10001, 0x400000000003, 0x3, 0xf90, 0xfffffffffffffffe, 0x80000000, 0x335b0eef, 0xffffdfffffffff81, 0x4]}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x2000000008000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x4bd, 0x0, 0x1000, &(0x7f0000000040)=0x2) write$auto(0xffffffffffffffff, 0x0, 0xfdef) r4 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event2\x00', 0x20881, 0x0) write$auto(r4, &(0x7f0000000040)='/dev/input/event1\x00', 0x10001) 7.131953927s ago: executing program 5 (id=2284): r0 = prctl$auto_PR_SET_MM_ENV_END(0xfffffe00, 0xb, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, r0, 0x8000) ioctl$auto_XFS_IOC_SWAPEXT(0xffffffffffffffff, 0xc0c0586d, &(0x7f00000000c0)={0x4c, @raw=0x4, @raw=0x8001, 0x3, 0x3, '\x00', {0xf7, 0x10, 0x2, 0xffffffffffffffff, 0xffffffffffffffff, 0x7fffffff, 0x6, 0x5, {0x2, 0x2}, {0xc, 0xfffffffb}, {0x2, 0x1}, 0xaf00000000000000, 0xadda, 0x9, 0x1, 0x0, 0x6, 0x1, 0x5, 0x0, 0x3, '\x00', 0x1, 0xc, 0x101, 0xc74c}}) r3 = setfsgid$auto(r2) setregid$auto(r2, r3) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x48000, 0x0) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0xf500, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x3, 0x67) ioctl$auto_KVM_GET_MSR_INDEX_LIST(r4, 0xc004ae02, &(0x7f00000002c0)={0x80000000}) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r6 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto_VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000000)={0x1a0b, r6}) ioctl$auto(r5, 0x5609, r6) write$auto_fake_panic_fops_(r7, &(0x7f0000000200)="7831fd7db9a38e746dafa4ba767d94fc4a7cc23f9ddf1789f29bba860b49f8736755f0a88b9043c8cd518a6444e816afaee62687a937ca2a360f57fa5a6fdac49aae28270d927484823d97327568c6776b1eff12db4ac069342a7cbfc9bc2c9179619d462316b22bcf288bad46c2e4658df4c7826b5e70e25fe25bc532277d5bebdadd215b3dfcc1280373583bc5baa5929f0fd9d4", 0x95) msgctl$auto_MSG_STAT(0x9, 0xb, &(0x7f0000000300)={{0x8, r1, r3, 0xbb00, 0x6, 0xffffff30, 0x7}, &(0x7f0000000040)=0x7, &(0x7f0000000180)=0x1, 0x2, 0x8, 0x3, 0x6, 0x100000000, 0x7, 0x4, 0xc, @raw=0x3, @raw=0x7fff}) r9 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), r6) sendmsg$auto_ETHTOOL_MSG_EEE_SET(r7, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000081}, 0x8001) keyctl$auto(0x3f8c, r8, r1, r2, 0x5) 6.680532313s ago: executing program 4 (id=2286): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x18, r1, 0x1, 0x70bd2f, 0x25dfdbfd, {0xc, 0x0, 0x700}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x24048084) 6.652837183s ago: executing program 5 (id=2287): mmap$auto(0x800000, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x3d4, 0x7, 0x2, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/lapb0/napi_defer_hard_irqs\x00', 0x8a401, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x940, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14be02, 0x0) socket(0x1d, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x801, 0x84) close_range$auto(r0, 0xfffffffffffff000, 0x4000000000002) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0xc, 0xd, 0x2007d49, 0xa, 0x4, 0x0, 0xffffffff, 0x3, 0x0, 0x2, 0x8000000ab8, 0xfffffffffffffff7, 0x5, 0x2, 0x5363]}, 0x0) 6.541817995s ago: executing program 4 (id=2288): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x38, r1, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_SECRET={0xb, 0x4, "ef20bbf0b6e731"}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x80040}, 0x44000) unshare$auto(0x40000080) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) write$auto(r2, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) io_uring_setup$auto(0x2, &(0x7f0000000080)={0x80000003, 0x9, 0x9, 0x6, 0x4, 0x8, 0xffffffffffffffff, [], {0x9, 0x7, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x100, 0x1, 0x50, 0x5, 0x1, 0x7, 0x8, 0x8, 0x100000002}}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) sched_getattr$auto(0x0, &(0x7f0000000000)={0xcf86, 0x106, 0x6, 0x200, 0x7, 0xb, 0x6, 0xfffffffffffffff8, 0x8, 0x90}, 0x68, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) socketcall$auto_SYS_GETSOCKOPT(0xf, &(0x7f0000000100)=0x3) 6.448201628s ago: executing program 5 (id=2289): unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) getsockopt$auto_SO_BSDCOMPAT(r0, 0x3, 0xe, &(0x7f00000000c0)='*\\\x00', &(0x7f0000000180)=0x40) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000003}, 0x7, 0xffffffffffffffff, 0x8000000000000, 0x2f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x3, {{0x41, 0x3}, 0x4}}, 0x6a) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0xfffffffffffffffe, &(0x7f0000000280)={&(0x7f0000000100)="426931715cf4b4c1b08313049ae1dd072c8fed9ebac47e0691b151b0e2a8caa11d795b16c632", 0xffffffff}, 0x6, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x87, 0x0, 0x14) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) listen$auto(r0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x0, 0x0) dup$auto(r0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ipv6_route\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x6) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, 0xffffffffffffffff, 0x2e, 0x7ff}, 0x6f4) pread64$auto(r3, 0x0, 0x6000000000, 0x100000004) mmap$auto(0x0, 0x6, 0x3, 0xeb1, 0x7, 0x8000) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) r6 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) ioctl$auto_BLKPG2(r6, 0x1269, 0x0) ioctl$auto_MEMGETINFO(r6, 0x80204d01, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) pidfd_open$auto(0x1, 0x0) 5.192270365s ago: executing program 1 (id=2291): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x50, 0x1d, 0xa9, 0x0, 0x4, 0x9, 0xc, 0xb, 0x6}, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x20000000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000540)={0x5, 0x0, '\x00', "1aef09f075b8e6b77c3fa8db259056a2", "9649efcec918d7563fb34bf487b99df832fed7b3dee7edc8c7a06ac8ed714648", "ef86743334004e34ded7f4f918c1ae2728d423746ae9388e833447898844020468166e720aa18e9e8bf939fb69fa37f8cb1a373793ff0f00007aca4980b6dd6a49ec893b4a14c1870013dce4ee7bb313", "1bdd1bd1e7c93fb23eec09c0fd894efd", "cfc574487a9ea54410cef23d4fe7ca3e78d158c240515f8735c415b6011c4201335554d8a56f185263367dea284aa2cfd1186f7918f367d0329159d3cd2419a890b4840be7dda3125c4f826a8ee0ef22", "c403966e25bae3ea9e00000000005ed727190a9b59c895c6fd3f4857dd7652acc9fc8eaaf6552ac0128d06000000000300000000000000699577b2ad1a822a23d98d5dcef24a81ad3101f9c69ebdea766c97d5a8214e6804939ac95778faffffffc4da43984d0b0f00"}) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x1, 0x4000010, 0x100, 0x6, 0x1, 0x80a, 0xffffffffffffffff, [0x0, 0x3ff, 0x8], {0x4, 0x10001, 0x3, 0x2de, 0x8e, 0x1, 0x101, 0x8, 0x200000d}, {0x6, 0x3, 0x52, 0x1a4, 0x10001, 0x9, 0x76c5, 0x8, 0x400}}) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r1, 0xc2604110, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0) r3 = getpid() r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x88800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000040)={@inferred=r3, 0x555c, 0xffff, 0x1, "8f9638544ae4bbdf48e497dbb5a3760f9b6b2c854e493a712fcbb4034dde3ba72adae5bfa41dba811bf5488f", @inferred=r3}) bpf$auto(0x0, 0x0, 0xee) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r5 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r5, 0x8) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/rt6_stats\x00', 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000001880)=""/4101, 0x1005) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) 4.601031469s ago: executing program 2 (id=2293): close_range$auto(0x2, 0x8000, 0x0) (async) r0 = socket(0x8, 0x1, 0xfffffffe) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = socket(0x2, 0x2, 0x0) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)='+') ioctl$auto(0x3, 0x40086200, 0x38) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'pim6reg\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) r9 = waitid$auto_P_PIDFD(0x3, r4, &(0x7f0000000180)={@siginfo_0_0={0x3ff, 0x8, 0x9, @_sigchld={0x0, 0xffffffffffffffff, 0x1, 0xffff, 0xfff}}}, 0xc, &(0x7f00000002c0)={{0x8, 0x40}, {0x8, 0xb6}, 0x0, 0xd854, 0x7, 0x1, 0x95, 0x8000, 0x6b, 0xffffffff, 0x0, 0x0, 0x6, 0x2, 0x8, 0xffff}) ioctl$auto_XFS_IOC_FREESP(r4, 0x4030580b, &(0x7f0000000380)={0x942, 0x7fff, 0x5, 0x0, 0x0, 0x0}) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r5, &(0x7f0000000940)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000900)={&(0x7f00000003c0)={0x524, r6, 0x100, 0x70bd29, 0x25dfdbff, {}, [@MACSEC_ATTR_IFINDEX={0x8, 0x1, r7}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r8}, @MACSEC_ATTR_OFFLOAD={0x24, 0x9, 0x0, 0x1, [@typed={0xc, 0x7a, 0x0, 0x0, @u64=0x142}, @typed={0x14, 0x123, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @MACSEC_ATTR_RXSC_CONFIG={0x123, 0x2, 0x0, 0x1, [@generic="9079176f9396b9df09929e054705b789bdfc3406a9fcb680c7a112aebf0ee8e71cb90592dfc4c0d6de277bf981fab4e31362ba5cee6e15a9b57c02a5d377f8eb38f12d3563cc7e8398d5af9db0633d78635a8b651c5dc998d1ed8330e613b5783a1e421b04844202887dcc89071d486dc86bce50f9593147eb5a10aecd621d0e7d8f4aeceb80b9e8ca78665033d42cab8e30fe0cd1cf5a7a0340023f93d9ef362493cf0a1d6012", @generic="829d59bdd254f686bc3520daf6a3432aa42bb83acea7c3da8fe457faccc3ec6ddd6c33cfae12c17e3e1a508814db87ffd8b6a1a85e78dbfe46b28e4f3863ce30ae5b3d64a25c5cccb171ef6bbefa07dbabaae764a072394a214953712f1382525a7026f667968ade0ca8f3f6be4eef83639ae952797cb5c7"]}, @MACSEC_ATTR_OFFLOAD={0x104, 0x9, 0x0, 0x1, [@typed={0x34, 0x20, 0x0, 0x0, @binary="e572973f2f21c41b2c48546ce02dc75c6d5a822bc83c367159e2aa326795a05a57245c4781d7563bcfedc365e23e746e"}, @nested={0x74, 0x75, 0x0, 0x1, [@nested={0x4, 0xa8}, @generic="47e352ee235538e1ad1d9f45a7fa8092561af5c0bfdba98426aaa67b86dbe41465b7fe4796c97a1ad68c2a99058b1bb57f80c68a11898acd6bd4114956c46aa213adc60072915855c6185f56", @nested={0x4, 0x13b}, @typed={0x19, 0x141, 0x0, 0x0, @str='/dev/dma_heap/system\x00'}]}, @typed={0x4, 0xff}, @generic="8f08d7f4866fb6e9f44a440ffeec0ef64ab1804196373ba5b85d170af3f7a1d3503012958ab51de0df2d08958c9cab3a12a2995e5ffa57067723562172f290aafd03dfd0ef281174daba6eeb", @typed={0x8, 0x139, 0x0, 0x0, @u32=0x5}]}, @MACSEC_ATTR_RXSC_CONFIG={0x2a1, 0x2, 0x0, 0x1, [@generic="c60f0f261a71c6b7f20160e0e9dad434c81c6cfb70a22a4de1dc2dc66dbc355d99fba81502591e9b80f349ef6d41d12d91012af7b4a88043a6f656d21c484dcef78b4253e7edf53f7502a9437b2b248c4852dd1a59", @typed={0x14, 0xa1, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x187, 0x39, 0x0, 0x1, [@typed={0xc, 0x9, 0x0, 0x0, @u64=0x400}, @generic="52ebfbe0c8b2e5bef4b498376d22f2411ac5822c950541b072a1bb199fb47cd267827b6972abe055743d6243ddcf2c6195c7da653da62a6b1e05a22f399b766aba103dfa15349cb411d7b6e40eb1bc64e1439d769b1ef97e90a96823ab12c94441bdd8d5564c29b2a65ad5c0c058584043734c84de254ca9d9a97f641b30ab879cef07cd7e9901c20c0161d023bf72994c2ea69904271abaaeb15050644c75be874299", @nested={0x4, 0xd6}, @typed={0x8, 0xdc, 0x0, 0x0, @pid=r9}, @nested={0x4, 0x135}, @typed={0xaf, 0x16, 0x0, 0x0, @binary="8e6055445cbf224fc92f4dc6b3293679286a5ba8c5b876afcdb1ed1dd42bac86dcb10bb504a3352154d20724014b8778322faf464a5c8a6207e6d41e81999f99e6ff9f57bfd76f9d7e317c2c85cac0b3b6e3dce228e13c66bcede4d2a2f3413dd3a9fefa5ab593ca9e54b98f44b3470f72c33c3e212e43bfe79cb6a6db8337ee684b99fec09d1fd41b144145dc3db8a5653c09534c0fc37406683e2e3c62f1181acaad9a8ea1439df982df"}, @typed={0xc, 0x9b, 0x0, 0x0, @u64}, @typed={0x8, 0x77, 0x0, 0x0, @pid=r10}]}, @generic="3ea9ec2a34e27bbfa8cfddbd08df03f10e5e8ce3d492a69f9cf27c2bc414a11867dca39489614bf5f11225376cfd5bce40e02391c2e36ce9b2e6ddb8b44bc178e6a571b1c059ae6e089c2c4b2791f657f0ecc299a5fa2d8098c8f6bf75ef790aa9e5ff60bc85628dfd6d12438ad4d97071db3f95b5ff5b2bd8533c38a1e736deb86e292c71ed8e71929035a524f83ffd46df6c4d18e0c4601872805870fa92b5392d96c307ab0bb12b780944"]}, @MACSEC_ATTR_SA_CONFIG={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0xe5}]}]}, 0x524}, 0x1, 0x0, 0x0, 0x4008000}, 0x4040004) close_range$auto(0x2, 0x8, 0x0) (async) r11 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) (async) socket(0x15, 0x4, 0x0) r12 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/neigh/wlan0/retrans_time_ms\x00', 0xa2202, 0x0) sendfile$auto(r12, r12, 0x0, 0x100200400f) ioctl$auto_KVM_CREATE_VM(r11, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xaece, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.412643467s ago: executing program 2 (id=2294): r0 = eventfd$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0xffffffffffffffff, 0x29, 0x2, 0x0, 0x5) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) r2 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x3b72, 0x0) ioctl$auto(0xffffffffffffffff, 0x8914, 0x24) write$auto_dfs_sched_itmt_fops_itmt(r0, 0x0, 0x0) 4.352593787s ago: executing program 4 (id=2295): mmap$auto(0xa0000003, 0x400008, 0x803, 0x9b72, 0x2, 0x7fff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) iopl$auto(0x3) io_uring_setup$auto(0x6, 0x0) socket(0x9, 0x2, 0x88) setsockopt$auto(0x3, 0x10000000084, 0x10080, 0x0, 0x0) 3.941362854s ago: executing program 1 (id=2296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2f, 0x25dfdbfd, {0xc, 0x0, 0x700}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x24048084) 3.756332492s ago: executing program 1 (id=2297): r0 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x2, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf01000000000000000100"], 0x1c}}, 0x80) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x48, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x7}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7b}, @NL802154_ATTR_SUPPORTED_CHANNEL={0x8, 0x16, 0x1}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0xab}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@nested={0x8, 0x63, 0x0, 0x1, [@nested={0x4, 0x50}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xe9f9aa307964590}, 0x20000804) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) setpriority$auto(0x2, 0x0, 0x80000) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x3ff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x4000011) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="8b632abd7000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r4 = openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x8006, 0x0) msgctl$auto_MSG_STAT(0x8001, 0xb, &(0x7f0000001600)={{0x4, 0xee01, 0x0, 0x3, 0xb, 0x3, 0xcd8e}, &(0x7f0000000280)=0xf8, &(0x7f00000002c0), 0x8, 0x356, 0x3, 0x800000000000000, 0x81, 0x3, 0xffff, 0x1000, @raw=0x389}) write$auto_proc_uid_map_operations_base(r4, 0x0, 0x0) prctl$auto(0x4430, 0x1, 0x4, 0x400000005, 0x400000000007) connect$auto(0x3, 0x0, 0x54) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_clone3(&(0x7f0000000180)={0xa7102000, 0x0, 0x0, 0x0, {0x2a}, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x2}, 0x58) pwrite64$auto(r0, &(0x7f0000000340)='\v\f_U\xe0w\xbf\xe3\xb8\x92\xac.X_|\xc8R\x99!\xd2\xfb\xfe\xa7\xe4&#sn\x91p\xe6\x1eRN8\x99C\x05s\x1cJ\x99\x1d[s\x15z\x87\xe1\xb6\xba#7*/\x13\x00:\x00!\rW6\x00\x00\x00\x00\xb4\x1avP\x00\xc5\xc7\xf1\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\x9c\xa2\xa7\xd1\xdd\x85\as*l\x9c\xa1\xf7\x8c\xa1\xfb\xb5\b\x00\x00\x00\x00\x00\x00\x00\xb4\xfb\x99\x00\xed\v\xfa\xaa[\f\xa2\xea40\r\xcd\x86\x9d\xac\xde\xec\x85\x93\x93\xd3G\x8c\x9b\x9d\a\xbf\x1f\x95n\x94\xbc[\xb5\xfa\xe0t\\\xbc\x11\x94\x0fF\xf9\xac\vv\xb5\xc3\xd9j\x05\boe\xa5\xc2l\x05\xbcTu\x18\xda\xf2#\x80\xd5\xb4\xf54\x04M\xc8G\x0e/\xae\xab\x9b\x14\x8f\xeb\x19\xc80Dq\x9f\f\x106\x1b\xa7\xe6jU\x00X\x8e\xe4\v\xbb\x91\a\x14\x8c\xc9z\'a\xdd\x89<\xf5\xeeC\xb4\xa7\x976\xfcO\x17\x1a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd3\xe9\xc31\xd7\xa7T^\x9fs\xec_Nl/+\x9a\xbb\xb3[\xcb\xf8\x87\x18\xe6,\xad_\xfe~M\x80X\x1ak7g\xff\xc8', 0x52, 0x522c) write$auto(r0, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x0) 3.433411989s ago: executing program 2 (id=2298): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x8000, 0x0) read$auto(r1, &(0x7f0000000000)='veth1\x00', 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) unshare$auto(0x40000080) read$auto(0xffffffffffffffff, 0x0, 0x7f) ioctl$auto_BLKFRAGET(r0, 0x1265, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd1, 0x0, 0x4) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) mmap$auto(0xfffffffffffffffc, 0xa00006, 0x400002, 0x40eb1, 0x602, 0x3) syz_clone(0x4100000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth1_to_team/rp_filter\x00', 0x141241, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time_for_children\x00') r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0x103341, 0x0) write$auto(r4, 0x0, 0x0) ioctl$NS_GET_PARENT(r3, 0xb701, 0x0) 3.079466177s ago: executing program 4 (id=2299): close_range$auto(0x2, 0x8, 0x2) socket(0xa, 0x1, 0x84) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x6e642, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x0, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) r1 = socket(0x5, 0x80a, 0x9) r2 = socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0x4aa001, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x8) select$auto(0xd, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x4, 0x7fff, 0x1a000, 0x80000948b, 0x0, 0x8, 0x400000006, 0x100000000003, 0xc, 0x9, 0x3, 0x6, 0x400005, 0x5]}, 0x0) syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, r2) r4 = openat$auto_memtype_fops_memtype(0xffffffffffffff9c, &(0x7f00000002c0), 0x12000, 0x0) pwrite64$auto(r4, &(0x7f0000000300)='\x00', 0x9, 0x1) setsockopt$auto_SO_BSDCOMPAT(r1, 0xffff7721, 0xe, &(0x7f0000000180)='/dev/zram0\x00', 0x1) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x0) bpf$auto(0xff, &(0x7f00000004c0)=@bpf_attr_5={@target_fd=r5, 0xffffffffffffffff, 0x4, 0x5, 0xffffffffffffffff, @relative_fd, 0x400000000003}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000340)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x2004, 0x6320000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/fs/nfs/net/nfs_client/identifier\x00', 0x82942, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/bDeviceClass\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000240)=""/214, 0xd6) write$auto(r0, &(0x7f0000000400)='odev/audio1\x00', 0x100000a3d9) 2.81979847s ago: executing program 5 (id=2300): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sched_setattr$auto(0x0, &(0x7f00000002c0)={0x1000, 0x50, 0x1d, 0xa9, 0x0, 0x4, 0x9, 0xc, 0xb, 0x6}, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(0xffffffffffffffff, 0x0, 0x20000000) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000540)={0x5, 0x0, '\x00', "1aef09f075b8e6b77c3fa8db259056a2", "9649efcec918d7563fb34bf487b99df832fed7b3dee7edc8c7a06ac8ed714648", "ef86743334004e34ded7f4f918c1ae2728d423746ae9388e833447898844020468166e720aa18e9e8bf939fb69fa37f8cb1a373793ff0f00007aca4980b6dd6a49ec893b4a14c1870013dce4ee7bb313", "1bdd1bd1e7c93fb23eec09c0fd894efd", "cfc574487a9ea54410cef23d4fe7ca3e78d158c240515f8735c415b6011c4201335554d8a56f185263367dea284aa2cfd1186f7918f367d0329159d3cd2419a890b4840be7dda3125c4f826a8ee0ef22", "c403966e25bae3ea9e00000000005ed727190a9b59c895c6fd3f4857dd7652acc9fc8eaaf6552ac0128d06000000000300000000000000699577b2ad1a822a23d98d5dcef24a81ad3101f9c69ebdea766c97d5a8214e6804939ac95778faffffffc4da43984d0b0f00"}) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000003b80)='/dev/snd/pcmC0D0c\x00', 0x8100, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x1, 0x4000010, 0x100, 0x6, 0x1, 0x80a, 0xffffffffffffffff, [0x0, 0x3ff, 0x8], {0x4, 0x10001, 0x3, 0x2de, 0x8e, 0x1, 0x101, 0x8, 0x200000d}, {0x6, 0x3, 0x52, 0x1a4, 0x10001, 0x9, 0x76c5, 0x8, 0x400}}) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, &(0x7f0000000500)={&(0x7f0000000080), 0x1ffffffff}, 0x6, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE2(r1, 0xc2604110, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0) r3 = getpid() r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x88800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r4, 0xc0405519, &(0x7f0000000040)={@inferred=r3, 0x555c, 0xffff, 0x1, "8f9638544ae4bbdf48e497dbb5a3760f9b6b2c854e493a712fcbb4034dde3ba72adae5bfa41dba811bf5488f", @inferred=r3}) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={r3, 0x4, 0x4, 0x10001, 0x8, 0xc, 0xffffffffffffffff, 0x3, 0x803}, 0xee) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) mincore$auto(0x1000, 0x8001, 0x0) r5 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x301483, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2, 0x12, r5, 0x8) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28102, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000001880)=""/4101, 0x1005) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000140), 0x8f00, 0x0) 2.265848544s ago: executing program 1 (id=2301): r0 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x113d43, 0x0) setsockopt$auto_SO_PREFER_BUSY_POLL(r0, 0x1, 0x45, &(0x7f0000000040)='\x00', 0x0) mprotect$auto(0xab1, 0xa587, 0x5) r1 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x59, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r4, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x18, 0x3, 0x2) accept$auto(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05082dbd7000fbdbdf257e0000000800", @ANYRES32=r9, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="810b25bd7080fbdbdf25010000"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) 2.153158983s ago: executing program 4 (id=2302): r0 = openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x113d43, 0x0) setsockopt$auto_SO_PREFER_BUSY_POLL(r0, 0x1, 0x45, &(0x7f0000000040)='\x00', 0x0) mprotect$auto(0xab1, 0xa587, 0x5) r1 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/inject\x00', 0x1a000, 0x0) close_range$auto(r1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = io_uring_setup$auto(0x59, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000300)='/dev/snd/controlC2\x00', 0x8100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x480, 0x0) mkdir$auto(&(0x7f00000000c0)='}[,&*}\x00', 0x2) mount$auto(0x0, &(0x7f0000000540)='}[,&*}\x00', &(0x7f0000000040)='nfsd\x00', 0x3, 0x0) mount$auto(0x0, &(0x7f0000000140)='}[,&*}\x00', 0x0, 0x1fe, 0x0) mmap$auto(0x7, 0x2, 0xa, 0x80000010, r4, 0x101) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e000000000100", @raw=0x3}, 0x4, 0x966, 0x3, @raw=0x404, @enumerated={0x8, 0x80000000, "033beddd1805dc0a0f9236c0095295603854aabf973f037f0896b19cbe04c0aa95c57dc0788556977828784abe1a8f695f19b28fd798a2fb818b216638fd3266", 0x48, 0x3}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x480, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x18, 0x3, 0x2) accept$auto(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r6) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1058}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r9 = ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="05082dbd7000fbdbdf257e0000000800", @ANYRES32=r9, @ANYBLOB="0c002e010800000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) sendmsg$auto_NL80211_CMD_GET_WIPHY(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r8, @ANYBLOB="810b25bd7080fbdbdf"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) 741.616558ms ago: executing program 2 (id=2304): mmap$auto(0x0, 0x86f3, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r0 = socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x15) r1 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/environ\x00', 0x88f80, 0x0) readv$auto(r1, &(0x7f0000001780)={0x0, 0x400}, 0x7f) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x18, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x240202, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000280), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r0) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r4 = fanotify_init$auto(0xc00, 0x2000000000002) r5 = open(&(0x7f0000000000)='./file0\x00', 0x165b42, 0xe1d2b27bdc14aa98) fanotify_mark$auto(0x400000000000, 0x105, 0x401, r5, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x4743, 0x117) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0xa, 0x5, 0x0) read$auto_debugfs_full_proxy_file_operations_internal(r4, &(0x7f0000000080)=""/117, 0x75) ioctl$auto_RNDCLEARPOOL(r4, 0x5206, 0x0) 670.852473ms ago: executing program 5 (id=2305): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r1, 0x1, 0x70bd2f, 0x25dfdbfd, {0xc, 0x0, 0x700}, [@ETHTOOL_A_FEATURES_WANTED={0x4}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x1c}}, 0x24048084) 425.627803ms ago: executing program 5 (id=2306): socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x20401, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto_KVM_GET_MSRS(r1, 0x4068aea3, 0x0) mmap$auto(0x0, 0x400008, 0xe2, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x5, 0x2000000000002) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/saved_tgids\x00', 0x109100, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz7\x00', 0x48f41, 0x0) ioctl$auto(0x3, 0x402c542d, r2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = open(&(0x7f0000000100)='.\x00', 0x595082, 0x0) write$auto(r3, 0x0, 0xfffffdf1) linkat$auto(r3, 0x0, 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) fsetxattr$auto(r3, &(0x7f0000000180)=':\xbf+<\x8a}\x00\xeb\xfa\xe6\x8d\x02\\VD\x04\x00\x00\x00*\x80\xa4\xf4vql\xa9\x05o\xf7\x9e\xfd\xf7\x00\x00\x00\x00H_/Z>n\xf5F\xbf\xd3\xefi\x91\x88\x1daIu7\xef!\xd0\x04\xdes\xfe`\xf5e;4\xbek\xf9\xec%\xbc\xd4\xfc`\xb9\n\xb5\xa5V\x98\x14]\x8a\x03\xd9', 0x0, 0x7bd, 0x1) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0002, 0x19) 267.319159ms ago: executing program 2 (id=2307): prctl$auto(0x1000000001c, 0x5, 0x8, 0xc, 0x80001) setfsuid$auto(0xee00) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000400)='/proc/thread-self/net/ip6_tables_matches\x00', 0x2000, 0x0) preadv$auto(r0, &(0x7f00000002c0)={0x0, 0xbe78}, 0x5, 0x800000fb, 0x8100000001) 154.485806ms ago: executing program 4 (id=2308): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x3, 0x4) getsockopt$auto(r1, 0xff, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) mlockall$auto(0x5) close_range$auto(0x0, 0xffffffffffffffff, 0x2) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, 0xffffffffffffffff, 0x0) socket(0x1d, 0x1, 0xfffffffd) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) (fail_nth: 1) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x1d, 0x3, 0x1) getsockopt$auto_SO_ERROR(r3, 0x65, 0x4, 0x0, &(0x7f0000000040)=0x9) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r4, 0xc0585604, r4) write$auto(r0, 0x0, 0x2000007) r5 = socket(0x2, 0xa, 0x87) setsockopt$auto(r5, 0x0, 0xd4, 0x0, 0x6f7250c4) getsockopt$auto_SO_BSDCOMPAT(r5, 0x8, 0xe, &(0x7f0000000000)='{*\x00', &(0x7f0000000040)=0x9) 0s ago: executing program 2 (id=2309): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/irq/25/smp_affinity_list\x00', 0x402, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0xa, 0x3, 0x4) getsockopt$auto(r1, 0xff, 0x7, 0x0, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) mlockall$auto(0x5) close_range$auto(0x0, 0xffffffffffffffff, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) socket(0x2b, 0x1, 0x0) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) fanotify_mark$auto(0x400000000000, 0x105, 0xf2b, 0xffffffffffffffff, 0x0) socket(0x1d, 0x1, 0xfffffffd) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x1d, 0x3, 0x1) getsockopt$auto_SO_ERROR(r3, 0x65, 0x4, 0x0, &(0x7f0000000040)=0x9) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r4, 0xc0585604, r4) write$auto(r0, 0x0, 0x2000007) r5 = socket(0x2, 0xa, 0x87) setsockopt$auto(r5, 0x0, 0xd4, 0x0, 0x6f7250c4) getsockopt$auto_SO_BSDCOMPAT(r5, 0x8, 0xe, &(0x7f0000000000)='{*\x00', &(0x7f0000000040)=0x9) kernel console output (not intermixed with test programs): lk_mq_update_queue_map+0x227/0x3a0 [ 565.855219][T14530] blk_mq_alloc_tag_set+0x848/0x1330 [ 565.855265][T14530] loop_add+0x3b7/0xb60 [ 565.855304][T14530] ? __pfx_loop_add+0x10/0x10 [ 565.855365][T14530] ? find_held_lock+0x2b/0x80 [ 565.855399][T14530] ? __fget_files+0x215/0x3d0 [ 565.855436][T14530] loop_control_ioctl+0xae/0x620 [ 565.855476][T14530] ? __pfx_loop_control_ioctl+0x10/0x10 [ 565.855521][T14530] ? __pfx_loop_control_ioctl+0x10/0x10 [ 565.855562][T14530] __x64_sys_ioctl+0x18e/0x210 [ 565.855601][T14530] do_syscall_64+0x115/0x840 [ 565.855643][T14530] ? clear_bhb_loop+0x40/0x90 [ 565.855680][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.855719][T14530] RIP: 0033:0x7f00ddf9ce59 [ 565.855744][T14530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.855773][T14530] RSP: 002b:00007f00dedb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 565.855800][T14530] RAX: ffffffffffffffda RBX: 00007f00de215fa0 RCX: 00007f00ddf9ce59 [ 565.855820][T14530] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 565.855839][T14530] RBP: 00007f00de032d6f R08: 0000000000000000 R09: 0000000000000000 [ 565.855857][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.855875][T14530] R13: 00007f00de216038 R14: 00007f00de215fa0 R15: 00007ffcdca78548 [ 565.855914][T14530] [ 566.237685][T14530] blk-mq: reduced tag depth (128 -> 64) [ 567.832445][T14554] hub 1-0:1.0: USB hub found [ 567.839658][T14554] hub 1-0:1.0: 1 port detected [ 568.499466][T14559] Process accounting resumed [ 571.913530][T14628] FAULT_INJECTION: forcing a failure. [ 571.913530][T14628] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 572.009438][T14628] CPU: 1 UID: 0 PID: 14628 Comm: syz.1.1826 Tainted: G L syzkaller #0 PREEMPT(full) [ 572.009486][T14628] Tainted: [L]=SOFTLOCKUP [ 572.009497][T14628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 572.009514][T14628] Call Trace: [ 572.009525][T14628] [ 572.009536][T14628] dump_stack_lvl+0x100/0x190 [ 572.009640][T14628] should_fail_ex.cold+0x5/0xa [ 572.009686][T14628] ? prepare_alloc_pages+0x16d/0x5f0 [ 572.009741][T14628] should_fail_alloc_page+0xeb/0x140 [ 572.009782][T14628] prepare_alloc_pages+0x1f0/0x5f0 [ 572.009823][T14628] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 572.009879][T14628] ? mt_validate_nulls+0x1b3/0xa10 [ 572.009959][T14628] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 572.010013][T14628] ? mas_prev_node+0x1da/0xf00 [ 572.010065][T14628] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 572.010120][T14628] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 572.010162][T14628] ? policy_nodemask+0xed/0x4f0 [ 572.010203][T14628] alloc_pages_mpol+0x1fb/0x540 [ 572.010237][T14628] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 572.010270][T14628] ? __lock_acquire+0x4a5/0x2630 [ 572.010330][T14628] folio_alloc_mpol_noprof+0x36/0x260 [ 572.010370][T14628] alloc_migration_target_by_mpol+0x2c1/0x650 [ 572.010413][T14628] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 572.010455][T14628] ? __pfx___might_resched+0x10/0x10 [ 572.010488][T14628] ? is_bpf_text_address+0x8a/0x1a0 [ 572.010533][T14628] ? bpf_ksym_find+0x124/0x1c0 [ 572.010570][T14628] migrate_pages_batch+0x5dc/0x45c0 [ 572.010612][T14628] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 572.010673][T14628] ? __pfx_migrate_pages_batch+0x10/0x10 [ 572.010715][T14628] ? __pfx_stack_trace_save+0x10/0x10 [ 572.010757][T14628] ? stack_depot_save_flags+0x27/0x9d0 [ 572.010827][T14628] ? kasan_save_stack+0x3f/0x50 [ 572.010853][T14628] ? kasan_save_stack+0x30/0x50 [ 572.010878][T14628] ? kasan_save_track+0x14/0x30 [ 572.010903][T14628] ? __kasan_slab_alloc+0x89/0x90 [ 572.010932][T14628] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 572.010975][T14628] ? __mpol_dup+0x74/0x390 [ 572.011009][T14628] ? mbind_range+0x2ad/0x550 [ 572.011050][T14628] migrate_pages_sync+0x12c/0x880 [ 572.011090][T14628] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 572.011140][T14628] ? __pfx_migrate_pages_sync+0x10/0x10 [ 572.011182][T14628] ? __lock_acquire+0x4a5/0x2630 [ 572.011234][T14628] migrate_pages+0x1aa5/0x2880 [ 572.011277][T14628] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 572.011328][T14628] ? __pfx_migrate_pages+0x10/0x10 [ 572.011370][T14628] ? find_held_lock+0x2b/0x80 [ 572.011406][T14628] ? do_mbind+0x555/0xfd0 [ 572.011449][T14628] ? up_write+0x28c/0x4f0 [ 572.011482][T14628] do_mbind+0x5a4/0xfd0 [ 572.011549][T14628] ? __pfx_do_mbind+0x10/0x10 [ 572.011588][T14628] ? ksys_write+0x190/0x250 [ 572.011659][T14628] ? __pfx_get_nodes+0x10/0x10 [ 572.011701][T14628] kernel_mbind+0x1b7/0x200 [ 572.011743][T14628] ? __pfx_kernel_mbind+0x10/0x10 [ 572.011787][T14628] ? rcu_is_watching+0x12/0xc0 [ 572.011826][T14628] do_syscall_64+0x115/0x840 [ 572.011870][T14628] ? clear_bhb_loop+0x40/0x90 [ 572.011912][T14628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.011942][T14628] RIP: 0033:0x7ffbe2b9ce59 [ 572.011966][T14628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.011994][T14628] RSP: 002b:00007ffbe0df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 572.012022][T14628] RAX: ffffffffffffffda RBX: 00007ffbe2e16090 RCX: 00007ffbe2b9ce59 [ 572.012041][T14628] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 572.012058][T14628] RBP: 00007ffbe2c32d6f R08: 0000000000000006 R09: 0000000000000002 [ 572.012076][T14628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.012094][T14628] R13: 00007ffbe2e16128 R14: 00007ffbe2e16090 R15: 00007ffd8c38b938 [ 572.012132][T14628] [ 575.084659][T14681] FAULT_INJECTION: forcing a failure. [ 575.084659][T14681] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 575.174912][T14681] CPU: 1 UID: 0 PID: 14681 Comm: syz.1.1839 Tainted: G L syzkaller #0 PREEMPT(full) [ 575.174958][T14681] Tainted: [L]=SOFTLOCKUP [ 575.174969][T14681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.174985][T14681] Call Trace: [ 575.174995][T14681] [ 575.175007][T14681] dump_stack_lvl+0x100/0x190 [ 575.175059][T14681] should_fail_ex.cold+0x5/0xa [ 575.175090][T14681] ? prepare_alloc_pages+0x16d/0x5f0 [ 575.175129][T14681] should_fail_alloc_page+0xeb/0x140 [ 575.175167][T14681] prepare_alloc_pages+0x1f0/0x5f0 [ 575.175211][T14681] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 575.175267][T14681] ? mt_validate_nulls+0x1b3/0xa10 [ 575.175333][T14681] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 575.175388][T14681] ? mas_prev_node+0x1da/0xf00 [ 575.175439][T14681] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 575.175480][T14681] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 575.175518][T14681] ? policy_nodemask+0xed/0x4f0 [ 575.175552][T14681] alloc_pages_mpol+0x1fb/0x540 [ 575.175592][T14681] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 575.175626][T14681] ? lock_acquire+0x1b1/0x370 [ 575.175668][T14681] folio_alloc_mpol_noprof+0x36/0x260 [ 575.175705][T14681] alloc_migration_target_by_mpol+0x2c1/0x650 [ 575.175745][T14681] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 575.175786][T14681] ? __pfx___might_resched+0x10/0x10 [ 575.175821][T14681] migrate_pages_batch+0x5dc/0x45c0 [ 575.175963][T14681] ? __print_lock_name+0x60/0x80 [ 575.176000][T14681] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 575.176046][T14681] ? rcu_is_watching+0x12/0xc0 [ 575.176076][T14681] ? trace_sched_exit_tp+0x11c/0x160 [ 575.176113][T14681] ? __pfx_migrate_pages_batch+0x10/0x10 [ 575.176148][T14681] ? __schedule+0x12a7/0x67a0 [ 575.176210][T14681] migrate_pages_sync+0x12c/0x880 [ 575.176252][T14681] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 575.176293][T14681] ? lockdep_hardirqs_on+0x78/0x100 [ 575.176330][T14681] ? irqentry_exit+0x24d/0x970 [ 575.176367][T14681] ? __pfx_migrate_pages_sync+0x10/0x10 [ 575.176410][T14681] ? migrate_pages+0x29c/0x2880 [ 575.176452][T14681] migrate_pages+0x1aa5/0x2880 [ 575.176492][T14681] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 575.176541][T14681] ? __pfx_migrate_pages+0x10/0x10 [ 575.176580][T14681] ? find_held_lock+0x2b/0x80 [ 575.176613][T14681] ? do_mbind+0x555/0xfd0 [ 575.176657][T14681] ? up_write+0x28c/0x4f0 [ 575.176688][T14681] do_mbind+0x5a4/0xfd0 [ 575.176734][T14681] ? __pfx_do_mbind+0x10/0x10 [ 575.176769][T14681] ? ksys_write+0x190/0x250 [ 575.176832][T14681] ? __pfx_get_nodes+0x10/0x10 [ 575.176871][T14681] kernel_mbind+0x1b7/0x200 [ 575.176914][T14681] ? __pfx_kernel_mbind+0x10/0x10 [ 575.176956][T14681] ? rcu_is_watching+0x12/0xc0 [ 575.176993][T14681] do_syscall_64+0x115/0x840 [ 575.177033][T14681] ? clear_bhb_loop+0x40/0x90 [ 575.177070][T14681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.177099][T14681] RIP: 0033:0x7ffbe2b9ce59 [ 575.177125][T14681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.177154][T14681] RSP: 002b:00007ffbe0dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 575.177183][T14681] RAX: ffffffffffffffda RBX: 00007ffbe2e16180 RCX: 00007ffbe2b9ce59 [ 575.177202][T14681] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 575.177220][T14681] RBP: 00007ffbe2c32d6f R08: 0000000000000006 R09: 0000000000000002 [ 575.177239][T14681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 575.177258][T14681] R13: 00007ffbe2e16218 R14: 00007ffbe2e16180 R15: 00007ffd8c38b938 [ 575.177296][T14681] [ 576.497021][T14704] usb usb36: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 576.528247][T14704] vhci_hcd vhci_hcd.1: Wrong hub descriptor type for USB 3.0 roothub. [ 577.098128][T14722] FAULT_INJECTION: forcing a failure. [ 577.098128][T14722] name failslab, interval 1, probability 0, space 0, times 0 [ 577.112279][T14722] CPU: 0 UID: 0 PID: 14722 Comm: syz.1.1852 Tainted: G L syzkaller #0 PREEMPT(full) [ 577.112329][T14722] Tainted: [L]=SOFTLOCKUP [ 577.112341][T14722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 577.112360][T14722] Call Trace: [ 577.112370][T14722] [ 577.112382][T14722] dump_stack_lvl+0x100/0x190 [ 577.112437][T14722] should_fail_ex.cold+0x5/0xa [ 577.112476][T14722] should_failslab+0xc2/0x120 [ 577.112509][T14722] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 577.112554][T14722] ? __mpol_dup+0x74/0x390 [ 577.112593][T14722] __mpol_dup+0x74/0x390 [ 577.112627][T14722] ? __pfx___mpol_dup+0x10/0x10 [ 577.112673][T14722] mbind_range+0x2ad/0x550 [ 577.112715][T14722] do_mbind+0x7dc/0xfd0 [ 577.112764][T14722] ? __pfx_do_mbind+0x10/0x10 [ 577.112802][T14722] ? ksys_write+0x190/0x250 [ 577.112854][T14722] ? __pfx_get_nodes+0x10/0x10 [ 577.112894][T14722] kernel_mbind+0x1b7/0x200 [ 577.112936][T14722] ? __pfx_kernel_mbind+0x10/0x10 [ 577.112976][T14722] ? rcu_is_watching+0x12/0xc0 [ 577.113020][T14722] do_syscall_64+0x115/0x840 [ 577.113059][T14722] ? clear_bhb_loop+0x40/0x90 [ 577.113096][T14722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.113127][T14722] RIP: 0033:0x7ffbe2b9ce59 [ 577.113150][T14722] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.113178][T14722] RSP: 002b:00007ffbe0dd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 577.113206][T14722] RAX: ffffffffffffffda RBX: 00007ffbe2e16180 RCX: 00007ffbe2b9ce59 [ 577.113225][T14722] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 577.113244][T14722] RBP: 00007ffbe2c32d6f R08: 0000000000000006 R09: 0000000000000002 [ 577.113262][T14722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.113280][T14722] R13: 00007ffbe2e16218 R14: 00007ffbe2e16180 R15: 00007ffd8c38b938 [ 577.113320][T14722] [ 578.356999][T14751] FAULT_INJECTION: forcing a failure. [ 578.356999][T14751] name failslab, interval 1, probability 0, space 0, times 0 [ 578.398863][T14751] CPU: 1 UID: 0 PID: 14751 Comm: syz.2.1859 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.398915][T14751] Tainted: [L]=SOFTLOCKUP [ 578.398927][T14751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 578.398945][T14751] Call Trace: [ 578.398956][T14751] [ 578.398968][T14751] dump_stack_lvl+0x100/0x190 [ 578.399022][T14751] should_fail_ex.cold+0x5/0xa [ 578.399061][T14751] should_failslab+0xc2/0x120 [ 578.399095][T14751] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 578.399139][T14751] ? anon_vma_clone+0x2ba/0xcd0 [ 578.399185][T14751] anon_vma_clone+0x2ba/0xcd0 [ 578.399233][T14751] __split_vma+0x51f/0xda0 [ 578.399277][T14751] ? __pfx___split_vma+0x10/0x10 [ 578.399339][T14751] vma_modify+0x12ad/0x25c0 [ 578.399395][T14751] ? __pfx_vma_modify+0x10/0x10 [ 578.399461][T14751] vma_modify_policy+0x238/0x300 [ 578.399514][T14751] ? __pfx_vma_modify_policy+0x10/0x10 [ 578.399559][T14751] ? find_held_lock+0x2b/0x80 [ 578.399625][T14751] mbind_range+0x175/0x550 [ 578.399669][T14751] do_mbind+0x7dc/0xfd0 [ 578.399718][T14751] ? __pfx_do_mbind+0x10/0x10 [ 578.399754][T14751] ? ksys_write+0x190/0x250 [ 578.399806][T14751] ? __pfx_get_nodes+0x10/0x10 [ 578.399847][T14751] kernel_mbind+0x1b7/0x200 [ 578.399890][T14751] ? __pfx_kernel_mbind+0x10/0x10 [ 578.399932][T14751] ? rcu_is_watching+0x12/0xc0 [ 578.399971][T14751] do_syscall_64+0x115/0x840 [ 578.400009][T14751] ? clear_bhb_loop+0x40/0x90 [ 578.400046][T14751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.400077][T14751] RIP: 0033:0x7f1b5f39ce59 [ 578.400102][T14751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.400132][T14751] RSP: 002b:00007f1b5d5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 578.400161][T14751] RAX: ffffffffffffffda RBX: 00007f1b5f616180 RCX: 00007f1b5f39ce59 [ 578.400181][T14751] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 578.400200][T14751] RBP: 00007f1b5f432d6f R08: 0000000000000006 R09: 0000000000000002 [ 578.400219][T14751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.400237][T14751] R13: 00007f1b5f616218 R14: 00007f1b5f616180 R15: 00007fff01011238 [ 578.400278][T14751] [ 580.112052][T14778] FAULT_INJECTION: forcing a failure. [ 580.112052][T14778] name failslab, interval 1, probability 0, space 0, times 0 [ 580.124956][T14778] CPU: 1 UID: 0 PID: 14778 Comm: syz.5.1865 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.125003][T14778] Tainted: [L]=SOFTLOCKUP [ 580.125014][T14778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 580.125033][T14778] Call Trace: [ 580.125043][T14778] [ 580.125055][T14778] dump_stack_lvl+0x100/0x190 [ 580.125109][T14778] should_fail_ex.cold+0x5/0xa [ 580.125147][T14778] should_failslab+0xc2/0x120 [ 580.125181][T14778] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 580.125227][T14778] ? do_getname+0x35/0x390 [ 580.125275][T14778] do_getname+0x35/0x390 [ 580.125319][T14778] __x64_sys_chdir+0xaa/0x280 [ 580.125358][T14778] ? __pfx___x64_sys_chdir+0x10/0x10 [ 580.125399][T14778] ? rcu_is_watching+0x12/0xc0 [ 580.125437][T14778] do_syscall_64+0x115/0x840 [ 580.125476][T14778] ? clear_bhb_loop+0x40/0x90 [ 580.125507][T14778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.125533][T14778] RIP: 0033:0x7f00ddf9ce59 [ 580.125556][T14778] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.125583][T14778] RSP: 002b:00007f00dedb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 580.125609][T14778] RAX: ffffffffffffffda RBX: 00007f00de215fa0 RCX: 00007f00ddf9ce59 [ 580.125623][T14778] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 580.125632][T14778] RBP: 00007f00de032d6f R08: 0000000000000000 R09: 0000000000000000 [ 580.125641][T14778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.125649][T14778] R13: 00007f00de216038 R14: 00007f00de215fa0 R15: 00007ffcdca78548 [ 580.125669][T14778] [ 580.308518][T14768] Process accounting resumed [ 582.029108][T14817] ima: policy update failed [ 582.054062][ T29] audit: type=1802 audit(1780867297.616:79): pid=14817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1871" res=0 errno=0 [ 585.631307][T14893] Process accounting resumed [ 585.763733][T14905] blk-mq: reduced tag depth (128 -> 64) [ 586.067331][T14912] blktrace: Concurrent blktraces are not allowed on loop2 [ 586.135183][ T29] audit: type=1800 audit(1780867301.699:80): pid=14910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1893" name="lu_gp_id" dev="configfs" ino=64307 res=0 errno=0 [ 588.972225][ T29] audit: type=1800 audit(1780867304.530:81): pid=14968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1905" name="lu_gp_id" dev="configfs" ino=64706 res=0 errno=0 [ 591.675393][T15016] FAULT_INJECTION: forcing a failure. [ 591.675393][T15016] name failslab, interval 1, probability 0, space 0, times 0 [ 591.700427][T15016] CPU: 1 UID: 0 PID: 15016 Comm: syz.1.1914 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.700470][T15016] Tainted: [L]=SOFTLOCKUP [ 591.700481][T15016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 591.700498][T15016] Call Trace: [ 591.700508][T15016] [ 591.700520][T15016] dump_stack_lvl+0x100/0x190 [ 591.700570][T15016] should_fail_ex.cold+0x5/0xa [ 591.700605][T15016] should_failslab+0xc2/0x120 [ 591.700647][T15016] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 591.700685][T15016] ? security_file_alloc+0x34/0x2c0 [ 591.700724][T15016] ? trace_kmem_cache_alloc+0xd5/0x100 [ 591.700746][T15016] security_file_alloc+0x34/0x2c0 [ 591.700766][T15016] init_file+0x95/0x480 [ 591.700788][T15016] alloc_empty_file+0x79/0x1c0 [ 591.700810][T15016] alloc_file_pseudo+0x13a/0x230 [ 591.700832][T15016] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 591.700854][T15016] ? security_inode_init_security_anon+0x7b/0x230 [ 591.700876][T15016] __anon_inode_getfile+0xe8/0x280 [ 591.700905][T15016] new_userfaultfd+0x255/0x400 [ 591.700924][T15016] __x64_sys_userfaultfd+0x4b/0xb0 [ 591.700942][T15016] do_syscall_64+0x115/0x840 [ 591.700963][T15016] ? clear_bhb_loop+0x40/0x90 [ 591.700981][T15016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.700996][T15016] RIP: 0033:0x7ffbe2b9ce59 [ 591.701011][T15016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.701027][T15016] RSP: 002b:00007ffbe3975028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 591.701043][T15016] RAX: ffffffffffffffda RBX: 00007ffbe2e15fa0 RCX: 00007ffbe2b9ce59 [ 591.701053][T15016] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 591.701063][T15016] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 591.701073][T15016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.701082][T15016] R13: 00007ffbe2e16038 R14: 00007ffbe2e15fa0 R15: 00007ffd8c38b938 [ 591.701102][T15016] [ 592.164929][ T29] audit: type=1800 audit(1780867307.722:82): pid=15021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1915" name="lu_gp_id" dev="configfs" ino=65738 res=0 errno=0 [ 592.353645][T15030] snd_aloop snd_aloop.0: control 7:265:7:ª¸è:2463 is already present [ 592.818178][T15036] FAULT_INJECTION: forcing a failure. [ 592.818178][T15036] name failslab, interval 1, probability 0, space 0, times 0 [ 592.909686][T15036] CPU: 1 UID: 0 PID: 15036 Comm: syz.2.1919 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.909715][T15036] Tainted: [L]=SOFTLOCKUP [ 592.909721][T15036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 592.909731][T15036] Call Trace: [ 592.909738][T15036] [ 592.909745][T15036] dump_stack_lvl+0x100/0x190 [ 592.909777][T15036] should_fail_ex.cold+0x5/0xa [ 592.909798][T15036] should_failslab+0xc2/0x120 [ 592.909816][T15036] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 592.909839][T15036] ? anon_vma_clone+0x2ba/0xcd0 [ 592.909862][T15036] anon_vma_clone+0x2ba/0xcd0 [ 592.909888][T15036] __split_vma+0x51f/0xda0 [ 592.909912][T15036] ? __pfx___split_vma+0x10/0x10 [ 592.909943][T15036] vma_modify+0x12ad/0x25c0 [ 592.909972][T15036] ? __pfx_vma_modify+0x10/0x10 [ 592.910016][T15036] vma_modify_policy+0x238/0x300 [ 592.910044][T15036] ? __pfx_vma_modify_policy+0x10/0x10 [ 592.910068][T15036] ? find_held_lock+0x2b/0x80 [ 592.910101][T15036] mbind_range+0x175/0x550 [ 592.910124][T15036] do_mbind+0x7dc/0xfd0 [ 592.910155][T15036] ? __pfx_do_mbind+0x10/0x10 [ 592.910175][T15036] ? ksys_write+0x190/0x250 [ 592.910201][T15036] ? __pfx_get_nodes+0x10/0x10 [ 592.910224][T15036] kernel_mbind+0x1b7/0x200 [ 592.910247][T15036] ? __pfx_kernel_mbind+0x10/0x10 [ 592.910269][T15036] ? rcu_is_watching+0x12/0xc0 [ 592.910288][T15036] do_syscall_64+0x115/0x840 [ 592.910309][T15036] ? clear_bhb_loop+0x40/0x90 [ 592.910327][T15036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.910344][T15036] RIP: 0033:0x7f1b5f39ce59 [ 592.910359][T15036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.910382][T15036] RSP: 002b:00007f1b5d5f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 592.910409][T15036] RAX: ffffffffffffffda RBX: 00007f1b5f616180 RCX: 00007f1b5f39ce59 [ 592.910430][T15036] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 592.910449][T15036] RBP: 00007f1b5f432d6f R08: 0000000000000006 R09: 0000000000000002 [ 592.910468][T15036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.910484][T15036] R13: 00007f1b5f616218 R14: 00007f1b5f616180 R15: 00007fff01011238 [ 592.910506][T15036] [ 593.656902][T15052] FAULT_INJECTION: forcing a failure. [ 593.656902][T15052] name failslab, interval 1, probability 0, space 0, times 0 [ 593.706319][T15052] CPU: 1 UID: 0 PID: 15052 Comm: syz.2.1922 Tainted: G L syzkaller #0 PREEMPT(full) [ 593.706356][T15052] Tainted: [L]=SOFTLOCKUP [ 593.706362][T15052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 593.706372][T15052] Call Trace: [ 593.706378][T15052] [ 593.706386][T15052] dump_stack_lvl+0x100/0x190 [ 593.706417][T15052] should_fail_ex.cold+0x5/0xa [ 593.706438][T15052] should_failslab+0xc2/0x120 [ 593.706457][T15052] __kvmalloc_node_noprof+0xfa/0xa00 [ 593.706473][T15052] ? sbitmap_init_node+0x1cc/0x720 [ 593.706497][T15052] sbitmap_init_node+0x1cc/0x720 [ 593.706521][T15052] sbitmap_queue_init_node+0x40/0x4a0 [ 593.706542][T15052] blk_mq_init_tags+0x184/0x300 [ 593.706592][T15052] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 593.706618][T15052] ? blk_mq_update_queue_map+0x227/0x3a0 [ 593.706643][T15052] blk_mq_alloc_tag_set+0x848/0x1330 [ 593.706666][T15052] loop_add+0x3b7/0xb60 [ 593.706702][T15052] ? __pfx_loop_add+0x10/0x10 [ 593.706734][T15052] ? find_held_lock+0x2b/0x80 [ 593.706754][T15052] ? __fget_files+0x215/0x3d0 [ 593.706777][T15052] loop_control_ioctl+0xae/0x620 [ 593.706798][T15052] ? __pfx_loop_control_ioctl+0x10/0x10 [ 593.706820][T15052] ? __pfx_loop_control_ioctl+0x10/0x10 [ 593.706842][T15052] __x64_sys_ioctl+0x18e/0x210 [ 593.706858][T15052] do_syscall_64+0x115/0x840 [ 593.706879][T15052] ? clear_bhb_loop+0x40/0x90 [ 593.706898][T15052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 593.706914][T15052] RIP: 0033:0x7f1b5f39ce59 [ 593.706927][T15052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 593.706943][T15052] RSP: 002b:00007f1b60199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 593.706959][T15052] RAX: ffffffffffffffda RBX: 00007f1b5f615fa0 RCX: 00007f1b5f39ce59 [ 593.706969][T15052] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 593.706979][T15052] RBP: 00007f1b5f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 593.706988][T15052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 593.706997][T15052] R13: 00007f1b5f616038 R14: 00007f1b5f615fa0 R15: 00007fff01011238 [ 593.707039][T15052] [ 593.707149][T15052] blk-mq: reduced tag depth (128 -> 64) [ 595.213598][ T29] audit: type=1800 audit(1780867310.773:83): pid=15068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1925" name="lu_gp_id" dev="configfs" ino=65070 res=0 errno=0 [ 595.705842][T15087] FAULT_INJECTION: forcing a failure. [ 595.705842][T15087] name failslab, interval 1, probability 0, space 0, times 0 [ 595.743490][T15087] CPU: 0 UID: 0 PID: 15087 Comm: syz.1.1930 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.743534][T15087] Tainted: [L]=SOFTLOCKUP [ 595.743545][T15087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 595.743563][T15087] Call Trace: [ 595.743573][T15087] [ 595.743584][T15087] dump_stack_lvl+0x100/0x190 [ 595.743641][T15087] should_fail_ex.cold+0x5/0xa [ 595.743678][T15087] should_failslab+0xc2/0x120 [ 595.743713][T15087] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 595.743765][T15087] ? sp_alloc+0x27/0x160 [ 595.743807][T15087] sp_alloc+0x27/0x160 [ 595.743842][T15087] mpol_set_shared_policy+0xa5/0x890 [ 595.743885][T15087] ? __pfx_shmem_set_policy+0x10/0x10 [ 595.743935][T15087] mbind_range+0x339/0x550 [ 595.743976][T15087] do_mbind+0x7dc/0xfd0 [ 595.744019][T15087] ? __pfx_do_mbind+0x10/0x10 [ 595.744056][T15087] ? ksys_write+0x190/0x250 [ 595.744106][T15087] ? __pfx_get_nodes+0x10/0x10 [ 595.744145][T15087] kernel_mbind+0x1b7/0x200 [ 595.744181][T15087] ? __pfx_kernel_mbind+0x10/0x10 [ 595.744220][T15087] ? rcu_is_watching+0x12/0xc0 [ 595.744256][T15087] do_syscall_64+0x115/0x840 [ 595.744295][T15087] ? clear_bhb_loop+0x40/0x90 [ 595.744329][T15087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.744359][T15087] RIP: 0033:0x7ffbe2b9ce59 [ 595.744381][T15087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.744410][T15087] RSP: 002b:00007ffbe0df6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 595.744437][T15087] RAX: ffffffffffffffda RBX: 00007ffbe2e16090 RCX: 00007ffbe2b9ce59 [ 595.744457][T15087] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 595.744475][T15087] RBP: 00007ffbe2c32d6f R08: 0000000000000006 R09: 0000000000000002 [ 595.744491][T15087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.744509][T15087] R13: 00007ffbe2e16128 R14: 00007ffbe2e16090 R15: 00007ffd8c38b938 [ 595.744547][T15087] [ 596.668787][T15098] FAULT_INJECTION: forcing a failure. [ 596.668787][T15098] name failslab, interval 1, probability 0, space 0, times 0 [ 596.793843][T15098] CPU: 1 UID: 0 PID: 15098 Comm: syz.5.1932 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.793894][T15098] Tainted: [L]=SOFTLOCKUP [ 596.793905][T15098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 596.793924][T15098] Call Trace: [ 596.793933][T15098] [ 596.793943][T15098] dump_stack_lvl+0x100/0x190 [ 596.794011][T15098] should_fail_ex.cold+0x5/0xa [ 596.794050][T15098] should_failslab+0xc2/0x120 [ 596.794086][T15098] __kvmalloc_node_noprof+0xfa/0xa00 [ 596.794120][T15098] ? sbitmap_init_node+0x1cc/0x720 [ 596.794167][T15098] sbitmap_init_node+0x1cc/0x720 [ 596.794218][T15098] sbitmap_queue_init_node+0x40/0x4a0 [ 596.794261][T15098] blk_mq_init_tags+0x184/0x300 [ 596.794301][T15098] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 596.794339][T15098] ? blk_mq_update_queue_map+0x227/0x3a0 [ 596.794379][T15098] blk_mq_alloc_tag_set+0x848/0x1330 [ 596.794425][T15098] loop_add+0x3b7/0xb60 [ 596.794463][T15098] ? __pfx_loop_add+0x10/0x10 [ 596.794522][T15098] ? find_held_lock+0x2b/0x80 [ 596.794556][T15098] ? __fget_files+0x215/0x3d0 [ 596.794594][T15098] loop_control_ioctl+0xae/0x620 [ 596.794634][T15098] ? __pfx_loop_control_ioctl+0x10/0x10 [ 596.794679][T15098] ? __pfx_loop_control_ioctl+0x10/0x10 [ 596.794719][T15098] __x64_sys_ioctl+0x18e/0x210 [ 596.794753][T15098] do_syscall_64+0x115/0x840 [ 596.794791][T15098] ? clear_bhb_loop+0x40/0x90 [ 596.794827][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.794856][T15098] RIP: 0033:0x7f00ddf9ce59 [ 596.794879][T15098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.794909][T15098] RSP: 002b:00007f00dedb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.794936][T15098] RAX: ffffffffffffffda RBX: 00007f00de215fa0 RCX: 00007f00ddf9ce59 [ 596.794954][T15098] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 596.794972][T15098] RBP: 00007f00de032d6f R08: 0000000000000000 R09: 0000000000000000 [ 596.794991][T15098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.795010][T15098] R13: 00007f00de216038 R14: 00007f00de215fa0 R15: 00007ffcdca78548 [ 596.795047][T15098] [ 596.800578][T15098] blk-mq: reduced tag depth (128 -> 64) [ 597.059122][T15107] FAULT_INJECTION: forcing a failure. [ 597.059122][T15107] name failslab, interval 1, probability 0, space 0, times 0 [ 597.078427][T15107] CPU: 0 UID: 0 PID: 15107 Comm: syz.1.1934 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.078476][T15107] Tainted: [L]=SOFTLOCKUP [ 597.078487][T15107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 597.078505][T15107] Call Trace: [ 597.078516][T15107] [ 597.078527][T15107] dump_stack_lvl+0x100/0x190 [ 597.078582][T15107] should_fail_ex.cold+0x5/0xa [ 597.078619][T15107] should_failslab+0xc2/0x120 [ 597.078655][T15107] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 597.078707][T15107] ? security_file_alloc+0x34/0x2c0 [ 597.078745][T15107] ? trace_kmem_cache_alloc+0xd5/0x100 [ 597.078787][T15107] security_file_alloc+0x34/0x2c0 [ 597.078824][T15107] init_file+0x95/0x480 [ 597.078863][T15107] alloc_empty_file+0x79/0x1c0 [ 597.078905][T15107] alloc_file_pseudo+0x13a/0x230 [ 597.078948][T15107] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 597.078991][T15107] ? security_inode_init_security_anon+0x7b/0x230 [ 597.079033][T15107] __anon_inode_getfile+0xe8/0x280 [ 597.079079][T15107] new_userfaultfd+0x255/0x400 [ 597.079113][T15107] __x64_sys_userfaultfd+0x4b/0xb0 [ 597.079148][T15107] do_syscall_64+0x115/0x840 [ 597.079187][T15107] ? clear_bhb_loop+0x40/0x90 [ 597.079224][T15107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.079254][T15107] RIP: 0033:0x7ffbe2b9ce59 [ 597.079279][T15107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.079308][T15107] RSP: 002b:00007ffbe3975028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 597.079335][T15107] RAX: ffffffffffffffda RBX: 00007ffbe2e15fa0 RCX: 00007ffbe2b9ce59 [ 597.079356][T15107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 597.079373][T15107] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 597.079394][T15107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.079412][T15107] R13: 00007ffbe2e16038 R14: 00007ffbe2e15fa0 R15: 00007ffd8c38b938 [ 597.079452][T15107] [ 597.648818][ T29] audit: type=1800 audit(1780867313.204:84): pid=15111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1936" name="lu_gp_id" dev="configfs" ino=66103 res=0 errno=0 [ 598.173312][T15118] zram: Added device: zram1 [ 599.219645][T15150] FAULT_INJECTION: forcing a failure. [ 599.219645][T15150] name failslab, interval 1, probability 0, space 0, times 0 [ 599.247520][T15150] CPU: 1 UID: 0 PID: 15150 Comm: syz.1.1944 Tainted: G L syzkaller #0 PREEMPT(full) [ 599.247567][T15150] Tainted: [L]=SOFTLOCKUP [ 599.247578][T15150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 599.247594][T15150] Call Trace: [ 599.247605][T15150] [ 599.247615][T15150] dump_stack_lvl+0x100/0x190 [ 599.247667][T15150] should_fail_ex.cold+0x5/0xa [ 599.247701][T15150] should_failslab+0xc2/0x120 [ 599.247735][T15150] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 599.247778][T15150] ? alloc_empty_file+0x5b/0x1c0 [ 599.247825][T15150] alloc_empty_file+0x5b/0x1c0 [ 599.247866][T15150] alloc_file_pseudo+0x13a/0x230 [ 599.247909][T15150] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 599.247950][T15150] ? security_inode_init_security_anon+0x7b/0x230 [ 599.247993][T15150] __anon_inode_getfile+0xe8/0x280 [ 599.248040][T15150] new_userfaultfd+0x255/0x400 [ 599.248084][T15150] __x64_sys_userfaultfd+0x4b/0xb0 [ 599.248119][T15150] do_syscall_64+0x115/0x840 [ 599.248156][T15150] ? clear_bhb_loop+0x40/0x90 [ 599.248192][T15150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.248219][T15150] RIP: 0033:0x7ffbe2b9ce59 [ 599.248242][T15150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.248270][T15150] RSP: 002b:00007ffbe3975028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 599.248298][T15150] RAX: ffffffffffffffda RBX: 00007ffbe2e15fa0 RCX: 00007ffbe2b9ce59 [ 599.248318][T15150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 599.248333][T15150] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 599.248350][T15150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 599.248366][T15150] R13: 00007ffbe2e16038 R14: 00007ffbe2e15fa0 R15: 00007ffd8c38b938 [ 599.248403][T15150] [ 599.769297][ T29] audit: type=1800 audit(1780867315.335:85): pid=15161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1946" name="lu_gp_id" dev="configfs" ino=65487 res=0 errno=0 [ 600.025860][T15170] capability: warning: `syz.1.1949' uses 32-bit capabilities (legacy support in use) [ 601.813386][ T29] audit: type=1800 audit(1780867317.386:86): pid=15209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1956" name="lu_gp_id" dev="configfs" ino=66636 res=0 errno=0 [ 603.952152][T15262] FAULT_INJECTION: forcing a failure. [ 603.952152][T15262] name failslab, interval 1, probability 0, space 0, times 0 [ 604.004183][T15262] CPU: 1 UID: 0 PID: 15262 Comm: syz.5.1963 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.004211][T15262] Tainted: [L]=SOFTLOCKUP [ 604.004217][T15262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 604.004228][T15262] Call Trace: [ 604.004233][T15262] [ 604.004240][T15262] dump_stack_lvl+0x100/0x190 [ 604.004271][T15262] should_fail_ex.cold+0x5/0xa [ 604.004292][T15262] should_failslab+0xc2/0x120 [ 604.004310][T15262] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 604.004333][T15262] ? __mpol_dup+0x74/0x390 [ 604.004356][T15262] __mpol_dup+0x74/0x390 [ 604.004375][T15262] ? __pfx___mpol_dup+0x10/0x10 [ 604.004404][T15262] mbind_range+0x2ad/0x550 [ 604.004426][T15262] do_mbind+0x7dc/0xfd0 [ 604.004454][T15262] ? __pfx_do_mbind+0x10/0x10 [ 604.004473][T15262] ? ksys_write+0x190/0x250 [ 604.004499][T15262] ? __pfx_get_nodes+0x10/0x10 [ 604.004519][T15262] kernel_mbind+0x1b7/0x200 [ 604.004541][T15262] ? __pfx_kernel_mbind+0x10/0x10 [ 604.004562][T15262] ? rcu_is_watching+0x12/0xc0 [ 604.004582][T15262] do_syscall_64+0x115/0x840 [ 604.004603][T15262] ? clear_bhb_loop+0x40/0x90 [ 604.004634][T15262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.004664][T15262] RIP: 0033:0x7f00ddf9ce59 [ 604.004688][T15262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.004717][T15262] RSP: 002b:00007f00ded90028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 604.004746][T15262] RAX: ffffffffffffffda RBX: 00007f00de216090 RCX: 00007f00ddf9ce59 [ 604.004765][T15262] RDX: 0000000000000004 RSI: 00000000002091d2 RDI: 0000000000000000 [ 604.004775][T15262] RBP: 00007f00de032d6f R08: 0000000000000006 R09: 0000000000000002 [ 604.004785][T15262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.004795][T15262] R13: 00007f00de216128 R14: 00007f00de216090 R15: 00007ffcdca78548 [ 604.004816][T15262] [ 605.760720][T15286] FAULT_INJECTION: forcing a failure. [ 605.760720][T15286] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 605.825791][T15286] CPU: 1 UID: 0 PID: 15286 Comm: syz.1.1970 Tainted: G L syzkaller #0 PREEMPT(full) [ 605.825827][T15286] Tainted: [L]=SOFTLOCKUP [ 605.825836][T15286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 605.825851][T15286] Call Trace: [ 605.825859][T15286] [ 605.825868][T15286] dump_stack_lvl+0x100/0x190 [ 605.825911][T15286] should_fail_ex.cold+0x5/0xa [ 605.825937][T15286] _copy_to_user+0x32/0xd0 [ 605.825986][T15286] simple_read_from_buffer+0xcb/0x170 [ 605.826014][T15286] proc_fail_nth_read+0x1af/0x230 [ 605.826049][T15286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 605.826079][T15286] ? rw_verify_area+0xce/0x6d0 [ 605.826098][T15286] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 605.826126][T15286] vfs_read+0x1e4/0xb30 [ 605.826150][T15286] ? __pfx_vfs_read+0x10/0x10 [ 605.826170][T15286] ? __fget_files+0x215/0x3d0 [ 605.826198][T15286] ? __fget_files+0x21f/0x3d0 [ 605.826227][T15286] ksys_read+0x12a/0x250 [ 605.826247][T15286] ? __pfx_ksys_read+0x10/0x10 [ 605.826270][T15286] ? rcu_is_watching+0x12/0xc0 [ 605.826303][T15286] do_syscall_64+0x115/0x840 [ 605.826329][T15286] ? clear_bhb_loop+0x40/0x90 [ 605.826351][T15286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.826374][T15286] RIP: 0033:0x7ffbe2b5d68e [ 605.826391][T15286] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 605.826410][T15286] RSP: 002b:00007ffbe3974fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 605.826429][T15286] RAX: ffffffffffffffda RBX: 00007ffbe39756c0 RCX: 00007ffbe2b5d68e [ 605.826442][T15286] RDX: 000000000000000f RSI: 00007ffbe39750a0 RDI: 0000000000000004 [ 605.826453][T15286] RBP: 00007ffbe3975090 R08: 0000000000000000 R09: 0000000000000000 [ 605.826465][T15286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.826477][T15286] R13: 00007ffbe2e16038 R14: 00007ffbe2e15fa0 R15: 00007ffd8c38b938 [ 605.826504][T15286] [ 606.551541][T15306] FAULT_INJECTION: forcing a failure. [ 606.551541][T15306] name failslab, interval 1, probability 0, space 0, times 0 [ 606.625015][T15306] CPU: 1 UID: 0 PID: 15306 Comm: syz.2.1974 Tainted: G L syzkaller #0 PREEMPT(full) [ 606.625060][T15306] Tainted: [L]=SOFTLOCKUP [ 606.625071][T15306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 606.625088][T15306] Call Trace: [ 606.625098][T15306] [ 606.625110][T15306] dump_stack_lvl+0x100/0x190 [ 606.625162][T15306] should_fail_ex.cold+0x5/0xa [ 606.625197][T15306] ? group_cpus_evenly+0xec/0x660 [ 606.625232][T15306] should_failslab+0xc2/0x120 [ 606.625266][T15306] __kmalloc_noprof+0xe0/0x850 [ 606.625319][T15306] group_cpus_evenly+0xec/0x660 [ 606.625359][T15306] ? __pfx_group_cpus_evenly+0x10/0x10 [ 606.625411][T15306] blk_mq_map_queues+0x9d/0x430 [ 606.625455][T15306] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 606.625492][T15306] ? rcu_is_watching+0x12/0xc0 [ 606.625525][T15306] ? trace_kmalloc+0xe3/0x110 [ 606.625556][T15306] ? __kasan_kmalloc+0xaa/0xb0 [ 606.625600][T15306] blk_mq_update_queue_map+0x305/0x3a0 [ 606.625641][T15306] blk_mq_alloc_tag_set+0x660/0x1330 [ 606.625671][T15306] ? idr_alloc+0x37/0x130 [ 606.625720][T15306] loop_add+0x3b7/0xb60 [ 606.625758][T15306] ? __pfx_loop_add+0x10/0x10 [ 606.625820][T15306] ? find_held_lock+0x2b/0x80 [ 606.625850][T15306] ? __fget_files+0x215/0x3d0 [ 606.625884][T15306] loop_control_ioctl+0xae/0x620 [ 606.625917][T15306] ? __pfx_loop_control_ioctl+0x10/0x10 [ 606.625940][T15306] ? __pfx_loop_control_ioctl+0x10/0x10 [ 606.625961][T15306] __x64_sys_ioctl+0x18e/0x210 [ 606.625978][T15306] do_syscall_64+0x115/0x840 [ 606.625997][T15306] ? clear_bhb_loop+0x40/0x90 [ 606.626016][T15306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.626032][T15306] RIP: 0033:0x7f1b5f39ce59 [ 606.626046][T15306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.626062][T15306] RSP: 002b:00007f1b60199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 606.626078][T15306] RAX: ffffffffffffffda RBX: 00007f1b5f615fa0 RCX: 00007f1b5f39ce59 [ 606.626089][T15306] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 606.626100][T15306] RBP: 00007f1b5f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 606.626109][T15306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 606.626118][T15306] R13: 00007f1b5f616038 R14: 00007f1b5f615fa0 R15: 00007fff01011238 [ 606.626137][T15306] [ 607.043011][ T29] audit: type=1800 audit(1780867322.579:87): pid=15317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1975" name="lu_gp_id" dev="configfs" ino=67816 res=0 errno=0 [ 607.100199][T15304] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1972'. [ 608.747009][T15344] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input6 [ 609.618907][T15365] FAULT_INJECTION: forcing a failure. [ 609.618907][T15365] name failslab, interval 1, probability 0, space 0, times 0 [ 609.637924][T15367] FAULT_INJECTION: forcing a failure. [ 609.637924][T15367] name failslab, interval 1, probability 0, space 0, times 0 [ 609.658216][T15365] CPU: 0 UID: 0 PID: 15365 Comm: syz.1.1985 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.658287][T15365] Tainted: [L]=SOFTLOCKUP [ 609.658299][T15365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 609.658318][T15365] Call Trace: [ 609.658329][T15365] [ 609.658341][T15365] dump_stack_lvl+0x100/0x190 [ 609.658396][T15365] should_fail_ex.cold+0x5/0xa [ 609.658434][T15365] ? group_cpus_evenly+0x195/0x660 [ 609.658471][T15365] should_failslab+0xc2/0x120 [ 609.658506][T15365] __kmalloc_noprof+0xe0/0x850 [ 609.658562][T15365] group_cpus_evenly+0x195/0x660 [ 609.658603][T15365] ? __pfx_group_cpus_evenly+0x10/0x10 [ 609.658655][T15365] blk_mq_map_queues+0x9d/0x430 [ 609.658699][T15365] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 609.658738][T15365] ? rcu_is_watching+0x12/0xc0 [ 609.658771][T15365] ? trace_kmalloc+0xe3/0x110 [ 609.658803][T15365] ? __kasan_kmalloc+0xaa/0xb0 [ 609.658838][T15365] blk_mq_update_queue_map+0x305/0x3a0 [ 609.658877][T15365] blk_mq_alloc_tag_set+0x660/0x1330 [ 609.658903][T15365] ? idr_alloc+0x37/0x130 [ 609.658957][T15365] loop_add+0x3b7/0xb60 [ 609.658998][T15365] ? __pfx_loop_add+0x10/0x10 [ 609.659069][T15365] ? find_held_lock+0x2b/0x80 [ 609.659104][T15365] ? __fget_files+0x215/0x3d0 [ 609.659142][T15365] loop_control_ioctl+0xae/0x620 [ 609.659185][T15365] ? __pfx_loop_control_ioctl+0x10/0x10 [ 609.659229][T15365] ? __pfx_loop_control_ioctl+0x10/0x10 [ 609.659268][T15365] __x64_sys_ioctl+0x18e/0x210 [ 609.659299][T15365] do_syscall_64+0x115/0x840 [ 609.659338][T15365] ? clear_bhb_loop+0x40/0x90 [ 609.659374][T15365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.659403][T15365] RIP: 0033:0x7ffbe2b9ce59 [ 609.659428][T15365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.659457][T15365] RSP: 002b:00007ffbe3975028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.659485][T15365] RAX: ffffffffffffffda RBX: 00007ffbe2e15fa0 RCX: 00007ffbe2b9ce59 [ 609.659505][T15365] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 609.659524][T15365] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 609.659543][T15365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.659560][T15365] R13: 00007ffbe2e16038 R14: 00007ffbe2e15fa0 R15: 00007ffd8c38b938 [ 609.659601][T15365] [ 609.659717][T15367] CPU: 0 UID: 0 PID: 15367 Comm: syz.2.1986 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.659759][T15367] Tainted: [L]=SOFTLOCKUP [ 609.659770][T15367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 609.659788][T15367] Call Trace: [ 609.659798][T15367] [ 609.659810][T15367] dump_stack_lvl+0x100/0x190 [ 609.659861][T15367] should_fail_ex.cold+0x5/0xa [ 609.659897][T15367] ? group_cpus_evenly+0x195/0x660 [ 609.659932][T15367] should_failslab+0xc2/0x120 [ 609.659966][T15367] __kmalloc_noprof+0xe0/0x850 [ 609.660028][T15367] group_cpus_evenly+0x195/0x660 [ 609.660069][T15367] ? __pfx_group_cpus_evenly+0x10/0x10 [ 609.660118][T15367] blk_mq_map_queues+0x9d/0x430 [ 609.660160][T15367] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 609.660198][T15367] ? rcu_is_watching+0x12/0xc0 [ 609.660231][T15367] ? trace_kmalloc+0xe3/0x110 [ 609.660264][T15367] ? __kasan_kmalloc+0xaa/0xb0 [ 609.660300][T15367] blk_mq_update_queue_map+0x305/0x3a0 [ 609.660340][T15367] blk_mq_alloc_tag_set+0x660/0x1330 [ 609.660368][T15367] ? idr_alloc+0x37/0x130 [ 609.660421][T15367] loop_add+0x3b7/0xb60 [ 609.660461][T15367] ? __pfx_loop_add+0x10/0x10 [ 609.660526][T15367] ? find_held_lock+0x2b/0x80 [ 609.660562][T15367] ? __fget_files+0x215/0x3d0 [ 609.660599][T15367] loop_control_ioctl+0xae/0x620 [ 609.660640][T15367] ? __pfx_loop_control_ioctl+0x10/0x10 [ 609.660685][T15367] ? __pfx_loop_control_ioctl+0x10/0x10 [ 609.660724][T15367] __x64_sys_ioctl+0x18e/0x210 [ 609.660757][T15367] do_syscall_64+0x115/0x840 [ 609.660796][T15367] ? clear_bhb_loop+0x40/0x90 [ 609.660832][T15367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.660862][T15367] RIP: 0033:0x7f1b5f39ce59 [ 609.660885][T15367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.660914][T15367] RSP: 002b:00007f1b60199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 609.660943][T15367] RAX: ffffffffffffffda RBX: 00007f1b5f615fa0 RCX: 00007f1b5f39ce59 [ 609.660962][T15367] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 609.660982][T15367] RBP: 00007f1b5f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 609.660999][T15367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.661017][T15367] R13: 00007f1b5f616038 R14: 00007f1b5f615fa0 R15: 00007fff01011238 [ 609.661063][T15367] [ 610.328423][T15371] Process accounting paused [ 610.875209][T15388] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1990'. [ 610.964470][T15397] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1992'. [ 611.574367][ T29] audit: type=1800 audit(1780867327.141:88): pid=15408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1996" name="lu_gp_id" dev="configfs" ino=68222 res=0 errno=0 [ 611.863739][T15414] blk-mq: reduced tag depth (128 -> 64) [ 613.487521][T15442] tc_dump_action: action bad kind [ 614.099536][ T29] audit: type=1800 audit(1780867329.672:89): pid=15448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2006" name="lu_gp_id" dev="configfs" ino=68334 res=0 errno=0 [ 614.840793][T15454] blk-mq: reduced tag depth (128 -> 64) [ 615.016333][T15456] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2007'. [ 615.722480][T15412] Process accounting paused [ 616.493978][T15481] tc_dump_action: action bad kind [ 617.120454][T15495] can: request_module (can-proto-0) failed. [ 617.622632][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 617.789870][T15513] tc_dump_action: action bad kind [ 618.735061][ T57] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 2 with max blocks 3 with error 117 [ 618.756874][ T57] EXT4-fs (sda1): This should not happen!! Data will be lost [ 618.756874][ T57] [ 620.167517][T15563] tc_dump_action: action bad kind [ 621.138162][T15587] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2039'. [ 621.232746][T15592] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2039'. [ 621.730951][T15603] netlink: 'syz.4.2042': attribute type 1 has an invalid length. [ 623.119010][ T29] audit: type=1800 audit(1780867338.697:90): pid=15628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2046" name="lu_gp_id" dev="configfs" ino=68931 res=0 errno=0 [ 623.495765][ T29] audit: type=1800 audit(1780867339.077:91): pid=15634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2048" name="lu_gp_id" dev="configfs" ino=69916 res=0 errno=0 [ 624.161950][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.168390][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.558939][ T29] audit: type=1800 audit(1780867340.138:92): pid=15664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2056" name="lu_gp_id" dev="configfs" ino=69014 res=0 errno=0 [ 624.782591][T15670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2055'. [ 626.101293][T15692] FAULT_INJECTION: forcing a failure. [ 626.101293][T15692] name failslab, interval 1, probability 0, space 0, times 0 [ 626.138249][T15692] CPU: 1 UID: 0 PID: 15692 Comm: syz.2.2060 Tainted: G L syzkaller #0 PREEMPT(full) [ 626.138276][T15692] Tainted: [L]=SOFTLOCKUP [ 626.138281][T15692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 626.138292][T15692] Call Trace: [ 626.138297][T15692] [ 626.138305][T15692] dump_stack_lvl+0x100/0x190 [ 626.138335][T15692] should_fail_ex.cold+0x5/0xa [ 626.138356][T15692] should_failslab+0xc2/0x120 [ 626.138375][T15692] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 626.138399][T15692] ? security_file_alloc+0x34/0x2c0 [ 626.138419][T15692] ? trace_kmem_cache_alloc+0xd5/0x100 [ 626.138439][T15692] security_file_alloc+0x34/0x2c0 [ 626.138459][T15692] init_file+0x95/0x480 [ 626.138479][T15692] alloc_empty_file+0x79/0x1c0 [ 626.138501][T15692] alloc_file_pseudo+0x13a/0x230 [ 626.138523][T15692] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 626.138545][T15692] ? security_inode_init_security_anon+0x7b/0x230 [ 626.138566][T15692] __anon_inode_getfile+0xe8/0x280 [ 626.138590][T15692] new_userfaultfd+0x255/0x400 [ 626.138608][T15692] __x64_sys_userfaultfd+0x4b/0xb0 [ 626.138626][T15692] do_syscall_64+0x115/0x840 [ 626.138646][T15692] ? clear_bhb_loop+0x40/0x90 [ 626.138664][T15692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.138679][T15692] RIP: 0033:0x7f1b5f39ce59 [ 626.138700][T15692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.138716][T15692] RSP: 002b:00007f1b60199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 626.138732][T15692] RAX: ffffffffffffffda RBX: 00007f1b5f615fa0 RCX: 00007f1b5f39ce59 [ 626.138742][T15692] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 626.138752][T15692] RBP: 00007f1b5f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 626.138761][T15692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 626.138770][T15692] R13: 00007f1b5f616038 R14: 00007f1b5f615fa0 R15: 00007fff01011238 [ 626.138790][T15692] [ 626.944212][ T29] audit: type=1800 audit(1780867342.529:93): pid=15708 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2065" name="lu_gp_id" dev="configfs" ino=69197 res=0 errno=0 [ 627.237302][T15718] FAULT_INJECTION: forcing a failure. [ 627.237302][T15718] name failslab, interval 1, probability 0, space 0, times 0 [ 627.274881][T15718] CPU: 0 UID: 0 PID: 15718 Comm: syz.5.2068 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.274931][T15718] Tainted: [L]=SOFTLOCKUP [ 627.274942][T15718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 627.274960][T15718] Call Trace: [ 627.274969][T15718] [ 627.274980][T15718] dump_stack_lvl+0x100/0x190 [ 627.275034][T15718] should_fail_ex.cold+0x5/0xa [ 627.275073][T15718] should_failslab+0xc2/0x120 [ 627.275109][T15718] __kmalloc_cache_node_noprof+0x7d/0x770 [ 627.275139][T15718] ? sbitmap_queue_init_node+0x291/0x4a0 [ 627.275189][T15718] sbitmap_queue_init_node+0x291/0x4a0 [ 627.275230][T15718] blk_mq_init_tags+0x184/0x300 [ 627.275265][T15718] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 627.275301][T15718] ? blk_mq_update_queue_map+0x227/0x3a0 [ 627.275338][T15718] blk_mq_alloc_tag_set+0x848/0x1330 [ 627.275379][T15718] loop_add+0x3b7/0xb60 [ 627.275414][T15718] ? __pfx_loop_add+0x10/0x10 [ 627.275465][T15718] ? find_held_lock+0x2b/0x80 [ 627.275497][T15718] ? __fget_files+0x215/0x3d0 [ 627.275531][T15718] loop_control_ioctl+0xae/0x620 [ 627.275566][T15718] ? __pfx_loop_control_ioctl+0x10/0x10 [ 627.275615][T15718] ? __pfx_loop_control_ioctl+0x10/0x10 [ 627.275650][T15718] __x64_sys_ioctl+0x18e/0x210 [ 627.275680][T15718] do_syscall_64+0x115/0x840 [ 627.275718][T15718] ? clear_bhb_loop+0x40/0x90 [ 627.275753][T15718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.275782][T15718] RIP: 0033:0x7f00ddf9ce59 [ 627.275805][T15718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.275830][T15718] RSP: 002b:00007f00dedb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.275855][T15718] RAX: ffffffffffffffda RBX: 00007f00de215fa0 RCX: 00007f00ddf9ce59 [ 627.275873][T15718] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 627.275890][T15718] RBP: 00007f00de032d6f R08: 0000000000000000 R09: 0000000000000000 [ 627.275907][T15718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.275923][T15718] R13: 00007f00de216038 R14: 00007f00de215fa0 R15: 00007ffcdca78548 [ 627.275958][T15718] [ 627.499703][T15718] blk-mq: reduced tag depth (128 -> 64) [ 627.660242][T15727] tc_dump_action: action bad kind [ 627.922391][T15723] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 628.114832][T15735] kAFS: No cell specified [ 628.390016][T15737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2075'. [ 628.453033][T15737] HfR: entered promiscuous mode [ 628.611674][T15737] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2075'. [ 628.639785][T15737] HfR: left promiscuous mode [ 628.979279][T15758] FAULT_INJECTION: forcing a failure. [ 628.979279][T15758] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 629.020889][T15758] CPU: 0 UID: 0 PID: 15758 Comm: syz.2.2080 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.020916][T15758] Tainted: [L]=SOFTLOCKUP [ 629.020922][T15758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 629.020931][T15758] Call Trace: [ 629.020936][T15758] [ 629.020942][T15758] dump_stack_lvl+0x100/0x190 [ 629.020974][T15758] should_fail_ex.cold+0x5/0xa [ 629.020994][T15758] _copy_to_user+0x32/0xd0 [ 629.021015][T15758] simple_read_from_buffer+0xcb/0x170 [ 629.021034][T15758] proc_fail_nth_read+0x1af/0x230 [ 629.021057][T15758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.021080][T15758] ? rw_verify_area+0xce/0x6d0 [ 629.021094][T15758] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 629.021116][T15758] vfs_read+0x1e4/0xb30 [ 629.021134][T15758] ? __pfx_vfs_read+0x10/0x10 [ 629.021149][T15758] ? __fget_files+0x215/0x3d0 [ 629.021170][T15758] ? __fget_files+0x21f/0x3d0 [ 629.021192][T15758] ksys_read+0x12a/0x250 [ 629.021207][T15758] ? __pfx_ksys_read+0x10/0x10 [ 629.021224][T15758] ? rcu_is_watching+0x12/0xc0 [ 629.021243][T15758] do_syscall_64+0x115/0x840 [ 629.021263][T15758] ? clear_bhb_loop+0x40/0x90 [ 629.021281][T15758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.021295][T15758] RIP: 0033:0x7f1b5f35d68e [ 629.021309][T15758] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 629.021322][T15758] RSP: 002b:00007f1b60198fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 629.021336][T15758] RAX: ffffffffffffffda RBX: 00007f1b601996c0 RCX: 00007f1b5f35d68e [ 629.021346][T15758] RDX: 000000000000000f RSI: 00007f1b601990a0 RDI: 0000000000000006 [ 629.021355][T15758] RBP: 00007f1b60199090 R08: 0000000000000000 R09: 0000000000000000 [ 629.021363][T15758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 629.021372][T15758] R13: 00007f1b5f616038 R14: 00007f1b5f615fa0 R15: 00007fff01011238 [ 629.021391][T15758] [ 629.386974][ T5633] Bluetooth: hci3: unexpected event 0x0f length: 7 > 4 [ 629.387007][ T5633] Bluetooth: hci3: unexpected event for opcode 0x647c [ 630.127059][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 630.816156][T15783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2085'. [ 631.522253][T15797] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2086'. [ 632.423135][T15806] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2089'. [ 632.710335][T15817] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[5634] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[15817] [ 632.803003][T15817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2092'. [ 633.037839][T15823] FAULT_INJECTION: forcing a failure. [ 633.037839][T15823] name failslab, interval 1, probability 0, space 0, times 0 [ 633.051671][T15823] CPU: 0 UID: 0 PID: 15823 Comm: syz.1.2094 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.051716][T15823] Tainted: [L]=SOFTLOCKUP [ 633.051726][T15823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 633.051742][T15823] Call Trace: [ 633.051752][T15823] [ 633.051762][T15823] dump_stack_lvl+0x100/0x190 [ 633.051811][T15823] should_fail_ex.cold+0x5/0xa [ 633.051845][T15823] should_failslab+0xc2/0x120 [ 633.051878][T15823] __kmalloc_cache_node_noprof+0x7d/0x770 [ 633.051911][T15823] ? blk_mq_init_tags+0x8c/0x300 [ 633.051950][T15823] blk_mq_init_tags+0x8c/0x300 [ 633.051984][T15823] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 633.052018][T15823] ? blk_mq_update_queue_map+0x227/0x3a0 [ 633.052055][T15823] blk_mq_alloc_tag_set+0x848/0x1330 [ 633.052096][T15823] loop_add+0x3b7/0xb60 [ 633.052145][T15823] ? __pfx_loop_add+0x10/0x10 [ 633.052206][T15823] ? find_held_lock+0x2b/0x80 [ 633.052240][T15823] ? __fget_files+0x215/0x3d0 [ 633.052276][T15823] loop_control_ioctl+0xae/0x620 [ 633.052314][T15823] ? __pfx_loop_control_ioctl+0x10/0x10 [ 633.052356][T15823] ? __pfx_loop_control_ioctl+0x10/0x10 [ 633.052395][T15823] __x64_sys_ioctl+0x18e/0x210 [ 633.052428][T15823] do_syscall_64+0x115/0x840 [ 633.052467][T15823] ? clear_bhb_loop+0x40/0x90 [ 633.052503][T15823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.052533][T15823] RIP: 0033:0x7ffbe2b9ce59 [ 633.052559][T15823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.052587][T15823] RSP: 002b:00007ffbe3975028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 633.052614][T15823] RAX: ffffffffffffffda RBX: 00007ffbe2e15fa0 RCX: 00007ffbe2b9ce59 [ 633.052632][T15823] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 633.052648][T15823] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 633.052664][T15823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.052679][T15823] R13: 00007ffbe2e16038 R14: 00007ffbe2e15fa0 R15: 00007ffd8c38b938 [ 633.052714][T15823] [ 633.052862][T15823] blk-mq: reduced tag depth (128 -> 64) [ 633.381668][T15825] random: crng reseeded on system resumption [ 633.822905][T15830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2095'. [ 634.182648][T15852] FAULT_INJECTION: forcing a failure. [ 634.182648][T15852] name failslab, interval 1, probability 0, space 0, times 0 [ 634.209802][T15852] CPU: 1 UID: 0 PID: 15852 Comm: syz.2.2100 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.209859][T15852] Tainted: [L]=SOFTLOCKUP [ 634.209869][T15852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 634.209886][T15852] Call Trace: [ 634.209896][T15852] [ 634.209908][T15852] dump_stack_lvl+0x100/0x190 [ 634.209961][T15852] should_fail_ex.cold+0x5/0xa [ 634.209997][T15852] should_failslab+0xc2/0x120 [ 634.210032][T15852] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 634.210064][T15852] ? register_pidns_sysctls+0x48/0x1c0 [ 634.210126][T15852] ? rcu_is_watching+0x12/0xc0 [ 634.210164][T15852] kmemdup_noprof+0x29/0x60 [ 634.210194][T15852] register_pidns_sysctls+0x48/0x1c0 [ 634.210235][T15852] ? __ns_common_init+0x299/0x4b0 [ 634.210277][T15852] copy_pid_ns+0x680/0x10a0 [ 634.210321][T15852] ? __pfx_copy_pid_ns+0x10/0x10 [ 634.210365][T15852] ? __pfx_copy_mnt_ns+0x10/0x10 [ 634.210408][T15852] ? create_new_namespaces+0x30/0xac0 [ 634.210448][T15852] create_new_namespaces+0x2aa/0xac0 [ 634.210491][T15852] unshare_nsproxy_namespaces+0xf2/0x220 [ 634.210523][T15852] ksys_unshare+0x438/0xab0 [ 634.210565][T15852] ? __pfx_ksys_unshare+0x10/0x10 [ 634.210603][T15852] ? xfd_validate_state+0x129/0x190 [ 634.210641][T15852] ? ksys_write+0x1ac/0x250 [ 634.210682][T15852] __x64_sys_unshare+0x31/0x40 [ 634.210718][T15852] do_syscall_64+0x115/0x840 [ 634.210754][T15852] ? clear_bhb_loop+0x40/0x90 [ 634.210788][T15852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.210814][T15852] RIP: 0033:0x7f1b5f39ce59 [ 634.210837][T15852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.210874][T15852] RSP: 002b:00007f1b60199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 634.210900][T15852] RAX: ffffffffffffffda RBX: 00007f1b5f615fa0 RCX: 00007f1b5f39ce59 [ 634.210918][T15852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 634.210935][T15852] RBP: 00007f1b5f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 634.210953][T15852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.210969][T15852] R13: 00007f1b5f616038 R14: 00007f1b5f615fa0 R15: 00007fff01011238 [ 634.211006][T15852] [ 634.226316][T15840] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2097'. [ 634.918903][ T29] audit: type=1800 audit(1780867350.503:94): pid=15861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2103" name="lu_gp_id" dev="configfs" ino=70646 res=0 errno=0 [ 634.951053][T15867] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2104'. [ 635.432689][T15879] FAULT_INJECTION: forcing a failure. [ 635.432689][T15879] name failslab, interval 1, probability 0, space 0, times 0 [ 635.453658][T15879] CPU: 0 UID: 0 PID: 15879 Comm: syz.2.2107 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.453705][T15879] Tainted: [L]=SOFTLOCKUP [ 635.453716][T15879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 635.453733][T15879] Call Trace: [ 635.453742][T15879] [ 635.453754][T15879] dump_stack_lvl+0x100/0x190 [ 635.453806][T15879] should_fail_ex.cold+0x5/0xa [ 635.453842][T15879] ? group_cpus_evenly+0x195/0x660 [ 635.453878][T15879] should_failslab+0xc2/0x120 [ 635.453913][T15879] __kmalloc_noprof+0xe0/0x850 [ 635.453965][T15879] group_cpus_evenly+0x195/0x660 [ 635.454004][T15879] ? __pfx_group_cpus_evenly+0x10/0x10 [ 635.454054][T15879] blk_mq_map_queues+0x9d/0x430 [ 635.454098][T15879] ? __pfx_blk_mq_map_queues+0x10/0x10 [ 635.454135][T15879] ? rcu_is_watching+0x12/0xc0 [ 635.454167][T15879] ? trace_kmalloc+0xe3/0x110 [ 635.454199][T15879] ? __kasan_kmalloc+0xaa/0xb0 [ 635.454232][T15879] blk_mq_update_queue_map+0x305/0x3a0 [ 635.454271][T15879] blk_mq_alloc_tag_set+0x660/0x1330 [ 635.454311][T15879] ? idr_alloc+0x37/0x130 [ 635.454363][T15879] loop_add+0x3b7/0xb60 [ 635.454402][T15879] ? __pfx_loop_add+0x10/0x10 [ 635.454464][T15879] ? find_held_lock+0x2b/0x80 [ 635.454497][T15879] ? __fget_files+0x215/0x3d0 [ 635.454534][T15879] loop_control_ioctl+0xae/0x620 [ 635.454574][T15879] ? __pfx_loop_control_ioctl+0x10/0x10 [ 635.454631][T15879] ? __pfx_loop_control_ioctl+0x10/0x10 [ 635.454672][T15879] __x64_sys_ioctl+0x18e/0x210 [ 635.454703][T15879] do_syscall_64+0x115/0x840 [ 635.454740][T15879] ? clear_bhb_loop+0x40/0x90 [ 635.454775][T15879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.454805][T15879] RIP: 0033:0x7f1b5f39ce59 [ 635.454827][T15879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.454852][T15879] RSP: 002b:00007f1b60199028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 635.454879][T15879] RAX: ffffffffffffffda RBX: 00007f1b5f615fa0 RCX: 00007f1b5f39ce59 [ 635.454898][T15879] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 635.454916][T15879] RBP: 00007f1b5f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 635.454934][T15879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.454948][T15879] R13: 00007f1b5f616038 R14: 00007f1b5f615fa0 R15: 00007fff01011238 [ 635.454988][T15879] [ 635.996183][T15895] FAULT_INJECTION: forcing a failure. [ 635.996183][T15895] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.000007][T15892] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2111'. [ 636.034795][T15895] CPU: 1 UID: 0 PID: 15895 Comm: syz.5.2113 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.034835][T15895] Tainted: [L]=SOFTLOCKUP [ 636.034845][T15895] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 636.034861][T15895] Call Trace: [ 636.034871][T15895] [ 636.034882][T15895] dump_stack_lvl+0x100/0x190 [ 636.034930][T15895] should_fail_ex.cold+0x5/0xa [ 636.034965][T15895] _copy_from_user+0x2e/0xd0 [ 636.035003][T15895] input_event_from_user+0xb9/0x290 [ 636.035057][T15895] ? __pfx_input_event_from_user+0x10/0x10 [ 636.035086][T15895] ? __pfx___might_resched+0x10/0x10 [ 636.035114][T15895] ? input_inject_event+0x1a6/0x390 [ 636.035146][T15895] evdev_write+0x27a/0x430 [ 636.035176][T15895] ? __pfx_evdev_write+0x10/0x10 [ 636.035205][T15895] ? bpf_lsm_file_permission+0x9/0x10 [ 636.035237][T15895] ? security_file_permission+0x76/0x210 [ 636.035276][T15895] ? rw_verify_area+0xce/0x6d0 [ 636.035307][T15895] vfs_write+0x2aa/0x1070 [ 636.035337][T15895] ? __pfx_evdev_write+0x10/0x10 [ 636.035365][T15895] ? __pfx_vfs_write+0x10/0x10 [ 636.035391][T15895] ? find_held_lock+0x2b/0x80 [ 636.035420][T15895] ? __fget_files+0x215/0x3d0 [ 636.035447][T15895] ? __fget_files+0x215/0x3d0 [ 636.035481][T15895] ? __fget_files+0x21f/0x3d0 [ 636.035519][T15895] ksys_write+0x1f8/0x250 [ 636.035548][T15895] ? __pfx_ksys_write+0x10/0x10 [ 636.035586][T15895] ? rcu_is_watching+0x12/0xc0 [ 636.035620][T15895] do_syscall_64+0x115/0x840 [ 636.035655][T15895] ? clear_bhb_loop+0x40/0x90 [ 636.035688][T15895] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.035716][T15895] RIP: 0033:0x7f00ddf9ce59 [ 636.035744][T15895] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.035769][T15895] RSP: 002b:00007f00dedb1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 636.035795][T15895] RAX: ffffffffffffffda RBX: 00007f00de215fa0 RCX: 00007f00ddf9ce59 [ 636.035813][T15895] RDX: 0000000000010001 RSI: 0000200000000040 RDI: 0000000000000003 [ 636.035830][T15895] RBP: 00007f00dedb1090 R08: 0000000000000000 R09: 0000000000000000 [ 636.035847][T15895] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 636.035862][T15895] R13: 00007f00de216038 R14: 00007f00de215fa0 R15: 00007ffcdca78548 [ 636.035900][T15895] [ 638.322514][T15943] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 638.755070][T15952] QAT: Stopping all acceleration devices. [ 638.976683][T15951] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2126'. [ 640.313193][T15956] Process accounting resumed [ 641.613162][T15996] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2137'. [ 643.854926][T16036] FAULT_INJECTION: forcing a failure. [ 643.854926][T16036] name failslab, interval 1, probability 0, space 0, times 0 [ 643.914916][T16040] blk-mq: reduced tag depth (128 -> 64) [ 643.928852][T16036] CPU: 0 UID: 0 PID: 16036 Comm: syz.5.2145 Tainted: G L syzkaller #0 PREEMPT(full) [ 643.928878][T16036] Tainted: [L]=SOFTLOCKUP [ 643.928884][T16036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 643.928894][T16036] Call Trace: [ 643.928900][T16036] [ 643.928907][T16036] dump_stack_lvl+0x100/0x190 [ 643.928940][T16036] should_fail_ex.cold+0x5/0xa [ 643.928961][T16036] ? security_inode_init_security+0x113/0x370 [ 643.928991][T16036] should_failslab+0xc2/0x120 [ 643.929012][T16036] __kmalloc_noprof+0xe0/0x850 [ 643.929040][T16036] security_inode_init_security+0x113/0x370 [ 643.929064][T16036] ? __pfx_shmem_initxattrs+0x10/0x10 [ 643.929084][T16036] ? __pfx_security_inode_init_security+0x10/0x10 [ 643.929109][T16036] ? make_vfsgid+0xf1/0x140 [ 643.929138][T16036] shmem_mknod+0x2ce/0x480 [ 643.929175][T16036] ? __pfx_shmem_mknod+0x10/0x10 [ 643.929218][T16036] vfs_create+0x301/0x6c0 [ 643.929250][T16036] filename_mknodat+0x2de/0x7f0 [ 643.929290][T16036] ? __pfx_filename_mknodat+0x10/0x10 [ 643.929324][T16036] ? strncpy_from_user+0x19d/0x2d0 [ 643.929368][T16036] ? do_getname+0x191/0x390 [ 643.929410][T16036] __x64_sys_mknod+0x8f/0xc0 [ 643.929452][T16036] do_syscall_64+0x115/0x840 [ 643.929503][T16036] ? clear_bhb_loop+0x40/0x90 [ 643.929543][T16036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.929574][T16036] RIP: 0033:0x7f00ddf9ce59 [ 643.929595][T16036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.929621][T16036] RSP: 002b:00007f00ded90028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 643.929647][T16036] RAX: ffffffffffffffda RBX: 00007f00de216090 RCX: 00007f00ddf9ce59 [ 643.929665][T16036] RDX: 0000000000000009 RSI: 0000000000000002 RDI: 0000000000000000 [ 643.929681][T16036] RBP: 00007f00de032d6f R08: 0000000000000000 R09: 0000000000000000 [ 643.929696][T16036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 643.929713][T16036] R13: 00007f00de216128 R14: 00007f00de216090 R15: 00007ffcdca78548 [ 643.929747][T16036] [ 645.177291][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2150'. [ 645.213195][T16063] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 646.236435][T16084] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2159'. [ 646.353351][T16100] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2159'. [ 647.156036][T16075] Process accounting resumed [ 647.241004][T16115] FAULT_INJECTION: forcing a failure. [ 647.241004][T16115] name failslab, interval 1, probability 0, space 0, times 0 [ 647.263307][T16115] CPU: 1 UID: 0 PID: 16115 Comm: syz.1.2165 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.263351][T16115] Tainted: [L]=SOFTLOCKUP [ 647.263361][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 647.263376][T16115] Call Trace: [ 647.263385][T16115] [ 647.263394][T16115] dump_stack_lvl+0x100/0x190 [ 647.263437][T16115] should_fail_ex.cold+0x5/0xa [ 647.263468][T16115] should_failslab+0xc2/0x120 [ 647.263498][T16115] __kmalloc_cache_noprof+0x7a/0x6f0 [ 647.263531][T16115] ? yama_ptracer_add+0x48/0x590 [ 647.263577][T16115] ? find_get_task_by_vpid+0x19e/0x310 [ 647.263612][T16115] ? find_get_task_by_vpid+0x19e/0x310 [ 647.263650][T16115] yama_ptracer_add+0x48/0x590 [ 647.263684][T16115] yama_task_prctl+0xf4/0x1c0 [ 647.263717][T16115] security_task_prctl+0xc2/0x160 [ 647.263817][T16115] __do_sys_prctl+0x9b/0x2320 [ 647.263841][T16115] ? __pfx___do_sys_prctl+0x10/0x10 [ 647.263867][T16115] ? rcu_is_watching+0x12/0xc0 [ 647.263899][T16115] do_syscall_64+0x115/0x840 [ 647.263930][T16115] ? clear_bhb_loop+0x40/0x90 [ 647.263959][T16115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.263983][T16115] RIP: 0033:0x7ffbe2b9ce59 [ 647.264003][T16115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.264026][T16115] RSP: 002b:00007ffbe3975028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 647.264049][T16115] RAX: ffffffffffffffda RBX: 00007ffbe2e15fa0 RCX: 00007ffbe2b9ce59 [ 647.264066][T16115] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000059616d61 [ 647.264080][T16115] RBP: 00007ffbe3975090 R08: 000000000000304a R09: 0000000000000000 [ 647.264095][T16115] R10: ffffffffffdffffb R11: 0000000000000246 R12: 0000000000000001 [ 647.264111][T16115] R13: 00007ffbe2e16038 R14: 00007ffbe2e15fa0 R15: 00007ffd8c38b938 [ 647.264149][T16115] [ 647.551744][T16125] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 647.566763][T16125] CPU: 0 UID: 0 PID: 16125 Comm: syz.1.2165 Tainted: G L syzkaller #0 PREEMPT(full) [ 647.566804][T16125] Tainted: [L]=SOFTLOCKUP [ 647.566813][T16125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 647.566828][T16125] Call Trace: [ 647.566837][T16125] [ 647.566848][T16125] dump_stack_lvl+0x100/0x190 [ 647.566896][T16125] sysfs_warn_dup.cold+0x1c/0x28 [ 647.566950][T16125] sysfs_do_create_link_sd+0x113/0x140 [ 647.566984][T16125] sysfs_create_link+0x61/0xc0 [ 647.567013][T16125] device_add+0x675/0x1950 [ 647.567060][T16125] ? __pfx_device_add+0x10/0x10 [ 647.567088][T16125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 647.567128][T16125] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 647.567191][T16125] wiphy_register+0x1edd/0x2d90 [ 647.567221][T16125] ? __rtnl_unlock+0xb9/0xf0 [ 647.567287][T16125] ? __pfx_wiphy_register+0x10/0x10 [ 647.567320][T16125] ? __asan_memset+0x23/0x50 [ 647.567353][T16125] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 647.567412][T16125] ieee80211_register_hw+0x3055/0x4570 [ 647.567480][T16125] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 647.567519][T16125] ? __pfx___debug_object_init+0x10/0x10 [ 647.567593][T16125] ? find_held_lock+0x2b/0x80 [ 647.567627][T16125] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 647.567664][T16125] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 647.567720][T16125] ? __hrtimer_setup+0x208/0x330 [ 647.567754][T16125] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 647.567815][T16125] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 647.567853][T16125] ? __asan_memcpy+0x3c/0x60 [ 647.567897][T16125] hwsim_new_radio_nl+0xc5f/0x1370 [ 647.567930][T16125] ? rcu_is_watching+0x12/0xc0 [ 647.567962][T16125] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 647.568007][T16125] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 647.568064][T16125] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 647.568112][T16125] genl_family_rcv_msg_doit+0x214/0x300 [ 647.568156][T16125] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 647.568193][T16125] ? genl_get_cmd+0x3e7/0x760 [ 647.568239][T16125] ? bpf_lsm_capable+0x9/0x10 [ 647.568267][T16125] ? security_capable+0x80/0x260 [ 647.568296][T16125] ? ns_capable+0xd2/0xf0 [ 647.568329][T16125] genl_rcv_msg+0x560/0x800 [ 647.568372][T16125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 647.568410][T16125] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 647.568456][T16125] netlink_rcv_skb+0x159/0x420 [ 647.568491][T16125] ? __pfx_genl_rcv_msg+0x10/0x10 [ 647.568537][T16125] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 647.568586][T16125] ? netlink_deliver_tap+0x1ae/0xcc0 [ 647.568625][T16125] genl_rcv+0x28/0x40 [ 647.568657][T16125] netlink_unicast+0x585/0x850 [ 647.568696][T16125] ? __pfx_netlink_unicast+0x10/0x10 [ 647.568740][T16125] netlink_sendmsg+0x8b0/0xda0 [ 647.568776][T16125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.568804][T16125] ? __import_iovec+0x1d2/0x640 [ 647.568841][T16125] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 647.568883][T16125] ____sys_sendmsg+0x9e1/0xb70 [ 647.568923][T16125] ? __pfx_netlink_sendmsg+0x10/0x10 [ 647.568960][T16125] ? __pfx_____sys_sendmsg+0x10/0x10 [ 647.568991][T16125] ? preempt_schedule_thunk+0x16/0x30 [ 647.569035][T16125] ? try_to_wake_up+0x5f6/0x1900 [ 647.569076][T16125] ___sys_sendmsg+0x190/0x1e0 [ 647.569113][T16125] ? __pfx____sys_sendmsg+0x10/0x10 [ 647.569148][T16125] ? futex_private_hash_put+0x107/0x1c0 [ 647.569237][T16125] __sys_sendmsg+0x170/0x220 [ 647.569270][T16125] ? __pfx___sys_sendmsg+0x10/0x10 [ 647.569297][T16125] ? __x64_sys_futex+0x34f/0x4d0 [ 647.569339][T16125] ? rcu_is_watching+0x12/0xc0 [ 647.569373][T16125] do_syscall_64+0x115/0x840 [ 647.569408][T16125] ? clear_bhb_loop+0x40/0x90 [ 647.569441][T16125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.569469][T16125] RIP: 0033:0x7ffbe2b9ce59 [ 647.569492][T16125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 647.569517][T16125] RSP: 002b:00007ffbe0df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 647.569549][T16125] RAX: ffffffffffffffda RBX: 00007ffbe2e16090 RCX: 00007ffbe2b9ce59 [ 647.569567][T16125] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 647.569583][T16125] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 647.569600][T16125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 647.569615][T16125] R13: 00007ffbe2e16128 R14: 00007ffbe2e16090 R15: 00007ffd8c38b938 [ 647.569653][T16125] [ 648.234370][T16115] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 648.252186][T16115] CPU: 1 UID: 0 PID: 16115 Comm: syz.1.2165 Tainted: G L syzkaller #0 PREEMPT(full) [ 648.252228][T16115] Tainted: [L]=SOFTLOCKUP [ 648.252237][T16115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 648.252253][T16115] Call Trace: [ 648.252263][T16115] [ 648.252273][T16115] dump_stack_lvl+0x100/0x190 [ 648.252321][T16115] sysfs_warn_dup.cold+0x1c/0x28 [ 648.252360][T16115] sysfs_do_create_link_sd+0x113/0x140 [ 648.252393][T16115] sysfs_create_link+0x61/0xc0 [ 648.252422][T16115] device_add+0x675/0x1950 [ 648.252456][T16115] ? __pfx_device_add+0x10/0x10 [ 648.252484][T16115] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 648.252523][T16115] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 648.252579][T16115] wiphy_register+0x1edd/0x2d90 [ 648.252609][T16115] ? __rtnl_unlock+0xb9/0xf0 [ 648.252652][T16115] ? __pfx_wiphy_register+0x10/0x10 [ 648.252685][T16115] ? __asan_memset+0x23/0x50 [ 648.252723][T16115] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 648.252777][T16115] ieee80211_register_hw+0x3055/0x4570 [ 648.252836][T16115] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 648.252874][T16115] ? __pfx___debug_object_init+0x10/0x10 [ 648.252920][T16115] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 648.252957][T16115] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 648.252995][T16115] ? __hrtimer_setup+0x208/0x330 [ 648.253026][T16115] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 648.253086][T16115] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 648.253126][T16115] ? __asan_memcpy+0x3c/0x60 [ 648.253168][T16115] hwsim_new_radio_nl+0xc5f/0x1370 [ 648.253200][T16115] ? rcu_is_watching+0x12/0xc0 [ 648.253232][T16115] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 648.253276][T16115] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 648.253316][T16115] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 648.253363][T16115] genl_family_rcv_msg_doit+0x214/0x300 [ 648.253405][T16115] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 648.253441][T16115] ? genl_get_cmd+0x3e7/0x760 [ 648.253486][T16115] ? bpf_lsm_capable+0x9/0x10 [ 648.253513][T16115] ? security_capable+0x80/0x260 [ 648.253548][T16115] ? ns_capable+0xd2/0xf0 [ 648.253581][T16115] genl_rcv_msg+0x560/0x800 [ 648.253623][T16115] ? __pfx_genl_rcv_msg+0x10/0x10 [ 648.253661][T16115] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 648.253707][T16115] netlink_rcv_skb+0x159/0x420 [ 648.253741][T16115] ? __pfx_genl_rcv_msg+0x10/0x10 [ 648.253780][T16115] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 648.253830][T16115] ? netlink_deliver_tap+0x1ae/0xcc0 [ 648.253869][T16115] genl_rcv+0x28/0x40 [ 648.253902][T16115] netlink_unicast+0x585/0x850 [ 648.253942][T16115] ? __pfx_netlink_unicast+0x10/0x10 [ 648.253988][T16115] netlink_sendmsg+0x8b0/0xda0 [ 648.254028][T16115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.254060][T16115] ? __import_iovec+0x1d2/0x640 [ 648.254099][T16115] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 648.254134][T16115] ____sys_sendmsg+0x9e1/0xb70 [ 648.254166][T16115] ? __pfx_netlink_sendmsg+0x10/0x10 [ 648.254204][T16115] ? __pfx_____sys_sendmsg+0x10/0x10 [ 648.254244][T16115] ? rcu_is_watching+0x12/0xc0 [ 648.254272][T16115] ? ___sys_sendmsg+0x19d/0x1e0 [ 648.254303][T16115] ? kfree+0x1dd/0x6c0 [ 648.254345][T16115] ___sys_sendmsg+0x190/0x1e0 [ 648.254383][T16115] ? __pfx____sys_sendmsg+0x10/0x10 [ 648.254455][T16115] ? __pfx___might_resched+0x10/0x10 [ 648.254492][T16115] __sys_sendmmsg+0x205/0x430 [ 648.254525][T16115] ? __pfx___sys_sendmmsg+0x10/0x10 [ 648.254571][T16115] ? __pfx_do_futex+0x10/0x10 [ 648.254618][T16115] ? xfd_validate_state+0x129/0x190 [ 648.254658][T16115] __x64_sys_sendmmsg+0x9c/0x100 [ 648.254686][T16115] ? lockdep_hardirqs_on+0x78/0x100 [ 648.254721][T16115] do_syscall_64+0x115/0x840 [ 648.254754][T16115] ? clear_bhb_loop+0x40/0x90 [ 648.254788][T16115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.254815][T16115] RIP: 0033:0x7ffbe2b9ce59 [ 648.254838][T16115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 648.254863][T16115] RSP: 002b:00007ffbe3975028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 648.254889][T16115] RAX: ffffffffffffffda RBX: 00007ffbe2e15fa0 RCX: 00007ffbe2b9ce59 [ 648.254907][T16115] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 648.254923][T16115] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 648.254940][T16115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.254956][T16115] R13: 00007ffbe2e16038 R14: 00007ffbe2e15fa0 R15: 00007ffd8c38b938 [ 648.254995][T16115] [ 649.267839][T16132] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 649.322511][T16132] CPU: 1 UID: 0 PID: 16132 Comm: syz.1.2168 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.322571][T16132] Tainted: [L]=SOFTLOCKUP [ 649.322582][T16132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 649.322600][T16132] Call Trace: [ 649.322606][T16132] [ 649.322612][T16132] dump_stack_lvl+0x100/0x190 [ 649.322648][T16132] sysfs_warn_dup.cold+0x1c/0x28 [ 649.322672][T16132] sysfs_do_create_link_sd+0x113/0x140 [ 649.322693][T16132] sysfs_create_link+0x61/0xc0 [ 649.322711][T16132] device_add+0x675/0x1950 [ 649.322731][T16132] ? __pfx_device_add+0x10/0x10 [ 649.322748][T16132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 649.322772][T16132] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 649.322802][T16132] wiphy_register+0x1edd/0x2d90 [ 649.322821][T16132] ? __rtnl_unlock+0xb9/0xf0 [ 649.322846][T16132] ? __pfx_wiphy_register+0x10/0x10 [ 649.322866][T16132] ? __asan_memset+0x23/0x50 [ 649.322891][T16132] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 649.322923][T16132] ieee80211_register_hw+0x3055/0x4570 [ 649.322963][T16132] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 649.323004][T16132] ? __pfx___debug_object_init+0x10/0x10 [ 649.323043][T16132] ? find_held_lock+0x2b/0x80 [ 649.323064][T16132] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 649.323087][T16132] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 649.323111][T16132] ? __hrtimer_setup+0x208/0x330 [ 649.323130][T16132] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 649.323165][T16132] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 649.323187][T16132] ? __asan_memcpy+0x3c/0x60 [ 649.323212][T16132] hwsim_new_radio_nl+0xc5f/0x1370 [ 649.323232][T16132] ? rcu_is_watching+0x12/0xc0 [ 649.323251][T16132] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 649.323276][T16132] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 649.323301][T16132] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 649.323329][T16132] genl_family_rcv_msg_doit+0x214/0x300 [ 649.323355][T16132] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 649.323378][T16132] ? genl_get_cmd+0x3e7/0x760 [ 649.323404][T16132] ? bpf_lsm_capable+0x9/0x10 [ 649.323421][T16132] ? security_capable+0x80/0x260 [ 649.323438][T16132] ? ns_capable+0xd2/0xf0 [ 649.323458][T16132] genl_rcv_msg+0x560/0x800 [ 649.323483][T16132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 649.323507][T16132] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 649.323545][T16132] netlink_rcv_skb+0x159/0x420 [ 649.323568][T16132] ? __pfx_genl_rcv_msg+0x10/0x10 [ 649.323594][T16132] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.323622][T16132] ? netlink_deliver_tap+0x1ae/0xcc0 [ 649.323644][T16132] genl_rcv+0x28/0x40 [ 649.323665][T16132] netlink_unicast+0x585/0x850 [ 649.323688][T16132] ? __pfx_netlink_unicast+0x10/0x10 [ 649.323714][T16132] netlink_sendmsg+0x8b0/0xda0 [ 649.323738][T16132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.323757][T16132] ? __import_iovec+0x1d2/0x640 [ 649.323782][T16132] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 649.323802][T16132] ____sys_sendmsg+0x9e1/0xb70 [ 649.323824][T16132] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.323861][T16132] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.323903][T16132] ? __pfx_futex_wake_mark+0x10/0x10 [ 649.323941][T16132] ___sys_sendmsg+0x190/0x1e0 [ 649.323981][T16132] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.324032][T16132] __sys_sendmsg+0x170/0x220 [ 649.324049][T16132] ? __pfx___sys_sendmsg+0x10/0x10 [ 649.324064][T16132] ? __x64_sys_futex+0x34f/0x4d0 [ 649.324086][T16132] ? rcu_is_watching+0x12/0xc0 [ 649.324106][T16132] do_syscall_64+0x115/0x840 [ 649.324125][T16132] ? clear_bhb_loop+0x40/0x90 [ 649.324144][T16132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.324159][T16132] RIP: 0033:0x7ffbe2b9ce59 [ 649.324173][T16132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.324188][T16132] RSP: 002b:00007ffbe3975028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.324203][T16132] RAX: ffffffffffffffda RBX: 00007ffbe2e15fa0 RCX: 00007ffbe2b9ce59 [ 649.324213][T16132] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 649.324222][T16132] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 649.324231][T16132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.324240][T16132] R13: 00007ffbe2e16038 R14: 00007ffbe2e15fa0 R15: 00007ffd8c38b938 [ 649.324260][T16132] [ 649.759677][T16135] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 649.770901][T16135] CPU: 1 UID: 0 PID: 16135 Comm: syz.1.2168 Tainted: G L syzkaller #0 PREEMPT(full) [ 649.770945][T16135] Tainted: [L]=SOFTLOCKUP [ 649.770955][T16135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 649.770973][T16135] Call Trace: [ 649.770983][T16135] [ 649.770994][T16135] dump_stack_lvl+0x100/0x190 [ 649.771049][T16135] sysfs_warn_dup.cold+0x1c/0x28 [ 649.771089][T16135] sysfs_do_create_link_sd+0x113/0x140 [ 649.771124][T16135] sysfs_create_link+0x61/0xc0 [ 649.771155][T16135] device_add+0x675/0x1950 [ 649.771192][T16135] ? __pfx_device_add+0x10/0x10 [ 649.771222][T16135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 649.771266][T16135] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 649.771321][T16135] wiphy_register+0x1edd/0x2d90 [ 649.771353][T16135] ? __rtnl_unlock+0xb9/0xf0 [ 649.771395][T16135] ? __pfx_wiphy_register+0x10/0x10 [ 649.771442][T16135] ? __asan_memset+0x23/0x50 [ 649.771490][T16135] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 649.771551][T16135] ieee80211_register_hw+0x3055/0x4570 [ 649.771614][T16135] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 649.771657][T16135] ? __pfx___debug_object_init+0x10/0x10 [ 649.771704][T16135] ? find_held_lock+0x2b/0x80 [ 649.771742][T16135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 649.771783][T16135] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 649.771826][T16135] ? __hrtimer_setup+0x208/0x330 [ 649.771861][T16135] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 649.771922][T16135] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 649.771964][T16135] ? __asan_memcpy+0x3c/0x60 [ 649.772011][T16135] hwsim_new_radio_nl+0xc5f/0x1370 [ 649.772045][T16135] ? rcu_is_watching+0x12/0xc0 [ 649.772080][T16135] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 649.772129][T16135] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 649.772175][T16135] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 649.772228][T16135] genl_family_rcv_msg_doit+0x214/0x300 [ 649.772275][T16135] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 649.772315][T16135] ? genl_get_cmd+0x3e7/0x760 [ 649.772361][T16135] ? bpf_lsm_capable+0x9/0x10 [ 649.772388][T16135] ? security_capable+0x80/0x260 [ 649.772430][T16135] ? ns_capable+0xd2/0xf0 [ 649.772469][T16135] genl_rcv_msg+0x560/0x800 [ 649.772516][T16135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 649.772562][T16135] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 649.772612][T16135] netlink_rcv_skb+0x159/0x420 [ 649.772649][T16135] ? __pfx_genl_rcv_msg+0x10/0x10 [ 649.772691][T16135] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.772747][T16135] ? netlink_deliver_tap+0x1ae/0xcc0 [ 649.772787][T16135] genl_rcv+0x28/0x40 [ 649.772823][T16135] netlink_unicast+0x585/0x850 [ 649.772864][T16135] ? __pfx_netlink_unicast+0x10/0x10 [ 649.772913][T16135] netlink_sendmsg+0x8b0/0xda0 [ 649.772952][T16135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.772983][T16135] ? __import_iovec+0x1d2/0x640 [ 649.773013][T16135] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 649.773032][T16135] ____sys_sendmsg+0x9e1/0xb70 [ 649.773051][T16135] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.773071][T16135] ? __pfx_____sys_sendmsg+0x10/0x10 [ 649.773092][T16135] ? rcu_is_watching+0x12/0xc0 [ 649.773109][T16135] ? ___sys_sendmsg+0x19d/0x1e0 [ 649.773126][T16135] ? kfree+0x1dd/0x6c0 [ 649.773149][T16135] ___sys_sendmsg+0x190/0x1e0 [ 649.773170][T16135] ? __pfx____sys_sendmsg+0x10/0x10 [ 649.773208][T16135] ? __pfx___might_resched+0x10/0x10 [ 649.773237][T16135] __sys_sendmmsg+0x205/0x430 [ 649.773267][T16135] ? __pfx___sys_sendmmsg+0x10/0x10 [ 649.773298][T16135] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 649.773322][T16135] ? kcov_ioctl+0x16a/0x720 [ 649.773344][T16135] __x64_sys_sendmmsg+0x9c/0x100 [ 649.773358][T16135] ? lockdep_hardirqs_on+0x78/0x100 [ 649.773378][T16135] do_syscall_64+0x115/0x840 [ 649.773397][T16135] ? clear_bhb_loop+0x40/0x90 [ 649.773416][T16135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.773438][T16135] RIP: 0033:0x7ffbe2b9ce59 [ 649.773453][T16135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 649.773468][T16135] RSP: 002b:00007ffbe0df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 649.773484][T16135] RAX: ffffffffffffffda RBX: 00007ffbe2e16090 RCX: 00007ffbe2b9ce59 [ 649.773493][T16135] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 649.773503][T16135] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 649.773512][T16135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 649.773520][T16135] R13: 00007ffbe2e16128 R14: 00007ffbe2e16090 R15: 00007ffd8c38b938 [ 649.773541][T16135] [ 651.100755][T16149] can0: slcan on ttyS2. [ 651.385961][T16146] can0 (unregistered): slcan off ttyS2. [ 651.669259][T16159] sysfs: cannot create duplicate filename '/class/ieee80211/›11!phy1!netdev:wlan1!rc_rateidx_mcs_mask' [ 651.729455][T16159] CPU: 1 UID: 0 PID: 16159 Comm: syz.2.2172 Tainted: G L syzkaller #0 PREEMPT(full) [ 651.729504][T16159] Tainted: [L]=SOFTLOCKUP [ 651.729515][T16159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 651.729533][T16159] Call Trace: [ 651.729543][T16159] [ 651.729554][T16159] dump_stack_lvl+0x100/0x190 [ 651.729608][T16159] sysfs_warn_dup.cold+0x1c/0x28 [ 651.729649][T16159] sysfs_do_create_link_sd+0x113/0x140 [ 651.729699][T16159] sysfs_create_link+0x61/0xc0 [ 651.729732][T16159] device_add+0x675/0x1950 [ 651.729788][T16159] ? __pfx_device_add+0x10/0x10 [ 651.729820][T16159] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 651.729864][T16159] ? ieee80211_set_bitrate_flags+0x41b/0x6b0 [ 651.729917][T16159] wiphy_register+0x1edd/0x2d90 [ 651.729951][T16159] ? __rtnl_unlock+0xb9/0xf0 [ 651.729995][T16159] ? __pfx_wiphy_register+0x10/0x10 [ 651.730032][T16159] ? __asan_memset+0x23/0x50 [ 651.730074][T16159] ? minstrel_ht_alloc+0x5e6/0x7f0 [ 651.730133][T16159] ieee80211_register_hw+0x3055/0x4570 [ 651.730193][T16159] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 651.730236][T16159] ? __pfx___debug_object_init+0x10/0x10 [ 651.730279][T16159] ? find_held_lock+0x2b/0x80 [ 651.730317][T16159] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 651.730353][T16159] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 651.730391][T16159] ? __hrtimer_setup+0x208/0x330 [ 651.730422][T16159] mac80211_hwsim_new_radio+0x2a01/0x5aa0 [ 651.730477][T16159] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 651.730518][T16159] ? __asan_memcpy+0x3c/0x60 [ 651.730562][T16159] hwsim_new_radio_nl+0xc5f/0x1370 [ 651.730594][T16159] ? rcu_is_watching+0x12/0xc0 [ 651.730625][T16159] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 651.730678][T16159] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 651.730724][T16159] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 651.730775][T16159] genl_family_rcv_msg_doit+0x214/0x300 [ 651.730820][T16159] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 651.730861][T16159] ? genl_get_cmd+0x3e7/0x760 [ 651.730907][T16159] ? bpf_lsm_capable+0x9/0x10 [ 651.730938][T16159] ? security_capable+0x80/0x260 [ 651.730969][T16159] ? ns_capable+0xd2/0xf0 [ 651.731004][T16159] genl_rcv_msg+0x560/0x800 [ 651.731051][T16159] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.731092][T16159] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 651.731143][T16159] netlink_rcv_skb+0x159/0x420 [ 651.731180][T16159] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.731222][T16159] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.731276][T16159] ? netlink_deliver_tap+0x1ae/0xcc0 [ 651.731316][T16159] genl_rcv+0x28/0x40 [ 651.731354][T16159] netlink_unicast+0x585/0x850 [ 651.731396][T16159] ? __pfx_netlink_unicast+0x10/0x10 [ 651.731444][T16159] netlink_sendmsg+0x8b0/0xda0 [ 651.731490][T16159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.731524][T16159] ? __import_iovec+0x1d2/0x640 [ 651.731568][T16159] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 651.731606][T16159] ____sys_sendmsg+0x9e1/0xb70 [ 651.731642][T16159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.731693][T16159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.731740][T16159] ? __pfx_futex_wake_mark+0x10/0x10 [ 651.731781][T16159] ___sys_sendmsg+0x190/0x1e0 [ 651.731824][T16159] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.731911][T16159] __sys_sendmsg+0x170/0x220 [ 651.731942][T16159] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.731971][T16159] ? __x64_sys_futex+0x34f/0x4d0 [ 651.732016][T16159] ? rcu_is_watching+0x12/0xc0 [ 651.732054][T16159] do_syscall_64+0x115/0x840 [ 651.732094][T16159] ? clear_bhb_loop+0x40/0x90 [ 651.732130][T16159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.732158][T16159] RIP: 0033:0x7f1b5f39ce59 [ 651.732185][T16159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.732214][T16159] RSP: 002b:00007f1b60199028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.732243][T16159] RAX: ffffffffffffffda RBX: 00007f1b5f615fa0 RCX: 00007f1b5f39ce59 [ 651.732263][T16159] RDX: 0000000000040800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 651.732282][T16159] RBP: 00007f1b5f432d6f R08: 0000000000000000 R09: 0000000000000000 [ 651.732300][T16159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.732316][T16159] R13: 00007f1b5f616038 R14: 00007f1b5f615fa0 R15: 00007fff01011238 [ 651.732350][T16159] [ 652.929064][ T29] audit: type=1804 audit(1780867368.512:95): pid=16173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2173" name="/newroot/594/file0" dev="tmpfs" ino=3133 res=1 errno=0 [ 653.141735][ T29] audit: type=1800 audit(1780867368.732:96): pid=16175 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2174" name="lu_gp_id" dev="configfs" ino=71672 res=0 errno=0 [ 653.401204][T16188] netlink: 202 bytes leftover after parsing attributes in process `syz.5.2176'. [ 654.820174][ T29] audit: type=1800 audit(1780867370.413:97): pid=16220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2180" name="lu_gp_id" dev="configfs" ino=72847 res=0 errno=0 [ 655.419943][T16230] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2182'. [ 656.786799][T16242] netlink: 'syz.2.2184': attribute type 11 has an invalid length. [ 656.939170][T16245] random: crng reseeded on system resumption [ 658.772741][ T29] audit: type=1800 audit(1780867374.365:98): pid=16276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2192" name="lu_gp_id" dev="configfs" ino=72934 res=0 errno=0 [ 659.517989][T16289] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2195'. [ 659.964235][ T5642] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 659.985210][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 659.997550][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 660.005598][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 660.014674][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 660.577390][ T29] audit: type=1804 audit(1780867376.176:99): pid=16311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2200" name="/newroot/159/file0" dev="tmpfs" ino=863 res=1 errno=0 [ 661.897095][T16334] netlink: 'syz.1.2204': attribute type 1 has an invalid length. [ 662.050222][ T5642] Bluetooth: hci2: command tx timeout [ 662.395708][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.481031][T16351] ptrace attach of "ci-qemu-gce-upstream-auto/syz-executor exec"[11540] was attempted by "ci-qemu-gce-upstream-auto/syz-executor exec"[16351] [ 662.540258][T16351] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2207'. [ 662.647730][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.665920][T16351] veth0_macvtap: left promiscuous mode [ 662.674044][T16351] macvtap0: entered promiscuous mode [ 662.679541][T16351] macvtap0: entered allmulticast mode [ 662.746574][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.954189][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.050585][T16293] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.074904][T16293] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.102137][T16293] bridge_slave_0: entered allmulticast mode [ 663.112085][T16293] bridge_slave_0: entered promiscuous mode [ 663.130271][T16293] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.142340][T16293] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.156364][T16293] bridge_slave_1: entered allmulticast mode [ 663.165182][T16293] bridge_slave_1: entered promiscuous mode [ 663.313793][T16293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.327847][T16293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.574354][T16293] team0: Port device team_slave_0 added [ 663.630455][T16293] team0: Port device team_slave_1 added [ 663.731899][ T13] bridge_slave_1: left allmulticast mode [ 663.742253][ T13] bridge_slave_1: left promiscuous mode [ 663.759275][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.865418][ T13] bridge_slave_0: left allmulticast mode [ 663.886961][ T13] bridge_slave_0: left promiscuous mode [ 663.909228][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 664.129487][ T5642] Bluetooth: hci2: command tx timeout [ 664.201873][T16374] FAULT_INJECTION: forcing a failure. [ 664.201873][T16374] name failslab, interval 1, probability 0, space 0, times 0 [ 664.262344][T16374] CPU: 1 UID: 0 PID: 16374 Comm: syz.4.2212 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.262386][T16374] Tainted: [L]=SOFTLOCKUP [ 664.262395][T16374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 664.262411][T16374] Call Trace: [ 664.262419][T16374] [ 664.262429][T16374] dump_stack_lvl+0x100/0x190 [ 664.262472][T16374] should_fail_ex.cold+0x5/0xa [ 664.262502][T16374] ? kernfs_fop_write_iter+0x26a/0x5f0 [ 664.262534][T16374] should_failslab+0xc2/0x120 [ 664.262568][T16374] __kmalloc_noprof+0xe0/0x850 [ 664.262610][T16374] kernfs_fop_write_iter+0x26a/0x5f0 [ 664.262646][T16374] vfs_write+0x6ac/0x1070 [ 664.262675][T16374] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 664.262710][T16374] ? __pfx_vfs_write+0x10/0x10 [ 664.262758][T16374] ksys_write+0x12a/0x250 [ 664.262784][T16374] ? __pfx_ksys_write+0x10/0x10 [ 664.262809][T16374] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 664.262844][T16374] ? syscall_user_dispatch+0x76/0x130 [ 664.262873][T16374] do_syscall_64+0x115/0x840 [ 664.262905][T16374] ? clear_bhb_loop+0x40/0x90 [ 664.262934][T16374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.262959][T16374] RIP: 0033:0x7f508c99ce59 [ 664.262979][T16374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.263002][T16374] RSP: 002b:00007f508d8ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 664.263025][T16374] RAX: ffffffffffffffda RBX: 00007f508cc16270 RCX: 00007f508c99ce59 [ 664.263042][T16374] RDX: 0000000000000001 RSI: 0000200000000380 RDI: 0000000000000005 [ 664.263058][T16374] RBP: 00007f508d8ad090 R08: 0000000000000000 R09: 0000000000000000 [ 664.263073][T16374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 664.263087][T16374] R13: 00007f508cc16308 R14: 00007f508cc16270 R15: 00007ffc5f6e4f08 [ 664.263121][T16374] [ 664.762039][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 664.792632][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 664.808482][ T13] bond0 (unregistering): Released all slaves [ 664.912304][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 664.928541][T16293] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.955277][T16293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 664.998713][T16293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 665.108317][T16293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 665.115675][T16293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 665.144725][T16293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 665.538142][T16293] hsr_slave_0: entered promiscuous mode [ 665.546655][T16293] hsr_slave_1: entered promiscuous mode [ 665.555785][T16293] debugfs: 'hsr0' already exists in 'hsr' [ 665.562101][T16293] Cannot create hsr debugfs directory [ 666.208684][ T5642] Bluetooth: hci2: command tx timeout [ 666.486572][T16418] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2216'. [ 666.557042][ T5296] 8021q: adding VLAN 0 to HW filter on device eth9 [ 666.894928][ T13] hsr_slave_0: left promiscuous mode [ 666.912162][ T13] hsr_slave_1: left promiscuous mode [ 666.926398][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 666.949251][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.978997][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 666.995144][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 667.051904][ T13] veth1_vlan: left promiscuous mode [ 667.064036][ T13] veth0_vlan: left promiscuous mode [ 668.220955][ T13] team0 (unregistering): Port device team_slave_1 removed [ 668.287685][ T5642] Bluetooth: hci2: command tx timeout [ 668.346570][ T13] team0 (unregistering): Port device team_slave_0 removed [ 668.704532][ T5296] 8021q: adding VLAN 0 to HW filter on device eth10 [ 669.899587][T16476] FAULT_INJECTION: forcing a failure. [ 669.899587][T16476] name failslab, interval 1, probability 0, space 0, times 0 [ 669.949004][T16476] CPU: 0 UID: 0 PID: 16476 Comm: syz.4.2224 Tainted: G L syzkaller #0 PREEMPT(full) [ 669.949032][T16476] Tainted: [L]=SOFTLOCKUP [ 669.949037][T16476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 669.949047][T16476] Call Trace: [ 669.949053][T16476] [ 669.949061][T16476] dump_stack_lvl+0x100/0x190 [ 669.949092][T16476] should_fail_ex.cold+0x5/0xa [ 669.949112][T16476] should_failslab+0xc2/0x120 [ 669.949130][T16476] __kmalloc_cache_node_noprof+0x7d/0x770 [ 669.949147][T16476] ? sbitmap_queue_init_node+0x291/0x4a0 [ 669.949170][T16476] sbitmap_queue_init_node+0x291/0x4a0 [ 669.949191][T16476] blk_mq_init_tags+0x184/0x300 [ 669.949211][T16476] blk_mq_alloc_map_and_rqs+0x218/0xeb0 [ 669.949231][T16476] ? blk_mq_update_queue_map+0x227/0x3a0 [ 669.949251][T16476] blk_mq_alloc_tag_set+0x848/0x1330 [ 669.949274][T16476] loop_add+0x3b7/0xb60 [ 669.949295][T16476] ? __pfx_loop_add+0x10/0x10 [ 669.949326][T16476] ? find_held_lock+0x2b/0x80 [ 669.949344][T16476] ? __fget_files+0x215/0x3d0 [ 669.949364][T16476] loop_control_ioctl+0xae/0x620 [ 669.949385][T16476] ? __pfx_loop_control_ioctl+0x10/0x10 [ 669.949408][T16476] ? __pfx_loop_control_ioctl+0x10/0x10 [ 669.949429][T16476] __x64_sys_ioctl+0x18e/0x210 [ 669.949449][T16476] do_syscall_64+0x115/0x840 [ 669.949478][T16476] ? clear_bhb_loop+0x40/0x90 [ 669.949498][T16476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 669.949514][T16476] RIP: 0033:0x7f508c99ce59 [ 669.949529][T16476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 669.949544][T16476] RSP: 002b:00007f508d910028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 669.949560][T16476] RAX: ffffffffffffffda RBX: 00007f508cc15fa0 RCX: 00007f508c99ce59 [ 669.949570][T16476] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 669.949580][T16476] RBP: 00007f508ca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 669.949589][T16476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 669.949599][T16476] R13: 00007f508cc16038 R14: 00007f508cc15fa0 R15: 00007ffc5f6e4f08 [ 669.949619][T16476] [ 669.949745][T16476] blk-mq: reduced tag depth (128 -> 64) [ 671.130309][T16293] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 671.159407][T16293] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.558558][T16293] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 671.575028][T16293] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 671.615473][ T29] audit: type=1800 audit(1780867387.211:100): pid=16509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2227" name="lu_gp_id" dev="configfs" ino=73715 res=0 errno=0 [ 671.790567][T16293] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 671.848502][T16293] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 671.860219][T16293] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 671.885082][T16293] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 672.169899][T16293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 672.239483][T16479] Process accounting paused [ 672.246596][T16293] 8021q: adding VLAN 0 to HW filter on device team0 [ 672.297064][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.304278][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 672.344896][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.352134][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 672.672012][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2229'. [ 673.587201][T16293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.751610][T16293] veth0_vlan: entered promiscuous mode [ 673.794053][T16293] veth1_vlan: entered promiscuous mode [ 673.966826][ T5642] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 674.105967][T16293] veth0_macvtap: entered promiscuous mode [ 674.141947][T16293] veth1_macvtap: entered promiscuous mode [ 674.297551][T16293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 674.347323][T16293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 674.532712][T11044] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.582090][T11044] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.649244][T11044] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 674.697519][T11044] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 675.108077][ T3386] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.133742][ T3386] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.333197][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 675.355130][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 675.531965][ T29] audit: type=1800 audit(1780867391.133:101): pid=16597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2235" name="lu_gp_id" dev="configfs" ino=75779 res=0 errno=0 [ 675.869848][ T29] audit: type=1800 audit(1780867391.453:102): pid=16602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2236" name="lu_gp_id" dev="configfs" ino=75241 res=0 errno=0 [ 678.665478][T16682] random: crng reseeded on system resumption affs[ 680.048726][T16710] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 680.286628][T16711] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2253'. [ 680.970360][T16724] FAULT_INJECTION: forcing a failure. [ 680.970360][T16724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.008502][T16724] CPU: 1 UID: 0 PID: 16724 Comm: syz.4.2259 Tainted: G L syzkaller #0 PREEMPT(full) [ 681.008545][T16724] Tainted: [L]=SOFTLOCKUP [ 681.008555][T16724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 681.008572][T16724] Call Trace: [ 681.008581][T16724] [ 681.008592][T16724] dump_stack_lvl+0x100/0x190 [ 681.008646][T16724] should_fail_ex.cold+0x5/0xa [ 681.008680][T16724] _copy_to_user+0x32/0xd0 [ 681.008720][T16724] fs_name+0x144/0x220 [ 681.008759][T16724] __x64_sys_sysfs+0x14f/0x190 [ 681.008798][T16724] do_syscall_64+0x115/0x840 [ 681.008836][T16724] ? clear_bhb_loop+0x40/0x90 [ 681.008869][T16724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.008896][T16724] RIP: 0033:0x7f508c99ce59 [ 681.008920][T16724] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 681.008950][T16724] RSP: 002b:00007f508d910028 EFLAGS: 00000246 ORIG_RAX: 000000000000008b [ 681.008974][T16724] RAX: ffffffffffffffda RBX: 00007f508cc15fa0 RCX: 00007f508c99ce59 [ 681.008989][T16724] RDX: 1000000000000330 RSI: 000000000000000d RDI: 0000000000000002 [ 681.009006][T16724] RBP: 00007f508ca32d6f R08: 0000000000000000 R09: 0000000000000000 [ 681.009023][T16724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 681.009038][T16724] R13: 00007f508cc16038 R14: 00007f508cc15fa0 R15: 00007ffc5f6e4f08 [ 681.009072][T16724] [ 681.465616][T16725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2257'. [ 681.614839][T16741] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2263'. [ 682.032804][T16751] netlink: 334 bytes leftover after parsing attributes in process `syz.1.2266'. [ 682.329558][T16757] FAULT_INJECTION: forcing a failure. [ 682.329558][T16757] name failslab, interval 1, probability 0, space 0, times 0 [ 682.355233][T16757] CPU: 0 UID: 0 PID: 16757 Comm: syz.1.2270 Tainted: G L syzkaller #0 PREEMPT(full) [ 682.355283][T16757] Tainted: [L]=SOFTLOCKUP [ 682.355295][T16757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 682.355313][T16757] Call Trace: [ 682.355323][T16757] [ 682.355334][T16757] dump_stack_lvl+0x100/0x190 [ 682.355387][T16757] should_fail_ex.cold+0x5/0xa [ 682.355423][T16757] should_failslab+0xc2/0x120 [ 682.355459][T16757] __kmalloc_cache_noprof+0x7a/0x6f0 [ 682.355497][T16757] ? blk_alloc_queue_stats+0x3f/0x110 [ 682.355533][T16757] ? kmem_cache_alloc_node_noprof+0x2a9/0x6f0 [ 682.355578][T16757] ? blk_alloc_queue+0x31/0x790 [ 682.355701][T16757] blk_alloc_queue_stats+0x3f/0x110 [ 682.355738][T16757] blk_alloc_queue+0xda/0x790 [ 682.355780][T16757] blk_mq_alloc_queue+0x174/0x290 [ 682.355811][T16757] ? __pfx_blk_mq_alloc_queue+0x10/0x10 [ 682.355862][T16757] ? blk_mq_alloc_tag_set+0xe2c/0x1330 [ 682.355897][T16757] __blk_mq_alloc_disk+0x29/0x120 [ 682.355924][T16757] loop_add+0x498/0xb60 [ 682.355961][T16757] ? __pfx_loop_add+0x10/0x10 [ 682.356022][T16757] ? find_held_lock+0x2b/0x80 [ 682.356056][T16757] ? __fget_files+0x215/0x3d0 [ 682.356094][T16757] loop_control_ioctl+0xae/0x620 [ 682.356143][T16757] ? __pfx_loop_control_ioctl+0x10/0x10 [ 682.356188][T16757] ? __pfx_loop_control_ioctl+0x10/0x10 [ 682.356230][T16757] __x64_sys_ioctl+0x18e/0x210 [ 682.356263][T16757] do_syscall_64+0x115/0x840 [ 682.356301][T16757] ? clear_bhb_loop+0x40/0x90 [ 682.356338][T16757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.356368][T16757] RIP: 0033:0x7ffbe2b9ce59 [ 682.356393][T16757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 682.356422][T16757] RSP: 002b:00007ffbe3975028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.356449][T16757] RAX: ffffffffffffffda RBX: 00007ffbe2e15fa0 RCX: 00007ffbe2b9ce59 [ 682.356470][T16757] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000008 [ 682.356492][T16757] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 682.356512][T16757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.356530][T16757] R13: 00007ffbe2e16038 R14: 00007ffbe2e15fa0 R15: 00007ffd8c38b938 [ 682.356568][T16757] [ 682.628997][T16755] &#$@\]\-: entered promiscuous mode [ 682.643562][T16755] ima: policy update failed [ 682.652590][ T29] audit: type=1802 audit(8277292041.583:103): pid=16755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2269" res=0 errno=0 [ 683.819662][T16791] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2278'. [ 684.866933][T16809] blk-mq: reduced tag depth (128 -> 64) [ 685.253249][ T29] audit: type=1800 audit(8277292044.194:104): pid=16820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2285" name="dbroot" dev="configfs" ino=76456 res=0 errno=0 [ 685.563127][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.579744][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.953813][T16832] futex_wake_op: syz.5.2289 tries to shift op by -2048; fix this program [ 687.972027][T16832] futex_wake_op: syz.5.2289 tries to shift op by -2048; fix this program [ 688.078932][T16832] 0x000000000001-0x000000020000 : "" [ 688.274275][T16832] ftl_cs: FTL header corrupt! [ 689.239369][T16883] FAULT_INJECTION: forcing a failure. [ 689.239369][T16883] name fail_futex, interval 1, probability 0, space 0, times 0 [ 689.325779][T16883] CPU: 1 UID: 0 PID: 16883 Comm: syz.4.2299 Tainted: G L syzkaller #0 PREEMPT(full) [ 689.325807][T16883] Tainted: [L]=SOFTLOCKUP [ 689.325813][T16883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 689.325823][T16883] Call Trace: [ 689.325829][T16883] [ 689.325835][T16883] dump_stack_lvl+0x100/0x190 [ 689.325866][T16883] should_fail_ex.cold+0x5/0xa [ 689.325889][T16883] get_futex_key+0x1d2/0x1510 [ 689.325917][T16883] ? __pfx_get_futex_key+0x10/0x10 [ 689.325953][T16883] futex_wait_setup+0x83/0x510 [ 689.325978][T16883] __futex_wait+0x19f/0x300 [ 689.325998][T16883] ? __pfx___futex_wait+0x10/0x10 [ 689.326021][T16883] ? __pfx_futex_wake_mark+0x10/0x10 [ 689.326042][T16883] ? futex_hash+0x2ad/0x370 [ 689.326067][T16883] ? futex_hash+0x141/0x370 [ 689.326091][T16883] futex_wait+0xe6/0x370 [ 689.326110][T16883] ? __pfx_futex_wait+0x10/0x10 [ 689.326132][T16883] ? poll_select_finish+0x36e/0x670 [ 689.326150][T16883] ? __pfx_poll_select_finish+0x10/0x10 [ 689.326169][T16883] do_futex+0x1ef/0x350 [ 689.326184][T16883] ? __pfx_do_futex+0x10/0x10 [ 689.326204][T16883] __x64_sys_futex+0x34f/0x4d0 [ 689.326222][T16883] ? __pfx___x64_sys_futex+0x10/0x10 [ 689.326241][T16883] ? rcu_is_watching+0x12/0xc0 [ 689.326260][T16883] do_syscall_64+0x115/0x840 [ 689.326281][T16883] ? clear_bhb_loop+0x40/0x90 [ 689.326298][T16883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 689.326314][T16883] RIP: 0033:0x7f508c99ce59 [ 689.326328][T16883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 689.326353][T16883] RSP: 002b:00007f508d8ef0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 689.326378][T16883] RAX: ffffffffffffffda RBX: 00007f508cc16098 RCX: 00007f508c99ce59 [ 689.326396][T16883] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f508cc16098 [ 689.326409][T16883] RBP: 00007f508cc16090 R08: 0000000000000000 R09: 0000000000000000 [ 689.326421][T16883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 689.326437][T16883] R13: 00007f508cc16128 R14: 00007ffc5f6e4e20 R15: 00007ffc5f6e4f08 [ 689.326471][T16883] [ 690.284762][T16894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2301'. [ 690.395426][T16899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2302'. [ 690.457896][T16900] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2301'. [ 691.073168][ T5633] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 691.094784][ T5633] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 691.118923][ T5633] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 691.131910][ T5633] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 691.141562][ T5633] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 692.097799][T16926] FAULT_INJECTION: forcing a failure. [ 692.097799][T16926] name failslab, interval 1, probability 0, space 0, times 0 [ 692.116645][T11773] ------------[ cut here ]------------ [ 692.122260][T11773] ODEBUG: free active (active state 0) object: ffff888025ee1438 object type: timer_list hint: hci_devcd_timeout+0x0/0x2e0 [ 692.135230][T11773] WARNING: lib/debugobjects.c:629 at debug_print_object+0x18e/0x2a0, CPU#1: syz.1.1253/11773 [ 692.146110][T11773] Modules linked in: [ 692.150020][T11773] CPU: 1 UID: 0 PID: 11773 Comm: syz.1.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.161553][T11773] Tainted: [L]=SOFTLOCKUP [ 692.166308][T11773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.176763][T11773] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 692.176838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 692.182598][T11773] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 03 e2 0b 41 56 48 8b 14 dd 40 58 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 cc 7e d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 692.210594][T11773] RSP: 0018:ffffc9000454f6f8 EFLAGS: 00010246 [ 692.216694][T11773] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 692.224679][T11773] RDX: ffffffff8c1c5780 RSI: ffffffff8c1c53a0 RDI: ffffffff90e1ff70 [ 692.232698][T11773] RBP: 0000000000000001 R08: ffff888025ee1438 R09: ffffffff8bb2c6a0 [ 692.240703][T11773] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c53a0 [ 692.249400][T11773] R13: ffffffff8bb2c6e0 R14: ffffffff8a916e60 R15: ffffc9000454f7f8 [ 692.257860][T11773] FS: 0000000000000000(0000) GS:ffff88812448e000(0000) knlGS:0000000000000000 [ 692.266865][T11773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 692.273455][T11773] CR2: 00007f07cbf456b8 CR3: 000000006666c000 CR4: 00000000003526f0 [ 692.281479][T11773] Call Trace: [ 692.284787][T11773] [ 692.287745][T11773] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 692.293204][T11773] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 692.299049][T11773] debug_check_no_obj_freed+0x4da/0x630 [ 692.304599][T11773] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 692.310694][T11773] ? __page_table_check_zero+0x333/0x410 [ 692.316356][T11773] ? __page_table_check_zero+0x338/0x410 [ 692.321987][T11773] __free_frozen_pages+0x3fc/0x10a0 [ 692.327208][T11773] hci_release_dev+0x4ef/0x630 [ 692.332074][T11773] ? __pfx_hci_release_dev+0x10/0x10 [ 692.337379][T11773] ? device_release+0x97/0x270 [ 692.342204][T11773] ? rcu_is_watching+0x12/0xc0 [ 692.346991][T11773] ? device_release+0x97/0x270 [ 692.352486][T11773] bt_host_release+0x6b/0xb0 [ 692.357822][T11773] ? __pfx_bt_host_release+0x10/0x10 [ 692.363138][T11773] device_release+0xd2/0x270 [ 692.367814][T11773] kobject_put+0x1f7/0x640 [ 692.372231][T11773] put_device+0x1f/0x30 [ 692.376413][T11773] vhci_release+0x185/0x230 [ 692.380985][T11773] ? __pfx_vhci_release+0x10/0x10 [ 692.386036][T11773] __fput+0x3ff/0xb50 [ 692.390025][T11773] task_work_run+0x150/0x240 [ 692.394631][T11773] ? __pfx_task_work_run+0x10/0x10 [ 692.399758][T11773] ? free_uts_ns+0x16e/0x330 [ 692.404346][T11773] do_exit+0x951/0x2af0 [ 692.408539][T11773] ? __pfx_do_exit+0x10/0x10 [ 692.413126][T11773] ? cgroup_update_frozen_flag+0x107/0x210 [ 692.418946][T11773] ? find_held_lock+0x2b/0x80 [ 692.423612][T11773] ? get_signal+0x1872/0x2210 [ 692.428333][T11773] do_group_exit+0xd5/0x2a0 [ 692.432835][T11773] get_signal+0x20ff/0x2210 [ 692.437363][T11773] ? __pfx_get_signal+0x10/0x10 [ 692.442207][T11773] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 692.447701][T11773] arch_do_signal_or_restart+0x91/0x7a0 [ 692.453971][T11773] ? get_timespec64+0x136/0x1b0 [ 692.459312][T11773] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 692.465496][T11773] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 692.471293][T11773] ? rcu_is_watching+0x12/0xc0 [ 692.476091][T11773] exit_to_user_mode_loop+0x98/0x670 [ 692.481372][T11773] ? rcu_is_watching+0x12/0xc0 [ 692.486162][T11773] do_syscall_64+0x652/0x840 [ 692.490746][T11773] ? clear_bhb_loop+0x40/0x90 [ 692.495433][T11773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.501316][T11773] RIP: 0033:0x7ffbe2b5d68e [ 692.505748][T11773] Code: Unable to access opcode bytes at 0x7ffbe2b5d664. [ 692.512748][T11773] RSP: 002b:00007ffbe0df5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 692.521442][T11773] RAX: fffffffffffffdfc RBX: 00007ffbe0df66c0 RCX: 00007ffbe2b5d68e [ 692.529523][T11773] RDX: 00007ffbe0df5fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 692.537520][T11773] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 692.545517][T11773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 692.553491][T11773] R13: 00007ffbe2e16128 R14: 00007ffbe2e16090 R15: 00007ffd8c38b938 [ 692.555073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 692.562746][T11773] [ 692.573179][T11773] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 692.580452][T11773] CPU: 1 UID: 0 PID: 11773 Comm: syz.1.1253 Tainted: G L syzkaller #0 PREEMPT(full) [ 692.591379][T11773] Tainted: [L]=SOFTLOCKUP [ 692.595689][T11773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 692.605733][T11773] Call Trace: [ 692.609003][T11773] [ 692.611921][T11773] dump_stack_lvl+0x100/0x190 [ 692.616598][T11773] vpanic+0x552/0x970 [ 692.620567][T11773] ? __pfx_vpanic+0x10/0x10 [ 692.625060][T11773] panic+0xd1/0xe0 [ 692.628769][T11773] ? __pfx_panic+0x10/0x10 [ 692.633211][T11773] ? check_panic_on_warn+0x1f/0x90 [ 692.638321][T11773] check_panic_on_warn.cold+0x19/0x34 [ 692.643682][T11773] ? debug_print_object+0x18e/0x2a0 [ 692.648869][T11773] __warn.cold+0x191/0x328 [ 692.653272][T11773] __report_bug+0x296/0x3d0 [ 692.657848][T11773] ? debug_print_object+0x18e/0x2a0 [ 692.663043][T11773] ? __pfx___report_bug+0x10/0x10 [ 692.668064][T11773] ? unwind_next_frame+0x3c8/0x2090 [ 692.673258][T11773] report_bug_entry+0xe1/0x290 [ 692.678012][T11773] ? debug_print_object+0x19b/0x2a0 [ 692.683200][T11773] handle_bug+0x1cd/0x2a0 [ 692.687528][T11773] exc_invalid_op+0x17/0x50 [ 692.692020][T11773] asm_exc_invalid_op+0x1a/0x20 [ 692.696861][T11773] RIP: 0010:debug_print_object+0x19b/0x2a0 [ 692.702658][T11773] Code: b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 4f 48 8d 3d 82 03 e2 0b 41 56 48 8b 14 dd 40 58 1c 8c 4c 89 e6 <67> 48 0f b9 3a 58 83 05 cc 7e d7 0b 01 48 83 c4 18 5b 5d 41 5c 41 [ 692.722254][T11773] RSP: 0018:ffffc9000454f6f8 EFLAGS: 00010246 [ 692.728314][T11773] RAX: dffffc0000000000 RBX: 0000000000000003 RCX: 0000000000000000 [ 692.736301][T11773] RDX: ffffffff8c1c5780 RSI: ffffffff8c1c53a0 RDI: ffffffff90e1ff70 [ 692.744259][T11773] RBP: 0000000000000001 R08: ffff888025ee1438 R09: ffffffff8bb2c6a0 [ 692.752218][T11773] R10: 0000000000000001 R11: 0000000000000000 R12: ffffffff8c1c53a0 [ 692.760175][T11773] R13: ffffffff8bb2c6e0 R14: ffffffff8a916e60 R15: ffffc9000454f7f8 [ 692.768139][T11773] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 692.773602][T11773] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 692.779050][T11773] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 692.784853][T11773] debug_check_no_obj_freed+0x4da/0x630 [ 692.790400][T11773] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 692.796460][T11773] ? __page_table_check_zero+0x333/0x410 [ 692.802086][T11773] ? __page_table_check_zero+0x338/0x410 [ 692.807718][T11773] __free_frozen_pages+0x3fc/0x10a0 [ 692.812933][T11773] hci_release_dev+0x4ef/0x630 [ 692.817687][T11773] ? __pfx_hci_release_dev+0x10/0x10 [ 692.822958][T11773] ? device_release+0x97/0x270 [ 692.827711][T11773] ? rcu_is_watching+0x12/0xc0 [ 692.832466][T11773] ? device_release+0x97/0x270 [ 692.837221][T11773] bt_host_release+0x6b/0xb0 [ 692.841804][T11773] ? __pfx_bt_host_release+0x10/0x10 [ 692.847086][T11773] device_release+0xd2/0x270 [ 692.851676][T11773] kobject_put+0x1f7/0x640 [ 692.856090][T11773] put_device+0x1f/0x30 [ 692.860254][T11773] vhci_release+0x185/0x230 [ 692.864758][T11773] ? __pfx_vhci_release+0x10/0x10 [ 692.869777][T11773] __fput+0x3ff/0xb50 [ 692.873755][T11773] task_work_run+0x150/0x240 [ 692.878336][T11773] ? __pfx_task_work_run+0x10/0x10 [ 692.883433][T11773] ? free_uts_ns+0x16e/0x330 [ 692.888019][T11773] do_exit+0x951/0x2af0 [ 692.892190][T11773] ? __pfx_do_exit+0x10/0x10 [ 692.896770][T11773] ? cgroup_update_frozen_flag+0x107/0x210 [ 692.902567][T11773] ? find_held_lock+0x2b/0x80 [ 692.907230][T11773] ? get_signal+0x1872/0x2210 [ 692.911897][T11773] do_group_exit+0xd5/0x2a0 [ 692.916397][T11773] get_signal+0x20ff/0x2210 [ 692.920894][T11773] ? __pfx_get_signal+0x10/0x10 [ 692.925732][T11773] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 692.931187][T11773] arch_do_signal_or_restart+0x91/0x7a0 [ 692.936727][T11773] ? get_timespec64+0x136/0x1b0 [ 692.941572][T11773] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 692.947723][T11773] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 692.953519][T11773] ? rcu_is_watching+0x12/0xc0 [ 692.958273][T11773] exit_to_user_mode_loop+0x98/0x670 [ 692.963554][T11773] ? rcu_is_watching+0x12/0xc0 [ 692.968334][T11773] do_syscall_64+0x652/0x840 [ 692.972918][T11773] ? clear_bhb_loop+0x40/0x90 [ 692.977584][T11773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 692.983467][T11773] RIP: 0033:0x7ffbe2b5d68e [ 692.987867][T11773] Code: Unable to access opcode bytes at 0x7ffbe2b5d664. [ 692.994867][T11773] RSP: 002b:00007ffbe0df5f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 693.003266][T11773] RAX: fffffffffffffdfc RBX: 00007ffbe0df66c0 RCX: 00007ffbe2b5d68e [ 693.011221][T11773] RDX: 00007ffbe0df5fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 693.019179][T11773] RBP: 00007ffbe2c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 693.027136][T11773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 693.035097][T11773] R13: 00007ffbe2e16128 R14: 00007ffbe2e16090 R15: 00007ffd8c38b938 [ 693.043067][T11773] [ 693.046367][T11773] Kernel Offset: disabled [ 693.050691][T11773] Rebooting in 86400 seconds..