last executing test programs: 9m48.742299043s ago: executing program 0 (id=1239): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iostats\x00', 0x80302, 0x0) sendfile$auto(r0, r0, 0x0, 0x2) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(0x0, 0x0, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) r2 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f0000000080)={0x0, 0x1ff}, 0x6, 0x0, 0x2, 0xb}, 0xfff}, 0x1f, 0x311) syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), r2) r3 = socket(0x11, 0x2, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) r4 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000140)={0x0, 0x4da}, 0x7, 0x0, 0x8, 0x800}, 0x1000}, 0xffffffff, 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), r3) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/sctp/rto_min\x00', 0x202, 0x0) sendfile$auto(r6, r6, 0x0, 0x1) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1c4, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0xf5}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x10001}, @NL802154_ATTR_SEC_DEVICE={0x1a0, 0x2e, 0x0, 0x1, [@generic="d543f87aca9139d3f5ff301f17c76b7196763d7ae116f523a5c2e3b607c317e53bf9e57d265f0a51ca0b02dc8b50534c15dc575d731bc194cefb91631079225caa3545874d2095fcf953776019d03c4e0f238e7d8aa5e2f24d6ce5dbf729ce9c34b901f1f1b95bf9c15577d98b109949377187dacc5f74a2d9a7947821872b44f6967b15339a270d75f4033dc41609b0c4bce03b22b8db90fe85cc7d88ec81de7a45b88cf91a05ae2ceae3d03be124a6a8ee7db8d442ab17f1623c156e2ce0294df0", @generic="272fad793f90625e80a23e0d7271f0aaa7515eb644988826b0424881bcdea47181e36f245688017fd694510a8817d48cac7acc7713ea0bcddedb455d60464258873006b13603f50a507289de5e63c31496fd81c788823f29ad6a22ccd7a0c60923d4bf7fa49803f8883586651855ebe959913f2d5d7ee83b3a3570e4e03707c391bc74e02419ec7035c40c20e2540c1b872fc2d70e82f0b6230f3d7531753123ce8f6875076df3e2610e0c5504024c7339af7106a22c110d993c2a6fb0a1fce84c833cc05b790b04b0916237b6ab2417e3c3", @typed={0x8, 0x39, 0x0, 0x0, @fd=r6}]}]}, 0x1c4}, 0x1, 0x0, 0x0, 0x1}, 0x44) sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000100)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x1140, r5, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_COORDINATOR={0x110c, 0x1e, 0x0, 0x1, [@nested={0x1107, 0xb0, 0x0, 0x1, [@generic="0923b803fad99b7ca8edfe0b2d121cc30c3b4922735c3cec076d8c2ca8", @nested={0x4, 0x3d}, @generic="9bfaf25387158bcd14423dba3443fe408885e9ab948438733ba59b655001a8f674f27cddddce5387af59a3281ef0447b4da96b74bfcac9ad99ce041d5dbfd7604683f9150aaa627a94208ff17b2059dc9110f79585c234d9e686ada045ee33b5399aafc19c8a0f05cf2e2a0f347b654dcae7a0a5634dc1179e7f2eb8bb6c6b0c44a9c87bb483973b32e29abb2190642f7b878ac2c0fdc99e3eb4a4c0d68bd8aba84c9525af831a1c2fc3533c14f0e8b26ade5991053f74935349fa13c03653bdca7b08a1d7e29a5156ebe75d8895770fa16a", @typed={0xc, 0x147, 0x0, 0x0, @u64}, @generic="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", @nested={0x4, 0x88}]}]}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x3}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_WPAN_PHY_NAME={0x6, 0x2, ',\x00'}, @NL802154_ATTR_SEC_ENABLED={0x5}]}, 0x1140}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000040) getsockopt$auto_SO_RCVTIMEO_OLD(r1, 0xffffffff, 0x14, 0x0, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) write$auto(0x3, 0x0, 0x7fffffff) 9m47.59245689s ago: executing program 0 (id=1245): mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) 9m45.241888112s ago: executing program 0 (id=1251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000cc0), r0) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffdbdf252e000000180001801422a6ea000200766c616e300000000000000000ce8707ced5f91773fc6fef44a9cc34d2ff63b97cb5db972c88248905b675bc9e6d19da8c5dc83a141e8fa1a9b5fdd116cf7ccb1f31947671085fc076101db8c065655ef26fb7d2c76eb0b60df88d2af67bab3e9be6efd8ba10bbaa377943a8d3660f1c596e"], 0x2c}, 0x1, 0x0, 0x0, 0x803}, 0x4c000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x1, 0x0) r2 = fsopen$auto(0x0, 0x1) r3 = openat$auto_force_wakeup_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/debug/bluetooth/hci3/force_wakeup\x00', 0x8000, 0x0) lseek$auto(r3, 0x0, 0x0) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x0) rmdir$auto(0x0) ioctl$auto_FS_IOC_SETFLAGS2(0xffffffffffffffff, 0x40086602, 0x0) select$auto(0x2, &(0x7f0000000300)={[0x3, 0xff, 0x8, 0x7, 0x100, 0x2, 0x26, 0x2, 0xfe2, 0x6, 0xa, 0x7, 0x100000001, 0xffffffff80000001, 0x102, 0x8c]}, 0x0, 0x0, 0x0) ioctl$auto_TUNSETVNETBE2(r2, 0x400454de, &(0x7f0000000040)=0x3) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r5, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) madvise$auto(0x0, 0xffffffffffff0001, 0x15) getpid() madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 9m43.766683629s ago: executing program 0 (id=1255): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x200a41, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x200a41, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2503000000080003000402000006000bc002a67b34ce8502ea", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) (async) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf2503000000080003000402000006000bc002a67b34ce8502ea", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060007000100000008000200", @ANYRES32, @ANYBLOB="0c001a"], 0x68}, 0x1, 0x0, 0x0, 0x4044080}, 0x40090) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) (async) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = bpf$auto(0x8000000, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x40, 0x0) (async) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/mem\x00', 0x40, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) (async) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1d\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"P\x8a\xbbY8@Z5`\xa2\x9aSVd\x1d\xac\xe8\x90e\x9d\x03tm\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7.\xbe\x01\x98\xd7l\x00\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfa\xf0\xd9\xc0K\x8b\xa3c\x00'/160, 0xa9) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, 0x0, 0x20000054) write$auto(0xffffffffffffffff, 0x0, 0x81) write$auto(0xffffffffffffffff, 0x0, 0x98c7) ppoll$auto(0x0, 0x5, &(0x7f00000002c0)={0x1, 0x8000000000000001}, 0x0, 0x8) mmap$auto(0x0, 0x2000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x6000000000) (async) mmap$auto(0x0, 0x2000d, 0x4, 0xeb1, 0xffffffffffffffff, 0x6000000000) shmctl$auto_SHM_LOCK(0x2, 0xb, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/disk\x00', 0xc0082, 0x0) write$auto(r2, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,D\xbf&\x9eb|\n\xee\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbb\xbb\xf9\xcdz\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x1d\x88mr\xfd\xf1\x1b;\xabt\xd1a}\x10\xab\xeb_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\x15/\xf9\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\aA\xe9(\x00\x00\x00\x00\x00N\xb5J\xc8A\xc7m\xbf\x19\xae\x9d\xcaR\x0f\xa8\xdf\xe4M\xe1>k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1bK\x00\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\xa1v\x14\xcd\x1a\xbdx\xaed\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad,\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa93\xb6XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F!*\xf9\xb3,w\"\xf2\xd0\xd1Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf\x00'/478, 0xb) (async) write$auto(r2, &(0x7f0000000340)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,D\xbf&\x9eb|\n\xee\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbb\xbb\xf9\xcdz\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x1d\x88mr\xfd\xf1\x1b;\xabt\xd1a}\x10\xab\xeb_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL\x15/\xf9\'\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\aA\xe9(\x00\x00\x00\x00\x00N\xb5J\xc8A\xc7m\xbf\x19\xae\x9d\xcaR\x0f\xa8\xdf\xe4M\xe1>k\x93\x01\xe5\xba(\x96K\xc1=d3\xe00u\"`]\xb3\x11a\x1cSn\xe7\x87\x84\x93\xe4\x90]\x86\x10\xe5\xacK\x99\xc1$\x91\x05\x00\x00\x00O\x01xc\xa8\x9a\x1bK\x00\x00\xf6\xa2\x8a\x7f4\f[BLH$6\xfb,\xd8\xd3\xd0\xa1v\x14\xcd\x1a\xbdx\xaed\x9d\\\xd0\xff\xd2Y\xc4\x9fT\xb2\xd5\r\xf1#\xd5\xf2\x9cU\xd1:+\xb63\xae\xc1\xf7\xe1\xd4\x879?\xdd\xd6\xd4\xa3\xc7\xd8 S\xfc:\xe1{\x16\\h\x9d\xbc#KEC\x1a\xf9KH`\x82e:_\x9b\xf1\xc1\x8e\xf0\xc46\x98\xd6u\x90\x18\x8f\xe8\xc3%\x8e9\xab\x7f\x0e\n\xb2\xa4\xef\x90\xb16\x04\xbc\xc9\xdc\xad,\xcc\xad}DY\x1d\x1fv\x90\x97u\xa1\xfb\x13\xa93\xb6XJ\x84\xe3\xc1)\x98\xae5q\xa5L\x87\x1aq\x1d0\xf1\xcb\xe5\xf4F!*\xf9\xb3,w\"\xf2\xd0\xd1Vj\xd0\x06\xcc\xbc\xee0\x98.\xd9dC\x8e9\xfdM\\\xc5&\\\x9b\x81\x88t\xa4\x9f\xd1P\xd2e\x9c\xf9\xd2\xaf\x00'/478, 0xb) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x4c2080, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r3 = socket(0x10, 0x2, 0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000001c0)={0x70, r5, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_FILS_KEK={0x20, 0xf2, "90888a80836826c38b98fe885fe3e1ca08387afbe77cc841122f65d1"}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x6}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x2}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x2}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x7}, @NL80211_ATTR_KEY_DATA={0x1c, 0x7, "ed204cf3fd2b0628f7e8ce0fbc527378186bcc2f0c75ee29"}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000010}, 0x814) r6 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r6, 0x0, 0x5) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x110, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_BSS_SELECT={0xd8, 0xe3, 0x0, 0x1, [@generic="bbd9e7fb0ddcd73f8b483285204dc026b94c1dbae6cf9d6d60e48ad9508dbd8ae5a0ccc31fd978a9e5b4cd57495b014d1df6bd96143e3b34cc53d42de057221af5c61e39658df059b412196e260077e9f99c54521ea942b1af27b75064fd0e5d53f3938e2d4a8d9e31c5c776f9743da93f080fa8b4aecd4885d25e2a7a24edd92589c4e2e3a101c19929fd01c907e8a72d37f3157101453727c7e20a14aa4dbb86f0d0fb1469d8e1b90cc856c7b692c05b2253156dbdddc4", @typed={0x8, 0xae, 0x0, 0x0, @fd=r6}, @nested={0x8, 0x2, 0x0, 0x1, [@typed={0x4, 0x61}]}, @generic="dc10bdb91ee54b99660a5e1f"]}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'netdevsim0\x00'}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000004}, 0x4001) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x400008000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x400008000) 9m43.28266365s ago: executing program 0 (id=1257): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x629) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2902, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) move_pages$auto(0x1, 0x20007, 0x0, 0x0, 0x0, 0x8000000000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000080)='/dev/binderfs/binder1\x00', 0x80001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev6\x00', 0xc0400, 0x0) madvise$auto(0x3, 0x8, 0x5) ioctl$auto(0x3, 0xc0e85667, 0x38) times$auto(0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000003dc0), 0x2002, 0x0) sync_file_range$auto(r0, 0xffffffff, 0xfffffffffffffffc, 0x2) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) 9m41.393901799s ago: executing program 0 (id=1262): r0 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(0xffffffffffffffff, 0x0, 0x1ff) writev$auto(0xffffffffffffffff, 0x0, 0x3) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x8000, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) shmctl$auto_IPC_SET(0x8, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x400000000, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptybc\x00', 0x121100, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000900)="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") r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) 9m26.273962195s ago: executing program 32 (id=1262): r0 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(0xffffffffffffffff, 0x0, 0x1ff) writev$auto(0xffffffffffffffff, 0x0, 0x3) fallocate$auto(0xffffffffffffffff, 0x0, 0x7, 0x4cbd5d) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x745100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000200), 0x101802, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D0\x00', 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000001140)='/dev/psaux\x00', 0x42000, 0x0) io_uring_setup$auto(0x8000, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0x0, 0x0) shmctl$auto_IPC_SET(0x8, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000580)={[0x1ff, 0x8000, 0xd, 0x1, 0x948d, 0x3, 0x10015f4da0a, 0xd, 0x7, 0x64c1, 0x8000001f, 0x400000000, 0x6d3e, 0xc, 0x2, 0x2]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xfc\x04\x00\x00)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) socket(0x2b, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptybc\x00', 0x121100, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000900)="00f8d07e4306000000142c915d07b6fc0f2f7a4381c9292576faa3580f5e9a70d2aa9f74bca62fffbeccf7a45846b9f7b1e6757ed7dd37358e1b8ea65d0ce01187f77167a295792a72a010ab3a9ef710888ce819c787772065df62d57163e4042caae86dd2786cb1e8e633b2dbc2b63ca32d188c0035f5abcf0000a26244293d354cf7669f2b48589340dccab7b08067ac3c9cfe0d4d01d967d111a42904000000971a0538be4d3ebe97edf16a2569fe2594f94bb65c17f563c5df375fd1371afe4eeb022fba9a2d003baca7373dfeffffff38fea469776d95775065331c6285d8aa83900bfaf205f1b83c837df29f1b6a74da17918515dea43a32d5b53b2520fbf19de7c3bef4b69427892348de83fdc02913b2b05ecc59091663a2c788f98cd048befd3393b62a1bb7be63429fe84b9101ef487533fdb0e05d1d8963f7b49543e2ae66174dafa2e03dcffc124b4497d8dd4973c4e45b563c1ff64053a09b749fa6fc6b5e9fbd1267a347b95ede4e22c68a14186f82b4a65d4d6535ede8e1cc1e8d38d5c8003f00006fb096ace75fac9207d1681a75add3a9faad8d98b45cc8e528a855985c1925ebd4fcd67f2fe15bfd543e5ccbc23354ea5e882f6ef28f4e4c1339787c85d8ee80b9756a1b0196a5af8094af801976eb9cb3c25b986b51198a00d05939266e9dad9e5f09051a0f20e3684cb07161b843e9d67b280fbf671d014ba2eff8ea8befb228e1b9b0f3ccd01d36e5d9674dbd307089b061e268bfefde6dffeb918ddec40f") r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0xa8, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_SCOPE={0x81, 0x4, 'nfsf\x00\xd8\xef\xe4-\x13+r\xf3\fT1Z\xa7J[\x81\a\xcf-\xdf\x90\x1f\x8f\xc8\x13e\xe2R7D\x832j\xce}\xa3V\xb7\xa1o\\\xe6\x13\xbc\f\xe3\xae\xb8~\xd3\xd2+J\'\xc3\xec\xc9\fp\xc8a\xbe\xfe`\xa7\xa9AKDd\'\xa0\x01\xf6\x13y\xe8\xca\xf4Q\x9e\x03*]\xda\x1e\x11t\xe2\xd5uw+\x93\xfc\x04l\xd3\xa6t\x86k\x80\xd9\x14s\xec\xe2H\xc0=(\xf99\x8ac\xa7\x85\x99\x87'}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x85}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2}]}, 0xa8}}, 0x4000) 3m52.977195379s ago: executing program 4 (id=1919): r0 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000000)={{0xd, 0x8, 0x9ab, 0x200a}, "fffff46f39edd515fbc3e6cb015b08a008001e856969a5c312fb9b3661a01cd900000000000000008000", 0xf9d}) mmap$auto(0x0, 0xe983, 0xa4cd, 0x20000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x600, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x42080, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x6, 0x40008) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x99a7, 0xc) ioctl$auto_UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0x9, 0x1, 0x3, 0x7f}, "477e73797f937be5687680ddec1c45cf8a758fb87cc9fa9b3733fb3092ce744b2c65926cd378e62ea00a888d429187a459c01b4745fe9ce1c02246996a5d875e736477c7708d06000000000000005d51", 0x1000008}) 3m49.885620428s ago: executing program 4 (id=1921): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/adsp1\x00', 0x40440, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) readv$auto(r0, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) 3m48.762967421s ago: executing program 4 (id=1924): r0 = ioctl$auto_TUNSETVNETLE2(0xffffffffffffffff, 0x400454dc, &(0x7f0000000040)=0x81) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000200), 0xffffffffffffffff) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f0000000240)=0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0xa0, r1, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x2}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_FD={0x8, 0x17, r2}, @L2TP_ATTR_STATS={0x54, 0x1e, 0x0, 0x1, [@nested={0x2c, 0xa3, 0x0, 0x1, [@typed={0xc, 0x8d, 0x0, 0x0, @binary="06bff296c309f345"}, @nested={0x4, 0x3b}, @typed={0x14, 0xc6, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0x124}]}, @nested={0x24, 0x43, 0x0, 0x1, [@generic="c43eca70511903d32684a9da4beaeafb89801135f8ebd9149c17c6", @generic="7bf3cbc4ca"]}]}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0xfffff4c0}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x1}, @L2TP_ATTR_USING_IPSEC={0x5, 0x15, 0xd7}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x41}, 0x8041) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x24, 0x0, 0x8) madvise$auto(0x0, 0x2003ec, 0x14) sysfs$auto(0x2, 0x43, 0x0) r3 = fsopen$auto(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r4) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="34000000bdf5ed2fd35ecbd901449e2bf0e8e35ea73de98a6eab3d8f50b880493e52821fc400f0d5425f41c6e3369eb14735f3309f8b0994406ad6f148f563207cee", @ANYRES16=r5, @ANYBLOB="010026bd7000f7dbdf2503000000180001801400020073797a5f74756e0000000000000000000500020009000000"], 0x34}, 0x1, 0x0, 0x0, 0x40008c1}, 0x2000c840) fsconfig$auto_JFFS2_COMPR_MODE_FORCELZO(r3, 0x4, &(0x7f0000000000)='bridge_slave_0\x00', &(0x7f0000000100), 0x4) mmap$auto(0x0, 0x8000000000000001, 0xdf, 0xeb1, 0x401, 0x8000) r6 = openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000140), 0x189000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r7 = socket(0xa, 0x3, 0x3a) readlinkat$auto(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x80) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setrlimit$auto(0x1000000007, 0x0) bpf$auto(0x0, &(0x7f0000000380)=@task_fd_query={0x12, 0x3, 0x4, 0xae30, 0x8, 0xfff, 0xffffffffffffffff, 0x2e, 0x7ff}, 0x6f4) close_range$auto(0x2, r7, 0x0) readv$auto(r6, &(0x7f00000018c0)={0x0, 0x8000000000001}, 0x2) 3m45.404805965s ago: executing program 4 (id=1930): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) write$auto(0x3, 0x0, 0x0) getsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x5, 0x9, &(0x7f0000000180)='DU)s\x92/}\xd1\\\x18\x81\xdfu\xf1\xef\x88\x94\x8a$\xd8\xa6\"\xfe\f\xc3\x05h\x94A\b\x14\xda&%C\x05\xc8rIg\xf5l3\xadj\xc3_v\xdd~?\xe3\x94\xd9\xb4!\xfdmJ\x1e\x98\x13\xb2\xfd\x9f\xa7\f\x04P\xda\xa2}\x0f!\\\'61\xda\xcfH\x93Qw\xae\\8t\r\xa0\x9a\xc8\xa5{\xee\xe7\x02\xd6o#\xf3\x96\xad\xf1\x04\xe1\x19\x8f\xa24\xbe-z\xbd\xc6', 0x0) mmap$auto(0x0, 0x400006, 0x6, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0xc0400, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x20540, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) write$auto_ocfs2_control_fops_stack_user(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) read$auto_rfcomm_sock_debugfs_fops_(r3, &(0x7f0000000240)=""/64, 0x40) 3m41.541606693s ago: executing program 4 (id=1937): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x103a42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x3, 0x3b83, 0x38) bpf$auto_BPF_LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)=@iter_create={0xffffffffffffffff, 0x2c}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80000, 0x0) poll$auto(&(0x7f0000000180)={r1, 0xfff7, 0x9816}, 0x7f, 0x9) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$auto_VHOST_SET_LOG_FD2(r1, 0x4004af07, &(0x7f00000003c0)) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r4) ioctl$auto_KVM_GET_MSRS(r3, 0xc008ae88, &(0x7f0000000080)={0x2}) mmap$auto(0x0, 0x9, 0x40, 0x8000000008012, 0x3, 0x8000) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x40000105, 0x400, 0x2}]}) r5 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000880)='/dev/input/event2\x00', 0x50100, 0x0) ioctl$auto_EVIOCGMASK(r5, 0x80104592, &(0x7f0000000000)={0x2000, 0x800004, 0x9}) io_uring_setup$auto(0x6, 0x0) 3m38.205839067s ago: executing program 4 (id=1939): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r1, &(0x7f0000000100)='1', 0x1) ioctl$auto(r1, 0x64c5, r0) msgctl$auto(0x0, 0x0, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000000140)=@token_create={0xa, r0}, 0x2) r4 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) bpf$auto(0x0, &(0x7f0000001880)=@bpf_attr_4={0xb, 0xffffffffffffffff, 0x5, r4}, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r5) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r6, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10}]}, 0x20}}, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto(r3, 0x4020565b, r2) 3m22.978555361s ago: executing program 33 (id=1939): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x0, 0x0) r1 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r1, &(0x7f0000000100)='1', 0x1) ioctl$auto(r1, 0x64c5, r0) msgctl$auto(0x0, 0x0, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/controlC2\x00', 0x80, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) bpf$auto_BPF_MAP_DELETE_BATCH(0x1b, &(0x7f0000000140)=@token_create={0xa, r0}, 0x2) r4 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r4, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) bpf$auto(0x0, &(0x7f0000001880)=@bpf_attr_4={0xb, 0xffffffffffffffff, 0x5, r4}, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r5) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, r6, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10}]}, 0x20}}, 0x0) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) ioctl$auto(r3, 0x4020565b, r2) 12.827866002s ago: executing program 3 (id=2299): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x9, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 12.509291265s ago: executing program 1 (id=2301): fanotify_init$auto(0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.reset_stats\x00', 0xa001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = io_uring_setup$auto(0x59, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/machinecheck/machinecheck0/bank6\x00', 0x2101, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000000040)="72f3", 0x2) readv$auto(0xffffffffffffffff, 0x0, 0x927) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000048c0)='/dev/dsp1\x00', 0x20000, 0x0) select$auto(0x4, 0x0, &(0x7f0000000100)={[0x9, 0x7, 0xfffffff7fffffff9, 0x9, 0x800, 0xfffffffffffffffa, 0x7, 0x2, 0xd, 0x10003, 0x1ff, 0xd, 0x3, 0x200000201, 0x7, 0x6]}, 0x0, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r0, 0xc038563c, r4) 11.147416951s ago: executing program 3 (id=2303): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/rpc/auth.unix.ip/flush\x00', 0x40d81, 0x0) mmap$auto(0x0, 0x20009, 0x2, 0x40000000000eb1, 0xffffffffffffffff, 0x400008000) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x400000b1, 0x402}]}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x88282, 0x0) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) read$auto(r4, 0x0, 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x5e8042, 0x0) lseek$auto(0xffffffffffffffff, 0x0, 0x3) r5 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), r1) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x5}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x1) write$auto(0x3, 0x0, 0xfdef) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) r6 = openat$auto_userfaultfd_dev_fops_userfaultfd(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000080)=@test={r6, 0x5, 0x8, 0x10, 0x9, 0x6, 0x7fff, 0x3, 0x0, 0x7fffffff, 0xaa8, 0x9, 0xfff, 0x2, 0x4}, 0xffffffc0) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000040), 0x0) 10.937723838s ago: executing program 2 (id=2305): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x9, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 9.607709869s ago: executing program 3 (id=2307): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r1}, 0x18) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty1\x00', 0xa0000, 0x0) ioctl$auto(r2, 0x4b3a, r2) 9.269102859s ago: executing program 5 (id=2308): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x882, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a792, 0x0) write$auto(0x3, 0x0, 0x0) getsockopt$auto_SO_KEEPALIVE(0xffffffffffffffff, 0x5, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x400006, 0x6, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, 0x0) close_range$auto(0x2, 0x8, 0x0) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xc0400, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptycf\x00', 0x20540, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x9}, 0x8) write$auto_ocfs2_control_fops_stack_user(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) read$auto_rfcomm_sock_debugfs_fops_(r3, &(0x7f0000000240)=""/64, 0x40) 8.710240364s ago: executing program 1 (id=2309): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x8030ae7c, r2) statmount$auto(0x0, &(0x7f0000000180)={0x0, 0x1, 0x9, 0x7, 0x38, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x2, 0x6, 0x4, 0xb2, 0x9, 0x0, 0xfffd, 0x80, 0x7, 0x40000, 0x7, 0x2000, 0x200, 0x0, 0x81, 0x0, 0x7, 0x0, 0x0, 0x0, [0x1, 0x6, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5]}, 0x202, 0xd) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x5}, 0x7, 0x0) 8.480049488s ago: executing program 2 (id=2310): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x9, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 8.388734249s ago: executing program 3 (id=2311): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x2000000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr9\x00', 0x323a03, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x82202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x20, 0xc, 0x4, 0x6, 0x101, 0x8000004, &(0x7f0000001180)}) mmap$auto(0xffffffdfffffffff, 0xe986, 0x3, 0xeb1, r0, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x200001) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x440280, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 8.377036282s ago: executing program 5 (id=2312): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x9, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 7.227497615s ago: executing program 5 (id=2313): r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24008895}, 0x20000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='l\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) getsockopt$auto_SO_RCVMARK(r1, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x400002) mlockall$auto(0x7) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) write$auto(0x3, 0x0, 0x1) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000000), r0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0xffffffffffffffff, &(0x7f0000000140)='\x04U\x8b\r\xd5*.C&\x8d\xf9\x00\x17K#\xfa\xb5]o\xc6.<\xb3K\x00\x8c\x91\xc4&\xc0\x00\xd4\xef_S\xc8\xea\xfeCJ\x82,\xf9\xd5JTy\xb8\x84\xbf\xd5\x97@\xf8\'\xbe\x16\x92\xc1\xa5\x88\x8d\x1d\xad\xf7\xc4\xb6\xe8\\\xd0\x99\xfeU\xf6\x9e\x86\xa3\x1f\xc0\x84G\x04W\xa5\x91\" ^]q\x06EM\x95\xfd\b\xa1te\xc5P\xe5\xf1u\x19\xc6\xd5;p\x0e\xf7$\x1d\x89\xd9\x8bq\x17\x9d\xe4\x0e^\xaf\xddGf\xfcJ\x9d@`]{\bO&\xa9\xc1\x9d+\xa0m\x7f\xb8Pz\x91\xd2\x0e\xf1\xc7\xba!ml\x9e\x8cYB\xad\xe0\xcf\xff=}\xa9\xba\xcdq\x1f\x880\xeb\x1bA\xb3\'\xa5\x90FC\x9f\x03', 0x6) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)={0xd4, 0x4, "0ded1758ae2b64478092a89219e81408e4ce9bd9f470f187f0a58ecfc5c1b4ff88b12f9908ac0dc31c7a92385c3111da3bb7044b0866b76fd0ae139668babe21eae6d7ee1a38f95e5e2fc76f4a73799ec028c5756ed54a96549dd60251bc121ec8d53e3678e04e915d06fb55df2cd322c4fed8109a0427f8b8c1e08cc3df7706b8d0a89a2820275b29a4be038ed121177c3a16aa9f048e30a360cc04fe66ba2e7cf0a9af743ee9aaf3b80c3d4308b31549bedb960775824fda4e69fcf6cbcf232d6c509baebfb80aea23f16b4806de8e8b06fddb"}, 0x7) 7.102764864s ago: executing program 2 (id=2314): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x2000000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr9\x00', 0x323a03, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x82202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x20, 0xc, 0x4, 0x6, 0x101, 0x8000004, &(0x7f0000001180)}) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x200001) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x440280, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00=', @ANYRES16=r4, @ANYBLOB="010025bd7000fedbdf255f00000008004000010100000500180101000000"], 0x24}}, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x2, 0x8, 0xa00) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x8000, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x88, 0x1, 0x80000000, 0x10000100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x10000052, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) 6.894965078s ago: executing program 1 (id=2315): fanotify_init$auto(0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/blkio.reset_stats\x00', 0xa001, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/fib_multipath_hash_fields\x00', 0x202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x59, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r1, 0xc038563c, r0) 6.184669493s ago: executing program 5 (id=2316): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card1/cable#1\x00', 0xc0f02, 0x0) mmap$auto(0x7, 0x7, 0xdf, 0x32, 0x69a5, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/zswap/parameters/compressor\x00', 0xc0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r1, 0x0, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) epoll_create$auto(0x4) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) sendfile$auto(r2, r2, 0x0, 0x1) mmap$auto(0x8000, 0x20009, 0x4000000000df, 0x8010, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = io_uring_setup$auto(0x6, 0x0) r4 = io_uring_setup$auto(0xe, &(0x7f0000000240)={0xabb0, 0x5, 0xbc, 0x9, 0x5b77b906, 0x3, 0xffffffffffffffff, [0x1, 0xe5d, 0x6], {0x6, 0xfb7a, 0x9, 0x80005, 0x5, 0x6, 0x9, 0x80000001, 0xffff}, {0x2, 0x9, 0x7, 0x2, 0x0, 0xffff13a7, 0x80000006, 0x44a0, 0x1001}}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') r5 = socket(0x1d, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0xf, 0x0, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x80000001, 0x6, 0x5c}) sendfile$auto(r3, r4, &(0x7f0000000180)=0x4, 0xfe) sendmmsg$auto(r5, &(0x7f0000000140)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x7}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x4, 0x100) unshare$auto(0x40000080) unshare$auto(0x40000080) clone$auto(0x4020000000008ffe, 0xfffffffffffff001, 0xffffffffffffffff, 0xfffffffffffffffc, 0x3) creat$auto(&(0x7f0000000040)='./file0\x00', 0x7) r6 = epoll_create$auto(0x3e) r7 = socket(0x1, 0x3, 0x0) epoll_ctl$auto(r6, 0x1, r7, 0x0) 6.16144794s ago: executing program 3 (id=2317): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, 0x0, 0x608002, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x20082, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r2, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r2) read$auto(r2, &(0x7f0000000000)='\x00', 0x91e2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000002980), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f00000029c0)={0x1c, r4, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x400c0c4) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x44, r4, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x8}, @NBD_ATTR_BACKEND_IDENTIFIER={0xc, 0xa, 'nl80211\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x6}]}, 0x44}}, 0x20000000) r5 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xea6) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000300)=@task_fd_query={r5, 0xffffffffffffffff, 0x6, 0xa, 0x5, 0x5, 0xffffffffffffffff, 0x3, 0xffff}, 0x19) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)={0x224, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SOCKETS={0x1d4, 0x7, 0x0, 0x1, [@nested={0x1c, 0x48, 0x0, 0x1, [@nested={0x4, 0x101}, @nested={0x4, 0x143}, @typed={0x8, 0x81, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x19, 0x0, 0x0, @pid=r5}]}, @generic="d03fc8fdb0d0aad6e4827bfc1fc3af4705d464e4a4b038742d248f7518f881b432546ba87c033250dc4fd33765ba44d27da4576fa2ed970c1a5b2c757803de8a280bcf1c5e3e707fe8d45003501c512895ef83bc", @generic="a72c053aa98cec6c93e676ac959995622f01aca05c4afbf91ea3d151fd9c4f632ec6cc4fac94c897a650cad76fedea53b0283be7ee5c4271b7830e21cf2afc57f665a316fda5fc2429994e8db45c0e64ba8c31cc81e7510b70ecb174999ce65064b9", @nested={0xc, 0xbf, 0x0, 0x1, [@typed={0x8, 0x9e, 0x0, 0x0, @ipv4=@multicast2}]}, @nested={0x25, 0x5, 0x0, 0x1, [@generic="6b9747ef279acfb7ff82b6ec2f0f92f07940ba737de362cc308df1c26199d85890"]}, @generic="742b9343af578822c11234db642969c0e8349f56652b8a1a755a7a296066c0346f7ae169971e8456d8736560067084c00d94d89a4a29f2881d830108216d1c586968f180f0d1c0d1dc8828b450970a7892cfe3f8c91314d21a7694797817f1bfc82dba668e5b4b624286118897ce64f42e70139e4081b0415b9a6d870ee6414527333ac70c6ff80a609c1b6a3128b9a36b925857fe1644c556f5", @nested={0x4, 0x147}, @generic="20d7c058d4ecc7438505795193f31641422779f99081d2b0", @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3f489d7d}]}, 0x224}, 0x1, 0x0, 0x0, 0x4081}, 0x4004) getsockopt$auto(r1, 0x0, 0x22, 0x0, 0x0) 5.358619693s ago: executing program 2 (id=2318): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x14fa02, 0x0) mmap$auto(0x0, 0x810004, 0x400000000ffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x5, 0xfff, 0x44eb2, 0x10006, 0x300000000000) mprotect$auto(0x0, 0x806121, 0x6) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x11, 0x80003, 0x300) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ram5\x00', 0x1eba02, 0x0) setresuid$auto(0x0, 0x0, 0x0) ioctl$auto_BLKALIGNOFF(r0, 0x127a, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mtd/mtd0/bitflip_threshold\x00', 0x2062, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002680), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_DEL_DAEMON(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x24, r4, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x10, 0x3, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}]}, 0x24}, 0x1, 0x0, 0xffff000000000000, 0x40014}, 0x0) r5 = syz_clone(0x20000000, &(0x7f00000001c0), 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)="2918758169251555183442853a27ba37074b62633f338d1a7b74c6ff4c91676d9a5e0078ab1db0f30dc404f23fd5820a80ed88704e31ac2c5f3169cb36f22141f45b35a2e04fe71bc918ec46671bf5d28d8d26ce4970c811a8b669c7011c3e9ff8b2109640c07450f5b7b624fde03bb975adc229120a3b8750efcf8a90044854f04b55f429540f9fc390d24df293299b9c4395aed65212fdd9a1597ffcfaf9b3008f77bcc5a593486eb61127560aa974af592514e14d7d") r6 = waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000003c0)={@_si_pad}, 0x1ecc, &(0x7f0000000440)={{0xffffffff, 0x2}, {0x5, 0x19}, 0x9, 0x80000000, 0x4, 0x5, 0x8000000000000001, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x1000, 0x0, 0x4}) set_tid_address$auto(&(0x7f0000000500)=0x5) r7 = getpgid$auto(0x0) r8 = socket(0x2, 0x801, 0x106) setsockopt$auto(r8, 0x80, 0x12, 0x0, 0x0) sendmsg$auto_IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000ac0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000540)=ANY=[@ANYBLOB="3405", @ANYBLOB="000226bd7000fbdbdf25020000000800050007000000080006000300000008000400050000001001028075ff83876574dcf7444c53b88992e69a471bfa58053dc94ad66d0953fb1b9cb401c147df5f31671dfc0f9284424129a2c5ce70c649ade9aae6d814619bf71bbd80efe680cd9bc3e7aa59478b4e3e4d0ce05691deebfebdb666888d6f5549d48d92470028f2ccb239e0e683f1107459a18b09a092829949129087a8c782cb94fd36de9315f583a56ceee0e6023fa204fdb92ada8640c18311479406aa31ba39687f786747f4eaef95", @ANYRES32=0x0, @ANYBLOB="19e833e93fdf0b102a18ee6b8436634483ed5729eb26e2267dcf5d3a2eaf51db79c25d370c37cf662d480e08f268f1743cd215589548d9cb71", @ANYRES32=r5, @ANYBLOB="1800fd80040086807290395bf5dd39680400b5800400098021011a800400", @ANYRES32=r6, @ANYRES32=0x0, @ANYBLOB="490f786928777dc08e0861d26a194926ce9dc2c2fcb0dd40666bd041f1c1ee6c8800c408008000", @ANYBLOB="0800e300", @ANYRES32=r7, @ANYBLOB="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"], 0x534}, 0x1, 0x0, 0x0, 0x28014044}, 0x0) r9 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x8203, 0x0) ioctl$auto(r9, 0x80046f45, 0x38) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x7f, 0xdf, 0x9b72, 0x2, 0x8000) r10 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r10, &(0x7f0000000100)="0a1b9a3c3e3e006e163bb154d788", 0xe) 5.310898342s ago: executing program 1 (id=2319): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x2000000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr9\x00', 0x323a03, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x0, 0x13, 0xffffffffffffffff, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000380)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x800, 0x0) ioctl$auto(r3, 0x90006441, r1) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r4) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xbff, 0x2c, 0x2c, 0x3, 0xffffffffffffffff}) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, 0x0, 0xc800) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r6, &(0x7f0000000040)="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", 0x2f8) r7 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/cards\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r7, &(0x7f00000000c0)=""/147, 0x93) mmap$auto(0x0, 0x8, 0x2, 0x7fffffff, 0xffffffffffffffff, 0x10c) 5.013845807s ago: executing program 3 (id=2320): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x2000000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr9\x00', 0x101000, 0x0) mmap$auto(0x0, 0x4020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x82202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x5) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4/hci4:201\x00', 0x40, 0x0) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) capget$auto(0x0, 0xfffffffffffffffe) unshare$auto(0x40000080) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.0/remove\x00', 0xb01, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'netdevsim0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'pimreg1\x00'}) sendmsg$auto_ETHTOOL_MSG_TSCONFIG_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4004000) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000240)={0xffffffffffffffff, 0x7ff}) mmap$auto(0x0, 0x400008, 0xdf, 0x14, 0x2, 0x8000) io_uring_setup$auto(0x2, &(0x7f0000000180)={0x5, 0x4, 0x8ca4, 0xde, 0x7ff, 0x3, r0, [0x8001, 0x2, 0xf], {0x5, 0x5, 0x8000, 0x0, 0xfff, 0x8, 0x3, 0x8, 0x369d4eb3}, {0x8bd, 0x3, 0x0, 0x9, 0x8, 0xfffffff7, 0x800, 0x1ff, 0x1}}) r1 = socket(0x21, 0x1, 0x109) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x5, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D2\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 2.746169689s ago: executing program 2 (id=2321): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)="205c2020207e0dc0023af10e9bfa1babfa203053ca9a20370a", 0x19) 2.49551303s ago: executing program 1 (id=2322): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) mmap$auto(0x9, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) 2.260563857s ago: executing program 2 (id=2323): unshare$auto(0x8000400) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x2) socket(0x2b, 0x1, 0x0) r1 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000680)=@bpf_attr_4={0x1e, r1, 0x24000000, r1}, 0x210) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4000002, 0xfffffffffffffe01, 0x8051, 0x3, 0x0) socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, &(0x7f00000001c0)="624d1bfe595046ab5c98199adf260600de16baef6176e6021e1dce210500e8fdffff", 0x22) ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f00000000c0)={0x6, r2}) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) ioctl$auto_SG_GET_COMMAND_Q2(r3, 0x2270, &(0x7f0000000340)="a4cc830c54d96f06b018345b75739d9553f344dbb42656632df7e04eed3faa7e66d79a701b5760524c0ec8048861c02ebaf8a926e0c9a28be09ac62436d0378e4c460bc575dfc87963138e04c02a60bee2049df10cb431a5f642bf8ad6e0434ac307d045b3b420adc1badb094ba61811b2f2607c75f091f004a03f1c44c3138ef613a37f9f15ce9c759cec47f5227e54ab36ecff12e72b93f27ceb28da967908b8d005227d23") prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) unshare$auto(0x8000400) mount$auto(0x0, 0xfffffffffffffffe, 0x0, 0x80, 0xfffffffffffffffe) write$auto(r4, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d6) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x802, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/virtual/block/ram13/ro\x00', 0x80404, 0x0) read$auto(r5, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.8/usb26/descriptors\x00', 0x9) 940.209456ms ago: executing program 5 (id=2324): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) eventfd$auto(0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/suspend_stats/success\x00', 0x103200, 0x0) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x16, 0x3, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd15/queue/scheduler\x00', 0x103a42, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) r1 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_thresh\x00', 0x40002, 0x0) r2 = pipe$auto(0x0) splice$auto(r0, 0x0, r0, 0x0, 0x80000001, 0xa) ioctl$auto(r1, 0x40, r2) timer_create$auto(0x0, 0x0, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = prctl$auto_PR_SET_SECCOMP(0x16, 0xfbfa, 0x0, 0x3, 0x2) close_range$auto(r4, 0x8, 0x0) socket(0xa, 0x5, 0x84) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages\x00', 0xe8202, 0x0) sendfile$auto(r5, r5, 0x0, 0xcd) mmap$auto(0x1, 0x2020006, 0x3, 0xeb1, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) mmap$auto(0x0, 0x10000002020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_register$auto(0x2, 0x11, 0x0, 0x83) 247.408795ms ago: executing program 1 (id=2325): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x1cb602, 0x0) mmap$auto(0x2000000000000, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xa, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr9\x00', 0x323a03, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/037/001\x00', 0x82202, 0x0) ioctl$auto_USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000000)={0x20, 0xc, 0x4, 0x6, 0x101, 0x8000004, &(0x7f0000001180)}) mmap$auto(0xffffffdfffffffff, 0xe986, 0x3, 0xeb1, r0, 0x8000) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x200001) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x440280, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) r2 = socketcall$auto(0x8000, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r2) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) sendmsg$auto_NL80211_CMD_GET_PROTOCOL_FEATURES(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 0s ago: executing program 5 (id=2326): mmap$auto(0x0, 0xb9f, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = io_uring_setup$auto(0x5, 0x0) close_range$auto(0x2, r2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6d) listen$auto(0x3, 0x81) r3 = socket(0x2b, 0x1, 0x0) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x24, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) poll$auto(&(0x7f0000000080)={0x3, 0x1, 0xa}, 0x5, 0x108) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_KEY_DATA={0xc, 0x7, "e840c652882181dc"}, @NL80211_ATTR_WIPHY_NAME={0x24, 0x2, '/proc/sys/fs/binfmt_misc/status\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0xc000) close_range$auto(0x2, 0x8, 0x0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) preadv$auto(r1, &(0x7f0000000280)={&(0x7f0000000240), 0xee5}, 0x8, 0x3, 0x0) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) memfd_create$auto(0x0, 0xd) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) write$auto(0x3, 0x0, 0xffd8) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) ioctl$auto_SNAPSHOT_SET_SWAP_AREA(r4, 0x400c330d, &(0x7f0000000140)={0x6, 0x8000}) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ramdisk_pages/ram15\x00', 0x1005, 0x0) kernel console output (not intermixed with test programs): 2b:00007fb295bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 912.254577][T14836] RAX: ffffffffffffffda RBX: 00007fb295015fa0 RCX: 00007fb294d9c799 [ 912.254594][T14836] RDX: 00002000000004c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 912.254610][T14836] RBP: 00007fb294e32bd9 R08: 00002000000001c0 R09: 0000000000000000 [ 912.254626][T14836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 912.254640][T14836] R13: 00007fb295016038 R14: 00007fb295015fa0 R15: 00007fff890484d8 [ 912.254671][T14836] [ 918.697653][T14873] nbd: must specify at least one socket [ 921.713385][T14893] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input18 [ 922.923912][T14903] FAULT_INJECTION: forcing a failure. [ 922.923912][T14903] name failslab, interval 1, probability 0, space 0, times 0 [ 923.167168][T14903] CPU: 0 UID: 0 PID: 14903 Comm: syz.4.1919 Tainted: G L syzkaller #0 PREEMPT(full) [ 923.167209][T14903] Tainted: [L]=SOFTLOCKUP [ 923.167219][T14903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.167233][T14903] Call Trace: [ 923.167242][T14903] [ 923.167251][T14903] dump_stack_lvl+0x100/0x190 [ 923.167294][T14903] should_fail_ex.cold+0x5/0xa [ 923.167323][T14903] should_failslab+0xc2/0x120 [ 923.167349][T14903] __kmalloc_cache_noprof+0x7a/0x6f0 [ 923.167389][T14903] ? assoc_array_insert+0x10b/0x32c0 [ 923.167429][T14903] assoc_array_insert+0x10b/0x32c0 [ 923.167462][T14903] ? __mutex_lock+0x26a/0x1b90 [ 923.167495][T14903] ? key_link+0x2bb/0x390 [ 923.167609][T14903] ? __pfx_assoc_array_insert+0x10/0x10 [ 923.167641][T14903] ? __pfx___might_resched+0x10/0x10 [ 923.167684][T14903] ? down_write+0x146/0x1f0 [ 923.167722][T14903] __key_link_begin+0xf5/0x260 [ 923.167754][T14903] key_link+0x103/0x390 [ 923.167782][T14903] ? __up_read+0x2c5/0x700 [ 923.167819][T14903] ? __pfx_key_link+0x10/0x10 [ 923.167847][T14903] ? bpf_lsm_key_permission+0x9/0x10 [ 923.167875][T14903] ? key_task_permission+0x2c7/0x3c0 [ 923.167916][T14903] keyctl_get_persistent+0x5e2/0x8b0 [ 923.167947][T14903] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 923.167979][T14903] ? __x64_sys_futex+0x34f/0x4d0 [ 923.168010][T14903] ? __x64_sys_futex+0x358/0x4d0 [ 923.168045][T14903] ? xfd_validate_state+0x129/0x190 [ 923.168088][T14903] __do_sys_keyctl+0x3b2/0x5a0 [ 923.168126][T14903] do_syscall_64+0x106/0xf80 [ 923.168157][T14903] ? clear_bhb_loop+0x40/0x90 [ 923.168188][T14903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.168220][T14903] RIP: 0033:0x7f75fff9c799 [ 923.168242][T14903] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 923.168267][T14903] RSP: 002b:00007f75fe1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 923.168291][T14903] RAX: ffffffffffffffda RBX: 00007f7600215fa0 RCX: 00007f75fff9c799 [ 923.168308][T14903] RDX: 7fffffffffffffff RSI: 000000000000ee00 RDI: 0000000000000016 [ 923.168342][T14903] RBP: 00007f7600032bd9 R08: 000000000000000c R09: 0000000000000000 [ 923.168358][T14903] R10: 00000000000099a7 R11: 0000000000000246 R12: 0000000000000000 [ 923.168379][T14903] R13: 00007f7600216038 R14: 00007f7600215fa0 R15: 00007fff9b22fd58 [ 923.168412][T14903] [ 924.806833][T14917] futex_wake_op: syz.3.1922 tries to shift op by -2048; fix this program [ 924.954622][T14917] futex_wake_op: syz.3.1922 tries to shift op by -2048; fix this program [ 925.477212][T14919] nbd: must specify at least one socket [ 927.963993][T14945] FAULT_INJECTION: forcing a failure. [ 927.963993][T14945] name failslab, interval 1, probability 0, space 0, times 0 [ 928.148902][T14945] CPU: 0 UID: 0 PID: 14945 Comm: syz.2.1928 Tainted: G L syzkaller #0 PREEMPT(full) [ 928.148952][T14945] Tainted: [L]=SOFTLOCKUP [ 928.148961][T14945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 928.148977][T14945] Call Trace: [ 928.148985][T14945] [ 928.148995][T14945] dump_stack_lvl+0x100/0x190 [ 928.149037][T14945] should_fail_ex.cold+0x5/0xa [ 928.149065][T14945] ? tomoyo_realpath_from_path+0xb6/0x690 [ 928.149095][T14945] should_failslab+0xc2/0x120 [ 928.149121][T14945] __kmalloc_noprof+0xe0/0x850 [ 928.149163][T14945] tomoyo_realpath_from_path+0xb6/0x690 [ 928.149199][T14945] tomoyo_check_open_permission+0x2af/0x3c0 [ 928.149241][T14945] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 928.149309][T14945] ? do_raw_spin_lock+0x128/0x260 [ 928.149348][T14945] ? path_get+0x61/0x80 [ 928.149377][T14945] tomoyo_file_open+0x6b/0x90 [ 928.149410][T14945] security_file_open+0xb5/0x1e0 [ 928.149437][T14945] do_dentry_open+0x5aa/0x1660 [ 928.149463][T14945] ? security_inode_permission+0xbf/0x250 [ 928.149507][T14945] vfs_open+0x82/0x3f0 [ 928.149541][T14945] path_openat+0x208c/0x31a0 [ 928.149576][T14945] ? __pfx_path_openat+0x10/0x10 [ 928.149612][T14945] do_file_open+0x20e/0x430 [ 928.149638][T14945] ? __pfx_do_file_open+0x10/0x10 [ 928.149684][T14945] ? alloc_fd+0x476/0x790 [ 928.149711][T14945] ? do_getname+0x191/0x390 [ 928.149744][T14945] do_sys_openat2+0x10d/0x1e0 [ 928.149776][T14945] ? __pfx_do_sys_openat2+0x10/0x10 [ 928.149813][T14945] ? __sys_sendmsg+0x18f/0x220 [ 928.149850][T14945] __x64_sys_openat+0x12d/0x210 [ 928.149883][T14945] ? __pfx___x64_sys_openat+0x10/0x10 [ 928.149938][T14945] do_syscall_64+0x106/0xf80 [ 928.149967][T14945] ? clear_bhb_loop+0x40/0x90 [ 928.149998][T14945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.150024][T14945] RIP: 0033:0x7faa2d39c799 [ 928.150044][T14945] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 928.150069][T14945] RSP: 002b:00007faa2e25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 928.150093][T14945] RAX: ffffffffffffffda RBX: 00007faa2d615fa0 RCX: 00007faa2d39c799 [ 928.150110][T14945] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 928.150127][T14945] RBP: 00007faa2d432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 928.150142][T14945] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.150158][T14945] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 928.150190][T14945] [ 928.677028][T14945] ERROR: Out of memory at tomoyo_realpath_from_path. [ 931.746873][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.753361][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.794847][T14969] FAULT_INJECTION: forcing a failure. [ 932.794847][T14969] name failslab, interval 1, probability 0, space 0, times 0 [ 933.073169][T14969] CPU: 0 UID: 0 PID: 14969 Comm: syz.1.1935 Tainted: G L syzkaller #0 PREEMPT(full) [ 933.073210][T14969] Tainted: [L]=SOFTLOCKUP [ 933.073219][T14969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 933.073234][T14969] Call Trace: [ 933.073242][T14969] [ 933.073253][T14969] dump_stack_lvl+0x100/0x190 [ 933.073295][T14969] should_fail_ex.cold+0x5/0xa [ 933.073324][T14969] should_failslab+0xc2/0x120 [ 933.073349][T14969] __kmalloc_cache_noprof+0x7a/0x6f0 [ 933.073381][T14969] ? fsnotify_alloc_group+0x92/0x330 [ 933.073413][T14969] fsnotify_alloc_group+0x92/0x330 [ 933.073441][T14969] __do_sys_fanotify_init+0x342/0xe50 [ 933.073483][T14969] do_syscall_64+0x106/0xf80 [ 933.073521][T14969] ? clear_bhb_loop+0x40/0x90 [ 933.073551][T14969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 933.073578][T14969] RIP: 0033:0x7fb294d9c799 [ 933.073599][T14969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 933.073624][T14969] RSP: 002b:00007fb295bbe028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 933.073650][T14969] RAX: ffffffffffffffda RBX: 00007fb295015fa0 RCX: 00007fb294d9c799 [ 933.073667][T14969] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 933.073683][T14969] RBP: 00007fb294e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 933.073697][T14969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 933.073712][T14969] R13: 00007fb295016038 R14: 00007fb295015fa0 R15: 00007fff890484d8 [ 933.073743][T14969] [ 938.460597][T15018] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 939.995026][T15032] input: f¬ as /devices/virtual/input/input20 [ 940.784122][T15042] FAULT_INJECTION: forcing a failure. [ 940.784122][T15042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.975020][T15042] CPU: 0 UID: 0 PID: 15042 Comm: syz.3.1952 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.975061][T15042] Tainted: [L]=SOFTLOCKUP [ 940.975071][T15042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 940.975086][T15042] Call Trace: [ 940.975095][T15042] [ 940.975105][T15042] dump_stack_lvl+0x100/0x190 [ 940.975148][T15042] should_fail_ex.cold+0x5/0xa [ 940.975177][T15042] core_sys_select+0x9b9/0xbb0 [ 940.975223][T15042] ? __pfx_core_sys_select+0x10/0x10 [ 940.975292][T15042] ? ktime_get_ts64+0x2d2/0x3f0 [ 940.975320][T15042] ? read_tsc+0x9/0x20 [ 940.975346][T15042] ? ktime_get_ts64+0x256/0x3f0 [ 940.975375][T15042] kern_select+0x20c/0x270 [ 940.975416][T15042] ? __pfx_kern_select+0x10/0x10 [ 940.975465][T15042] __x64_sys_select+0xbd/0x160 [ 940.975506][T15042] ? do_syscall_64+0x95/0xf80 [ 940.975535][T15042] ? lockdep_hardirqs_on+0x78/0x100 [ 940.975564][T15042] do_syscall_64+0x106/0xf80 [ 940.975591][T15042] ? clear_bhb_loop+0x40/0x90 [ 940.975623][T15042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.975649][T15042] RIP: 0033:0x7f496d99c799 [ 940.975669][T15042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.975693][T15042] RSP: 002b:00007f496e815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 940.975717][T15042] RAX: ffffffffffffffda RBX: 00007f496dc15fa0 RCX: 00007f496d99c799 [ 940.975733][T15042] RDX: 00002000000004c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 940.975749][T15042] RBP: 00007f496da32bd9 R08: 00002000000001c0 R09: 0000000000000000 [ 940.975765][T15042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 940.975780][T15042] R13: 00007f496dc16038 R14: 00007f496dc15fa0 R15: 00007ffe1f90a4e8 [ 940.975812][T15042] [ 944.826113][T15089] random: crng reseeded on system resumption [ 944.974342][T15089] FAULT_INJECTION: forcing a failure. [ 944.974342][T15089] name failslab, interval 1, probability 0, space 0, times 0 [ 945.103445][T15089] CPU: 0 UID: 0 PID: 15089 Comm: syz.2.1958 Tainted: G L syzkaller #0 PREEMPT(full) [ 945.103481][T15089] Tainted: [L]=SOFTLOCKUP [ 945.103490][T15089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 945.103504][T15089] Call Trace: [ 945.103512][T15089] [ 945.103522][T15089] dump_stack_lvl+0x100/0x190 [ 945.103563][T15089] should_fail_ex.cold+0x5/0xa [ 945.103598][T15089] should_failslab+0xc2/0x120 [ 945.103623][T15089] __kvmalloc_node_noprof+0xfa/0xa00 [ 945.103660][T15089] ? traverse.part.0.constprop.0+0x397/0x650 [ 945.103706][T15089] traverse.part.0.constprop.0+0x397/0x650 [ 945.103753][T15089] seq_read_iter+0x93f/0x1270 [ 945.103791][T15089] ? aa_file_perm+0x7f3/0x14d0 [ 945.103826][T15089] seq_read+0x33b/0x4c0 [ 945.103861][T15089] ? __pfx_seq_read+0x10/0x10 [ 945.103915][T15089] ? __pfx_seq_read+0x10/0x10 [ 945.103951][T15089] proc_reg_read+0x240/0x330 [ 945.103987][T15089] ? __pfx_proc_reg_read+0x10/0x10 [ 945.104024][T15089] vfs_read+0x1e4/0xb30 [ 945.104064][T15089] ? __pfx_vfs_read+0x10/0x10 [ 945.104099][T15089] ? find_held_lock+0x2b/0x80 [ 945.104121][T15089] ? __fget_files+0x215/0x3d0 [ 945.104142][T15089] ? __fget_files+0x215/0x3d0 [ 945.104167][T15089] ? __fget_files+0x21f/0x3d0 [ 945.104196][T15089] __x64_sys_pread64+0x1eb/0x250 [ 945.104220][T15089] ? __pfx___x64_sys_pread64+0x10/0x10 [ 945.104251][T15089] do_syscall_64+0x106/0xf80 [ 945.104279][T15089] ? clear_bhb_loop+0x40/0x90 [ 945.104309][T15089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 945.104333][T15089] RIP: 0033:0x7faa2d39c799 [ 945.104352][T15089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 945.104376][T15089] RSP: 002b:00007faa2e25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 945.104399][T15089] RAX: ffffffffffffffda RBX: 00007faa2d615fa0 RCX: 00007faa2d39c799 [ 945.104415][T15089] RDX: 000040000000f42c RSI: 0000000000000000 RDI: 0000000000000009 [ 945.104430][T15089] RBP: 00007faa2e25e090 R08: 0000000000000000 R09: 0000000000000000 [ 945.104445][T15089] R10: 0000000000080002 R11: 0000000000000246 R12: 0000000000000001 [ 945.104459][T15089] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 945.104490][T15089] [ 947.574232][T15097] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1960'. [ 949.425814][T15111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 951.591755][ T5144] Bluetooth: hci1: ACL packet for unknown connection handle 0 [ 951.671941][ T5144] Bluetooth: Frame is too long (len 118, expected len 4) [ 952.205530][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 952.223667][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 952.234084][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 952.257936][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 952.268444][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 954.333719][ T5835] Bluetooth: hci0: command tx timeout [ 955.854281][T15133] chnl_net:caif_netlink_parms(): no params data found [ 956.415749][ T5835] Bluetooth: hci0: command tx timeout [ 956.475330][T15133] bridge0: port 1(bridge_slave_0) entered blocking state [ 956.513318][T15133] bridge0: port 1(bridge_slave_0) entered disabled state [ 956.520592][T15133] bridge_slave_0: entered allmulticast mode [ 956.613165][T15133] bridge_slave_0: entered promiscuous mode [ 956.675970][T15133] bridge0: port 2(bridge_slave_1) entered blocking state [ 956.733908][T15133] bridge0: port 2(bridge_slave_1) entered disabled state [ 956.741203][T15133] bridge_slave_1: entered allmulticast mode [ 956.833223][T15133] bridge_slave_1: entered promiscuous mode [ 957.055749][T15133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 957.163650][T15133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 957.447615][T15133] team0: Port device team_slave_0 added [ 957.475688][T15152] netlink: 'syz.1.1971': attribute type 1 has an invalid length. [ 957.535546][T15133] team0: Port device team_slave_1 added [ 958.117263][T15133] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 958.155077][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.370035][T15133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 958.473676][T15133] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 958.493242][ T5835] Bluetooth: hci0: command tx timeout [ 958.537911][T15133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 958.753784][T15133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 959.128529][T15133] hsr_slave_0: entered promiscuous mode [ 959.173615][T15133] hsr_slave_1: entered promiscuous mode [ 959.202278][T15166] vhci_hcd vhci_hcd.2: default hub control req: 204c v0004 i0006 l257 [ 959.243294][T15133] debugfs: 'hsr0' already exists in 'hsr' [ 959.292119][T15133] Cannot create hsr debugfs directory [ 959.788067][T15172] FAULT_INJECTION: forcing a failure. [ 959.788067][T15172] name failslab, interval 1, probability 0, space 0, times 0 [ 959.864862][T15172] CPU: 0 UID: 0 PID: 15172 Comm: syz.3.1976 Tainted: G L syzkaller #0 PREEMPT(full) [ 959.864903][T15172] Tainted: [L]=SOFTLOCKUP [ 959.864912][T15172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 959.864927][T15172] Call Trace: [ 959.864936][T15172] [ 959.864947][T15172] dump_stack_lvl+0x100/0x190 [ 959.864990][T15172] should_fail_ex.cold+0x5/0xa [ 959.865020][T15172] should_failslab+0xc2/0x120 [ 959.865046][T15172] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 959.865106][T15172] ? vm_area_dup+0x27/0x8e0 [ 959.865138][T15172] ? __vma_start_write+0x17f/0x280 [ 959.865175][T15172] vm_area_dup+0x27/0x8e0 [ 959.865210][T15172] dup_mmap+0x6f6/0x2180 [ 959.865251][T15172] ? __pfx_dup_mmap+0x10/0x10 [ 959.865278][T15172] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 959.865318][T15172] ? __lock_acquire+0x4a5/0x2630 [ 959.865352][T15172] ? find_held_lock+0x2b/0x80 [ 959.865374][T15172] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 959.865438][T15172] copy_process+0x73d7/0x7a10 [ 959.865466][T15172] ? futex_unqueue+0x133/0x2c0 [ 959.865510][T15172] ? __pfx_copy_process+0x10/0x10 [ 959.865547][T15172] ? _copy_from_user+0x59/0xd0 [ 959.865591][T15172] kernel_clone+0xfc/0x9a0 [ 959.865621][T15172] ? __pfx_kernel_clone+0x10/0x10 [ 959.865657][T15172] ? __pfx_futex_wait+0x10/0x10 [ 959.865701][T15172] __do_sys_clone3+0x214/0x290 [ 959.865730][T15172] ? __pfx___do_sys_clone3+0x10/0x10 [ 959.865798][T15172] do_syscall_64+0x106/0xf80 [ 959.865826][T15172] ? clear_bhb_loop+0x40/0x90 [ 959.865857][T15172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.865883][T15172] RIP: 0033:0x7f496d99c799 [ 959.865904][T15172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.865928][T15172] RSP: 002b:00007f496e814ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 959.865951][T15172] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f496d99c799 [ 959.865968][T15172] RDX: 00007f496e814f10 RSI: 0000000000000058 RDI: 00007f496e814f10 [ 959.865983][T15172] RBP: 00007f496da32bd9 R08: 0000000000000000 R09: 0000000000000058 [ 959.865999][T15172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 959.866014][T15172] R13: 00007f496dc16038 R14: 00007f496dc15fa0 R15: 00007ffe1f90a4e8 [ 959.866046][T15172] [ 960.616717][ T5835] Bluetooth: hci0: command tx timeout [ 963.729674][T11420] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.350303][ T5835] Bluetooth: Frame is too long (len 118, expected len 4) [ 964.502196][T11420] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 964.918460][T11420] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 965.312374][T11420] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.001516][T15133] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 966.303317][T15133] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 966.361289][T15133] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 966.571180][T15133] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 966.636167][T15202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1982'. [ 967.259728][T11420] bridge_slave_1: left allmulticast mode [ 967.303087][T11420] bridge_slave_1: left promiscuous mode [ 967.368088][T11420] bridge0: port 2(bridge_slave_1) entered disabled state [ 967.763934][T11420] bridge_slave_0: left allmulticast mode [ 967.769646][T11420] bridge_slave_0: left promiscuous mode [ 967.854883][T11420] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.948759][T11420] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.038799][T11420] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.134052][T11420] bond0 (unregistering): Released all slaves [ 970.486550][T15133] 8021q: adding VLAN 0 to HW filter on device bond0 [ 970.645961][T15133] 8021q: adding VLAN 0 to HW filter on device team0 [ 970.724375][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.731532][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 970.853032][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.860269][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 971.129430][T15133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 971.253269][T15133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 973.285163][T15284] sctp: Failed to create the SCTP UDP tunneling v4 sock [ 973.665545][T15133] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.602166][T11420] hsr_slave_0: left promiscuous mode [ 974.713073][T11420] hsr_slave_1: left promiscuous mode [ 974.746222][T11420] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.815430][T11420] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 975.063740][T11420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 975.133089][T11420] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 975.353692][T11420] veth1_macvtap: left promiscuous mode [ 975.359231][T11420] veth0_macvtap: left promiscuous mode [ 975.465735][T11420] veth1_vlan: left promiscuous mode [ 975.471054][T11420] veth0_vlan: left promiscuous mode [ 976.107369][T15320] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 977.665156][T11420] team0 (unregistering): Port device team_slave_1 removed [ 977.759817][T11420] team0 (unregistering): Port device team_slave_0 removed [ 979.436811][T15345] kAFS: Invalid Command on /proc/fs/afs/cells file [ 980.281751][T15133] veth0_vlan: entered promiscuous mode [ 980.610177][T15133] veth1_vlan: entered promiscuous mode [ 981.237720][T15133] veth0_macvtap: entered promiscuous mode [ 981.306699][T15133] veth1_macvtap: entered promiscuous mode [ 981.900406][T15133] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.007463][T15133] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.236646][ T144] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.288551][ T144] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.331802][T15371] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 982.983106][ T144] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 983.589265][ T144] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.480705][T15087] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.547743][T15087] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.794325][T15087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.836976][T15087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 989.267351][T15416] zswap: compressor not available [ 989.693532][T15431] FAULT_INJECTION: forcing a failure. [ 989.693532][T15431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 989.823205][T15431] CPU: 0 UID: 0 PID: 15431 Comm: syz.3.2016 Tainted: G L syzkaller #0 PREEMPT(full) [ 989.823243][T15431] Tainted: [L]=SOFTLOCKUP [ 989.823252][T15431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 989.823267][T15431] Call Trace: [ 989.823275][T15431] [ 989.823284][T15431] dump_stack_lvl+0x100/0x190 [ 989.823326][T15431] should_fail_ex.cold+0x5/0xa [ 989.823353][T15431] _copy_from_user+0x2e/0xd0 [ 989.823393][T15431] write_flush.isra.0+0x10f/0x3d0 [ 989.823450][T15431] ? __pfx_write_flush.isra.0+0x10/0x10 [ 989.823483][T15431] ? __pfx___might_resched+0x10/0x10 [ 989.823519][T15431] ? lock_acquire+0x1cf/0x380 [ 989.823565][T15431] ? __pfx_write_flush_procfs+0x10/0x10 [ 989.823600][T15431] proc_reg_write+0x240/0x330 [ 989.823640][T15431] vfs_write+0x2aa/0x1070 [ 989.823679][T15431] ? __pfx_proc_reg_write+0x10/0x10 [ 989.823717][T15431] ? __pfx_vfs_write+0x10/0x10 [ 989.823753][T15431] ? __fget_files+0x215/0x3d0 [ 989.823782][T15431] ? __fget_files+0x21f/0x3d0 [ 989.823812][T15431] ksys_write+0x12a/0x250 [ 989.823849][T15431] ? __pfx_ksys_write+0x10/0x10 [ 989.823895][T15431] do_syscall_64+0x106/0xf80 [ 989.823924][T15431] ? clear_bhb_loop+0x40/0x90 [ 989.823954][T15431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 989.823978][T15431] RIP: 0033:0x7f496d99c799 [ 989.823998][T15431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 989.824022][T15431] RSP: 002b:00007f496e815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 989.824045][T15431] RAX: ffffffffffffffda RBX: 00007f496dc15fa0 RCX: 00007f496d99c799 [ 989.824061][T15431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 989.824076][T15431] RBP: 00007f496e815090 R08: 0000000000000000 R09: 0000000000000000 [ 989.824091][T15431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 989.824106][T15431] R13: 00007f496dc16038 R14: 00007f496dc15fa0 R15: 00007ffe1f90a4e8 [ 989.824137][T15431] [ 993.138104][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.148966][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.965033][T15513] FAULT_INJECTION: forcing a failure. [ 998.965033][T15513] name failslab, interval 1, probability 0, space 0, times 0 [ 999.068732][T15513] CPU: 0 UID: 0 PID: 15513 Comm: syz.3.2030 Tainted: G L syzkaller #0 PREEMPT(full) [ 999.068772][T15513] Tainted: [L]=SOFTLOCKUP [ 999.068782][T15513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 999.068797][T15513] Call Trace: [ 999.068806][T15513] [ 999.068816][T15513] dump_stack_lvl+0x100/0x190 [ 999.068860][T15513] should_fail_ex.cold+0x5/0xa [ 999.068891][T15513] should_failslab+0xc2/0x120 [ 999.068917][T15513] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 999.068955][T15513] ? seq_open+0x55/0x170 [ 999.068986][T15513] ? lockdep_init_map_type+0x5c/0x250 [ 999.069026][T15513] seq_open+0x55/0x170 [ 999.069058][T15513] kernfs_fop_open+0x590/0xd50 [ 999.069092][T15513] do_dentry_open+0x6d8/0x1660 [ 999.069116][T15513] ? __pfx_kernfs_fop_open+0x10/0x10 [ 999.069150][T15513] vfs_open+0x82/0x3f0 [ 999.069183][T15513] path_openat+0x208c/0x31a0 [ 999.069218][T15513] ? __pfx_path_openat+0x10/0x10 [ 999.069253][T15513] do_file_open+0x20e/0x430 [ 999.069279][T15513] ? __pfx_do_file_open+0x10/0x10 [ 999.069325][T15513] ? alloc_fd+0x476/0x790 [ 999.069352][T15513] ? do_getname+0x191/0x390 [ 999.069384][T15513] do_sys_openat2+0x10d/0x1e0 [ 999.069415][T15513] ? __pfx_do_sys_openat2+0x10/0x10 [ 999.069450][T15513] ? __fget_files+0x21f/0x3d0 [ 999.069478][T15513] __x64_sys_openat+0x12d/0x210 [ 999.069511][T15513] ? __pfx___x64_sys_openat+0x10/0x10 [ 999.069556][T15513] do_syscall_64+0x106/0xf80 [ 999.069587][T15513] ? clear_bhb_loop+0x40/0x90 [ 999.069626][T15513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 999.069652][T15513] RIP: 0033:0x7f496d99c799 [ 999.069672][T15513] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 999.069697][T15513] RSP: 002b:00007f496e815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 999.069722][T15513] RAX: ffffffffffffffda RBX: 00007f496dc15fa0 RCX: 00007f496d99c799 [ 999.069738][T15513] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 999.069755][T15513] RBP: 00007f496da32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 999.069770][T15513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 999.069786][T15513] R13: 00007f496dc16038 R14: 00007f496dc15fa0 R15: 00007ffe1f90a4e8 [ 999.069817][T15513] [ 1000.263680][T15540] FAULT_INJECTION: forcing a failure. [ 1000.263680][T15540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1000.326649][T15537] FAULT_INJECTION: forcing a failure. [ 1000.326649][T15537] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1000.393328][T15540] CPU: 0 UID: 0 PID: 15540 Comm: syz.5.2034 Tainted: G L syzkaller #0 PREEMPT(full) [ 1000.393366][T15540] Tainted: [L]=SOFTLOCKUP [ 1000.393375][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1000.393389][T15540] Call Trace: [ 1000.393397][T15540] [ 1000.393407][T15540] dump_stack_lvl+0x100/0x190 [ 1000.393449][T15540] should_fail_ex.cold+0x5/0xa [ 1000.393477][T15540] _copy_to_user+0x32/0xd0 [ 1000.393519][T15540] simple_read_from_buffer+0xcb/0x170 [ 1000.393558][T15540] proc_fail_nth_read+0x1af/0x230 [ 1000.393595][T15540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1000.393625][T15540] ? rw_verify_area+0xce/0x6d0 [ 1000.393659][T15540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1000.393688][T15540] vfs_read+0x1e4/0xb30 [ 1000.393728][T15540] ? __pfx_vfs_read+0x10/0x10 [ 1000.393764][T15540] ? __fget_files+0x215/0x3d0 [ 1000.393791][T15540] ? __fget_files+0x21f/0x3d0 [ 1000.393821][T15540] ksys_read+0x12a/0x250 [ 1000.393857][T15540] ? __pfx_ksys_read+0x10/0x10 [ 1000.393891][T15540] ? v4l2_ioctl+0x1c5/0x250 [ 1000.394004][T15540] do_syscall_64+0x106/0xf80 [ 1000.394032][T15540] ? clear_bhb_loop+0x40/0x90 [ 1000.394061][T15540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.394086][T15540] RIP: 0033:0x7f25f375cfce [ 1000.394105][T15540] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1000.394129][T15540] RSP: 002b:00007f25f469cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1000.394152][T15540] RAX: ffffffffffffffda RBX: 00007f25f469d6c0 RCX: 00007f25f375cfce [ 1000.394168][T15540] RDX: 000000000000000f RSI: 00007f25f469d0a0 RDI: 000000000000000b [ 1000.394184][T15540] RBP: 00007f25f469d090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.394198][T15540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.394213][T15540] R13: 00007f25f3a16128 R14: 00007f25f3a16090 R15: 00007ffd4a5facf8 [ 1000.394244][T15540] [ 1000.825083][T15537] CPU: 0 UID: 0 PID: 15537 Comm: syz.2.2037 Tainted: G L syzkaller #0 PREEMPT(full) [ 1000.825126][T15537] Tainted: [L]=SOFTLOCKUP [ 1000.825135][T15537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1000.825151][T15537] Call Trace: [ 1000.825160][T15537] [ 1000.825170][T15537] dump_stack_lvl+0x100/0x190 [ 1000.825213][T15537] should_fail_ex.cold+0x5/0xa [ 1000.825237][T15537] ? prepare_alloc_pages+0x16d/0x5f0 [ 1000.825268][T15537] should_fail_alloc_page+0xeb/0x140 [ 1000.825296][T15537] prepare_alloc_pages+0x1f0/0x5f0 [ 1000.825331][T15537] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1000.825370][T15537] ? __lock_acquire+0x5c6/0x2630 [ 1000.825404][T15537] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1000.825445][T15537] ? find_held_lock+0x2b/0x80 [ 1000.825475][T15537] ? mm_drop_all_locks+0x390/0x4b0 [ 1000.825511][T15537] ? mm_drop_all_locks+0x390/0x4b0 [ 1000.825554][T15537] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1000.825592][T15537] ? mas_next_slot+0x1003/0x18b0 [ 1000.825627][T15537] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1000.825674][T15537] ? mm_drop_all_locks+0x390/0x4b0 [ 1000.825710][T15537] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1000.825753][T15537] ? policy_nodemask+0xed/0x4f0 [ 1000.825781][T15537] alloc_pages_mpol+0x1fb/0x550 [ 1000.825807][T15537] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1000.825841][T15537] alloc_pages_noprof+0x131/0x390 [ 1000.825868][T15537] kvm_coalesced_mmio_init+0x1a/0x170 [ 1000.825905][T15537] kvm_dev_ioctl+0xe00/0x1a50 [ 1000.825938][T15537] ? find_held_lock+0x2b/0x80 [ 1000.825960][T15537] ? __fget_files+0x215/0x3d0 [ 1000.825981][T15537] ? hook_file_ioctl_common+0x146/0x410 [ 1000.826024][T15537] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1000.826055][T15537] ? __fget_files+0x21f/0x3d0 [ 1000.826081][T15537] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1000.826110][T15537] __x64_sys_ioctl+0x18e/0x210 [ 1000.826148][T15537] do_syscall_64+0x106/0xf80 [ 1000.826176][T15537] ? clear_bhb_loop+0x40/0x90 [ 1000.826206][T15537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.826232][T15537] RIP: 0033:0x7faa2d39c799 [ 1000.826252][T15537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.826278][T15537] RSP: 002b:00007faa2e25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1000.826302][T15537] RAX: ffffffffffffffda RBX: 00007faa2d615fa0 RCX: 00007faa2d39c799 [ 1000.826319][T15537] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1000.826334][T15537] RBP: 00007faa2d432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1000.826350][T15537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1000.826365][T15537] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 1000.826396][T15537] [ 1001.563627][T15544] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1002.034929][T15551] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1006.517815][T15601] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 1006.698757][T15601] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 1009.745218][T15625] FAULT_INJECTION: forcing a failure. [ 1009.745218][T15625] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1010.013681][T15625] CPU: 0 UID: 0 PID: 15625 Comm: syz.2.2051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1010.013721][T15625] Tainted: [L]=SOFTLOCKUP [ 1010.013730][T15625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1010.013745][T15625] Call Trace: [ 1010.013754][T15625] [ 1010.013764][T15625] dump_stack_lvl+0x100/0x190 [ 1010.013807][T15625] should_fail_ex.cold+0x5/0xa [ 1010.013832][T15625] ? prepare_alloc_pages+0x16d/0x5f0 [ 1010.013863][T15625] should_fail_alloc_page+0xeb/0x140 [ 1010.013890][T15625] prepare_alloc_pages+0x1f0/0x5f0 [ 1010.013918][T15625] ? __lock_acquire+0x4a5/0x2630 [ 1010.013952][T15625] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1010.013992][T15625] ? __lock_acquire+0x4a5/0x2630 [ 1010.014035][T15625] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1010.014074][T15625] ? find_held_lock+0x2b/0x80 [ 1010.014095][T15625] ? is_bpf_text_address+0x8a/0x1a0 [ 1010.014137][T15625] ? is_bpf_text_address+0x8a/0x1a0 [ 1010.014175][T15625] ? bpf_ksym_find+0x124/0x1c0 [ 1010.014204][T15625] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1010.014233][T15625] ? kernel_text_address+0x8d/0x100 [ 1010.014269][T15625] ? is_bpf_text_address+0x8a/0x1a0 [ 1010.014305][T15625] ? __kernel_text_address+0xd/0x30 [ 1010.014341][T15625] ? unwind_get_return_address+0x59/0xa0 [ 1010.014369][T15625] ? arch_stack_walk+0xa6/0xf0 [ 1010.014394][T15625] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1010.014437][T15625] ? policy_nodemask+0xed/0x4f0 [ 1010.014465][T15625] alloc_pages_mpol+0x1fb/0x550 [ 1010.014492][T15625] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1010.014526][T15625] alloc_pages_noprof+0x131/0x390 [ 1010.014554][T15625] __pud_alloc+0x3b/0x760 [ 1010.014585][T15625] copy_page_range+0x3f06/0x6570 [ 1010.014625][T15625] ? __lock_acquire+0x4a5/0x2630 [ 1010.014681][T15625] ? mas_wr_store_entry+0x6d2/0x2390 [ 1010.014718][T15625] ? __pfx_copy_page_range+0x10/0x10 [ 1010.014757][T15625] ? mas_store+0x666/0xac0 [ 1010.014793][T15625] ? __pfx_mas_store+0x10/0x10 [ 1010.014833][T15625] ? __pfx___vma_start_write+0x10/0x10 [ 1010.014874][T15625] dup_mmap+0xd25/0x2180 [ 1010.014914][T15625] ? __pfx_dup_mmap+0x10/0x10 [ 1010.014941][T15625] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1010.014975][T15625] ? __lock_acquire+0x4a5/0x2630 [ 1010.015007][T15625] ? find_held_lock+0x2b/0x80 [ 1010.015029][T15625] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1010.015094][T15625] copy_process+0x73d7/0x7a10 [ 1010.015123][T15625] ? __pfx___schedule+0x10/0x10 [ 1010.015161][T15625] ? __pfx_copy_process+0x10/0x10 [ 1010.015197][T15625] ? _copy_from_user+0x59/0xd0 [ 1010.015241][T15625] kernel_clone+0xfc/0x9a0 [ 1010.015272][T15625] ? __pfx_kernel_clone+0x10/0x10 [ 1010.015299][T15625] ? futex_private_hash_put+0x107/0x1c0 [ 1010.015337][T15625] ? __pfx_futex_wake+0x10/0x10 [ 1010.015378][T15625] __do_sys_clone3+0x214/0x290 [ 1010.015408][T15625] ? __pfx___do_sys_clone3+0x10/0x10 [ 1010.015476][T15625] do_syscall_64+0x106/0xf80 [ 1010.015504][T15625] ? clear_bhb_loop+0x40/0x90 [ 1010.015535][T15625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1010.015561][T15625] RIP: 0033:0x7faa2d39c799 [ 1010.015582][T15625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1010.015608][T15625] RSP: 002b:00007faa2e25def8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1010.015632][T15625] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007faa2d39c799 [ 1010.015649][T15625] RDX: 00007faa2e25df10 RSI: 0000000000000058 RDI: 00007faa2e25df10 [ 1010.015672][T15625] RBP: 00007faa2d432bd9 R08: 0000000000000000 R09: 0000000000000058 [ 1010.015688][T15625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1010.015703][T15625] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 1010.015736][T15625] [ 1013.898169][T15655] futex_wake_op: syz.2.2056 tries to shift op by -2048; fix this program [ 1014.070179][T15655] futex_wake_op: syz.2.2056 tries to shift op by -2048; fix this program [ 1014.252618][T15651] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 1014.482588][T15655] netlink: 472 bytes leftover after parsing attributes in process `syz.2.2056'. [ 1015.224453][T15669] FAULT_INJECTION: forcing a failure. [ 1015.224453][T15669] name failslab, interval 1, probability 0, space 0, times 0 [ 1015.335282][T15669] CPU: 0 UID: 0 PID: 15669 Comm: syz.3.2060 Tainted: G L syzkaller #0 PREEMPT(full) [ 1015.335345][T15669] Tainted: [L]=SOFTLOCKUP [ 1015.335354][T15669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1015.335370][T15669] Call Trace: [ 1015.335378][T15669] [ 1015.335388][T15669] dump_stack_lvl+0x100/0x190 [ 1015.335431][T15669] should_fail_ex.cold+0x5/0xa [ 1015.335461][T15669] should_failslab+0xc2/0x120 [ 1015.335487][T15669] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1015.335524][T15669] ? vm_area_dup+0x27/0x8e0 [ 1015.335554][T15669] ? __vma_start_write+0x17f/0x280 [ 1015.335591][T15669] vm_area_dup+0x27/0x8e0 [ 1015.335625][T15669] dup_mmap+0x6f6/0x2180 [ 1015.335665][T15669] ? __pfx_dup_mmap+0x10/0x10 [ 1015.335692][T15669] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1015.335725][T15669] ? __lock_acquire+0x4a5/0x2630 [ 1015.335758][T15669] ? find_held_lock+0x2b/0x80 [ 1015.335779][T15669] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1015.335842][T15669] copy_process+0x73d7/0x7a10 [ 1015.335871][T15669] ? __pfx___schedule+0x10/0x10 [ 1015.335909][T15669] ? __pfx_copy_process+0x10/0x10 [ 1015.335946][T15669] ? _copy_from_user+0x59/0xd0 [ 1015.335990][T15669] kernel_clone+0xfc/0x9a0 [ 1015.336020][T15669] ? __pfx_kernel_clone+0x10/0x10 [ 1015.336047][T15669] ? futex_private_hash_put+0x107/0x1c0 [ 1015.336085][T15669] ? __pfx_futex_wake+0x10/0x10 [ 1015.336126][T15669] __do_sys_clone3+0x214/0x290 [ 1015.336156][T15669] ? __pfx___do_sys_clone3+0x10/0x10 [ 1015.336224][T15669] do_syscall_64+0x106/0xf80 [ 1015.336252][T15669] ? clear_bhb_loop+0x40/0x90 [ 1015.336282][T15669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.336308][T15669] RIP: 0033:0x7f496d99c799 [ 1015.336334][T15669] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1015.336359][T15669] RSP: 002b:00007f496e814ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1015.336384][T15669] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f496d99c799 [ 1015.336401][T15669] RDX: 00007f496e814f10 RSI: 0000000000000058 RDI: 00007f496e814f10 [ 1015.336417][T15669] RBP: 00007f496da32bd9 R08: 0000000000000000 R09: 0000000000000058 [ 1015.336432][T15669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1015.336447][T15669] R13: 00007f496dc16038 R14: 00007f496dc15fa0 R15: 00007ffe1f90a4e8 [ 1015.336479][T15669] [ 1015.965040][T15678] random: crng reseeded on system resumption [ 1016.763574][ T5835] Bluetooth: Frame is too long (len 118, expected len 4) [ 1018.196223][T15707] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1018.687004][T15713] FAULT_INJECTION: forcing a failure. [ 1018.687004][T15713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.837276][T15713] CPU: 0 UID: 0 PID: 15713 Comm: syz.5.2069 Tainted: G L syzkaller #0 PREEMPT(full) [ 1018.837316][T15713] Tainted: [L]=SOFTLOCKUP [ 1018.837325][T15713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1018.837341][T15713] Call Trace: [ 1018.837350][T15713] [ 1018.837360][T15713] dump_stack_lvl+0x100/0x190 [ 1018.837403][T15713] should_fail_ex.cold+0x5/0xa [ 1018.837432][T15713] core_sys_select+0x9b9/0xbb0 [ 1018.837480][T15713] ? __pfx_core_sys_select+0x10/0x10 [ 1018.837549][T15713] ? ktime_get_ts64+0x2d2/0x3f0 [ 1018.837577][T15713] ? read_tsc+0x9/0x20 [ 1018.837604][T15713] ? ktime_get_ts64+0x256/0x3f0 [ 1018.837634][T15713] kern_select+0x20c/0x270 [ 1018.837675][T15713] ? __pfx_kern_select+0x10/0x10 [ 1018.837725][T15713] __x64_sys_select+0xbd/0x160 [ 1018.837763][T15713] ? do_syscall_64+0x95/0xf80 [ 1018.837792][T15713] ? lockdep_hardirqs_on+0x78/0x100 [ 1018.837821][T15713] do_syscall_64+0x106/0xf80 [ 1018.837849][T15713] ? clear_bhb_loop+0x40/0x90 [ 1018.837887][T15713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.837913][T15713] RIP: 0033:0x7f25f379c799 [ 1018.837934][T15713] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.837959][T15713] RSP: 002b:00007f25f46be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1018.837983][T15713] RAX: ffffffffffffffda RBX: 00007f25f3a15fa0 RCX: 00007f25f379c799 [ 1018.838000][T15713] RDX: 00002000000004c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 1018.838016][T15713] RBP: 00007f25f3832bd9 R08: 00002000000001c0 R09: 0000000000000000 [ 1018.838032][T15713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.838048][T15713] R13: 00007f25f3a16038 R14: 00007f25f3a15fa0 R15: 00007ffd4a5facf8 [ 1018.838079][T15713] [ 1020.882348][T15727] nbd: must specify at least one socket [ 1022.273326][T15745] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1024.813071][ T5835] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1025.014539][T15780] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1026.423380][T15790] nbd: must specify at least one socket [ 1026.834754][T15803] FAULT_INJECTION: forcing a failure. [ 1026.834754][T15803] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.907452][T15805] FAULT_INJECTION: forcing a failure. [ 1026.907452][T15805] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1027.004377][T15805] CPU: 0 UID: 0 PID: 15805 Comm: syz.2.2088 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.004417][T15805] Tainted: [L]=SOFTLOCKUP [ 1027.004426][T15805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1027.004442][T15805] Call Trace: [ 1027.004450][T15805] [ 1027.004460][T15805] dump_stack_lvl+0x100/0x190 [ 1027.004503][T15805] should_fail_ex.cold+0x5/0xa [ 1027.004526][T15805] ? prepare_alloc_pages+0x16d/0x5f0 [ 1027.004558][T15805] should_fail_alloc_page+0xeb/0x140 [ 1027.004585][T15805] prepare_alloc_pages+0x1f0/0x5f0 [ 1027.004613][T15805] ? rcu_is_watching+0x12/0xc0 [ 1027.004655][T15805] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1027.004693][T15805] ? __alloc_frozen_pages_noprof+0x2b1/0x2ba0 [ 1027.004732][T15805] ? __lock_acquire+0x4a5/0x2630 [ 1027.004776][T15805] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1027.004815][T15805] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1027.004856][T15805] ? is_bpf_text_address+0x8a/0x1a0 [ 1027.004894][T15805] ? bpf_ksym_find+0x124/0x1c0 [ 1027.004923][T15805] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1027.004951][T15805] ? kernel_text_address+0x8d/0x100 [ 1027.004987][T15805] ? __kernel_text_address+0xd/0x30 [ 1027.005022][T15805] ? unwind_get_return_address+0x59/0xa0 [ 1027.005051][T15805] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1027.005094][T15805] ? policy_nodemask+0xed/0x4f0 [ 1027.005121][T15805] alloc_pages_mpol+0x1fb/0x550 [ 1027.005148][T15805] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1027.005179][T15805] ? do_raw_spin_lock+0x128/0x260 [ 1027.005216][T15805] ? find_held_lock+0x2b/0x80 [ 1027.005237][T15805] ? __pud_alloc+0x575/0x760 [ 1027.005268][T15805] alloc_pages_noprof+0x131/0x390 [ 1027.005295][T15805] __pmd_alloc+0x3b/0x9c0 [ 1027.005321][T15805] ? __pud_alloc+0x57a/0x760 [ 1027.005351][T15805] copy_page_range+0x4531/0x6570 [ 1027.005390][T15805] ? __lock_acquire+0x4a5/0x2630 [ 1027.005441][T15805] ? mas_wr_store_entry+0x6d2/0x2390 [ 1027.005477][T15805] ? __pfx_copy_page_range+0x10/0x10 [ 1027.005515][T15805] ? mas_store+0x666/0xac0 [ 1027.005550][T15805] ? __pfx_mas_store+0x10/0x10 [ 1027.005590][T15805] ? __pfx___vma_start_write+0x10/0x10 [ 1027.005630][T15805] dup_mmap+0xd25/0x2180 [ 1027.005670][T15805] ? __pfx_dup_mmap+0x10/0x10 [ 1027.005697][T15805] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1027.005730][T15805] ? __lock_acquire+0x4a5/0x2630 [ 1027.005762][T15805] ? find_held_lock+0x2b/0x80 [ 1027.005783][T15805] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1027.005846][T15805] copy_process+0x73d7/0x7a10 [ 1027.005875][T15805] ? __pfx___schedule+0x10/0x10 [ 1027.005913][T15805] ? __pfx_copy_process+0x10/0x10 [ 1027.005950][T15805] ? _copy_from_user+0x59/0xd0 [ 1027.005993][T15805] kernel_clone+0xfc/0x9a0 [ 1027.006023][T15805] ? __pfx_kernel_clone+0x10/0x10 [ 1027.006050][T15805] ? futex_private_hash_put+0x107/0x1c0 [ 1027.006088][T15805] ? __pfx_futex_wake+0x10/0x10 [ 1027.006140][T15805] __do_sys_clone3+0x214/0x290 [ 1027.006177][T15805] ? __pfx___do_sys_clone3+0x10/0x10 [ 1027.006245][T15805] do_syscall_64+0x106/0xf80 [ 1027.006274][T15805] ? clear_bhb_loop+0x40/0x90 [ 1027.006304][T15805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.006331][T15805] RIP: 0033:0x7faa2d39c799 [ 1027.006352][T15805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.006377][T15805] RSP: 002b:00007faa2e25def8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1027.006402][T15805] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007faa2d39c799 [ 1027.006418][T15805] RDX: 00007faa2e25df10 RSI: 0000000000000058 RDI: 00007faa2e25df10 [ 1027.006434][T15805] RBP: 00007faa2d432bd9 R08: 0000000000000000 R09: 0000000000000058 [ 1027.006450][T15805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1027.006465][T15805] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 1027.006498][T15805] [ 1027.693977][T15803] CPU: 0 UID: 0 PID: 15803 Comm: syz.1.2086 Tainted: G L syzkaller #0 PREEMPT(full) [ 1027.694016][T15803] Tainted: [L]=SOFTLOCKUP [ 1027.694025][T15803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1027.694040][T15803] Call Trace: [ 1027.694048][T15803] [ 1027.694057][T15803] dump_stack_lvl+0x100/0x190 [ 1027.694099][T15803] should_fail_ex.cold+0x5/0xa [ 1027.694127][T15803] should_failslab+0xc2/0x120 [ 1027.694152][T15803] __kvmalloc_node_noprof+0xfa/0xa00 [ 1027.694188][T15803] ? traverse.part.0.constprop.0+0x397/0x650 [ 1027.694234][T15803] traverse.part.0.constprop.0+0x397/0x650 [ 1027.694279][T15803] seq_read_iter+0x93f/0x1270 [ 1027.694317][T15803] ? aa_file_perm+0x7f3/0x14d0 [ 1027.694352][T15803] seq_read+0x33b/0x4c0 [ 1027.694387][T15803] ? __pfx_seq_read+0x10/0x10 [ 1027.694440][T15803] ? __pfx_seq_read+0x10/0x10 [ 1027.694475][T15803] proc_reg_read+0x240/0x330 [ 1027.694510][T15803] ? __pfx_proc_reg_read+0x10/0x10 [ 1027.694546][T15803] vfs_read+0x1e4/0xb30 [ 1027.694586][T15803] ? __pfx_vfs_read+0x10/0x10 [ 1027.694620][T15803] ? find_held_lock+0x2b/0x80 [ 1027.694641][T15803] ? __fget_files+0x215/0x3d0 [ 1027.694662][T15803] ? __fget_files+0x215/0x3d0 [ 1027.694688][T15803] ? __fget_files+0x21f/0x3d0 [ 1027.694717][T15803] __x64_sys_pread64+0x1eb/0x250 [ 1027.694740][T15803] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1027.694778][T15803] do_syscall_64+0x106/0xf80 [ 1027.694807][T15803] ? clear_bhb_loop+0x40/0x90 [ 1027.694837][T15803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1027.694861][T15803] RIP: 0033:0x7fb294d9c799 [ 1027.694881][T15803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1027.694905][T15803] RSP: 002b:00007fb295bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1027.694928][T15803] RAX: ffffffffffffffda RBX: 00007fb295015fa0 RCX: 00007fb294d9c799 [ 1027.694944][T15803] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 1027.694958][T15803] RBP: 00007fb295bbe090 R08: 0000000000000000 R09: 0000000000000000 [ 1027.694973][T15803] R10: 0000000000005ef6 R11: 0000000000000246 R12: 0000000000000001 [ 1027.694987][T15803] R13: 00007fb295016038 R14: 00007fb295015fa0 R15: 00007fff890484d8 [ 1027.695018][T15803] [ 1031.674767][T15848] usb usb3: usbfs: process 15848 (syz.3.2098) did not claim interface 0 before use [ 1031.843166][ T5835] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1032.079411][T15855] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1033.934108][ T5144] Bluetooth: hci0: command 0x2016 tx timeout [ 1035.280236][T15886] serio: Serial port pty6 [ 1036.018619][ T5835] Bluetooth: hci0: command 0x2016 tx timeout [ 1036.207361][T15891] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1036.792057][T15898] FAULT_INJECTION: forcing a failure. [ 1036.792057][T15898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1036.935187][T15898] CPU: 0 UID: 0 PID: 15898 Comm: syz.2.2107 Tainted: G L syzkaller #0 PREEMPT(full) [ 1036.935228][T15898] Tainted: [L]=SOFTLOCKUP [ 1036.935237][T15898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1036.935253][T15898] Call Trace: [ 1036.935261][T15898] [ 1036.935271][T15898] dump_stack_lvl+0x100/0x190 [ 1036.935314][T15898] should_fail_ex.cold+0x5/0xa [ 1036.935353][T15898] core_sys_select+0x9b9/0xbb0 [ 1036.935400][T15898] ? __pfx_core_sys_select+0x10/0x10 [ 1036.935471][T15898] ? ktime_get_ts64+0x2d2/0x3f0 [ 1036.935499][T15898] ? read_tsc+0x9/0x20 [ 1036.935525][T15898] ? ktime_get_ts64+0x256/0x3f0 [ 1036.935555][T15898] kern_select+0x20c/0x270 [ 1036.935597][T15898] ? __pfx_kern_select+0x10/0x10 [ 1036.935646][T15898] __x64_sys_select+0xbd/0x160 [ 1036.935685][T15898] ? do_syscall_64+0x95/0xf80 [ 1036.935714][T15898] ? lockdep_hardirqs_on+0x78/0x100 [ 1036.935742][T15898] do_syscall_64+0x106/0xf80 [ 1036.935770][T15898] ? clear_bhb_loop+0x40/0x90 [ 1036.935801][T15898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.935826][T15898] RIP: 0033:0x7faa2d39c799 [ 1036.935847][T15898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.935872][T15898] RSP: 002b:00007faa2e25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1036.935896][T15898] RAX: ffffffffffffffda RBX: 00007faa2d615fa0 RCX: 00007faa2d39c799 [ 1036.935913][T15898] RDX: 00002000000004c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 1036.935928][T15898] RBP: 00007faa2d432bd9 R08: 00002000000001c0 R09: 0000000000000000 [ 1036.935944][T15898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.935959][T15898] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 1036.935990][T15898] [ 1037.823174][T15907] vhci_hcd vhci_hcd.2: default hub control req: 0300 v0000 i0004 l0 [ 1038.828936][T15905] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1038.835492][T15922] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1038.908708][T15905] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1038.973869][T15905] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1039.010525][T15905] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1039.036641][T15905] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1039.080030][T15905] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1039.125367][T15905] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1039.988475][T15936] FAULT_INJECTION: forcing a failure. [ 1039.988475][T15936] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1040.095165][T15936] CPU: 0 UID: 0 PID: 15936 Comm: syz.3.2116 Tainted: G L syzkaller #0 PREEMPT(full) [ 1040.095201][T15936] Tainted: [L]=SOFTLOCKUP [ 1040.095210][T15936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1040.095224][T15936] Call Trace: [ 1040.095232][T15936] [ 1040.095242][T15936] dump_stack_lvl+0x100/0x190 [ 1040.095282][T15936] should_fail_ex.cold+0x5/0xa [ 1040.095305][T15936] ? prepare_alloc_pages+0x16d/0x5f0 [ 1040.095333][T15936] should_fail_alloc_page+0xeb/0x140 [ 1040.095359][T15936] prepare_alloc_pages+0x1f0/0x5f0 [ 1040.095384][T15936] ? __lock_acquire+0x4a5/0x2630 [ 1040.095415][T15936] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1040.095453][T15936] ? rcu_is_watching+0x12/0xc0 [ 1040.095507][T15936] ? trace_pelt_se_tp+0x159/0x1b0 [ 1040.095539][T15936] ? __update_load_avg_se+0x5c7/0xe80 [ 1040.095568][T15936] ? update_cfs_rq_load_avg+0x51/0x550 [ 1040.095598][T15936] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1040.095640][T15936] ? set_next_entity+0x11e/0x9c0 [ 1040.095678][T15936] ? __lock_acquire+0x4a5/0x2630 [ 1040.095709][T15936] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1040.095750][T15936] ? policy_nodemask+0xed/0x4f0 [ 1040.095777][T15936] alloc_pages_mpol+0x1fb/0x550 [ 1040.095803][T15936] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1040.095835][T15936] alloc_pages_noprof+0x131/0x390 [ 1040.095861][T15936] __pmd_alloc+0x3b/0x9c0 [ 1040.095891][T15936] __handle_mm_fault+0xa99/0x2b60 [ 1040.095927][T15936] ? mt_find+0x45e/0x8e0 [ 1040.095959][T15936] ? __pfx___handle_mm_fault+0x10/0x10 [ 1040.095995][T15936] ? __pfx_mt_find+0x10/0x10 [ 1040.096041][T15936] ? find_vma+0xbf/0x140 [ 1040.096062][T15936] ? __pfx_find_vma+0x10/0x10 [ 1040.096088][T15936] handle_mm_fault+0x36d/0xa20 [ 1040.096126][T15936] do_user_addr_fault+0x74c/0x12f0 [ 1040.096178][T15936] exc_page_fault+0x6f/0xd0 [ 1040.096220][T15936] asm_exc_page_fault+0x26/0x30 [ 1040.096244][T15936] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1040.096280][T15936] Code: 93 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 e9 cf 93 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1040.096302][T15936] RSP: 0018:ffffc900039afaf8 EFLAGS: 00050206 [ 1040.096321][T15936] RAX: 0000000000000001 RBX: 000000000000ff9c RCX: 000000000000ff9c [ 1040.096336][T15936] RDX: 0000000000000001 RSI: ffff888066cc0000 RDI: 0000000000000000 [ 1040.096351][T15936] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffed100cd99ff3 [ 1040.096366][T15936] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888066cc0000 [ 1040.096380][T15936] R13: 000000000000ff9c R14: 00007ffffffff000 R15: 0000000000000000 [ 1040.096409][T15936] _copy_to_user+0xa4/0xd0 [ 1040.096449][T15936] snd_pcm_oss_read2+0x294/0x400 [ 1040.096491][T15936] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 1040.096527][T15936] ? snd_pcm_kernel_ioctl+0x14a/0x2e0 [ 1040.096557][T15936] ? snd_pcm_oss_prepare+0x11e/0x240 [ 1040.096594][T15936] snd_pcm_oss_read+0x5aa/0x730 [ 1040.096621][T15936] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 1040.096658][T15936] vfs_readv+0x5d8/0x8d0 [ 1040.096699][T15936] ? __pfx_vfs_readv+0x10/0x10 [ 1040.096734][T15936] ? find_held_lock+0x2b/0x80 [ 1040.096771][T15936] ? __fget_files+0x21f/0x3d0 [ 1040.096799][T15936] ? do_readv+0x13e/0x340 [ 1040.096830][T15936] do_readv+0x13e/0x340 [ 1040.096864][T15936] ? __pfx_do_readv+0x10/0x10 [ 1040.096905][T15936] do_syscall_64+0x106/0xf80 [ 1040.096931][T15936] ? clear_bhb_loop+0x40/0x90 [ 1040.096959][T15936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1040.096986][T15936] RIP: 0033:0x7f496d99c799 [ 1040.097004][T15936] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1040.097047][T15936] RSP: 002b:00007f496e815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1040.097068][T15936] RAX: ffffffffffffffda RBX: 00007f496dc15fa0 RCX: 00007f496d99c799 [ 1040.097085][T15936] RDX: 0000000000000003 RSI: 0000200000000200 RDI: 0000000000000003 [ 1040.097100][T15936] RBP: 00007f496e815090 R08: 0000000000000000 R09: 0000000000000000 [ 1040.097115][T15936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1040.097130][T15936] R13: 00007f496dc16038 R14: 00007f496dc15fa0 R15: 00007ffe1f90a4e8 [ 1040.097161][T15936] [ 1041.088379][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 1041.095543][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout [ 1041.102376][ T5144] Bluetooth: hci0: command 0x2016 tx timeout [ 1041.109106][ T5144] Bluetooth: hci2: command 0x0c1a tx timeout [ 1042.469068][T15956] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1043.133478][ T5835] Bluetooth: hci0: command 0x2016 tx timeout [ 1043.140523][ T5144] Bluetooth: hci3: command 0x0c1a tx timeout [ 1043.722136][T15968] vhci_hcd vhci_hcd.2: default hub control req: 0300 v0000 i0004 l0 [ 1044.172869][T15973] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1045.213476][ T5835] Bluetooth: hci0: command 0x2016 tx timeout [ 1045.436396][T15988] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1046.395305][T15994] FAULT_INJECTION: forcing a failure. [ 1046.395305][T15994] name failslab, interval 1, probability 0, space 0, times 0 [ 1046.590196][T15994] CPU: 0 UID: 0 PID: 15994 Comm: syz.2.2126 Tainted: G L syzkaller #0 PREEMPT(full) [ 1046.590236][T15994] Tainted: [L]=SOFTLOCKUP [ 1046.590245][T15994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1046.590261][T15994] Call Trace: [ 1046.590269][T15994] [ 1046.590278][T15994] dump_stack_lvl+0x100/0x190 [ 1046.590321][T15994] should_fail_ex.cold+0x5/0xa [ 1046.590350][T15994] should_failslab+0xc2/0x120 [ 1046.590376][T15994] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1046.590412][T15994] ? __proc_create+0x2cb/0x8c0 [ 1046.590490][T15994] __proc_create+0x2cb/0x8c0 [ 1046.590530][T15994] ? __pfx___proc_create+0x10/0x10 [ 1046.590568][T15994] ? __lock_acquire+0x4a5/0x2630 [ 1046.590603][T15994] ? _raw_write_unlock+0x28/0x50 [ 1046.590631][T15994] ? proc_register+0x559/0x8a0 [ 1046.590673][T15994] proc_create_reg+0x75/0x170 [ 1046.590699][T15994] proc_create_data+0x86/0x110 [ 1046.590722][T15994] ? __pfx_proc_create_data+0x10/0x10 [ 1046.590746][T15994] ? net_generic+0xea/0x2a0 [ 1046.590778][T15994] gss_svc_init_net+0x2e7/0x640 [ 1046.590803][T15994] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 1046.590836][T15994] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 1046.590865][T15994] ops_init+0x1e2/0x5f0 [ 1046.590900][T15994] setup_net+0x118/0x3a0 [ 1046.590932][T15994] ? __pfx_setup_net+0x10/0x10 [ 1046.590961][T15994] ? lockdep_init_map_type+0x5c/0x250 [ 1046.590994][T15994] ? mutex_init_lockep+0x110/0x150 [ 1046.591033][T15994] copy_net_ns+0x46f/0x7c0 [ 1046.591070][T15994] create_new_namespaces+0x3ea/0xac0 [ 1046.591103][T15994] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1046.591132][T15994] ksys_unshare+0x473/0xad0 [ 1046.591166][T15994] ? __pfx_ksys_unshare+0x10/0x10 [ 1046.591208][T15994] __x64_sys_unshare+0x31/0x40 [ 1046.591239][T15994] do_syscall_64+0x106/0xf80 [ 1046.591267][T15994] ? clear_bhb_loop+0x40/0x90 [ 1046.591298][T15994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.591323][T15994] RIP: 0033:0x7faa2d39c799 [ 1046.591343][T15994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.591368][T15994] RSP: 002b:00007faa2e23d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1046.591392][T15994] RAX: ffffffffffffffda RBX: 00007faa2d616090 RCX: 00007faa2d39c799 [ 1046.591409][T15994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1046.591431][T15994] RBP: 00007faa2d432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1046.591447][T15994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.591462][T15994] R13: 00007faa2d616128 R14: 00007faa2d616090 R15: 00007ffee2f73f78 [ 1046.591495][T15994] [ 1049.740649][T16033] vhci_hcd vhci_hcd.2: default hub control req: 0300 v0000 i0004 l0 [ 1050.585952][T16042] netlink: 'syz.3.2134': attribute type 1 has an invalid length. [ 1051.319296][T16047] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1053.190128][T16058] FAULT_INJECTION: forcing a failure. [ 1053.190128][T16058] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1053.286927][T16058] CPU: 0 UID: 0 PID: 16058 Comm: syz.5.2138 Tainted: G L syzkaller #0 PREEMPT(full) [ 1053.286969][T16058] Tainted: [L]=SOFTLOCKUP [ 1053.286978][T16058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1053.286994][T16058] Call Trace: [ 1053.287002][T16058] [ 1053.287011][T16058] dump_stack_lvl+0x100/0x190 [ 1053.287053][T16058] should_fail_ex.cold+0x5/0xa [ 1053.287077][T16058] ? prepare_alloc_pages+0x16d/0x5f0 [ 1053.287109][T16058] should_fail_alloc_page+0xeb/0x140 [ 1053.287136][T16058] prepare_alloc_pages+0x1f0/0x5f0 [ 1053.287164][T16058] ? __lock_acquire+0x4a5/0x2630 [ 1053.287198][T16058] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1053.287246][T16058] ? __lock_acquire+0x4a5/0x2630 [ 1053.287298][T16058] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1053.287336][T16058] ? find_held_lock+0x2b/0x80 [ 1053.287358][T16058] ? is_bpf_text_address+0x8a/0x1a0 [ 1053.287395][T16058] ? is_bpf_text_address+0x8a/0x1a0 [ 1053.287432][T16058] ? bpf_ksym_find+0x124/0x1c0 [ 1053.287462][T16058] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1053.287491][T16058] ? kernel_text_address+0x8d/0x100 [ 1053.287526][T16058] ? is_bpf_text_address+0x8a/0x1a0 [ 1053.287563][T16058] ? __kernel_text_address+0xd/0x30 [ 1053.287599][T16058] ? unwind_get_return_address+0x59/0xa0 [ 1053.287625][T16058] ? arch_stack_walk+0xa6/0xf0 [ 1053.287650][T16058] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1053.287694][T16058] ? policy_nodemask+0xed/0x4f0 [ 1053.287727][T16058] alloc_pages_mpol+0x1fb/0x550 [ 1053.287755][T16058] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1053.287789][T16058] alloc_pages_noprof+0x131/0x390 [ 1053.287822][T16058] __pud_alloc+0x3b/0x760 [ 1053.287854][T16058] copy_page_range+0x3f06/0x6570 [ 1053.287899][T16058] ? __lock_acquire+0x4a5/0x2630 [ 1053.287950][T16058] ? mas_wr_store_entry+0x6d2/0x2390 [ 1053.287986][T16058] ? __pfx_copy_page_range+0x10/0x10 [ 1053.288024][T16058] ? mas_store+0x666/0xac0 [ 1053.288059][T16058] ? __pfx_mas_store+0x10/0x10 [ 1053.288099][T16058] ? __pfx___vma_start_write+0x10/0x10 [ 1053.288140][T16058] dup_mmap+0xd25/0x2180 [ 1053.288180][T16058] ? __pfx_dup_mmap+0x10/0x10 [ 1053.288207][T16058] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1053.288240][T16058] ? __lock_acquire+0x4a5/0x2630 [ 1053.288272][T16058] ? find_held_lock+0x2b/0x80 [ 1053.288293][T16058] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1053.288357][T16058] copy_process+0x73d7/0x7a10 [ 1053.288386][T16058] ? __pfx___schedule+0x10/0x10 [ 1053.288424][T16058] ? __pfx_copy_process+0x10/0x10 [ 1053.288461][T16058] ? _copy_from_user+0x59/0xd0 [ 1053.288505][T16058] kernel_clone+0xfc/0x9a0 [ 1053.288536][T16058] ? __pfx_kernel_clone+0x10/0x10 [ 1053.288563][T16058] ? futex_private_hash_put+0x107/0x1c0 [ 1053.288601][T16058] ? __pfx_futex_wake+0x10/0x10 [ 1053.288642][T16058] __do_sys_clone3+0x214/0x290 [ 1053.288671][T16058] ? __pfx___do_sys_clone3+0x10/0x10 [ 1053.288739][T16058] do_syscall_64+0x106/0xf80 [ 1053.288767][T16058] ? clear_bhb_loop+0x40/0x90 [ 1053.288798][T16058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1053.288829][T16058] RIP: 0033:0x7f25f379c799 [ 1053.288849][T16058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.288875][T16058] RSP: 002b:00007f25f46bdef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1053.288899][T16058] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f25f379c799 [ 1053.288916][T16058] RDX: 00007f25f46bdf10 RSI: 0000000000000058 RDI: 00007f25f46bdf10 [ 1053.288932][T16058] RBP: 00007f25f3832bd9 R08: 0000000000000000 R09: 0000000000000058 [ 1053.288948][T16058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1053.288963][T16058] R13: 00007f25f3a16038 R14: 00007f25f3a15fa0 R15: 00007ffd4a5facf8 [ 1053.288995][T16058] [ 1054.690266][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.699491][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1057.243386][T16103] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1058.304535][T16114] FAULT_INJECTION: forcing a failure. [ 1058.304535][T16114] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1058.594420][T16114] CPU: 0 UID: 0 PID: 16114 Comm: syz.1.2149 Tainted: G L syzkaller #0 PREEMPT(full) [ 1058.594459][T16114] Tainted: [L]=SOFTLOCKUP [ 1058.594468][T16114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1058.594482][T16114] Call Trace: [ 1058.594491][T16114] [ 1058.594500][T16114] dump_stack_lvl+0x100/0x190 [ 1058.594549][T16114] should_fail_ex.cold+0x5/0xa [ 1058.594577][T16114] _copy_to_user+0x32/0xd0 [ 1058.594619][T16114] simple_read_from_buffer+0xcb/0x170 [ 1058.594658][T16114] proc_fail_nth_read+0x1af/0x230 [ 1058.594687][T16114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1058.594717][T16114] ? rw_verify_area+0xce/0x6d0 [ 1058.594750][T16114] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1058.594778][T16114] vfs_read+0x1e4/0xb30 [ 1058.594818][T16114] ? __pfx_vfs_read+0x10/0x10 [ 1058.594854][T16114] ? __fget_files+0x215/0x3d0 [ 1058.594881][T16114] ? __fget_files+0x21f/0x3d0 [ 1058.594910][T16114] ksys_read+0x12a/0x250 [ 1058.594946][T16114] ? __pfx_ksys_read+0x10/0x10 [ 1058.594990][T16114] do_syscall_64+0x106/0xf80 [ 1058.595018][T16114] ? clear_bhb_loop+0x40/0x90 [ 1058.595047][T16114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.595071][T16114] RIP: 0033:0x7fb294d5cfce [ 1058.595091][T16114] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1058.595115][T16114] RSP: 002b:00007fb292fd4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1058.595137][T16114] RAX: ffffffffffffffda RBX: 00007fb292fd56c0 RCX: 00007fb294d5cfce [ 1058.595154][T16114] RDX: 000000000000000f RSI: 00007fb292fd50a0 RDI: 0000000000000007 [ 1058.595168][T16114] RBP: 00007fb292fd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1058.595183][T16114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1058.595197][T16114] R13: 00007fb2950163f8 R14: 00007fb295016360 R15: 00007fff890484d8 [ 1058.595228][T16114] [ 1060.171807][T16119] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1060.689087][T16127] FAULT_INJECTION: forcing a failure. [ 1060.689087][T16127] name failslab, interval 1, probability 0, space 0, times 0 [ 1060.769273][T16127] CPU: 0 UID: 0 PID: 16127 Comm: syz.1.2152 Tainted: G L syzkaller #0 PREEMPT(full) [ 1060.769315][T16127] Tainted: [L]=SOFTLOCKUP [ 1060.769324][T16127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1060.769339][T16127] Call Trace: [ 1060.769353][T16127] [ 1060.769363][T16127] dump_stack_lvl+0x100/0x190 [ 1060.769404][T16127] should_fail_ex.cold+0x5/0xa [ 1060.769432][T16127] should_failslab+0xc2/0x120 [ 1060.769457][T16127] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1060.769488][T16127] ? __do_sys_fanotify_init+0x5cf/0xe50 [ 1060.769523][T16127] ? get_mem_cgroup_from_mm+0x88/0x600 [ 1060.769557][T16127] ? get_mem_cgroup_from_mm+0x132/0x600 [ 1060.769595][T16127] __do_sys_fanotify_init+0x5cf/0xe50 [ 1060.769636][T16127] do_syscall_64+0x106/0xf80 [ 1060.769664][T16127] ? clear_bhb_loop+0x40/0x90 [ 1060.769693][T16127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.769718][T16127] RIP: 0033:0x7fb294d9c799 [ 1060.769738][T16127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1060.769762][T16127] RSP: 002b:00007fb295b9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 1060.769785][T16127] RAX: ffffffffffffffda RBX: 00007fb295016090 RCX: 00007fb294d9c799 [ 1060.769802][T16127] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000065 [ 1060.769817][T16127] RBP: 00007fb295b9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.769832][T16127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.769846][T16127] R13: 00007fb295016128 R14: 00007fb295016090 R15: 00007fff890484d8 [ 1060.769876][T16127] [ 1063.113342][T16141] nbd: must specify at least one socket [ 1064.615069][T16150] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1066.186971][T16165] FAULT_INJECTION: forcing a failure. [ 1066.186971][T16165] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.272010][T16165] CPU: 0 UID: 0 PID: 16165 Comm: syz.2.2160 Tainted: G L syzkaller #0 PREEMPT(full) [ 1066.272051][T16165] Tainted: [L]=SOFTLOCKUP [ 1066.272061][T16165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1066.272077][T16165] Call Trace: [ 1066.272085][T16165] [ 1066.272095][T16165] dump_stack_lvl+0x100/0x190 [ 1066.272137][T16165] should_fail_ex.cold+0x5/0xa [ 1066.272166][T16165] ? tomoyo_realpath_from_path+0xb6/0x690 [ 1066.272195][T16165] should_failslab+0xc2/0x120 [ 1066.272221][T16165] __kmalloc_noprof+0xe0/0x850 [ 1066.272264][T16165] tomoyo_realpath_from_path+0xb6/0x690 [ 1066.272300][T16165] tomoyo_path_perm+0x276/0x460 [ 1066.272337][T16165] ? tomoyo_path_perm+0x262/0x460 [ 1066.272378][T16165] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1066.272447][T16165] ? __fget_files+0x21f/0x3d0 [ 1066.272475][T16165] security_inode_getattr+0x116/0x280 [ 1066.272516][T16165] vfs_fstat+0x4b/0xe0 [ 1066.272546][T16165] __do_sys_newfstat+0x8b/0x110 [ 1066.272574][T16165] ? __pfx___do_sys_newfstat+0x10/0x10 [ 1066.272630][T16165] do_syscall_64+0x106/0xf80 [ 1066.272660][T16165] ? clear_bhb_loop+0x40/0x90 [ 1066.272690][T16165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.272724][T16165] RIP: 0033:0x7faa2d39c799 [ 1066.272745][T16165] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.272770][T16165] RSP: 002b:00007faa2e25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000005 [ 1066.272794][T16165] RAX: ffffffffffffffda RBX: 00007faa2d615fa0 RCX: 00007faa2d39c799 [ 1066.272811][T16165] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 1066.272827][T16165] RBP: 00007faa2d432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1066.272843][T16165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1066.272858][T16165] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 1066.272890][T16165] [ 1066.272900][T16165] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1067.684065][T16171] bond0: no command found in slaves file - use +ifname or -ifname [ 1068.534286][T16179] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1073.560398][T16208] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1073.614171][T16208] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1073.620266][T16208] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1073.695618][T16208] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1075.223050][ T5144] Bluetooth: hci1: command 0x0c1a tx timeout [ 1075.413615][T16228] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1075.693659][ T5144] Bluetooth: hci2: command 0x0c1a tx timeout [ 1075.701012][ T5835] Bluetooth: hci3: command 0x0c1a tx timeout [ 1075.773054][ T5144] Bluetooth: hci0: command 0x2016 tx timeout [ 1076.665818][T16245] NFSD: Failed to start, no listeners configured. [ 1079.274168][T16263] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1079.848689][T16271] nbd: must specify at least one socket [ 1081.141818][T16287] FAULT_INJECTION: forcing a failure. [ 1081.141818][T16287] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1081.237066][T16287] CPU: 0 UID: 0 PID: 16287 Comm: syz.5.2184 Tainted: G L syzkaller #0 PREEMPT(full) [ 1081.237106][T16287] Tainted: [L]=SOFTLOCKUP [ 1081.237116][T16287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1081.237131][T16287] Call Trace: [ 1081.237140][T16287] [ 1081.237150][T16287] dump_stack_lvl+0x100/0x190 [ 1081.237193][T16287] should_fail_ex.cold+0x5/0xa [ 1081.237218][T16287] ? prepare_alloc_pages+0x16d/0x5f0 [ 1081.237249][T16287] should_fail_alloc_page+0xeb/0x140 [ 1081.237277][T16287] prepare_alloc_pages+0x1f0/0x5f0 [ 1081.237305][T16287] ? arch_stack_walk+0xa6/0xf0 [ 1081.237332][T16287] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1081.237377][T16287] ? stack_trace_save+0x8e/0xc0 [ 1081.237401][T16287] ? __pfx_stack_trace_save+0x10/0x10 [ 1081.237426][T16287] ? stack_depot_save_flags+0x27/0x9d0 [ 1081.237457][T16287] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1081.237502][T16287] ? kasan_save_stack+0x3f/0x50 [ 1081.237540][T16287] ? kasan_save_stack+0x30/0x50 [ 1081.237578][T16287] ? __kasan_slab_alloc+0x89/0x90 [ 1081.237600][T16287] ? __pmd_alloc+0xbf/0x9c0 [ 1081.237626][T16287] ? move_page_tables+0x3224/0x4500 [ 1081.237661][T16287] ? copy_vma_and_data+0x25c/0x7c0 [ 1081.237694][T16287] ? move_vma+0x51b/0x1890 [ 1081.237730][T16287] ? mremap_to+0x1b7/0x450 [ 1081.237763][T16287] ? do_mremap+0xb76/0x2130 [ 1081.237795][T16287] ? __do_sys_mremap+0x126/0x170 [ 1081.237829][T16287] ? do_syscall_64+0x106/0xf80 [ 1081.237858][T16287] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.237896][T16287] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1081.237939][T16287] ? policy_nodemask+0xed/0x4f0 [ 1081.237966][T16287] alloc_pages_mpol+0x1fb/0x550 [ 1081.237993][T16287] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1081.238026][T16287] alloc_pages_noprof+0x131/0x390 [ 1081.238054][T16287] pte_alloc_one+0x1e/0x3e0 [ 1081.238082][T16287] __pte_alloc+0x6d/0x3f0 [ 1081.238106][T16287] ? __pfx___pte_alloc+0x10/0x10 [ 1081.238130][T16287] ? _raw_spin_unlock+0x28/0x50 [ 1081.238154][T16287] ? __pmd_alloc+0x6aa/0x9c0 [ 1081.238185][T16287] move_page_tables+0x257e/0x4500 [ 1081.238222][T16287] ? __pfx_copy_vma+0x10/0x10 [ 1081.238268][T16287] ? __pfx_move_page_tables+0x10/0x10 [ 1081.238319][T16287] ? finish_task_switch.isra.0+0x200/0xb80 [ 1081.238350][T16287] copy_vma_and_data+0x25c/0x7c0 [ 1081.238388][T16287] ? __pfx_copy_vma_and_data+0x10/0x10 [ 1081.238437][T16287] ? __vma_start_write+0x17f/0x280 [ 1081.238468][T16287] ? __pfx___vma_start_write+0x10/0x10 [ 1081.238513][T16287] move_vma+0x51b/0x1890 [ 1081.238553][T16287] ? __pfx_move_vma+0x10/0x10 [ 1081.238591][T16287] ? mm_get_unmapped_area_vmflags+0xd7/0x130 [ 1081.238620][T16287] ? cap_mmap_addr+0x4b/0x120 [ 1081.238654][T16287] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1081.238693][T16287] ? security_mmap_addr+0x71/0x1e0 [ 1081.238718][T16287] ? __get_unmapped_area+0x255/0x3e0 [ 1081.238749][T16287] ? vrm_set_new_addr+0x204/0x290 [ 1081.238786][T16287] mremap_to+0x1b7/0x450 [ 1081.238823][T16287] do_mremap+0xb76/0x2130 [ 1081.238870][T16287] ? __pfx_do_mremap+0x10/0x10 [ 1081.238912][T16287] ? ksys_write+0x190/0x250 [ 1081.238958][T16287] __do_sys_mremap+0x126/0x170 [ 1081.238995][T16287] ? __pfx___do_sys_mremap+0x10/0x10 [ 1081.239038][T16287] ? __x64_sys_futex+0x34f/0x4d0 [ 1081.239087][T16287] do_syscall_64+0x106/0xf80 [ 1081.239115][T16287] ? clear_bhb_loop+0x40/0x90 [ 1081.239146][T16287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1081.239171][T16287] RIP: 0033:0x7f25f379c799 [ 1081.239192][T16287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1081.239216][T16287] RSP: 002b:00007f25f46be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1081.239240][T16287] RAX: ffffffffffffffda RBX: 00007f25f3a15fa0 RCX: 00007f25f379c799 [ 1081.239257][T16287] RDX: 0000000000000013 RSI: 0000000000000004 RDI: 0000200000000000 [ 1081.239274][T16287] RBP: 00007f25f3832bd9 R08: 0000000100000000 R09: 0000000000000000 [ 1081.239290][T16287] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 1081.239305][T16287] R13: 00007f25f3a16038 R14: 00007f25f3a15fa0 R15: 00007ffd4a5facf8 [ 1081.239337][T16287] [ 1081.674243][T16284] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1086.432728][T16323] FAULT_INJECTION: forcing a failure. [ 1086.432728][T16323] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.524019][T16323] CPU: 0 UID: 0 PID: 16323 Comm: syz.3.2191 Tainted: G L syzkaller #0 PREEMPT(full) [ 1086.524060][T16323] Tainted: [L]=SOFTLOCKUP [ 1086.524069][T16323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1086.524085][T16323] Call Trace: [ 1086.524093][T16323] [ 1086.524104][T16323] dump_stack_lvl+0x100/0x190 [ 1086.524147][T16323] should_fail_ex.cold+0x5/0xa [ 1086.524176][T16323] should_failslab+0xc2/0x120 [ 1086.524202][T16323] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1086.524234][T16323] ? kvm_dev_ioctl+0x1320/0x1a50 [ 1086.524268][T16323] kvm_dev_ioctl+0x1320/0x1a50 [ 1086.524306][T16323] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1086.524344][T16323] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1086.524374][T16323] __x64_sys_ioctl+0x18e/0x210 [ 1086.524412][T16323] do_syscall_64+0x106/0xf80 [ 1086.524441][T16323] ? clear_bhb_loop+0x40/0x90 [ 1086.524472][T16323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.524497][T16323] RIP: 0033:0x7f496d99c799 [ 1086.524517][T16323] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.524541][T16323] RSP: 002b:00007f496e815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1086.524564][T16323] RAX: ffffffffffffffda RBX: 00007f496dc15fa0 RCX: 00007f496d99c799 [ 1086.524581][T16323] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1086.524596][T16323] RBP: 00007f496da32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1086.524611][T16323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1086.524627][T16323] R13: 00007f496dc16038 R14: 00007f496dc15fa0 R15: 00007ffe1f90a4e8 [ 1086.524658][T16323] [ 1086.710278][T16325] FAULT_INJECTION: forcing a failure. [ 1086.710278][T16325] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.724542][T16325] CPU: 0 UID: 0 PID: 16325 Comm: syz.2.2192 Tainted: G L syzkaller #0 PREEMPT(full) [ 1086.724580][T16325] Tainted: [L]=SOFTLOCKUP [ 1086.724589][T16325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1086.724604][T16325] Call Trace: [ 1086.724612][T16325] [ 1086.724623][T16325] dump_stack_lvl+0x100/0x190 [ 1086.724689][T16325] should_fail_ex.cold+0x5/0xa [ 1086.724718][T16325] should_failslab+0xc2/0x120 [ 1086.724743][T16325] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1086.724781][T16325] ? alloc_inode+0x68/0x250 [ 1086.724814][T16325] ? simple_start_creating+0xb0/0x110 [ 1086.724854][T16325] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 1086.725005][T16325] alloc_inode+0x68/0x250 [ 1086.725038][T16325] new_inode+0x22/0x1c0 [ 1086.725072][T16325] __debugfs_create_file+0x105/0x4f0 [ 1086.725115][T16325] debugfs_create_file_full+0x41/0x60 [ 1086.725156][T16325] kvm_dev_ioctl+0x1491/0x1a50 [ 1086.725195][T16325] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1086.725233][T16325] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1086.725263][T16325] __x64_sys_ioctl+0x18e/0x210 [ 1086.725300][T16325] do_syscall_64+0x106/0xf80 [ 1086.725330][T16325] ? clear_bhb_loop+0x40/0x90 [ 1086.725360][T16325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.725386][T16325] RIP: 0033:0x7faa2d39c799 [ 1086.725408][T16325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1086.725433][T16325] RSP: 002b:00007faa2e25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1086.725458][T16325] RAX: ffffffffffffffda RBX: 00007faa2d615fa0 RCX: 00007faa2d39c799 [ 1086.725474][T16325] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1086.725490][T16325] RBP: 00007faa2d432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1086.725505][T16325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1086.725519][T16325] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 1086.725551][T16325] [ 1086.725561][T16325] debugfs: out of free dentries, can not create file 'mmu_recycled' [ 1089.346169][T16348] FAULT_INJECTION: forcing a failure. [ 1089.346169][T16348] name failslab, interval 1, probability 0, space 0, times 0 [ 1089.346235][T16348] CPU: 0 UID: 0 PID: 16348 Comm: syz.2.2197 Tainted: G L syzkaller #0 PREEMPT(full) [ 1089.346270][T16348] Tainted: [L]=SOFTLOCKUP [ 1089.346279][T16348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1089.346294][T16348] Call Trace: [ 1089.346302][T16348] [ 1089.346312][T16348] dump_stack_lvl+0x100/0x190 [ 1089.346354][T16348] should_fail_ex.cold+0x5/0xa [ 1089.346383][T16348] ? drm_atomic_state_init+0x190/0x490 [ 1089.346425][T16348] should_failslab+0xc2/0x120 [ 1089.346451][T16348] __kmalloc_noprof+0xe0/0x850 [ 1089.346495][T16348] drm_atomic_state_init+0x190/0x490 [ 1089.346519][T16348] ? kasan_save_track+0x14/0x30 [ 1089.346561][T16348] drm_atomic_state_alloc+0xd3/0x120 [ 1089.346587][T16348] drm_client_modeset_commit_atomic+0xcc/0x7e0 [ 1089.346623][T16348] ? __mutex_lock+0x26a/0x1b90 [ 1089.346659][T16348] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 1089.346696][T16348] ? drm_master_internal_acquire+0x21/0x80 [ 1089.346742][T16348] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1089.346784][T16348] drm_client_modeset_commit_locked+0x14d/0x580 [ 1089.346820][T16348] drm_fb_helper_pan_display+0x32d/0xa40 [ 1089.346868][T16348] fb_pan_display+0x195/0x820 [ 1089.346982][T16348] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 1089.347019][T16348] bit_update_start+0x48/0x1f0 [ 1089.347063][T16348] fbcon_modechanged+0x5e5/0x700 [ 1089.347106][T16348] fbcon_set_all_vcs+0x1d6/0x460 [ 1089.347148][T16348] rotate_all_store+0x315/0x400 [ 1089.347187][T16348] ? __pfx_rotate_all_store+0x10/0x10 [ 1089.347225][T16348] dev_attr_store+0x58/0x80 [ 1089.347287][T16348] ? __pfx_dev_attr_store+0x10/0x10 [ 1089.347328][T16348] sysfs_kf_write+0xf2/0x150 [ 1089.347362][T16348] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1089.347389][T16348] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1089.347423][T16348] vfs_write+0x6ac/0x1070 [ 1089.347463][T16348] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1089.347492][T16348] ? __pfx_vfs_write+0x10/0x10 [ 1089.347553][T16348] ksys_write+0x12a/0x250 [ 1089.347591][T16348] ? __pfx_ksys_write+0x10/0x10 [ 1089.347640][T16348] do_syscall_64+0x106/0xf80 [ 1089.347674][T16348] ? clear_bhb_loop+0x40/0x90 [ 1089.347706][T16348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.347733][T16348] RIP: 0033:0x7faa2d39c799 [ 1089.347754][T16348] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.347780][T16348] RSP: 002b:00007faa2e25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1089.347804][T16348] RAX: ffffffffffffffda RBX: 00007faa2d615fa0 RCX: 00007faa2d39c799 [ 1089.347821][T16348] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000003 [ 1089.347836][T16348] RBP: 00007faa2d432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1089.347852][T16348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1089.347867][T16348] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 1089.347902][T16348] [ 1093.883712][T16394] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2205'. [ 1095.563558][T16405] FAULT_INJECTION: forcing a failure. [ 1095.563558][T16405] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.629781][T16405] CPU: 0 UID: 0 PID: 16405 Comm: syz.2.2208 Tainted: G L syzkaller #0 PREEMPT(full) [ 1095.629820][T16405] Tainted: [L]=SOFTLOCKUP [ 1095.629828][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1095.629843][T16405] Call Trace: [ 1095.629851][T16405] [ 1095.629861][T16405] dump_stack_lvl+0x100/0x190 [ 1095.629903][T16405] should_fail_ex.cold+0x5/0xa [ 1095.629930][T16405] should_failslab+0xc2/0x120 [ 1095.629955][T16405] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1095.629985][T16405] ? kernfs_fop_open+0x23d/0xd50 [ 1095.630018][T16405] kernfs_fop_open+0x23d/0xd50 [ 1095.630049][T16405] do_dentry_open+0x6d8/0x1660 [ 1095.630072][T16405] ? __pfx_kernfs_fop_open+0x10/0x10 [ 1095.630104][T16405] vfs_open+0x82/0x3f0 [ 1095.630146][T16405] path_openat+0x208c/0x31a0 [ 1095.630180][T16405] ? __pfx_path_openat+0x10/0x10 [ 1095.630214][T16405] do_file_open+0x20e/0x430 [ 1095.630240][T16405] ? __pfx_do_file_open+0x10/0x10 [ 1095.630285][T16405] ? alloc_fd+0x476/0x790 [ 1095.630310][T16405] ? do_getname+0x191/0x390 [ 1095.630342][T16405] do_sys_openat2+0x10d/0x1e0 [ 1095.630372][T16405] ? __pfx_do_sys_openat2+0x10/0x10 [ 1095.630413][T16405] __x64_sys_openat+0x12d/0x210 [ 1095.630444][T16405] ? __pfx___x64_sys_openat+0x10/0x10 [ 1095.630487][T16405] do_syscall_64+0x106/0xf80 [ 1095.630514][T16405] ? clear_bhb_loop+0x40/0x90 [ 1095.630544][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.630568][T16405] RIP: 0033:0x7faa2d39c799 [ 1095.630587][T16405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.630611][T16405] RSP: 002b:00007faa2e25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1095.630633][T16405] RAX: ffffffffffffffda RBX: 00007faa2d615fa0 RCX: 00007faa2d39c799 [ 1095.630649][T16405] RDX: 00000000000c0002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1095.630665][T16405] RBP: 00007faa2d432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1095.630680][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1095.630695][T16405] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 1095.630726][T16405] [ 1096.189533][ T5144] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 1101.406754][T16476] FAULT_INJECTION: forcing a failure. [ 1101.406754][T16476] name failslab, interval 1, probability 0, space 0, times 0 [ 1101.521530][T16476] CPU: 0 UID: 0 PID: 16476 Comm: syz.3.2219 Tainted: G L syzkaller #0 PREEMPT(full) [ 1101.521577][T16476] Tainted: [L]=SOFTLOCKUP [ 1101.521586][T16476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1101.521600][T16476] Call Trace: [ 1101.521609][T16476] [ 1101.521619][T16476] dump_stack_lvl+0x100/0x190 [ 1101.521660][T16476] should_fail_ex.cold+0x5/0xa [ 1101.521688][T16476] should_failslab+0xc2/0x120 [ 1101.521713][T16476] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1101.521744][T16476] ? snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 1101.521792][T16476] snd_pcm_oss_change_params_locked+0x1db/0x39f0 [ 1101.521834][T16476] ? __mutex_lock+0x26a/0x1b90 [ 1101.521865][T16476] ? tomoyo_path_number_perm+0x188/0x580 [ 1101.521903][T16476] ? snd_pcm_oss_ioctl+0x2973/0x3720 [ 1101.521945][T16476] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1101.521983][T16476] ? __pfx___mutex_lock+0x10/0x10 [ 1101.522024][T16476] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1101.522064][T16476] snd_pcm_oss_ioctl+0x2995/0x3720 [ 1101.522103][T16476] ? __fget_files+0x215/0x3d0 [ 1101.522122][T16476] ? hook_file_ioctl_common+0x146/0x410 [ 1101.522162][T16476] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1101.522203][T16476] ? __fget_files+0x21f/0x3d0 [ 1101.522228][T16476] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1101.522268][T16476] __x64_sys_ioctl+0x18e/0x210 [ 1101.522303][T16476] do_syscall_64+0x106/0xf80 [ 1101.522330][T16476] ? clear_bhb_loop+0x40/0x90 [ 1101.522360][T16476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.522384][T16476] RIP: 0033:0x7f496d99c799 [ 1101.522403][T16476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1101.522427][T16476] RSP: 002b:00007f496e815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1101.522449][T16476] RAX: ffffffffffffffda RBX: 00007f496dc15fa0 RCX: 00007f496d99c799 [ 1101.522465][T16476] RDX: 00002000000000c0 RSI: 000000008010500c RDI: 0000000000000003 [ 1101.522481][T16476] RBP: 00007f496e815090 R08: 0000000000000000 R09: 0000000000000000 [ 1101.522495][T16476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.522510][T16476] R13: 00007f496dc16038 R14: 00007f496dc15fa0 R15: 00007ffe1f90a4e8 [ 1101.522547][T16476] [ 1104.063340][T16491] nbd: must specify at least one socket [ 1104.717242][T16502] FAULT_INJECTION: forcing a failure. [ 1104.717242][T16502] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1104.801008][T16502] CPU: 0 UID: 0 PID: 16502 Comm: syz.5.2225 Tainted: G L syzkaller #0 PREEMPT(full) [ 1104.801048][T16502] Tainted: [L]=SOFTLOCKUP [ 1104.801058][T16502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1104.801074][T16502] Call Trace: [ 1104.801082][T16502] [ 1104.801093][T16502] dump_stack_lvl+0x100/0x190 [ 1104.801136][T16502] should_fail_ex.cold+0x5/0xa [ 1104.801161][T16502] ? prepare_alloc_pages+0x16d/0x5f0 [ 1104.801192][T16502] should_fail_alloc_page+0xeb/0x140 [ 1104.801219][T16502] prepare_alloc_pages+0x1f0/0x5f0 [ 1104.801259][T16502] ? arch_stack_walk+0xa6/0xf0 [ 1104.801287][T16502] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 1104.801332][T16502] ? stack_trace_save+0x8e/0xc0 [ 1104.801357][T16502] ? __pfx_stack_trace_save+0x10/0x10 [ 1104.801381][T16502] ? stack_depot_save_flags+0x27/0x9d0 [ 1104.801406][T16502] ? __lock_acquire+0x4a5/0x2630 [ 1104.801440][T16502] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1104.801477][T16502] ? kasan_save_stack+0x3f/0x50 [ 1104.801513][T16502] ? kasan_save_stack+0x30/0x50 [ 1104.801550][T16502] ? __kasan_slab_alloc+0x89/0x90 [ 1104.801572][T16502] ? __pmd_alloc+0xbf/0x9c0 [ 1104.801597][T16502] ? copy_page_range+0x4531/0x6570 [ 1104.801628][T16502] ? dup_mmap+0xd25/0x2180 [ 1104.801653][T16502] ? copy_process+0x73d7/0x7a10 [ 1104.801680][T16502] ? kernel_clone+0xfc/0x9a0 [ 1104.801706][T16502] ? __do_sys_clone3+0x214/0x290 [ 1104.801733][T16502] ? do_syscall_64+0x106/0xf80 [ 1104.801761][T16502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.801799][T16502] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1104.801842][T16502] ? policy_nodemask+0xed/0x4f0 [ 1104.801870][T16502] alloc_pages_mpol+0x1fb/0x550 [ 1104.801897][T16502] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1104.801931][T16502] alloc_pages_noprof+0x131/0x390 [ 1104.801958][T16502] pte_alloc_one+0x1e/0x3e0 [ 1104.801986][T16502] __pte_alloc+0x6d/0x3f0 [ 1104.802009][T16502] ? __pfx___pte_alloc+0x10/0x10 [ 1104.802033][T16502] ? _raw_spin_unlock+0x28/0x50 [ 1104.802057][T16502] ? __pmd_alloc+0x6aa/0x9c0 [ 1104.802087][T16502] copy_page_range+0x3e51/0x6570 [ 1104.802152][T16502] ? __pfx_copy_page_range+0x10/0x10 [ 1104.802190][T16502] ? mas_store+0x666/0xac0 [ 1104.802227][T16502] ? __pfx_mas_store+0x10/0x10 [ 1104.802273][T16502] ? __pfx___vma_start_write+0x10/0x10 [ 1104.802314][T16502] dup_mmap+0xd25/0x2180 [ 1104.802355][T16502] ? __pfx_dup_mmap+0x10/0x10 [ 1104.802382][T16502] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1104.802414][T16502] ? __lock_acquire+0x4a5/0x2630 [ 1104.802446][T16502] ? find_held_lock+0x2b/0x80 [ 1104.802468][T16502] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1104.802531][T16502] copy_process+0x73d7/0x7a10 [ 1104.802558][T16502] ? futex_unqueue+0x133/0x2c0 [ 1104.802602][T16502] ? __pfx_copy_process+0x10/0x10 [ 1104.802638][T16502] ? _copy_from_user+0x59/0xd0 [ 1104.802681][T16502] kernel_clone+0xfc/0x9a0 [ 1104.802712][T16502] ? __pfx_kernel_clone+0x10/0x10 [ 1104.802747][T16502] ? __pfx_futex_wait+0x10/0x10 [ 1104.802793][T16502] __do_sys_clone3+0x214/0x290 [ 1104.802822][T16502] ? __pfx___do_sys_clone3+0x10/0x10 [ 1104.802894][T16502] do_syscall_64+0x106/0xf80 [ 1104.802923][T16502] ? clear_bhb_loop+0x40/0x90 [ 1104.802955][T16502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1104.802982][T16502] RIP: 0033:0x7f25f379c799 [ 1104.803003][T16502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1104.803027][T16502] RSP: 002b:00007f25f46bdef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1104.803052][T16502] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f25f379c799 [ 1104.803069][T16502] RDX: 00007f25f46bdf10 RSI: 0000000000000058 RDI: 00007f25f46bdf10 [ 1104.803086][T16502] RBP: 00007f25f3832bd9 R08: 0000000000000000 R09: 0000000000000058 [ 1104.803101][T16502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1104.803117][T16502] R13: 00007f25f3a16038 R14: 00007f25f3a15fa0 R15: 00007ffd4a5facf8 [ 1104.803149][T16502] [ 1106.874448][T16520] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2230'. [ 1108.184621][T16542] FAULT_INJECTION: forcing a failure. [ 1108.184621][T16542] name failslab, interval 1, probability 0, space 0, times 0 [ 1108.293146][T16542] CPU: 0 UID: 0 PID: 16542 Comm: syz.1.2235 Tainted: G L syzkaller #0 PREEMPT(full) [ 1108.293187][T16542] Tainted: [L]=SOFTLOCKUP [ 1108.293196][T16542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1108.293212][T16542] Call Trace: [ 1108.293220][T16542] [ 1108.293230][T16542] dump_stack_lvl+0x100/0x190 [ 1108.293273][T16542] should_fail_ex.cold+0x5/0xa [ 1108.293302][T16542] should_failslab+0xc2/0x120 [ 1108.293328][T16542] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1108.293365][T16542] ? security_inode_alloc+0x3b/0x2c0 [ 1108.293403][T16542] ? lockdep_init_map_type+0x5c/0x250 [ 1108.293445][T16542] security_inode_alloc+0x3b/0x2c0 [ 1108.293484][T16542] inode_init_always_gfp+0xced/0x1040 [ 1108.293512][T16542] alloc_inode+0x8e/0x250 [ 1108.293545][T16542] new_inode+0x22/0x1c0 [ 1108.293579][T16542] __debugfs_create_file+0x105/0x4f0 [ 1108.293623][T16542] debugfs_create_file_full+0x41/0x60 [ 1108.293664][T16542] kvm_dev_ioctl+0x1491/0x1a50 [ 1108.293703][T16542] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1108.293741][T16542] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1108.293770][T16542] __x64_sys_ioctl+0x18e/0x210 [ 1108.293808][T16542] do_syscall_64+0x106/0xf80 [ 1108.293837][T16542] ? clear_bhb_loop+0x40/0x90 [ 1108.293868][T16542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1108.293894][T16542] RIP: 0033:0x7fb294d9c799 [ 1108.293915][T16542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1108.293940][T16542] RSP: 002b:00007fb295bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1108.293971][T16542] RAX: ffffffffffffffda RBX: 00007fb295015fa0 RCX: 00007fb294d9c799 [ 1108.293988][T16542] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1108.294009][T16542] RBP: 00007fb294e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1108.294026][T16542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1108.294041][T16542] R13: 00007fb295016038 R14: 00007fb295015fa0 R15: 00007fff890484d8 [ 1108.294074][T16542] [ 1108.294168][T16542] debugfs: out of free dentries, can not create file 'mmu_recycled' [ 1109.024085][T16549] random: crng reseeded on system resumption [ 1109.162682][T16549] FAULT_INJECTION: forcing a failure. [ 1109.162682][T16549] name failslab, interval 1, probability 0, space 0, times 0 [ 1109.279207][T16549] CPU: 0 UID: 0 PID: 16549 Comm: syz.2.2236 Tainted: G L syzkaller #0 PREEMPT(full) [ 1109.279247][T16549] Tainted: [L]=SOFTLOCKUP [ 1109.279256][T16549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1109.279271][T16549] Call Trace: [ 1109.279280][T16549] [ 1109.279289][T16549] dump_stack_lvl+0x100/0x190 [ 1109.279331][T16549] should_fail_ex.cold+0x5/0xa [ 1109.279361][T16549] should_failslab+0xc2/0x120 [ 1109.279386][T16549] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1109.279423][T16549] ? security_file_alloc+0x34/0x2c0 [ 1109.279448][T16549] ? trace_kmem_cache_alloc+0xf3/0x120 [ 1109.279478][T16549] security_file_alloc+0x34/0x2c0 [ 1109.279504][T16549] init_file+0x95/0x480 [ 1109.279533][T16549] alloc_empty_file+0x73/0x1c0 [ 1109.279564][T16549] alloc_file_pseudo+0x13a/0x230 [ 1109.279607][T16549] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1109.279647][T16549] __shmem_file_setup+0x221/0x490 [ 1109.279683][T16549] ? __pfx___shmem_file_setup+0x10/0x10 [ 1109.279721][T16549] ? vm_area_alloc+0x1f/0x160 [ 1109.279757][T16549] shmem_zero_setup+0x96/0x1b0 [ 1109.279797][T16549] __mmap_region+0x2198/0x29e0 [ 1109.279838][T16549] ? __pfx___mmap_region+0x10/0x10 [ 1109.279888][T16549] ? set_next_entity+0x11e/0x9c0 [ 1109.279929][T16549] ? __lock_acquire+0x4a5/0x2630 [ 1109.279960][T16549] ? update_cfs_rq_load_avg+0x51/0x550 [ 1109.279999][T16549] ? find_held_lock+0x2b/0x80 [ 1109.280021][T16549] ? finish_task_switch.isra.0+0x200/0xb80 [ 1109.280047][T16549] ? finish_task_switch.isra.0+0x200/0xb80 [ 1109.280085][T16549] ? trace_sched_exit_tp+0x13a/0x180 [ 1109.280114][T16549] ? __schedule+0x1000/0x6120 [ 1109.280176][T16549] ? rcu_is_watching+0x12/0xc0 [ 1109.280213][T16549] ? cap_capable+0x107/0x460 [ 1109.280252][T16549] mmap_region+0x180/0x3e0 [ 1109.280294][T16549] do_mmap+0xc63/0x12f0 [ 1109.280326][T16549] ? __pfx_do_mmap+0x10/0x10 [ 1109.280353][T16549] ? __pfx_down_write_killable+0x10/0x10 [ 1109.280393][T16549] vm_mmap_pgoff+0x29e/0x470 [ 1109.280425][T16549] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1109.280454][T16549] ? do_futex+0x192/0x350 [ 1109.280486][T16549] ? __pfx_do_futex+0x10/0x10 [ 1109.280522][T16549] ksys_mmap_pgoff+0xe1/0x650 [ 1109.280548][T16549] ? __x64_sys_futex+0x34f/0x4d0 [ 1109.280578][T16549] ? __x64_sys_futex+0x358/0x4d0 [ 1109.280610][T16549] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1109.280636][T16549] ? xfd_validate_state+0x129/0x190 [ 1109.280677][T16549] __x64_sys_mmap+0x125/0x190 [ 1109.280716][T16549] do_syscall_64+0x106/0xf80 [ 1109.280745][T16549] ? clear_bhb_loop+0x40/0x90 [ 1109.280775][T16549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.280801][T16549] RIP: 0033:0x7faa2d39c799 [ 1109.280821][T16549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.280845][T16549] RSP: 002b:00007faa2e25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1109.280875][T16549] RAX: ffffffffffffffda RBX: 00007faa2d615fa0 RCX: 00007faa2d39c799 [ 1109.280892][T16549] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1109.280908][T16549] RBP: 00007faa2d432bd9 R08: fffffffffffffffa R09: 0000000000008000 [ 1109.280924][T16549] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1109.280940][T16549] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 1109.280971][T16549] [ 1109.615996][T16555] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 1110.038965][T16557] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 1113.541462][T16587] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1114.386893][T16608] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1115.825492][T16619] kAFS: Invalid Command on /proc/fs/afs/cells file [ 1116.019951][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.026435][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.969262][T16637] random: crng reseeded on system resumption [ 1118.385667][T16647] bond0: invalid ARP target specified [ 1118.516858][T16650] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1119.735399][T16660] netlink: 93 bytes leftover after parsing attributes in process `syz.5.2261'. [ 1120.777433][T16670] : Can't lookup blockdev [ 1121.644369][T16676] netlink: 'syz.2.2265': attribute type 1 has an invalid length. [ 1122.095157][T16681] zswap: compressor not available [ 1124.216691][T16707] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2272'. [ 1124.259231][T16709] FAULT_INJECTION: forcing a failure. [ 1124.259231][T16709] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.382577][T16709] CPU: 0 UID: 0 PID: 16709 Comm: syz.3.2273 Tainted: G L syzkaller #0 PREEMPT(full) [ 1124.382618][T16709] Tainted: [L]=SOFTLOCKUP [ 1124.382681][T16709] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1124.382697][T16709] Call Trace: [ 1124.382706][T16709] [ 1124.382715][T16709] dump_stack_lvl+0x100/0x190 [ 1124.382762][T16709] should_fail_ex.cold+0x5/0xa [ 1124.382793][T16709] should_failslab+0xc2/0x120 [ 1124.382819][T16709] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1124.382852][T16709] ? kvm_dev_ioctl+0x1320/0x1a50 [ 1124.382887][T16709] kvm_dev_ioctl+0x1320/0x1a50 [ 1124.382925][T16709] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1124.382976][T16709] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1124.383005][T16709] __x64_sys_ioctl+0x18e/0x210 [ 1124.383044][T16709] do_syscall_64+0x106/0xf80 [ 1124.383074][T16709] ? clear_bhb_loop+0x40/0x90 [ 1124.383105][T16709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.383151][T16709] RIP: 0033:0x7f496d99c799 [ 1124.383172][T16709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.383196][T16709] RSP: 002b:00007f496e815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1124.383219][T16709] RAX: ffffffffffffffda RBX: 00007f496dc15fa0 RCX: 00007f496d99c799 [ 1124.383236][T16709] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000002 [ 1124.383251][T16709] RBP: 00007f496da32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1124.383266][T16709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1124.383281][T16709] R13: 00007f496dc16038 R14: 00007f496dc15fa0 R15: 00007ffe1f90a4e8 [ 1124.383312][T16709] [ 1125.408791][T16719] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2275'. [ 1126.198470][T16732] FAULT_INJECTION: forcing a failure. [ 1126.198470][T16732] name failslab, interval 1, probability 0, space 0, times 0 [ 1126.443833][T16732] CPU: 0 UID: 0 PID: 16732 Comm: syz.2.2278 Tainted: G L syzkaller #0 PREEMPT(full) [ 1126.443873][T16732] Tainted: [L]=SOFTLOCKUP [ 1126.443882][T16732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1126.443898][T16732] Call Trace: [ 1126.443907][T16732] [ 1126.443917][T16732] dump_stack_lvl+0x100/0x190 [ 1126.443960][T16732] should_fail_ex.cold+0x5/0xa [ 1126.443989][T16732] should_failslab+0xc2/0x120 [ 1126.444015][T16732] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1126.444053][T16732] ? security_inode_alloc+0x3b/0x2c0 [ 1126.444091][T16732] ? lockdep_init_map_type+0x5c/0x250 [ 1126.444129][T16732] security_inode_alloc+0x3b/0x2c0 [ 1126.444167][T16732] inode_init_always_gfp+0xced/0x1040 [ 1126.444198][T16732] alloc_inode+0x8e/0x250 [ 1126.444230][T16732] sock_alloc+0x44/0x280 [ 1126.444263][T16732] ? security_socket_create+0x7f/0x250 [ 1126.444300][T16732] sock_create_lite+0x82/0x120 [ 1126.444335][T16732] __netlink_kernel_create+0xbd/0x750 [ 1126.444372][T16732] ? __pfx___netlink_kernel_create+0x10/0x10 [ 1126.444422][T16732] uevent_net_init+0xf8/0x330 [ 1126.444460][T16732] ? __pfx_uevent_net_init+0x10/0x10 [ 1126.444498][T16732] ? __pfx_uevent_net_rcv+0x10/0x10 [ 1126.444536][T16732] ? __kmalloc_noprof+0x320/0x850 [ 1126.444578][T16732] ? __pfx_uevent_net_init+0x10/0x10 [ 1126.444613][T16732] ops_init+0x1e2/0x5f0 [ 1126.444648][T16732] setup_net+0x118/0x3a0 [ 1126.444680][T16732] ? __pfx_setup_net+0x10/0x10 [ 1126.444709][T16732] ? lockdep_init_map_type+0x5c/0x250 [ 1126.444742][T16732] ? mutex_init_lockep+0x110/0x150 [ 1126.444780][T16732] copy_net_ns+0x46f/0x7c0 [ 1126.444817][T16732] create_new_namespaces+0x3ea/0xac0 [ 1126.444850][T16732] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1126.444880][T16732] ksys_unshare+0x473/0xad0 [ 1126.444913][T16732] ? __pfx_ksys_unshare+0x10/0x10 [ 1126.444955][T16732] __x64_sys_unshare+0x31/0x40 [ 1126.444985][T16732] do_syscall_64+0x106/0xf80 [ 1126.445013][T16732] ? clear_bhb_loop+0x40/0x90 [ 1126.445043][T16732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1126.445068][T16732] RIP: 0033:0x7faa2d39c799 [ 1126.445089][T16732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1126.445113][T16732] RSP: 002b:00007faa2e25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1126.445137][T16732] RAX: ffffffffffffffda RBX: 00007faa2d615fa0 RCX: 00007faa2d39c799 [ 1126.445154][T16732] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1126.445169][T16732] RBP: 00007faa2d432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1126.445186][T16732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1126.445201][T16732] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 1126.445233][T16732] [ 1126.445269][T16732] kobject_uevent: unable to create netlink socket! [ 1127.356585][T16743] FAULT_INJECTION: forcing a failure. [ 1127.356585][T16743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1127.573330][T16746] random: crng reseeded on system resumption [ 1127.600675][T16743] CPU: 0 UID: 0 PID: 16743 Comm: syz.1.2280 Tainted: G L syzkaller #0 PREEMPT(full) [ 1127.600714][T16743] Tainted: [L]=SOFTLOCKUP [ 1127.600722][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1127.600737][T16743] Call Trace: [ 1127.600745][T16743] [ 1127.600755][T16743] dump_stack_lvl+0x100/0x190 [ 1127.600795][T16743] should_fail_ex.cold+0x5/0xa [ 1127.600823][T16743] _copy_to_user+0x32/0xd0 [ 1127.600865][T16743] simple_read_from_buffer+0xcb/0x170 [ 1127.600904][T16743] proc_fail_nth_read+0x1af/0x230 [ 1127.600935][T16743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1127.600965][T16743] ? rw_verify_area+0xce/0x6d0 [ 1127.600999][T16743] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1127.601027][T16743] vfs_read+0x1e4/0xb30 [ 1127.601067][T16743] ? __pfx_vfs_read+0x10/0x10 [ 1127.601103][T16743] ? __fget_files+0x215/0x3d0 [ 1127.601130][T16743] ? __fget_files+0x21f/0x3d0 [ 1127.601159][T16743] ksys_read+0x12a/0x250 [ 1127.601195][T16743] ? __pfx_ksys_read+0x10/0x10 [ 1127.601248][T16743] do_syscall_64+0x106/0xf80 [ 1127.601276][T16743] ? clear_bhb_loop+0x40/0x90 [ 1127.601306][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1127.601331][T16743] RIP: 0033:0x7fb294d5cfce [ 1127.601350][T16743] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1127.601374][T16743] RSP: 002b:00007fb295b9cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1127.601397][T16743] RAX: ffffffffffffffda RBX: 00007fb295b9d6c0 RCX: 00007fb294d5cfce [ 1127.601414][T16743] RDX: 000000000000000f RSI: 00007fb295b9d0a0 RDI: 0000000000000006 [ 1127.601429][T16743] RBP: 00007fb295b9d090 R08: 0000000000000000 R09: 0000000000000000 [ 1127.601444][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1127.601459][T16743] R13: 00007fb295016128 R14: 00007fb295016090 R15: 00007fff890484d8 [ 1127.601490][T16743] [ 1129.032658][T16748] FAULT_INJECTION: forcing a failure. [ 1129.032658][T16748] name failslab, interval 1, probability 0, space 0, times 0 [ 1129.193792][T16748] CPU: 0 UID: 0 PID: 16748 Comm: syz.5.2281 Tainted: G L syzkaller #0 PREEMPT(full) [ 1129.193831][T16748] Tainted: [L]=SOFTLOCKUP [ 1129.193841][T16748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1129.193857][T16748] Call Trace: [ 1129.193865][T16748] [ 1129.193875][T16748] dump_stack_lvl+0x100/0x190 [ 1129.193918][T16748] should_fail_ex.cold+0x5/0xa [ 1129.193948][T16748] should_failslab+0xc2/0x120 [ 1129.193973][T16748] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1129.194010][T16748] ? alloc_empty_file+0x55/0x1c0 [ 1129.194046][T16748] alloc_empty_file+0x55/0x1c0 [ 1129.194077][T16748] alloc_file_pseudo+0x13a/0x230 [ 1129.194110][T16748] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1129.194149][T16748] __shmem_file_setup+0x221/0x490 [ 1129.194184][T16748] ? __pfx___shmem_file_setup+0x10/0x10 [ 1129.194231][T16748] ? vm_area_alloc+0x1f/0x160 [ 1129.194268][T16748] shmem_zero_setup+0x96/0x1b0 [ 1129.194308][T16748] __mmap_region+0x2198/0x29e0 [ 1129.194350][T16748] ? __pfx___mmap_region+0x10/0x10 [ 1129.194392][T16748] ? set_next_entity+0x11e/0x9c0 [ 1129.194432][T16748] ? __lock_acquire+0x4a5/0x2630 [ 1129.194463][T16748] ? update_cfs_rq_load_avg+0x51/0x550 [ 1129.194502][T16748] ? find_held_lock+0x2b/0x80 [ 1129.194524][T16748] ? finish_task_switch.isra.0+0x200/0xb80 [ 1129.194550][T16748] ? finish_task_switch.isra.0+0x200/0xb80 [ 1129.194588][T16748] ? trace_sched_exit_tp+0x13a/0x180 [ 1129.194617][T16748] ? __schedule+0x1000/0x6120 [ 1129.194680][T16748] ? rcu_is_watching+0x12/0xc0 [ 1129.194719][T16748] ? cap_capable+0x107/0x460 [ 1129.194759][T16748] mmap_region+0x180/0x3e0 [ 1129.194801][T16748] do_mmap+0xc63/0x12f0 [ 1129.194833][T16748] ? __pfx_do_mmap+0x10/0x10 [ 1129.194860][T16748] ? __pfx_down_write_killable+0x10/0x10 [ 1129.194901][T16748] vm_mmap_pgoff+0x29e/0x470 [ 1129.194934][T16748] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1129.194964][T16748] ? do_futex+0x192/0x350 [ 1129.194996][T16748] ? __pfx_do_futex+0x10/0x10 [ 1129.195033][T16748] ksys_mmap_pgoff+0xe1/0x650 [ 1129.195058][T16748] ? __x64_sys_futex+0x34f/0x4d0 [ 1129.195089][T16748] ? __x64_sys_futex+0x358/0x4d0 [ 1129.195121][T16748] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1129.195147][T16748] ? xfd_validate_state+0x129/0x190 [ 1129.195189][T16748] __x64_sys_mmap+0x125/0x190 [ 1129.195236][T16748] do_syscall_64+0x106/0xf80 [ 1129.195264][T16748] ? clear_bhb_loop+0x40/0x90 [ 1129.195295][T16748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1129.195321][T16748] RIP: 0033:0x7f25f379c799 [ 1129.195341][T16748] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1129.195365][T16748] RSP: 002b:00007f25f469d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1129.195389][T16748] RAX: ffffffffffffffda RBX: 00007f25f3a16090 RCX: 00007f25f379c799 [ 1129.195406][T16748] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 1129.195421][T16748] RBP: 00007f25f3832bd9 R08: fffffffffffffffa R09: 0000000000008000 [ 1129.195438][T16748] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1129.195453][T16748] R13: 00007f25f3a16128 R14: 00007f25f3a16090 R15: 00007ffd4a5facf8 [ 1129.195485][T16748] [ 1133.653503][T16772] FAULT_INJECTION: forcing a failure. [ 1133.653503][T16772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1133.747471][T16772] CPU: 0 UID: 0 PID: 16772 Comm: syz.5.2286 Tainted: G L syzkaller #0 PREEMPT(full) [ 1133.747512][T16772] Tainted: [L]=SOFTLOCKUP [ 1133.747521][T16772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1133.747537][T16772] Call Trace: [ 1133.747545][T16772] [ 1133.747555][T16772] dump_stack_lvl+0x100/0x190 [ 1133.747598][T16772] should_fail_ex.cold+0x5/0xa [ 1133.747628][T16772] core_sys_select+0x9b9/0xbb0 [ 1133.747681][T16772] ? __pfx_core_sys_select+0x10/0x10 [ 1133.747751][T16772] ? ktime_get_ts64+0x2d2/0x3f0 [ 1133.747779][T16772] ? read_tsc+0x9/0x20 [ 1133.747806][T16772] ? ktime_get_ts64+0x256/0x3f0 [ 1133.747836][T16772] kern_select+0x20c/0x270 [ 1133.747877][T16772] ? __pfx_kern_select+0x10/0x10 [ 1133.747927][T16772] __x64_sys_select+0xbd/0x160 [ 1133.747965][T16772] ? do_syscall_64+0x95/0xf80 [ 1133.747994][T16772] ? lockdep_hardirqs_on+0x78/0x100 [ 1133.748023][T16772] do_syscall_64+0x106/0xf80 [ 1133.748051][T16772] ? clear_bhb_loop+0x40/0x90 [ 1133.748081][T16772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1133.748107][T16772] RIP: 0033:0x7f25f379c799 [ 1133.748128][T16772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1133.748153][T16772] RSP: 002b:00007f25f46be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1133.748177][T16772] RAX: ffffffffffffffda RBX: 00007f25f3a15fa0 RCX: 00007f25f379c799 [ 1133.748194][T16772] RDX: 00002000000004c0 RSI: 0000200000000040 RDI: 0000000000000001 [ 1133.748210][T16772] RBP: 00007f25f3832bd9 R08: 00002000000001c0 R09: 0000000000000000 [ 1133.748226][T16772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1133.748241][T16772] R13: 00007f25f3a16038 R14: 00007f25f3a15fa0 R15: 00007ffd4a5facf8 [ 1133.748273][T16772] [ 1135.300627][T16777] nbd: must specify a size in bytes for the device [ 1135.458190][T16783] FAULT_INJECTION: forcing a failure. [ 1135.458190][T16783] name failslab, interval 1, probability 0, space 0, times 0 [ 1135.629512][T16783] CPU: 0 UID: 0 PID: 16783 Comm: syz.3.2290 Tainted: G L syzkaller #0 PREEMPT(full) [ 1135.629557][T16783] Tainted: [L]=SOFTLOCKUP [ 1135.629566][T16783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1135.629581][T16783] Call Trace: [ 1135.629589][T16783] [ 1135.629598][T16783] dump_stack_lvl+0x100/0x190 [ 1135.629640][T16783] should_fail_ex.cold+0x5/0xa [ 1135.629667][T16783] ? constrain_params_by_rules+0x175/0xcc0 [ 1135.629695][T16783] should_failslab+0xc2/0x120 [ 1135.629719][T16783] __kmalloc_noprof+0xe0/0x850 [ 1135.629754][T16783] ? unwind_get_return_address+0x59/0xa0 [ 1135.629785][T16783] constrain_params_by_rules+0x175/0xcc0 [ 1135.629817][T16783] ? stack_trace_save+0x8e/0xc0 [ 1135.629844][T16783] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1135.629875][T16783] ? __kasan_kmalloc+0xaa/0xb0 [ 1135.629909][T16783] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 1135.629949][T16783] ? snd_pcm_oss_ioctl+0x2995/0x3720 [ 1135.629985][T16783] ? __x64_sys_ioctl+0x18e/0x210 [ 1135.630025][T16783] ? rcu_is_watching+0x12/0xc0 [ 1135.630061][T16783] ? snd_interval_refine+0x2d0/0x580 [ 1135.630094][T16783] snd_pcm_hw_refine+0x7e7/0xad0 [ 1135.630124][T16783] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1135.630159][T16783] ? __asan_memset+0x23/0x50 [ 1135.630191][T16783] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 1135.630231][T16783] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 1135.630283][T16783] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1135.630320][T16783] ? __pfx___mutex_lock+0x10/0x10 [ 1135.630363][T16783] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1135.630402][T16783] snd_pcm_oss_ioctl+0x2995/0x3720 [ 1135.630442][T16783] ? __fget_files+0x215/0x3d0 [ 1135.630462][T16783] ? hook_file_ioctl_common+0x146/0x410 [ 1135.630505][T16783] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1135.630547][T16783] ? __fget_files+0x21f/0x3d0 [ 1135.630579][T16783] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1135.630619][T16783] __x64_sys_ioctl+0x18e/0x210 [ 1135.630656][T16783] do_syscall_64+0x106/0xf80 [ 1135.630683][T16783] ? clear_bhb_loop+0x40/0x90 [ 1135.630713][T16783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1135.630737][T16783] RIP: 0033:0x7f496d99c799 [ 1135.630757][T16783] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1135.630781][T16783] RSP: 002b:00007f496e815028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1135.630804][T16783] RAX: ffffffffffffffda RBX: 00007f496dc15fa0 RCX: 00007f496d99c799 [ 1135.630821][T16783] RDX: 00002000000000c0 RSI: 000000008010500c RDI: 0000000000000003 [ 1135.630836][T16783] RBP: 00007f496e815090 R08: 0000000000000000 R09: 0000000000000000 [ 1135.630851][T16783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1135.630866][T16783] R13: 00007f496dc16038 R14: 00007f496dc15fa0 R15: 00007ffe1f90a4e8 [ 1135.630897][T16783] [ 1138.039614][T16811] FAULT_INJECTION: forcing a failure. [ 1138.039614][T16811] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.267747][T16811] CPU: 0 UID: 0 PID: 16811 Comm: syz.2.2295 Tainted: G L syzkaller #0 PREEMPT(full) [ 1138.267788][T16811] Tainted: [L]=SOFTLOCKUP [ 1138.267798][T16811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1138.267813][T16811] Call Trace: [ 1138.267821][T16811] [ 1138.267831][T16811] dump_stack_lvl+0x100/0x190 [ 1138.267874][T16811] should_fail_ex.cold+0x5/0xa [ 1138.267903][T16811] should_failslab+0xc2/0x120 [ 1138.267928][T16811] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1138.267966][T16811] ? security_inode_alloc+0x3b/0x2c0 [ 1138.268003][T16811] ? lockdep_init_map_type+0x5c/0x250 [ 1138.268041][T16811] security_inode_alloc+0x3b/0x2c0 [ 1138.268078][T16811] inode_init_always_gfp+0xced/0x1040 [ 1138.268107][T16811] alloc_inode+0x8e/0x250 [ 1138.268140][T16811] new_inode+0x22/0x1c0 [ 1138.268174][T16811] __debugfs_create_file+0x105/0x4f0 [ 1138.268218][T16811] debugfs_create_file_full+0x41/0x60 [ 1138.268259][T16811] kvm_dev_ioctl+0x1491/0x1a50 [ 1138.268307][T16811] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1138.268345][T16811] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1138.268376][T16811] __x64_sys_ioctl+0x18e/0x210 [ 1138.268413][T16811] do_syscall_64+0x106/0xf80 [ 1138.268442][T16811] ? clear_bhb_loop+0x40/0x90 [ 1138.268472][T16811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.268498][T16811] RIP: 0033:0x7faa2d39c799 [ 1138.268518][T16811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.268543][T16811] RSP: 002b:00007faa2e25e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1138.268567][T16811] RAX: ffffffffffffffda RBX: 00007faa2d615fa0 RCX: 00007faa2d39c799 [ 1138.268584][T16811] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 1138.268599][T16811] RBP: 00007faa2d432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1138.268614][T16811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1138.268629][T16811] R13: 00007faa2d616038 R14: 00007faa2d615fa0 R15: 00007ffee2f73f78 [ 1138.268661][T16811] [ 1138.268688][T16811] debugfs: out of free dentries, can not create file 'mmu_cache_miss' [ 1140.587159][ T5144] Bluetooth: hci0: ACL packet for unknown connection handle 0 [ 1143.632567][T16843] FAULT_INJECTION: forcing a failure. [ 1143.632567][T16843] name failslab, interval 1, probability 0, space 0, times 0 [ 1143.999314][T16843] CPU: 0 UID: 0 PID: 16843 Comm: syz.1.2301 Tainted: G L syzkaller #0 PREEMPT(full) [ 1143.999356][T16843] Tainted: [L]=SOFTLOCKUP [ 1143.999366][T16843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1143.999382][T16843] Call Trace: [ 1143.999391][T16843] [ 1143.999400][T16843] dump_stack_lvl+0x100/0x190 [ 1143.999442][T16843] should_fail_ex.cold+0x5/0xa [ 1143.999472][T16843] should_failslab+0xc2/0x120 [ 1143.999497][T16843] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 1143.999538][T16843] ? fib_notifier_ops_register+0x32/0x270 [ 1143.999635][T16843] ? __debug_object_init+0x2de/0x3d0 [ 1143.999676][T16843] kmemdup_noprof+0x29/0x60 [ 1143.999717][T16843] fib_notifier_ops_register+0x32/0x270 [ 1143.999753][T16843] fib4_notifier_init+0x4f/0xd0 [ 1143.999825][T16843] fib_net_init+0xbf/0x3f0 [ 1143.999855][T16843] ? is_module_address+0x69/0xf0 [ 1143.999887][T16843] ? __pfx_fib_net_init+0x10/0x10 [ 1143.999918][T16843] ? timer_init_key+0x150/0x340 [ 1143.999948][T16843] ? devinet_init_net+0x56c/0x8d0 [ 1143.999986][T16843] ? __pfx_fib_net_init+0x10/0x10 [ 1144.000015][T16843] ops_init+0x1e2/0x5f0 [ 1144.000050][T16843] setup_net+0x118/0x3a0 [ 1144.000081][T16843] ? __pfx_setup_net+0x10/0x10 [ 1144.000110][T16843] ? lockdep_init_map_type+0x5c/0x250 [ 1144.000143][T16843] ? mutex_init_lockep+0x110/0x150 [ 1144.000180][T16843] copy_net_ns+0x46f/0x7c0 [ 1144.000217][T16843] create_new_namespaces+0x3ea/0xac0 [ 1144.000250][T16843] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 1144.000279][T16843] ksys_unshare+0x473/0xad0 [ 1144.000312][T16843] ? __pfx_ksys_unshare+0x10/0x10 [ 1144.000356][T16843] __x64_sys_unshare+0x31/0x40 [ 1144.000387][T16843] do_syscall_64+0x106/0xf80 [ 1144.000416][T16843] ? clear_bhb_loop+0x40/0x90 [ 1144.000446][T16843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1144.000472][T16843] RIP: 0033:0x7fb294d9c799 [ 1144.000492][T16843] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1144.000517][T16843] RSP: 002b:00007fb295b9d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1144.000541][T16843] RAX: ffffffffffffffda RBX: 00007fb295016090 RCX: 00007fb294d9c799 [ 1144.000557][T16843] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1144.000573][T16843] RBP: 00007fb294e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1144.000588][T16843] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1144.000604][T16843] R13: 00007fb295016128 R14: 00007fb295016090 R15: 00007fff890484d8 [ 1144.000635][T16843] [ 1146.147952][T16873] FAULT_INJECTION: forcing a failure. [ 1146.147952][T16873] name failslab, interval 1, probability 0, space 0, times 0 [ 1146.281802][T16877] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1146.398964][T16873] CPU: 0 UID: 0 PID: 16873 Comm: syz.1.2309 Tainted: G L syzkaller #0 PREEMPT(full) [ 1146.399004][T16873] Tainted: [L]=SOFTLOCKUP [ 1146.399015][T16873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1146.399031][T16873] Call Trace: [ 1146.399040][T16873] [ 1146.399049][T16873] dump_stack_lvl+0x100/0x190 [ 1146.399092][T16873] should_fail_ex.cold+0x5/0xa [ 1146.399121][T16873] should_failslab+0xc2/0x120 [ 1146.399147][T16873] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1146.399185][T16873] ? __d_alloc+0x34/0xa80 [ 1146.399217][T16873] __d_alloc+0x34/0xa80 [ 1146.399247][T16873] d_alloc+0x4a/0x1e0 [ 1146.399276][T16873] lookup_one_qstr_excl+0x175/0x250 [ 1146.399311][T16873] start_dirop+0x59/0xb0 [ 1146.399351][T16873] simple_start_creating+0xf9/0x110 [ 1146.399391][T16873] ? __pfx_simple_start_creating+0x10/0x10 [ 1146.399431][T16873] ? mntput+0x70/0xa0 [ 1146.399468][T16873] ? simple_pin_fs+0xa3/0x190 [ 1146.399504][T16873] debugfs_start_creating.part.0+0x82/0x170 [ 1146.399544][T16873] __debugfs_create_file+0xb3/0x4f0 [ 1146.399594][T16873] debugfs_create_file_full+0x41/0x60 [ 1146.399636][T16873] kvm_dev_ioctl+0x1491/0x1a50 [ 1146.399676][T16873] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1146.399714][T16873] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1146.399744][T16873] __x64_sys_ioctl+0x18e/0x210 [ 1146.399781][T16873] do_syscall_64+0x106/0xf80 [ 1146.399811][T16873] ? clear_bhb_loop+0x40/0x90 [ 1146.399842][T16873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1146.399868][T16873] RIP: 0033:0x7fb294d9c799 [ 1146.399888][T16873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1146.399913][T16873] RSP: 002b:00007fb295bbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1146.399937][T16873] RAX: ffffffffffffffda RBX: 00007fb295015fa0 RCX: 00007fb294d9c799 [ 1146.399954][T16873] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 1146.399969][T16873] RBP: 00007fb294e32bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1146.399986][T16873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1146.400001][T16873] R13: 00007fb295016038 R14: 00007fb295015fa0 R15: 00007fff890484d8 [ 1146.400033][T16873] [ 1147.349004][T16889] vhci_hcd vhci_hcd.2: SetHubDepth req not supported for USB 2.0 roothub [ 1148.722388][T16908] nbd: must specify at least one socket [ 1148.763820][T16901] zswap: compressor not available [ 1154.746059][T16950] [ 1154.748437][T16950] ====================================================== [ 1154.755455][T16950] WARNING: possible circular locking dependency detected [ 1154.762474][T16950] syzkaller #0 Tainted: G L [ 1154.768452][T16950] ------------------------------------------------------ [ 1154.775479][T16950] syz.5.2326/16950 is trying to acquire lock: [ 1154.781543][T16950] ffff8880583d6e68 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x4ca/0xcb0 [ 1154.793059][T16950] [ 1154.793059][T16950] but task is already holding lock: [ 1154.800422][T16950] ffff8880583d72e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 1154.809535][T16950] [ 1154.809535][T16950] which lock already depends on the new lock. [ 1154.809535][T16950] [ 1154.819944][T16950] [ 1154.819944][T16950] the existing dependency chain (in reverse order) is: [ 1154.828961][T16950] [ 1154.828961][T16950] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1154.836718][T16950] lock_sock_nested+0x41/0xf0 [ 1154.841937][T16950] smc_listen_out+0x1f5/0x4b0 [ 1154.847145][T16950] smc_listen_work+0x4c2/0x50e0 [ 1154.852521][T16950] process_one_work+0x9d7/0x1920 [ 1154.858002][T16950] worker_thread+0x5da/0xe40 [ 1154.863128][T16950] kthread+0x370/0x450 [ 1154.867737][T16950] ret_from_fork+0x754/0xd80 [ 1154.872881][T16950] ret_from_fork_asm+0x1a/0x30 [ 1154.878177][T16950] [ 1154.878177][T16950] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1154.888356][T16950] __lock_acquire+0x14b8/0x2630 [ 1154.893745][T16950] lock_acquire+0x1cf/0x380 [ 1154.898786][T16950] __flush_work+0x4de/0xcb0 [ 1154.903830][T16950] cancel_work_sync+0xd1/0xf0 [ 1154.909036][T16950] smc_clcsock_release+0x5f/0xe0 [ 1154.914566][T16950] __smc_release+0x5c2/0x880 [ 1154.919703][T16950] smc_close_non_accepted+0xda/0x200 [ 1154.925521][T16950] smc_close_active+0x4ff/0x1070 [ 1154.931077][T16950] __smc_release+0x634/0x880 [ 1154.936214][T16950] smc_release+0x1fc/0x620 [ 1154.941176][T16950] __sock_release+0xb3/0x260 [ 1154.946392][T16950] sock_close+0x1c/0x30 [ 1154.951082][T16950] __fput+0x3ff/0xb40 [ 1154.955619][T16950] task_work_run+0x150/0x240 [ 1154.960752][T16950] exit_to_user_mode_loop+0x100/0x4a0 [ 1154.966666][T16950] do_syscall_64+0x668/0xf80 [ 1154.971792][T16950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1154.978218][T16950] [ 1154.978218][T16950] other info that might help us debug this: [ 1154.978218][T16950] [ 1154.988446][T16950] Possible unsafe locking scenario: [ 1154.988446][T16950] [ 1154.995899][T16950] CPU0 CPU1 [ 1155.001263][T16950] ---- ---- [ 1155.006637][T16950] lock(sk_lock-AF_SMC/1); [ 1155.011171][T16950] lock((work_completion)(&new_smc->smc_listen_work)); [ 1155.020647][T16950] lock(sk_lock-AF_SMC/1); [ 1155.027690][T16950] lock((work_completion)(&new_smc->smc_listen_work)); [ 1155.034634][T16950] [ 1155.034634][T16950] *** DEADLOCK *** [ 1155.034634][T16950] [ 1155.042778][T16950] 3 locks held by syz.5.2326/16950: [ 1155.047974][T16950] #0: ffff88807979c708 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: __sock_release+0x86/0x260 [ 1155.058545][T16950] #1: ffff8880583d72e0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x3a5/0x620 [ 1155.067989][T16950] #2: ffffffff8e7e9220 (rcu_read_lock){....}-{1:3}, at: __flush_work+0xfd/0xcb0 [ 1155.077171][T16950] [ 1155.077171][T16950] stack backtrace: [ 1155.083084][T16950] CPU: 0 UID: 0 PID: 16950 Comm: syz.5.2326 Tainted: G L syzkaller #0 PREEMPT(full) [ 1155.083121][T16950] Tainted: [L]=SOFTLOCKUP [ 1155.083130][T16950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1155.083145][T16950] Call Trace: [ 1155.083155][T16950] [ 1155.083165][T16950] dump_stack_lvl+0x100/0x190 [ 1155.083204][T16950] print_circular_bug.cold+0x178/0x1c7 [ 1155.083244][T16950] check_noncircular+0x146/0x160 [ 1155.083276][T16950] __lock_acquire+0x14b8/0x2630 [ 1155.083310][T16950] lock_acquire+0x1cf/0x380 [ 1155.083338][T16950] ? __flush_work+0x4ca/0xcb0 [ 1155.083375][T16950] ? mark_held_locks+0x40/0x70 [ 1155.083403][T16950] ? __flush_work+0x4ca/0xcb0 [ 1155.083438][T16950] __flush_work+0x4de/0xcb0 [ 1155.083471][T16950] ? __flush_work+0x4ca/0xcb0 [ 1155.083508][T16950] ? __pfx___flush_work+0x10/0x10 [ 1155.083544][T16950] ? __pfx_wq_barrier_func+0x10/0x10 [ 1155.083575][T16950] ? __pfx___might_resched+0x10/0x10 [ 1155.083612][T16950] cancel_work_sync+0xd1/0xf0 [ 1155.083635][T16950] smc_clcsock_release+0x5f/0xe0 [ 1155.083659][T16950] __smc_release+0x5c2/0x880 [ 1155.083697][T16950] ? __pfx_sock_def_readable+0x10/0x10 [ 1155.083722][T16950] smc_close_non_accepted+0xda/0x200 [ 1155.083747][T16950] smc_close_active+0x4ff/0x1070 [ 1155.083773][T16950] __smc_release+0x634/0x880 [ 1155.083811][T16950] smc_release+0x1fc/0x620 [ 1155.083848][T16950] __sock_release+0xb3/0x260 [ 1155.083877][T16950] ? __pfx_sock_close+0x10/0x10 [ 1155.083905][T16950] sock_close+0x1c/0x30 [ 1155.083932][T16950] __fput+0x3ff/0xb40 [ 1155.083965][T16950] ? _raw_spin_unlock_irq+0x23/0x50 [ 1155.083992][T16950] task_work_run+0x150/0x240 [ 1155.084027][T16950] ? __pfx_task_work_run+0x10/0x10 [ 1155.084059][T16950] ? __x64_sys_poll+0x12e/0x420 [ 1155.084100][T16950] exit_to_user_mode_loop+0x100/0x4a0 [ 1155.084132][T16950] do_syscall_64+0x668/0xf80 [ 1155.084160][T16950] ? clear_bhb_loop+0x40/0x90 [ 1155.084186][T16950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1155.084211][T16950] RIP: 0033:0x7f25f379c799 [ 1155.084231][T16950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1155.084255][T16950] RSP: 002b:00007f25f46be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 1155.084278][T16950] RAX: 0000000000000001 RBX: 00007f25f3a15fa0 RCX: 00007f25f379c799 [ 1155.084294][T16950] RDX: 0000000000000108 RSI: 0000000000000005 RDI: 0000200000000080 [ 1155.084309][T16950] RBP: 00007f25f3832bd9 R08: 0000000000000000 R09: 0000000000000000 [ 1155.084323][T16950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1155.084338][T16950] R13: 00007f25f3a16038 R14: 00007f25f3a15fa0 R15: 00007ffd4a5facf8 [ 1155.084361][T16950] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1156.271388][T16747] base_sock_release(ffff88809a1a4500) sk=ffff88807bbfb000 [ 1158.938084][ T144] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.103961][ T144] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.229719][ T144] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.345187][ T144] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1159.686717][ T144] gretap0: left allmulticast mode [ 1159.691800][ T144] gretap0: left promiscuous mode [ 1159.765566][ T144] bridge0: port 3(gretap0) entered disabled state [ 1159.841779][ T144] bridge_slave_1: left allmulticast mode [ 1159.873336][ T144] bridge_slave_1: left promiscuous mode [ 1159.879058][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1160.006820][ T144] bridge_slave_0: left allmulticast mode [ 1160.012508][ T144] bridge_slave_0: left promiscuous mode [ 1160.073068][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1160.398280][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1160.450487][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1160.478222][ T144] bond0 (unregistering): Released all slaves [ 1160.563247][ T144] ovr_: left promiscuous mode [ 1161.039879][ T144] hsr_slave_0: left promiscuous mode [ 1161.063390][ T144] hsr_slave_1: left promiscuous mode [ 1161.093070][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1161.100518][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1161.130846][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1161.164071][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1161.185719][ T144] veth1_vlan: left promiscuous mode [ 1161.191177][ T144] veth0_vlan: left promiscuous mode [ 1161.443301][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1161.471986][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1161.932353][ T144] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1161.981732][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.029599][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.069592][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.128851][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.257697][ T144] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.312260][ T144] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.372761][ T144] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.424769][ T144] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1162.523552][ T144] gretap0: left allmulticast mode [ 1162.528635][ T144] gretap0: left promiscuous mode [ 1162.549724][ T144] bridge0: port 3(gretap0) entered disabled state [ 1162.563915][ T144] bridge_slave_1: left allmulticast mode [ 1162.569623][ T144] bridge_slave_1: left promiscuous mode [ 1162.584862][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.593108][ T144] bridge_slave_0: left allmulticast mode [ 1162.598771][ T144] bridge_slave_0: left promiscuous mode [ 1162.617461][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.639634][ T144] gretap0: left allmulticast mode [ 1162.654731][ T144] gretap0: left promiscuous mode [ 1162.659865][ T144] bridge0: port 3(gretap0) entered disabled state [ 1162.684679][ T144] bridge_slave_1: left allmulticast mode [ 1162.695043][ T144] bridge_slave_1: left promiscuous mode [ 1162.700755][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.730644][ T144] bridge_slave_0: left allmulticast mode [ 1162.739164][ T144] bridge_slave_0: left promiscuous mode [ 1162.753191][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1163.029662][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.046298][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.064175][ T144] bond0 (unregistering): Released all slaves [ 1163.178326][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1163.190724][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1163.204370][ T144] bond0 (unregistering): Released all slaves [ 1163.264529][ T144] ovr_: left promiscuous mode [ 1163.890896][ T144] hsr_slave_0: left promiscuous mode [ 1163.904678][ T144] hsr_slave_1: left promiscuous mode [ 1163.926080][ T144] hsr_slave_0: left promiscuous mode [ 1163.944489][ T144] hsr_slave_1: left promiscuous mode [ 1163.969429][ T144] veth1_macvtap: left promiscuous mode [ 1163.983560][ T144] veth0_macvtap: left promiscuous mode [ 1163.996754][ T144] veth1_macvtap: left promiscuous mode [ 1164.002297][ T144] veth0_macvtap: left promiscuous mode [ 1164.016493][ T144] veth1_vlan: left promiscuous mode [ 1164.021760][ T144] veth0_vlan: left promiscuous mode [ 1164.247586][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1164.263915][ T144] team0 (unregistering): Port device team_slave_0 removed [ 1164.444640][ T144] team0 (unregistering): Port device team_slave_1 removed [ 1164.462485][ T144] team0 (unregistering): Port device team_slave_0 removed