last executing test programs: 1m43.070998157s ago: executing program 0 (id=2422): socket(0xa, 0x6, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x200) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) fcntl$auto_F_OFD_SETLKW(r0, 0x26, 0x4) close_range$auto(0xffffffffffffffff, 0x8, 0x2) socket(0x15, 0x5, 0x0) semctl$auto_GETPID(0x20001, 0x1, 0xb, 0x0) sendmsg$auto_NBD_CMD_RECONFIGURE(r0, &(0x7f0000001900)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1680}, 0x1, 0x0, 0x0, 0x60894}, 0x4028840) connect$auto(0x3, &(0x7f00000018c0)=@xdp={0x2c, 0x4, r1, 0x8}, 0x18) r2 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) read$auto_proc_pid_cmdline_ops_base(r2, 0x0, 0x0) sysfs$auto(0x2, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x40000, 0xf1a, 0x8, 0x14, r2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/block/loop13/queue/max_sectors_kb\x00', 0x38dd86, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto(0x3, 0xc0a8531f, 0x38) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) sendfile$auto(r3, r3, 0x0, 0x4a00) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x1a5c2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x25d5) syz_clone(0x2000011, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) 1m42.625257942s ago: executing program 0 (id=2424): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002ebd7000dddb6f3469dd000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) mbind$auto(0x4, 0x4, 0x9, &(0x7f00000000c0), 0xa, 0x8) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000040)="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", 0x1a5) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000200), 0x40000, 0x0) mmap$auto(0x6, 0x80000001, 0x8, 0xffffffffffffffff, r4, 0x40) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x0, 0x0) socket(0xa, 0x5, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r6) r7 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cmdline\x00', 0x80, 0x0) finit_module$auto(r7, 0x0, 0x1) ioctl$auto_KVM_GET_MSRS(r5, 0x4140aecd, &(0x7f0000000100)={0x7}) sendmsg$auto_NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000040)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050727bd7000f7dbdf25670000003b00f500dfe9ace2bb2475f2ac8caf0f3642b703ddb2c3b35658d7485814f7ed3ccbb5c0c4075ef40378c78df6f409000000dc2ae7dcbcea702a4800"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) 1m42.080309144s ago: executing program 0 (id=2427): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttynull\x00', 0xff2aed1bcfb8e2fd, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) syz_clone3(&(0x7f0000000300)={0x28020400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 1m41.487235731s ago: executing program 0 (id=2429): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYBLOB="16018d8e82d8e469fdd8c9f27e056e81bc35907492ec261776"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r1) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2cf00000", @ANYRES16=r2, @ANYBLOB="010027bd7000fcdbdf250a9e00ff15000000140001"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 1m41.210914214s ago: executing program 0 (id=2431): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) (fail_nth: 16) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/ksm/advisor_mode\x00', 0xa041, 0x0) write$auto(r0, &(0x7f00000003c0)='\x8a0\xcdW\xeb\x1b<\xc7.\x97L\xcc\xfaz\x83\xf1y\xf3\\\x86T_\x0f\xa7\xf4\xc1\xa9\x19P\xc7\xe9\xc6\xb8\x10\xbe\xac\n\x9e]>\xb7\"\x12z\xbd\xda\xa3\xa8\xd5W\xd7$]\xd0\xd0\b\xb4\x98\xe5\xdf@\xd4I)z\x88\xea\x00Z\xe6\xbe\'\xd0si\x92\x9f\x03\x8d\xe1\x11\xc92\xaa38\xcf\x8c`j\xad\xbb\xbb~\xd7Ij(~\x9e\x14\xb5n\x87\xda\faw\x04\x80\xcc\b\xcd\xee\xd7\xcc\xf7\xc8\xa9\xf53\v\\\xd6\x86j\x81\x85\x0e.\xef\x92\x9eg\xc0\vF\x81&\xfb\xfc\x9f>/\xcd', 0x2fb) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)={0x20, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_ADDRESS={0xa, 0x8, @local}]}, 0x20}, 0x1, 0x0, 0x0, 0x240088d0}, 0x10) 1m40.81804143s ago: executing program 0 (id=2432): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x402, 0x0) r3 = prctl$auto(0x7, 0x7fffffff, 0x0, 0xffffffffffffff8c, 0x4) fcntl$auto_F_ADD_SEALS(r3, 0x409, 0x7fff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x42dc2ef, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r1) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="058e64e19e53286e"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40048d0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x420001, 0x0) setsockopt$auto_SO_BSDCOMPAT(r5, 0xfe6, 0xe, &(0x7f00000000c0)='vcan0\x00', 0xe) close_range$auto(0xffffffffffffffff, r1, 0xfffffffc) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 1m25.827357921s ago: executing program 32 (id=2432): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097d751f33e}, 0x80) unshare$auto(0x40000080) unshare$auto(0x40000080) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x402, 0x0) r3 = prctl$auto(0x7, 0x7fffffff, 0x0, 0xffffffffffffff8c, 0x4) fcntl$auto_F_ADD_SEALS(r3, 0x409, 0x7fff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) move_pages$auto(0x0, 0x42dc2ef, 0x0, 0x0, 0x0, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4044001) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r1) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="058e64e19e53286e"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x40048d0) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev1\x00', 0x420001, 0x0) setsockopt$auto_SO_BSDCOMPAT(r5, 0xfe6, 0xe, &(0x7f00000000c0)='vcan0\x00', 0xe) close_range$auto(0xffffffffffffffff, r1, 0xfffffffc) preadv$auto(0xffffffffffffffff, 0x0, 0x7, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) madvise$auto(0x110d230000, 0x1, 0x3) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 42.840331017s ago: executing program 2 (id=2571): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000004540)={0x0, 0x0, &(0x7f0000004500)={&(0x7f0000000380)={0x24, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_PEER_MEASUREMENTS={0xc, 0x111, 0x0, 0x1, [@NL80211_PMSR_ATTR_PEERS={0x8, 0x5, 0x0, 0x1, [{0x4}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4085}, 0x240180d1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) r1 = socketcall$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) r3 = fcntl$auto_F_GETOWN(0xffffffffffffffff, 0x9, 0xea6) bpf$auto_BPF_LINK_CREATE(0x1c, &(0x7f0000000300)=@task_fd_query={r3, 0xffffffffffffffff, 0x6, 0xa, 0x5, 0x5, 0xffffffffffffffff, 0x3, 0xffff}, 0x19) setfsgid$auto(0xee01) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_GET_MSRS(r0, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) r4 = socket(0x1d, 0x3, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0x1d, 0x3, 0x1) setsockopt$auto(r4, 0x65, 0x1, 0x0, 0x800) 42.299775084s ago: executing program 2 (id=2572): preadv$auto(0xffffffffffffffff, 0x0, 0x4, 0x7, 0x402) madvise$auto(0x110c230000, 0x8031ca, 0x9) read$auto_ptdump_fops_(0xffffffffffffffff, 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x3, 0x0) mprotect$auto(0x0, 0x8000000000000001, 0x8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/fail-nth\x00', 0x400003, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) listen$auto(0xffffffffffffffff, 0x8) madvise$auto(0x0, 0x81, 0x15) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x95\x82 )\xca\x99h\xcf\xfdK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pread64$auto(0xffffffffffffffff, 0x0, 0x8100000041, 0x413e) syz_clone3(&(0x7f0000000100)={0x2108000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r3, 0x400, 0x1) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = set_tid_address$auto(&(0x7f0000000180)=0xf0) waitid$auto_P_PIDFD(0x3, r1, &(0x7f0000000040)={@siginfo_0_0={0x6, 0x4000008, 0xf8, @_rt={r4, 0x0, @sival_ptr=0x0}}}, 0x20f5, &(0x7f0000000440)={{0xfffffffffffffffd, 0x82}, {0x5f, 0xd}, 0x0, 0x10, 0x80000001, 0x8, 0x1ff, 0x9c, 0x5, 0x501, 0xfff, 0x3, 0x3, 0x9, 0xc, 0x9}) madvise$auto(0x0, 0x2003f2, 0x15) ioctl$auto_CEC_TRANSMIT(0xffffffffffffffff, 0xc0386105, &(0x7f0000000000)={0x7, 0x3, 0x7, 0x2, 0x3ff, 0x7fffffff, "9b2189083b030000000d933475a77466", 0x7, 0x5, 0x9, 0x4, 0x2, 0xb, 0x2}) r5 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r5, 0xffffffff5fdffe00, &(0x7f0000000100)="d7") 39.702835171s ago: executing program 2 (id=2577): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = io_uring_setup$auto(0x6, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) r2 = prctl$auto_PR_SYS_DISPATCH_ON(0x8, 0x1, 0x0, 0x7, 0x80000001) openat$auto_bm_entry_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x82000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEN_FRAMES(r1, 0x40184152, &(0x7f0000000280)={0xffff, &(0x7f0000000200)=&(0x7f0000000140)="e4df6e59131e48a5c0b4189176a8ec40d1da6141ec1a0904bd0c1a1c1628ccb1673a2b7d6e485727bf7ac40dcf43f22667f8842a7e36ac49e995622734e7b385aaa01d1b9990305f6137c8bf09c252ce468ceb1908cc03b5e0b073e4bb18aa33a18e8d4ae6fa25eb1f1e23da3161e2c240a2432f7cea8126ea0e65f7e83f115924cc88d6ee7bf04cfdbd058971ec9cb5db573b2c98f43a3cbb1c00a417ae74fa548d425b3bb7941a79819f0c5e7fd2abcac3698c2f603686e9", 0x1}) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0) mmap$auto(0x100000001, 0x2020009, 0x3, 0x17, r2, 0x8000) socket(0x10, 0x2, 0x0) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon8\x00', 0x2800, 0x0) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000002c0), r1) sendmsg$auto_NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x9}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x4}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0xf9}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xfffffffd}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x40}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x24000000) ioctl$auto_MON_IOCQ_RING_SIZE(r3, 0x9205, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x22a01, 0x0) io_uring_setup$auto(0x0, 0x0) unshare$auto(0x40000080) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x8, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_XFS_IOC_FSCOUNTS(r2, 0x80205871, 0x0) io_uring_setup$auto(0x3, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000cea3144bb82f7db9f932e172c7e7c85b008650010fb1cd8b1aff0f62d376b28e3e2a91e28b7fe00527eb4ea00c80cd4b931873", @ANYRES16=r5, @ANYBLOB="02002dbd7000fddbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) 38.674240156s ago: executing program 2 (id=2581): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/default/ignore_routes_with_linkdown\x00', 0x2, 0x0) sendfile$auto(r0, r0, 0x0, 0x2000007fffe000) r1 = socket(0x2, 0x80802, 0x0) getsockopt$auto_SO_OOBINLINE(r1, 0x11, 0xa, 0x0, &(0x7f0000000200)=0xfffffffa) lstat$auto(0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop13/queue/rq_affinity\x00', 0x2062, 0x0) write$auto(r2, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r3 = creat$auto(&(0x7f0000000100)='./file0\x00', 0x7) msgctl$auto_MSG_STAT(0x7d, 0xb, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0x5, 0xebe, 0x8, 0x5) ioctl$auto_USBDEVFS_DISCSIGNAL32(r3, 0x8008550e, &(0x7f0000000180)={0x10000, 0x7c}) mq_timedsend$auto(0xffffffffffffffff, &(0x7f0000000040)='@*!:}\xc1-.!\\u\x95E\x97\',-\x00', 0x2, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1f00) clone3$auto(&(0x7f0000000300)={0x67b, 0x8000000000000001, 0x8, 0x9, 0xfffffffffffffffe, 0x8000, 0x10, 0x1ff, 0x1, 0xbf7, 0x33}, 0x8) mmap$auto(0x0, 0x2020009, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r4, 0x29, 0x1b, 0x0, 0x201) mmap$auto(0x0, 0x20009, 0xa75, 0xeb1, 0x401, 0x8000) r5 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r5, 0x10f, 0x81, 0x0, 0x14) close_range$auto(0x2, 0x8, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'hsr0\x00'}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) sendfile$auto(0x3, r6, 0x0, 0x100400000000006) sendmmsg$auto(r0, &(0x7f0000001540)={{&(0x7f0000001740)="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", 0xe, &(0x7f00000014c0)={&(0x7f00000003c0)="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", 0x9}, 0x5, &(0x7f0000001500)="4050ddb726e495b65b", 0x1, 0x10000}, 0x8001}, 0x8001, 0x101) 38.236191651s ago: executing program 2 (id=2583): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/radio2\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000100)=""/4096, 0x1000) socket(0x10, 0x2, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 64) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (rerun: 64) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r1, 0x0, 0x100000a3d9) r3 = socket(0x29, 0x2, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (rerun: 32) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=ANY=[@ANYRESOCT=r3, @ANYBLOB="1200d723ffd46e19414a8dfcff92524c1a9cfc39ec978ec3035f19b43c43334916d05325e5dd43ba28e2695ff077e9700d41d3a714e3e43ba6c5025ccbd48f6f6ca421028498370e6aae3e0364bb402269bea329f684017bf1f027d112db08257080d409db8b3b62b8e0158d3435d12c680b591768eca88aa7be2a7d958f327dfb4a3a7feb6654fa25678f1e357457a90fed07d1caf67677db0e2b123204df2cec02d4c099e07eadbc1f87210e58d3f66f9558fdbaf59a55d24e88d196df91eb3d8270fe405abe38c20fa325b9c77d1ae8f5cb", @ANYRES8=r2], 0x1ac}}, 0x40000) recvmmsg$auto(r4, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) ioctl$auto(r3, 0x8910, 0x24) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 64) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000180), 0x40900, 0x0) (rerun: 64) ioctl$auto_UBI_IOCATT(r5, 0x40186f40, 0x0) ioctl$auto_UBI_IOCDET(r5, 0x40046f41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0x40000eb1, 0x401, 0x8000) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000043c0)={0x2a3c, r7, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x2a0a, 0x3, 0x0, 0x1, [@typed={0x8, 0xa4, 0x0, 0x0, @uid}, @nested={0x154e, 0xe6, 0x0, 0x1, [@nested={0x8, 0xd8, 0x0, 0x1, [@nested={0x4, 0x16b}]}, @generic="3199f2bc45cf0299a8ee28a87f675ccaa377f682542fbc536962349d384384e91b6f2a89a3926081", @typed={0x8, 0x111, 0x0, 0x0, @fd=r5}, @nested={0x1ea, 0x68, 0x0, 0x1, [@nested={0x4, 0x3e}, @generic="72de3b93f257f4ff34a41d5350055d44f37fc3c57f47c52cb925010fbabc91846cb9dd33f1f8586c012a5beaa0bbd5db7e18d08754b44e960ce430e8d748ae04f646f3c0e112fb29810e5ae6cb81b1e6559ceb1720b50c85f9dbe91dcff1fdad8d3510d9886fe2a2dd3f32429172452e2c82a207f162aedc21fe294b537edb586074a18e063a317096884886524914487cb1738d3f67a93e98feb1304d38e59e9a109b0e1b85ae30d27d9d4f6818961c766b7d97839efbe7d17963ad8b1de7d5c2e941474bf489d0c03a84878ccc4a7881d10d909174", @typed={0x12, 0xf9, 0x0, 0x0, @binary="1d0840c6a1c3b5cb51ac5b8a939182fcce28dbaf40f5fb1d75b90af778cff651751382356e0806b1516ffa19f781370f8962ed4cfdee9ab8a82254e5168a5e54b1bcca352bfa7fbf477dcb"}, @typed={0xb6, 0x6d, 0x0, 0x0, @binary="c8587c8e0475afe75ddae3de352c7eabba3468bd1606f2e6f1271684e3da4c9fa61bc60f70753d6751a8445700905d833700d70f20462c8c22cb8069390166b03773c842c3af5a0d5ba79bd519068245dc04e57ac9e97345950d7ab2bbab8ace364bc30bfdc0dcd745b7ccad7a002f3d0d3dbfea8257de4fef88ea605589e6c02118ea0f429efbd2c3fb7ecb80c8ece7436edfc32c781aa2d6d6d51344b7cb8124160ecd574d5766ae41b83745feae3bdef1"}, @nested={0x4, 0xab}]}, @generic="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", @nested={0x259, 0x105, 0x0, 0x1, [@nested={0x4, 0x40}, @generic="a84894510a8c6023e1e42617d03fb095796421931532cfcab832634ac33ae0f91f60206b08f5b9a89f598d0917ccd1c5ea67059c6db3e6548fd79f1c86a99f86c4ecb98f5c825a894a2956efc5befa517b7a4281202259db80feaff5bbe6740d053346e4417f92a809a6e83cd99ea5f6894b039942249cd77c2bac7832ca91b18e999a300a9fdf7d63107d5b8407b0bb9a69631c9068dac38d7e494a7a2d23af776fcd9bbfbe79042c02ef56af9240bcf74c16cd9298d9198ae55bed0960f6c3a3bb1a0de22bede2835ad2b28e53a218e77a7fc8dad31a8cb7bed147323f06dcd15b1277e8b6ef52", @typed={0xc, 0xd5, 0x0, 0x0, @u64=0x3}, @generic="0f896f0655d0e6c503d288220d53ece718ef83eb70c28c76b5b784dedca5dc35b2b759fb57e91cdf483e75fbb8e74c6a990c0330d87f95bd2ae866436a58dee37306bd7fc42b6b130a8fd3252614d89558d13601d8ed6e309cbda25612f7993e8381ea49fd3591682fa0db8e327fd2b2ca2f02268625f8be4463f1c985609e732382efef7cbee3eb4df66ded1a81cfb00605d523701f8dc67f17d681af4e777991b138324fe65d810bea1f4410ccce3bfb16beda2db3e1c32a3406216e9734374d7ecba6", @generic="ef435d942eaad05f7a33b0e2e06354d7c552c753159d3221482f8d6055208af2f0750924bdfa148fee62a91ce188aadc968afbee7079b610d6d9c0dea6d071b4df71334f5080a991edaf8e4ecd0eeef77be25834a8d914f43889e13cef9ab897689ee0a83f5ceda6bb8672667ec2420f16ef13a34d11c4dc958253ed815e2516a79786d4d4e4ba69b4667ac382539cee4cc193a6df27ad9bb3"]}, @generic="3f78bcfce0843a380e697e341663ae1fc9a69bff6b94c195ca96ecab292286a79001b4fe0c91231269b540f448d956825a519f344afdc5b99e555aa68b99102aaeea48d9a120aa063e3d378c03b4ad92687da464c59f43bfc28a216f23c30e73972342bddc0fc857d30dd5f3", @typed={0x5a, 0x27, 0x0, 0x0, @binary="499244c461707afe85e1643145b7261a8da54fe048fbbf83a782594fccb13b435e091c8558935156469b5503001b72680cbf691a7cd5f3e73f47774b4dda36db979a4da652f18829fbdaa6d03ab702abc7828b2bfa24"}]}, @generic="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", @generic="f3f60fec811aae5b0af67b607667748d1d9782176fd8e3b66c45f3bb4fdff1247469e4f9bcd3052a6a1f06026c4b5e614a2f078ca38f064bb5454952f28fc8274c1f94dfa801e3383f82d4d98037aad1d2f4338756f2b05ce1ee25885f0ce858a383b790713a28b8c4fc41bdef263153b65b577f80c7a9f30e57f88853801eac508471e170f2d1c6f7174688706beb26aec2f7d5868320b3e695978914b38de8ab5e38e4451c517908e6da92c5a973d91c0bebd89e39736e274b091c7f9207307e62f622b3f8fd3ef10cde995c5dfb45dbcbab5a3dc029499aa9163217d79c4195a0c9439d6efadd555c2eac6aedc586b4754db28ab3f84a68eb61d81ed34ef5289a8faca102b3cb41537fe7b10cf278c943d758e7419e55de64464712b2aad397391cdbaac02e2952c148f3d7c147fee4de8460cfafba4571e26a53dca327f5fb98d6597e2cb902265b15840af53a8faad74b8f03121b64aa7c3b41397e65dfaacd8183c030c86b54aecd8bc373aa787cbf98b924e7c4d58b76180c72bf83b1ccf431d897d4010ce42da1ae3b8694b460f33dd70b11c8b4bb285821449a8259e7cf9a2743d34d1fc5cba692ac90c18d4c4d4e14e6e739b633f1011c09afac68b5d90960e5a3fc08d309be638d912f5627a5f29f873a77588999f80e4c74a1400799ed815c27ff24e1b829092936ec0ece50c45fee86762db9dc91b50dd954907d443a30a39e88a4203a6e2e26b0fc5545bfb4777f300978cf3a8f31dcb7a9869721cceaefc95da3084bdcda2391bd2a2db7137d61f1f2489b221c6e618968e75822134599923c91c716eee44a883a7dc046c85e0fc48ca84fc856fb5bf5192e86bac4ccaab16d255b26ddb2a8ad0c82762ce5f05ba3e734b0476a1c6ab5981ee260b9558c2a122ef491788558d120cee0d481d5689e20b6512e7f943d04ade0d3f5d2e6d8ee4a08368f01d958ef6b554d1b57f119f4302e0dea54059f94e9651103dec04e0e9ffdb275aff0423a0362c40d5889288e960b60cc9111e3ab3e80da9887639158016f6fd021687a389a4f03fe6f73057cdae6ba79413dbdb71f976c07340a7c3fff7e13946f575f81b2719b691cd969160cb0f02956eec02ee17ab73ce2686f7c6ffb85add3eb8ed8fc8452437c09ab1913f84d1e7df4b1c0d252cbf6fbb0ec5ccf48a5cace865c260f1d5ca6d49ef891dda47d29ee0cb7997d62184ff36960c38fcdfcceaf07074e6de3725e12ab0d48074c89a16def655380a3bb93078fb18acd3af5f93a41deb1b37cfc66c18805466f84115fe555287fc71c66b72eff0121a0461166b28a89789458b81e84d5f8f353f58472d13a58bdce1523cf9e1721e15f84ddda761779490d6624aabd02a813e42a74ca8122b0c6ecd057f6e5ef5d299a7b38017bcd98785f9e73186f92755a0cbc97c8f16602fc91821e9e26b347529ba0b1600ceece7f456be5bb1c1af1b5f6336f15b078060bea684aa4c9017c661fe0b9ae8ce47ff0840820aadb69a3e7d4f8957dbc205f2f19041e40c5d830ab3ef5b07728a72a9ecea0a28f56e937628988243680db60b0b68d6196d6783d8136fddfeb5815bdb4eec322ccc6729a6a3b5e078b008cbfb1d505043e4802756bec0f97667b9181227dae5bce116980a4d2695c11679ccb47980c9e10ac5a1a41d8379aff4330de62fc87622f153dc38dcaef0f67620e7fa3a71a127ceb2e876619ae1b612479e86440454108bffabb091510cb47f7e0cc1168efc7ddff492dbb42d8bcec4fd9f3d094cda4d9cb4d8d7edfecaab896b9d14658339346fe4881bf62434c99a249566e52de9d758f3fa87781a98b0566ab83b7e4566ec47b6a2891b3a8a81f06f3b30a6eae76a22df190137180ac4ac0708fbd715fa1a70d6cc2a45744c8b7e53659f97f1c038eb3ca550b91f86ef2b5e65e49363ba8d79ad22937e09d1d948ddf5d132252f67e6f408f4a31262736da19439f2ea5ff053436ee0965c00cdb768e65bc3627498047f41b89633a2e155a2d51537548a4567ffdc54fec77332a98c3c3db64f5b273afa5ecf7e55561890cfbc95bc514d755997601525bc7bebf6f695ced8619782428f9768fb2a24f895189cc6908fcd84997708488430b090689d692808e6456886604909c405338a2427859baedfb84d2d8cd6f2ec4f1535c422031659e1151171bf73bd4b5e6b51dd4fa07258475ae3c8db12107fb5f83011de0f5901d08002bc7247e0cbc27732a41b6ba9fdac6a55b928b1a2b8fa981281759e8ef5be577113a82c6cf61ef0dba1ee833ea7c9dbb2942fa1df0ab42597ae08365a4b41cf6c4f18c881f6a50b2ce0c94eb477c6cf6c080eca6ae2aebd5b41a590ac8a84f50da6fd81ec302fb3ec9fcd5be7ec055670e59779f597e14b157bc84cb1ff418d8fb40b7604ed811aeb306f8747a68c68b89ecec2722f5c541b99ecaafb71ee7e19ec833e03cb16352be4b2f1b32f28b57c1269d65639f4a08cb1ad2ac491764cae9b2181457f1a01c71a3541d2b8c2d7502e2814668d4db537cd220db5541502b9a109c5b391dd359b56bc2c3d880b08d3c45a35d5483d047da97bc5f486ac57d6d3748ba3718c7a77be2eaf25d7fe4e60075f4dfc0e57813c30434874f6c7f9f71a8200afa18396118e1e99f4122ee2b7659bc422912ae88af04745785c919134a69ea729f993748c026633b49fa23e0722f1a1d3bc81370b8c1c09f5af5f20f24b11100182fd7359624a9177b2749f75e47317c7508cbb2240055cf3d9bc4e31bd9ae833051ed06663d1bcd025b9cef73ce69ee41ebf6a53c93630b96cc5f44fbca7b3659491cfb1bd3e269de5d1eed16d4b63d46fdbe3ec94db1eb51593b0c9eb54227c99dce5f63f96c252192bcba4ae7776801cf25cab435662f82203fa124a8cf792bbe356460779b7ca06a19a6c41011efb601dc92c81ec8af4af1f9d5b635bc320ff7d259986463266844430f15debbd1fe4222ce3151756a80c2d56d4d0405911f141e1a563b5dee744af152783f184eceeb6b96a338124f3d527406476d9590f70fc8cc5caa0b99dbfa7756a1fb8af26dfe1d3865a01cf45952fb4fa796ad27d9623b3db26f7b6079209b4da2b0cc3c8fc1b1ff4def0d9972609f5a32e00e00de641585d00c333f4bdb56ed2616f69f2f73ab68e7e9a2c0821e5160e1ff568859929ec4b2d07faa8803c31fc5e8712a61441ed01574ddaa112eaef95ceef37a40413c873b9e0c2faca6c14a6516559ca5dd4f251ce7c58c1a396bb8fb0147c641127dd9d1ada9e19848acc88d10cff16ef1ffef032a27539b884bb76ef8f14ea019539bdef739faa1d648bbfb549a20d259009e746a10ad3dcc0f2dc12ef313c29e5f9371856ea0f7ae37d850ce4a6e65fa679aed7716b230c4758b62149a516ca244200166fcebd0eee0b04ceacbea13c856a263190a5404a178e58de9b6c20a35a6981b4f9279733e39fbc59b766e0d5276fe41e6f6cacdf9bf0df6c2bac754c822c9e0368e4fbb618c15b4ee2337138cecc5894564b90965efa1561088953966bb6b8f4b25ecbaa6ffc490fc1c92516c025685736fd9a07a12e8d1d6e989593879b5f5be8b59d25b260c408e6b69820bf46088906e4acb708adc23139985ed93e4b56238b5c7e7b629de8664f088b137b8b96d34b940adf78da8920846283b8bec1ac2e69405b1b976618c2535374c5f581ce98fe38b53dde2e7713d7b63bea0b96397e0903140fa8759143997f4e2e86914c8d8b5f1c1364f5b801f48762c9b5fc81288f3b71d496a3a9c7403515349350d3fc91547ddcac397e6091ddbe2e622ef07c73f729847b08ec349bab5052c04d7e990b9133b49ab8600cb2d95832b6ccc3a9ed56a15be4b384c0e1189b2bf5ec601f385cca12f68d3834a7f1a46dc59497095df3fb380bb909de102f694569f210bab3f7e3fb6f6a65b3e23f6f48caab4c501d3e9f93cc8b5989d12784a0a38c7a40258feba71b658ec4f8f49cd9890c56dbbd0ba25215db0f219b2c9f999fbcc9f05f838e538170adddded4a1b50fc6b8aecdf4144711752910433a86c595b018fa090a6345fb2d2507f9f757988e794bbf5bf8f31152747fdc6d920410dc5d54b5c6caa6babb2825b5cffd8075fc13ac272b94e3a6effdc6b5011b6672b8b62f339dc8e406801d9328dc3a46aa6e4130579c4b71d2685beeb812af035e285965a17747d3ea77471bcb75c7d5465bf765d5830b0c17322fb554b399290ebc65a445151062f8b4aae4ce6607e2bf7e0602dfddf56ba82e0b4be4f3493e29d7fbc627ae9e3e02c66487a53a40d2b3aefba709e24b3bc78b1bb42d1ac31486b8beb9bbccca1e3b949bf77536567416dd319fe3351146046876a470f86a2d6ba5e190ad174da1f15c2b4c17bafeb2fb5048a18c4f1b2dee4fda806fa6f3eb71da681def9c580bc5759e8297a8d8ce0e60e50c01bf963015a6bf360bbe822816de96f242a3f8affbcf14b5a974cc7b426c2280d00235461958938e74ce5b110c0192e6f7bb36745c71791e5b2784c4154464e48873f8d48b6ca8dfe67c50f03c3c3cda2e8041894ff0df6fc66e5e890ee461c77ea49b477c60189aa53ac3e65bd79884e1249f2e710cea31a9dc2662eefb3d8e237086e509ac5e7234f37b3c760051f2a4244bd207e19c7bedc2a1779048d8683a1ec812a91ba29923509a9392f12d94a2ab160fd67ffb1866f662f5db538c58a7126e15f2ff195cd89dd1727a034d50d8400f343c81a0bb5c62acd7f2f03ceaee911285adba65f96c3714442cfd60f3657433068d48b58e62af064cb61d26c83b2e3bfbc840cf2863bf3d89719adb3531819b4d4b7b35842ef04b6bb1132562bf5e465ab5d6de4650d604560aff2622d0538098c79a06715d49600010c2ba31b4ebdf7d85c1aa896185be5a59d55d5eed92d73edfb891a0d9edd3e98eb577fc26178362dbc460bbdd68726f556c49179e495b5602a495ce6aa2bb39e27f83bfb08618360e6ed3af32b542a91b951a612bfc649d75173f775e6f4a25aab740a99eef962e3a53d0448e8cc5ff9ff9be79df81f2b299f0276e1eeb25d0ff9a66f317bdb72d31f6355fdc002f61a230f7c16db78566caadd3e7b2e07080f070061d3eddaba76247dd85aea590c6bfeec664898ccf255c02420b33bd19d7f318947ad5a0bffa91a90cd29925b39cf574c6e284f53c67905438445eba335456a33abe6a52c7afa5c21fa68c992db71192b3d28a0cf047a6e122e5f14f890fa643a0a271eb817ee8a21a66185134d1ea88e0a9de0cf794e3245432323a53ccbb4ee15f1e83d2ece59eee9d6f6c15eab815a7ca901ec77f21e08a1a3099e3b4db87ed1929c38f74aea6330a8cb5b3c74b75667b7ae70a74b7778d2ed6c78967ed8079a2e514d0fffa1df725f3af6f8661d7917f39d068e61f19c396b2dd05d4e401b13d2e7ad96f12a29adca8d2c181b8882f4827b6ec283a1c27ef3bf2631e5cefcf2b41f4ac9f13292018eb3e1ce6914272aa418aafa3990eb3bb58401d311f88470083519f7830feab655bde50acd910ad4715ebb0867a8cc163d90c2b8ef071dd7df4f30b3f56b9b110d2302cbd57a404030e69870421467d7c09297110a75e8d92739c92adf20cea9f2d1583b5fd17470626a4f21ec79e207d152e9deaef01511bc80a08bfe5a24cb7f16fb3c557967422e0b9c11e681b131d9daac7d70ded886728e6797d55f036dae044efeeb3f1babd7cba6c570ea5178043fcc5c499f5b71b674a549046620", @nested={0x3a9, 0xa1, 0x0, 0x1, [@typed={0xf, 0x9f, 0x0, 0x0, @str='ovs_packet\x00'}, @generic="3b796bd4334ba8fd5910f254c6b312d194f8679c0dc13b870f57f641cb4013c47dfde3ffcea870dcb5aa48e9b8ea37750eb27a69221b652a07e882553c79de1ec0189d7a8da07695332481e4fbd2addf2268276043978586cba4081af40473003c504dd18e28cbfec9d73f86dddcfe8434b358a69d5dd3a9163f142c12d3d6db132d0aa10f95c0edc1c11a9f020ff7db3071f32b1eeb034182e4c36ed8", @typed={0x9e, 0xa4, 0x0, 0x0, @binary="2d8cb835fb5e3d610f461a9142de6ab6234c41a788254ee75b85976d087c19fb6bb51d969b1c00264192e106e78e6382a7944963264a42c98fe3954f9191b3fd178cea04d7a9f85285eef47b49aa433191841dd222e99fdfb18b9494f97292e2d39c24103e3a463d65e3c7525349a062ae2ea17f31e36431315ee7f7246b30dab232b583967a7c2b6e8a4b462043c92122de6790f2d2a35fff89"}, @nested={0x4f, 0xbf, 0x0, 0x1, [@typed={0x14, 0x3c, 0x0, 0x0, @ipv6=@loopback}, @nested={0x4, 0xe3}, @generic="5059d120357d866883b7be0f5430ea49f188fd706cacd8f13853fe2197d0efd438c921e29526fa017f2bd804db9f80fca346c2"]}, @nested={0x1a5, 0x164, 0x0, 0x1, [@generic="3fc9ce3b6977be8a818676d2a10893859b5de57bc052d33e8d92c23b852d54ec8db9ee21bbe7c9553580cbc8acd5df3dac927cc0927e754339ef6c7202d4908034dbe2f41ad897acad19b1cf0e32996206e7f63bdb19e96678f311ed4fa0142a5a2dcdda963a6418aa7bc37116452b4b6d8f500c03e8c5add5a4fdb82656c1f8a4b1ad19e19bddba2fd8f6cfd2499c6f70a60f7b54de08", @generic="b78eb1662f2e127340133b3ee84600253a94f280e7e9c7ba6d5f79f72e6f7d325278837c96c0f3b6bc92440d82b919a6247f8df6cf8b469a9c604842046666b68db8c40ca0f43971b55ba421e6a3b3bd203cfcfaf6bcbb1f5d5c7445bb1a1da665a45134b420252abdc05edbb6d00bc6cf8234b4a15e9f59bdd2ae6ab30fd752159f9d9fd16ac5223bc27a448686973430200e2f449400b9cbc1f897fbf65fd78f61889a96a0574c958cb76eafe737640e577644567443a2b34fde33fa621a1711ed4c563d348f939f2b3739574b75bf0d", @typed={0x5, 0xe, 0x0, 0x0, @str='\x00'}, @generic="79925f26b723ace7a81fe8ebee6786039fb5b943a039fb11402bdda64a126d466163fc9a87fc911453fed75bb6dfc633d7"]}, @nested={0x10, 0x7e, 0x0, 0x1, [@nested={0x4, 0x118}, @typed={0x8, 0xe4, 0x0, 0x0, @uid}]}, @typed={0x14, 0x24, 0x0, 0x0, @ipv6=@private1}, @generic="26e437d485389b36dab74f6a571a394a81e5e101351616045cf8ae1f8dc0e6c9183d426705fa30bf8f3a5917ed6bcde6a7458ae7915a68358fe79b6b"]}, @nested={0x4, 0xfa}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x2a3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) (async, rerun: 64) clone$auto(0x100000008, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4000006) (rerun: 64) clone$auto(0x1, 0x1, 0x0, 0x0, 0x2) 33.317423869s ago: executing program 2 (id=2589): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) socket(0x2, 0x3, 0x100) r1 = socket(0x1d, 0x2, 0x7) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) r2 = socket(0x28, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000280)=@can={0x1d, r3}, 0x6a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r4}, 0x18) 31.089121575s ago: executing program 3 (id=2594): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8001) open(0x0, 0x0, 0x154) r0 = pipe$auto(0x0) read$auto(0xffffffffffffffff, 0x0, 0x1f46) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x443001f86cb35905, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0xfffffffe, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mlockall$auto(0x7) r2 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0x101000, 0x0) read$auto_nsim_dev_max_vfs_fops_dev(r2, 0x0, 0x0) ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r3 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="020025bd7000fbdbdf2501000000080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="b06ba7f4840319141c8425a81c01a48608a805000000793d95e9a82295cfa84fbc240a8fbce3dc740757fc45af0722b6e312cbab26e254ffaad1e1458f9457834274b922f93fb3388ac340fbd3c213746300af8970436fe669a8cad0749dbde450e2c56fced5a5a884ab27cb73c9c14075669de5cd18595a"], 0x24}}, 0x40840) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r4, 0x1, 0x101, 0x25dfdbfb, {0x2, 0x0, 0x14}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r6}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x5}]}, 0x24}, 0x1, 0x1400, 0x0, 0x4000080}, 0x20000084) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'caif0\x00', 0x0}) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f00000001c0)={0x1f4, r3, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xbb}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x2c}, @NCSI_ATTR_PACKAGE_LIST={0x1aa, 0x2, 0x0, 0x1, [@typed={0x8, 0x19, 0x0, 0x0, @u32=0x10001}, @generic="b80653757eed11b991913c24eb5229f5a8e120d84e2a4d5c79b870f8bdc3ba0d45cf1a264c624b9a2edf3b4ef7e290e2bda0472bc31590d6284437f534220529339812d65eb0bf85335ba736fb2f78f4feec23b8f7b76e1450ea8a14460c6f4e106b942ad9ff3f1f12520ad55eb4c8c0cd1515dbc9d79f73bc2c6010b73a2485c3fb0c9254402c7184f897bee47453e418b82af3d14e1d3fc163c70275d6de14066436d606257c812d8b30faf4a2e50a9ea112ae957d7580ae9e5bb944b535", @generic="bb03e9dd1d8b45c7cb5e357f99d54b7d456a39af90364060b21c28e053d91979936a02c94621138f228167025fceead3e67de20671625a13079c7a7c386512402cfef0c83935746f1bfdbf6ed8af4f0d17300b42e54a7498700025987f46a23c1566ce2e79366cda50ef3a5a543be48eb936b1169ab062911d88e4f04fc447423fb4ad7b571bad3e68a52ec5c6695b8f83b8c65e320cb28662743f516841f621b1496809ac6f2431ed7301bca3a1c2a32bbe7a2a86fdf48edb5c1cf6a8eee4e300dc4b33dd83d60ed7f18ccbf39ad9f6539d3e0082e5fa94dc90013d168ddc"]}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r6}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r7}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x1}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0xfffffff2}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x49490}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000c4", @ANYRES16=0x0, @ANYBLOB="00012abd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x8100}, 0x8000000) unshare$auto(0x40000080) shmctl$auto_IPC_RMID(0xfffffff9, 0x0, &(0x7f0000000080)={{0x800, 0x0, 0xee00, 0x1, 0x40, 0xffff}, 0xfffff6f0, 0x7, 0x7, 0xcb, @raw=0x8, @raw=0x7f, 0x1, 0x0, &(0x7f0000000000)="a71f79bb41c7500fe7ee3fd6e12b958d4f2d", &(0x7f0000000040)="84c5fc7818d80ca7a959802307942784327b65b566898eb91d9c7570ffe77595fd3904fd0b3ca9b11a7537ddc2a7f5d1f5455c7ce1951a77614a126ffe"}) setfsuid$auto(r9) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) sendfile$auto(r10, r10, 0x0, 0x3) readv$auto(0xffffffffffffffff, 0x0, 0x400) 26.850184112s ago: executing program 3 (id=2601): openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000008c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/enable\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCR(0xffffffffffffffff, 0x0, 0x40) mbind$auto(0x40005, 0x8000000000000006, 0x3, 0x0, 0x2, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/sit0/ifindex\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x1000000001) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x202, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x40004}, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/class/zram-control/hot_add\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000ec0)=""/4096, 0x1000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) unshare$auto(0x40000080) prctl$auto(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0x0, &(0x7f0000000180)=0xfffffff9) r3 = getuid() setfsuid$auto(r3) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1p/sub2/xrun_injection\x00', 0x22100, 0x0) pread64$auto(r4, 0x0, 0x8, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x43102, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, 0x0, 0x2000c800) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x5428, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000000000008000) io_setup$auto(0x7ffe, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) 25.240241168s ago: executing program 4 (id=2604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001700)={0x14, r1, 0x705, 0x70bd27, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x80) (fail_nth: 3) 24.767231957s ago: executing program 4 (id=2605): r0 = openat$auto_percpu_stats_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x8480, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) read$auto_percpu_stats_fops_(r0, &(0x7f0000000080)=""/56, 0x38) 24.544157746s ago: executing program 4 (id=2606): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) mmap$auto(0x4, 0x8004, 0x4000000000df, 0x100040eb5, 0x401, 0x300000000000) prctl$auto(0x3e, 0x1, 0x0, 0x9, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001140)=""/4093, 0xffd) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000040), 0x200080, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x4) mlockall$auto(0x1) mprotect$auto(0x1ffffffff000, 0x100004, 0x6) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) openat$auto_nsim_psample_enable_fops_psample(0xffffffffffffff9c, 0x0, 0x169a02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) inotify_init1$auto(0x3000000000000) r3 = gettid() rt_sigqueueinfo$auto(r3, 0xb, &(0x7f00000001c0)={@siginfo_0_0={0x3, 0x401, 0xfffffffb, @_timer={r3, 0xd, @sival_ptr=0x0, 0x62}}}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_usbfs_devices_fops_usb(0xffffffffffffff9c, 0x0, 0x28400, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r4) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="7000fcdbdf037e000000000000005bfd03b73724aa6f46a42a432f2f576c297f6f4b79c8f46ff7f3d5eb3bf430c62bd059228b6b1a4fdd047848a610707476125b953043c73bc7887aa6b653083e552d8dc8066d4f3f22de6e921465705ac9505f5f6033d4a8a01da184f1aa9ca923f245a1f251baa66fc38f9cf18e09e7e8a77120088168e6ed1cdbe807e8064441cfd6e6649152bea8a0b9"], 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) 23.916135622s ago: executing program 1 (id=2607): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x135501, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r3 = landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="1cd8f235f5d42c438e020000", @ANYRES16=r2, @ANYBLOB="000225bd7000fbdbdf256d00000008001f0104000000da004580388fa0f053b07db134f0fca721877a10024292651c7b77324b26bc1ec343bbe34673e6638f67f24b8f5e0bf2307dade60c352b717d29e98e882c34ebb265180076bdef4e07e6dd03a36940a2388289307b4eba67b74447313b1a3d8220358870dbab95766f4cf42d9dd29429c764dcde231a8df1b9cbb1db386fd99646327ffdf9dd7ffa09e02ded7a8088c5b65738f3a67d11d813cdf903cb8d2dd84c447c50303086f697fca6d1d710bcbb68e8301bb3ea55ff1d6d429a09b057fd0e6765913b14ec0d2b280d002e800296ea258389c8e50c0000000000fd004901092f3c9069f418f259bea8453291e2dd0129b139bb3533a8e32e9cd06e41180cd3601b2a62cc48b18331ef3ff64a2be0edd84e8c599af28cfa5f40e11df7a6a931193bb7c28dcc95c1ae3fedf0af7762ed9302b8e8b07bb85a5c6984e35c818851749e058be486b84046c79231444fbb7ac99eebba4cb3bf84440815d52cb28eb00a7ba60c603bf102385e3f1fa728c9f713058fa1c82d8804e071e268398e5ba5395f404973b1fc08c382e0b7882ba5bc78d665ffba2a9c79bc35d87966ee45bd38c4035c89ea85224c4243f373fc85acb52f8dc73d464e5209163987c5debce2e1542d1f7f80ad18bdc69cfb5ebc7574918f880e6ba4910f0000001a00ac0001cb41d6204081e539aeab656e166e510f39b15628e3000008003700370b0000"], 0x21c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24008051) signalfd$auto(r0, &(0x7f0000000040)={0x5}, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x23, &(0x7f0000000000), 0x1000) io_uring_register$auto(r0, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00042dbd7000fbdbdf250100000008000200b1070000080003000700000008000c0006000000080001005b2d2900080003000400000006000b000d000000080002000004000006000b0035520000"], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r4, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r4, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) unshare$auto(0x40000080) 23.141133268s ago: executing program 3 (id=2608): mmap$auto(0x0, 0x2000a, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x5, 0x400a) process_vm_writev$auto(0x0, &(0x7f00000011c0)={&(0x7f00000001c0)="42777dd1330b458d0b5c44ca32e94fc00cfbce962ee7d8f31c0f90c327830f55adfdceafcc0f7b5a21ea23bdf5344d47d49d60218e57bb33118d", 0x8}, 0x7, 0x0, 0x7, 0xb5) sendmsg$auto_TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000200)=ANY=[@ANYBLOB="180000", @ANYRES16=0x0, @ANYBLOB="01000200000000006bbc9d65365cbf8013"], 0x18}, 0x1, 0x0, 0x0, 0x4000094}, 0x8080) socket(0x11, 0x3, 0xb) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000600)='/dev/snd/controlC1\x00', 0x82200, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000006c0)={{@raw=0x9, 0x2, 0x2, 0x1, "162629e6b2259bee9878f8e7b039aa20b33e487d34917b4a9acce903cb72dd4cd8dde6d41c914d63af7a9de9"}, 0x0, @integer=@value=[0x400000000006, 0x12d800000000000, 0x179, 0xfffffffffffff8ad, 0x5, 0x7, 0x4, 0x8, 0x80000000004, 0x7, 0x15b61f2, 0x7, 0x100000001, 0x3, 0x9, 0x5, 0x7f, 0x9f, 0x8, 0x9, 0xb1, 0x0, 0x3, 0x8, 0xffffffff, 0x10001, 0x1, 0x80000000, 0x8000, 0x9, 0x0, 0x80000000, 0xf, 0xfffffffffffffffe, 0x4, 0x1, 0x3, 0x0, 0x800, 0x3638, 0x3, 0x4f3, 0xc, 0x4, 0x7, 0x0, 0xe4, 0x5, 0x6, 0x81, 0x401, 0x400000000084, 0xa, 0xfffffffbfffffffd, 0x6, 0x800, 0xfffffffffffffffd, 0x7, 0x101, 0x82, 0xc9d, 0x3fe, 0x9, 0x8, 0x640c, 0x3, 0x1000, 0x6, 0x201, 0x0, 0xec31, 0x9, 0x1fd, 0x0, 0xfff0000000000000, 0x4, 0xbd2a, 0x903, 0x80007, 0x7fffffffffffffff, 0x5, 0x1, 0xfffffffffffffffe, 0x0, 0x7eda8566, 0x800000007, 0x8000000000000001, 0x9, 0x401, 0xfffffffffffffff7, 0x9, 0x14000000000000, 0x6, 0xfffffffffffffffe, 0x0, 0x1, 0x8000000000000001, 0x5, 0x1ff, 0xf057, 0x40, 0x5, 0x7, 0x2, 0x8, 0x8, 0x1f, 0x8001, 0xc13, 0x6, 0xbf5, 0x2, 0xff, 0x7, 0xf, 0xe0, 0x3, 0x8, 0x3, 0x80000000, 0x6, 0x2, 0x1, 0xa, 0x5, 0x2, 0x100, 0xffff], "54a5f1d1dd2f17b169e8263c3a740d6611142f4b3c69d0f6e967c91125d235ac53e1b00d9fddc53d8f56969329274a57d5f4213fb46616a4faa700873d91426befc561500a5391d522c480bd37f8e7f0050cedfc627c6702978a8f018ad9a7b04711dc3a5c6a755e7a506645ea28e2baa4a6786ca43b3d5d976157eb07c3cdb8"}) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8001, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r1, 0x0, 0x100000a3d9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), 0xffffffffffffffff) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x1, 0x0, 0x80000000) munmap$auto(0x7f, 0x552a) bpf$auto_BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x122) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) 21.917344779s ago: executing program 4 (id=2609): syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000680), 0xffffffffffffffff) ioctl$auto_TIOCGDEV2(0xffffffffffffffff, 0x80045432, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (fail_nth: 27) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) landlock_create_ruleset$auto(&(0x7f0000000000)={0xd1d, 0x3, 0x7}, 0x0, 0x10000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(0xffffffffffffffff, 0x0, 0x4040) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) preadv2$auto(r1, &(0x7f0000000280)={0x0, 0x80000000}, 0x6, 0x3, 0x4, 0x2e) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket(0x15, 0x5, 0x0) prctl$auto(0x0, 0x2, 0x4, 0x5, 0x7) unshare$auto(0x40000080) 21.79314802s ago: executing program 3 (id=2610): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r0, &(0x7f0000000000)='\\@-,@n', 0x60) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000080)={0x6, 0x8000000000001, 0xc}, 0xb, 0x0) landlock_restrict_self$auto(r1, 0x8) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x101, 0x2000b, 0x4000000000df, 0x4000000000004eb1, r0, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) write$auto(0x3, 0x0, 0xffd8) 20.987890468s ago: executing program 3 (id=2611): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x2000, 0x100000008, 0x2100000000, 0x0, 0x6, 0x2) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x40004) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000140)={0x1045100, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) unshare$auto(0x40000080) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES16, @ANYBLOB="e958e86e5bafd39a3f8aa96117ffbe68"], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x1, &(0x7f00000000c0)={&(0x7f0000000340), 0xfff}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) read$auto(r0, 0x0, 0x39b8) socketcall$auto_SYS_RECVMSG(0x11, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) sendto$auto(r2, 0x0, 0xb, 0xc, &(0x7f0000000000), 0x1c) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 19.448782673s ago: executing program 1 (id=2612): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x121102, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) unshare$auto(0x6c000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0xc2ec0, 0x1d4) execveat$auto(r1, &(0x7f0000000200)='\x00', 0x0, 0x0, 0x11000) clock_gettime$auto(0x6, 0x0) select$auto(0x7ff, &(0x7f0000000080)={[0x4, 0xfffffffffffffffd, 0x36a6f960, 0x3, 0x6, 0x6, 0x6, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x203, 0xd3, 0x76]}, 0x0, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0xdaa0, 0x1, 0x9}, 0x9, 0x0) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/algorithm_params\x00', 0xa001, 0x0) r2 = socket(0xa, 0x1, 0x84) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0xfff}, 0x40000000009, &(0x7f0000000000)={&(0x7f0000000180)="742d352749de83e7650f54fbb2bd6a50519d072d9da540db4adb349434fd91c7ec5a366adfd1ae8c430bc3c1757c5809303dc095632c4188d378f494bb8e638a622400c137a5c8331eca01f37d5c1e1c8f7482d203f2cd78c6525b881a871def5c986e90e0f4f9bf48de302efd449646305fc52718a21672eca56e15449ff9ec6c0e7a4af16d8dcb47ac48189e607f43", 0x40000000001243}, 0xc, 0x8) ioctl$auto(r0, 0x2, r0) setsockopt$auto(r2, 0x0, 0x60, 0x0, 0x6f7250c4) 19.446902636s ago: executing program 3 (id=2613): statmount$auto(0x0, 0x0, 0x2000000009, 0xd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0xf, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 18.937790456s ago: executing program 4 (id=2614): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)=@link_detach={r0}, 0x90) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x1000007ffe) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)="387a0ccdb162ebe77b530cb444fc69e819701404b42606f4d71a0bc6615597112227352bad959e69bb1e0114fb518eaa021e6ac9390d9fe4289330d55e3da00a6ef24e311781f629831237045d59fa858a8d0596d85eefbea1a24fb8e8e88bd1279df6b85588ab322a76bd954c758f7deb5a21") r4 = socketcall$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) mincore$auto(0x4, 0x400000000fff, &(0x7f0000000280)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9') ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) futex$auto(0x0, 0x8, 0x3d, 0x0, 0x0, 0x0) futex$auto(0x0, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) r6 = syz_clone3(&(0x7f0000001580)={0x8200000, &(0x7f00000000c0), &(0x7f0000000100), 0x0, {0x15}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000001440)=""/215, 0x0, 0x0, {r1}}, 0x58) r7 = set_tid_address$auto(&(0x7f0000001600)) kcmp$auto_KCMP_FILE(r6, r7, 0x0, r1, r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x20048000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) 18.558840934s ago: executing program 1 (id=2615): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async, rerun: 32) sendmmsg$auto(r0, &(0x7f00000000c0)={{&(0x7f0000000040), 0x12, 0x0, 0xa, 0x0, 0x1f, 0xfffffffd}, 0xffdf}, 0x5, 0x20000043) (async, rerun: 32) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x6000200000df, 0xebe, 0x1, 0x20008000) (async) socket(0x2, 0x801, 0x106) (async) r1 = socket(0xa, 0x1, 0x84) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 64) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000100)='/dev/binderfs/binder1\x00', 0x2140, 0x0) (async) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000002340)='/dev/binderfs/binder0\x00', 0x8882, 0x0) openat$auto_state_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x1e9482, 0x0) (async, rerun: 32) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) (async, rerun: 32) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) (async) getsockopt$auto(r1, 0x84, 0x7c, 0x0, &(0x7f0000000000)=0x7ffe) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram5/queue/discard_granularity\x00', 0x0, 0x0) (async, rerun: 64) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi15\x00', 0x802, 0x0) (rerun: 64) mmap$auto(0x0, 0x3240, 0x6, 0x11, r2, 0x0) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r3 = socket(0x15, 0x5, 0x0) getsockopt$auto(r3, 0x114, 0x2719, 0xfffffffffffffffc, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/040/001\x00', 0x228000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) (rerun: 32) 18.474260978s ago: executing program 4 (id=2616): statmount$auto(0x0, 0x0, 0x2000000009, 0xd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0xf, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 16.65448725s ago: executing program 1 (id=2617): mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) sendmsg$auto_NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) unshare$auto(0x40000080) unshare$auto(0x40000080) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) gettid() r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) r1 = openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/vkms/clients\x00', 0x2100, 0x0) ioctl$auto(r0, 0x80286f4e, r1) gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r2) sendmsg$auto_NL80211_CMD_SET_NOACK_MAP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x40000) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x109206, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$auto(r3, 0x29, 0x14, 0x0, 0x56b) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) 15.786252142s ago: executing program 1 (id=2618): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/mac80211_hwsim/hwsim0/net/wlan0/flags\x00', 0x189082, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) bpf$auto_BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)=@link_detach={r0}, 0x90) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x1000007ffe) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/block/nbd7/power/autosuspend_delay_ms\x00', 0x22902, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9', 0xfdef, 0x3) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000200)="387a0ccdb162ebe77b530cb444fc69e819701404b42606f4d71a0bc6615597112227352bad959e69bb1e0114fb518eaa021e6ac9390d9fe4289330d55e3da00a6ef24e311781f629831237045d59fa858a8d0596d85eefbea1a24fb8e8e88bd1279df6b85588ab322a76bd954c758f7deb5a21") r4 = socketcall$auto(0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r4) mincore$auto(0x4, 0x400000000fff, &(0x7f0000000280)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x06\x11\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9') ioctl$auto_KVM_GET_MSRS(r3, 0x4400ae8f, &(0x7f00000000c0)={0xdd}) ioctl$auto_KVM_CREATE_VM(r3, 0xae80, 0x0) futex$auto(0x0, 0x8, 0x3d, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = syz_clone3(&(0x7f0000001580)={0x8200000, &(0x7f00000000c0), &(0x7f0000000100), 0x0, {0x15}, &(0x7f0000000440)=""/4096, 0x1000, &(0x7f0000001440)=""/215, 0x0, 0x0, {r1}}, 0x58) r7 = set_tid_address$auto(&(0x7f0000001600)) kcmp$auto_KCMP_FILE(r6, r7, 0x0, r1, r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x20048000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x200000, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x68082, 0x0) 15.29510012s ago: executing program 1 (id=2619): statmount$auto(0x0, 0x0, 0x2000000009, 0xd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0xf, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 4.005728928s ago: executing program 33 (id=2613): statmount$auto(0x0, 0x0, 0x2000000009, 0xd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0xf, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 3.482572493s ago: executing program 34 (id=2616): statmount$auto(0x0, 0x0, 0x2000000009, 0xd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0xf, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) 0s ago: executing program 35 (id=2619): statmount$auto(0x0, 0x0, 0x2000000009, 0xd) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r6 = socket(0xf, 0x2, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) kernel console output (not intermixed with test programs): 00 [ 798.922265][T16456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 798.922279][T16456] R13: 00007ff1ebe16038 R14: 00007ff1ebe15fa0 R15: 00007ffc05c97a18 [ 798.922308][T16456] [ 799.260384][T16461] random: crng reseeded on system resumption [ 799.321966][T16459] FAULT_INJECTION: forcing a failure. [ 799.321966][T16459] name failslab, interval 1, probability 0, space 0, times 0 [ 799.364030][T16459] CPU: 0 UID: 0 PID: 16459 Comm: syz.3.2265 Not tainted syzkaller #0 PREEMPT(full) [ 799.364086][T16459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 799.364102][T16459] Call Trace: [ 799.364109][T16459] [ 799.364119][T16459] dump_stack_lvl+0x100/0x190 [ 799.364148][T16459] should_fail_ex.cold+0x5/0xa [ 799.364179][T16459] ? tomoyo_realpath_from_path+0xb6/0x690 [ 799.364215][T16459] should_failslab+0xc2/0x120 [ 799.364243][T16459] __kmalloc_noprof+0xe0/0x850 [ 799.364264][T16459] ? kfree+0x1dd/0x6c0 [ 799.364302][T16459] tomoyo_realpath_from_path+0xb6/0x690 [ 799.364343][T16459] tomoyo_check_open_permission+0x2af/0x3c0 [ 799.364376][T16459] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 799.364417][T16459] ? hook_file_open+0x24e/0x7a0 [ 799.364461][T16459] ? lock_acquire+0x1b1/0x370 [ 799.364510][T16459] tomoyo_file_open+0x6b/0x90 [ 799.364533][T16459] security_file_open+0xb5/0x1e0 [ 799.364573][T16459] do_dentry_open+0x588/0x14d0 [ 799.364611][T16459] vfs_open+0x82/0x3f0 [ 799.364649][T16459] path_openat+0x208c/0x31a0 [ 799.364689][T16459] ? __pfx_path_openat+0x10/0x10 [ 799.364731][T16459] do_file_open+0x20e/0x430 [ 799.364763][T16459] ? __pfx_do_file_open+0x10/0x10 [ 799.364804][T16459] ? __pfx_kfree_link+0x10/0x10 [ 799.364837][T16459] ? alloc_fd+0x476/0x790 [ 799.364869][T16459] ? do_getname+0x191/0x390 [ 799.364908][T16459] do_sys_openat2+0x10d/0x1e0 [ 799.364945][T16459] ? __pfx_do_sys_openat2+0x10/0x10 [ 799.364992][T16459] __x64_sys_openat+0x12d/0x210 [ 799.365031][T16459] ? __pfx___x64_sys_openat+0x10/0x10 [ 799.365067][T16459] ? ksys_write+0x1ac/0x250 [ 799.365098][T16459] ? rcu_is_watching+0x12/0xc0 [ 799.365129][T16459] do_syscall_64+0x115/0x840 [ 799.365164][T16459] ? clear_bhb_loop+0x40/0x90 [ 799.365194][T16459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 799.365218][T16459] RIP: 0033:0x7f0d0815d68e [ 799.365249][T16459] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 799.365271][T16459] RSP: 002b:00007f0d090ecf98 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 799.365292][T16459] RAX: ffffffffffffffda RBX: 00007f0d090ed6c0 RCX: 00007f0d0815d68e [ 799.365307][T16459] RDX: 0000000000000002 RSI: 00007f0d08232676 RDI: ffffffffffffff9c [ 799.365321][T16459] RBP: 00007f0d08232d6f R08: 0000000000000000 R09: 0000000000000000 [ 799.365335][T16459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 799.365349][T16459] R13: 00007f0d08416038 R14: 00007f0d08415fa0 R15: 00007ffcada682e8 [ 799.365378][T16459] [ 799.365387][T16459] ERROR: Out of memory at tomoyo_realpath_from_path. [ 800.281914][T16269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 800.396942][ T7681] hsr_slave_0: left promiscuous mode [ 800.406615][ T7681] hsr_slave_1: left promiscuous mode [ 800.476490][T16459] FAULT_INJECTION: forcing a failure. [ 800.476490][T16459] name failslab, interval 1, probability 0, space 0, times 0 [ 800.525623][ T7681] veth1_macvtap: left promiscuous mode [ 800.538204][T16459] CPU: 0 UID: 0 PID: 16459 Comm: syz.3.2265 Not tainted syzkaller #0 PREEMPT(full) [ 800.538232][T16459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 800.538246][T16459] Call Trace: [ 800.538253][T16459] [ 800.538261][T16459] dump_stack_lvl+0x100/0x190 [ 800.538288][T16459] should_fail_ex.cold+0x5/0xa [ 800.538315][T16459] should_failslab+0xc2/0x120 [ 800.538342][T16459] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 800.538377][T16459] ? new_userfaultfd+0x7d/0x400 [ 800.538406][T16459] ? ksys_write+0x1ac/0x250 [ 800.538436][T16459] new_userfaultfd+0x7d/0x400 [ 800.538461][T16459] __x64_sys_userfaultfd+0x4b/0xb0 [ 800.538490][T16459] do_syscall_64+0x115/0x840 [ 800.538520][T16459] ? clear_bhb_loop+0x40/0x90 [ 800.538546][T16459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.538568][T16459] RIP: 0033:0x7f0d0819ce59 [ 800.538586][T16459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.538608][T16459] RSP: 002b:00007f0d090ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 800.538628][T16459] RAX: ffffffffffffffda RBX: 00007f0d08415fa0 RCX: 00007f0d0819ce59 [ 800.538642][T16459] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 800.538655][T16459] RBP: 00007f0d090ed090 R08: 0000000000000000 R09: 0000000000000000 [ 800.538668][T16459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 800.538681][T16459] R13: 00007f0d08416038 R14: 00007f0d08415fa0 R15: 00007ffcada682e8 [ 800.538708][T16459] [ 800.773576][ T7681] veth0_macvtap: left promiscuous mode [ 801.446117][ T7681] team0 (unregistering): Port device team_slave_1 removed [ 801.473584][ T7681] team0 (unregistering): Port device team_slave_0 removed [ 801.760801][T16269] 8021q: adding VLAN 0 to HW filter on device team0 [ 801.857756][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state [ 801.864918][ T6762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 801.958879][ T6762] bridge0: port 2(bridge_slave_1) entered blocking state [ 801.966085][ T6762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.700837][ T6762] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3 with max blocks 5 with error 117 [ 802.769602][ T6762] EXT4-fs (sda1): This should not happen!! Data will be lost [ 802.769602][ T6762] [ 804.619859][T16269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.735264][T16269] veth0_vlan: entered promiscuous mode [ 804.767493][T16269] veth1_vlan: entered promiscuous mode [ 805.635462][T16269] veth0_macvtap: entered promiscuous mode [ 805.765753][T16269] veth1_macvtap: entered promiscuous mode [ 805.799183][T16574] binder: 16570:16574 ioctl c0405519 200000004b00 returned -22 [ 805.981323][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 805.987778][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 806.202084][T16269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.334192][T16269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.426571][T16581] FAULT_INJECTION: forcing a failure. [ 806.426571][T16581] name fail_futex, interval 1, probability 0, space 0, times 0 [ 806.467621][T16581] CPU: 0 UID: 0 PID: 16581 Comm: syz.3.2278 Not tainted syzkaller #0 PREEMPT(full) [ 806.467651][T16581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 806.467665][T16581] Call Trace: [ 806.467672][T16581] [ 806.467681][T16581] dump_stack_lvl+0x100/0x190 [ 806.467708][T16581] should_fail_ex.cold+0x5/0xa [ 806.467737][T16581] get_futex_key+0x1d2/0x1510 [ 806.467778][T16581] ? __pfx_get_futex_key+0x10/0x10 [ 806.467814][T16581] ? __fget_files+0x215/0x3d0 [ 806.467865][T16581] ? __fget_files+0x215/0x3d0 [ 806.467898][T16581] futex_wake+0xea/0x530 [ 806.467931][T16581] ? __pfx_futex_wake+0x10/0x10 [ 806.467959][T16581] ? __sys_sendmmsg+0x367/0x430 [ 806.467988][T16581] ? __pfx___sys_sendmmsg+0x10/0x10 [ 806.468017][T16581] do_futex+0x32b/0x350 [ 806.468042][T16581] ? __pfx_do_futex+0x10/0x10 [ 806.468073][T16581] __x64_sys_futex+0x34f/0x4d0 [ 806.468102][T16581] ? __pfx___x64_sys_futex+0x10/0x10 [ 806.468132][T16581] ? rcu_is_watching+0x12/0xc0 [ 806.468163][T16581] do_syscall_64+0x115/0x840 [ 806.468197][T16581] ? clear_bhb_loop+0x40/0x90 [ 806.468225][T16581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 806.468260][T16581] RIP: 0033:0x7f0d0819ce59 [ 806.468278][T16581] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 806.468300][T16581] RSP: 002b:00007f0d090ab0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 806.468322][T16581] RAX: ffffffffffffffda RBX: 00007f0d08416188 RCX: 00007f0d0819ce59 [ 806.468347][T16581] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0d0841618c [ 806.468361][T16581] RBP: 00007f0d08416180 R08: 0000000000000001 R09: 0000000000000000 [ 806.468393][T16581] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 806.468408][T16581] R13: 00007f0d08416218 R14: 00007ffcada68200 R15: 00007ffcada682e8 [ 806.468457][T16581] [ 806.841048][ T6762] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.852425][ T6762] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.885213][ T6762] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.918679][ T6762] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.592833][ T7681] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.642626][ T7681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.138172][ T6754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 808.191783][ T6754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 808.421959][T16615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 809.467378][T16635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2287'. [ 810.242638][T16648] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 810.804165][T16670] FAULT_INJECTION: forcing a failure. [ 810.804165][T16670] name failslab, interval 1, probability 0, space 0, times 0 [ 810.913921][T16670] CPU: 0 UID: 0 PID: 16670 Comm: syz.2.2294 Not tainted syzkaller #0 PREEMPT(full) [ 810.913952][T16670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 810.913967][T16670] Call Trace: [ 810.913974][T16670] [ 810.913982][T16670] dump_stack_lvl+0x100/0x190 [ 810.914008][T16670] should_fail_ex.cold+0x5/0xa [ 810.914044][T16670] should_failslab+0xc2/0x120 [ 810.914071][T16670] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 810.914108][T16670] ? __d_alloc+0x34/0xa40 [ 810.914143][T16670] __d_alloc+0x34/0xa40 [ 810.914177][T16670] d_alloc+0x4a/0x1e0 [ 810.914208][T16670] lookup_one_qstr_excl+0x171/0x250 [ 810.914246][T16670] start_dirop+0x59/0xb0 [ 810.914272][T16670] simple_start_creating+0xf9/0x110 [ 810.914300][T16670] ? __pfx_simple_start_creating+0x10/0x10 [ 810.914328][T16670] ? mntput+0x70/0xa0 [ 810.914351][T16670] ? simple_pin_fs+0xa3/0x190 [ 810.914376][T16670] debugfs_start_creating.part.0+0x82/0x170 [ 810.914402][T16670] __debugfs_create_file+0xb3/0x4f0 [ 810.914429][T16670] debugfs_create_file_full+0x41/0x60 [ 810.914455][T16670] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 810.914478][T16670] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 810.914500][T16670] ? ida_alloc_range+0x70d/0x830 [ 810.914555][T16670] ? lockdep_init_map_type+0x5c/0x250 [ 810.914597][T16670] preinit_net.part.0+0x252/0x920 [ 810.914624][T16670] copy_net_ns+0x339/0x7c0 [ 810.914654][T16670] create_new_namespaces+0x3ea/0xac0 [ 810.914688][T16670] unshare_nsproxy_namespaces+0xf2/0x220 [ 810.914720][T16670] ksys_unshare+0x438/0xab0 [ 810.914754][T16670] ? __pfx_ksys_unshare+0x10/0x10 [ 810.914788][T16670] ? xfd_validate_state+0x129/0x190 [ 810.914810][T16670] ? ksys_write+0x1ac/0x250 [ 810.914843][T16670] __x64_sys_unshare+0x31/0x40 [ 810.914875][T16670] do_syscall_64+0x115/0x840 [ 810.914906][T16670] ? clear_bhb_loop+0x40/0x90 [ 810.914933][T16670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.914956][T16670] RIP: 0033:0x7f98ae19ce59 [ 810.914974][T16670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 810.914996][T16670] RSP: 002b:00007f98af070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 810.915022][T16670] RAX: ffffffffffffffda RBX: 00007f98ae415fa0 RCX: 00007f98ae19ce59 [ 810.915037][T16670] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 810.915051][T16670] RBP: 00007f98ae232d6f R08: 0000000000000000 R09: 0000000000000000 [ 810.915066][T16670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.915080][T16670] R13: 00007f98ae416038 R14: 00007f98ae415fa0 R15: 00007ffc33e581b8 [ 810.915108][T16670] [ 812.822884][T16698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2302'. [ 813.179741][T16707] FAULT_INJECTION: forcing a failure. [ 813.179741][T16707] name failslab, interval 1, probability 0, space 0, times 0 [ 813.352067][T16707] CPU: 0 UID: 0 PID: 16707 Comm: syz.1.2302 Not tainted syzkaller #0 PREEMPT(full) [ 813.352098][T16707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 813.352112][T16707] Call Trace: [ 813.352120][T16707] [ 813.352128][T16707] dump_stack_lvl+0x100/0x190 [ 813.352156][T16707] should_fail_ex.cold+0x5/0xa [ 813.352184][T16707] should_failslab+0xc2/0x120 [ 813.352212][T16707] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 813.352249][T16707] ? __d_alloc+0x34/0xa40 [ 813.352286][T16707] __d_alloc+0x34/0xa40 [ 813.352319][T16707] d_alloc+0x4a/0x1e0 [ 813.352351][T16707] lookup_one_qstr_excl+0x171/0x250 [ 813.352389][T16707] start_dirop+0x59/0xb0 [ 813.352415][T16707] simple_start_creating+0xf9/0x110 [ 813.352443][T16707] ? __pfx_simple_start_creating+0x10/0x10 [ 813.352471][T16707] ? mntput+0x70/0xa0 [ 813.352495][T16707] ? simple_pin_fs+0xa3/0x190 [ 813.352520][T16707] debugfs_start_creating.part.0+0x82/0x170 [ 813.352546][T16707] __debugfs_create_file+0xb3/0x4f0 [ 813.352573][T16707] debugfs_create_file_full+0x41/0x60 [ 813.352598][T16707] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 813.352623][T16707] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 813.352668][T16707] ? lockdep_init_map_type+0x5c/0x250 [ 813.352709][T16707] preinit_net.part.0+0x43b/0x920 [ 813.352737][T16707] copy_net_ns+0x339/0x7c0 [ 813.352767][T16707] create_new_namespaces+0x3ea/0xac0 [ 813.352809][T16707] unshare_nsproxy_namespaces+0xf2/0x220 [ 813.352840][T16707] ksys_unshare+0x438/0xab0 [ 813.352893][T16707] ? __pfx_ksys_unshare+0x10/0x10 [ 813.352925][T16707] ? xfd_validate_state+0x129/0x190 [ 813.352947][T16707] ? ksys_write+0x1ac/0x250 [ 813.352982][T16707] __x64_sys_unshare+0x31/0x40 [ 813.353016][T16707] do_syscall_64+0x115/0x840 [ 813.353049][T16707] ? clear_bhb_loop+0x40/0x90 [ 813.353078][T16707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 813.353102][T16707] RIP: 0033:0x7fa1ddb9ce59 [ 813.353121][T16707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 813.353164][T16707] RSP: 002b:00007fa1dead1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 813.353188][T16707] RAX: ffffffffffffffda RBX: 00007fa1dde16270 RCX: 00007fa1ddb9ce59 [ 813.353204][T16707] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 813.353220][T16707] RBP: 00007fa1ddc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 813.353235][T16707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 813.353249][T16707] R13: 00007fa1dde16308 R14: 00007fa1dde16270 R15: 00007ffee6e8f888 [ 813.353281][T16707] [ 817.644238][T16750] Process accounting paused [ 818.414087][T16765] netlink: 'syz.0.2314': attribute type 2 has an invalid length. [ 818.482125][T16761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2313'. [ 825.017117][T16865] binder: 16863:16865 ioctl c004620b 3 returned -22 [ 825.157967][T16864] FAULT_INJECTION: forcing a failure. [ 825.157967][T16864] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 825.271149][T16864] CPU: 0 UID: 0 PID: 16864 Comm: syz.2.2330 Not tainted syzkaller #0 PREEMPT(full) [ 825.271186][T16864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 825.271199][T16864] Call Trace: [ 825.271206][T16864] [ 825.271215][T16864] dump_stack_lvl+0x100/0x190 [ 825.271246][T16864] should_fail_ex.cold+0x5/0xa [ 825.271271][T16864] ? prepare_alloc_pages+0x16d/0x5f0 [ 825.271302][T16864] should_fail_alloc_page+0xeb/0x140 [ 825.271331][T16864] prepare_alloc_pages+0x1f0/0x5f0 [ 825.271362][T16864] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 825.271409][T16864] ? stack_trace_save+0x8e/0xc0 [ 825.271436][T16864] ? __pfx_stack_trace_save+0x10/0x10 [ 825.271461][T16864] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 825.271514][T16864] ? stack_depot_save_flags+0x27/0x9d0 [ 825.271551][T16864] ? __lock_acquire+0x4a5/0x2630 [ 825.271588][T16864] ? kasan_save_stack+0x3f/0x50 [ 825.271608][T16864] ? kasan_save_stack+0x30/0x50 [ 825.271628][T16864] ? kasan_save_track+0x14/0x30 [ 825.271648][T16864] ? __kasan_slab_alloc+0x89/0x90 [ 825.271670][T16864] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 825.271705][T16864] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 825.271740][T16864] ? do_user_addr_fault+0x74c/0x12f0 [ 825.271764][T16864] ? exc_page_fault+0x6f/0xd0 [ 825.271796][T16864] ? asm_exc_page_fault+0x26/0x30 [ 825.271817][T16864] ? _copy_from_user+0x98/0xd0 [ 825.271846][T16864] ? do_syscall_64+0x115/0x840 [ 825.271875][T16864] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.271907][T16864] ? __lock_acquire+0x4a5/0x2630 [ 825.271941][T16864] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 825.271974][T16864] ? policy_nodemask+0xed/0x4f0 [ 825.272002][T16864] alloc_pages_mpol+0x1fb/0x540 [ 825.272028][T16864] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 825.272054][T16864] ? __thp_vma_allowable_orders+0x1d9/0xce0 [ 825.272085][T16864] ? do_raw_spin_lock+0x128/0x260 [ 825.272111][T16864] alloc_pages_noprof+0x1a/0x160 [ 825.272141][T16864] pte_alloc_one+0x1c/0x3d0 [ 825.272174][T16864] do_fault+0x86c/0x1750 [ 825.272201][T16864] ? __pmd_alloc+0x3fb/0x950 [ 825.272230][T16864] __handle_mm_fault+0x187d/0x2a00 [ 825.272267][T16864] ? mt_find+0x45e/0x8e0 [ 825.272300][T16864] ? __pfx___handle_mm_fault+0x10/0x10 [ 825.272331][T16864] ? __pfx_mt_find+0x10/0x10 [ 825.272376][T16864] ? find_vma+0xbf/0x140 [ 825.272400][T16864] ? __pfx_find_vma+0x10/0x10 [ 825.272426][T16864] handle_mm_fault+0x37b/0xa30 [ 825.272463][T16864] do_user_addr_fault+0x74c/0x12f0 [ 825.272491][T16864] ? trace_page_fault_kernel+0x7a/0x200 [ 825.272518][T16864] exc_page_fault+0x6f/0xd0 [ 825.272566][T16864] asm_exc_page_fault+0x26/0x30 [ 825.272589][T16864] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 825.272614][T16864] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 cd 9c 04 00 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 825.272650][T16864] RSP: 0018:ffffc90003e47e38 EFLAGS: 00050202 [ 825.272667][T16864] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000c [ 825.272680][T16864] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc90003e47e90 [ 825.272693][T16864] RBP: 000000000000000c R08: 0000000000000001 R09: fffff520007c8fd3 [ 825.272705][T16864] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 825.272718][T16864] R13: ffffc90003e47e90 R14: 0000000000000001 R15: 0000000000000004 [ 825.272744][T16864] _copy_from_user+0x98/0xd0 [ 825.272774][T16864] __x64_sys_epoll_ctl+0x131/0x1e0 [ 825.272806][T16864] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 825.272839][T16864] ? rcu_is_watching+0x12/0xc0 [ 825.272867][T16864] do_syscall_64+0x115/0x840 [ 825.272896][T16864] ? clear_bhb_loop+0x40/0x90 [ 825.272922][T16864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 825.272944][T16864] RIP: 0033:0x7f98ae19ce59 [ 825.272961][T16864] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 825.273000][T16864] RSP: 002b:00007f98af070028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 825.273020][T16864] RAX: ffffffffffffffda RBX: 00007f98ae415fa0 RCX: 00007f98ae19ce59 [ 825.273035][T16864] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 825.273048][T16864] RBP: 00007f98af070090 R08: 0000000000000000 R09: 0000000000000000 [ 825.273062][T16864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 825.273075][T16864] R13: 00007f98ae416038 R14: 00007f98ae415fa0 R15: 00007ffc33e581b8 [ 825.273104][T16864] [ 827.135018][T16886] FAULT_INJECTION: forcing a failure. [ 827.135018][T16886] name failslab, interval 1, probability 0, space 0, times 0 [ 827.249277][T16886] CPU: 0 UID: 0 PID: 16886 Comm: syz.2.2335 Not tainted syzkaller #0 PREEMPT(full) [ 827.249310][T16886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 827.249326][T16886] Call Trace: [ 827.249334][T16886] [ 827.249344][T16886] dump_stack_lvl+0x100/0x190 [ 827.249374][T16886] should_fail_ex.cold+0x5/0xa [ 827.249406][T16886] should_failslab+0xc2/0x120 [ 827.249437][T16886] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 827.249478][T16886] ? __d_alloc+0x34/0xa40 [ 827.249519][T16886] __d_alloc+0x34/0xa40 [ 827.249555][T16886] d_alloc+0x4a/0x1e0 [ 827.249590][T16886] lookup_one_qstr_excl+0x171/0x250 [ 827.249633][T16886] start_dirop+0x59/0xb0 [ 827.249662][T16886] simple_start_creating+0xf9/0x110 [ 827.249693][T16886] ? __pfx_simple_start_creating+0x10/0x10 [ 827.249724][T16886] ? mntput+0x70/0xa0 [ 827.249750][T16886] ? simple_pin_fs+0xa3/0x190 [ 827.249778][T16886] debugfs_start_creating.part.0+0x82/0x170 [ 827.249808][T16886] __debugfs_create_file+0xb3/0x4f0 [ 827.249837][T16886] debugfs_create_file_full+0x41/0x60 [ 827.249867][T16886] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 827.249892][T16886] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 827.249943][T16886] ? lockdep_init_map_type+0x5c/0x250 [ 827.249994][T16886] preinit_net.part.0+0x43b/0x920 [ 827.250028][T16886] copy_net_ns+0x339/0x7c0 [ 827.250061][T16886] create_new_namespaces+0x3ea/0xac0 [ 827.250112][T16886] unshare_nsproxy_namespaces+0xf2/0x220 [ 827.250147][T16886] ksys_unshare+0x438/0xab0 [ 827.250183][T16886] ? __pfx_ksys_unshare+0x10/0x10 [ 827.250216][T16886] ? xfd_validate_state+0x129/0x190 [ 827.250239][T16886] ? ksys_write+0x1ac/0x250 [ 827.250275][T16886] __x64_sys_unshare+0x31/0x40 [ 827.250309][T16886] do_syscall_64+0x115/0x840 [ 827.250342][T16886] ? clear_bhb_loop+0x40/0x90 [ 827.250371][T16886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 827.250395][T16886] RIP: 0033:0x7f98ae19ce59 [ 827.250415][T16886] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.250439][T16886] RSP: 002b:00007f98af070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 827.250461][T16886] RAX: ffffffffffffffda RBX: 00007f98ae415fa0 RCX: 00007f98ae19ce59 [ 827.250477][T16886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 827.250492][T16886] RBP: 00007f98ae232d6f R08: 0000000000000000 R09: 0000000000000000 [ 827.250507][T16886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 827.250521][T16886] R13: 00007f98ae416038 R14: 00007f98ae415fa0 R15: 00007ffc33e581b8 [ 827.250551][T16886] [ 828.052390][T16893] i2c i2c-0: new_device: Invalid device name [ 828.196122][T16893] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2336: iget: checksum invalid [ 828.268406][T16893] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 828.326668][T16893] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2336: iget: checksum invalid [ 828.448587][T16893] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 828.528113][T16895] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2336'. [ 828.610335][T16893] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2336: iget: checksum invalid [ 828.698014][T16893] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 828.783801][T16893] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.2336: iget: checksum invalid [ 828.852361][T16903] Process accounting paused [ 828.932261][T16893] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 829.000424][T16893] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 829.051746][T16893] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 830.142493][T16938] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2342'. [ 830.352078][T16938] bridge_slave_1: left allmulticast mode [ 830.352107][T16938] bridge_slave_1: left promiscuous mode [ 830.352365][T16938] bridge0: port 2(bridge_slave_1) entered disabled state [ 830.462849][T16938] bridge_slave_0: left allmulticast mode [ 830.462889][T16938] bridge_slave_0: left promiscuous mode [ 830.463075][T16938] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.443542][ T7689] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3 with max blocks 2 with error 117 [ 833.470685][ T7689] EXT4-fs (sda1): This should not happen!! Data will be lost [ 833.470685][ T7689] [ 836.458468][T17007] block2mtd: too many arguments [ 837.605226][T17034] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2362'. [ 840.438308][ T6752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 840.457006][ T6752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 840.467465][ T6752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 840.478179][ T6752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 840.491635][ T6752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 842.005259][ T6754] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.325615][T17111] FAULT_INJECTION: forcing a failure. [ 842.325615][T17111] name failslab, interval 1, probability 0, space 0, times 0 [ 842.388860][T17111] CPU: 0 UID: 0 PID: 17111 Comm: syz.0.2378 Not tainted syzkaller #0 PREEMPT(full) [ 842.388891][T17111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 842.388905][T17111] Call Trace: [ 842.388913][T17111] [ 842.388922][T17111] dump_stack_lvl+0x100/0x190 [ 842.388952][T17111] should_fail_ex.cold+0x5/0xa [ 842.388984][T17111] should_failslab+0xc2/0x120 [ 842.389012][T17111] __kmalloc_cache_noprof+0x7a/0x6f0 [ 842.389046][T17111] ? sctp_add_bind_addr+0xae/0x3e0 [ 842.389087][T17111] sctp_add_bind_addr+0xae/0x3e0 [ 842.389129][T17111] sctp_copy_local_addr_list+0x349/0x550 [ 842.389158][T17111] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 842.389186][T17111] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 842.389213][T17111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 842.389250][T17111] sctp_bind_addr_copy+0xe0/0x530 [ 842.389291][T17111] sctp_connect_new_asoc+0x1c9/0x770 [ 842.389324][T17111] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 842.389353][T17111] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 842.389379][T17111] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 842.389415][T17111] __sctp_connect+0x3e7/0xc70 [ 842.389450][T17111] ? __pfx___sctp_connect+0x10/0x10 [ 842.389482][T17111] ? __pfx_sctp_inet_connect+0x10/0x10 [ 842.389513][T17111] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 842.389547][T17111] ? __pfx_sctp_inet_connect+0x10/0x10 [ 842.389576][T17111] sctp_inet_connect+0x15f/0x220 [ 842.389614][T17111] __sys_connect_file+0x141/0x1a0 [ 842.389655][T17111] __sys_connect+0x141/0x170 [ 842.389689][T17111] ? __pfx___sys_connect+0x10/0x10 [ 842.389744][T17111] ? __fget_files+0x21f/0x3d0 [ 842.389782][T17111] ? __pfx_ksys_write+0x10/0x10 [ 842.389815][T17111] __x64_sys_connect+0x72/0xb0 [ 842.389850][T17111] ? lockdep_hardirqs_on+0x78/0x100 [ 842.389885][T17111] do_syscall_64+0x115/0x840 [ 842.389917][T17111] ? clear_bhb_loop+0x40/0x90 [ 842.389946][T17111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.389970][T17111] RIP: 0033:0x7ff1ebb9ce59 [ 842.389989][T17111] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 842.390012][T17111] RSP: 002b:00007ff1e9df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 842.390035][T17111] RAX: ffffffffffffffda RBX: 00007ff1ebe15fa0 RCX: 00007ff1ebb9ce59 [ 842.390051][T17111] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 842.390066][T17111] RBP: 00007ff1e9df6090 R08: 0000000000000000 R09: 0000000000000000 [ 842.390080][T17111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 842.390094][T17111] R13: 00007ff1ebe16038 R14: 00007ff1ebe15fa0 R15: 00007ffc05c97a18 [ 842.390136][T17111] [ 842.673439][ T6752] Bluetooth: hci3: command tx timeout [ 842.685771][ T6754] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.807627][ T6754] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.933172][ T6754] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.239606][T17121] FAULT_INJECTION: forcing a failure. [ 843.239606][T17121] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 843.365958][T17121] CPU: 0 UID: 0 PID: 17121 Comm: syz.0.2379 Not tainted syzkaller #0 PREEMPT(full) [ 843.365991][T17121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 843.366007][T17121] Call Trace: [ 843.366015][T17121] [ 843.366024][T17121] dump_stack_lvl+0x100/0x190 [ 843.366054][T17121] should_fail_ex.cold+0x5/0xa [ 843.366081][T17121] ? prepare_alloc_pages+0x16d/0x5f0 [ 843.366115][T17121] should_fail_alloc_page+0xeb/0x140 [ 843.366147][T17121] prepare_alloc_pages+0x1f0/0x5f0 [ 843.366188][T17121] ? __lock_acquire+0x4a5/0x2630 [ 843.366227][T17121] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 843.366294][T17121] ? find_held_lock+0x2b/0x80 [ 843.366335][T17121] ? is_bpf_text_address+0x8a/0x1a0 [ 843.366394][T17121] ? is_bpf_text_address+0x8a/0x1a0 [ 843.366424][T17121] ? bpf_ksym_find+0x124/0x1c0 [ 843.366452][T17121] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 843.366490][T17121] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 843.366528][T17121] ? is_bpf_text_address+0x94/0x1a0 [ 843.366558][T17121] ? kernel_text_address+0x8d/0x100 [ 843.366580][T17121] ? __kernel_text_address+0xd/0x30 [ 843.366602][T17121] ? unwind_get_return_address+0x59/0xa0 [ 843.366643][T17121] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 843.366677][T17121] ? policy_nodemask+0xed/0x4f0 [ 843.366706][T17121] alloc_pages_mpol+0x1fb/0x540 [ 843.366734][T17121] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 843.366759][T17121] ? kasan_save_stack+0x30/0x50 [ 843.366781][T17121] ? __kasan_kmalloc+0xaa/0xb0 [ 843.366801][T17121] ? __get_vm_area_node+0x101/0x330 [ 843.366828][T17121] ? __vmalloc_node_range_noprof+0x228/0x1630 [ 843.366864][T17121] alloc_pages_noprof+0x1a/0x160 [ 843.366899][T17121] get_free_pages_noprof+0x10/0xb0 [ 843.366924][T17121] __kasan_populate_vmalloc+0xa0/0x210 [ 843.366967][T17121] alloc_vmap_area+0x95d/0x2b70 [ 843.367005][T17121] ? __pfx_alloc_vmap_area+0x10/0x10 [ 843.367038][T17121] __get_vm_area_node+0x1ca/0x330 [ 843.367071][T17121] __vmalloc_node_range_noprof+0x228/0x1630 [ 843.367103][T17121] ? n_tty_open+0x1a/0x170 [ 843.367146][T17121] ? n_tty_open+0x1a/0x170 [ 843.367185][T17121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 843.367217][T17121] ? __pfx___might_resched+0x10/0x10 [ 843.367242][T17121] ? do_raw_spin_lock+0x128/0x260 [ 843.367267][T17121] ? find_held_lock+0x2b/0x80 [ 843.367295][T17121] ? n_tty_open+0x12b/0x170 [ 843.367327][T17121] ? n_tty_open+0x12b/0x170 [ 843.367362][T17121] ? n_tty_open+0x1a/0x170 [ 843.367394][T17121] __vmalloc_node_noprof+0xad/0xf0 [ 843.367424][T17121] ? n_tty_open+0x1a/0x170 [ 843.367458][T17121] ? __pfx_n_tty_open+0x10/0x10 [ 843.367491][T17121] n_tty_open+0x1a/0x170 [ 843.367529][T17121] tty_ldisc_open+0xa2/0x120 [ 843.367555][T17121] tty_ldisc_setup+0x87/0xf0 [ 843.367582][T17121] tty_init_dev.part.0+0x1b5/0x470 [ 843.367617][T17121] tty_init_dev+0x60/0x80 [ 843.367648][T17121] ? __pfx_ptmx_open+0x10/0x10 [ 843.367722][T17121] ptmx_open+0x128/0x370 [ 843.367745][T17121] ? __pfx_ptmx_open+0x10/0x10 [ 843.367768][T17121] chrdev_open+0x234/0x6a0 [ 843.367796][T17121] ? __pfx_apparmor_file_open+0x10/0x10 [ 843.367823][T17121] ? __pfx_chrdev_open+0x10/0x10 [ 843.367853][T17121] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 843.367889][T17121] do_dentry_open+0x6ab/0x14d0 [ 843.367917][T17121] ? __pfx_chrdev_open+0x10/0x10 [ 843.367951][T17121] vfs_open+0x82/0x3f0 [ 843.367987][T17121] path_openat+0x208c/0x31a0 [ 843.368024][T17121] ? __pfx_path_openat+0x10/0x10 [ 843.368062][T17121] do_file_open+0x20e/0x430 [ 843.368092][T17121] ? __pfx_do_file_open+0x10/0x10 [ 843.368140][T17121] ? alloc_fd+0x476/0x790 [ 843.368169][T17121] ? do_getname+0x191/0x390 [ 843.368205][T17121] do_sys_openat2+0x10d/0x1e0 [ 843.368239][T17121] ? __pfx_do_sys_openat2+0x10/0x10 [ 843.368276][T17121] ? __sys_sendmsg+0x18f/0x220 [ 843.368305][T17121] __x64_sys_openat+0x12d/0x210 [ 843.368341][T17121] ? __pfx___x64_sys_openat+0x10/0x10 [ 843.368381][T17121] ? rcu_is_watching+0x12/0xc0 [ 843.368410][T17121] do_syscall_64+0x115/0x840 [ 843.368441][T17121] ? clear_bhb_loop+0x40/0x90 [ 843.368469][T17121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.368492][T17121] RIP: 0033:0x7ff1ebb9ce59 [ 843.368514][T17121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 843.368537][T17121] RSP: 002b:00007ff1e9dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 843.368558][T17121] RAX: ffffffffffffffda RBX: 00007ff1ebe16090 RCX: 00007ff1ebb9ce59 [ 843.368573][T17121] RDX: 000000003e000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 843.368588][T17121] RBP: 00007ff1ebc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 843.368601][T17121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 843.368615][T17121] R13: 00007ff1ebe16128 R14: 00007ff1ebe16090 R15: 00007ffc05c97a18 [ 843.368643][T17121] [ 844.322996][T17121] syz.0.2379: vmalloc error: size 9112, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 844.339157][T17121] CPU: 0 UID: 0 PID: 17121 Comm: syz.0.2379 Not tainted syzkaller #0 PREEMPT(full) [ 844.339187][T17121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 844.339202][T17121] Call Trace: [ 844.339210][T17121] [ 844.339219][T17121] dump_stack_lvl+0x100/0x190 [ 844.339248][T17121] warn_alloc.cold+0x95/0x1c1 [ 844.339274][T17121] ? __pfx_warn_alloc+0x10/0x10 [ 844.339312][T17121] ? lockdep_hardirqs_on+0x78/0x100 [ 844.339350][T17121] ? __get_vm_area_node+0x2cd/0x330 [ 844.339387][T17121] ? __get_vm_area_node+0x208/0x330 [ 844.339422][T17121] __vmalloc_node_range_noprof+0xccd/0x1630 [ 844.339473][T17121] ? n_tty_open+0x1a/0x170 [ 844.339518][T17121] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 844.339553][T17121] ? __pfx___might_resched+0x10/0x10 [ 844.339579][T17121] ? do_raw_spin_lock+0x128/0x260 [ 844.339607][T17121] ? find_held_lock+0x2b/0x80 [ 844.339636][T17121] ? n_tty_open+0x12b/0x170 [ 844.339670][T17121] ? n_tty_open+0x12b/0x170 [ 844.339708][T17121] ? n_tty_open+0x1a/0x170 [ 844.339742][T17121] __vmalloc_node_noprof+0xad/0xf0 [ 844.339774][T17121] ? n_tty_open+0x1a/0x170 [ 844.339810][T17121] ? __pfx_n_tty_open+0x10/0x10 [ 844.339845][T17121] n_tty_open+0x1a/0x170 [ 844.339881][T17121] tty_ldisc_open+0xa2/0x120 [ 844.339909][T17121] tty_ldisc_setup+0x87/0xf0 [ 844.339938][T17121] tty_init_dev.part.0+0x1b5/0x470 [ 844.339975][T17121] tty_init_dev+0x60/0x80 [ 844.340008][T17121] ? __pfx_ptmx_open+0x10/0x10 [ 844.340031][T17121] ptmx_open+0x128/0x370 [ 844.340055][T17121] ? __pfx_ptmx_open+0x10/0x10 [ 844.340079][T17121] chrdev_open+0x234/0x6a0 [ 844.340109][T17121] ? __pfx_apparmor_file_open+0x10/0x10 [ 844.340136][T17121] ? __pfx_chrdev_open+0x10/0x10 [ 844.340168][T17121] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 844.340207][T17121] do_dentry_open+0x6ab/0x14d0 [ 844.340247][T17121] ? __pfx_chrdev_open+0x10/0x10 [ 844.340282][T17121] vfs_open+0x82/0x3f0 [ 844.340318][T17121] path_openat+0x208c/0x31a0 [ 844.340355][T17121] ? __pfx_path_openat+0x10/0x10 [ 844.340393][T17121] do_file_open+0x20e/0x430 [ 844.340440][T17121] ? __pfx_do_file_open+0x10/0x10 [ 844.340485][T17121] ? alloc_fd+0x476/0x790 [ 844.340513][T17121] ? do_getname+0x191/0x390 [ 844.340548][T17121] do_sys_openat2+0x10d/0x1e0 [ 844.340581][T17121] ? __pfx_do_sys_openat2+0x10/0x10 [ 844.340616][T17121] ? __sys_sendmsg+0x18f/0x220 [ 844.340643][T17121] __x64_sys_openat+0x12d/0x210 [ 844.340676][T17121] ? __pfx___x64_sys_openat+0x10/0x10 [ 844.340714][T17121] ? rcu_is_watching+0x12/0xc0 [ 844.340741][T17121] do_syscall_64+0x115/0x840 [ 844.340770][T17121] ? clear_bhb_loop+0x40/0x90 [ 844.340796][T17121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 844.340818][T17121] RIP: 0033:0x7ff1ebb9ce59 [ 844.340835][T17121] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 844.340874][T17121] RSP: 002b:00007ff1e9dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 844.340895][T17121] RAX: ffffffffffffffda RBX: 00007ff1ebe16090 RCX: 00007ff1ebb9ce59 [ 844.340910][T17121] RDX: 000000003e000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 844.340924][T17121] RBP: 00007ff1ebc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 844.340938][T17121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 844.340952][T17121] R13: 00007ff1ebe16128 R14: 00007ff1ebe16090 R15: 00007ffc05c97a18 [ 844.340981][T17121] [ 844.341012][T17121] Mem-Info: [ 844.870626][ T6752] Bluetooth: hci3: command tx timeout [ 845.168621][T17121] active_anon:13980 inactive_anon:9 isolated_anon:442 [ 845.168621][T17121] active_file:12568 inactive_file:50609 isolated_file:0 [ 845.168621][T17121] unevictable:768 dirty:1185 writeback:0 [ 845.168621][T17121] slab_reclaimable:15760 slab_unreclaimable:110040 [ 845.168621][T17121] mapped:27127 shmem:1292 pagetables:1527 [ 845.168621][T17121] sec_pagetables:0 bounce:0 [ 845.168621][T17121] kernel_misc_reclaimable:0 [ 845.168621][T17121] free:1282468 free_pcp:12456 free_cma:0 [ 845.399260][T17121] Node 0 active_anon:49004kB inactive_anon:36kB active_file:50272kB inactive_file:202300kB unevictable:1536kB isolated(anon):1768kB isolated(file):0kB mapped:112616kB dirty:4740kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:12288kB kernel_stack:11776kB pagetables:6112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 845.522586][T17089] bridge0: port 1(bridge_slave_0) entered blocking state [ 845.541187][T17089] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.551513][T17121] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:100kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 845.603148][T17089] bridge_slave_0: entered allmulticast mode [ 845.626030][T17089] bridge_slave_0: entered promiscuous mode [ 845.667950][T17089] bridge0: port 2(bridge_slave_1) entered blocking state [ 845.689582][T17089] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.707250][T17121] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 845.766787][T17089] bridge_slave_1: entered allmulticast mode [ 845.818586][T17089] bridge_slave_1: entered promiscuous mode [ 845.905308][T17121] lowmem_reserve[]: 0 2478 2479 2479 2479 [ 845.925555][T17121] Node 0 DMA32 free:1190612kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB free_highatomic:0KB active_anon:45656kB inactive_anon:36kB active_file:50272kB inactive_file:202300kB unevictable:1536kB writepending:4740kB zspages:624kB present:3129332kB managed:2537500kB mlocked:0kB bounce:0kB free_pcp:46900kB local_pcp:46900kB free_cma:0kB [ 846.038503][T17121] lowmem_reserve[]: 0 0 1 1 1 [ 846.056264][T17121] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 846.171126][T17121] lowmem_reserve[]: 0 0 0 0 0 [ 846.190131][T17121] Node 1 Normal free:3922824kB boost:0kB min:55580kB low:69472kB high:83364kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:13712kB local_pcp:13712kB free_cma:0kB [ 846.255592][T17154] netlink: 330 bytes leftover after parsing attributes in process `syz.2.2383'. [ 846.286280][T17121] lowmem_reserve[]: 0 0 0 0 0 [ 846.295820][T17121] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 846.324134][T17121] Node 0 DMA32: 5807*4kB (UME) 6493*8kB (UME) 4131*16kB (UME) 1436*32kB (UME) 784*64kB (UME) 432*128kB (UME) 258*256kB (UME) 105*512kB (UM) 39*1024kB (UM) 10*2048kB (UM) 175*4096kB (M) = 1189716kB [ 846.364823][T17121] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 846.383983][T17121] Node 1 Normal: 4*4kB (M) 5*8kB (M) 5*16kB (M) 6*32kB (UM) 11*64kB (UM) 11*128kB (UM) 8*256kB (UM) 3*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 955*4096kB (UM) = 3922824kB [ 846.401658][T17121] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 846.412593][T17121] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 846.422462][T17121] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 846.432508][T17121] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 846.442555][T17121] 64484 total pagecache pages [ 846.447599][T17121] 17 pages in swap cache [ 846.451932][T17121] Free swap = 124800kB [ 846.458493][T17121] Total swap = 124996kB [ 846.465519][T17121] 2097051 pages RAM [ 846.469478][T17121] 0 pages HighMem/MovableOnly [ 846.474904][T17121] 430784 pages reserved [ 846.479154][T17121] 0 pages cma reserved [ 846.483850][T17121] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 846.627439][ T6754] bridge_slave_1: left allmulticast mode [ 846.644425][ T6754] bridge_slave_1: left promiscuous mode [ 846.666366][ T6754] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.701067][ T6754] bridge_slave_0: left allmulticast mode [ 846.715466][ T6754] bridge_slave_0: left promiscuous mode [ 846.731671][ T6754] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.881996][ T6752] Bluetooth: hci3: command tx timeout [ 847.097911][ T6754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.127259][ T6754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.150177][ T6754] bond0 (unregistering): Released all slaves [ 847.225241][T17089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 847.266300][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 847.339871][ T6754] ovs_: left promiscuous mode [ 847.422829][T17089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 847.623233][T17089] team0: Port device team_slave_0 added [ 847.663860][T17089] team0: Port device team_slave_1 added [ 847.875709][T17138] Process accounting resumed [ 847.912563][T17089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 847.972162][T17089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.132141][T17089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 848.261503][T17089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 848.326489][T17089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 848.511453][T17089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 848.951538][ T6752] Bluetooth: hci3: command tx timeout [ 849.052157][T17089] hsr_slave_0: entered promiscuous mode [ 849.082769][T17089] hsr_slave_1: entered promiscuous mode [ 849.121807][T17089] debugfs: 'hsr0' already exists in 'hsr' [ 849.144455][T17089] Cannot create hsr debugfs directory [ 849.855407][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 850.276253][T17201] block2mtd: too many arguments [ 850.947534][T17212] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 850.947553][T17212] File: /dev/nullb0 PID: 17212 Comm: syz.1.2393 [ 851.701556][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 853.106366][T17256] vivid-007: ================= START STATUS ================= [ 853.172441][T17256] vivid-007: Generate PTS: true [ 853.246154][T17256] vivid-007: Generate SCR: true [ 853.310940][T17256] tpg source WxH: 320x240 (Y'CbCr) [ 853.350225][T17256] tpg field: 1 [ 853.407861][T17256] tpg crop: (0,0)/320x240 [ 853.441154][T17256] tpg compose: (0,0)/320x240 [ 853.457016][T17256] tpg colorspace: 8 [ 853.471427][T17256] tpg transfer function: 0/0 [ 853.485638][T17256] tpg Y'CbCr encoding: 0/0 [ 853.500037][T17256] tpg quantization: 0/0 [ 853.511240][T17256] tpg RGB range: 0/2 [ 853.525828][T17256] vivid-007: ================== END STATUS ================== [ 853.582963][T17269] capability: warning: `syz.2.2398' uses deprecated v2 capabilities in a way that may be insecure [ 855.673009][T17089] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 855.780485][T17089] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 856.011281][T17089] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 856.126515][T17089] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 856.158117][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2402'. [ 856.180228][T17089] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 856.256273][T17089] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 856.600273][T17089] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 856.686543][T17089] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 856.735384][T17338] FAULT_INJECTION: forcing a failure. [ 856.735384][T17338] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.812078][T17338] CPU: 0 UID: 0 PID: 17338 Comm: syz.0.2407 Not tainted syzkaller #0 PREEMPT(full) [ 856.812107][T17338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 856.812120][T17338] Call Trace: [ 856.812127][T17338] [ 856.812136][T17338] dump_stack_lvl+0x100/0x190 [ 856.812164][T17338] should_fail_ex.cold+0x5/0xa [ 856.812191][T17338] _copy_from_user+0x2e/0xd0 [ 856.812223][T17338] copy_msghdr_from_user+0x9f/0x4f0 [ 856.812255][T17338] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 856.812289][T17338] ? rcu_is_watching+0x12/0xc0 [ 856.812313][T17338] ? ___sys_sendmsg+0x19d/0x1e0 [ 856.812343][T17338] ? kfree+0x1dd/0x6c0 [ 856.812378][T17338] ___sys_sendmsg+0x106/0x1e0 [ 856.812409][T17338] ? __pfx____sys_sendmsg+0x10/0x10 [ 856.812461][T17338] ? __pfx___might_resched+0x10/0x10 [ 856.812489][T17338] __sys_sendmmsg+0x205/0x430 [ 856.812515][T17338] ? __pfx___sys_sendmmsg+0x10/0x10 [ 856.812545][T17338] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 856.812589][T17338] ? fput+0x79/0x100 [ 856.812618][T17338] ? ksys_write+0x1ac/0x250 [ 856.812642][T17338] ? __pfx_ksys_write+0x10/0x10 [ 856.812670][T17338] __x64_sys_sendmmsg+0x9c/0x100 [ 856.812692][T17338] ? lockdep_hardirqs_on+0x78/0x100 [ 856.812723][T17338] do_syscall_64+0x115/0x840 [ 856.812752][T17338] ? clear_bhb_loop+0x40/0x90 [ 856.812778][T17338] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.812806][T17338] RIP: 0033:0x7ff1ebb9ce59 [ 856.812823][T17338] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.812844][T17338] RSP: 002b:00007ff1e9dd5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 856.812865][T17338] RAX: ffffffffffffffda RBX: 00007ff1ebe16090 RCX: 00007ff1ebb9ce59 [ 856.812879][T17338] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 856.812892][T17338] RBP: 00007ff1e9dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 856.812905][T17338] R10: 0000000007000000 R11: 0000000000000246 R12: 0000000000000002 [ 856.812918][T17338] R13: 00007ff1ebe16128 R14: 00007ff1ebe16090 R15: 00007ffc05c97a18 [ 856.812945][T17338] [ 858.428605][T17089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 858.683007][T17089] 8021q: adding VLAN 0 to HW filter on device team0 [ 858.794868][ T6762] bridge0: port 1(bridge_slave_0) entered blocking state [ 858.802158][ T6762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 858.973243][ T6762] bridge0: port 2(bridge_slave_1) entered blocking state [ 858.980416][ T6762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 859.007074][T17368] Process accounting resumed [ 859.985318][T17387] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 860.037286][T17387] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 860.209211][T17387] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 860.245963][T17387] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 860.377543][T17387] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 860.514453][T17387] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 860.553163][T17387] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 860.613976][T17387] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 861.145433][T17411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2414'. [ 861.366567][ T6752] Bluetooth: hci1: command 0x0406 tx timeout [ 861.946405][ T6754] hsr_slave_0: left promiscuous mode [ 861.992263][ T6754] hsr_slave_1: left promiscuous mode [ 862.045439][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 862.103356][ T6754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 862.151041][ T6754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 862.184219][ T6754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 862.243723][ T6752] Bluetooth: hci4: command 0x0c1a tx timeout [ 862.270904][ T6754] veth1_macvtap: left promiscuous mode [ 862.298264][ T6754] veth0_macvtap: left promiscuous mode [ 862.333778][ T6754] veth1_vlan: left promiscuous mode [ 862.365469][ T6754] veth0_vlan: left promiscuous mode [ 862.560798][ T6752] Bluetooth: hci3: command 0x0c1a tx timeout [ 863.132527][ T6754] team0 (unregistering): Port device team_slave_1 removed [ 863.173455][ T6754] team0 (unregistering): Port device team_slave_0 removed [ 863.435388][ T6752] Bluetooth: hci1: command 0x0406 tx timeout [ 864.311442][ T6752] Bluetooth: hci4: command 0x0c1a tx timeout [ 864.641524][ T6752] Bluetooth: hci3: command 0x0c1a tx timeout [ 865.179418][T17481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2424'. [ 865.398321][T17481] Invalid ELF header magic: != ELF [ 865.603514][T17089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 865.854695][T17089] veth0_vlan: entered promiscuous mode [ 865.914528][T17089] veth1_vlan: entered promiscuous mode [ 866.075609][T17089] veth0_macvtap: entered promiscuous mode [ 866.138066][T17089] veth1_macvtap: entered promiscuous mode [ 866.237993][T17089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.260515][T17497] usb usb3: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 866.304248][T17089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.380051][ T6752] Bluetooth: hci4: command 0x0c1a tx timeout [ 866.391929][ T7681] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.415297][T17488] zswap: compressor 000 not available [ 866.428591][ T7681] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.502951][ T7681] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.555693][ T7681] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.698103][ T6752] Bluetooth: hci3: command 0x0c1a tx timeout [ 867.030548][T17514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2432'. [ 867.100105][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.107492][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 867.377012][T17520] FAULT_INJECTION: forcing a failure. [ 867.377012][T17520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 867.404689][T17520] CPU: 0 UID: 0 PID: 17520 Comm: syz.1.2433 Not tainted syzkaller #0 PREEMPT(full) [ 867.404736][T17520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 867.404749][T17520] Call Trace: [ 867.404770][T17520] [ 867.404777][T17520] dump_stack_lvl+0x100/0x190 [ 867.404802][T17520] should_fail_ex.cold+0x5/0xa [ 867.404831][T17520] _copy_from_iter+0x1f4/0x1690 [ 867.404864][T17520] ? __asan_memset+0x23/0x50 [ 867.404897][T17520] ? __pfx__copy_from_iter+0x10/0x10 [ 867.404926][T17520] ? __pfx___alloc_skb+0x10/0x10 [ 867.404945][T17520] ? __pfx___might_resched+0x10/0x10 [ 867.404967][T17520] ? __lock_acquire+0x4a5/0x2630 [ 867.405006][T17520] netlink_sendmsg+0x808/0xda0 [ 867.405038][T17520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.405064][T17520] ? __import_iovec+0x1d2/0x640 [ 867.405095][T17520] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 867.405120][T17520] ____sys_sendmsg+0x9e1/0xb70 [ 867.405165][T17520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 867.405195][T17520] ? __pfx_____sys_sendmsg+0x10/0x10 [ 867.405235][T17520] ___sys_sendmsg+0x190/0x1e0 [ 867.405266][T17520] ? __pfx____sys_sendmsg+0x10/0x10 [ 867.405332][T17520] __sys_sendmsg+0x170/0x220 [ 867.405355][T17520] ? __pfx___sys_sendmsg+0x10/0x10 [ 867.405388][T17520] ? rcu_is_watching+0x12/0xc0 [ 867.405416][T17520] do_syscall_64+0x115/0x840 [ 867.405446][T17520] ? clear_bhb_loop+0x40/0x90 [ 867.405472][T17520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 867.405494][T17520] RIP: 0033:0x7fa1ddb9ce59 [ 867.405511][T17520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 867.405532][T17520] RSP: 002b:00007fa1deb34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 867.405553][T17520] RAX: ffffffffffffffda RBX: 00007fa1dde15fa0 RCX: 00007fa1ddb9ce59 [ 867.405567][T17520] RDX: 0000000004008010 RSI: 0000200000001880 RDI: 0000000000000005 [ 867.405580][T17520] RBP: 00007fa1deb34090 R08: 0000000000000000 R09: 0000000000000000 [ 867.405594][T17520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 867.405606][T17520] R13: 00007fa1dde16038 R14: 00007fa1dde15fa0 R15: 00007ffee6e8f888 [ 867.405632][T17520] [ 870.261068][ T6754] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.300549][ T6754] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 870.475271][ T6754] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 870.513961][ T6754] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 872.197780][T17565] bond0: invalid ARP target specified [ 872.302308][T17565] binder: 17563:17565 ioctl c004620b 6 returned -22 [ 872.498440][T17565] bond0: Unable to set down delay as MII monitoring is disabled [ 874.185674][T17596] futex_wake_op: syz.2.2449 tries to shift op by -2048; fix this program [ 874.234632][T17596] futex_wake_op: syz.2.2449 tries to shift op by -2048; fix this program [ 874.322038][T17596] 0x000000000001-0x000000020000 : "" [ 874.377953][T17596] ftl_cs: FTL header corrupt! [ 874.553572][ T29] audit: type=1800 audit(4295006752.988:88): pid=17600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2449" name="lu_gp_id" dev="configfs" ino=95363 res=0 errno=0 [ 874.582564][T17600] kstrtoul() returned -22 for lu_gp_id [ 874.960302][T17641] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2451'. [ 875.793064][T17656] bond0: invalid ARP target specified [ 875.988308][T17662] nbd: socks must be embedded in a SOCK_ITEM attr [ 876.057973][T17656] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2454'. [ 876.127449][T17662] block nbd0: shutting down sockets [ 876.538582][T17661] bond0: invalid ARP target specified [ 877.297602][T17685] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 879.846564][T17680] Process accounting paused [ 882.563435][T17741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 882.577903][T17741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 882.586327][T17741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 882.598850][T17741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 882.619306][T17741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 882.639342][T17740] futex_wake_op: syz.2.2472 tries to shift op by -2048; fix this program [ 884.684694][T17741] Bluetooth: hci2: command tx timeout [ 884.888269][T17779] futex_wake_op: syz.2.2478 tries to shift op by -2048; fix this program [ 884.937565][T17779] futex_wake_op: syz.2.2478 tries to shift op by -2048; fix this program [ 884.993453][T17773] 0x000000000001-0x000000020000 : "" [ 885.059819][T17773] ftl_cs: FTL header corrupt! [ 885.363068][ T29] audit: type=1800 audit(4295006763.864:89): pid=17791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2478" name="lu_gp_id" dev="configfs" ino=96208 res=0 errno=0 [ 885.384677][T17791] kstrtoul() returned -22 for lu_gp_id [ 886.754034][T17741] Bluetooth: hci2: command tx timeout [ 886.805078][T17802] bond0: invalid ARP target specified [ 887.616663][T17739] bridge0: port 1(bridge_slave_0) entered blocking state [ 887.644419][T17739] bridge0: port 1(bridge_slave_0) entered disabled state [ 887.683900][T17739] bridge_slave_0: entered allmulticast mode [ 887.723302][T17739] bridge_slave_0: entered promiscuous mode [ 887.773213][T17739] bridge0: port 2(bridge_slave_1) entered blocking state [ 887.825216][T17739] bridge0: port 2(bridge_slave_1) entered disabled state [ 887.874854][T17739] bridge_slave_1: entered allmulticast mode [ 887.927206][T17739] bridge_slave_1: entered promiscuous mode [ 888.130385][T17739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.199705][T17739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 888.440186][T17739] team0: Port device team_slave_0 added [ 888.494174][T17739] team0: Port device team_slave_1 added [ 888.789855][T17739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.827791][T17741] Bluetooth: hci2: command tx timeout [ 888.844320][T17739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.974744][T17739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.193495][T17739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.249172][T17739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.367601][T17739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.827337][T17739] hsr_slave_0: entered promiscuous mode [ 889.865595][T17739] hsr_slave_1: entered promiscuous mode [ 889.900163][T17739] debugfs: 'hsr0' already exists in 'hsr' [ 889.929856][T17739] Cannot create hsr debugfs directory [ 890.574308][T17850] FAULT_INJECTION: forcing a failure. [ 890.574308][T17850] name failslab, interval 1, probability 0, space 0, times 0 [ 890.652660][T17850] CPU: 0 UID: 0 PID: 17850 Comm: syz.3.2491 Not tainted syzkaller #0 PREEMPT(full) [ 890.652692][T17850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 890.652707][T17850] Call Trace: [ 890.652715][T17850] [ 890.652724][T17850] dump_stack_lvl+0x100/0x190 [ 890.652753][T17850] should_fail_ex.cold+0x5/0xa [ 890.652785][T17850] should_failslab+0xc2/0x120 [ 890.652814][T17850] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 890.652856][T17850] ? vm_area_dup+0x27/0x8e0 [ 890.652897][T17850] vm_area_dup+0x27/0x8e0 [ 890.652933][T17850] __split_vma+0x18c/0xda0 [ 890.652973][T17850] ? __pfx___split_vma+0x10/0x10 [ 890.653009][T17850] ? register_lock_class+0x40/0x560 [ 890.653077][T17850] vma_modify+0x12ad/0x25c0 [ 890.653145][T17850] ? __pfx_vma_modify+0x10/0x10 [ 890.653200][T17850] ? __lock_acquire+0x4a5/0x2630 [ 890.653255][T17850] vma_modify_flags+0x257/0x3d0 [ 890.653295][T17850] ? __pfx_vma_modify_flags+0x10/0x10 [ 890.653351][T17850] ? __pfx_clockevents_program_event+0x10/0x10 [ 890.653380][T17850] ? find_held_lock+0x2b/0x80 [ 890.653414][T17850] madvise_update_vma+0x21c/0xce0 [ 890.653450][T17850] ? __pfx_madvise_update_vma+0x10/0x10 [ 890.653495][T17850] ? khugepaged_enter_vma+0x8b/0x2c0 [ 890.653534][T17850] madvise_vma_behavior+0x2a3/0x2240 [ 890.653572][T17850] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 890.653614][T17850] ? find_vma_prev+0xd8/0x150 [ 890.653643][T17850] ? futex_unqueue+0x133/0x2c0 [ 890.653667][T17850] ? __pfx_find_vma_prev+0x10/0x10 [ 890.653705][T17850] ? __futex_wait+0x256/0x300 [ 890.653742][T17850] madvise_walk_vmas+0x2fe/0xa90 [ 890.653781][T17850] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 890.653823][T17850] madvise_do_behavior+0x1ea/0x510 [ 890.653859][T17850] ? __pfx_madvise_do_behavior+0x10/0x10 [ 890.653903][T17850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 890.653943][T17850] do_madvise+0x195/0x240 [ 890.653975][T17850] ? __pfx_do_madvise+0x10/0x10 [ 890.654008][T17850] ? do_futex+0x192/0x350 [ 890.654050][T17850] ? __sys_sendmsg+0x18f/0x220 [ 890.654095][T17850] __x64_sys_madvise+0xa9/0x110 [ 890.654128][T17850] ? lockdep_hardirqs_on+0x78/0x100 [ 890.654164][T17850] do_syscall_64+0x115/0x840 [ 890.654198][T17850] ? clear_bhb_loop+0x40/0x90 [ 890.654229][T17850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.654254][T17850] RIP: 0033:0x7f896d99ce59 [ 890.654273][T17850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.654298][T17850] RSP: 002b:00007f896e869028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 890.654322][T17850] RAX: ffffffffffffffda RBX: 00007f896dc15fa0 RCX: 00007f896d99ce59 [ 890.654339][T17850] RDX: 000000000000000e RSI: 0000000000004081 RDI: 0000000000000000 [ 890.654366][T17850] RBP: 00007f896da32d6f R08: 0000000000000000 R09: 0000000000000000 [ 890.654381][T17850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 890.654395][T17850] R13: 00007f896dc16038 R14: 00007f896dc15fa0 R15: 00007ffdf7c10bb8 [ 890.654426][T17850] [ 891.005403][T17739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 891.311626][T17739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 891.322437][T17741] Bluetooth: hci2: command tx timeout [ 891.360181][T17739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 891.482739][T17739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 891.613861][T17858] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 891.635916][T17739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 891.714582][T17739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 891.736467][T17739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 891.814805][T17739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 892.736288][T17887] futex_wake_op: syz.2.2496 tries to shift op by -2048; fix this program [ 892.772677][T17887] futex_wake_op: syz.2.2496 tries to shift op by -2048; fix this program [ 892.879709][T17887] 0x000000000001-0x000000020000 : "" [ 892.885688][T17739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 892.913193][T17887] ftl_cs: FTL header corrupt! [ 893.118052][ T29] audit: type=1800 audit(4295006771.655:90): pid=17892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2496" name="lu_gp_id" dev="configfs" ino=85605 res=0 errno=0 [ 893.171097][T17887] kstrtoul() returned -22 for lu_gp_id [ 893.923318][T17739] 8021q: adding VLAN 0 to HW filter on device team0 [ 894.266381][T17610] bridge0: port 1(bridge_slave_0) entered blocking state [ 894.273604][T17610] bridge0: port 1(bridge_slave_0) entered forwarding state [ 894.310523][T17610] bridge0: port 2(bridge_slave_1) entered blocking state [ 894.317777][T17610] bridge0: port 2(bridge_slave_1) entered forwarding state [ 896.363105][T17739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 897.330891][T17961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2506'. [ 898.326166][T17739] veth0_vlan: entered promiscuous mode [ 898.475880][T17739] veth1_vlan: entered promiscuous mode [ 899.529214][T17739] veth0_macvtap: entered promiscuous mode [ 899.692064][T17739] veth1_macvtap: entered promiscuous mode [ 899.918163][T17739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 900.033443][T17739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 900.100341][T17607] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.149209][T17607] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.210054][T17607] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.275902][T17607] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 900.675581][T17608] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.692221][T17608] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 900.837948][T17613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 900.889820][T17613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 901.462047][T18026] nvme_fabrics: unknown parameter or missing value 'û@è' in ctrl creation request [ 903.212062][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2517'. [ 906.216650][T18123] hub 1-0:1.0: USB hub found [ 906.237159][T18123] hub 1-0:1.0: 1 port detected [ 906.537296][T18129] hub 1-0:1.0: USB hub found [ 906.554043][T18129] hub 1-0:1.0: 1 port detected [ 909.602104][T18175] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2534'. [ 909.650627][T18172] nbd: socks must be embedded in a SOCK_ITEM attr [ 909.722941][T18168] bond0: invalid ARP target specified [ 909.747891][T18172] block nbd0: shutting down sockets [ 909.911059][T18183] Line length is too long: Should be less than 4094 [ 910.266968][T18180] Process accounting resumed [ 910.335001][T18173] random: crng reseeded on system resumption [ 910.752194][T18187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2537'. [ 911.327001][T17741] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 911.339753][T17741] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 911.349322][T17741] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 911.369368][T17741] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 911.379771][T17741] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 913.016989][T18224] zswap: compressor not available [ 913.042199][T17613] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.449897][T17613] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.495507][T17741] Bluetooth: hci5: command tx timeout [ 913.721256][T17613] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 913.998220][T17613] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.476234][T18207] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.483976][T18207] bridge0: port 1(bridge_slave_0) entered disabled state [ 914.491386][T18207] bridge_slave_0: entered allmulticast mode [ 914.500068][T18207] bridge_slave_0: entered promiscuous mode [ 914.527349][T18207] bridge0: port 2(bridge_slave_1) entered blocking state [ 914.535522][T18207] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.543442][T18207] bridge_slave_1: entered allmulticast mode [ 914.553383][T18207] bridge_slave_1: entered promiscuous mode [ 914.725106][T17613] vlan1: left allmulticast mode [ 914.739377][T17613] veth0_vlan: left allmulticast mode [ 914.749229][T17613] vlan1: left promiscuous mode [ 914.759453][T17613] bridge0: port 3(vlan1) entered disabled state [ 914.792306][T17613] bridge_slave_1: left allmulticast mode [ 914.802450][T17613] bridge_slave_1: left promiscuous mode [ 914.813055][T17613] bridge0: port 2(bridge_slave_1) entered disabled state [ 914.835424][T17613] bridge_slave_0: left allmulticast mode [ 914.851156][T17613] bridge_slave_0: left promiscuous mode [ 914.867832][T17613] bridge0: port 1(bridge_slave_0) entered disabled state [ 915.403157][T17613] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 915.441988][T17613] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 915.460604][T18250] FAULT_INJECTION: forcing a failure. [ 915.460604][T18250] name failslab, interval 1, probability 0, space 0, times 0 [ 915.492177][T17613] bond0 (unregistering): Released all slaves [ 915.523155][T18250] CPU: 1 UID: 0 PID: 18250 Comm: syz.3.2546 Not tainted syzkaller #0 PREEMPT(full) [ 915.523198][T18250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 915.523219][T18250] Call Trace: [ 915.523231][T18250] [ 915.523243][T18250] dump_stack_lvl+0x100/0x190 [ 915.523282][T18250] should_fail_ex.cold+0x5/0xa [ 915.523324][T18250] should_failslab+0xc2/0x120 [ 915.523363][T18250] __kmalloc_cache_noprof+0x7a/0x6f0 [ 915.523410][T18250] ? alloc_fdtable+0xbd/0x2d0 [ 915.523443][T18250] ? find_held_lock+0x2b/0x80 [ 915.523482][T18250] ? dup_fd+0x924/0xd10 [ 915.523526][T18250] alloc_fdtable+0xbd/0x2d0 [ 915.523564][T18250] dup_fd+0x995/0xd10 [ 915.523614][T18250] __x64_sys_close_range+0x405/0x5d0 [ 915.523660][T18250] ? __pfx___x64_sys_close_range+0x10/0x10 [ 915.523706][T18250] ? rcu_is_watching+0x12/0xc0 [ 915.523757][T18250] do_syscall_64+0x115/0x840 [ 915.523825][T18250] ? clear_bhb_loop+0x40/0x90 [ 915.523868][T18250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 915.523903][T18250] RIP: 0033:0x7f896d99ce59 [ 915.523931][T18250] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 915.523984][T18250] RSP: 002b:00007f896e869028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 915.524018][T18250] RAX: ffffffffffffffda RBX: 00007f896dc15fa0 RCX: 00007f896d99ce59 [ 915.524040][T18250] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 0000000000000002 [ 915.524064][T18250] RBP: 00007f896da32d6f R08: 0000000000000000 R09: 0000000000000000 [ 915.524086][T18250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 915.524106][T18250] R13: 00007f896dc16038 R14: 00007f896dc15fa0 R15: 00007ffdf7c10bb8 [ 915.524148][T18250] [ 915.701150][T17741] Bluetooth: hci5: command tx timeout [ 915.882763][T18207] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 915.931483][T18207] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 916.079918][T17613] Â: left promiscuous mode [ 916.141700][T18207] team0: Port device team_slave_0 added [ 916.149795][T18207] team0: Port device team_slave_1 added [ 916.278609][T18207] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 916.278634][T18207] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.278675][T18207] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 916.284785][T18207] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 916.284807][T18207] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 916.284847][T18207] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 916.562317][T18207] hsr_slave_0: entered promiscuous mode [ 916.688737][T18207] hsr_slave_1: entered promiscuous mode [ 916.721594][T18207] debugfs: 'hsr0' already exists in 'hsr' [ 916.729188][T18207] Cannot create hsr debugfs directory [ 917.549014][T18283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2551'. [ 917.716323][T17741] Bluetooth: hci5: command tx timeout [ 917.755264][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 919.727603][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 919.782214][T17741] Bluetooth: hci5: command tx timeout [ 920.046126][T18317] FAULT_INJECTION: forcing a failure. [ 920.046126][T18317] name failslab, interval 1, probability 0, space 0, times 0 [ 920.070564][T18317] CPU: 1 UID: 0 PID: 18317 Comm: syz.2.2555 Not tainted syzkaller #0 PREEMPT(full) [ 920.070638][T18317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 920.070657][T18317] Call Trace: [ 920.070668][T18317] [ 920.070680][T18317] dump_stack_lvl+0x100/0x190 [ 920.070736][T18317] should_fail_ex.cold+0x5/0xa [ 920.070776][T18317] should_failslab+0xc2/0x120 [ 920.070814][T18317] kmem_cache_alloc_lru_noprof+0x80/0x6e0 [ 920.070865][T18317] ? __d_alloc+0x34/0xa40 [ 920.070917][T18317] __d_alloc+0x34/0xa40 [ 920.070963][T18317] d_alloc+0x4a/0x1e0 [ 920.071008][T18317] lookup_one_qstr_excl+0x171/0x250 [ 920.071061][T18317] start_dirop+0x59/0xb0 [ 920.071098][T18317] simple_start_creating+0xf9/0x110 [ 920.071137][T18317] ? __pfx_simple_start_creating+0x10/0x10 [ 920.071177][T18317] ? mntput+0x70/0xa0 [ 920.071211][T18317] ? simple_pin_fs+0xa3/0x190 [ 920.071245][T18317] debugfs_start_creating.part.0+0x82/0x170 [ 920.071281][T18317] __debugfs_create_file+0xb3/0x4f0 [ 920.071326][T18317] debugfs_create_file_full+0x41/0x60 [ 920.071366][T18317] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 920.071399][T18317] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 920.071428][T18317] ? ida_alloc_range+0x70d/0x830 [ 920.071508][T18317] ? lockdep_init_map_type+0x5c/0x250 [ 920.071566][T18317] preinit_net.part.0+0x252/0x920 [ 920.071605][T18317] copy_net_ns+0x339/0x7c0 [ 920.071647][T18317] create_new_namespaces+0x3ea/0xac0 [ 920.071696][T18317] unshare_nsproxy_namespaces+0xf2/0x220 [ 920.071740][T18317] ksys_unshare+0x438/0xab0 [ 920.071786][T18317] ? __pfx_ksys_unshare+0x10/0x10 [ 920.071830][T18317] ? xfd_validate_state+0x129/0x190 [ 920.071861][T18317] ? ksys_write+0x1ac/0x250 [ 920.071908][T18317] __x64_sys_unshare+0x31/0x40 [ 920.071951][T18317] do_syscall_64+0x115/0x840 [ 920.071994][T18317] ? clear_bhb_loop+0x40/0x90 [ 920.072034][T18317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.072067][T18317] RIP: 0033:0x7f98ae19ce59 [ 920.072093][T18317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 920.072125][T18317] RSP: 002b:00007f98af070028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 920.072157][T18317] RAX: ffffffffffffffda RBX: 00007f98ae415fa0 RCX: 00007f98ae19ce59 [ 920.072178][T18317] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 920.072197][T18317] RBP: 00007f98ae232d6f R08: 0000000000000000 R09: 0000000000000000 [ 920.072216][T18317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 920.072235][T18317] R13: 00007f98ae416038 R14: 00007f98ae415fa0 R15: 00007ffc33e581b8 [ 920.072276][T18317] [ 921.870921][T18352] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 922.625189][T18207] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 922.682940][T18207] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 922.849846][T18207] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 922.873416][T18207] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 922.998633][T18207] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 923.049989][T18207] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 923.090799][T18207] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 923.146027][T18207] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 923.579021][T18389] bond0: invalid ARP target specified [ 923.890789][T18393] nbd: socks must be embedded in a SOCK_ITEM attr [ 923.918428][T18394] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2566'. [ 923.934774][T18393] block nbd0: shutting down sockets [ 924.104514][T18392] bond0: invalid ARP target specified [ 924.576721][T18399] bond0: invalid ARP target specified [ 924.696432][T18399] nbd: socks must be embedded in a SOCK_ITEM attr [ 924.725389][T18402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2568'. [ 924.743156][T18207] 8021q: adding VLAN 0 to HW filter on device bond0 [ 924.746297][T18399] block nbd0: shutting down sockets [ 924.789696][T18207] 8021q: adding VLAN 0 to HW filter on device team0 [ 924.840720][T17612] bridge0: port 1(bridge_slave_0) entered blocking state [ 924.847897][T17612] bridge0: port 1(bridge_slave_0) entered forwarding state [ 924.977991][T17612] bridge0: port 2(bridge_slave_1) entered blocking state [ 924.985227][T17612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 926.824156][T17613] hsr_slave_0: left promiscuous mode [ 926.851207][T17613] hsr_slave_1: left promiscuous mode [ 926.871996][T17613] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 926.896389][T17613] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 926.916152][T17613] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 926.931931][T17613] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 926.998733][T17613] veth1_macvtap: left promiscuous mode [ 927.018696][T17613] veth0_macvtap: left promiscuous mode [ 927.047791][T17613] veth1_vlan: left promiscuous mode [ 927.065052][T17613] veth0_vlan: left promiscuous mode [ 927.892158][T17613] team0 (unregistering): Port device team_slave_1 removed [ 927.963610][T17613] team0 (unregistering): Port device team_slave_0 removed [ 928.229942][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 928.239357][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 929.847386][T18207] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 930.384074][T18470] EXT4-fs (sda1): Delayed block allocation failed for inode 2031 at logical offset 3 with max blocks 1 with error 117 [ 930.539716][T18470] EXT4-fs (sda1): This should not happen!! Data will be lost [ 930.539716][T18470] [ 931.242148][T18207] veth0_vlan: entered promiscuous mode [ 931.478657][T18207] veth1_vlan: entered promiscuous mode [ 931.619671][T18207] veth0_macvtap: entered promiscuous mode [ 931.643412][T18207] veth1_macvtap: entered promiscuous mode [ 931.698326][T18207] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 931.762259][T18207] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 931.882566][T17612] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.909975][T17612] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 931.935424][T17612] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.021239][T17612] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 933.738085][T17639] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.762908][T17639] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 933.942882][T17612] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 933.985224][T17612] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 934.952853][T18518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2541'. [ 935.141628][T18516] bond0: invalid ARP target specified [ 935.217484][T18517] nbd: socks must be embedded in a SOCK_ITEM attr [ 935.386049][T18517] block nbd0: shutting down sockets [ 935.667369][T17639] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 935.735086][ T6752] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 935.753938][ T6752] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 935.763917][ T6752] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 935.791085][ T6752] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 935.801855][ T6752] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 936.083684][T17639] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.136394][T18527] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 936.238456][T17639] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.433861][T17639] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.848554][ T6752] Bluetooth: hci1: command tx timeout [ 938.497526][T17639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 938.554395][T17639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 938.586204][T17639] bond0 (unregistering): Released all slaves [ 939.008329][T18580] nbd: must specify an index to disconnect [ 939.135551][ T5296] 8021q: adding VLAN 0 to HW filter on device eth1 [ 939.251192][T17517] Process accounting paused [ 939.597178][T17639] hsr_slave_0: left promiscuous mode [ 939.644864][T17639] hsr_slave_1: left promiscuous mode [ 939.694113][T17639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 939.736812][T17639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 939.775263][T17639] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 939.802574][T17639] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 939.888049][T17639] veth1_macvtap: left promiscuous mode [ 939.893885][T17639] veth0_macvtap: left promiscuous mode [ 939.917050][T17639] veth1_vlan: left promiscuous mode [ 939.934055][ T6752] Bluetooth: hci1: command tx timeout [ 939.957609][T17639] veth0_vlan: left promiscuous mode [ 940.525454][T17639] team0 (unregistering): Port device team_slave_1 removed [ 940.556842][T17639] team0 (unregistering): Port device team_slave_0 removed [ 940.748975][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 941.196752][T18614] FAULT_INJECTION: forcing a failure. [ 941.196752][T18614] name failslab, interval 1, probability 0, space 0, times 0 [ 941.278799][T18614] CPU: 1 UID: 0 PID: 18614 Comm: syz.3.2601 Not tainted syzkaller #0 PREEMPT(full) [ 941.278843][T18614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 941.278863][T18614] Call Trace: [ 941.278874][T18614] [ 941.278887][T18614] dump_stack_lvl+0x100/0x190 [ 941.278930][T18614] should_fail_ex.cold+0x5/0xa [ 941.278984][T18614] should_failslab+0xc2/0x120 [ 941.279030][T18614] __kmalloc_node_noprof+0xe6/0x850 [ 941.279112][T18614] ? mempool_init_node+0x11b/0x6e0 [ 941.279151][T18614] ? lockdep_init_map_type+0x5c/0x250 [ 941.279211][T18614] ? __pfx_mempool_free_slab+0x10/0x10 [ 941.279248][T18614] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 941.279287][T18614] mempool_init_node+0x11b/0x6e0 [ 941.279323][T18614] ? __pfx_xa_load+0x10/0x10 [ 941.279382][T18614] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 941.279418][T18614] ? __pfx_mempool_free_slab+0x10/0x10 [ 941.279460][T18614] mempool_init_noprof+0x3a/0x50 [ 941.279501][T18614] bioset_init+0x37e/0x8a0 [ 941.279545][T18614] ? __pfx_bioset_init+0x10/0x10 [ 941.279602][T18614] __alloc_disk_node+0x83/0x6b0 [ 941.279729][T18614] __blk_alloc_disk+0xd2/0x170 [ 941.279768][T18614] ? __pfx___blk_alloc_disk+0x10/0x10 [ 941.279832][T18614] ? __pfx_idr_alloc+0x10/0x10 [ 941.279877][T18614] ? lockdep_init_map_type+0x5c/0x250 [ 941.279932][T18614] ? __raw_spin_lock_init+0x3a/0x110 [ 941.279974][T18614] ? __pfx_hot_add_show+0x10/0x10 [ 941.280093][T18614] zram_add+0x1bf/0x5d0 [ 941.280137][T18614] ? __pfx_zram_add+0x10/0x10 [ 941.280207][T18614] ? find_held_lock+0x2b/0x80 [ 941.280257][T18614] ? sysfs_file_kobj+0xe4/0x290 [ 941.280313][T18614] ? __pfx_hot_add_show+0x10/0x10 [ 941.280354][T18614] hot_add_show+0x21/0x80 [ 941.280395][T18614] class_attr_show+0x72/0xa0 [ 941.280483][T18614] ? __pfx_class_attr_show+0x10/0x10 [ 941.280514][T18614] sysfs_kf_seq_show+0x217/0x3a0 [ 941.280552][T18614] seq_read_iter+0x32f/0x1270 [ 941.280585][T18614] ? lock_acquire+0x1b1/0x370 [ 941.280648][T18614] kernfs_fop_read_iter+0x46c/0x610 [ 941.280696][T18614] ? rw_verify_area+0xce/0x6d0 [ 941.280728][T18614] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 941.280776][T18614] vfs_read+0x825/0xb30 [ 941.280817][T18614] ? __pfx_vfs_read+0x10/0x10 [ 941.280876][T18614] ksys_read+0x12a/0x250 [ 941.280912][T18614] ? __pfx_ksys_read+0x10/0x10 [ 941.280952][T18614] ? rcu_is_watching+0x12/0xc0 [ 941.280993][T18614] do_syscall_64+0x115/0x840 [ 941.281036][T18614] ? clear_bhb_loop+0x40/0x90 [ 941.281076][T18614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.281117][T18614] RIP: 0033:0x7f896d99ce59 [ 941.281144][T18614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.281175][T18614] RSP: 002b:00007f896e848028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 941.281203][T18614] RAX: ffffffffffffffda RBX: 00007f896dc16090 RCX: 00007f896d99ce59 [ 941.281225][T18614] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 941.281245][T18614] RBP: 00007f896da32d6f R08: 0000000000000000 R09: 0000000000000000 [ 941.281264][T18614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.281283][T18614] R13: 00007f896dc16128 R14: 00007f896dc16090 R15: 00007ffdf7c10bb8 [ 941.281324][T18614] [ 941.970690][T18614] zram: Error allocating disk structure for device 1 [ 941.989053][ T6752] Bluetooth: hci1: command tx timeout [ 942.178674][T18522] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.203278][T18522] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.229712][T18522] bridge_slave_0: entered allmulticast mode [ 942.256715][T18522] bridge_slave_0: entered promiscuous mode [ 942.385859][T18522] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.411565][T18522] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.433604][T18522] bridge_slave_1: entered allmulticast mode [ 942.482753][T18522] bridge_slave_1: entered promiscuous mode [ 942.689242][T18643] FAULT_INJECTION: forcing a failure. [ 942.689242][T18643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 942.739909][T18643] CPU: 1 UID: 0 PID: 18643 Comm: syz.4.2604 Not tainted syzkaller #0 PREEMPT(full) [ 942.739948][T18643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 942.739966][T18643] Call Trace: [ 942.739976][T18643] [ 942.739987][T18643] dump_stack_lvl+0x100/0x190 [ 942.740023][T18643] should_fail_ex.cold+0x5/0xa [ 942.740060][T18643] _copy_from_iter+0x1f4/0x1690 [ 942.740106][T18643] ? __asan_memset+0x23/0x50 [ 942.740152][T18643] ? __pfx__copy_from_iter+0x10/0x10 [ 942.740192][T18643] ? __pfx___alloc_skb+0x10/0x10 [ 942.740245][T18643] netlink_sendmsg+0x808/0xda0 [ 942.740289][T18643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.740323][T18643] ? __import_iovec+0x1d2/0x640 [ 942.740365][T18643] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 942.740400][T18643] ____sys_sendmsg+0x9e1/0xb70 [ 942.740435][T18643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 942.740473][T18643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 942.740523][T18643] ___sys_sendmsg+0x190/0x1e0 [ 942.740561][T18643] ? __pfx____sys_sendmsg+0x10/0x10 [ 942.740638][T18643] __sys_sendmsg+0x170/0x220 [ 942.740667][T18643] ? __pfx___sys_sendmsg+0x10/0x10 [ 942.740709][T18643] ? rcu_is_watching+0x12/0xc0 [ 942.740756][T18643] do_syscall_64+0x115/0x840 [ 942.740794][T18643] ? clear_bhb_loop+0x40/0x90 [ 942.740827][T18643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 942.740855][T18643] RIP: 0033:0x7fa28359ce59 [ 942.740877][T18643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 942.740904][T18643] RSP: 002b:00007fa284514028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 942.740932][T18643] RAX: ffffffffffffffda RBX: 00007fa283815fa0 RCX: 00007fa28359ce59 [ 942.740951][T18643] RDX: 0000000000000080 RSI: 0000200000001780 RDI: 0000000000000003 [ 942.740967][T18643] RBP: 00007fa284514090 R08: 0000000000000000 R09: 0000000000000000 [ 942.740983][T18643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 942.740998][T18643] R13: 00007fa283816038 R14: 00007fa283815fa0 R15: 00007ffd060a4a68 [ 942.741033][T18643] [ 943.076615][T17639] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.366181][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 943.470413][T18522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.484867][T18522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.583584][T18648] random: crng reseeded on system resumption [ 943.609153][T17639] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.858526][T17639] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.905081][T18522] team0: Port device team_slave_0 added [ 943.925231][T18522] team0: Port device team_slave_1 added [ 944.046230][T18522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.055849][ T6752] Bluetooth: hci1: command tx timeout [ 944.063490][T18522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.124532][T18522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.213678][T18522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.264781][T18522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 944.388609][T18522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.189594][T18522] hsr_slave_0: entered promiscuous mode [ 945.216884][T18522] hsr_slave_1: entered promiscuous mode [ 945.240720][T18522] debugfs: 'hsr0' already exists in 'hsr' [ 945.265680][T18522] Cannot create hsr debugfs directory [ 945.958326][ T5296] 8021q: adding VLAN 0 to HW filter on device eth4 [ 946.244660][T18688] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 946.281817][T18688] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 946.315732][T18688] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 946.369883][T18688] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 946.432519][T18688] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 946.457285][T17639] team0: left allmulticast mode [ 946.469018][T18688] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 946.479024][T17639] team_slave_0: left allmulticast mode [ 946.496026][T17639] team_slave_1: left allmulticast mode [ 946.507376][T18688] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 946.521712][T17639] team0: left promiscuous mode [ 946.534978][T18688] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 946.544642][T17639] team_slave_0: left promiscuous mode [ 946.544765][T18688] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 946.569395][T17639] team_slave_1: left promiscuous mode [ 946.575922][T17639] bridge0: port 3(team0) entered disabled state [ 946.610485][T18688] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 946.643864][T17639] bridge_slave_1: left allmulticast mode [ 946.671211][T17639] bridge_slave_1: left promiscuous mode [ 946.688381][T17639] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.747540][T17639] bridge_slave_0: left allmulticast mode [ 946.769463][T17639] bridge_slave_0: left promiscuous mode [ 946.794107][T17639] bridge0: port 1(bridge_slave_0) entered disabled state [ 947.153936][T17639] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 947.167346][T17639] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 947.183610][T17639] bond0 (unregistering): Released all slaves [ 948.275921][ T6752] Bluetooth: hci2: command 0x0c1a tx timeout [ 948.282941][T17741] Bluetooth: hci3: command 0x0c1a tx timeout [ 948.401391][ T5296] 8021q: adding VLAN 0 to HW filter on device eth5 [ 948.436783][ T6752] Bluetooth: hci5: command 0x0c1a tx timeout [ 948.478659][T18713] bond0: invalid ARP target specified [ 948.593595][ T6752] Bluetooth: hci1: command 0x0c1a tx timeout [ 948.642607][T18719] nbd: socks must be embedded in a SOCK_ITEM attr [ 948.667487][T18719] block nbd0: shutting down sockets [ 948.712287][T18721] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2613'. [ 949.486279][T18742] bond0: invalid ARP target specified [ 949.540461][T18742] nbd: socks must be embedded in a SOCK_ITEM attr [ 949.549105][T18742] block nbd0: shutting down sockets [ 949.587041][T18742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2616'. [ 950.082207][ T5296] 8021q: adding VLAN 0 to HW filter on device eth6 [ 950.302368][T17639] hsr_slave_0: left promiscuous mode [ 950.308763][T17639] hsr_slave_1: left promiscuous mode [ 950.315501][T17639] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 950.326125][T17639] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 950.339765][T17639] veth1_macvtap: left promiscuous mode [ 950.345926][ T6752] Bluetooth: hci2: command 0x0c1a tx timeout [ 950.352666][T17639] veth0_macvtap: left promiscuous mode [ 950.358442][T17639] veth1_vlan: left promiscuous mode [ 950.366817][T17639] veth0_vlan: left promiscuous mode [ 950.514886][ T6752] Bluetooth: hci5: command 0x0c1a tx timeout [ 950.666170][ T6752] Bluetooth: hci1: command 0x0c1a tx timeout [ 950.734483][T17639] team0 (unregistering): Port device team_slave_1 removed [ 950.764203][T17639] team0 (unregistering): Port device team_slave_0 removed [ 950.944910][ T5296] 8021q: adding VLAN 0 to HW filter on device eth7 [ 951.859895][ T5296] 8021q: adding VLAN 0 to HW filter on device eth8 [ 952.415476][ T6752] Bluetooth: hci2: command 0x0c1a tx timeout [ 952.571701][ T6752] Bluetooth: hci5: command 0x0c1a tx timeout [ 952.587461][T18816] bond0: invalid ARP target specified [ 952.624658][T18816] nbd: socks must be embedded in a SOCK_ITEM attr [ 952.633446][T18816] block nbd0: shutting down sockets [ 952.654568][T18816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2619'. [ 952.731070][ T6752] Bluetooth: hci1: command 0x0c1a tx timeout [ 963.877946][T17741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 963.891577][T17741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 963.902182][T17741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 963.910431][T17741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 963.919334][T17741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 964.437410][T17741] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 964.458533][T17741] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 964.469102][T17741] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 964.479087][T17741] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 964.488447][T17741] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 964.681900][T18907] bridge0: port 1(bridge_slave_0) entered blocking state [ 964.689206][T18907] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.696436][T18907] bridge_slave_0: entered allmulticast mode [ 964.704808][T18907] bridge_slave_0: entered promiscuous mode [ 964.713752][T18907] bridge0: port 2(bridge_slave_1) entered blocking state [ 964.721356][T18907] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.728974][T18907] bridge_slave_1: entered allmulticast mode [ 964.736855][T18907] bridge_slave_1: entered promiscuous mode [ 964.779224][T18907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.791986][T18907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.834395][T18907] team0: Port device team_slave_0 added [ 964.843889][T18907] team0: Port device team_slave_1 added [ 964.882333][T18907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 964.889450][T18907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.915844][T18907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 964.930460][T18907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 964.937505][T18907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 964.965741][T18907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.031966][T18907] hsr_slave_0: entered promiscuous mode [ 965.038835][T18907] hsr_slave_1: entered promiscuous mode [ 965.584957][T18922] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.592270][T18922] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.603359][T18922] bridge_slave_0: entered allmulticast mode [ 965.611437][T18922] bridge_slave_0: entered promiscuous mode [ 965.622295][T18922] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.631889][T18922] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.639915][T18922] bridge_slave_1: entered allmulticast mode [ 965.648171][T18922] bridge_slave_1: entered promiscuous mode [ 965.691500][T18922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.709014][T18922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 965.748242][T18922] team0: Port device team_slave_0 added [ 965.757541][T18922] team0: Port device team_slave_1 added [ 965.793152][T18922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 965.800249][T18922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.826629][T18922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 965.839917][T18922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 965.847182][T18922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 965.873801][T18922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 965.940223][T18922] hsr_slave_0: entered promiscuous mode [ 965.942688][T17741] Bluetooth: hci0: command tx timeout [ 965.946870][T18922] hsr_slave_1: entered promiscuous mode [ 965.947516][T18922] debugfs: 'hsr0' already exists in 'hsr' [ 965.947541][T18922] Cannot create hsr debugfs directory [ 966.579303][T17741] Bluetooth: hci4: command tx timeout [ 967.876393][ T6752] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 967.895148][ T6752] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 967.903584][ T6752] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 967.912607][ T6752] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 967.920603][ T6752] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 968.011185][ T6752] Bluetooth: hci0: command tx timeout [ 968.457568][T19000] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.465085][T19000] bridge0: port 1(bridge_slave_0) entered disabled state [ 968.472766][T19000] bridge_slave_0: entered allmulticast mode [ 968.480323][T19000] bridge_slave_0: entered promiscuous mode [ 968.489324][T19000] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.496560][T19000] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.503878][T19000] bridge_slave_1: entered allmulticast mode [ 968.511420][T19000] bridge_slave_1: entered promiscuous mode [ 968.541250][T19000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.554327][T19000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 968.589316][T19000] team0: Port device team_slave_0 added [ 968.598382][T19000] team0: Port device team_slave_1 added [ 968.626520][T19000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 968.633551][T19000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.648109][ T6752] Bluetooth: hci4: command tx timeout [ 968.659550][T19000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 968.663425][T19000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 968.683788][T19000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 968.709864][T19000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 968.763630][T19000] hsr_slave_0: entered promiscuous mode [ 968.770412][T19000] hsr_slave_1: entered promiscuous mode [ 968.776512][T19000] debugfs: 'hsr0' already exists in 'hsr' [ 968.782337][T19000] Cannot create hsr debugfs directory [ 970.000999][ T6752] Bluetooth: hci6: command tx timeout [ 970.081204][ T6752] Bluetooth: hci0: command tx timeout [ 970.717277][ T6752] Bluetooth: hci4: command tx timeout [ 972.071121][ T6752] Bluetooth: hci6: command tx timeout [ 972.150420][ T6752] Bluetooth: hci0: command tx timeout [ 972.786757][ T6752] Bluetooth: hci4: command tx timeout [ 974.139450][ T6752] Bluetooth: hci6: command tx timeout [ 976.208664][ T6752] Bluetooth: hci6: command tx timeout [ 989.341782][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 989.348139][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 995.408311][T17741] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 995.425519][T17741] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 995.433520][T17741] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 995.447034][T17741] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 995.455576][T17741] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 995.991797][T19018] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.999003][T19018] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.006365][T19018] bridge_slave_0: entered allmulticast mode [ 996.014025][T19018] bridge_slave_0: entered promiscuous mode [ 996.022333][T19018] bridge0: port 2(bridge_slave_1) entered blocking state [ 996.035561][T19018] bridge0: port 2(bridge_slave_1) entered disabled state [ 996.042759][T19018] bridge_slave_1: entered allmulticast mode [ 996.050639][T19018] bridge_slave_1: entered promiscuous mode [ 996.085882][T19018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 996.101399][T19018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 996.133178][T19018] team0: Port device team_slave_0 added [ 996.141315][T19018] team0: Port device team_slave_1 added [ 996.168676][T19018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.175758][T19018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.202070][T19018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.215566][T19018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.222567][T19018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.248671][T19018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.299312][T19018] hsr_slave_0: entered promiscuous mode [ 996.306638][T19018] hsr_slave_1: entered promiscuous mode [ 996.312755][T19018] debugfs: 'hsr0' already exists in 'hsr' [ 996.318584][T19018] Cannot create hsr debugfs directory [ 997.537696][ T6752] Bluetooth: hci7: command tx timeout [ 999.606912][ T6752] Bluetooth: hci7: command tx timeout [ 1001.676229][ T6752] Bluetooth: hci7: command tx timeout [ 1003.745339][ T6752] Bluetooth: hci7: command tx timeout [ 1024.501290][T12671] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1024.522789][T19045] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1024.550990][T12671] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1024.560705][T19045] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1024.570582][T12671] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1024.580055][T19045] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1024.589542][T19045] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1024.597851][T12671] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1024.607901][T12671] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1024.615262][T19045] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1025.665960][T19041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.673470][T19041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.680844][T19041] bridge_slave_0: entered allmulticast mode [ 1025.688556][T19041] bridge_slave_0: entered promiscuous mode [ 1025.704072][T19041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.711357][T19041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.718563][T19041] bridge_slave_1: entered allmulticast mode [ 1025.726113][T19041] bridge_slave_1: entered promiscuous mode [ 1025.774792][T19042] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.782328][T19042] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.789516][T19042] bridge_slave_0: entered allmulticast mode [ 1025.797542][T19042] bridge_slave_0: entered promiscuous mode [ 1025.813072][T19041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.823133][T19042] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.830468][T19042] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.837838][T19042] bridge_slave_1: entered allmulticast mode [ 1025.846092][T19042] bridge_slave_1: entered promiscuous mode [ 1025.855530][T19041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.913783][T19042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.925125][T19041] team0: Port device team_slave_0 added [ 1025.933980][T19042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.945107][T19041] team0: Port device team_slave_1 added [ 1025.996638][T19041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.003944][T19041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.030293][T19041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.045303][T19042] team0: Port device team_slave_0 added [ 1026.051851][T19041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.058832][T19041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.085056][T19041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.098077][T19042] team0: Port device team_slave_1 added [ 1026.135422][T19042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.142442][T19042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.168488][T19042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.181185][T19042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.188142][T19042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.214114][T19042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.262206][T19041] hsr_slave_0: entered promiscuous mode [ 1026.269016][T19041] hsr_slave_1: entered promiscuous mode [ 1026.275288][T19041] debugfs: 'hsr0' already exists in 'hsr' [ 1026.281307][T19041] Cannot create hsr debugfs directory [ 1026.318888][T19042] hsr_slave_0: entered promiscuous mode [ 1026.325358][T19042] hsr_slave_1: entered promiscuous mode [ 1026.331981][T19042] debugfs: 'hsr0' already exists in 'hsr' [ 1026.337802][T19042] Cannot create hsr debugfs directory [ 1026.745774][ T6752] Bluetooth: hci9: command tx timeout [ 1026.753305][T19045] Bluetooth: hci8: command tx timeout [ 1028.438374][ T6752] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1028.454395][ T6752] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1028.463642][ T6752] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1028.471772][ T6752] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1028.479622][ T6752] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1028.815188][T19045] Bluetooth: hci9: command tx timeout [ 1028.820746][ T6752] Bluetooth: hci8: command tx timeout [ 1029.002817][T19080] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.010145][T19080] bridge0: port 1(bridge_slave_0) entered disabled state [ 1029.017566][T19080] bridge_slave_0: entered allmulticast mode [ 1029.025106][T19080] bridge_slave_0: entered promiscuous mode [ 1029.033246][T19080] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.040619][T19080] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.047994][T19080] bridge_slave_1: entered allmulticast mode [ 1029.055820][T19080] bridge_slave_1: entered promiscuous mode [ 1029.088709][T19080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1029.101042][T19080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1029.132616][T19080] team0: Port device team_slave_0 added [ 1029.141691][T19080] team0: Port device team_slave_1 added [ 1029.172146][T19080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1029.179153][T19080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.205227][T19080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1029.220654][T19080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1029.228117][T19080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1029.256154][T19080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.310233][T19080] hsr_slave_0: entered promiscuous mode [ 1029.316764][T19080] hsr_slave_1: entered promiscuous mode [ 1029.323750][T19080] debugfs: 'hsr0' already exists in 'hsr' [ 1029.329551][T19080] Cannot create hsr debugfs directory [ 1030.565948][ T6752] Bluetooth: hci10: command tx timeout [ 1030.884395][T19045] Bluetooth: hci9: command tx timeout [ 1030.889858][ T6752] Bluetooth: hci8: command tx timeout [ 1032.635228][ T6752] Bluetooth: hci10: command tx timeout [ 1032.953464][T19045] Bluetooth: hci9: command tx timeout [ 1032.958895][ T6752] Bluetooth: hci8: command tx timeout [ 1034.705072][ T6752] Bluetooth: hci10: command tx timeout [ 1036.773640][ T6752] Bluetooth: hci10: command tx timeout [ 1050.463955][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1050.470353][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.506306][T19045] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1055.523775][T19045] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1055.534753][T19045] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1055.542921][T19045] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1055.554610][T19045] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1056.109566][T19099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.117064][T19099] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.125170][T19099] bridge_slave_0: entered allmulticast mode [ 1056.132539][T19099] bridge_slave_0: entered promiscuous mode [ 1056.142701][T19099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.149901][T19099] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.161297][T19099] bridge_slave_1: entered allmulticast mode [ 1056.168702][T19099] bridge_slave_1: entered promiscuous mode [ 1056.208806][T19099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.221507][T19099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.258105][T19099] team0: Port device team_slave_0 added [ 1056.266644][T19099] team0: Port device team_slave_1 added [ 1056.296172][T19099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1056.303329][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.329663][T19099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1056.342285][T19099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1056.349273][T19099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1056.375583][T19099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.421027][T19099] hsr_slave_0: entered promiscuous mode [ 1056.427992][T19099] hsr_slave_1: entered promiscuous mode [ 1056.434389][T19099] debugfs: 'hsr0' already exists in 'hsr' [ 1056.440159][T19099] Cannot create hsr debugfs directory [ 1057.625376][T19045] Bluetooth: hci11: command tx timeout [ 1059.694348][T19045] Bluetooth: hci11: command tx timeout [ 1061.763885][T19045] Bluetooth: hci11: command tx timeout [ 1063.833044][ T6752] Bluetooth: hci11: command tx timeout [ 1084.586055][ T6752] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1084.597567][ T6752] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1084.610649][ T6752] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1084.623716][ T6752] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1084.635345][T17741] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1084.643573][T12671] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1084.679335][T12671] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1084.695630][T12671] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1084.711026][T12671] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1084.723604][T12671] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1085.710887][T19120] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.718235][T19120] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.726245][T19120] bridge_slave_0: entered allmulticast mode [ 1085.734934][T19120] bridge_slave_0: entered promiscuous mode [ 1085.749392][T19120] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.756638][T19120] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.764121][T19120] bridge_slave_1: entered allmulticast mode [ 1085.771668][T19120] bridge_slave_1: entered promiscuous mode [ 1085.841180][T19120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.851025][T19123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1085.858448][T19123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.865675][T19123] bridge_slave_0: entered allmulticast mode [ 1085.873277][T19123] bridge_slave_0: entered promiscuous mode [ 1085.883992][T19120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1085.893845][T19123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.901076][T19123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.908369][T19123] bridge_slave_1: entered allmulticast mode [ 1085.916242][T19123] bridge_slave_1: entered promiscuous mode [ 1085.968848][T19120] team0: Port device team_slave_0 added [ 1085.977799][T19123] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1085.989355][T19120] team0: Port device team_slave_1 added [ 1085.997274][T19123] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1086.055117][T19120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.062286][T19120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.088730][T19120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.102461][T19123] team0: Port device team_slave_0 added [ 1086.111092][T19120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.124909][T19120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.155669][T19120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.171436][T19123] team0: Port device team_slave_1 added [ 1086.209948][T19123] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1086.217043][T19123] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.244091][T19123] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1086.270621][T19123] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1086.277747][T19123] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.303726][T19123] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1086.338594][T19120] hsr_slave_0: entered promiscuous mode [ 1086.345040][T19120] hsr_slave_1: entered promiscuous mode [ 1086.351964][T19120] debugfs: 'hsr0' already exists in 'hsr' [ 1086.358324][T19120] Cannot create hsr debugfs directory [ 1086.428818][T19123] hsr_slave_0: entered promiscuous mode [ 1086.435419][T19123] hsr_slave_1: entered promiscuous mode [ 1086.441691][T19123] debugfs: 'hsr0' already exists in 'hsr' [ 1086.447702][T19123] Cannot create hsr debugfs directory [ 1086.754125][T17741] Bluetooth: hci12: command tx timeout [ 1086.761704][T12671] Bluetooth: hci13: command tx timeout [ 1088.191271][T17741] Bluetooth: hci0: command 0x0406 tx timeout [ 1088.197415][T12671] Bluetooth: hci4: command 0x0406 tx timeout [ 1088.503005][ T6752] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1088.522416][ T6752] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1088.531230][ T6752] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1088.539337][ T6752] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1088.548210][ T6752] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1088.823446][T19045] Bluetooth: hci12: command tx timeout [ 1088.829047][ T6752] Bluetooth: hci13: command tx timeout [ 1089.092168][T19158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.099368][T19158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.106690][T19158] bridge_slave_0: entered allmulticast mode [ 1089.114049][T19158] bridge_slave_0: entered promiscuous mode [ 1089.122705][T19158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1089.129893][T19158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.137343][T19158] bridge_slave_1: entered allmulticast mode [ 1089.145352][T19158] bridge_slave_1: entered promiscuous mode [ 1089.179219][T19158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1089.191801][T19158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1089.223285][T19158] team0: Port device team_slave_0 added [ 1089.232647][T19158] team0: Port device team_slave_1 added [ 1089.259708][T19158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1089.266750][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.292753][T19158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1089.305940][T19158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1089.313173][T19158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1089.339426][T19158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1089.386688][T19158] hsr_slave_0: entered promiscuous mode [ 1089.393281][T19158] hsr_slave_1: entered promiscuous mode [ 1089.399454][T19158] debugfs: 'hsr0' already exists in 'hsr' [ 1089.405272][T19158] Cannot create hsr debugfs directory [ 1090.574160][ T6752] Bluetooth: hci14: command tx timeout [ 1090.892435][T19045] Bluetooth: hci12: command tx timeout [ 1090.898584][ T6752] Bluetooth: hci13: command tx timeout [ 1092.643066][ T6752] Bluetooth: hci14: command tx timeout [ 1092.961300][T12671] Bluetooth: hci12: command tx timeout [ 1092.966851][ T6752] Bluetooth: hci13: command tx timeout [ 1093.279834][ T6752] Bluetooth: hci6: command 0x0406 tx timeout [ 1094.712296][T19045] Bluetooth: hci14: command tx timeout [ 1096.781432][T19045] Bluetooth: hci14: command tx timeout [ 1101.397503][ T30] INFO: task syz-executor:18522 blocked for more than 143 seconds. [ 1101.405632][ T30] Not tainted syzkaller #0 [ 1101.412233][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1101.421180][ T30] task:syz-executor state:D stack:24552 pid:18522 tgid:18522 ppid:1 task_flags:0x480140 flags:0x00080002 [ 1101.433215][ T30] Call Trace: [ 1101.436512][ T30] [ 1101.439585][ T30] __schedule+0x1295/0x67a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1101.444179][ T30] ? __pfx___schedule+0x10/0x10 [ 1101.449112][ T30] ? find_held_lock+0x2b/0x80 [ 1101.453890][ T30] ? schedule+0x2bf/0x390 [ 1101.458400][ T30] schedule+0xdd/0x390 [ 1101.462544][ T30] schedule_timeout+0x1b2/0x280 [ 1101.467514][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1101.472948][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1101.478533][ T30] __wait_for_common+0x2e7/0x4c0 [ 1101.483560][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1101.489069][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1101.494608][ T30] remove_one+0x312/0x420 [ 1101.499099][ T30] ? find_next_child+0x18f/0x280 [ 1101.504131][ T30] __simple_recursive_removal+0x148/0x5c0 [ 1101.510196][ T30] ? __pfx_remove_one+0x10/0x10 [ 1101.515175][ T30] debugfs_remove+0x5d/0x80 [ 1101.520197][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 1101.525401][ T30] nsim_dev_reload_destroy+0x144/0x4a0 [ 1101.531364][ T30] nsim_drv_remove+0x52/0x1e0 [ 1101.536125][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1101.541783][ T30] device_remove+0xcb/0x180 [ 1101.546752][ T30] device_release_driver_internal+0x44e/0x620 [ 1101.552935][ T30] bus_remove_device+0x2bc/0x560 [ 1101.558384][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 1101.563959][ T30] ? __pfx_device_remove_attrs+0x10/0x10 [ 1101.570081][ T30] device_del+0x376/0x9b0 [ 1101.574514][ T30] ? __pfx_device_del+0x10/0x10 [ 1101.579869][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1101.584918][ T30] device_unregister+0x1d/0xe0 [ 1101.590141][ T30] del_device_store+0x346/0x480 [ 1101.595132][ T30] ? __pfx_del_device_store+0x10/0x10 [ 1101.601289][ T30] ? find_held_lock+0x2b/0x80 [ 1101.606048][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 1101.611352][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 1101.616571][ T30] ? __pfx_del_device_store+0x10/0x10 [ 1101.622027][ T30] bus_attr_store+0x74/0xb0 [ 1101.626949][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 1101.632222][ T30] sysfs_kf_write+0xf2/0x150 [ 1101.637276][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1101.642689][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1101.648443][ T30] vfs_write+0x6ac/0x1070 [ 1101.652871][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1101.659099][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1101.682346][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1101.688132][ T30] ksys_write+0x12a/0x250 [ 1101.692737][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1101.704871][ T30] ? rcu_is_watching+0x12/0xc0 [ 1101.715110][ T30] do_syscall_64+0x115/0x840 [ 1101.733145][ T30] ? clear_bhb_loop+0x40/0x90 [ 1101.747241][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1101.758655][ T30] RIP: 0033:0x7f4a4b75d68e [ 1101.763147][ T30] RSP: 002b:00007ffe1671baf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1101.772750][ T30] RAX: ffffffffffffffda RBX: 000055558a8c2500 RCX: 00007f4a4b75d68e [ 1101.781039][ T30] RDX: 0000000000000001 RSI: 00007ffe1671bb80 RDI: 0000000000000005 [ 1101.791281][ T30] RBP: 00007f4a4b8335f2 R08: 0000000000000000 R09: 0000000000000000 [ 1101.799469][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1101.807563][ T30] R13: 00007ffe1671bb80 R14: 00007f4a4c544620 R15: 0000000000000003 [ 1101.815745][ T30] [ 1101.818838][ T30] INFO: task syz.3.2613:18713 blocked for more than 143 seconds. [ 1101.826656][ T30] Not tainted syzkaller #0 [ 1101.831612][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1101.840367][ T30] task:syz.3.2613 state:D stack:26952 pid:18713 tgid:18711 ppid:17089 task_flags:0x400140 flags:0x00080002 [ 1101.852430][ T30] Call Trace: [ 1101.855830][ T30] [ 1101.858828][ T30] __schedule+0x1295/0x67a0 [ 1101.863377][ T30] ? __pfx___schedule+0x10/0x10 [ 1101.868332][ T30] ? find_held_lock+0x2b/0x80 [ 1101.873055][ T30] ? schedule+0x2bf/0x390 [ 1101.877516][ T30] schedule+0xdd/0x390 [ 1101.881649][ T30] schedule_preempt_disabled+0x13/0x30 [ 1101.887205][ T30] __mutex_lock+0xced/0x1b10 [ 1101.891845][ T30] ? devlink_health_report+0x66c/0xb20 [ 1101.897489][ T30] ? __pfx_devlink_nl_notify_filter+0x10/0x10 [ 1101.903713][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1101.908877][ T30] ? devlink_recover_notify.constprop.0+0x443/0x550 [ 1101.915580][ T30] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 1101.922260][ T30] ? devlink_health_report+0x66c/0xb20 [ 1101.927830][ T30] devlink_health_report+0x66c/0xb20 [ 1101.933161][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 1101.939059][ T30] ? _copy_from_user+0x59/0xd0 [ 1101.943908][ T30] nsim_dev_health_break_write+0x166/0x210 [ 1101.949814][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1101.956286][ T30] full_proxy_write+0x135/0x1a0 [ 1101.961202][ T30] vfs_write+0x2aa/0x1070 [ 1101.965654][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 1101.971078][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1101.975958][ T30] ? __fget_files+0x215/0x3d0 [ 1101.980687][ T30] ? __fget_files+0x21f/0x3d0 [ 1101.985460][ T30] ksys_write+0x12a/0x250 [ 1101.989838][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1101.994761][ T30] ? rcu_is_watching+0x12/0xc0 [ 1101.999581][ T30] do_syscall_64+0x115/0x840 [ 1102.004271][ T30] ? clear_bhb_loop+0x40/0x90 [ 1102.009018][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.015008][ T30] RIP: 0033:0x7f896d99ce59 [ 1102.019458][ T30] RSP: 002b:00007f896e869028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1102.027992][ T30] RAX: ffffffffffffffda RBX: 00007f896dc15fa0 RCX: 00007f896d99ce59 [ 1102.036178][ T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000005 [ 1102.044268][ T30] RBP: 00007f896da32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1102.052269][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.060296][ T30] R13: 00007f896dc16038 R14: 00007f896dc15fa0 R15: 00007ffdf7c10bb8 [ 1102.068384][ T30] [ 1102.071459][ T30] INFO: task syz.4.2616:18741 blocked for more than 144 seconds. [ 1102.079301][ T30] Not tainted syzkaller #0 [ 1102.084306][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1102.092997][ T30] task:syz.4.2616 state:D stack:26280 pid:18741 tgid:18740 ppid:17739 task_flags:0x400140 flags:0x00080002 [ 1102.105069][ T30] Call Trace: [ 1102.108382][ T30] [ 1102.111345][ T30] __schedule+0x1295/0x67a0 [ 1102.115967][ T30] ? __pfx___schedule+0x10/0x10 [ 1102.120862][ T30] ? find_held_lock+0x2b/0x80 [ 1102.125621][ T30] ? schedule+0x2bf/0x390 [ 1102.130009][ T30] schedule+0xdd/0x390 [ 1102.134194][ T30] schedule_preempt_disabled+0x13/0x30 [ 1102.139705][ T30] rwsem_down_read_slowpath+0x5af/0xb40 [ 1102.145384][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1102.151536][ T30] ? __pfx___might_resched+0x10/0x10 [ 1102.156911][ T30] down_read+0xed/0x450 [ 1102.161105][ T30] ? __pfx_down_read+0x10/0x10 [ 1102.165938][ T30] ? mnt_get_write_access+0x1e9/0x2f0 [ 1102.171368][ T30] path_openat+0xa16/0x31a0 [ 1102.175980][ T30] ? __pfx_path_openat+0x10/0x10 [ 1102.180974][ T30] do_file_open+0x20e/0x430 [ 1102.185595][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1102.190697][ T30] ? alloc_fd+0x476/0x790 [ 1102.195128][ T30] ? do_getname+0x191/0x390 [ 1102.199688][ T30] do_sys_openat2+0x10d/0x1e0 [ 1102.204473][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1102.209758][ T30] __x64_sys_openat+0x12d/0x210 [ 1102.214732][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1102.220168][ T30] ? ksys_write+0x1ac/0x250 [ 1102.224760][ T30] ? rcu_is_watching+0x12/0xc0 [ 1102.229578][ T30] do_syscall_64+0x115/0x840 [ 1102.234261][ T30] ? clear_bhb_loop+0x40/0x90 [ 1102.239013][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.244998][ T30] RIP: 0033:0x7fa28359ce59 [ 1102.249471][ T30] RSP: 002b:00007fa284514028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1102.257980][ T30] RAX: ffffffffffffffda RBX: 00007fa283815fa0 RCX: 00007fa28359ce59 [ 1102.266044][ T30] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1102.274107][ T30] RBP: 00007fa283632d6f R08: 0000000000000000 R09: 0000000000000000 [ 1102.282122][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.290188][ T30] R13: 00007fa283816038 R14: 00007fa283815fa0 R15: 00007ffd060a4a68 [ 1102.298249][ T30] [ 1102.301303][ T30] INFO: task syz.1.2619:18812 blocked for more than 144 seconds. [ 1102.312665][ T30] Not tainted syzkaller #0 [ 1102.318722][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1102.327498][ T30] task:syz.1.2619 state:D stack:26952 pid:18812 tgid:18811 ppid:18207 task_flags:0x400140 flags:0x00080002 [ 1102.339520][ T30] Call Trace: [ 1102.342876][ T30] [ 1102.345855][ T30] __schedule+0x1295/0x67a0 [ 1102.350398][ T30] ? __pfx___schedule+0x10/0x10 [ 1102.355649][ T30] ? find_held_lock+0x2b/0x80 [ 1102.360398][ T30] ? schedule+0x2bf/0x390 [ 1102.364825][ T30] schedule+0xdd/0x390 [ 1102.368977][ T30] schedule_preempt_disabled+0x13/0x30 [ 1102.374552][ T30] rwsem_down_read_slowpath+0x5af/0xb40 [ 1102.380137][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 1102.386289][ T30] ? __pfx___might_resched+0x10/0x10 [ 1102.391650][ T30] down_read+0xed/0x450 [ 1102.395916][ T30] ? __pfx_down_read+0x10/0x10 [ 1102.400724][ T30] ? mnt_get_write_access+0x1e9/0x2f0 [ 1102.406226][ T30] path_openat+0xa16/0x31a0 [ 1102.410792][ T30] ? __pfx_path_openat+0x10/0x10 [ 1102.415857][ T30] do_file_open+0x20e/0x430 [ 1102.420407][ T30] ? __pfx_do_file_open+0x10/0x10 [ 1102.425552][ T30] ? alloc_fd+0x476/0x790 [ 1102.429931][ T30] ? do_getname+0x191/0x390 [ 1102.434663][ T30] do_sys_openat2+0x10d/0x1e0 [ 1102.439706][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1102.445005][ T30] __x64_sys_openat+0x12d/0x210 [ 1102.449932][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1102.455395][ T30] ? ksys_write+0x1ac/0x250 [ 1102.459959][ T30] ? rcu_is_watching+0x12/0xc0 [ 1102.464824][ T30] do_syscall_64+0x115/0x840 [ 1102.469468][ T30] ? clear_bhb_loop+0x40/0x90 [ 1102.474214][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1102.480169][ T30] RIP: 0033:0x7f3a53b9ce59 [ 1102.484705][ T30] RSP: 002b:00007f3a54a2c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1102.493215][ T30] RAX: ffffffffffffffda RBX: 00007f3a53e15fa0 RCX: 00007f3a53b9ce59 [ 1102.501225][ T30] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1102.509272][ T30] RBP: 00007f3a53c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1102.517353][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1102.525612][ T30] R13: 00007f3a53e16038 R14: 00007f3a53e15fa0 R15: 00007ffd8edfba78 [ 1102.533865][ T30] [ 1102.537013][ T30] [ 1102.537013][ T30] Showing all locks held in the system: [ 1102.544803][ T30] 1 lock held by khungtaskd/30: [ 1102.549682][ T30] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1102.559713][ T30] no locks held by klogd/4990. [ 1102.564535][ T30] 2 locks held by getty/6586: [ 1102.569218][ T30] #0: ffff88823bea20a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1102.579075][ T30] #1: ffffc900046252e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 1102.589345][ T30] 7 locks held by syz-executor/18522: [ 1102.594954][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1102.604061][ T30] #1: ffff8880353b3880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1102.614149][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1102.624391][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1102.634892][ T30] #4: ffff888021f17128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1102.645672][ T30] #5: ffff888021f14258 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1102.656759][ T30] #6: ffff888048911e20 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 1102.668656][ T30] 3 locks held by syz.3.2613/18713: [ 1102.674250][ T30] #0: ffff888039ff67f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1102.683610][ T30] #1: ffff8880202da410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1102.692828][ T30] #2: ffff888021f14258 (&devlink->lock_key#5){+.+.}-{4:4}, at: devlink_health_report+0x66c/0xb20 [ 1102.703638][ T30] 2 locks held by syz.4.2616/18741: [ 1102.708875][ T30] #0: ffff8880202da410 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 1102.718177][ T30] #1: ffff888048911e20 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 1102.728775][ T30] 2 locks held by syz.1.2619/18812: [ 1102.734102][ T30] #0: ffff8880202da410 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 1102.743398][ T30] #1: ffff888048911e20 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 1102.754163][ T30] 4 locks held by syz-executor/18907: [ 1102.759654][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1102.768806][ T30] #1: ffff88805d246880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1102.778745][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1102.789138][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1102.799680][ T30] 4 locks held by syz-executor/18922: [ 1102.805133][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1102.814269][ T30] #1: ffff888049af5880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1102.824173][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1102.834402][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1102.844797][ T30] 4 locks held by syz-executor/19000: [ 1102.850288][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1102.859368][ T30] #1: ffff88805da2a480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1102.869261][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1102.879467][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1102.889974][ T30] 4 locks held by syz-executor/19018: [ 1102.895413][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1102.904559][ T30] #1: ffff88805ba95080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1102.914463][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1102.924641][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1102.935068][ T30] 4 locks held by syz-executor/19041: [ 1102.940527][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1102.949654][ T30] #1: ffff88805d91ac80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1102.959548][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1102.969686][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1102.980065][ T30] 4 locks held by syz-executor/19042: [ 1102.985465][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1102.994557][ T30] #1: ffff88805f7fec80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1103.004427][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1103.014549][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1103.024985][ T30] 4 locks held by syz-executor/19080: [ 1103.030457][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1103.039563][ T30] #1: ffff88807e475480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1103.049471][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1103.059630][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1103.070119][ T30] 4 locks held by syz-executor/19099: [ 1103.075523][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1103.084615][ T30] #1: ffff8880357c4c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1103.094497][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1103.104636][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1103.115010][ T30] 4 locks held by syz-executor/19120: [ 1103.120438][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1103.129539][ T30] #1: ffff88807948ac80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1103.139398][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1103.149534][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1103.159974][ T30] 4 locks held by syz-executor/19123: [ 1103.165380][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1103.174470][ T30] #1: ffff88807baf8080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1103.184343][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1103.194479][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1103.204908][ T30] 4 locks held by syz-executor/19158: [ 1103.210400][ T30] #0: ffff888035d46410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1103.219513][ T30] #1: ffff88802e59cc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1103.229404][ T30] #2: ffff88802a007d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1103.239559][ T30] #3: ffffffff8fb87800 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1103.249974][ T30] [ 1103.252335][ T30] ============================================= [ 1103.252335][ T30] [ 1103.260953][ T30] NMI backtrace for cpu 1 [ 1103.260976][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1103.261013][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1103.261033][ T30] Call Trace: [ 1103.261045][ T30] [ 1103.261057][ T30] dump_stack_lvl+0x100/0x190 [ 1103.261095][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1103.261135][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1103.261172][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1103.261215][ T30] sys_info+0x141/0x190 [ 1103.261246][ T30] watchdog+0xcb1/0x1030 [ 1103.261302][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1103.261348][ T30] ? __pfx_watchdog+0x10/0x10 [ 1103.261407][ T30] ? __kthread_parkme+0x18c/0x230 [ 1103.261457][ T30] ? kthread+0x13a/0x450 [ 1103.261505][ T30] ? __pfx_watchdog+0x10/0x10 [ 1103.261548][ T30] kthread+0x370/0x450 [ 1103.261593][ T30] ? __pfx_kthread+0x10/0x10 [ 1103.261641][ T30] ret_from_fork+0x72b/0xd50 [ 1103.261674][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1103.261709][ T30] ? __switch_to+0x800/0x1100 [ 1103.261748][ T30] ? __switch_to_asm+0x39/0x70 [ 1103.261787][ T30] ? __pfx_kthread+0x10/0x10 [ 1103.261838][ T30] ret_from_fork_asm+0x1a/0x30 [ 1103.261900][ T30] [ 1103.261913][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1103.392532][ C0] NMI backtrace for cpu 0 [ 1103.392558][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1103.392587][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1103.392603][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1103.392645][ C0] Code: d6 95 02 e9 43 44 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 83 b0 24 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 1103.392670][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000242 [ 1103.392691][ C0] RAX: 0000000000467757 RBX: ffffffff8e4955c0 RCX: ffffffff8b86e225 [ 1103.392707][ C0] RDX: 0000000000000000 RSI: ffffffff8df1a757 RDI: ffffffff8c1c4380 [ 1103.392725][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 1103.392741][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 1103.392757][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d73c50 [ 1103.392774][ C0] FS: 0000000000000000(0000) GS:ffff88812438a000(0000) knlGS:0000000000000000 [ 1103.392798][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1103.392815][ C0] CR2: 000055f991803f40 CR3: 000000000e596000 CR4: 00000000003526f0 [ 1103.392832][ C0] Call Trace: [ 1103.392841][ C0] [ 1103.392849][ C0] default_idle+0x9/0x10 [ 1103.392878][ C0] default_idle_call+0x6c/0xb0 [ 1103.392901][ C0] do_idle+0x464/0x590 [ 1103.392933][ C0] ? __pfx_do_idle+0x10/0x10 [ 1103.392968][ C0] cpu_startup_entry+0x4f/0x60 [ 1103.392999][ C0] rest_init+0x251/0x260 [ 1103.393023][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 1103.393165][ C0] start_kernel+0x484/0x490 [ 1103.393269][ C0] x86_64_start_reservations+0x24/0x30 [ 1103.393292][ C0] x86_64_start_kernel+0x12b/0x130 [ 1103.393316][ C0] common_startup_64+0x13e/0x148 [ 1103.393354][ C0] [ 1103.574072][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1103.580959][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1103.590082][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1103.600150][ T30] Call Trace: [ 1103.603453][ T30] [ 1103.606396][ T30] dump_stack_lvl+0x100/0x190 [ 1103.611111][ T30] vpanic+0x552/0x970 [ 1103.615129][ T30] ? __pfx_vpanic+0x10/0x10 [ 1103.619663][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1103.625861][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1103.632065][ T30] panic+0xd1/0xe0 [ 1103.635841][ T30] ? __pfx_panic+0x10/0x10 [ 1103.640322][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1103.646518][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1103.652698][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1103.658876][ T30] ? watchdog.cold+0x1ec/0x234 [ 1103.663667][ T30] ? watchdog+0xcc1/0x1030 [ 1103.668122][ T30] watchdog.cold+0x1fd/0x234 [ 1103.672746][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1103.678594][ T30] ? __pfx_watchdog+0x10/0x10 [ 1103.683309][ T30] ? __kthread_parkme+0x18c/0x230 [ 1103.688376][ T30] ? kthread+0x13a/0x450 [ 1103.692673][ T30] ? __pfx_watchdog+0x10/0x10 [ 1103.697415][ T30] kthread+0x370/0x450 [ 1103.701536][ T30] ? __pfx_kthread+0x10/0x10 [ 1103.706175][ T30] ret_from_fork+0x72b/0xd50 [ 1103.710792][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1103.715933][ T30] ? __switch_to+0x800/0x1100 [ 1103.720644][ T30] ? __switch_to_asm+0x39/0x70 [ 1103.725443][ T30] ? __pfx_kthread+0x10/0x10 [ 1103.730075][ T30] ret_from_fork_asm+0x1a/0x30 [ 1103.734906][ T30] [ 1103.738550][ T30] Kernel Offset: disabled [ 1103.742894][ T30] Rebooting in 86400 seconds..