last executing test programs: 9m30.908929471s ago: executing program 0 (id=674): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/igmp\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x40001000f42c, 0x586) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) sched_setattr$auto(0x0, &(0x7f0000000000)={0x9, 0x8001, 0x2, 0x3ff0, 0x200, 0x8, 0x9, 0x4, 0x3ff, 0x8000}, 0x9) writev$auto(r1, &(0x7f0000000200)={0x0, 0x9}, 0x7) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3a) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/system/cpu/cpu0/cache/index3/shared_cpu_map\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000080)=""/86, 0xfffffffffffffeee) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x4) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x60800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000005e00)='/sys/power/suspend_stats/last_failed_step\x00', 0xa8000, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000001c0)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/uid_map\x00', 0x0, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x28681, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) 9m30.668910132s ago: executing program 0 (id=676): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0xb) r0 = socket(0x16, 0x80002, 0x76) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x80\x00\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\x11\xc5D\xcc\xa9\xf6\xd3\x1d\xb0\xc9\x8b\xa2\xdf63\xc9i}l\xdd>e\xeb\t@r\xa1\xa0\xf5\xf3\xdd\x04\x00\x00\x00\x00\x00\x00\x00q\xae\xd865`#um\x8c\xa6*\x89\x1e1~I\xb5n\x99\xd9\xfa\xd9\xf0\xcd9R\xc9', 0x100000a3d9) socket(0x1e, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x6, 0xffffffffffff0003, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRES64=r2, @ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64, @ANYRES16], 0x70}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0x8000000000000010, 0x401, 0x8000) syz_clone3(&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9m28.108526465s ago: executing program 0 (id=686): unshare$auto(0x40000080) ioctl$auto_USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) close_range$auto(0x0, 0x5, 0x0) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x3c, r0, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x4}, @OVS_FLOW_ATTR_KEY={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x10, 0x0, 0x1, [@typed={0x14, 0x20, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0xff}}]}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1398a0584259c607}, 0x800) openat$auto_random_fops_random(0xffffffffffffff9c, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) epoll_create$auto(0x8) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) socket(0x2b, 0x1, 0x1) ioctl$auto(0x4000000000000c8, 0x400454d9, 0x3) 9m27.630142169s ago: executing program 0 (id=688): waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) socket(0x2, 0x1, 0x106) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x80e42, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001fc, 0x7, 0xd3e, 0x1, 0x8, 0x100000000000003, 0x95f4da0a, 0x6, 0x3, 0x62, 0x5, 0x5, 0x6d3f, 0x7, 0x6, 0x6]}, 0x0) write$auto(r0, &(0x7f0000000100)='/dev/audio1\x00\xf6\x89\t\xb6t\xae\x12Q\x15E O\xd8\x8d/\xd9\x13\v_\xbcTd\xe0DS\xef?f\xf1ou\xa4W&^\x80\xb2}\x96K\x16*\xa0\x10[8\xa3\x86\x9a3\xc1\xf7\x89x; 4\x8d,U\xa2\xd8\xd5\xfd\xf8\xd8\xb0\xe0W\xad\xe7\x05l*\xc5Z\x8d\xc88}n\x81\tK\x00\x12\xae\xff\xe5\xf1\xb5w\x81$\xd4\xca\xbe&\x195\xc1\xda>\x8c\x89P\xa1\xdb\xb4g9E\xc8\x92\xf6m\x1c\x9b\xebAzeI\xcb\x16f\xc0@\x978x\xbe\x15\'\xc6d}\xc2\xd3\x9f\xc5F8\x15f\x90\xa2\x84', 0x6051) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) msgctl$auto_IPC_STAT(0x0, 0x2, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev$auto(r1, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3) mmap$auto(0xfffffffffffffffe, 0xe983, 0xc, 0xebe, 0xffffffffffffffff, 0x54f5cfc0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r2, 0x0) r3 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x4610, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), 0xffffffffffffffff) 9m24.532092503s ago: executing program 0 (id=705): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0xb) r0 = socket(0x16, 0x80002, 0x76) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x80\x00\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\x11\xc5D\xcc\xa9\xf6\xd3\x1d\xb0\xc9\x8b\xa2\xdf63\xc9i}l\xdd>e\xeb\t@r\xa1\xa0\xf5\xf3\xdd\x04\x00\x00\x00\x00\x00\x00\x00q\xae\xd865`#um\x8c\xa6*\x89\x1e1~I\xb5n\x99\xd9\xfa\xd9\xf0\xcd9R\xc9', 0x100000a3d9) socket(0x1e, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x6, 0xffffffffffff0003, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRES64=r2, @ANYBLOB="8e3e73477cc6d0d245b364847911cfc064b0282fb7bd9ffc161f7146601345caad8a8d2aaf32111bd73d5c0396ed294191ee951d5c8f1043fa69bc7637d1ffa256e07165628dffb8787883e09c6b2181dfaa6d07210e2d18ae55245ee83234df44aded9cc5930d77e84e8ed241d7ab9d78871d044a04878beb2cc4051a4a0cdebaf95de5b57fa824c02e13336672160c0fa1bd808943ecb65c3cf53615c9e6c817c63b3985ed8ff9a58656e66f7eb4dd1a01b1b816390e1223f91aa4675dd0b8664fc00590d59a369b9e6572e4778191581326c1b49a5cf494c3d9e3ed962bcb2f51901668b97ed14743af6ba8469b49719bbd22aac2e74f07dd3d54b5d223cbe89315404fdfb21faf5f988fd22955ba781ad64f28a226c7479989224de4d04e5016d6d163e93cd708645a80da95b52e2d891d1afd2aca32271b02a2322e68e6dceb0ee5d742b79fd492744ed701c32a1c5715e260f9f5919d37de6d8d4b4e8fda2e43e2cd5595c29f71c1280243ae7a7debd39051509bd26e5388546d25669c636806a5789cfa4832071f0dc47bda76db0efb25e822db372319277c6c938e6a629cad7777df1d329f0633c954c59272d5d32efb4927cdc52d6fe8d4526dbc19c82442245ab72f01e0274ecf0caccab34119e88c33c0c86a38b39d5bc394451951235c0387ccda0316b66645549c6f620090750584f45fa85a66742eb45eb535226c75aef0e314b1e9b8e6a4b43bc584de211cbc6e833f4f31c6e8d0d3e273c109f3128f2d03d72544f6f77733ca449a795f6da2ab0768848ee81b432959dc7133a15098147e6c1ed053cb3b375dd1fbafe12645a84fb6f7d9d873860f8c9452688f9f92a830cb3a4402bc577e5d0cb340035efba06d51abe110b7213c470d5c040b1583c3626c7210ca561f429767f78af886633488e0f5b1ee7e56dfc31d30574c735eb3e8db53afa7fac3e88e156d14cfa3ce86a5f7cc88c3641bfb88a4d71fc370f48f579fb614bc422aabfd0a35a0e6288d29e1431b2da52c691a198b85ac9ffe9e0cdbe588994be603ced9a054bb0ea4e647738336400ced7b0f3b6487293bc9faf313ee052fb14ce4ac683bcf37d4248ce8fff637aa035d4d0284f32cd49f26ad9109badbee9638cd485574ccd530b4c7298af86ce81edae40d5e9573ec0a76d55c29d9b0c73e54c38ac4a24e0cf0c4fa5afccd74fb0ea8800e5b29b98fc42276255b6f6656726845b064470d6d3fdec734cef712d4cd24093c4fac5dc916d4c1e5dc445a103b9092b7f2753be6222512ae8e94938e126d894dab7d44e398dd5ea6ec28b487253d5558a2ee3a886d2fd358a879788b8d14870f361def9c58b270231c67963e4aec665ea90322c2f353c1442a290d099d10af50119a6d9ea78ba129242a75234db3f0e4f4906693a8c4e7c0e81209a1c0c853975d4403f068861bc565a6223d73d54241a1ad3a5a57371322c0d91c7418859e51698204f479f87e441801d75ff9d369f9cd383546bd2c5a6e5974f38e8cf2fb618d6ec5ef32333b93038d0f234e642f807dc096036110facabbd233163c6c08223ffac4ba829fb5de6eadb62de2b35cbbd4e008dbac8091f964aba02c3f423c28242651017fcf0ccb0cf33c09cb4557d380e925bc37b97fc94d61d3432b7fb9eb9363a8dc36ba3a901aad65e7594ea4e71fa62d2509de86ad5de3028dfaac4de2edf457c927ffd70423e2bd7a48e593e51be95ef2fa5352dd75c848a7f66b29ae6b06082dd7761724b19d39d75fbc5346b7092466240bc02a0a19db64a1a492b40225e7b3070778cf9c3bc2b09c84b0e1adca59d294370dc0bc312fe6a18fd0cbe679cdfdca4bc66ac176edd8b642319c5c9f23ea1c06226087332f7c8c62ed838452e4d4455b383553e10d3e748fc0d502e12ad493187baf173ace1b11ca736be404e9d2cd5c030db8c102e4622119715d0f3199de0f88b4d5a658ba8a2fb5e0af00b4a70159129ab43f9937650c8a919cf0fc81b646f896c479dc5be3af53b669f4d630320c15a8a2fe291197ef097e8ee27099a13115375e8fa87490da5c0010d935f1487f03e11dc43974f6405cb229fb6197a8ef33a6fc36b78b9f5121e29179b374c7bc382f22cfd9843888221b23a6ec2a53ea24a6b9452b4c44e90afec4fbecbd4483b1ac52bea101a2f7fc34a33cad54e2db5f204814c750c52494e7ff9d67b185055b2a28537079d308ed7ace083bc0518c90f194ce7f8be866924336ca3dcb76be30468afc577c2f7c47e213ebe68d992d1c20485d83ce07c8271e1906d2935bafdde0563a7741f0540b15181f5e4109e17ec3e6d4351a6a017283f46103aa925d53a0b5ac06518df4298218e54771d45bc86b0ea7ce2629616e180062e02eb5f2dafc24d39c2ac01230d076fff837402dd6d07bd514657e9f114979539cf239561084e515bc8a27ec9530e018b4e272d979688dbdf079b6326981d87afce166b5ba409a384083d1f625a1ccb736ea2d46858690f6120503f274b67fcc8323e58e7a3f531f2d859ae9d02aa5f121f69cca300f8f544b9cadefd9ea29fa06d454badf8303068f0f355909b0d05d906205d8e3d0f271fa66e5fcb65980d636123768b1428ecea6df483cac4a4c5b3062d636e83a606661f820c1314907fb9fed9412fcb85c0a0e1f53b8a9d5e872d966ca69709a12862019d1c11ff18ee61c298dd04c3f3ad4adec5d9b9dcf22174c20b1b4bedad4e42992b37a77aed4fdb98dcd0d911b4c1be643b5ea3670f92a37744630a2f137f2eeaef4337e15d460d1c593433a8f917dba778697116f58aaec7a01c10ae52a3dcf46badccd453195c0b63b84732da826f4568541c30671d4fcb3275f4b7eb97694243224ac8e95a2e769f742ef2884ba08aaf50d710298ef652454fac6d9cefc94bd5ff6eae004dbe36975a0ac4ed3c9c841dd0aa103e58b92afc48860dbbaba922e61563c9b2984d2571e3e0705a0ccf533ee0717da006d018afc5c0f6b87ba1aebc9523a7145391975e588e23af8016703f01df6d486b45081c8f43245cd245bd343e79fa97250235e6b269398ed8200f321be3cedfac9a76db61ec1e00eb95f9552efded4995fe3c2dee1fb49d62b61580ffb5d8b99ba8b53bae92ed979cfeaee0bdd085076cbbe93232410f92bae34df020049973433a2dba712072064c7972479f91a05d05c557ed85561c092318f5d3ae45fe62a7807941203f081d5764c1eb8f359c4685203b1a5015c705256a0543763f5238e8dda2796ce136afd991f86490756ea5534e29f7b647eabef8b87bba9f527cbf9b9bd5642ef09390bc4427f74468b7a7ee16cf9647ec8fa14fa3e632586f808525f6f009da4c498fcb3d1f92562be96a68390e718779c628ab43fb5d4997de063672fb63f1698718e449e15f2c90720cf8d89a43ca877364c5d33902c4c97700602b329364ef68509e8e8e5f0d717bcc330dcded6676050afb499a7d2ff392b2fcac2baf8c61b5bb03824811a4045648638a82065b6a28ae487ef3da6b5b2f1c2503289fc93be227f4cc705a121f1d77d505c30abf35141f511b4f5c016c93d1d1d7d0633972f36a5bbc343d8b29234e4e405d4a2a31f3d9dbbb90208ee6453efa0c649e148f3936241049588b578c98460536e6bd05ea5e7b811a61e5b76af9541afe460864aa9e9bfd14298773a5860b96ff9dbb61cb160001ac8c1374cfd4f7a959458affd8170a91e7188d2158dab3ac866438ccc4952045dc606966456860ca8e4e2de516b5f1e719facbf7a81bb46d1a556ec646b3b57867b2094cdecac613c4d2c9c8431f1df8c94e768e7c1f4d959d2673e549652ff1bd7ed08b1182ac5bad93be5d2e80aca9f62fa0d707f65493fa743da01145d183b149e1115cb18d7ba711498fc6faf3f5b3225455e2541e6ae9eaf8f2baba57f40e9c4dd0eeba124bd134e6cd460fb54a706e49eeb629d00df5ce82ee106610614d33e353d2cef6f37c0bed07d990d87aac5e0113edb1fad33e96df2411f4197210795d14cacfc263bfa8072f1c36d7fdc8aa03961470ceac08839c246dcdb781c0b26f75e64d1684e82fccb37f128ad1ed2bc1afcb54f522c3a95b4204fd811fe55d47df6a41b86625e3556f7cae2728aa7cd5c81ba8b68ab2349608a40f6e6da1b94d38a733a799d14946026702f7ed6fac2ab0e4bce195aa0cbf597982c2f43b21bdf713a2064d9f7762bd7504a23f8413aab9f589bbaacd351d7485d9c4a7f74fc78edd3e795ff7fbddb4c9059fc2d2edea632e459a17bf6198cce49cde2d0877ebdb56527f50fe5eda51535938d6530c0dc9ad21c7e03947aafbd831494fc79051eca1a2d5fbad723048a913e85882f148399c46597909d76605b6120fcc5507a9302012b51362f7c2b15c06c099cc22887a9c9fc5956e7eed1b3e6d521749ca16a767e6489f1f31f68f8ec989ebbf4bdb82b4248d73df0261c08d5ade2b027c1216deb55159c0d8289478290dda7860a4c477a046ef4cd2f93fcde82f419a902440b16fb3a4d0ca9940a73ffc7287293ce2ceb2daa7278cab11186704a4698320fa95dc663adb350c97708414ba0cb84316d1d75e9cb1c8443752954a7eafed89f012564449f8eb2a342a77c0ee92b3376f9a91ab83b556b214687e7df774ec2ab92de4695efa8939ebebf285977b8f0667eaa3e81c77623413c6734af65523972f4c497d7583e794d97c74eb4f7f787769e2f636c06fdb22418e7a9799a2740294fb19b2009a53573d00aa17b2eea95d9b844e7daefe5bea8d7ba40acf261a037734aeeba6ca554c331ae3b7c27593b8ccc137f43e5d922016e59f2ac72fa29fbe51bb28097fbc1a3b5155d57a7903800fd8c9888fe0a00c3a8891ab1e43d5856f844a0406974402156695e5f7ebae2638b1701bbc286cef071e5ec1cd34e6af133fe537c2c6f4301a33a348f1d03b22ec5f8aff29e436770184f1a3fa174497ad588a3d84700737b0d589cdf4eb85a59598c8e1067e8ef3ce4398e572a7dffbeea3422b7ccd0b592917606beda3af9d0f661f7a135bb9d2a36eaee6b0b939861a19e0f18793da2fa92868b2df19ffdd8ca8f7e44abaa16c2ab3412cd28f36f744a86c463ecc3d9feb471e4d7a878cd730ea8531616233103bc9ded7203ada84b3ee039f7bfdd8bd4de6b48a6ddb33d3a0a90c8f14fe7541147464337f62d7805a7fa723a1b08deac92addf7adc867ec2bf4ab2421d0e5c1c05d61122a822243a0229decfb87b3615841492b7740dc40120f59df7285746f3072c8bd3fb202458e2f0a1f2afe2eec6dc0984a810910796347cd5906d528b4cd7511de4b7df24201a1a0e4c0020ccaff3a92cc1c6abc090f4d9f697a577946f5a904cb68950fc666f54c7db1c117df9afe400b7c9be4c2ca918de94309781c71902c14c560c4aa32ebcc4a5548584143378368e368fc4057e1787da34fd811824e72d752bc93efffd2fd41dd25d4d596a2843fbf95c6a691d643f00b858e520869c515c256a236051543d43beaac1f0c3e4f6642bf31426f67d62006ee21fc73b131badf8162531fea2672130c935ecd995fa3a2e7da317350b677837cd2df6943c2679a21dafce745a6bbbe853822c26a751400d3efbdd7fe903ceb477240dcfc5c084181445374b0eb00a9d7c1a78a242a9b32c37adf16c613387ccd1e35d20cfb6f6a23a8cecb1e6fc6d8b2ef6416234a9c575efdf21adb2a30d5600e474380d5b10fe1e02b9d4951a5f0be698ebd9b9efcb716bb4887d70108a61", @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64, @ANYRES16], 0x70}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0x8000000000000010, 0x401, 0x8000) syz_clone3(&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 9m22.154503421s ago: executing program 0 (id=711): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyr7\x00', 0x105000, 0x0) mmap$auto(0x0, 0x7, 0x0, 0x14, r0, 0x2a63) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x80000000001, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getxattrat$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xb91) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0xe8, 0x9, 0xb6, 0x1, 0x5, 0x1000000000000004, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0x7, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r2, 0x1, &(0x7f00000000c0)) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r1, 0x0, 0x4b, 0x0, 0x0) poll$auto(&(0x7f0000000040)={r2, 0x40, 0x4}, 0x8, 0xe7) io_uring_setup$auto(0x6, 0x0) syz_clone(0x50020011, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1c14c3, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) move_pages$auto(0x0, 0x8000000000001002, 0x0, 0x0, 0x0, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4c000, 0x0) utimes$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x1, 0x4}) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(r0, 0x4018aebd, r3) 9m7.041445345s ago: executing program 32 (id=711): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyr7\x00', 0x105000, 0x0) mmap$auto(0x0, 0x7, 0x0, 0x14, r0, 0x2a63) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x80000000001, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) getxattrat$auto(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0xb91) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x801, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0xe8, 0x9, 0xb6, 0x1, 0x5, 0x1000000000000004, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0x7, 0x9, 0x2, 0x4000000000000d]}, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r2, 0x1, &(0x7f00000000c0)) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) getsockopt$auto_SO_RCVMARK(r1, 0x0, 0x4b, 0x0, 0x0) poll$auto(&(0x7f0000000040)={r2, 0x40, 0x4}, 0x8, 0xe7) io_uring_setup$auto(0x6, 0x0) syz_clone(0x50020011, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x1c14c3, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) move_pages$auto(0x0, 0x8000000000001002, 0x0, 0x0, 0x0, 0x2) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x4c000, 0x0) utimes$auto(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x1, 0x4}) close_range$auto(0x2, 0xffffffffffffffff, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xae00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(r0, 0x4018aebd, r3) 8.097329869s ago: executing program 3 (id=2835): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xef1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0xc) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) gettid() r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}) r1 = socket(0x29, 0x2, 0x88) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) sync_file_range$auto(r1, 0xfffffffffffffe95, 0x9, 0x9) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80100, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffb) 6.499471503s ago: executing program 1 (id=2838): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 5.945269664s ago: executing program 3 (id=2840): close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) (async) r2 = openat$auto_tracing_mark_raw_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_marker_raw\x00', 0xc8401, 0x0) write$auto(r2, &(0x7f0000000000)='_.\x00I\xf2u\xd6\x13\xbbn\v8\xa3\xe1k\xb7\x19\xccU\x00\xe2\xa7\x00', 0x4) (async) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/reset\x00', 0xa001, 0x0) (async) r3 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x40000000001243}, 0x4, 0x0) (async) ioctl$auto(r3, 0x400454ca, 0x38) ioctl$auto_TUNSETOWNER(r3, 0x400454cc, &(0x7f00000000c0)=0x2) (async) r5 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(r5, 0x400454ca, 0x38) (async) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x5ff4, 0x1) (async) ioctl$auto_KVM_GET_MSRS(r0, 0x4008ae89, &(0x7f00000000c0)={0xdd, 0x0, [{0x571, 0x2, 0x8000b70d}]}) 5.901137501s ago: executing program 4 (id=2841): unshare$auto(0x40000080) mmap$auto(0x3dbcb68f, 0x7ff, 0xffb, 0x8000000008011, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1, 0x1, 0x0, 0x402, 0xdd16) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xa142, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82900, 0x0) sendmsg$auto_NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000140)={{@inferred, 0x0, 0x4, 0x8, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x3, 0x5, 0x4, @inferred, @enumerated={0x3, 0x800, "c832bcbae48ab01ec23457b7fd2dd3547c4e2eeba79edd0d1599ded9cbfaf517162fbe6a6f50f1aaa18fb20cabb4f176263bb0e781e3d0a2f992e8fcdcec86d9", 0x400, 0xc278}, "7a9fc199a16a2311eacf2fc7ae1da978dc3e8090334fdd73340238d212b6debe0ada55bdd70925450e24e87212f0bcab84a16f7ce8cbce0bb32777702b8d7c2d"}) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cec10\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0x0, 0x6, 0x2, 0x9b3, 0x9, "0200000002000000997e763f222ce1", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "70d9a9a3af9f39d000000001", "ef5ac4927ad89c5c00"]}) ioctl$auto_CEC_TRANSMIT(r2, 0xc0386105, &(0x7f0000000000)={0x6, 0x3, 0x7, 0x2, 0x2, 0x7fffffff, "9b2189084142725dff0d933475a77466", 0xb, 0x5, 0x9, 0x5, 0x2, 0x4, 0x2}) madvise$auto(0x0, 0xffffffffffff0005, 0x17) prctl$auto(0x29, 0x17000000, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x9, 0xfffffffd}, 0x1}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x6, 0x17, 0x0, 0xd) migrate_pages$auto(0x0, 0xa, 0x0, &(0x7f0000000140)=0x2) r4 = socket(0xa, 0x3, 0x3a) msgctl$auto(0x401, 0x0, &(0x7f0000000640)={{0x8, 0x0, 0xffffffffffffffff, 0x6, 0x9, 0x7f}, &(0x7f0000000500)=0x7, &(0x7f0000000600)=0x2, 0x54, 0x101, 0x3, 0xe, 0x1, 0x1000, 0x7, 0x6, @inferred=0xffffffffffffffff}) r6 = wait4$auto(0x0, &(0x7f0000000080)=0xb8e00000, 0x1, &(0x7f0000000700)={{0x100, 0x800}, {0x4ddbdf6d, 0x4}, 0x961f, 0x100000000000b0f7, 0x4040, 0x8, 0x100000ffff, 0x9, 0x400000000005, 0x240000000000000, 0x8000000000000001, 0x1000000000000004, 0x9, 0x0, 0xffffffffffffffff, 0x6}) shmctl$auto(0x80, 0x7ffe, &(0x7f0000000880)={{0x54, 0x0, r5, 0x4, 0x4, 0x1, 0x103}, 0x9, 0x9, 0xd0, 0x7, @inferred=r6, @raw=0x7, 0x3, 0x0, &(0x7f00000007c0), 0x0}) clock_getres$auto(0xfffffffd, 0x0) getsockopt$auto(r4, 0x29, 0x38, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xbf) 5.484864817s ago: executing program 3 (id=2842): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x7476, 0xc, 0xc92, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto(r0, 0x9004b70b, r0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r1, 0x5412, 0x0) 5.403674076s ago: executing program 1 (id=2843): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x28202, 0x0) readv$auto(r1, &(0x7f00000000c0)={0x0, 0x547e0dec}, 0x9) write$auto(0xffffffffffffffff, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) close_range$auto(0x2, 0x8, 0x8) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x80, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x10006, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x4, 0x52, 0x1000, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(0x0, r2) syz_clone3(0x0, 0x0) 5.403445176s ago: executing program 3 (id=2844): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) setresuid$auto(0x0, 0x8, 0x0) unshare$auto(0x8000400) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffff7}) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/dvb_usb_dibusb_mc/new_id\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) write$auto(r0, 0x0, 0x4) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x2482, 0x0) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x4, 0xdb, 0x9b71, 0xffffffffffffffff, 0x0) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x20004000) writev$auto(0xffffffffffffffff, 0x0, 0x400000003) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x1) socket(0x29, 0x2, 0x0) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) bpf$auto(0x5, &(0x7f0000000140)=@bpf_attr_7={@prog_id=0x1a, 0x92f1, 0x4}, 0xa) 5.253548507s ago: executing program 2 (id=2845): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x28202, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x547e0dec}, 0x9) write$auto(0xffffffffffffffff, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) close_range$auto(0x2, 0x8, 0x8) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x80, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x10006, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x4, 0x52, 0x1000, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(0x0, r1) syz_clone3(0x0, 0x0) 4.384133839s ago: executing program 3 (id=2846): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x1) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = fanotify_init$auto(0x65, 0x2) r2 = socket(0xa, 0x2, 0x3a) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000500)='/proc/bus/pci/00/03.0\x00', 0xea102, 0x0) write$auto(0x3, 0x0, 0x7fffffff) setsockopt$auto(r2, 0x29, 0x1f, 0x0, 0x1ff) pipe$auto(0x0) getsockopt$auto_SO_PREFER_BUSY_POLL(r1, 0xd224, 0x45, &(0x7f0000000300)='/sy6k\xe0\xa2W\\\x88#u\x16isovC)\x82\xc4s/pl\xe3\xa6\x849\xeb\x18eF-\xf9\xd7Btform/vhci\x98\xec\x16\x86\x00\x8b\xf8B\x00cd.1/usb11/\xb1\x848\x17\"y\xa1\x80\x85_\x8d', &(0x7f0000000280)=0x3ff) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x130) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.1/usb11/11-0:1.0/usb11-port2/state\x00', 0x800, 0x0) ioctl$auto_FS_IOC_UNRESVSP64(r0, 0x4030582b, 0x1) fallocate$auto(0x8000000000000003, 0x0, 0x9, 0x4cbd5d) rename$auto(&(0x7f0000000100)='./cgroup\x00', &(0x7f00000000c0)='./file0\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x2) clone$auto(0xcd, 0x2, 0x0, 0x0, 0xffffffff) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) 4.30281682s ago: executing program 2 (id=2847): sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x400000040000, 0x200006, 0x80000000000000, 0x40eb1, 0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) unshare$auto(0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}}, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='q\x00', @ANYRES16=r1, @ANYBLOB="10002cbd7000df250a0a08000a"], 0x10e}}, 0x10004010) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) clock_nanosleep$auto(0xfffffff9, 0x200000, &(0x7f0000000040)={0x100000000, 0x9}, &(0x7f0000000000)={0xffffffffffffffff, 0xc}) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) 4.203694159s ago: executing program 1 (id=2848): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0xb) r0 = socket(0x16, 0x80002, 0x76) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x80\x00\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\x11\xc5D\xcc\xa9\xf6\xd3\x1d\xb0\xc9\x8b\xa2\xdf63\xc9i}l\xdd>e\xeb\t@r\xa1\xa0\xf5\xf3\xdd\x04\x00\x00\x00\x00\x00\x00\x00q\xae\xd865`#um\x8c\xa6*\x89\x1e1~I\xb5n\x99\xd9\xfa\xd9\xf0\xcd9R\xc9', 0x100000a3d9) socket(0x1e, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x6, 0xffffffffffff0003, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYRES64=r2, @ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64, @ANYRES16], 0x70}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0x8000000000000010, 0x401, 0x8000) syz_clone3(&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3.951340075s ago: executing program 4 (id=2849): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xef1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0xc) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/net/bond0/bonding/ad_actor_sys_prio\x00', 0x942, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) gettid() r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}) r1 = socket(0x29, 0x2, 0x88) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) sync_file_range$auto(r1, 0xfffffffffffffe95, 0x9, 0x9) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80100, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffb) 3.346371023s ago: executing program 2 (id=2850): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xef1, 0xffffffffffffffff, 0x8000) socket(0x10, 0x2, 0xc) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/md_mod/parameters/new_array\x00', 0xa001, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/scsi_mod/parameters/default_dev_flags\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) gettid() r0 = socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) rt_sigqueueinfo$auto(0x0, 0x9, &(0x7f00000000c0)={@_si_pad}) r1 = socket(0x29, 0x2, 0x88) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) sync_file_range$auto(r1, 0xfffffffffffffe95, 0x9, 0x9) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x80100, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffb) 3.346181282s ago: executing program 3 (id=2851): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0xb) r0 = socket(0x16, 0x80002, 0x76) unshare$auto(0x40000080) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, &(0x7f0000000480)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x80\x00\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\x11\xc5D\xcc\xa9\xf6\xd3\x1d\xb0\xc9\x8b\xa2\xdf63\xc9i}l\xdd>e\xeb\t@r\xa1\xa0\xf5\xf3\xdd\x04\x00\x00\x00\x00\x00\x00\x00q\xae\xd865`#um\x8c\xa6*\x89\x1e1~I\xb5n\x99\xd9\xfa\xd9\xf0\xcd9R\xc9', 0x100000a3d9) socket(0x1e, 0x5, 0x0) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) ioctl$auto(0x3, 0x8905, 0x38) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x6, 0xffffffffffff0003, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYRES64=r2, @ANYBLOB="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", @ANYRES16=r0, @ANYRESOCT=r1, @ANYRES64, @ANYRES16], 0x70}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000240)='\x03W\x96l\x15\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00\x00\x00\x00', 0x100000002, 0x100000001) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0x8000000000000010, 0x401, 0x8000) syz_clone3(&(0x7f00000000c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.538614466s ago: executing program 4 (id=2852): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0x7, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2.324380505s ago: executing program 1 (id=2853): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.811204347s ago: executing program 2 (id=2854): mmap$auto(0x0, 0x7, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x80, 0x0, &(0x7f00000000c0)=0x97) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/blkio.bfq.time_recursive\x00', 0x182b02, 0x0) r2 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0xc4800, 0x0) madvise$auto(0x9d5adb5, 0xfffffffffffffff8, 0x400) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\x84q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa24X@\xadD\xf8\x9d\xf3 \xd2]\xc4\x13G\x1d\x04!\xc1\xeb.e$\xfb\xa3KU\xcf\xc1\x7fFD\x99\xf5v\v\x9dS\xc11P\xa3\xe9\xb0SqL\x85\xea\xb2\x9cY\x83.I\xca\x92\x1c\xc4\x13CV=\x92\x17c\x87iOt\x14On\x15=\v\xf0 \xc5\x8b~\xd6\xd4\xc7\xa3a\x1c\x06\x17\xb3\x88\x8c\xf1L\xba\x89a\xfd\xa5\xc6\x7fU\x00\xe5\x9b', 0x5) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(0x0, r3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd11/queue/iostats_passthrough\x00', 0x2a001, 0x0) write$auto(r5, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f00000003c0)={0x34, r4, 0x1, 0x70bd2a, 0x25dfdc00, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x2404c804}, 0x0) read$auto(r3, &(0x7f0000000000)='$/\x00', 0x0) r6 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) fchdir$auto(r6) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) r7 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r7, 0x0, 0x400) sendfile$auto(r2, r1, 0x0, 0x3) 1.410263195s ago: executing program 4 (id=2855): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) acct$auto(&(0x7f0000000000)='\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2008000) sysfs$auto(0x2, 0x17, 0x0) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8000, 0xe9) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_MON_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x10, 0x9, 0x0, 0x1, [@typed={0x9, 0x1, 0x0, 0x0, @str='$!.}\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) prctl$auto_PR_SET_VMA(0x53564d41, 0x0, 0x0, 0x8002, 0x4) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000440)='/proc/sys/kernel/timer_migration\x00', 0x242, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fffe000) socket(0xa, 0x5, 0x84) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0xb}, 0x200000003) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) 1.297114992s ago: executing program 2 (id=2856): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000002940)='/dev/fb0\x00', 0x841, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x28202, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0x547e0dec}, 0x9) write$auto(0xffffffffffffffff, &(0x7f0000000100)='7\x00\\\xa0\x04\xdb\xc3\x8cnI\x9c\t\xbck\x17\xfe_9\xdf\v\x9d\xf7\xa9+n\xf19\x8ba\xe38\xf7u~\r\x91p\x90x\xd9y\xef\x06\xafs\x90\xf0\xf9\xc3\'r\xac\x8d\\\xccM\xe3\x05\x87\x8c\x1beu\xa6\xab\xb2}\xb6\xb8\xa1\xb4\x98\x0f\x9b(8\xb9\xcb\x88\x0e\x99\x81f&\xe4\xe1\xf1\xe0iS\x93\xea\xa1\xb8\xa6T\xf4G\xb0m\xe5!\xa3\xda\x83\xc1\b\xb3\xce\x1bq\x03\xf7\t\x8f', 0x81) close_range$auto(0x2, 0x8, 0x8) io_uring_setup$auto(0x59, &(0x7f0000000200)={0x0, 0x80, 0x3800, 0x2, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x10006, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6, 0xfffffffffffffffd}, {0x100, 0x4, 0x52, 0x1000, 0x2, 0x1a7b870a, 0x76c2, 0x9, 0x100000000}}) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x20000, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x0, 0x1, 0x948b, 0x9, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x2, 0x8]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x4, 0xbc3, 0x800, 0x3, 0x8, 0x10001, 0x400000000003, 0x3, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x6, 0x9, 0xffffdfffffffff81, 0x4]}, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(0x0, r1) syz_clone3(0x0, 0x0) 1.22714505s ago: executing program 1 (id=2857): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x23, 0x0) setresuid$auto(0x0, 0x8, 0x0) unshare$auto(0x8000400) ioctl$auto_XFS_IOC_ERROR_CLEARALL(0xffffffffffffffff, 0x40085875, &(0x7f0000000040)={0xffffffffffffffff, 0xfffffff7}) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/bus/usb/drivers/dvb_usb_dibusb_mc/new_id\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r1, &(0x7f0000003900)='\t', 0x1) write$auto(r0, 0x0, 0x4) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x4, 0xdb, 0x9b71, 0xffffffffffffffff, 0x0) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, 0x0, 0x20004000) writev$auto(0xffffffffffffffff, 0x0, 0x400000003) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x1) socket(0x29, 0x2, 0x0) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) bpf$auto(0x5, &(0x7f0000000140)=@bpf_attr_7={@prog_id=0x1a, 0x92f1, 0x4}, 0xa) 361.72115ms ago: executing program 2 (id=2858): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040801}, 0x44000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x1, 0x0) select$auto(0x8, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x2, 0x1000000000009489, 0x3, 0x15f4da0a, 0x1, 0x7, 0x7, 0x80000001, 0x4, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffa]}, 0x0) write$auto(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x100000a3d9) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) select$auto(0xa, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 360.162452ms ago: executing program 4 (id=2866): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lowpan0/queues/tx-0/tx_timeout\x00', 0x545001, 0x0) r1 = socket(0x2, 0x1, 0x400104) getsockopt$auto_SO_MEMINFO(r1, 0x1, 0x37, &(0x7f0000000100)='/dev/kvm\x00', &(0x7f0000000180)=0x7) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_EPCS_CFG(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000100)={0x2fc, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MBSSID_ELEMS={0x2b2, 0x133, 0x0, 0x1, [@generic="8a31764425ba5497951d909dda4463c465a089aa1b458c2f3446e344d01447a48b03372087d3f41a9888ba9c3710eb2a8e48cd0b19f1babb1e806706260077178b9a28944272f99a3fce88a3966c8fd6809975e84d14499189512640339601ab6245feaa5aefb92e0d0a011ae1f24daecbb6d02935f3178a89a081dbb496093c6b2aba46ee48fbd1142873a47a759ef8a01b790f70f439127add03286d68a6fa86c8a6cb085ce1d745a9a9b88bda", @generic="90fda3f54235", @typed={0x8, 0x97, 0x0, 0x0, @ipv4=@local}, @generic="ec89dd15001972e6867c1cc343323eb91bcf7e4f7db2a7c880dcd2af808406bad715fb55ddc82da416d3a66656214eade9a6c8d0e1af56dacc4ef0f0e11a06c7a0dec80b", @generic="58c5e88d2cad2a8dc5e4d68756c5e251ddfea544c1540a035314daf4f22e32300e50d350b8249a0fdfd72a59770956b930469c952bffe82a07d21512f66ad85cc4c8dc6977f9622a2cfe1e7197167b4aa7510cb26c52ab3d581b3e20c3d7444448e1ea95620906e01cc69d84cdb227777d5c17f939b8b9b4f2a092d782161af44ff5206739e57c3274933bdb752a844631bfccc1802f2b5b94e25aa32f3d3926b22322596c8475e9984402476d86ae1d232db96f1a12daf1dd8f50d2f6944244ad247fa7f859d17179de8f382ba2c540a1b1b5c6df8951fe", @generic="77b44dc92596132cce727e20e64cc729ff8e1631412b7b8f5d3a2557e18812dcd84e4e48b684da504b7da347dc864f396f7715d62f506140599d04a645642eb1bab7b3d98f1ff7318dc34f42fbcfc3744a8d6cbe80bf98f72748da0757b6ee4f9deb2fb20ef395f68d06ae2e3f6b6bc42342cffd89e6f53f208f324df9c0498fbb4bdc7a3fb048dbb6cdb2dfdb719efe82f0d71ee9cf4b180b1c35fd2079a48139bcdd9e5205c62922132b7374d3720799fd838d3280e91eb4aaacde1771421cde71e1b95bc7cb35b40e9478bde4e5089ad7c53ee589"]}, @NL80211_ATTR_FILS_NONCES={0x23, 0xf3, "a4f7a2451d2860d45ce9dafde3a50e29657b7e112b868c9e7fb0d8dfc59640"}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, 0x5}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x7}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x4080}, 0x4040845) write$auto(r0, 0x0, 0x300000000000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x40e00, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x3, &(0x7f0000000080)={0x0, 0x1}, 0x3) fsconfig$auto_FSCONFIG_SET_BINARY(r3, 0x2, &(0x7f0000000400)='\xb1@\x00', &(0x7f00000004c0)="80ff8e960b961cd8ee5fe7a98bf362f942bc6fde77bcd94ff651f91003bb0a072374c62765e181e0dbe812e29a34ec36d9844adc1aef69e54189539da38c33e4c388ebc8afe7", 0x1) socket(0x2c, 0x80000, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001a40), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001a80)={'veth1_to_hsr\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r8, &(0x7f0000002f40)={0x0, 0x0, &(0x7f0000002f00)={&(0x7f0000001ac0)={0x24, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_CABLE_TEST_TDR_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x24040000}, 0x0) 103.792874ms ago: executing program 1 (id=2859): sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x400000040000, 0x200006, 0x80000000000000, 0x40eb1, 0xffffffffffffffff, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="0100"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) unshare$auto(0x8) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}}, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB='q\x00', @ANYRES16=r1, @ANYBLOB="10002cbd7000df250a0a08000a"], 0x10e}}, 0x10004010) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/snd/controlC0\x00', 0x880, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) clock_nanosleep$auto(0xfffffff9, 0x200000, &(0x7f0000000040)={0x100000000, 0x9}, &(0x7f0000000000)={0xffffffffffffffff, 0xc}) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000080), 0x840, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) 0s ago: executing program 4 (id=2860): waitid$auto(0x8, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000180)={{0xfffffffffffffff9, 0x80}, {0x2, 0x6}, 0x4, 0x5, 0x1, 0x3, 0x0, 0x8000, 0x80000000, 0x7, 0xb7, 0x5d9, 0x5, 0x7ff, 0x2055}) mmap$auto(0x2, 0x400008, 0xdf, 0x9b72, 0x2, 0x10000000008000) r0 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_pipe\x00', 0x80, 0x0) read$auto(r0, 0x0, 0xfffffff0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x787b, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) write$auto(0xffffffffffffffff, &(0x7f0000000000)='/sys/module/block2mtd/parameters/block2mtd\x00', 0x272) msgctl$auto_IPC_STAT(0x0, 0x2, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x200000000003, 0x2f4a3a23) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev$auto(r2, &(0x7f0000000300)={&(0x7f0000000200), 0x200}, 0x3) rmdir$auto(0x0) mmap$auto(0xfffffffffffffffe, 0xe983, 0xc, 0xebe, r1, 0x54f5cfc0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fstat$auto(r3, 0x0) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x40100, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x4610, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sda1\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001d00), r5) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r5, 0x0, 0x4000) socket(0x2a, 0xa, 0x83) kernel console output (not intermixed with test programs): o_syscall_64+0x106/0xf80 [ 651.655270][T17393] ? clear_bhb_loop+0x40/0x90 [ 651.655288][T17393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.655303][T17393] RIP: 0033:0x7f524ad9c799 [ 651.655316][T17393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.655331][T17393] RSP: 002b:00007f524bc65028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 651.655345][T17393] RAX: ffffffffffffffda RBX: 00007f524b016090 RCX: 00007f524ad9c799 [ 651.655355][T17393] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 651.655363][T17393] RBP: 00007f524ae32c99 R08: 0000000000000000 R09: 0000000000000000 [ 651.655372][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.655381][T17393] R13: 00007f524b016128 R14: 00007f524b016090 R15: 00007ffd336264b8 [ 651.655400][T17393] [ 653.082095][T17428] FAULT_INJECTION: forcing a failure. [ 653.082095][T17428] name failslab, interval 1, probability 0, space 0, times 0 [ 653.106565][T17428] CPU: 0 UID: 0 PID: 17428 Comm: syz.2.2292 Tainted: G L syzkaller #0 PREEMPT(full) [ 653.106610][T17428] Tainted: [L]=SOFTLOCKUP [ 653.106619][T17428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 653.106634][T17428] Call Trace: [ 653.106643][T17428] [ 653.106653][T17428] dump_stack_lvl+0x100/0x190 [ 653.106701][T17428] should_fail_ex.cold+0x5/0xa [ 653.106732][T17428] should_failslab+0xc2/0x120 [ 653.106751][T17428] __kmalloc_cache_noprof+0x7a/0x6f0 [ 653.106772][T17428] ? percpu_ref_init+0xec/0x3f0 [ 653.106806][T17428] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 653.106828][T17428] percpu_ref_init+0xec/0x3f0 [ 653.106853][T17428] io_uring_setup.cold+0x23b/0x1d79 [ 653.106876][T17428] ? ksys_write+0x190/0x250 [ 653.106891][T17428] ? __pfx_io_uring_setup+0x10/0x10 [ 653.106912][T17428] ? do_futex+0x192/0x350 [ 653.106932][T17428] ? __pfx_do_futex+0x10/0x10 [ 653.106960][T17428] ? xfd_validate_state+0x129/0x190 [ 653.106986][T17428] __x64_sys_io_uring_setup+0xc2/0x170 [ 653.107006][T17428] do_syscall_64+0x106/0xf80 [ 653.107026][T17428] ? clear_bhb_loop+0x40/0x90 [ 653.107045][T17428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.107061][T17428] RIP: 0033:0x7f524ad9c799 [ 653.107074][T17428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.107089][T17428] RSP: 002b:00007f524bc65028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 653.107104][T17428] RAX: ffffffffffffffda RBX: 00007f524b016090 RCX: 00007f524ad9c799 [ 653.107114][T17428] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 653.107123][T17428] RBP: 00007f524ae32c99 R08: 0000000000000000 R09: 0000000000000000 [ 653.107131][T17428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 653.107139][T17428] R13: 00007f524b016128 R14: 00007f524b016090 R15: 00007ffd336264b8 [ 653.107159][T17428] [ 654.179963][T17444] netlink: 93 bytes leftover after parsing attributes in process `syz.4.2294'. [ 654.519849][T17451] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2295'. [ 654.552734][T17447] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2295'. [ 654.907776][ T30] audit: type=1800 audit(4294967430.739:19): pid=17458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2297" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 655.199550][T17465] FAULT_INJECTION: forcing a failure. [ 655.199550][T17465] name failslab, interval 1, probability 0, space 0, times 0 [ 655.250602][T17465] CPU: 0 UID: 0 PID: 17465 Comm: syz.4.2298 Tainted: G L syzkaller #0 PREEMPT(full) [ 655.250648][T17465] Tainted: [L]=SOFTLOCKUP [ 655.250658][T17465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 655.250673][T17465] Call Trace: [ 655.250685][T17465] [ 655.250696][T17465] dump_stack_lvl+0x100/0x190 [ 655.250741][T17465] should_fail_ex.cold+0x5/0xa [ 655.250771][T17465] should_failslab+0xc2/0x120 [ 655.250803][T17465] __kvmalloc_node_noprof+0xfa/0xa00 [ 655.250843][T17465] ? io_uring_setup.cold+0x171/0x1d79 [ 655.250879][T17465] ? lockdep_init_map_type+0x5c/0x250 [ 655.250917][T17465] io_uring_setup.cold+0x171/0x1d79 [ 655.250960][T17465] ? finish_task_switch.isra.0+0x2c6/0xb80 [ 655.250992][T17465] ? __pfx_io_uring_setup+0x10/0x10 [ 655.251031][T17465] ? do_futex+0x192/0x350 [ 655.251069][T17465] ? __pfx_do_futex+0x10/0x10 [ 655.251121][T17465] ? xfd_validate_state+0x129/0x190 [ 655.251165][T17465] __x64_sys_io_uring_setup+0xc2/0x170 [ 655.251200][T17465] do_syscall_64+0x106/0xf80 [ 655.251234][T17465] ? clear_bhb_loop+0x40/0x90 [ 655.251264][T17465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.251291][T17465] RIP: 0033:0x7f31c2d9c799 [ 655.251313][T17465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.251339][T17465] RSP: 002b:00007f31c3be9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 655.251365][T17465] RAX: ffffffffffffffda RBX: 00007f31c3016090 RCX: 00007f31c2d9c799 [ 655.251383][T17465] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 655.251399][T17465] RBP: 00007f31c2e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 655.251414][T17465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 655.251430][T17465] R13: 00007f31c3016128 R14: 00007f31c3016090 R15: 00007fffbe5b4dd8 [ 655.251466][T17465] [ 656.309452][T17482] FAULT_INJECTION: forcing a failure. [ 656.309452][T17482] name failslab, interval 1, probability 0, space 0, times 0 [ 656.322387][T17482] CPU: 0 UID: 0 PID: 17482 Comm: syz.4.2301 Tainted: G L syzkaller #0 PREEMPT(full) [ 656.322427][T17482] Tainted: [L]=SOFTLOCKUP [ 656.322437][T17482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 656.322454][T17482] Call Trace: [ 656.322463][T17482] [ 656.322473][T17482] dump_stack_lvl+0x100/0x190 [ 656.322532][T17482] should_fail_ex.cold+0x5/0xa [ 656.322567][T17482] should_failslab+0xc2/0x120 [ 656.322598][T17482] __kvmalloc_node_noprof+0xfa/0xa00 [ 656.322640][T17482] ? io_uring_setup.cold+0x171/0x1d79 [ 656.322681][T17482] ? lockdep_init_map_type+0x5c/0x250 [ 656.322724][T17482] io_uring_setup.cold+0x171/0x1d79 [ 656.322765][T17482] ? ksys_write+0x190/0x250 [ 656.322794][T17482] ? __pfx_io_uring_setup+0x10/0x10 [ 656.322834][T17482] ? do_futex+0x192/0x350 [ 656.322871][T17482] ? __pfx_do_futex+0x10/0x10 [ 656.322924][T17482] ? xfd_validate_state+0x129/0x190 [ 656.322975][T17482] __x64_sys_io_uring_setup+0xc2/0x170 [ 656.323014][T17482] do_syscall_64+0x106/0xf80 [ 656.323053][T17482] ? clear_bhb_loop+0x40/0x90 [ 656.323088][T17482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.323118][T17482] RIP: 0033:0x7f31c2d9c799 [ 656.323142][T17482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.323169][T17482] RSP: 002b:00007f31c3be9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 656.323195][T17482] RAX: ffffffffffffffda RBX: 00007f31c3016090 RCX: 00007f31c2d9c799 [ 656.323214][T17482] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 656.323232][T17482] RBP: 00007f31c2e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 656.323249][T17482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 656.323266][T17482] R13: 00007f31c3016128 R14: 00007f31c3016090 R15: 00007fffbe5b4dd8 [ 656.323304][T17482] [ 658.790824][T17520] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2306'. [ 660.405638][T17545] FAULT_INJECTION: forcing a failure. [ 660.405638][T17545] name failslab, interval 1, probability 0, space 0, times 0 [ 660.424283][T17545] CPU: 0 UID: 0 PID: 17545 Comm: syz.3.2310 Tainted: G L syzkaller #0 PREEMPT(full) [ 660.424330][T17545] Tainted: [L]=SOFTLOCKUP [ 660.424340][T17545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.424357][T17545] Call Trace: [ 660.424366][T17545] [ 660.424377][T17545] dump_stack_lvl+0x100/0x190 [ 660.424427][T17545] should_fail_ex.cold+0x5/0xa [ 660.424460][T17545] should_failslab+0xc2/0x120 [ 660.424490][T17545] __kvmalloc_node_noprof+0xfa/0xa00 [ 660.424533][T17545] ? io_uring_setup.cold+0x171/0x1d79 [ 660.424575][T17545] ? lockdep_init_map_type+0x5c/0x250 [ 660.424618][T17545] io_uring_setup.cold+0x171/0x1d79 [ 660.424659][T17545] ? ksys_write+0x190/0x250 [ 660.424688][T17545] ? __pfx_io_uring_setup+0x10/0x10 [ 660.424728][T17545] ? do_futex+0x192/0x350 [ 660.424764][T17545] ? __pfx_do_futex+0x10/0x10 [ 660.424816][T17545] ? xfd_validate_state+0x129/0x190 [ 660.424866][T17545] __x64_sys_io_uring_setup+0xc2/0x170 [ 660.424916][T17545] do_syscall_64+0x106/0xf80 [ 660.424954][T17545] ? clear_bhb_loop+0x40/0x90 [ 660.424989][T17545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.425018][T17545] RIP: 0033:0x7f0fb839c799 [ 660.425042][T17545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.425071][T17545] RSP: 002b:00007f0fb9206028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 660.425098][T17545] RAX: ffffffffffffffda RBX: 00007f0fb8616090 RCX: 00007f0fb839c799 [ 660.425117][T17545] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 660.425134][T17545] RBP: 00007f0fb8432c99 R08: 0000000000000000 R09: 0000000000000000 [ 660.425152][T17545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 660.425168][T17545] R13: 00007f0fb8616128 R14: 00007f0fb8616090 R15: 00007ffd46894268 [ 660.425206][T17545] [ 663.409644][T17590] FAULT_INJECTION: forcing a failure. [ 663.409644][T17590] name failslab, interval 1, probability 0, space 0, times 0 [ 663.453418][T17590] CPU: 1 UID: 0 PID: 17590 Comm: syz.1.2318 Tainted: G L syzkaller #0 PREEMPT(full) [ 663.453461][T17590] Tainted: [L]=SOFTLOCKUP [ 663.453470][T17590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 663.453485][T17590] Call Trace: [ 663.453494][T17590] [ 663.453505][T17590] dump_stack_lvl+0x100/0x190 [ 663.453547][T17590] should_fail_ex.cold+0x5/0xa [ 663.453565][T17590] should_failslab+0xc2/0x120 [ 663.453582][T17590] __kmalloc_cache_noprof+0x7a/0x6f0 [ 663.453601][T17590] ? percpu_ref_init+0xec/0x3f0 [ 663.453626][T17590] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 663.453645][T17590] percpu_ref_init+0xec/0x3f0 [ 663.453668][T17590] io_uring_setup.cold+0x23b/0x1d79 [ 663.453690][T17590] ? ksys_write+0x190/0x250 [ 663.453705][T17590] ? __pfx_io_uring_setup+0x10/0x10 [ 663.453726][T17590] ? do_futex+0x192/0x350 [ 663.453745][T17590] ? __pfx_do_futex+0x10/0x10 [ 663.453772][T17590] ? xfd_validate_state+0x129/0x190 [ 663.453797][T17590] __x64_sys_io_uring_setup+0xc2/0x170 [ 663.453818][T17590] do_syscall_64+0x106/0xf80 [ 663.453838][T17590] ? clear_bhb_loop+0x40/0x90 [ 663.453856][T17590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 663.453871][T17590] RIP: 0033:0x7f71a059c799 [ 663.453885][T17590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 663.453900][T17590] RSP: 002b:00007f71a149b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 663.453915][T17590] RAX: ffffffffffffffda RBX: 00007f71a0816090 RCX: 00007f71a059c799 [ 663.453925][T17590] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 663.453934][T17590] RBP: 00007f71a0632c99 R08: 0000000000000000 R09: 0000000000000000 [ 663.453943][T17590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 663.453952][T17590] R13: 00007f71a0816128 R14: 00007f71a0816090 R15: 00007fff63914148 [ 663.453977][T17590] [ 664.430805][T17607] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2321'. [ 664.451600][T17609] FAULT_INJECTION: forcing a failure. [ 664.451600][T17609] name failslab, interval 1, probability 0, space 0, times 0 [ 664.467106][T17609] CPU: 1 UID: 0 PID: 17609 Comm: syz.4.2320 Tainted: G L syzkaller #0 PREEMPT(full) [ 664.467151][T17609] Tainted: [L]=SOFTLOCKUP [ 664.467161][T17609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 664.467176][T17609] Call Trace: [ 664.467185][T17609] [ 664.467196][T17609] dump_stack_lvl+0x100/0x190 [ 664.467245][T17609] should_fail_ex.cold+0x5/0xa [ 664.467278][T17609] should_failslab+0xc2/0x120 [ 664.467309][T17609] __kvmalloc_node_noprof+0xfa/0xa00 [ 664.467350][T17609] ? io_uring_setup.cold+0x171/0x1d79 [ 664.467391][T17609] ? lockdep_init_map_type+0x5c/0x250 [ 664.467432][T17609] io_uring_setup.cold+0x171/0x1d79 [ 664.467472][T17609] ? ksys_write+0x190/0x250 [ 664.467500][T17609] ? __pfx_io_uring_setup+0x10/0x10 [ 664.467539][T17609] ? do_futex+0x192/0x350 [ 664.467574][T17609] ? __pfx_do_futex+0x10/0x10 [ 664.467627][T17609] ? xfd_validate_state+0x129/0x190 [ 664.467675][T17609] __x64_sys_io_uring_setup+0xc2/0x170 [ 664.467714][T17609] do_syscall_64+0x106/0xf80 [ 664.467751][T17609] ? clear_bhb_loop+0x40/0x90 [ 664.467785][T17609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 664.467815][T17609] RIP: 0033:0x7f31c2d9c799 [ 664.467839][T17609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 664.467866][T17609] RSP: 002b:00007f31c3be9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 664.467890][T17609] RAX: ffffffffffffffda RBX: 00007f31c3016090 RCX: 00007f31c2d9c799 [ 664.467907][T17609] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 664.467935][T17609] RBP: 00007f31c2e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 664.467952][T17609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 664.467968][T17609] R13: 00007f31c3016128 R14: 00007f31c3016090 R15: 00007fffbe5b4dd8 [ 664.468005][T17609] [ 664.872929][T17602] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2321'. [ 664.884221][T17610] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2322'. [ 665.310682][T17626] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 665.711654][T17633] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2326'. [ 666.637786][T17651] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2330'. [ 668.609153][T17683] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 669.433899][T17696] netlink: 93 bytes leftover after parsing attributes in process `syz.4.2339'. [ 669.562057][T17701] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2340'. [ 669.572736][T17698] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2340'. [ 671.626430][T17743] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 675.852973][T17801] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 676.730882][T17815] FAULT_INJECTION: forcing a failure. [ 676.730882][T17815] name failslab, interval 1, probability 0, space 0, times 0 [ 676.743938][T17815] CPU: 1 UID: 0 PID: 17815 Comm: syz.2.2366 Tainted: G L syzkaller #0 PREEMPT(full) [ 676.743986][T17815] Tainted: [L]=SOFTLOCKUP [ 676.743995][T17815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.744011][T17815] Call Trace: [ 676.744020][T17815] [ 676.744030][T17815] dump_stack_lvl+0x100/0x190 [ 676.744077][T17815] should_fail_ex.cold+0x5/0xa [ 676.744111][T17815] should_failslab+0xc2/0x120 [ 676.744149][T17815] __kmalloc_cache_noprof+0x7a/0x6f0 [ 676.744182][T17815] ? percpu_ref_init+0xec/0x3f0 [ 676.744228][T17815] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 676.744253][T17815] percpu_ref_init+0xec/0x3f0 [ 676.744276][T17815] io_uring_setup.cold+0x23b/0x1d79 [ 676.744297][T17815] ? ksys_write+0x190/0x250 [ 676.744312][T17815] ? __pfx_io_uring_setup+0x10/0x10 [ 676.744332][T17815] ? do_futex+0x192/0x350 [ 676.744351][T17815] ? __pfx_do_futex+0x10/0x10 [ 676.744379][T17815] ? xfd_validate_state+0x129/0x190 [ 676.744404][T17815] __x64_sys_io_uring_setup+0xc2/0x170 [ 676.744425][T17815] do_syscall_64+0x106/0xf80 [ 676.744445][T17815] ? clear_bhb_loop+0x40/0x90 [ 676.744463][T17815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.744478][T17815] RIP: 0033:0x7f524ad9c799 [ 676.744493][T17815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.744507][T17815] RSP: 002b:00007f524bc65028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 676.744522][T17815] RAX: ffffffffffffffda RBX: 00007f524b016090 RCX: 00007f524ad9c799 [ 676.744531][T17815] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 676.744540][T17815] RBP: 00007f524ae32c99 R08: 0000000000000000 R09: 0000000000000000 [ 676.744549][T17815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 676.744558][T17815] R13: 00007f524b016128 R14: 00007f524b016090 R15: 00007ffd336264b8 [ 676.744578][T17815] [ 677.757518][ T9521] Bluetooth: hci0: command 0x0406 tx timeout [ 678.357724][T17850] netlink: 93 bytes leftover after parsing attributes in process `syz.4.2371'. [ 679.156033][T17857] FAULT_INJECTION: forcing a failure. [ 679.156033][T17857] name failslab, interval 1, probability 0, space 0, times 0 [ 679.182613][T17857] CPU: 0 UID: 0 PID: 17857 Comm: syz.2.2372 Tainted: G L syzkaller #0 PREEMPT(full) [ 679.182656][T17857] Tainted: [L]=SOFTLOCKUP [ 679.182664][T17857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 679.182679][T17857] Call Trace: [ 679.182687][T17857] [ 679.182697][T17857] dump_stack_lvl+0x100/0x190 [ 679.182742][T17857] should_fail_ex.cold+0x5/0xa [ 679.182771][T17857] should_failslab+0xc2/0x120 [ 679.182798][T17857] __kvmalloc_node_noprof+0xfa/0xa00 [ 679.182837][T17857] ? io_uring_setup.cold+0x171/0x1d79 [ 679.182860][T17857] ? lockdep_init_map_type+0x5c/0x250 [ 679.182882][T17857] io_uring_setup.cold+0x171/0x1d79 [ 679.182904][T17857] ? ksys_write+0x190/0x250 [ 679.182925][T17857] ? __pfx_io_uring_setup+0x10/0x10 [ 679.182948][T17857] ? do_futex+0x192/0x350 [ 679.182968][T17857] ? __pfx_do_futex+0x10/0x10 [ 679.182996][T17857] ? xfd_validate_state+0x129/0x190 [ 679.183023][T17857] __x64_sys_io_uring_setup+0xc2/0x170 [ 679.183044][T17857] do_syscall_64+0x106/0xf80 [ 679.183064][T17857] ? clear_bhb_loop+0x40/0x90 [ 679.183082][T17857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 679.183098][T17857] RIP: 0033:0x7f524ad9c799 [ 679.183112][T17857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 679.183127][T17857] RSP: 002b:00007f524bc65028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 679.183141][T17857] RAX: ffffffffffffffda RBX: 00007f524b016090 RCX: 00007f524ad9c799 [ 679.183151][T17857] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 679.183159][T17857] RBP: 00007f524ae32c99 R08: 0000000000000000 R09: 0000000000000000 [ 679.183168][T17857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 679.183178][T17857] R13: 00007f524b016128 R14: 00007f524b016090 R15: 00007ffd336264b8 [ 679.183198][T17857] [ 679.525799][T17847] Process accounting paused [ 683.670328][T17915] Process accounting resumed [ 685.919459][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.927121][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.341113][T17973] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 687.689768][T17981] FAULT_INJECTION: forcing a failure. [ 687.689768][T17981] name failslab, interval 1, probability 0, space 0, times 0 [ 687.746228][T17981] CPU: 0 UID: 0 PID: 17981 Comm: syz.4.2396 Tainted: G L syzkaller #0 PREEMPT(full) [ 687.746271][T17981] Tainted: [L]=SOFTLOCKUP [ 687.746281][T17981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 687.746296][T17981] Call Trace: [ 687.746304][T17981] [ 687.746315][T17981] dump_stack_lvl+0x100/0x190 [ 687.746362][T17981] should_fail_ex.cold+0x5/0xa [ 687.746391][T17981] should_failslab+0xc2/0x120 [ 687.746420][T17981] __kvmalloc_node_noprof+0xfa/0xa00 [ 687.746459][T17981] ? io_uring_setup.cold+0x171/0x1d79 [ 687.746499][T17981] ? lockdep_init_map_type+0x5c/0x250 [ 687.746536][T17981] io_uring_setup.cold+0x171/0x1d79 [ 687.746558][T17981] ? ksys_write+0x190/0x250 [ 687.746573][T17981] ? __pfx_io_uring_setup+0x10/0x10 [ 687.746594][T17981] ? do_futex+0x192/0x350 [ 687.746613][T17981] ? __pfx_do_futex+0x10/0x10 [ 687.746639][T17981] ? xfd_validate_state+0x129/0x190 [ 687.746666][T17981] __x64_sys_io_uring_setup+0xc2/0x170 [ 687.746687][T17981] do_syscall_64+0x106/0xf80 [ 687.746707][T17981] ? clear_bhb_loop+0x40/0x90 [ 687.746733][T17981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 687.746749][T17981] RIP: 0033:0x7f31c2d9c799 [ 687.746764][T17981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 687.746779][T17981] RSP: 002b:00007f31c3be9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 687.746793][T17981] RAX: ffffffffffffffda RBX: 00007f31c3016090 RCX: 00007f31c2d9c799 [ 687.746803][T17981] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 687.746812][T17981] RBP: 00007f31c2e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 687.746821][T17981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.746831][T17981] R13: 00007f31c3016128 R14: 00007f31c3016090 R15: 00007fffbe5b4dd8 [ 687.746851][T17981] [ 689.492175][T18006] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2402'. [ 690.546455][T18034] FAULT_INJECTION: forcing a failure. [ 690.546455][T18034] name failslab, interval 1, probability 0, space 0, times 0 [ 690.559349][T18034] CPU: 1 UID: 0 PID: 18034 Comm: syz.3.2406 Tainted: G L syzkaller #0 PREEMPT(full) [ 690.559393][T18034] Tainted: [L]=SOFTLOCKUP [ 690.559402][T18034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 690.559418][T18034] Call Trace: [ 690.559427][T18034] [ 690.559437][T18034] dump_stack_lvl+0x100/0x190 [ 690.559491][T18034] should_fail_ex.cold+0x5/0xa [ 690.559523][T18034] should_failslab+0xc2/0x120 [ 690.559549][T18034] __kvmalloc_node_noprof+0xfa/0xa00 [ 690.559590][T18034] ? io_alloc_cache_init+0x38/0x170 [ 690.559634][T18034] ? lockdep_init_map_type+0x5c/0x250 [ 690.559674][T18034] io_alloc_cache_init+0x38/0x170 [ 690.559712][T18034] io_uring_setup.cold+0x3cd/0x1d79 [ 690.559749][T18034] ? ksys_write+0x190/0x250 [ 690.559775][T18034] ? __pfx_io_uring_setup+0x10/0x10 [ 690.559811][T18034] ? do_futex+0x192/0x350 [ 690.559831][T18034] ? __pfx_do_futex+0x10/0x10 [ 690.559860][T18034] ? xfd_validate_state+0x129/0x190 [ 690.559886][T18034] __x64_sys_io_uring_setup+0xc2/0x170 [ 690.559906][T18034] do_syscall_64+0x106/0xf80 [ 690.559926][T18034] ? clear_bhb_loop+0x40/0x90 [ 690.559944][T18034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.559960][T18034] RIP: 0033:0x7f0fb839c799 [ 690.559974][T18034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 690.559988][T18034] RSP: 002b:00007f0fb9206028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 690.560003][T18034] RAX: ffffffffffffffda RBX: 00007f0fb8616090 RCX: 00007f0fb839c799 [ 690.560014][T18034] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 690.560023][T18034] RBP: 00007f0fb8432c99 R08: 0000000000000000 R09: 0000000000000000 [ 690.560032][T18034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 690.560042][T18034] R13: 00007f0fb8616128 R14: 00007f0fb8616090 R15: 00007ffd46894268 [ 690.560061][T18034] [ 691.756412][T18056] FAULT_INJECTION: forcing a failure. [ 691.756412][T18056] name failslab, interval 1, probability 0, space 0, times 0 [ 691.769479][T18056] CPU: 0 UID: 0 PID: 18056 Comm: syz.2.2408 Tainted: G L syzkaller #0 PREEMPT(full) [ 691.769518][T18056] Tainted: [L]=SOFTLOCKUP [ 691.769527][T18056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 691.769540][T18056] Call Trace: [ 691.769550][T18056] [ 691.769559][T18056] dump_stack_lvl+0x100/0x190 [ 691.769606][T18056] should_fail_ex.cold+0x5/0xa [ 691.769640][T18056] should_failslab+0xc2/0x120 [ 691.769670][T18056] __kvmalloc_node_noprof+0xfa/0xa00 [ 691.769698][T18056] ? io_uring_setup.cold+0x171/0x1d79 [ 691.769720][T18056] ? lockdep_init_map_type+0x5c/0x250 [ 691.769743][T18056] io_uring_setup.cold+0x171/0x1d79 [ 691.769764][T18056] ? ksys_write+0x190/0x250 [ 691.769779][T18056] ? __pfx_io_uring_setup+0x10/0x10 [ 691.769800][T18056] ? do_futex+0x192/0x350 [ 691.769819][T18056] ? __pfx_do_futex+0x10/0x10 [ 691.769846][T18056] ? xfd_validate_state+0x129/0x190 [ 691.769872][T18056] __x64_sys_io_uring_setup+0xc2/0x170 [ 691.769893][T18056] do_syscall_64+0x106/0xf80 [ 691.769914][T18056] ? clear_bhb_loop+0x40/0x90 [ 691.769933][T18056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 691.769949][T18056] RIP: 0033:0x7f524ad9c799 [ 691.769964][T18056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 691.769979][T18056] RSP: 002b:00007f524bc65028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 691.769994][T18056] RAX: ffffffffffffffda RBX: 00007f524b016090 RCX: 00007f524ad9c799 [ 691.770006][T18056] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 691.770016][T18056] RBP: 00007f524ae32c99 R08: 0000000000000000 R09: 0000000000000000 [ 691.770025][T18056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 691.770035][T18056] R13: 00007f524b016128 R14: 00007f524b016090 R15: 00007ffd336264b8 [ 691.770054][T18056] [ 692.842195][T18068] random: crng reseeded on system resumption [ 694.144997][ T30] audit: type=1800 audit(4294967469.979:20): pid=18098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2418" name="dbroot" dev="configfs" ino=68737 res=0 errno=0 [ 697.430114][T18153] FAULT_INJECTION: forcing a failure. [ 697.430114][T18153] name failslab, interval 1, probability 0, space 0, times 0 [ 697.452110][T18153] CPU: 0 UID: 0 PID: 18153 Comm: syz.3.2427 Tainted: G L syzkaller #0 PREEMPT(full) [ 697.452139][T18153] Tainted: [L]=SOFTLOCKUP [ 697.452145][T18153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 697.452155][T18153] Call Trace: [ 697.452162][T18153] [ 697.452169][T18153] dump_stack_lvl+0x100/0x190 [ 697.452198][T18153] should_fail_ex.cold+0x5/0xa [ 697.452217][T18153] should_failslab+0xc2/0x120 [ 697.452234][T18153] __kmalloc_node_track_caller_noprof+0xe3/0x850 [ 697.452258][T18153] ? kstrdup_const+0x63/0x80 [ 697.452275][T18153] kstrdup+0x51/0xe0 [ 697.452298][T18153] kstrdup_const+0x63/0x80 [ 697.452312][T18153] alloc_vfsmnt+0xe5/0x6a0 [ 697.452329][T18153] ? __pfx___might_resched+0x10/0x10 [ 697.452352][T18153] clone_mnt+0x4b/0x930 [ 697.452374][T18153] copy_tree+0xfc/0xbf0 [ 697.452389][T18153] ? __pfx_down_write+0x10/0x10 [ 697.452417][T18153] copy_mnt_ns+0x2bd/0xc30 [ 697.452434][T18153] ? create_new_namespaces+0x30/0xac0 [ 697.452450][T18153] ? rcu_is_watching+0x12/0xc0 [ 697.452476][T18153] create_new_namespaces+0xd3/0xac0 [ 697.452492][T18153] ? bpf_lsm_capable+0x9/0x10 [ 697.452517][T18153] ? security_capable+0x80/0x260 [ 697.452544][T18153] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 697.452563][T18153] ksys_unshare+0x473/0xad0 [ 697.452583][T18153] ? __pfx_ksys_unshare+0x10/0x10 [ 697.452610][T18153] __x64_sys_unshare+0x31/0x40 [ 697.452629][T18153] do_syscall_64+0x106/0xf80 [ 697.452648][T18153] ? clear_bhb_loop+0x40/0x90 [ 697.452667][T18153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.452682][T18153] RIP: 0033:0x7f0fb839c799 [ 697.452696][T18153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.452711][T18153] RSP: 002b:00007f0fb9227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 697.452726][T18153] RAX: ffffffffffffffda RBX: 00007f0fb8615fa0 RCX: 00007f0fb839c799 [ 697.452736][T18153] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 697.452746][T18153] RBP: 00007f0fb8432c99 R08: 0000000000000000 R09: 0000000000000000 [ 697.452756][T18153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.452765][T18153] R13: 00007f0fb8616038 R14: 00007f0fb8615fa0 R15: 00007ffd46894268 [ 697.452786][T18153] [ 698.418847][T18166] FAULT_INJECTION: forcing a failure. [ 698.418847][T18166] name failslab, interval 1, probability 0, space 0, times 0 [ 698.514337][T18166] CPU: 1 UID: 0 PID: 18166 Comm: syz.3.2428 Tainted: G L syzkaller #0 PREEMPT(full) [ 698.514385][T18166] Tainted: [L]=SOFTLOCKUP [ 698.514395][T18166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 698.514410][T18166] Call Trace: [ 698.514430][T18166] [ 698.514443][T18166] dump_stack_lvl+0x100/0x190 [ 698.514491][T18166] should_fail_ex.cold+0x5/0xa [ 698.514522][T18166] should_failslab+0xc2/0x120 [ 698.514551][T18166] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 698.514594][T18166] ? alloc_empty_file+0x55/0x1c0 [ 698.514627][T18166] ? __pfx_stack_trace_save+0x10/0x10 [ 698.514660][T18166] alloc_empty_file+0x55/0x1c0 [ 698.514693][T18166] path_openat+0xe8/0x31a0 [ 698.514717][T18166] ? kasan_save_stack+0x3f/0x50 [ 698.514754][T18166] ? kasan_save_stack+0x30/0x50 [ 698.514790][T18166] ? kasan_save_track+0x14/0x30 [ 698.514825][T18166] ? __kasan_slab_alloc+0x89/0x90 [ 698.514847][T18166] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 698.514880][T18166] ? do_getname+0x35/0x390 [ 698.514908][T18166] ? do_sys_openat2+0xc5/0x1e0 [ 698.514939][T18166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.514969][T18166] ? __pfx_path_openat+0x10/0x10 [ 698.515005][T18166] do_file_open+0x20e/0x430 [ 698.515033][T18166] ? __pfx_do_file_open+0x10/0x10 [ 698.515080][T18166] ? alloc_fd+0x476/0x790 [ 698.515107][T18166] ? do_getname+0x191/0x390 [ 698.515139][T18166] do_sys_openat2+0x10d/0x1e0 [ 698.515171][T18166] ? __pfx_do_sys_openat2+0x10/0x10 [ 698.515214][T18166] __x64_sys_openat+0x12d/0x210 [ 698.515246][T18166] ? __pfx___x64_sys_openat+0x10/0x10 [ 698.515290][T18166] do_syscall_64+0x106/0xf80 [ 698.515323][T18166] ? clear_bhb_loop+0x40/0x90 [ 698.515353][T18166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 698.515379][T18166] RIP: 0033:0x7f0fb839c799 [ 698.515400][T18166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 698.515433][T18166] RSP: 002b:00007f0fb9206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 698.515457][T18166] RAX: ffffffffffffffda RBX: 00007f0fb8616090 RCX: 00007f0fb839c799 [ 698.515474][T18166] RDX: 0000000000020000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 698.515491][T18166] RBP: 00007f0fb8432c99 R08: 0000000000000000 R09: 0000000000000000 [ 698.515507][T18166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 698.515522][T18166] R13: 00007f0fb8616128 R14: 00007f0fb8616090 R15: 00007ffd46894268 [ 698.515555][T18166] [ 699.247846][T18176] FAULT_INJECTION: forcing a failure. [ 699.247846][T18176] name failslab, interval 1, probability 0, space 0, times 0 [ 699.327369][T18176] CPU: 0 UID: 0 PID: 18176 Comm: syz.1.2430 Tainted: G L syzkaller #0 PREEMPT(full) [ 699.327414][T18176] Tainted: [L]=SOFTLOCKUP [ 699.327424][T18176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 699.327440][T18176] Call Trace: [ 699.327448][T18176] [ 699.327460][T18176] dump_stack_lvl+0x100/0x190 [ 699.327506][T18176] should_fail_ex.cold+0x5/0xa [ 699.327539][T18176] should_failslab+0xc2/0x120 [ 699.327570][T18176] __kvmalloc_node_noprof+0xfa/0xa00 [ 699.327594][T18176] ? io_uring_setup.cold+0x171/0x1d79 [ 699.327617][T18176] ? lockdep_init_map_type+0x5c/0x250 [ 699.327641][T18176] io_uring_setup.cold+0x171/0x1d79 [ 699.327663][T18176] ? ksys_write+0x190/0x250 [ 699.327678][T18176] ? __pfx_io_uring_setup+0x10/0x10 [ 699.327700][T18176] ? do_futex+0x192/0x350 [ 699.327719][T18176] ? __pfx_do_futex+0x10/0x10 [ 699.327747][T18176] ? xfd_validate_state+0x129/0x190 [ 699.327773][T18176] __x64_sys_io_uring_setup+0xc2/0x170 [ 699.327794][T18176] do_syscall_64+0x106/0xf80 [ 699.327815][T18176] ? clear_bhb_loop+0x40/0x90 [ 699.327839][T18176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.327855][T18176] RIP: 0033:0x7f71a059c799 [ 699.327869][T18176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.327884][T18176] RSP: 002b:00007f71a149b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 699.327900][T18176] RAX: ffffffffffffffda RBX: 00007f71a0816090 RCX: 00007f71a059c799 [ 699.327910][T18176] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 699.327920][T18176] RBP: 00007f71a0632c99 R08: 0000000000000000 R09: 0000000000000000 [ 699.327931][T18176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 699.327940][T18176] R13: 00007f71a0816128 R14: 00007f71a0816090 R15: 00007fff63914148 [ 699.327959][T18176] [ 699.701919][T18183] usb usb13: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 700.349261][ T9521] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 700.372798][ T9521] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 700.382221][ T9521] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 700.392604][ T9521] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 700.406609][ T9521] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 700.819309][T18199] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2437'. [ 701.066805][ T8786] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.137088][T18190] chnl_net:caif_netlink_parms(): no params data found [ 701.247052][ T8786] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.397436][ T8786] bridge0: port 3(netdevsim1) entered disabled state [ 701.435786][ T8786] netdevsim netdevsim2 netdevsim1 (unregistering): left allmulticast mode [ 701.459725][ T8786] netdevsim netdevsim2 netdevsim1 (unregistering): left promiscuous mode [ 701.497519][ T8786] bridge0: port 3(netdevsim1) entered disabled state [ 701.550681][ T8786] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.766085][ T8786] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 701.857508][T18190] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.865806][T18190] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.873308][T18190] bridge_slave_0: entered allmulticast mode [ 701.883092][T18190] bridge_slave_0: entered promiscuous mode [ 701.934684][T18190] bridge0: port 2(bridge_slave_1) entered blocking state [ 701.943010][T18190] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.960384][T18190] bridge_slave_1: entered allmulticast mode [ 701.983542][T18190] bridge_slave_1: entered promiscuous mode [ 702.083630][T18222] FAULT_INJECTION: forcing a failure. [ 702.083630][T18222] name failslab, interval 1, probability 0, space 0, times 0 [ 702.131577][T18222] CPU: 1 UID: 0 PID: 18222 Comm: syz.1.2441 Tainted: G L syzkaller #0 PREEMPT(full) [ 702.131616][T18222] Tainted: [L]=SOFTLOCKUP [ 702.131625][T18222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 702.131640][T18222] Call Trace: [ 702.131648][T18222] [ 702.131657][T18222] dump_stack_lvl+0x100/0x190 [ 702.131699][T18222] should_fail_ex.cold+0x5/0xa [ 702.131727][T18222] should_failslab+0xc2/0x120 [ 702.131793][T18222] __kvmalloc_node_noprof+0xfa/0xa00 [ 702.131837][T18222] ? io_uring_setup.cold+0x171/0x1d79 [ 702.131876][T18222] ? lockdep_init_map_type+0x5c/0x250 [ 702.131912][T18222] io_uring_setup.cold+0x171/0x1d79 [ 702.131947][T18222] ? ksys_write+0x190/0x250 [ 702.131970][T18222] ? __pfx_io_uring_setup+0x10/0x10 [ 702.132004][T18222] ? do_futex+0x192/0x350 [ 702.132034][T18222] ? __pfx_do_futex+0x10/0x10 [ 702.132074][T18222] ? xfd_validate_state+0x129/0x190 [ 702.132111][T18222] __x64_sys_io_uring_setup+0xc2/0x170 [ 702.132142][T18222] do_syscall_64+0x106/0xf80 [ 702.132175][T18222] ? clear_bhb_loop+0x40/0x90 [ 702.132203][T18222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 702.132227][T18222] RIP: 0033:0x7f71a059c799 [ 702.132249][T18222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 702.132281][T18222] RSP: 002b:00007f71a149b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 702.132305][T18222] RAX: ffffffffffffffda RBX: 00007f71a0816090 RCX: 00007f71a059c799 [ 702.132320][T18222] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 702.132333][T18222] RBP: 00007f71a0632c99 R08: 0000000000000000 R09: 0000000000000000 [ 702.132347][T18222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 702.132364][T18222] R13: 00007f71a0816128 R14: 00007f71a0816090 R15: 00007fff63914148 [ 702.132394][T18222] [ 702.422808][T18190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 702.437179][T18190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 702.474824][ T9521] Bluetooth: hci2: command tx timeout [ 702.480753][T18190] team0: Port device team_slave_0 added [ 702.490179][T18190] team0: Port device team_slave_1 added [ 702.665894][T18190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 702.672892][T18190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.724092][T18190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 702.737470][T18190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 702.744482][T18190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 702.777107][T18190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 702.808652][ T8786] bridge_slave_1: left allmulticast mode [ 702.837471][ T8786] bridge_slave_1: left promiscuous mode [ 702.851057][ T8786] bridge0: port 2(bridge_slave_1) entered disabled state [ 702.866412][ T8786] bridge_slave_0: left allmulticast mode [ 702.882791][ T8786] bridge_slave_0: left promiscuous mode [ 702.889256][ T8786] bridge0: port 1(bridge_slave_0) entered disabled state [ 703.709126][ T8786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 703.813493][ T8786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 703.867817][ T8786] bond0 (unregistering): Released all slaves [ 704.303687][T18190] hsr_slave_0: entered promiscuous mode [ 704.319527][T18190] hsr_slave_1: entered promiscuous mode [ 704.343697][T18190] debugfs: 'hsr0' already exists in 'hsr' [ 704.365544][T18190] Cannot create hsr debugfs directory [ 704.554374][ T9521] Bluetooth: hci2: command tx timeout [ 704.591421][T18272] FAULT_INJECTION: forcing a failure. [ 704.591421][T18272] name failslab, interval 1, probability 0, space 0, times 0 [ 704.641888][T18272] CPU: 0 UID: 0 PID: 18272 Comm: syz.4.2449 Tainted: G L syzkaller #0 PREEMPT(full) [ 704.641938][T18272] Tainted: [L]=SOFTLOCKUP [ 704.641950][T18272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 704.641969][T18272] Call Trace: [ 704.641987][T18272] [ 704.642000][T18272] dump_stack_lvl+0x100/0x190 [ 704.642048][T18272] should_fail_ex.cold+0x5/0xa [ 704.642082][T18272] ? tomoyo_realpath_from_path+0xb6/0x690 [ 704.642120][T18272] should_failslab+0xc2/0x120 [ 704.642155][T18272] __kmalloc_noprof+0xe0/0x850 [ 704.642202][T18272] tomoyo_realpath_from_path+0xb6/0x690 [ 704.642244][T18272] tomoyo_check_open_permission+0x2af/0x3c0 [ 704.642278][T18272] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 704.642351][T18272] ? do_raw_spin_lock+0x128/0x260 [ 704.642395][T18272] ? path_get+0x61/0x80 [ 704.642432][T18272] tomoyo_file_open+0x6b/0x90 [ 704.642472][T18272] security_file_open+0xb5/0x1e0 [ 704.642507][T18272] do_dentry_open+0x5aa/0x1660 [ 704.642538][T18272] ? security_inode_permission+0xbf/0x250 [ 704.642571][T18272] vfs_open+0x82/0x3f0 [ 704.642607][T18272] path_openat+0x208c/0x31a0 [ 704.642648][T18272] ? __pfx_path_openat+0x10/0x10 [ 704.642690][T18272] do_file_open+0x20e/0x430 [ 704.642722][T18272] ? __pfx_do_file_open+0x10/0x10 [ 704.642778][T18272] ? alloc_fd+0x476/0x790 [ 704.642808][T18272] ? do_getname+0x191/0x390 [ 704.642841][T18272] do_sys_openat2+0x10d/0x1e0 [ 704.642873][T18272] ? __pfx_do_sys_openat2+0x10/0x10 [ 704.642917][T18272] __x64_sys_openat+0x12d/0x210 [ 704.642952][T18272] ? __pfx___x64_sys_openat+0x10/0x10 [ 704.643008][T18272] do_syscall_64+0x106/0xf80 [ 704.643032][T18272] ? clear_bhb_loop+0x40/0x90 [ 704.643051][T18272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 704.643068][T18272] RIP: 0033:0x7f31c2d9c799 [ 704.643082][T18272] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 704.643098][T18272] RSP: 002b:00007f31c3be9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 704.643114][T18272] RAX: ffffffffffffffda RBX: 00007f31c3016090 RCX: 00007f31c2d9c799 [ 704.643125][T18272] RDX: 0000000000020000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 704.643134][T18272] RBP: 00007f31c2e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 704.643143][T18272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 704.643152][T18272] R13: 00007f31c3016128 R14: 00007f31c3016090 R15: 00007fffbe5b4dd8 [ 704.643173][T18272] [ 705.115852][T18272] ERROR: Out of memory at tomoyo_realpath_from_path. [ 705.309941][ T8786] hsr_slave_0: left promiscuous mode [ 705.329243][T18283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2451'. [ 705.422070][ T8786] hsr_slave_1: left promiscuous mode [ 705.456112][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 705.510459][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 705.638384][ T8786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 705.667697][ T8786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 705.807027][ T8786] veth1_macvtap: left promiscuous mode [ 705.848582][ T8786] veth0_macvtap: left promiscuous mode [ 705.885320][ T8786] veth1_vlan: left promiscuous mode [ 705.903298][ T8786] veth0_vlan: left promiscuous mode [ 706.634627][ T9521] Bluetooth: hci2: command tx timeout [ 706.648891][ T8786] team0 (unregistering): Port device team_slave_1 removed [ 706.720366][ T8786] team0 (unregistering): Port device team_slave_0 removed [ 708.714649][ T9521] Bluetooth: hci2: command tx timeout [ 708.816814][T18190] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 708.972368][T18190] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 709.012495][T18190] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 709.122447][T18190] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 709.512606][T18190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.598380][T18190] 8021q: adding VLAN 0 to HW filter on device team0 [ 709.741381][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 709.748652][ T8802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 709.861404][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state [ 709.868589][ T8794] bridge0: port 2(bridge_slave_1) entered forwarding state [ 710.489971][T18190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 710.667627][T18190] veth0_vlan: entered promiscuous mode [ 710.739606][T18190] veth1_vlan: entered promiscuous mode [ 710.911760][T18190] veth0_macvtap: entered promiscuous mode [ 710.950528][T18190] veth1_macvtap: entered promiscuous mode [ 711.039513][T18190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 711.102316][T18190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 711.156052][T18337] Process accounting resumed [ 711.223215][ T8802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.254808][ T8802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.263963][ T8802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.322419][ T8802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.514490][ T30] audit: type=1800 audit(4294967487.339:21): pid=18419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2463" name="dbroot" dev="configfs" ino=70487 res=0 errno=0 [ 712.094232][T10184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.125980][T10184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 712.214368][T18433] FAULT_INJECTION: forcing a failure. [ 712.214368][T18433] name failslab, interval 1, probability 0, space 0, times 0 [ 712.229593][T18433] CPU: 1 UID: 0 PID: 18433 Comm: syz.4.2466 Tainted: G L syzkaller #0 PREEMPT(full) [ 712.229621][T18433] Tainted: [L]=SOFTLOCKUP [ 712.229628][T18433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 712.229638][T18433] Call Trace: [ 712.229645][T18433] [ 712.229652][T18433] dump_stack_lvl+0x100/0x190 [ 712.229682][T18433] should_fail_ex.cold+0x5/0xa [ 712.229701][T18433] should_failslab+0xc2/0x120 [ 712.229718][T18433] __kvmalloc_node_noprof+0xfa/0xa00 [ 712.229741][T18433] ? io_alloc_cache_init+0x38/0x170 [ 712.229766][T18433] ? lockdep_init_map_type+0x5c/0x250 [ 712.229789][T18433] io_alloc_cache_init+0x38/0x170 [ 712.229814][T18433] io_uring_setup.cold+0x3cd/0x1d79 [ 712.229836][T18433] ? ksys_write+0x190/0x250 [ 712.229860][T18433] ? __pfx_io_uring_setup+0x10/0x10 [ 712.229882][T18433] ? do_futex+0x192/0x350 [ 712.229904][T18433] ? __pfx_do_futex+0x10/0x10 [ 712.229932][T18433] ? xfd_validate_state+0x129/0x190 [ 712.229959][T18433] __x64_sys_io_uring_setup+0xc2/0x170 [ 712.229979][T18433] do_syscall_64+0x106/0xf80 [ 712.230000][T18433] ? clear_bhb_loop+0x40/0x90 [ 712.230018][T18433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 712.230034][T18433] RIP: 0033:0x7f31c2d9c799 [ 712.230049][T18433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 712.230063][T18433] RSP: 002b:00007f31c3be9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 712.230078][T18433] RAX: ffffffffffffffda RBX: 00007f31c3016090 RCX: 00007f31c2d9c799 [ 712.230088][T18433] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 712.230098][T18433] RBP: 00007f31c2e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 712.230108][T18433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 712.230117][T18433] R13: 00007f31c3016128 R14: 00007f31c3016090 R15: 00007fffbe5b4dd8 [ 712.230137][T18433] [ 712.709566][T13454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 712.781038][T13454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 713.064805][T18448] FAULT_INJECTION: forcing a failure. [ 713.064805][T18448] name failslab, interval 1, probability 0, space 0, times 0 [ 713.079242][T18448] CPU: 1 UID: 0 PID: 18448 Comm: syz.3.2467 Tainted: G L syzkaller #0 PREEMPT(full) [ 713.079287][T18448] Tainted: [L]=SOFTLOCKUP [ 713.079297][T18448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 713.079314][T18448] Call Trace: [ 713.079322][T18448] [ 713.079334][T18448] dump_stack_lvl+0x100/0x190 [ 713.079380][T18448] should_fail_ex.cold+0x5/0xa [ 713.079412][T18448] should_failslab+0xc2/0x120 [ 713.079445][T18448] __kvmalloc_node_noprof+0xfa/0xa00 [ 713.079486][T18448] ? io_alloc_cache_init+0x38/0x170 [ 713.079531][T18448] ? lockdep_init_map_type+0x5c/0x250 [ 713.079576][T18448] io_alloc_cache_init+0x38/0x170 [ 713.079623][T18448] io_uring_setup.cold+0x3cd/0x1d79 [ 713.079665][T18448] ? ksys_write+0x190/0x250 [ 713.079692][T18448] ? __pfx_io_uring_setup+0x10/0x10 [ 713.079715][T18448] ? do_futex+0x192/0x350 [ 713.079736][T18448] ? __pfx_do_futex+0x10/0x10 [ 713.079766][T18448] ? xfd_validate_state+0x129/0x190 [ 713.079792][T18448] __x64_sys_io_uring_setup+0xc2/0x170 [ 713.079813][T18448] do_syscall_64+0x106/0xf80 [ 713.079833][T18448] ? clear_bhb_loop+0x40/0x90 [ 713.079852][T18448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 713.079868][T18448] RIP: 0033:0x7f0fb839c799 [ 713.079883][T18448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 713.079911][T18448] RSP: 002b:00007f0fb9206028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 713.079927][T18448] RAX: ffffffffffffffda RBX: 00007f0fb8616090 RCX: 00007f0fb839c799 [ 713.079938][T18448] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 713.079948][T18448] RBP: 00007f0fb8432c99 R08: 0000000000000000 R09: 0000000000000000 [ 713.079958][T18448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 713.079967][T18448] R13: 00007f0fb8616128 R14: 00007f0fb8616090 R15: 00007ffd46894268 [ 713.079988][T18448] [ 714.055374][T18468] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 714.785532][T18461] Process accounting paused [ 715.014085][T18487] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 716.100149][T18501] FAULT_INJECTION: forcing a failure. [ 716.100149][T18501] name failslab, interval 1, probability 0, space 0, times 0 [ 716.113267][T18501] CPU: 0 UID: 0 PID: 18501 Comm: syz.4.2474 Tainted: G L syzkaller #0 PREEMPT(full) [ 716.113301][T18501] Tainted: [L]=SOFTLOCKUP [ 716.113307][T18501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 716.113317][T18501] Call Trace: [ 716.113325][T18501] [ 716.113332][T18501] dump_stack_lvl+0x100/0x190 [ 716.113361][T18501] should_fail_ex.cold+0x5/0xa [ 716.113380][T18501] should_failslab+0xc2/0x120 [ 716.113397][T18501] __kvmalloc_node_noprof+0xfa/0xa00 [ 716.113419][T18501] ? io_uring_setup.cold+0x171/0x1d79 [ 716.113442][T18501] ? lockdep_init_map_type+0x5c/0x250 [ 716.113465][T18501] io_uring_setup.cold+0x171/0x1d79 [ 716.113487][T18501] ? ksys_write+0x190/0x250 [ 716.113502][T18501] ? __pfx_io_uring_setup+0x10/0x10 [ 716.113524][T18501] ? do_futex+0x192/0x350 [ 716.113544][T18501] ? __pfx_do_futex+0x10/0x10 [ 716.113573][T18501] ? xfd_validate_state+0x129/0x190 [ 716.113601][T18501] __x64_sys_io_uring_setup+0xc2/0x170 [ 716.113622][T18501] do_syscall_64+0x106/0xf80 [ 716.113652][T18501] ? clear_bhb_loop+0x40/0x90 [ 716.113671][T18501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 716.113688][T18501] RIP: 0033:0x7f31c2d9c799 [ 716.113703][T18501] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 716.113718][T18501] RSP: 002b:00007f31c3be9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 716.113733][T18501] RAX: ffffffffffffffda RBX: 00007f31c3016090 RCX: 00007f31c2d9c799 [ 716.113743][T18501] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 716.113752][T18501] RBP: 00007f31c2e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 716.113761][T18501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 716.113771][T18501] R13: 00007f31c3016128 R14: 00007f31c3016090 R15: 00007fffbe5b4dd8 [ 716.113791][T18501] [ 717.035745][T18508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2476'. [ 717.249432][T18512] tipc: Withdrawal distribution failure [ 718.028687][T18531] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 718.754586][T18538] syz.2.2482 (18538): /proc/18537/oom_adj is deprecated, please use /proc/18537/oom_score_adj instead. [ 722.700002][ T30] audit: type=1800 audit(4294967301.690:22): pid=18605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2492" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 724.702680][T18629] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 725.922319][T18650] bond0: no command found in slaves file - use +ifname or -ifname [ 729.238890][T18708] FAULT_INJECTION: forcing a failure. [ 729.238890][T18708] name failslab, interval 1, probability 0, space 0, times 0 [ 729.251849][T18708] CPU: 0 UID: 0 PID: 18708 Comm: syz.2.2512 Tainted: G L syzkaller #0 PREEMPT(full) [ 729.251894][T18708] Tainted: [L]=SOFTLOCKUP [ 729.251905][T18708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.251923][T18708] Call Trace: [ 729.251933][T18708] [ 729.251944][T18708] dump_stack_lvl+0x100/0x190 [ 729.251995][T18708] should_fail_ex.cold+0x5/0xa [ 729.252030][T18708] should_failslab+0xc2/0x120 [ 729.252063][T18708] __kvmalloc_node_noprof+0xfa/0xa00 [ 729.252106][T18708] ? io_alloc_cache_init+0x38/0x170 [ 729.252153][T18708] ? lockdep_init_map_type+0x5c/0x250 [ 729.252197][T18708] io_alloc_cache_init+0x38/0x170 [ 729.252244][T18708] io_uring_setup.cold+0x3cd/0x1d79 [ 729.252286][T18708] ? ksys_write+0x190/0x250 [ 729.252325][T18708] ? __pfx_io_uring_setup+0x10/0x10 [ 729.252368][T18708] ? do_futex+0x192/0x350 [ 729.252407][T18708] ? __pfx_do_futex+0x10/0x10 [ 729.252460][T18708] ? xfd_validate_state+0x129/0x190 [ 729.252511][T18708] __x64_sys_io_uring_setup+0xc2/0x170 [ 729.252551][T18708] do_syscall_64+0x106/0xf80 [ 729.252591][T18708] ? clear_bhb_loop+0x40/0x90 [ 729.252626][T18708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.252655][T18708] RIP: 0033:0x7f73acf9c799 [ 729.252683][T18708] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 729.252710][T18708] RSP: 002b:00007f73ab1f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 729.252738][T18708] RAX: ffffffffffffffda RBX: 00007f73ad216090 RCX: 00007f73acf9c799 [ 729.252757][T18708] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 729.252776][T18708] RBP: 00007f73ad032c99 R08: 0000000000000000 R09: 0000000000000000 [ 729.252795][T18708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 729.252810][T18708] R13: 00007f73ad216128 R14: 00007f73ad216090 R15: 00007ffd95aa8898 [ 729.252841][T18708] [ 729.527061][T18706] zswap: compressor -Ž not available [ 730.110639][T18706] FAULT_INJECTION: forcing a failure. [ 730.110639][T18706] name failslab, interval 1, probability 0, space 0, times 0 [ 730.123473][T18706] CPU: 1 UID: 0 PID: 18706 Comm: syz.1.2513 Tainted: G L syzkaller #0 PREEMPT(full) [ 730.123498][T18706] Tainted: [L]=SOFTLOCKUP [ 730.123503][T18706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 730.123512][T18706] Call Trace: [ 730.123518][T18706] [ 730.123525][T18706] dump_stack_lvl+0x100/0x190 [ 730.123551][T18706] should_fail_ex.cold+0x5/0xa [ 730.123569][T18706] should_failslab+0xc2/0x120 [ 730.123585][T18706] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 730.123608][T18706] ? do_getname+0x35/0x390 [ 730.123625][T18706] ? find_held_lock+0x2b/0x80 [ 730.123642][T18706] do_getname+0x35/0x390 [ 730.123661][T18706] do_sys_openat2+0xc5/0x1e0 [ 730.123680][T18706] ? __pfx_do_sys_openat2+0x10/0x10 [ 730.123697][T18706] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 730.123721][T18706] ? __fget_files+0x21f/0x3d0 [ 730.123738][T18706] __x64_sys_openat+0x12d/0x210 [ 730.123757][T18706] ? __pfx___x64_sys_openat+0x10/0x10 [ 730.123775][T18706] ? ksys_write+0x1ac/0x250 [ 730.123794][T18706] do_syscall_64+0x106/0xf80 [ 730.123813][T18706] ? clear_bhb_loop+0x40/0x90 [ 730.123830][T18706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 730.123845][T18706] RIP: 0033:0x7f71a059c799 [ 730.123859][T18706] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 730.123873][T18706] RSP: 002b:00007f71a14bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 730.123888][T18706] RAX: ffffffffffffffda RBX: 00007f71a0815fa0 RCX: 00007f71a059c799 [ 730.123898][T18706] RDX: 0000000000000201 RSI: 0000200000000280 RDI: ffffffffffffff9c [ 730.123907][T18706] RBP: 00007f71a14bc090 R08: 0000000000000000 R09: 0000000000000000 [ 730.123916][T18706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 730.123925][T18706] R13: 00007f71a0816038 R14: 00007f71a0815fa0 R15: 00007fff63914148 [ 730.123943][T18706] [ 730.685872][T18730] zswap: compressor -Ž not available [ 731.091298][T18736] zswap: compressor -Ž not available [ 732.398045][T18772] FAULT_INJECTION: forcing a failure. [ 732.398045][T18772] name failslab, interval 1, probability 0, space 0, times 0 [ 732.446471][T18772] CPU: 0 UID: 0 PID: 18772 Comm: syz.1.2526 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.446519][T18772] Tainted: [L]=SOFTLOCKUP [ 732.446529][T18772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 732.446548][T18772] Call Trace: [ 732.446558][T18772] [ 732.446569][T18772] dump_stack_lvl+0x100/0x190 [ 732.446634][T18772] should_fail_ex.cold+0x5/0xa [ 732.446671][T18772] should_failslab+0xc2/0x120 [ 732.446706][T18772] __kvmalloc_node_noprof+0xfa/0xa00 [ 732.446747][T18772] ? io_alloc_cache_init+0x38/0x170 [ 732.446790][T18772] ? lockdep_init_map_type+0x5c/0x250 [ 732.446832][T18772] io_alloc_cache_init+0x38/0x170 [ 732.446879][T18772] io_uring_setup.cold+0x3cd/0x1d79 [ 732.446919][T18772] ? ksys_write+0x190/0x250 [ 732.446948][T18772] ? __pfx_io_uring_setup+0x10/0x10 [ 732.446988][T18772] ? do_futex+0x192/0x350 [ 732.447027][T18772] ? __pfx_do_futex+0x10/0x10 [ 732.447080][T18772] ? xfd_validate_state+0x129/0x190 [ 732.447131][T18772] __x64_sys_io_uring_setup+0xc2/0x170 [ 732.447171][T18772] do_syscall_64+0x106/0xf80 [ 732.447210][T18772] ? clear_bhb_loop+0x40/0x90 [ 732.447246][T18772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.447276][T18772] RIP: 0033:0x7f71a059c799 [ 732.447302][T18772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.447334][T18772] RSP: 002b:00007f71a149b028 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 732.447363][T18772] RAX: ffffffffffffffda RBX: 00007f71a0816090 RCX: 00007f71a059c799 [ 732.447383][T18772] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000059 [ 732.447400][T18772] RBP: 00007f71a0632c99 R08: 0000000000000000 R09: 0000000000000000 [ 732.447428][T18772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.447447][T18772] R13: 00007f71a0816128 R14: 00007f71a0816090 R15: 00007fff63914148 [ 732.447488][T18772] [ 733.500919][T18788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2530'. [ 733.515224][T18793] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 733.551736][T18788] netlink: 'syz.3.2530': attribute type 2 has an invalid length. [ 733.584163][T18788] netlink: 'syz.3.2530': attribute type 3 has an invalid length. [ 733.611927][T18788] netlink: 51505 bytes leftover after parsing attributes in process `syz.3.2530'. [ 734.927206][T18807] netlink: 'syz.1.2534': attribute type 1 has an invalid length. [ 734.987719][T18807] FAULT_INJECTION: forcing a failure. [ 734.987719][T18807] name failslab, interval 1, probability 0, space 0, times 0 [ 734.987748][T18807] CPU: 1 UID: 0 PID: 18807 Comm: syz.1.2534 Tainted: G L syzkaller #0 PREEMPT(full) [ 734.987771][T18807] Tainted: [L]=SOFTLOCKUP [ 734.987777][T18807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 734.987787][T18807] Call Trace: [ 734.987792][T18807] [ 734.987799][T18807] dump_stack_lvl+0x100/0x190 [ 734.987826][T18807] should_fail_ex.cold+0x5/0xa [ 734.987845][T18807] ? realloc_user_queue+0xe9/0x320 [ 734.987944][T18807] should_failslab+0xc2/0x120 [ 734.987962][T18807] __kmalloc_noprof+0xe0/0x850 [ 734.987988][T18807] realloc_user_queue+0xe9/0x320 [ 734.988007][T18807] ? __pfx_snd_timer_user_open+0x10/0x10 [ 734.988024][T18807] snd_timer_user_open+0xfc/0x180 [ 734.988043][T18807] snd_open+0x22d/0x4c0 [ 734.988058][T18807] ? __pfx_snd_open+0x10/0x10 [ 734.988074][T18807] chrdev_open+0x234/0x6a0 [ 734.988088][T18807] ? __pfx_apparmor_file_open+0x10/0x10 [ 734.988113][T18807] ? __pfx_chrdev_open+0x10/0x10 [ 734.988130][T18807] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 734.988155][T18807] do_dentry_open+0x6d8/0x1660 [ 734.988171][T18807] ? __pfx_chrdev_open+0x10/0x10 [ 734.988190][T18807] vfs_open+0x82/0x3f0 [ 734.988211][T18807] path_openat+0x208c/0x31a0 [ 734.988234][T18807] ? __pfx_path_openat+0x10/0x10 [ 734.988266][T18807] do_file_open+0x20e/0x430 [ 734.988284][T18807] ? __pfx_do_file_open+0x10/0x10 [ 734.988314][T18807] ? alloc_fd+0x476/0x790 [ 734.988332][T18807] ? do_getname+0x191/0x390 [ 734.988353][T18807] do_sys_openat2+0x10d/0x1e0 [ 734.988373][T18807] ? __pfx_do_sys_openat2+0x10/0x10 [ 734.988393][T18807] ? __fget_files+0x21f/0x3d0 [ 734.988411][T18807] __x64_sys_openat+0x12d/0x210 [ 734.988431][T18807] ? __pfx___x64_sys_openat+0x10/0x10 [ 734.988457][T18807] do_syscall_64+0x106/0xf80 [ 734.988477][T18807] ? clear_bhb_loop+0x40/0x90 [ 734.988496][T18807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 734.988511][T18807] RIP: 0033:0x7f71a059c799 [ 734.988525][T18807] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 734.988541][T18807] RSP: 002b:00007f71a14bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 734.988556][T18807] RAX: ffffffffffffffda RBX: 00007f71a0815fa0 RCX: 00007f71a059c799 [ 734.988567][T18807] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 734.988577][T18807] RBP: 00007f71a0632c99 R08: 0000000000000000 R09: 0000000000000000 [ 734.988586][T18807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 734.988596][T18807] R13: 00007f71a0816038 R14: 00007f71a0815fa0 R15: 00007fff63914148 [ 734.988616][T18807] [ 735.399222][T18817] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 737.867427][T18860] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 738.646059][T18872] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 740.436814][T18912] FAULT_INJECTION: forcing a failure. [ 740.436814][T18912] name failslab, interval 1, probability 0, space 0, times 0 [ 740.474181][T18912] CPU: 1 UID: 0 PID: 18912 Comm: syz.4.2554 Tainted: G L syzkaller #0 PREEMPT(full) [ 740.474219][T18912] Tainted: [L]=SOFTLOCKUP [ 740.474229][T18912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 740.474244][T18912] Call Trace: [ 740.474254][T18912] [ 740.474263][T18912] dump_stack_lvl+0x100/0x190 [ 740.474308][T18912] should_fail_ex.cold+0x5/0xa [ 740.474339][T18912] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 740.474497][T18912] should_failslab+0xc2/0x120 [ 740.474526][T18912] __kmalloc_noprof+0xe0/0x850 [ 740.474569][T18912] vb2_core_allocated_buffers_storage+0x184/0x220 [ 740.474602][T18912] vb2_core_reqbufs+0x382/0xf30 [ 740.474638][T18912] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 740.474688][T18912] __vb2_init_fileio+0x32d/0x1000 [ 740.474715][T18912] ? vb2_fop_read+0xe5/0x520 [ 740.474738][T18912] ? aa_file_perm+0x7f3/0x14d0 [ 740.474816][T18912] __vb2_perform_fileio+0x91e/0x1380 [ 740.474854][T18912] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 740.474882][T18912] ? __pfx___might_resched+0x10/0x10 [ 740.474930][T18912] vb2_fop_read+0x211/0x520 [ 740.474964][T18912] v4l2_read+0x229/0x2c0 [ 740.475078][T18912] ? __pfx_v4l2_read+0x10/0x10 [ 740.475117][T18912] vfs_read+0x1e4/0xb30 [ 740.475163][T18912] ? __pfx_vfs_read+0x10/0x10 [ 740.475198][T18912] ? find_held_lock+0x2b/0x80 [ 740.475222][T18912] ? __fget_files+0x215/0x3d0 [ 740.475243][T18912] ? __fget_files+0x215/0x3d0 [ 740.475273][T18912] ? __fget_files+0x21f/0x3d0 [ 740.475309][T18912] ksys_read+0x12a/0x250 [ 740.475333][T18912] ? __pfx_ksys_read+0x10/0x10 [ 740.475377][T18912] do_syscall_64+0x106/0xf80 [ 740.475412][T18912] ? clear_bhb_loop+0x40/0x90 [ 740.475444][T18912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.475472][T18912] RIP: 0033:0x7f31c2d9c799 [ 740.475496][T18912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.475521][T18912] RSP: 002b:00007f31c3c0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 740.475546][T18912] RAX: ffffffffffffffda RBX: 00007f31c3015fa0 RCX: 00007f31c2d9c799 [ 740.475565][T18912] RDX: 0000000000000016 RSI: 00002000000010c0 RDI: 0000000000000003 [ 740.475582][T18912] RBP: 00007f31c3c0a090 R08: 0000000000000000 R09: 0000000000000000 [ 740.475598][T18912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.475614][T18912] R13: 00007f31c3016038 R14: 00007f31c3015fa0 R15: 00007fffbe5b4dd8 [ 740.475653][T18912] [ 741.142039][T18917] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2557'. [ 741.230660][T18921] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 741.686556][T18905] Process accounting paused [ 744.728357][T18986] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 745.613220][T18982] Process accounting resumed [ 745.820279][T19003] Invalid ELF header magic: != ELF [ 745.959834][T19007] sctp: [Deprecated]: syz.1.2576 (pid 19007) Use of int in max_burst socket option. [ 745.959834][T19007] Use struct sctp_assoc_value instead [ 747.357558][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.363907][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.364159][T19041] Invalid ELF header magic: != ELF [ 748.899164][T19054] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 750.554471][T19096] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2594'. [ 752.389783][T19128] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 753.945744][T19155] FAULT_INJECTION: forcing a failure. [ 753.945744][T19155] name failslab, interval 1, probability 0, space 0, times 0 [ 753.994725][T19155] CPU: 0 UID: 0 PID: 19155 Comm: syz.3.2606 Tainted: G L syzkaller #0 PREEMPT(full) [ 753.994766][T19155] Tainted: [L]=SOFTLOCKUP [ 753.994775][T19155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 753.994790][T19155] Call Trace: [ 753.994800][T19155] [ 753.994810][T19155] dump_stack_lvl+0x100/0x190 [ 753.994851][T19155] should_fail_ex.cold+0x5/0xa [ 753.994882][T19155] should_failslab+0xc2/0x120 [ 753.994908][T19155] __kmalloc_cache_noprof+0x7a/0x6f0 [ 753.994938][T19155] ? proc_thread_self_get_link+0x1a6/0x210 [ 753.994982][T19155] proc_thread_self_get_link+0x1a6/0x210 [ 753.995018][T19155] pick_link+0xac2/0x13c0 [ 753.995053][T19155] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 753.995095][T19155] step_into_slowpath+0x9ba/0xf90 [ 753.995139][T19155] ? __pfx_step_into_slowpath+0x10/0x10 [ 753.995181][T19155] ? lookup_fast+0x2da/0x600 [ 753.995213][T19155] ? inode_permission+0x374/0x620 [ 753.995250][T19155] link_path_walk+0xf28/0x1cc0 [ 753.995300][T19155] path_openat+0x1be/0x31a0 [ 753.995325][T19155] ? kasan_save_stack+0x3f/0x50 [ 753.995376][T19155] ? kasan_save_stack+0x30/0x50 [ 753.995411][T19155] ? kasan_save_track+0x14/0x30 [ 753.995447][T19155] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 753.995493][T19155] ? __pfx_path_openat+0x10/0x10 [ 753.995534][T19155] do_file_open+0x20e/0x430 [ 753.995564][T19155] ? __pfx_do_file_open+0x10/0x10 [ 753.995618][T19155] ? alloc_fd+0x476/0x790 [ 753.995649][T19155] ? do_getname+0x191/0x390 [ 753.995683][T19155] do_sys_openat2+0x10d/0x1e0 [ 753.995717][T19155] ? __pfx_do_sys_openat2+0x10/0x10 [ 753.995765][T19155] __x64_sys_openat+0x12d/0x210 [ 753.995804][T19155] ? __pfx___x64_sys_openat+0x10/0x10 [ 753.995852][T19155] do_syscall_64+0x106/0xf80 [ 753.995887][T19155] ? clear_bhb_loop+0x40/0x90 [ 753.995919][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.995947][T19155] RIP: 0033:0x7f0fb835cfce [ 753.995969][T19155] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 753.995995][T19155] RSP: 002b:00007f0fb9205f98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 753.996020][T19155] RAX: ffffffffffffffda RBX: 00007f0fb92066c0 RCX: 00007f0fb835cfce [ 753.996038][T19155] RDX: 0000000000000002 RSI: 00007f0fb84325a0 RDI: ffffffffffffff9c [ 753.996055][T19155] RBP: 00007f0fb8432c99 R08: 0000000000000000 R09: 0000000000000000 [ 753.996072][T19155] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.996088][T19155] R13: 00007f0fb8616128 R14: 00007f0fb8616090 R15: 00007ffd46894268 [ 753.996125][T19155] [ 753.996945][ T8801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 754.044358][T19155] FAULT_INJECTION: forcing a failure. [ 754.044358][T19155] name failslab, interval 1, probability 0, space 0, times 0 [ 754.244318][ T8801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 754.290347][ T8801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 754.321511][ T8801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 754.329963][ T8801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 754.544305][T19155] CPU: 1 UID: 0 PID: 19155 Comm: syz.3.2606 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.544348][T19155] Tainted: [L]=SOFTLOCKUP [ 754.544356][T19155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 754.544377][T19155] Call Trace: [ 754.544383][T19155] [ 754.544389][T19155] dump_stack_lvl+0x100/0x190 [ 754.544415][T19155] should_fail_ex.cold+0x5/0xa [ 754.544433][T19155] should_failslab+0xc2/0x120 [ 754.544449][T19155] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 754.544470][T19155] ? __alloc_skb+0x140/0x710 [ 754.544493][T19155] __alloc_skb+0x140/0x710 [ 754.544510][T19155] ? __alloc_skb+0x5b7/0x710 [ 754.544527][T19155] ? __pfx___alloc_skb+0x10/0x10 [ 754.544548][T19155] ? find_held_lock+0x2b/0x80 [ 754.544564][T19155] alloc_skb_with_frags+0xe0/0x810 [ 754.544585][T19155] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 754.544601][T19155] ? is_bpf_text_address+0x94/0x1a0 [ 754.544625][T19155] sock_alloc_send_pskb+0x801/0x980 [ 754.544649][T19155] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 754.544667][T19155] ? _parse_integer_limit+0x17f/0x1d0 [ 754.544694][T19155] tun_get_user+0x8f7/0x3e10 [ 754.544720][T19155] ? __pfx_tun_get_user+0x10/0x10 [ 754.544736][T19155] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 754.544760][T19155] ? find_held_lock+0x2b/0x80 [ 754.544773][T19155] ? tun_get+0x191/0x370 [ 754.544785][T19155] ? tun_get+0x191/0x370 [ 754.544805][T19155] tun_chr_write_iter+0xdc/0x200 [ 754.544834][T19155] vfs_write+0x6ac/0x1070 [ 754.544859][T19155] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 754.544881][T19155] ? __pfx_vfs_write+0x10/0x10 [ 754.544893][T19155] ? find_held_lock+0x2b/0x80 [ 754.544918][T19155] __x64_sys_pwrite64+0x1eb/0x250 [ 754.544933][T19155] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 754.544953][T19155] do_syscall_64+0x106/0xf80 [ 754.544972][T19155] ? clear_bhb_loop+0x40/0x90 [ 754.544990][T19155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.545005][T19155] RIP: 0033:0x7f0fb839c799 [ 754.545018][T19155] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.545032][T19155] RSP: 002b:00007f0fb9206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 754.545047][T19155] RAX: ffffffffffffffda RBX: 00007f0fb8616090 RCX: 00007f0fb839c799 [ 754.545057][T19155] RDX: 000000000000fdf0 RSI: 0000200000000140 RDI: 00000000000000c8 [ 754.545066][T19155] RBP: 00007f0fb9206090 R08: 0000000000000000 R09: 0000000000000000 [ 754.545074][T19155] R10: 0000000000000039 R11: 0000000000000246 R12: 0000000000000001 [ 754.545083][T19155] R13: 00007f0fb8616128 R14: 00007f0fb8616090 R15: 00007ffd46894268 [ 754.545102][T19155] [ 754.882526][T19147] netlink: 'syz.2.2604': attribute type 1 has an invalid length. [ 754.925416][T19147] FAULT_INJECTION: forcing a failure. [ 754.925416][T19147] name failslab, interval 1, probability 0, space 0, times 0 [ 754.949987][T19147] CPU: 1 UID: 0 PID: 19147 Comm: syz.2.2604 Tainted: G L syzkaller #0 PREEMPT(full) [ 754.950033][T19147] Tainted: [L]=SOFTLOCKUP [ 754.950044][T19147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 754.950060][T19147] Call Trace: [ 754.950070][T19147] [ 754.950082][T19147] dump_stack_lvl+0x100/0x190 [ 754.950130][T19147] should_fail_ex.cold+0x5/0xa [ 754.950162][T19147] ? realloc_user_queue+0xe9/0x320 [ 754.950194][T19147] should_failslab+0xc2/0x120 [ 754.950224][T19147] __kmalloc_noprof+0xe0/0x850 [ 754.950272][T19147] realloc_user_queue+0xe9/0x320 [ 754.950308][T19147] ? __pfx_snd_timer_user_open+0x10/0x10 [ 754.950342][T19147] snd_timer_user_open+0xfc/0x180 [ 754.950375][T19147] snd_open+0x22d/0x4c0 [ 754.950405][T19147] ? __pfx_snd_open+0x10/0x10 [ 754.950433][T19147] chrdev_open+0x234/0x6a0 [ 754.950461][T19147] ? __pfx_apparmor_file_open+0x10/0x10 [ 754.950505][T19147] ? __pfx_chrdev_open+0x10/0x10 [ 754.950534][T19147] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 754.950570][T19147] do_dentry_open+0x6d8/0x1660 [ 754.950599][T19147] ? __pfx_chrdev_open+0x10/0x10 [ 754.950635][T19147] vfs_open+0x82/0x3f0 [ 754.950672][T19147] path_openat+0x208c/0x31a0 [ 754.950714][T19147] ? __pfx_path_openat+0x10/0x10 [ 754.950757][T19147] do_file_open+0x20e/0x430 [ 754.950801][T19147] ? __pfx_do_file_open+0x10/0x10 [ 754.950859][T19147] ? alloc_fd+0x476/0x790 [ 754.950891][T19147] ? do_getname+0x191/0x390 [ 754.950928][T19147] do_sys_openat2+0x10d/0x1e0 [ 754.950962][T19147] ? __pfx_do_sys_openat2+0x10/0x10 [ 754.951000][T19147] ? __fget_files+0x21f/0x3d0 [ 754.951034][T19147] __x64_sys_openat+0x12d/0x210 [ 754.951069][T19147] ? __pfx___x64_sys_openat+0x10/0x10 [ 754.951116][T19147] do_syscall_64+0x106/0xf80 [ 754.951153][T19147] ? clear_bhb_loop+0x40/0x90 [ 754.951189][T19147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.951217][T19147] RIP: 0033:0x7f73acf9c799 [ 754.951243][T19147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.951272][T19147] RSP: 002b:00007f73add7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 754.951300][T19147] RAX: ffffffffffffffda RBX: 00007f73ad215fa0 RCX: 00007f73acf9c799 [ 754.951320][T19147] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 754.951341][T19147] RBP: 00007f73ad032c99 R08: 0000000000000000 R09: 0000000000000000 [ 754.951358][T19147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.951376][T19147] R13: 00007f73ad216038 R14: 00007f73ad215fa0 R15: 00007ffd95aa8898 [ 754.951416][T19147] [ 755.723747][T19162] FAULT_INJECTION: forcing a failure. [ 755.723747][T19162] name failslab, interval 1, probability 0, space 0, times 0 [ 755.737631][T19162] CPU: 0 UID: 0 PID: 19162 Comm: syz.3.2607 Tainted: G L syzkaller #0 PREEMPT(full) [ 755.737659][T19162] Tainted: [L]=SOFTLOCKUP [ 755.737665][T19162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 755.737676][T19162] Call Trace: [ 755.737682][T19162] [ 755.737689][T19162] dump_stack_lvl+0x100/0x190 [ 755.737719][T19162] should_fail_ex.cold+0x5/0xa [ 755.737748][T19162] should_failslab+0xc2/0x120 [ 755.737765][T19162] __kmalloc_cache_noprof+0x7a/0x6f0 [ 755.737786][T19162] ? yama_ptracer_add+0x48/0x590 [ 755.737805][T19162] ? find_get_task_by_vpid+0x19e/0x310 [ 755.737826][T19162] ? find_get_task_by_vpid+0x19e/0x310 [ 755.737847][T19162] yama_ptracer_add+0x48/0x590 [ 755.737868][T19162] yama_task_prctl+0xf4/0x1c0 [ 755.737888][T19162] security_task_prctl+0xc2/0x160 [ 755.737912][T19162] __do_sys_prctl+0x9b/0x2330 [ 755.737934][T19162] ? __pfx___do_sys_prctl+0x10/0x10 [ 755.737960][T19162] do_syscall_64+0x106/0xf80 [ 755.737981][T19162] ? clear_bhb_loop+0x40/0x90 [ 755.737999][T19162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 755.738015][T19162] RIP: 0033:0x7f0fb839c799 [ 755.738029][T19162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 755.738045][T19162] RSP: 002b:00007f0fb9227028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 755.738060][T19162] RAX: ffffffffffffffda RBX: 00007f0fb8615fa0 RCX: 00007f0fb839c799 [ 755.738070][T19162] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000059616d61 [ 755.738079][T19162] RBP: 00007f0fb8432c99 R08: 0000000000000000 R09: 0000000000000000 [ 755.738088][T19162] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 755.738097][T19162] R13: 00007f0fb8616038 R14: 00007f0fb8615fa0 R15: 00007ffd46894268 [ 755.738118][T19162] [ 755.999732][T19166] FAULT_INJECTION: forcing a failure. [ 755.999732][T19166] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 756.014640][T19166] CPU: 1 UID: 0 PID: 19166 Comm: syz.3.2607 Tainted: G L syzkaller #0 PREEMPT(full) [ 756.014693][T19166] Tainted: [L]=SOFTLOCKUP [ 756.014713][T19166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 756.014733][T19166] Call Trace: [ 756.014745][T19166] [ 756.014758][T19166] dump_stack_lvl+0x100/0x190 [ 756.014810][T19166] should_fail_ex.cold+0x5/0xa [ 756.014840][T19166] ? prepare_alloc_pages+0x16d/0x5f0 [ 756.014879][T19166] should_fail_alloc_page+0xeb/0x140 [ 756.014914][T19166] prepare_alloc_pages+0x1f0/0x5f0 [ 756.014956][T19166] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 756.015000][T19166] ? do_syscall_64+0x81/0xf80 [ 756.015063][T19166] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 756.015126][T19166] ? rcu_is_watching+0x12/0xc0 [ 756.015171][T19166] ? trace_kmalloc+0x101/0x130 [ 756.015202][T19166] ? __kasan_kmalloc+0xaa/0xb0 [ 756.015244][T19166] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 756.015294][T19166] ? policy_nodemask+0xed/0x4f0 [ 756.015329][T19166] alloc_pages_mpol+0x1fb/0x550 [ 756.015363][T19166] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 756.015395][T19166] ? __alloc_skb+0x5b7/0x710 [ 756.015433][T19166] ? __pfx___alloc_skb+0x10/0x10 [ 756.015477][T19166] alloc_pages_noprof+0x131/0x390 [ 756.015511][T19166] alloc_skb_with_frags+0x500/0x810 [ 756.015569][T19166] sock_alloc_send_pskb+0x801/0x980 [ 756.015617][T19166] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 756.015672][T19166] tun_get_user+0x8f7/0x3e10 [ 756.015726][T19166] ? __pfx_tun_get_user+0x10/0x10 [ 756.015760][T19166] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 756.015804][T19166] ? find_held_lock+0x2b/0x80 [ 756.015829][T19166] ? tun_get+0x191/0x370 [ 756.015850][T19166] ? tun_get+0x191/0x370 [ 756.015883][T19166] tun_chr_write_iter+0xdc/0x200 [ 756.015916][T19166] vfs_write+0x6ac/0x1070 [ 756.015941][T19166] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 756.015972][T19166] ? __pfx_vfs_write+0x10/0x10 [ 756.015996][T19166] ? find_held_lock+0x2b/0x80 [ 756.016045][T19166] __x64_sys_pwrite64+0x1eb/0x250 [ 756.016076][T19166] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 756.016116][T19166] do_syscall_64+0x106/0xf80 [ 756.016152][T19166] ? clear_bhb_loop+0x40/0x90 [ 756.016187][T19166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.016216][T19166] RIP: 0033:0x7f0fb839c799 [ 756.016242][T19166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.016270][T19166] RSP: 002b:00007f0fb9206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 756.016298][T19166] RAX: ffffffffffffffda RBX: 00007f0fb8616090 RCX: 00007f0fb839c799 [ 756.016316][T19166] RDX: 000000000000fdf0 RSI: 0000200000000140 RDI: 00000000000000c8 [ 756.016335][T19166] RBP: 00007f0fb8432c99 R08: 0000000000000000 R09: 0000000000000000 [ 756.016353][T19166] R10: 0000000000000039 R11: 0000000000000246 R12: 0000000000000000 [ 756.016371][T19166] R13: 00007f0fb8616128 R14: 00007f0fb8616090 R15: 00007ffd46894268 [ 756.016409][T19166] [ 756.376966][ T8802] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.407183][ T8801] Bluetooth: hci3: command tx timeout [ 756.450996][T19156] chnl_net:caif_netlink_parms(): no params data found [ 756.611044][ T8802] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.760295][ T8802] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.895714][ T8802] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 756.988300][T19156] bridge0: port 1(bridge_slave_0) entered blocking state [ 756.996041][T19156] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.013715][T19156] bridge_slave_0: entered allmulticast mode [ 757.031993][T19156] bridge_slave_0: entered promiscuous mode [ 757.057096][T19156] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.074293][T19156] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.108924][T19156] bridge_slave_1: entered allmulticast mode [ 757.132877][T19156] bridge_slave_1: entered promiscuous mode [ 757.236120][T19156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 757.288980][T19156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 757.378580][T19156] team0: Port device team_slave_0 added [ 757.407279][T19156] team0: Port device team_slave_1 added [ 757.485717][T19156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 757.494892][T19156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.528802][T19181] random: crng reseeded on system resumption [ 757.534681][T19156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 757.557045][T19156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 757.574162][T19156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 757.624225][T19156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 757.726120][ T8802] bridge_slave_1: left allmulticast mode [ 757.738472][ T8802] bridge_slave_1: left promiscuous mode [ 757.750358][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.815256][ T8802] bridge_slave_0: left allmulticast mode [ 757.832703][ T8802] bridge_slave_0: left promiscuous mode [ 757.844305][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.334640][T19202] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 758.474680][ T8801] Bluetooth: hci3: command tx timeout [ 758.666363][ T8802] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.728097][ T8802] bond0 (unregistering): Released all slaves [ 758.879683][T19156] hsr_slave_0: entered promiscuous mode [ 758.890127][T19156] hsr_slave_1: entered promiscuous mode [ 758.897405][T19156] debugfs: 'hsr0' already exists in 'hsr' [ 758.910422][T19156] Cannot create hsr debugfs directory [ 758.944892][ T8802] ovs_: left promiscuous mode [ 760.300554][ T8802] hsr_slave_0: left promiscuous mode [ 760.362368][ T8802] hsr_slave_1: left promiscuous mode [ 760.386366][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 760.401686][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 760.469852][ T8802] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 760.490961][ T8802] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 760.534007][ T8802] veth1_macvtap: left promiscuous mode [ 760.539799][ T8802] veth0_macvtap: left promiscuous mode [ 760.546330][ T8802] veth1_vlan: left promiscuous mode [ 760.552194][ T8802] veth0_vlan: left promiscuous mode [ 760.558370][ T8801] Bluetooth: hci3: command tx timeout [ 761.280436][ T8802] team0 (unregistering): Port device team_slave_1 removed [ 761.385641][ T8802] team0 (unregistering): Port device team_slave_0 removed [ 762.322435][T19156] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 762.510490][T19156] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 762.589836][T19156] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 762.620731][T19262] netlink: 'syz.3.2619': attribute type 1 has an invalid length. [ 762.634911][ T8801] Bluetooth: hci3: command tx timeout [ 762.651028][T19156] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 762.700990][T19262] FAULT_INJECTION: forcing a failure. [ 762.700990][T19262] name failslab, interval 1, probability 0, space 0, times 0 [ 762.800013][T19262] CPU: 1 UID: 0 PID: 19262 Comm: syz.3.2619 Tainted: G L syzkaller #0 PREEMPT(full) [ 762.800060][T19262] Tainted: [L]=SOFTLOCKUP [ 762.800070][T19262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 762.800086][T19262] Call Trace: [ 762.800095][T19262] [ 762.800106][T19262] dump_stack_lvl+0x100/0x190 [ 762.800152][T19262] should_fail_ex.cold+0x5/0xa [ 762.800181][T19262] ? realloc_user_queue+0xe9/0x320 [ 762.800211][T19262] should_failslab+0xc2/0x120 [ 762.800239][T19262] __kmalloc_noprof+0xe0/0x850 [ 762.800283][T19262] realloc_user_queue+0xe9/0x320 [ 762.800313][T19262] ? __pfx_snd_timer_user_open+0x10/0x10 [ 762.800343][T19262] snd_timer_user_open+0xfc/0x180 [ 762.800373][T19262] snd_open+0x22d/0x4c0 [ 762.800399][T19262] ? __pfx_snd_open+0x10/0x10 [ 762.800423][T19262] chrdev_open+0x234/0x6a0 [ 762.800448][T19262] ? __pfx_apparmor_file_open+0x10/0x10 [ 762.800486][T19262] ? __pfx_chrdev_open+0x10/0x10 [ 762.800513][T19262] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 762.800546][T19262] do_dentry_open+0x6d8/0x1660 [ 762.800571][T19262] ? __pfx_chrdev_open+0x10/0x10 [ 762.800604][T19262] vfs_open+0x82/0x3f0 [ 762.800638][T19262] path_openat+0x208c/0x31a0 [ 762.800674][T19262] ? __pfx_path_openat+0x10/0x10 [ 762.800719][T19262] do_file_open+0x20e/0x430 [ 762.800747][T19262] ? __pfx_do_file_open+0x10/0x10 [ 762.800796][T19262] ? alloc_fd+0x476/0x790 [ 762.800824][T19262] ? do_getname+0x191/0x390 [ 762.800859][T19262] do_sys_openat2+0x10d/0x1e0 [ 762.800892][T19262] ? __pfx_do_sys_openat2+0x10/0x10 [ 762.800929][T19262] ? __fget_files+0x21f/0x3d0 [ 762.800959][T19262] __x64_sys_openat+0x12d/0x210 [ 762.800992][T19262] ? __pfx___x64_sys_openat+0x10/0x10 [ 762.801036][T19262] do_syscall_64+0x106/0xf80 [ 762.801069][T19262] ? clear_bhb_loop+0x40/0x90 [ 762.801100][T19262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 762.801125][T19262] RIP: 0033:0x7f0fb839c799 [ 762.801147][T19262] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 762.801171][T19262] RSP: 002b:00007f0fb9227028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 762.801198][T19262] RAX: ffffffffffffffda RBX: 00007f0fb8615fa0 RCX: 00007f0fb839c799 [ 762.801216][T19262] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 762.801233][T19262] RBP: 00007f0fb8432c99 R08: 0000000000000000 R09: 0000000000000000 [ 762.801249][T19262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 762.801264][T19262] R13: 00007f0fb8616038 R14: 00007f0fb8615fa0 R15: 00007ffd46894268 [ 762.801297][T19262] [ 763.148417][T19156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 763.164305][T19156] 8021q: adding VLAN 0 to HW filter on device team0 [ 763.195694][T19156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 763.206327][T19156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 763.227045][ T8832] bridge0: port 1(bridge_slave_0) entered blocking state [ 763.234208][ T8832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 763.257128][T19292] netlink: 93 bytes leftover after parsing attributes in process `syz.2.2621'. [ 763.287516][ T8832] bridge0: port 2(bridge_slave_1) entered blocking state [ 763.295203][ T8832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 763.952383][T19156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 764.016103][T19313] GUP no longer grows the stack in syz.2.2624 (19313): 14000-41000 (4000) [ 764.020131][T19309] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 764.026066][T19313] CPU: 0 UID: 0 PID: 19313 Comm: syz.2.2624 Tainted: G L syzkaller #0 PREEMPT(full) [ 764.026111][T19313] Tainted: [L]=SOFTLOCKUP [ 764.026131][T19313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 764.026148][T19313] Call Trace: [ 764.026158][T19313] [ 764.026169][T19313] dump_stack_lvl+0x100/0x190 [ 764.026217][T19313] gup_vma_lookup.cold+0x83/0x96 [ 764.026258][T19313] __get_user_pages+0x241/0x34d0 [ 764.026300][T19313] ? down_read_killable+0x30e/0x4c0 [ 764.026327][T19313] ? __lock_acquire+0x4a5/0x2630 [ 764.026362][T19313] ? __pfx___get_user_pages+0x10/0x10 [ 764.026404][T19313] __gup_longterm_locked+0x87d/0x16f0 [ 764.026446][T19313] ? __pfx___gup_longterm_locked+0x10/0x10 [ 764.026482][T19313] ? try_get_folio+0x262/0x750 [ 764.026509][T19313] ? find_held_lock+0x2b/0x80 [ 764.026537][T19313] ? sanity_check_pinned_pages+0x5f6/0x1250 [ 764.026574][T19313] gup_fast_fallback+0x18c6/0x2460 [ 764.026631][T19313] ? __pfx_gup_fast_fallback+0x10/0x10 [ 764.026664][T19313] ? __lock_acquire+0x4a5/0x2630 [ 764.026698][T19313] ? bio_associate_blkg_from_css+0xe33/0x13f0 [ 764.026811][T19313] ? bio_associate_blkg+0x10c/0x2a0 [ 764.026858][T19313] pin_user_pages_fast+0xa7/0xf0 [ 764.026893][T19313] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 764.026926][T19313] ? find_held_lock+0x2b/0x80 [ 764.026951][T19313] ? __debug_object_init+0x2de/0x3d0 [ 764.026993][T19313] ? __debug_object_init+0x2de/0x3d0 [ 764.027039][T19313] iov_iter_extract_pages+0xa0d/0x1ef0 [ 764.027082][T19313] ? __lock_acquire+0x4a5/0x2630 [ 764.027124][T19313] ? __pfx_iov_iter_extract_pages+0x10/0x10 [ 764.027164][T19313] ? __lock_acquire+0x4a5/0x2630 [ 764.027207][T19313] iov_iter_extract_bvecs+0x10e/0xf40 [ 764.027250][T19313] ? find_held_lock+0x2b/0x80 [ 764.027276][T19313] ? bio_associate_blkg_from_css+0x394/0x13f0 [ 764.027318][T19313] ? __pfx_iov_iter_extract_bvecs+0x10/0x10 [ 764.027355][T19313] ? bio_associate_blkg_from_css+0x550/0x13f0 [ 764.027401][T19313] bio_iov_iter_get_pages+0x26a/0x970 [ 764.027530][T19313] __blkdev_direct_IO_simple+0x3a7/0x890 [ 764.027578][T19313] ? __pfx___blkdev_direct_IO_simple+0x10/0x10 [ 764.027649][T19313] ? __lock_acquire+0xd73/0x2630 [ 764.027693][T19313] blkdev_direct_IO+0xc76/0x1fb0 [ 764.027748][T19313] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 764.027786][T19313] ? rcu_is_watching+0x12/0xc0 [ 764.027827][T19313] ? __mark_inode_dirty+0x55c/0x1790 [ 764.027865][T19313] ? filemap_check_errors+0xa9/0x150 [ 764.027908][T19313] blkdev_write_iter+0x703/0xd70 [ 764.027954][T19313] vfs_write+0x6ac/0x1070 [ 764.027982][T19313] ? __pfx_blkdev_write_iter+0x10/0x10 [ 764.028024][T19313] ? __pfx_vfs_write+0x10/0x10 [ 764.028048][T19313] ? find_held_lock+0x2b/0x80 [ 764.028098][T19313] ksys_write+0x12a/0x250 [ 764.028132][T19313] ? __pfx_ksys_write+0x10/0x10 [ 764.028170][T19313] do_syscall_64+0x106/0xf80 [ 764.028207][T19313] ? clear_bhb_loop+0x40/0x90 [ 764.028243][T19313] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 764.028273][T19313] RIP: 0033:0x7f73acf9c799 [ 764.028298][T19313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 764.028327][T19313] RSP: 002b:00007f73add7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 764.028355][T19313] RAX: ffffffffffffffda RBX: 00007f73ad215fa0 RCX: 00007f73acf9c799 [ 764.028375][T19313] RDX: 000000000010007c RSI: 0000000000000000 RDI: 0000000000000003 [ 764.028394][T19313] RBP: 00007f73ad032c99 R08: 0000000000000000 R09: 0000000000000000 [ 764.028411][T19313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 764.028428][T19313] R13: 00007f73ad216038 R14: 00007f73ad215fa0 R15: 00007ffd95aa8898 [ 764.028466][T19313] [ 764.830853][T19330] futex_wake_op: syz.4.2627 tries to shift op by -2048; fix this program [ 764.839873][T19330] futex_wake_op: syz.4.2627 tries to shift op by -2048; fix this program [ 764.903932][T19156] veth0_vlan: entered promiscuous mode [ 765.086681][T19156] veth1_vlan: entered promiscuous mode [ 765.228874][T19156] veth0_macvtap: entered promiscuous mode [ 765.288685][T19345] 0x000000000001-0x000000020000 : "" [ 765.332352][T19345] ftl_cs: FTL header corrupt! [ 765.374155][T19156] veth1_macvtap: entered promiscuous mode [ 765.610918][T19156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 765.655356][T19156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 765.767398][ T8794] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.841160][ T8794] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.862276][ T8794] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 765.935986][ T8794] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 766.431221][T10184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.494135][T10184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 766.599846][ T8832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 766.621388][ T8832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 767.330342][T19390] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 767.544263][T19394] FAULT_INJECTION: forcing a failure. [ 767.544263][T19394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 767.612422][T19394] CPU: 1 UID: 0 PID: 19394 Comm: syz.4.2635 Tainted: G L syzkaller #0 PREEMPT(full) [ 767.612447][T19394] Tainted: [L]=SOFTLOCKUP [ 767.612453][T19394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 767.612462][T19394] Call Trace: [ 767.612468][T19394] [ 767.612474][T19394] dump_stack_lvl+0x100/0x190 [ 767.612501][T19394] should_fail_ex.cold+0x5/0xa [ 767.612516][T19394] ? prepare_alloc_pages+0x16d/0x5f0 [ 767.612535][T19394] should_fail_alloc_page+0xeb/0x140 [ 767.612552][T19394] prepare_alloc_pages+0x1f0/0x5f0 [ 767.612571][T19394] __alloc_frozen_pages_noprof+0x19a/0x2ba0 [ 767.612591][T19394] ? find_held_lock+0x2b/0x80 [ 767.612605][T19394] ? is_bpf_text_address+0x8a/0x1a0 [ 767.612626][T19394] ? is_bpf_text_address+0x8a/0x1a0 [ 767.612647][T19394] ? bpf_ksym_find+0x124/0x1c0 [ 767.612666][T19394] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 767.612682][T19394] ? is_bpf_text_address+0x94/0x1a0 [ 767.612703][T19394] ? kernel_text_address+0x8d/0x100 [ 767.612723][T19394] ? __kernel_text_address+0xd/0x30 [ 767.612742][T19394] ? unwind_get_return_address+0x59/0xa0 [ 767.612759][T19394] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 767.612788][T19394] ? __pfx_stack_trace_save+0x10/0x10 [ 767.612803][T19394] ? stack_depot_save_flags+0x27/0x9d0 [ 767.612820][T19394] ? stack_trace_save+0x8e/0xc0 [ 767.612835][T19394] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 767.612861][T19394] ? policy_nodemask+0xed/0x4f0 [ 767.612878][T19394] alloc_pages_mpol+0x1fb/0x550 [ 767.612894][T19394] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 767.612914][T19394] alloc_pages_noprof+0x131/0x390 [ 767.612930][T19394] kimage_alloc_pages+0x72/0x380 [ 767.612947][T19394] kimage_alloc_control_pages+0x157/0xa20 [ 767.612967][T19394] ? __pfx_kimage_alloc_control_pages+0x10/0x10 [ 767.612988][T19394] do_kexec_load+0x275/0x810 [ 767.613005][T19394] ? __pfx_do_kexec_load+0x10/0x10 [ 767.613021][T19394] ? _copy_from_user+0x59/0xd0 [ 767.613056][T19394] __x64_sys_kexec_load+0x1bf/0x230 [ 767.613074][T19394] do_syscall_64+0x106/0xf80 [ 767.613093][T19394] ? clear_bhb_loop+0x40/0x90 [ 767.613111][T19394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.613130][T19394] RIP: 0033:0x7f31c2d9c799 [ 767.613148][T19394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.613172][T19394] RSP: 002b:00007f31c3be9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 767.613196][T19394] RAX: ffffffffffffffda RBX: 00007f31c3016090 RCX: 00007f31c2d9c799 [ 767.613211][T19394] RDX: 0000200000000080 RSI: 0000000000000002 RDI: 0000000000000070 [ 767.613226][T19394] RBP: 00007f31c3be9090 R08: 0000000000000000 R09: 0000000000000000 [ 767.613242][T19394] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 767.613254][T19394] R13: 00007f31c3016128 R14: 00007f31c3016090 R15: 00007fffbe5b4dd8 [ 767.613274][T19394] [ 768.013175][T19394] kexec: Could not allocate control_code_buffer [ 770.303849][T19436] FAULT_INJECTION: forcing a failure. [ 770.303849][T19436] name failslab, interval 1, probability 0, space 0, times 0 [ 770.336840][T19436] CPU: 0 UID: 0 PID: 19436 Comm: syz.4.2642 Tainted: G L syzkaller #0 PREEMPT(full) [ 770.336867][T19436] Tainted: [L]=SOFTLOCKUP [ 770.336872][T19436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 770.336881][T19436] Call Trace: [ 770.336887][T19436] [ 770.336893][T19436] dump_stack_lvl+0x100/0x190 [ 770.336919][T19436] should_fail_ex.cold+0x5/0xa [ 770.336937][T19436] should_failslab+0xc2/0x120 [ 770.336953][T19436] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 770.336973][T19436] ? taskstats_exit+0x650/0xbd0 [ 770.336999][T19436] taskstats_exit+0x650/0xbd0 [ 770.337020][T19436] ? __pfx_acct_update_integrals+0x10/0x10 [ 770.337035][T19436] ? __pfx_taskstats_exit+0x10/0x10 [ 770.337057][T19436] ? rcu_read_lock_any_held+0x6a/0xa0 [ 770.337071][T19436] ? exit_signals+0x395/0xaf0 [ 770.337088][T19436] do_exit+0x659/0x2b60 [ 770.337111][T19436] ? __pfx_do_exit+0x10/0x10 [ 770.337128][T19436] ? do_raw_spin_lock+0x128/0x260 [ 770.337148][T19436] ? find_held_lock+0x2b/0x80 [ 770.337171][T19436] ? get_signal+0x7e0/0x21e0 [ 770.337187][T19436] do_group_exit+0xd5/0x2a0 [ 770.337207][T19436] get_signal+0x1ec7/0x21e0 [ 770.337228][T19436] ? __pfx_get_signal+0x10/0x10 [ 770.337244][T19436] ? do_futex+0x192/0x350 [ 770.337265][T19436] arch_do_signal_or_restart+0x91/0x770 [ 770.337284][T19436] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 770.337306][T19436] ? __pfx___x64_sys_futex+0x10/0x10 [ 770.337328][T19436] exit_to_user_mode_loop+0x86/0x4a0 [ 770.337348][T19436] do_syscall_64+0x668/0xf80 [ 770.337368][T19436] ? clear_bhb_loop+0x40/0x90 [ 770.337385][T19436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 770.337400][T19436] RIP: 0033:0x7f31c2d9c799 [ 770.337413][T19436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 770.337427][T19436] RSP: 002b:00007f31c3c0a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 770.337441][T19436] RAX: fffffffffffffe00 RBX: 00007f31c3015fa8 RCX: 00007f31c2d9c799 [ 770.337451][T19436] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f31c3015fa8 [ 770.337460][T19436] RBP: 00007f31c3015fa0 R08: 0000000000000000 R09: 0000000000000000 [ 770.337468][T19436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 770.337477][T19436] R13: 00007f31c3016038 R14: 00007fffbe5b4cf0 R15: 00007fffbe5b4dd8 [ 770.337496][T19436] [ 771.114299][T19446] netlink: 93 bytes leftover after parsing attributes in process `syz.2.2643'. [ 771.148550][T19440] netlink: 93 bytes leftover after parsing attributes in process `syz.2.2643'. [ 771.952998][T19452] block2mtd: illegal erase size [ 773.545869][T19470] FAULT_INJECTION: forcing a failure. [ 773.545869][T19470] name failslab, interval 1, probability 0, space 0, times 0 [ 773.597458][T19470] CPU: 0 UID: 0 PID: 19470 Comm: syz.3.2649 Tainted: G L syzkaller #0 PREEMPT(full) [ 773.597493][T19470] Tainted: [L]=SOFTLOCKUP [ 773.597499][T19470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 773.597508][T19470] Call Trace: [ 773.597513][T19470] [ 773.597520][T19470] dump_stack_lvl+0x100/0x190 [ 773.597545][T19470] should_fail_ex.cold+0x5/0xa [ 773.597563][T19470] should_failslab+0xc2/0x120 [ 773.597579][T19470] __kmalloc_cache_noprof+0x7a/0x6f0 [ 773.597598][T19470] ? __request_module+0x2b7/0x6c0 [ 773.597616][T19470] ? lockdep_hardirqs_on+0x78/0x100 [ 773.597639][T19470] __request_module+0x2b7/0x6c0 [ 773.597658][T19470] ? __pfx___request_module+0x10/0x10 [ 773.597679][T19470] ? tomoyo_path_number_perm+0x46d/0x580 [ 773.597699][T19470] ? rcu_is_watching+0x12/0xc0 [ 773.597720][T19470] ? apparmor_capable+0x1d7/0x4d0 [ 773.597736][T19470] ? dev_load+0x1c5/0x240 [ 773.597757][T19470] dev_load+0x22b/0x240 [ 773.597774][T19470] dev_ioctl+0x2ad/0x1070 [ 773.597794][T19470] sock_do_ioctl+0x1a0/0x280 [ 773.597817][T19470] ? __pfx_sock_do_ioctl+0x10/0x10 [ 773.597843][T19470] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 773.597867][T19470] sock_ioctl+0x599/0x6b0 [ 773.597883][T19470] ? __pfx_sock_ioctl+0x10/0x10 [ 773.597897][T19470] ? hook_file_ioctl_common+0x146/0x410 [ 773.597917][T19470] ? __fget_files+0x21f/0x3d0 [ 773.597941][T19470] ? __pfx_sock_ioctl+0x10/0x10 [ 773.597957][T19470] __x64_sys_ioctl+0x18e/0x210 [ 773.597978][T19470] do_syscall_64+0x106/0xf80 [ 773.597997][T19470] ? clear_bhb_loop+0x40/0x90 [ 773.598014][T19470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 773.598029][T19470] RIP: 0033:0x7f0fb839c799 [ 773.598042][T19470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 773.598056][T19470] RSP: 002b:00007f0fb9206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 773.598071][T19470] RAX: ffffffffffffffda RBX: 00007f0fb8616090 RCX: 00007f0fb839c799 [ 773.598081][T19470] RDX: 0000200000000100 RSI: 0000000000008927 RDI: 0000000000000002 [ 773.598089][T19470] RBP: 00007f0fb9206090 R08: 0000000000000000 R09: 0000000000000000 [ 773.598098][T19470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 773.598107][T19470] R13: 00007f0fb8616128 R14: 00007f0fb8616090 R15: 00007ffd46894268 [ 773.598125][T19470] [ 774.181397][ T30] audit: type=1800 audit(4294967340.080:23): pid=19475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2651" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 775.282750][T19493] netlink: 'syz.2.2655': attribute type 1 has an invalid length. [ 775.321564][T19493] FAULT_INJECTION: forcing a failure. [ 775.321564][T19493] name failslab, interval 1, probability 0, space 0, times 0 [ 775.361902][T19493] CPU: 0 UID: 0 PID: 19493 Comm: syz.2.2655 Tainted: G L syzkaller #0 PREEMPT(full) [ 775.361946][T19493] Tainted: [L]=SOFTLOCKUP [ 775.361957][T19493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 775.361973][T19493] Call Trace: [ 775.361983][T19493] [ 775.361994][T19493] dump_stack_lvl+0x100/0x190 [ 775.362038][T19493] should_fail_ex.cold+0x5/0xa [ 775.362068][T19493] ? realloc_user_queue+0xe9/0x320 [ 775.362101][T19493] should_failslab+0xc2/0x120 [ 775.362131][T19493] __kmalloc_noprof+0xe0/0x850 [ 775.362179][T19493] realloc_user_queue+0xe9/0x320 [ 775.362214][T19493] ? __pfx_snd_timer_user_open+0x10/0x10 [ 775.362245][T19493] snd_timer_user_open+0xfc/0x180 [ 775.362276][T19493] snd_open+0x22d/0x4c0 [ 775.362302][T19493] ? __pfx_snd_open+0x10/0x10 [ 775.362329][T19493] chrdev_open+0x234/0x6a0 [ 775.362354][T19493] ? __pfx_apparmor_file_open+0x10/0x10 [ 775.362397][T19493] ? __pfx_chrdev_open+0x10/0x10 [ 775.362427][T19493] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 775.362462][T19493] do_dentry_open+0x6d8/0x1660 [ 775.362490][T19493] ? __pfx_chrdev_open+0x10/0x10 [ 775.362526][T19493] vfs_open+0x82/0x3f0 [ 775.362564][T19493] path_openat+0x208c/0x31a0 [ 775.362606][T19493] ? __pfx_path_openat+0x10/0x10 [ 775.362647][T19493] do_file_open+0x20e/0x430 [ 775.362677][T19493] ? __pfx_do_file_open+0x10/0x10 [ 775.362740][T19493] ? alloc_fd+0x476/0x790 [ 775.362774][T19493] ? do_getname+0x191/0x390 [ 775.362813][T19493] do_sys_openat2+0x10d/0x1e0 [ 775.362849][T19493] ? __pfx_do_sys_openat2+0x10/0x10 [ 775.362887][T19493] ? __fget_files+0x21f/0x3d0 [ 775.362922][T19493] __x64_sys_openat+0x12d/0x210 [ 775.362960][T19493] ? __pfx___x64_sys_openat+0x10/0x10 [ 775.363006][T19493] do_syscall_64+0x106/0xf80 [ 775.363044][T19493] ? clear_bhb_loop+0x40/0x90 [ 775.363080][T19493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 775.363109][T19493] RIP: 0033:0x7f73acf9c799 [ 775.363134][T19493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 775.363164][T19493] RSP: 002b:00007f73add7c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 775.363193][T19493] RAX: ffffffffffffffda RBX: 00007f73ad215fa0 RCX: 00007f73acf9c799 [ 775.363212][T19493] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 775.363231][T19493] RBP: 00007f73ad032c99 R08: 0000000000000000 R09: 0000000000000000 [ 775.363248][T19493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 775.363266][T19493] R13: 00007f73ad216038 R14: 00007f73ad215fa0 R15: 00007ffd95aa8898 [ 775.363306][T19493] [ 775.664272][T19501] Process accounting paused [ 776.353556][T19518] netlink: 'syz.1.2662': attribute type 2 has an invalid length. [ 776.582541][T19526] nfs: Bad value for 'source' [ 776.724844][T19528] nfs: Bad value for 'source' [ 776.983245][T19540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2666'. [ 776.993425][T19540] ipvlan0: entered promiscuous mode [ 777.059270][T19540] ipvlan0: entered allmulticast mode [ 777.069838][T19540] veth0_vlan: entered allmulticast mode [ 777.830142][T19550] netlink: 93 bytes leftover after parsing attributes in process `syz.4.2668'. [ 777.907376][T19544] netlink: 93 bytes leftover after parsing attributes in process `syz.4.2668'. [ 778.690016][T19569] futex_wake_op: syz.1.2671 tries to shift op by -2048; fix this program [ 778.723247][T19569] futex_wake_op: syz.1.2671 tries to shift op by -2048; fix this program [ 778.753176][T19569] 0x000000000001-0x000000020000 : "" [ 778.827520][T19569] ftl_cs: FTL header corrupt! [ 778.894623][T19575] FAULT_INJECTION: forcing a failure. [ 778.894623][T19575] name failslab, interval 1, probability 0, space 0, times 0 [ 778.907634][T19575] CPU: 1 UID: 0 PID: 19575 Comm: syz.1.2671 Tainted: G L syzkaller #0 PREEMPT(full) [ 778.907665][T19575] Tainted: [L]=SOFTLOCKUP [ 778.907671][T19575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 778.907681][T19575] Call Trace: [ 778.907688][T19575] [ 778.907696][T19575] dump_stack_lvl+0x100/0x190 [ 778.907725][T19575] should_fail_ex.cold+0x5/0xa [ 778.907744][T19575] should_failslab+0xc2/0x120 [ 778.907761][T19575] __kmalloc_cache_noprof+0x7a/0x6f0 [ 778.907780][T19575] ? loop_add+0xb9/0xb60 [ 778.907887][T19575] loop_add+0xb9/0xb60 [ 778.907908][T19575] ? __pfx_loop_add+0x10/0x10 [ 778.907939][T19575] ? find_held_lock+0x2b/0x80 [ 778.907954][T19575] ? __fget_files+0x215/0x3d0 [ 778.907971][T19575] loop_control_ioctl+0xae/0x620 [ 778.907992][T19575] ? __pfx_loop_control_ioctl+0x10/0x10 [ 778.908015][T19575] ? __pfx_loop_control_ioctl+0x10/0x10 [ 778.908052][T19575] __x64_sys_ioctl+0x18e/0x210 [ 778.908076][T19575] do_syscall_64+0x106/0xf80 [ 778.908097][T19575] ? clear_bhb_loop+0x40/0x90 [ 778.908115][T19575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.908132][T19575] RIP: 0033:0x7f69bef9c799 [ 778.908146][T19575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.908161][T19575] RSP: 002b:00007f69bfee5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 778.908177][T19575] RAX: ffffffffffffffda RBX: 00007f69bf216180 RCX: 00007f69bef9c799 [ 778.908187][T19575] RDX: fffffffffffffffd RSI: 0000000000004c80 RDI: 0000000000000004 [ 778.908197][T19575] RBP: 00007f69bf032c99 R08: 0000000000000000 R09: 0000000000000000 [ 778.908206][T19575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 778.908216][T19575] R13: 00007f69bf216218 R14: 00007f69bf216180 R15: 00007fff043c3438 [ 778.908237][T19575] [ 780.652383][T19602] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 781.005904][T19610] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 783.347176][T19648] futex_wake_op: syz.4.2690 tries to shift op by -2048; fix this program [ 783.379475][T19648] futex_wake_op: syz.4.2690 tries to shift op by -2048; fix this program [ 783.424912][T19648] 0x000000000001-0x000000020000 : "" [ 783.465473][T19648] ftl_cs: FTL header corrupt! [ 783.708652][T19655] FAULT_INJECTION: forcing a failure. [ 783.708652][T19655] name fail_futex, interval 1, probability 0, space 0, times 0 [ 783.754924][T19655] CPU: 1 UID: 0 PID: 19655 Comm: syz.4.2690 Tainted: G L syzkaller #0 PREEMPT(full) [ 783.754961][T19655] Tainted: [L]=SOFTLOCKUP [ 783.754966][T19655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 783.754975][T19655] Call Trace: [ 783.754981][T19655] [ 783.754987][T19655] dump_stack_lvl+0x100/0x190 [ 783.755015][T19655] should_fail_ex.cold+0x5/0xa [ 783.755032][T19655] get_futex_key+0x107c/0x1620 [ 783.755053][T19655] ? __pfx_get_futex_key+0x10/0x10 [ 783.755068][T19655] ? lock_acquire+0x1cf/0x380 [ 783.755093][T19655] futex_wake+0xea/0x530 [ 783.755118][T19655] ? __pfx_futex_wake+0x10/0x10 [ 783.755138][T19655] ? exit_mm_release+0x19/0x30 [ 783.755160][T19655] do_futex+0x32b/0x350 [ 783.755179][T19655] ? __pfx_do_futex+0x10/0x10 [ 783.755195][T19655] ? __might_fault+0xc5/0x140 [ 783.755219][T19655] mm_release+0x24a/0x2f0 [ 783.755235][T19655] do_exit+0x704/0x2b60 [ 783.755256][T19655] ? __pfx_do_exit+0x10/0x10 [ 783.755273][T19655] ? do_raw_spin_lock+0x128/0x260 [ 783.755292][T19655] ? find_held_lock+0x2b/0x80 [ 783.755305][T19655] ? get_signal+0x7e0/0x21e0 [ 783.755323][T19655] do_group_exit+0xd5/0x2a0 [ 783.755342][T19655] get_signal+0x1ec7/0x21e0 [ 783.755364][T19655] ? __pfx_get_signal+0x10/0x10 [ 783.755380][T19655] ? do_futex+0x192/0x350 [ 783.755400][T19655] arch_do_signal_or_restart+0x91/0x770 [ 783.755417][T19655] ? find_held_lock+0x2b/0x80 [ 783.755430][T19655] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 783.755453][T19655] ? __pfx___x64_sys_futex+0x10/0x10 [ 783.755475][T19655] exit_to_user_mode_loop+0x86/0x4a0 [ 783.755495][T19655] do_syscall_64+0x668/0xf80 [ 783.755515][T19655] ? clear_bhb_loop+0x40/0x90 [ 783.755532][T19655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 783.755547][T19655] RIP: 0033:0x7f31c2d9c799 [ 783.755561][T19655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 783.755576][T19655] RSP: 002b:00007f31c3bc80e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 783.755591][T19655] RAX: fffffffffffffe00 RBX: 00007f31c3016188 RCX: 00007f31c2d9c799 [ 783.755601][T19655] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f31c3016188 [ 783.755616][T19655] RBP: 00007f31c3016180 R08: 0000000000000000 R09: 0000000000000000 [ 783.755625][T19655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 783.755634][T19655] R13: 00007f31c3016218 R14: 00007fffbe5b4cf0 R15: 00007fffbe5b4dd8 [ 783.755653][T19655] [ 784.129853][T19659] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 784.811831][T19663] netlink: 'syz.1.2695': attribute type 1 has an invalid length. [ 784.831132][T19663] FAULT_INJECTION: forcing a failure. [ 784.831132][T19663] name fail_futex, interval 1, probability 0, space 0, times 0 [ 784.880664][T19663] CPU: 1 UID: 0 PID: 19663 Comm: syz.1.2695 Tainted: G L syzkaller #0 PREEMPT(full) [ 784.880698][T19663] Tainted: [L]=SOFTLOCKUP [ 784.880704][T19663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 784.880715][T19663] Call Trace: [ 784.880722][T19663] [ 784.880730][T19663] dump_stack_lvl+0x100/0x190 [ 784.880764][T19663] should_fail_ex.cold+0x5/0xa [ 784.880787][T19663] get_futex_key+0x1d2/0x1620 [ 784.880818][T19663] ? __pfx_get_futex_key+0x10/0x10 [ 784.880846][T19663] futex_wake+0xea/0x530 [ 784.880873][T19663] ? __pfx_futex_wake+0x10/0x10 [ 784.880899][T19663] ? putname+0xb1/0x110 [ 784.880916][T19663] ? kmem_cache_free+0x124/0x6a0 [ 784.880941][T19663] do_futex+0x32b/0x350 [ 784.880961][T19663] ? __pfx_do_futex+0x10/0x10 [ 784.880979][T19663] ? __pfx_do_sys_openat2+0x10/0x10 [ 784.881007][T19663] ? __fget_files+0x21f/0x3d0 [ 784.881028][T19663] __x64_sys_futex+0x34f/0x4d0 [ 784.881051][T19663] ? __x64_sys_openat+0x12d/0x210 [ 784.881073][T19663] ? __pfx___x64_sys_futex+0x10/0x10 [ 784.881103][T19663] do_syscall_64+0x106/0xf80 [ 784.881124][T19663] ? clear_bhb_loop+0x40/0x90 [ 784.881143][T19663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 784.881160][T19663] RIP: 0033:0x7f69bef9c799 [ 784.881175][T19663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 784.881192][T19663] RSP: 002b:00007f69bff270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 784.881210][T19663] RAX: ffffffffffffffda RBX: 00007f69bf215fa8 RCX: 00007f69bef9c799 [ 784.881220][T19663] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f69bf215fac [ 784.881230][T19663] RBP: 00007f69bf215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 784.881239][T19663] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 784.881249][T19663] R13: 00007f69bf216038 R14: 00007fff043c3350 R15: 00007fff043c3438 [ 784.881270][T19663] [ 786.300178][T19704] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2702'. [ 786.341643][T19702] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2702'. [ 787.264373][T19729] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2714'. [ 787.847161][T19730] netlink: 'syz.3.2706': attribute type 1 has an invalid length. [ 787.899846][T19730] FAULT_INJECTION: forcing a failure. [ 787.899846][T19730] name fail_futex, interval 1, probability 0, space 0, times 0 [ 787.976251][T19730] CPU: 1 UID: 0 PID: 19730 Comm: syz.3.2706 Tainted: G L syzkaller #0 PREEMPT(full) [ 787.976280][T19730] Tainted: [L]=SOFTLOCKUP [ 787.976286][T19730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 787.976296][T19730] Call Trace: [ 787.976303][T19730] [ 787.976312][T19730] dump_stack_lvl+0x100/0x190 [ 787.976345][T19730] should_fail_ex.cold+0x5/0xa [ 787.976364][T19730] get_futex_key+0x1d2/0x1620 [ 787.976386][T19730] ? __pfx_get_futex_key+0x10/0x10 [ 787.976410][T19730] futex_wake+0xea/0x530 [ 787.976434][T19730] ? __pfx_futex_wake+0x10/0x10 [ 787.976458][T19730] ? putname+0xb1/0x110 [ 787.976474][T19730] ? kmem_cache_free+0x124/0x6a0 [ 787.976499][T19730] do_futex+0x32b/0x350 [ 787.976518][T19730] ? __pfx_do_futex+0x10/0x10 [ 787.976535][T19730] ? __pfx_do_sys_openat2+0x10/0x10 [ 787.976556][T19730] ? __fget_files+0x21f/0x3d0 [ 787.976572][T19730] __x64_sys_futex+0x34f/0x4d0 [ 787.976592][T19730] ? __x64_sys_openat+0x12d/0x210 [ 787.976611][T19730] ? __pfx___x64_sys_futex+0x10/0x10 [ 787.976637][T19730] do_syscall_64+0x106/0xf80 [ 787.976658][T19730] ? clear_bhb_loop+0x40/0x90 [ 787.976677][T19730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 787.976692][T19730] RIP: 0033:0x7f0fb839c799 [ 787.976707][T19730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 787.976721][T19730] RSP: 002b:00007f0fb92270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 787.976737][T19730] RAX: ffffffffffffffda RBX: 00007f0fb8615fa8 RCX: 00007f0fb839c799 [ 787.976747][T19730] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0fb8615fac [ 787.976756][T19730] RBP: 00007f0fb8615fa0 R08: 0000000000000000 R09: 0000000000000000 [ 787.976766][T19730] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000000 [ 787.976775][T19730] R13: 00007f0fb8616038 R14: 00007ffd46894180 R15: 00007ffd46894268 [ 787.976795][T19730] [ 790.728992][T19764] Invalid ELF header magic: != ELF [ 791.019482][T19787] netlink: 93 bytes leftover after parsing attributes in process `syz.2.2719'. [ 791.059018][T19784] netlink: 93 bytes leftover after parsing attributes in process `syz.2.2719'. [ 792.722757][T19817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2725'. [ 795.502613][T19854] random: crng reseeded on system resumption [ 797.471429][T19887] netlink: 74 bytes leftover after parsing attributes in process `syz.3.2738'. [ 798.140453][T19888] NFSD: Failed to start, no listeners configured. [ 798.468241][T19900] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 799.008889][T19905] futex_wake_op: syz.4.2743 tries to shift op by -2048; fix this program [ 799.046720][T19905] futex_wake_op: syz.4.2743 tries to shift op by -2048; fix this program [ 799.226647][T19912] netlink: 'syz.3.2742': attribute type 1 has an invalid length. [ 802.490821][T19964] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2753'. [ 802.619596][T19959] netlink: 'syz.1.2754': attribute type 1 has an invalid length. [ 804.710907][T19984] Invalid ELF header magic: != ELF [ 807.321208][T20026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2767'. [ 807.563217][T20020] Process accounting resumed [ 808.808698][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.815335][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.289221][T20049] random: crng reseeded on system resumption [ 809.476118][T20054] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2772'. [ 809.476708][T20051] netlink: 93 bytes leftover after parsing attributes in process `syz.1.2772'. [ 809.593506][T20066] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 812.113462][T20106] Process accounting resumed [ 812.499618][T20121] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 819.072846][T20218] netlink: 74 bytes leftover after parsing attributes in process `syz.4.2812'. [ 819.658402][T20223] NFSD: Failed to start, no listeners configured. [ 819.947025][T20236] futex_wake_op: syz.1.2806 tries to shift op by -2048; fix this program [ 819.955791][T20236] futex_wake_op: syz.1.2806 tries to shift op by -2048; fix this program [ 826.238343][T20299] Bluetooth: hci2: command 0x0406 tx timeout [ 827.239930][T20321] netlink: 'syz.4.2822': attribute type 1 has an invalid length. [ 827.292492][T20321] FAULT_INJECTION: forcing a failure. [ 827.292492][T20321] name failslab, interval 1, probability 0, space 0, times 0 [ 827.364159][T20321] CPU: 1 UID: 0 PID: 20321 Comm: syz.4.2822 Tainted: G L syzkaller #0 PREEMPT(full) [ 827.364207][T20321] Tainted: [L]=SOFTLOCKUP [ 827.364218][T20321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 827.364236][T20321] Call Trace: [ 827.364246][T20321] [ 827.364258][T20321] dump_stack_lvl+0x100/0x190 [ 827.364308][T20321] should_fail_ex.cold+0x5/0xa [ 827.364354][T20321] ? realloc_user_queue+0xe9/0x320 [ 827.364392][T20321] should_failslab+0xc2/0x120 [ 827.364421][T20321] __kmalloc_noprof+0xe0/0x850 [ 827.364541][T20321] realloc_user_queue+0xe9/0x320 [ 827.364583][T20321] ? __pfx_snd_timer_user_open+0x10/0x10 [ 827.364619][T20321] snd_timer_user_open+0xfc/0x180 [ 827.364653][T20321] snd_open+0x22d/0x4c0 [ 827.364683][T20321] ? __pfx_snd_open+0x10/0x10 [ 827.364709][T20321] chrdev_open+0x234/0x6a0 [ 827.364739][T20321] ? __pfx_apparmor_file_open+0x10/0x10 [ 827.364782][T20321] ? __pfx_chrdev_open+0x10/0x10 [ 827.364815][T20321] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 827.364849][T20321] do_dentry_open+0x6d8/0x1660 [ 827.364879][T20321] ? __pfx_chrdev_open+0x10/0x10 [ 827.364917][T20321] vfs_open+0x82/0x3f0 [ 827.364957][T20321] path_openat+0x208c/0x31a0 [ 827.365002][T20321] ? __pfx_path_openat+0x10/0x10 [ 827.365045][T20321] do_file_open+0x20e/0x430 [ 827.365079][T20321] ? __pfx_do_file_open+0x10/0x10 [ 827.365136][T20321] ? alloc_fd+0x476/0x790 [ 827.365170][T20321] ? do_getname+0x191/0x390 [ 827.365209][T20321] do_sys_openat2+0x10d/0x1e0 [ 827.365244][T20321] ? __pfx_do_sys_openat2+0x10/0x10 [ 827.365279][T20321] ? __fget_files+0x21f/0x3d0 [ 827.365317][T20321] __x64_sys_openat+0x12d/0x210 [ 827.365358][T20321] ? __pfx___x64_sys_openat+0x10/0x10 [ 827.365407][T20321] do_syscall_64+0x106/0xf80 [ 827.365442][T20321] ? clear_bhb_loop+0x40/0x90 [ 827.365477][T20321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.365519][T20321] RIP: 0033:0x7f31c2d9c799 [ 827.365542][T20321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.365569][T20321] RSP: 002b:00007f31c3c0a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 827.365595][T20321] RAX: ffffffffffffffda RBX: 00007f31c3015fa0 RCX: 00007f31c2d9c799 [ 827.365614][T20321] RDX: 0000000000002000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 827.365633][T20321] RBP: 00007f31c2e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 827.365651][T20321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.365669][T20321] R13: 00007f31c3016038 R14: 00007f31c3015fa0 R15: 00007fffbe5b4dd8 [ 827.365708][T20321] [ 827.897832][T20344] binder: 20342:20344 ioctl c0306201 0 returned -14 [ 828.145766][T20341] netlink: 'syz.1.2829': attribute type 1 has an invalid length. [ 837.021715][T20486] netlink: 'syz.4.2855': attribute type 1 has an invalid length. [ 870.237516][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.243896][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 877.438358][ T8801] Bluetooth: hci3: command 0x0406 tx timeout [ 898.492476][ T5196] udevd[5196]: worker [18278] /devices/pci0000:00/0000:00:03.0/virtio0/host0/target0:0:1/0:0:1:0/block/sda is taking a long time [ 931.677087][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.683405][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.117985][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.124429][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.754521][ T31] INFO: task jbd2/sda1-8:5157 blocked for more than 143 seconds. [ 993.762311][ T31] Tainted: G L syzkaller #0 [ 993.769779][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 993.778685][ T31] task:jbd2/sda1-8 state:D stack:25832 pid:5157 tgid:5157 ppid:2 task_flags:0x240040 flags:0x00080000 [ 993.790688][ T31] Call Trace: [ 993.794047][ T31] [ 993.796974][ T31] __schedule+0xfee/0x6120 [ 993.801388][ T31] ? __lock_acquire+0x4a5/0x2630 [ 993.806647][ T31] ? __pfx___schedule+0x10/0x10 [ 993.811536][ T31] ? find_held_lock+0x2b/0x80 [ 993.816267][ T31] ? schedule+0x2bf/0x390 [ 993.820620][ T31] schedule+0xdd/0x390 [ 993.824864][ T31] io_schedule+0x8a/0xf0 [ 993.829132][ T31] bit_wait_io+0xd/0xe0 [ 993.833286][ T31] __wait_on_bit+0x65/0x180 [ 993.837856][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 993.842821][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 993.848262][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 993.854468][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 993.859980][ T31] ? __pfx___might_resched+0x10/0x10 [ 993.865345][ T31] __wait_on_buffer+0x64/0x70 [ 993.870081][ T31] jbd2_journal_commit_transaction+0x38e4/0x6900 [ 993.876539][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 993.883691][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 993.889700][ T31] ? debug_object_deactivate+0x2e4/0x3b0 [ 993.895424][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 993.901461][ T31] ? _raw_spin_lock_irqsave+0x52/0x60 [ 993.906939][ T31] ? find_held_lock+0x2b/0x80 [ 993.911640][ T31] ? __try_to_del_timer_sync+0x107/0x160 [ 993.917411][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 993.923346][ T31] ? __timer_delete_sync+0x151/0x1c0 [ 993.928688][ T31] kjournald2+0x200/0x760 [ 993.933046][ T31] ? __pfx_kjournald2+0x10/0x10 [ 993.937954][ T31] ? find_held_lock+0x2b/0x80 [ 993.942650][ T31] ? __kthread_parkme+0xbb/0x230 [ 993.947640][ T31] ? rcu_is_watching+0x12/0xc0 [ 993.952535][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 993.958657][ T31] ? __kthread_parkme+0x18c/0x230 [ 993.963727][ T31] ? kthread+0x13a/0x450 [ 993.968134][ T31] ? __pfx_kjournald2+0x10/0x10 [ 993.973010][ T31] kthread+0x370/0x450 [ 993.977138][ T31] ? __pfx_kthread+0x10/0x10 [ 993.981756][ T31] ret_from_fork+0x754/0xd80 [ 993.986444][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 993.991609][ T31] ? __switch_to+0x7b4/0x1120 [ 993.996404][ T31] ? __pfx_kthread+0x10/0x10 [ 994.001045][ T31] ret_from_fork_asm+0x1a/0x30 [ 994.005883][ T31] [ 994.009101][ T31] INFO: task syz-executor:5814 blocked for more than 143 seconds. [ 994.016979][ T31] Tainted: G L syzkaller #0 [ 994.023494][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 994.032258][ T31] task:syz-executor state:D stack:22848 pid:5814 tgid:5814 ppid:5813 task_flags:0x440100 flags:0x00080000 [ 994.044374][ T31] Call Trace: [ 994.047671][ T31] [ 994.050612][ T31] __schedule+0xfee/0x6120 [ 994.055144][ T31] ? __lock_acquire+0x4a5/0x2630 [ 994.060137][ T31] ? __pfx___schedule+0x10/0x10 [ 994.065112][ T31] ? find_held_lock+0x2b/0x80 [ 994.069813][ T31] ? schedule+0x2bf/0x390 [ 994.074223][ T31] schedule+0xdd/0x390 [ 994.078327][ T31] io_schedule+0x8a/0xf0 [ 994.082596][ T31] bit_wait_io+0xd/0xe0 [ 994.087083][ T31] __wait_on_bit+0x65/0x180 [ 994.091653][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 994.096704][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 994.102112][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 994.108161][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 994.113653][ T31] do_get_write_access+0x880/0x1210 [ 994.118922][ T31] ? jbd2_write_access_granted+0x61/0x3d0 [ 994.124723][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 994.130751][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 994.136957][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 994.142542][ T31] __ext4_mark_inode_dirty+0x18f/0x8b0 [ 994.148228][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 994.154291][ T31] ? trace_jbd2_handle_start+0x83/0x270 [ 994.159868][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 994.165145][ T31] ? __ext4_journal_start_sb+0x382/0x6a0 [ 994.170814][ T31] ? __ext4_journal_start_sb+0x1ce/0x6a0 [ 994.176529][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 994.181528][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 994.186972][ T31] ext4_dirty_inode+0xd9/0x130 [ 994.191764][ T31] ? rcu_is_watching+0x12/0xc0 [ 994.196614][ T31] __mark_inode_dirty+0x1f3/0x1790 [ 994.201795][ T31] file_update_time_flags+0x46b/0x500 [ 994.207239][ T31] ext4_page_mkwrite+0x35b/0x1980 [ 994.212384][ T31] ? __pfx_tcp_recvmsg+0x10/0x10 [ 994.217479][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 994.222967][ T31] ? vm_normal_page+0x1b6/0x330 [ 994.227910][ T31] ? find_held_lock+0x2b/0x80 [ 994.232606][ T31] ? rcu_read_unlock+0x2d/0xb0 [ 994.237455][ T31] do_page_mkwrite+0x17a/0x440 [ 994.242356][ T31] do_wp_page+0x4aa/0x4f00 [ 994.246888][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 994.251771][ T31] ? do_raw_spin_lock+0x128/0x260 [ 994.256863][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 994.262263][ T31] __handle_mm_fault+0x1ac8/0x2b60 [ 994.267442][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 994.272759][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 994.278297][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 994.283544][ T31] handle_mm_fault+0x36d/0xa20 [ 994.288560][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 994.293715][ T31] exc_page_fault+0x6f/0xd0 [ 994.298321][ T31] asm_exc_page_fault+0x26/0x30 [ 994.303201][ T31] RIP: 0033:0x7ff30a87ada7 [ 994.307695][ T31] RSP: 002b:00007ffe95ec9530 EFLAGS: 00010202 [ 994.313798][ T31] RAX: 00007ff309164000 RBX: 0000555589050570 RCX: 0000000000000005 [ 994.321828][ T31] RDX: 00000000000018d1 RSI: 000055558905ae68 RDI: 0000000000000020 [ 994.329861][ T31] RBP: 00007ffe95ec9a30 R08: 00000000000002bc R09: 000055558905ae68 [ 994.337913][ T31] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe95ec9870 [ 994.345935][ T31] R13: 00007ffe95ec9660 R14: 585858582e7a7973 R15: 00007ffe95ec95b0 [ 994.353916][ T31] [ 994.357063][ T31] INFO: task syz.3.2851:20456 blocked for more than 143 seconds. [ 994.364866][ T31] Tainted: G L syzkaller #0 [ 994.371513][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 994.380251][ T31] task:syz.3.2851 state:D stack:25416 pid:20456 tgid:20456 ppid:15688 task_flags:0x440040 flags:0x00080002 [ 994.392332][ T31] Call Trace: [ 994.395697][ T31] [ 994.398669][ T31] __schedule+0xfee/0x6120 [ 994.403094][ T31] ? __lock_acquire+0x4a5/0x2630 [ 994.408319][ T31] ? __pfx___schedule+0x10/0x10 [ 994.413328][ T31] ? find_held_lock+0x2b/0x80 [ 994.418066][ T31] ? schedule+0x2bf/0x390 [ 994.422420][ T31] schedule+0xdd/0x390 [ 994.426568][ T31] io_schedule+0x8a/0xf0 [ 994.430835][ T31] bit_wait_io+0xd/0xe0 [ 994.435068][ T31] __wait_on_bit+0x65/0x180 [ 994.439688][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 994.444733][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 994.450171][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 994.456201][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 994.461685][ T31] do_get_write_access+0x880/0x1210 [ 994.467046][ T31] ? jbd2_write_access_granted+0x61/0x3d0 [ 994.472798][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 994.479376][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 994.485543][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 994.491142][ T31] __ext4_mark_inode_dirty+0x18f/0x8b0 [ 994.496766][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 994.502815][ T31] ? trace_jbd2_handle_start+0x83/0x270 [ 994.508437][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 994.513664][ T31] ? __ext4_journal_start_sb+0x382/0x6a0 [ 994.519515][ T31] ? __ext4_journal_start_sb+0x1ce/0x6a0 [ 994.525222][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 994.530185][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 994.535652][ T31] ext4_dirty_inode+0xd9/0x130 [ 994.540450][ T31] ? rcu_is_watching+0x12/0xc0 [ 994.545280][ T31] __mark_inode_dirty+0x1f3/0x1790 [ 994.550418][ T31] file_update_time_flags+0x46b/0x500 [ 994.555868][ T31] ext4_page_mkwrite+0x35b/0x1980 [ 994.560948][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 994.566555][ T31] do_page_mkwrite+0x17a/0x440 [ 994.571382][ T31] do_fault+0x3d7/0x1990 [ 994.575811][ T31] __handle_mm_fault+0x180f/0x2b60 [ 994.580976][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 994.586347][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 994.591835][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 994.597189][ T31] handle_mm_fault+0x36d/0xa20 [ 994.601991][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 994.607298][ T31] exc_page_fault+0x6f/0xd0 [ 994.611848][ T31] asm_exc_page_fault+0x26/0x30 [ 994.616764][ T31] RIP: 0033:0x7f0fb8271632 [ 994.621204][ T31] RSP: 002b:00007ffd46894310 EFLAGS: 00010202 [ 994.627335][ T31] RAX: 0000000000088008 RBX: 00007f0fb9145720 RCX: 0000000000000000 [ 994.635519][ T31] RDX: 0000001b30d9c000 RSI: 0000000000000008 RDI: 00007f0fb9145720 [ 994.643491][ T31] RBP: 000000000000035f R08: 00007f0fb8600000 R09: 00007f0fb8616038 [ 994.651579][ T31] R10: 0000000000000001 R11: 0000000000000006 R12: ffffffff82808593 [ 994.659611][ T31] R13: 00007f0fb8616038 R14: 00000000000000f8 R15: fffffffffff78000 [ 994.667638][ T31] ? page_table_check_set+0x353/0xa10 [ 994.673040][ T31] [ 994.676114][ T31] INFO: task syz.2.2858:20500 blocked for more than 144 seconds. [ 994.683880][ T31] Tainted: G L syzkaller #0 [ 994.690544][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 994.699276][ T31] task:syz.2.2858 state:D stack:26536 pid:20500 tgid:20500 ppid:18190 task_flags:0x440040 flags:0x00080002 [ 994.711311][ T31] Call Trace: [ 994.715266][ T31] [ 994.718463][ T31] __schedule+0xfee/0x6120 [ 994.722903][ T31] ? __lock_acquire+0x4a5/0x2630 [ 994.727927][ T31] ? __pfx___schedule+0x10/0x10 [ 994.732805][ T31] ? find_held_lock+0x2b/0x80 [ 994.737543][ T31] ? schedule+0x2bf/0x390 [ 994.741920][ T31] schedule+0xdd/0x390 [ 994.746060][ T31] io_schedule+0x8a/0xf0 [ 994.750358][ T31] bit_wait_io+0xd/0xe0 [ 994.754571][ T31] __wait_on_bit+0x65/0x180 [ 994.759098][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 994.764097][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 994.769501][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 994.775532][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 994.781019][ T31] do_get_write_access+0x880/0x1210 [ 994.786374][ T31] ? jbd2_write_access_granted+0x61/0x3d0 [ 994.792157][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 994.798208][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 994.804352][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 994.809946][ T31] __ext4_mark_inode_dirty+0x18f/0x8b0 [ 994.815480][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 994.821520][ T31] ? trace_jbd2_handle_start+0x83/0x270 [ 994.827174][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 994.832397][ T31] ? __ext4_journal_start_sb+0x382/0x6a0 [ 994.838118][ T31] ? __ext4_journal_start_sb+0x1ce/0x6a0 [ 994.843804][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 994.848882][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 994.854319][ T31] ext4_dirty_inode+0xd9/0x130 [ 994.859115][ T31] ? rcu_is_watching+0x12/0xc0 [ 994.863883][ T31] __mark_inode_dirty+0x1f3/0x1790 [ 994.869071][ T31] file_update_time_flags+0x46b/0x500 [ 994.874629][ T31] ext4_page_mkwrite+0x35b/0x1980 [ 994.879679][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 994.885201][ T31] do_page_mkwrite+0x17a/0x440 [ 994.890081][ T31] do_fault+0x3d7/0x1990 [ 994.894423][ T31] __handle_mm_fault+0x180f/0x2b60 [ 994.899565][ T31] ? lockdep_hardirqs_on+0x78/0x100 [ 994.904824][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 994.910664][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 994.916342][ T31] ? __rcu_read_unlock+0x26a/0x5e0 [ 994.921521][ T31] handle_mm_fault+0x36d/0xa20 [ 994.926390][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 994.931537][ T31] exc_page_fault+0x6f/0xd0 [ 994.936187][ T31] asm_exc_page_fault+0x26/0x30 [ 994.941058][ T31] RIP: 0033:0x7f73ace71632 [ 994.945535][ T31] RSP: 002b:00007ffd95aa88f0 EFLAGS: 00010202 [ 994.951875][ T31] RAX: 0000000000012008 RBX: 00007f73add45720 RCX: 0000000000000000 [ 994.959948][ T31] RDX: 0000001b2dc12000 RSI: 0000000000000008 RDI: 00007f73add45720 [ 994.967982][ T31] RBP: 00000000000001e7 R08: 00007f73ad200000 R09: 00007f73ad216128 [ 994.976032][ T31] R10: 0000000000000003 R11: 0000000000000009 R12: ffffffff84f2c6e4 [ 994.984079][ T31] R13: 00007f73ad216128 R14: 0000000000000044 R15: fffffffffffee000 [ 994.992085][ T31] ? __import_iovec+0x34/0x640 [ 994.998278][ T31] [ 995.001352][ T31] INFO: task syz.1.2859:20504 blocked for more than 144 seconds. [ 995.009158][ T31] Tainted: G L syzkaller #0 [ 995.015709][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 995.024464][ T31] task:syz.1.2859 state:D stack:27432 pid:20504 tgid:20504 ppid:19156 task_flags:0x440040 flags:0x00080002 [ 995.036452][ T31] Call Trace: [ 995.039725][ T31] [ 995.042651][ T31] __schedule+0xfee/0x6120 [ 995.047303][ T31] ? __lock_acquire+0x4a5/0x2630 [ 995.052361][ T31] ? __pfx___schedule+0x10/0x10 [ 995.057293][ T31] ? find_held_lock+0x2b/0x80 [ 995.061993][ T31] ? schedule+0x2bf/0x390 [ 995.066407][ T31] schedule+0xdd/0x390 [ 995.070507][ T31] io_schedule+0x8a/0xf0 [ 995.074848][ T31] bit_wait_io+0xd/0xe0 [ 995.079062][ T31] __wait_on_bit+0x65/0x180 [ 995.083567][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 995.088635][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 995.094180][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 995.100167][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 995.105687][ T31] do_get_write_access+0x880/0x1210 [ 995.110926][ T31] ? jbd2_write_access_granted+0x61/0x3d0 [ 995.116736][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 995.122760][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 995.128921][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 995.134583][ T31] __ext4_mark_inode_dirty+0x18f/0x8b0 [ 995.140073][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 995.146129][ T31] ? trace_jbd2_handle_start+0x83/0x270 [ 995.151782][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 995.157033][ T31] ? __ext4_journal_start_sb+0x382/0x6a0 [ 995.162687][ T31] ? __ext4_journal_start_sb+0x1ce/0x6a0 [ 995.168363][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 995.173340][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 995.178772][ T31] ext4_dirty_inode+0xd9/0x130 [ 995.183561][ T31] ? rcu_is_watching+0x12/0xc0 [ 995.188370][ T31] __mark_inode_dirty+0x1f3/0x1790 [ 995.193508][ T31] file_update_time_flags+0x46b/0x500 [ 995.198961][ T31] ext4_page_mkwrite+0x35b/0x1980 [ 995.204089][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 995.209585][ T31] do_page_mkwrite+0x17a/0x440 [ 995.214501][ T31] do_fault+0x3d7/0x1990 [ 995.218771][ T31] __handle_mm_fault+0x180f/0x2b60 [ 995.223891][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 995.229249][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 995.234808][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 995.240022][ T31] handle_mm_fault+0x36d/0xa20 [ 995.244839][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 995.249984][ T31] exc_page_fault+0x6f/0xd0 [ 995.254555][ T31] asm_exc_page_fault+0x26/0x30 [ 995.259430][ T31] RIP: 0033:0x7f69bee70ec0 [ 995.263855][ T31] RSP: 002b:00007fff043c3480 EFLAGS: 00010202 [ 995.269979][ T31] RAX: 0000001b31f1f000 RBX: ffffffff8954e478 RCX: 0000001b31f1eff8 [ 995.278181][ T31] RDX: 0000001b31b24220 RSI: 0000000000000008 RDI: 00007f69bfd45720 [ 995.286223][ T31] RBP: 0000000000000115 R08: 00007f69bf200000 R09: 00007f69bf202000 [ 995.294276][ T31] R10: 000000008954e47c R11: 0000000000000004 R12: 00007f69bf216038 [ 995.302278][ T31] R13: 0000000000000169 R14: ffffffff8954e404 R15: 00007f69bfd45720 [ 995.310324][ T31] ? sk_alloc+0x6c4/0xe80 [ 995.314805][ T31] ? sk_alloc+0x738/0xe80 [ 995.319753][ T31] [ 995.322778][ T31] INFO: task syz.4.2860:20507 blocked for more than 144 seconds. [ 995.330572][ T31] Tainted: G L syzkaller #0 [ 995.337118][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 995.345838][ T31] task:syz.4.2860 state:D stack:28440 pid:20507 tgid:20507 ppid:10024 task_flags:0x440040 flags:0x00080002 [ 995.357866][ T31] Call Trace: [ 995.361142][ T31] [ 995.364156][ T31] __schedule+0xfee/0x6120 [ 995.368717][ T31] ? __lock_acquire+0x4a5/0x2630 [ 995.373686][ T31] ? __pfx___schedule+0x10/0x10 [ 995.378628][ T31] ? find_held_lock+0x2b/0x80 [ 995.383325][ T31] ? schedule+0x2bf/0x390 [ 995.387727][ T31] schedule+0xdd/0x390 [ 995.391859][ T31] io_schedule+0x8a/0xf0 [ 995.396178][ T31] bit_wait_io+0xd/0xe0 [ 995.400367][ T31] __wait_on_bit+0x65/0x180 [ 995.404954][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 995.409930][ T31] out_of_line_wait_on_bit+0xdc/0x110 [ 995.415395][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 995.422110][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 995.427667][ T31] do_get_write_access+0x880/0x1210 [ 995.432899][ T31] ? jbd2_write_access_granted+0x61/0x3d0 [ 995.438676][ T31] jbd2_journal_get_write_access+0x1d6/0x280 [ 995.444744][ T31] __ext4_journal_get_write_access+0x6a/0x340 [ 995.450848][ T31] ext4_reserve_inode_write+0x1b7/0x330 [ 995.456449][ T31] __ext4_mark_inode_dirty+0x18f/0x8b0 [ 995.462023][ T31] ? __pfx___ext4_mark_inode_dirty+0x10/0x10 [ 995.468069][ T31] ? trace_jbd2_handle_start+0x83/0x270 [ 995.473646][ T31] ? jbd2__journal_start+0xf7/0x6a0 [ 995.478956][ T31] ? __ext4_journal_start_sb+0x382/0x6a0 [ 995.484666][ T31] ? __ext4_journal_start_sb+0x1ce/0x6a0 [ 995.490365][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 995.495359][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 995.500756][ T31] ext4_dirty_inode+0xd9/0x130 [ 995.505656][ T31] ? rcu_is_watching+0x12/0xc0 [ 995.510456][ T31] __mark_inode_dirty+0x1f3/0x1790 [ 995.516458][ T31] file_update_time_flags+0x46b/0x500 [ 995.521882][ T31] ext4_page_mkwrite+0x35b/0x1980 [ 995.527083][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 995.532626][ T31] do_page_mkwrite+0x17a/0x440 [ 995.537442][ T31] do_fault+0x3d7/0x1990 [ 995.541682][ T31] ? __pmd_alloc+0x3fb/0x950 [ 995.546375][ T31] __handle_mm_fault+0x180f/0x2b60 [ 995.551519][ T31] ? reacquire_held_locks+0xce/0x1e0 [ 995.556885][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 995.562641][ T31] ? lock_vma_under_rcu+0x17c/0x590 [ 995.567931][ T31] handle_mm_fault+0x36d/0xa20 [ 995.572732][ T31] do_user_addr_fault+0x5a3/0x12f0 [ 995.578029][ T31] exc_page_fault+0x6f/0xd0 [ 995.582558][ T31] asm_exc_page_fault+0x26/0x30 [ 995.587506][ T31] RIP: 0033:0x7f31c2c6a243 [ 995.591932][ T31] RSP: 002b:00007fffbe5b4f40 EFLAGS: 00010246 [ 995.598093][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000001b2e764000 [ 995.606160][ T31] RDX: 0000001b2e724000 RSI: 0000000000400000 RDI: 00007f31c2fda710 [ 995.614206][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 995.622195][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 995.630240][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffbe5b51d0 [ 995.638290][ T31] [ 995.641356][ T31] [ 995.641356][ T31] Showing all locks held in the system: [ 995.649250][ T31] 1 lock held by khungtaskd/31: [ 995.654234][ T31] #0: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 995.664261][ T31] 3 locks held by syz-executor/5814: [ 995.669652][ T31] #0: ffff8880780e7808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 995.678996][ T31] #1: ffff888036f92518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 995.688656][ T31] #2: ffff888036db6950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 995.698433][ T31] 7 locks held by kworker/u10:7/10184: [ 995.703902][ T31] #0: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 995.713888][ T31] #1: ffff88807e0ce008 (&____s->seqcount#14){--.-}-{0:0}, at: trace_ignore_this_task+0xbc/0x100 [ 995.724574][ T31] #2: ffff8880b843b2e0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x88/0x140 [ 995.734606][ T31] #3: ffffffff9b3f7ab8 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0x144/0x490 [ 995.745170][ T31] #4: ffffffff8e7e74e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xbd/0x1ea0 [ 995.756332][ T31] #5: ffff8880b843f6a8 ((local_lock_t *)&pcs->lock){+.+.}-{3:3}, at: __kfree_rcu_sheaf+0x86/0x720 [ 995.767415][ T31] #6: ffff8880269b18d8 (&____s->seqcount#7){----}-{0:0}, at: drm_handle_vblank+0x284/0xc30 [ 995.777694][ T31] 2 locks held by getty/14552: [ 995.782498][ T31] #0: ffff88803763a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 995.792407][ T31] #1: ffffc9000459b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x1500 [ 995.802590][ T31] 3 locks held by syz.3.2851/20456: [ 995.807818][ T31] #0: ffff8880299cd448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 995.817408][ T31] #1: ffff888036f92518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 995.826999][ T31] #2: ffff888036db6950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 995.836746][ T31] 3 locks held by syz.2.2858/20500: [ 995.841967][ T31] #0: ffff88807c0ddbc8 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 995.851354][ T31] #1: ffff888036f92518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 995.860923][ T31] #2: ffff888036db6950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 995.870564][ T31] 3 locks held by syz.1.2859/20504: [ 995.875891][ T31] #0: ffff88807f540808 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 995.885456][ T31] #1: ffff888036f92518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 995.895096][ T31] #2: ffff888036db6950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 995.904712][ T31] 3 locks held by syz.4.2860/20507: [ 995.909930][ T31] #0: ffff88805f544588 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x11d/0x590 [ 995.919311][ T31] #1: ffff888036f92518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x17a/0x440 [ 995.928873][ T31] #2: ffff888036db6950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xfaa/0x13a0 [ 995.938514][ T31] [ 995.940847][ T31] ============================================= [ 995.940847][ T31] [ 995.949380][ T31] NMI backtrace for cpu 1 [ 995.949405][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 995.949437][ T31] Tainted: [L]=SOFTLOCKUP [ 995.949446][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 995.949459][ T31] Call Trace: [ 995.949468][ T31] [ 995.949478][ T31] dump_stack_lvl+0x100/0x190 [ 995.949516][ T31] nmi_cpu_backtrace.cold+0x12d/0x151 [ 995.949555][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 995.949591][ T31] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 995.949714][ T31] sys_info+0x141/0x190 [ 995.949739][ T31] watchdog+0xd25/0x1050 [ 995.949776][ T31] ? __pfx_watchdog+0x10/0x10 [ 995.949802][ T31] ? __kthread_parkme+0x18c/0x230 [ 995.949835][ T31] ? kthread+0x13a/0x450 [ 995.949865][ T31] ? __pfx_watchdog+0x10/0x10 [ 995.949887][ T31] kthread+0x370/0x450 [ 995.949918][ T31] ? __pfx_kthread+0x10/0x10 [ 995.949952][ T31] ret_from_fork+0x754/0xd80 [ 995.949989][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 995.950027][ T31] ? __switch_to+0x7b4/0x1120 [ 995.950055][ T31] ? __pfx_kthread+0x10/0x10 [ 995.950090][ T31] ret_from_fork_asm+0x1a/0x30 [ 995.950132][ T31] [ 995.950142][ T31] Sending NMI from CPU 1 to CPUs 0: [ 996.075717][ C0] NMI backtrace for cpu 0 [ 996.075739][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.075772][ C0] Tainted: [L]=SOFTLOCKUP [ 996.075785][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 996.075801][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 996.075837][ C0] Code: 78 85 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 10 1e 00 fb f4 fc 35 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 996.075861][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 996.075880][ C0] RAX: 0000000000a42765 RBX: ffffffff8e4975c0 RCX: ffffffff8b8d7c75 [ 996.075897][ C0] RDX: 0000000000000000 RSI: ffffffff8de7fbba RDI: ffffffff8c1b09a0 [ 996.075912][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017086795 [ 996.075927][ C0] R10: ffff8880b8433cab R11: 0000000000000000 R12: fffffbfff1c92eb8 [ 996.075943][ C0] R13: 0000000000000000 R14: ffffffff90d9c010 R15: 0000000000000000 [ 996.075959][ C0] FS: 0000000000000000(0000) GS:ffff88812434a000(0000) knlGS:0000000000000000 [ 996.075981][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 996.075997][ C0] CR2: 00005562fc35f168 CR3: 000000000e598000 CR4: 00000000003526f0 [ 996.076012][ C0] Call Trace: [ 996.076020][ C0] [ 996.076030][ C0] default_idle+0x9/0x10 [ 996.076064][ C0] default_idle_call+0x6c/0xb0 [ 996.076084][ C0] do_idle+0x43a/0x550 [ 996.076108][ C0] ? __pfx_do_idle+0x10/0x10 [ 996.076133][ C0] cpu_startup_entry+0x4f/0x60 [ 996.076161][ C0] rest_init+0x251/0x260 [ 996.076183][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 996.076332][ C0] start_kernel+0x47f/0x480 [ 996.076381][ C0] x86_64_start_reservations+0x24/0x30 [ 996.076405][ C0] x86_64_start_kernel+0x12b/0x130 [ 996.076429][ C0] common_startup_64+0x13e/0x148 [ 996.076461][ C0] [ 996.263950][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 996.270821][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 996.281516][ T31] Tainted: [L]=SOFTLOCKUP [ 996.285839][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 996.295892][ T31] Call Trace: [ 996.299172][ T31] [ 996.302101][ T31] dump_stack_lvl+0x100/0x190 [ 996.306800][ T31] vpanic+0x552/0x970 [ 996.310788][ T31] ? __pfx_vpanic+0x10/0x10 [ 996.315303][ T31] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 996.321472][ T31] panic+0xd1/0xe0 [ 996.325201][ T31] ? __pfx_panic+0x10/0x10 [ 996.329632][ T31] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 996.335805][ T31] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 996.341973][ T31] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 996.348133][ T31] ? watchdog.cold+0x198/0x1ca [ 996.352991][ T31] ? watchdog+0xd35/0x1050 [ 996.357414][ T31] watchdog.cold+0x1a9/0x1ca [ 996.362019][ T31] ? __pfx_watchdog+0x10/0x10 [ 996.366711][ T31] ? __kthread_parkme+0x18c/0x230 [ 996.371753][ T31] ? kthread+0x13a/0x450 [ 996.376010][ T31] ? __pfx_watchdog+0x10/0x10 [ 996.380687][ T31] kthread+0x370/0x450 [ 996.384771][ T31] ? __pfx_kthread+0x10/0x10 [ 996.389370][ T31] ret_from_fork+0x754/0xd80 [ 996.393977][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 996.399105][ T31] ? __switch_to+0x7b4/0x1120 [ 996.403789][ T31] ? __pfx_kthread+0x10/0x10 [ 996.408387][ T31] ret_from_fork_asm+0x1a/0x30 [ 996.413261][ T31] [ 996.417114][ T31] Kernel Offset: disabled [ 996.421437][ T31] Rebooting in 86400 seconds..