last executing test programs: 5m35.198392302s ago: executing program 0 (id=1214): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0xa, 0x2, 0x3a) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x2200, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) syz_clone(0x280, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) mmap$auto(0x0, 0xbb0a, 0x2000000df, 0x20000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x2, 0x8000000000000000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE_OLD(r1, 0x5423, &(0x7f0000000140)="c52418ade777b29a6b5eb37cf867f0cb761d6ff5f138996b8d790c66823e3161754a49ebcb8eafaf22389a203001376928c8657290e0f6f84385368e21618cb2f31085c5b2d649f70ccfd2a8cdedd5f4a048db6bf149b936b5e14f334baef14f50c677e061febbb17654e8aed3165ee3ffaa88ef39ff85ff65f2efe48af96062a99ea9a7d9315943aaf74b774df6b2e9775fee111bab1e025b92710fad883f0caf23161f6f554fd72af13a93e237446d8150846f9799e547e10ef5ff9e883bca4a3dddb436fd608eae4b2cfabcf64ab5ba5845f7435b8d91c21ea8") mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x21, 0xa, 0x7) socket(0x2, 0x2, 0x88) readv$auto(0x3, &(0x7f0000000600)={0x0, 0x6}, 0x1da) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) write$auto(0x3, 0x0, 0xfdf3) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) write$auto(r2, 0x0, 0x1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r3 = epoll_create$auto(0x8800001) epoll_ctl$auto(r3, 0x1, r0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 5m34.609315752s ago: executing program 0 (id=1218): openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(r0, 0x921064aa, 0x20000a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x11, 0x80003, 0x300) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1e/\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xfe\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000200)={0x0, 0x6}, 0x0, 0x1001) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) pwrite64$auto(0xc8, 0x0, 0xfdef, 0x2) get_mempolicy$auto(0x0, 0x0, 0xd, 0x7, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/modalias\x00', 0x40000, 0x0) vmsplice$auto(r0, &(0x7f00000001c0)={&(0x7f0000000240)="d9dcc0954204100b78b241d8094e4ac3e14ecce1180e0d117e3c16a4d7861e02b4641d3b49ed46259305bf0a147bf40e7c30a78b983e6aa158c722d9dbe9aead0fbbd9951e65309de2c80832e8dd90580083b279446b4e821c7b6adf3e8c97ae14876f3b228cf6437b", 0x1}, 0x1c4, 0x7f) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/195, 0xc3) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x129541, 0x0) r4 = gettid() setpriority$auto_PRIO_PROCESS(0x0, r4, 0x3) write$auto(r3, 0x0, 0x9) mmap$auto(0x0, 0x402000a, 0xffffffffffffffff, 0x400eb1, 0x401, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001380)=""/4113, 0x1011) close_range$auto(0x2, 0x8, 0x0) 5m33.723537554s ago: executing program 0 (id=1222): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0x80003, 0x300) pidfd_open$auto(0x1, 0x0) socket(0x2, 0x3, 0x100) bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x800000000000b, 0x80000001, 0x10007, 0x8254, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d8010000", @ANYRES16, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r1 = socket(0x10, 0x2, 0x4) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) r2 = prctl$auto_PR_SET_MM_START_CODE(0x0, 0x1, 0xffffffffffffffff, 0x8fba, 0x9) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="20260029d375961acd00"/19, @ANYRES16=r3, @ANYBLOB="200025bd7000fddbdf25020000000400818004004701"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0x20000000000e31, 0x40000000000a5, 0x8000) mlockall$auto(0x7) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x3, 0x0) r4 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy0/aqm\x00', 0x82, 0x0) write$auto_debugfs_full_proxy_file_operations_internal(r4, 0x0, 0x0) r5 = ioctl$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffffff, 0x7b, &(0x7f0000000080)="7f14205aa917eb722af4163e2214f3df769862768fc6b9948e3572f28ee78a1ab9d9ba7ff8b9f25e587571e6f2224c3b16e8d7b700b0fb940da1c96e83f70518383848fbd8e659a17a2edbed21f3edabbbcdcfc64425ba42a527669a7c5b8b143209d286a3efe74bdef7e53ffca74e37d3520d5dda4427912e4a2c8f6bff002cec31966080be74ffc206f826") r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iostats\x00', 0x80302, 0x0) read$auto_suspend_stats_fops_(r5, &(0x7f0000000a40)=""/150, 0x96) sendfile$auto(r6, r6, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r5, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="7c0800001aa02a253aa56eb78b8d783046732c1b9da167fdf952d01a6e424ae9c5e05794fe23b8b11b7d8f55c815ec7a88a144cd46fb79cfafab3a3c5b56f7c91073deda6b9cca22db96886e05d8084d94df064f025b513f6c3aa4a629797bee67c44e668af9", @ANYRES16=0x0, @ANYBLOB="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"], 0x87c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) 5m33.038621671s ago: executing program 0 (id=1224): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) r0 = socket(0x10, 0x2, 0x1000) io_uring_enter$auto(r0, 0x8b18, 0xa25, 0x1, &(0x7f0000000300)="ba583e8e1482d3b62ada2d0e09eddcd7a45d14f7401083318dfb09df98203c6a714b688b8d8a8d88bc46ce68f131a3cd89cbf7d84e2c4345a56894223f3d54d3fdcbc6f8ddc21fa063d990dfc8a6dbe61d8755a5c81e769ff2ad793972d8317c1f416a50ba0bf7789fb915810eb97d1e1f4fd12957cd4b7e06172ddd527c27aca7cf912d579a73c730245b9887271a2a9e8d8dba3bd9493b85d543efe56e1f42abce215facc17648a112c07471255ff7d7542647f3980f6cd8db6b9d6a", 0x6) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040071}, 0x800) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) epoll_create$auto(0x20009) (async) flistxattr$auto(0xffffffffffffffff, &(0x7f0000000100)='/dev/dsp1\x00', 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) madvise$auto(0x0, 0x2003f0, 0x800015) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x28adc1, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) mincore$auto(0x1000, 0x8001, 0x0) (async) fcntl$auto(0x8000000000000001, 0x7, 0x8) (async) r2 = socket(0x2d, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) getsockopt$auto(r2, 0x11d, 0x1, 0x0, 0x0) (async) r3 = fcntl$auto(0x8000000000000001, 0x24, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) waitid$auto_P_PGID(0x2, 0x0, 0x0, 0x6, 0x0) (async) read$auto_fb_fops_fb_chrdev(r3, &(0x7f00000003c0)=""/4096, 0x1000) (async) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) (async) fcntl$auto(0x8000000000000001, 0x26, 0x8) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES64=r1, @ANYBLOB="02002cbd7000fbdbdf250200000008000300800040f507000200"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) (async) keyctl$auto(0x2000000000000017, 0x8000, 0x0, 0x0, 0x20803) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB='>', @ANYBLOB="1a0027"], 0x1ac}}, 0x4040000) 5m31.918133645s ago: executing program 0 (id=1226): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x801, 0x6) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) r1 = epoll_create$auto(0x3e) epoll_ctl$auto(r1, 0x1, 0x8000000000000000, 0x0) read$auto_zero_fops_mem(r1, &(0x7f0000000000)=""/10, 0xa) bpf$auto_BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=@bpf_attr_1={r0, 0xfffffffffffffff5, @value=0x4b97, 0x10001}, 0x7a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd7000fddbdf251c"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x2000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc2}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 5m31.491617057s ago: executing program 0 (id=1232): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x4000000008000) pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0x401) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES32, @ANYBLOB="00000000587981c78a7b"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x30017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0xffffffffffffffff}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) mmap$auto(0x469b2, 0x100000000000004, 0x7, 0x40eb3, r0, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x20100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 5m16.424719303s ago: executing program 32 (id=1232): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) mmap$auto(0x0, 0x7, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x4000000008000) pread64$auto(0xffffffffffffffff, 0x0, 0x1, 0x401) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES32, @ANYBLOB="00000000587981c78a7b"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x8, 0x30017, 0x8020000000a, 0x2, 0x5f, 0x20000000000803, 0xffffffffffffffff}, 0x6f0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) close_range$auto(0x2, r3, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) mmap$auto(0x469b2, 0x100000000000004, 0x7, 0x40eb3, r0, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x20100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 46.16568535s ago: executing program 2 (id=2268): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r0 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:2/stats\x00', 0x120000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8000000", @ANYRES16, @ANYBLOB="01"], 0xc8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x20058894) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x6, &(0x7f0000000140)="4d0ffbd08a2c088f7d1980120689a1d008eef214000000", 0x7, 0xfffffffc}, 0x800}, 0x4, 0x4008) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x401000}, 0xfffffffd, 0x7, 0x0) sendmsg$auto_ETHTOOL_MSG_PSE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000040", @ANYRES16=0x0, @ANYBLOB="0100273d7000fcdbdf252400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB='1'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) r1 = socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) ioctl$auto(0xffffffffffffffff, 0x40085618, 0xffffffffffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(r1, 0x1, 0x21, 0x0, 0x9) fcntl$auto_F_SETPIPE_SZ(0xffffffffffffffff, 0x407, 0x6) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) 45.342584802s ago: executing program 2 (id=2273): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0xfffffffffffffffc, 0x2000a, 0x4000000000df, 0x10, 0xffffffffffffffff, 0x10) socket(0x2, 0xa, 0xa) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0xfffffffffffffffd) 44.738881417s ago: executing program 2 (id=2276): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x28, 0x1, 0x0) setsockopt$auto(r0, 0x104000000000010e, 0x9, 0x0, 0x16) io_uring_setup$auto(0x6, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x2, 0x3, 0x1a) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) madvise$auto(0x1, 0xfffffffffffffff5, 0x0) mbind$auto(0x7ffffffc, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) read$auto_proc_pid_maps_operations_internal(r1, 0x0, 0x0) mmap$auto(0x2, 0x6, 0xc3e, 0x9b72, r1, 0xc) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/free_buffer\x00', 0x20103, 0x0) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, 0x0, 0x4, 0x0) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) mmap$auto(0x8000000000, 0x8001, 0x20000df, 0x80000010, 0x2, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) madvise$auto(0x1, 0xfffffffffffff001, 0xe) madvise$auto(0x0, 0x200007, 0x19) r3 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x480, 0x0) ioctl$auto_VHOST_SET_OWNER(r3, 0xaf01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = mq_open$auto(&(0x7f00000000c0)='\x12\xe6D\b\x9e\x00\x80\x8d\f\xb9w-\xbd!\x9eb\xed\xfb\x0f\xe5\x9dZ\xc2\xd1\x01wBV\x91\x8f_\xc0.\x84\xfe\x84\xd1se\x01\x06\x00\xb3\x13_Y&\xa9\x88\xe4\xa2\xb0V\x85\x92<\xb6\xdcT \\\xf2\v\xb1\xe2\xd8\xfa\xd8V\xe5\x00\xfa\xe9!\xc5<\xce\x18=\x06\xdagq\xb5\r\t\xb2\xde\x99\xd50\xbb\x192\x1c4\x86\xc0\xc1-\xd5\x10\xc3\xfc*[8\x89h\xc5\xba\xff\xc8u5f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="54000001", @ANYRES16=r1, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) prctl$auto(0x1, 0x8, 0x0, 0x3a, 0x1) 42.048844226s ago: executing program 2 (id=2291): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_uring_register$auto(0x2, 0x11, &(0x7f00000002c0), 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/block/loop10/discard_alignment\x00', 0x1495c0, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r2, 0x9, 0x820e, 0x6, 0x0, 0x18) ioctl$auto_EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000240)=0x5) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r5) sendmsg$auto_NL80211_CMD_SET_STATION(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r6, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_PREV_BSSID={0x27, 0x4f, "83525630bf34d4ac4064fc0816a384d376b2f1a1684ff38f52c034365a9c41d7f939ee"}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r4, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) 41.55457014s ago: executing program 3 (id=2292): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_uring_register$auto(0x2, 0x11, &(0x7f00000002c0), 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/block/loop10/discard_alignment\x00', 0x1495c0, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r2, 0x9, 0x820e, 0x6, 0x0, 0x18) ioctl$auto_EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000240)=0x5) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_STATION(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x110000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x5c, r4, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_PREV_BSSID={0x27, 0x4f, "83525630bf34d4ac4064fc0816a384d376b2f1a1684ff38f52c034365a9c41d7f939ee"}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x8}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x3}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x40080c0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(0xffffffffffffffff, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 39.698668892s ago: executing program 3 (id=2296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) getsockopt$auto_SO_RXQ_OVFL(r0, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x4ba) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000003400)={0x0, 0xffffffffffffff08, &(0x7f00000033c0)={&(0x7f0000000000)={0x14, 0x0, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x3, 0x6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) io_uring_setup$auto(0x2, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) 39.383457704s ago: executing program 4 (id=2297): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0xa, 0x2, 0x73) getsockopt$auto_SO_TIMESTAMPNS_NEW(r0, 0x0, 0x40, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0xfffffffffffffffc, 0x2000a, 0x4000000000df, 0x10, 0xffffffffffffffff, 0x10) socket(0x2, 0xa, 0xa) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2200, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto_LOOP_CTL_ADD(r3, 0x4c80, 0xfffffffffffffffd) 39.179614405s ago: executing program 2 (id=2298): bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 39.063437129s ago: executing program 3 (id=2299): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto_SO_ZEROCOPY(r0, 0x1, 0x3c, &(0x7f0000001e00)='.\\K}\xc3\x00', &(0x7f0000001e40)=0xd) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x280, 0x0) ioctl$auto_SNDCTL_SEQ_TESTMIDI(r1, 0x40045108, &(0x7f00000000c0)) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b3b", 0xfdef) write$auto(r2, 0x0, 0x1) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x9, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x6, 0x0, 0x4, 0x2a17, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x33e, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x7fffffff, 0x9, 0x8, 0xffffffff, 0xfffffffffffffffe, 0x7fff, 0xfc2, 0x27f, @inferred, @raw=0x9}) setresgid$auto(0x0, 0xffffffffffffffff, r3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000300), 0x8000, 0x0) r5 = socketcall$auto(0x9, 0x0) fcntl$auto_F_DUPFD_QUERY(r4, 0x403, r5) write$auto_proc_clear_refs_operations_internal(r5, &(0x7f0000000100)="05957b00120462c684cde97bc52776fc92542a49fdabcf0743c95266c296ce5d300543e5182a0fb6bca2759e4861756681e0f94e8de22066e4995a67a3649006ac8e37e15c2b2da90693e999e66dd1ad7c7e382cad817576d3f3553cd20233ba290f8119ed34552770c036258023af3f998fcd39d650c74d50", 0x79) 38.974982066s ago: executing program 4 (id=2301): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) io_uring_register$auto(0x2, 0x11, &(0x7f00000002c0), 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/block/loop10/discard_alignment\x00', 0x1495c0, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r2, 0x9, 0x820e, 0x6, 0x0, 0x18) ioctl$auto_EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x2, 0x1, 0x2}) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) r5 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_RNDGETENTCNT(r3, 0x80045200, &(0x7f0000000240)=0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r5) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r4, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 38.33388242s ago: executing program 3 (id=2303): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r0, 0x0, 0x4000048) pipe2$auto(0x0, 0x80) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x129842, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) writev$auto(r1, 0x0, 0x3) mknod$auto(0x0, 0x2, 0x6) 37.980566254s ago: executing program 3 (id=2304): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="54000001", @ANYRES16=r1, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_BLKFLSBUF(0xffffffffffffffff, 0x1261, 0x0) prctl$auto(0x1, 0x8, 0x0, 0x3a, 0x1) 37.226693126s ago: executing program 4 (id=2306): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 34.838121919s ago: executing program 3 (id=2309): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 22.014114605s ago: executing program 33 (id=2306): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 21.080668033s ago: executing program 1 (id=2314): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) getsockopt$auto_SO_RXQ_OVFL(r0, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="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", 0x4ba) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r3) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000003400)={0x0, 0xffffffffffffff08, &(0x7f00000033c0)={&(0x7f0000000000)={0x14, r4, 0x301, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x3, 0x6) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) io_uring_setup$auto(0x2, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r5, 0x5437, 0x0) 20.535394893s ago: executing program 1 (id=2315): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="54000001", @ANYRES16=r1, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) prctl$auto(0x1, 0x8, 0x0, 0x3a, 0x1) 19.511527179s ago: executing program 34 (id=2309): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 18.604492811s ago: executing program 1 (id=2318): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="54000001", @ANYRES16=r1, @ANYBLOB="010031bd7000fddbdf250c000000"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r2, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0xe6e43, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) prctl$auto(0x1, 0x8, 0x0, 0x3a, 0x1) 16.240910816s ago: executing program 1 (id=2319): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) r0 = openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/1:2/stats\x00', 0x120000, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000340)=ANY=[@ANYBLOB="c8000000", @ANYRES16, @ANYBLOB="01"], 0xc8}, 0x1, 0x0, 0x0, 0x200009c4}, 0x20058894) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYBLOB='v\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x6, &(0x7f0000000140)="4d0ffbd08a2c088f7d1980120689a1d008eef214000000", 0x7, 0xfffffffc}, 0x800}, 0x4, 0x4008) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x2, &(0x7f0000000080)={0x0, 0x4da}, 0x6, 0x0, 0x8, 0x7ff}, 0x401000}, 0xfffffffd, 0x7, 0x0) sendmsg$auto_ETHTOOL_MSG_PSE_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000040", @ANYRES16=0x0, @ANYBLOB="0100273d7000fcdbdf252400000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB='1'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x240080c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x40085618, 0xffffffffffffffff) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x9) fcntl$auto_F_SETPIPE_SZ(0xffffffffffffffff, 0x407, 0x6) ustat$auto(0x801, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x6}, 0xffffbff9, 0x10, 0x0) 15.973134345s ago: executing program 1 (id=2320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), r0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x14, r1, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0xf0ffff, 0x0, 0x4005}, 0x28044004) getsockopt$auto_SO_RXQ_OVFL(r0, 0x8, 0x28, &(0x7f0000000500)=',{\x00', &(0x7f0000000540)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1aea8974a9e22d77cb94cae6c89e239bacfe656d9b0948de480ce2ba3b4dbcb180089d5eb0f8f481e02f7d4628e9134b6e52881572a398e4edd6f01f90983826d721dddc7d4ba3f293288ba54f696fa25cc2f8721c3e380dd04bf05801f90019498601fcbcea6aa6a2d7983e6823f480185ef9c3b4ed19c4f94c108067c89d69bc4e0da0112280ecd0caff8a454fb3e6655dc6a35cdd053aef882e403458754f5e84bd2210f18a61106af8c5a2c18dc48ff87cfda6d545014009a167570f0550e5121d0bdf4b20a1177b708e5515ee33db3baf29633440999ddd36eb0299a1efcd8934ab60c1a88d9db6fa0d2b3f0bf12e87630e0dc5eddca8f291ad85141391e6f9fe56ee4ddb39a1ac7a573cb69ec14f012ea0b721df3ea40747d1130a61802e859519ae1bc5a3673105fa87485f88b8981a3a208a3576848c2df152a023f5e573c867b43b10247336b110956eb28e5288d7aa19219e8324857cdf6d17530385720afd5a1ffd23aa1bd061b73caafa05afdd1441040989d081814635347f1d55669b1c38be4698e3a085e2010e35d2747b4e39ef4920f58d6b4585d737c13221a44ad5543099bb0ab228722ef9cbc0d621178012495837d6a220eeaaf498ccc01", 0x4ba) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x3, 0x6) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x0, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) io_uring_setup$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) 15.661233538s ago: executing program 1 (id=2321): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, 0x0, 0x68) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 0s ago: executing program 35 (id=2321): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, 0x0, 0x68) r0 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) write$auto(r0, &(0x7f0000000080)=')@-!\x00', 0x1e1) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socket(0x2b, 0x1, 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x0, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) execve$auto(&(0x7f00000002c0)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) kernel console output (not intermixed with test programs): e+0x37b/0x5330 [ 577.207322][T14061] ext4_mkdir+0x281/0xb80 [ 577.232165][T14061] vfs_mkdir+0x361/0x850 [ 577.236540][T14061] filename_mkdirat+0x48b/0x5e0 [ 577.267371][T14061] __x64_sys_mkdirat+0x89/0xc0 [ 577.272658][T14061] do_syscall_64+0x106/0xf80 [ 577.297352][T14061] page last free pid 1 tgid 1 stack trace: [ 577.303241][T14061] __free_frozen_pages+0x7e1/0x10d0 [ 577.317371][T14061] free_contig_range+0xde/0x1d0 [ 577.322398][T14061] destroy_args+0xa8/0x7a0 [ 577.326975][T14061] debug_vm_pgtable+0x1b66/0x34c0 [ 577.376445][T14061] do_one_initcall+0x11d/0x760 [ 577.381499][T14061] kernel_init_freeable+0x6e5/0x7a0 [ 577.387025][T14061] kernel_init+0x1f/0x1e0 [ 577.407429][T14061] ret_from_fork+0x754/0xd80 [ 577.412129][T14061] ret_from_fork_asm+0x1a/0x30 [ 577.470745][T14065] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 577.531738][T14065] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 577.550857][T14065] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 577.571134][T14065] page_type: f5(slab) [ 577.575265][T14065] raw: 00fff00000000040 ffff88814047fdc0 dead000000000100 dead000000000122 [ 577.607530][T14065] raw: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 577.616512][T14065] head: 00fff00000000040 ffff88814047fdc0 dead000000000100 dead000000000122 [ 577.717353][T14065] head: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 577.726122][T14065] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 577.867371][T14065] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 577.876408][T14065] page dumped because: unmovable page [ 577.908415][T14065] page_owner tracks the page as allocated [ 577.914219][T14065] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5811, tgid 5811 (syz-executor), ts 80303195810, free_ts 28353588579 [ 577.987318][T14065] post_alloc_hook+0x153/0x170 [ 577.992275][T14065] get_page_from_freelist+0x111d/0x3140 [ 578.008535][T14065] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 578.014608][T14065] new_slab+0xa6/0x6d0 [ 578.037398][T14065] refill_objects+0x26b/0x400 [ 578.047539][T14065] __pcs_replace_empty_main+0x19f/0x600 [ 578.063470][T14065] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 578.077361][T14065] ext4_alloc_inode+0x26/0x640 [ 578.082210][T14065] alloc_inode+0x68/0x250 [ 578.107165][T14065] new_inode+0x22/0x1c0 [ 578.111484][T14065] __ext4_new_inode+0x37b/0x5330 [ 578.116656][T14065] ext4_mkdir+0x281/0xb80 [ 578.142922][T14065] vfs_mkdir+0x361/0x850 [ 578.153064][T14065] filename_mkdirat+0x48b/0x5e0 [ 578.167330][T14065] __x64_sys_mkdirat+0x89/0xc0 [ 578.177401][T14065] do_syscall_64+0x106/0xf80 [ 578.192613][T14065] page last free pid 1 tgid 1 stack trace: [ 578.208963][T14065] __free_frozen_pages+0x7e1/0x10d0 [ 578.237329][T14065] free_contig_range+0xde/0x1d0 [ 578.242365][T14065] destroy_args+0xa8/0x7a0 [ 578.267404][T14065] debug_vm_pgtable+0x1b66/0x34c0 [ 578.272540][T14065] do_one_initcall+0x11d/0x760 [ 578.307448][T14065] kernel_init_freeable+0x6e5/0x7a0 [ 578.312934][T14065] kernel_init+0x1f/0x1e0 [ 578.326479][T14065] ret_from_fork+0x754/0xd80 [ 578.345981][T14065] ret_from_fork_asm+0x1a/0x30 [ 578.872721][T14099] FAULT_INJECTION: forcing a failure. [ 578.872721][T14099] name failslab, interval 1, probability 0, space 0, times 0 [ 578.916179][T14099] CPU: 0 UID: 0 PID: 14099 Comm: syz.4.2009 Tainted: G L syzkaller #0 PREEMPT(full) [ 578.916232][T14099] Tainted: [L]=SOFTLOCKUP [ 578.916243][T14099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.916263][T14099] Call Trace: [ 578.916274][T14099] [ 578.916287][T14099] dump_stack_lvl+0x100/0x190 [ 578.916341][T14099] should_fail_ex.cold+0x5/0xa [ 578.916377][T14099] ? tomoyo_supervisor+0x65d/0x1340 [ 578.916415][T14099] should_failslab+0xc2/0x120 [ 578.916448][T14099] __kmalloc_noprof+0xe0/0x850 [ 578.916504][T14099] tomoyo_supervisor+0x65d/0x1340 [ 578.916561][T14099] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 578.916607][T14099] ? tomoyo_realpath_from_path+0x19c/0x690 [ 578.916658][T14099] ? tomoyo_realpath_from_path+0x19c/0x690 [ 578.916697][T14099] ? kfree+0x1f6/0x6b0 [ 578.916739][T14099] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 578.916802][T14099] tomoyo_path_number_perm+0x445/0x580 [ 578.916853][T14099] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 578.916918][T14099] ? do_raw_spin_lock+0x128/0x260 [ 578.916998][T14099] ? find_held_lock+0x2b/0x80 [ 578.917028][T14099] ? __pfx_d_add+0x10/0x10 [ 578.917065][T14099] ? d_alloc+0x176/0x1e0 [ 578.917097][T14099] ? current_check_access_path+0x281/0x460 [ 578.917141][T14099] ? simple_lookup+0x105/0x1d0 [ 578.917196][T14099] tomoyo_path_mknod+0x164/0x190 [ 578.917235][T14099] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 578.917274][T14099] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 578.917328][T14099] security_path_mknod+0x161/0x300 [ 578.917366][T14099] filename_mknodat+0x241/0x7f0 [ 578.917402][T14099] ? __pfx_filename_mknodat+0x10/0x10 [ 578.917434][T14099] ? strncpy_from_user+0x19d/0x2d0 [ 578.917483][T14099] ? do_getname+0x191/0x390 [ 578.917525][T14099] __x64_sys_mknod+0x8f/0xc0 [ 578.917563][T14099] do_syscall_64+0x106/0xf80 [ 578.917600][T14099] ? clear_bhb_loop+0x40/0x90 [ 578.917641][T14099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.917675][T14099] RIP: 0033:0x7fecdd59c799 [ 578.917704][T14099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 578.917735][T14099] RSP: 002b:00007fecde374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 578.917767][T14099] RAX: ffffffffffffffda RBX: 00007fecdd816090 RCX: 00007fecdd59c799 [ 578.917789][T14099] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000000 [ 578.917809][T14099] RBP: 00007fecdd632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 578.917829][T14099] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 578.917848][T14099] R13: 00007fecdd816128 R14: 00007fecdd816090 R15: 00007ffe0d0a9f78 [ 578.917894][T14099] [ 579.334570][T14107] bond0: invalid ARP target specified [ 579.345367][T14107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2011'. [ 580.000427][T14116] FAULT_INJECTION: forcing a failure. [ 580.000427][T14116] name failslab, interval 1, probability 0, space 0, times 0 [ 580.026810][T14119] FAULT_INJECTION: forcing a failure. [ 580.026810][T14119] name failslab, interval 1, probability 0, space 0, times 0 [ 580.054742][T14116] CPU: 0 UID: 0 PID: 14116 Comm: syz.2.2014 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.054804][T14116] Tainted: [L]=SOFTLOCKUP [ 580.054816][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.054832][T14116] Call Trace: [ 580.054843][T14116] [ 580.054856][T14116] dump_stack_lvl+0x100/0x190 [ 580.054922][T14116] should_fail_ex.cold+0x5/0xa [ 580.054961][T14116] should_failslab+0xc2/0x120 [ 580.054996][T14116] __kmalloc_cache_noprof+0x7a/0x6f0 [ 580.055035][T14116] ? snd_timer_instance_new+0x47/0x2e0 [ 580.055088][T14116] snd_timer_instance_new+0x47/0x2e0 [ 580.055132][T14116] snd_seq_timer_open+0x1d4/0x600 [ 580.055170][T14116] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 580.055228][T14116] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 580.055263][T14116] ? lockdep_hardirqs_on+0x78/0x100 [ 580.055297][T14116] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 580.055335][T14116] queue_use+0xdc/0x1f0 [ 580.055368][T14116] snd_seq_queue_alloc+0x2e5/0x590 [ 580.055408][T14116] snd_seq_ioctl_create_queue+0xa9/0x370 [ 580.055451][T14116] call_seq_client_ctl+0xa3/0x130 [ 580.055491][T14116] snd_seq_kernel_client_ctl+0x77/0xd0 [ 580.055518][T14116] alloc_seq_queue+0xdb/0x180 [ 580.055545][T14116] ? __pfx_alloc_seq_queue+0x10/0x10 [ 580.055583][T14116] ? mark_held_locks+0x40/0x70 [ 580.055605][T14116] ? _raw_spin_unlock_irq+0x23/0x50 [ 580.055624][T14116] ? lockdep_hardirqs_on+0x78/0x100 [ 580.055648][T14116] snd_seq_oss_open+0x2b2/0xa10 [ 580.055679][T14116] odev_open+0x79/0xc0 [ 580.055707][T14116] ? __pfx_odev_open+0x10/0x10 [ 580.055730][T14116] soundcore_open+0x2e3/0x5a0 [ 580.055758][T14116] ? __pfx_soundcore_open+0x10/0x10 [ 580.055783][T14116] chrdev_open+0x234/0x6a0 [ 580.055802][T14116] ? __pfx_apparmor_file_open+0x10/0x10 [ 580.055828][T14116] ? __pfx_chrdev_open+0x10/0x10 [ 580.055848][T14116] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 580.055872][T14116] do_dentry_open+0x6d8/0x1660 [ 580.055891][T14116] ? __pfx_chrdev_open+0x10/0x10 [ 580.055922][T14116] vfs_open+0x82/0x3f0 [ 580.055947][T14116] path_openat+0x208c/0x31a0 [ 580.055974][T14116] ? __pfx_path_openat+0x10/0x10 [ 580.056002][T14116] do_file_open+0x20e/0x430 [ 580.056022][T14116] ? __pfx_do_file_open+0x10/0x10 [ 580.056060][T14116] ? alloc_fd+0x476/0x790 [ 580.056081][T14116] ? do_getname+0x191/0x390 [ 580.056106][T14116] do_sys_openat2+0x10d/0x1e0 [ 580.056130][T14116] ? __pfx_do_sys_openat2+0x10/0x10 [ 580.056158][T14116] ? __fget_files+0x21f/0x3d0 [ 580.056181][T14116] __x64_sys_openat+0x12d/0x210 [ 580.056205][T14116] ? __pfx___x64_sys_openat+0x10/0x10 [ 580.056238][T14116] do_syscall_64+0x106/0xf80 [ 580.056258][T14116] ? clear_bhb_loop+0x40/0x90 [ 580.056281][T14116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.056300][T14116] RIP: 0033:0x7fa14239c799 [ 580.056318][T14116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.056336][T14116] RSP: 002b:00007fa1431b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.056355][T14116] RAX: ffffffffffffffda RBX: 00007fa142615fa0 RCX: 00007fa14239c799 [ 580.056367][T14116] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 580.056379][T14116] RBP: 00007fa142432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 580.056390][T14116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.056400][T14116] R13: 00007fa142616038 R14: 00007fa142615fa0 R15: 00007ffd15029918 [ 580.056425][T14116] [ 580.529710][T11218] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1437 with max blocks 1 with error 117 [ 580.542466][T11218] EXT4-fs (sda1): This should not happen!! Data will be lost [ 580.542466][T11218] [ 580.568337][T14119] CPU: 1 UID: 0 PID: 14119 Comm: syz.1.2012 Tainted: G L syzkaller #0 PREEMPT(full) [ 580.568372][T14119] Tainted: [L]=SOFTLOCKUP [ 580.568379][T14119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 580.568391][T14119] Call Trace: [ 580.568398][T14119] [ 580.568406][T14119] dump_stack_lvl+0x100/0x190 [ 580.568438][T14119] should_fail_ex.cold+0x5/0xa [ 580.568461][T14119] should_failslab+0xc2/0x120 [ 580.568482][T14119] __kmalloc_cache_node_noprof+0x7d/0x770 [ 580.568511][T14119] ? blkg_alloc+0xbd/0xae0 [ 580.568529][T14119] ? __xa_insert+0x20b/0x320 [ 580.568556][T14119] blkg_alloc+0xbd/0xae0 [ 580.568576][T14119] ? __alloc_disk_node+0x2d4/0x6b0 [ 580.568605][T14119] blkcg_init_disk+0x51/0x580 [ 580.568635][T14119] __alloc_disk_node+0x2f6/0x6b0 [ 580.568680][T14119] __blk_mq_alloc_disk+0x89/0x120 [ 580.568707][T14119] loop_add+0x498/0xb60 [ 580.568728][T14119] ? __pfx_loop_add+0x10/0x10 [ 580.568761][T14119] ? find_held_lock+0x2b/0x80 [ 580.568778][T14119] ? __fget_files+0x215/0x3d0 [ 580.568798][T14119] loop_control_ioctl+0xae/0x620 [ 580.568820][T14119] ? __pfx_loop_control_ioctl+0x10/0x10 [ 580.568844][T14119] ? __pfx_loop_control_ioctl+0x10/0x10 [ 580.568866][T14119] __x64_sys_ioctl+0x18e/0x210 [ 580.568894][T14119] do_syscall_64+0x106/0xf80 [ 580.568924][T14119] ? clear_bhb_loop+0x40/0x90 [ 580.568947][T14119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.568966][T14119] RIP: 0033:0x7fad2c59c799 [ 580.568983][T14119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 580.569001][T14119] RSP: 002b:00007fad2d522028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 580.569020][T14119] RAX: ffffffffffffffda RBX: 00007fad2c816090 RCX: 00007fad2c59c799 [ 580.569032][T14119] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000b [ 580.569044][T14119] RBP: 00007fad2c632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 580.569055][T14119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.569066][T14119] R13: 00007fad2c816128 R14: 00007fad2c816090 R15: 00007fff1708f998 [ 580.569090][T14119] [ 581.867943][T14128] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 581.888352][T14128] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 581.897797][T14128] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 581.920314][T14128] page_type: f5(slab) [ 581.924402][T14128] raw: 00fff00000000040 ffff88814047fdc0 dead000000000100 dead000000000122 [ 581.955371][T14128] raw: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 581.964415][T14128] head: 00fff00000000040 ffff88814047fdc0 dead000000000100 dead000000000122 [ 581.979710][T14128] head: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 581.992033][T14128] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 582.002558][T14128] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 582.016415][T14128] page dumped because: unmovable page [ 582.032860][T14128] page_owner tracks the page as allocated [ 582.039525][T14128] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5811, tgid 5811 (syz-executor), ts 80303195810, free_ts 28353588579 [ 582.063559][T14128] post_alloc_hook+0x153/0x170 [ 582.086261][T14128] get_page_from_freelist+0x111d/0x3140 [ 582.092429][T14128] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 582.099139][T14128] new_slab+0xa6/0x6d0 [ 582.105628][T14128] refill_objects+0x26b/0x400 [ 582.111144][T14128] __pcs_replace_empty_main+0x19f/0x600 [ 582.116915][T14128] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 582.123528][T14128] ext4_alloc_inode+0x26/0x640 [ 582.134129][T14128] alloc_inode+0x68/0x250 [ 582.139110][T14128] new_inode+0x22/0x1c0 [ 582.143507][T14128] __ext4_new_inode+0x37b/0x5330 [ 582.149135][T14128] ext4_mkdir+0x281/0xb80 [ 582.153716][T14128] vfs_mkdir+0x361/0x850 [ 582.158541][T14128] filename_mkdirat+0x48b/0x5e0 [ 582.163542][T14128] __x64_sys_mkdirat+0x89/0xc0 [ 582.168875][T14128] do_syscall_64+0x106/0xf80 [ 582.173614][T14128] page last free pid 1 tgid 1 stack trace: [ 582.180124][T14128] __free_frozen_pages+0x7e1/0x10d0 [ 582.188058][T14128] free_contig_range+0xde/0x1d0 [ 582.193166][T14128] destroy_args+0xa8/0x7a0 [ 582.198175][T14128] debug_vm_pgtable+0x1b66/0x34c0 [ 582.203405][T14128] do_one_initcall+0x11d/0x760 [ 582.233534][T14128] kernel_init_freeable+0x6e5/0x7a0 [ 582.280392][T14128] kernel_init+0x1f/0x1e0 [ 582.291816][T14128] ret_from_fork+0x754/0xd80 [ 582.303181][T14128] ret_from_fork_asm+0x1a/0x30 [ 582.381495][T14131] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 582.391132][T14131] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 582.400287][T14131] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 582.417697][T14131] page_type: f5(slab) [ 582.432454][T14131] raw: 00fff00000000040 ffff88814047fdc0 dead000000000100 dead000000000122 [ 582.459130][T14131] raw: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 582.482244][T14131] head: 00fff00000000040 ffff88814047fdc0 dead000000000100 dead000000000122 [ 582.507396][T14131] head: 0000000000000000 00000008000d000d 00000000f5000000 0000000000000000 [ 582.560307][T14131] head: 00fff00000000003 ffffea0001ff8001 00000000ffffffff 00000000ffffffff [ 582.585493][T14131] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 582.611024][T14131] page dumped because: unmovable page [ 582.630910][T14131] page_owner tracks the page as allocated [ 582.644945][T14131] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5811, tgid 5811 (syz-executor), ts 80303195810, free_ts 28353588579 [ 582.679717][T14131] post_alloc_hook+0x153/0x170 [ 582.688453][T14131] get_page_from_freelist+0x111d/0x3140 [ 582.703178][T14131] __alloc_frozen_pages_noprof+0x27c/0x2ba0 [ 582.709695][T14131] new_slab+0xa6/0x6d0 [ 582.727992][T14131] refill_objects+0x26b/0x400 [ 582.734817][T14131] __pcs_replace_empty_main+0x19f/0x600 [ 582.750583][T14131] kmem_cache_alloc_lru_noprof+0x485/0x6e0 [ 582.756623][T14131] ext4_alloc_inode+0x26/0x640 [ 582.765627][T14131] alloc_inode+0x68/0x250 [ 582.770513][T14131] new_inode+0x22/0x1c0 [ 582.774883][T14131] __ext4_new_inode+0x37b/0x5330 [ 582.786123][T14131] ext4_mkdir+0x281/0xb80 [ 582.796312][T14131] vfs_mkdir+0x361/0x850 [ 582.804801][T14131] filename_mkdirat+0x48b/0x5e0 [ 582.810322][T14131] __x64_sys_mkdirat+0x89/0xc0 [ 582.820209][T14131] do_syscall_64+0x106/0xf80 [ 582.827843][T14131] page last free pid 1 tgid 1 stack trace: [ 582.836000][T14131] __free_frozen_pages+0x7e1/0x10d0 [ 582.847407][T14131] free_contig_range+0xde/0x1d0 [ 582.852450][T14131] destroy_args+0xa8/0x7a0 [ 582.861488][T14131] debug_vm_pgtable+0x1b66/0x34c0 [ 582.866626][T14131] do_one_initcall+0x11d/0x760 [ 582.877437][T14131] kernel_init_freeable+0x6e5/0x7a0 [ 582.882836][T14131] kernel_init+0x1f/0x1e0 [ 582.897671][T14131] ret_from_fork+0x754/0xd80 [ 582.907794][T14131] ret_from_fork_asm+0x1a/0x30 [ 583.039560][T14143] bond0: invalid ARP target specified [ 583.062441][T14143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2020'. [ 583.273006][T14148] bond0: invalid ARP target specified [ 584.897596][T14184] bond0: invalid ARP target specified [ 586.117221][T14209] FAULT_INJECTION: forcing a failure. [ 586.117221][T14209] name failslab, interval 1, probability 0, space 0, times 0 [ 586.152492][T14211] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 586.167810][T14209] CPU: 1 UID: 0 PID: 14209 Comm: syz.4.2035 Tainted: G L syzkaller #0 PREEMPT(full) [ 586.167858][T14209] Tainted: [L]=SOFTLOCKUP [ 586.167870][T14209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 586.167886][T14209] Call Trace: [ 586.167895][T14209] [ 586.167906][T14209] dump_stack_lvl+0x100/0x190 [ 586.167953][T14209] should_fail_ex.cold+0x5/0xa [ 586.167992][T14209] should_failslab+0xc2/0x120 [ 586.168024][T14209] __kmalloc_cache_node_noprof+0x7d/0x770 [ 586.168073][T14209] ? bdi_alloc+0x44/0x140 [ 586.168137][T14209] bdi_alloc+0x44/0x140 [ 586.168169][T14209] __alloc_disk_node+0xac/0x6b0 [ 586.168223][T14209] __blk_mq_alloc_disk+0x89/0x120 [ 586.168268][T14209] loop_add+0x498/0xb60 [ 586.168305][T14209] ? __pfx_loop_add+0x10/0x10 [ 586.168365][T14209] ? find_held_lock+0x2b/0x80 [ 586.168396][T14209] ? __fget_files+0x215/0x3d0 [ 586.168430][T14209] loop_control_ioctl+0xae/0x620 [ 586.168467][T14209] ? __pfx_loop_control_ioctl+0x10/0x10 [ 586.168511][T14209] ? __pfx_loop_control_ioctl+0x10/0x10 [ 586.168551][T14209] __x64_sys_ioctl+0x18e/0x210 [ 586.168599][T14209] do_syscall_64+0x106/0xf80 [ 586.168637][T14209] ? clear_bhb_loop+0x40/0x90 [ 586.168677][T14209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.168709][T14209] RIP: 0033:0x7fecdd59c799 [ 586.168737][T14209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 586.168768][T14209] RSP: 002b:00007fecde374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.168800][T14209] RAX: ffffffffffffffda RBX: 00007fecdd816090 RCX: 00007fecdd59c799 [ 586.168822][T14209] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000b [ 586.168842][T14209] RBP: 00007fecdd632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 586.168861][T14209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 586.168878][T14209] R13: 00007fecdd816128 R14: 00007fecdd816090 R15: 00007ffe0d0a9f78 [ 586.168921][T14209] [ 588.609284][T14247] FAULT_INJECTION: forcing a failure. [ 588.609284][T14247] name failslab, interval 1, probability 0, space 0, times 0 [ 588.687116][T14247] CPU: 0 UID: 0 PID: 14247 Comm: syz.3.2048 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.687177][T14247] Tainted: [L]=SOFTLOCKUP [ 588.687190][T14247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 588.687209][T14247] Call Trace: [ 588.687226][T14247] [ 588.687239][T14247] dump_stack_lvl+0x100/0x190 [ 588.687290][T14247] should_fail_ex.cold+0x5/0xa [ 588.687329][T14247] should_failslab+0xc2/0x120 [ 588.687366][T14247] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 588.687413][T14247] ? bdev_alloc_inode+0x26/0x90 [ 588.687464][T14247] ? rcu_is_watching+0x12/0xc0 [ 588.687515][T14247] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 588.687568][T14247] bdev_alloc_inode+0x26/0x90 [ 588.687618][T14247] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 588.687667][T14247] alloc_inode+0x68/0x250 [ 588.687709][T14247] new_inode+0x22/0x1c0 [ 588.687756][T14247] bdev_alloc+0x2b/0x420 [ 588.687788][T14247] ? bdi_init+0x3f4/0x5b0 [ 588.687820][T14247] ? bdi_init+0x49f/0x5b0 [ 588.687855][T14247] __alloc_disk_node+0x116/0x6b0 [ 588.687908][T14247] __blk_mq_alloc_disk+0x89/0x120 [ 588.687954][T14247] loop_add+0x498/0xb60 [ 588.687990][T14247] ? __pfx_loop_add+0x10/0x10 [ 588.688049][T14247] ? find_held_lock+0x2b/0x80 [ 588.688080][T14247] ? __fget_files+0x215/0x3d0 [ 588.688114][T14247] loop_control_ioctl+0xae/0x620 [ 588.688162][T14247] ? __pfx_loop_control_ioctl+0x10/0x10 [ 588.688207][T14247] ? __pfx_loop_control_ioctl+0x10/0x10 [ 588.688246][T14247] __x64_sys_ioctl+0x18e/0x210 [ 588.688291][T14247] do_syscall_64+0x106/0xf80 [ 588.688329][T14247] ? clear_bhb_loop+0x40/0x90 [ 588.688370][T14247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.688405][T14247] RIP: 0033:0x7fee0479c799 [ 588.688432][T14247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.688465][T14247] RSP: 002b:00007fee056b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 588.688499][T14247] RAX: ffffffffffffffda RBX: 00007fee04a15fa0 RCX: 00007fee0479c799 [ 588.688520][T14247] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000b [ 588.688542][T14247] RBP: 00007fee04832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 588.688562][T14247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 588.688581][T14247] R13: 00007fee04a16038 R14: 00007fee04a15fa0 R15: 00007ffd29047cb8 [ 588.688624][T14247] [ 591.771371][T14285] FAULT_INJECTION: forcing a failure. [ 591.771371][T14285] name failslab, interval 1, probability 0, space 0, times 0 [ 591.795204][T14285] CPU: 0 UID: 0 PID: 14285 Comm: syz.2.2056 Tainted: G L syzkaller #0 PREEMPT(full) [ 591.795258][T14285] Tainted: [L]=SOFTLOCKUP [ 591.795270][T14285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 591.795292][T14285] Call Trace: [ 591.795303][T14285] [ 591.795317][T14285] dump_stack_lvl+0x100/0x190 [ 591.795373][T14285] should_fail_ex.cold+0x5/0xa [ 591.795413][T14285] ? tomoyo_init_log+0x1224/0x20c0 [ 591.795449][T14285] should_failslab+0xc2/0x120 [ 591.795485][T14285] __kmalloc_noprof+0xe0/0x850 [ 591.795542][T14285] tomoyo_init_log+0x1224/0x20c0 [ 591.795583][T14285] ? vsnprintf+0x4ee/0x1240 [ 591.795629][T14285] ? __pfx_tomoyo_init_log+0x10/0x10 [ 591.795663][T14285] ? tomoyo_profile+0x47/0x60 [ 591.795703][T14285] ? tomoyo_domain_quota_is_ok+0x367/0x580 [ 591.795760][T14285] tomoyo_supervisor+0x506/0x1340 [ 591.795808][T14285] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 591.795855][T14285] ? tomoyo_realpath_from_path+0x19c/0x690 [ 591.795907][T14285] ? tomoyo_realpath_from_path+0x19c/0x690 [ 591.795942][T14285] ? kfree+0x1f6/0x6b0 [ 591.795987][T14285] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 591.796061][T14285] tomoyo_path_number_perm+0x445/0x580 [ 591.796115][T14285] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 591.796177][T14285] ? do_raw_spin_lock+0x128/0x260 [ 591.796239][T14285] ? find_held_lock+0x2b/0x80 [ 591.796269][T14285] ? __pfx_d_add+0x10/0x10 [ 591.796303][T14285] ? d_alloc+0x176/0x1e0 [ 591.796333][T14285] ? current_check_access_path+0x281/0x460 [ 591.796374][T14285] ? simple_lookup+0x105/0x1d0 [ 591.796429][T14285] tomoyo_path_mknod+0x164/0x190 [ 591.796466][T14285] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 591.796509][T14285] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 591.796566][T14285] security_path_mknod+0x161/0x300 [ 591.796603][T14285] filename_mknodat+0x241/0x7f0 [ 591.796643][T14285] ? __pfx_filename_mknodat+0x10/0x10 [ 591.796675][T14285] ? strncpy_from_user+0x19d/0x2d0 [ 591.796725][T14285] ? do_getname+0x191/0x390 [ 591.796766][T14285] __x64_sys_mknod+0x8f/0xc0 [ 591.796807][T14285] do_syscall_64+0x106/0xf80 [ 591.796844][T14285] ? clear_bhb_loop+0x40/0x90 [ 591.796883][T14285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.796916][T14285] RIP: 0033:0x7fa14239c799 [ 591.796946][T14285] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 591.796977][T14285] RSP: 002b:00007fa1431b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 591.797010][T14285] RAX: ffffffffffffffda RBX: 00007fa142615fa0 RCX: 00007fa14239c799 [ 591.797032][T14285] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000000 [ 591.797059][T14285] RBP: 00007fa142432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 591.797078][T14285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.797097][T14285] R13: 00007fa142616038 R14: 00007fa142615fa0 R15: 00007ffd15029918 [ 591.797142][T14285] [ 592.704430][T14311] FAULT_INJECTION: forcing a failure. [ 592.704430][T14311] name failslab, interval 1, probability 0, space 0, times 0 [ 592.808611][T14311] CPU: 0 UID: 0 PID: 14311 Comm: syz.4.2063 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.808661][T14311] Tainted: [L]=SOFTLOCKUP [ 592.808672][T14311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 592.808690][T14311] Call Trace: [ 592.808700][T14311] [ 592.808713][T14311] dump_stack_lvl+0x100/0x190 [ 592.808760][T14311] should_fail_ex.cold+0x5/0xa [ 592.808885][T14311] ? memcg_list_lru_alloc+0x4ec/0x740 [ 592.808936][T14311] should_failslab+0xc2/0x120 [ 592.808968][T14311] __kmalloc_noprof+0xe0/0x850 [ 592.809009][T14311] ? loop_add+0x498/0xb60 [ 592.809055][T14311] memcg_list_lru_alloc+0x4ec/0x740 [ 592.809107][T14311] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 592.809149][T14311] ? rcu_read_unlock+0x17/0x60 [ 592.809192][T14311] ? get_mem_cgroup_from_objcg+0xd3/0x330 [ 592.809239][T14311] __memcg_slab_post_alloc_hook+0x12f/0x9a0 [ 592.809281][T14311] ? kasan_save_track+0x14/0x30 [ 592.809330][T14311] kmem_cache_alloc_lru_noprof+0x592/0x6e0 [ 592.809374][T14311] ? bdev_alloc_inode+0x26/0x90 [ 592.809425][T14311] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 592.809474][T14311] bdev_alloc_inode+0x26/0x90 [ 592.809520][T14311] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 592.809565][T14311] alloc_inode+0x68/0x250 [ 592.809605][T14311] new_inode+0x22/0x1c0 [ 592.809645][T14311] bdev_alloc+0x2b/0x420 [ 592.809672][T14311] ? bdi_init+0x3f4/0x5b0 [ 592.809700][T14311] ? bdi_init+0x49f/0x5b0 [ 592.809731][T14311] __alloc_disk_node+0x116/0x6b0 [ 592.809780][T14311] __blk_mq_alloc_disk+0x89/0x120 [ 592.809817][T14311] loop_add+0x498/0xb60 [ 592.809847][T14311] ? __pfx_loop_add+0x10/0x10 [ 592.809903][T14311] ? find_held_lock+0x2b/0x80 [ 592.809936][T14311] ? __fget_files+0x215/0x3d0 [ 592.809968][T14311] loop_control_ioctl+0xae/0x620 [ 592.810005][T14311] ? __pfx_loop_control_ioctl+0x10/0x10 [ 592.810081][T14311] ? __pfx_loop_control_ioctl+0x10/0x10 [ 592.810119][T14311] __x64_sys_ioctl+0x18e/0x210 [ 592.810161][T14311] do_syscall_64+0x106/0xf80 [ 592.810185][T14311] ? clear_bhb_loop+0x40/0x90 [ 592.810209][T14311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.810230][T14311] RIP: 0033:0x7fecdd59c799 [ 592.810248][T14311] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.810267][T14311] RSP: 002b:00007fecde374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.810287][T14311] RAX: ffffffffffffffda RBX: 00007fecdd816090 RCX: 00007fecdd59c799 [ 592.810299][T14311] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000b [ 592.810310][T14311] RBP: 00007fecdd632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 592.810321][T14311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.810332][T14311] R13: 00007fecdd816128 R14: 00007fecdd816090 R15: 00007ffe0d0a9f78 [ 592.810355][T14311] [ 594.752076][T14333] bond0: invalid ARP target specified [ 594.802799][T14333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2069'. [ 595.296150][T14343] FAULT_INJECTION: forcing a failure. [ 595.296150][T14343] name failslab, interval 1, probability 0, space 0, times 0 [ 595.316178][T14343] CPU: 0 UID: 0 PID: 14343 Comm: syz.4.2072 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.316230][T14343] Tainted: [L]=SOFTLOCKUP [ 595.316242][T14343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.316261][T14343] Call Trace: [ 595.316272][T14343] [ 595.316284][T14343] dump_stack_lvl+0x100/0x190 [ 595.316337][T14343] should_fail_ex.cold+0x5/0xa [ 595.316376][T14343] should_failslab+0xc2/0x120 [ 595.316408][T14343] __kmalloc_cache_noprof+0x7a/0x6f0 [ 595.316449][T14343] ? snd_timer_instance_new+0x47/0x2e0 [ 595.316507][T14343] snd_timer_instance_new+0x47/0x2e0 [ 595.316558][T14343] snd_seq_timer_open+0x1d4/0x600 [ 595.316601][T14343] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 595.316652][T14343] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 595.316687][T14343] ? lockdep_hardirqs_on+0x78/0x100 [ 595.316725][T14343] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 595.316764][T14343] queue_use+0xdc/0x1f0 [ 595.316794][T14343] snd_seq_queue_alloc+0x2e5/0x590 [ 595.316832][T14343] snd_seq_ioctl_create_queue+0xa9/0x370 [ 595.316878][T14343] call_seq_client_ctl+0xa3/0x130 [ 595.316924][T14343] snd_seq_kernel_client_ctl+0x77/0xd0 [ 595.316969][T14343] alloc_seq_queue+0xdb/0x180 [ 595.317013][T14343] ? __pfx_alloc_seq_queue+0x10/0x10 [ 595.317090][T14343] ? mark_held_locks+0x40/0x70 [ 595.317128][T14343] ? _raw_spin_unlock_irq+0x23/0x50 [ 595.317160][T14343] ? lockdep_hardirqs_on+0x78/0x100 [ 595.317202][T14343] snd_seq_oss_open+0x2b2/0xa10 [ 595.317257][T14343] odev_open+0x79/0xc0 [ 595.317293][T14343] ? __pfx_odev_open+0x10/0x10 [ 595.317330][T14343] soundcore_open+0x2e3/0x5a0 [ 595.317372][T14343] ? __pfx_soundcore_open+0x10/0x10 [ 595.317411][T14343] chrdev_open+0x234/0x6a0 [ 595.317444][T14343] ? __pfx_apparmor_file_open+0x10/0x10 [ 595.317490][T14343] ? __pfx_chrdev_open+0x10/0x10 [ 595.317526][T14343] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 595.317570][T14343] do_dentry_open+0x6d8/0x1660 [ 595.317603][T14343] ? __pfx_chrdev_open+0x10/0x10 [ 595.317647][T14343] vfs_open+0x82/0x3f0 [ 595.317693][T14343] path_openat+0x208c/0x31a0 [ 595.317743][T14343] ? __pfx_path_openat+0x10/0x10 [ 595.317790][T14343] do_file_open+0x20e/0x430 [ 595.317828][T14343] ? __pfx_do_file_open+0x10/0x10 [ 595.317894][T14343] ? alloc_fd+0x476/0x790 [ 595.317932][T14343] ? do_getname+0x191/0x390 [ 595.317975][T14343] do_sys_openat2+0x10d/0x1e0 [ 595.318018][T14343] ? __pfx_do_sys_openat2+0x10/0x10 [ 595.318073][T14343] ? __fget_files+0x21f/0x3d0 [ 595.318112][T14343] __x64_sys_openat+0x12d/0x210 [ 595.318155][T14343] ? __pfx___x64_sys_openat+0x10/0x10 [ 595.318214][T14343] do_syscall_64+0x106/0xf80 [ 595.318253][T14343] ? clear_bhb_loop+0x40/0x90 [ 595.318294][T14343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.318327][T14343] RIP: 0033:0x7fecdd59c799 [ 595.318355][T14343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.318386][T14343] RSP: 002b:00007fecde395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 595.318418][T14343] RAX: ffffffffffffffda RBX: 00007fecdd815fa0 RCX: 00007fecdd59c799 [ 595.318440][T14343] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 595.318461][T14343] RBP: 00007fecdd632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 595.318481][T14343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.318501][T14343] R13: 00007fecdd816038 R14: 00007fecdd815fa0 R15: 00007ffe0d0a9f78 [ 595.318545][T14343] [ 595.922510][T14345] FAULT_INJECTION: forcing a failure. [ 595.922510][T14345] name failslab, interval 1, probability 0, space 0, times 0 [ 595.969440][T14345] CPU: 1 UID: 0 PID: 14345 Comm: syz.1.2074 Tainted: G L syzkaller #0 PREEMPT(full) [ 595.969484][T14345] Tainted: [L]=SOFTLOCKUP [ 595.969492][T14345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 595.969504][T14345] Call Trace: [ 595.969511][T14345] [ 595.969519][T14345] dump_stack_lvl+0x100/0x190 [ 595.969552][T14345] should_fail_ex.cold+0x5/0xa [ 595.969574][T14345] should_failslab+0xc2/0x120 [ 595.969594][T14345] __kmalloc_cache_node_noprof+0x7d/0x770 [ 595.969623][T14345] ? bdi_alloc+0x44/0x140 [ 595.969646][T14345] bdi_alloc+0x44/0x140 [ 595.969664][T14345] __alloc_disk_node+0xac/0x6b0 [ 595.969696][T14345] __blk_mq_alloc_disk+0x89/0x120 [ 595.969731][T14345] loop_add+0x498/0xb60 [ 595.969753][T14345] ? __pfx_loop_add+0x10/0x10 [ 595.969787][T14345] ? find_held_lock+0x2b/0x80 [ 595.969805][T14345] ? __fget_files+0x215/0x3d0 [ 595.969825][T14345] loop_control_ioctl+0xae/0x620 [ 595.969848][T14345] ? __pfx_loop_control_ioctl+0x10/0x10 [ 595.969874][T14345] ? __pfx_loop_control_ioctl+0x10/0x10 [ 595.969897][T14345] __x64_sys_ioctl+0x18e/0x210 [ 595.969925][T14345] do_syscall_64+0x106/0xf80 [ 595.969946][T14345] ? clear_bhb_loop+0x40/0x90 [ 595.969969][T14345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.969989][T14345] RIP: 0033:0x7fad2c59c799 [ 595.970006][T14345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.970025][T14345] RSP: 002b:00007fad2d543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.970044][T14345] RAX: ffffffffffffffda RBX: 00007fad2c815fa0 RCX: 00007fad2c59c799 [ 595.970056][T14345] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000b [ 595.970067][T14345] RBP: 00007fad2c632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 595.970078][T14345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.970088][T14345] R13: 00007fad2c816038 R14: 00007fad2c815fa0 R15: 00007fff1708f998 [ 595.970111][T14345] [ 597.159400][T14361] FAULT_INJECTION: forcing a failure. [ 597.159400][T14361] name failslab, interval 1, probability 0, space 0, times 0 [ 597.214232][T14351] Process accounting resumed [ 597.231101][T14361] CPU: 1 UID: 0 PID: 14361 Comm: syz.4.2078 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.231134][T14361] Tainted: [L]=SOFTLOCKUP [ 597.231141][T14361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 597.231153][T14361] Call Trace: [ 597.231160][T14361] [ 597.231168][T14361] dump_stack_lvl+0x100/0x190 [ 597.231199][T14361] should_fail_ex.cold+0x5/0xa [ 597.231222][T14361] should_failslab+0xc2/0x120 [ 597.231241][T14361] __kmalloc_cache_noprof+0x7a/0x6f0 [ 597.231265][T14361] ? snd_timer_instance_new+0x47/0x2e0 [ 597.231300][T14361] snd_timer_instance_new+0x47/0x2e0 [ 597.231329][T14361] snd_seq_timer_open+0x1d4/0x600 [ 597.231353][T14361] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 597.231382][T14361] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 597.231403][T14361] ? lockdep_hardirqs_on+0x78/0x100 [ 597.231424][T14361] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 597.231447][T14361] queue_use+0xdc/0x1f0 [ 597.231465][T14361] snd_seq_queue_alloc+0x2e5/0x590 [ 597.231487][T14361] snd_seq_ioctl_create_queue+0xa9/0x370 [ 597.231513][T14361] call_seq_client_ctl+0xa3/0x130 [ 597.231540][T14361] snd_seq_kernel_client_ctl+0x77/0xd0 [ 597.231566][T14361] alloc_seq_queue+0xdb/0x180 [ 597.231593][T14361] ? __pfx_alloc_seq_queue+0x10/0x10 [ 597.231631][T14361] ? mark_held_locks+0x40/0x70 [ 597.231654][T14361] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.231672][T14361] ? lockdep_hardirqs_on+0x78/0x100 [ 597.231696][T14361] snd_seq_oss_open+0x2b2/0xa10 [ 597.231788][T14361] odev_open+0x79/0xc0 [ 597.231811][T14361] ? __pfx_odev_open+0x10/0x10 [ 597.231836][T14361] soundcore_open+0x2e3/0x5a0 [ 597.231864][T14361] ? __pfx_soundcore_open+0x10/0x10 [ 597.231890][T14361] chrdev_open+0x234/0x6a0 [ 597.231909][T14361] ? __pfx_apparmor_file_open+0x10/0x10 [ 597.231935][T14361] ? __pfx_chrdev_open+0x10/0x10 [ 597.231955][T14361] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 597.231979][T14361] do_dentry_open+0x6d8/0x1660 [ 597.231997][T14361] ? __pfx_chrdev_open+0x10/0x10 [ 597.232021][T14361] vfs_open+0x82/0x3f0 [ 597.232045][T14361] path_openat+0x208c/0x31a0 [ 597.232073][T14361] ? __pfx_path_openat+0x10/0x10 [ 597.232100][T14361] do_file_open+0x20e/0x430 [ 597.232121][T14361] ? __pfx_do_file_open+0x10/0x10 [ 597.232157][T14361] ? alloc_fd+0x476/0x790 [ 597.232185][T14361] ? do_getname+0x191/0x390 [ 597.232222][T14361] do_sys_openat2+0x10d/0x1e0 [ 597.232255][T14361] ? __pfx_do_sys_openat2+0x10/0x10 [ 597.232280][T14361] ? __fget_files+0x21f/0x3d0 [ 597.232301][T14361] __x64_sys_openat+0x12d/0x210 [ 597.232325][T14361] ? __pfx___x64_sys_openat+0x10/0x10 [ 597.232358][T14361] do_syscall_64+0x106/0xf80 [ 597.232379][T14361] ? clear_bhb_loop+0x40/0x90 [ 597.232402][T14361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.232420][T14361] RIP: 0033:0x7fecdd59c799 [ 597.232437][T14361] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.232455][T14361] RSP: 002b:00007fecde395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 597.232473][T14361] RAX: ffffffffffffffda RBX: 00007fecdd815fa0 RCX: 00007fecdd59c799 [ 597.232485][T14361] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 597.232497][T14361] RBP: 00007fecdd632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 597.232508][T14361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.232518][T14361] R13: 00007fecdd816038 R14: 00007fecdd815fa0 R15: 00007ffe0d0a9f78 [ 597.232542][T14361] [ 598.169635][T14379] FAULT_INJECTION: forcing a failure. [ 598.169635][T14379] name failslab, interval 1, probability 0, space 0, times 0 [ 598.239856][T14379] CPU: 1 UID: 0 PID: 14379 Comm: syz.4.2083 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.239897][T14379] Tainted: [L]=SOFTLOCKUP [ 598.239903][T14379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 598.239915][T14379] Call Trace: [ 598.239922][T14379] [ 598.239930][T14379] dump_stack_lvl+0x100/0x190 [ 598.239971][T14379] should_fail_ex.cold+0x5/0xa [ 598.239993][T14379] should_failslab+0xc2/0x120 [ 598.240013][T14379] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 598.240044][T14379] ? snd_timer_instance_new+0x65/0x2e0 [ 598.240077][T14379] kstrdup+0x51/0xe0 [ 598.240106][T14379] snd_timer_instance_new+0x65/0x2e0 [ 598.240135][T14379] snd_seq_timer_open+0x1d4/0x600 [ 598.240160][T14379] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 598.240189][T14379] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 598.240210][T14379] ? lockdep_hardirqs_on+0x78/0x100 [ 598.240232][T14379] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 598.240255][T14379] queue_use+0xdc/0x1f0 [ 598.240273][T14379] snd_seq_queue_alloc+0x2e5/0x590 [ 598.240297][T14379] snd_seq_ioctl_create_queue+0xa9/0x370 [ 598.240323][T14379] call_seq_client_ctl+0xa3/0x130 [ 598.240349][T14379] snd_seq_kernel_client_ctl+0x77/0xd0 [ 598.240376][T14379] alloc_seq_queue+0xdb/0x180 [ 598.240403][T14379] ? __pfx_alloc_seq_queue+0x10/0x10 [ 598.240442][T14379] ? mark_held_locks+0x40/0x70 [ 598.240465][T14379] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.240483][T14379] ? lockdep_hardirqs_on+0x78/0x100 [ 598.240507][T14379] snd_seq_oss_open+0x2b2/0xa10 [ 598.240557][T14379] odev_open+0x79/0xc0 [ 598.240580][T14379] ? __pfx_odev_open+0x10/0x10 [ 598.240607][T14379] soundcore_open+0x2e3/0x5a0 [ 598.240635][T14379] ? __pfx_soundcore_open+0x10/0x10 [ 598.240661][T14379] chrdev_open+0x234/0x6a0 [ 598.240679][T14379] ? __pfx_apparmor_file_open+0x10/0x10 [ 598.240708][T14379] ? __pfx_chrdev_open+0x10/0x10 [ 598.240728][T14379] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 598.240754][T14379] do_dentry_open+0x6d8/0x1660 [ 598.240772][T14379] ? __pfx_chrdev_open+0x10/0x10 [ 598.240796][T14379] vfs_open+0x82/0x3f0 [ 598.240821][T14379] path_openat+0x208c/0x31a0 [ 598.240848][T14379] ? __pfx_path_openat+0x10/0x10 [ 598.240875][T14379] do_file_open+0x20e/0x430 [ 598.240895][T14379] ? __pfx_do_file_open+0x10/0x10 [ 598.240930][T14379] ? alloc_fd+0x476/0x790 [ 598.240966][T14379] ? do_getname+0x191/0x390 [ 598.240991][T14379] do_sys_openat2+0x10d/0x1e0 [ 598.241015][T14379] ? __pfx_do_sys_openat2+0x10/0x10 [ 598.241040][T14379] ? __fget_files+0x21f/0x3d0 [ 598.241062][T14379] __x64_sys_openat+0x12d/0x210 [ 598.241087][T14379] ? __pfx___x64_sys_openat+0x10/0x10 [ 598.241121][T14379] do_syscall_64+0x106/0xf80 [ 598.241143][T14379] ? clear_bhb_loop+0x40/0x90 [ 598.241168][T14379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.241188][T14379] RIP: 0033:0x7fecdd59c799 [ 598.241204][T14379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.241222][T14379] RSP: 002b:00007fecde395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 598.241241][T14379] RAX: ffffffffffffffda RBX: 00007fecdd815fa0 RCX: 00007fecdd59c799 [ 598.241253][T14379] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 598.241264][T14379] RBP: 00007fecdd632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 598.241275][T14379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 598.241286][T14379] R13: 00007fecdd816038 R14: 00007fecdd815fa0 R15: 00007ffe0d0a9f78 [ 598.241310][T14379] [ 600.739193][T14402] bond0: invalid ARP target specified [ 600.785189][T14402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2087'. [ 604.746965][T14455] FAULT_INJECTION: forcing a failure. [ 604.746965][T14455] name failslab, interval 1, probability 0, space 0, times 0 [ 604.816300][T14455] CPU: 0 UID: 0 PID: 14455 Comm: syz.2.2101 Tainted: G L syzkaller #0 PREEMPT(full) [ 604.816350][T14455] Tainted: [L]=SOFTLOCKUP [ 604.816363][T14455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 604.816382][T14455] Call Trace: [ 604.816395][T14455] [ 604.816407][T14455] dump_stack_lvl+0x100/0x190 [ 604.816457][T14455] should_fail_ex.cold+0x5/0xa [ 604.816494][T14455] should_failslab+0xc2/0x120 [ 604.816519][T14455] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 604.816546][T14455] ? mempool_init_node+0x2f7/0x6e0 [ 604.816566][T14455] ? mempool_init_noprof+0x3a/0x50 [ 604.816589][T14455] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 604.816611][T14455] mempool_init_node+0x2f7/0x6e0 [ 604.816635][T14455] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 604.816653][T14455] ? __pfx_mempool_free_slab+0x10/0x10 [ 604.816672][T14455] mempool_init_noprof+0x3a/0x50 [ 604.816695][T14455] bioset_init+0x37e/0x8a0 [ 604.816723][T14455] ? __pfx_bioset_init+0x10/0x10 [ 604.816760][T14455] __alloc_disk_node+0x83/0x6b0 [ 604.816791][T14455] __blk_mq_alloc_disk+0x89/0x120 [ 604.816817][T14455] loop_add+0x498/0xb60 [ 604.816846][T14455] ? __pfx_loop_add+0x10/0x10 [ 604.816880][T14455] ? find_held_lock+0x2b/0x80 [ 604.816898][T14455] ? __fget_files+0x215/0x3d0 [ 604.816918][T14455] loop_control_ioctl+0xae/0x620 [ 604.816940][T14455] ? __pfx_loop_control_ioctl+0x10/0x10 [ 604.816966][T14455] ? __pfx_loop_control_ioctl+0x10/0x10 [ 604.816988][T14455] __x64_sys_ioctl+0x18e/0x210 [ 604.817016][T14455] do_syscall_64+0x106/0xf80 [ 604.817039][T14455] ? clear_bhb_loop+0x40/0x90 [ 604.817061][T14455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.817081][T14455] RIP: 0033:0x7fa14239c799 [ 604.817097][T14455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.817115][T14455] RSP: 002b:00007fa143195028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 604.817133][T14455] RAX: ffffffffffffffda RBX: 00007fa142616090 RCX: 00007fa14239c799 [ 604.817145][T14455] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000b [ 604.817157][T14455] RBP: 00007fa142432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 604.817169][T14455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 604.817181][T14455] R13: 00007fa142616128 R14: 00007fa142616090 R15: 00007ffd15029918 [ 604.817205][T14455] [ 606.980370][T14481] FAULT_INJECTION: forcing a failure. [ 606.980370][T14481] name failslab, interval 1, probability 0, space 0, times 0 [ 607.117473][T14481] CPU: 0 UID: 0 PID: 14481 Comm: syz.4.2110 Tainted: G L syzkaller #0 PREEMPT(full) [ 607.117534][T14481] Tainted: [L]=SOFTLOCKUP [ 607.117546][T14481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 607.117566][T14481] Call Trace: [ 607.117576][T14481] [ 607.117589][T14481] dump_stack_lvl+0x100/0x190 [ 607.117641][T14481] should_fail_ex.cold+0x5/0xa [ 607.117679][T14481] should_failslab+0xc2/0x120 [ 607.117713][T14481] __kmalloc_cache_noprof+0x7a/0x6f0 [ 607.117754][T14481] ? snd_seq_timer_new+0x44/0x1b0 [ 607.117799][T14481] snd_seq_timer_new+0x44/0x1b0 [ 607.117839][T14481] snd_seq_queue_alloc+0x177/0x590 [ 607.117879][T14481] snd_seq_ioctl_create_queue+0xa9/0x370 [ 607.117924][T14481] call_seq_client_ctl+0xa3/0x130 [ 607.117970][T14481] snd_seq_kernel_client_ctl+0x77/0xd0 [ 607.118016][T14481] alloc_seq_queue+0xdb/0x180 [ 607.118060][T14481] ? __pfx_alloc_seq_queue+0x10/0x10 [ 607.118128][T14481] ? mark_held_locks+0x40/0x70 [ 607.118167][T14481] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.118199][T14481] ? lockdep_hardirqs_on+0x78/0x100 [ 607.118241][T14481] snd_seq_oss_open+0x2b2/0xa10 [ 607.118294][T14481] odev_open+0x79/0xc0 [ 607.118333][T14481] ? __pfx_odev_open+0x10/0x10 [ 607.118374][T14481] soundcore_open+0x2e3/0x5a0 [ 607.118421][T14481] ? __pfx_soundcore_open+0x10/0x10 [ 607.118465][T14481] chrdev_open+0x234/0x6a0 [ 607.118495][T14481] ? __pfx_apparmor_file_open+0x10/0x10 [ 607.118548][T14481] ? __pfx_chrdev_open+0x10/0x10 [ 607.118581][T14481] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 607.118623][T14481] do_dentry_open+0x6d8/0x1660 [ 607.118653][T14481] ? __pfx_chrdev_open+0x10/0x10 [ 607.118694][T14481] vfs_open+0x82/0x3f0 [ 607.118738][T14481] path_openat+0x208c/0x31a0 [ 607.118784][T14481] ? __pfx_path_openat+0x10/0x10 [ 607.118832][T14481] do_file_open+0x20e/0x430 [ 607.118867][T14481] ? __pfx_do_file_open+0x10/0x10 [ 607.118931][T14481] ? alloc_fd+0x476/0x790 [ 607.118967][T14481] ? do_getname+0x191/0x390 [ 607.119009][T14481] do_sys_openat2+0x10d/0x1e0 [ 607.119050][T14481] ? __pfx_do_sys_openat2+0x10/0x10 [ 607.119094][T14481] ? __fget_files+0x21f/0x3d0 [ 607.119130][T14481] __x64_sys_openat+0x12d/0x210 [ 607.119172][T14481] ? __pfx___x64_sys_openat+0x10/0x10 [ 607.119230][T14481] do_syscall_64+0x106/0xf80 [ 607.119266][T14481] ? clear_bhb_loop+0x40/0x90 [ 607.119304][T14481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.119334][T14481] RIP: 0033:0x7fecdd59c799 [ 607.119360][T14481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.119388][T14481] RSP: 002b:00007fecde395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 607.119418][T14481] RAX: ffffffffffffffda RBX: 00007fecdd815fa0 RCX: 00007fecdd59c799 [ 607.119438][T14481] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 607.119459][T14481] RBP: 00007fecdd632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 607.119478][T14481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.119496][T14481] R13: 00007fecdd816038 R14: 00007fecdd815fa0 R15: 00007ffe0d0a9f78 [ 607.119545][T14481] [ 609.129042][T14524] FAULT_INJECTION: forcing a failure. [ 609.129042][T14524] name failslab, interval 1, probability 0, space 0, times 0 [ 609.383554][T14524] CPU: 0 UID: 0 PID: 14524 Comm: syz.4.2121 Tainted: G L syzkaller #0 PREEMPT(full) [ 609.383594][T14524] Tainted: [L]=SOFTLOCKUP [ 609.383602][T14524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 609.383614][T14524] Call Trace: [ 609.383622][T14524] [ 609.383630][T14524] dump_stack_lvl+0x100/0x190 [ 609.383661][T14524] should_fail_ex.cold+0x5/0xa [ 609.383683][T14524] ? tomoyo_init_log+0x1224/0x20c0 [ 609.383702][T14524] should_failslab+0xc2/0x120 [ 609.383722][T14524] __kmalloc_noprof+0xe0/0x850 [ 609.383754][T14524] tomoyo_init_log+0x1224/0x20c0 [ 609.383777][T14524] ? vsnprintf+0x4ee/0x1240 [ 609.383804][T14524] ? __pfx_tomoyo_init_log+0x10/0x10 [ 609.383823][T14524] ? tomoyo_profile+0x47/0x60 [ 609.383845][T14524] ? tomoyo_domain_quota_is_ok+0x367/0x580 [ 609.383875][T14524] tomoyo_supervisor+0x506/0x1340 [ 609.383904][T14524] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 609.383935][T14524] ? tomoyo_realpath_from_path+0x19c/0x690 [ 609.383965][T14524] ? tomoyo_realpath_from_path+0x19c/0x690 [ 609.383985][T14524] ? kfree+0x1f6/0x6b0 [ 609.384010][T14524] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 609.384053][T14524] tomoyo_path_number_perm+0x445/0x580 [ 609.384084][T14524] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 609.384115][T14524] ? rcu_read_unlock+0x17/0x60 [ 609.384341][T14524] ? do_raw_spin_lock+0x128/0x260 [ 609.384409][T14524] ? find_held_lock+0x2b/0x80 [ 609.384442][T14524] ? __pfx_d_add+0x10/0x10 [ 609.384477][T14524] ? d_alloc+0x176/0x1e0 [ 609.384509][T14524] ? current_check_access_path+0x281/0x460 [ 609.384555][T14524] ? simple_lookup+0x105/0x1d0 [ 609.384659][T14524] tomoyo_path_mknod+0x164/0x190 [ 609.384705][T14524] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 609.384751][T14524] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 609.384814][T14524] security_path_mknod+0x161/0x300 [ 609.384853][T14524] filename_mknodat+0x241/0x7f0 [ 609.384894][T14524] ? __pfx_filename_mknodat+0x10/0x10 [ 609.384932][T14524] ? strncpy_from_user+0x19d/0x2d0 [ 609.384990][T14524] ? do_getname+0x191/0x390 [ 609.385035][T14524] __x64_sys_mknod+0x8f/0xc0 [ 609.385073][T14524] do_syscall_64+0x106/0xf80 [ 609.385111][T14524] ? clear_bhb_loop+0x40/0x90 [ 609.385153][T14524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.385189][T14524] RIP: 0033:0x7fecdd59c799 [ 609.385221][T14524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.385254][T14524] RSP: 002b:00007fecde374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 609.385287][T14524] RAX: ffffffffffffffda RBX: 00007fecdd816090 RCX: 00007fecdd59c799 [ 609.385310][T14524] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000000 [ 609.385329][T14524] RBP: 00007fecdd632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 609.385348][T14524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 609.385367][T14524] R13: 00007fecdd816128 R14: 00007fecdd816090 R15: 00007ffe0d0a9f78 [ 609.385412][T14524] [ 610.326277][T14531] FAULT_INJECTION: forcing a failure. [ 610.326277][T14531] name failslab, interval 1, probability 0, space 0, times 0 [ 610.360368][T14531] CPU: 0 UID: 0 PID: 14531 Comm: syz.4.2131 Tainted: G L syzkaller #0 PREEMPT(full) [ 610.360426][T14531] Tainted: [L]=SOFTLOCKUP [ 610.360438][T14531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 610.360457][T14531] Call Trace: [ 610.360470][T14531] [ 610.360483][T14531] dump_stack_lvl+0x100/0x190 [ 610.360537][T14531] should_fail_ex.cold+0x5/0xa [ 610.360578][T14531] should_failslab+0xc2/0x120 [ 610.360612][T14531] __kmalloc_cache_noprof+0x7a/0x6f0 [ 610.360654][T14531] ? snd_timer_instance_new+0x47/0x2e0 [ 610.360713][T14531] snd_timer_instance_new+0x47/0x2e0 [ 610.360774][T14531] snd_seq_timer_open+0x1d4/0x600 [ 610.360817][T14531] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 610.360870][T14531] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 610.360909][T14531] ? lockdep_hardirqs_on+0x78/0x100 [ 610.360948][T14531] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 610.360991][T14531] queue_use+0xdc/0x1f0 [ 610.361024][T14531] snd_seq_queue_alloc+0x2e5/0x590 [ 610.361066][T14531] snd_seq_ioctl_create_queue+0xa9/0x370 [ 610.361113][T14531] call_seq_client_ctl+0xa3/0x130 [ 610.361158][T14531] snd_seq_kernel_client_ctl+0x77/0xd0 [ 610.361199][T14531] alloc_seq_queue+0xdb/0x180 [ 610.361256][T14531] ? __pfx_alloc_seq_queue+0x10/0x10 [ 610.361329][T14531] ? mark_held_locks+0x40/0x70 [ 610.361367][T14531] ? _raw_spin_unlock_irq+0x23/0x50 [ 610.361399][T14531] ? lockdep_hardirqs_on+0x78/0x100 [ 610.361440][T14531] snd_seq_oss_open+0x2b2/0xa10 [ 610.361493][T14531] odev_open+0x79/0xc0 [ 610.361532][T14531] ? __pfx_odev_open+0x10/0x10 [ 610.361572][T14531] soundcore_open+0x2e3/0x5a0 [ 610.361619][T14531] ? __pfx_soundcore_open+0x10/0x10 [ 610.361662][T14531] chrdev_open+0x234/0x6a0 [ 610.361690][T14531] ? __pfx_apparmor_file_open+0x10/0x10 [ 610.361736][T14531] ? __pfx_chrdev_open+0x10/0x10 [ 610.361778][T14531] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 610.361820][T14531] do_dentry_open+0x6d8/0x1660 [ 610.361851][T14531] ? __pfx_chrdev_open+0x10/0x10 [ 610.361892][T14531] vfs_open+0x82/0x3f0 [ 610.361936][T14531] path_openat+0x208c/0x31a0 [ 610.361982][T14531] ? __pfx_path_openat+0x10/0x10 [ 610.362030][T14531] do_file_open+0x20e/0x430 [ 610.362065][T14531] ? __pfx_do_file_open+0x10/0x10 [ 610.362129][T14531] ? alloc_fd+0x476/0x790 [ 610.362165][T14531] ? do_getname+0x191/0x390 [ 610.362208][T14531] do_sys_openat2+0x10d/0x1e0 [ 610.362247][T14531] ? __pfx_do_sys_openat2+0x10/0x10 [ 610.362293][T14531] ? __fget_files+0x21f/0x3d0 [ 610.362330][T14531] __x64_sys_openat+0x12d/0x210 [ 610.362372][T14531] ? __pfx___x64_sys_openat+0x10/0x10 [ 610.362436][T14531] do_syscall_64+0x106/0xf80 [ 610.362472][T14531] ? clear_bhb_loop+0x40/0x90 [ 610.362510][T14531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.362542][T14531] RIP: 0033:0x7fecdd59c799 [ 610.362570][T14531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 610.362603][T14531] RSP: 002b:00007fecde395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 610.362634][T14531] RAX: ffffffffffffffda RBX: 00007fecdd815fa0 RCX: 00007fecdd59c799 [ 610.362656][T14531] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 610.362676][T14531] RBP: 00007fecdd632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 610.362695][T14531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 610.362714][T14531] R13: 00007fecdd816038 R14: 00007fecdd815fa0 R15: 00007ffe0d0a9f78 [ 610.362764][T14531] [ 610.938186][ T9714] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1437 with max blocks 5 with error 117 [ 610.938303][ T9714] EXT4-fs (sda1): This should not happen!! Data will be lost [ 610.938303][ T9714] [ 612.517663][T14571] FAULT_INJECTION: forcing a failure. [ 612.517663][T14571] name failslab, interval 1, probability 0, space 0, times 0 [ 612.531919][T14571] CPU: 1 UID: 0 PID: 14571 Comm: syz.1.2134 Tainted: G L syzkaller #0 PREEMPT(full) [ 612.531970][T14571] Tainted: [L]=SOFTLOCKUP [ 612.531982][T14571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 612.531999][T14571] Call Trace: [ 612.532009][T14571] [ 612.532022][T14571] dump_stack_lvl+0x100/0x190 [ 612.532075][T14571] should_fail_ex.cold+0x5/0xa [ 612.532112][T14571] should_failslab+0xc2/0x120 [ 612.532143][T14571] __kmalloc_cache_noprof+0x7a/0x6f0 [ 612.532182][T14571] ? snd_timer_instance_new+0x47/0x2e0 [ 612.532237][T14571] snd_timer_instance_new+0x47/0x2e0 [ 612.532285][T14571] snd_seq_timer_open+0x1d4/0x600 [ 612.532326][T14571] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 612.532374][T14571] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 612.532408][T14571] ? lockdep_hardirqs_on+0x78/0x100 [ 612.532444][T14571] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 612.532483][T14571] queue_use+0xdc/0x1f0 [ 612.532525][T14571] snd_seq_queue_alloc+0x2e5/0x590 [ 612.532565][T14571] snd_seq_ioctl_create_queue+0xa9/0x370 [ 612.532608][T14571] call_seq_client_ctl+0xa3/0x130 [ 612.532651][T14571] snd_seq_kernel_client_ctl+0x77/0xd0 [ 612.532694][T14571] alloc_seq_queue+0xdb/0x180 [ 612.532738][T14571] ? __pfx_alloc_seq_queue+0x10/0x10 [ 612.532801][T14571] ? mark_held_locks+0x40/0x70 [ 612.532840][T14571] ? _raw_spin_unlock_irq+0x23/0x50 [ 612.532872][T14571] ? lockdep_hardirqs_on+0x78/0x100 [ 612.532913][T14571] snd_seq_oss_open+0x2b2/0xa10 [ 612.532967][T14571] odev_open+0x79/0xc0 [ 612.533004][T14571] ? __pfx_odev_open+0x10/0x10 [ 612.533042][T14571] soundcore_open+0x2e3/0x5a0 [ 612.533084][T14571] ? __pfx_soundcore_open+0x10/0x10 [ 612.533125][T14571] chrdev_open+0x234/0x6a0 [ 612.533153][T14571] ? __pfx_apparmor_file_open+0x10/0x10 [ 612.533196][T14571] ? __pfx_chrdev_open+0x10/0x10 [ 612.533228][T14571] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 612.533268][T14571] do_dentry_open+0x6d8/0x1660 [ 612.533297][T14571] ? __pfx_chrdev_open+0x10/0x10 [ 612.533336][T14571] vfs_open+0x82/0x3f0 [ 612.533378][T14571] path_openat+0x208c/0x31a0 [ 612.533415][T14571] ? rcu_is_watching+0x12/0xc0 [ 612.533462][T14571] ? trace_sched_exit_tp+0x13a/0x180 [ 612.533499][T14571] ? __pfx_path_openat+0x10/0x10 [ 612.533554][T14571] do_file_open+0x20e/0x430 [ 612.533588][T14571] ? __pfx_do_file_open+0x10/0x10 [ 612.533617][T14571] ? __pfx___schedule+0x10/0x10 [ 612.533677][T14571] ? alloc_fd+0x476/0x790 [ 612.533710][T14571] ? do_getname+0x191/0x390 [ 612.533752][T14571] do_sys_openat2+0x10d/0x1e0 [ 612.533798][T14571] ? __pfx_do_sys_openat2+0x10/0x10 [ 612.533838][T14571] ? __fget_files+0x21f/0x3d0 [ 612.533872][T14571] __x64_sys_openat+0x12d/0x210 [ 612.533912][T14571] ? __pfx___x64_sys_openat+0x10/0x10 [ 612.533962][T14571] do_syscall_64+0x106/0xf80 [ 612.533996][T14571] ? clear_bhb_loop+0x40/0x90 [ 612.534035][T14571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.534069][T14571] RIP: 0033:0x7fad2c59c799 [ 612.534096][T14571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.534127][T14571] RSP: 002b:00007fad2d543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 612.534159][T14571] RAX: ffffffffffffffda RBX: 00007fad2c815fa0 RCX: 00007fad2c59c799 [ 612.534181][T14571] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 612.534202][T14571] RBP: 00007fad2c632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 612.534221][T14571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 612.534241][T14571] R13: 00007fad2c816038 R14: 00007fad2c815fa0 R15: 00007fff1708f998 [ 612.534285][T14571] [ 617.065122][T14639] FAULT_INJECTION: forcing a failure. [ 617.065122][T14639] name failslab, interval 1, probability 0, space 0, times 0 [ 617.154360][T14639] CPU: 0 UID: 0 PID: 14639 Comm: syz.1.2151 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.154482][T14639] Tainted: [L]=SOFTLOCKUP [ 617.154490][T14639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 617.154502][T14639] Call Trace: [ 617.154509][T14639] [ 617.154518][T14639] dump_stack_lvl+0x100/0x190 [ 617.154549][T14639] should_fail_ex.cold+0x5/0xa [ 617.154572][T14639] should_failslab+0xc2/0x120 [ 617.154592][T14639] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 617.154619][T14639] ? mempool_init_node+0x2f7/0x6e0 [ 617.154638][T14639] ? lockdep_set_lock_cmp_fn+0xa1/0xe0 [ 617.154664][T14639] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 617.154683][T14639] mempool_init_node+0x2f7/0x6e0 [ 617.154707][T14639] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 617.154724][T14639] ? __pfx_mempool_free_slab+0x10/0x10 [ 617.154743][T14639] mempool_init_noprof+0x3a/0x50 [ 617.154765][T14639] bioset_init+0x37e/0x8a0 [ 617.154793][T14639] ? __pfx_bioset_init+0x10/0x10 [ 617.154830][T14639] __alloc_disk_node+0x83/0x6b0 [ 617.154859][T14639] __blk_mq_alloc_disk+0x89/0x120 [ 617.154885][T14639] loop_add+0x498/0xb60 [ 617.154906][T14639] ? __pfx_loop_add+0x10/0x10 [ 617.154939][T14639] ? find_held_lock+0x2b/0x80 [ 617.154955][T14639] ? __fget_files+0x215/0x3d0 [ 617.154975][T14639] loop_control_ioctl+0xae/0x620 [ 617.154996][T14639] ? __pfx_loop_control_ioctl+0x10/0x10 [ 617.155021][T14639] ? __pfx_loop_control_ioctl+0x10/0x10 [ 617.155043][T14639] __x64_sys_ioctl+0x18e/0x210 [ 617.155070][T14639] do_syscall_64+0x106/0xf80 [ 617.155091][T14639] ? clear_bhb_loop+0x40/0x90 [ 617.155114][T14639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.155133][T14639] RIP: 0033:0x7fad2c59c799 [ 617.155149][T14639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.155166][T14639] RSP: 002b:00007fad2d543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 617.155185][T14639] RAX: ffffffffffffffda RBX: 00007fad2c815fa0 RCX: 00007fad2c59c799 [ 617.155197][T14639] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000a [ 617.155208][T14639] RBP: 00007fad2c632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 617.155219][T14639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 617.155231][T14639] R13: 00007fad2c816038 R14: 00007fad2c815fa0 R15: 00007fff1708f998 [ 617.155254][T14639] [ 618.982049][T14658] bond0: invalid ARP target specified [ 619.309795][T14661] FAULT_INJECTION: forcing a failure. [ 619.309795][T14661] name failslab, interval 1, probability 0, space 0, times 0 [ 619.373610][T14661] CPU: 1 UID: 0 PID: 14661 Comm: syz.1.2158 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.373643][T14661] Tainted: [L]=SOFTLOCKUP [ 619.373651][T14661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 619.373676][T14661] Call Trace: [ 619.373684][T14661] [ 619.373691][T14661] dump_stack_lvl+0x100/0x190 [ 619.373725][T14661] should_fail_ex.cold+0x5/0xa [ 619.373748][T14661] ? tomoyo_supervisor+0x65d/0x1340 [ 619.373771][T14661] should_failslab+0xc2/0x120 [ 619.373791][T14661] __kmalloc_noprof+0xe0/0x850 [ 619.373823][T14661] tomoyo_supervisor+0x65d/0x1340 [ 619.373852][T14661] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 619.373879][T14661] ? tomoyo_realpath_from_path+0x19c/0x690 [ 619.373908][T14661] ? tomoyo_realpath_from_path+0x19c/0x690 [ 619.373928][T14661] ? kfree+0x1f6/0x6b0 [ 619.373952][T14661] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 619.373988][T14661] tomoyo_path_number_perm+0x445/0x580 [ 619.374018][T14661] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 619.374048][T14661] ? rcu_read_unlock+0x17/0x60 [ 619.374073][T14661] ? do_raw_spin_lock+0x128/0x260 [ 619.374111][T14661] ? find_held_lock+0x2b/0x80 [ 619.374127][T14661] ? __pfx_d_add+0x10/0x10 [ 619.374148][T14661] ? d_alloc+0x176/0x1e0 [ 619.374166][T14661] ? current_check_access_path+0x281/0x460 [ 619.374190][T14661] ? simple_lookup+0x105/0x1d0 [ 619.374221][T14661] tomoyo_path_mknod+0x164/0x190 [ 619.374244][T14661] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 619.374269][T14661] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 619.374303][T14661] security_path_mknod+0x161/0x300 [ 619.374325][T14661] filename_mknodat+0x241/0x7f0 [ 619.374348][T14661] ? __pfx_filename_mknodat+0x10/0x10 [ 619.374368][T14661] ? strncpy_from_user+0x19d/0x2d0 [ 619.374399][T14661] ? do_getname+0x191/0x390 [ 619.374423][T14661] __x64_sys_mknod+0x8f/0xc0 [ 619.374443][T14661] do_syscall_64+0x106/0xf80 [ 619.374464][T14661] ? clear_bhb_loop+0x40/0x90 [ 619.374487][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.374506][T14661] RIP: 0033:0x7fad2c59c799 [ 619.374523][T14661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.374542][T14661] RSP: 002b:00007fad2d543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 619.374562][T14661] RAX: ffffffffffffffda RBX: 00007fad2c815fa0 RCX: 00007fad2c59c799 [ 619.374575][T14661] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000000 [ 619.374585][T14661] RBP: 00007fad2c632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 619.374597][T14661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 619.374608][T14661] R13: 00007fad2c816038 R14: 00007fad2c815fa0 R15: 00007fff1708f998 [ 619.374632][T14661] [ 620.176055][T14673] FAULT_INJECTION: forcing a failure. [ 620.176055][T14673] name failslab, interval 1, probability 0, space 0, times 0 [ 620.237661][T14673] CPU: 1 UID: 0 PID: 14673 Comm: syz.2.2160 Tainted: G L syzkaller #0 PREEMPT(full) [ 620.237712][T14673] Tainted: [L]=SOFTLOCKUP [ 620.237722][T14673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 620.237741][T14673] Call Trace: [ 620.237753][T14673] [ 620.237765][T14673] dump_stack_lvl+0x100/0x190 [ 620.237814][T14673] should_fail_ex.cold+0x5/0xa [ 620.237850][T14673] should_failslab+0xc2/0x120 [ 620.237884][T14673] __kmalloc_cache_noprof+0x7a/0x6f0 [ 620.237924][T14673] ? snd_timer_instance_new+0x47/0x2e0 [ 620.237983][T14673] snd_timer_instance_new+0x47/0x2e0 [ 620.238034][T14673] snd_seq_timer_open+0x1d4/0x600 [ 620.238076][T14673] ? __pfx_snd_seq_timer_open+0x10/0x10 [ 620.238126][T14673] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 620.238160][T14673] ? lockdep_hardirqs_on+0x78/0x100 [ 620.238195][T14673] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 620.238218][T14673] queue_use+0xdc/0x1f0 [ 620.238236][T14673] snd_seq_queue_alloc+0x2e5/0x590 [ 620.238259][T14673] snd_seq_ioctl_create_queue+0xa9/0x370 [ 620.238285][T14673] call_seq_client_ctl+0xa3/0x130 [ 620.238312][T14673] snd_seq_kernel_client_ctl+0x77/0xd0 [ 620.238339][T14673] alloc_seq_queue+0xdb/0x180 [ 620.238370][T14673] ? __pfx_alloc_seq_queue+0x10/0x10 [ 620.238424][T14673] ? mark_held_locks+0x40/0x70 [ 620.238455][T14673] ? _raw_spin_unlock_irq+0x23/0x50 [ 620.238479][T14673] ? lockdep_hardirqs_on+0x78/0x100 [ 620.238504][T14673] snd_seq_oss_open+0x2b2/0xa10 [ 620.238535][T14673] odev_open+0x79/0xc0 [ 620.238558][T14673] ? __pfx_odev_open+0x10/0x10 [ 620.238583][T14673] soundcore_open+0x2e3/0x5a0 [ 620.238629][T14673] ? __pfx_soundcore_open+0x10/0x10 [ 620.238655][T14673] chrdev_open+0x234/0x6a0 [ 620.238674][T14673] ? __pfx_apparmor_file_open+0x10/0x10 [ 620.238701][T14673] ? __pfx_chrdev_open+0x10/0x10 [ 620.238721][T14673] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 620.238746][T14673] do_dentry_open+0x6d8/0x1660 [ 620.238764][T14673] ? __pfx_chrdev_open+0x10/0x10 [ 620.238788][T14673] vfs_open+0x82/0x3f0 [ 620.238813][T14673] path_openat+0x208c/0x31a0 [ 620.238840][T14673] ? __pfx_path_openat+0x10/0x10 [ 620.238867][T14673] do_file_open+0x20e/0x430 [ 620.238887][T14673] ? __pfx_do_file_open+0x10/0x10 [ 620.238923][T14673] ? alloc_fd+0x476/0x790 [ 620.238943][T14673] ? do_getname+0x191/0x390 [ 620.238967][T14673] do_sys_openat2+0x10d/0x1e0 [ 620.238990][T14673] ? __pfx_do_sys_openat2+0x10/0x10 [ 620.239016][T14673] ? __fget_files+0x21f/0x3d0 [ 620.239037][T14673] __x64_sys_openat+0x12d/0x210 [ 620.239061][T14673] ? __pfx___x64_sys_openat+0x10/0x10 [ 620.239094][T14673] do_syscall_64+0x106/0xf80 [ 620.239116][T14673] ? clear_bhb_loop+0x40/0x90 [ 620.239139][T14673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.239158][T14673] RIP: 0033:0x7fa14239c799 [ 620.239176][T14673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.239194][T14673] RSP: 002b:00007fa1431b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 620.239212][T14673] RAX: ffffffffffffffda RBX: 00007fa142615fa0 RCX: 00007fa14239c799 [ 620.239224][T14673] RDX: 0000000000000001 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 620.239236][T14673] RBP: 00007fa142432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 620.239247][T14673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 620.239258][T14673] R13: 00007fa142616038 R14: 00007fa142615fa0 R15: 00007ffd15029918 [ 620.239281][T14673] [ 622.003965][T14696] bond0: invalid ARP target specified [ 622.053682][T14696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2165'. [ 622.569825][T14707] FAULT_INJECTION: forcing a failure. [ 622.569825][T14707] name failslab, interval 1, probability 0, space 0, times 0 [ 622.569876][T14707] CPU: 1 UID: 0 PID: 14707 Comm: syz.3.2167 Tainted: G L syzkaller #0 PREEMPT(full) [ 622.569919][T14707] Tainted: [L]=SOFTLOCKUP [ 622.569930][T14707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 622.569947][T14707] Call Trace: [ 622.569958][T14707] [ 622.569971][T14707] dump_stack_lvl+0x100/0x190 [ 622.570022][T14707] should_fail_ex.cold+0x5/0xa [ 622.570060][T14707] ? tomoyo_supervisor+0x65d/0x1340 [ 622.570100][T14707] should_failslab+0xc2/0x120 [ 622.570132][T14707] __kmalloc_noprof+0xe0/0x850 [ 622.570188][T14707] tomoyo_supervisor+0x65d/0x1340 [ 622.570236][T14707] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 622.570281][T14707] ? tomoyo_realpath_from_path+0x19c/0x690 [ 622.570332][T14707] ? tomoyo_realpath_from_path+0x19c/0x690 [ 622.570367][T14707] ? kfree+0x1f6/0x6b0 [ 622.570420][T14707] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 622.570484][T14707] tomoyo_path_number_perm+0x445/0x580 [ 622.570537][T14707] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 622.570589][T14707] ? rcu_read_unlock+0x17/0x60 [ 622.570634][T14707] ? do_raw_spin_lock+0x128/0x260 [ 622.570702][T14707] ? find_held_lock+0x2b/0x80 [ 622.570731][T14707] ? __pfx_d_add+0x10/0x10 [ 622.570766][T14707] ? d_alloc+0x176/0x1e0 [ 622.570797][T14707] ? current_check_access_path+0x281/0x460 [ 622.570841][T14707] ? simple_lookup+0x105/0x1d0 [ 622.570897][T14707] tomoyo_path_mknod+0x164/0x190 [ 622.570938][T14707] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 622.570982][T14707] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 622.571041][T14707] security_path_mknod+0x161/0x300 [ 622.571081][T14707] filename_mknodat+0x241/0x7f0 [ 622.571122][T14707] ? __pfx_filename_mknodat+0x10/0x10 [ 622.571155][T14707] ? strncpy_from_user+0x19d/0x2d0 [ 622.571208][T14707] ? do_getname+0x191/0x390 [ 622.571251][T14707] __x64_sys_mknod+0x8f/0xc0 [ 622.571286][T14707] do_syscall_64+0x106/0xf80 [ 622.571322][T14707] ? clear_bhb_loop+0x40/0x90 [ 622.571362][T14707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.571395][T14707] RIP: 0033:0x7fee0479c799 [ 622.571430][T14707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.571460][T14707] RSP: 002b:00007fee05690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 622.571490][T14707] RAX: ffffffffffffffda RBX: 00007fee04a16090 RCX: 00007fee0479c799 [ 622.571511][T14707] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000000 [ 622.571530][T14707] RBP: 00007fee04832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 622.571549][T14707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 622.571568][T14707] R13: 00007fee04a16128 R14: 00007fee04a16090 R15: 00007ffd29047cb8 [ 622.571613][T14707] [ 624.625638][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.634956][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.450900][T14776] Process accounting paused [ 627.738689][T14785] FAULT_INJECTION: forcing a failure. [ 627.738689][T14785] name failslab, interval 1, probability 0, space 0, times 0 [ 627.794351][T14785] CPU: 0 UID: 0 PID: 14785 Comm: syz.3.2185 Tainted: G L syzkaller #0 PREEMPT(full) [ 627.794411][T14785] Tainted: [L]=SOFTLOCKUP [ 627.794424][T14785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 627.794445][T14785] Call Trace: [ 627.794456][T14785] [ 627.794469][T14785] dump_stack_lvl+0x100/0x190 [ 627.794524][T14785] should_fail_ex.cold+0x5/0xa [ 627.794564][T14785] ? tomoyo_supervisor+0x65d/0x1340 [ 627.794606][T14785] should_failslab+0xc2/0x120 [ 627.794640][T14785] __kmalloc_noprof+0xe0/0x850 [ 627.794690][T14785] tomoyo_supervisor+0x65d/0x1340 [ 627.794729][T14785] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 627.794770][T14785] ? tomoyo_realpath_from_path+0x19c/0x690 [ 627.794819][T14785] ? tomoyo_realpath_from_path+0x19c/0x690 [ 627.794849][T14785] ? kfree+0x1f6/0x6b0 [ 627.794889][T14785] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 627.794949][T14785] tomoyo_path_number_perm+0x445/0x580 [ 627.794998][T14785] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 627.795057][T14785] ? do_raw_spin_lock+0x128/0x260 [ 627.795133][T14785] ? find_held_lock+0x2b/0x80 [ 627.795161][T14785] ? __pfx_d_add+0x10/0x10 [ 627.795195][T14785] ? d_alloc+0x176/0x1e0 [ 627.795225][T14785] ? current_check_access_path+0x281/0x460 [ 627.795274][T14785] ? simple_lookup+0x105/0x1d0 [ 627.795326][T14785] tomoyo_path_mknod+0x164/0x190 [ 627.795365][T14785] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 627.795407][T14785] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 627.795462][T14785] security_path_mknod+0x161/0x300 [ 627.795497][T14785] filename_mknodat+0x241/0x7f0 [ 627.795534][T14785] ? __pfx_filename_mknodat+0x10/0x10 [ 627.795575][T14785] ? strncpy_from_user+0x19d/0x2d0 [ 627.795626][T14785] ? do_getname+0x191/0x390 [ 627.795666][T14785] __x64_sys_mknod+0x8f/0xc0 [ 627.795701][T14785] do_syscall_64+0x106/0xf80 [ 627.795737][T14785] ? clear_bhb_loop+0x40/0x90 [ 627.795774][T14785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.795804][T14785] RIP: 0033:0x7fee0479c799 [ 627.795831][T14785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.795860][T14785] RSP: 002b:00007fee05690028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 627.795890][T14785] RAX: ffffffffffffffda RBX: 00007fee04a16090 RCX: 00007fee0479c799 [ 627.795910][T14785] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000000 [ 627.795927][T14785] RBP: 00007fee04832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 627.795945][T14785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 627.795962][T14785] R13: 00007fee04a16128 R14: 00007fee04a16090 R15: 00007ffd29047cb8 [ 627.796003][T14785] [ 632.718120][ T9706] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 1420 with max blocks 20 with error 117 [ 632.748452][ T9706] EXT4-fs (sda1): This should not happen!! Data will be lost [ 632.748452][ T9706] [ 633.293418][T14868] FAULT_INJECTION: forcing a failure. [ 633.293418][T14868] name failslab, interval 1, probability 0, space 0, times 0 [ 633.367749][T14868] CPU: 0 UID: 0 PID: 14868 Comm: syz.3.2201 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.367781][T14868] Tainted: [L]=SOFTLOCKUP [ 633.367788][T14868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 633.367799][T14868] Call Trace: [ 633.367807][T14868] [ 633.367814][T14868] dump_stack_lvl+0x100/0x190 [ 633.367846][T14868] should_fail_ex.cold+0x5/0xa [ 633.367867][T14868] should_failslab+0xc2/0x120 [ 633.367887][T14868] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 633.367913][T14868] ? taskstats_exit+0x650/0xbd0 [ 633.367945][T14868] taskstats_exit+0x650/0xbd0 [ 633.367972][T14868] ? __pfx_acct_update_integrals+0x10/0x10 [ 633.368002][T14868] ? __pfx_taskstats_exit+0x10/0x10 [ 633.368031][T14868] ? rcu_read_lock_any_held+0x6a/0xa0 [ 633.368060][T14868] ? exit_signals+0x395/0xaf0 [ 633.368081][T14868] do_exit+0x5ca/0x2aa0 [ 633.368107][T14868] ? __pfx_do_exit+0x10/0x10 [ 633.368129][T14868] ? do_raw_spin_lock+0x128/0x260 [ 633.368155][T14868] ? find_held_lock+0x2b/0x80 [ 633.368171][T14868] ? get_signal+0x7e0/0x21e0 [ 633.368192][T14868] do_group_exit+0xd5/0x2a0 [ 633.368216][T14868] get_signal+0x1ec7/0x21e0 [ 633.368252][T14868] ? __pfx_get_signal+0x10/0x10 [ 633.368272][T14868] ? do_futex+0x192/0x350 [ 633.368297][T14868] arch_do_signal_or_restart+0x91/0x770 [ 633.368319][T14868] ? blkcg_maybe_throttle_current+0x5df/0xeb0 [ 633.368343][T14868] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 633.368371][T14868] ? __pfx___x64_sys_futex+0x10/0x10 [ 633.368409][T14868] exit_to_user_mode_loop+0x86/0x4a0 [ 633.368449][T14868] do_syscall_64+0x668/0xf80 [ 633.368480][T14868] ? clear_bhb_loop+0x40/0x90 [ 633.368514][T14868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.368533][T14868] RIP: 0033:0x7fee0479c799 [ 633.368549][T14868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 633.368567][T14868] RSP: 002b:00007fee056b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 633.368586][T14868] RAX: fffffffffffffe00 RBX: 00007fee04a15fa8 RCX: 00007fee0479c799 [ 633.368598][T14868] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fee04a15fa8 [ 633.368609][T14868] RBP: 00007fee04a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 633.368619][T14868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 633.368630][T14868] R13: 00007fee04a16038 R14: 00007ffd29047bd0 R15: 00007ffd29047cb8 [ 633.368653][T14868] [ 635.280958][T14893] FAULT_INJECTION: forcing a failure. [ 635.280958][T14893] name failslab, interval 1, probability 0, space 0, times 0 [ 635.332559][T14893] CPU: 0 UID: 0 PID: 14893 Comm: syz.3.2207 Tainted: G L syzkaller #0 PREEMPT(full) [ 635.332613][T14893] Tainted: [L]=SOFTLOCKUP [ 635.332626][T14893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 635.332645][T14893] Call Trace: [ 635.332657][T14893] [ 635.332670][T14893] dump_stack_lvl+0x100/0x190 [ 635.332723][T14893] should_fail_ex.cold+0x5/0xa [ 635.332760][T14893] ? tomoyo_supervisor+0x65d/0x1340 [ 635.332799][T14893] should_failslab+0xc2/0x120 [ 635.332833][T14893] __kmalloc_noprof+0xe0/0x850 [ 635.332887][T14893] tomoyo_supervisor+0x65d/0x1340 [ 635.332935][T14893] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 635.332989][T14893] ? tomoyo_realpath_from_path+0x19c/0x690 [ 635.333041][T14893] ? tomoyo_realpath_from_path+0x19c/0x690 [ 635.333078][T14893] ? kfree+0x1f6/0x6b0 [ 635.333124][T14893] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 635.333198][T14893] tomoyo_path_number_perm+0x445/0x580 [ 635.333254][T14893] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 635.333321][T14893] ? do_raw_spin_lock+0x128/0x260 [ 635.333391][T14893] ? find_held_lock+0x2b/0x80 [ 635.333421][T14893] ? __pfx_d_add+0x10/0x10 [ 635.333457][T14893] ? d_alloc+0x176/0x1e0 [ 635.333490][T14893] ? current_check_access_path+0x281/0x460 [ 635.333534][T14893] ? simple_lookup+0x105/0x1d0 [ 635.333588][T14893] tomoyo_path_mknod+0x164/0x190 [ 635.333629][T14893] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 635.333672][T14893] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 635.333729][T14893] security_path_mknod+0x161/0x300 [ 635.333769][T14893] filename_mknodat+0x241/0x7f0 [ 635.333810][T14893] ? __pfx_filename_mknodat+0x10/0x10 [ 635.333844][T14893] ? strncpy_from_user+0x19d/0x2d0 [ 635.333897][T14893] ? do_getname+0x191/0x390 [ 635.333941][T14893] __x64_sys_mknod+0x8f/0xc0 [ 635.333975][T14893] do_syscall_64+0x106/0xf80 [ 635.334012][T14893] ? clear_bhb_loop+0x40/0x90 [ 635.334052][T14893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.334086][T14893] RIP: 0033:0x7fee0479c799 [ 635.334115][T14893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.334148][T14893] RSP: 002b:00007fee056b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 635.334188][T14893] RAX: ffffffffffffffda RBX: 00007fee04a15fa0 RCX: 00007fee0479c799 [ 635.334209][T14893] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000000 [ 635.334228][T14893] RBP: 00007fee04832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 635.334248][T14893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 635.334267][T14893] R13: 00007fee04a16038 R14: 00007fee04a15fa0 R15: 00007ffd29047cb8 [ 635.334311][T14893] [ 636.099573][T14905] FAULT_INJECTION: forcing a failure. [ 636.099573][T14905] name failslab, interval 1, probability 0, space 0, times 0 [ 636.141829][T14905] CPU: 1 UID: 0 PID: 14905 Comm: syz.1.2210 Tainted: G L syzkaller #0 PREEMPT(full) [ 636.141875][T14905] Tainted: [L]=SOFTLOCKUP [ 636.141885][T14905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 636.141903][T14905] Call Trace: [ 636.141913][T14905] [ 636.141925][T14905] dump_stack_lvl+0x100/0x190 [ 636.141970][T14905] should_fail_ex.cold+0x5/0xa [ 636.142003][T14905] ? tomoyo_supervisor+0x65d/0x1340 [ 636.142036][T14905] should_failslab+0xc2/0x120 [ 636.142065][T14905] __kmalloc_noprof+0xe0/0x850 [ 636.142113][T14905] tomoyo_supervisor+0x65d/0x1340 [ 636.142157][T14905] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 636.142213][T14905] ? tomoyo_realpath_from_path+0x19c/0x690 [ 636.142261][T14905] ? tomoyo_realpath_from_path+0x19c/0x690 [ 636.142292][T14905] ? kfree+0x1f6/0x6b0 [ 636.142332][T14905] ? tomoyo_check_path_number_acl+0x1e6/0x2f0 [ 636.142387][T14905] tomoyo_path_number_perm+0x445/0x580 [ 636.142434][T14905] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 636.142492][T14905] ? do_raw_spin_lock+0x128/0x260 [ 636.142532][T14905] ? find_held_lock+0x2b/0x80 [ 636.142550][T14905] ? __pfx_d_add+0x10/0x10 [ 636.142572][T14905] ? d_alloc+0x176/0x1e0 [ 636.142591][T14905] ? current_check_access_path+0x281/0x460 [ 636.142616][T14905] ? simple_lookup+0x105/0x1d0 [ 636.142648][T14905] tomoyo_path_mknod+0x164/0x190 [ 636.142672][T14905] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 636.142697][T14905] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 636.142731][T14905] security_path_mknod+0x161/0x300 [ 636.142755][T14905] filename_mknodat+0x241/0x7f0 [ 636.142778][T14905] ? __pfx_filename_mknodat+0x10/0x10 [ 636.142798][T14905] ? strncpy_from_user+0x19d/0x2d0 [ 636.142828][T14905] ? do_getname+0x191/0x390 [ 636.142853][T14905] __x64_sys_mknod+0x8f/0xc0 [ 636.142873][T14905] do_syscall_64+0x106/0xf80 [ 636.142894][T14905] ? clear_bhb_loop+0x40/0x90 [ 636.142918][T14905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.142938][T14905] RIP: 0033:0x7fad2c59c799 [ 636.142957][T14905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 636.142976][T14905] RSP: 002b:00007fad2d543028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 636.142994][T14905] RAX: ffffffffffffffda RBX: 00007fad2c815fa0 RCX: 00007fad2c59c799 [ 636.143007][T14905] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 0000000000000000 [ 636.143018][T14905] RBP: 00007fad2c632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 636.143029][T14905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 636.143040][T14905] R13: 00007fad2c816038 R14: 00007fad2c815fa0 R15: 00007fff1708f998 [ 636.143064][T14905] [ 636.949507][T14902] FAULT_INJECTION: forcing a failure. [ 636.949507][T14902] name failslab, interval 1, probability 0, space 0, times 0 [ 636.993672][T14924] FAULT_INJECTION: forcing a failure. [ 636.993672][T14924] name failslab, interval 1, probability 0, space 0, times 0 [ 637.006695][T14924] CPU: 1 UID: 0 PID: 14924 Comm: syz.4.2215 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.006742][T14924] Tainted: [L]=SOFTLOCKUP [ 637.006749][T14924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.006761][T14924] Call Trace: [ 637.006769][T14924] [ 637.006777][T14924] dump_stack_lvl+0x100/0x190 [ 637.006809][T14924] should_fail_ex.cold+0x5/0xa [ 637.006831][T14924] should_failslab+0xc2/0x120 [ 637.006851][T14924] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 637.006878][T14924] ? mempool_init_node+0x2f7/0x6e0 [ 637.006898][T14924] ? lockdep_set_lock_cmp_fn+0xa1/0xe0 [ 637.006925][T14924] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 637.006945][T14924] mempool_init_node+0x2f7/0x6e0 [ 637.006969][T14924] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 637.006988][T14924] ? __pfx_mempool_free_slab+0x10/0x10 [ 637.007007][T14924] mempool_init_noprof+0x3a/0x50 [ 637.007029][T14924] bioset_init+0x37e/0x8a0 [ 637.007057][T14924] ? __pfx_bioset_init+0x10/0x10 [ 637.007093][T14924] __alloc_disk_node+0x83/0x6b0 [ 637.007124][T14924] __blk_mq_alloc_disk+0x89/0x120 [ 637.007153][T14924] loop_add+0x498/0xb60 [ 637.007174][T14924] ? __pfx_loop_add+0x10/0x10 [ 637.007218][T14924] ? find_held_lock+0x2b/0x80 [ 637.007246][T14924] ? __fget_files+0x215/0x3d0 [ 637.007279][T14924] loop_control_ioctl+0xae/0x620 [ 637.007312][T14924] ? __pfx_loop_control_ioctl+0x10/0x10 [ 637.007337][T14924] ? __pfx_loop_control_ioctl+0x10/0x10 [ 637.007360][T14924] __x64_sys_ioctl+0x18e/0x210 [ 637.007387][T14924] do_syscall_64+0x106/0xf80 [ 637.007418][T14924] ? clear_bhb_loop+0x40/0x90 [ 637.007441][T14924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.007461][T14924] RIP: 0033:0x7fecdd59c799 [ 637.007478][T14924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 637.007497][T14924] RSP: 002b:00007fecde374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 637.007515][T14924] RAX: ffffffffffffffda RBX: 00007fecdd816090 RCX: 00007fecdd59c799 [ 637.007528][T14924] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 000000000000000b [ 637.007540][T14924] RBP: 00007fecdd632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 637.007551][T14924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.007561][T14924] R13: 00007fecdd816128 R14: 00007fecdd816090 R15: 00007ffe0d0a9f78 [ 637.007585][T14924] [ 637.278014][T14902] CPU: 0 UID: 0 PID: 14902 Comm: syz.3.2209 Tainted: G L syzkaller #0 PREEMPT(full) [ 637.278064][T14902] Tainted: [L]=SOFTLOCKUP [ 637.278076][T14902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 637.278095][T14902] Call Trace: [ 637.278106][T14902] [ 637.278127][T14902] dump_stack_lvl+0x100/0x190 [ 637.278176][T14902] should_fail_ex.cold+0x5/0xa [ 637.278212][T14902] ? constrain_params_by_rules+0x175/0xcc0 [ 637.278245][T14902] should_failslab+0xc2/0x120 [ 637.278276][T14902] __kmalloc_noprof+0xe0/0x850 [ 637.278320][T14902] ? lockdep_hardirqs_on+0x78/0x100 [ 637.278362][T14902] constrain_params_by_rules+0x175/0xcc0 [ 637.278414][T14902] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 637.278458][T14902] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 637.278509][T14902] ? snd_interval_refine+0x2d0/0x580 [ 637.278553][T14902] snd_pcm_hw_refine+0x7e7/0xad0 [ 637.278594][T14902] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 637.278636][T14902] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 637.278675][T14902] ? snd_pcm_hw_param_value+0x27b/0x5b0 [ 637.278723][T14902] snd_pcm_hw_param_first+0x2b0/0x680 [ 637.278776][T14902] snd_pcm_hw_params+0x496/0x1cb0 [ 637.278816][T14902] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 637.278849][T14902] ? snd_pcm_hw_param_near.constprop.0+0x578/0x850 [ 637.278901][T14902] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 637.278955][T14902] snd_pcm_kernel_ioctl+0x167/0x2e0 [ 637.278992][T14902] snd_pcm_oss_change_params_locked+0x1973/0x39f0 [ 637.279061][T14902] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 637.279110][T14902] ? __pfx___mutex_lock+0x10/0x10 [ 637.279186][T14902] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 637.279237][T14902] snd_pcm_oss_sync+0x1de/0x840 [ 637.279292][T14902] snd_pcm_oss_release+0x238/0x300 [ 637.279339][T14902] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 637.279386][T14902] __fput+0x3ff/0xb40 [ 637.279431][T14902] task_work_run+0x150/0x240 [ 637.279477][T14902] ? __pfx_task_work_run+0x10/0x10 [ 637.279521][T14902] ? do_raw_spin_unlock+0x145/0x1e0 [ 637.279573][T14902] do_exit+0x829/0x2aa0 [ 637.279625][T14902] ? __pfx_do_exit+0x10/0x10 [ 637.279664][T14902] ? do_raw_spin_lock+0x128/0x260 [ 637.279706][T14902] ? find_held_lock+0x2b/0x80 [ 637.279732][T14902] ? get_signal+0x7e0/0x21e0 [ 637.279768][T14902] do_group_exit+0xd5/0x2a0 [ 637.279810][T14902] get_signal+0x1ec7/0x21e0 [ 637.279849][T14902] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.279887][T14902] ? __pfx_get_signal+0x10/0x10 [ 637.279921][T14902] ? do_futex+0x192/0x350 [ 637.279965][T14902] arch_do_signal_or_restart+0x91/0x770 [ 637.280027][T14902] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 637.280077][T14902] ? __pfx___x64_sys_futex+0x10/0x10 [ 637.280133][T14902] exit_to_user_mode_loop+0x86/0x4a0 [ 637.280177][T14902] do_syscall_64+0x668/0xf80 [ 637.280211][T14902] ? clear_bhb_loop+0x40/0x90 [ 637.280250][T14902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 637.280281][T14902] RIP: 0033:0x7fee0479c799 [ 637.280306][T14902] Code: Unable to access opcode bytes at 0x7fee0479c76f. [ 637.280320][T14902] RSP: 002b:00007fee056b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 637.280349][T14902] RAX: fffffffffffffe00 RBX: 00007fee04a15fa8 RCX: 00007fee0479c799 [ 637.280369][T14902] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fee04a15fa8 [ 637.280387][T14902] RBP: 00007fee04a15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 637.280405][T14902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 637.280422][T14902] R13: 00007fee04a16038 R14: 00007ffd29047bd0 R15: 00007ffd29047cb8 [ 637.280461][T14902] [ 637.927940][T14928] ERROR: Out of memory at tomoyo_memory_ok. [ 641.126558][T14991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2231'. [ 643.297104][T15030] bond0: invalid ARP target specified [ 643.306177][T15030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2240'. [ 647.548972][T15068] bond0: invalid ARP target specified [ 647.649733][T15068] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2249'. [ 653.142933][T15151] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 654.267689][T15179] bond0: invalid ARP target specified [ 654.307440][T15179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2275'. [ 655.487354][T15201] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 655.886725][T15209] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2281'. [ 655.941868][T15206] bond0: invalid ARP target specified [ 655.973903][T15208] bond0: invalid ARP target specified [ 655.985069][T15210] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2282'. [ 656.353241][T15219] bond0: invalid ARP target specified [ 656.386698][T15219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2286'. [ 658.554684][T15258] bond0: invalid ARP target specified [ 658.577432][T15258] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2293'. [ 658.607449][T10237] EXT4-fs (sda1): Delayed block allocation failed for inode 2033 at logical offset 1435 with max blocks 3 with error 117 [ 658.697894][T10237] EXT4-fs (sda1): This should not happen!! Data will be lost [ 658.697894][T10237] [ 659.331814][T15243] Process accounting resumed [ 659.968084][T15272] bond0: invalid ARP target specified [ 660.016577][T15272] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2298'. [ 660.279871][T15281] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 660.282475][T15281] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 660.287775][T15281] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 660.411071][T15287] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 660.514159][T15288] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 4: bad block bitmap checksum [ 661.127394][T15294] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 5: bad block bitmap checksum [ 661.266737][T15298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2305'. [ 661.763533][ T9711] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.950090][T15308] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2306'. [ 661.993326][ T9711] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.225469][ T9711] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.402597][T15312] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 662.413231][T15312] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 662.438652][T15312] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 662.447309][T15312] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 662.468654][T15312] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 662.483865][ T9711] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.034759][T15311] chnl_net:caif_netlink_parms(): no params data found [ 663.333685][T15311] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.342945][T15311] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.353077][T15311] bridge_slave_0: entered allmulticast mode [ 663.360827][T15311] bridge_slave_0: entered promiscuous mode [ 663.381607][T15311] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.395281][T15311] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.402602][T15311] bridge_slave_1: entered allmulticast mode [ 663.410117][T15311] bridge_slave_1: entered promiscuous mode [ 663.481239][T15311] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.500889][T15311] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.610990][T15311] team0: Port device team_slave_0 added [ 663.677805][T15311] team0: Port device team_slave_1 added [ 663.713888][T15311] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.722125][T15311] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.759589][T15311] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.773215][T15311] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.798217][T15311] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.868291][T15311] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.972866][T15311] hsr_slave_0: entered promiscuous mode [ 663.992874][T15311] hsr_slave_1: entered promiscuous mode [ 664.023266][T15311] debugfs: 'hsr0' already exists in 'hsr' [ 664.042877][T15311] Cannot create hsr debugfs directory [ 664.272856][T15330] bond0: invalid ARP target specified [ 664.301276][T15330] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2309'. [ 664.537323][T15312] Bluetooth: hci3: command tx timeout [ 666.617328][T15312] Bluetooth: hci3: command tx timeout [ 668.697323][T15312] Bluetooth: hci3: command tx timeout [ 670.777408][T15312] Bluetooth: hci3: command tx timeout [ 677.165228][ T9717] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 677.175489][ T9717] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 677.184270][ T9717] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 677.194363][ T9717] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 677.202398][ T9717] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 677.565406][T15338] chnl_net:caif_netlink_parms(): no params data found [ 677.744192][T15338] bridge0: port 1(bridge_slave_0) entered blocking state [ 677.751548][T15338] bridge0: port 1(bridge_slave_0) entered disabled state [ 677.759005][T15338] bridge_slave_0: entered allmulticast mode [ 677.768516][T15338] bridge_slave_0: entered promiscuous mode [ 677.779139][T15338] bridge0: port 2(bridge_slave_1) entered blocking state [ 677.786719][T15338] bridge0: port 2(bridge_slave_1) entered disabled state [ 677.794915][T15338] bridge_slave_1: entered allmulticast mode [ 677.803661][T15338] bridge_slave_1: entered promiscuous mode [ 677.861216][T15338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 677.891771][T15338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 677.959221][T15338] team0: Port device team_slave_0 added [ 677.969072][T15338] team0: Port device team_slave_1 added [ 678.014721][T15338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 678.022059][T15338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.077878][T15338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 678.091862][T15338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 678.107853][T15338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 678.149939][T15338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 678.228141][T15338] hsr_slave_0: entered promiscuous mode [ 678.239187][T15338] hsr_slave_1: entered promiscuous mode [ 678.245850][T15338] debugfs: 'hsr0' already exists in 'hsr' [ 678.252968][T15338] Cannot create hsr debugfs directory [ 679.270817][T15312] Bluetooth: hci5: command tx timeout [ 679.748143][ T9717] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 679.758182][ T9717] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 679.767154][ T9717] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 679.777015][ T9717] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 679.784851][ T9717] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 680.264355][T15362] chnl_net:caif_netlink_parms(): no params data found [ 680.557059][T15362] bridge0: port 1(bridge_slave_0) entered blocking state [ 680.579707][T15362] bridge0: port 1(bridge_slave_0) entered disabled state [ 680.587002][T15362] bridge_slave_0: entered allmulticast mode [ 680.623318][T15362] bridge_slave_0: entered promiscuous mode [ 680.665675][T15362] bridge0: port 2(bridge_slave_1) entered blocking state [ 680.688208][T15362] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.709499][T15362] bridge_slave_1: entered allmulticast mode [ 680.737700][T15362] bridge_slave_1: entered promiscuous mode [ 680.964332][T15362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 680.992059][T15362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 681.079568][T15362] team0: Port device team_slave_0 added [ 681.107123][T15362] team0: Port device team_slave_1 added [ 681.201900][T15362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 681.213496][T15362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.247725][T15362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 681.280774][T15362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 681.288113][T15362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 681.337553][ T9717] Bluetooth: hci5: command tx timeout [ 681.343446][T15362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 681.430270][T15362] hsr_slave_0: entered promiscuous mode [ 681.452145][T15362] hsr_slave_1: entered promiscuous mode [ 681.458627][ T9706] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1430 with max blocks 12 with error 117 [ 681.468165][T15362] debugfs: 'hsr0' already exists in 'hsr' [ 681.471807][ T9706] EXT4-fs (sda1): This should not happen!! Data will be lost [ 681.471807][ T9706] [ 681.498009][T15362] Cannot create hsr debugfs directory [ 681.818241][ T9717] Bluetooth: hci6: command tx timeout [ 683.394676][T15389] bond0: invalid ARP target specified [ 683.410200][T15389] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2321'. [ 683.419594][ T9717] Bluetooth: hci5: command tx timeout [ 683.897684][ T9717] Bluetooth: hci6: command tx timeout [ 685.497606][ T9717] Bluetooth: hci5: command tx timeout [ 685.977654][ T9717] Bluetooth: hci6: command tx timeout [ 686.063626][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.070184][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 688.057654][ T9717] Bluetooth: hci6: command tx timeout [ 699.170279][T15312] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 699.179373][T15312] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 699.188636][T15312] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 699.201825][T15312] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 699.210408][T15312] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 699.495459][T15398] chnl_net:caif_netlink_parms(): no params data found [ 699.645038][T15398] bridge0: port 1(bridge_slave_0) entered blocking state [ 699.652919][T15398] bridge0: port 1(bridge_slave_0) entered disabled state [ 699.662953][T15398] bridge_slave_0: entered allmulticast mode [ 699.671624][T15398] bridge_slave_0: entered promiscuous mode [ 699.681602][T15398] bridge0: port 2(bridge_slave_1) entered blocking state [ 699.689129][T15398] bridge0: port 2(bridge_slave_1) entered disabled state [ 699.696489][T15398] bridge_slave_1: entered allmulticast mode [ 699.704841][T15398] bridge_slave_1: entered promiscuous mode [ 699.759283][T15398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.775446][T15398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.821016][T15398] team0: Port device team_slave_0 added [ 699.830821][T15398] team0: Port device team_slave_1 added [ 699.881806][T15398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.888832][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.915771][T15398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.929189][T15398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.936162][T15398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 699.966292][T15398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.043359][T15398] hsr_slave_0: entered promiscuous mode [ 700.054013][T15398] hsr_slave_1: entered promiscuous mode [ 700.060883][T15398] debugfs: 'hsr0' already exists in 'hsr' [ 700.066645][T15398] Cannot create hsr debugfs directory [ 701.257352][ T9717] Bluetooth: hci7: command tx timeout [ 703.337285][ T9717] Bluetooth: hci7: command tx timeout [ 705.417361][ T9717] Bluetooth: hci7: command tx timeout [ 707.497451][ T9717] Bluetooth: hci7: command tx timeout [ 711.745549][ T9712] EXT4-fs (sda1): Delayed block allocation failed for inode 2029 at logical offset 1417 with max blocks 14 with error 117 [ 711.759882][ T9712] EXT4-fs (sda1): This should not happen!! Data will be lost [ 711.759882][ T9712] [ 722.647850][T15312] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 722.656937][T15312] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 722.669107][T15312] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 722.681528][T15312] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 722.689475][T15312] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 723.002709][T15411] chnl_net:caif_netlink_parms(): no params data found [ 723.152528][T15411] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.159946][T15411] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.168020][T15411] bridge_slave_0: entered allmulticast mode [ 723.176305][T15411] bridge_slave_0: entered promiscuous mode [ 723.194107][T15411] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.201529][T15411] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.208881][T15411] bridge_slave_1: entered allmulticast mode [ 723.219970][T15411] bridge_slave_1: entered promiscuous mode [ 723.268806][T15411] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.282367][T15411] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.336226][T15411] team0: Port device team_slave_0 added [ 723.346812][T15411] team0: Port device team_slave_1 added [ 723.387980][T15411] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.398888][T15411] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.428564][T15411] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.444486][T15411] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.451834][T15411] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.478598][T15411] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.555717][T15411] hsr_slave_0: entered promiscuous mode [ 723.562815][T15411] hsr_slave_1: entered promiscuous mode [ 723.569785][T15411] debugfs: 'hsr0' already exists in 'hsr' [ 723.575639][T15411] Cannot create hsr debugfs directory [ 724.777355][T15312] Bluetooth: hci8: command tx timeout [ 726.857413][T15312] Bluetooth: hci8: command tx timeout [ 728.937605][T15312] Bluetooth: hci8: command tx timeout [ 731.017992][T15312] Bluetooth: hci8: command tx timeout [ 737.165709][ T9717] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 737.175325][ T9717] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 737.184032][ T9717] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 737.194145][ T9717] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 737.205200][ T9717] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 737.495912][T15424] chnl_net:caif_netlink_parms(): no params data found [ 737.649619][T15424] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.656886][T15424] bridge0: port 1(bridge_slave_0) entered disabled state [ 737.664674][T15424] bridge_slave_0: entered allmulticast mode [ 737.673197][T15424] bridge_slave_0: entered promiscuous mode [ 737.682966][T15424] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.690523][T15424] bridge0: port 2(bridge_slave_1) entered disabled state [ 737.698320][T15424] bridge_slave_1: entered allmulticast mode [ 737.706723][T15424] bridge_slave_1: entered promiscuous mode [ 737.766351][T15424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 737.781918][T15424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 737.829178][T15424] team0: Port device team_slave_0 added [ 737.842533][T15424] team0: Port device team_slave_1 added [ 737.890139][T15424] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 737.897610][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.924522][T15424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 737.942157][T15424] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 737.949486][T15424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 737.983062][T15424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 738.062154][T15424] hsr_slave_0: entered promiscuous mode [ 738.069229][T15424] hsr_slave_1: entered promiscuous mode [ 738.075727][T15424] debugfs: 'hsr0' already exists in 'hsr' [ 738.082288][T15424] Cannot create hsr debugfs directory [ 739.257401][T15312] Bluetooth: hci9: command tx timeout [ 739.657092][ T9717] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 739.668379][ T9717] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 739.681069][ T9717] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 739.690989][ T9717] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 739.699803][ T9717] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 740.006635][T15436] chnl_net:caif_netlink_parms(): no params data found [ 740.181378][T15436] bridge0: port 1(bridge_slave_0) entered blocking state [ 740.189116][T15436] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.196416][T15436] bridge_slave_0: entered allmulticast mode [ 740.205335][T15436] bridge_slave_0: entered promiscuous mode [ 740.215369][T15436] bridge0: port 2(bridge_slave_1) entered blocking state [ 740.223323][T15436] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.231176][T15436] bridge_slave_1: entered allmulticast mode [ 740.239708][T15436] bridge_slave_1: entered promiscuous mode [ 740.285995][T15436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.300840][T15436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 740.348317][T15436] team0: Port device team_slave_0 added [ 740.358896][T15436] team0: Port device team_slave_1 added [ 740.402907][T15436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 740.410096][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.436923][T15436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 740.450835][T15436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 740.458398][T15436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 740.486573][T15436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 740.559473][T15436] hsr_slave_0: entered promiscuous mode [ 740.566717][T15436] hsr_slave_1: entered promiscuous mode [ 740.573890][T15436] debugfs: 'hsr0' already exists in 'hsr' [ 740.580068][T15436] Cannot create hsr debugfs directory [ 741.337261][ T9717] Bluetooth: hci9: command tx timeout [ 741.737417][ T9717] Bluetooth: hci10: command tx timeout [ 743.417804][ T9717] Bluetooth: hci9: command tx timeout [ 743.817543][ T9717] Bluetooth: hci10: command tx timeout [ 745.497292][ T9717] Bluetooth: hci9: command tx timeout [ 745.897338][ T9717] Bluetooth: hci10: command tx timeout [ 747.503465][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.509914][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.977634][ T9717] Bluetooth: hci10: command tx timeout [ 759.241641][T15312] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 759.251151][T15312] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 759.261735][T15312] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 759.270898][T15312] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 759.279378][T15312] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 759.584537][T15447] chnl_net:caif_netlink_parms(): no params data found [ 759.721541][T15447] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.730072][T15447] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.738975][T15447] bridge_slave_0: entered allmulticast mode [ 759.750919][T15447] bridge_slave_0: entered promiscuous mode [ 759.760641][T15447] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.768106][T15447] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.775482][T15447] bridge_slave_1: entered allmulticast mode [ 759.785998][T15447] bridge_slave_1: entered promiscuous mode [ 759.840421][T15447] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 759.859359][T15447] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.911453][T15447] team0: Port device team_slave_0 added [ 759.921456][T15447] team0: Port device team_slave_1 added [ 759.970589][T15447] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 759.980145][T15447] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.008354][T15447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 760.022125][T15447] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 760.029275][T15447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 760.066656][T15447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 760.142771][T15447] hsr_slave_0: entered promiscuous mode [ 760.150279][T15447] hsr_slave_1: entered promiscuous mode [ 760.161209][T15447] debugfs: 'hsr0' already exists in 'hsr' [ 760.167071][T15447] Cannot create hsr debugfs directory [ 761.337436][T15312] Bluetooth: hci11: command tx timeout [ 763.417381][T15312] Bluetooth: hci11: command tx timeout [ 765.497503][T15312] Bluetooth: hci11: command tx timeout [ 767.577433][T15312] Bluetooth: hci11: command tx timeout [ 783.347686][T15468] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 783.357323][T15468] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 783.365580][T15468] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 783.373851][T15468] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 783.383294][T15468] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 783.703995][T15466] chnl_net:caif_netlink_parms(): no params data found [ 783.839792][T15466] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.848700][T15466] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.856141][T15466] bridge_slave_0: entered allmulticast mode [ 783.864964][T15466] bridge_slave_0: entered promiscuous mode [ 783.875003][T15466] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.882886][T15466] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.890438][T15466] bridge_slave_1: entered allmulticast mode [ 783.899243][T15466] bridge_slave_1: entered promiscuous mode [ 783.948213][T15466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.961866][T15466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.010111][T15466] team0: Port device team_slave_0 added [ 784.020777][T15466] team0: Port device team_slave_1 added [ 784.062285][T15466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 784.069382][T15466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.095786][T15466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 784.109953][T15466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 784.117514][T15466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 784.144596][T15466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 784.228474][T15466] hsr_slave_0: entered promiscuous mode [ 784.235488][T15466] hsr_slave_1: entered promiscuous mode [ 784.242213][T15466] debugfs: 'hsr0' already exists in 'hsr' [ 784.248395][T15466] Cannot create hsr debugfs directory [ 785.422883][T15312] Bluetooth: hci3: command 0x0406 tx timeout [ 785.431095][T15468] Bluetooth: hci12: command tx timeout [ 787.497497][T15468] Bluetooth: hci12: command tx timeout [ 789.577332][T15468] Bluetooth: hci12: command tx timeout [ 791.657643][ T9717] Bluetooth: hci12: command tx timeout [ 797.724023][ T9717] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 797.743103][ T9717] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 797.751859][ T9717] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 797.761926][ T9717] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 797.769994][ T9717] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 798.082266][T15481] chnl_net:caif_netlink_parms(): no params data found [ 798.247976][T15481] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.255362][T15481] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.263397][T15481] bridge_slave_0: entered allmulticast mode [ 798.272223][T15481] bridge_slave_0: entered promiscuous mode [ 798.282450][T15481] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.290192][T15481] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.297802][T15481] bridge_slave_1: entered allmulticast mode [ 798.306064][T15481] bridge_slave_1: entered promiscuous mode [ 798.353253][T15481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.366981][T15481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 798.415836][T15481] team0: Port device team_slave_0 added [ 798.425628][T15481] team0: Port device team_slave_1 added [ 798.467935][T15481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.474928][T15481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.501310][T15481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.515174][T15481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.522511][T15481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.548968][T15481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.618322][T15481] hsr_slave_0: entered promiscuous mode [ 798.625318][T15481] hsr_slave_1: entered promiscuous mode [ 798.632409][T15481] debugfs: 'hsr0' already exists in 'hsr' [ 798.638462][T15481] Cannot create hsr debugfs directory [ 799.761693][T15312] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 799.771976][T15312] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 799.788124][T15312] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 799.796467][T15312] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 799.809675][T15312] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 799.818644][T10600] Bluetooth: hci13: command tx timeout [ 800.106815][T15492] chnl_net:caif_netlink_parms(): no params data found [ 800.249903][T15492] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.258722][T15492] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.266113][T15492] bridge_slave_0: entered allmulticast mode [ 800.275592][T15492] bridge_slave_0: entered promiscuous mode [ 800.286242][T15492] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.293994][T15492] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.307412][T15492] bridge_slave_1: entered allmulticast mode [ 800.315637][T15492] bridge_slave_1: entered promiscuous mode [ 800.368782][T15492] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.386900][T15492] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.436946][T15492] team0: Port device team_slave_0 added [ 800.447602][T15492] team0: Port device team_slave_1 added [ 800.495701][T15492] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 800.506277][T15492] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.533320][T15492] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 800.549693][T15492] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 800.557050][T15492] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 800.589793][T15492] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 800.670117][T15492] hsr_slave_0: entered promiscuous mode [ 800.677712][T15492] hsr_slave_1: entered promiscuous mode [ 800.684375][T15492] debugfs: 'hsr0' already exists in 'hsr' [ 800.694964][T15492] Cannot create hsr debugfs directory [ 800.780049][T15312] Bluetooth: hci5: command 0x0406 tx timeout [ 801.898159][T15468] Bluetooth: hci14: command tx timeout [ 801.904671][T15468] Bluetooth: hci13: command tx timeout [ 803.977356][ T9717] Bluetooth: hci14: command tx timeout [ 803.986336][T15468] Bluetooth: hci13: command tx timeout [ 805.911624][T15312] Bluetooth: hci6: command 0x0406 tx timeout [ 806.057376][T15468] Bluetooth: hci14: command tx timeout [ 806.064981][T15312] Bluetooth: hci13: command tx timeout [ 808.137390][T15312] Bluetooth: hci14: command tx timeout [ 808.944582][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.951122][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.257518][ T30] INFO: task kworker/u10:2:9711 blocked for more than 143 seconds. [ 817.265581][ T30] Tainted: G L syzkaller #0 [ 817.279966][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.293370][ T30] task:kworker/u10:2 state:D stack:23512 pid:9711 tgid:9711 ppid:2 task_flags:0x4208160 flags:0x00080000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 817.312926][ T30] Workqueue: netns cleanup_net [ 817.319028][ T30] Call Trace: [ 817.322450][ T30] [ 817.325413][ T30] __schedule+0xfee/0x60e0 [ 817.331155][ T30] ? __lock_acquire+0x4a5/0x2630 [ 817.336265][ T30] ? __pfx___schedule+0x10/0x10 [ 817.348786][ T30] ? find_held_lock+0x2b/0x80 [ 817.353537][ T30] ? schedule+0x2bf/0x390 [ 817.358581][ T30] schedule+0xdd/0x390 [ 817.362804][ T30] schedule_timeout+0x1b2/0x280 [ 817.368522][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 817.374146][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 817.380274][ T30] __wait_for_common+0x2e7/0x4c0 [ 817.385782][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 817.391690][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 817.400988][ T30] remove_one+0x312/0x420 [ 817.405429][ T30] ? find_next_child+0x18f/0x280 [ 817.410825][ T30] __simple_recursive_removal+0x148/0x5c0 [ 817.416702][ T30] ? __pfx_remove_one+0x10/0x10 [ 817.425240][ T30] debugfs_remove+0x5d/0x80 [ 817.430109][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 817.435195][ T30] nsim_dev_reload_destroy+0x144/0x4a0 [ 817.441827][ T30] nsim_dev_reload_down+0x66/0xd0 [ 817.446994][ T30] devlink_reload+0x173/0x790 [ 817.457105][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 817.462778][ T30] devlink_pernet_pre_exit+0x222/0x330 [ 817.487307][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 817.493568][ T30] ? kobject_put+0xb9/0x640 [ 817.514720][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 817.537466][ T30] ops_undo_list+0x187/0xab0 [ 817.542169][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 817.565857][ T30] ? cleanup_net+0x332/0x920 [ 817.579982][ T30] ? cleanup_net+0x332/0x920 [ 817.584830][ T30] ? idr_destroy+0x62/0x2e0 [ 817.594162][ T30] cleanup_net+0x499/0x920 [ 817.599033][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 817.607881][ T30] ? rcu_is_watching+0x12/0xc0 [ 817.612720][ T30] process_one_work+0x9d7/0x1920 [ 817.618240][ T30] ? __pfx_process_one_work+0x10/0x10 [ 817.623685][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 817.629184][ T30] worker_thread+0x5da/0xe40 [ 817.633839][ T30] ? kthread+0x13a/0x450 [ 817.638661][ T30] ? __pfx_worker_thread+0x10/0x10 [ 817.643818][ T30] kthread+0x370/0x450 [ 817.648295][ T30] ? __pfx_kthread+0x10/0x10 [ 817.652934][ T30] ret_from_fork+0x754/0xd80 [ 817.658630][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 817.663804][ T30] ? __switch_to+0x7b4/0x1120 [ 817.673930][ T30] ? __pfx_kthread+0x10/0x10 [ 817.678918][ T30] ret_from_fork_asm+0x1a/0x30 [ 817.683749][ T30] [ 817.686830][ T30] INFO: task syz.4.2306:15306 blocked for more than 143 seconds. [ 817.695205][ T30] Tainted: G L syzkaller #0 [ 817.702192][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 817.714427][ T30] task:syz.4.2306 state:D stack:28792 pid:15306 tgid:15305 ppid:11121 task_flags:0x400140 flags:0x00080002 [ 817.727015][ T30] Call Trace: [ 817.730672][ T30] [ 817.733635][ T30] __schedule+0xfee/0x60e0 [ 817.739313][ T30] ? __lock_acquire+0x4a5/0x2630 [ 817.744408][ T30] ? __pfx___schedule+0x10/0x10 [ 817.749697][ T30] ? find_held_lock+0x2b/0x80 [ 817.754412][ T30] ? schedule+0x2bf/0x390 [ 817.759217][ T30] schedule+0xdd/0x390 [ 817.763327][ T30] schedule_preempt_disabled+0x13/0x30 [ 817.769946][ T30] __mutex_lock+0xc9a/0x1b90 [ 817.774606][ T30] ? __pfx___alloc_skb+0x10/0x10 [ 817.784713][ T30] ? devlink_health_report+0x681/0xb50 [ 817.790853][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 817.796022][ T30] ? devlink_recover_notify.constprop.0+0x4d7/0x670 [ 817.803316][ T30] ? devlink_recover_notify.constprop.0+0x200/0x670 [ 817.813916][ T30] ? devlink_health_report+0x681/0xb50 [ 817.821228][ T30] devlink_health_report+0x681/0xb50 [ 817.826589][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 817.833404][ T30] ? _copy_from_user+0x59/0xd0 [ 817.838562][ T30] nsim_dev_health_break_write+0x166/0x210 [ 817.844453][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 817.851275][ T30] full_proxy_write+0x135/0x1a0 [ 817.856179][ T30] vfs_write+0x2aa/0x1070 [ 817.861045][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 817.866470][ T30] ? __pfx_vfs_write+0x10/0x10 [ 817.871673][ T30] ? __fget_files+0x215/0x3d0 [ 817.876398][ T30] ? __fget_files+0x21f/0x3d0 [ 817.882503][ T30] ksys_write+0x12a/0x250 [ 817.887103][ T30] ? __pfx_ksys_write+0x10/0x10 [ 817.897034][ T30] do_syscall_64+0x106/0xf80 [ 817.902190][ T30] ? clear_bhb_loop+0x40/0x90 [ 817.906924][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 817.916516][ T30] RIP: 0033:0x7fecdd59c799 [ 817.921471][ T30] RSP: 002b:00007fecde395028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 817.930460][ T30] RAX: ffffffffffffffda RBX: 00007fecdd815fa0 RCX: 00007fecdd59c799 [ 817.938906][ T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000004 [ 817.946995][ T30] RBP: 00007fecdd632bd9 R08: 0000000000000000 R09: 0000000000000000 [ 817.955682][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 817.964219][ T30] R13: 00007fecdd816038 R14: 00007fecdd815fa0 R15: 00007ffe0d0a9f78 [ 817.972689][ T30] [ 817.975772][ T30] INFO: task syz-executor:15311 blocked for more than 144 seconds. [ 817.984648][ T30] Tainted: G L syzkaller #0 [ 817.992089][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 818.006489][ T30] task:syz-executor state:D stack:24696 pid:15311 tgid:15311 ppid:1 task_flags:0x400140 flags:0x00080002 [ 818.022237][ T30] Call Trace: [ 818.025591][ T30] [ 818.029147][ T30] __schedule+0xfee/0x60e0 [ 818.033677][ T30] ? __lock_acquire+0x4a5/0x2630 [ 818.039169][ T30] ? __pfx___schedule+0x10/0x10 [ 818.044147][ T30] ? find_held_lock+0x2b/0x80 [ 818.049302][ T30] ? schedule+0x2bf/0x390 [ 818.053678][ T30] schedule+0xdd/0x390 [ 818.060342][ T30] schedule_preempt_disabled+0x13/0x30 [ 818.065851][ T30] __mutex_lock+0xc9a/0x1b90 [ 818.070897][ T30] ? device_del+0xa0/0x9b0 [ 818.075378][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 818.080902][ T30] ? mark_held_locks+0x40/0x70 [ 818.085731][ T30] ? device_del+0xa0/0x9b0 [ 818.090784][ T30] device_del+0xa0/0x9b0 [ 818.095095][ T30] ? __pfx_ida_free+0x10/0x10 [ 818.100970][ T30] ? __pfx_device_del+0x10/0x10 [ 818.105894][ T30] ? __lock_acquire+0x4a5/0x2630 [ 818.119311][ T30] device_unregister+0x1d/0xe0 [ 818.124158][ T30] del_device_store+0x346/0x480 [ 818.129442][ T30] ? __pfx_del_device_store+0x10/0x10 [ 818.134863][ T30] ? find_held_lock+0x2b/0x80 [ 818.144986][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 818.150339][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 818.155244][ T30] ? __pfx_del_device_store+0x10/0x10 [ 818.161185][ T30] bus_attr_store+0x74/0xb0 [ 818.165742][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 818.171608][ T30] sysfs_kf_write+0xf2/0x150 [ 818.176337][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 818.182191][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 818.187686][ T30] vfs_write+0x6ac/0x1070 [ 818.193373][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 818.199725][ T30] ? __pfx_vfs_write+0x10/0x10 [ 818.204686][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 818.211049][ T30] ksys_write+0x12a/0x250 [ 818.219026][ T30] ? __pfx_ksys_write+0x10/0x10 [ 818.223956][ T30] do_syscall_64+0x106/0xf80 [ 818.235466][ T30] ? clear_bhb_loop+0x40/0x90 [ 818.242830][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.251983][ T30] RIP: 0033:0x7f562bf5cfce [ 818.267309][ T30] RSP: 002b:00007ffed53167e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 818.275913][ T30] RAX: ffffffffffffffda RBX: 0000555555ec5500 RCX: 00007f562bf5cfce [ 818.287555][ T30] RDX: 0000000000000001 RSI: 00007ffed5316870 RDI: 0000000000000005 [ 818.295659][ T30] RBP: 00007f562c03345c R08: 0000000000000000 R09: 0000000000000000 [ 818.307837][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 818.315880][ T30] R13: 00007ffed5316870 R14: 00007f562cd44620 R15: 0000000000000003 [ 818.328761][ T30] [ 818.331883][ T30] INFO: task syz.3.2309:15327 blocked for more than 144 seconds. [ 818.355478][ T30] Tainted: G L syzkaller #0 [ 818.362434][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 818.371586][ T30] task:syz.3.2309 state:D stack:29000 pid:15327 tgid:15326 ppid:5827 task_flags:0x400140 flags:0x00080002 [ 818.385892][ T30] Call Trace: [ 818.389663][ T30] [ 818.392672][ T30] __schedule+0xfee/0x60e0 [ 818.397650][ T30] ? __lock_acquire+0x4a5/0x2630 [ 818.402757][ T30] ? __pfx___schedule+0x10/0x10 [ 818.408171][ T30] ? find_held_lock+0x2b/0x80 [ 818.412883][ T30] ? schedule+0x2bf/0x390 [ 818.417749][ T30] schedule+0xdd/0x390 [ 818.425118][ T30] schedule_preempt_disabled+0x13/0x30 [ 818.431220][ T30] rwsem_down_read_slowpath+0x5dc/0xb30 [ 818.436829][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 818.443931][ T30] ? __pfx___might_resched+0x10/0x10 [ 818.449654][ T30] down_read+0xed/0x460 [ 818.453860][ T30] ? __pfx_down_read+0x10/0x10 [ 818.466467][ T30] ? mnt_get_write_access+0x1e9/0x2f0 [ 818.472329][ T30] path_openat+0xa16/0x31a0 [ 818.476976][ T30] ? __pfx_path_openat+0x10/0x10 [ 818.482476][ T30] do_file_open+0x20e/0x430 [ 818.487044][ T30] ? __pfx_do_file_open+0x10/0x10 [ 818.492785][ T30] ? alloc_fd+0x476/0x790 [ 818.498360][ T30] ? do_getname+0x191/0x390 [ 818.502917][ T30] do_sys_openat2+0x10d/0x1e0 [ 818.508237][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 818.513502][ T30] __x64_sys_openat+0x12d/0x210 [ 818.518837][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 818.527785][ T30] do_syscall_64+0x106/0xf80 [ 818.532429][ T30] ? clear_bhb_loop+0x40/0x90 [ 818.539780][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 818.545816][ T30] RIP: 0033:0x7fee0479c799 [ 818.551472][ T30] RSP: 002b:00007fee056b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 818.564435][ T30] RAX: ffffffffffffffda RBX: 00007fee04a15fa0 RCX: 00007fee0479c799 [ 818.577534][ T30] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 818.585578][ T30] RBP: 00007fee04832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 818.594321][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 818.602758][ T30] R13: 00007fee04a16038 R14: 00007fee04a15fa0 R15: 00007ffd29047cb8 [ 818.611114][ T30] [ 818.614297][ T30] [ 818.614297][ T30] Showing all locks held in the system: [ 818.629246][ T30] 1 lock held by khungtaskd/30: [ 818.634229][ T30] #0: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 818.648803][ T30] 6 locks held by kworker/u10:2/9711: [ 818.654230][ T30] #0: ffff88801c6ae948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1287/0x1920 [ 818.665889][ T30] #1: ffffc90000bb7d08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x93c/0x1920 [ 818.676261][ T30] #2: ffffffff905faff0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 818.691401][ T30] #3: ffff88803760b0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x185/0x330 [ 818.703808][ T30] #4: ffff88803760a250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x18f/0x330 [ 818.715126][ T30] #5: ffff88807ff91f78 (&sb->s_type->i_mutex_key#10/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 818.730691][ T30] 1 lock held by syz.0.1232/10870: [ 818.735960][ T30] 3 locks held by syz.4.2306/15306: [ 818.741409][ T30] #0: ffff88802a4c3438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 818.750856][ T30] #1: ffff8880202ca420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 818.760157][ T30] #2: ffff88803760a250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x681/0xb50 [ 818.771253][ T30] 5 locks held by syz-executor/15311: [ 818.776839][ T30] #0: ffff888033e62420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 818.790274][ T30] #1: ffff88807a1fa488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 818.803504][ T30] #2: ffff88802a146968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 818.813963][ T30] #3: ffffffff8fb6c188 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 818.824491][ T30] #4: ffff88803760b0e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0 [ 818.837007][ T30] 2 locks held by syz.3.2309/15327: [ 818.842342][ T30] #0: ffff8880202ca420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 818.851805][ T30] #1: ffff88807ff91f78 (&sb->s_type->i_mutex_key#18){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 818.863879][ T30] 4 locks held by syz-executor/15338: [ 818.869396][ T30] #0: ffff888033e62420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 818.878604][ T30] #1: ffff88805d795c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 818.889084][ T30] #2: ffff88802a146968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 818.901318][ T30] #3: ffffffff8fb6c188 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 818.915230][ T30] 4 locks held by syz-executor/15362: [ 818.920747][ T30] #0: ffff888033e62420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 818.929930][ T30] #1: ffff8880785b5488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 818.943301][ T30] #2: ffff88802a146968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 818.953560][ T30] #3: ffffffff8fb6c188 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 818.963983][ T30] 2 locks held by syz.1.2321/15388: [ 818.969581][ T30] #0: ffff8880202ca420 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 818.979004][ T30] #1: ffff88807ff91f78 (&sb->s_type->i_mutex_key#18){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 818.989708][ T30] 4 locks held by syz-executor/15398: [ 818.995108][ T30] #0: ffff888033e62420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 819.004955][ T30] #1: ffff888057067088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 819.016242][ T30] #2: ffff88802a146968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 819.038426][ T30] #3: ffffffff8fb6c188 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 819.049179][ T30] 4 locks held by syz-executor/15411: [ 819.054752][ T30] #0: ffff888033e62420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 819.064092][ T30] #1: ffff88807b63b488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 819.074359][ T30] #2: ffff88802a146968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 819.084802][ T30] #3: ffffffff8fb6c188 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 819.095477][ T30] 4 locks held by syz-executor/15424: [ 819.104065][ T30] #0: ffff888033e62420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 819.113971][ T30] #1: ffff88805d1fa088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 819.125220][ T30] #2: ffff88802a146968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 819.135710][ T30] #3: ffffffff8fb6c188 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 819.153209][ T30] 4 locks held by syz-executor/15436: [ 819.158944][ T30] #0: ffff888033e62420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 819.168426][ T30] #1: ffff888047317888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 819.180478][ T30] #2: ffff88802a146968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 819.190913][ T30] #3: ffffffff8fb6c188 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 819.201476][ T30] 4 locks held by syz-executor/15447: [ 819.206883][ T30] #0: ffff888033e62420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 819.216260][ T30] #1: ffff88802d1ec088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 819.227061][ T30] #2: ffff88802a146968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 819.238762][ T30] #3: ffffffff8fb6c188 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 819.253851][ T30] 4 locks held by syz-executor/15466: [ 819.263484][ T30] #0: ffff888033e62420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 819.272850][ T30] #1: ffff88803548c888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 819.282995][ T30] #2: ffff88802a146968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 819.293376][ T30] #3: ffffffff8fb6c188 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 819.304104][ T30] 4 locks held by syz-executor/15481: [ 819.309715][ T30] #0: ffff888033e62420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 819.319387][ T30] #1: ffff8880785b3888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 819.329938][ T30] #2: ffff88802a146968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 819.346522][ T30] #3: ffffffff8fb6c188 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 819.358695][ T30] 4 locks held by syz-executor/15492: [ 819.364274][ T30] #0: ffff888033e62420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 819.377671][ T30] #1: ffff888093c63088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 819.387859][ T30] #2: ffff88802a146968 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 819.398364][ T30] #3: ffffffff8fb6c188 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 819.409270][ T30] [ 819.411625][ T30] ============================================= [ 819.411625][ T30] [ 819.425050][ T30] NMI backtrace for cpu 0 [ 819.425075][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 819.425115][ T30] Tainted: [L]=SOFTLOCKUP [ 819.425126][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 819.425143][ T30] Call Trace: [ 819.425154][ T30] [ 819.425165][ T30] dump_stack_lvl+0x100/0x190 [ 819.425213][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 819.425261][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 819.425304][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 819.425354][ T30] sys_info+0x141/0x190 [ 819.425393][ T30] watchdog+0xd25/0x1050 [ 819.425432][ T30] ? __pfx_watchdog+0x10/0x10 [ 819.425461][ T30] ? __kthread_parkme+0x18c/0x230 [ 819.425498][ T30] ? kthread+0x13a/0x450 [ 819.425543][ T30] ? __pfx_watchdog+0x10/0x10 [ 819.425568][ T30] kthread+0x370/0x450 [ 819.425604][ T30] ? __pfx_kthread+0x10/0x10 [ 819.425643][ T30] ret_from_fork+0x754/0xd80 [ 819.425687][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 819.425732][ T30] ? __switch_to+0x7b4/0x1120 [ 819.425764][ T30] ? __pfx_kthread+0x10/0x10 [ 819.425803][ T30] ret_from_fork_asm+0x1a/0x30 [ 819.425852][ T30] [ 819.425863][ T30] Sending NMI from CPU 0 to CPUs 1: [ 819.556593][ C1] NMI backtrace for cpu 1 [ 819.556621][ C1] CPU: 1 UID: 0 PID: 10870 Comm: syz.0.1232 Tainted: G L syzkaller #0 PREEMPT(full) [ 819.556654][ C1] Tainted: [L]=SOFTLOCKUP [ 819.556663][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 819.556677][ C1] RIP: 0010:sha256_transform_rorx+0x42c/0x1110 [ 819.556710][ C1] Code: d2 0a 89 ce c4 43 7b f0 ea 19 03 5c 3c 28 c5 e5 73 d2 13 c4 43 7b f0 f2 0b 09 d6 45 89 df 41 31 c7 c4 63 7b f0 e1 0d 45 31 f5 ed 73 d2 11 45 21 d7 c4 43 7b f0 f2 06 c5 ed ef d3 41 01 d9 44 [ 819.556732][ C1] RSP: 0018:ffffc9000e63f0a0 EFLAGS: 00000286 [ 819.556753][ C1] RAX: 000000007a9843bd RBX: 00000000b2b56000 RCX: 00000000b001366a [ 819.556768][ C1] RDX: 000000000845dd89 RSI: 00000000b845ffeb RDI: 0000000000000080 [ 819.556783][ C1] RBP: ffffc9000e63f2c0 R08: 000000008fcf3812 R09: 0000000008717341 [ 819.556798][ C1] R10: 00000000ea7d8604 R11: 000000006be55c5f R12: 00000000b3558009 [ 819.556820][ C1] R13: 00000000fe5e4dc5 R14: 00000000c09d4fb0 R15: 00000000117d1fe2 [ 819.556835][ C1] FS: 00007f468262e6c0(0000) GS:ffff88812444c000(0000) knlGS:0000000000000000 [ 819.556858][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 819.556874][ C1] CR2: 00007f77c6147e20 CR3: 0000000078502000 CR4: 00000000003526f0 [ 819.556889][ C1] Call Trace: [ 819.556897][ C1] [ 819.556948][ C1] sha256_blocks_avx2+0x49/0x90 [ 819.556974][ C1] __sha256_update+0x188/0x1c0 [ 819.557009][ C1] crypto_sha256_update+0x23/0x30 [ 819.557034][ C1] crypto_shash_finup+0x34b/0x6b0 [ 819.557063][ C1] ima_calc_file_hash_tfm+0x299/0x350 [ 819.557096][ C1] ? __pfx_ima_calc_file_hash_tfm+0x10/0x10 [ 819.557151][ C1] ? stack_trace_save+0x8e/0xc0 [ 819.557176][ C1] ? look_up_lock_class+0x64/0x120 [ 819.557208][ C1] ? ima_alloc_tfm+0x21a/0x2e0 [ 819.557242][ C1] ? generic_fillattr+0x6c9/0x940 [ 819.557274][ C1] ima_calc_file_hash+0x18c/0x480 [ 819.557313][ C1] ima_collect_measurement+0x887/0xa40 [ 819.557350][ C1] ? ima_file_mmap+0x1c4/0x1f0 [ 819.557407][ C1] ? __pfx_ima_collect_measurement+0x10/0x10 [ 819.557448][ C1] ? lock_acquire+0x1cf/0x380 [ 819.557491][ C1] ? process_measurement+0x5ab/0x2350 [ 819.557526][ C1] ? is_bad_inode+0xd/0x40 [ 819.557563][ C1] ? xattr_resolve_name+0x27d/0x3f0 [ 819.557619][ C1] ? vfs_getxattr_alloc+0xec/0x350 [ 819.557649][ C1] ? ima_get_hash_algo+0x22d/0x400 [ 819.557681][ C1] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 819.557719][ C1] ? process_measurement+0xdfe/0x2350 [ 819.557752][ C1] process_measurement+0xdfe/0x2350 [ 819.557792][ C1] ? stack_trace_save+0x8e/0xc0 [ 819.557827][ C1] ? __pfx_process_measurement+0x10/0x10 [ 819.557862][ C1] ? __lock_acquire+0x4a5/0x2630 [ 819.557894][ C1] ? __kasan_slab_alloc+0x89/0x90 [ 819.557919][ C1] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 819.557958][ C1] ? init_file+0x95/0x480 [ 819.557987][ C1] ? alloc_empty_file+0x73/0x1c0 [ 819.558014][ C1] ? alloc_file_pseudo+0x13a/0x230 [ 819.558039][ C1] ? ksys_mmap_pgoff+0x232/0x650 [ 819.558062][ C1] ? __x64_sys_mmap+0x125/0x190 [ 819.558093][ C1] ? do_syscall_64+0x106/0xf80 [ 819.558135][ C1] ? __pfx_aa_file_perm+0x10/0x10 [ 819.558165][ C1] ima_file_mmap+0x1c4/0x1f0 [ 819.558195][ C1] ? __pfx_ima_file_mmap+0x10/0x10 [ 819.558228][ C1] security_mmap_file+0x278/0x9b0 [ 819.558252][ C1] vm_mmap_pgoff+0xec/0x470 [ 819.558279][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 819.558301][ C1] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 819.558330][ C1] ? hugetlbfs_get_inode+0x36e/0x750 [ 819.558358][ C1] ksys_mmap_pgoff+0x273/0x650 [ 819.558382][ C1] ? __x64_sys_futex+0x358/0x4d0 [ 819.558411][ C1] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 819.558434][ C1] ? xfd_validate_state+0x129/0x190 [ 819.558468][ C1] __x64_sys_mmap+0x125/0x190 [ 819.558500][ C1] do_syscall_64+0x106/0xf80 [ 819.558525][ C1] ? clear_bhb_loop+0x40/0x90 [ 819.558552][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 819.558575][ C1] RIP: 0033:0x7f468179c799 [ 819.558594][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 819.558613][ C1] RSP: 002b:00007f468262e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 819.558634][ C1] RAX: ffffffffffffffda RBX: 00007f4681a15fa0 RCX: 00007f468179c799 [ 819.558649][ C1] RDX: 0000000000000007 RSI: 0100000000000004 RDI: 00000000000469b2 [ 819.558664][ C1] RBP: 00007f4681832bd9 R08: ffffffffffffffff R09: 0000300000000000 [ 819.558680][ C1] R10: 0000000000040eb3 R11: 0000000000000246 R12: 0000000000000000 [ 819.558694][ C1] R13: 00007f4681a16038 R14: 00007f4681a15fa0 R15: 00007ffc1ae57778 [ 819.558718][ C1] [ 820.041072][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 820.047989][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 820.058721][ T30] Tainted: [L]=SOFTLOCKUP [ 820.063591][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 820.073774][ T30] Call Trace: [ 820.077077][ T30] [ 820.080034][ T30] dump_stack_lvl+0x100/0x190 [ 820.084771][ T30] vpanic+0x552/0x970 [ 820.088789][ T30] ? __pfx_vpanic+0x10/0x10 [ 820.093326][ T30] ? rcu_is_watching+0x12/0xc0 [ 820.098142][ T30] panic+0xd1/0xe0 [ 820.101900][ T30] ? __pfx_panic+0x10/0x10 [ 820.106347][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 820.112646][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 820.118976][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 820.125179][ T30] ? watchdog.cold+0x198/0x1ca [ 820.129984][ T30] ? watchdog+0xd35/0x1050 [ 820.134435][ T30] watchdog.cold+0x1a9/0x1ca [ 820.139080][ T30] ? __pfx_watchdog+0x10/0x10 [ 820.143815][ T30] ? __kthread_parkme+0x18c/0x230 [ 820.149013][ T30] ? kthread+0x13a/0x450 [ 820.153300][ T30] ? __pfx_watchdog+0x10/0x10 [ 820.158198][ T30] kthread+0x370/0x450 [ 820.162308][ T30] ? __pfx_kthread+0x10/0x10 [ 820.166956][ T30] ret_from_fork+0x754/0xd80 [ 820.171592][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 820.176764][ T30] ? __switch_to+0x7b4/0x1120 [ 820.181473][ T30] ? __pfx_kthread+0x10/0x10 [ 820.186118][ T30] ret_from_fork_asm+0x1a/0x30 [ 820.190938][ T30] [ 820.194393][ T30] Kernel Offset: disabled [ 820.198722][ T30] Rebooting in 86400 seconds..