last executing test programs: 6m45.420634605s ago: executing program 2 (id=753): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, 0x0, &(0x7f0000000200)) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r3 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r4 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r5, 0x25, 0x0, @val=@netkit={@void, @value=r2}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 6m43.495447545s ago: executing program 2 (id=758): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x40008, 0x7fffffff}, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffccc, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x200000001003, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMON(r2, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(r2, 0xc0485660, &(0x7f0000000000)={0x1, 0x1, @stop_pts=0x5}) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x13, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x8001, 0x8, 0x0, 0x410, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0xc}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 6m41.6855058s ago: executing program 2 (id=764): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x29}, 0x3fe}, 0x1c) socket(0x400000000010, 0x3, 0x0) gettid() r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x8, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = syz_open_dev$media(&(0x7f0000000240), 0x2, 0x20081) ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[0x0]}) 6m39.119660973s ago: executing program 2 (id=768): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, 0xffffffffffffffff, 0xfe93) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x0, 'erspan0\x00', {0x4}, 0x40}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='zonefs\x00', 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x21c0, 0x103) r4 = syz_open_dev$loop(&(0x7f0000000040), 0x675, 0x200) ioctl$BLKPG(r4, 0x1269, 0xffffffffffffffff) 6m37.898873241s ago: executing program 2 (id=772): openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x1c1880, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r4, 0x29, 0x16, &(0x7f0000fcb000), 0x4) add_key$keyring(&(0x7f0000000500), 0x0, 0x0, 0x0, 0xffffffffffffffff) setresgid(0xee00, 0xee01, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x11e) openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x4) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f0000000040)={0x10000, 0x7305be4b}) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 6m34.043051978s ago: executing program 2 (id=776): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x2, 0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) r2 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x47f}]}, 0x3c}}, 0x0) close(r5) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES8=r8, @ANYRESDEC=r1, @ANYRES32=r5, @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x43, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1a00000006000000060000000600000003000000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r6, @ANYBLOB="01000000040000000000000000000000002000000000000000000000da60187f1eefd9f886b5d57504a74998c3327cab8ace30778e231fd32d8a5b068858c096d7248ede528e9ac25197eff5793cff3c60551e34031ec0bbb5ef499f039bf97d1049b089381a05a628c7e9f2d9b782c26949a54e7e743cdb2384acc043a58fa7905ebc86d226734e4f939c287102e9"], 0x50) 6m18.585228022s ago: executing program 32 (id=776): r0 = syz_open_procfs(0x0, &(0x7f00000002c0)='net/snmp\x00') preadv(r0, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/183, 0xb7}], 0x1, 0x2, 0x8) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, 0x0, 0x1e0) r2 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=0x0, 0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000980)=@IORING_OP_UNLINKAT={0x24, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x200, 0x1}) syz_ublk_add_dev(r2, r3, 0x0, r4, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r6 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x47f}]}, 0x3c}}, 0x0) close(r5) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYRES8=r8, @ANYRESDEC=r1, @ANYRES32=r5, @ANYRES64], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x43, 0x8}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1a00000006000000060000000600000003000000", @ANYRES32=r0, @ANYBLOB="0200"/20, @ANYRES32=r6, @ANYBLOB="01000000040000000000000000000000002000000000000000000000da60187f1eefd9f886b5d57504a74998c3327cab8ace30778e231fd32d8a5b068858c096d7248ede528e9ac25197eff5793cff3c60551e34031ec0bbb5ef499f039bf97d1049b089381a05a628c7e9f2d9b782c26949a54e7e743cdb2384acc043a58fa7905ebc86d226734e4f939c287102e9"], 0x50) 4m38.776449289s ago: executing program 3 (id=993): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x38) wait4(r2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff024}, {0xb2, 0x0, 0x0, 0xffeff024}, {0x6, 0x0, 0x4}]}, 0x10) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f00000005c0)=""/102393, 0xd828) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x0) syz_open_procfs(r2, &(0x7f00000001c0)='net/mcfilter\x00') ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x100000002) ioctl$RTC_EPOCH_SET(r0, 0x4008700e, 0x4) ioctl$RTC_UIE_ON(r0, 0x7003) pread64(r0, &(0x7f0000000240)=""/97, 0x61, 0x9) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, 0x0}, 0x28) syz_emit_ethernet(0xd9, &(0x7f00000195c0)=ANY=[@ANYBLOB="aaaaaaaaaabbbbbbbbbbbbbb88a8180081000200001100012abf0000000005ca3ac30f943a8fc2a06b71d1546af39e80fadafabe2dcdc40d66338e0b3a60118a96e182dbf111331e7b42524b947befcbddfdc6b45acda0599c64a9bf7b7abe65284313a166bdf6efd0576c95424f836487b234ec7f59e908a3b0dc80aebcb92a330405ef686a82c0e737eb650261ec1ddedf87908dec446c5c6db198eb05120bd4dcfd4c45b46fb40e0672eeac460b17819f93c212261d2ffda8922f1e1be310fbb0fa01b6e0695cea0760599c205d029643d771c2e87ada76"], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff0800450000e60057860573cb016c580064000000019078ac1e0001ac141490780066000949e337215fcccd433796c69250aa84d75499dc3470fc83f65a6b0f89562b58610b477dbcec37b4ef8ee5a15ee25de4893c5dcd3be0823eb948120d23bb01f3"], 0x0) memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) 4m28.211343912s ago: executing program 3 (id=1004): openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 4m26.245367475s ago: executing program 3 (id=1008): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x3, 0x0, 0x1000000}) 4m22.682847069s ago: executing program 3 (id=1013): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x52}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x11) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000008c0)=ANY=[], 0x0, 0x3f, 0x0, 0x0, 0xb}, 0x28) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x40010, r3, 0xd6fff000) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r5 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r5, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x2, [{}, {}]}, 0x48) sendmmsg$inet6(r5, &(0x7f0000000800)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, 0x1c, &(0x7f0000000b40)=[{0x0}], 0x1, &(0x7f0000000440)=[@dstopts_2292={{0x18, 0x29, 0x32}}], 0x18}}], 0x1, 0x4c0c0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) getsockopt$sock_buf(r6, 0x1, 0x1a, &(0x7f0000000100)=""/2, &(0x7f0000000140)=0x2) r7 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r7, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r4, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r7, 0x40146f2c, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x42200, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_ifreq(r8, 0x8931, &(0x7f0000000a40)={'veth1_to_team\x00', @ifru_ivalue}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 4m19.314632901s ago: executing program 3 (id=1020): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x4c880) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x183c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r6, 0x54a0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f00000009c0)=ANY=[@ANYBLOB="18080000e0000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r8, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) write$binfmt_script(r8, 0x0, 0x0) 4m17.116300565s ago: executing program 3 (id=1022): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0xa, 0x0, 0x6}}, 0x14) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0xc4062, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x3}}]}) 4m2.045076539s ago: executing program 33 (id=1022): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) write$P9_RMKDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x14, 0x49, 0x2, {0xa, 0x0, 0x6}}, 0x14) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) mount$bpf(0x0, 0x0, 0x0, 0xc4062, &(0x7f0000000180)={[{@mode={'mode', 0x3d, 0x3}}]}) 36.600611662s ago: executing program 1 (id=1516): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) 34.066478556s ago: executing program 1 (id=1526): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48}, 0x1, 0x0, 0x0, 0x20000010}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4008840) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 32.445667118s ago: executing program 1 (id=1532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500070007ffffffbd2001000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) 29.360794227s ago: executing program 1 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xa}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0xffe0}, {0xffff, 0xffff}, {0x14, 0x1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 24.348887309s ago: executing program 4 (id=1549): fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netlink\x00') pread64(r3, &(0x7f0000002240)=""/236, 0xec, 0x4eb) 22.97592281s ago: executing program 4 (id=1552): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), r2) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000040) 22.85026966s ago: executing program 1 (id=1554): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'wg2\x00'}) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd, 0x4}}, 0x44) sendmsg$sock(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 21.031485323s ago: executing program 1 (id=1556): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000007c0)=0x2) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 20.208006371s ago: executing program 4 (id=1560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x4000004897}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7", 0x1c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da98", 0x34}], 0x3}], 0x1, 0x40800) recvmsg$can_bcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000680)=""/112, 0x70}], 0x1}, 0x10150) 18.883014256s ago: executing program 5 (id=1561): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000640)=[{0x0, 0x6, 0x1000}], 0x1, 0x0) unshare(0x20060400) 18.794470831s ago: executing program 0 (id=1562): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) lseek(0xffffffffffffffff, 0x38, 0x0) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0), 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 17.27521603s ago: executing program 5 (id=1564): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(r0, &(0x7f0000000040)='net/protocols\x00') read$FUSE(r3, &(0x7f0000012400)={0x2020}, 0x2020) 16.339029034s ago: executing program 5 (id=1567): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) getrlimit(0x5, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(&(0x7f0000000180), 0x84000) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f00000002c0)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x3, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r6, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) close_range(r0, r7, 0x0) 16.283044972s ago: executing program 0 (id=1568): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1e5) r0 = socket$inet(0x2, 0x1, 0x3) fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x54}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000530000001801000020207525000000000020202def054d208dc3e700bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @multicast1}, 0x10) 15.634396414s ago: executing program 5 (id=1569): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0xffff, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x884}, 0x40) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000280)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000034c0)=[{&(0x7f00000001c0)="27030200dc0f14000e00", 0xa}, {&(0x7f00000022c0)="ffc9ace87aade11690dd52a158e0b1c49686ce569fbf520db4cad1ed8e1b28400a1b7ff9", 0x24}], 0x2}, 0x8000) 10.280838745s ago: executing program 0 (id=1575): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) lseek(0xffffffffffffffff, 0x38, 0x0) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140), 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0), 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 9.055910454s ago: executing program 4 (id=1577): openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r4, 0x6a98047402e98331, 0xa1}, 0x14}}, 0x40010) 8.652723739s ago: executing program 6 (id=1578): mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./my_config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffff9c, &(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0\x00', 0x2) r1 = openat(0xffffff9c, &(0x7f0000000800)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0\x00', 0x2) r2 = openat(0xffffff9c, &(0x7f0000000a00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0) write(r2, &(0x7f0000000b00)='0\x00', 0x2) r3 = openat(0xffffff9c, &(0x7f0000000c00)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000d00)='0\x00', 0x2) r4 = openat(0xffffff9c, &(0x7f0000001000)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001100)='dummy_udc.0\n\x00', 0xc) 7.847516198s ago: executing program 0 (id=1579): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r2, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8bf0ff00000000bfa10000000000000701000000feffffbfa40000000000000704000000feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r4) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet(0x2, 0xa, 0x3) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000140)='xfrm0\x00', 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r7, &(0x7f0000000000)="25803c00", 0x4, 0x2004082c, &(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10) r9 = socket$inet6(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) sendto$inet6(r9, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x24) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000080)={'virt_wifi0\x00', @broadcast}) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xb, &(0x7f0000000280)=""/56, &(0x7f0000000300)=0x38) 6.927220373s ago: executing program 6 (id=1580): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = userfaultfd(0x1) r2 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) readv(r1, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/114, 0x72}], 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) fsopen(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r3 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004", @ANYRES32=0x0], 0x48) lseek(0xffffffffffffffff, 0x38, 0x0) setsockopt$MRT6_TABLE(0xffffffffffffffff, 0x29, 0xcf, &(0x7f0000000140), 0x4) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) add_key(&(0x7f0000000380)='rxrpc\x00', 0x0, &(0x7f00000003c0), 0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) 5.836679067s ago: executing program 34 (id=1556): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000007c0)=0x2) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) close(0x3) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 5.789487326s ago: executing program 6 (id=1582): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0c42, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket(0x2, 0x2, 0x1) socket(0x2, 0x2, 0x1) socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xb972, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x9) 3.660115391s ago: executing program 6 (id=1583): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) getrlimit(0x5, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(&(0x7f0000000180), 0x84000) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f00000002c0)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ecc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6bb06500f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784776f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a768cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f929ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340076dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d0500e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x3, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, 0x0, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r6, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) close_range(r0, r6, 0x0) 2.799683934s ago: executing program 6 (id=1584): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) getrlimit(0x5, &(0x7f0000000240)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) pipe2(&(0x7f0000000180), 0x84000) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f00000002c0)) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x62c40, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r5, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r5, &(0x7f0000004200)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x78, 0x0, 0x3, {0xc, 0x7, 0x0, {0xfffffffffffffffd, 0xc3, 0xfffffffffffffffc, 0x7, 0x8, 0xffffffff, 0xfffffffe, 0x0, 0x80000, 0x8000, 0x0, 0x0, r6, 0x1, 0x3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) writev(r7, &(0x7f0000000200)=[{&(0x7f00000003c0)='n', 0xfdef}], 0x1) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) close_range(r0, r7, 0x0) 1.977176626s ago: executing program 6 (id=1585): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1e5) r0 = socket$inet(0x2, 0x1, 0x3) fsopen(&(0x7f0000000180)='btrfs\x00', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x16) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x54}}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000530000001801000020207525000000000020202def054d208dc3e700bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x2000000, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40186f40, &(0x7f0000000440)=0x10) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f00000000c0)) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e20, @multicast1}, 0x10) 1.135331458s ago: executing program 4 (id=1586): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x101}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = io_uring_setup(0x3a61, &(0x7f0000000580)={0x0, 0x8270, 0x40, 0x3, 0x846}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="6a0ac4ff02"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) io_uring_register$IORING_REGISTER_FILES(r3, 0x1e, &(0x7f0000000000)=[r3], 0x1) 1.014951182s ago: executing program 5 (id=1587): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_kvm_add_vcpu$x86(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x5e9602, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0xa0b7, 0x8, 0xfffffffb, 0x3ab}) ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8e74, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 997.640567ms ago: executing program 0 (id=1588): bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) pipe(&(0x7f0000000440)) socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x29}, 0x48) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 141.754164ms ago: executing program 4 (id=1589): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000000c0)=0x2001) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) syz_kvm_add_vcpu$x86(0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200), 0x5e9602, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), &(0x7f0000000880)="22cff58056ac", 0xffd7, 0x1) setxattr$incfs_metadata(0x0, &(0x7f0000000280), 0x0, 0x0, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000000ff000000000000100085000000530000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095000000000000007f0cff0a196e6d57113f3eab28c85d691f724ad140108934a3e3efa560dc8db4700e191ff5f03fd7f83f6e1e9aaee2afc55f025e56e0ded37be12657f5e837cfc27b55"], &(0x7f0000000080)='syzkaller\x00'}, 0x88) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x2f00, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) io_uring_setup(0x1f8e, &(0x7f0000000140)={0x0, 0xa0b7, 0x8, 0xfffffffb, 0x3ab}) ioctl$KVM_CAP_PTP_KVM(0xffffffffffffffff, 0x4068aea3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x8e74, 0x2, 0xfffffffffffffffd, 0x1}, 0x0, 0x0, 0x0, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 83.341385ms ago: executing program 0 (id=1590): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 0s ago: executing program 5 (id=1591): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ed) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='100\x00', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='100\x00', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/verbose\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='0\x00', 0x1) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000400)="11223344", 0x4, 0x0, &(0x7f0000000500)={0x2, 0x1234, @loopback}, 0x10) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.6.1303'. [ 691.412684][T11583] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 691.482916][T11583] SELinux: failed to load policy [ 691.552892][ T5619] block nbd35: Receive control failed (result -32) [ 692.423240][T11609] netlink: 'syz.6.1308': attribute type 4 has an invalid length. [ 692.716887][T11611] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1311'. [ 692.875611][T11613] bond25: entered promiscuous mode [ 692.966183][T11613] bond25: entered allmulticast mode [ 692.988601][T11611] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1311'. [ 694.454981][T11624] netlink: 'syz.6.1312': attribute type 4 has an invalid length. [ 696.496111][T11642] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1319'. [ 696.606466][T11640] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1319'. [ 696.713741][ T5619] block nbd36: Receive control failed (result -32) [ 696.991883][T11658] netlink: 'syz.6.1323': attribute type 4 has an invalid length. [ 697.949564][T11661] netlink: 'syz.5.1325': attribute type 4 has an invalid length. [ 700.871382][T11678] loop5: detected capacity change from 0 to 4095 [ 701.731117][T11497] buffer_io_error: 336 callbacks suppressed [ 701.731577][T11497] Buffer I/O error on dev loop5, logical block 511, async page read [ 701.904163][T11689] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1336'. [ 702.073402][ T5611] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 702.464252][ T5611] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 702.490891][ T5611] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 702.560033][ T5611] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 702.607805][ T5611] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 702.618298][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 702.627145][ T5611] usb 5-1: Product: syz [ 702.631824][ T5611] usb 5-1: Manufacturer: syz [ 702.637131][ T5611] usb 5-1: SerialNumber: syz [ 702.647552][ T5611] usb 5-1: config 0 descriptor?? [ 703.555527][T11684] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 703.895277][T11684] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 703.914890][ T5611] usb 5-1: ucan: probing device on interface #0 [ 704.154108][ T5611] usb 5-1: ucan: could not read protocol version, ret=-32 [ 704.184282][ T5611] usb 5-1: ucan: probe failed; try to update the device firmware [ 704.244741][ T5611] usb 5-1: USB disconnect, device number 16 [ 704.783093][ T9] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 704.826191][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 705.053741][ T9] usb 6-1: device descriptor read/64, error -32 [ 706.105400][ T9] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 706.390953][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 706.420540][ T9] usb 6-1: config 0 has no interface number 0 [ 706.434546][ T5611] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 706.584984][ T9] usb 6-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 706.595606][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.605296][ T9] usb 6-1: Product: syz [ 706.609483][ T9] usb 6-1: Manufacturer: syz [ 706.616006][ T9] usb 6-1: SerialNumber: syz [ 706.631135][ T9] usb 6-1: config 0 descriptor?? [ 706.688423][T11728] netlink: 'syz.0.1340': attribute type 4 has an invalid length. [ 707.408950][ T5611] usb 2-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 707.440580][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 707.541408][ T9] usb 6-1: can't set config #0, error -71 [ 707.694792][ T9] usb 6-1: USB disconnect, device number 5 [ 707.749610][ T5611] usb 2-1: USB2VGA dongle found at address 9 [ 707.814218][T11734] netlink: 'syz.0.1347': attribute type 4 has an invalid length. [ 708.675540][ T5611] usb 2-1: Allocated 8 output buffers [ 708.851324][T11741] netlink: 'syz.6.1350': attribute type 4 has an invalid length. [ 709.566809][ T29] audit: type=1400 audit(1785226994.285:1425): avc: denied { read } for pid=11742 comm="syz.0.1349" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 709.574170][ T5611] usb 2-1: Failed to early initialize device [ 709.672365][ T5611] usb 2-1: USB disconnect, device number 9 [ 709.995290][T11750] loop3: detected capacity change from 0 to 7 [ 710.021365][T11750] loop3: p1 p4 [ 710.039305][T11750] loop3: partition table partially beyond EOD, truncated [ 710.099179][T11750] loop3: p4 start 65535 is beyond EOD, truncated [ 710.313135][T11497] udevd[11497]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 710.573753][ T5611] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 710.593990][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 710.898290][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 710.958737][ T9] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.144092][ T9] usb 6-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.157072][ T9] usb 6-1: config 0 interface 0 has no altsetting 0 [ 711.174576][ T5611] usb 7-1: Using ep0 maxpacket: 8 [ 711.180428][ T9] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 711.264119][T11768] netlink: 'syz.1.1359': attribute type 4 has an invalid length. [ 711.623777][ T5611] usb 7-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 711.635965][ T5611] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.649456][ T5611] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x2 has an invalid bInterval 164, changing to 11 [ 711.651355][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.661582][ T5611] usb 7-1: config 0 interface 0 altsetting 251 has 2 endpoint descriptors, different from the interface descriptor's value: 223 [ 711.697442][ T9] usb 6-1: config 0 descriptor?? [ 711.719127][ T5611] usb 7-1: config 0 interface 0 has no altsetting 0 [ 711.733180][ T5611] usb 7-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 711.750098][ T5611] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.767476][ T5611] usb 7-1: config 0 descriptor?? [ 711.812315][T11773] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1362'. [ 711.828975][T11773] nbd: must specify at least one socket [ 711.838042][T11773] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.1362'. [ 712.183184][ T5729] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 712.265940][ T9] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 712.353746][ T5729] usb 1-1: Using ep0 maxpacket: 32 [ 712.382101][ T5729] usb 1-1: config 2 has an invalid interface number: 45 but max is 0 [ 712.462036][ T5729] usb 1-1: config 2 has no interface number 0 [ 712.491820][ T5729] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 712.543276][ T5729] usb 1-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 712.575211][ T5729] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 712.621074][ T5729] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 712.679974][ T5729] usb 1-1: Product: syz [ 712.701212][ T5729] usb 1-1: Manufacturer: syz [ 712.725884][ T5729] usb 1-1: SerialNumber: syz [ 712.755640][ T5729] kobil_sct 1-1:2.45: KOBIL USB smart card terminal converter detected [ 712.805702][ T5611] smartjoyplus 0003:6666:8802.0003: unknown main item tag 0x0 [ 712.807390][ T5729] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 712.817577][ T5611] smartjoyplus 0003:6666:8802.0003: unknown main item tag 0x0 [ 712.831079][ T5611] smartjoyplus 0003:6666:8802.0003: unknown main item tag 0x0 [ 712.840863][ T5611] smartjoyplus 0003:6666:8802.0003: unknown main item tag 0x0 [ 712.847446][ T9] usb 6-1: USB disconnect, device number 6 [ 712.851287][ T5611] smartjoyplus 0003:6666:8802.0003: unknown main item tag 0x0 [ 712.869353][ T5611] smartjoyplus 0003:6666:8802.0003: unknown main item tag 0x0 [ 712.893208][ T5611] smartjoyplus 0003:6666:8802.0003: unknown main item tag 0x0 [ 712.906932][ T5611] smartjoyplus 0003:6666:8802.0003: unknown main item tag 0x0 [ 712.926324][T11784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1366'. [ 712.979863][ T5611] smartjoyplus 0003:6666:8802.0003: hidraw0: USB HID v0.32 Device [HID 6666:8802] on usb-dummy_hcd.6-1/input0 [ 713.010673][ T5611] smartjoyplus 0003:6666:8802.0003: Force feedback for SmartJoy PLUS PS2/USB adapter [ 713.053642][ T10] usb 1-1: USB disconnect, device number 20 [ 713.062326][ T5611] usb 7-1: USB disconnect, device number 6 [ 713.071536][T11784] bond26: entered promiscuous mode [ 713.086108][T11784] bond26: entered allmulticast mode [ 713.342188][ T10] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 714.118942][ T5729] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 714.184074][ T10] kobil_sct 1-1:2.45: device disconnected [ 714.446919][ T5729] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 715.252820][ T5729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.254971][T11788] fido_id[11788]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 715.362540][ T5729] usb 2-1: Product: syz [ 715.387734][ T5729] usb 2-1: Manufacturer: syz [ 715.412446][ T5729] usb 2-1: SerialNumber: syz [ 715.458298][ T5729] usb 2-1: config 0 descriptor?? [ 715.492932][ T5729] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 715.613134][ T5611] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 715.733189][T10965] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 715.796572][ T5611] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 715.813088][ T5611] usb 5-1: config 0 has no interface number 0 [ 715.830254][ T5611] usb 5-1: config 0 interface 41 has no altsetting 0 [ 715.853228][ T5611] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 715.873159][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.892122][ T5611] usb 5-1: Product: syz [ 715.904546][ T5611] usb 5-1: Manufacturer: syz [ 715.922405][ T5611] usb 5-1: SerialNumber: syz [ 715.929938][T10965] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 715.955932][ T5611] usb 5-1: config 0 descriptor?? [ 715.969557][T10965] usb 1-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 715.995146][T10965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 716.004157][T10965] usb 1-1: Product: syz [ 716.008749][T10965] usb 1-1: Manufacturer: syz [ 716.030728][T10965] usb_debug 1-1:1.0: debug converter detected [ 716.048861][T10965] usb 1-1: debug converter now attached to ttyUSB0 [ 716.272046][T10965] usb 1-1: USB disconnect, device number 21 [ 716.311922][T10965] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 716.336548][T10965] usb_debug 1-1:1.0: device disconnected [ 716.429729][ T29] audit: type=1400 audit(1785227001.145:1426): avc: denied { mount } for pid=11809 comm="syz.6.1375" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 716.459489][ T29] audit: type=1400 audit(1785227001.175:1427): avc: denied { write } for pid=11809 comm="syz.6.1375" name="functions" dev="configfs" ino=11248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 716.484805][ T29] audit: type=1400 audit(1785227001.175:1428): avc: denied { create } for pid=11809 comm="syz.6.1375" name="phonet.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 716.508207][ T29] audit: type=1400 audit(1785227001.205:1429): avc: denied { write } for pid=11809 comm="syz.6.1375" name="c.1" dev="configfs" ino=16421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 716.537917][ T29] audit: type=1400 audit(1785227001.205:1430): avc: denied { create } for pid=11809 comm="syz.6.1375" name="phonet.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 716.572112][ T29] audit: type=1400 audit(1785227001.205:1431): avc: denied { write } for pid=11809 comm="syz.6.1375" name="c.1" dev="configfs" ino=16421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 716.609538][ T29] audit: type=1400 audit(1785227001.325:1432): avc: denied { unmount } for pid=10537 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 716.831668][ T5611] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 717.175615][ T5729] gspca_stk1135: reg_w 0x200 err -71 [ 717.181985][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 717.194102][ T5729] gspca_stk1135: Sensor write failed [ 717.199452][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 717.205896][ T5729] gspca_stk1135: Sensor write failed [ 717.211349][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 717.218127][ T5729] gspca_stk1135: Sensor read failed [ 717.227052][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 717.243295][ T5729] gspca_stk1135: Sensor read failed [ 717.250700][ T5729] gspca_stk1135: Detected sensor type unknown (0x0) [ 717.258330][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 717.264774][ T5729] gspca_stk1135: Sensor read failed [ 717.270170][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 717.277925][ T5729] gspca_stk1135: Sensor read failed [ 717.291519][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 717.301971][ T5729] gspca_stk1135: Sensor write failed [ 717.309267][ T5729] gspca_stk1135: serial bus timeout: status=0x00 [ 717.328809][ T5729] gspca_stk1135: Sensor write failed [ 717.353872][ T5729] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 717.374720][ T5729] usb 2-1: USB disconnect, device number 10 [ 718.513439][ T5611] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 718.536118][ T5611] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 718.626064][ T5611] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 718.677325][ T5611] usb 5-1: USB disconnect, device number 17 [ 718.957663][T11843] usb usb8: check_ctrlrecip: process 11843 (syz.1.1386) requesting ep 01 but needs 81 [ 719.030053][T11843] usb usb8: usbfs: process 11843 (syz.1.1386) did not claim interface 0 before use [ 719.643744][ T5611] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 719.824008][ T5611] usb 5-1: Using ep0 maxpacket: 32 [ 719.847044][ T5611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 719.880277][ T5611] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 719.901867][ T29] audit: type=1400 audit(1785227004.615:1433): avc: denied { execute } for pid=11855 comm="syz.0.1394" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 719.964493][ T29] audit: type=1400 audit(1785227004.675:1434): avc: denied { read } for pid=11854 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 719.986907][ T5611] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 720.008425][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.060671][ T5611] usb 5-1: Product: syz [ 720.084533][ T5611] usb 5-1: Manufacturer: syz [ 720.090132][ T5611] usb 5-1: SerialNumber: syz [ 720.157693][T11859] kvm: pic: non byte read [ 720.160510][ T5611] usb 5-1: config 0 descriptor?? [ 720.168291][T11859] kvm: pic: non byte read [ 720.191878][T11859] kvm: pic: level sensitive irq not supported [ 720.191946][T11859] kvm: pic: non byte read [ 720.217575][T11859] kvm: pic: level sensitive irq not supported [ 720.217632][T11859] kvm: pic: non byte read [ 720.218440][ T5611] hub 5-1:0.0: bad descriptor, ignoring hub [ 720.230642][T11859] kvm: pic: level sensitive irq not supported [ 720.236084][ T5611] hub 5-1:0.0: probe with driver hub failed with error -5 [ 720.244160][T11859] kvm: pic: non byte read [ 720.263635][ T5611] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input21 [ 720.285371][T11859] kvm: pic: level sensitive irq not supported [ 720.285433][T11859] kvm: pic: non byte read [ 720.307248][T11859] kvm: pic: level sensitive irq not supported [ 720.310179][T11859] kvm: pic: non byte read [ 720.345037][T11859] kvm: pic: level sensitive irq not supported [ 720.345092][T11859] kvm: pic: non byte read [ 720.370667][T11859] kvm: pic: level sensitive irq not supported [ 720.370731][T11859] kvm: pic: non byte read [ 720.397002][ T5611] usbtouchscreen 5-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 720.397377][T11859] kvm: pic: level sensitive irq not supported [ 720.434556][ T29] audit: type=1400 audit(1785227005.145:1435): avc: denied { map } for pid=11849 comm="syz.4.1391" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 720.465855][T11859] kvm: pic: non byte read [ 720.466075][T11859] kvm: pic: level sensitive irq not supported [ 720.466289][T11859] kvm: pic: level sensitive irq not supported [ 720.505270][ T5611] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 721.081178][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 721.125381][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 721.168065][T11880] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1400'. [ 721.241395][T11880] bond20: entered promiscuous mode [ 721.257191][T11880] bond20: entered allmulticast mode [ 721.327488][T11883] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 721.334019][T11883] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 721.473441][T10965] usb 5-1: USB disconnect, device number 18 [ 721.623782][T11883] vhci_hcd vhci_hcd.0: Device attached [ 721.933333][ T5611] usb 34-1: SetAddress Request (6) to port 0 [ 722.145930][ T5611] usb 34-1: new SuperSpeed USB device number 6 using vhci_hcd [ 723.383100][ T5729] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 723.425490][ T7592] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 723.434915][ T7592] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 723.466113][T11884] vhci_hcd: connection reset by peer [ 723.476453][ T7583] vhci_hcd vhci_hcd.0: stop threads [ 723.481794][ T7583] vhci_hcd vhci_hcd.0: release socket [ 723.487618][ T7583] vhci_hcd vhci_hcd.0: disconnect device [ 723.545736][ T5729] usb 7-1: config 0 has an invalid interface number: 133 but max is 0 [ 723.555510][ T5729] usb 7-1: config 0 has no interface number 0 [ 723.584705][T11079] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 723.650984][ T5729] usb 7-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 723.665382][ T5729] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.685008][ T5729] usb 7-1: Product: syz [ 723.764209][T11079] usb 6-1: Using ep0 maxpacket: 32 [ 723.946674][ T5729] usb 7-1: Manufacturer: syz [ 723.952555][ T5729] usb 7-1: SerialNumber: syz [ 723.976651][T11079] usb 6-1: config 8 has an invalid descriptor of length 1, skipping remainder of the config [ 723.997230][T11079] usb 6-1: config 8 has no interfaces? [ 724.021208][ T5729] usb 7-1: config 0 descriptor?? [ 724.032000][T11079] usb 6-1: language id specifier not provided by device, defaulting to English [ 724.054890][T11079] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.065170][T11079] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.073399][T11079] usb 6-1: Product: syz [ 724.077664][T11079] usb 6-1: SerialNumber: syz [ 724.237677][ T5729] keyspan 7-1:0.133: Keyspan 1 port adapter converter detected [ 724.248443][ T5729] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 81 [ 724.278845][ T5729] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 1 [ 724.324081][ T5729] keyspan 7-1:0.133: found no endpoint descriptor for endpoint 2 [ 724.361502][T11079] usb 6-1: USB disconnect, device number 7 [ 724.372960][ T5729] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 724.523301][ T6507] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 724.704957][T10965] usb 7-1: USB disconnect, device number 7 [ 724.728178][ T6507] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 724.745834][ T6507] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 724.772905][T10965] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 724.774447][ T6507] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.795199][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 724.795226][ T29] audit: type=1400 audit(1785227009.515:1437): avc: denied { sys_module } for pid=11923 comm="syz.0.1414" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 724.826252][T10965] keyspan 7-1:0.133: device disconnected [ 724.840645][ T6507] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 724.854212][ T6507] usb 2-1: Product: syz [ 724.858766][ T6507] usb 2-1: Manufacturer: syz [ 724.864305][ T6507] usb 2-1: SerialNumber: syz [ 724.878822][ T6507] cdc_mbim 2-1:1.0: skipping garbage [ 725.086066][T11918] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 725.938070][T11918] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 726.009187][ T6507] cdc_mbim 2-1:1.0: setting tx_max = 48 [ 726.037795][ T6507] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 726.077830][ T6507] wwan wwan0: port wwan0mbim0 attached [ 726.838302][ T29] audit: type=1400 audit(1785227011.555:1438): avc: denied { call } for pid=11943 comm="syz.1.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 726.859539][T11944] binder: 11943:11944 ioctl c0306201 200000000680 returned -14 [ 726.881728][ T29] audit: type=1400 audit(1785227011.575:1439): avc: denied { transfer } for pid=11943 comm="syz.1.1418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 727.837929][ T29] audit: type=1400 audit(1785227012.545:1440): avc: denied { append } for pid=11961 comm="syz.6.1423" name="usbmon9" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 728.127076][ T5611] usb 34-1: device descriptor read/8, error -110 [ 728.654440][ T5611] usb usb34-port1: attempt power cycle [ 728.686544][ T29] audit: type=1400 audit(1785227013.405:1441): avc: denied { setopt } for pid=11967 comm="syz.5.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 729.021336][T11973] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 729.027881][T11973] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 729.056285][T11973] vhci_hcd vhci_hcd.0: Device attached [ 729.383135][T10697] usb 46-1: SetAddress Request (3) to port 0 [ 729.453528][ T29] audit: type=1400 audit(1785227014.175:1442): avc: denied { search } for pid=11980 comm="syz.5.1428" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 729.499056][T10697] usb 46-1: new SuperSpeed USB device number 3 using vhci_hcd [ 729.509170][ T5611] usb usb34-port1: unable to enumerate USB device [ 729.539665][ T29] audit: type=1400 audit(1785227014.175:1443): avc: denied { write } for pid=11980 comm="syz.5.1428" name="free_buffer" dev="tracefs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 729.604009][ T29] audit: type=1400 audit(1785227014.175:1444): avc: denied { open } for pid=11980 comm="syz.5.1428" path="/141/tracefs_dir/free_buffer" dev="tracefs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 729.796331][ T29] audit: type=1400 audit(1785227014.195:1445): avc: denied { search } for pid=11980 comm="syz.5.1428" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 730.122193][T11976] vhci_hcd: connection reset by peer [ 730.259465][ T29] audit: type=1400 audit(1785227014.195:1446): avc: denied { read } for pid=11980 comm="syz.5.1428" name="trace" dev="tracefs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 730.352826][ T7592] vhci_hcd vhci_hcd.6: stop threads [ 730.438963][ T7592] vhci_hcd vhci_hcd.6: release socket [ 730.645278][ T7592] vhci_hcd vhci_hcd.6: disconnect device [ 730.702361][ T6507] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 0a:7e:11:1f:7e:4e [ 730.772024][ T6507] usb 2-1: USB disconnect, device number 11 [ 730.785753][ T6507] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 730.962058][ T6507] wwan wwan0: port wwan0mbim0 disconnected [ 732.375019][ T29] audit: type=1400 audit(1785227017.095:1447): avc: denied { read } for pid=5271 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 733.469645][ T29] audit: type=1400 audit(1785227018.185:1448): avc: denied { create } for pid=12032 comm="syz.6.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 733.570135][ T29] audit: type=1400 audit(1785227018.265:1449): avc: denied { write } for pid=12032 comm="syz.6.1443" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 734.876574][T10697] usb 46-1: device descriptor read/8, error -110 [ 735.440173][T10697] usb usb46-port1: attempt power cycle [ 736.607259][T10697] usb usb46-port1: unable to enumerate USB device [ 736.609344][ T29] audit: type=1400 audit(1785227021.325:1450): avc: denied { relabelfrom } for pid=12055 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 736.748708][ T29] audit: type=1400 audit(1785227021.375:1451): avc: denied { relabelto } for pid=12055 comm="syz.1.1448" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 736.846484][ T5619] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 739.524828][ T29] audit: type=1400 audit(1785227024.185:1452): avc: denied { read } for pid=12082 comm="syz.5.1457" name="g1" dev="configfs" ino=11247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 739.903889][ T29] audit: type=1400 audit(1785227024.185:1453): avc: denied { read open } for pid=12082 comm="syz.5.1457" path="/150/my_configfs/usb_gadget/g1" dev="configfs" ino=11247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 740.118636][ T29] audit: type=1400 audit(1785227024.455:1454): avc: denied { write } for pid=12082 comm="syz.5.1457" name="functions" dev="configfs" ino=11248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 742.576431][T12120] syzkaller0: entered promiscuous mode [ 742.607367][T12120] syzkaller0: entered allmulticast mode [ 742.721305][ T29] audit: type=1400 audit(1785227027.435:1455): avc: denied { read write } for pid=12117 comm="syz.6.1465" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 742.763171][ T29] audit: type=1400 audit(1785227027.465:1456): avc: denied { open } for pid=12117 comm="syz.6.1465" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 742.814079][T10697] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 742.825649][T10697] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 742.927747][T10697] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz0] on syz0 [ 743.035368][ T29] audit: type=1400 audit(1785227027.755:1457): avc: denied { bind } for pid=12126 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 743.084749][ T29] audit: type=1400 audit(1785227027.785:1458): avc: denied { listen } for pid=12126 comm="syz.0.1469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 743.156640][T12125] fido_id[12125]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 743.264813][T12131] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1470'. [ 743.993964][T12139] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1470'. [ 744.236908][T12131] bond6: entered promiscuous mode [ 744.386209][T12131] bond6: entered allmulticast mode [ 747.638868][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.645400][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.891486][T12177] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1454'. [ 749.444585][T12188] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1454'. [ 749.667574][T12186] bond21: entered promiscuous mode [ 749.720355][T12186] bond21: entered allmulticast mode [ 750.124071][T12199] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'. [ 750.136007][T12203] netlink: 16215 bytes leftover after parsing attributes in process `syz.1.1484'. [ 750.322051][ T5619] block nbd37: Receive control failed (result -32) [ 755.395919][T12256] syzkaller0: entered promiscuous mode [ 755.414631][T12256] syzkaller0: entered allmulticast mode [ 760.875889][ T29] audit: type=1400 audit(1785227045.515:1459): avc: denied { create } for pid=12294 comm="syz.0.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 761.026289][ T29] audit: type=1400 audit(1785227045.525:1460): avc: denied { write } for pid=12294 comm="syz.0.1506" path="socket:[38965]" dev="sockfs" ino=38965 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 762.744842][ T29] audit: type=1400 audit(1785227047.465:1461): avc: denied { listen } for pid=12308 comm="syz.0.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 762.774129][ T29] audit: type=1400 audit(1785227047.485:1462): avc: denied { accept } for pid=12308 comm="syz.0.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 762.815285][T12315] tipc: Started in network mode [ 762.828138][T12315] tipc: Node identity f2c04ed57657, cluster identity 4711 [ 762.859856][T12315] tipc: Enabled bearer , priority 0 [ 762.886585][T12315] syzkaller0: entered promiscuous mode [ 762.911254][T12315] syzkaller0: entered allmulticast mode [ 763.063684][T12315] tipc: Resetting bearer [ 763.091880][T12322] kvm: pic: non byte write [ 763.101658][T12314] tipc: Resetting bearer [ 763.207415][T12314] tipc: Disabling bearer [ 764.279862][T12340] binder_alloc: 12339: binder_alloc_buf, no vma [ 764.412648][ T29] audit: type=1400 audit(1785227049.125:1463): avc: denied { setopt } for pid=12344 comm="syz.5.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 765.017648][ T29] audit: type=1400 audit(1785227049.395:1464): avc: denied { listen } for pid=12344 comm="syz.5.1519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 773.432052][ T7592] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xdd [ 774.178822][ T29] audit: type=1400 audit(1785227058.895:1465): avc: denied { search } for pid=12436 comm="syz.6.1543" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 774.209816][ T29] audit: type=1400 audit(1785227058.895:1466): avc: denied { read } for pid=12436 comm="syz.6.1543" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 774.337195][T12437] svc: failed to register nfsdv3 RPC service (errno 101). [ 774.341389][ T29] audit: type=1400 audit(1785227058.895:1467): avc: denied { search } for pid=12436 comm="syz.6.1543" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 774.357698][T12441] syzkaller0: entered promiscuous mode [ 774.373727][T12437] svc: failed to register nfsaclv3 RPC service (errno 101). [ 774.409778][T12441] syzkaller0: entered allmulticast mode [ 774.606587][T12438] NFSD: Failed to start, no listeners configured. [ 776.236274][T12424] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 779.338035][ T29] audit: type=1800 audit(1785227064.055:1468): pid=12490 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.1555" name="/" dev="fuse" ino=1 res=0 errno=0 [ 779.457868][T12492] syzkaller0: create flow: hash 877853517 index 1 [ 779.498407][T12470] ubi: mtd0 is already attached to ubi0 [ 783.393060][ C1] syzkaller0: delete flow: hash 877853517 index 1 [ 784.982556][T12542] ubi: mtd0 is already attached to ubi0 [ 785.311659][T12558] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3955177677 (7910355354 ns) > initial count (350 ns). Using initial count to start timer. [ 791.310204][ T29] audit: type=1400 audit(1785227076.015:1469): avc: denied { write } for pid=12593 comm="syz.6.1576" name="functions" dev="configfs" ino=11248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 791.394667][ T29] audit: type=1400 audit(1785227076.085:1470): avc: denied { write } for pid=12593 comm="syz.6.1576" name="c.1" dev="configfs" ino=16421 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 792.317759][ T29] audit: type=1400 audit(1785227077.035:1471): avc: denied { write } for pid=12600 comm="syz.6.1578" name="functions" dev="configfs" ino=11248 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 792.599963][T12605] netlink: 16215 bytes leftover after parsing attributes in process `syz.0.1579'. [ 792.720264][T12603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1579'. [ 793.217435][T12601] udc dummy_udc.0: failed to start g1: -4 [ 793.243366][T12601] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -4 [ 793.258682][T12601] UDC core: g1: couldn't find an available UDC or it's busy [ 793.325373][ T5619] block nbd38: Receive control failed (result -32) [ 796.320826][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 796.349042][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 796.380991][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 796.454257][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 796.501662][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 798.588404][T12636] ubi: mtd0 is already attached to ubi0 [ 798.596855][ T5619] Bluetooth: hci2: command tx timeout [ 799.103243][T12605] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 800.411223][ T29] audit: type=1400 audit(1785227085.125:1472): avc: denied { mount } for pid=12654 comm="syz.5.1591" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 800.449794][T12654] FAULT_INJECTION: forcing a failure. [ 800.449794][T12654] name failslab, interval 1, probability 100, space 0, times 1 [ 800.466388][ T7580] FAULT_INJECTION: forcing a failure. [ 800.466388][ T7580] name failslab, interval 1, probability 100, space 0, times 1 [ 800.473398][ T7608] FAULT_INJECTION: forcing a failure. [ 800.473398][ T7608] name failslab, interval 1, probability 100, space 0, times 1 [ 800.481411][ T9477] FAULT_INJECTION: forcing a failure. [ 800.481411][ T9477] name failslab, interval 1, probability 100, space 0, times 1 [ 800.507391][ C0] FAULT_INJECTION: forcing a failure. [ 800.507391][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 800.507453][ C0] CPU: 0 UID: 0 PID: 9477 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.507477][ C0] Tainted: [L]=SOFTLOCKUP [ 800.507483][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 800.507492][ C0] Workqueue: events vidtv_mux_tick [ 800.507512][ C0] Call Trace: [ 800.507517][ C0] [ 800.507522][ C0] dump_stack_lvl+0x100/0x190 [ 800.507537][ C0] should_fail_ex.cold+0x5/0xa [ 800.507552][ C0] should_failslab+0xc2/0x120 [ 800.507567][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 800.507581][ C0] ? __alloc_skb+0x140/0x710 [ 800.507596][ C0] __alloc_skb+0x140/0x710 [ 800.507608][ C0] ? __alloc_skb+0x5b7/0x710 [ 800.507619][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 800.507632][ C0] ? lock_acquire+0x1b9/0x370 [ 800.507648][ C0] __netdev_alloc_skb+0x7a/0x960 [ 800.507662][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 800.507679][ C0] ? do_raw_spin_lock+0x128/0x260 [ 800.507696][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 800.507711][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 800.507728][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 800.507747][ C0] __iterate_interfaces+0x2e6/0x650 [ 800.507760][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 800.507775][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 800.507789][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 800.507804][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 800.507822][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 800.507839][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 800.507861][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 800.507878][ C0] handle_softirqs+0x1ea/0x9b0 [ 800.507900][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 800.507914][ C0] ? _raw_spin_unlock+0x28/0x50 [ 800.507932][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 800.507944][ C0] __irq_exit_rcu+0x162/0x210 [ 800.507958][ C0] irq_exit_rcu+0x9/0x30 [ 800.507971][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 800.507983][ C0] [ 800.507987][ C0] [ 800.507991][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 800.508004][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 800.508022][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 800.508032][ C0] RSP: 0018:ffffc90007d3f3e0 EFLAGS: 00000293 [ 800.508041][ C0] RAX: ffffffff8f9acb98 RBX: ffffffff8f9acb40 RCX: ffffffff81e88a01 [ 800.508048][ C0] RDX: ffff888020348000 RSI: ffffffff81e88a0f RDI: ffff888020348000 [ 800.508055][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 800.508061][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 000000000000154f [ 800.508067][ C0] R13: ffffffff8f9acb98 R14: ffffc90007d3f460 R15: dffffc0000000000 [ 800.508078][ C0] ? console_flush_one_record+0xab1/0xe50 [ 800.508094][ C0] ? console_flush_one_record+0xabf/0xe50 [ 800.508115][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 800.508131][ C0] ? check_prev_add+0x354/0xe60 [ 800.508147][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 800.508160][ C0] console_unlock+0x103/0x260 [ 800.508176][ C0] ? __pfx_console_unlock+0x10/0x10 [ 800.508192][ C0] ? lock_acquire+0x100/0x370 [ 800.508207][ C0] ? vprintk_emit+0x66a/0x6b0 [ 800.508225][ C0] vprintk_emit+0x407/0x6b0 [ 800.508242][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 800.508262][ C0] _printk+0xcf/0x110 [ 800.508272][ C0] ? __pfx__printk+0x10/0x10 [ 800.508285][ C0] ? __pfx____ratelimit+0x10/0x10 [ 800.508300][ C0] should_fail_ex+0x4e4/0x640 [ 800.508317][ C0] should_failslab+0xc2/0x120 [ 800.508331][ C0] __kmalloc_cache_noprof+0x91/0x6c0 [ 800.508349][ C0] ? vidtv_s302m_encode+0x1c3/0x1860 [ 800.508365][ C0] vidtv_s302m_encode+0x1c3/0x1860 [ 800.508378][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 800.508396][ C0] ? vidtv_memset+0x50/0x90 [ 800.508407][ C0] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 800.508419][ C0] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 800.508434][ C0] ? memset_orig+0x36/0xb0 [ 800.508449][ C0] vidtv_mux_tick+0x4e4/0x1460 [ 800.508473][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 800.508488][ C0] ? __lock_acquire+0x49f/0x1a40 [ 800.508507][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 800.508522][ C0] process_one_work+0xa23/0x1940 [ 800.508539][ C0] ? __pfx_process_one_work+0x10/0x10 [ 800.508555][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 800.508570][ C0] worker_thread+0x5ef/0xe50 [ 800.508585][ C0] ? __pfx_worker_thread+0x10/0x10 [ 800.508597][ C0] ? kthread+0x13a/0x450 [ 800.508607][ C0] ? __pfx_worker_thread+0x10/0x10 [ 800.508618][ C0] kthread+0x370/0x450 [ 800.508628][ C0] ? __pfx_kthread+0x10/0x10 [ 800.508639][ C0] ret_from_fork+0x72b/0xd50 [ 800.508656][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 800.508672][ C0] ? __switch_to+0x800/0x10f0 [ 800.508683][ C0] ? __pfx_kthread+0x10/0x10 [ 800.508695][ C0] ret_from_fork_asm+0x1a/0x30 [ 800.508717][ C0] [ 800.650037][ T7580] CPU: 1 UID: 0 PID: 7580 Comm: kworker/u8:42 Tainted: G L syzkaller #0 PREEMPT(full) [ 800.650065][ T7580] Tainted: [L]=SOFTLOCKUP [ 800.650070][ T7580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 800.650080][ T7580] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 800.650105][ T7580] Call Trace: [ 800.650111][ T7580] [ 800.650117][ T7580] dump_stack_lvl+0x100/0x190 [ 800.650138][ T7580] should_fail_ex.cold+0x5/0xa [ 800.650154][ T7580] ? try_to_wake_up+0x158/0x1c90 [ 800.650178][ T7580] should_failslab+0xc2/0x120 [ 800.650199][ T7580] kmem_cache_alloc_noprof+0x91/0x6a0 [ 800.650216][ T7580] ? lockdep_hardirqs_on+0x78/0x100 [ 800.650234][ T7580] ? skb_clone+0x190/0x400 [ 800.650256][ T7580] skb_clone+0x190/0x400 [ 800.650276][ T7580] batadv_iv_send_outstanding_bat_ogm_packet+0x650/0x800 [ 800.650303][ T7580] process_one_work+0xa23/0x1940 [ 800.650330][ T7580] ? __pfx_process_one_work+0x10/0x10 [ 800.650353][ T7580] ? __pfx_batadv_iv_send_outstanding_bat_ogm_packet+0x10/0x10 [ 800.650375][ T7580] worker_thread+0x5ef/0xe50 [ 800.650405][ T7580] ? kthread+0x13a/0x450 [ 800.650419][ T7580] ? __pfx_worker_thread+0x10/0x10 [ 800.650434][ T7580] kthread+0x370/0x450 [ 800.650449][ T7580] ? __pfx_kthread+0x10/0x10 [ 800.650465][ T7580] ret_from_fork+0x72b/0xd50 [ 800.650488][ T7580] ? __pfx_ret_from_fork+0x10/0x10 [ 800.650510][ T7580] ? __switch_to+0x800/0x10f0 [ 800.650526][ T7580] ? __pfx_kthread+0x10/0x10 [ 800.650542][ T7580] ret_from_fork_asm+0x1a/0x30 [ 800.650575][ T7580] [ 801.362011][ T7608] CPU: 0 UID: 0 PID: 7608 Comm: kworker/u8:70 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.362041][ T7608] Tainted: [L]=SOFTLOCKUP [ 801.362047][ T7608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.362061][ T7608] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 801.362091][ T7608] Call Trace: [ 801.362097][ T7608] [ 801.362104][ T7608] dump_stack_lvl+0x100/0x190 [ 801.362127][ T7608] should_fail_ex.cold+0x5/0xa [ 801.362148][ T7608] should_failslab+0xc2/0x120 [ 801.362172][ T7608] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.362193][ T7608] ? __alloc_skb+0x140/0x710 [ 801.362217][ T7608] __alloc_skb+0x140/0x710 [ 801.362234][ T7608] ? __alloc_skb+0x5b7/0x710 [ 801.362252][ T7608] ? __pfx___alloc_skb+0x10/0x10 [ 801.362278][ T7608] wg_socket_send_buffer_to_peer+0x38/0x1a0 [ 801.362308][ T7608] wg_packet_send_handshake_initiation+0x227/0x360 [ 801.362336][ T7608] ? __pfx_wg_packet_send_handshake_initiation+0x10/0x10 [ 801.362378][ T7608] ? rcu_is_watching+0x12/0xc0 [ 801.362410][ T7608] wg_packet_handshake_send_worker+0x1c/0x30 [ 801.362436][ T7608] process_one_work+0xa23/0x1940 [ 801.362464][ T7608] ? __pfx_process_one_work+0x10/0x10 [ 801.362490][ T7608] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 801.362519][ T7608] worker_thread+0x5ef/0xe50 [ 801.362546][ T7608] ? kthread+0x13a/0x450 [ 801.362561][ T7608] ? __pfx_worker_thread+0x10/0x10 [ 801.362577][ T7608] kthread+0x370/0x450 [ 801.362593][ T7608] ? __pfx_kthread+0x10/0x10 [ 801.362610][ T7608] ret_from_fork+0x72b/0xd50 [ 801.362634][ T7608] ? __pfx_ret_from_fork+0x10/0x10 [ 801.362665][ T7608] ? __switch_to+0x800/0x10f0 [ 801.362682][ T7608] ? __pfx_kthread+0x10/0x10 [ 801.362700][ T7608] ret_from_fork_asm+0x1a/0x30 [ 801.362735][ T7608] [ 801.556036][T12654] CPU: 0 UID: 0 PID: 12654 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.556065][T12654] Tainted: [L]=SOFTLOCKUP [ 801.556070][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.556080][T12654] Call Trace: [ 801.556086][T12654] [ 801.556092][T12654] dump_stack_lvl+0x100/0x190 [ 801.556119][T12654] should_fail_ex.cold+0x5/0xa [ 801.556141][T12654] should_failslab+0xc2/0x120 [ 801.556163][T12654] kmem_cache_alloc_noprof+0x91/0x6a0 [ 801.556185][T12654] ? jbd2__journal_start+0x194/0x6a0 [ 801.556212][T12654] jbd2__journal_start+0x194/0x6a0 [ 801.556237][T12654] __ext4_journal_start_sb+0x367/0x670 [ 801.556263][T12654] ? ext4_dirty_inode+0xa1/0x130 [ 801.556282][T12654] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 801.556299][T12654] ext4_dirty_inode+0xa1/0x130 [ 801.556316][T12654] ? rcu_is_watching+0x12/0xc0 [ 801.556341][T12654] __mark_inode_dirty+0x1f3/0x16e0 [ 801.556371][T12654] file_update_time_flags+0x46b/0x500 [ 801.556402][T12654] ext4_page_mkwrite+0x324/0x1850 [ 801.556426][T12654] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 801.556451][T12654] do_page_mkwrite+0x17a/0x440 [ 801.556473][T12654] ? __pfx_filemap_map_pages+0x10/0x10 [ 801.556497][T12654] do_fault+0x3b5/0x1750 [ 801.556523][T12654] __handle_mm_fault+0x187d/0x2a00 [ 801.556554][T12654] ? reacquire_held_locks+0xce/0x1e0 [ 801.556576][T12654] ? __pfx___handle_mm_fault+0x10/0x10 [ 801.556621][T12654] handle_mm_fault+0x37b/0xa30 [ 801.556652][T12654] do_user_addr_fault+0x5a3/0x12f0 [ 801.556684][T12654] exc_page_fault+0x6f/0xd0 [ 801.556703][T12654] asm_exc_page_fault+0x26/0x30 [ 801.556721][T12654] RIP: 0033:0x7fb284e72d52 [ 801.556735][T12654] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 13 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 801.556751][T12654] RSP: 002b:00007fff937b1af0 EFLAGS: 00010202 [ 801.556765][T12654] RAX: 000000000000d008 RBX: 00007fb285d55720 RCX: 0000000000000000 [ 801.556775][T12654] RDX: 0000001b31b17000 RSI: 0000000000000008 RDI: 00007fb285d55720 [ 801.556785][T12654] RBP: 00000000000000f6 R08: 00007fb285210000 R09: 00007fb285226038 [ 801.556794][T12654] R10: 0000000000000003 R11: 0000000000000005 R12: ffffffff851eae23 [ 801.556806][T12654] R13: 00007fb285226038 R14: 0000000000000017 R15: ffffffffffff3000 [ 801.556818][T12654] ? _parse_integer_fixup_radix+0x13/0x2b0 [ 801.556846][T12654] [ 801.557591][T12655] FAULT_INJECTION: forcing a failure. [ 801.557591][T12655] name failslab, interval 1, probability 100, space 0, times 100 [ 801.620190][ C1] FAULT_INJECTION: forcing a failure. [ 801.620190][ C1] name failslab, interval 1, probability 100, space 0, times 100 [ 801.620989][ C0] FAULT_INJECTION: forcing a failure. [ 801.620989][ C0] name failslab, interval 1, probability 100, space 0, times 100 [ 801.621017][ C0] CPU: 0 UID: 0 PID: 12655 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.621042][ C0] Tainted: [L]=SOFTLOCKUP [ 801.621047][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.621056][ C0] Call Trace: [ 801.621063][ C0] [ 801.621070][ C0] dump_stack_lvl+0x100/0x190 [ 801.621095][ C0] should_fail_ex.cold+0x5/0xa [ 801.621116][ C0] should_failslab+0xc2/0x120 [ 801.621138][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.621157][ C0] ? __alloc_skb+0x5b7/0x710 [ 801.621175][ C0] ? __alloc_skb+0x140/0x710 [ 801.621196][ C0] __alloc_skb+0x140/0x710 [ 801.621213][ C0] ? __alloc_skb+0x5b7/0x710 [ 801.621230][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 801.621249][ C0] ? lock_acquire+0x1b9/0x370 [ 801.621272][ C0] __netdev_alloc_skb+0x7a/0x960 [ 801.621294][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 801.621318][ C0] ? __lock_acquire+0x49f/0x1a40 [ 801.621339][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 801.621360][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 801.621392][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 801.621421][ C0] __iterate_interfaces+0x2e6/0x650 [ 801.621439][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.621461][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.621481][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 801.621504][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 801.621529][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 801.621553][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 801.621585][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 801.621611][ C0] handle_softirqs+0x1ea/0x9b0 [ 801.621635][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 801.621656][ C0] ? _raw_spin_unlock+0x28/0x50 [ 801.621679][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 801.621697][ C0] __irq_exit_rcu+0x162/0x210 [ 801.621717][ C0] irq_exit_rcu+0x9/0x30 [ 801.621735][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 801.621753][ C0] [ 801.621757][ C0] [ 801.621763][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.621781][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 801.621807][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 801.621821][ C0] RSP: 0018:ffffc90006a778f8 EFLAGS: 00000287 [ 801.621835][ C0] RAX: ffffffff8f9acb98 RBX: ffffffff8f9acb40 RCX: ffffc9001caf9000 [ 801.621845][ C0] RDX: 0000000000080000 RSI: ffffffff81e88a0f RDI: ffff88807ba5ca80 [ 801.621855][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 801.621864][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 00000000000015f3 [ 801.621873][ C0] R13: ffffffff8f9acb98 R14: ffffc90006a77978 R15: dffffc0000000000 [ 801.621890][ C0] ? console_flush_one_record+0xabf/0xe50 [ 801.621916][ C0] ? console_flush_one_record+0xabf/0xe50 [ 801.621943][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 801.621965][ C0] ? __lock_acquire+0x49f/0x1a40 [ 801.621990][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 801.622009][ C0] console_unlock+0x103/0x260 [ 801.622032][ C0] ? __pfx_console_unlock+0x10/0x10 [ 801.622060][ C0] ? _printk+0xcf/0x110 [ 801.622078][ C0] vprintk_emit+0x407/0x6b0 [ 801.622102][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 801.622125][ C0] ? futex_hash+0x311/0x400 [ 801.622149][ C0] _printk+0xcf/0x110 [ 801.622164][ C0] ? __pfx__printk+0x10/0x10 [ 801.622184][ C0] ? __pfx____ratelimit+0x10/0x10 [ 801.622205][ C0] should_fail_ex+0x4e4/0x640 [ 801.622229][ C0] should_failslab+0xc2/0x120 [ 801.622249][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 801.622268][ C0] ? do_getname+0x35/0x390 [ 801.622291][ C0] do_getname+0x35/0x390 [ 801.622313][ C0] do_sys_openat2+0xc7/0x1e0 [ 801.622333][ C0] ? __pfx_do_sys_openat2+0x10/0x10 [ 801.622353][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 801.622379][ C0] __x64_sys_openat+0x12d/0x210 [ 801.622404][ C0] ? __pfx___x64_sys_openat+0x10/0x10 [ 801.622432][ C0] do_syscall_64+0x115/0x870 [ 801.622450][ C0] ? clear_bhb_loop+0x40/0x90 [ 801.622468][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.622485][ C0] RIP: 0033:0x7fb284f9de99 [ 801.622498][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.622513][ C0] RSP: 002b:00007fb285e00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 801.622527][ C0] RAX: ffffffffffffffda RBX: 00007fb285225fa0 RCX: 00007fb284f9de99 [ 801.622537][ C0] RDX: 0000000000000001 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 801.622547][ C0] RBP: 00007fb285033eaf R08: 0000000000000000 R09: 0000000000000000 [ 801.622556][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.622565][ C0] R13: 00007fb285226038 R14: 00007fb285225fa0 R15: 00007fff937b1a98 [ 801.622587][ C0] [ 801.622604][ C0] FAULT_INJECTION: forcing a failure. [ 801.622604][ C0] name failslab, interval 1, probability 100, space 0, times 99 [ 801.626899][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.626923][ C1] Tainted: [L]=SOFTLOCKUP [ 801.626928][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.626937][ C1] Call Trace: [ 801.626943][ C1] [ 801.626948][ C1] dump_stack_lvl+0x100/0x190 [ 801.626968][ C1] should_fail_ex.cold+0x5/0xa [ 801.626987][ C1] should_failslab+0xc2/0x120 [ 801.627007][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.627026][ C1] ? __alloc_skb+0x5b7/0x710 [ 801.627043][ C1] ? __alloc_skb+0x140/0x710 [ 801.627064][ C1] __alloc_skb+0x140/0x710 [ 801.627080][ C1] ? __alloc_skb+0x5b7/0x710 [ 801.627097][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 801.627115][ C1] ? lock_acquire+0x1b9/0x370 [ 801.627137][ C1] __netdev_alloc_skb+0x7a/0x960 [ 801.627159][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 801.627180][ C1] ? __lock_acquire+0x49f/0x1a40 [ 801.627202][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 801.627223][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 801.627249][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 801.627276][ C1] __iterate_interfaces+0x2e6/0x650 [ 801.627294][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.627316][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.627336][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 801.627358][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 801.627383][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 801.627407][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 801.627438][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 801.627464][ C1] handle_softirqs+0x1ea/0x9b0 [ 801.627487][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 801.627507][ C1] ? _raw_spin_unlock+0x28/0x50 [ 801.627529][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 801.627547][ C1] __irq_exit_rcu+0x162/0x210 [ 801.627567][ C1] irq_exit_rcu+0x9/0x30 [ 801.627585][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 801.627602][ C1] [ 801.627607][ C1] [ 801.627613][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.627630][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 801.627647][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 801.627660][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000242 [ 801.627672][ C1] RAX: 000000000551b945 RBX: ffff88801eac2540 RCX: ffffffff8bbb22d5 [ 801.627682][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 801.627692][ C1] RBP: ffffed1003d584a8 R08: 0000000000000001 R09: ffffed10170a678d [ 801.627702][ C1] R10: ffff8880b8533c6b R11: 0000000000000000 R12: 0000000000000000 [ 801.627711][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 801.627727][ C1] ? ct_kernel_exit+0x125/0x180 ** 33 printk messages dropped ** [ 801.631878][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 ** 75 printk messages dropped ** [ 801.637644][ C1] ? lock_acquire+0x1b9/0x370 ** 90 printk messages dropped ** [ 801.742123][ C0] R13: ffffffff8f9acb98 R14: ffffc90006a77978 R15: dffffc0000000000 ** 61 printk messages dropped ** [ 801.749454][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 801.749477][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 801.749501][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 801.749525][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 801.749557][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 801.749582][ C1] handle_softirqs+0x1ea/0x9b0 [ 801.749605][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 801.749625][ C1] ? _raw_spin_unlock+0x28/0x50 [ 801.749647][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 801.749665][ C1] __irq_exit_rcu+0x162/0x210 [ 801.749685][ C1] irq_exit_rcu+0x9/0x30 [ 801.749704][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 801.749721][ C1] ** 98 printk messages dropped ** [ 801.758100][ C0] RSP: 002b:00007fb285e00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 ** 55 printk messages dropped ** [ 801.765402][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 ** 1 printk messages dropped ** [ 801.765456][ C1] __iterate_interfaces+0x2e6/0x650 ** 61 printk messages dropped ** [ 801.773839][ C0] ? rcu_is_watching+0x12/0xc0 [ 801.773865][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 801.773885][ C0] __run_timers+0x757/0xb00 [ 801.773909][ C0] ? __pfx___run_timers+0x10/0x10 [ 801.773934][ C0] ? ktime_get+0x9f/0x320 [ 801.773952][ C0] ? _raw_spin_lock_irq+0x45/0x50 ** 43 printk messages dropped ** [ 801.783419][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 ** 114 printk messages dropped ** [ 801.796847][ C1] ? _raw_spin_lock_irq+0x45/0x50 ** 1 printk messages dropped ** [ 801.796897][ C1] ? __pfx_run_timer_base+0x10/0x10 ** 413 printk messages dropped ** [ 801.831753][ C1] ? _raw_spin_unlock+0x28/0x50 ** 92 printk messages dropped ** [ 801.833408][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001612 ** 45 printk messages dropped ** [ 801.834398][ C0] RSP: 002b:00007fff937b1af0 EFLAGS: 00010202 ** 12 printk messages dropped ** [ 801.846710][ T7591] Call Trace: ** 12 printk messages dropped ** [ 801.846945][ T7591] process_one_work+0xa23/0x1940 [ 801.846971][ T7591] ? __pfx_process_one_work+0x10/0x10 [ 801.846994][ T7591] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.847016][ T7591] worker_thread+0x5ef/0xe50 [ 801.847041][ T7591] ? kthread+0x13a/0x450 [ 801.847055][ T7591] ? __pfx_worker_thread+0x10/0x10 [ 801.847071][ T7591] kthread+0x370/0x450 [ 801.847085][ T7591] ? __pfx_kthread+0x10/0x10 [ 801.847101][ T7591] ret_from_fork+0x72b/0xd50 [ 801.847123][ T7591] ? __pfx_ret_from_fork+0x10/0x10 [ 801.847146][ T7591] ? __switch_to+0x800/0x10f0 [ 801.847161][ T7591] ? __pfx_kthread+0x10/0x10 [ 801.847177][ T7591] ret_from_fork_asm+0x1a/0x30 [ 801.847210][ T7591] [ 801.847269][ T7591] FAULT_INJECTION: forcing a failure. [ 801.847269][ T7591] name failslab, interval 1, probability 100, space 0, times 78 [ 801.856609][ C0] CPU: 0 UID: 0 PID: 12654 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.856635][ C0] Tainted: [L]=SOFTLOCKUP [ 801.856641][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.856650][ C0] Call Trace: [ 801.856656][ C0] [ 801.856663][ C0] dump_stack_lvl+0x100/0x190 [ 801.856686][ C0] should_fail_ex.cold+0x5/0xa [ 801.856709][ C0] should_failslab+0xc2/0x120 [ 801.856732][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.856755][ C0] ? __alloc_skb+0x140/0x710 [ 801.856780][ C0] __alloc_skb+0x140/0x710 [ 801.856799][ C0] ? __alloc_skb+0x5b7/0x710 [ 801.856819][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 801.856840][ C0] ? lock_acquire+0x1b9/0x370 [ 801.856866][ C0] __netdev_alloc_skb+0x7a/0x960 [ 801.856890][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 801.856916][ C0] ? __lock_acquire+0x49f/0x1a40 [ 801.856942][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 801.856967][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 801.856997][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 801.857029][ C0] __iterate_interfaces+0x2e6/0x650 [ 801.857051][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.857076][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.857100][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 801.857126][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 801.857155][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 801.857183][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 801.857220][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 801.857250][ C0] handle_softirqs+0x1ea/0x9b0 [ 801.857278][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 801.857301][ C0] ? _raw_spin_unlock+0x28/0x50 [ 801.857329][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 801.857349][ C0] __irq_exit_rcu+0x162/0x210 [ 801.857371][ C0] irq_exit_rcu+0x9/0x30 [ 801.857395][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 801.857414][ C0] [ 801.857419][ C0] [ 801.857424][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.857442][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 801.857467][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 801.857482][ C0] RSP: 0000:ffffc9000712f548 EFLAGS: 00000293 [ 801.857494][ C0] RAX: ffffffff8f9acb98 RBX: ffffffff8f9acb40 RCX: ffffffff81e88a01 [ 801.857504][ C0] RDX: ffff888053c74a80 RSI: ffffffff81e88a0f RDI: ffff888053c74a80 [ 801.857515][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 801.857523][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001612 [ 801.857532][ C0] R13: ffffffff8f9acb98 R14: ffffc9000712f5c8 R15: dffffc0000000000 [ 801.857548][ C0] ? console_flush_one_record+0xab1/0xe50 [ 801.857571][ C0] ? console_flush_one_record+0xabf/0xe50 [ 801.857598][ C0] ? console_flush_one_record+0xabf/0xe50 [ 801.857625][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 801.857648][ C0] ? check_prev_add+0xfe/0xe60 [ 801.857671][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 801.857690][ C0] console_unlock+0x103/0x260 [ 801.857713][ C0] ? __pfx_console_unlock+0x10/0x10 [ 801.857736][ C0] ? lock_acquire+0x101/0x370 [ 801.857759][ C0] ? vprintk_emit+0x66a/0x6b0 [ 801.857785][ C0] vprintk_emit+0x407/0x6b0 [ 801.857809][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 801.857831][ C0] ? _printk+0xcf/0x110 [ 801.857845][ C0] ? __pfx__printk+0x10/0x10 [ 801.857865][ C0] _printk+0xcf/0x110 [ 801.857880][ C0] ? __pfx__printk+0x10/0x10 [ 801.857900][ C0] ? __pfx____ratelimit+0x10/0x10 [ 801.857920][ C0] should_fail_ex+0x4e4/0x640 [ 801.857945][ C0] should_failslab+0xc2/0x120 [ 801.857965][ C0] kmem_cache_alloc_noprof+0x91/0x6a0 [ 801.857984][ C0] ? jbd2__journal_start+0x194/0x6a0 [ 801.858008][ C0] jbd2__journal_start+0x194/0x6a0 [ 801.858031][ C0] __ext4_journal_start_sb+0x367/0x670 [ 801.858056][ C0] ? ext4_dirty_inode+0xa1/0x130 [ 801.858074][ C0] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 801.858089][ C0] ext4_dirty_inode+0xa1/0x130 [ 801.858105][ C0] ? rcu_is_watching+0x12/0xc0 [ 801.858127][ C0] __mark_inode_dirty+0x1f3/0x16e0 [ 801.858155][ C0] file_update_time_flags+0x46b/0x500 [ 801.858178][ C0] ext4_page_mkwrite+0x324/0x1850 [ 801.858200][ C0] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 801.858223][ C0] do_page_mkwrite+0x17a/0x440 [ 801.858244][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 801.858266][ C0] do_fault+0x3b5/0x1750 [ 801.858290][ C0] __handle_mm_fault+0x187d/0x2a00 [ 801.858319][ C0] ? reacquire_held_locks+0xce/0x1e0 [ 801.858338][ C0] ? __pfx___handle_mm_fault+0x10/0x10 [ 801.858365][ C0] ? lock_vma_under_rcu+0x17c/0x590 [ 801.858407][ C0] handle_mm_fault+0x37b/0xa30 [ 801.858435][ C0] do_user_addr_fault+0x5a3/0x12f0 [ 801.858466][ C0] exc_page_fault+0x6f/0xd0 [ 801.858483][ C0] asm_exc_page_fault+0x26/0x30 [ 801.858498][ C0] RIP: 0033:0x7fb284e72d52 [ 801.858510][ C0] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 13 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 801.858524][ C0] RSP: 002b:00007fff937b1af0 EFLAGS: 00010202 [ 801.858536][ C0] RAX: 0000000000011008 RBX: 00007fb285d55720 RCX: 0000000000000000 [ 801.858545][ C0] RDX: 0000001b31b13000 RSI: 0000000000000008 RDI: 00007fb285d55720 [ 801.858555][ C0] RBP: 0000000000000393 R08: 00007fb285210000 R09: 00007fb285226038 [ 801.858564][ C0] R10: 0000000000000003 R11: 0000000000000008 R12: ffffffff8bb75b85 [ 801.858574][ C0] R13: 00007fb285226038 R14: 000000000000009b R15: fffffffffffef000 [ 801.858585][ C0] ? format_decode+0xd5/0xdd0 [ 801.858616][ C0] [ 801.858634][T12654] CPU: 0 UID: 0 PID: 12654 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.858655][T12654] Tainted: [L]=SOFTLOCKUP [ 801.858660][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.858668][T12654] Call Trace: [ 801.858673][T12654] [ 801.858678][T12654] dump_stack_lvl+0x100/0x190 [ 801.858698][T12654] should_fail_ex.cold+0x5/0xa [ 801.858717][T12654] should_failslab+0xc2/0x120 [ 801.858737][T12654] kmem_cache_alloc_noprof+0x91/0x6a0 [ 801.858755][T12654] ? jbd2__journal_start+0x194/0x6a0 [ 801.858779][T12654] jbd2__journal_start+0x194/0x6a0 [ 801.858801][T12654] __ext4_journal_start_sb+0x367/0x670 [ 801.858825][T12654] ? ext4_dirty_inode+0xa1/0x130 [ 801.858842][T12654] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 801.858857][T12654] ext4_dirty_inode+0xa1/0x130 [ 801.858872][T12654] ? rcu_is_watching+0x12/0xc0 [ 801.858894][T12654] __mark_inode_dirty+0x1f3/0x16e0 [ 801.858921][T12654] file_update_time_flags+0x46b/0x500 [ 801.858944][T12654] ext4_page_mkwrite+0x324/0x1850 [ 801.858965][T12654] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 801.858988][T12654] do_page_mkwrite+0x17a/0x440 [ 801.859007][T12654] ? __pfx_filemap_map_pages+0x10/0x10 [ 801.859029][T12654] do_fault+0x3b5/0x1750 [ 801.859052][T12654] __handle_mm_fault+0x187d/0x2a00 [ 801.859080][T12654] ? reacquire_held_locks+0xce/0x1e0 [ 801.859100][T12654] ? __pfx___handle_mm_fault+0x10/0x10 [ 801.859128][T12654] ? lock_vma_under_rcu+0x17c/0x590 [ 801.859164][T12654] handle_mm_fault+0x37b/0xa30 [ 801.859191][T12654] do_user_addr_fault+0x5a3/0x12f0 [ 801.859221][T12654] exc_page_fault+0x6f/0xd0 [ 801.859238][T12654] asm_exc_page_fault+0x26/0x30 [ 801.859252][T12654] RIP: 0033:0x7fb284e72d52 [ 801.859264][T12654] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 13 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 801.859278][T12654] RSP: 002b:00007fff937b1af0 EFLAGS: 00010202 [ 801.859289][T12654] RAX: 0000000000011008 RBX: 00007fb285d55720 RCX: 0000000000000000 [ 801.859299][T12654] RDX: 0000001b31b13000 RSI: 0000000000000008 RDI: 00007fb285d55720 [ 801.859308][T12654] RBP: 0000000000000393 R08: 00007fb285210000 R09: 00007fb285226038 [ 801.859318][T12654] R10: 0000000000000003 R11: 0000000000000008 R12: ffffffff8bb75b85 [ 801.859327][T12654] R13: 00007fb285226038 R14: 000000000000009b R15: fffffffffffef000 [ 801.859338][T12654] ? format_decode+0xd5/0xdd0 [ 801.859369][T12654] [ 801.859449][T12654] FAULT_INJECTION: forcing a failure. [ 801.859449][T12654] name failslab, interval 1, probability 100, space 0, times 76 [ 801.862021][ T7591] CPU: 1 UID: 0 PID: 7591 Comm: kworker/u8:53 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.862045][ T7591] Tainted: [L]=SOFTLOCKUP [ 801.862050][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.862059][ T7591] Workqueue: events_unbound nsim_dev_trap_report_work [ 801.862077][ T7591] Call Trace: [ 801.862082][ T7591] [ 801.862087][ T7591] dump_stack_lvl+0x100/0x190 [ 801.862107][ T7591] should_fail_ex.cold+0x5/0xa [ 801.862126][ T7591] should_failslab+0xc2/0x120 [ 801.862145][ T7591] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.862165][ T7591] ? __alloc_skb+0x140/0x710 [ 801.862186][ T7591] __alloc_skb+0x140/0x710 [ 801.862201][ T7591] ? __alloc_skb+0x5b7/0x710 [ 801.862218][ T7591] ? __pfx___alloc_skb+0x10/0x10 [ 801.862234][ T7591] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.862255][ T7591] ? lockdep_hardirqs_on+0x78/0x100 [ 801.862277][ T7591] nsim_dev_trap_report_work+0x2af/0xd20 [ 801.862306][ T7591] process_one_work+0xa23/0x1940 [ 801.862333][ T7591] ? __pfx_process_one_work+0x10/0x10 [ 801.862356][ T7591] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.862377][ T7591] worker_thread+0x5ef/0xe50 [ 801.862402][ T7591] ? kthread+0x13a/0x450 [ 801.862416][ T7591] ? __pfx_worker_thread+0x10/0x10 [ 801.862431][ T7591] kthread+0x370/0x450 [ 801.862444][ T7591] ? __pfx_kthread+0x10/0x10 [ 801.862461][ T7591] ret_from_fork+0x72b/0xd50 [ 801.862483][ T7591] ? __pfx_ret_from_fork+0x10/0x10 [ 801.862505][ T7591] ? __switch_to+0x800/0x10f0 [ 801.862521][ T7591] ? __pfx_kthread+0x10/0x10 [ 801.862537][ T7591] ret_from_fork_asm+0x1a/0x30 [ 801.862570][ T7591] [ 801.862637][ T7591] FAULT_INJECTION: forcing a failure. [ 801.862637][ T7591] name failslab, interval 1, probability 100, space 0, times 75 [ 801.872510][T12654] CPU: 0 UID: 0 PID: 12654 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.872531][T12654] Tainted: [L]=SOFTLOCKUP [ 801.872536][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.872544][T12654] Call Trace: [ 801.872549][T12654] [ 801.872554][T12654] dump_stack_lvl+0x100/0x190 [ 801.872573][T12654] should_fail_ex.cold+0x5/0xa [ 801.872593][T12654] should_failslab+0xc2/0x120 [ 801.872612][T12654] kmem_cache_alloc_noprof+0x91/0x6a0 [ 801.872631][T12654] ? jbd2__journal_start+0x194/0x6a0 [ 801.872658][T12654] jbd2__journal_start+0x194/0x6a0 [ 801.872681][T12654] __ext4_journal_start_sb+0x367/0x670 [ 801.872704][T12654] ? ext4_dirty_inode+0xa1/0x130 [ 801.872721][T12654] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 801.872737][T12654] ext4_dirty_inode+0xa1/0x130 [ 801.872752][T12654] ? rcu_is_watching+0x12/0xc0 [ 801.872775][T12654] __mark_inode_dirty+0x1f3/0x16e0 [ 801.872802][T12654] file_update_time_flags+0x46b/0x500 [ 801.872825][T12654] ext4_page_mkwrite+0x324/0x1850 [ 801.872847][T12654] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 801.872870][T12654] do_page_mkwrite+0x17a/0x440 [ 801.872889][T12654] ? __pfx_filemap_map_pages+0x10/0x10 [ 801.872911][T12654] do_fault+0x3b5/0x1750 [ 801.872935][T12654] __handle_mm_fault+0x187d/0x2a00 [ 801.872967][T12654] ? reacquire_held_locks+0xce/0x1e0 [ 801.872986][T12654] ? __pfx___handle_mm_fault+0x10/0x10 [ 801.873014][T12654] ? lock_vma_under_rcu+0x17c/0x590 [ 801.873050][T12654] handle_mm_fault+0x37b/0xa30 [ 801.873078][T12654] do_user_addr_fault+0x5a3/0x12f0 [ 801.873108][T12654] exc_page_fault+0x6f/0xd0 [ 801.873125][T12654] asm_exc_page_fault+0x26/0x30 [ 801.873139][T12654] RIP: 0033:0x7fb284e72d52 [ 801.873151][T12654] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 13 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 801.873164][T12654] RSP: 002b:00007fff937b1af0 EFLAGS: 00010202 [ 801.873175][T12654] RAX: 0000000000012008 RBX: 00007fb285d55720 RCX: 0000000000000000 [ 801.873184][T12654] RDX: 0000001b31b12000 RSI: 0000000000000008 RDI: 00007fb285d55720 [ 801.873193][T12654] RBP: 0000000000000393 R08: 00007fb285210000 R09: 00007fb285226038 [ 801.873202][T12654] R10: 0000000000000003 R11: 0000000000000008 R12: ffffffff81e93ef8 [ 801.873211][T12654] R13: 00007fb285226038 R14: 000000000000029b R15: fffffffffffee000 [ 801.873222][T12654] ? _prb_commit+0x68/0x2e0 [ 801.873248][T12654] [ 801.873438][T12655] FAULT_INJECTION: forcing a failure. [ 801.873438][T12655] name failslab, interval 1, probability 100, space 0, times 73 [ 801.875698][ T7591] CPU: 1 UID: 0 PID: 7591 Comm: kworker/u8:53 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.875721][ T7591] Tainted: [L]=SOFTLOCKUP [ 801.875726][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.875736][ T7591] Workqueue: events_unbound nsim_dev_trap_report_work [ 801.875756][ T7591] Call Trace: [ 801.875762][ T7591] [ 801.875768][ T7591] dump_stack_lvl+0x100/0x190 [ 801.875788][ T7591] should_fail_ex.cold+0x5/0xa [ 801.875808][ T7591] should_failslab+0xc2/0x120 [ 801.875829][ T7591] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.875849][ T7591] ? __alloc_skb+0x140/0x710 [ 801.875871][ T7591] __alloc_skb+0x140/0x710 [ 801.875892][ T7591] ? __alloc_skb+0x5b7/0x710 [ 801.875908][ T7591] ? __pfx___alloc_skb+0x10/0x10 [ 801.875925][ T7591] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.875947][ T7591] ? lockdep_hardirqs_on+0x78/0x100 [ 801.875969][ T7591] nsim_dev_trap_report_work+0x2af/0xd20 [ 801.875999][ T7591] process_one_work+0xa23/0x1940 [ 801.876026][ T7591] ? __pfx_process_one_work+0x10/0x10 [ 801.876049][ T7591] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.876070][ T7591] worker_thread+0x5ef/0xe50 [ 801.876095][ T7591] ? kthread+0x13a/0x450 [ 801.876108][ T7591] ? __pfx_worker_thread+0x10/0x10 [ 801.876123][ T7591] kthread+0x370/0x450 [ 801.876137][ T7591] ? __pfx_kthread+0x10/0x10 [ 801.876153][ T7591] ret_from_fork+0x72b/0xd50 [ 801.876176][ T7591] ? __pfx_ret_from_fork+0x10/0x10 [ 801.876198][ T7591] ? __switch_to+0x800/0x10f0 [ 801.876214][ T7591] ? __pfx_kthread+0x10/0x10 [ 801.876230][ T7591] ret_from_fork_asm+0x1a/0x30 [ 801.876263][ T7591] [ 801.876487][ T4965] FAULT_INJECTION: forcing a failure. [ 801.876487][ T4965] name failslab, interval 1, probability 100, space 0, times 72 [ 801.878563][T12655] CPU: 0 UID: 0 PID: 12655 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.878589][T12655] Tainted: [L]=SOFTLOCKUP [ 801.878595][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.878605][T12655] Call Trace: [ 801.878610][T12655] [ 801.878616][T12655] dump_stack_lvl+0x100/0x190 [ 801.878639][T12655] should_fail_ex.cold+0x5/0xa [ 801.878659][T12655] should_failslab+0xc2/0x120 [ 801.878679][T12655] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 801.878699][T12655] ? sock_alloc_inode+0x26/0x2c0 [ 801.878722][T12655] ? __pfx_sock_alloc_inode+0x10/0x10 [ 801.878745][T12655] sock_alloc_inode+0x26/0x2c0 [ 801.878766][T12655] ? __pfx_sock_alloc_inode+0x10/0x10 [ 801.878787][T12655] alloc_inode+0x68/0x250 [ 801.878808][T12655] sock_alloc+0x44/0x280 [ 801.878827][T12655] ? security_socket_create+0x7f/0x250 [ 801.878849][T12655] __sock_create+0xc2/0x860 [ 801.878877][T12655] __sys_socket+0x14d/0x260 [ 801.878892][T12655] ? __pfx___sys_socket+0x10/0x10 [ 801.878913][T12655] __x64_sys_socket+0x72/0xb0 [ 801.878927][T12655] ? lockdep_hardirqs_on+0x78/0x100 [ 801.878944][T12655] do_syscall_64+0x115/0x870 [ 801.878962][T12655] ? clear_bhb_loop+0x40/0x90 [ 801.878980][T12655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.878997][T12655] RIP: 0033:0x7fb284f9de99 [ 801.879009][T12655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.879023][T12655] RSP: 002b:00007fb285e00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 801.879038][T12655] RAX: ffffffffffffffda RBX: 00007fb285225fa0 RCX: 00007fb284f9de99 [ 801.879048][T12655] RDX: 0000000000000300 RSI: 0000000000000003 RDI: 0000000000000011 [ 801.879058][T12655] RBP: 00007fb285033eaf R08: 0000000000000000 R09: 0000000000000000 [ 801.879067][T12655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.879076][T12655] R13: 00007fb285226038 R14: 00007fb285225fa0 R15: 00007fff937b1a98 [ 801.879097][T12655] [ 801.879106][T12655] socket: no more sockets [ 801.883387][ T7564] FAULT_INJECTION: forcing a failure. [ 801.883387][ T7564] name failslab, interval 1, probability 100, space 0, times 71 [ 801.897823][T12654] FAULT_INJECTION: forcing a failure. [ 801.897823][T12654] name failslab, interval 1, probability 100, space 0, times 71 [ 801.901388][ T7564] CPU: 1 UID: 0 PID: 7564 Comm: kworker/u8:26 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.901411][ T7564] Tainted: [L]=SOFTLOCKUP [ 801.901416][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.901427][ T7564] Workqueue: events_unbound nsim_dev_trap_report_work [ 801.901451][ T7564] Call Trace: [ 801.901457][ T7564] [ 801.901464][ T7564] dump_stack_lvl+0x100/0x190 [ 801.901485][ T7564] should_fail_ex.cold+0x5/0xa [ 801.901506][ T7564] should_failslab+0xc2/0x120 [ 801.901527][ T7564] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.901547][ T7564] ? __alloc_skb+0x140/0x710 [ 801.901569][ T7564] __alloc_skb+0x140/0x710 [ 801.901585][ T7564] ? __alloc_skb+0x5b7/0x710 [ 801.901602][ T7564] ? __pfx___alloc_skb+0x10/0x10 [ 801.901618][ T7564] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.901640][ T7564] ? do_raw_spin_unlock+0x145/0x1e0 [ 801.901667][ T7564] nsim_dev_trap_report_work+0x2af/0xd20 [ 801.901696][ T7564] process_one_work+0xa23/0x1940 [ 801.901723][ T7564] ? __pfx_process_one_work+0x10/0x10 [ 801.901746][ T7564] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.901767][ T7564] worker_thread+0x5ef/0xe50 [ 801.901792][ T7564] ? kthread+0x13a/0x450 [ 801.901805][ T7564] ? __pfx_worker_thread+0x10/0x10 [ 801.901820][ T7564] kthread+0x370/0x450 [ 801.901834][ T7564] ? __pfx_kthread+0x10/0x10 [ 801.901851][ T7564] ret_from_fork+0x72b/0xd50 [ 801.901874][ T7564] ? __pfx_ret_from_fork+0x10/0x10 [ 801.901901][ T7564] ? __switch_to+0x800/0x10f0 [ 801.901917][ T7564] ? __pfx_kthread+0x10/0x10 [ 801.901933][ T7564] ret_from_fork_asm+0x1a/0x30 [ 801.901967][ T7564] [ 801.902041][ T7564] FAULT_INJECTION: forcing a failure. [ 801.902041][ T7564] name failslab, interval 1, probability 100, space 0, times 70 [ 801.906036][T12654] CPU: 0 UID: 0 PID: 12654 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.906057][T12654] Tainted: [L]=SOFTLOCKUP [ 801.906062][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.906070][T12654] Call Trace: [ 801.906075][T12654] [ 801.906081][T12654] dump_stack_lvl+0x100/0x190 [ 801.906102][T12654] should_fail_ex.cold+0x5/0xa [ 801.906121][T12654] should_failslab+0xc2/0x120 [ 801.906140][T12654] kmem_cache_alloc_noprof+0x91/0x6a0 [ 801.906159][T12654] ? jbd2__journal_start+0x194/0x6a0 [ 801.906184][T12654] jbd2__journal_start+0x194/0x6a0 [ 801.906206][T12654] __ext4_journal_start_sb+0x367/0x670 [ 801.906231][T12654] ? ext4_dirty_inode+0xa1/0x130 [ 801.906248][T12654] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 801.906263][T12654] ext4_dirty_inode+0xa1/0x130 [ 801.906279][T12654] ? rcu_is_watching+0x12/0xc0 [ 801.906302][T12654] __mark_inode_dirty+0x1f3/0x16e0 [ 801.906331][T12654] file_update_time_flags+0x46b/0x500 [ 801.906355][T12654] ext4_page_mkwrite+0x324/0x1850 [ 801.906377][T12654] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 801.906416][T12654] do_page_mkwrite+0x17a/0x440 [ 801.906436][T12654] ? __pfx_filemap_map_pages+0x10/0x10 [ 801.906459][T12654] do_fault+0x3b5/0x1750 [ 801.906483][T12654] __handle_mm_fault+0x187d/0x2a00 [ 801.906512][T12654] ? reacquire_held_locks+0xce/0x1e0 [ 801.906532][T12654] ? __pfx___handle_mm_fault+0x10/0x10 [ 801.906560][T12654] ? lock_vma_under_rcu+0x17c/0x590 [ 801.906597][T12654] handle_mm_fault+0x37b/0xa30 [ 801.906625][T12654] do_user_addr_fault+0x5a3/0x12f0 [ 801.906656][T12654] exc_page_fault+0x6f/0xd0 [ 801.906674][T12654] asm_exc_page_fault+0x26/0x30 [ 801.906689][T12654] RIP: 0033:0x7fb284e72d52 [ 801.906703][T12654] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 13 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 801.906717][T12654] RSP: 002b:00007fff937b1af0 EFLAGS: 00010202 [ 801.906729][T12654] RAX: 0000000000013008 RBX: 00007fb285d55720 RCX: 0000000000000000 [ 801.906738][T12654] RDX: 0000001b31b11000 RSI: 0000000000000008 RDI: 00007fb285d55720 [ 801.906747][T12654] RBP: 0000000000000421 R08: 00007fb285210000 R09: 00007fb285226038 [ 801.906757][T12654] R10: 0000000000000003 R11: 000000000000000a R12: ffffffff8bb689cd [ 801.906766][T12654] R13: 00007fb285226038 R14: 00000000000000e8 R15: fffffffffffed000 [ 801.906778][T12654] ? seq_buf_puts+0x1d/0x190 [ 801.906803][T12654] [ 801.906869][T12654] FAULT_INJECTION: forcing a failure. [ 801.906869][T12654] name failslab, interval 1, probability 100, space 0, times 69 [ 801.910542][ T7564] CPU: 1 UID: 0 PID: 7564 Comm: kworker/u8:26 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.910564][ T7564] Tainted: [L]=SOFTLOCKUP [ 801.910569][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.910579][ T7564] Workqueue: events_unbound nsim_dev_trap_report_work [ 801.910597][ T7564] Call Trace: [ 801.910602][ T7564] [ 801.910607][ T7564] dump_stack_lvl+0x100/0x190 [ 801.910627][ T7564] should_fail_ex.cold+0x5/0xa [ 801.910645][ T7564] should_failslab+0xc2/0x120 [ 801.910665][ T7564] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.910684][ T7564] ? __alloc_skb+0x140/0x710 [ 801.910706][ T7564] __alloc_skb+0x140/0x710 [ 801.910721][ T7564] ? __alloc_skb+0x5b7/0x710 [ 801.910738][ T7564] ? __pfx___alloc_skb+0x10/0x10 [ 801.910754][ T7564] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.910775][ T7564] ? do_raw_spin_unlock+0x145/0x1e0 [ 801.910801][ T7564] nsim_dev_trap_report_work+0x2af/0xd20 [ 801.910830][ T7564] process_one_work+0xa23/0x1940 [ 801.910856][ T7564] ? __pfx_process_one_work+0x10/0x10 [ 801.910879][ T7564] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.910905][ T7564] worker_thread+0x5ef/0xe50 [ 801.910930][ T7564] ? kthread+0x13a/0x450 [ 801.910944][ T7564] ? __pfx_worker_thread+0x10/0x10 [ 801.910960][ T7564] kthread+0x370/0x450 [ 801.910974][ T7564] ? __pfx_kthread+0x10/0x10 [ 801.910990][ T7564] ret_from_fork+0x72b/0xd50 [ 801.911012][ T7564] ? __pfx_ret_from_fork+0x10/0x10 [ 801.911034][ T7564] ? __switch_to+0x800/0x10f0 [ 801.911050][ T7564] ? __pfx_kthread+0x10/0x10 [ 801.911066][ T7564] ret_from_fork_asm+0x1a/0x30 [ 801.911099][ T7564] [ 801.911107][ T7564] FAULT_INJECTION: forcing a failure. [ 801.911107][ T7564] name failslab, interval 1, probability 100, space 0, times 68 [ 801.914980][T12654] CPU: 0 UID: 0 PID: 12654 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.915001][T12654] Tainted: [L]=SOFTLOCKUP [ 801.915005][T12654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.915013][T12654] Call Trace: [ 801.915018][T12654] [ 801.915023][T12654] dump_stack_lvl+0x100/0x190 [ 801.915042][T12654] should_fail_ex.cold+0x5/0xa [ 801.915061][T12654] should_failslab+0xc2/0x120 [ 801.915081][T12654] kmem_cache_alloc_noprof+0x91/0x6a0 [ 801.915100][T12654] ? jbd2__journal_start+0x194/0x6a0 [ 801.915123][T12654] jbd2__journal_start+0x194/0x6a0 [ 801.915146][T12654] __ext4_journal_start_sb+0x367/0x670 [ 801.915171][T12654] ? ext4_dirty_inode+0xa1/0x130 [ 801.915188][T12654] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 801.915203][T12654] ext4_dirty_inode+0xa1/0x130 [ 801.915218][T12654] ? rcu_is_watching+0x12/0xc0 [ 801.915240][T12654] __mark_inode_dirty+0x1f3/0x16e0 [ 801.915267][T12654] file_update_time_flags+0x46b/0x500 [ 801.915291][T12654] ext4_page_mkwrite+0x324/0x1850 [ 801.915312][T12654] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 801.915336][T12654] do_page_mkwrite+0x17a/0x440 [ 801.915355][T12654] ? __pfx_filemap_map_pages+0x10/0x10 [ 801.915377][T12654] do_fault+0x3b5/0x1750 [ 801.915405][T12654] __handle_mm_fault+0x187d/0x2a00 [ 801.915434][T12654] ? reacquire_held_locks+0xce/0x1e0 [ 801.915454][T12654] ? __pfx___handle_mm_fault+0x10/0x10 [ 801.915481][T12654] ? lock_vma_under_rcu+0x17c/0x590 [ 801.915518][T12654] handle_mm_fault+0x37b/0xa30 [ 801.915546][T12654] do_user_addr_fault+0x5a3/0x12f0 [ 801.915576][T12654] exc_page_fault+0x6f/0xd0 [ 801.915603][T12654] asm_exc_page_fault+0x26/0x30 [ 801.915617][T12654] RIP: 0033:0x7fb284e72d52 [ 801.915629][T12654] Code: 00 00 00 eb 39 0f 1f 00 be 08 00 00 00 48 89 df e8 13 8c fe ff 48 8b 53 40 48 8d 42 f8 48 89 43 40 8b 43 30 83 c0 08 89 43 30 <4c> 89 62 f8 41 8d 56 01 41 39 ee 0f 83 9d 00 00 00 41 89 d6 48 8b [ 801.915643][T12654] RSP: 002b:00007fff937b1af0 EFLAGS: 00010202 [ 801.915654][T12654] RAX: 0000000000014008 RBX: 00007fb285d55720 RCX: 0000000000000000 [ 801.915664][T12654] RDX: 0000001b31b10000 RSI: 0000000000000008 RDI: 00007fb285d55720 [ 801.915673][T12654] RBP: 0000000000000421 R08: 00007fb285210000 R09: 00007fb285226038 [ 801.915682][T12654] R10: 0000000000000003 R11: 000000000000000a R12: ffffffff81e95736 [ 801.915691][T12654] R13: 00007fb285226038 R14: 00000000000002e8 R15: fffffffffffec000 [ 801.915702][T12654] ? get_data+0x386/0x500 [ 801.915730][T12654] [ 801.915834][T12655] FAULT_INJECTION: forcing a failure. [ 801.915834][T12655] name failslab, interval 1, probability 100, space 0, times 67 [ 801.921309][ T7564] CPU: 1 UID: 0 PID: 7564 Comm: kworker/u8:26 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.921336][ T7564] Tainted: [L]=SOFTLOCKUP [ 801.921341][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.921351][ T7564] Workqueue: events_unbound nsim_dev_trap_report_work [ 801.921374][ T7564] Call Trace: [ 801.921380][ T7564] [ 801.921387][ T7564] dump_stack_lvl+0x100/0x190 [ 801.921408][ T7564] should_fail_ex.cold+0x5/0xa [ 801.921428][ T7564] should_failslab+0xc2/0x120 [ 801.921449][ T7564] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.921469][ T7564] ? __alloc_skb+0x140/0x710 [ 801.921491][ T7564] __alloc_skb+0x140/0x710 [ 801.921507][ T7564] ? __alloc_skb+0x5b7/0x710 [ 801.921524][ T7564] ? __pfx___alloc_skb+0x10/0x10 [ 801.921540][ T7564] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.921562][ T7564] ? do_raw_spin_unlock+0x145/0x1e0 [ 801.921587][ T7564] nsim_dev_trap_report_work+0x2af/0xd20 [ 801.921616][ T7564] process_one_work+0xa23/0x1940 [ 801.921644][ T7564] ? __pfx_process_one_work+0x10/0x10 [ 801.921667][ T7564] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.921688][ T7564] worker_thread+0x5ef/0xe50 [ 801.921714][ T7564] ? kthread+0x13a/0x450 [ 801.921727][ T7564] ? __pfx_worker_thread+0x10/0x10 [ 801.921743][ T7564] kthread+0x370/0x450 [ 801.921756][ T7564] ? __pfx_kthread+0x10/0x10 [ 801.921773][ T7564] ret_from_fork+0x72b/0xd50 [ 801.921796][ T7564] ? __pfx_ret_from_fork+0x10/0x10 [ 801.921819][ T7564] ? __switch_to+0x800/0x10f0 [ 801.921835][ T7564] ? __pfx_kthread+0x10/0x10 [ 801.921851][ T7564] ret_from_fork_asm+0x1a/0x30 [ 801.921890][ T7564] [ 801.921952][ T7564] FAULT_INJECTION: forcing a failure. [ 801.921952][ T7564] name failslab, interval 1, probability 100, space 0, times 66 [ 801.924974][T12655] CPU: 0 UID: 0 PID: 12655 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.924998][T12655] Tainted: [L]=SOFTLOCKUP [ 801.925003][T12655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.925012][T12655] Call Trace: [ 801.925017][T12655] [ 801.925024][T12655] dump_stack_lvl+0x100/0x190 [ 801.925047][T12655] should_fail_ex.cold+0x5/0xa [ 801.925068][T12655] should_failslab+0xc2/0x120 [ 801.925089][T12655] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 801.925110][T12655] ? sock_alloc_inode+0x26/0x2c0 [ 801.925134][T12655] ? __pfx_sock_alloc_inode+0x10/0x10 [ 801.925156][T12655] sock_alloc_inode+0x26/0x2c0 [ 801.925178][T12655] ? __pfx_sock_alloc_inode+0x10/0x10 [ 801.925198][T12655] alloc_inode+0x68/0x250 [ 801.925220][T12655] sock_alloc+0x44/0x280 [ 801.925239][T12655] ? security_socket_create+0x7f/0x250 [ 801.925262][T12655] __sock_create+0xc2/0x860 [ 801.925290][T12655] __sys_socket+0x14d/0x260 [ 801.925305][T12655] ? __pfx___sys_socket+0x10/0x10 [ 801.925327][T12655] __x64_sys_socket+0x72/0xb0 [ 801.925341][T12655] ? lockdep_hardirqs_on+0x78/0x100 [ 801.925359][T12655] do_syscall_64+0x115/0x870 [ 801.925376][T12655] ? clear_bhb_loop+0x40/0x90 [ 801.925401][T12655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.925418][T12655] RIP: 0033:0x7fb284f9de99 [ 801.925432][T12655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.925449][T12655] RSP: 002b:00007fb285e00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 801.925465][T12655] RAX: ffffffffffffffda RBX: 00007fb285225fa0 RCX: 00007fb284f9de99 [ 801.925477][T12655] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 801.925487][T12655] RBP: 00007fb285033eaf R08: 0000000000000000 R09: 0000000000000000 [ 801.925497][T12655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.925508][T12655] R13: 00007fb285226038 R14: 00007fb285225fa0 R15: 00007fff937b1a98 [ 801.925531][T12655] [ 801.925539][T12655] socket: no more sockets [ 801.929413][ C0] FAULT_INJECTION: forcing a failure. [ 801.929413][ C0] name failslab, interval 1, probability 100, space 0, times 65 [ 801.929445][ C0] CPU: 0 UID: 0 PID: 12655 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.929472][ C0] Tainted: [L]=SOFTLOCKUP [ 801.929478][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.929488][ C0] Call Trace: [ 801.929495][ C0] [ 801.929502][ C0] dump_stack_lvl+0x100/0x190 [ 801.929529][ C0] should_fail_ex.cold+0x5/0xa [ 801.929554][ C0] should_failslab+0xc2/0x120 [ 801.929578][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.929601][ C0] ? __alloc_skb+0x5b7/0x710 [ 801.929622][ C0] ? __alloc_skb+0x140/0x710 [ 801.929647][ C0] __alloc_skb+0x140/0x710 [ 801.929667][ C0] ? __alloc_skb+0x5b7/0x710 [ 801.929688][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 801.929710][ C0] ? lock_acquire+0x1b9/0x370 [ 801.929738][ C0] __netdev_alloc_skb+0x7a/0x960 [ 801.929762][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 801.929786][ C1] FAULT_INJECTION: forcing a failure. [ 801.929786][ C1] name failslab, interval 1, probability 100, space 0, times 65 [ 801.929787][ C0] ? __lock_acquire+0x49f/0x1a40 [ 801.929809][ C0] ? try_to_wake_up+0x14c/0x1c90 [ 801.929833][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 801.929854][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 801.929880][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 801.929909][ C0] __iterate_interfaces+0x2e6/0x650 [ 801.929927][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.929949][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.929969][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 801.929991][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 801.930017][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 801.930041][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 801.930073][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 801.930098][ C0] handle_softirqs+0x1ea/0x9b0 [ 801.930122][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 801.930142][ C0] ? _raw_spin_unlock+0x28/0x50 [ 801.930166][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 801.930184][ C0] __irq_exit_rcu+0x162/0x210 [ 801.930204][ C0] irq_exit_rcu+0x9/0x30 [ 801.930222][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 801.930240][ C0] [ 801.930244][ C0] [ 801.930249][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.930268][ C0] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 801.930291][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 38 af 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 c6 a9 21 00 48 85 ed 0f 85 27 01 00 00 18 af 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 801.930306][ C0] RSP: 0018:ffffc90006a77c68 EFLAGS: 00000287 [ 801.930318][ C0] RAX: 0000000000057cde RBX: 0000000000000017 RCX: ffffc9001caf9000 [ 801.930327][ C0] RDX: 0000000000080000 RSI: ffffffff81e8b244 RDI: ffff88807ba5ca80 [ 801.930338][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 801.930346][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000d4ef8f [ 801.930354][ C0] R13: 0000000000000200 R14: ffff88807ce48000 R15: ffffc90006a77d30 [ 801.930371][ C0] ? vprintk_emit+0x674/0x6b0 [ 801.930402][ C0] ? vprintk_emit+0x674/0x6b0 [ 801.930425][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 801.930449][ C0] ? find_held_lock+0x2b/0x80 [ 801.930473][ C0] ? ___ratelimit+0x77b/0xad0 [ 801.930491][ C0] _printk+0xcf/0x110 [ 801.930507][ C0] ? __pfx__printk+0x10/0x10 [ 801.930520][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 801.930540][ C0] ? __pfx____ratelimit+0x10/0x10 [ 801.930555][ C0] ? __sock_create.cold+0x31/0x42 [ 801.930574][ C0] __sock_create.cold+0x3d/0x42 [ 801.930593][ C0] __sys_socket+0x14d/0x260 [ 801.930608][ C0] ? __pfx___sys_socket+0x10/0x10 [ 801.930629][ C0] __x64_sys_socket+0x72/0xb0 [ 801.930643][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 801.930660][ C0] do_syscall_64+0x115/0x870 [ 801.930677][ C0] ? clear_bhb_loop+0x40/0x90 [ 801.930695][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.930711][ C0] RIP: 0033:0x7fb284f9de99 [ 801.930724][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.930737][ C0] RSP: 002b:00007fb285e00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 801.930750][ C0] RAX: ffffffffffffffda RBX: 00007fb285225fa0 RCX: 00007fb284f9de99 [ 801.930761][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 801.930769][ C0] RBP: 00007fb285033eaf R08: 0000000000000000 R09: 0000000000000000 [ 801.930777][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.930786][ C0] R13: 00007fb285226038 R14: 00007fb285225fa0 R15: 00007fff937b1a98 [ 801.930807][ C0] [ 801.930818][ C1] CPU: 1 UID: 0 PID: 7564 Comm: kworker/u8:26 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.930824][ C0] FAULT_INJECTION: forcing a failure. [ 801.930824][ C0] name failslab, interval 1, probability 100, space 0, times 64 [ 801.930843][ C1] Tainted: [L]=SOFTLOCKUP [ 801.930848][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.930857][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 801.930877][ C1] Call Trace: [ 801.930886][ C1] [ 801.930892][ C1] dump_stack_lvl+0x100/0x190 [ 801.930909][ C1] should_fail_ex.cold+0x5/0xa [ 801.930927][ C1] should_failslab+0xc2/0x120 [ 801.930946][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.930964][ C1] ? __alloc_skb+0x140/0x710 [ 801.930983][ C1] __alloc_skb+0x140/0x710 [ 801.930998][ C1] ? __alloc_skb+0x5b7/0x710 [ 801.931014][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 801.931031][ C1] ? lock_acquire+0x1b9/0x370 [ 801.931051][ C1] __netdev_alloc_skb+0x7a/0x960 [ 801.931071][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 801.931090][ C1] ? native_read_msr+0x10/0x30 [ 801.931116][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 801.931135][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 801.931160][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 801.931184][ C1] __iterate_interfaces+0x2e6/0x650 [ 801.931201][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.931222][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.931240][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 801.931261][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 801.931285][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 801.931307][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 801.931336][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 801.931360][ C1] handle_softirqs+0x1ea/0x9b0 [ 801.931382][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 801.931400][ C1] ? _raw_spin_unlock+0x28/0x50 [ 801.931422][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 801.931439][ C1] __irq_exit_rcu+0x162/0x210 [ 801.931457][ C1] irq_exit_rcu+0x9/0x30 [ 801.931474][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 801.931490][ C1] [ 801.931494][ C1] [ 801.931499][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.931516][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 801.931538][ C1] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 801.931551][ C1] RSP: 0018:ffffc90003877698 EFLAGS: 00000293 [ 801.931561][ C1] RAX: ffffffff8f9acb98 RBX: ffffffff8f9acb40 RCX: ffffffff81e88a01 [ 801.931570][ C1] RDX: ffff88807ce48000 RSI: ffffffff81e88a0f RDI: ffff88807ce48000 [ 801.931579][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 801.931587][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001622 [ 801.931595][ C1] R13: ffffffff8f9acb98 R14: ffffc90003877718 R15: dffffc0000000000 [ 801.931610][ C1] ? console_flush_one_record+0xab1/0xe50 [ 801.931631][ C1] ? console_flush_one_record+0xabf/0xe50 [ 801.931655][ C1] ? console_flush_one_record+0xabf/0xe50 [ 801.931680][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 801.931701][ C1] ? __lock_acquire+0x49f/0x1a40 [ 801.931723][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 801.931741][ C1] console_unlock+0x103/0x260 [ 801.931762][ C1] ? __pfx_console_unlock+0x10/0x10 [ 801.931783][ C1] ? lock_acquire+0x101/0x370 [ 801.931804][ C1] ? vprintk_emit+0x66a/0x6b0 [ 801.931827][ C1] vprintk_emit+0x407/0x6b0 [ 801.931850][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 801.931872][ C1] ? irqentry_exit+0x24d/0xa00 [ 801.931910][ C1] _printk+0xcf/0x110 [ 801.931924][ C1] ? __pfx__printk+0x10/0x10 [ 801.931939][ C1] ? dump_stack_lvl+0x16c/0x190 [ 801.931954][ C1] ? dump_stack_lvl+0x176/0x190 [ 801.931970][ C1] ? __pfx____ratelimit+0x10/0x10 [ 801.931989][ C1] should_fail_ex+0x4e4/0x640 [ 801.932013][ C1] should_failslab+0xc2/0x120 [ 801.932032][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.932050][ C1] ? __alloc_skb+0x140/0x710 [ 801.932070][ C1] __alloc_skb+0x140/0x710 [ 801.932085][ C1] ? __alloc_skb+0x5b7/0x710 [ 801.932100][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 801.932115][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.932135][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 801.932160][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 801.932187][ C1] process_one_work+0xa23/0x1940 [ 801.932212][ C1] ? __pfx_process_one_work+0x10/0x10 [ 801.932233][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.932253][ C1] worker_thread+0x5ef/0xe50 [ 801.932276][ C1] ? kthread+0x13a/0x450 [ 801.932289][ C1] ? __pfx_worker_thread+0x10/0x10 [ 801.932304][ C1] kthread+0x370/0x450 [ 801.932317][ C1] ? __pfx_kthread+0x10/0x10 [ 801.932332][ C1] ret_from_fork+0x72b/0xd50 [ 801.932353][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 801.932374][ C1] ? __switch_to+0x800/0x10f0 [ 801.932389][ C1] ? __pfx_kthread+0x10/0x10 [ 801.932404][ C1] ret_from_fork_asm+0x1a/0x30 [ 801.932435][ C1] [ 801.932444][ C0] CPU: 0 UID: 0 PID: 12655 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.932469][ C0] Tainted: [L]=SOFTLOCKUP [ 801.932475][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.932484][ C0] Call Trace: [ 801.932490][ C0] [ 801.932496][ C0] dump_stack_lvl+0x100/0x190 [ 801.932519][ C0] should_fail_ex.cold+0x5/0xa [ 801.932541][ C0] should_failslab+0xc2/0x120 [ 801.932564][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.932585][ C0] ? __alloc_skb+0x5b7/0x710 [ 801.932601][ C1] FAULT_INJECTION: forcing a failure. [ 801.932601][ C1] name failslab, interval 1, probability 100, space 0, times 63 [ 801.932603][ C0] ? __alloc_skb+0x140/0x710 [ 801.932628][ C0] __alloc_skb+0x140/0x710 [ 801.932647][ C0] ? __alloc_skb+0x5b7/0x710 [ 801.932664][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 801.932681][ C0] ? lock_acquire+0x1b9/0x370 [ 801.932704][ C0] __netdev_alloc_skb+0x7a/0x960 [ 801.932725][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 801.932745][ C0] ? __lock_acquire+0x49f/0x1a40 [ 801.932764][ C0] ? try_to_wake_up+0x14c/0x1c90 [ 801.932785][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 801.932806][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 801.932832][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 801.932858][ C0] __iterate_interfaces+0x2e6/0x650 [ 801.932875][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.932898][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.932916][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 801.932939][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 801.932963][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 801.932991][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 801.933023][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 801.933047][ C0] handle_softirqs+0x1ea/0x9b0 [ 801.933070][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 801.933090][ C0] ? _raw_spin_unlock+0x28/0x50 [ 801.933112][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 801.933130][ C0] __irq_exit_rcu+0x162/0x210 [ 801.933150][ C0] irq_exit_rcu+0x9/0x30 [ 801.933168][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 801.933185][ C0] [ 801.933189][ C0] [ 801.933195][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.933211][ C0] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 801.933234][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 38 af 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 c6 a9 21 00 48 85 ed 0f 85 27 01 00 00 18 af 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 801.933248][ C0] RSP: 0018:ffffc90006a77c68 EFLAGS: 00000287 [ 801.933259][ C0] RAX: 0000000000057cde RBX: 0000000000000017 RCX: ffffc9001caf9000 [ 801.933268][ C0] RDX: 0000000000080000 RSI: ffffffff81e8b244 RDI: ffff88807ba5ca80 [ 801.933277][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 801.933286][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000d4ef8f [ 801.933295][ C0] R13: 0000000000000200 R14: ffff88807ce48000 R15: ffffc90006a77d30 [ 801.933310][ C0] ? vprintk_emit+0x674/0x6b0 [ 801.933335][ C0] ? vprintk_emit+0x674/0x6b0 [ 801.933358][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 801.933388][ C0] ? find_held_lock+0x2b/0x80 [ 801.933410][ C0] ? ___ratelimit+0x77b/0xad0 [ 801.933428][ C0] _printk+0xcf/0x110 [ 801.933442][ C0] ? __pfx__printk+0x10/0x10 [ 801.933456][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 801.933475][ C0] ? __pfx____ratelimit+0x10/0x10 [ 801.933491][ C0] ? __sock_create.cold+0x31/0x42 [ 801.933508][ C0] __sock_create.cold+0x3d/0x42 [ 801.933527][ C0] __sys_socket+0x14d/0x260 [ 801.933542][ C0] ? __pfx___sys_socket+0x10/0x10 [ 801.933563][ C0] __x64_sys_socket+0x72/0xb0 [ 801.933577][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 801.933593][ C0] do_syscall_64+0x115/0x870 [ 801.933610][ C0] ? clear_bhb_loop+0x40/0x90 [ 801.933628][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.933645][ C0] RIP: 0033:0x7fb284f9de99 [ 801.933655][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.933668][ C0] RSP: 002b:00007fb285e00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 801.933683][ C0] RAX: ffffffffffffffda RBX: 00007fb285225fa0 RCX: 00007fb284f9de99 [ 801.933692][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 801.933700][ C0] RBP: 00007fb285033eaf R08: 0000000000000000 R09: 0000000000000000 [ 801.933709][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.933718][ C0] R13: 00007fb285226038 R14: 00007fb285225fa0 R15: 00007fff937b1a98 [ 801.933738][ C0] [ 801.933748][ C1] CPU: 1 UID: 0 PID: 7564 Comm: kworker/u8:26 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.933772][ C1] Tainted: [L]=SOFTLOCKUP [ 801.933777][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.933787][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 801.933788][ C0] FAULT_INJECTION: forcing a failure. [ 801.933788][ C0] name failslab, interval 1, probability 100, space 0, times 62 [ 801.933805][ C1] [ 801.933809][ C1] Call Trace: [ 801.933813][ C1] [ 801.933818][ C1] dump_stack_lvl+0x100/0x190 [ 801.933835][ C1] should_fail_ex.cold+0x5/0xa [ 801.933853][ C1] should_failslab+0xc2/0x120 [ 801.933871][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.933894][ C1] ? __alloc_skb+0x140/0x710 [ 801.933914][ C1] __alloc_skb+0x140/0x710 [ 801.933928][ C1] ? __alloc_skb+0x5b7/0x710 [ 801.933944][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 801.933961][ C1] ? lock_acquire+0x1b9/0x370 [ 801.933981][ C1] __netdev_alloc_skb+0x7a/0x960 [ 801.934001][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 801.934024][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 801.934043][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 801.934060][ C1] ? mac80211_hwsim_beacon_tx+0x16f/0xa00 [ 801.934080][ C1] ? __sanitizer_cov_trace_switch+0x3b/0x90 [ 801.934100][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 801.934124][ C1] __iterate_interfaces+0x2e6/0x650 [ 801.934140][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.934160][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.934179][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 801.934199][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 801.934222][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 801.934245][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 801.934273][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 801.934297][ C1] handle_softirqs+0x1ea/0x9b0 [ 801.934318][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 801.934337][ C1] ? _raw_spin_unlock+0x28/0x50 [ 801.934358][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 801.934374][ C1] __irq_exit_rcu+0x162/0x210 [ 801.934393][ C1] irq_exit_rcu+0x9/0x30 [ 801.934410][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 801.934425][ C1] [ 801.934430][ C1] [ 801.934435][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.934451][ C1] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 801.934474][ C1] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 801.934487][ C1] RSP: 0018:ffffc90003877698 EFLAGS: 00000293 [ 801.934497][ C1] RAX: ffffffff8f9acb98 RBX: ffffffff8f9acb40 RCX: ffffffff81e88a01 [ 801.934506][ C1] RDX: ffff88807ce48000 RSI: ffffffff81e88a0f RDI: ffff88807ce48000 [ 801.934515][ C1] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 801.934523][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000001622 [ 801.934531][ C1] R13: ffffffff8f9acb98 R14: ffffc90003877718 R15: dffffc0000000000 [ 801.934545][ C1] ? console_flush_one_record+0xab1/0xe50 [ 801.934567][ C1] ? console_flush_one_record+0xabf/0xe50 [ 801.934591][ C1] ? console_flush_one_record+0xabf/0xe50 [ 801.934616][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 801.934638][ C1] ? __lock_acquire+0x49f/0x1a40 [ 801.934659][ C1] ? is_printk_cpu_sync_owner+0x32/0x40 [ 801.934678][ C1] console_unlock+0x103/0x260 [ 801.934699][ C1] ? __pfx_console_unlock+0x10/0x10 [ 801.934720][ C1] ? lock_acquire+0x101/0x370 [ 801.934740][ C1] ? vprintk_emit+0x66a/0x6b0 [ 801.934765][ C1] vprintk_emit+0x407/0x6b0 [ 801.934787][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 801.934809][ C1] ? irqentry_exit+0x24d/0xa00 [ 801.934828][ C1] _printk+0xcf/0x110 [ 801.934842][ C1] ? __pfx__printk+0x10/0x10 [ 801.934858][ C1] ? dump_stack_lvl+0x16c/0x190 [ 801.934873][ C1] ? dump_stack_lvl+0x176/0x190 [ 801.934893][ C1] ? __pfx____ratelimit+0x10/0x10 [ 801.934912][ C1] should_fail_ex+0x4e4/0x640 [ 801.934934][ C1] should_failslab+0xc2/0x120 [ 801.934952][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.934970][ C1] ? __alloc_skb+0x140/0x710 [ 801.934990][ C1] __alloc_skb+0x140/0x710 [ 801.935005][ C1] ? __alloc_skb+0x5b7/0x710 [ 801.935021][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 801.935036][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.935056][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 801.935080][ C1] nsim_dev_trap_report_work+0x2af/0xd20 [ 801.935107][ C1] process_one_work+0xa23/0x1940 [ 801.935131][ C1] ? __pfx_process_one_work+0x10/0x10 [ 801.935153][ C1] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.935172][ C1] worker_thread+0x5ef/0xe50 [ 801.935195][ C1] ? kthread+0x13a/0x450 [ 801.935208][ C1] ? __pfx_worker_thread+0x10/0x10 [ 801.935222][ C1] kthread+0x370/0x450 [ 801.935236][ C1] ? __pfx_kthread+0x10/0x10 [ 801.935250][ C1] ret_from_fork+0x72b/0xd50 [ 801.935271][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 801.935292][ C1] ? __switch_to+0x800/0x10f0 [ 801.935307][ C1] ? __pfx_kthread+0x10/0x10 [ 801.935322][ C1] ret_from_fork_asm+0x1a/0x30 [ 801.935352][ C1] [ 801.935361][ C0] CPU: 0 UID: 0 PID: 12655 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.935392][ C0] Tainted: [L]=SOFTLOCKUP [ 801.935398][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.935408][ C0] Call Trace: [ 801.935413][ C0] [ 801.935419][ C0] dump_stack_lvl+0x100/0x190 [ 801.935442][ C0] should_fail_ex.cold+0x5/0xa [ 801.935465][ C0] should_failslab+0xc2/0x120 [ 801.935488][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.935509][ C0] ? __alloc_skb+0x5b7/0x710 [ 801.935526][ C0] ? __alloc_skb+0x140/0x710 [ 801.935547][ C0] __alloc_skb+0x140/0x710 [ 801.935562][ C0] ? __alloc_skb+0x5b7/0x710 [ 801.935580][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 801.935615][ C0] ? lock_acquire+0x1b9/0x370 [ 801.935636][ C0] __netdev_alloc_skb+0x7a/0x960 [ 801.935658][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 801.935680][ C0] ? __lock_acquire+0x49f/0x1a40 [ 801.935697][ C0] ? try_to_wake_up+0x14c/0x1c90 [ 801.935720][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 801.935741][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 801.935766][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 801.935792][ C0] __iterate_interfaces+0x2e6/0x650 [ 801.935811][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.935832][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.935852][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 801.935875][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 801.935899][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 801.935923][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 801.935954][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 801.935979][ C0] handle_softirqs+0x1ea/0x9b0 [ 801.936003][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 801.936022][ C0] ? _raw_spin_unlock+0x28/0x50 [ 801.936045][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 801.936062][ C0] __irq_exit_rcu+0x162/0x210 [ 801.936083][ C0] irq_exit_rcu+0x9/0x30 [ 801.936101][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 801.936118][ C0] [ 801.936122][ C0] [ 801.936128][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.936146][ C0] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 801.936169][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 38 af 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 c6 a9 21 00 48 85 ed 0f 85 27 01 00 00 18 af 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 801.936182][ C0] RSP: 0018:ffffc90006a77c68 EFLAGS: 00000287 [ 801.936192][ C0] RAX: 0000000000057cde RBX: 0000000000000017 RCX: ffffc9001caf9000 [ 801.936203][ C0] RDX: 0000000000080000 RSI: ffffffff81e8b244 RDI: ffff88807ba5ca80 [ 801.936212][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 801.936220][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000d4ef8f [ 801.936230][ C0] R13: 0000000000000200 R14: ffff88807ce48000 R15: ffffc90006a77d30 [ 801.936246][ C0] ? vprintk_emit+0x674/0x6b0 [ 801.936272][ C0] ? vprintk_emit+0x674/0x6b0 [ 801.936295][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 801.936319][ C0] ? find_held_lock+0x2b/0x80 [ 801.936342][ C0] ? ___ratelimit+0x77b/0xad0 [ 801.936360][ C0] _printk+0xcf/0x110 [ 801.936375][ C0] ? __pfx__printk+0x10/0x10 [ 801.936394][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 801.936413][ C0] ? __pfx____ratelimit+0x10/0x10 [ 801.936430][ C0] ? __sock_create.cold+0x31/0x42 [ 801.936447][ C0] __sock_create.cold+0x3d/0x42 [ 801.936467][ C0] __sys_socket+0x14d/0x260 [ 801.936481][ C0] ? __pfx___sys_socket+0x10/0x10 [ 801.936503][ C0] __x64_sys_socket+0x72/0xb0 [ 801.936517][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 801.936534][ C0] do_syscall_64+0x115/0x870 [ 801.936549][ C0] ? clear_bhb_loop+0x40/0x90 [ 801.936569][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.936584][ C0] RIP: 0033:0x7fb284f9de99 [ 801.936597][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.936610][ C0] RSP: 002b:00007fb285e00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 801.936623][ C0] RAX: ffffffffffffffda RBX: 00007fb285225fa0 RCX: 00007fb284f9de99 [ 801.936633][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 801.936641][ C0] RBP: 00007fb285033eaf R08: 0000000000000000 R09: 0000000000000000 [ 801.936650][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.936659][ C0] R13: 00007fb285226038 R14: 00007fb285225fa0 R15: 00007fff937b1a98 [ 801.936679][ C0] [ 801.936693][ C0] FAULT_INJECTION: forcing a failure. [ 801.936693][ C0] name failslab, interval 1, probability 100, space 0, times 60 [ 801.936700][ T7564] CPU: 1 UID: 0 PID: 7564 Comm: kworker/u8:26 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.936726][ T7564] Tainted: [L]=SOFTLOCKUP [ 801.936731][ T7564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.936739][ T7564] Workqueue: events_unbound nsim_dev_trap_report_work [ 801.936757][ T7564] Call Trace: [ 801.936762][ T7564] [ 801.936767][ T7564] dump_stack_lvl+0x100/0x190 [ 801.936785][ T7564] should_fail_ex.cold+0x5/0xa [ 801.936803][ T7564] should_failslab+0xc2/0x120 [ 801.936821][ T7564] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.936839][ T7564] ? __alloc_skb+0x140/0x710 [ 801.936859][ T7564] __alloc_skb+0x140/0x710 [ 801.936873][ T7564] ? __alloc_skb+0x5b7/0x710 [ 801.936895][ T7564] ? __pfx___alloc_skb+0x10/0x10 [ 801.936910][ T7564] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.936930][ T7564] ? do_raw_spin_unlock+0x145/0x1e0 [ 801.936955][ T7564] nsim_dev_trap_report_work+0x2af/0xd20 [ 801.936983][ T7564] process_one_work+0xa23/0x1940 [ 801.937007][ T7564] ? __pfx_process_one_work+0x10/0x10 [ 801.937029][ T7564] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.937049][ T7564] worker_thread+0x5ef/0xe50 [ 801.937072][ T7564] ? kthread+0x13a/0x450 [ 801.937084][ T7564] ? __pfx_worker_thread+0x10/0x10 [ 801.937099][ T7564] kthread+0x370/0x450 [ 801.937112][ T7564] ? __pfx_kthread+0x10/0x10 [ 801.937126][ T7564] ret_from_fork+0x72b/0xd50 [ 801.937147][ T7564] ? __pfx_ret_from_fork+0x10/0x10 [ 801.937169][ T7564] ? __switch_to+0x800/0x10f0 [ 801.937183][ T7564] ? __pfx_kthread+0x10/0x10 [ 801.937198][ T7564] ret_from_fork_asm+0x1a/0x30 [ 801.937229][ T7564] [ 801.937238][ C0] CPU: 0 UID: 0 PID: 12655 Comm: syz.5.1591 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.937263][ C0] Tainted: [L]=SOFTLOCKUP [ 801.937270][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.937279][ C0] Call Trace: [ 801.937285][ C0] [ 801.937290][ C0] dump_stack_lvl+0x100/0x190 [ 801.937308][ C0] should_fail_ex.cold+0x5/0xa [ 801.937328][ C0] should_failslab+0xc2/0x120 [ 801.937347][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.937367][ C0] ? __alloc_skb+0x5b7/0x710 [ 801.937390][ C0] ? __alloc_skb+0x140/0x710 [ 801.937412][ C0] __alloc_skb+0x140/0x710 [ 801.937428][ C0] ? __alloc_skb+0x5b7/0x710 [ 801.937447][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 801.937466][ C0] ? lock_acquire+0x1b9/0x370 [ 801.937490][ C0] __netdev_alloc_skb+0x7a/0x960 [ 801.937513][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 801.937534][ C0] ? __lock_acquire+0x49f/0x1a40 [ 801.937554][ C0] ? try_to_wake_up+0x14c/0x1c90 [ 801.937561][ T7592] FAULT_INJECTION: forcing a failure. [ 801.937561][ T7592] name failslab, interval 1, probability 100, space 0, times 58 [ 801.937580][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 801.937602][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 801.937624][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 801.937653][ C0] __iterate_interfaces+0x2e6/0x650 [ 801.937670][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.937692][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 801.937713][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 801.937734][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 801.937759][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 801.937784][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 801.937814][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 801.937840][ C0] handle_softirqs+0x1ea/0x9b0 [ 801.937863][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 801.937884][ C0] ? _raw_spin_unlock+0x28/0x50 [ 801.937907][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 801.937924][ C0] __irq_exit_rcu+0x162/0x210 [ 801.937945][ C0] irq_exit_rcu+0x9/0x30 [ 801.937962][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 801.937980][ C0] [ 801.937984][ C0] [ 801.937989][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 801.938007][ C0] RIP: 0010:vprintk_emit+0x553/0x6b0 [ 801.938029][ C0] Code: 00 4d 85 ed 0f 85 1b 01 00 00 e8 38 af 21 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 c6 a9 21 00 48 85 ed 0f 85 27 01 00 00 18 af 21 00 45 31 c9 41 b8 01 00 00 00 31 c9 48 8d 05 00 00 00 [ 801.938044][ C0] RSP: 0018:ffffc90006a77c68 EFLAGS: 00000287 [ 801.938055][ C0] RAX: 0000000000057cde RBX: 0000000000000017 RCX: ffffc9001caf9000 [ 801.938065][ C0] RDX: 0000000000080000 RSI: ffffffff81e8b244 RDI: ffff88807ba5ca80 [ 801.938075][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 801.938083][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000d4ef8f [ 801.938091][ C0] R13: 0000000000000200 R14: ffff88807ce48000 R15: ffffc90006a77d30 [ 801.938108][ C0] ? vprintk_emit+0x674/0x6b0 [ 801.938134][ C0] ? vprintk_emit+0x674/0x6b0 [ 801.938156][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 801.938181][ C0] ? find_held_lock+0x2b/0x80 [ 801.938204][ C0] ? ___ratelimit+0x77b/0xad0 [ 801.938222][ C0] _printk+0xcf/0x110 [ 801.938238][ C0] ? __pfx__printk+0x10/0x10 [ 801.938250][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 801.938271][ C0] ? __pfx____ratelimit+0x10/0x10 [ 801.938286][ C0] ? __sock_create.cold+0x31/0x42 [ 801.938305][ C0] __sock_create.cold+0x3d/0x42 [ 801.938323][ C0] __sys_socket+0x14d/0x260 [ 801.938339][ C0] ? __pfx___sys_socket+0x10/0x10 [ 801.938361][ C0] __x64_sys_socket+0x72/0xb0 [ 801.938375][ C0] ? lockdep_hardirqs_on+0x78/0x100 [ 801.938397][ C0] do_syscall_64+0x115/0x870 [ 801.938413][ C0] ? clear_bhb_loop+0x40/0x90 [ 801.938432][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 801.938447][ C0] RIP: 0033:0x7fb284f9de99 [ 801.938459][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 801.938473][ C0] RSP: 002b:00007fb285e00028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 801.938485][ C0] RAX: ffffffffffffffda RBX: 00007fb285225fa0 RCX: 00007fb284f9de99 [ 801.938496][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 801.938504][ C0] RBP: 00007fb285033eaf R08: 0000000000000000 R09: 0000000000000000 [ 801.938512][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 801.938521][ C0] R13: 00007fb285226038 R14: 00007fb285225fa0 R15: 00007fff937b1a98 [ 801.938542][ C0] [ 801.938553][ T7592] CPU: 1 UID: 0 PID: 7592 Comm: kworker/u8:54 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.938577][ T7592] Tainted: [L]=SOFTLOCKUP [ 801.938583][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.938593][ T7592] Workqueue: events_unbound nsim_dev_trap_report_work [ 801.938611][ T7592] Call Trace: [ 801.938615][ T7592] [ 801.938620][ T7592] dump_stack_lvl+0x100/0x190 [ 801.938640][ T7592] should_fail_ex.cold+0x5/0xa [ 801.938659][ T7592] should_failslab+0xc2/0x120 [ 801.938679][ T7592] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.938698][ T7592] ? __alloc_skb+0x140/0x710 [ 801.938719][ T7592] __alloc_skb+0x140/0x710 [ 801.938735][ T7592] ? __alloc_skb+0x5b7/0x710 [ 801.938751][ T7592] ? __pfx___alloc_skb+0x10/0x10 [ 801.938767][ T7592] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.938789][ T7592] ? lockdep_hardirqs_on+0x78/0x100 [ 801.938810][ T7592] nsim_dev_trap_report_work+0x2af/0xd20 [ 801.938839][ T7592] process_one_work+0xa23/0x1940 [ 801.938865][ T7592] ? __pfx_process_one_work+0x10/0x10 [ 801.938893][ T7592] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.938914][ T7592] worker_thread+0x5ef/0xe50 [ 801.938939][ T7592] ? kthread+0x13a/0x450 [ 801.938952][ T7592] ? __pfx_worker_thread+0x10/0x10 [ 801.938968][ T7592] kthread+0x370/0x450 [ 801.938981][ T7592] ? __pfx_kthread+0x10/0x10 [ 801.938997][ T7592] ret_from_fork+0x72b/0xd50 [ 801.939019][ T7592] ? __pfx_ret_from_fork+0x10/0x10 [ 801.939042][ T7592] ? __switch_to+0x800/0x10f0 [ 801.939058][ T7592] ? __pfx_kthread+0x10/0x10 [ 801.939074][ T7592] ret_from_fork_asm+0x1a/0x30 [ 801.939107][ T7592] [ 801.939164][ T7592] FAULT_INJECTION: forcing a failure. [ 801.939164][ T7592] name failslab, interval 1, probability 100, space 0, times 56 [ 801.974483][ T9477] CPU: 0 UID: 0 PID: 9477 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.974508][ T9477] Tainted: [L]=SOFTLOCKUP [ 801.974514][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.974523][ T9477] Workqueue: events vidtv_mux_tick [ 801.974548][ T9477] Call Trace: [ 801.974553][ T9477] [ 801.974559][ T9477] dump_stack_lvl+0x100/0x190 [ 801.974581][ T9477] should_fail_ex.cold+0x5/0xa [ 801.974601][ T9477] should_failslab+0xc2/0x120 [ 801.974622][ T9477] __kmalloc_cache_noprof+0x91/0x6c0 [ 801.974649][ T9477] ? vidtv_s302m_encode+0x1c3/0x1860 [ 801.974672][ T9477] vidtv_s302m_encode+0x1c3/0x1860 [ 801.974691][ T9477] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 801.974718][ T9477] ? vidtv_memset+0x50/0x90 [ 801.974734][ T9477] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 801.974751][ T9477] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 801.974773][ T9477] ? memset_orig+0x36/0xb0 [ 801.974797][ T9477] vidtv_mux_tick+0x4e4/0x1460 [ 801.974834][ T9477] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 801.974856][ T9477] ? __lock_acquire+0x49f/0x1a40 [ 801.974887][ T9477] ? preempt_schedule_thunk+0x16/0x40 [ 801.974908][ T9477] process_one_work+0xa23/0x1940 [ 801.974935][ T9477] ? __pfx_process_one_work+0x10/0x10 [ 801.974958][ T9477] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 801.974981][ T9477] worker_thread+0x5ef/0xe50 [ 801.975003][ T9477] ? __pfx_worker_thread+0x10/0x10 [ 801.975021][ T9477] ? kthread+0x13a/0x450 [ 801.975035][ T9477] ? __pfx_worker_thread+0x10/0x10 [ 801.975050][ T9477] kthread+0x370/0x450 [ 801.975064][ T9477] ? __pfx_kthread+0x10/0x10 [ 801.975081][ T9477] ret_from_fork+0x72b/0xd50 [ 801.975104][ T9477] ? __pfx_ret_from_fork+0x10/0x10 [ 801.975126][ T9477] ? __switch_to+0x800/0x10f0 [ 801.975142][ T9477] ? __pfx_kthread+0x10/0x10 [ 801.975158][ T9477] ret_from_fork_asm+0x1a/0x30 [ 801.975191][ T9477] [ 801.975216][ T9477] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 801.979607][ T7592] CPU: 1 UID: 0 PID: 7592 Comm: kworker/u8:54 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.979631][ T7592] Tainted: [L]=SOFTLOCKUP [ 801.979636][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.979646][ T7592] Workqueue: events_unbound nsim_dev_trap_report_work [ 801.979665][ T7592] Call Trace: [ 801.979669][ T7592] [ 801.979674][ T7592] dump_stack_lvl+0x100/0x190 [ 801.979691][ T7592] should_fail_ex.cold+0x5/0xa [ 801.979707][ T7592] should_failslab+0xc2/0x120 [ 801.979726][ T7592] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.979744][ T7592] ? __alloc_skb+0x140/0x710 [ 801.979762][ T7592] __alloc_skb+0x140/0x710 [ 801.979778][ T7592] ? __alloc_skb+0x5b7/0x710 [ 801.979794][ T7592] ? __pfx___alloc_skb+0x10/0x10 [ 801.979809][ T7592] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.979830][ T7592] ? lockdep_hardirqs_on+0x78/0x100 [ 801.979848][ T7592] nsim_dev_trap_report_work+0x2af/0xd20 [ 801.979869][ T7592] process_one_work+0xa23/0x1940 [ 801.979893][ T7592] ? __pfx_process_one_work+0x10/0x10 [ 801.979911][ T7592] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.979930][ T7592] worker_thread+0x5ef/0xe50 [ 801.979948][ T7592] ? kthread+0x13a/0x450 [ 801.979960][ T7592] ? __pfx_worker_thread+0x10/0x10 [ 801.979975][ T7592] kthread+0x370/0x450 [ 801.979988][ T7592] ? __pfx_kthread+0x10/0x10 [ 801.980002][ T7592] ret_from_fork+0x72b/0xd50 [ 801.980022][ T7592] ? __pfx_ret_from_fork+0x10/0x10 [ 801.980043][ T7592] ? __switch_to+0x800/0x10f0 [ 801.980057][ T7592] ? __pfx_kthread+0x10/0x10 [ 801.980071][ T7592] ret_from_fork_asm+0x1a/0x30 [ 801.980096][ T7592] [ 801.980130][ T7592] FAULT_INJECTION: forcing a failure. [ 801.980130][ T7592] name failslab, interval 1, probability 100, space 0, times 54 [ 801.985536][ T9477] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 801.985552][ T9477] CPU: 0 UID: 0 PID: 9477 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.985575][ T9477] Tainted: [L]=SOFTLOCKUP [ 801.985581][ T9477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.985592][ T9477] Workqueue: events vidtv_mux_tick [ 801.985612][ T9477] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 801.985635][ T9477] Code: 37 aa f9 31 ff 89 de e8 d5 31 aa f9 84 db 0f 85 37 0d 00 00 e8 b8 37 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 801.985651][ T9477] RSP: 0018:ffffc90007d3f830 EFLAGS: 00010246 [ 801.985665][ T9477] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 801.985676][ T9477] RDX: 0000000000000000 RSI: ffffffff88602888 RDI: ffff88813fe238c0 [ 801.985687][ T9477] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 801.985697][ T9477] R10: ffffffff8edee673 R11: 0000000000000001 R12: 0000000000000000 [ 801.985708][ T9477] R13: dffffc0000000000 R14: ffff888036ee4700 R15: ffff888026404000 [ 801.985720][ T9477] FS: 0000000000000000(0000) GS:ffff888123ddc000(0000) knlGS:0000000000000000 [ 801.985737][ T9477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 801.985748][ T9477] CR2: 0000001b31b0fff8 CR3: 000000000e994000 CR4: 00000000003526f0 [ 801.985759][ T9477] DR0: 00000000000000f8 DR1: 0000000000000000 DR2: 0000000000000000 [ 801.985770][ T9477] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 801.985780][ T9477] Call Trace: [ 801.985785][ T9477] [ 801.985792][ T9477] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 801.992051][ T7592] CPU: 1 UID: 0 PID: 7592 Comm: kworker/u8:54 Tainted: G L syzkaller #0 PREEMPT(full) [ 801.992075][ T7592] Tainted: [L]=SOFTLOCKUP [ 801.992080][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 801.992089][ T7592] Workqueue: events_unbound nsim_dev_trap_report_work [ 801.992106][ T7592] Call Trace: [ 801.992110][ T7592] [ 801.992115][ T7592] dump_stack_lvl+0x100/0x190 [ 801.992132][ T7592] should_fail_ex.cold+0x5/0xa [ 801.992148][ T7592] should_failslab+0xc2/0x120 [ 801.992166][ T7592] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 801.992183][ T7592] ? __alloc_skb+0x5b7/0x710 [ 801.992199][ T7592] ? __alloc_skb+0x140/0x710 [ 801.992216][ T7592] __alloc_skb+0x140/0x710 [ 801.992231][ T7592] ? __alloc_skb+0x5b7/0x710 [ 801.992247][ T7592] ? __pfx___alloc_skb+0x10/0x10 [ 801.992263][ T7592] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 801.992283][ T7592] ? lockdep_hardirqs_on+0x78/0x100 [ 801.992300][ T7592] nsim_dev_trap_report_work+0x2af/0xd20 [ 801.992321][ T7592] process_one_work+0xa23/0x1940 [ 801.992340][ T7592] ? __pfx_process_one_work+0x10/0x10 [ 801.992358][ T7592] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 801.992378][ T7592] worker_thread+0x5ef/0xe50 [ 801.992397][ T7592] ? kthread+0x13a/0x450 [ 801.992410][ T7592] ? __pfx_worker_thread+0x10/0x10 [ 801.992425][ T7592] kthread+0x370/0x450 [ 801.992438][ T7592] ? __pfx_kthread+0x10/0x10 [ 801.992452][ T7592] ret_from_fork+0x72b/0xd50 [ 801.992473][ T7592] ? __pfx_ret_from_fork+0x10/0x10 [ 801.992494][ T7592] ? __switch_to+0x800/0x10f0 [ 801.992508][ T7592] ? __pfx_kthread+0x10/0x10 [ 801.992523][ T7592] ret_from_fork_asm+0x1a/0x30 [ 801.992548][ T7592] [ 801.992579][ T7592] FAULT_INJECTION: forcing a failure. [ 801.992579][ T7592] name failslab, interval 1, probability 100, space 0, times 53 [ 801.998819][ T9477] ? vidtv_memset+0x50/0x90 [ 801.998837][ T9477] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 801.998855][ T9477] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 801.998878][ T9477] ? memset_orig+0x36/0xb0 [ 801.998900][ T9477] vidtv_mux_tick+0x4e4/0x1460 [ 801.998928][ T9477] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 801.998951][ T9477] ? __lock_acquire+0x49f/0x1a40 [ 801.998977][ T9477] ? preempt_schedule_thunk+0x16/0x40 [ 801.998996][ T9477] process_one_work+0xa23/0x1940 [ 801.999018][ T9477] ? __pfx_process_one_work+0x10/0x10 [ 801.999039][ T9477] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 801.999062][ T9477] worker_thread+0x5ef/0xe50 [ 801.999083][ T9477] ? __pfx_worker_thread+0x10/0x10 [ 802.004452][ T7592] CPU: 1 UID: 0 PID: 7592 Comm: kworker/u8:54 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.004473][ T7592] Tainted: [L]=SOFTLOCKUP [ 802.004479][ T7592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.004488][ T7592] Workqueue: events_unbound nsim_dev_trap_report_work [ 802.004506][ T7592] Call Trace: [ 802.004511][ T7592] [ 802.004516][ T7592] dump_stack_lvl+0x100/0x190 [ 802.004533][ T7592] should_fail_ex.cold+0x5/0xa [ 802.004550][ T7592] should_failslab+0xc2/0x120 [ 802.004568][ T7592] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.004586][ T7592] ? __alloc_skb+0x5b7/0x710 [ 802.004602][ T7592] ? __alloc_skb+0x140/0x710 [ 802.004620][ T7592] __alloc_skb+0x140/0x710 [ 802.004636][ T7592] ? __alloc_skb+0x5b7/0x710 [ 802.004653][ T7592] ? __pfx___alloc_skb+0x10/0x10 [ 802.004669][ T7592] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 802.004690][ T7592] ? lockdep_hardirqs_on+0x78/0x100 [ 802.004708][ T7592] nsim_dev_trap_report_work+0x2af/0xd20 [ 802.004730][ T7592] process_one_work+0xa23/0x1940 [ 802.004748][ T7592] ? __pfx_process_one_work+0x10/0x10 [ 802.004768][ T7592] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 802.004787][ T7592] worker_thread+0x5ef/0xe50 [ 802.004805][ T7592] ? kthread+0x13a/0x450 [ 802.004819][ T7592] ? __pfx_worker_thread+0x10/0x10 [ 802.004834][ T7592] kthread+0x370/0x450 [ 802.004848][ T7592] ? __pfx_kthread+0x10/0x10 [ 802.004862][ T7592] ret_from_fork+0x72b/0xd50 [ 802.004887][ T7592] ? __pfx_ret_from_fork+0x10/0x10 [ 802.004908][ T7592] ? __switch_to+0x800/0x10f0 [ 802.004923][ T7592] ? __pfx_kthread+0x10/0x10 [ 802.004938][ T7592] ret_from_fork_asm+0x1a/0x30 [ 802.004963][ T7592] [ 802.029778][ C1] FAULT_INJECTION: forcing a failure. [ 802.029778][ C1] name failslab, interval 1, probability 100, space 0, times 52 [ 802.030245][ T9477] ? kthread+0x13a/0x450 [ 802.030264][ T9477] ? __pfx_worker_thread+0x10/0x10 [ 802.030282][ T9477] kthread+0x370/0x450 [ 802.035299][ C1] CPU: 1 UID: 0 PID: 7608 Comm: kworker/u8:70 Tainted: G L syzkaller #0 PREEMPT(full) [ 802.035326][ C1] Tainted: [L]=SOFTLOCKUP [ 802.035331][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.035342][ C1] Workqueue: events_unbound toggle_allocation_gate [ 802.035361][ C1] Call Trace: [ 802.035368][ C1] [ 802.035374][ C1] dump_stack_lvl+0x100/0x190 [ 802.035392][ C1] should_fail_ex.cold+0x5/0xa [ 802.035410][ C1] should_failslab+0xc2/0x120 [ 802.035430][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.035449][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.035466][ C1] ? __alloc_skb+0x140/0x710 [ 802.035484][ C1] __alloc_skb+0x140/0x710 [ 802.035500][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.035516][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 802.035534][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.035558][ C1] __netdev_alloc_skb+0x7a/0x960 [ 802.035577][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.035608][ C1] ? sched_balance_rq+0x837/0x3b10 [ 802.035632][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.035652][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.035671][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.035693][ C1] ? do_raw_spin_lock+0x128/0x260 [ 802.035716][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.035737][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.035760][ C1] __iterate_interfaces+0x2e6/0x650 [ 802.035777][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.035797][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.035817][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.035837][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.035862][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.035891][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 802.035918][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 802.035941][ C1] handle_softirqs+0x1ea/0x9b0 [ 802.035964][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 802.035983][ C1] ? _raw_spin_unlock+0x28/0x50 [ 802.036006][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.036022][ C1] __irq_exit_rcu+0x162/0x210 [ 802.036041][ C1] irq_exit_rcu+0x9/0x30 [ 802.036060][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.036077][ C1] [ 802.036083][ C1] [ 802.036088][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.036106][ C1] RIP: 0010:smp_call_function_many_cond+0x593/0x1870 [ 802.036127][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 64 99 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 41 [ 802.036142][ C1] RSP: 0018:ffffc90002fdf858 EFLAGS: 00000293 [ 802.036155][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fdc702 [ 802.036165][ C1] RDX: ffff888035b92540 RSI: ffffffff81fdc6dc RDI: ffff888035b92540 [ 802.036175][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 802.036185][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 802.036194][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 802.036206][ C1] ? smp_call_function_many_cond+0x5b2/0x1870 [ 802.036225][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 802.036245][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 802.036265][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 802.036291][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 802.036309][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 802.036334][ C1] ? __pfx___text_poke+0x10/0x10 [ 802.036349][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 802.036371][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 802.036390][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 802.036409][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 802.036427][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 802.036447][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 802.036465][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 802.036486][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 802.036504][ C1] jump_label_update+0x37a/0x550 [ 802.036523][ C1] static_key_disable_cpuslocked+0x162/0x1c0 [ 802.036543][ C1] static_key_disable+0x1a/0x20 [ 802.036561][ C1] toggle_allocation_gate+0x149/0x2d0 [ 802.036579][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 802.036599][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 802.036616][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.036639][ C1] process_one_work+0xa23/0x1940 [ 802.036659][ C1] ? __pfx_process_one_work+0x10/0x10 [ 802.036678][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 802.036698][ C1] worker_thread+0x5ef/0xe50 [ 802.036717][ C1] ? kthread+0x13a/0x450 [ 802.036730][ C1] ? __pfx_worker_thread+0x10/0x10 [ 802.036747][ C1] kthread+0x370/0x450 [ 802.036761][ C1] ? __pfx_kthread+0x10/0x10 [ 802.036776][ C1] ret_from_fork+0x72b/0xd50 [ 802.036796][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 802.036818][ C1] ? __switch_to+0x800/0x10f0 [ 802.036834][ C1] ? __pfx_kthread+0x10/0x10 [ 802.036849][ C1] ret_from_fork_asm+0x1a/0x30 [ 802.036874][ C1] [ 802.036954][ C1] FAULT_INJECTION: forcing a failure. [ 802.036954][ C1] name failslab, interval 1, probability 100, space 0, times 51 [ 802.040797][ T9477] ? __pfx_kthread+0x10/0x10 [ 802.040817][ T9477] ret_from_fork+0x72b/0xd50 [ 802.040841][ T9477] ? __pfx_ret_from_fork+0x10/0x10 [ 802.040865][ T9477] ? __switch_to+0x800/0x10f0 [ 802.040885][ T9477] ? __pfx_kthread+0x10/0x10 [ 802.040902][ T9477] ret_from_fork_asm+0x1a/0x30 [ 802.040931][ T9477] [ 802.040937][ T9477] Modules linked in: [ 802.041594][ C0] FAULT_INJECTION: forcing a failure. [ 802.041594][ C0] name failslab, interval 1, probability 100, space 0, times 51 [ 802.045795][ C1] CPU: 1 UID: 0 PID: 7608 Comm: kworker/u8:70 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.045822][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.045828][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.045838][ C1] Workqueue: events_unbound toggle_allocation_gate [ 802.045859][ C1] Call Trace: [ 802.045865][ C1] [ 802.045871][ C1] dump_stack_lvl+0x100/0x190 [ 802.045894][ C1] should_fail_ex.cold+0x5/0xa [ 802.045912][ C1] should_failslab+0xc2/0x120 [ 802.045932][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.045950][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.045967][ C1] ? __alloc_skb+0x140/0x710 [ 802.045986][ C1] __alloc_skb+0x140/0x710 [ 802.046002][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.046019][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 802.046036][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.046060][ C1] __netdev_alloc_skb+0x7a/0x960 [ 802.046079][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.046099][ C1] ? sched_balance_rq+0x837/0x3b10 [ 802.046122][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.046142][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.046161][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 802.046183][ C1] ? do_raw_spin_lock+0x128/0x260 [ 802.046205][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.046225][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.046248][ C1] __iterate_interfaces+0x2e6/0x650 [ 802.046265][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.046286][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.046305][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.046326][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.046351][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.046374][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 802.046400][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 802.046424][ C1] handle_softirqs+0x1ea/0x9b0 [ 802.046444][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 802.046464][ C1] ? _raw_spin_unlock+0x28/0x50 [ 802.046488][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.046505][ C1] __irq_exit_rcu+0x162/0x210 [ 802.046524][ C1] irq_exit_rcu+0x9/0x30 [ 802.046543][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.046560][ C1] [ 802.046565][ C1] [ 802.046571][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.046588][ C1] RIP: 0010:smp_call_function_many_cond+0x593/0x1870 [ 802.046609][ C1] Code: 00 fc ff df 48 8b 54 24 08 49 89 d5 49 89 d4 49 c1 ed 03 41 83 e4 07 49 01 c5 41 83 c4 03 e8 64 99 0c 00 f3 90 41 0f b6 45 00 <41> 38 c4 7c 08 84 c0 0f 85 a8 10 00 00 8b 45 08 31 ff 83 e0 01 41 [ 802.046624][ C1] RSP: 0018:ffffc90002fdf858 EFLAGS: 00000293 [ 802.046636][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff81fdc702 [ 802.046646][ C1] RDX: ffff888035b92540 RSI: ffffffff81fdc6dc RDI: ffff888035b92540 [ 802.046656][ C1] RBP: ffff8880b8443680 R08: 0000000000000005 R09: 0000000000000000 [ 802.046666][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000003 [ 802.046675][ C1] R13: ffffed10170886d1 R14: 0000000000000001 R15: ffff8880b853c880 [ 802.046688][ C1] ? smp_call_function_many_cond+0x5b2/0x1870 [ 802.046707][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 802.046727][ C1] ? smp_call_function_many_cond+0x58c/0x1870 [ 802.046747][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 802.046772][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 802.046792][ C1] ? __pfx_text_poke_memcpy+0x10/0x10 [ 802.046817][ C1] ? __pfx___text_poke+0x10/0x10 [ 802.046831][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 802.046854][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 802.046872][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 802.046895][ C1] smp_text_poke_batch_finish+0x337/0xc60 [ 802.046913][ C1] ? __kmalloc_cache_node_noprof+0xab/0x6c0 [ 802.046932][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 802.046951][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 802.046972][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 802.046991][ C1] jump_label_update+0x37a/0x550 [ 802.047010][ C1] static_key_disable_cpuslocked+0x162/0x1c0 [ 802.047029][ C1] static_key_disable+0x1a/0x20 [ 802.047046][ C1] toggle_allocation_gate+0x149/0x2d0 [ 802.047065][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 802.047085][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 802.047102][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.047125][ C1] process_one_work+0xa23/0x1940 [ 802.047145][ C1] ? __pfx_process_one_work+0x10/0x10 [ 802.047164][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 802.047184][ C1] worker_thread+0x5ef/0xe50 [ 802.047203][ C1] ? kthread+0x13a/0x450 [ 802.047217][ C1] ? __pfx_worker_thread+0x10/0x10 [ 802.047233][ C1] kthread+0x370/0x450 [ 802.047247][ C1] ? __pfx_kthread+0x10/0x10 [ 802.047262][ C1] ret_from_fork+0x72b/0xd50 [ 802.047283][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 802.047305][ C1] ? __switch_to+0x800/0x10f0 [ 802.047320][ C1] ? __pfx_kthread+0x10/0x10 [ 802.047336][ C1] ret_from_fork_asm+0x1a/0x30 [ 802.047361][ C1] [ 802.049455][ T5619] FAULT_INJECTION: forcing a failure. [ 802.049455][ T5619] name failslab, interval 1, probability 100, space 0, times 50 [ 802.049885][ C0] CPU: 0 UID: 0 PID: 9477 Comm: kworker/0:2 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.049911][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.049918][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.049929][ C0] Workqueue: events vidtv_mux_tick [ 802.049950][ C0] Call Trace: [ 802.049956][ C0] [ 802.049962][ C0] dump_stack_lvl+0x100/0x190 [ 802.049981][ C0] should_fail_ex.cold+0x5/0xa [ 802.049999][ C0] should_failslab+0xc2/0x120 [ 802.050019][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.050038][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.050056][ C0] ? __alloc_skb+0x140/0x710 [ 802.050074][ C0] __alloc_skb+0x140/0x710 [ 802.050090][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.050107][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.050123][ C0] ? lock_release+0x24d/0x310 [ 802.050142][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.050166][ C0] __netdev_alloc_skb+0x7a/0x960 [ 802.050184][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.050205][ C0] ? tmigr_handle_remote_up+0x8ce/0xab0 [ 802.050222][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.050245][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.050272][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.050292][ C0] ? do_raw_spin_lock+0x128/0x260 [ 802.050315][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.050335][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.050358][ C0] __iterate_interfaces+0x2e6/0x650 [ 802.050376][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.050401][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.050420][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.050441][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.050466][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.050490][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 802.050515][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 802.050539][ C0] handle_softirqs+0x1ea/0x9b0 [ 802.050560][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 802.050579][ C0] ? _raw_spin_unlock+0x28/0x50 [ 802.050603][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.050619][ C0] __irq_exit_rcu+0x162/0x210 [ 802.050638][ C0] irq_exit_rcu+0x9/0x30 [ 802.050657][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.050674][ C0] [ 802.050679][ C0] [ 802.050685][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.050702][ C0] RIP: 0010:oops_exit+0x0/0x30 [ 802.050718][ C0] Code: d0 77 22 91 e8 a1 31 ef ff e8 cc 50 43 00 5b c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 53 e8 a6 50 43 00 8b 1d 60 a7 a3 12 31 ff 89 de e8 07 [ 802.050732][ C0] RSP: 0018:ffffc90007d3f6b0 EFLAGS: 00000206 [ 802.050744][ C0] RAX: 0000000000000046 RBX: ffffc90007d3f788 RCX: ffffffff81c709af [ 802.050754][ C0] RDX: ffff888020348000 RSI: ffffffff81c709bd RDI: ffffffff94693124 [ 802.050765][ C0] RBP: 000000000000000b R08: 0000000000000007 R09: 0000000000000000 [ 802.050774][ C0] R10: 0000000000000000 R11: fffffffffffc2ef0 R12: 0000000000000293 [ 802.050784][ C0] R13: ffffc90007d3f6ec R14: 0000000000000001 R15: dffffc0000000000 [ 802.050797][ C0] ? add_taint+0x5f/0xb0 [ 802.050811][ C0] ? add_taint+0x6d/0xb0 [ 802.050826][ C0] oops_end+0x65/0xe0 [ 802.050846][ C0] exc_general_protection+0x112/0x240 [ 802.050870][ C0] asm_exc_general_protection+0x26/0x30 [ 802.050886][ C0] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 802.050905][ C0] Code: 37 aa f9 31 ff 89 de e8 d5 31 aa f9 84 db 0f 85 37 0d 00 00 e8 b8 37 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 802.050918][ C0] RSP: 0018:ffffc90007d3f830 EFLAGS: 00010246 [ 802.050930][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 802.050940][ C0] RDX: 0000000000000000 RSI: ffffffff88602888 RDI: ffff88813fe238c0 [ 802.050950][ C0] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 802.050960][ C0] R10: ffffffff8edee673 R11: 0000000000000001 R12: 0000000000000000 [ 802.050970][ C0] R13: dffffc0000000000 R14: ffff888036ee4700 R15: ffff888026404000 [ 802.050983][ C0] ? vidtv_s302m_encode+0x258/0x1860 [ 802.051003][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 802.051026][ C0] ? vidtv_memset+0x50/0x90 [ 802.051041][ C0] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 802.051057][ C0] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 802.051077][ C0] ? memset_orig+0x36/0xb0 [ 802.051097][ C0] vidtv_mux_tick+0x4e4/0x1460 [ 802.051122][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 802.051141][ C0] ? __lock_acquire+0x49f/0x1a40 [ 802.051164][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 802.051182][ C0] process_one_work+0xa23/0x1940 [ 802.051202][ C0] ? __pfx_process_one_work+0x10/0x10 [ 802.051222][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 802.051242][ C0] worker_thread+0x5ef/0xe50 [ 802.051260][ C0] ? __pfx_worker_thread+0x10/0x10 [ 802.051277][ C0] ? kthread+0x13a/0x450 [ 802.051291][ C0] ? __pfx_worker_thread+0x10/0x10 [ 802.051307][ C0] kthread+0x370/0x450 [ 802.051321][ C0] ? __pfx_kthread+0x10/0x10 [ 802.051336][ C0] ret_from_fork+0x72b/0xd50 [ 802.051357][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 802.051378][ C0] ? __switch_to+0x800/0x10f0 [ 802.051398][ C0] ? __pfx_kthread+0x10/0x10 [ 802.051414][ C0] ret_from_fork_asm+0x1a/0x30 [ 802.051440][ C0] [ 802.051456][ C0] FAULT_INJECTION: forcing a failure. [ 802.051456][ C0] name failslab, interval 1, probability 100, space 0, times 49 [ 802.055786][ T5619] CPU: 1 UID: 0 PID: 5619 Comm: kworker/u9:4 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.055813][ T5619] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.055819][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.055829][ T5619] Workqueue: hci2 hci_conn_timeout [ 802.055850][ T5619] Call Trace: [ 802.055855][ T5619] [ 802.055860][ T5619] dump_stack_lvl+0x100/0x190 [ 802.055878][ T5619] should_fail_ex.cold+0x5/0xa [ 802.055898][ T5619] ? __kmalloc_cache_noprof+0x6b/0x6c0 [ 802.055922][ T5619] ? __pfx_abort_conn_sync+0x10/0x10 [ 802.055939][ T5619] should_failslab+0xc2/0x120 [ 802.055957][ T5619] ? __pfx_abort_conn_sync+0x10/0x10 [ 802.055973][ T5619] __kmalloc_cache_noprof+0x91/0x6c0 [ 802.055995][ T5619] ? __mutex_unlock_slowpath+0x35d/0x930 [ 802.056013][ T5619] ? hci_cmd_sync_submit+0xbc/0x330 [ 802.056034][ T5619] ? __pfx_abort_conn_sync+0x10/0x10 [ 802.056050][ T5619] hci_cmd_sync_submit+0xbc/0x330 [ 802.056070][ T5619] ? __pfx_abort_conn_sync+0x10/0x10 [ 802.056086][ T5619] hci_cmd_sync_run+0x94/0xf0 [ 802.056105][ T5619] ? __pfx_abort_conn_sync+0x10/0x10 [ 802.056120][ T5619] hci_cmd_sync_run_once+0x1c5/0x240 [ 802.056143][ T5619] hci_abort_conn+0x1dc/0x230 [ 802.056163][ T5619] hci_conn_timeout+0x1ee/0x230 [ 802.056183][ T5619] process_one_work+0xa23/0x1940 [ 802.056202][ T5619] ? __pfx_process_one_work+0x10/0x10 [ 802.056221][ T5619] ? __pfx_hci_conn_timeout+0x10/0x10 [ 802.056242][ T5619] worker_thread+0x5ef/0xe50 [ 802.056260][ T5619] ? kthread+0x13a/0x450 [ 802.056274][ T5619] ? __pfx_worker_thread+0x10/0x10 [ 802.056289][ T5619] kthread+0x370/0x450 [ 802.056303][ T5619] ? __pfx_kthread+0x10/0x10 [ 802.056318][ T5619] ret_from_fork+0x72b/0xd50 [ 802.056338][ T5619] ? __pfx_ret_from_fork+0x10/0x10 [ 802.056359][ T5619] ? __switch_to+0x800/0x10f0 [ 802.056374][ T5619] ? __pfx_kthread+0x10/0x10 [ 802.056389][ T5619] ret_from_fork_asm+0x1a/0x30 [ 802.056415][ T5619] [ 802.056466][ T5619] Bluetooth: hci2: command tx timeout [ 802.058463][ C0] CPU: 0 UID: 0 PID: 9477 Comm: kworker/0:2 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.058490][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.058497][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.058509][ C0] Workqueue: events vidtv_mux_tick [ 802.058530][ C0] Call Trace: [ 802.058536][ C0] [ 802.058543][ C0] dump_stack_lvl+0x100/0x190 [ 802.058561][ C0] should_fail_ex.cold+0x5/0xa [ 802.058578][ C0] should_failslab+0xc2/0x120 [ 802.058597][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.058615][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.058632][ C0] ? __alloc_skb+0x140/0x710 [ 802.058650][ C0] __alloc_skb+0x140/0x710 [ 802.058667][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.058683][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.058700][ C0] ? lock_release+0x24d/0x310 [ 802.058718][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.058741][ C0] __netdev_alloc_skb+0x7a/0x960 [ 802.058760][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.058780][ C0] ? tmigr_handle_remote_up+0x8ce/0xab0 [ 802.058796][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.058819][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.058838][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.058857][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 802.058878][ C0] ? do_raw_spin_lock+0x128/0x260 [ 802.058901][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.058921][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.058944][ C0] __iterate_interfaces+0x2e6/0x650 [ 802.058961][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.058982][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.059001][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.059021][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.059045][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.059069][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 802.059094][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 802.059118][ C0] handle_softirqs+0x1ea/0x9b0 [ 802.059139][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 802.059158][ C0] ? _raw_spin_unlock+0x28/0x50 [ 802.059180][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.059197][ C0] __irq_exit_rcu+0x162/0x210 [ 802.059216][ C0] irq_exit_rcu+0x9/0x30 [ 802.059235][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.059251][ C0] [ 802.059256][ C0] [ 802.059262][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.059279][ C0] RIP: 0010:oops_exit+0x0/0x30 [ 802.059294][ C0] Code: d0 77 22 91 e8 a1 31 ef ff e8 cc 50 43 00 5b c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 53 e8 a6 50 43 00 8b 1d 60 a7 a3 12 31 ff 89 de e8 07 [ 802.059308][ C0] RSP: 0018:ffffc90007d3f6b0 EFLAGS: 00000206 [ 802.059319][ C0] RAX: 0000000000000046 RBX: ffffc90007d3f788 RCX: ffffffff81c709af [ 802.059330][ C0] RDX: ffff888020348000 RSI: ffffffff81c709bd RDI: ffffffff94693124 [ 802.059340][ C0] RBP: 000000000000000b R08: 0000000000000007 R09: 0000000000000000 [ 802.059350][ C0] R10: 0000000000000000 R11: fffffffffffc2ef0 R12: 0000000000000293 [ 802.059360][ C0] R13: ffffc90007d3f6ec R14: 0000000000000001 R15: dffffc0000000000 [ 802.059372][ C0] ? add_taint+0x5f/0xb0 [ 802.059391][ C0] ? add_taint+0x6d/0xb0 [ 802.059406][ C0] oops_end+0x65/0xe0 [ 802.059426][ C0] exc_general_protection+0x112/0x240 [ 802.059450][ C0] asm_exc_general_protection+0x26/0x30 [ 802.059466][ C0] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 802.059485][ C0] Code: 37 aa f9 31 ff 89 de e8 d5 31 aa f9 84 db 0f 85 37 0d 00 00 e8 b8 37 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 802.059499][ C0] RSP: 0018:ffffc90007d3f830 EFLAGS: 00010246 [ 802.059511][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 802.059521][ C0] RDX: 0000000000000000 RSI: ffffffff88602888 RDI: ffff88813fe238c0 [ 802.059531][ C0] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 802.059541][ C0] R10: ffffffff8edee673 R11: 0000000000000001 R12: 0000000000000000 [ 802.059551][ C0] R13: dffffc0000000000 R14: ffff888036ee4700 R15: ffff888026404000 [ 802.059564][ C0] ? vidtv_s302m_encode+0x258/0x1860 [ 802.059584][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 802.059607][ C0] ? vidtv_memset+0x50/0x90 [ 802.059622][ C0] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 802.059637][ C0] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 802.059657][ C0] ? memset_orig+0x36/0xb0 [ 802.059676][ C0] vidtv_mux_tick+0x4e4/0x1460 [ 802.059701][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 802.059722][ C0] ? __lock_acquire+0x49f/0x1a40 [ 802.059744][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 802.059761][ C0] process_one_work+0xa23/0x1940 [ 802.059781][ C0] ? __pfx_process_one_work+0x10/0x10 [ 802.059800][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 802.059819][ C0] worker_thread+0x5ef/0xe50 [ 802.059838][ C0] ? __pfx_worker_thread+0x10/0x10 [ 802.059854][ C0] ? kthread+0x13a/0x450 [ 802.059869][ C0] ? __pfx_worker_thread+0x10/0x10 [ 802.059884][ C0] kthread+0x370/0x450 [ 802.059898][ C0] ? __pfx_kthread+0x10/0x10 [ 802.059913][ C0] ret_from_fork+0x72b/0xd50 [ 802.059934][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 802.059955][ C0] ? __switch_to+0x800/0x10f0 [ 802.059971][ C0] ? __pfx_kthread+0x10/0x10 [ 802.059986][ C0] ret_from_fork_asm+0x1a/0x30 [ 802.060012][ C0] [ 802.060026][ C0] FAULT_INJECTION: forcing a failure. [ 802.060026][ C0] name failslab, interval 1, probability 100, space 0, times 47 [ 802.061622][ T5619] FAULT_INJECTION: forcing a failure. [ 802.061622][ T5619] name failslab, interval 1, probability 100, space 0, times 47 [ 802.067443][ C0] CPU: 0 UID: 0 PID: 9477 Comm: kworker/0:2 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.067471][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.067477][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.067489][ C0] Workqueue: events vidtv_mux_tick [ 802.067510][ C0] Call Trace: [ 802.067515][ C0] [ 802.067522][ C0] dump_stack_lvl+0x100/0x190 [ 802.067542][ C0] should_fail_ex.cold+0x5/0xa [ 802.067562][ C0] should_failslab+0xc2/0x120 [ 802.067584][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.067605][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.067624][ C0] ? __alloc_skb+0x140/0x710 [ 802.067645][ C0] __alloc_skb+0x140/0x710 [ 802.067664][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.067681][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.067698][ C0] ? lock_release+0x24d/0x310 [ 802.067716][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.067740][ C0] __netdev_alloc_skb+0x7a/0x960 [ 802.067758][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.067778][ C0] ? tmigr_handle_remote_up+0x8ce/0xab0 [ 802.067795][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.067818][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.067838][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.067857][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 802.067879][ C0] ? do_raw_spin_lock+0x128/0x260 [ 802.067902][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.067921][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.067944][ C0] __iterate_interfaces+0x2e6/0x650 [ 802.067962][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.067982][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.068001][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.068022][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.068046][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.068069][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 802.068095][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 802.068118][ C0] handle_softirqs+0x1ea/0x9b0 [ 802.068138][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 802.068158][ C0] ? _raw_spin_unlock+0x28/0x50 [ 802.068180][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.068196][ C0] __irq_exit_rcu+0x162/0x210 [ 802.068215][ C0] irq_exit_rcu+0x9/0x30 [ 802.068234][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.068250][ C0] [ 802.068255][ C0] [ 802.068261][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.068278][ C0] RIP: 0010:oops_exit+0x0/0x30 [ 802.068293][ C0] Code: d0 77 22 91 e8 a1 31 ef ff e8 cc 50 43 00 5b c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 53 e8 a6 50 43 00 8b 1d 60 a7 a3 12 31 ff 89 de e8 07 [ 802.068307][ C0] RSP: 0018:ffffc90007d3f6b0 EFLAGS: 00000206 [ 802.068319][ C0] RAX: 0000000000000046 RBX: ffffc90007d3f788 RCX: ffffffff81c709af [ 802.068329][ C0] RDX: ffff888020348000 RSI: ffffffff81c709bd RDI: ffffffff94693124 [ 802.068340][ C0] RBP: 000000000000000b R08: 0000000000000007 R09: 0000000000000000 [ 802.068348][ C0] R10: 0000000000000000 R11: fffffffffffc2ef0 R12: 0000000000000293 [ 802.068358][ C0] R13: ffffc90007d3f6ec R14: 0000000000000001 R15: dffffc0000000000 [ 802.068371][ C0] ? add_taint+0x5f/0xb0 [ 802.068390][ C0] ? add_taint+0x6d/0xb0 [ 802.068405][ C0] oops_end+0x65/0xe0 [ 802.068423][ C0] exc_general_protection+0x112/0x240 [ 802.068448][ C0] asm_exc_general_protection+0x26/0x30 [ 802.068463][ C0] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 802.068482][ C0] Code: 37 aa f9 31 ff 89 de e8 d5 31 aa f9 84 db 0f 85 37 0d 00 00 e8 b8 37 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 802.068496][ C0] RSP: 0018:ffffc90007d3f830 EFLAGS: 00010246 [ 802.068508][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 802.068518][ C0] RDX: 0000000000000000 RSI: ffffffff88602888 RDI: ffff88813fe238c0 [ 802.068528][ C0] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 802.068537][ C0] R10: ffffffff8edee673 R11: 0000000000000001 R12: 0000000000000000 [ 802.068547][ C0] R13: dffffc0000000000 R14: ffff888036ee4700 R15: ffff888026404000 [ 802.068560][ C0] ? vidtv_s302m_encode+0x258/0x1860 [ 802.068580][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 802.068603][ C0] ? vidtv_memset+0x50/0x90 [ 802.068618][ C0] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 802.068633][ C0] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 802.068653][ C0] ? memset_orig+0x36/0xb0 [ 802.068672][ C0] vidtv_mux_tick+0x4e4/0x1460 [ 802.068698][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 802.068718][ C0] ? __lock_acquire+0x49f/0x1a40 [ 802.068741][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 802.068758][ C0] process_one_work+0xa23/0x1940 [ 802.068777][ C0] ? __pfx_process_one_work+0x10/0x10 [ 802.068796][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 802.068817][ C0] worker_thread+0x5ef/0xe50 [ 802.068835][ C0] ? __pfx_worker_thread+0x10/0x10 [ 802.068852][ C0] ? kthread+0x13a/0x450 [ 802.068866][ C0] ? __pfx_worker_thread+0x10/0x10 [ 802.068883][ C0] kthread+0x370/0x450 [ 802.068897][ C0] ? __pfx_kthread+0x10/0x10 [ 802.068912][ C0] ret_from_fork+0x72b/0xd50 [ 802.068933][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 802.068954][ C0] ? __switch_to+0x800/0x10f0 [ 802.068969][ C0] ? __pfx_kthread+0x10/0x10 [ 802.068985][ C0] ret_from_fork_asm+0x1a/0x30 [ 802.069010][ C0] [ 802.069024][ C0] FAULT_INJECTION: forcing a failure. [ 802.069024][ C0] name failslab, interval 1, probability 100, space 0, times 46 [ 802.074262][ T5619] CPU: 1 UID: 0 PID: 5619 Comm: kworker/u9:4 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.074289][ T5619] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.074295][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.074304][ T5619] Workqueue: hci2 hci_cmd_work [ 802.074321][ T5619] Call Trace: [ 802.074326][ T5619] [ 802.074332][ T5619] dump_stack_lvl+0x100/0x190 [ 802.074349][ T5619] should_fail_ex.cold+0x5/0xa [ 802.074364][ T5619] ? kmem_cache_alloc_noprof+0x6b/0x6a0 [ 802.074382][ T5619] should_failslab+0xc2/0x120 [ 802.074401][ T5619] kmem_cache_alloc_noprof+0x91/0x6a0 [ 802.074418][ T5619] ? skb_release_data+0x6ca/0x8e0 [ 802.074435][ T5619] ? skb_clone+0x190/0x400 [ 802.074454][ T5619] skb_clone+0x190/0x400 [ 802.074472][ T5619] hci_cmd_work+0x1e4/0x8a0 [ 802.074489][ T5619] process_one_work+0xa23/0x1940 [ 802.074509][ T5619] ? __pfx_process_one_work+0x10/0x10 [ 802.074527][ T5619] ? __pfx_hci_cmd_work+0x10/0x10 [ 802.074545][ T5619] worker_thread+0x5ef/0xe50 [ 802.074563][ T5619] ? kthread+0x13a/0x450 [ 802.074576][ T5619] ? __pfx_worker_thread+0x10/0x10 [ 802.074592][ T5619] kthread+0x370/0x450 [ 802.074606][ T5619] ? __pfx_kthread+0x10/0x10 [ 802.074621][ T5619] ret_from_fork+0x72b/0xd50 [ 802.074641][ T5619] ? __pfx_ret_from_fork+0x10/0x10 [ 802.074662][ T5619] ? __switch_to+0x800/0x10f0 [ 802.074677][ T5619] ? __pfx_kthread+0x10/0x10 [ 802.074691][ T5619] ret_from_fork_asm+0x1a/0x30 [ 802.074716][ T5619] [ 802.074761][ T5619] FAULT_INJECTION: forcing a failure. [ 802.074761][ T5619] name failslab, interval 1, probability 100, space 0, times 45 [ 802.093588][ C0] CPU: 0 UID: 0 PID: 9477 Comm: kworker/0:2 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.093616][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.093624][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.093636][ C0] Workqueue: events vidtv_mux_tick [ 802.093658][ C0] Call Trace: [ 802.093664][ C0] [ 802.093670][ C0] dump_stack_lvl+0x100/0x190 [ 802.093690][ C0] should_fail_ex.cold+0x5/0xa [ 802.093710][ C0] should_failslab+0xc2/0x120 [ 802.093732][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.093753][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.093772][ C0] ? __alloc_skb+0x140/0x710 [ 802.093793][ C0] __alloc_skb+0x140/0x710 [ 802.093812][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.093831][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.093850][ C0] ? lock_release+0x24d/0x310 [ 802.093871][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.093898][ C0] __netdev_alloc_skb+0x7a/0x960 [ 802.093920][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.093943][ C0] ? tmigr_handle_remote_up+0x8ce/0xab0 [ 802.093963][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.093990][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.094012][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.094034][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 802.094059][ C0] ? do_raw_spin_lock+0x128/0x260 [ 802.094085][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.094109][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.094134][ C0] __iterate_interfaces+0x2e6/0x650 [ 802.094155][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.094178][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.094201][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.094225][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.094253][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.094280][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 802.094310][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 802.094337][ C0] handle_softirqs+0x1ea/0x9b0 [ 802.094361][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 802.094387][ C0] ? _raw_spin_unlock+0x28/0x50 [ 802.094411][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.094427][ C0] __irq_exit_rcu+0x162/0x210 [ 802.094447][ C0] irq_exit_rcu+0x9/0x30 [ 802.094465][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.094483][ C0] [ 802.094488][ C0] [ 802.094494][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.094512][ C0] RIP: 0010:oops_exit+0x0/0x30 [ 802.094528][ C0] Code: d0 77 22 91 e8 a1 31 ef ff e8 cc 50 43 00 5b c3 cc cc cc cc 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 53 e8 a6 50 43 00 8b 1d 60 a7 a3 12 31 ff 89 de e8 07 [ 802.094542][ C0] RSP: 0018:ffffc90007d3f6b0 EFLAGS: 00000206 [ 802.094554][ C0] RAX: 0000000000000046 RBX: ffffc90007d3f788 RCX: ffffffff81c709af [ 802.094564][ C0] RDX: ffff888020348000 RSI: ffffffff81c709bd RDI: ffffffff94693124 [ 802.094574][ C0] RBP: 000000000000000b R08: 0000000000000007 R09: 0000000000000000 [ 802.094584][ C0] R10: 0000000000000000 R11: fffffffffffc2ef0 R12: 0000000000000293 [ 802.094594][ C0] R13: ffffc90007d3f6ec R14: 0000000000000001 R15: dffffc0000000000 [ 802.094607][ C0] ? add_taint+0x5f/0xb0 [ 802.094621][ C0] ? add_taint+0x6d/0xb0 [ 802.094635][ C0] oops_end+0x65/0xe0 [ 802.094655][ C0] exc_general_protection+0x112/0x240 [ 802.094679][ C0] asm_exc_general_protection+0x26/0x30 [ 802.094694][ C0] RIP: 0010:vidtv_s302m_encode+0x269/0x1860 [ 802.094714][ C0] Code: 37 aa f9 31 ff 89 de e8 d5 31 aa f9 84 db 0f 85 37 0d 00 00 e8 b8 37 aa f9 4c 89 e2 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e e7 14 00 00 48 8b 44 24 08 41 [ 802.094727][ C0] RSP: 0018:ffffc90007d3f830 EFLAGS: 00010246 [ 802.094739][ C0] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000400 [ 802.094748][ C0] RDX: 0000000000000000 RSI: ffffffff88602888 RDI: ffff88813fe238c0 [ 802.094758][ C0] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 802.094767][ C0] R10: ffffffff8edee673 R11: 0000000000000001 R12: 0000000000000000 [ 802.094776][ C0] R13: dffffc0000000000 R14: ffff888036ee4700 R15: ffff888026404000 [ 802.094789][ C0] ? vidtv_s302m_encode+0x258/0x1860 [ 802.094809][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 802.094832][ C0] ? vidtv_memset+0x50/0x90 [ 802.094846][ C0] ? vidtv_ts_pcr_write_into+0x45b/0x650 [ 802.094862][ C0] ? __pfx_vidtv_s302m_encode+0x10/0x10 [ 802.094882][ C0] ? memset_orig+0x36/0xb0 [ 802.094902][ C0] vidtv_mux_tick+0x4e4/0x1460 [ 802.094927][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 802.094947][ C0] ? __lock_acquire+0x49f/0x1a40 [ 802.094970][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 802.094987][ C0] process_one_work+0xa23/0x1940 [ 802.095007][ C0] ? __pfx_process_one_work+0x10/0x10 [ 802.095026][ C0] ? __pfx_vidtv_mux_tick+0x10/0x10 [ 802.095046][ C0] worker_thread+0x5ef/0xe50 [ 802.095065][ C0] ? __pfx_worker_thread+0x10/0x10 [ 802.095081][ C0] ? kthread+0x13a/0x450 [ 802.095095][ C0] ? __pfx_worker_thread+0x10/0x10 [ 802.095111][ C0] kthread+0x370/0x450 [ 802.095125][ C0] ? __pfx_kthread+0x10/0x10 [ 802.095140][ C0] ret_from_fork+0x72b/0xd50 [ 802.095161][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 802.095183][ C0] ? __switch_to+0x800/0x10f0 [ 802.095198][ C0] ? __pfx_kthread+0x10/0x10 [ 802.095214][ C0] ret_from_fork_asm+0x1a/0x30 [ 802.095238][ C0] [ 802.095261][ T9477] ---[ end trace 0000000000000000 ]--- [ 802.103137][ T4965] CPU: 1 UID: 0 PID: 4965 Comm: klogd Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.103166][ T4965] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.103173][ T4965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.103183][ T4965] Call Trace: [ 802.103188][ T4965] [ 802.103194][ T4965] dump_stack_lvl+0x100/0x190 [ 802.103216][ T4965] should_fail_ex.cold+0x5/0xa [ 802.103234][ T4965] should_failslab+0xc2/0x120 [ 802.103254][ T4965] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.103272][ T4965] ? __alloc_skb+0x5b7/0x710 [ 802.103290][ T4965] ? __alloc_skb+0x140/0x710 [ 802.103307][ T4965] __alloc_skb+0x140/0x710 [ 802.103323][ T4965] ? __alloc_skb+0x5b7/0x710 [ 802.103339][ T4965] ? __pfx___alloc_skb+0x10/0x10 [ 802.103355][ T4965] ? __x64_sys_syslog+0x74/0xb0 [ 802.103377][ T4965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.103395][ T4965] alloc_skb_with_frags+0xdd/0x760 [ 802.103414][ T4965] ? find_held_lock+0x2b/0x80 [ 802.103436][ T4965] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 802.103454][ T4965] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 802.103472][ T4965] sock_alloc_send_pskb+0x801/0x980 [ 802.103491][ T4965] ? avc_has_perm+0x135/0x1e0 [ 802.103508][ T4965] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 802.103523][ T4965] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 802.103545][ T4965] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 802.103567][ T4965] ? kasan_quarantine_put+0x104/0x240 [ 802.103586][ T4965] unix_dgram_sendmsg+0x3c7/0x1810 [ 802.103606][ T4965] ? __pfx_syslog_print+0x10/0x10 [ 802.103624][ T4965] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 802.103644][ T4965] ? selinux_socket_sendmsg+0x198/0x2f0 [ 802.103666][ T4965] __sys_sendto+0x48b/0x4e0 [ 802.103682][ T4965] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 802.103700][ T4965] ? __pfx___sys_sendto+0x10/0x10 [ 802.103716][ T4965] ? capable+0x7d/0xf0 [ 802.103736][ T4965] ? do_syslog+0x18c/0x6d0 [ 802.103760][ T4965] ? xfd_validate_state+0x129/0x190 [ 802.103782][ T4965] __x64_sys_sendto+0xe0/0x1c0 [ 802.103798][ T4965] ? do_syscall_64+0x90/0x870 [ 802.103814][ T4965] ? lockdep_hardirqs_on+0x78/0x100 [ 802.103830][ T4965] do_syscall_64+0x115/0x870 [ 802.103846][ T4965] ? clear_bhb_loop+0x40/0x90 [ 802.103863][ T4965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.103880][ T4965] RIP: 0033:0x7fe504862407 [ 802.103897][ T4965] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 802.103912][ T4965] RSP: 002b:00007ffc461e0710 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 802.103927][ T4965] RAX: ffffffffffffffda RBX: 00007fe504712c80 RCX: 00007fe504862407 [ 802.103938][ T4965] RDX: 0000000000000097 RSI: 00007ffc461e0850 RDI: 0000000000000003 [ 802.103948][ T4965] RBP: 00007ffc461e0c80 R08: 0000000000000000 R09: 0000000000000000 [ 802.103957][ T4965] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc461e0c98 [ 802.103967][ T4965] R13: 00007ffc461e0850 R14: 000000000000007c R15: 00007ffc461e0850 [ 802.103981][ T4965] [ 802.104187][ T4965] FAULT_INJECTION: forcing a failure. [ 802.104187][ T4965] name failslab, interval 1, probability 100, space 0, times 41 [ 802.109444][T12617] FAULT_INJECTION: forcing a failure. [ 802.109444][T12617] name failslab, interval 1, probability 100, space 0, times 41 [ 802.109466][T12617] CPU: 0 UID: 0 PID: 12617 Comm: syz-executor Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.109488][T12617] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.109494][T12617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.109504][T12617] Call Trace: [ 802.109509][T12617] [ 802.109515][T12617] dump_stack_lvl+0x100/0x190 [ 802.109534][T12617] should_fail_ex.cold+0x5/0xa [ 802.109550][T12617] ? __kmalloc_cache_noprof+0x6b/0x6c0 [ 802.109574][T12617] should_failslab+0xc2/0x120 [ 802.109593][T12617] __kmalloc_cache_noprof+0x91/0x6c0 [ 802.109616][T12617] ? rcu_is_watching+0x12/0xc0 [ 802.109638][T12617] ? __request_module+0x2b7/0x6a0 [ 802.109661][T12617] __request_module+0x2b7/0x6a0 [ 802.109682][T12617] ? __pfx___request_module+0x10/0x10 [ 802.109702][T12617] ? __pfx_cred_has_capability.isra.0+0x10/0x10 [ 802.109728][T12617] ? rcu_is_watching+0x12/0xc0 [ 802.109750][T12617] ? cap_capable+0x107/0x430 [ 802.109770][T12617] ? dev_load+0x1e3/0x240 [ 802.109789][T12617] dev_load+0x204/0x240 [ 802.109805][T12617] dev_ioctl+0x493/0x10e0 [ 802.109823][T12617] sock_do_ioctl+0x1a0/0x280 [ 802.109844][T12617] ? __pfx_sock_do_ioctl+0x10/0x10 [ 802.109868][T12617] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 802.109890][T12617] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 802.109915][T12617] sock_ioctl+0x599/0x6b0 [ 802.109929][T12617] ? __pfx_sock_ioctl+0x10/0x10 [ 802.109942][T12617] ? hook_file_ioctl_common+0x140/0x440 [ 802.109961][T12617] ? fd_install+0x24f/0x580 [ 802.109978][T12617] ? selinux_file_ioctl+0x13b/0x290 [ 802.110000][T12617] ? selinux_file_ioctl+0xb6/0x290 [ 802.110022][T12617] ? __pfx_sock_ioctl+0x10/0x10 [ 802.110036][T12617] __x64_sys_ioctl+0x18e/0x210 [ 802.110058][T12617] do_syscall_64+0x115/0x870 [ 802.110074][T12617] ? clear_bhb_loop+0x40/0x90 [ 802.110091][T12617] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.110107][T12617] RIP: 0033:0x7f857bd9db2b [ 802.110119][T12617] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 802.110134][T12617] RSP: 002b:00007fff7ec04f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 802.110148][T12617] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f857bd9db2b [ 802.110158][T12617] RDX: 00007fff7ec04fc0 RSI: 0000000000008933 RDI: 0000000000000005 [ 802.110168][T12617] RBP: 00007fff7ec050e0 R08: 0000000000000000 R09: 00007fff7ec050b8 [ 802.110178][T12617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 802.110187][T12617] R13: 00007f857cb54620 R14: 0000000000000005 R15: 0000000000000000 [ 802.110200][T12617] [ 802.110292][T12617] FAULT_INJECTION: forcing a failure. [ 802.110292][T12617] name failslab, interval 1, probability 100, space 0, times 39 [ 802.132191][ C1] FAULT_INJECTION: forcing a failure. [ 802.132191][ C1] name failslab, interval 1, probability 100, space 0, times 39 [ 802.134517][ C0] FAULT_INJECTION: forcing a failure. [ 802.134517][ C0] name failslab, interval 1, probability 100, space 0, times 39 [ 802.134543][ C0] CPU: 0 UID: 0 PID: 12617 Comm: syz-executor Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.134570][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.134576][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.134587][ C0] Call Trace: [ 802.134593][ C0] [ 802.134600][ C0] dump_stack_lvl+0x100/0x190 [ 802.134621][ C0] should_fail_ex.cold+0x5/0xa [ 802.134640][ C0] should_failslab+0xc2/0x120 [ 802.134660][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.134679][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.134697][ C0] ? __alloc_skb+0x140/0x710 [ 802.134715][ C0] __alloc_skb+0x140/0x710 [ 802.134732][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.134748][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.134767][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.134791][ C0] __netdev_alloc_skb+0x7a/0x960 [ 802.134811][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.134832][ C0] ? do_raw_spin_lock+0x100/0x260 [ 802.134854][ C0] ? tmigr_handle_remote_up+0x8ce/0xab0 [ 802.134871][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.134894][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.134913][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.134932][ C0] ? tmigr_handle_remote_up+0x202/0xab0 [ 802.134949][ C0] ? do_raw_spin_lock+0x128/0x260 [ 802.134972][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.134993][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.135016][ C0] __iterate_interfaces+0x2e6/0x650 [ 802.135033][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.135054][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.135074][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.135094][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.135118][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.135142][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 802.135168][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 802.135191][ C0] handle_softirqs+0x1ea/0x9b0 [ 802.135213][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 802.135232][ C0] ? _raw_spin_unlock+0x28/0x50 [ 802.135255][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.135272][ C0] __irq_exit_rcu+0x162/0x210 [ 802.135291][ C0] irq_exit_rcu+0x9/0x30 [ 802.135310][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.135328][ C0] [ 802.135333][ C0] [ 802.135339][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.135357][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 802.135387][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 802.135401][ C0] RSP: 0018:ffffc90006f77710 EFLAGS: 00000293 [ 802.135415][ C0] RAX: ffffffff8f9acb98 RBX: ffffffff8f9acb40 RCX: ffffffff81e88a01 [ 802.135426][ C0] RDX: ffff888022eaca80 RSI: ffffffff81e88a0f RDI: ffff888022eaca80 [ 802.135437][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 802.135447][ C0] R10: 0000000000000000 R11: 205d304320202020 R12: 0000000000001641 [ 802.135457][ C0] R13: ffffffff8f9acb98 R14: ffffc90006f77790 R15: dffffc0000000000 [ 802.135469][ C0] ? console_flush_one_record+0xab1/0xe50 [ 802.135492][ C0] ? console_flush_one_record+0xabf/0xe50 [ 802.135518][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 802.135541][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 802.135557][ C0] ? lock_release+0x24d/0x310 [ 802.135576][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 802.135605][ C0] console_unlock+0x103/0x260 [ 802.135627][ C0] ? __pfx_console_unlock+0x10/0x10 [ 802.135650][ C0] ? rcu_is_watching+0x10/0xc0 [ 802.135672][ C0] ? lock_acquire+0x301/0x370 [ 802.135689][ C0] ? vprintk_emit+0x66a/0x6b0 [ 802.135713][ C0] vprintk_emit+0x407/0x6b0 [ 802.135736][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 802.135758][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 802.135779][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 802.135801][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 802.135819][ C0] _printk+0xcf/0x110 [ 802.135834][ C0] ? __pfx__printk+0x10/0x10 [ 802.135850][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.135872][ C0] ? __pfx____ratelimit+0x10/0x10 [ 802.135888][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.135912][ C0] should_fail_ex+0x4e4/0x640 [ 802.135933][ C0] ? kmem_cache_alloc_node_noprof+0x6e/0x6b0 [ 802.135952][ C0] should_failslab+0xc2/0x120 [ 802.135971][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.135989][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.136006][ C0] ? __alloc_skb+0x140/0x710 [ 802.136024][ C0] __alloc_skb+0x140/0x710 [ 802.136040][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.136056][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.136073][ C0] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 802.136096][ C0] ? sock_has_perm+0x25a/0x2f0 [ 802.136115][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 802.136135][ C0] netlink_alloc_large_skb+0x69/0x150 [ 802.136153][ C0] netlink_sendmsg+0x680/0xda0 [ 802.136170][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.136186][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 802.136209][ C0] __sys_sendto+0x48b/0x4e0 [ 802.136225][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.136241][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 802.136264][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 802.136286][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 802.136302][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 802.136325][ C0] do_syscall_64+0x115/0x870 [ 802.136342][ C0] ? clear_bhb_loop+0x40/0x90 [ 802.136360][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.136376][ C0] RIP: 0033:0x7f857bd5e6ce [ 802.136393][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 802.136408][ C0] RSP: 002b:00007fff7ec04f48 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 802.136422][ C0] RAX: ffffffffffffffda RBX: 0000555567431500 RCX: 00007f857bd5e6ce [ 802.136433][ C0] RDX: 000000000000002c RSI: 00007f857cb54670 RDI: 0000000000000003 [ 802.136442][ C0] RBP: 0000000000000001 R08: 00007fff7ec04fc4 R09: 000000000000000c [ 802.136452][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 802.136461][ C0] R13: 0000000000000000 R14: 00007f857cb54670 R15: 0000000000000000 [ 802.136476][ C0] [ 802.136490][ C0] FAULT_INJECTION: forcing a failure. [ 802.136490][ C0] name failslab, interval 1, probability 100, space 0, times 38 [ 802.142814][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.142841][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.142847][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.142856][ C1] Call Trace: [ 802.142861][ C1] [ 802.142867][ C1] dump_stack_lvl+0x100/0x190 [ 802.142892][ C1] should_fail_ex.cold+0x5/0xa [ 802.142909][ C1] should_failslab+0xc2/0x120 [ 802.142929][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.142946][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.142963][ C1] ? __alloc_skb+0x140/0x710 [ 802.142981][ C1] __alloc_skb+0x140/0x710 [ 802.142997][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.143013][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 802.143030][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 802.143046][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.143069][ C1] __netdev_alloc_skb+0x7a/0x960 [ 802.143087][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.143106][ C1] ? update_irq_load_avg+0x510/0xe30 [ 802.143123][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.143146][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.143166][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.143185][ C1] ? do_raw_spin_lock+0x128/0x260 [ 802.143208][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.143228][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.143251][ C1] __iterate_interfaces+0x2e6/0x650 [ 802.143268][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.143288][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.143308][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.143329][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.143353][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.143376][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 802.143402][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 802.143425][ C1] handle_softirqs+0x1ea/0x9b0 [ 802.143446][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 802.143466][ C1] ? _raw_spin_unlock+0x28/0x50 [ 802.143488][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.143504][ C1] __irq_exit_rcu+0x162/0x210 [ 802.143523][ C1] irq_exit_rcu+0x9/0x30 [ 802.143542][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.143559][ C1] [ 802.143565][ C1] [ 802.143571][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.143588][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 802.143605][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 802.143619][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 802.143631][ C1] RAX: 000000000527851c RBX: ffff88801eac2540 RCX: ffffffff8bbb22d5 [ 802.143641][ C1] RDX: 0000000000000001 RSI: ffffffff8c401500 RDI: ffffffff81df2bd7 [ 802.143651][ C1] RBP: ffffed1003d584a8 R08: 0000000000000000 R09: ffffed10170a678d [ 802.143661][ C1] R10: ffff8880b8533c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 802.143671][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 802.143682][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 802.143705][ C1] ? ct_kernel_exit+0x125/0x180 [ 802.143722][ C1] ? do_idle+0x3a7/0x5b0 [ 802.143744][ C1] default_idle+0x9/0x10 [ 802.143762][ C1] default_idle_call+0x6c/0xb0 [ 802.143780][ C1] do_idle+0x3a7/0x5b0 [ 802.143800][ C1] ? __pfx_do_idle+0x10/0x10 [ 802.143820][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 802.143843][ C1] cpu_startup_entry+0x4f/0x60 [ 802.143865][ C1] start_secondary+0x21d/0x2d0 [ 802.143890][ C1] ? __pfx_start_secondary+0x10/0x10 [ 802.143911][ C1] common_startup_64+0x13e/0x158 [ 802.143938][ C1] [ 802.143999][ C1] FAULT_INJECTION: forcing a failure. [ 802.143999][ C1] name failslab, interval 1, probability 100, space 0, times 37 [ 802.148239][ C0] CPU: 0 UID: 0 PID: 12617 Comm: syz-executor Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.148266][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.148273][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.148282][ C0] Call Trace: [ 802.148288][ C0] [ 802.148295][ C0] dump_stack_lvl+0x100/0x190 [ 802.148315][ C0] should_fail_ex.cold+0x5/0xa [ 802.148335][ C0] should_failslab+0xc2/0x120 [ 802.148357][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.148378][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.148402][ C0] ? __alloc_skb+0x140/0x710 [ 802.148421][ C0] __alloc_skb+0x140/0x710 [ 802.148437][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.148453][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.148471][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.148494][ C0] __netdev_alloc_skb+0x7a/0x960 [ 802.148513][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.148532][ C0] ? do_raw_spin_lock+0x100/0x260 [ 802.148553][ C0] ? tmigr_handle_remote_up+0x8ce/0xab0 [ 802.148569][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.148592][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.148611][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.148630][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 802.148652][ C0] ? do_raw_spin_lock+0x128/0x260 [ 802.148673][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.148693][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.148716][ C0] __iterate_interfaces+0x2e6/0x650 [ 802.148732][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.148753][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.148772][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.148793][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.148816][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.148840][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 802.148865][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 802.148889][ C0] handle_softirqs+0x1ea/0x9b0 [ 802.148910][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 802.148929][ C0] ? _raw_spin_unlock+0x28/0x50 [ 802.148952][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.148969][ C0] __irq_exit_rcu+0x162/0x210 [ 802.148988][ C0] irq_exit_rcu+0x9/0x30 [ 802.149007][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.149024][ C0] [ 802.149029][ C0] [ 802.149035][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.149052][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 802.149075][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 802.149090][ C0] RSP: 0018:ffffc90006f77710 EFLAGS: 00000293 [ 802.149102][ C0] RAX: ffffffff8f9acb98 RBX: ffffffff8f9acb40 RCX: ffffffff81e88a01 [ 802.149113][ C0] RDX: ffff888022eaca80 RSI: ffffffff81e88a0f RDI: ffff888022eaca80 [ 802.149123][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 802.149133][ C0] R10: 0000000000000000 R11: 205d304320202020 R12: 0000000000001641 [ 802.149143][ C0] R13: ffffffff8f9acb98 R14: ffffc90006f77790 R15: dffffc0000000000 [ 802.149156][ C0] ? console_flush_one_record+0xab1/0xe50 [ 802.149178][ C0] ? console_flush_one_record+0xabf/0xe50 [ 802.149204][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 802.149227][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 802.149243][ C0] ? lock_release+0x24d/0x310 [ 802.149262][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 802.149279][ C0] console_unlock+0x103/0x260 [ 802.149301][ C0] ? __pfx_console_unlock+0x10/0x10 [ 802.149324][ C0] ? rcu_is_watching+0x10/0xc0 [ 802.149346][ C0] ? lock_acquire+0x301/0x370 [ 802.149364][ C0] ? vprintk_emit+0x66a/0x6b0 [ 802.149393][ C0] vprintk_emit+0x407/0x6b0 [ 802.149415][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 802.149438][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 802.149457][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 802.149479][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 802.149497][ C0] _printk+0xcf/0x110 [ 802.149512][ C0] ? __pfx__printk+0x10/0x10 [ 802.149527][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.149549][ C0] ? __pfx____ratelimit+0x10/0x10 [ 802.149565][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.149588][ C0] should_fail_ex+0x4e4/0x640 [ 802.149608][ C0] ? kmem_cache_alloc_node_noprof+0x6e/0x6b0 [ 802.149627][ C0] should_failslab+0xc2/0x120 [ 802.149646][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.149664][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.149681][ C0] ? __alloc_skb+0x140/0x710 [ 802.149699][ C0] __alloc_skb+0x140/0x710 [ 802.149715][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.149732][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.149749][ C0] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 802.149771][ C0] ? sock_has_perm+0x25a/0x2f0 [ 802.149790][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 802.149811][ C0] netlink_alloc_large_skb+0x69/0x150 [ 802.149827][ C0] netlink_sendmsg+0x680/0xda0 [ 802.149844][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.149860][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 802.149883][ C0] __sys_sendto+0x48b/0x4e0 [ 802.149899][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.149915][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 802.149937][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 802.149958][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 802.149975][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 802.149997][ C0] do_syscall_64+0x115/0x870 [ 802.150013][ C0] ? clear_bhb_loop+0x40/0x90 [ 802.150030][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.150047][ C0] RIP: 0033:0x7f857bd5e6ce [ 802.150058][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 802.150073][ C0] RSP: 002b:00007fff7ec04f48 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 802.150087][ C0] RAX: ffffffffffffffda RBX: 0000555567431500 RCX: 00007f857bd5e6ce [ 802.150098][ C0] RDX: 000000000000002c RSI: 00007f857cb54670 RDI: 0000000000000003 [ 802.150108][ C0] RBP: 0000000000000001 R08: 00007fff7ec04fc4 R09: 000000000000000c [ 802.150117][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 802.150127][ C0] R13: 0000000000000000 R14: 00007f857cb54670 R15: 0000000000000000 [ 802.150141][ C0] [ 802.150154][ C0] FAULT_INJECTION: forcing a failure. [ 802.150154][ C0] name failslab, interval 1, probability 100, space 0, times 36 [ 802.154316][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.154342][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.154347][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.154357][ C1] Call Trace: [ 802.154361][ C1] [ 802.154367][ C1] dump_stack_lvl+0x100/0x190 [ 802.154384][ C1] should_fail_ex.cold+0x5/0xa [ 802.154402][ C1] should_failslab+0xc2/0x120 [ 802.154421][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.154439][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.154455][ C1] ? __alloc_skb+0x140/0x710 [ 802.154473][ C1] __alloc_skb+0x140/0x710 [ 802.154490][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.154506][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 802.154523][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 802.154539][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.154562][ C1] __netdev_alloc_skb+0x7a/0x960 [ 802.154581][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.154600][ C1] ? update_irq_load_avg+0x510/0xe30 [ 802.154616][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.154639][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.154659][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.154677][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 802.154699][ C1] ? do_raw_spin_lock+0x128/0x260 [ 802.154721][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.154741][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.154763][ C1] __iterate_interfaces+0x2e6/0x650 [ 802.154781][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.154801][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.154820][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.154841][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.154865][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.154893][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 802.154918][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 802.154942][ C1] handle_softirqs+0x1ea/0x9b0 [ 802.154962][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 802.154982][ C1] ? _raw_spin_unlock+0x28/0x50 [ 802.155004][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.155021][ C1] __irq_exit_rcu+0x162/0x210 [ 802.155040][ C1] irq_exit_rcu+0x9/0x30 [ 802.155058][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.155074][ C1] [ 802.155080][ C1] [ 802.155085][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.155102][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 802.155119][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 802.155133][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 802.155146][ C1] RAX: 000000000527851c RBX: ffff88801eac2540 RCX: ffffffff8bbb22d5 [ 802.155157][ C1] RDX: 0000000000000001 RSI: ffffffff8c401500 RDI: ffffffff81df2bd7 [ 802.155167][ C1] RBP: ffffed1003d584a8 R08: 0000000000000000 R09: ffffed10170a678d [ 802.155178][ C1] R10: ffff8880b8533c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 802.155188][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 802.155200][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 802.155223][ C1] ? ct_kernel_exit+0x125/0x180 [ 802.155240][ C1] ? do_idle+0x3a7/0x5b0 [ 802.155261][ C1] default_idle+0x9/0x10 [ 802.155279][ C1] default_idle_call+0x6c/0xb0 [ 802.155297][ C1] do_idle+0x3a7/0x5b0 [ 802.155317][ C1] ? __pfx_do_idle+0x10/0x10 [ 802.155337][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 802.155361][ C1] cpu_startup_entry+0x4f/0x60 [ 802.155382][ C1] start_secondary+0x21d/0x2d0 [ 802.155401][ C1] ? __pfx_start_secondary+0x10/0x10 [ 802.155422][ C1] common_startup_64+0x13e/0x158 [ 802.155449][ C1] [ 802.234581][ C1] FAULT_INJECTION: forcing a failure. [ 802.234581][ C1] name failslab, interval 1, probability 100, space 0, times 35 [ 802.235468][ C0] CPU: 0 UID: 0 PID: 12617 Comm: syz-executor Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.235496][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.235502][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.235512][ C0] Call Trace: [ 802.235518][ C0] [ 802.235525][ C0] dump_stack_lvl+0x100/0x190 [ 802.235548][ C0] should_fail_ex.cold+0x5/0xa [ 802.235566][ C0] should_failslab+0xc2/0x120 [ 802.235595][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.235614][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.235632][ C0] ? __alloc_skb+0x140/0x710 [ 802.235650][ C0] __alloc_skb+0x140/0x710 [ 802.235669][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.235686][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.235704][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.235728][ C0] __netdev_alloc_skb+0x7a/0x960 [ 802.235747][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.235767][ C0] ? do_raw_spin_lock+0x100/0x260 [ 802.235788][ C0] ? tmigr_handle_remote_up+0x8ce/0xab0 [ 802.235805][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.235828][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.235848][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.235867][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 802.235888][ C0] ? do_raw_spin_lock+0x128/0x260 [ 802.235910][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.235931][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.235954][ C0] __iterate_interfaces+0x2e6/0x650 [ 802.235971][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.235993][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.236012][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.236032][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.236056][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.236080][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 802.236106][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 802.236129][ C0] handle_softirqs+0x1ea/0x9b0 [ 802.236151][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 802.236170][ C0] ? _raw_spin_unlock+0x28/0x50 [ 802.236193][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.236209][ C0] __irq_exit_rcu+0x162/0x210 [ 802.236228][ C0] irq_exit_rcu+0x9/0x30 [ 802.236247][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.236264][ C0] [ 802.236270][ C0] [ 802.236275][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.236293][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 802.236318][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 802.236332][ C0] RSP: 0018:ffffc90006f77710 EFLAGS: 00000293 [ 802.236346][ C0] RAX: ffffffff8f9acb98 RBX: ffffffff8f9acb40 RCX: ffffffff81e88a01 [ 802.236357][ C0] RDX: ffff888022eaca80 RSI: ffffffff81e88a0f RDI: ffff888022eaca80 [ 802.236367][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 802.236377][ C0] R10: 0000000000000000 R11: 205d304320202020 R12: 0000000000001641 [ 802.236392][ C0] R13: ffffffff8f9acb98 R14: ffffc90006f77790 R15: dffffc0000000000 [ 802.236405][ C0] ? console_flush_one_record+0xab1/0xe50 [ 802.236428][ C0] ? console_flush_one_record+0xabf/0xe50 [ 802.236454][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 802.236477][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 802.236492][ C0] ? lock_release+0x24d/0x310 [ 802.236512][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 802.236529][ C0] console_unlock+0x103/0x260 [ 802.236551][ C0] ? __pfx_console_unlock+0x10/0x10 [ 802.236573][ C0] ? rcu_is_watching+0x10/0xc0 [ 802.236595][ C0] ? lock_acquire+0x301/0x370 [ 802.236613][ C0] ? vprintk_emit+0x66a/0x6b0 [ 802.236636][ C0] vprintk_emit+0x407/0x6b0 [ 802.236659][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 802.236681][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 802.236702][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 802.236724][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 802.236743][ C0] _printk+0xcf/0x110 [ 802.236757][ C0] ? __pfx__printk+0x10/0x10 [ 802.236773][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.236795][ C0] ? __pfx____ratelimit+0x10/0x10 [ 802.236811][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.236844][ C0] should_fail_ex+0x4e4/0x640 [ 802.236865][ C0] ? kmem_cache_alloc_node_noprof+0x6e/0x6b0 [ 802.236884][ C0] should_failslab+0xc2/0x120 [ 802.236903][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.236921][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.236938][ C0] ? __alloc_skb+0x140/0x710 [ 802.236956][ C0] __alloc_skb+0x140/0x710 [ 802.236973][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.236989][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.237006][ C0] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 802.237029][ C0] ? sock_has_perm+0x25a/0x2f0 [ 802.237049][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 802.237076][ C0] netlink_alloc_large_skb+0x69/0x150 [ 802.237093][ C0] netlink_sendmsg+0x680/0xda0 [ 802.237111][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.237127][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 802.237150][ C0] __sys_sendto+0x48b/0x4e0 [ 802.237167][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.237182][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 802.237205][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 802.237227][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 802.237243][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 802.237265][ C0] do_syscall_64+0x115/0x870 [ 802.237282][ C0] ? clear_bhb_loop+0x40/0x90 [ 802.237300][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.237316][ C0] RIP: 0033:0x7f857bd5e6ce [ 802.237328][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 802.237342][ C0] RSP: 002b:00007fff7ec04f48 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 802.237356][ C0] RAX: ffffffffffffffda RBX: 0000555567431500 RCX: 00007f857bd5e6ce [ 802.237367][ C0] RDX: 000000000000002c RSI: 00007f857cb54670 RDI: 0000000000000003 [ 802.237377][ C0] RBP: 0000000000000001 R08: 00007fff7ec04fc4 R09: 000000000000000c [ 802.237391][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 802.237401][ C0] R13: 0000000000000000 R14: 00007f857cb54670 R15: 0000000000000000 [ 802.237415][ C0] [ 802.237433][ C0] FAULT_INJECTION: forcing a failure. [ 802.237433][ C0] name failslab, interval 1, probability 100, space 0, times 34 [ 802.240215][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.240241][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.240247][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.240256][ C1] Call Trace: [ 802.240261][ C1] [ 802.240267][ C1] dump_stack_lvl+0x100/0x190 [ 802.240285][ C1] should_fail_ex.cold+0x5/0xa [ 802.240303][ C1] should_failslab+0xc2/0x120 [ 802.240322][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.240340][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.240357][ C1] ? __alloc_skb+0x140/0x710 [ 802.240375][ C1] __alloc_skb+0x140/0x710 [ 802.240391][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.240408][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 802.240425][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 802.240441][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.240464][ C1] __netdev_alloc_skb+0x7a/0x960 [ 802.240482][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.240501][ C1] ? rcu_is_watching+0x10/0xc0 [ 802.240523][ C1] ? call_timer_fn+0x20b/0x610 [ 802.240539][ C1] ? lock_release+0x24d/0x310 [ 802.240557][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.240577][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.240597][ C1] ? do_raw_spin_lock+0x128/0x260 [ 802.240619][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.240639][ C1] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.240662][ C1] __iterate_interfaces+0x2e6/0x650 [ 802.240678][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.240699][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.240718][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.240739][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.240763][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.240786][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 802.240812][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 802.240835][ C1] handle_softirqs+0x1ea/0x9b0 [ 802.240856][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 802.240876][ C1] ? _raw_spin_unlock+0x28/0x50 [ 802.240903][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.240919][ C1] __irq_exit_rcu+0x162/0x210 [ 802.240939][ C1] irq_exit_rcu+0x9/0x30 [ 802.240957][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.240974][ C1] [ 802.240979][ C1] [ 802.240985][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.241002][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 802.241018][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 802.241033][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 802.241045][ C1] RAX: 0000000005281bfc RBX: ffff88801eac2540 RCX: ffffffff8bbb22d5 [ 802.241055][ C1] RDX: 0000000000000001 RSI: ffffffff8c401500 RDI: ffffffff81df2bd7 [ 802.241066][ C1] RBP: ffffed1003d584a8 R08: 0000000000000000 R09: ffffed10170a678d [ 802.241076][ C1] R10: ffff8880b8533c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 802.241086][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 802.241097][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 802.241120][ C1] ? ct_kernel_exit+0x125/0x180 [ 802.241137][ C1] ? do_idle+0x3a7/0x5b0 [ 802.241158][ C1] default_idle+0x9/0x10 [ 802.241176][ C1] default_idle_call+0x6c/0xb0 [ 802.241195][ C1] do_idle+0x3a7/0x5b0 [ 802.241215][ C1] ? __pfx_do_idle+0x10/0x10 [ 802.241235][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 802.241258][ C1] cpu_startup_entry+0x4f/0x60 [ 802.241280][ C1] start_secondary+0x21d/0x2d0 [ 802.241300][ C1] ? __pfx_start_secondary+0x10/0x10 [ 802.241322][ C1] common_startup_64+0x13e/0x158 [ 802.241349][ C1] [ 802.241412][ C1] FAULT_INJECTION: forcing a failure. [ 802.241412][ C1] name failslab, interval 1, probability 100, space 0, times 33 [ 802.245227][ C0] CPU: 0 UID: 0 PID: 12617 Comm: syz-executor Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.245255][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.245262][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.245272][ C0] Call Trace: [ 802.245277][ C0] [ 802.245284][ C0] dump_stack_lvl+0x100/0x190 [ 802.245305][ C0] should_fail_ex.cold+0x5/0xa [ 802.245325][ C0] should_failslab+0xc2/0x120 [ 802.245347][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.245368][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.245392][ C0] ? __alloc_skb+0x140/0x710 [ 802.245410][ C0] __alloc_skb+0x140/0x710 [ 802.245425][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.245442][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.245460][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.245483][ C0] __netdev_alloc_skb+0x7a/0x960 [ 802.245502][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.245521][ C0] ? do_raw_spin_lock+0x100/0x260 [ 802.245542][ C0] ? tmigr_handle_remote_up+0x8ce/0xab0 [ 802.245558][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.245581][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.245601][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.245620][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 802.245642][ C0] ? do_raw_spin_lock+0x128/0x260 [ 802.245663][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.245683][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.245706][ C0] __iterate_interfaces+0x2e6/0x650 [ 802.245723][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.245744][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.245763][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.245783][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.245807][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.245831][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 802.245856][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 802.245880][ C0] handle_softirqs+0x1ea/0x9b0 [ 802.245900][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 802.245920][ C0] ? _raw_spin_unlock+0x28/0x50 [ 802.245942][ C0] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.245958][ C0] __irq_exit_rcu+0x162/0x210 [ 802.245977][ C0] irq_exit_rcu+0x9/0x30 [ 802.245996][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.246013][ C0] [ 802.246018][ C0] [ 802.246024][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.246041][ C0] RIP: 0010:console_flush_one_record+0xac3/0xe50 [ 802.246064][ C0] Code: 00 e8 91 24 2a 00 9c 5d 81 e5 00 02 00 00 31 ff 48 89 ee e8 df d0 21 00 48 85 ed 0f 85 d7 01 00 00 e8 31 d6 21 00 fb 4c 89 e8 <48> c1 e8 03 42 80 3c 38 00 0f 85 64 03 00 00 48 8b 0c 24 48 8b 6b [ 802.246079][ C0] RSP: 0018:ffffc90006f77710 EFLAGS: 00000293 [ 802.246091][ C0] RAX: ffffffff8f9acb98 RBX: ffffffff8f9acb40 RCX: ffffffff81e88a01 [ 802.246101][ C0] RDX: ffff888022eaca80 RSI: ffffffff81e88a0f RDI: ffff888022eaca80 [ 802.246112][ C0] RBP: 0000000000000000 R08: 0000000000000007 R09: 0000000000000000 [ 802.246121][ C0] R10: 0000000000000000 R11: 205d304320202020 R12: 0000000000001641 [ 802.246131][ C0] R13: ffffffff8f9acb98 R14: ffffc90006f77790 R15: dffffc0000000000 [ 802.246144][ C0] ? console_flush_one_record+0xab1/0xe50 [ 802.246167][ C0] ? console_flush_one_record+0xabf/0xe50 [ 802.246193][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 802.246216][ C0] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 802.246231][ C0] ? lock_release+0x24d/0x310 [ 802.246251][ C0] ? is_printk_cpu_sync_owner+0x32/0x40 [ 802.246267][ C0] console_unlock+0x103/0x260 [ 802.246289][ C0] ? __pfx_console_unlock+0x10/0x10 [ 802.246312][ C0] ? rcu_is_watching+0x10/0xc0 [ 802.246334][ C0] ? lock_acquire+0x301/0x370 [ 802.246352][ C0] ? vprintk_emit+0x66a/0x6b0 [ 802.246376][ C0] vprintk_emit+0x407/0x6b0 [ 802.246403][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 802.246425][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 802.246444][ C0] ? bpf_ksym_find+0x128/0x1c0 [ 802.246466][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 802.246484][ C0] _printk+0xcf/0x110 [ 802.246498][ C0] ? __pfx__printk+0x10/0x10 [ 802.246513][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.246536][ C0] ? __pfx____ratelimit+0x10/0x10 [ 802.246551][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.246575][ C0] should_fail_ex+0x4e4/0x640 [ 802.246595][ C0] ? kmem_cache_alloc_node_noprof+0x6e/0x6b0 [ 802.246613][ C0] should_failslab+0xc2/0x120 [ 802.246632][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.246650][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.246667][ C0] ? __alloc_skb+0x140/0x710 [ 802.246685][ C0] __alloc_skb+0x140/0x710 [ 802.246701][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.246718][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.246734][ C0] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 802.246756][ C0] ? sock_has_perm+0x25a/0x2f0 [ 802.246775][ C0] ? __pfx_sock_has_perm+0x10/0x10 [ 802.246795][ C0] netlink_alloc_large_skb+0x69/0x150 [ 802.246812][ C0] netlink_sendmsg+0x680/0xda0 [ 802.246829][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.246845][ C0] ? selinux_socket_sendmsg+0x198/0x2f0 [ 802.246868][ C0] __sys_sendto+0x48b/0x4e0 [ 802.246884][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 802.246899][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 802.246922][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 802.246943][ C0] __x64_sys_sendto+0xe0/0x1c0 [ 802.246960][ C0] ? trace_irq_enable.constprop.0+0x122/0x160 [ 802.246981][ C0] do_syscall_64+0x115/0x870 [ 802.246998][ C0] ? clear_bhb_loop+0x40/0x90 [ 802.247015][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.247031][ C0] RIP: 0033:0x7f857bd5e6ce [ 802.247042][ C0] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 802.247056][ C0] RSP: 002b:00007fff7ec04f48 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 802.247070][ C0] RAX: ffffffffffffffda RBX: 0000555567431500 RCX: 00007f857bd5e6ce [ 802.247081][ C0] RDX: 000000000000002c RSI: 00007f857cb54670 RDI: 0000000000000003 [ 802.247091][ C0] RBP: 0000000000000001 R08: 00007fff7ec04fc4 R09: 000000000000000c [ 802.247101][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 802.247110][ C0] R13: 0000000000000000 R14: 00007f857cb54670 R15: 0000000000000000 [ 802.247124][ C0] [ 802.247740][ C0] FAULT_INJECTION: forcing a failure. [ 802.247740][ C0] name failslab, interval 1, probability 100, space 0, times 32 [ 802.251550][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.251576][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.251582][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.251591][ C1] Call Trace: [ 802.251597][ C1] [ 802.251603][ C1] dump_stack_lvl+0x100/0x190 [ 802.251623][ C1] should_fail_ex.cold+0x5/0xa [ 802.251640][ C1] should_failslab+0xc2/0x120 [ 802.251660][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.251679][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.251696][ C1] ? __alloc_skb+0x140/0x710 [ 802.251714][ C1] __alloc_skb+0x140/0x710 [ 802.251730][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.251747][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 802.251764][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.251788][ C1] __netdev_alloc_skb+0x7a/0x960 [ 802.251807][ C1] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.251827][ C1] ? native_read_msr+0x10/0x30 [ 802.251849][ C1] ? hrtimer_active+0x1f1/0x240 [ 802.251871][ C1] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.251896][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.251915][ C1] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 802.251930][ C1] ? srcu_gp_start_if_needed+0xb20/0x1100 [ 802.251950][ C1] ? __hrtimer_rearm_deferred+0x23c/0x720 [ 802.251965][ C1] ? lock_release+0x24d/0x310 [ 802.251985][ C1] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.252004][ C1] ? ct_nmi_exit+0xd5/0x1b0 [ 802.252022][ C1] ? irqentry_exit+0x1c4/0xa00 [ 802.252040][ C1] __iterate_interfaces+0x2e6/0x650 [ 802.252057][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.252077][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.252096][ C1] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.252117][ C1] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.252141][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.252164][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 802.252190][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 802.252214][ C1] handle_softirqs+0x1ea/0x9b0 [ 802.252235][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 802.252254][ C1] ? _raw_spin_unlock+0x28/0x50 [ 802.252277][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.252293][ C1] __irq_exit_rcu+0x162/0x210 [ 802.252313][ C1] irq_exit_rcu+0x9/0x30 [ 802.252332][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.252348][ C1] [ 802.252353][ C1] [ 802.252359][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.252376][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 802.252393][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 802.252408][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 802.252421][ C1] RAX: 0000000005281bfc RBX: ffff88801eac2540 RCX: ffffffff8bbb22d5 [ 802.252432][ C1] RDX: 0000000000000001 RSI: ffffffff8c401500 RDI: ffffffff81df2bd7 [ 802.252442][ C1] RBP: ffffed1003d584a8 R08: 0000000000000000 R09: ffffed10170a678d [ 802.252452][ C1] R10: ffff8880b8533c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 802.252462][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 802.252473][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 802.252496][ C1] ? ct_kernel_exit+0x125/0x180 [ 802.252513][ C1] ? do_idle+0x3a7/0x5b0 [ 802.252534][ C1] default_idle+0x9/0x10 [ 802.252552][ C1] default_idle_call+0x6c/0xb0 [ 802.252570][ C1] do_idle+0x3a7/0x5b0 [ 802.252590][ C1] ? __pfx_do_idle+0x10/0x10 [ 802.252610][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 802.252633][ C1] cpu_startup_entry+0x4f/0x60 [ 802.252654][ C1] start_secondary+0x21d/0x2d0 [ 802.252674][ C1] ? __pfx_start_secondary+0x10/0x10 [ 802.252694][ C1] common_startup_64+0x13e/0x158 [ 802.252722][ C1] [ 802.282994][ C1] FAULT_INJECTION: forcing a failure. [ 802.282994][ C1] name failslab, interval 1, probability 100, space 0, times 31 [ 802.300712][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.300742][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.300748][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.300759][ C0] Call Trace: [ 802.300766][ C0] [ 802.300773][ C0] dump_stack_lvl+0x100/0x190 [ 802.300797][ C0] should_fail_ex.cold+0x5/0xa [ 802.300818][ C0] should_failslab+0xc2/0x120 [ 802.300841][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.300863][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.300882][ C0] ? __alloc_skb+0x140/0x710 [ 802.300903][ C0] __alloc_skb+0x140/0x710 [ 802.300922][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.300942][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.300962][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.300990][ C0] __netdev_alloc_skb+0x7a/0x960 [ 802.301012][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.301036][ C0] ? sched_balance_rq+0x837/0x3b10 [ 802.301060][ C0] ? tmigr_handle_remote_up+0x8ce/0xab0 [ 802.301079][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.301105][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.301128][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.301149][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.301174][ C0] ? do_raw_spin_lock+0x128/0x260 [ 802.301200][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.301225][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.301251][ C0] __iterate_interfaces+0x2e6/0x650 [ 802.301272][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.301296][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.301318][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.301342][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.301370][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.301403][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 802.301432][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 802.301456][ C0] handle_softirqs+0x1ea/0x9b0 [ 802.301477][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 802.301497][ C0] ? run_ksoftirqd+0x5b/0x60 [ 802.301515][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.301537][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 802.301556][ C0] run_ksoftirqd+0x38/0x60 [ 802.301575][ C0] smpboot_thread_fn+0x3d3/0xaa0 [ 802.301600][ C0] ? kthread+0x13a/0x450 [ 802.301615][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 802.301637][ C0] kthread+0x370/0x450 [ 802.301652][ C0] ? __pfx_kthread+0x10/0x10 [ 802.301667][ C0] ret_from_fork+0x72b/0xd50 [ 802.301689][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 802.301711][ C0] ? __switch_to+0x800/0x10f0 [ 802.301726][ C0] ? __pfx_kthread+0x10/0x10 [ 802.301741][ C0] ret_from_fork_asm+0x1a/0x30 [ 802.301767][ C0] [ 802.301784][ C0] FAULT_INJECTION: forcing a failure. [ 802.301784][ C0] name failslab, interval 1, probability 100, space 0, times 30 [ 802.310144][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.310171][ C1] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.310176][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.310185][ C1] Call Trace: [ 802.310191][ C1] [ 802.310196][ C1] dump_stack_lvl+0x100/0x190 [ 802.310215][ C1] should_fail_ex.cold+0x5/0xa [ 802.310232][ C1] should_failslab+0xc2/0x120 [ 802.310252][ C1] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.310270][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.310287][ C1] ? __alloc_skb+0x140/0x710 [ 802.310305][ C1] __alloc_skb+0x140/0x710 [ 802.310321][ C1] ? __alloc_skb+0x5b7/0x710 [ 802.310338][ C1] ? __pfx___alloc_skb+0x10/0x10 [ 802.310356][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 802.310378][ C1] ? _raw_spin_lock_irqsave+0x52/0x60 [ 802.310403][ C1] __netdev_alloc_skb+0x7a/0x960 [ 802.310421][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.310443][ C1] hsr_init_skb+0x122/0x670 [ 802.310465][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.310487][ C1] send_hsr_supervision_frame+0x138/0xbc0 [ 802.310511][ C1] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 802.310533][ C1] hsr_announce+0x169/0x3e0 [ 802.310554][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 802.310575][ C1] ? lock_acquire+0x301/0x370 [ 802.310592][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 802.310612][ C1] ? lock_release+0x24d/0x310 [ 802.310631][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 802.310652][ C1] call_timer_fn+0x19a/0x610 [ 802.310668][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 802.310685][ C1] ? nohz_balance_exit_idle+0x17/0x2f0 [ 802.310708][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.310730][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.310753][ C1] ? __pfx_hsr_announce+0x10/0x10 [ 802.310773][ C1] __run_timers+0x757/0xb00 [ 802.310793][ C1] ? __pfx___run_timers+0x10/0x10 [ 802.310809][ C1] ? rcu_is_watching+0x12/0xc0 [ 802.310831][ C1] ? clockevents_program_event+0x23e/0x820 [ 802.310856][ C1] ? ktime_get+0x9f/0x320 [ 802.310874][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 802.310902][ C1] run_timer_base+0x114/0x190 [ 802.310919][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 802.310938][ C1] run_timer_softirq+0x1a/0x50 [ 802.310956][ C1] handle_softirqs+0x1ea/0x9b0 [ 802.310976][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 802.310996][ C1] ? _raw_spin_unlock+0x28/0x50 [ 802.311018][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 802.311035][ C1] __irq_exit_rcu+0x162/0x210 [ 802.311054][ C1] irq_exit_rcu+0x9/0x30 [ 802.311073][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 802.311089][ C1] [ 802.311094][ C1] [ 802.311100][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 802.311118][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 802.311135][ C1] Code: d6 8b 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d c3 7e 10 00 fb f4 3c 4a 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 802.311150][ C1] RSP: 0018:ffffc90000197e00 EFLAGS: 00000246 [ 802.311164][ C1] RAX: 000000000528557c RBX: ffff88801eac2540 RCX: ffffffff8bbb22d5 [ 802.311175][ C1] RDX: 0000000000000001 RSI: ffffffff8c401500 RDI: ffffffff81df2bd7 [ 802.311185][ C1] RBP: ffffed1003d584a8 R08: 0000000000000000 R09: ffffed10170a678d [ 802.311195][ C1] R10: ffff8880b8533c6b R11: ffffffff81d6005c R12: 0000000000000000 [ 802.311205][ C1] R13: 0000000000000000 R14: 1ffff92000032fc4 R15: dffffc0000000000 [ 802.311217][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 802.311239][ C1] ? ct_kernel_exit+0x125/0x180 [ 802.311256][ C1] ? do_idle+0x3a7/0x5b0 [ 802.311278][ C1] default_idle+0x9/0x10 [ 802.311296][ C1] default_idle_call+0x6c/0xb0 [ 802.311314][ C1] do_idle+0x3a7/0x5b0 [ 802.311334][ C1] ? __pfx_do_idle+0x10/0x10 [ 802.311354][ C1] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 802.311377][ C1] cpu_startup_entry+0x4f/0x60 [ 802.311399][ C1] start_secondary+0x21d/0x2d0 [ 802.311419][ C1] ? __pfx_start_secondary+0x10/0x10 [ 802.311440][ C1] common_startup_64+0x13e/0x158 [ 802.311467][ C1] [ 802.336981][ C1] FAULT_INJECTION: forcing a failure. [ 802.336981][ C1] name failslab, interval 1, probability 100, space 0, times 29 [ 802.341818][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Tainted: G D L syzkaller #0 PREEMPT(full) [ 802.341847][ C0] Tainted: [D]=DIE, [L]=SOFTLOCKUP [ 802.341854][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 802.341865][ C0] Call Trace: [ 802.341873][ C0] [ 802.341881][ C0] dump_stack_lvl+0x100/0x190 [ 802.341906][ C0] should_fail_ex.cold+0x5/0xa [ 802.341928][ C0] should_failslab+0xc2/0x120 [ 802.341952][ C0] kmem_cache_alloc_node_noprof+0x94/0x6b0 [ 802.341974][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.341994][ C0] ? __alloc_skb+0x140/0x710 [ 802.342014][ C0] __alloc_skb+0x140/0x710 [ 802.342030][ C0] ? __alloc_skb+0x5b7/0x710 [ 802.342046][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 802.342064][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.342088][ C0] __netdev_alloc_skb+0x7a/0x960 [ 802.342107][ C0] __ieee80211_beacon_get+0xba1/0x1ee0 [ 802.342129][ C0] ? sched_balance_rq+0x837/0x3b10 [ 802.342151][ C0] ? tmigr_handle_remote_up+0x8ce/0xab0 [ 802.342169][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.342192][ C0] ieee80211_beacon_get_tim+0xa6/0x280 [ 802.342211][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 802.342230][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 802.342252][ C0] ? do_raw_spin_lock+0x128/0x260 [ 802.342274][ C0] mac80211_hwsim_beacon_tx+0x4c7/0xa00 [ 802.342295][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 802.342317][ C0] __iterate_interfaces+0x2e6/0x650 [ 802.342335][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.342355][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 802.342374][ C0] ieee80211_iterate_active_interfaces_atomic+0x71/0x1b0 [ 802.342400][ C0] mac80211_hwsim_beacon+0xe5/0x2a0 [ 802.342424][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 802.342448][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 802.342474][ C0] hrtimer_run_softirq+0x17d/0x2c0 [ 802.342497][ C0] handle_softirqs+0x1ea/0x9b0 [ 802.342519][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 802.342539][ C0] ? run_ksoftirqd+0x5b/0x60 [ 802.342557][ C0] ? rcu_is_watching+0x12/0xc0 [ 802.342580][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 802.342599][ C0] run_ksoftirqd+0x38/0x60