last executing test programs: 21m47.241623475s ago: executing program 2 (id=479): keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x9, 0xc) socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x240100, 0x0) socketpair$auto(0x1, 0x5, 0x3, 0x0) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x40000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 21m46.906357742s ago: executing program 2 (id=482): keyctl$auto_KEYCTL_GET_PERSISTENT(0x16, 0xee00, 0x7fffffffffffffff, 0x9, 0xc) r0 = socket(0x2, 0x5, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0x0, 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c0300009d48c9023a9236161fd9c31641e8a0779af3cce3c53c83571d142e60c4af3b9602e4a4e60655f98fa4c3e21b39b39e00bac12534a9d5989c228e6dbf9620f680be68565859bdfc2c31bcdee6a8d25c4cab419bb1f01f26b5cb4c4a289d899e71f1fdad32823add0465511c536c875de8cef848925ae5a4e8a2bc2813354188f346faa07047edf997aea1af179d45e0e283c8991bda0593c500680be231275275953cc0da2051451bec5c776ff49a4ef381e2b53db35d484cdbfe01960b18a2638be0b5b995d3983d076119fd516ad86e0a53", @ANYRES16=r1, @ANYBLOB="10002cbd7000fcdbdf256900000085015e80b635a5a2a3297f7d908914084a51d0e5e618ac4dd93f905de722eafc2d95ec1a250930c0d9b6d61e5b4286044ac52bf2e7355f52c2a6b08179052ef4692168b9218278fc1cf002d900aa990d76281d6423c12114ac02f8ec7f765cf167727db04314da6c7439be415553371f7949ff0702046c024f0970fa2303244108004a0007000000609ac911396a55e2928b5cd738629710b14ac156c70236bb82892e4e53467cc83f6cd1f4f557baa852bf599aa627d53df683be2c222ca5f45ac12dfc6d5287c293648eee4a930f6e1c975506dae459ef406d8fb048d826dfadb580a0a096225bab82ddbf3a0531e3cd0cc74dbf8331ce931a6754e8ffef9dc8f6e75032489384f1cb5a794d721d76975de9fd68a1ba44791d387d3661adffee897489b3c5c28b01a3ddf51149b4308351aabf93cac79c7005ba06795384f7efb4a788c901464ac5fda6a73c977d566e3a7bf84e1bb9b4f8fd9d46c183d54db6e01b8d91910c9182567788a3f85b70c22f1384351e3bd96f391b218dfdf5bca21a72807400000004004401a200ba00f8da83f58243765fdede9f6101fd86bd136a12ed5dff86bcc275dbde33fb6c91960123b7bb772a6217eaa99128efa4d38aedf71b9ddc0a71eeb76385a5e1d883e7c2dc93a0a054a0d06c1ba202a859cb55913400c5a435eb51137bcca563b4dc530a430a55d611d56915fa6d0cbcb8e16c42d63336d7e173cfc7949a1f568fb24fb361335fd146b79d0a395ae5a23d303c3b80d3d6d458f02ec2ccec360f0000d600bd00b542d27c5cfcb3c119fa8dacd0209113881e4c4a17bbd1876cb3ed4769dafae9cdcbc67c334c4ae0c0fcd3fec49001996c8a9adf154a939bc366ab9d020689be26f9aca860a7487dae318f1d719a8980e367cc576e7b7450a3a63e1b1fa075de4e379be0b6af7d49020d71044892e7fa1e9fa89a20fff24b64fae905346f5c795fdbafc9d19de14f17f13dc1e5ce209d00bb7e2d6684edf89b99eac7d7ae2f20d6b15c5dde0796cb8742bcdf12dd16f991013a1eb209d671849534b6a28df4cc1077eff7411915b28728ece32aa751bfd2940000"], 0x31c}, 0x1, 0x0, 0x0, 0x4}, 0x88d4) read$auto(r0, &(0x7f00000000c0)='f@:\x00', 0x2) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tracing_total_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/buffer_total_size_kb\x00', 0x240100, 0x0) socketpair$auto(0x1, 0x5, 0x3, 0x0) openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/features/freeze_notification\x00', 0x40000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) shutdown$auto(0x200000003, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 21m46.443193404s ago: executing program 2 (id=483): r0 = socket(0x8, 0x80005, 0xb) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/net/dummy0/name_assign_type\x00', 0x0, 0x0) r1 = socket(0x0, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001200)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="57000000000805de05a9959d7bf993d3defb4da2c843710600fb4fc674b3b80c7756a6b6eed9222f28055ce1839a28609b57967703e588f12d9ae6fecb01c7899496702746d4047e30df63aa299724a32f7c3e1507e7def1a16095a6e4ca8475196d3cc907000000d62d7c8146c0e1d2b50dcc0ba76a03a07b2b97027db5d2721143ed2c658eed016c0830a4f45e6fda6a58d85001aaae53c2", @ANYRESDEC=r0, @ANYRES16=0x0], 0x1ac}, 0x1, 0x0, 0x0, 0x4}, 0x40004) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000004c0)="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", 0x407, 0xa505}, 0x800}, 0x7, 0x4008) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) poll$auto(0x0, 0x5, 0x108) (async) r2 = io_uring_setup$auto(0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) add_key$auto_KEY_SPEC_SESSION_KEYRING(0x0, 0x0, 0x0, 0xfffff, 0xfffffffffffffffd) (rerun: 64) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x800, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f0000000240)={0x5, 0x0, "de6208d69c90e1beedda1aa1796c4536", "1aef09f057b8e6b77c3fa8db259056a2", "9649efcec118d7563fb34bf487b9bcf832fed7b3dee7edc8c7a06ac8ed714648", "ef86743334004e34ded7f4f918c1ae2728d423746ae9388e833447898844020468166e720aa18e9e8bf939fb69fa37f8cb1a3723933044e12e7aca4980b6dd6a49ec893b4a14c1870013dce4ee7bb313", "1bdd1bd1e7c93fb23eec09c0fd894efd", "cfc574487a9ea54410cef23d4fe7ca3e78d158c240515f8735c415b6011c4201335554d8a56f185263367dea284aa2cfd1186f7918f367d0329159d3cd2419a890b4840be7dda3125c4f826a8ee0ef22", "c40316b50fd844ca966e25bae3ea9e0485911ca98dc015b6353fc8fdb75ed727190a9b59c895c6fd3f4857dd0a53acc9fc8eaaf65594d77abfb1a6b0788a2ac012a27f566ac119dff3c275c8e64a87699577b2ad1a822a23d98d5dcef24a81ad1005f9c69ebdea766c9795a8214e6804939ac95778ab3f25c3c4da43984d0b0f"}) (async) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r4, &(0x7f0000000a80)="632d1bfe59507ac36d16baef6176e669a216aae182fffffffe00000e000000000085c6d2ce6afc275471fbdecb0d525f05adb60fc17ff961e5aa3293551cb012c654f5299b468a0a586256b04de1a51b8bbf0856f10259061e18b9a1433240ada99a9f059958de3fca046527beb86c3e219cbe5a15bf601c80910aa9a82e5aeb7d8e612428ab0794e9eb31b87b856add103ee9f510d9dee690907e18e6448989417ccccdf213d7f23601bac3b8c431aba5d6d73fa668cfbc81ec0bffb738d5e8dc77351953c98fe1593e5e05ddf9576c9b9e3c84a7404c2434f3c93f", 0xa8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async, rerun: 64) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0225020000400800030080"], 0x24}}, 0x400d1) (async, rerun: 64) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x20040004) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) (async, rerun: 32) r5 = openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000b80), 0x8c400, 0x0) fcntl$auto_F_SETSIG(r5, 0xa, 0xfffffffffffffffd) (async) r6 = socket$auto(0x80000001, 0x3, 0x6) (async) syz_clone3(&(0x7f00000008c0)={0x54011100, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)=0x0, {0x1b}, &(0x7f0000000700)=""/134, 0x86, &(0x7f00000007c0)=""/146, &(0x7f0000000bc0)=[0x0], 0x1, {r2}}, 0x58) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000940)={{@raw=0xf9, 0x8, 0x7, 0x347efbe4, "b2f8d773b5c4191d664d02bb3d50d2251594054f413076476178b953336e1861d7ff892645b75da8b3466415", @raw=0x7}, 0x8, 0x6, 0x8, @inferred=r7, @integer64={0x684d, 0x8, 0x1}, "ed90bcf539aba79dcb0e0a9eb1a36e85a8a0752ee9529c6f8abd3c8766e50ce05d8c74c28e03f3a34a2680066b508e33f62069664df3b9998fd4671a4780ca86"}) io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r5, 0x5, &(0x7f00000003c0)="8c39cbf586b66551316ae80660a393eda0a750b350f635b481f26b35df049a5eca960685dabe21e6d5dc85a9c9f59bc93ad7453312f3b76b84fcc3838f1fc724c76f2e92c700c2b5fb9695120423f829afd703269ec5db72ac2fa345577dec238e36c999fcf159dcb938ac488943367607b6261824ea0c1fba67ee5c72c615b27e24900779b559", 0x5) (async) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/block/ram7/queue/iostats\x00', 0x0, 0x0) write$auto(r8, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) clock_nanosleep$auto(0xfffefffe, 0xb, &(0x7f0000000340)={0x100000000000002}, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x6, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (rerun: 64) 21m45.826089085s ago: executing program 2 (id=484): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x800, 0x0) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) chroot$auto(&(0x7f0000000080)='}[,&*}\x00') r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) unshare$auto(0x8000000) shmget$auto(0x7, 0x8000000000000002, 0x76f1) write$auto_console_fops_tty_io(r0, &(0x7f0000000000)="c80d1b5d399b44", 0xfdef) r1 = clone3$auto(0x0, 0x6) ptrace$auto_PTRACE_GETSIGINFO(0x4202, r1, 0xfffffffffffffe00, 0x7) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/036/001\x00', 0xa901, 0x0) socket(0x11, 0x3, 0x9) r2 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000140), 0x123003, 0x0) ioctl$auto(r2, 0x6f41, 0x38) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000880), 0x2400, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim2/ports/0/pp_hold\x00', 0x2201c3, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) ioctl$auto(r3, 0x541c, 0xffffffffffffffff) 21m44.503920638s ago: executing program 2 (id=487): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x82542, 0x0) write$auto(0x3, 0x0, 0xffd8) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) socket(0x22, 0x6, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r1 = socket(0x2, 0x1, 0x0) epoll_ctl$auto(r0, 0x5, r1, 0x0) r2 = epoll_create$auto(0x7) epoll_ctl$auto(r2, 0x1, r1, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/netfilter/nf_log/6\x00', 0x8000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) unshare$auto(0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x62e, 0x5, 0x3, 0x12, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(r4, 0xfffffffffffff000, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) open(0x0, 0x4242, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x5452, 0x0) write$auto(0xca, &(0x7f00000001c0)='\x04\x1d\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa4Cn\xb2./jn>9\xd2\xdb\x88\xf4\x1aVj\x13j\xe1\x96\xf7\xc2\xd3qm\xe9\xb4\xe4\xfc1v\x19\x1b\xfd)/\xf3\xa1\x92|\x06|\xd0\x82\x93\xa5\xa35if\xd0\x8e%g,\xc5l\xef\x87\x19\x17\xb0\xe1s\xf6U\xc0\x90r\xc5\xc8H\xa3\x9d\xce\x98\xe7\xb1B:\x179\xdc8\xa8)6O\x81\x84\x96\x970\xcd\xbc\xc2\xf9\x1c \x15\xce\xda\x86\xff-\x80\xf5jMj\xda\x8f\x03EO\x00\x80\x00\x00+v\xc9\xb8\x00\xcf\x94_\xa7\xadV\xc9\x7f;1R\xa0\x7f\xbe\x1e\x83\an/w[i\th\x9c\xb8\xd1\xed\xba\\\v\xe1\v\x81\xcc\xba\x03-N@ \x14\x1e\n\xe9g\x9fF\x05V\x9b\xc1\x9f\xf1%\x9c\xba\xf9\xb4\xa8\xd4\x05G\xf6\x82\xf3m\xe6V\xb2\xa0\xf9K\x15\xcc_H\xce\xfd\xe2\x88\"\xe0\xd5Ld\x7f\x1c\x90^\x8d%\xb4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00v\x86\x11\x97^\xd6r\xc0\xca\x00\x00\x00\x00\x00\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) landlock_restrict_self$auto(r2, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'pimreg1\x00'}) 21m44.091389657s ago: executing program 2 (id=488): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) setreuid$auto(0x4, 0x8) futimesat$auto(0xda, 0x0, 0x0) r0 = socketpair$auto(0x9, 0x3, 0x4, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x2000000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r3, 0x0, 0x39b8) 21m28.351796305s ago: executing program 32 (id=488): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) setreuid$auto(0x4, 0x8) futimesat$auto(0xda, 0x0, 0x0) r0 = socketpair$auto(0x9, 0x3, 0x4, 0x0) fcntl$auto(0x3, 0x4, 0xa553) swapon$auto(0x0, 0x4) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f0000000000)={0xffff92b5, 0x0, 0x9, 0x3, 0x0, 0x80000000000000, 0x80000000, 0x0, 0x4513, 0x9, 0xffffffffffffffff, {0x7, 0x6}, 0xfffffffc, 0xbfa, 0x9, 0x10, 0x0, 0x2, 0x8, 0xff, 0x10000, 0x100000001, 0x4}) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) mmap$auto(0x0, 0x2000000000000004, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r3 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r3, 0x0, 0x39b8) 7m21.993057866s ago: executing program 4 (id=3400): socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x7d, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) sendfile$auto(0x1, 0xffffffffffffffff, 0x0, 0x8fb5) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdd, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000840)="13") ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 7m21.687527303s ago: executing program 4 (id=3403): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000000)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x8000, 0x20000000000e31, 0x40000000000a5, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000100)={0x0, 0x3c, "3c472d82985a6d8a7758f94e538f5e778acad8a5ed692781c02d5ac4a9828854d97ff00487cce6da6ccfd50b68fc2cfe005c66bcefe3b415e6fa3540acc68328", "8a426eb5b7e0ea2e2f7039affc57c4e415250f4c31da3226515bf5a54075ef883c5fce5e5e4e312f8f2fbe4f48f89499040ac4691d6e930b6fe46ddcb257e72cfecbaa8ab21f9da75eb1c4a40bd74332", 0x7, 0x6, "e871062511110b20c6d147cea85d544bd0924f21a95f277ca86339e4fbe8f2b0dc5ebadf39b5f87d99d26106811b6645a80701e9dce265626d863317b7bc0e10"}) r1 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x2641, 0x0) msync$auto(0x7, 0xfffffffffffffffb, 0xf53) write$auto(r1, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0006, 0x17) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) mmap$auto(0x1, 0x8d4, 0x6, 0x6f52, 0xffffffffffffffff, 0x8000) 7m21.052509318s ago: executing program 4 (id=3406): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x4, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) pread64$auto(r0, 0x0, 0x8, 0x10000000000) r1 = open(0x0, 0x181080, 0x98) r2 = open_by_handle_at$auto(r1, 0x0, 0xc) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) io_uring_enter$auto(0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x0, 0x6) getsockopt$auto_SO_NO_CHECK(r2, 0x8, 0xb, &(0x7f0000000000)='\x00', &(0x7f0000000180)=0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) madvise$auto(0x0, 0x200007, 0x19) mprotect$auto(0x0, 0x806121, 0x6) prctl$auto(0x241, 0x3, 0x0, 0x0, 0x4) ioctl$auto_USBDEVFS_RELEASEINTERFACE(0xffffffffffffffff, 0x80045510, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00\x0e\x15F\xf7\x1a\xd1K+\xedy\xc6\x9bb\x94\xb4^\xc2\x83%\xfbw}\xfb_P\"\x19\xdfi\xe9hA|Q\x8a_F\x04:Q\x90\'\x06', &(0x7f0000000140)='nfsd\x00', 0x10000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100253d7000fddbdf25478b200ce4ae2532040089800c0c02000600000000000800"], 0x28}, 0x1, 0x0, 0x0, 0x804}, 0x8880) socket(0x18, 0x5, 0x0) mount$auto(0x0, &(0x7f0000000740)='}[,&*}\x00', 0x0, 0xfffe, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\x00\x80\x00\x00\x00\x00\x00\x00j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r5, 0x0, 0xa2b0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x3, 0x7fe, 0x8c92) madvise$auto(0x0, 0x60c67e17, 0x15) madvise$auto(0x0, 0x200007, 0x19) 7m19.432838994s ago: executing program 4 (id=3410): pwrite64$auto(0xc8, &(0x7f0000000240)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x013\x00\x00\'\x03\xf2\xff\x9e\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcd^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xd7\x02\xd2\xe7?\xaaw\x89\xea\xb1\x1d\xea\xa8\xb1\xaf\xdc\xdeS\xe4\x88\x16\x8eu8\x7f\xa7\xe5\xbb\xf8\v \x90E\xd8\nw,S\xf5\x00\xd8\xda\x16\xb6C\xe6\xc0j\xae\x19\x1eU\f\x18\x14 \x05\xd9:\'\xf5\r\xd8C\xc7,\xe1\xa9wzVf\xa4\xfcM\xb87\xa5.\x14\x81mgI\xb2\xbc\x91o\x1c\xfd/\x88\xa0\x02n\x98C\xd3\xfcY\xf4\x98\xb3-\xec\x87\x1f\xe5\xdcn[\x19\xac\'\xc86s{ \x0f', 0xfdf2, 0x3a) 7m19.169807327s ago: executing program 4 (id=3411): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0xffffffffffffffff, 0x4b47, 0x1) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r3 = io_uring_setup$auto(0x1, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(r2, 0x89f0, r1) r4 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(r4, 0x40a85321, 0x38) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2, 0x80002, 0x73) ioctl$auto_OTPGETREGIONCOUNT(r3, 0x40044d0e, &(0x7f0000000380)=0xfffffffc) r6 = socket(0x2b, 0x1, 0x0) r7 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/usb/usbmon/30s\x00', 0x0, 0x0) read$auto_mon_fops_stat_usb_mon(r7, 0x0, 0x0) swapon$auto(&(0x7f0000000340)='nl80211\x00', 0x39c) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000020c0), r5) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(r6, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002140)={&(0x7f0000002100)={0x24, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x9}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x7f}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x800) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r3) lstat$auto(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x8, 0x10, 0x1, 0x1f3, 0xee01, 0xffffffffffffffff, 0x0, 0x772, 0x2, 0x1000, 0x6, 0x2, 0xe, 0x9, 0x800, 0x6, 0x7f}) sendmsg$auto_NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000002040)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002000)={&(0x7f0000000540)={0x1a8c, r9, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_SCHED_SCAN_MATCH={0x27d, 0x84, 0x0, 0x1, [@nested={0x30, 0x93, 0x0, 0x1, [@nested={0x4, 0x91}, @typed={0x7, 0x82, 0x0, 0x0, @str='/{\x00'}, @nested={0x4, 0x157}, @nested={0x4, 0x75}, @typed={0x14, 0x3b, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @nested={0x4, 0x6a}]}, @generic="97445ef6b3e6a374933d80bce00ce9e8e87cf4c22cb9abcbad98416836842f5506dd9a663ea468d40f2a9dbd72810cb47580923ac3da52644970de86e1987ff7e365fe3f82c831e5769a06acf62082905d5dcf67edc2a1eb01816bbccc4f5c295ce3ae83bd0980be482743aecaa5dffaaba5f5551faa6317a529d7c5932a8b2849643399320d8fb4bfb7f15731", @generic="f62efe2841", @generic="fccf039bf6dd59356f721755b54c7f0b1acda58566f5ae", @nested={0xe0, 0xf9, 0x0, 0x1, [@typed={0xdb, 0x112, 0x0, 0x0, @binary="8209ff0a87e23395e307539cb95c6f27305f16431c670d184c34e8632a54e4e225321c9898fcfac1f315673be59740199169feed1fb51706c6efa48f223eb8e63747b6c933ea087cda3bdce453b9a020e5bdce2bda37ab2ce25d2f281f6d325493f8157e3afeb01a8e364fc8728998bbf4af3943f70f8b981d0e0b72726de9ad83c3e84fb4e19f2e4ac240f1d0b293b8b2c5c2130e602ad1e25b796675173fcb7e55e32314832637bf9b837f03d35156eb940237d7bcc89db1eaa26c221104464758a0b6e42a2545baee7b46a9096dc9332f7904765aa2"}]}, @generic="ba32dead46c4df73fbf267db0d35c9ed66b2abe232b048671f961c733fd1d9308f98800edf7314626d84d612a08eb35901d389d7b55dee8114c518ba4b090b0471cfa99c55a213b4a9af6ca114614b42b474df9f390c6584d13a7ee21a02d1888860920f2eab934722945a7e77baaacd84856d27cb840a1afed396f5292ac43c70409843605a2ed7c3d71b010a77d50c44358a9c057d4a2121c648f1f4e6eb4f45ca479936fe8d3383ad5b128ff870d255b78d111943ef2c", @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @NL80211_ATTR_SCAN_FREQ_KHZ={0x10e8, 0x124, 0x0, 0x1, [@generic="974b5a99b37c3d9d36e9bea73b25651531c0aa58c87c", @typed={0x8, 0xf2, 0x0, 0x0, @fd=r0}, @generic="c9723a5240ce3525fa97dc32f81428626b331ed8ba3c9d9a7a952009d0dea1ea9917b587368df55aacd8904212c58b7293e935f0d6b96f46a109ff3dacd2b87045ad1e6818b8c5e009aa43f37742c440fb0bda220141d3459333fb49231cc6c25660e1575d811a64062fbbc69ecc09b2366908b025750cd346f5e98879a660c76651922cd78390f50afe1aee21526f50529852f49b8683b4aa6d727b0cab3b4556ef5afb3e60cd2399ff3f3d3689022d8935007db944b7674f4e", @typed={0x4, 0x6d}, @generic="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", @typed={0x8, 0xcc, 0x0, 0x0, @uid=r10}]}, @NL80211_ATTR_AP_SETTINGS_FLAGS={0x8, 0x135, 0x4}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0xf7, 0x129, "211ddda723cf6a399960e53b10880a8eb3712f593983018bd12d37fce015a68b157a2d5d638c6f47c977d2aba07c5185a4d27eddeb6f212b04975509e03311c38579dc83a77441d4c273ae762676abc746a9fcc1fc90e2391bb7c9db818d8cba2d51ad26f30768a922020bb68d5ca632b5909d886be981381e7d974c4f498313be59e4ab2c4f22fd31046abf187f430783310435982e495a2be8da5f449a491127e1c29cf88682c56baea41df41906f76da7f6fd861b2bbf9f13ff1c056280b9f76fdd700225fc1490a192ac66c284cb6329840ccc798addef289c8177f44fe02e836fdc69625508bb25a85cd4bdeb37e853ce"}, @NL80211_ATTR_PROBE_RESP={0x60e, 0x91, "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"}]}, 0x1a8c}, 0x1, 0x0, 0x0, 0x4040810}, 0x24040004) setsockopt$auto(0x3, 0x11e, 0x1, 0x0, 0x10001) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r3) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r5, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x120, r11, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x46, 0x115, "81d3691f3953c51848baec7d359a2c428184943a1c1138ed7379b778f8b412a8798c78d8a3a4238b851040b2e700380df9bdac498c7a553902389887ac40a69d7529"}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x400}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0xb0, 0x131, 0x0, 0x1, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_PMKR0_NAME={0x8b, 0x102, "453d542ca0eeb1f87928d15e77261f9b3aa21c9e7a81aa2b8642e4c900e1e7173bc5f0291a4f8f95eef2ddde4d51b4eba43fb54e85e810134fa689b7d70642addc7f6fa4e084fc949b7c0293743cc010e8418ffc030c4d31a219dfcdadc787d70d20fee4b1e7942c3077b72bc336064d481bbb7d2e33e9405288db209f6c5ad3fbcd868cca6f25"}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xe5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xff}]}, @NL80211_ATTR_TDLS_SUPPORT={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 7m18.472652251s ago: executing program 4 (id=3413): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) r0 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/options/event-fork\x00', 0x2000, 0x0) read$auto_trace_options_core_fops_trace(r0, 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r2, 0x0, 0x2000004) mbind$auto(0xffffffffffffffff, 0x2091d2, 0x4, 0x0, 0x6, 0xfffffa73) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/amidi2\x00', 0x80, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000300)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x18, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) unshare$auto(0x81) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$auto(r4, 0x5, 0x0, 0x5) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) 7m3.043052279s ago: executing program 33 (id=3413): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x67e) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/time\x00') socket(0x2, 0x3, 0xa) r0 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/options/event-fork\x00', 0x2000, 0x0) read$auto_trace_options_core_fops_trace(r0, 0x0, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008012, r1, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r2, 0x0, 0x2000004) mbind$auto(0xffffffffffffffff, 0x2091d2, 0x4, 0x0, 0x6, 0xfffffa73) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/amidi2\x00', 0x80, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DROP(r3, 0x40045730, &(0x7f0000000300)) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/nullb0/queue/nr_requests\x00', 0x2, 0x0) write$auto(r4, &(0x7f0000000200)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6\xd5\xc3H\x15I=\xf5\xfb\xa0\x9a][LIU\x9d0\xfb0\xbe5\xbe\xa8\x89\xc2\xc2o', 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002140), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000002200)={0x0, 0x0, &(0x7f00000021c0)={&(0x7f0000002180)={0x18, r6, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000) unshare$auto(0x81) socket$nl_generic(0x10, 0x3, 0x10) io_uring_register$auto(r4, 0x5, 0x0, 0x5) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) 5m5.431771153s ago: executing program 3 (id=3759): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) r2 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000004080)='/sys/kernel/debug/zswap/pool_total_size\x00', 0x2, 0x0) read$auto(r2, &(0x7f0000000000)='#.&\x00', 0xc1) pread64$auto(r1, 0x0, 0x6, 0xbdc2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = ioctl$auto_TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, &(0x7f0000000140)=0x9) write$auto_nsim_pp_hold_fops_netdev(r3, &(0x7f0000000300)="9ede2e17a8f3480fc694bc1a0c4be61db1c21e0a266bbe39e87f14ff8af0fef9f9145eea2f0607cf2e7658522e933291db723f28420aabef66a7c638fd1a6a54f36148535a3a43f680aaa707bf125ac159e31329c6afb5511b7937cb6453ea40a2cc08b0b51239932512bb10b03897cfa5b17624d1952cab358f62b2fff48ad984b33f5e72aa15ebac362929928102ed0945c1fca5c871031aaccb1132e5037a8132de1055702bd53852df65f7c64402c8eba2b0a19e4468ace346945cfa8ec3bf2ebc995aa68e6760", 0xc9) write$auto(0xffffffffffffffff, &(0x7f0000000000)='3\xc7\xff\xff\xff\xdd\x00\b(Ks\x0f\x87|P\x11\xd1li0\x89\x85\x90QM\xd6wfF\xf1x\xb3;c\tP\x03\x84\x97\x99\x83\x97\x81:\xf3\xa3o5\xc5\x86\xed\xa4\x18]\xa3\xc9\x0f\xff\xdak\xb0m\xe1U\xb3\xa2\xee\xdcTJQO\x98\xc8w\x8c\xe7\x00\x00\x00\x1dj\x1e\xebQT\xdd\x9b\x00'/101, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="72724dfa", @ANYRES32=r4], 0x1ac}}, 0x40185) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0xd92a, 0x9}, 0x7}, 0x3, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000ec0)=""/4096, 0x1000) fremovexattr$auto(r0, &(0x7f0000000040)='!&*\x00') 5m4.385588811s ago: executing program 3 (id=3762): pwrite64$auto(0xc8, &(0x7f0000000240)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x1f\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00,\x00\'\x03\xf2\xff\x9e\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcd^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xd7\x02\xd2\xe7?\xaaw\x89\xea\xb1\x1d\xea\xa8\xb1\xaf\xdc\xdeS\xe4\x88\x16\x8eu8\x7f\xa7\xe5\xbb\xf8\v \x90E\xd8\nw,S\xf5\x00\xd8\xda\x16\xb6C\xe6\xc0j\xae\x19\x1eU\f\x18\x14 \x05\xd9:\'\xf5\r\xd8C\xc7,\xe1\xa9wzVf\xa4\xfcM\xb87\xa5.\x14\x81mgI\xb2\xbc\x91o\x1c\xfd/\x88\xa0\x02n\x98C\xd3\xfcY\xf4\x98\xb3-\xec\x87\x1f\xe5\xdcn[\x19\xac\'\xc86s{ \x0f', 0xfdf2, 0x3a) 5m4.228209457s ago: executing program 3 (id=3763): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) fanotify_init$auto(0x5, 0x0) io_uring_setup$auto(0xf00, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x15, 0x5, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x0, 0x3, 0x5, 0x10001, 0x400000000003, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) unshare$auto(0x40000080) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x8040, 0x0) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) sendmsg$auto_NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="006adab485b2", @ANYRES16=0x0, @ANYBLOB="00082cbd7000ffdbdf250c00000005001a009c00000006000a00030000000500080086000000140004006970365f767469300000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x100400c4}, 0x0) madvise$auto(0x0, 0x20499d, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0x204000, 0x0) pread64$auto(r1, &(0x7f0000000080)='/proc/self/loginuid\x00', 0x5, 0xe3d) mmap$auto(0x0, 0xe000000000000000, 0xe2, 0x2000000009b72, 0xffffffffffffffff, 0x8000) socket(0x1d, 0x3, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) getpgid(0x0) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) syz_clone3(&(0x7f0000000300)={0x10120000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto_SIGCONT(0xffffffffffffffff, 0x12) 4m59.711927938s ago: executing program 3 (id=3776): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) fanotify_init$auto(0x5, 0x0) io_uring_setup$auto(0xf00, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x15, 0x5, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x0, 0x3, 0x5, 0x10001, 0x400000000003, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) unshare$auto(0x40000080) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x8040, 0x0) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) sendmsg$auto_NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="006adab485b2", @ANYRES16=0x0, @ANYBLOB="00082cbd7000ffdbdf250c00000005001a009c00000006000a00030000000500080086000000140004006970365f767469300000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x100400c4}, 0x0) madvise$auto(0x0, 0x20499d, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0x204000, 0x0) pread64$auto(r1, &(0x7f0000000080)='/proc/self/loginuid\x00', 0x5, 0xe3d) mmap$auto(0x0, 0xe000000000000000, 0xe2, 0x2000000009b72, 0xffffffffffffffff, 0x8000) socket(0x1d, 0x3, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) getpgid(0x0) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) syz_clone3(&(0x7f0000000300)={0x10120000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto_SIGCONT(0xffffffffffffffff, 0x12) getpid() 4m56.634069567s ago: executing program 3 (id=3784): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x400c000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0xc8, 0x400454ca, 0x5c8d) (async) ioctl$auto(0xc8, 0x400454ca, 0x5c8d) shmctl$auto_IPC_STAT(0x4, 0x2, &(0x7f00000002c0)={{0x5, 0xffffffffffffffff, 0xffffffffffffffff, 0x4, 0x0, 0xd3, 0x4}, 0x1fee, 0x6, 0x7, 0x881, @raw=0xe35, @raw=0x7, 0xfff7, 0x0, &(0x7f0000000000)="29d7e915049144cd856ab60c8ab6b140c49dee322a78620d904aeea6a5b2935dee84dc69f39a63a69df8320563fc49605113024ea26f3fb9bd8a9f9f8c7fe042a43e8d3fd72b745c4529ab4967f75cc5d4758fc846539b886de0287be4244754e69ae88c5e94632731d690b717293293e02a67df35", &(0x7f00000001c0)="80c9e4189422a4676fd06ebd2958adace3245aa8690c630e3bfbd4c3cd5e2b76766114cb75e2eaad41e403af9ff9d02501979302a6e0abfd02a32913c32847feada0ae151bda72d151cbefe01205b2e54aaa4c7e2ee0027d7db385962f6a0df40b4db529efe299df224161f11c7352e5b3f9d28c235cded0fa427df2a24db533d95e75d2466bb0e10bf18cd1d3e744aaa4a1b6d33b80f1693ab09203df15d2c2caa8358f106cae624d816eff74668ff35a73e95a5339424d44dc515f867aed817a6e9cfaddeed488208b337ce123420fa595"}) socket(0x28, 0x4, 0x2) (async) r1 = socket(0x28, 0x4, 0x2) socket(0x11, 0x3, 0x2) (async) socket(0x11, 0x3, 0x2) getpeername$auto(0x3, 0x0, 0x0) (async) getpeername$auto(0x3, 0x0, 0x0) r2 = pipe2$auto(0x0, 0x80) msgctl$auto_MSG_INFO(0x800, 0xc, &(0x7f00000000c0)={{0x7, 0xee01, 0xffffffffffffffff, 0x1, 0x2, 0x7, 0x4}, &(0x7f0000000040)=0x1, &(0x7f0000000400)=0x63, 0x6, 0x1, 0x3, 0x1, 0x7, 0x5, 0x10, 0x200, @inferred, @raw=0x5}) setfsgid$auto(r3) (async) r4 = setfsgid$auto(r3) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000003c0), r1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x22, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x189400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000140), r6) sendmsg$auto_CTRL_CMD_GETPOLICY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000000de76fd3a855c62b5fa907c06f1c57a67375d027a4cbb580667cc6e75176aa5b71ea5d6a80bfbf415b88794a7bf6ba3e54e041098e130cba4c69", @ANYRES16=r7, @ANYBLOB="200029b57000fddbdf250a000000", @ANYRESDEC=r6, @ANYRES32=r4, @ANYRESHEX=r6], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r8 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) ioctl$auto_MON_IOCX_MFETCH(r8, 0xc0109207, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x20882, 0x0) sendmsg$auto_NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00002abd7000fddbdf251e000000070002002d2800000800210000800000250029000000000004002880028cf2325ae41aa9c7b0f024964dd67ac981d720eafcf4f23dc24b90801b11ecb2e2b0a301b414137e1da414e389868c932e5224bbc89774e2b19866aeb372903275849bc37b84bc2be8f4f171924d581f56d516cff5938b29cf7af85c1178a880307fcb250038df793256d217f74f32be1702d122af96f63382b43b8765e67801f047e81571ba0b6cf520f8b16dac9459c46a4452894b00a10ab0518bfe5f77ca4e0643ef821b405187d4ad5aff50becf97179c3bddea35db17a9efe35341beecb6b89ae6427f7a0000"], 0x30}, 0x1, 0x0, 0x0, 0x8010}, 0x0) statx$auto(r2, &(0x7f0000000000)='./file1\x00', 0x4, 0x7fffffff, &(0x7f0000000140)={0x9, 0xf, 0xb476, 0x0, r0, r4, 0xffff, 0xb9, 0x3, 0x7, 0x3, 0x80, {0x7, 0x10000}, {0x8, 0x9}, {0x10, 0x7}, {0x5, 0x1}, 0x8, 0xfffffffc, 0x1, 0x401, 0x400000000006, 0x7, 0x6, 0x2, 0x40, 0x6, 0x0, 0x9, [0x61, 0x10, 0x7fffffffffffffff, 0x81, 0xd, 0x8001, 0x5, 0x0, 0x9]}) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000003c0)={0x4, 0xa15f, 0xa826, 0x0, 0xff, 0xffffffffffffffff}) (async) ioctl$auto_XFS_IOC_ALLOCSP(0xffffffffffffffff, 0x4030580a, &(0x7f00000003c0)={0x4, 0xa15f, 0xa826, 0x0, 0xff, 0xffffffffffffffff}) ioctl$auto_XFS_IOC_ALLOCSP64(r2, 0x40305824, &(0x7f0000000600)={0x2, 0x1, 0x6, 0x6, 0xe, 0x0}) msgctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000440)={{0x8, r0, r4, 0x6, 0x3, 0x4, 0x541}, &(0x7f0000000340)=0x80, &(0x7f0000000380), 0x20000, 0x2, 0x7, 0x100000001, 0x100000004676, 0x75e, 0x6, 0x400, @inferred=r9, @inferred=r10}) ioctl$auto(0xc8, 0x800454df, 0x5c8d) (async) ioctl$auto(0xc8, 0x800454df, 0x5c8d) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) (async) bpf$auto(0x5, &(0x7f0000000100)=@task_fd_query={0x2, 0x2, 0x4, 0x0, 0x85, 0x7, 0x9, 0x6, 0x8001}, 0x101) 4m55.294087569s ago: executing program 3 (id=3787): mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x100000000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB='x\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r0, 0xc0104d08, r0) (async) socket(0x2, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001440)={'ip_vti0\x00'}) bind$auto(0x3, &(0x7f0000001480)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0x67e) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (rerun: 32) map_shadow_stack$auto(0x2, 0x3, 0x1) (async, rerun: 32) r2 = fsopen$auto(0x0, 0x1) (rerun: 32) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r2, &(0x7f00000001c0)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b4241ee46870ca4b468af9c39ee2011", 0x3}, 0xfffffffffffffffd, 0x15, 0x4005) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) (async, rerun: 64) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1) (async) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async, rerun: 32) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) (async, rerun: 32) set_mempolicy$auto(0x6, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 4m40.128201401s ago: executing program 34 (id=3787): mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x100000000) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/mtrr\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB='x\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r0, 0xc0104d08, r0) (async) socket(0x2, 0x5, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001440)={'ip_vti0\x00'}) bind$auto(0x3, &(0x7f0000001480)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x9}, 0x67e) (async, rerun: 32) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (rerun: 32) map_shadow_stack$auto(0x2, 0x3, 0x1) (async, rerun: 32) r2 = fsopen$auto(0x0, 0x1) (rerun: 32) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) process_madvise$auto_MADV_PAGEOUT(r2, &(0x7f00000001c0)={&(0x7f00000000c0)="6bc435df379d38af2070e83ab820b0b15150be99d3063202de267667bb5fa15ce74ac0fb440ea2015d190f8ebd6e6427cb9a59d3cad3d2819c4e21caabd133d6cccdbae60f4ae89d62159cdb0cd02b6c24f2f4b16912ffec395de0e2a131d6047ed554bff8eed5782198b7615f59bd171d433765771e3ebe9ba010b66a31cb92dc09aab37592b5f66bbc92184733254768720007c7d6097032cea9fe5d18b38b4598956717fe92912375382c9e061b4241ee46870ca4b468af9c39ee2011", 0x3}, 0xfffffffffffffffd, 0x15, 0x4005) (async, rerun: 64) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 64) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) (async, rerun: 64) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x1) (async) select$auto(0xd, 0x0, &(0x7f0000000400)={[0x8, 0x200000000005, 0x7, 0x7, 0x0, 0x80000004, 0xc, 0x6, 0x8fc, 0xb80, 0xe34c, 0x4009, 0x3, 0xfffffffffffff954, 0xfffffffffffffff8, 0xfff]}, 0x0, &(0x7f0000000080)={0x800000000001ff, 0x401}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async, rerun: 32) write$auto(0xffffffffffffffff, &(0x7f0000000180)='7\x00\xe6\xeaA\r\nW\xa6&\xff\xff\f\x00\x00\x00\xff\x00\x00\x00\x00\x00\x1f\xde\x00\x00\x00\x00\x00\x00\x00', 0x9) (async, rerun: 32) set_mempolicy$auto(0x6, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 7.653594667s ago: executing program 0 (id=4420): r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @local}, 0x6d) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @empty}, 0x51) sendmmsg$auto(r0, 0x0, 0x9, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x1, 0x9, 0x7, 0x7, 0x0, 0x5, 0xffffffff, 0x2000000000210006, 0x0, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x8, 0x3, 0x105, 0x7, 0x0, 0x0, 0x10000005, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200000000000000]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) ioctl$auto(0x4000000000000c8, 0x400454cc, 0x6f) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x0, 0x28, 0xfffffffffffffffc, 0x70) write$auto(0x3, 0x0, 0x1) write$auto(0x3, 0x0, 0xfffffdef) setresuid$auto(0x0, 0x0, 0xee01) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = fanotify_init$auto(0x5, 0x0) fanotify_mark$auto(r1, 0x205, 0xa, 0x4, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) socket(0x10, 0x2, 0x0) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bdi/43:256/stats\x00', 0x20002, 0x0) 7.070134093s ago: executing program 1 (id=4421): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) pselect6$auto(0xd, &(0x7f00000001c0)={[0x100000001, 0x5, 0x7, 0x50b7a0a5, 0xffffffffffffffff, 0x64f4800000, 0x3, 0x8, 0xc1, 0x8, 0x5, 0x6, 0x400000000000, 0x2, 0x9, 0x80]}, &(0x7f00000002c0)={[0x7fff, 0x12000000000000, 0x7f, 0x9, 0x2, 0x9, 0x5, 0xfffffffffffffff9, 0x3371, 0x5, 0x1296, 0x10001, 0x6, 0x4, 0x1, 0xe8]}, &(0x7f0000000340)={[0x8001, 0x0, 0xa8, 0x1, 0x0, 0x2, 0x93b, 0x10000, 0x80000000, 0x7ff, 0x6, 0x2, 0xffffffff, 0x7, 0x1]}, &(0x7f00000003c0)={0x4, 0x58a4eea0}, &(0x7f0000000400)="75280fae762c59d56524d66f7b76006458d96291aabe75acbc135453a5325cd21f1776c4bb0c62a1ba25933c7d5a39658d5bcfc17acecbec86adfb0693027c4540c20d2a6919634916f737534f04a343b1e6cd972ab5a69dc8aa0bcf918b2955cc90a560d4bea1eb68f970c823f7a9a1cbdf25c2e3b979a57779b74a9b353c2a2768bc62f04466aabffebf3a5cf7e5eea709fbfdfc0a0efe383e726b57e4d15177") sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x83, 0x2}, 0x20, 0x0, 0xe) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) 7.025926849s ago: executing program 0 (id=4422): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x103342, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) sysfs$auto(0x2, 0x100000000000011, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) exit$auto(0x41) 6.808116424s ago: executing program 1 (id=4423): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20000040) 6.536521228s ago: executing program 1 (id=4425): mmap$auto(0x0, 0x4020005, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0xfffffffffffffcd0) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x57b400, 0x0) r0 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r0, 0x6f29, 0x0) 5.958076854s ago: executing program 0 (id=4426): close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x11, 0x2, 0x9) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd7/sched/read0_next_rq\x00', 0x40080, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x787806, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [], {0xd74c, 0x6, 0x2, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x76c5, 0x400005, 0x100000005}}) io_uring_enter$auto(r0, 0x9, 0x820e, 0x8b, 0x0, 0x18) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x101, 0x103) r1 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r1, 0x4, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r2 = socket(0x2, 0x2, 0x0) unshare$auto(0x40000080) r3 = openat$auto_severities_coverage_fops_severity(0xffffffffffffff9c, &(0x7f0000000240), 0x2042, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000280)="d272ec58182f42b8a617d71d9c307d0bc16a25df3168de4ad83b758b9316eb6dd8278540bb67a6991e3d5bd51a3b646180d493c2908f0f0bb4a85eb7fd4441f9db1b72b7d569642f", 0x8) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x20) r5 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000340), r2) sendmsg$auto_OVS_METER_CMD_FEATURES(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000380)={0x20, r5, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x9}, @OVS_METER_ATTR_CLEAR={0x4}]}, 0x2f}, 0x1, 0x0, 0x0, 0x2000080}, 0x4) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0\x00'}) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000080), 0xffffffffffffffff) 5.214441552s ago: executing program 1 (id=4429): mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0x4, 0x13fd5, 0x3, 0xfffff000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim1/psample/enable\x00', 0x169a02, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) unshare$auto(0x4f) (async) r0 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000d40)=""/16, 0x10) (async) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x6c000000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) clock_gettime$auto(0x6, 0x0) (async) acct$auto(&(0x7f0000000280)='/dev/vhci\x00') socket(0x10, 0x2, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20201, 0x0) r1 = getpid() unshare$auto(0x40000080) (async) r2 = waitid$auto_P_PID(0x1, r1, &(0x7f0000000440)={@_si_pad}, 0x4, &(0x7f00000004c0)={{0x7, 0xffffffffffffffff}, {0x8, 0xa2}, 0xce2c, 0xfffffffffffffff9, 0x7057, 0x0, 0x8, 0x1, 0x6, 0x8, 0x5, 0x7, 0x9, 0xe, 0x9, 0xdd}) waitid$auto_P_PGID(0x2, r2, &(0x7f0000000580)={@_si_pad}, 0x4, &(0x7f0000000600)={{0x9, 0x7}, {0x3, 0x2}, 0xa, 0x8, 0x80000000, 0x0, 0xffffffffffff2672, 0x6, 0x10000, 0x6, 0x3, 0x8, 0x401, 0x9c, 0x5, 0x2}) (async) prctl$auto(0x0, 0x1, 0x0, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_ethtool(0x0, r3) (async) socket(0x10, 0x2, 0xc) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) socket(0x29, 0x3, 0x5) statmount$auto(0x0, &(0x7f00000006c0)={0xe3, 0xfffffffd, 0x9, 0x7, 0x3f, 0x3ff, 0x1ffde, 0x7, 0x6, 0x2, 0x9, 0x3, 0x7, 0x4, 0xb2, 0x9, 0x0, 0x5, 0x7c, 0x7, 0x40000, 0x7, 0x285, 0xfe, 0x0, 0x7d, 0x0, 0x4, 0x0, 0x0, 0x0, [0x1000000001, 0x0, 0x4, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0xffffeffffffffffe, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x100000000000000, 0x0, 0x1670045f, 0x0, 0x84e6, 0x0, 0x0, 0xfffffffffffffffd, 0xffff, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x1, 0x0, 0x4], "3731ce0dd6d803f3655354847096a2f2c66f10ca76747c4988b1f66a30b9dc53dde498e2e92df286a5e5812ad81a8bbef3c2f7f8688c822c7c7d3e60831ed95a92e6341ea595cd6ef30312930ea9b666993407a0f729fd0c9b4dc077a9b3f135a9238af55e3df9c588ff804f0acb5e5e843d4eae948366bc2860a139a92ecfbfa05ec97f168b6715f051960004d024a6f4d090"}, 0x202, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 3.665708035s ago: executing program 6 (id=4434): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0xa, 0x1, 0x84) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/time_for_children\x00') getdents64$auto(r0, &(0x7f0000000000)={0x309, 0x81, 0xffff, 0x7}, 0xef) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @rand_addr=0x64010100}, 0x40) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80e42, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/fs/ext4/sda1/sra_exceeded_retry_limit\x00', 0x103080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000003800)=""/168, 0xa8) r3 = openat$auto_regulator_summary_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$auto_regulator_summary_fops_(r3, &(0x7f00000016c0)=""/213, 0xd5) setsockopt$auto(r1, 0xe4, 0x6, 0x0, 0x4) open(0x0, 0x14927f, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f0000000140)={[0x9, 0x400000000000009, 0x1, 0xa63f, 0x7fffffff, 0x100, 0xfc, 0x5f, 0x7d2ee4e8, 0x6a7, 0x1, 0x5, 0x0, 0x0, 0x7, 0x5]}, 0x0) mmap$auto(0x0, 0x8, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r4 = signalfd4$auto(0xffffffffffffffff, 0x0, 0x8, 0x805) sendmsg$auto_MAC802154_HWSIM_CMD_GET_RADIO(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYBLOB="000120060000000000000000c5000000000000152b4f59db1e240cd2836c000000f341"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x401c814) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/comedi\x00', 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2a801, 0x0) writev$auto(r5, &(0x7f0000000080)={&(0x7f0000000040), 0x8001000}, 0x3) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) tee$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x5, 0x8) r6 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) read$auto(r6, 0x0, 0x1ff) 3.664925131s ago: executing program 5 (id=4442): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20000040) 3.488695635s ago: executing program 5 (id=4435): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x103342, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) sysfs$auto(0x2, 0x100000000000011, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) exit$auto(0x41) 3.195845924s ago: executing program 1 (id=4436): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mtdblock0\x00', 0x14fe02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) (async, rerun: 64) dup$auto(r0) (async, rerun: 64) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) clone$auto(0x20003b11, 0x8, 0x0, 0x0, 0x7) (async, rerun: 32) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x48402, 0x0) (async) ioctl$auto_IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, &(0x7f0000000000)={0x7ff, 0x7, 0x8, 0xffff}) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/fail-nth\x00', 0x1c1402, 0x0) write$auto(r1, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) (async) write$auto(0x3, 0x0, 0x100082) 2.625238157s ago: executing program 6 (id=4437): pwrite64$auto(0xc8, &(0x7f0000000240)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\xf2\xff\x9e\x1e\xf9\xa4*\x01\x00\x00;^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcd^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xd7\x02\xd2\xe7?\xaaw\x89\xea\xb1\x1d\xea\xa8\xb1\xaf\xdc\xdeS\xe4\x88\x16\x8eu8\x7f\xa7\xe5\xbb\xf8\v \x90E\xd8\nw,S\xf5\x00\xd8\xda\x16\xb6C\xe6\xc0j\xae\x19\x1eU\f\x18\x14 \x05\xd9:\'\xf5\r\xd8C\xc7,\xe1\xa9wzVf\xa4\xfcM\xb87\xa5.\x14\x81mgI\xb2\xbc\x91o\x1c\xfd/\x88\xa0\x02n\x98C\xd3\xfcY\xf4\x98\xb3-\xec\x87\x1f\xe5\xdcn[\x19\xac\'\xc86s{ \x0f', 0xfdf2, 0x3a) 2.519300193s ago: executing program 5 (id=4438): r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f0000000440)="9b58b4fccbcd800000100000000000000025000000d1627cc84d61f3d07771b09e2c91eb271fd2f826dcc129e3a136d030996f8769497d9621bcd869c6f014922a060000000000000028a0784539e00ad178298ec54bf55f716653ee64518c92a24409be055f93546773a695c31a9a53ef754e8ca43619e9a71b76f8e8aeb15a4019883dbfd1") r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x20040, 0x0) ioctl$auto_SOUND_MIXER_READ_DEVMASK2(r1, 0x80044dfe, &(0x7f0000000040)="6e9320e44b031fb6326e7eb7e2436fa45510f8eba2da18dd39bbc98bd494ecae86a97d1e8d6f1370e721c77a0cf760dcb4d545bf5771448f25415e62b1b4d35c49fc588337b5114ca57316f324ee5e2b3a8d1ce89532225acc6206f3ff1297c52f48fa4892f18f7d9f4397401c336b7f9a17a8") 2.447555141s ago: executing program 6 (id=4439): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r5 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r5, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) r6 = socket(0x10, 0xa, 0xfffffffd) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) 2.335186985s ago: executing program 5 (id=4440): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/bonding/arp_validate\x00', 0x2002, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) fanotify_init$auto(0x5, 0x0) io_uring_setup$auto(0xf00, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) socket(0x15, 0x5, 0x0) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/trace_pipe\x00', 0x20c01, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x0, 0x3, 0x5, 0x10001, 0x400000000003, 0x5, 0xffffffffffffffff, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/loginuid\x00', 0x8040, 0x0) mbind$auto(0x8000000000000002, 0x100000004, 0x100000000, 0x0, 0x9, 0x2) sendmsg$auto_NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="006adab485b2", @ANYRES16=0x0, @ANYBLOB="00082cbd7000ffdbdf250c00000005001a009c00000006000a00030000000500080086000000140004006970365f767469300000000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x100400c4}, 0x0) madvise$auto(0x0, 0x20499d, 0x9) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nbd11\x00', 0x204000, 0x0) pread64$auto(r1, &(0x7f0000000080)='/proc/self/loginuid\x00', 0x5, 0xe3d) mmap$auto(0x0, 0xe000000000000000, 0xe2, 0x2000000009b72, 0xffffffffffffffff, 0x8000) socket(0x1d, 0x3, 0x1) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) getpgid(0x0) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x60020000) syz_clone3(&(0x7f0000000300)={0x10120000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto_SIGCONT(0xffffffffffffffff, 0x12) r3 = getpid() syz_clone3(&(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[r3], 0x1}, 0x58) 1.758611259s ago: executing program 0 (id=4441): r0 = openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/fs/ocfs2/active_cluster_plugin\x00', 0x22100, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, r0, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0x200007, 0x19) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) r5 = openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) read$auto_objects_fops_(r5, &(0x7f00000003c0)=""/211, 0xd3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fcdbdf2504000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x34, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_NAME={0x5, 0x2, '\x00'}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x240}, @CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x3}, @CTRL_ATTR_FAMILY_NAME={0x8, 0x2, 'HSR\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) getcpu$auto(0xfffffffffffffffc, 0xffffffffffffffff, 0xfffffffffffffffd) socket(0x10, 0xa, 0xfffffffd) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000034c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0xab7}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @HSR_A_NODE_ADDR={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40) 1.165949993s ago: executing program 1 (id=4443): mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) mmap$auto(0x200000000, 0x5, 0x8, 0x40009b72, 0x2, 0x8000) landlock_add_rule$auto(0xffffffffffffffff, 0x2, 0x0, 0x9) mmap$auto(0x0, 0x2020089, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) timer_create$auto(0x7, &(0x7f0000000000)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000040)=0x200) timer_settime$auto(0x0, 0x3b4, &(0x7f0000000040)={{0x0, 0xd3}, {0x200001005, 0x6}}, 0x0) timer_gettime$auto(0x0, &(0x7f0000000080)={{0x5, 0x8}, {0x7f, 0x10000}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) io_uring_setup$auto(0x6, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x800000001, 0x0, 0x6, 0x0) rename$auto(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x40, 0x100) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) renameat2$auto(r5, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x2) 812.043048ms ago: executing program 6 (id=4444): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x20000040) 656.89441ms ago: executing program 5 (id=4445): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) madvise$auto(0x0, 0x2000040080000000, 0xe) r1 = mq_open$auto(0x0, 0x7e, 0x9, 0x0) (async) mmap$auto(0xc4, 0xb, 0x30, 0x1a14, r0, 0x8) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, 0x0, 0x0) (async) write$auto(r2, &(0x7f0000000200)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x7) mmap$auto(0x0, 0x3fffff, 0x7, 0x11, 0xdd, 0x0) (async) mmap$auto(0x0, 0x4, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8000) (async, rerun: 32) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) (async, rerun: 64) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async, rerun: 64) chdir$auto(&(0x7f0000000000)='}[,&*}\x00') (async) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) (async) mremap$auto(0x0, 0xffffffffffffffff, 0x3fda, 0x3, 0x7fffffffb000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r3, &(0x7f00000001c0)="f57e227308ea1c4aff3cdf09da577a7d0271d9091b116b2f8d512fabdd2dad53b1610fb1153cee628fa83e94a58d3afa492cf22290f209c2b61057314ef6", 0x3e) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) mmap$auto(0x361f, 0xa000000008, 0xffffffffffffffff, 0x9b72, 0x2, 0x2) (async, rerun: 32) getsockopt$auto(0x3, 0x200000000001, 0x2d, 0xfffffffffffffffe, 0x0) (async, rerun: 64) write$auto(r4, &(0x7f0000001380)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xfc\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\r&\xec\xb8\xb1Z\\\xc9L\xb2\t\xddbH|\xffGP\x97)\xb9:nqn\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc$\xa0\xa5\xce\xca\xe1P\xf7\xe5_\xca\xd5\xd8\xa4g_\xb1\x88\x8cAJS\x11\x8b\xd1%a\xe5DPk\x8c\xf9\xfb\xe0+\xdb\x12\x10.F\x00\xc37\xc7\xbf\x80\xbeu\xe1V\xb2\xc5\xc9\x1a\xc7\xdc}!\x10\xb1\",1%\x0e\xeb\x15\x15me\xe1a\x03\x18{\xb03+\x93*vB\xc6\xf1\xc6\xff\xbbt\x04!\xb6\v\xde2\xc9\x89#\xbaR\xee\x13jF%\xf2\x15\x9a\x82&\x89o\xa9\xd9\xbfFY\x90\x8c\xa0\xe4\x9d\xa2\xcd\x9a\xb5TC\xc4\x9d\x9ePb]\xaa\xc7f\x06N\xc5\xfa{\x02Y\xae\xf4(\xaa\x06);{?\x1e\fu\x19b\xdf$,\x01\"\x94\x00\x00\x00\x00\x003\xcfZ\xaf~<\xba\xb7\xa03\x8c\n*krS\x19Q#\x8f\xfbW\xad\xe0\xb3o\xcb\xf7\xda\x87C\x99\x1a\xa8\xc1\xe3\xc6%\xac\x01@*\xa0\xc4\xedn-lT\xe6*?\'\x9dW=\xa7\x03\x06\x83 IT\xa3\x7ff\xb6\x95\xe5\xd2\n\xaf\x87`\xce%\xf6 &\xa7M5I\x9c\x17h\x8c\xa4\x98\x16\xe0\xd9?Y\x7f\xf6\x85_{\xfd9p$B9_\xd8\xf4\x0e\xd0\xfa\xe7\xb0\xb8\xa0\xd7\a\xff.\"\x81\b\xb0\xb4\x84\xac\xad\x1b\x93~_\xea\xfe7\x03\"\xd9\x1d.\xe5{bHX\x14\xa1\bO\x03[^\x85jP\x89\t\x06GI\xb7\x99\xb2zZf\xc8\xd4\x8d\x1c\x1e\x03\xb9\xa7Nt\xae\xfff\xf9\tx\xae\xa8\x05\xb14\xc6\x9b\x1f\xd3\x01#\xc6\nb\xd4\xb4\xc8?\xa7\xe2R\xc1\xcf\xd2\xbc\xae\xd1\xc2\x88\"\xf3\xf0\xc0uQy\xec\xfab\xd6\xcd\x16)\x19*E\vm\x8d\x1bG:\x80\'pJ', 0x4100000a3d7) (async, rerun: 64) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/phonet\x00', 0x1262cb00941a9bd0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r5, &(0x7f0000000100)=""/184, 0xb8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x4, 0x2003f2, 0xfc57) madvise$auto(0x0, 0x200007, 0x19) pread64$auto(0xffffffffffffffff, 0x0, 0x100000002, 0x100000001) 517.679681ms ago: executing program 6 (id=4446): pwrite64$auto(0xc8, &(0x7f0000000240)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x1f\x03\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\xf2\xff\x9e\x1e\xf9\xa4*\x01\x00,\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcd^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xd7\x02\xd2\xe7?\xaaw\x89\xea\xb1\x1d\xea\xa8\xb1\xaf\xdc\xdeS\xe4\x88\x16\x8eu8\x7f\xa7\xe5\xbb\xf8\v \x90E\xd8\nw,S\xf5\x00\xd8\xda\x16\xb6C\xe6\xc0j\xae\x19\x1eU\f\x18\x14 \x05\xd9:\'\xf5\r\xd8C\xc7,\xe1\xa9wzVf\xa4\xfcM\xb87\xa5.\x14\x81mgI\xb2\xbc\x91o\x1c\xfd/\x88\xa0\x02n\x98C\xd3\xfcY\xf4\x98\xb3-\xec\x87\x1f\xe5\xdcn[\x19\xac\'\xc86s{ \x0f', 0xfdf2, 0x3a) 395.721296ms ago: executing program 0 (id=4447): r0 = openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x6565d5d3700f897b, 0x0) ioctl$auto(r0, 0x1, 0xffffffffffffffff) 296.234082ms ago: executing program 6 (id=4448): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x103342, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x80000007, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) sysfs$auto(0x2, 0x100000000000011, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = fsopen$auto(0x0, 0x1) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) exit$auto(0x41) 133.993841ms ago: executing program 0 (id=4449): mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0xfffffffe}, 0x52) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) r4 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f0000000040), 0x10340, 0x0) write$auto_fops_atomic_t_ro_(r4, &(0x7f0000000100)="71376d3fae96a7153012cc7ea1393f30733035bbbdca61a465c709fafc5dcf755181eb17302806b1c3025ead886a0f8b0e53a8713c3d60e03d27229f4b6b429d82801db1849f1068defaf87b702ecc0779c0459a9b714c1cd48192c5601461d48c6dfd4876fa78857ab5b7ec47aad1bc761ec27cc135f7c0651aa3b1252312df32aad731a417ab5190d921de9d4a77b7703dfbf3614c8c483b0e46fc9498300e6b57a428b907e899e2d010a10f77c4bb32cca442c76f938affc9ea928b1d6033fc21fe5fffb25cafe4671118b2625e730da81887b4f8d514f3e75fadedd0f347829910dd362217fd3bc878f0", 0xec) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(r1, 0x4048aec9, r2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 0s ago: executing program 5 (id=4450): mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/node/node1/compact\x00', 0xc2481, 0x0) setsockopt$auto_SO_REUSEPORT(0xffffffffffffffff, 0x9, 0xf, &(0x7f0000000340)='$.\\\x00', 0x80) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0xffffffffffffffff, 0x4b47, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r2 = io_uring_setup$auto(0x1, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto(r1, 0x89f0, r0) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000040), 0x42001, 0x0) mmap$auto(0x0, 0x2020009, 0x2000000000000006, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(r3, 0x40a85321, 0x38) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x80002, 0x73) socket(0x2b, 0x1, 0x0) r5 = openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/usb/usbmon/30s\x00', 0x0, 0x0) read$auto_mon_fops_stat_usb_mon(r5, 0x0, 0x0) setsockopt$auto(0x3, 0x11e, 0x1, 0x0, 0x10001) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_STOP(r4, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x120, r6, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_FREQ_FIXED={0x4}, @NL80211_ATTR_SUPPORT_MESH_AUTH={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x46, 0x115, "81d3691f3953c51848baec7d359a2c428184943a1c1138ed7379b778f8b412a8798c78d8a3a4238b851040b2e700380df9bdac498c7a553902389887ac40a69d7529"}, @NL80211_ATTR_TIMEOUT_REASON={0x8, 0xf8, 0x400}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0xb0, 0x131, 0x0, 0x1, [@NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_PMKR0_NAME={0x8b, 0x102, "453d542ca0eeb1f87928d15e77261f9b3aa21c9e7a81aa2b8642e4c900e1e7173bc5f0291a4f8f95eef2ddde4d51b4eba43fb54e85e810134fa689b7d70642addc7f6fa4e084fc949b7c0293743cc010e8418ffc030c4d31a219dfcdadc787d70d20fee4b1e7942c3077b72bc336064d481bbb7d2e33e9405288db209f6c5ad3fbcd868cca6f25"}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r2}, @NL80211_ATTR_PUNCT_BITMAP={0x8, 0x142, 0xe5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0xff}]}, @NL80211_ATTR_TDLS_SUPPORT={0x4}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) kernel console output (not intermixed with test programs): [ 1260.880596][T24147] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1262.410486][T24131] Process accounting paused [ 1262.968598][T24172] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3847'. [ 1265.541707][T24184] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3848'. [ 1267.817689][T24208] FAULT_INJECTION: forcing a failure. [ 1267.817689][T24208] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.941461][T24208] CPU: 0 UID: 0 PID: 24208 Comm: syz.0.3852 Tainted: G L syzkaller #0 PREEMPT(full) [ 1267.941492][T24208] Tainted: [L]=SOFTLOCKUP [ 1267.941506][T24208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1267.941517][T24208] Call Trace: [ 1267.941524][T24208] [ 1267.941532][T24208] dump_stack_lvl+0x100/0x190 [ 1267.941570][T24208] should_fail_ex.cold+0x5/0xa [ 1267.941594][T24208] should_failslab+0xc2/0x120 [ 1267.941617][T24208] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1267.941646][T24208] ? security_inode_alloc+0x3b/0x2c0 [ 1267.941669][T24208] ? lockdep_init_map_type+0x5c/0x250 [ 1267.941701][T24208] security_inode_alloc+0x3b/0x2c0 [ 1267.941722][T24208] inode_init_always_gfp+0xc77/0xfb0 [ 1267.941749][T24208] alloc_inode+0x8e/0x250 [ 1267.941777][T24208] new_inode+0x22/0x1c0 [ 1267.941808][T24208] rpc_new_dir+0x96/0x420 [ 1267.941832][T24208] rpc_populate.constprop.0+0x125/0x1c0 [ 1267.941857][T24208] ? d_instantiate+0x8f/0xb0 [ 1267.941882][T24208] ? __pfx_rpc_fill_super+0x10/0x10 [ 1267.941906][T24208] rpc_fill_super+0x2b9/0x4f0 [ 1267.941930][T24208] ? __pfx_rpc_fill_super+0x10/0x10 [ 1267.941953][T24208] get_tree_keyed+0x10e/0x1d0 [ 1267.941975][T24208] vfs_get_tree+0x92/0x320 [ 1267.941993][T24208] vfs_cmd_create+0xd7/0x2a0 [ 1267.942024][T24208] __do_sys_fsconfig+0x55a/0xcb0 [ 1267.942054][T24208] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1267.942083][T24208] ? xfd_validate_state+0x129/0x190 [ 1267.942106][T24208] ? rcu_is_watching+0x12/0xc0 [ 1267.942129][T24208] do_syscall_64+0x115/0x840 [ 1267.942155][T24208] ? clear_bhb_loop+0x40/0x90 [ 1267.942177][T24208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.942196][T24208] RIP: 0033:0x7faf7a59ce59 [ 1267.942212][T24208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.942229][T24208] RSP: 002b:00007faf7b4f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1267.942247][T24208] RAX: ffffffffffffffda RBX: 00007faf7a816090 RCX: 00007faf7a59ce59 [ 1267.942259][T24208] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1267.942270][T24208] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1267.942280][T24208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1267.942291][T24208] R13: 00007faf7a816128 R14: 00007faf7a816090 R15: 00007ffcfece86d8 [ 1267.942314][T24208] [ 1267.942356][T24208] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1269.449437][T24226] FAULT_INJECTION: forcing a failure. [ 1269.449437][T24226] name failslab, interval 1, probability 0, space 0, times 0 [ 1269.599094][T24226] CPU: 0 UID: 0 PID: 24226 Comm: syz.1.3855 Tainted: G L syzkaller #0 PREEMPT(full) [ 1269.599126][T24226] Tainted: [L]=SOFTLOCKUP [ 1269.599133][T24226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1269.599145][T24226] Call Trace: [ 1269.599153][T24226] [ 1269.599161][T24226] dump_stack_lvl+0x100/0x190 [ 1269.599196][T24226] should_fail_ex.cold+0x5/0xa [ 1269.599220][T24226] should_failslab+0xc2/0x120 [ 1269.599243][T24226] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1269.599274][T24226] ? alloc_inode+0x68/0x250 [ 1269.599302][T24226] ? start_dirop+0x79/0xb0 [ 1269.599324][T24226] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 1269.599347][T24226] alloc_inode+0x68/0x250 [ 1269.599375][T24226] new_inode+0x22/0x1c0 [ 1269.599406][T24226] rpc_new_dir+0x96/0x420 [ 1269.599439][T24226] rpc_populate.constprop.0+0x125/0x1c0 [ 1269.599464][T24226] ? d_instantiate+0x8f/0xb0 [ 1269.599491][T24226] ? __pfx_rpc_fill_super+0x10/0x10 [ 1269.599514][T24226] rpc_fill_super+0x2b9/0x4f0 [ 1269.599539][T24226] ? __pfx_rpc_fill_super+0x10/0x10 [ 1269.599563][T24226] get_tree_keyed+0x10e/0x1d0 [ 1269.599585][T24226] vfs_get_tree+0x92/0x320 [ 1269.599604][T24226] vfs_cmd_create+0xd7/0x2a0 [ 1269.599634][T24226] __do_sys_fsconfig+0x55a/0xcb0 [ 1269.599664][T24226] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1269.599693][T24226] ? xfd_validate_state+0x129/0x190 [ 1269.599716][T24226] ? rcu_is_watching+0x12/0xc0 [ 1269.599740][T24226] do_syscall_64+0x115/0x840 [ 1269.599765][T24226] ? clear_bhb_loop+0x40/0x90 [ 1269.599788][T24226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.599806][T24226] RIP: 0033:0x7fe68db9ce59 [ 1269.599822][T24226] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.599840][T24226] RSP: 002b:00007fe68ea31028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1269.599862][T24226] RAX: ffffffffffffffda RBX: 00007fe68de16090 RCX: 00007fe68db9ce59 [ 1269.599874][T24226] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1269.599885][T24226] RBP: 00007fe68dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1269.599895][T24226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1269.599907][T24226] R13: 00007fe68de16128 R14: 00007fe68de16090 R15: 00007ffed91b2298 [ 1269.599931][T24226] [ 1270.100877][T24226] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1270.261213][T24235] ERROR: Out of memory at tomoyo_memory_ok. [ 1270.349768][T24237] random: crng reseeded on system resumption [ 1272.064297][T24265] program syz.5.3863 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1272.970270][T24275] FAULT_INJECTION: forcing a failure. [ 1272.970270][T24275] name failslab, interval 1, probability 0, space 0, times 0 [ 1273.077065][T24275] CPU: 0 UID: 0 PID: 24275 Comm: syz.0.3866 Tainted: G L syzkaller #0 PREEMPT(full) [ 1273.077098][T24275] Tainted: [L]=SOFTLOCKUP [ 1273.077106][T24275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1273.077117][T24275] Call Trace: [ 1273.077124][T24275] [ 1273.077132][T24275] dump_stack_lvl+0x100/0x190 [ 1273.077167][T24275] should_fail_ex.cold+0x5/0xa [ 1273.077191][T24275] should_failslab+0xc2/0x120 [ 1273.077214][T24275] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1273.077244][T24275] ? __d_alloc+0x34/0xa40 [ 1273.077273][T24275] __d_alloc+0x34/0xa40 [ 1273.077300][T24275] d_alloc+0x4a/0x1e0 [ 1273.077326][T24275] lookup_one_qstr_excl+0x171/0x250 [ 1273.077356][T24275] start_dirop+0x59/0xb0 [ 1273.077385][T24275] simple_start_creating+0xf9/0x110 [ 1273.077408][T24275] ? __pfx_simple_start_creating+0x10/0x10 [ 1273.077430][T24275] ? dput.part.0+0xdd/0x570 [ 1273.077462][T24275] rpc_new_dir+0x27/0x420 [ 1273.077489][T24275] rpc_populate.constprop.0+0x125/0x1c0 [ 1273.077513][T24275] ? d_instantiate+0x8f/0xb0 [ 1273.077539][T24275] ? __pfx_rpc_fill_super+0x10/0x10 [ 1273.077563][T24275] rpc_fill_super+0x2b9/0x4f0 [ 1273.077587][T24275] ? __pfx_rpc_fill_super+0x10/0x10 [ 1273.077609][T24275] get_tree_keyed+0x10e/0x1d0 [ 1273.077631][T24275] vfs_get_tree+0x92/0x320 [ 1273.077649][T24275] vfs_cmd_create+0xd7/0x2a0 [ 1273.077679][T24275] __do_sys_fsconfig+0x55a/0xcb0 [ 1273.077709][T24275] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1273.077738][T24275] ? xfd_validate_state+0x129/0x190 [ 1273.077760][T24275] ? rcu_is_watching+0x12/0xc0 [ 1273.077784][T24275] do_syscall_64+0x115/0x840 [ 1273.077810][T24275] ? clear_bhb_loop+0x40/0x90 [ 1273.077833][T24275] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.077852][T24275] RIP: 0033:0x7faf7a59ce59 [ 1273.077868][T24275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.077886][T24275] RSP: 002b:00007faf7b4f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1273.077904][T24275] RAX: ffffffffffffffda RBX: 00007faf7a816090 RCX: 00007faf7a59ce59 [ 1273.077916][T24275] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1273.077927][T24275] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1273.077938][T24275] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1273.077948][T24275] R13: 00007faf7a816128 R14: 00007faf7a816090 R15: 00007ffcfece86d8 [ 1273.077971][T24275] [ 1273.077981][T24275] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1275.511072][T24293] ERROR: Out of memory at tomoyo_memory_ok. [ 1276.482982][T24304] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3870'. [ 1278.490841][T23800] Process accounting resumed [ 1280.389278][T24350] FAULT_INJECTION: forcing a failure. [ 1280.389278][T24350] name failslab, interval 1, probability 0, space 0, times 0 [ 1280.704217][T24350] CPU: 0 UID: 0 PID: 24350 Comm: syz.6.3878 Tainted: G L syzkaller #0 PREEMPT(full) [ 1280.704251][T24350] Tainted: [L]=SOFTLOCKUP [ 1280.704259][T24350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1280.704270][T24350] Call Trace: [ 1280.704278][T24350] [ 1280.704286][T24350] dump_stack_lvl+0x100/0x190 [ 1280.704322][T24350] should_fail_ex.cold+0x5/0xa [ 1280.704346][T24350] should_failslab+0xc2/0x120 [ 1280.704369][T24350] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1280.704398][T24350] ? security_inode_alloc+0x3b/0x2c0 [ 1280.704419][T24350] ? lockdep_init_map_type+0x5c/0x250 [ 1280.704451][T24350] security_inode_alloc+0x3b/0x2c0 [ 1280.704473][T24350] inode_init_always_gfp+0xc77/0xfb0 [ 1280.704500][T24350] alloc_inode+0x8e/0x250 [ 1280.704529][T24350] new_inode+0x22/0x1c0 [ 1280.704559][T24350] rpc_new_dir+0x96/0x420 [ 1280.704583][T24350] rpc_populate.constprop.0+0x125/0x1c0 [ 1280.704607][T24350] ? d_instantiate+0x8f/0xb0 [ 1280.704633][T24350] ? __pfx_rpc_fill_super+0x10/0x10 [ 1280.704658][T24350] rpc_fill_super+0x2b9/0x4f0 [ 1280.704682][T24350] ? __pfx_rpc_fill_super+0x10/0x10 [ 1280.704705][T24350] get_tree_keyed+0x10e/0x1d0 [ 1280.704727][T24350] vfs_get_tree+0x92/0x320 [ 1280.704746][T24350] vfs_cmd_create+0xd7/0x2a0 [ 1280.704776][T24350] __do_sys_fsconfig+0x55a/0xcb0 [ 1280.704807][T24350] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1280.704835][T24350] ? xfd_validate_state+0x129/0x190 [ 1280.704858][T24350] ? rcu_is_watching+0x12/0xc0 [ 1280.704881][T24350] do_syscall_64+0x115/0x840 [ 1280.704906][T24350] ? clear_bhb_loop+0x40/0x90 [ 1280.704928][T24350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1280.704946][T24350] RIP: 0033:0x7fef4859ce59 [ 1280.704963][T24350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1280.704980][T24350] RSP: 002b:00007fef49418028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1280.705000][T24350] RAX: ffffffffffffffda RBX: 00007fef48816090 RCX: 00007fef4859ce59 [ 1280.705012][T24350] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1280.705023][T24350] RBP: 00007fef48632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1280.705034][T24350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1280.705057][T24350] R13: 00007fef48816128 R14: 00007fef48816090 R15: 00007ffe7e5231e8 [ 1280.705081][T24350] [ 1280.705125][T24350] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1281.266584][T24360] ERROR: Out of memory at tomoyo_memory_ok. [ 1282.705295][T24384] FAULT_INJECTION: forcing a failure. [ 1282.705295][T24384] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.898351][T24390] program syz.6.3885 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1282.947024][T24384] CPU: 0 UID: 0 PID: 24384 Comm: syz.5.3884 Tainted: G L syzkaller #0 PREEMPT(full) [ 1282.947056][T24384] Tainted: [L]=SOFTLOCKUP [ 1282.947064][T24384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1282.947076][T24384] Call Trace: [ 1282.947083][T24384] [ 1282.947091][T24384] dump_stack_lvl+0x100/0x190 [ 1282.947127][T24384] should_fail_ex.cold+0x5/0xa [ 1282.947151][T24384] should_failslab+0xc2/0x120 [ 1282.947174][T24384] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1282.947204][T24384] ? security_inode_alloc+0x3b/0x2c0 [ 1282.947224][T24384] ? lockdep_init_map_type+0x5c/0x250 [ 1282.947257][T24384] security_inode_alloc+0x3b/0x2c0 [ 1282.947278][T24384] inode_init_always_gfp+0xc77/0xfb0 [ 1282.947305][T24384] alloc_inode+0x8e/0x250 [ 1282.947333][T24384] new_inode+0x22/0x1c0 [ 1282.947363][T24384] rpc_new_dir+0x96/0x420 [ 1282.947395][T24384] rpc_populate.constprop.0+0x125/0x1c0 [ 1282.947420][T24384] ? d_instantiate+0x8f/0xb0 [ 1282.947446][T24384] ? __pfx_rpc_fill_super+0x10/0x10 [ 1282.947471][T24384] rpc_fill_super+0x2b9/0x4f0 [ 1282.947495][T24384] ? __pfx_rpc_fill_super+0x10/0x10 [ 1282.947518][T24384] get_tree_keyed+0x10e/0x1d0 [ 1282.947540][T24384] vfs_get_tree+0x92/0x320 [ 1282.947559][T24384] vfs_cmd_create+0xd7/0x2a0 [ 1282.947589][T24384] __do_sys_fsconfig+0x55a/0xcb0 [ 1282.947620][T24384] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1282.947649][T24384] ? xfd_validate_state+0x129/0x190 [ 1282.947672][T24384] ? rcu_is_watching+0x12/0xc0 [ 1282.947696][T24384] do_syscall_64+0x115/0x840 [ 1282.947721][T24384] ? clear_bhb_loop+0x40/0x90 [ 1282.947744][T24384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.947763][T24384] RIP: 0033:0x7f3f3519ce59 [ 1282.947779][T24384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.947797][T24384] RSP: 002b:00007f3f36118028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1282.947815][T24384] RAX: ffffffffffffffda RBX: 00007f3f35416090 RCX: 00007f3f3519ce59 [ 1282.947827][T24384] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1282.947838][T24384] RBP: 00007f3f35232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1282.947849][T24384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1282.947860][T24384] R13: 00007f3f35416128 R14: 00007f3f35416090 R15: 00007ffd8e48e2a8 [ 1282.947883][T24384] [ 1282.947932][T24384] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1283.499241][ T8996] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.190998][ T8996] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.580829][ T8996] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1284.783739][ T8996] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1286.030839][ T8996] bridge_slave_1: left allmulticast mode [ 1286.077933][ T8996] bridge_slave_1: left promiscuous mode [ 1286.116127][ T8996] bridge0: port 2(bridge_slave_1) entered disabled state [ 1286.184392][ T8996] bridge_slave_0: left allmulticast mode [ 1286.238295][ T8996] bridge_slave_0: left promiscuous mode [ 1286.286833][ T8996] bridge0: port 1(bridge_slave_0) entered disabled state [ 1287.180555][ T8996] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1287.226128][ T8996] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1287.278781][ T8996] bond0 (unregistering): Released all slaves [ 1287.508897][ T8996] tipc: Left network mode [ 1287.926587][ T5297] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1288.162323][T24459] FAULT_INJECTION: forcing a failure. [ 1288.162323][T24459] name failslab, interval 1, probability 0, space 0, times 0 [ 1288.252288][T24459] CPU: 0 UID: 0 PID: 24459 Comm: syz.1.3894 Tainted: G L syzkaller #0 PREEMPT(full) [ 1288.252320][T24459] Tainted: [L]=SOFTLOCKUP [ 1288.252328][T24459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1288.252339][T24459] Call Trace: [ 1288.252345][T24459] [ 1288.252353][T24459] dump_stack_lvl+0x100/0x190 [ 1288.252399][T24459] should_fail_ex.cold+0x5/0xa [ 1288.252424][T24459] should_failslab+0xc2/0x120 [ 1288.252453][T24459] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1288.252483][T24459] ? __d_alloc+0x34/0xa40 [ 1288.252513][T24459] __d_alloc+0x34/0xa40 [ 1288.252540][T24459] d_alloc+0x4a/0x1e0 [ 1288.252566][T24459] lookup_one_qstr_excl+0x171/0x250 [ 1288.252596][T24459] start_dirop+0x59/0xb0 [ 1288.252618][T24459] simple_start_creating+0xf9/0x110 [ 1288.252642][T24459] ? __pfx_simple_start_creating+0x10/0x10 [ 1288.252664][T24459] ? dput.part.0+0xdd/0x570 [ 1288.252695][T24459] rpc_new_dir+0x27/0x420 [ 1288.252721][T24459] rpc_populate.constprop.0+0x125/0x1c0 [ 1288.252745][T24459] ? d_instantiate+0x8f/0xb0 [ 1288.252772][T24459] ? __pfx_rpc_fill_super+0x10/0x10 [ 1288.252795][T24459] rpc_fill_super+0x2b9/0x4f0 [ 1288.252819][T24459] ? __pfx_rpc_fill_super+0x10/0x10 [ 1288.252842][T24459] get_tree_keyed+0x10e/0x1d0 [ 1288.252864][T24459] vfs_get_tree+0x92/0x320 [ 1288.252882][T24459] vfs_cmd_create+0xd7/0x2a0 [ 1288.252911][T24459] __do_sys_fsconfig+0x55a/0xcb0 [ 1288.252942][T24459] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1288.252971][T24459] ? xfd_validate_state+0x129/0x190 [ 1288.252994][T24459] ? rcu_is_watching+0x12/0xc0 [ 1288.253019][T24459] do_syscall_64+0x115/0x840 [ 1288.253045][T24459] ? clear_bhb_loop+0x40/0x90 [ 1288.253070][T24459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1288.253092][T24459] RIP: 0033:0x7fe68db9ce59 [ 1288.253109][T24459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1288.253127][T24459] RSP: 002b:00007fe68ea31028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1288.253146][T24459] RAX: ffffffffffffffda RBX: 00007fe68de16090 RCX: 00007fe68db9ce59 [ 1288.253158][T24459] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 1288.253169][T24459] RBP: 00007fe68dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1288.253179][T24459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1288.253189][T24459] R13: 00007fe68de16128 R14: 00007fe68de16090 R15: 00007ffed91b2298 [ 1288.253213][T24459] [ 1288.255524][T24459] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1289.210883][ T8996] hsr_slave_0: left promiscuous mode [ 1289.306659][ T8996] hsr_slave_1: left promiscuous mode [ 1289.349451][ T8996] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1289.404053][ T8996] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1289.459611][ T8996] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1289.513927][ T8996] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1289.595302][ T8996] veth1_macvtap: left promiscuous mode [ 1289.623371][ T8996] veth1_vlan: left promiscuous mode [ 1289.672962][ T8996] veth0_vlan: left promiscuous mode [ 1291.679643][ T8996] team0 (unregistering): Port device team_slave_1 removed [ 1291.836302][ T8996] team0 (unregistering): Port device team_slave_0 removed [ 1292.684854][ T5297] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1292.922482][ T9242] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 1293.467394][T24493] Process accounting resumed [ 1293.853783][T24543] random: crng reseeded on system resumption [ 1295.072998][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1295.083126][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1295.644132][T24595] netlink: 330 bytes leftover after parsing attributes in process `syz.5.3917'. [ 1295.657963][ T5297] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1297.212612][T24631] ERROR: Out of memory at tomoyo_memory_ok. [ 1298.293888][T24635] ERROR: Out of memory at tomoyo_memory_ok. [ 1298.834204][ T5297] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1300.306469][T24651] FAULT_INJECTION: forcing a failure. [ 1300.306469][T24651] name failslab, interval 1, probability 0, space 0, times 0 [ 1300.553436][T24651] CPU: 0 UID: 0 PID: 24651 Comm: syz.0.3925 Tainted: G L syzkaller #0 PREEMPT(full) [ 1300.553469][T24651] Tainted: [L]=SOFTLOCKUP [ 1300.553476][T24651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1300.553486][T24651] Call Trace: [ 1300.553494][T24651] [ 1300.553501][T24651] dump_stack_lvl+0x100/0x190 [ 1300.553536][T24651] should_fail_ex.cold+0x5/0xa [ 1300.553560][T24651] should_failslab+0xc2/0x120 [ 1300.553584][T24651] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1300.553613][T24651] ? security_inode_alloc+0x3b/0x2c0 [ 1300.553633][T24651] ? lockdep_init_map_type+0x5c/0x250 [ 1300.553666][T24651] security_inode_alloc+0x3b/0x2c0 [ 1300.553687][T24651] inode_init_always_gfp+0xc77/0xfb0 [ 1300.553714][T24651] alloc_inode+0x8e/0x250 [ 1300.553742][T24651] new_inode+0x22/0x1c0 [ 1300.553772][T24651] rpc_new_dir+0x96/0x420 [ 1300.553797][T24651] rpc_populate.constprop.0+0x125/0x1c0 [ 1300.553822][T24651] ? d_instantiate+0x8f/0xb0 [ 1300.553848][T24651] ? __pfx_rpc_fill_super+0x10/0x10 [ 1300.553872][T24651] rpc_fill_super+0x2b9/0x4f0 [ 1300.553896][T24651] ? __pfx_rpc_fill_super+0x10/0x10 [ 1300.553918][T24651] get_tree_keyed+0x10e/0x1d0 [ 1300.553940][T24651] vfs_get_tree+0x92/0x320 [ 1300.553965][T24651] vfs_cmd_create+0xd7/0x2a0 [ 1300.553996][T24651] __do_sys_fsconfig+0x55a/0xcb0 [ 1300.554026][T24651] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1300.554055][T24651] ? xfd_validate_state+0x129/0x190 [ 1300.554077][T24651] ? rcu_is_watching+0x12/0xc0 [ 1300.554102][T24651] do_syscall_64+0x115/0x840 [ 1300.554128][T24651] ? clear_bhb_loop+0x40/0x90 [ 1300.554151][T24651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1300.554170][T24651] RIP: 0033:0x7faf7a59ce59 [ 1300.554187][T24651] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1300.554205][T24651] RSP: 002b:00007faf7b4f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1300.554224][T24651] RAX: ffffffffffffffda RBX: 00007faf7a816090 RCX: 00007faf7a59ce59 [ 1300.554236][T24651] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1300.554247][T24651] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1300.554258][T24651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1300.554269][T24651] R13: 00007faf7a816128 R14: 00007faf7a816090 R15: 00007ffcfece86d8 [ 1300.554291][T24651] [ 1300.554335][T24651] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1300.889807][T24666] Format for adding new device is "id port_count num_queues" (uint uint uint). [ 1301.702843][T24692] FAULT_INJECTION: forcing a failure. [ 1301.702843][T24692] name failslab, interval 1, probability 0, space 0, times 0 [ 1301.754695][T24692] CPU: 0 UID: 0 PID: 24692 Comm: syz.6.3932 Tainted: G L syzkaller #0 PREEMPT(full) [ 1301.754727][T24692] Tainted: [L]=SOFTLOCKUP [ 1301.754735][T24692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1301.754746][T24692] Call Trace: [ 1301.754753][T24692] [ 1301.754761][T24692] dump_stack_lvl+0x100/0x190 [ 1301.754798][T24692] should_fail_ex.cold+0x5/0xa [ 1301.754821][T24692] should_failslab+0xc2/0x120 [ 1301.754844][T24692] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1301.754873][T24692] ? security_inode_alloc+0x3b/0x2c0 [ 1301.754894][T24692] ? lockdep_init_map_type+0x5c/0x250 [ 1301.754926][T24692] security_inode_alloc+0x3b/0x2c0 [ 1301.754947][T24692] inode_init_always_gfp+0xc77/0xfb0 [ 1301.754974][T24692] alloc_inode+0x8e/0x250 [ 1301.755003][T24692] new_inode+0x22/0x1c0 [ 1301.755034][T24692] rpc_new_dir+0x96/0x420 [ 1301.755059][T24692] rpc_populate.constprop.0+0x125/0x1c0 [ 1301.755084][T24692] ? d_instantiate+0x8f/0xb0 [ 1301.755110][T24692] ? __pfx_rpc_fill_super+0x10/0x10 [ 1301.755134][T24692] rpc_fill_super+0x2b9/0x4f0 [ 1301.755158][T24692] ? __pfx_rpc_fill_super+0x10/0x10 [ 1301.755184][T24692] get_tree_keyed+0x10e/0x1d0 [ 1301.755206][T24692] vfs_get_tree+0x92/0x320 [ 1301.755224][T24692] vfs_cmd_create+0xd7/0x2a0 [ 1301.755264][T24692] __do_sys_fsconfig+0x55a/0xcb0 [ 1301.755296][T24692] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1301.755329][T24692] ? xfd_validate_state+0x129/0x190 [ 1301.755352][T24692] ? rcu_is_watching+0x12/0xc0 [ 1301.755377][T24692] do_syscall_64+0x115/0x840 [ 1301.755409][T24692] ? clear_bhb_loop+0x40/0x90 [ 1301.755432][T24692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1301.755450][T24692] RIP: 0033:0x7fef4859ce59 [ 1301.755466][T24692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1301.755485][T24692] RSP: 002b:00007fef49439028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1301.755504][T24692] RAX: ffffffffffffffda RBX: 00007fef48815fa0 RCX: 00007fef4859ce59 [ 1301.755517][T24692] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1301.755528][T24692] RBP: 00007fef48632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1301.755540][T24692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1301.755551][T24692] R13: 00007fef48816038 R14: 00007fef48815fa0 R15: 00007ffe7e5231e8 [ 1301.755576][T24692] [ 1301.755654][T24692] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1305.319558][T24743] random: crng reseeded on system resumption [ 1305.802817][T24756] FAULT_INJECTION: forcing a failure. [ 1305.802817][T24756] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.919983][T24756] CPU: 0 UID: 0 PID: 24756 Comm: syz.0.3943 Tainted: G L syzkaller #0 PREEMPT(full) [ 1305.920015][T24756] Tainted: [L]=SOFTLOCKUP [ 1305.920022][T24756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1305.920033][T24756] Call Trace: [ 1305.920041][T24756] [ 1305.920049][T24756] dump_stack_lvl+0x100/0x190 [ 1305.920086][T24756] should_fail_ex.cold+0x5/0xa [ 1305.920110][T24756] should_failslab+0xc2/0x120 [ 1305.920133][T24756] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1305.920164][T24756] ? __d_alloc+0x34/0xa40 [ 1305.920193][T24756] __d_alloc+0x34/0xa40 [ 1305.920220][T24756] d_alloc+0x4a/0x1e0 [ 1305.920246][T24756] lookup_one_qstr_excl+0x171/0x250 [ 1305.920277][T24756] start_dirop+0x59/0xb0 [ 1305.920305][T24756] simple_start_creating+0xf9/0x110 [ 1305.920328][T24756] ? __pfx_simple_start_creating+0x10/0x10 [ 1305.920351][T24756] ? dput.part.0+0xdd/0x570 [ 1305.920382][T24756] rpc_new_dir+0x27/0x420 [ 1305.920406][T24756] rpc_populate.constprop.0+0x125/0x1c0 [ 1305.920432][T24756] ? d_instantiate+0x8f/0xb0 [ 1305.920458][T24756] ? __pfx_rpc_fill_super+0x10/0x10 [ 1305.920481][T24756] rpc_fill_super+0x2b9/0x4f0 [ 1305.920506][T24756] ? __pfx_rpc_fill_super+0x10/0x10 [ 1305.920528][T24756] get_tree_keyed+0x10e/0x1d0 [ 1305.920550][T24756] vfs_get_tree+0x92/0x320 [ 1305.920569][T24756] vfs_cmd_create+0xd7/0x2a0 [ 1305.920600][T24756] __do_sys_fsconfig+0x55a/0xcb0 [ 1305.920630][T24756] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1305.920659][T24756] ? xfd_validate_state+0x129/0x190 [ 1305.920681][T24756] ? rcu_is_watching+0x12/0xc0 [ 1305.920705][T24756] do_syscall_64+0x115/0x840 [ 1305.920731][T24756] ? clear_bhb_loop+0x40/0x90 [ 1305.920753][T24756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.920772][T24756] RIP: 0033:0x7faf7a59ce59 [ 1305.920788][T24756] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1305.920806][T24756] RSP: 002b:00007faf7b4f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1305.920825][T24756] RAX: ffffffffffffffda RBX: 00007faf7a816090 RCX: 00007faf7a59ce59 [ 1305.920837][T24756] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1305.920847][T24756] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1305.920858][T24756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1305.920869][T24756] R13: 00007faf7a816128 R14: 00007faf7a816090 R15: 00007ffcfece86d8 [ 1305.920892][T24756] [ 1305.920902][T24756] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1306.648032][T24767] FAULT_INJECTION: forcing a failure. [ 1306.648032][T24767] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.818068][T24767] CPU: 0 UID: 0 PID: 24767 Comm: syz.1.3945 Tainted: G L syzkaller #0 PREEMPT(full) [ 1306.818101][T24767] Tainted: [L]=SOFTLOCKUP [ 1306.818108][T24767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1306.818118][T24767] Call Trace: [ 1306.818125][T24767] [ 1306.818133][T24767] dump_stack_lvl+0x100/0x190 [ 1306.818170][T24767] should_fail_ex.cold+0x5/0xa [ 1306.818194][T24767] should_failslab+0xc2/0x120 [ 1306.818217][T24767] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1306.818247][T24767] ? __d_alloc+0x34/0xa40 [ 1306.818277][T24767] __d_alloc+0x34/0xa40 [ 1306.818309][T24767] d_alloc+0x4a/0x1e0 [ 1306.818334][T24767] lookup_one_qstr_excl+0x171/0x250 [ 1306.818365][T24767] start_dirop+0x59/0xb0 [ 1306.818387][T24767] simple_start_creating+0xf9/0x110 [ 1306.818409][T24767] ? __pfx_simple_start_creating+0x10/0x10 [ 1306.818432][T24767] ? dput.part.0+0xdd/0x570 [ 1306.818463][T24767] rpc_new_dir+0x27/0x420 [ 1306.818487][T24767] rpc_populate.constprop.0+0x125/0x1c0 [ 1306.818511][T24767] ? d_instantiate+0x8f/0xb0 [ 1306.818537][T24767] ? __pfx_rpc_fill_super+0x10/0x10 [ 1306.818560][T24767] rpc_fill_super+0x2b9/0x4f0 [ 1306.818584][T24767] ? __pfx_rpc_fill_super+0x10/0x10 [ 1306.818607][T24767] get_tree_keyed+0x10e/0x1d0 [ 1306.818629][T24767] vfs_get_tree+0x92/0x320 [ 1306.818646][T24767] vfs_cmd_create+0xd7/0x2a0 [ 1306.818675][T24767] __do_sys_fsconfig+0x55a/0xcb0 [ 1306.818706][T24767] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1306.818735][T24767] ? xfd_validate_state+0x129/0x190 [ 1306.818757][T24767] ? rcu_is_watching+0x12/0xc0 [ 1306.818781][T24767] do_syscall_64+0x115/0x840 [ 1306.818806][T24767] ? clear_bhb_loop+0x40/0x90 [ 1306.818828][T24767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.818847][T24767] RIP: 0033:0x7fe68db9ce59 [ 1306.818864][T24767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1306.818882][T24767] RSP: 002b:00007fe68ea31028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1306.818901][T24767] RAX: ffffffffffffffda RBX: 00007fe68de16090 RCX: 00007fe68db9ce59 [ 1306.818913][T24767] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1306.818924][T24767] RBP: 00007fe68dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1306.818935][T24767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1306.818945][T24767] R13: 00007fe68de16128 R14: 00007fe68de16090 R15: 00007ffed91b2298 [ 1306.818969][T24767] [ 1306.818978][T24767] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1307.778604][T24775] FAULT_INJECTION: forcing a failure. [ 1307.778604][T24775] name failslab, interval 1, probability 0, space 0, times 0 [ 1307.932166][T24775] CPU: 0 UID: 0 PID: 24775 Comm: syz.0.3946 Tainted: G L syzkaller #0 PREEMPT(full) [ 1307.932198][T24775] Tainted: [L]=SOFTLOCKUP [ 1307.932205][T24775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1307.932223][T24775] Call Trace: [ 1307.932229][T24775] [ 1307.932237][T24775] dump_stack_lvl+0x100/0x190 [ 1307.932274][T24775] should_fail_ex.cold+0x5/0xa [ 1307.932299][T24775] should_failslab+0xc2/0x120 [ 1307.932322][T24775] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1307.932353][T24775] ? alloc_inode+0x68/0x250 [ 1307.932381][T24775] ? start_dirop+0x79/0xb0 [ 1307.932402][T24775] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 1307.932426][T24775] alloc_inode+0x68/0x250 [ 1307.932453][T24775] new_inode+0x22/0x1c0 [ 1307.932484][T24775] rpc_new_dir+0x96/0x420 [ 1307.932506][T24775] rpc_populate.constprop.0+0x125/0x1c0 [ 1307.932531][T24775] ? d_instantiate+0x8f/0xb0 [ 1307.932557][T24775] ? __pfx_rpc_fill_super+0x10/0x10 [ 1307.932580][T24775] rpc_fill_super+0x2b9/0x4f0 [ 1307.932604][T24775] ? __pfx_rpc_fill_super+0x10/0x10 [ 1307.932628][T24775] get_tree_keyed+0x10e/0x1d0 [ 1307.932650][T24775] vfs_get_tree+0x92/0x320 [ 1307.932669][T24775] vfs_cmd_create+0xd7/0x2a0 [ 1307.932698][T24775] __do_sys_fsconfig+0x55a/0xcb0 [ 1307.932728][T24775] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1307.932756][T24775] ? xfd_validate_state+0x129/0x190 [ 1307.932779][T24775] ? rcu_is_watching+0x12/0xc0 [ 1307.932803][T24775] do_syscall_64+0x115/0x840 [ 1307.932828][T24775] ? clear_bhb_loop+0x40/0x90 [ 1307.932851][T24775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1307.932869][T24775] RIP: 0033:0x7faf7a59ce59 [ 1307.932886][T24775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1307.932903][T24775] RSP: 002b:00007faf7b4f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1307.932922][T24775] RAX: ffffffffffffffda RBX: 00007faf7a816090 RCX: 00007faf7a59ce59 [ 1307.932934][T24775] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1307.932945][T24775] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1307.932956][T24775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1307.932967][T24775] R13: 00007faf7a816128 R14: 00007faf7a816090 R15: 00007ffcfece86d8 [ 1307.932990][T24775] [ 1307.933020][T24775] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1309.965996][T14795] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 1309.973700][T14795] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:0' [ 1309.983330][T14795] CPU: 0 UID: 0 PID: 14795 Comm: kworker/u12:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1309.983359][T14795] Tainted: [L]=SOFTLOCKUP [ 1309.983366][T14795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1309.983379][T14795] Workqueue: hci2 hci_rx_work [ 1309.983408][T14795] Call Trace: [ 1309.983414][T14795] [ 1309.983421][T14795] dump_stack_lvl+0x100/0x190 [ 1309.983455][T14795] sysfs_warn_dup.cold+0x1c/0x28 [ 1309.983483][T14795] sysfs_create_dir_ns+0x24b/0x2b0 [ 1309.983504][T14795] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1309.983522][T14795] ? find_held_lock+0x2b/0x80 [ 1309.983545][T14795] ? kobject_add_internal+0x25f/0x930 [ 1309.983564][T14795] ? kobject_add_internal+0x25f/0x930 [ 1309.983584][T14795] ? do_raw_spin_unlock+0x145/0x1e0 [ 1309.983606][T14795] kobject_add_internal+0x2c8/0x930 [ 1309.983627][T14795] kobject_add+0x16a/0x1e0 [ 1309.983646][T14795] ? __pfx_kobject_add+0x10/0x10 [ 1309.983663][T14795] ? class_to_subsys+0x10f/0x150 [ 1309.983690][T14795] ? kobject_put+0xb9/0x640 [ 1309.983717][T14795] ? _raw_spin_unlock+0x28/0x50 [ 1309.983751][T14795] device_add+0x294/0x1950 [ 1309.983772][T14795] ? __pfx_dev_set_name+0x10/0x10 [ 1309.983796][T14795] ? __pfx_device_add+0x10/0x10 [ 1309.983816][T14795] ? mgmt_send_event_skb+0x2fb/0x460 [ 1309.983847][T14795] hci_conn_add_sysfs+0x1a3/0x260 [ 1309.983875][T14795] le_conn_complete_evt+0x11eb/0x1f60 [ 1309.983906][T14795] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 1309.983928][T14795] ? __pfx_bt_warn+0x10/0x10 [ 1309.983962][T14795] hci_le_conn_complete_evt+0x23c/0x3a0 [ 1309.983987][T14795] ? skb_pull_data+0x15f/0x1e0 [ 1309.984016][T14795] hci_le_meta_evt+0x34a/0x5f0 [ 1309.984041][T14795] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1309.984068][T14795] hci_event_packet+0x51c/0xcd0 [ 1309.984091][T14795] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1309.984116][T14795] ? __pfx_hci_event_packet+0x10/0x10 [ 1309.984142][T14795] ? kcov_remote_start+0x374/0x660 [ 1309.984168][T14795] ? lockdep_hardirqs_on+0x78/0x100 [ 1309.984202][T14795] hci_rx_work+0x451/0xfc0 [ 1309.984230][T14795] process_one_work+0xa0e/0x1980 [ 1309.984265][T14795] ? __pfx_process_one_work+0x10/0x10 [ 1309.984290][T14795] ? __pfx_hci_rx_work+0x10/0x10 [ 1309.984315][T14795] worker_thread+0x5ef/0xe50 [ 1309.984338][T14795] ? __pfx_worker_thread+0x10/0x10 [ 1309.984357][T14795] ? kthread+0x13a/0x450 [ 1309.984382][T14795] ? __pfx_worker_thread+0x10/0x10 [ 1309.984398][T14795] kthread+0x370/0x450 [ 1309.984424][T14795] ? __pfx_kthread+0x10/0x10 [ 1309.984454][T14795] ret_from_fork+0x72b/0xd50 [ 1309.984476][T14795] ? __pfx_ret_from_fork+0x10/0x10 [ 1309.984497][T14795] ? __switch_to+0x800/0x1100 [ 1309.984520][T14795] ? __switch_to_asm+0x39/0x70 [ 1309.984543][T14795] ? __pfx_kthread+0x10/0x10 [ 1309.984572][T14795] ret_from_fork_asm+0x1a/0x30 [ 1309.984606][T14795] [ 1310.559689][T14795] kobject: kobject_add_internal failed for hci2:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 1310.573762][T14795] Bluetooth: hci2: failed to register connection device [ 1311.955456][T24820] phram: not enough arguments [ 1312.038790][T24831] phram: not enough arguments [ 1312.649663][T23796] Bluetooth: hci2: command 0x0406 tx timeout [ 1313.373164][T24848] FAULT_INJECTION: forcing a failure. [ 1313.373164][T24848] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.400913][T24850] FAULT_INJECTION: forcing a failure. [ 1313.400913][T24850] name failslab, interval 1, probability 0, space 0, times 0 [ 1313.482780][T24850] CPU: 0 UID: 0 PID: 24850 Comm: syz.6.3954 Tainted: G L syzkaller #0 PREEMPT(full) [ 1313.482812][T24850] Tainted: [L]=SOFTLOCKUP [ 1313.482823][T24850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1313.482835][T24850] Call Trace: [ 1313.482842][T24850] [ 1313.482850][T24850] dump_stack_lvl+0x100/0x190 [ 1313.482887][T24850] should_fail_ex.cold+0x5/0xa [ 1313.482911][T24850] should_failslab+0xc2/0x120 [ 1313.482935][T24850] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1313.482964][T24850] ? security_inode_alloc+0x3b/0x2c0 [ 1313.482988][T24850] ? lockdep_init_map_type+0x5c/0x250 [ 1313.483021][T24850] security_inode_alloc+0x3b/0x2c0 [ 1313.483043][T24850] inode_init_always_gfp+0xc77/0xfb0 [ 1313.483069][T24850] alloc_inode+0x8e/0x250 [ 1313.483098][T24850] new_inode+0x22/0x1c0 [ 1313.483128][T24850] rpc_new_dir+0x96/0x420 [ 1313.483153][T24850] rpc_populate.constprop.0+0x125/0x1c0 [ 1313.483178][T24850] ? d_instantiate+0x8f/0xb0 [ 1313.483212][T24850] ? __pfx_rpc_fill_super+0x10/0x10 [ 1313.483236][T24850] rpc_fill_super+0x2b9/0x4f0 [ 1313.483260][T24850] ? __pfx_rpc_fill_super+0x10/0x10 [ 1313.483283][T24850] get_tree_keyed+0x10e/0x1d0 [ 1313.483305][T24850] vfs_get_tree+0x92/0x320 [ 1313.483323][T24850] vfs_cmd_create+0xd7/0x2a0 [ 1313.483353][T24850] __do_sys_fsconfig+0x55a/0xcb0 [ 1313.483385][T24850] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1313.483414][T24850] ? xfd_validate_state+0x129/0x190 [ 1313.483436][T24850] ? rcu_is_watching+0x12/0xc0 [ 1313.483460][T24850] do_syscall_64+0x115/0x840 [ 1313.483486][T24850] ? clear_bhb_loop+0x40/0x90 [ 1313.483508][T24850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.483527][T24850] RIP: 0033:0x7fef4859ce59 [ 1313.483543][T24850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.483561][T24850] RSP: 002b:00007fef49418028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1313.483580][T24850] RAX: ffffffffffffffda RBX: 00007fef48816090 RCX: 00007fef4859ce59 [ 1313.483593][T24850] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1313.483604][T24850] RBP: 00007fef48632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1313.483615][T24850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1313.483626][T24850] R13: 00007fef48816128 R14: 00007fef48816090 R15: 00007ffe7e5231e8 [ 1313.483649][T24850] [ 1313.483696][T24850] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1313.773826][T24848] CPU: 0 UID: 0 PID: 24848 Comm: syz.0.3963 Tainted: G L syzkaller #0 PREEMPT(full) [ 1313.773859][T24848] Tainted: [L]=SOFTLOCKUP [ 1313.773866][T24848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1313.773877][T24848] Call Trace: [ 1313.773884][T24848] [ 1313.773892][T24848] dump_stack_lvl+0x100/0x190 [ 1313.773927][T24848] should_fail_ex.cold+0x5/0xa [ 1313.773951][T24848] should_failslab+0xc2/0x120 [ 1313.773974][T24848] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1313.774005][T24848] ? __d_alloc+0x34/0xa40 [ 1313.774034][T24848] __d_alloc+0x34/0xa40 [ 1313.774061][T24848] d_alloc+0x4a/0x1e0 [ 1313.774086][T24848] lookup_one_qstr_excl+0x171/0x250 [ 1313.774117][T24848] start_dirop+0x59/0xb0 [ 1313.774140][T24848] simple_start_creating+0xf9/0x110 [ 1313.774162][T24848] ? __pfx_simple_start_creating+0x10/0x10 [ 1313.774185][T24848] ? dput.part.0+0xdd/0x570 [ 1313.774221][T24848] rpc_new_dir+0x27/0x420 [ 1313.774246][T24848] rpc_populate.constprop.0+0x125/0x1c0 [ 1313.774271][T24848] ? d_instantiate+0x8f/0xb0 [ 1313.774297][T24848] ? __pfx_rpc_fill_super+0x10/0x10 [ 1313.774321][T24848] rpc_fill_super+0x2b9/0x4f0 [ 1313.774345][T24848] ? __pfx_rpc_fill_super+0x10/0x10 [ 1313.774368][T24848] get_tree_keyed+0x10e/0x1d0 [ 1313.774399][T24848] vfs_get_tree+0x92/0x320 [ 1313.774417][T24848] vfs_cmd_create+0xd7/0x2a0 [ 1313.774448][T24848] __do_sys_fsconfig+0x55a/0xcb0 [ 1313.774478][T24848] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1313.774508][T24848] ? xfd_validate_state+0x129/0x190 [ 1313.774532][T24848] ? rcu_is_watching+0x12/0xc0 [ 1313.774557][T24848] do_syscall_64+0x115/0x840 [ 1313.774583][T24848] ? clear_bhb_loop+0x40/0x90 [ 1313.774606][T24848] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.774625][T24848] RIP: 0033:0x7faf7a59ce59 [ 1313.774641][T24848] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.774659][T24848] RSP: 002b:00007faf7b4f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1313.774678][T24848] RAX: ffffffffffffffda RBX: 00007faf7a816090 RCX: 00007faf7a59ce59 [ 1313.774690][T24848] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1313.774701][T24848] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1313.774712][T24848] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1313.774729][T24848] R13: 00007faf7a816128 R14: 00007faf7a816090 R15: 00007ffcfece86d8 [ 1313.774753][T24848] [ 1313.775151][T24848] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1314.728390][T23796] Bluetooth: hci2: command 0x0406 tx timeout [ 1315.476203][T24878] FAULT_INJECTION: forcing a failure. [ 1315.476203][T24878] name failslab, interval 1, probability 0, space 0, times 0 [ 1315.618789][T24884] netlink: 322 bytes leftover after parsing attributes in process `syz.6.3958'. [ 1315.670975][T24878] CPU: 0 UID: 0 PID: 24878 Comm: syz.5.3957 Tainted: G L syzkaller #0 PREEMPT(full) [ 1315.671007][T24878] Tainted: [L]=SOFTLOCKUP [ 1315.671014][T24878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1315.671025][T24878] Call Trace: [ 1315.671031][T24878] [ 1315.671039][T24878] dump_stack_lvl+0x100/0x190 [ 1315.671076][T24878] should_fail_ex.cold+0x5/0xa [ 1315.671100][T24878] should_failslab+0xc2/0x120 [ 1315.671124][T24878] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1315.671152][T24878] ? security_inode_alloc+0x3b/0x2c0 [ 1315.671174][T24878] ? lockdep_init_map_type+0x5c/0x250 [ 1315.671206][T24878] security_inode_alloc+0x3b/0x2c0 [ 1315.671228][T24878] inode_init_always_gfp+0xc77/0xfb0 [ 1315.671255][T24878] alloc_inode+0x8e/0x250 [ 1315.671284][T24878] new_inode+0x22/0x1c0 [ 1315.671313][T24878] rpc_new_dir+0x96/0x420 [ 1315.671340][T24878] rpc_populate.constprop.0+0x125/0x1c0 [ 1315.671364][T24878] ? d_instantiate+0x8f/0xb0 [ 1315.671391][T24878] ? __pfx_rpc_fill_super+0x10/0x10 [ 1315.671419][T24878] rpc_fill_super+0x2b9/0x4f0 [ 1315.671444][T24878] ? __pfx_rpc_fill_super+0x10/0x10 [ 1315.671467][T24878] get_tree_keyed+0x10e/0x1d0 [ 1315.671490][T24878] vfs_get_tree+0x92/0x320 [ 1315.671509][T24878] vfs_cmd_create+0xd7/0x2a0 [ 1315.671540][T24878] __do_sys_fsconfig+0x55a/0xcb0 [ 1315.671570][T24878] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1315.671599][T24878] ? xfd_validate_state+0x129/0x190 [ 1315.671622][T24878] ? rcu_is_watching+0x12/0xc0 [ 1315.671647][T24878] do_syscall_64+0x115/0x840 [ 1315.671672][T24878] ? clear_bhb_loop+0x40/0x90 [ 1315.671694][T24878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.671721][T24878] RIP: 0033:0x7f3f3519ce59 [ 1315.671738][T24878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.671756][T24878] RSP: 002b:00007f3f36118028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1315.671775][T24878] RAX: ffffffffffffffda RBX: 00007f3f35416090 RCX: 00007f3f3519ce59 [ 1315.671787][T24878] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1315.671798][T24878] RBP: 00007f3f35232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1315.671810][T24878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1315.671821][T24878] R13: 00007f3f35416128 R14: 00007f3f35416090 R15: 00007ffd8e48e2a8 [ 1315.671845][T24878] [ 1316.991474][T24878] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1317.943411][T24908] FAULT_INJECTION: forcing a failure. [ 1317.943411][T24908] name failslab, interval 1, probability 0, space 0, times 0 [ 1318.453913][T24908] CPU: 0 UID: 0 PID: 24908 Comm: syz.5.3960 Tainted: G L syzkaller #0 PREEMPT(full) [ 1318.453945][T24908] Tainted: [L]=SOFTLOCKUP [ 1318.453952][T24908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1318.453963][T24908] Call Trace: [ 1318.453970][T24908] [ 1318.453978][T24908] dump_stack_lvl+0x100/0x190 [ 1318.454017][T24908] should_fail_ex.cold+0x5/0xa [ 1318.454041][T24908] should_failslab+0xc2/0x120 [ 1318.454064][T24908] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1318.454094][T24908] ? security_inode_alloc+0x3b/0x2c0 [ 1318.454115][T24908] ? lockdep_init_map_type+0x5c/0x250 [ 1318.454147][T24908] security_inode_alloc+0x3b/0x2c0 [ 1318.454168][T24908] inode_init_always_gfp+0xc77/0xfb0 [ 1318.454196][T24908] alloc_inode+0x8e/0x250 [ 1318.454224][T24908] new_inode+0x22/0x1c0 [ 1318.454254][T24908] rpc_new_dir+0x96/0x420 [ 1318.454279][T24908] rpc_populate.constprop.0+0x125/0x1c0 [ 1318.454311][T24908] ? d_instantiate+0x8f/0xb0 [ 1318.454337][T24908] ? __pfx_rpc_fill_super+0x10/0x10 [ 1318.454361][T24908] rpc_fill_super+0x2b9/0x4f0 [ 1318.454385][T24908] ? __pfx_rpc_fill_super+0x10/0x10 [ 1318.454408][T24908] get_tree_keyed+0x10e/0x1d0 [ 1318.454430][T24908] vfs_get_tree+0x92/0x320 [ 1318.454448][T24908] vfs_cmd_create+0xd7/0x2a0 [ 1318.454477][T24908] __do_sys_fsconfig+0x55a/0xcb0 [ 1318.454508][T24908] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1318.454536][T24908] ? xfd_validate_state+0x129/0x190 [ 1318.454558][T24908] ? rcu_is_watching+0x12/0xc0 [ 1318.454582][T24908] do_syscall_64+0x115/0x840 [ 1318.454607][T24908] ? clear_bhb_loop+0x40/0x90 [ 1318.454630][T24908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.454649][T24908] RIP: 0033:0x7f3f3519ce59 [ 1318.454666][T24908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.454684][T24908] RSP: 002b:00007f3f36139028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1318.454703][T24908] RAX: ffffffffffffffda RBX: 00007f3f35415fa0 RCX: 00007f3f3519ce59 [ 1318.454718][T24908] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1318.454728][T24908] RBP: 00007f3f35232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1318.454739][T24908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1318.454750][T24908] R13: 00007f3f35416038 R14: 00007f3f35415fa0 R15: 00007ffd8e48e2a8 [ 1318.454773][T24908] [ 1318.720904][T24908] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1323.394619][T24905] Process accounting paused [ 1323.445078][T24957] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3967'. [ 1326.837024][ T5732] Process accounting resumed [ 1326.863395][ T5732] Process accounting resumed [ 1326.896689][ T5732] Process accounting resumed [ 1326.930321][ T5732] Process accounting resumed [ 1326.955411][ T5732] Process accounting resumed [ 1326.988091][ T5732] Process accounting resumed [ 1327.018838][ T5732] Process accounting resumed [ 1327.078633][ T5732] Process accounting resumed [ 1327.112243][ T5732] Process accounting resumed [ 1327.140030][ T5732] Process accounting resumed [ 1327.168912][ T5732] Process accounting resumed [ 1327.206792][ T5732] Process accounting resumed [ 1328.907127][T24982] Process accounting resumed [ 1332.610351][T25060] netlink: 322 bytes leftover after parsing attributes in process `syz.0.3985'. [ 1332.993885][T24549] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1331 with max blocks 3 with error 117 [ 1333.080540][T24549] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1333.080540][T24549] [ 1333.987212][T25073] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3990'. [ 1334.086937][T25085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3992'. [ 1334.785605][T25101] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1335.150062][T25110] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3995'. [ 1335.752214][T25130] random: crng reseeded on system resumption [ 1338.012035][T25152] usb usb22: usbfs: process 25152 (syz.6.4006) did not claim interface 1 before use [ 1338.112831][T25153] netlink: 342 bytes leftover after parsing attributes in process `syz.1.4005'. [ 1338.948772][T25162] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4007'. [ 1339.303400][T25159] Process accounting resumed [ 1343.118996][T25213] netlink: 'syz.6.4018': attribute type 1 has an invalid length. [ 1343.166582][T25215] FAULT_INJECTION: forcing a failure. [ 1343.166582][T25215] name failslab, interval 1, probability 0, space 0, times 0 [ 1343.242233][T25213] netlink: 33 bytes leftover after parsing attributes in process `syz.6.4018'. [ 1343.270461][T24507] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1330 with max blocks 21 with error 117 [ 1343.330007][T25215] CPU: 0 UID: 0 PID: 25215 Comm: syz.0.4025 Tainted: G L syzkaller #0 PREEMPT(full) [ 1343.330039][T25215] Tainted: [L]=SOFTLOCKUP [ 1343.330046][T25215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1343.330058][T25215] Call Trace: [ 1343.330064][T25215] [ 1343.330072][T25215] dump_stack_lvl+0x100/0x190 [ 1343.330110][T25215] should_fail_ex.cold+0x5/0xa [ 1343.330134][T25215] should_failslab+0xc2/0x120 [ 1343.330157][T25215] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1343.330197][T25215] ? __d_alloc+0x34/0xa40 [ 1343.330226][T25215] __d_alloc+0x34/0xa40 [ 1343.330253][T25215] d_alloc+0x4a/0x1e0 [ 1343.330279][T25215] lookup_one_qstr_excl+0x171/0x250 [ 1343.330310][T25215] start_dirop+0x59/0xb0 [ 1343.330331][T25215] simple_start_creating+0xf9/0x110 [ 1343.330355][T25215] ? __pfx_simple_start_creating+0x10/0x10 [ 1343.330378][T25215] ? dput.part.0+0xdd/0x570 [ 1343.330409][T25215] rpc_new_dir+0x27/0x420 [ 1343.330433][T25215] rpc_populate.constprop.0+0x125/0x1c0 [ 1343.330458][T25215] ? d_instantiate+0x8f/0xb0 [ 1343.330484][T25215] ? __pfx_rpc_fill_super+0x10/0x10 [ 1343.330507][T25215] rpc_fill_super+0x2b9/0x4f0 [ 1343.330531][T25215] ? __pfx_rpc_fill_super+0x10/0x10 [ 1343.330554][T25215] get_tree_keyed+0x10e/0x1d0 [ 1343.330575][T25215] vfs_get_tree+0x92/0x320 [ 1343.330593][T25215] vfs_cmd_create+0xd7/0x2a0 [ 1343.330623][T25215] __do_sys_fsconfig+0x55a/0xcb0 [ 1343.330654][T25215] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1343.330682][T25215] ? xfd_validate_state+0x129/0x190 [ 1343.330705][T25215] ? rcu_is_watching+0x12/0xc0 [ 1343.330730][T25215] do_syscall_64+0x115/0x840 [ 1343.330755][T25215] ? clear_bhb_loop+0x40/0x90 [ 1343.330778][T25215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1343.330797][T25215] RIP: 0033:0x7faf7a59ce59 [ 1343.330813][T25215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1343.330831][T25215] RSP: 002b:00007faf7b4f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1343.330850][T25215] RAX: ffffffffffffffda RBX: 00007faf7a816090 RCX: 00007faf7a59ce59 [ 1343.330862][T25215] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1343.330872][T25215] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1343.330883][T25215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1343.330894][T25215] R13: 00007faf7a816128 R14: 00007faf7a816090 R15: 00007ffcfece86d8 [ 1343.330917][T25215] [ 1343.330926][T25215] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1343.614285][T24507] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1343.614285][T24507] [ 1343.699209][T25221] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4017'. [ 1343.855482][T24507] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1319 with max blocks 7 with error 117 [ 1343.918259][T24507] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1343.918259][T24507] [ 1346.003028][T25266] ERROR: Out of memory at tomoyo_memory_ok. [ 1346.269821][T25270] random: crng reseeded on system resumption [ 1347.444675][T25283] FAULT_INJECTION: forcing a failure. [ 1347.444675][T25283] name failslab, interval 1, probability 0, space 0, times 0 [ 1347.606748][T25283] CPU: 0 UID: 0 PID: 25283 Comm: syz.6.4032 Tainted: G L syzkaller #0 PREEMPT(full) [ 1347.606781][T25283] Tainted: [L]=SOFTLOCKUP [ 1347.606788][T25283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1347.606799][T25283] Call Trace: [ 1347.606806][T25283] [ 1347.606814][T25283] dump_stack_lvl+0x100/0x190 [ 1347.606850][T25283] should_fail_ex.cold+0x5/0xa [ 1347.606874][T25283] should_failslab+0xc2/0x120 [ 1347.606898][T25283] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1347.606927][T25283] ? security_inode_alloc+0x3b/0x2c0 [ 1347.606948][T25283] ? lockdep_init_map_type+0x5c/0x250 [ 1347.606981][T25283] security_inode_alloc+0x3b/0x2c0 [ 1347.607003][T25283] inode_init_always_gfp+0xc77/0xfb0 [ 1347.607030][T25283] alloc_inode+0x8e/0x250 [ 1347.607058][T25283] new_inode+0x22/0x1c0 [ 1347.607088][T25283] rpc_new_dir+0x96/0x420 [ 1347.607121][T25283] rpc_populate.constprop.0+0x125/0x1c0 [ 1347.607146][T25283] ? d_instantiate+0x8f/0xb0 [ 1347.607174][T25283] ? __pfx_rpc_fill_super+0x10/0x10 [ 1347.607198][T25283] rpc_fill_super+0x2b9/0x4f0 [ 1347.607223][T25283] ? __pfx_rpc_fill_super+0x10/0x10 [ 1347.607246][T25283] get_tree_keyed+0x10e/0x1d0 [ 1347.607269][T25283] vfs_get_tree+0x92/0x320 [ 1347.607288][T25283] vfs_cmd_create+0xd7/0x2a0 [ 1347.607318][T25283] __do_sys_fsconfig+0x55a/0xcb0 [ 1347.607349][T25283] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1347.607378][T25283] ? xfd_validate_state+0x129/0x190 [ 1347.607401][T25283] ? rcu_is_watching+0x12/0xc0 [ 1347.607425][T25283] do_syscall_64+0x115/0x840 [ 1347.607450][T25283] ? clear_bhb_loop+0x40/0x90 [ 1347.607472][T25283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1347.607491][T25283] RIP: 0033:0x7fef4859ce59 [ 1347.607508][T25283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1347.607526][T25283] RSP: 002b:00007fef49418028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1347.607544][T25283] RAX: ffffffffffffffda RBX: 00007fef48816090 RCX: 00007fef4859ce59 [ 1347.607556][T25283] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1347.607567][T25283] RBP: 00007fef48632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1347.607578][T25283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1347.607588][T25283] R13: 00007fef48816128 R14: 00007fef48816090 R15: 00007ffe7e5231e8 [ 1347.607612][T25283] [ 1347.607658][T25283] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1348.748483][T25303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4038'. [ 1348.815126][T25305] FAULT_INJECTION: forcing a failure. [ 1348.815126][T25305] name failslab, interval 1, probability 0, space 0, times 0 [ 1349.085427][T25305] CPU: 0 UID: 0 PID: 25305 Comm: syz.0.4038 Tainted: G L syzkaller #0 PREEMPT(full) [ 1349.085459][T25305] Tainted: [L]=SOFTLOCKUP [ 1349.085466][T25305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1349.085476][T25305] Call Trace: [ 1349.085483][T25305] [ 1349.085491][T25305] dump_stack_lvl+0x100/0x190 [ 1349.085526][T25305] should_fail_ex.cold+0x5/0xa [ 1349.085549][T25305] ? xfrm_hash_alloc+0xcf/0x100 [ 1349.085639][T25305] should_failslab+0xc2/0x120 [ 1349.085661][T25305] __kmalloc_noprof+0xe0/0x850 [ 1349.085694][T25305] xfrm_hash_alloc+0xcf/0x100 [ 1349.085720][T25305] xfrm_net_init+0x35f/0xcf0 [ 1349.085772][T25305] ? __pfx_xfrm_net_init+0x10/0x10 [ 1349.085799][T25305] ops_init+0x1e2/0x5f0 [ 1349.085822][T25305] setup_net+0x118/0x3a0 [ 1349.085844][T25305] ? __pfx_setup_net+0x10/0x10 [ 1349.085864][T25305] ? mutex_init_lockdep+0xf1/0x120 [ 1349.085887][T25305] copy_net_ns+0x46f/0x7c0 [ 1349.085911][T25305] create_new_namespaces+0x3ea/0xac0 [ 1349.085938][T25305] unshare_nsproxy_namespaces+0xf2/0x220 [ 1349.085963][T25305] ksys_unshare+0x438/0xab0 [ 1349.085991][T25305] ? __pfx_ksys_unshare+0x10/0x10 [ 1349.086034][T25305] ? xfd_validate_state+0x129/0x190 [ 1349.086060][T25305] __x64_sys_unshare+0x31/0x40 [ 1349.086086][T25305] do_syscall_64+0x115/0x840 [ 1349.086117][T25305] ? clear_bhb_loop+0x40/0x90 [ 1349.086139][T25305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1349.086158][T25305] RIP: 0033:0x7faf7a59ce59 [ 1349.086173][T25305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1349.086191][T25305] RSP: 002b:00007faf7b4d5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1349.086209][T25305] RAX: ffffffffffffffda RBX: 00007faf7a816180 RCX: 00007faf7a59ce59 [ 1349.086221][T25305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1349.086232][T25305] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1349.086243][T25305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1349.086254][T25305] R13: 00007faf7a816218 R14: 00007faf7a816180 R15: 00007ffcfece86d8 [ 1349.086277][T25305] [ 1351.029604][T25356] FAULT_INJECTION: forcing a failure. [ 1351.029604][T25356] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1351.117824][T25356] CPU: 0 UID: 0 PID: 25356 Comm: syz.6.4045 Tainted: G L syzkaller #0 PREEMPT(full) [ 1351.117857][T25356] Tainted: [L]=SOFTLOCKUP [ 1351.117864][T25356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1351.117875][T25356] Call Trace: [ 1351.117882][T25356] [ 1351.117890][T25356] dump_stack_lvl+0x100/0x190 [ 1351.117927][T25356] should_fail_ex.cold+0x5/0xa [ 1351.117951][T25356] get_futex_key+0x1d2/0x1510 [ 1351.117983][T25356] ? __pfx_get_futex_key+0x10/0x10 [ 1351.118023][T25356] ? is_bpf_text_address+0x94/0x1a0 [ 1351.118069][T25356] ? kernel_text_address+0x8d/0x100 [ 1351.118087][T25356] ? __kernel_text_address+0xd/0x30 [ 1351.118105][T25356] ? unwind_get_return_address+0x59/0xa0 [ 1351.118133][T25356] futex_wait_setup+0x83/0x510 [ 1351.118162][T25356] __futex_wait+0x19f/0x300 [ 1351.118188][T25356] ? __pfx___futex_wait+0x10/0x10 [ 1351.118210][T25356] ? __lock_acquire+0x4a5/0x2630 [ 1351.118241][T25356] ? __pfx_futex_wake_mark+0x10/0x10 [ 1351.118267][T25356] ? futex_hash+0x2ad/0x370 [ 1351.118297][T25356] ? futex_hash+0x141/0x370 [ 1351.118327][T25356] futex_wait+0xe6/0x370 [ 1351.118350][T25356] ? __pfx_futex_wait+0x10/0x10 [ 1351.118377][T25356] ? find_held_lock+0x2b/0x80 [ 1351.118399][T25356] ? clockevents_program_event+0x23e/0x820 [ 1351.118420][T25356] ? clockevents_program_event+0x23e/0x820 [ 1351.118443][T25356] do_futex+0x1ef/0x350 [ 1351.118462][T25356] ? __pfx_do_futex+0x10/0x10 [ 1351.118480][T25356] ? clockevents_program_event+0x1ef/0x820 [ 1351.118505][T25356] __x64_sys_futex+0x34f/0x4d0 [ 1351.118525][T25356] ? __hrtimer_rearm_deferred+0x24d/0x740 [ 1351.118551][T25356] ? __pfx___x64_sys_futex+0x10/0x10 [ 1351.118574][T25356] ? rcu_is_watching+0x12/0xc0 [ 1351.118598][T25356] do_syscall_64+0x115/0x840 [ 1351.118624][T25356] ? clear_bhb_loop+0x40/0x90 [ 1351.118646][T25356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.118665][T25356] RIP: 0033:0x7fef4859ce59 [ 1351.118682][T25356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1351.118699][T25356] RSP: 002b:00007fef494390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1351.118718][T25356] RAX: ffffffffffffffda RBX: 00007fef48815fa8 RCX: 00007fef4859ce59 [ 1351.118731][T25356] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fef48815fa8 [ 1351.118742][T25356] RBP: 00007fef48815fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1351.118753][T25356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1351.118763][T25356] R13: 00007fef48816038 R14: 00007ffe7e523100 R15: 00007ffe7e5231e8 [ 1351.118786][T25356] [ 1352.264436][T25494] netlink: 294 bytes leftover after parsing attributes in process `syz.5.4049'. [ 1353.104939][T25511] FAULT_INJECTION: forcing a failure. [ 1353.104939][T25511] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.223840][T25511] CPU: 0 UID: 0 PID: 25511 Comm: syz.6.4051 Tainted: G L syzkaller #0 PREEMPT(full) [ 1353.223872][T25511] Tainted: [L]=SOFTLOCKUP [ 1353.223879][T25511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1353.223891][T25511] Call Trace: [ 1353.223898][T25511] [ 1353.223905][T25511] dump_stack_lvl+0x100/0x190 [ 1353.223942][T25511] should_fail_ex.cold+0x5/0xa [ 1353.223967][T25511] should_failslab+0xc2/0x120 [ 1353.223990][T25511] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1353.224019][T25511] ? security_inode_alloc+0x3b/0x2c0 [ 1353.224047][T25511] ? lockdep_init_map_type+0x5c/0x250 [ 1353.224080][T25511] security_inode_alloc+0x3b/0x2c0 [ 1353.224102][T25511] inode_init_always_gfp+0xc77/0xfb0 [ 1353.224128][T25511] alloc_inode+0x8e/0x250 [ 1353.224157][T25511] new_inode+0x22/0x1c0 [ 1353.224187][T25511] rpc_new_dir+0x96/0x420 [ 1353.224212][T25511] rpc_populate.constprop.0+0x125/0x1c0 [ 1353.224237][T25511] ? d_instantiate+0x8f/0xb0 [ 1353.224264][T25511] ? __pfx_rpc_fill_super+0x10/0x10 [ 1353.224287][T25511] rpc_fill_super+0x2b9/0x4f0 [ 1353.224311][T25511] ? __pfx_rpc_fill_super+0x10/0x10 [ 1353.224334][T25511] get_tree_keyed+0x10e/0x1d0 [ 1353.224356][T25511] vfs_get_tree+0x92/0x320 [ 1353.224374][T25511] vfs_cmd_create+0xd7/0x2a0 [ 1353.224403][T25511] __do_sys_fsconfig+0x55a/0xcb0 [ 1353.224434][T25511] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1353.224463][T25511] ? xfd_validate_state+0x129/0x190 [ 1353.224485][T25511] ? rcu_is_watching+0x12/0xc0 [ 1353.224509][T25511] do_syscall_64+0x115/0x840 [ 1353.224534][T25511] ? clear_bhb_loop+0x40/0x90 [ 1353.224558][T25511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.224579][T25511] RIP: 0033:0x7fef4859ce59 [ 1353.224596][T25511] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1353.224614][T25511] RSP: 002b:00007fef49418028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1353.224632][T25511] RAX: ffffffffffffffda RBX: 00007fef48816090 RCX: 00007fef4859ce59 [ 1353.224644][T25511] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1353.224655][T25511] RBP: 00007fef48632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1353.224666][T25511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.224676][T25511] R13: 00007fef48816128 R14: 00007fef48816090 R15: 00007ffe7e5231e8 [ 1353.224700][T25511] [ 1353.901356][T25339] Process accounting resumed [ 1354.782222][T25511] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1356.165466][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1356.179046][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1357.203498][T25562] ERROR: Out of memory at tomoyo_memory_ok. [ 1357.942211][T25576] FAULT_INJECTION: forcing a failure. [ 1357.942211][T25576] name failslab, interval 1, probability 0, space 0, times 0 [ 1358.061230][T25576] CPU: 0 UID: 0 PID: 25576 Comm: syz.0.4067 Tainted: G L syzkaller #0 PREEMPT(full) [ 1358.061263][T25576] Tainted: [L]=SOFTLOCKUP [ 1358.061270][T25576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1358.061281][T25576] Call Trace: [ 1358.061288][T25576] [ 1358.061296][T25576] dump_stack_lvl+0x100/0x190 [ 1358.061332][T25576] should_fail_ex.cold+0x5/0xa [ 1358.061356][T25576] should_failslab+0xc2/0x120 [ 1358.061380][T25576] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1358.061409][T25576] ? security_inode_alloc+0x3b/0x2c0 [ 1358.061429][T25576] ? lockdep_init_map_type+0x5c/0x250 [ 1358.061462][T25576] security_inode_alloc+0x3b/0x2c0 [ 1358.061483][T25576] inode_init_always_gfp+0xc77/0xfb0 [ 1358.061509][T25576] alloc_inode+0x8e/0x250 [ 1358.061538][T25576] new_inode+0x22/0x1c0 [ 1358.061569][T25576] rpc_new_dir+0x96/0x420 [ 1358.061594][T25576] rpc_populate.constprop.0+0x125/0x1c0 [ 1358.061618][T25576] ? d_instantiate+0x8f/0xb0 [ 1358.061644][T25576] ? __pfx_rpc_fill_super+0x10/0x10 [ 1358.061667][T25576] rpc_fill_super+0x2b9/0x4f0 [ 1358.061692][T25576] ? __pfx_rpc_fill_super+0x10/0x10 [ 1358.061714][T25576] get_tree_keyed+0x10e/0x1d0 [ 1358.061736][T25576] vfs_get_tree+0x92/0x320 [ 1358.061754][T25576] vfs_cmd_create+0xd7/0x2a0 [ 1358.061784][T25576] __do_sys_fsconfig+0x55a/0xcb0 [ 1358.061815][T25576] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1358.061844][T25576] ? xfd_validate_state+0x129/0x190 [ 1358.061867][T25576] ? rcu_is_watching+0x12/0xc0 [ 1358.061891][T25576] do_syscall_64+0x115/0x840 [ 1358.061915][T25576] ? clear_bhb_loop+0x40/0x90 [ 1358.061938][T25576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.061956][T25576] RIP: 0033:0x7faf7a59ce59 [ 1358.061972][T25576] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.061990][T25576] RSP: 002b:00007faf7b4f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1358.062009][T25576] RAX: ffffffffffffffda RBX: 00007faf7a816090 RCX: 00007faf7a59ce59 [ 1358.062021][T25576] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1358.062032][T25576] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1358.062042][T25576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1358.062054][T25576] R13: 00007faf7a816128 R14: 00007faf7a816090 R15: 00007ffcfece86d8 [ 1358.062076][T25576] [ 1358.062151][T25576] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1359.563583][T25554] Process accounting paused [ 1360.292266][T25594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4071'. [ 1361.545689][T25634] ERROR: Out of memory at tomoyo_memory_ok. [ 1362.320301][T25646] netlink: 294 bytes leftover after parsing attributes in process `syz.1.4077'. [ 1364.038735][ T9244] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1331 with max blocks 3 with error 117 [ 1364.147780][ T9244] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1364.147780][ T9244] [ 1364.693196][T25695] FAULT_INJECTION: forcing a failure. [ 1364.693196][T25695] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1364.840518][T25695] CPU: 0 UID: 0 PID: 25695 Comm: syz.0.4087 Tainted: G L syzkaller #0 PREEMPT(full) [ 1364.840552][T25695] Tainted: [L]=SOFTLOCKUP [ 1364.840559][T25695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1364.840570][T25695] Call Trace: [ 1364.840577][T25695] [ 1364.840585][T25695] dump_stack_lvl+0x100/0x190 [ 1364.840622][T25695] should_fail_ex.cold+0x5/0xa [ 1364.840642][T25695] ? prepare_alloc_pages+0x16d/0x5f0 [ 1364.840668][T25695] should_fail_alloc_page+0xeb/0x140 [ 1364.840692][T25695] prepare_alloc_pages+0x1f0/0x5f0 [ 1364.840719][T25695] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1364.840750][T25695] ? event_filter_pid_sched_wakeup_probe_post+0x4f/0x270 [ 1364.840783][T25695] ? __pfx_event_filter_pid_sched_wakeup_probe_post+0x10/0x10 [ 1364.840813][T25695] ? find_held_lock+0x2b/0x80 [ 1364.840836][T25695] ? try_to_wake_up+0x5ec/0x1900 [ 1364.840858][T25695] ? try_to_wake_up+0x5ec/0x1900 [ 1364.840882][T25695] ? do_raw_spin_unlock+0x145/0x1e0 [ 1364.840903][T25695] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1364.840933][T25695] ? try_to_wake_up+0x15f/0x1900 [ 1364.840958][T25695] ? __pfx_try_to_wake_up+0x10/0x10 [ 1364.840995][T25695] ? __lock_acquire+0x4a5/0x2630 [ 1364.841026][T25695] ? __lock_acquire+0x4a5/0x2630 [ 1364.841054][T25695] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1364.841082][T25695] ? policy_nodemask+0xed/0x4f0 [ 1364.841107][T25695] alloc_pages_mpol+0x1fb/0x540 [ 1364.841130][T25695] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1364.841159][T25695] alloc_pages_noprof+0x1a/0x160 [ 1364.841185][T25695] pte_alloc_one+0x1c/0x3d0 [ 1364.841211][T25695] __pte_alloc+0x6d/0x380 [ 1364.841232][T25695] ? __pfx___pte_alloc+0x10/0x10 [ 1364.841251][T25695] ? __pfx___might_resched+0x10/0x10 [ 1364.841269][T25695] ? copy_page_range+0x1c4a/0x5b20 [ 1364.841300][T25695] copy_page_range+0x3dd8/0x5b20 [ 1364.841355][T25695] ? __pfx_copy_page_range+0x10/0x10 [ 1364.841380][T25695] ? irqentry_exit+0x24d/0x970 [ 1364.841406][T25695] ? lockdep_hardirqs_on+0x78/0x100 [ 1364.841437][T25695] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 1364.841476][T25695] ? up_write+0x28c/0x4f0 [ 1364.841497][T25695] dup_mmap+0xd44/0x21b0 [ 1364.841531][T25695] ? __pfx_dup_mmap+0x10/0x10 [ 1364.841554][T25695] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1364.841583][T25695] ? __lock_acquire+0x4a5/0x2630 [ 1364.841612][T25695] ? find_held_lock+0x2b/0x80 [ 1364.841634][T25695] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1364.841682][T25695] copy_process+0x6c78/0x7ed0 [ 1364.841705][T25695] ? __futex_wait+0x256/0x300 [ 1364.841741][T25695] ? __pfx_copy_process+0x10/0x10 [ 1364.841768][T25695] ? futex_hash+0x141/0x370 [ 1364.841802][T25695] kernel_clone+0x176/0x9e0 [ 1364.841824][T25695] ? __pfx_futex_wait+0x10/0x10 [ 1364.841850][T25695] ? __pfx_kernel_clone+0x10/0x10 [ 1364.841888][T25695] ? 0xffffffff81000000 [ 1364.841902][T25695] __do_sys_clone+0xd9/0x120 [ 1364.841927][T25695] ? __pfx___do_sys_clone+0x10/0x10 [ 1364.841951][T25695] ? __fget_files+0x21f/0x3d0 [ 1364.841972][T25695] ? 0xffffffff81000000 [ 1364.842005][T25695] ? rcu_is_watching+0x12/0xc0 [ 1364.842029][T25695] do_syscall_64+0x115/0x840 [ 1364.842054][T25695] ? clear_bhb_loop+0x40/0x90 [ 1364.842077][T25695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.842096][T25695] RIP: 0033:0x7faf7a59ce59 [ 1364.842112][T25695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1364.842130][T25695] RSP: 002b:00007faf7b4f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1364.842149][T25695] RAX: ffffffffffffffda RBX: 00007faf7a816090 RCX: 00007faf7a59ce59 [ 1364.842161][T25695] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 1364.842172][T25695] RBP: 00007faf7a632d6f R08: 0000000000000006 R09: 0000000000000000 [ 1364.842184][T25695] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 1364.842195][T25695] R13: 00007faf7a816128 R14: 00007faf7a816090 R15: 00007ffcfece86d8 [ 1364.842212][T25695] ? 0xffffffff81000000 [ 1364.842233][T25695] [ 1368.415013][T14795] Bluetooth: hci1: command 0x0406 tx timeout [ 1369.337256][T24507] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1319 with max blocks 7 with error 117 [ 1369.488767][T24507] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1369.488767][T24507] [ 1369.613581][T24507] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 905 with max blocks 4 with error 117 [ 1369.700046][T24507] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1369.700046][T24507] [ 1369.816948][T24507] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 1307 with max blocks 12 with error 117 [ 1369.916348][T24507] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1369.916348][T24507] [ 1369.997184][T24507] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1301 with max blocks 30 with error 117 [ 1370.071174][T24507] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1370.071174][T24507] [ 1372.893069][T25775] FAULT_INJECTION: forcing a failure. [ 1372.893069][T25775] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1372.983799][T25752] Process accounting paused [ 1373.028686][T25775] CPU: 0 UID: 0 PID: 25775 Comm: syz.1.4100 Tainted: G L syzkaller #0 PREEMPT(full) [ 1373.028716][T25775] Tainted: [L]=SOFTLOCKUP [ 1373.028724][T25775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1373.028735][T25775] Call Trace: [ 1373.028742][T25775] [ 1373.028750][T25775] dump_stack_lvl+0x100/0x190 [ 1373.028785][T25775] should_fail_ex.cold+0x5/0xa [ 1373.028809][T25775] _copy_from_user+0x2e/0xd0 [ 1373.028837][T25775] proc_do_submiturb+0x1d8e/0x3820 [ 1373.028966][T25775] usbdev_ioctl+0x2adb/0x3aa0 [ 1373.028997][T25775] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1373.029028][T25775] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1373.029063][T25775] ? do_vfs_ioctl+0x226/0x13e0 [ 1373.029082][T25775] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1373.029110][T25775] ? find_held_lock+0x2b/0x80 [ 1373.029133][T25775] ? __fget_files+0x215/0x3d0 [ 1373.029153][T25775] ? hook_file_ioctl_common+0x149/0x410 [ 1373.029189][T25775] ? __pfx_usbdev_ioctl+0x10/0x10 [ 1373.029218][T25775] __x64_sys_ioctl+0x18e/0x210 [ 1373.029239][T25775] do_syscall_64+0x115/0x840 [ 1373.029264][T25775] ? clear_bhb_loop+0x40/0x90 [ 1373.029287][T25775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.029305][T25775] RIP: 0033:0x7fe68db9ce59 [ 1373.029321][T25775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1373.029338][T25775] RSP: 002b:00007fe68ea52028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1373.029357][T25775] RAX: ffffffffffffffda RBX: 00007fe68de15fa0 RCX: 00007fe68db9ce59 [ 1373.029369][T25775] RDX: 0000200000000100 RSI: 000000008038550a RDI: 0000000000000006 [ 1373.029380][T25775] RBP: 00007fe68dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1373.029391][T25775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1373.029402][T25775] R13: 00007fe68de16038 R14: 00007fe68de15fa0 R15: 00007ffed91b2298 [ 1373.029425][T25775] [ 1374.633887][T25781] EXT4-fs (sda1): Delayed block allocation failed for inode 2028 at logical offset 1312 with max blocks 38 with error 117 [ 1374.735502][T25781] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1374.735502][T25781] [ 1374.983632][T25789] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4104'. [ 1378.273934][T25851] FAULT_INJECTION: forcing a failure. [ 1378.273934][T25851] name failslab, interval 1, probability 0, space 0, times 0 [ 1378.349814][T25851] CPU: 0 UID: 0 PID: 25851 Comm: syz.6.4113 Tainted: G L syzkaller #0 PREEMPT(full) [ 1378.349847][T25851] Tainted: [L]=SOFTLOCKUP [ 1378.349854][T25851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1378.349865][T25851] Call Trace: [ 1378.349873][T25851] [ 1378.349880][T25851] dump_stack_lvl+0x100/0x190 [ 1378.349916][T25851] should_fail_ex.cold+0x5/0xa [ 1378.349939][T25851] ? sk_prot_alloc+0x10b/0x2a0 [ 1378.349962][T25851] should_failslab+0xc2/0x120 [ 1378.349985][T25851] __kmalloc_noprof+0xe0/0x850 [ 1378.350029][T25851] sk_prot_alloc+0x10b/0x2a0 [ 1378.350053][T25851] sk_alloc+0x36/0xe80 [ 1378.350083][T25851] __netlink_create+0x5e/0x2c0 [ 1378.350104][T25851] ? __wake_up+0x3f/0x60 [ 1378.350131][T25851] netlink_create+0x29b/0x610 [ 1378.350152][T25851] ? __pfx_genl_bind+0x10/0x10 [ 1378.350176][T25851] ? __pfx_genl_unbind+0x10/0x10 [ 1378.350199][T25851] ? __pfx_genl_release+0x10/0x10 [ 1378.350227][T25851] __sock_create+0x339/0x860 [ 1378.350255][T25851] __sys_socket+0x14d/0x260 [ 1378.350279][T25851] ? exc_page_fault+0x6f/0xd0 [ 1378.350305][T25851] ? __pfx___sys_socket+0x10/0x10 [ 1378.350336][T25851] __x64_sys_socket+0x72/0xb0 [ 1378.350361][T25851] ? lockdep_hardirqs_on+0x78/0x100 [ 1378.350385][T25851] do_syscall_64+0x115/0x840 [ 1378.350409][T25851] ? clear_bhb_loop+0x40/0x90 [ 1378.350431][T25851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1378.350450][T25851] RIP: 0033:0x7fef4859e6c7 [ 1378.350467][T25851] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1378.350485][T25851] RSP: 002b:00007fef49437f98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1378.350503][T25851] RAX: ffffffffffffffda RBX: 00007fef48815fa0 RCX: 00007fef4859e6c7 [ 1378.350514][T25851] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1378.350525][T25851] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1378.350536][T25851] R10: 0000200000000340 R11: 0000000000000286 R12: 0000000000000000 [ 1378.350551][T25851] R13: 00007fef48816038 R14: 00007fef48815fa0 R15: 00007ffe7e5231e8 [ 1378.350574][T25851] [ 1381.789706][T25905] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 1383.857921][T25930] Process accounting paused [ 1384.266943][T25937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4131'. [ 1385.272592][T25939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4132'. [ 1387.459672][T25973] kexec: Could not allocate control_code_buffer [ 1389.947392][T26020] ERROR: Out of memory at tomoyo_memory_ok. [ 1390.111918][T26019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4144'. [ 1390.712241][T26008] Process accounting resumed [ 1395.221233][T20436] EXT4-fs (sda1): Delayed block allocation failed for inode 2034 at logical offset 1316 with max blocks 18 with error 117 [ 1395.304720][T20436] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1395.304720][T20436] [ 1400.257680][T26143] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 919 with max blocks 4 with error 117 [ 1400.677589][T26143] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1400.677589][T26143] [ 1401.650436][T26156] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4169'. [ 1402.207549][T26166] FAULT_INJECTION: forcing a failure. [ 1402.207549][T26166] name failslab, interval 1, probability 0, space 0, times 0 [ 1402.264389][T26166] CPU: 0 UID: 0 PID: 26166 Comm: syz.1.4170 Tainted: G L syzkaller #0 PREEMPT(full) [ 1402.264422][T26166] Tainted: [L]=SOFTLOCKUP [ 1402.264429][T26166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1402.264440][T26166] Call Trace: [ 1402.264447][T26166] [ 1402.264455][T26166] dump_stack_lvl+0x100/0x190 [ 1402.264493][T26166] should_fail_ex.cold+0x5/0xa [ 1402.264519][T26166] should_failslab+0xc2/0x120 [ 1402.264543][T26166] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1402.264573][T26166] ? __d_alloc+0x34/0xa40 [ 1402.264608][T26166] __d_alloc+0x34/0xa40 [ 1402.264634][T26166] d_alloc+0x4a/0x1e0 [ 1402.264661][T26166] lookup_one_qstr_excl+0x171/0x250 [ 1402.264691][T26166] start_dirop+0x59/0xb0 [ 1402.264713][T26166] simple_start_creating+0xf9/0x110 [ 1402.264735][T26166] ? __pfx_simple_start_creating+0x10/0x10 [ 1402.264758][T26166] ? dput.part.0+0xdd/0x570 [ 1402.264789][T26166] rpc_new_dir+0x27/0x420 [ 1402.264817][T26166] rpc_populate.constprop.0+0x125/0x1c0 [ 1402.264842][T26166] ? d_instantiate+0x8f/0xb0 [ 1402.264868][T26166] ? __pfx_rpc_fill_super+0x10/0x10 [ 1402.264891][T26166] rpc_fill_super+0x2b9/0x4f0 [ 1402.264916][T26166] ? __pfx_rpc_fill_super+0x10/0x10 [ 1402.264938][T26166] get_tree_keyed+0x10e/0x1d0 [ 1402.264961][T26166] vfs_get_tree+0x92/0x320 [ 1402.264985][T26166] vfs_cmd_create+0xd7/0x2a0 [ 1402.265015][T26166] __do_sys_fsconfig+0x55a/0xcb0 [ 1402.265046][T26166] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1402.265075][T26166] ? xfd_validate_state+0x129/0x190 [ 1402.265099][T26166] ? rcu_is_watching+0x12/0xc0 [ 1402.265124][T26166] do_syscall_64+0x115/0x840 [ 1402.265151][T26166] ? clear_bhb_loop+0x40/0x90 [ 1402.265174][T26166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1402.265193][T26166] RIP: 0033:0x7fe68db9ce59 [ 1402.265209][T26166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1402.265228][T26166] RSP: 002b:00007fe68ea31028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1402.265246][T26166] RAX: ffffffffffffffda RBX: 00007fe68de16090 RCX: 00007fe68db9ce59 [ 1402.265258][T26166] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 1402.265268][T26166] RBP: 00007fe68dc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1402.265279][T26166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1402.265290][T26166] R13: 00007fe68de16128 R14: 00007fe68de16090 R15: 00007ffed91b2298 [ 1402.265314][T26166] [ 1402.267633][T26166] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1403.110390][T26155] Process accounting resumed [ 1403.495716][T26181] ERROR: Out of memory at tomoyo_memory_ok. [ 1403.633269][T26182] FAULT_INJECTION: forcing a failure. [ 1403.633269][T26182] name failslab, interval 1, probability 0, space 0, times 0 [ 1403.744430][T26182] CPU: 0 UID: 0 PID: 26182 Comm: syz.0.4175 Tainted: G L syzkaller #0 PREEMPT(full) [ 1403.744462][T26182] Tainted: [L]=SOFTLOCKUP [ 1403.744469][T26182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1403.744480][T26182] Call Trace: [ 1403.744486][T26182] [ 1403.744495][T26182] dump_stack_lvl+0x100/0x190 [ 1403.744531][T26182] should_fail_ex.cold+0x5/0xa [ 1403.744554][T26182] should_failslab+0xc2/0x120 [ 1403.744577][T26182] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1403.744607][T26182] ? __d_alloc+0x34/0xa40 [ 1403.744638][T26182] __d_alloc+0x34/0xa40 [ 1403.744665][T26182] d_alloc+0x4a/0x1e0 [ 1403.744691][T26182] lookup_one_qstr_excl+0x171/0x250 [ 1403.744721][T26182] start_dirop+0x59/0xb0 [ 1403.744744][T26182] simple_start_creating+0xf9/0x110 [ 1403.744766][T26182] ? __pfx_simple_start_creating+0x10/0x10 [ 1403.744789][T26182] ? dput.part.0+0xdd/0x570 [ 1403.744824][T26182] rpc_new_dir+0x27/0x420 [ 1403.744849][T26182] rpc_populate.constprop.0+0x125/0x1c0 [ 1403.744874][T26182] ? d_instantiate+0x8f/0xb0 [ 1403.744901][T26182] ? __pfx_rpc_fill_super+0x10/0x10 [ 1403.744932][T26182] rpc_fill_super+0x2b9/0x4f0 [ 1403.744956][T26182] ? __pfx_rpc_fill_super+0x10/0x10 [ 1403.744979][T26182] get_tree_keyed+0x10e/0x1d0 [ 1403.745002][T26182] vfs_get_tree+0x92/0x320 [ 1403.745020][T26182] vfs_cmd_create+0xd7/0x2a0 [ 1403.745051][T26182] __do_sys_fsconfig+0x55a/0xcb0 [ 1403.745082][T26182] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1403.745111][T26182] ? xfd_validate_state+0x129/0x190 [ 1403.745135][T26182] ? rcu_is_watching+0x12/0xc0 [ 1403.745159][T26182] do_syscall_64+0x115/0x840 [ 1403.745185][T26182] ? clear_bhb_loop+0x40/0x90 [ 1403.745208][T26182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1403.745227][T26182] RIP: 0033:0x7faf7a59ce59 [ 1403.745244][T26182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1403.745262][T26182] RSP: 002b:00007faf7b4f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1403.745280][T26182] RAX: ffffffffffffffda RBX: 00007faf7a816090 RCX: 00007faf7a59ce59 [ 1403.745292][T26182] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 1403.745302][T26182] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1403.745313][T26182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1403.745324][T26182] R13: 00007faf7a816128 R14: 00007faf7a816090 R15: 00007ffcfece86d8 [ 1403.745348][T26182] [ 1403.745377][T26182] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1404.059892][T26173] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4173'. [ 1405.449208][T24550] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1310 with max blocks 41 with error 117 [ 1405.783915][T24550] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1405.783915][T24550] [ 1409.738145][T26224] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4183'. [ 1410.080349][T26222] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4182'. [ 1415.834419][T26279] Process accounting resumed [ 1417.257032][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1417.264150][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1419.632064][T26319] FAULT_INJECTION: forcing a failure. [ 1419.632064][T26319] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1419.835376][T26319] CPU: 0 UID: 0 PID: 26319 Comm: syz.0.4201 Tainted: G L syzkaller #0 PREEMPT(full) [ 1419.835409][T26319] Tainted: [L]=SOFTLOCKUP [ 1419.835416][T26319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1419.835427][T26319] Call Trace: [ 1419.835434][T26319] [ 1419.835442][T26319] dump_stack_lvl+0x100/0x190 [ 1419.835476][T26319] should_fail_ex.cold+0x5/0xa [ 1419.835499][T26319] get_futex_key+0x1d2/0x1510 [ 1419.835532][T26319] ? __pfx_get_futex_key+0x10/0x10 [ 1419.835564][T26319] ? __lock_acquire+0x4a5/0x2630 [ 1419.835599][T26319] futex_wake+0xea/0x530 [ 1419.835621][T26319] ? find_held_lock+0x2b/0x80 [ 1419.835644][T26319] ? __pfx_futex_wake+0x10/0x10 [ 1419.835669][T26319] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1419.835698][T26319] ? find_held_lock+0x2b/0x80 [ 1419.835730][T26319] do_futex+0x32b/0x350 [ 1419.835749][T26319] ? __pfx_do_futex+0x10/0x10 [ 1419.835766][T26319] ? rcu_is_watching+0x12/0xc0 [ 1419.835787][T26319] ? __do_sys_fsconfig+0x31d/0xcb0 [ 1419.835815][T26319] ? kfree+0x1dd/0x6c0 [ 1419.835845][T26319] __x64_sys_futex+0x34f/0x4d0 [ 1419.835865][T26319] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1419.835895][T26319] ? __pfx___x64_sys_futex+0x10/0x10 [ 1419.835918][T26319] ? rcu_is_watching+0x12/0xc0 [ 1419.835946][T26319] do_syscall_64+0x115/0x840 [ 1419.835971][T26319] ? clear_bhb_loop+0x40/0x90 [ 1419.835993][T26319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.836012][T26319] RIP: 0033:0x7faf7a59ce59 [ 1419.836028][T26319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1419.836046][T26319] RSP: 002b:00007faf7b4f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1419.836065][T26319] RAX: ffffffffffffffda RBX: 00007faf7a816098 RCX: 00007faf7a59ce59 [ 1419.836077][T26319] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf7a81609c [ 1419.836088][T26319] RBP: 00007faf7a816090 R08: 0000000000000001 R09: 0000000000000000 [ 1419.836099][T26319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1419.836110][T26319] R13: 00007faf7a816128 R14: 00007ffcfece85f0 R15: 00007ffcfece86d8 [ 1419.836133][T26319] [ 1421.144642][T26345] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 1422.267376][T26356] Process accounting paused [ 1424.993621][T26384] FAULT_INJECTION: forcing a failure. [ 1424.993621][T26384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1425.160730][T26384] CPU: 0 UID: 0 PID: 26384 Comm: syz.6.4214 Tainted: G L syzkaller #0 PREEMPT(full) [ 1425.160771][T26384] Tainted: [L]=SOFTLOCKUP [ 1425.160778][T26384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1425.160789][T26384] Call Trace: [ 1425.160795][T26384] [ 1425.160803][T26384] dump_stack_lvl+0x100/0x190 [ 1425.160838][T26384] should_fail_ex.cold+0x5/0xa [ 1425.160862][T26384] __fpu_restore_sig+0x100/0x13c0 [ 1425.160893][T26384] ? __lock_acquire+0x4a5/0x2630 [ 1425.160922][T26384] ? __pfx___fpu_restore_sig+0x10/0x10 [ 1425.160959][T26384] ? __might_fault+0xc5/0x140 [ 1425.160991][T26384] fpu__restore_sig+0x151/0x190 [ 1425.161022][T26384] restore_sigcontext+0x4cb/0x6a0 [ 1425.161048][T26384] ? __pfx_restore_sigcontext+0x10/0x10 [ 1425.161088][T26384] ? __pfx_restore_altstack+0x10/0x10 [ 1425.161117][T26384] ? _raw_spin_unlock_irq+0x23/0x50 [ 1425.161140][T26384] ? lockdep_hardirqs_on+0x78/0x100 [ 1425.161168][T26384] __do_sys_rt_sigreturn+0x229/0x2c0 [ 1425.161195][T26384] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 1425.161223][T26384] ? rcu_is_watching+0x12/0xc0 [ 1425.161247][T26384] do_syscall_64+0x115/0x840 [ 1425.161274][T26384] ? clear_bhb_loop+0x40/0x90 [ 1425.161297][T26384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.161316][T26384] RIP: 0033:0x7fef4859ce59 [ 1425.161333][T26384] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.161351][T26384] RSP: 002b:00007fef494180e8 EFLAGS: 00000246 [ 1425.161366][T26384] RAX: 0000000000000001 RBX: 00007fef48816098 RCX: 00007fef4859ce59 [ 1425.161378][T26384] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fef4881609c [ 1425.161389][T26384] RBP: 00007fef48816090 R08: 0000000000000001 R09: 0000000000000000 [ 1425.161400][T26384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1425.161411][T26384] R13: 00007fef48816128 R14: 00007ffe7e523100 R15: 00007ffe7e5231e8 [ 1425.161434][T26384] [ 1433.318850][T26480] Process accounting paused [ 1433.414336][T26477] FAULT_INJECTION: forcing a failure. [ 1433.414336][T26477] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1433.632109][T26477] CPU: 0 UID: 0 PID: 26477 Comm: syz.6.4230 Tainted: G L syzkaller #0 PREEMPT(full) [ 1433.632143][T26477] Tainted: [L]=SOFTLOCKUP [ 1433.632150][T26477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1433.632162][T26477] Call Trace: [ 1433.632172][T26477] [ 1433.632180][T26477] dump_stack_lvl+0x100/0x190 [ 1433.632216][T26477] should_fail_ex.cold+0x5/0xa [ 1433.632240][T26477] get_futex_key+0x1d2/0x1510 [ 1433.632273][T26477] ? __pfx_get_futex_key+0x10/0x10 [ 1433.632301][T26477] ? grab_super+0x1c4/0x420 [ 1433.632319][T26477] ? grab_super+0x1c4/0x420 [ 1433.632340][T26477] ? __lock_acquire+0x4a5/0x2630 [ 1433.632370][T26477] futex_wake+0xea/0x530 [ 1433.632391][T26477] ? __pfx_grab_super+0x10/0x10 [ 1433.632410][T26477] ? find_held_lock+0x2b/0x80 [ 1433.632432][T26477] ? __pfx_futex_wake+0x10/0x10 [ 1433.632458][T26477] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 1433.632487][T26477] ? find_held_lock+0x2b/0x80 [ 1433.632512][T26477] do_futex+0x32b/0x350 [ 1433.632531][T26477] ? __pfx_do_futex+0x10/0x10 [ 1433.632548][T26477] ? rcu_is_watching+0x12/0xc0 [ 1433.632568][T26477] ? __do_sys_fsconfig+0x31d/0xcb0 [ 1433.632596][T26477] ? kfree+0x1dd/0x6c0 [ 1433.632626][T26477] __x64_sys_futex+0x34f/0x4d0 [ 1433.632646][T26477] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1433.632683][T26477] ? __pfx___x64_sys_futex+0x10/0x10 [ 1433.632706][T26477] ? rcu_is_watching+0x12/0xc0 [ 1433.632730][T26477] do_syscall_64+0x115/0x840 [ 1433.632755][T26477] ? clear_bhb_loop+0x40/0x90 [ 1433.632777][T26477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1433.632797][T26477] RIP: 0033:0x7fef4859ce59 [ 1433.632814][T26477] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1433.632834][T26477] RSP: 002b:00007fef494390e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1433.632853][T26477] RAX: ffffffffffffffda RBX: 00007fef48815fa8 RCX: 00007fef4859ce59 [ 1433.632865][T26477] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fef48815fac [ 1433.632876][T26477] RBP: 00007fef48815fa0 R08: 0000000000000001 R09: 0000000000000000 [ 1433.632887][T26477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1433.632898][T26477] R13: 00007fef48816038 R14: 00007ffe7e523100 R15: 00007ffe7e5231e8 [ 1433.632921][T26477] [ 1434.727831][T26489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4232'. [ 1435.959870][T26504] netlink: del zone limit has 4 unknown bytes [ 1436.269316][T24509] EXT4-fs (sda1): Delayed block allocation failed for inode 2032 at logical offset 1321 with max blocks 1 with error 117 [ 1436.344556][T24509] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1436.344556][T24509] [ 1437.905739][T26535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4243'. [ 1441.474891][T26565] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4248'. [ 1445.174759][T26605] FAULT_INJECTION: forcing a failure. [ 1445.174759][T26605] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.269138][T26605] CPU: 0 UID: 0 PID: 26605 Comm: syz.6.4255 Tainted: G L syzkaller #0 PREEMPT(full) [ 1445.269171][T26605] Tainted: [L]=SOFTLOCKUP [ 1445.269178][T26605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1445.269189][T26605] Call Trace: [ 1445.269196][T26605] [ 1445.269204][T26605] dump_stack_lvl+0x100/0x190 [ 1445.269273][T26605] should_fail_ex.cold+0x5/0xa [ 1445.269297][T26605] should_failslab+0xc2/0x120 [ 1445.269320][T26605] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1445.269353][T26605] ? __d_alloc+0x34/0xa40 [ 1445.269382][T26605] __d_alloc+0x34/0xa40 [ 1445.269409][T26605] d_alloc+0x4a/0x1e0 [ 1445.269434][T26605] lookup_one_qstr_excl+0x171/0x250 [ 1445.269465][T26605] start_dirop+0x59/0xb0 [ 1445.269486][T26605] simple_start_creating+0xf9/0x110 [ 1445.269509][T26605] ? __pfx_simple_start_creating+0x10/0x10 [ 1445.269532][T26605] ? dput.part.0+0xdd/0x570 [ 1445.269563][T26605] rpc_new_dir+0x27/0x420 [ 1445.269587][T26605] rpc_populate.constprop.0+0x125/0x1c0 [ 1445.269611][T26605] ? d_instantiate+0x8f/0xb0 [ 1445.269641][T26605] ? __pfx_rpc_fill_super+0x10/0x10 [ 1445.269665][T26605] rpc_fill_super+0x2b9/0x4f0 [ 1445.269689][T26605] ? __pfx_rpc_fill_super+0x10/0x10 [ 1445.269712][T26605] get_tree_keyed+0x10e/0x1d0 [ 1445.269737][T26605] vfs_get_tree+0x92/0x320 [ 1445.269755][T26605] vfs_cmd_create+0xd7/0x2a0 [ 1445.269784][T26605] __do_sys_fsconfig+0x55a/0xcb0 [ 1445.269815][T26605] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1445.269843][T26605] ? xfd_validate_state+0x129/0x190 [ 1445.269866][T26605] ? rcu_is_watching+0x12/0xc0 [ 1445.269898][T26605] do_syscall_64+0x115/0x840 [ 1445.269924][T26605] ? clear_bhb_loop+0x40/0x90 [ 1445.269950][T26605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.269970][T26605] RIP: 0033:0x7fef4859ce59 [ 1445.269985][T26605] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1445.270006][T26605] RSP: 002b:00007fef49439028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1445.270024][T26605] RAX: ffffffffffffffda RBX: 00007fef48815fa0 RCX: 00007fef4859ce59 [ 1445.270036][T26605] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000007 [ 1445.270047][T26605] RBP: 00007fef48632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1445.270057][T26605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1445.270068][T26605] R13: 00007fef48816038 R14: 00007fef48815fa0 R15: 00007ffe7e5231e8 [ 1445.270092][T26605] [ 1445.270121][T26605] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1446.132764][T26613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4256'. [ 1449.188110][T26643] netlink: del zone limit has 4 unknown bytes [ 1449.487246][T26610] Process accounting paused [ 1453.318502][T26668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4267'. [ 1453.366577][T26676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4269'. [ 1453.631899][T26676] bridge_slave_1: left allmulticast mode [ 1453.655783][T26676] bridge_slave_1: left promiscuous mode [ 1453.688309][T26676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.726999][T26676] bridge_slave_0: left allmulticast mode [ 1453.758337][T26676] bridge_slave_0: left promiscuous mode [ 1453.800136][T26676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1454.237617][T26663] Process accounting resumed [ 1454.664942][T26690] FAULT_INJECTION: forcing a failure. [ 1454.664942][T26690] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1454.882134][T26690] CPU: 0 UID: 0 PID: 26690 Comm: syz.0.4278 Tainted: G L syzkaller #0 PREEMPT(full) [ 1454.882166][T26690] Tainted: [L]=SOFTLOCKUP [ 1454.882174][T26690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1454.882185][T26690] Call Trace: [ 1454.882192][T26690] [ 1454.882200][T26690] dump_stack_lvl+0x100/0x190 [ 1454.882236][T26690] should_fail_ex.cold+0x5/0xa [ 1454.882256][T26690] ? prepare_alloc_pages+0x16d/0x5f0 [ 1454.882282][T26690] should_fail_alloc_page+0xeb/0x140 [ 1454.882306][T26690] prepare_alloc_pages+0x1f0/0x5f0 [ 1454.882333][T26690] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1454.882365][T26690] ? rcu_is_watching+0x12/0xc0 [ 1454.882386][T26690] ? trace_hrtimer_start+0x79/0x230 [ 1454.882409][T26690] ? hrtimer_start_range_ns+0x860/0x1a50 [ 1454.882430][T26690] ? find_held_lock+0x2b/0x80 [ 1454.882452][T26690] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1454.882476][T26690] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1454.882500][T26690] ? rcu_is_watching+0x12/0xc0 [ 1454.882520][T26690] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1454.882561][T26690] ? finish_task_switch.isra.0+0x2cb/0x1010 [ 1454.882585][T26690] ? lockdep_hardirqs_on+0x78/0x100 [ 1454.882614][T26690] ? rcu_is_watching+0x12/0xc0 [ 1454.882634][T26690] ? trace_sched_exit_tp+0x11c/0x160 [ 1454.882667][T26690] ? vma_is_special_huge+0x23f/0x2d0 [ 1454.882689][T26690] ? __pfx_vma_is_special_huge+0x10/0x10 [ 1454.882712][T26690] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1454.882739][T26690] ? policy_nodemask+0xed/0x4f0 [ 1454.882762][T26690] alloc_pages_mpol+0x1fb/0x540 [ 1454.882786][T26690] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1454.882807][T26690] ? futex_unqueue+0x133/0x2c0 [ 1454.882826][T26690] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1454.882855][T26690] alloc_pages_noprof+0x1a/0x160 [ 1454.882880][T26690] __pmd_alloc+0x3b/0x950 [ 1454.882905][T26690] __handle_mm_fault+0xa9c/0x2a00 [ 1454.882936][T26690] ? mt_find+0x45e/0x8e0 [ 1454.882964][T26690] ? __pfx___handle_mm_fault+0x10/0x10 [ 1454.882990][T26690] ? __pfx_mt_find+0x10/0x10 [ 1454.883029][T26690] ? find_vma+0xbf/0x140 [ 1454.883048][T26690] ? __pfx_find_vma+0x10/0x10 [ 1454.883070][T26690] handle_mm_fault+0x37b/0xa30 [ 1454.883106][T26690] do_user_addr_fault+0x74c/0x12f0 [ 1454.883132][T26690] ? trace_page_fault_kernel+0x7a/0x200 [ 1454.883154][T26690] exc_page_fault+0x6f/0xd0 [ 1454.883179][T26690] asm_exc_page_fault+0x26/0x30 [ 1454.883198][T26690] RIP: 0010:__get_user_nocheck_1+0x6/0x20 [ 1454.883220][T26690] Code: e9 4f 95 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 01 cb 0f ae e8 <0f> b6 10 31 c0 0f 01 ca c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 1454.883238][T26690] RSP: 0018:ffffc90004137eb0 EFLAGS: 00050202 [ 1454.883253][T26690] RAX: 0000000000000007 RBX: ffffc90004137f48 RCX: ffffc90010985000 [ 1454.883266][T26690] RDX: 0000000000080000 RSI: ffffffff81757376 RDI: ffffc90004137f48 [ 1454.883277][T26690] RBP: ffff8880487c5d00 R08: 0000000000000005 R09: 0000000000000000 [ 1454.883288][T26690] R10: 0000000000000000 R11: 0000000000000000 R12: ffff8880487c5d00 [ 1454.883299][T26690] R13: 00000000000000ca R14: 0000000000000020 R15: 00000000000000ca [ 1454.883317][T26690] ? arch_syscall_is_vdso_sigreturn+0xb6/0x200 [ 1454.883348][T26690] syscall_user_dispatch+0x76/0x130 [ 1454.883368][T26690] ? do_syscall_64+0x90/0x840 [ 1454.883393][T26690] ? lockdep_hardirqs_on+0x78/0x100 [ 1454.883418][T26690] do_syscall_64+0x530/0x840 [ 1454.883443][T26690] ? clear_bhb_loop+0x40/0x90 [ 1454.883466][T26690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.883484][T26690] RIP: 0033:0x7faf7a59ce59 [ 1454.883499][T26690] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.883517][T26690] RSP: 002b:00007faf7b4f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1454.883540][T26690] RAX: ffffffffffffffda RBX: 00007faf7a816098 RCX: 00007faf7a59ce59 [ 1454.883552][T26690] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007faf7a81609c [ 1454.883563][T26690] RBP: 00007faf7a816090 R08: 0000000000000001 R09: 0000000000000000 [ 1454.883574][T26690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1454.883585][T26690] R13: 00007faf7a816128 R14: 00007ffcfece85f0 R15: 00007ffcfece86d8 [ 1454.883609][T26690] [ 1454.889130][T26693] ERROR: Out of memory at tomoyo_memory_ok. [ 1455.942067][T26699] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4272'. [ 1458.326108][T26718] netlink: del zone limit has 4 unknown bytes [ 1460.666593][T26732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4279'. [ 1466.515286][T26762] Process accounting resumed [ 1467.009755][T26779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4286'. [ 1471.090684][T26841] FAULT_INJECTION: forcing a failure. [ 1471.090684][T26841] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1471.201180][T26841] CPU: 0 UID: 0 PID: 26841 Comm: syz.6.4298 Tainted: G L syzkaller #0 PREEMPT(full) [ 1471.201212][T26841] Tainted: [L]=SOFTLOCKUP [ 1471.201219][T26841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1471.201237][T26841] Call Trace: [ 1471.201244][T26841] [ 1471.201252][T26841] dump_stack_lvl+0x100/0x190 [ 1471.201288][T26841] should_fail_ex.cold+0x5/0xa [ 1471.201308][T26841] ? prepare_alloc_pages+0x16d/0x5f0 [ 1471.201333][T26841] should_fail_alloc_page+0xeb/0x140 [ 1471.201356][T26841] prepare_alloc_pages+0x1f0/0x5f0 [ 1471.201380][T26841] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1471.201408][T26841] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 1471.201438][T26841] ? __pfx_debug_object_activate+0x10/0x10 [ 1471.201465][T26841] ? do_raw_spin_lock+0x128/0x260 [ 1471.201488][T26841] ? find_held_lock+0x2b/0x80 [ 1471.201536][T26841] ? timerqueue_linked_add+0x260/0x430 [ 1471.201601][T26841] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1471.201638][T26841] ? __lock_acquire+0x4a5/0x2630 [ 1471.201670][T26841] ? __lock_acquire+0x4a5/0x2630 [ 1471.201701][T26841] ? __lock_acquire+0x4a5/0x2630 [ 1471.201729][T26841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1471.201757][T26841] ? policy_nodemask+0xed/0x4f0 [ 1471.201780][T26841] alloc_pages_mpol+0x1fb/0x540 [ 1471.201803][T26841] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1471.201832][T26841] alloc_pages_noprof+0x1a/0x160 [ 1471.201857][T26841] pte_alloc_one+0x1c/0x3d0 [ 1471.201882][T26841] __pte_alloc+0x6d/0x380 [ 1471.201909][T26841] ? __pfx___pte_alloc+0x10/0x10 [ 1471.201930][T26841] ? __pfx___might_resched+0x10/0x10 [ 1471.201948][T26841] ? copy_page_range+0x1c4a/0x5b20 [ 1471.201979][T26841] copy_page_range+0x3dd8/0x5b20 [ 1471.202033][T26841] ? mas_wr_store_entry+0xa1/0x1e80 [ 1471.202063][T26841] ? __pfx_copy_page_range+0x10/0x10 [ 1471.202099][T26841] ? __pfx___might_resched+0x10/0x10 [ 1471.202128][T26841] ? up_write+0x28c/0x4f0 [ 1471.202150][T26841] dup_mmap+0xd44/0x21b0 [ 1471.202184][T26841] ? __pfx_dup_mmap+0x10/0x10 [ 1471.202206][T26841] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1471.202235][T26841] ? __lock_acquire+0x4a5/0x2630 [ 1471.202263][T26841] ? find_held_lock+0x2b/0x80 [ 1471.202284][T26841] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1471.202330][T26841] copy_process+0x6c78/0x7ed0 [ 1471.202368][T26841] ? __pfx_copy_process+0x10/0x10 [ 1471.202392][T26841] ? find_held_lock+0x2b/0x80 [ 1471.202418][T26841] ? futex_private_hash_put+0x107/0x1c0 [ 1471.202452][T26841] kernel_clone+0x176/0x9e0 [ 1471.202478][T26841] ? __pfx_kernel_clone+0x10/0x10 [ 1471.202522][T26841] ? 0xffffffff81000000 [ 1471.202536][T26841] __do_sys_clone+0xd9/0x120 [ 1471.202561][T26841] ? __pfx___do_sys_clone+0x10/0x10 [ 1471.202585][T26841] ? __fget_files+0x21f/0x3d0 [ 1471.202606][T26841] ? 0xffffffff81000000 [ 1471.202632][T26841] ? rcu_is_watching+0x12/0xc0 [ 1471.202658][T26841] do_syscall_64+0x115/0x840 [ 1471.202683][T26841] ? clear_bhb_loop+0x40/0x90 [ 1471.202706][T26841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1471.202725][T26841] RIP: 0033:0x7fef4859ce59 [ 1471.202741][T26841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1471.202759][T26841] RSP: 002b:00007fef49418028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1471.202778][T26841] RAX: ffffffffffffffda RBX: 00007fef48816090 RCX: 00007fef4859ce59 [ 1471.202791][T26841] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 1471.202803][T26841] RBP: 00007fef48632d6f R08: 0000000000000006 R09: 0000000000000000 [ 1471.202815][T26841] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 1471.202827][T26841] R13: 00007fef48816128 R14: 00007fef48816090 R15: 00007ffe7e5231e8 [ 1471.202843][T26841] ? 0xffffffff81000000 [ 1471.202864][T26841] [ 1472.088512][T26847] FAULT_INJECTION: forcing a failure. [ 1472.088512][T26847] name failslab, interval 1, probability 0, space 0, times 0 [ 1472.129330][T26847] CPU: 0 UID: 0 PID: 26847 Comm: syz.0.4300 Tainted: G L syzkaller #0 PREEMPT(full) [ 1472.129363][T26847] Tainted: [L]=SOFTLOCKUP [ 1472.129370][T26847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1472.129381][T26847] Call Trace: [ 1472.129388][T26847] [ 1472.129396][T26847] dump_stack_lvl+0x100/0x190 [ 1472.129432][T26847] should_fail_ex.cold+0x5/0xa [ 1472.129455][T26847] should_failslab+0xc2/0x120 [ 1472.129479][T26847] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1472.129508][T26847] ? alloc_inode+0x68/0x250 [ 1472.129545][T26847] ? start_dirop+0x79/0xb0 [ 1472.129566][T26847] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 1472.129591][T26847] alloc_inode+0x68/0x250 [ 1472.129619][T26847] new_inode+0x22/0x1c0 [ 1472.129649][T26847] rpc_new_dir+0x96/0x420 [ 1472.129673][T26847] rpc_populate.constprop.0+0x125/0x1c0 [ 1472.129698][T26847] ? d_instantiate+0x8f/0xb0 [ 1472.129724][T26847] ? __pfx_rpc_fill_super+0x10/0x10 [ 1472.129747][T26847] rpc_fill_super+0x2b9/0x4f0 [ 1472.129771][T26847] ? __pfx_rpc_fill_super+0x10/0x10 [ 1472.129793][T26847] get_tree_keyed+0x10e/0x1d0 [ 1472.129815][T26847] vfs_get_tree+0x92/0x320 [ 1472.129833][T26847] vfs_cmd_create+0xd7/0x2a0 [ 1472.129862][T26847] __do_sys_fsconfig+0x55a/0xcb0 [ 1472.129895][T26847] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1472.129924][T26847] ? xfd_validate_state+0x129/0x190 [ 1472.129947][T26847] ? rcu_is_watching+0x12/0xc0 [ 1472.129972][T26847] do_syscall_64+0x115/0x840 [ 1472.129997][T26847] ? clear_bhb_loop+0x40/0x90 [ 1472.130020][T26847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1472.130043][T26847] RIP: 0033:0x7faf7a59ce59 [ 1472.130062][T26847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1472.130080][T26847] RSP: 002b:00007faf7b517028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1472.130099][T26847] RAX: ffffffffffffffda RBX: 00007faf7a815fa0 RCX: 00007faf7a59ce59 [ 1472.130111][T26847] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1472.130121][T26847] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1472.130132][T26847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1472.130143][T26847] R13: 00007faf7a816038 R14: 00007faf7a815fa0 R15: 00007ffcfece86d8 [ 1472.130167][T26847] [ 1472.130218][T26847] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1472.804985][T26859] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1472.826538][T26861] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1477.655983][T26896] netlink: 326 bytes leftover after parsing attributes in process `syz.0.4310'. [ 1478.294134][T26893] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1478.359300][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 1478.369900][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 1478.427013][T26893] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1478.515140][T26893] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1478.721091][T26893] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1478.773356][T26893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1478.894489][T26893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1478.964755][T26893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1479.037427][T26893] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1479.084563][T26893] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1479.227972][T26893] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1479.268227][T26893] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1479.490927][T26913] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4315'. [ 1479.680278][T26895] Process accounting resumed [ 1479.857676][T14795] Bluetooth: hci0: command 0x2016 tx timeout [ 1480.414527][T14795] Bluetooth: hci5: command 0x0c1a tx timeout [ 1480.732897][T14795] Bluetooth: hci2: command 0x0406 tx timeout [ 1480.983193][T26941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4321'. [ 1481.051472][T14795] Bluetooth: hci4: command 0x2016 tx timeout [ 1481.185289][T26941] ERROR: Out of memory at tomoyo_memory_ok. [ 1481.290166][T14795] Bluetooth: hci1: command 0x0406 tx timeout [ 1481.448348][T23796] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1481.626580][T26956] FAULT_INJECTION: forcing a failure. [ 1481.626580][T26956] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.720706][T26956] CPU: 0 UID: 0 PID: 26956 Comm: syz.0.4324 Tainted: G L syzkaller #0 PREEMPT(full) [ 1481.720738][T26956] Tainted: [L]=SOFTLOCKUP [ 1481.720745][T26956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1481.720756][T26956] Call Trace: [ 1481.720763][T26956] [ 1481.720770][T26956] dump_stack_lvl+0x100/0x190 [ 1481.720806][T26956] should_fail_ex.cold+0x5/0xa [ 1481.720829][T26956] should_failslab+0xc2/0x120 [ 1481.720853][T26956] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1481.720881][T26956] ? ptlock_alloc+0x1f/0x70 [ 1481.720912][T26956] ptlock_alloc+0x1f/0x70 [ 1481.720938][T26956] pte_alloc_one+0x82/0x3d0 [ 1481.720963][T26956] __pte_alloc+0x6d/0x380 [ 1481.720983][T26956] ? __pfx___pte_alloc+0x10/0x10 [ 1481.721004][T26956] ? __pfx___might_resched+0x10/0x10 [ 1481.721023][T26956] ? copy_page_range+0x1c4a/0x5b20 [ 1481.721053][T26956] copy_page_range+0x3dd8/0x5b20 [ 1481.721102][T26956] ? mas_wr_store_entry+0xa1/0x1e80 [ 1481.721133][T26956] ? __pfx_copy_page_range+0x10/0x10 [ 1481.721167][T26956] ? __pfx___might_resched+0x10/0x10 [ 1481.721194][T26956] ? up_write+0x28c/0x4f0 [ 1481.721216][T26956] dup_mmap+0xd44/0x21b0 [ 1481.721248][T26956] ? __pfx_dup_mmap+0x10/0x10 [ 1481.721271][T26956] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1481.721303][T26956] ? __lock_acquire+0x4a5/0x2630 [ 1481.721333][T26956] ? find_held_lock+0x2b/0x80 [ 1481.721354][T26956] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1481.721401][T26956] copy_process+0x6c78/0x7ed0 [ 1481.721424][T26956] ? __futex_wait+0x256/0x300 [ 1481.721460][T26956] ? __pfx_copy_process+0x10/0x10 [ 1481.721485][T26956] ? find_held_lock+0x2b/0x80 [ 1481.721524][T26956] kernel_clone+0x176/0x9e0 [ 1481.721547][T26956] ? __pfx_futex_wait+0x10/0x10 [ 1481.721571][T26956] ? __pfx_kernel_clone+0x10/0x10 [ 1481.721615][T26956] ? 0xffffffff81000000 [ 1481.721629][T26956] __do_sys_clone+0xd9/0x120 [ 1481.721655][T26956] ? __pfx___do_sys_clone+0x10/0x10 [ 1481.721680][T26956] ? __fget_files+0x21f/0x3d0 [ 1481.721702][T26956] ? 0xffffffff81000000 [ 1481.721729][T26956] ? rcu_is_watching+0x12/0xc0 [ 1481.721754][T26956] do_syscall_64+0x115/0x840 [ 1481.721780][T26956] ? clear_bhb_loop+0x40/0x90 [ 1481.721803][T26956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.721823][T26956] RIP: 0033:0x7faf7a59ce59 [ 1481.721838][T26956] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1481.721856][T26956] RSP: 002b:00007faf7b4f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1481.721875][T26956] RAX: ffffffffffffffda RBX: 00007faf7a816090 RCX: 00007faf7a59ce59 [ 1481.721888][T26956] RDX: 9999999999999999 RSI: 0000000080000007 RDI: 0000000000000021 [ 1481.721900][T26956] RBP: 00007faf7a632d6f R08: 0000000000000006 R09: 0000000000000000 [ 1481.721911][T26956] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.721922][T26956] R13: 00007faf7a816128 R14: 00007faf7a816090 R15: 00007ffcfece86d8 [ 1481.721937][T26956] ? 0xffffffff81000000 [ 1481.721958][T26956] [ 1482.525146][T23796] Bluetooth: hci5: command 0x0c1a tx timeout [ 1482.863329][T23796] Bluetooth: hci2: command 0x0406 tx timeout [ 1483.177035][T14795] Bluetooth: hci4: command 0x2016 tx timeout [ 1483.359057][T14795] Bluetooth: hci1: command 0x0406 tx timeout [ 1484.007880][T26980] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4328'. [ 1484.653083][T26986] Process accounting paused [ 1484.869132][T14795] Bluetooth: hci2: command 0x0406 tx timeout [ 1485.791344][T27029] FAULT_INJECTION: forcing a failure. [ 1485.791344][T27029] name failslab, interval 1, probability 0, space 0, times 0 [ 1485.871142][T27029] CPU: 0 UID: 0 PID: 27029 Comm: syz.0.4339 Tainted: G L syzkaller #0 PREEMPT(full) [ 1485.871174][T27029] Tainted: [L]=SOFTLOCKUP [ 1485.871181][T27029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1485.871193][T27029] Call Trace: [ 1485.871200][T27029] [ 1485.871208][T27029] dump_stack_lvl+0x100/0x190 [ 1485.871243][T27029] should_fail_ex.cold+0x5/0xa [ 1485.871266][T27029] should_failslab+0xc2/0x120 [ 1485.871289][T27029] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1485.871319][T27029] ? alloc_inode+0x68/0x250 [ 1485.871347][T27029] ? start_dirop+0x79/0xb0 [ 1485.871368][T27029] ? __pfx_rpc_alloc_inode+0x10/0x10 [ 1485.871392][T27029] alloc_inode+0x68/0x250 [ 1485.871420][T27029] new_inode+0x22/0x1c0 [ 1485.871450][T27029] rpc_new_dir+0x96/0x420 [ 1485.871473][T27029] rpc_populate.constprop.0+0x125/0x1c0 [ 1485.871498][T27029] ? d_instantiate+0x8f/0xb0 [ 1485.871524][T27029] ? __pfx_rpc_fill_super+0x10/0x10 [ 1485.871556][T27029] rpc_fill_super+0x2b9/0x4f0 [ 1485.871581][T27029] ? __pfx_rpc_fill_super+0x10/0x10 [ 1485.871607][T27029] get_tree_keyed+0x10e/0x1d0 [ 1485.871630][T27029] vfs_get_tree+0x92/0x320 [ 1485.871649][T27029] vfs_cmd_create+0xd7/0x2a0 [ 1485.871679][T27029] __do_sys_fsconfig+0x55a/0xcb0 [ 1485.871710][T27029] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1485.871740][T27029] ? xfd_validate_state+0x129/0x190 [ 1485.871762][T27029] ? rcu_is_watching+0x12/0xc0 [ 1485.871787][T27029] do_syscall_64+0x115/0x840 [ 1485.871812][T27029] ? clear_bhb_loop+0x40/0x90 [ 1485.871834][T27029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1485.871853][T27029] RIP: 0033:0x7faf7a59ce59 [ 1485.871868][T27029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1485.871886][T27029] RSP: 002b:00007faf7b517028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1485.871904][T27029] RAX: ffffffffffffffda RBX: 00007faf7a815fa0 RCX: 00007faf7a59ce59 [ 1485.871917][T27029] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1485.871927][T27029] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1485.871938][T27029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1485.871948][T27029] R13: 00007faf7a816038 R14: 00007faf7a815fa0 R15: 00007ffcfece86d8 [ 1485.871973][T27029] [ 1485.872020][T27029] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1486.973271][T14795] Bluetooth: hci2: command 0x0406 tx timeout [ 1487.030053][T27014] ERROR: Out of memory at tomoyo_memory_ok. [ 1488.012608][T27066] ERROR: Out of memory at tomoyo_memory_ok. [ 1488.273264][T27064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4346'. [ 1492.281688][T27101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4352'. [ 1493.469089][T27129] FAULT_INJECTION: forcing a failure. [ 1493.469089][T27129] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.574334][T27129] CPU: 0 UID: 0 PID: 27129 Comm: syz.0.4357 Tainted: G L syzkaller #0 PREEMPT(full) [ 1493.574367][T27129] Tainted: [L]=SOFTLOCKUP [ 1493.574374][T27129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1493.574385][T27129] Call Trace: [ 1493.574391][T27129] [ 1493.574400][T27129] dump_stack_lvl+0x100/0x190 [ 1493.574437][T27129] should_fail_ex.cold+0x5/0xa [ 1493.574460][T27129] should_failslab+0xc2/0x120 [ 1493.574493][T27129] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1493.574524][T27129] ? __d_alloc+0x34/0xa40 [ 1493.574552][T27129] __d_alloc+0x34/0xa40 [ 1493.574579][T27129] d_alloc+0x4a/0x1e0 [ 1493.574605][T27129] lookup_one_qstr_excl+0x171/0x250 [ 1493.574637][T27129] start_dirop+0x59/0xb0 [ 1493.574659][T27129] simple_start_creating+0xf9/0x110 [ 1493.574682][T27129] ? __pfx_simple_start_creating+0x10/0x10 [ 1493.574705][T27129] ? dput.part.0+0xdd/0x570 [ 1493.574736][T27129] rpc_new_dir+0x27/0x420 [ 1493.574761][T27129] rpc_populate.constprop.0+0x125/0x1c0 [ 1493.574786][T27129] ? d_instantiate+0x8f/0xb0 [ 1493.574814][T27129] ? __pfx_rpc_fill_super+0x10/0x10 [ 1493.574837][T27129] rpc_fill_super+0x2b9/0x4f0 [ 1493.574861][T27129] ? __pfx_rpc_fill_super+0x10/0x10 [ 1493.574884][T27129] get_tree_keyed+0x10e/0x1d0 [ 1493.574906][T27129] vfs_get_tree+0x92/0x320 [ 1493.574925][T27129] vfs_cmd_create+0xd7/0x2a0 [ 1493.574955][T27129] __do_sys_fsconfig+0x55a/0xcb0 [ 1493.574985][T27129] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1493.575014][T27129] ? xfd_validate_state+0x129/0x190 [ 1493.575037][T27129] ? rcu_is_watching+0x12/0xc0 [ 1493.575062][T27129] do_syscall_64+0x115/0x840 [ 1493.575087][T27129] ? clear_bhb_loop+0x40/0x90 [ 1493.575110][T27129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.575129][T27129] RIP: 0033:0x7faf7a59ce59 [ 1493.575145][T27129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1493.575163][T27129] RSP: 002b:00007faf7b517028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1493.575182][T27129] RAX: ffffffffffffffda RBX: 00007faf7a815fa0 RCX: 00007faf7a59ce59 [ 1493.575194][T27129] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1493.575205][T27129] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1493.575216][T27129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1493.575227][T27129] R13: 00007faf7a816038 R14: 00007faf7a815fa0 R15: 00007ffcfece86d8 [ 1493.575251][T27129] [ 1493.575280][T27129] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1495.360218][T27149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4361'. [ 1496.646859][T27166] Process accounting paused [ 1497.727011][T24550] EXT4-fs (sda1): Delayed block allocation failed for inode 2030 at logical offset 922 with max blocks 1 with error 117 [ 1497.799204][T24550] EXT4-fs (sda1): This should not happen!! Data will be lost [ 1497.799204][T24550] [ 1498.000174][T27181] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4369'. [ 1499.848999][T27219] program syz.6.4380 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1501.068260][T27208] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4376'. [ 1506.762024][T27271] FAULT_INJECTION: forcing a failure. [ 1506.762024][T27271] name failslab, interval 1, probability 0, space 0, times 0 [ 1506.856686][T27271] CPU: 0 UID: 0 PID: 27271 Comm: syz.0.4391 Tainted: G L syzkaller #0 PREEMPT(full) [ 1506.856719][T27271] Tainted: [L]=SOFTLOCKUP [ 1506.856726][T27271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1506.856738][T27271] Call Trace: [ 1506.856744][T27271] [ 1506.856752][T27271] dump_stack_lvl+0x100/0x190 [ 1506.856793][T27271] should_fail_ex.cold+0x5/0xa [ 1506.856818][T27271] should_failslab+0xc2/0x120 [ 1506.856843][T27271] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 1506.856874][T27271] ? __d_alloc+0x34/0xa40 [ 1506.856904][T27271] __d_alloc+0x34/0xa40 [ 1506.856931][T27271] d_alloc+0x4a/0x1e0 [ 1506.856957][T27271] lookup_one_qstr_excl+0x171/0x250 [ 1506.856988][T27271] start_dirop+0x59/0xb0 [ 1506.857011][T27271] simple_start_creating+0xf9/0x110 [ 1506.857033][T27271] ? __pfx_simple_start_creating+0x10/0x10 [ 1506.857056][T27271] ? dput.part.0+0xdd/0x570 [ 1506.857087][T27271] rpc_new_dir+0x27/0x420 [ 1506.857113][T27271] rpc_populate.constprop.0+0x125/0x1c0 [ 1506.857138][T27271] ? d_instantiate+0x8f/0xb0 [ 1506.857165][T27271] ? __pfx_rpc_fill_super+0x10/0x10 [ 1506.857188][T27271] rpc_fill_super+0x2b9/0x4f0 [ 1506.857217][T27271] ? __pfx_rpc_fill_super+0x10/0x10 [ 1506.857240][T27271] get_tree_keyed+0x10e/0x1d0 [ 1506.857262][T27271] vfs_get_tree+0x92/0x320 [ 1506.857280][T27271] vfs_cmd_create+0xd7/0x2a0 [ 1506.857310][T27271] __do_sys_fsconfig+0x55a/0xcb0 [ 1506.857349][T27271] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 1506.857379][T27271] ? xfd_validate_state+0x129/0x190 [ 1506.857403][T27271] ? rcu_is_watching+0x12/0xc0 [ 1506.857430][T27271] do_syscall_64+0x115/0x840 [ 1506.857456][T27271] ? clear_bhb_loop+0x40/0x90 [ 1506.857485][T27271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.857505][T27271] RIP: 0033:0x7faf7a59ce59 [ 1506.857520][T27271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1506.857538][T27271] RSP: 002b:00007faf7b517028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 1506.857557][T27271] RAX: ffffffffffffffda RBX: 00007faf7a815fa0 RCX: 00007faf7a59ce59 [ 1506.857569][T27271] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000005 [ 1506.857581][T27271] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1506.857592][T27271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1506.857604][T27271] R13: 00007faf7a816038 R14: 00007faf7a815fa0 R15: 00007ffcfece86d8 [ 1506.857628][T27271] [ 1506.857656][T27271] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory / [ 1509.692338][T27329] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4403'. [ 1509.694786][T27330] netlink: 342 bytes leftover after parsing attributes in process `syz.5.4403'. [ 1510.062622][T27332] Process accounting paused [ 1510.618923][T27339] ERROR: Out of memory at tomoyo_memory_ok. [ 1511.731885][T27351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4409'. [ 1514.080053][T27400] netlink: 330 bytes leftover after parsing attributes in process `syz.0.4420'. [ 1515.332341][T27425] Process accounting resumed [ 1517.292765][T27441] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1517.320503][T27444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4428'. [ 1517.349412][T27441] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1517.380144][T27441] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1517.406114][T27441] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1517.431780][T27441] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1517.881152][T23796] Bluetooth: hci0: command 0x2016 tx timeout [ 1518.287408][T27495] futex_wake_op: syz.1.4436 tries to shift op by -2048; fix this program [ 1518.449709][T27495] futex_wake_op: syz.1.4436 tries to shift op by -2048; fix this program [ 1518.559504][T27496] cgroup: fork rejected by pids controller in /syz1 [ 1519.392275][T23796] Bluetooth: hci2: command 0x0406 tx timeout [ 1519.398403][T23796] Bluetooth: hci5: command 0x0c1a tx timeout [ 1519.471997][T23796] Bluetooth: hci1: command 0x0406 tx timeout [ 1519.478117][T17074] Bluetooth: hci4: command 0x2016 tx timeout [ 1519.485023][T14795] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1520.097730][T27537] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4439'. [ 1520.404538][T27548] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4441'. [ 1521.587768][T27574] ================================================================== [ 1521.595881][T27574] BUG: KASAN: use-after-free in kvm_xen_shared_info_init+0x3c6/0x440 [ 1521.603985][T27574] Read of size 4 at addr ffff8880139cb900 by task syz.0.4449/27574 [ 1521.611871][T27574] [ 1521.614194][T27574] CPU: 0 UID: 0 PID: 27574 Comm: syz.0.4449 Tainted: G L syzkaller #0 PREEMPT(full) [ 1521.614222][T27574] Tainted: [L]=SOFTLOCKUP [ 1521.614230][T27574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1521.614242][T27574] Call Trace: [ 1521.614250][T27574] [ 1521.614258][T27574] dump_stack_lvl+0x100/0x190 [ 1521.614291][T27574] print_report+0x13d/0x4b0 [ 1521.614317][T27574] ? __virt_addr_valid+0x239/0x430 [ 1521.614348][T27574] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 1521.614377][T27574] kasan_report+0xdf/0x1d0 [ 1521.614401][T27574] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 1521.614433][T27574] kvm_xen_shared_info_init+0x3c6/0x440 [ 1521.614464][T27574] kvm_xen_hvm_set_attr+0xcef/0x16a0 [ 1521.614493][T27574] ? __might_fault+0xc5/0x140 [ 1521.614522][T27574] ? __pfx_kvm_xen_hvm_set_attr+0x10/0x10 [ 1521.614554][T27574] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 1521.614606][T27574] ? stack_trace_save+0x8e/0xc0 [ 1521.614632][T27574] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1521.614659][T27574] ? stack_depot_save_flags+0x27/0x9d0 [ 1521.614693][T27574] ? __lock_acquire+0x4a5/0x2630 [ 1521.614724][T27574] ? __lock_acquire+0x4a5/0x2630 [ 1521.614753][T27574] ? __lock_acquire+0x4a5/0x2630 [ 1521.614788][T27574] ? __lock_acquire+0x4a5/0x2630 [ 1521.614820][T27574] ? is_bpf_text_address+0x8a/0x1a0 [ 1521.614846][T27574] ? bpf_ksym_find+0x124/0x1c0 [ 1521.614864][T27574] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1521.614889][T27574] ? is_bpf_text_address+0x94/0x1a0 [ 1521.614912][T27574] ? kernel_text_address+0x8d/0x100 [ 1521.614930][T27574] ? __pfx_widen_string+0x10/0x10 [ 1521.614953][T27574] ? __kernel_text_address+0xd/0x30 [ 1521.614970][T27574] ? unwind_get_return_address+0x59/0xa0 [ 1521.614993][T27574] ? arch_stack_walk+0xa6/0xf0 [ 1521.615017][T27574] ? tomoyo_path_number_perm+0x46d/0x580 [ 1521.615041][T27574] ? stack_trace_save+0x8e/0xc0 [ 1521.615064][T27574] ? __pfx_stack_trace_save+0x10/0x10 [ 1521.615087][T27574] ? stack_depot_save_flags+0x27/0x9d0 [ 1521.615117][T27574] ? __lock_acquire+0x4a5/0x2630 [ 1521.615146][T27574] ? tomoyo_path_number_perm+0x46d/0x580 [ 1521.615168][T27574] ? kasan_save_stack+0x3f/0x50 [ 1521.615186][T27574] ? kasan_save_stack+0x30/0x50 [ 1521.615204][T27574] ? kasan_save_track+0x14/0x30 [ 1521.615221][T27574] ? kasan_save_free_info+0x3b/0x70 [ 1521.615248][T27574] kvm_vm_ioctl+0x1564/0x4050 [ 1521.615274][T27574] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1521.615303][T27574] ? kasan_quarantine_put+0x104/0x240 [ 1521.615320][T27574] ? lockdep_hardirqs_on+0x78/0x100 [ 1521.615346][T27574] ? find_held_lock+0x2b/0x80 [ 1521.615367][T27574] ? tomoyo_path_number_perm+0x28f/0x580 [ 1521.615389][T27574] ? tomoyo_path_number_perm+0x28f/0x580 [ 1521.615412][T27574] ? tomoyo_path_number_perm+0x188/0x580 [ 1521.615434][T27574] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1521.615456][T27574] ? futex_wake+0x1ad/0x530 [ 1521.615481][T27574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1521.615506][T27574] ? do_vfs_ioctl+0x226/0x13e0 [ 1521.615523][T27574] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1521.615543][T27574] ? find_held_lock+0x2b/0x80 [ 1521.615564][T27574] ? __fget_files+0x215/0x3d0 [ 1521.615584][T27574] ? hook_file_ioctl_common+0x149/0x410 [ 1521.615609][T27574] ? __fget_files+0x21f/0x3d0 [ 1521.615630][T27574] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1521.615653][T27574] __x64_sys_ioctl+0x18e/0x210 [ 1521.615671][T27574] do_syscall_64+0x115/0x840 [ 1521.615695][T27574] ? clear_bhb_loop+0x40/0x90 [ 1521.615715][T27574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.615734][T27574] RIP: 0033:0x7faf7a59ce59 [ 1521.615750][T27574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1521.615775][T27574] RSP: 002b:00007faf7b517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1521.615793][T27574] RAX: ffffffffffffffda RBX: 00007faf7a815fa0 RCX: 00007faf7a59ce59 [ 1521.615806][T27574] RDX: 0000000000000004 RSI: 000000004048aec9 RDI: 0000000000000003 [ 1521.615817][T27574] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1521.615828][T27574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1521.615839][T27574] R13: 00007faf7a816038 R14: 00007faf7a815fa0 R15: 00007ffcfece86d8 [ 1521.615856][T27574] [ 1521.615863][T27574] [ 1522.027304][T27574] The buggy address belongs to the physical page: [ 1522.033756][T27574] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x4 pfn:0x139cb [ 1522.042516][T27574] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1522.049705][T27574] raw: 00fff00000000000 ffffea00004e60c8 ffff8880b8441530 0000000000000000 [ 1522.058306][T27574] raw: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 1522.066890][T27574] page dumped because: kasan: bad access detected [ 1522.073301][T27574] page_owner tracks the page as freed [ 1522.078660][T27574] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 27574, tgid 27573 (syz.0.4449), ts 1521560655362, free_ts 1521587697264 [ 1522.096724][T27574] post_alloc_hook+0xfd/0x120 [ 1522.101421][T27574] get_page_from_freelist+0x11a6/0x3410 [ 1522.106991][T27574] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 1522.112897][T27574] alloc_pages_mpol+0x1fb/0x540 [ 1522.117751][T27574] folio_alloc_mpol_noprof+0x36/0x260 [ 1522.123139][T27574] shmem_alloc_folio+0x135/0x160 [ 1522.128096][T27574] shmem_alloc_and_add_folio+0x371/0xd40 [ 1522.133736][T27574] shmem_get_folio_gfp+0x6ab/0x1900 [ 1522.138930][T27574] shmem_fault+0x1f9/0xa20 [ 1522.143337][T27574] __do_fault+0x10b/0x440 [ 1522.147665][T27574] do_fault+0x2db/0x1750 [ 1522.151957][T27574] __handle_mm_fault+0x187d/0x2a00 [ 1522.157273][T27574] handle_mm_fault+0x37b/0xa30 [ 1522.162077][T27574] __get_user_pages+0x1178/0x32a0 [ 1522.167122][T27574] get_user_pages_unlocked+0x1cb/0x7d0 [ 1522.172594][T27574] hva_to_pfn+0x871/0xd60 [ 1522.176953][T27574] page last free pid 27574 tgid 27573 stack trace: [ 1522.183467][T27574] __free_frozen_pages+0x794/0x10a0 [ 1522.188671][T27574] __folio_put+0x3b4/0x5f0 [ 1522.193096][T27574] kvm_release_page_clean+0x1dc/0x250 [ 1522.198480][T27574] __kvm_gpc_refresh+0x195d/0x22c0 [ 1522.203606][T27574] __kvm_gpc_activate+0x2ab/0x490 [ 1522.208650][T27574] kvm_gpc_activate_hva+0x73/0xa0 [ 1522.213715][T27574] kvm_xen_hvm_set_attr+0x395/0x16a0 [ 1522.219019][T27574] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 1522.224066][T27574] kvm_vm_ioctl+0x1564/0x4050 [ 1522.228773][T27574] __x64_sys_ioctl+0x18e/0x210 [ 1522.233555][T27574] do_syscall_64+0x115/0x840 [ 1522.238154][T27574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.244045][T27574] [ 1522.246360][T27574] Memory state around the buggy address: [ 1522.251978][T27574] ffff8880139cb800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1522.260118][T27574] ffff8880139cb880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1522.268188][T27574] >ffff8880139cb900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1522.276269][T27574] ^ [ 1522.280344][T27574] ffff8880139cb980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1522.288422][T27574] ffff8880139cba00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1522.296483][T27574] ================================================================== [ 1522.304535][T27574] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1522.311726][T27574] CPU: 0 UID: 0 PID: 27574 Comm: syz.0.4449 Tainted: G L syzkaller #0 PREEMPT(full) [ 1522.322675][T27574] Tainted: [L]=SOFTLOCKUP [ 1522.326992][T27574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1522.337044][T27574] Call Trace: [ 1522.340339][T27574] [ 1522.343268][T27574] dump_stack_lvl+0x100/0x190 [ 1522.347986][T27574] vpanic+0x552/0x970 [ 1522.351966][T27574] ? __pfx_vpanic+0x10/0x10 [ 1522.356482][T27574] ? __pfx_vprintk_emit+0x10/0x10 [ 1522.361532][T27574] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 1522.367258][T27574] panic+0xd1/0xe0 [ 1522.370992][T27574] ? __pfx_panic+0x10/0x10 [ 1522.375419][T27574] ? end_report.part.0+0x23/0x90 [ 1522.380363][T27574] ? rcu_is_watching+0x12/0xc0 [ 1522.385127][T27574] ? end_report.part.0+0x23/0x90 [ 1522.390087][T27574] check_panic_on_warn.cold+0x19/0x34 [ 1522.395478][T27574] end_report.part.0+0x3a/0x90 [ 1522.400255][T27574] kasan_report.cold+0xe/0x18 [ 1522.404958][T27574] ? kvm_xen_shared_info_init+0x3c6/0x440 [ 1522.410716][T27574] kvm_xen_shared_info_init+0x3c6/0x440 [ 1522.416274][T27574] kvm_xen_hvm_set_attr+0xcef/0x16a0 [ 1522.421571][T27574] ? __might_fault+0xc5/0x140 [ 1522.426259][T27574] ? __pfx_kvm_xen_hvm_set_attr+0x10/0x10 [ 1522.431991][T27574] kvm_arch_vm_ioctl+0x2a0/0x18d0 [ 1522.437023][T27574] ? stack_trace_save+0x8e/0xc0 [ 1522.441978][T27574] ? __pfx_kvm_arch_vm_ioctl+0x10/0x10 [ 1522.447466][T27574] ? stack_depot_save_flags+0x27/0x9d0 [ 1522.453102][T27574] ? __lock_acquire+0x4a5/0x2630 [ 1522.458075][T27574] ? __lock_acquire+0x4a5/0x2630 [ 1522.463040][T27574] ? __lock_acquire+0x4a5/0x2630 [ 1522.468009][T27574] ? __lock_acquire+0x4a5/0x2630 [ 1522.472965][T27574] ? is_bpf_text_address+0x8a/0x1a0 [ 1522.478182][T27574] ? bpf_ksym_find+0x124/0x1c0 [ 1522.482954][T27574] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1522.489108][T27574] ? is_bpf_text_address+0x94/0x1a0 [ 1522.494482][T27574] ? kernel_text_address+0x8d/0x100 [ 1522.499678][T27574] ? __pfx_widen_string+0x10/0x10 [ 1522.504703][T27574] ? __kernel_text_address+0xd/0x30 [ 1522.509900][T27574] ? unwind_get_return_address+0x59/0xa0 [ 1522.515627][T27574] ? arch_stack_walk+0xa6/0xf0 [ 1522.520420][T27574] ? tomoyo_path_number_perm+0x46d/0x580 [ 1522.526245][T27574] ? stack_trace_save+0x8e/0xc0 [ 1522.531115][T27574] ? __pfx_stack_trace_save+0x10/0x10 [ 1522.536497][T27574] ? stack_depot_save_flags+0x27/0x9d0 [ 1522.541971][T27574] ? __lock_acquire+0x4a5/0x2630 [ 1522.546924][T27574] ? tomoyo_path_number_perm+0x46d/0x580 [ 1522.552564][T27574] ? kasan_save_stack+0x3f/0x50 [ 1522.557417][T27574] ? kasan_save_stack+0x30/0x50 [ 1522.562267][T27574] ? kasan_save_track+0x14/0x30 [ 1522.567129][T27574] ? kasan_save_free_info+0x3b/0x70 [ 1522.572335][T27574] kvm_vm_ioctl+0x1564/0x4050 [ 1522.577226][T27574] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1522.582262][T27574] ? kasan_quarantine_put+0x104/0x240 [ 1522.587635][T27574] ? lockdep_hardirqs_on+0x78/0x100 [ 1522.592839][T27574] ? find_held_lock+0x2b/0x80 [ 1522.597517][T27574] ? tomoyo_path_number_perm+0x28f/0x580 [ 1522.603165][T27574] ? tomoyo_path_number_perm+0x28f/0x580 [ 1522.608800][T27574] ? tomoyo_path_number_perm+0x188/0x580 [ 1522.614435][T27574] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1522.620608][T27574] ? futex_wake+0x1ad/0x530 [ 1522.625139][T27574] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1522.631061][T27574] ? do_vfs_ioctl+0x226/0x13e0 [ 1522.635824][T27574] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1522.640851][T27574] ? find_held_lock+0x2b/0x80 [ 1522.645528][T27574] ? __fget_files+0x215/0x3d0 [ 1522.650206][T27574] ? hook_file_ioctl_common+0x149/0x410 [ 1522.655755][T27574] ? __fget_files+0x21f/0x3d0 [ 1522.660436][T27574] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1522.665473][T27574] __x64_sys_ioctl+0x18e/0x210 [ 1522.670249][T27574] do_syscall_64+0x115/0x840 [ 1522.674846][T27574] ? clear_bhb_loop+0x40/0x90 [ 1522.679523][T27574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1522.685414][T27574] RIP: 0033:0x7faf7a59ce59 [ 1522.689826][T27574] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1522.709444][T27574] RSP: 002b:00007faf7b517028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1522.717889][T27574] RAX: ffffffffffffffda RBX: 00007faf7a815fa0 RCX: 00007faf7a59ce59 [ 1522.725879][T27574] RDX: 0000000000000004 RSI: 000000004048aec9 RDI: 0000000000000003 [ 1522.733850][T27574] RBP: 00007faf7a632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1522.741831][T27574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1522.749837][T27574] R13: 00007faf7a816038 R14: 00007faf7a815fa0 R15: 00007ffcfece86d8 [ 1522.757829][T27574] [ 1522.760928][T27574] Kernel Offset: disabled [ 1522.765288][T27574] Rebooting in 86400 seconds..