last executing test programs: 5m35.176254015s ago: executing program 0 (id=1145): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cpu/0/msr\x00', 0x8142, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x6}, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x4b64, 0x1) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bc28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @pid}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x20008004) 5m34.978468714s ago: executing program 0 (id=1146): openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cpu/0/msr\x00', 0x80600, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x410000, 0x0) (async) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) r0 = getsockopt$auto(0xffffffffffffffff, 0x65, 0x5, 0xffffffffffffffff, 0x0) mmap$auto(0x2, 0x2020008, 0x1000000002000007, 0xeb3, r0, 0x801008000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) (async) r1 = socket(0x2, 0x2, 0x0) (async, rerun: 32) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) (rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram2/partscan\x00', 0x80200, 0x0) (async) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101200, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r2, 0x545c, 0x0) (async, rerun: 32) ioctl$auto_TIOCVHANGUP2(r2, 0x5437, 0x0) (async, rerun: 32) io_uring_setup$auto(0x40005b, &(0x7f0000000080)={0x80000003, 0xe, 0x2, 0x6, 0x5, 0x8, 0xffffffffffffffff, [0x8, 0x4, 0x10], {0xd74c, 0x10000, 0x6, 0xb, 0x100, 0x7, 0x4, 0x406, 0x2}, {0xff, 0x1, 0x10001, 0x7, 0x1, 0x40, 0x8, 0x400005, 0xa88}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/event1\x00', 0x40000, 0x0) (async) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x0, 0x0) fallocate$auto(r1, 0xfff, 0x8, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0xffffffffffffffff, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x291805d9]}, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32) readv$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xfffc}, 0x3) (async, rerun: 32) msync$auto(0x1ffff000, 0x17ffffffffffffc, 0x4) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb2, 0x401, 0x8000) (async) mkdir$auto(0x0, 0x1) 5m34.007203497s ago: executing program 0 (id=1150): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xb, 0xa, 0x20300) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb3, 0x10, 0x7, 0x1, 0xffffffffffffffff, 0x4, "0037ff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x11) bpf$auto(0x1a, &(0x7f0000000500)=@link_create={@map_fd, @target_ifindex=r1, 0x3, 0x81, @uprobe_multi={0x81, 0x1fb, 0x4e4, 0x0, 0x1, 0x4}}, 0x92) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, r2) sendmsg$auto_NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000280)={0x1e0, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x6}, @NL80211_ATTR_BSS_SELECT={0x1bd, 0xe3, 0x0, 0x1, [@generic="9c18155712aa84fabce62d5bb92e07c2a9615bdf19d3dfe71e10853be1ebb9ec99f6f66aa89d35efae74d4ffba0a2caccf9e9b5088f663e653ef4760ad6a109993210fc7cf83ddcbeef3aba8213c283d7d543d9a29cb1b5c33a18beb34f90ef68a91af6e49d0f38a9f91", @typed={0x8, 0xf, 0x0, 0x0, @fd=r0}, @nested={0x53, 0xd6, 0x0, 0x1, [@typed={0x6, 0x14b, 0x0, 0x0, @str='$\x00'}, @typed={0x8, 0xc8, 0x0, 0x0, @uid=r2}, @generic="64b9df171efc9b606d1fec18eae52b3b54a55c2b35b43cf870c1df6c30429be948e2f498e96b4885eca5792fd4b05e", @typed={0xd, 0x166, 0x0, 0x0, @str='##).\'\x1a-$\x00'}]}, @generic="33f2196ecdfb8038408c6388b31ae68fce9578d35344521939655e3741099545977cc261a2d3833924c1297df22703b73ad95b0169e0387b1cfb1cff3f321bba9046f55c011b371ae2d95e0608421d260168857f6ad7e22a7cfdd70c9d081cfae973fa321a860a7b099c6644d142e42c798022fbd71ac9b1a3e658af0337332a42576e67be6546b65ee53448287c3265a43fa6c647cdeb2f0a67aa963658dcc926890ef4dcbd35ff77e91a32e0689f3abe42667fa820", @generic="11b8e6c074ea9eaf1d4d1acacb1cfa43fcbc1eb784ef7f982805d4d75e48dc977dc0208df3c7653df2f31670f09ec99a03aa8a3f6dae0bc231f7b6b4b8"]}, @NL80211_ATTR_TDLS_SUPPORT={0x4}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4008841}, 0x20040001) 5m33.6923991s ago: executing program 0 (id=1152): r0 = openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x4ba800, 0x0) r1 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x40001, 0x0) ioctl$auto_BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000080)={0x1, 0xfffffffffffffffc, "f1739303920af4bcb72edd67c8a7e200", 0x5, 0x800, 0x3, 0x3, 0x4, 0xfffffffffffffffb, 0x81, "8b6c62eea4ef10cdb6ddd74ba7dd9a85", "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"}) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x9, 0x8000, 0x8, 0xffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000500)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={0x0}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000000) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/snd/pcmC0D0p\x00', 0xc01, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000005c0), r2) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000002040)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000002000)={&(0x7f0000000600)={0x19cc, r4, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_PMKR0_NAME={0x1004, 0x102, "6f4f391ae1b9da795e2738aa834761cc8be3c8ce365ddfaf407913e5bf83a77076e13f2b67ab0a997b9c542035fd77bc8feaca1b2cb1bd063d4807a3dcd67910ed07f4ca30a89f34733bcdb692d17bec28ce1218216331c9a5f5d380a8ca482aa8d7609f78a1df7c2b403aff66043d1fe645d879f046f791b1844abe27d98f7109f113889e0706496aafd95fcb988a70075ae0984dacbe743fd1bbf0b770f9edeb2183891dfdab2240f6c2497efcc30d31cab903545fe447eabcda10be5ef082be38efe222bd35141f2edebac5991bb797cce11eb9d895e02afc06bd4856449d9003ba4080e2117efdaab1d8fc12551564b7b2b5aeddf15649f24b486c98d9abb3b8bd4788ab8676b40c16dae50fb2627cf864615e96597abb54f32deb41089fc5287d6c6caf27bc70978e8e35aac7610391d2b113196fa9d7592d74efe1422c6c70b44cc9508aacbb1907c8ebdb44072ea6ec715aeebe25cfc1c5f018e737df3e21b7618eacb7712e5f638d9b306a897115e5e4f6d39f4ad13748a76f47edf6ef47037bc5bcad56c022d0e2bc20cf2ac0980ed5a96e5b87111550e7574b2feb5cbde10585bdee13be489c35e333d0cb464a30be6dc2db58553b3b4942c24b44bece946491d31a7f58bf3b0e9088c8fdd6a36b0fab9fd591ea821338fc1c41a6876705858a9c11839dce9a7d19babfce6905c6ba708886f528c609170634dc9f23bd3c405b961f7ce2e42c94c0c93f5c68bfe4b2f650f671ede8d1cef0c14fa791e8e4086714ce00526ba43a1d8c242930ac67474654fab4a50bc3e0f00a2c9e99ac0b534a570464e920ae0bffd50e06faf4e3dbbf1badc6178595a11b9e61b35667c1cd2a34671c4d076c493879b3c2c206f0edbe6e5bf8ea4245221042a1e16bb0414d8f016c1be725587da5e7047de1b9632f2d82c3ea9ec8c6acb93530bc32b4623e7e49a3cec3decbe3b8d23758b96fd60268b687930892c845002c5d79a2a6eaa95f4d3e0699903ba14e7fe13289974884aa8965cc04a27d62e81ffad1eee92b0916b1e93f41c3e1dfd0868c490167ff53324910505558be51ed13a7abf0ed8fe4b81caac6ebea108713c9420d69dcc0909f3fdd0a39bdf5ebf3b04cfd9458a207702c6516a0cca296680b78e77473069ee1fdf4f9fc5928ec906129b52deaece82958d3f75f57e4bff3451f90564b62ba303cae4e5734691ba3d880c1beb83c6b87469261d22d5f7bb1cd00ddacbac91f6483ae23714034588a411878eb3f735d9de62bcb9078d07accd7a4a4723d615466feaa4375149a475fe71370ed95052d80b82f7f04a690b288fd3c5f631e25bc2d3d6f729088cfe3caf0b2757a70d065af2028b6f36c1f63756ab5cf8f888ae17cff98103ee137aae93b76d0798c130d4157df25efd5853a83b74aba69fcbfd4787239fa5492aa382aff72e906e26c8511205ccf99f18ea285bedeeef521acfda693740002273352495f0e00dbfe405163babf35c974cc8574bbad23a1ff674da745bd4f98b3049fb2a9b2ff4e79f8903af38192c897d642a6503093bbf3a55c70b04dfbbe686eebf4cfe4434d928cbd504fb9913384c929e5e234e981a26a32bc7db77f49a3fb4f3c017592c590c331333384018f157a51e4af6a49245386bab2979bd0d75459c085f8763e517e90acac6b6293642420991c6ded0e64d071c5482d7e46049a48ab50e9b192c724ec50f19559bc7afdd1075c7eb2747c6a5e8fd40a1912f8388e30a6164c217fd0d51ae2e91b7f36965fdc91edb8578addbc419004427eedb6813e6fb4747c6fcc3b3e1e1c41fcd91f75630b61582b58dde5d53c98b4656161368ecee2388194e0ca0c4ae59a0d903dc982d22b9197982482ebdac887c4d847d6b4a56f8c9b0ccc097dff9085ff127a93d4263ff2b4674ecd2bda4b44d6ea86e9c4554efb20814ad75e781b7639e6ceef82b537dc4e1f0d232cfd2d5af24e2870bcd931e0c94124aadb5f2193584bec3a645bb4e8e906cb2ea52e282d815bb7020bb30e649734113bb012858efa27bb144c06a589cd89b338c1e95ab9bac8cd3fc3729c2fabc6a03cf80bdb8e50736315f97951c75d4d904451d4a0b8cbfcaf555c4875f69eb3f0c7fb76ffd6aa8bc9b35b084bbbbe5fe1243c188c2c9094d0ddbec4a55ea5ec900a3cf9bf8347257e68093cab13d89b9588687b8d8ed184a8024053bdd7d29c294294f6644ea7d281c4acf984b2c7091fc1470be3f6d8eec7e7b2bd48fc0b23ab32c343baee76995d81596cf02af698cca082f0388bd991bdb3bdd49828f996d4d4de4b371addc879286e83343cf1422d487ef1ed1c78601a2139e2c338b84c5f5f87e7bd6323661baee478875481c9a87151201d702c0c4f8bed0d0eb33763ff5c6898afbaf51831f9a95be4a2208bd96dac6060814c6396a7081ceae8d76016718811a2ebed3e92f724a6a785b14e31d3f876c35ad8f46fb251faefe48ced10c2788458a147e177013a0cb3be1bf13aaa799311d0aefee58a38547f890c3cf08ed0a77b2091b4b46afa2cb1b3c3765e555369770687e16d29b9f3ed3edafc87e67afdd54909cf56b05fbe0632543cfbb8169f107746e060b16bc345a53197df3aa33027622c6e4ea478a075a087e8e0edc2c88538dc2d1b9cf10de06c99c2d30abe9e313464f80621be1f2cc480d67ca91176009d7c3efe08f651bbb5d1d10d3992648cfaacb5299cf465735ad0ddcf4b3a4f6e813c6b3dd054540423614dd32670e2a51c83a69f24b22c00c21a86312a36b4dc85a57b02f64ff75605236a6337e6c7d799681b52195c40f83907e483436fb66b953a15ae4fd1568770c7d5f80c33190a1ca5c52fd40e06e2d8ea581cb5f0a0b1d9fcffe382b449714bf22d2cebbcff210cf86a123190dedd4c13c075b1772a6135e95ff478dd965c5c7a64b257612ef8c87aeaf766a20aba4a8b6b41d8ba1ab6a046b824b2f8d4b5a4e54404f72f1576ba031094bbbab67e040513bc1b52305db7f7fd4c0c681eff1b8d17f21ce6814bcc5e5a9524d89d21b9082f4b3b854b2d03b80dfb47747cf7fe61a91911a076c5a86ffd03ab027a0382bef1935445755a64e9749ddc5a3d627e7e7c0f938ef43ee51b99ec973c447efbbb2eee5516a86d7fad41595cf84a54fa59ee5b0f756eceb94d1ea470798334484751b2e129d3e34ffa823d8cfb1f78b18667440a2a2c1a8ffb55c493c758ab083a6f474a2d508a3728f5501ce21cba1a3ce9b5854ea05aa7f22ef98dde98eb91d7cc9ad84b1c816e6f8e111b4d7bc6b4ac2932fec31a164e747b56191e841c0dabac37abcd2588d1bde99d496091ef47389b2db95d13bbfd81bdba5fbfac93d19520ef7e8b40e525b8e89acd0f39408b41f5a18cc2cd51ee6cab68463919d2c292eb6c45865e87d3aecb844e18c5dbfcb58f15c5395b9536d20fbd5a067aae4b3b5d622fb1b0ee0c88cfaf6f6e482035199d2b36846cd887d23718167dd0dde9665e69d15b132d1a123636dea51db118bd8f38adf448ddd278b462187c250fd5d1d5986c86760b4bf84c279bc234390619548b4546b5ce9005231f32f16f79488f55b27e5a99ae56fa392618e7cc7b0d560d96b72cd26c0eddc71a0249e2ded5a16d13ec392a26ff23f4244885359e0ffc3a0481a022b6e98ac2a86d5b46b5ce99306ca1b52eaf516423ca276fa5f5e4e2a3b86ac4d8412e96ecbeab4f436ad99f54511e590fedb8fd65406fa830f786fec20bac7eac4ddd8fcb1a2babed86534cb6a719b724033b4d612345dd95764c274442ce737e2601bda5312759d2106668f768d0dfeffbdbeff7c1b62fbc1f948f40559145286bf11c1d8b6925ed4d2548d5b97e67e124cf851e4481347ceb6b00587a4f53a7e08b75a85b0f7bc6d6b94708cbbef9214b96e073fcd6957324707feae739e24b1e7a49fbf82a16c6b6f8f8aca8d1bba01ab804a300796f53edf8c49ee94173987fc9f0e7d0625c66c7373b4563ad609a511a503724124d9edd37c4fc7c895a08e4741ec7659eccba7de560af1c2e558472b06cc74fa48dd3f83b35dd3a97cecfbdaba728b692801bae30532aede5bb4f0f6924e709a0c7095ea7c355da9fbeb4b6e0e7f6f21e0793c2ce53999b57c8ff1bbd6ca1e668a671a1327d7fb56a34ce7277b6a37a41cafaa222f85eef10f3fc50e3eb5bee92b84819480295b0c5e49bed7d98a9568162c38eb5b57fbee0d22b4d23dab7ea9ba366798e1bea627c4bb9d0917bed657d9b063f7d566d9e00adda7a8f57f9f673d556c38c485dce04198e581ea59dce025143be5fcee21a98ead058a649f96a667236fbd09523e32d3d9428ecef1db97d494d3d54562e704555a1b3910026c5757f0d7e85c674f257f53d6dc9ceb250a0385c74ae0d5d6903ff6553dcc0466328d205c0973aebf562e3231478d48cfa4113071c8791e85c95317c25b7e5cd419e5efb28043deae11ab8275eed303ee95382a6deff14d74113cae4b4d9d40b3f7854a6a2be09571b3b7a7fe8a57f150f42af5b3f3b63e9206a98e41fd79a81cbeae7c0de85c5b1c9b4e8342ae6d0a9063ed62322b99c53b40ad4d153eae3d918feb15a4a8d77c12b3c8c2009ddeef5e2958829b9c645c2041aa04ff41df29e334212125366c2983b117fd4dc383489204f45e5bd2b83b12eadf4156948156754febf70d84e9f23745fc055c274c3d5639054bf5c44a64fa14b0f6263ad0b349eedfa35b83dadd17ec3ec352c293a5b36403c56c7c58e9232ec7841d34d3dcb89e5145ccdf399f4964b4f1de09dd8b87079ee89feb843e3bcb002fedb181bd405699401ffe1267a2acf2eb046159fb52f9d0426336349a09742b40a42ae24555137f160dda3fc91619c1cae58d3a13aaa0c32d18b036d258570c0ed30556dceb99c15a79775189e81ef395690c6ff51134b0595f032afb3978504f89d4fcdd94ace4834cae50e76f373be8bb13ae1d5f8209274299d261318f43ca8dd767ed55d89062a5c3645fa2c38e813c6abc16ce0fe3cb5344bc5b2a92e0dcfb8c893231bd9985f2dbfc133771248e19202f16be8b7c24d268dcd5e03478b0e789d2bae7006f6ce4e772f09cbed04dff3de9b71b139f339b30eab4bd22c9e67c5842230ce0b97ffe210235c964c7ad05f79eb0ccddb29d3bc9bd6b38c801ca7c42a96421fe3afea5a94dc2710fa442bebcb35d4524fb7d255560f96c07f70e242473c642bafab82abfad73cf78c8021d3106074f58994650eea00659561016f8b191904627d12f269c5ef62876994d46504e1670fcca4322f285e7533b26c5f0e759440ef71472e992e1c91cd4fad62e5ce8db72ccc742734dfbd4f8abe5872658646204e4cc6353232f5414f9373244e5d8b8e170de44665bf206664c51d08ea602c8c57c7bf1a3bfafd8f66916338b688729a62f2fdba18c913753e4ce39ccb75db0a6a9a110cda9e4ff89b906794eb67920e43f830b094933a33236c3cf8fce67dcfb3c44b469f76a7e65d52007b9ffa0d438014f0542a66c151098a61e41874e03f0a8d4c01215cbe4a134dd5de1b88fff9d374a30c2f01e37e72205da8d9f600d4c24c856f1002278d5aacb59d0b7ca272a567067248398c0a2870cd546f11dbea590ae66159a7de96b0e47fe10d63d28a7d510610abada8ab138a6770ed81d9e6d1a4cda41356a388446262b375ad2ac4def4987b92e3cfb3d48259ef110923dfee1e2d52ca30711eeba66db04606c1f12d801e5238a0577bb20f81a379bb2c442a2db57cbc7e5d"}, @NL80211_ATTR_PROBE_RESP={0x8d0, 0x91, "b23fd85c5cb04deaad94146b8900878362bc69aa26c7a0264007e8fcd795d7ad4bd42bfd0e3baa01b168ecd738440a6a3cf0974a228ce6d98e666c0b7f03a3be535ecef0797f92652851156a21b843331d291c19731d14eb9a3863526cf3e70ae0c8f7ccdb728fefbac1919e5b4e7b47366f00c942f1845f0bae6c77ff50877468b10db685397ebb4efab9f8147a212dad717e3d67e8836b962356a3402dcd5a1da9c582dda2fd2f5b6b17cd8b430ca3a5f26e2d3c61a488d4b9a658b5523c23562b36887723fa22ec6307b544a5fab11256748a7643756a20c63f54a32d00727e196882843b3cca95067fed16f8ca600b246e3f7287182803dfe446e3e7a75a233c11cf5fe4a41af39154c1fd2922632aa1b11f8bf6de697c7be3c1cd6ece153b8f89ddd15aa75d76cbc5406f3c1c1ecd9921f232406d9f4300fb60fc86a296f854fd7c90884b0740f32b8a146a64d04aaa258d0bb47990f48fe278a3d841b5ce801b1ad38ce72861d88447ef3868c3154b6208d9b510dee75651f93246b60e567a68307ad685be932e1ba970fc3705441b7659fc25b026a2ab4cba73b3742f712d866e92924f44bda0aeb78759a1ad9a28371184fefebb7a6eb8ecaba6cc0b9d7966113a6c63870647d903018e493cf71877bcf8872622b04610bc534f219d24b8be7afdbf7d027449370da8133edc5cd7234fe4dde31b6146eafecf235b9deb8975754f1e35c0d316694cb6d1688141f4e1df73723a48a338f3b77472d74d2709954a9a1ddaae1c50fe3db1df78f2f42aaeb62f9b8b187c627132f1b543dd0ffb193f446be1c51af50f7c037642cedb2381b3f84c06a9a995914737e25416102207823e589f272409fa6c792a5ca472372a41e174b2282f4ad45cddc7e5b4974048714383b7c146d42e8a3d3db0f3ffedc48abc60b01324003a9aac14ba8a63120cefd88f8ad877b7166e73b7e792588d46fa8ba67ee97d21f31aab6e64827691f4128314eeb97d0c0c143b27ee037a9d43a803becb6e3673bed9548803b2ee05cffdf67642741c6a3f2437747dce0ea2f52563802b1325cbec783a766d5c86225a00f1e10d3e8678137542dbc7018f59b7b2d6f4a6097a7a6f1f9ff2f4bfac787d58026d9527abaaee375c6f24e9a39b930c8d1087fb755ca5a26ab151f60b5cad32f26c66201efc50872bbc154f017d3a8cc75c93e4a4ff3bf363abd1650aecf2e0979d67fa3bfd578f715a467eb8c24292791dc11ca308cac8db483f9733fb14fc9c89d229f3f58a4398f9e5b34db8337bb1b122fac242352a10dfd3a947fd6955120868f007508a4e0411e4053489a017a4521f7f675a30b946b46db51273a81a8673cedfc10269e252143179cdd99acdc894f2d60fcf053e5af136447de2cdbd7f887c5e9c511c2fd58b8e47cd645ecb22a69ce4206825b2d8aba3eefc951188b8b2c4e8b4d38374d1dc230784bd33dffff09d88ad3e65bf1c0fe7647af56bf11e397bad51537d70aee92eecd8233575df2890466ebc6741867d0c49a1621690cc0b12fc44ac6a4db5a98daece2fab9110d687c76709fb1fab865900d876f28aaafc1d67fa0e4cf2c5cc2c125aebcb6553d2e50a322eb5cc0248a86d884e0cddaf54cbde6ca1457ba7543b34c1e1b2449827a24f8b64287cf9dcd6f5ae66f878e792763df0d2bf38a052aeaeccc9b062a219b211869998c1315827f4283c0bde6f447a448862c7aae4a259dfec3db5898f399bfe2a955e46a937c8c9ba164add507f5639aa3d59427c0be43532426d8a1e2f9ca15ed7ecc9439015f15ada54375bac7e149c36d69869bf3dfc7c438f9d2f369b420aa7ee2ee3365f9a9979cfb7f3eea91b94b952a0e70b126101bd9e6eafe9a8b220102cd2f9b19b1df1a7202beb229dacb1ade09eb6034c1bec97877910f71f37c73124a5c4220514d029309d731e150d407b7e3efb7288e85a9029c97e510697e16a2debe4ba8bd98bd744cdd3e8fa91b52066113b27324c091b5a9aed374f403b1143b02df84a46916e14a4b0fe48c14bdbec53380f2bd773e8f3bfd47a771b3c2bc623e471b8b89abea948ff0913ed0fdd28091c77d7dfb76ace85fb31601e4c522aa2f3243a8cda0139511361628ef3b4d9f7408fea1681ed91fc8f7379187bdf686a224fb42c329c9780928620a3f1e826f1da28954a7afaf1f88a7b2be66ecdef1d4dd674506f245d1510fd165c447389414215af2c733346974ce6c4b9ea99f8ad921d4f9044cf7a1df72b4745043d3f025d87f96981507243d18807bd15d660b84a5af148b0fd1f402bd5e0d30b4aa5f581e82a8ad10408308d10a6c24ca53a9b4de2d602dec5814703f9fe58eb5fdadbd513a663fdc04c23f6632f684d1d61ed8f4870d4ae1fab26a5ff3394eca55ff859bba619753d00247a38c5b0ca46fb98da9210044e66729dbcf2e27229881e8bef118412a46624fd1be514451cc4aa2b52c4e55f2dc3477edac70fccbf91ced2f62e58fc6e8c46d179b5b1eef31b31d3d31685987d7965788f06b069eb3a1809bdd1fe81f5e2fe39994498a63c8aaa574a011cbe8686d9613d04bfb3493578d3bfa6b6618d24aeed4eacfc40f2a2ba33780bde6a43be119717a21f6ff744dc74b9765282d2b259994d94cca61cf006829273795343d687cef0509ca3f3ec6eca7888566e8b409a4e76c717ea7afa78882be082c303a1bbfc1e372c3a7b9f4621a66044d8c07c343030abac1f681831d38c7031980a1eec38469310e0162ebb17f1dc635d6c3698bc1ec437fac5104a231b5fcf7742a6da73429045052b4885f70a627b6a957730f0efc38ac4dc567403467beb10eae834f8e61576c96682d6e5528410ee7b885d35b52a074ade0342fccb4175e96a8231f7cfc276fcc9e06e6ae2ffeef88170393af30621ed95b15dfd7b7589993f9f2afe43ac32a7846593c6cf21e1d428550cd4939d230b0673d86bf7fa339063c776c14fb13aeff5cc99fac363215f57d4baa00b91bb9b4f60afffc46ea3851e6a32ec1f6d38be8e43e1e0aa28bef34e35ce11491b370b71e309bca0edd8c592e956ab4c8d245c5e043bbb9ddb0df6f64a3907e2e2f117d4744dd83ff6f189a73b9a2b5c78f0b05ca71a8f5b86d9b2e87d61bec14d5125b676e60671e324145b8b76c492fe9843446b06cc"}, @NL80211_ATTR_MAX_HW_TIMESTAMP_PEERS={0x6, 0x143, 0x5}, @NL80211_ATTR_VHT_CAPABILITY={0xd6, 0x9d, "d9e1655a3016bf33eaee1b7624b6314916ecdfe8d1370c2a5b157ec4e7c870662dc358be0e27af0234e8bef4f03dfc9bb7725aeb266ba7ac2f95734043c57849fdf3043d5ff40ef52dd6784b75b43d4d0f00872eff649c45e357f24e6c2e90e68bb5810f9770d4e69ba369e29dd546cf9a50f6a11da998f076009f2e0b279f6d1049fc9ed9bd4d49a7bbfba6d668696cd0c2ef98681da4cb30b7147548399b2be2c7e6457a27970b1609cf8041e9b7c962564e66ea40d6a45748ce16fe1838b4c67c4550b408e250aa0252e95bb1e8064f92"}, @NL80211_ATTR_S1G_CAPABILITY={0x4}]}, 0x19cc}, 0x1, 0x0, 0x0, 0x4008800}, 0x4) sendmsg$auto_NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000002140)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002100)={&(0x7f00000020c0)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0xfffffff7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x80) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002180)='/sys/devices/platform/vhci_hcd.3/usbmon/usbmon15/power/runtime_status\x00', 0x200000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000002200)=""/137, 0x89) getsockopt$auto_SO_BINDTODEVICE(r0, 0x10, 0x19, &(0x7f00000022c0)='/sys/devices/virtual/bluetooth/hci4/power\x00', &(0x7f0000002300)=0x80000000) r6 = io_uring_setup$auto(0x9, &(0x7f0000002340)={0x3ff, 0x1, 0x7, 0x68a, 0x4c09, 0x9, r0, [0x0, 0x79d, 0x1], {0x1, 0xb, 0x5, 0xfffffff9, 0xc, 0x5, 0x924, 0x2, 0xfff}, {0xb462, 0x9d3, 0x1, 0xd, 0xcc, 0xffff0000, 0x4, 0xc, 0x3ff}}) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f00000023c0)=0x7) socketpair$auto(0xbd, 0x9, 0x40, &(0x7f0000002400)=0x7) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000002440), 0x501400, 0x0) r8 = getsid$auto(0xffffffffffffffff) r9 = prctl$auto_SIGCONT(0x7, 0x12, r8, 0x10, 0x0) r10 = waitid$auto_P_PGID(0x2, r8, &(0x7f0000002480)={@siginfo_0_0={0x9, 0x1, 0x2, @_timer={r8, 0xff, @sival_int=0x1, 0x2}}}, 0x3, &(0x7f0000002500)={{0x16, 0x9}, {0x9, 0x2}, 0x3, 0x2, 0xffffffffffffffff, 0x1, 0xfffffffffffffffe, 0xf, 0x10001, 0xffffffffffff9d97, 0x1, 0xfdd5, 0x6, 0xffffffff00000000, 0x4, 0x3}) getpgid$auto(r10) write$auto(r9, &(0x7f00000025c0)='/dev/dvb/adapter0/demux0\x00', 0x6) fcntl$auto_F_SETLEASE(r9, 0x400, 0x0) setsockopt$auto_SO_OOBINLINE(r7, 0x3, 0xa, &(0x7f0000002600)='\'&\x00', 0x7) tee$auto(r9, r5, 0x1, 0x2) r12 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002680), r6) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r6, &(0x7f0000003880)={&(0x7f0000002640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003840)={&(0x7f00000026c0)={0x1160, r12, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x114a, 0x1, 0x0, 0x1, [@generic="c8874f5a0715be4755549c19e8fa760f6c088b60abb538449ac4b708eb0b6e07d20bf230571ac1ddb11cb609fc1a4a6ff5da9e8ef057345961c3830edb4f2d27c4cb6c2725f87d3abc5b03927d4bfafe391b5b54fc2f0566235ed0be7c047323879393c653b30819526d64a86f9858dbca93c312d0bab2810a02480de756fbeb39cba0c84a150dd1b414bbc4a08fa8d9204cfada2596a58ca90ca99c724c4626eaf130a7b008ae4ecbcbc62e5ad8fa0b718f17515128ad49b4352e6a122c2da8814604db5e4a26d1f8f17dbfb22d839ea879b1", @typed={0x14, 0x6a, 0x0, 0x0, @ipv6=@private2}, @typed={0x8, 0x7f, 0x0, 0x0, @u32=0x502b}, @generic="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", @typed={0x8, 0x31, 0x0, 0x0, @uid}, @nested={0x14, 0x1c, 0x0, 0x1, [@typed={0x8, 0xf1, 0x0, 0x0, @u32=0x2}, @typed={0x8, 0x7f, 0x0, 0x0, @pid=r11}]}, @generic="5cbd042b733aa5f31e443e2240b3d641defbf387e9097fb84f50769f2987ff7b24ba35c3c9a0b4840004b67d06ba34", @typed={0xc, 0x9e, 0x0, 0x0, @str='nl80211\x00'}]}]}, 0x1160}, 0x1, 0x0, 0x0, 0x4044000}, 0x4048004) r13 = getpgid$auto(r8) bpf$auto_BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003900)=@task_fd_query={r13, r3, 0x9, 0x80, 0x3, 0x40, 0xffffffffffffffff, 0x8, 0x2d23}, 0x8) 5m33.553142463s ago: executing program 0 (id=1153): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r1, 0x936355e497c8b7e3, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40010) r2 = openat$auto_binder_features_fops_(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/binderfs/features/extended_error\x00', 0x8200, 0x0) read$auto(r2, &(0x7f0000000000)='/dev/binderfs/features/extended_error\x00', 0x1) 5m33.32412053s ago: executing program 0 (id=1154): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) gettid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(r0, 0x400454ca, 0x38) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, 0x0, 0x40c4) (async, rerun: 64) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) (rerun: 64) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) (async) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async, rerun: 32) socket(0x2, 0x1, 0x106) (async, rerun: 32) listen$auto(0x3, 0x81) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async, rerun: 32) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) (async, rerun: 32) socket(0x2, 0x1, 0x106) mmap$auto(0xfff, 0x5, 0xffffffffffffffc0, 0x100000000000017, 0x7, 0x28000) 5m18.106867775s ago: executing program 32 (id=1154): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async) gettid() (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(r0, 0x400454ca, 0x38) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id\x00', 0x189002, 0x0) ioctl$auto_BLKALIGNOFF(0xffffffffffffffff, 0x127a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r1, 0x0, 0x40c4) (async, rerun: 64) mmap$auto(0x0, 0x40006, 0xdf, 0x200009b72, 0x7, 0x20000) (rerun: 64) io_uring_setup$auto(0x6, 0x0) ustat$auto(0x801, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) open(0x0, 0x22240, 0x155) (async) socket(0x2, 0x2, 0x0) r2 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x26241, 0x20) (async) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) (async, rerun: 32) socket(0x2, 0x1, 0x106) (async, rerun: 32) listen$auto(0x3, 0x81) (async) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async, rerun: 32) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000080) (async, rerun: 32) socket(0x2, 0x1, 0x106) mmap$auto(0xfff, 0x5, 0xffffffffffffffc0, 0x100000000000017, 0x7, 0x28000) 59.032903465s ago: executing program 2 (id=2264): mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) socket(0xa, 0x801, 0x84) getsockname$auto(0x3, &(0x7f0000001040)=@l2tp={0x2, 0x0, @empty, 0x4}, &(0x7f0000000d40)=0x4) close_range$auto(0x0, 0x5, 0x0) r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x4, 0xee78, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/max_locking_protocol\x00', 0xa2500, 0x0) pread64$auto(r2, 0x0, 0x8, 0x10000000000) r3 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x181080, 0x98) r4 = open_by_handle_at$auto(r3, &(0x7f0000000140)={0x8, 0x20002, "0100000000000000"}, 0xc) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) io_uring_enter$auto(0xffffffffffffffff, 0x2, 0xffffffff, 0x3, 0x0, 0x6) getsockopt$auto_SO_NO_CHECK(r4, 0x8, 0xb, &(0x7f0000000000)='\x00', &(0x7f0000000180)=0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2003f2, 0x15) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x10000, 0xa, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x0, 0x806121, 0x6) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20443, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x181881, 0x0) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000004c0)={r0, &(0x7f0000000680), 0xfffffffd, &(0x7f0000000300)="ea3bafcf2dd456cf910f0ba1f953f0bb4aae9f9278a6a08a72e0d143a79db047c8ae8e37afb3d08dd39b118a18c451132a63bce6c9ee83f170efaf57bb6d5dade71072d45d6a6a9fe1e6fba3c750ae6a851061d7e4e1a073cec70d10280e07d56b34ba8f0215713d9328940358cea3ffcbeafc0573050b3985ab123ebc16dec0b20da532d3841f330388ffa36713f1c26ec063", 0x9, &(0x7f00000003c0)="2f7a0ffc98dfacf338f3f02276f398216db9a8a12e51c01eeab37f6145f6480dbb5d50ec57ac2ff19343522b4af243db86a33c9f2f2c7f4e2a43d9194d7163943d579409e94b2eaed238ea87e745ad27e7cbe6c159c97937f88d3e28bdd962c2fd64fd30b0f31a7e8bb9d222283ad773b9596c6d447060ee26fa1e8da359d8996db0fa35bddd54c0104001aebf0e2b6ddde2733756cca10b92ab1ab488db305e7274", &(0x7f0000000480)=0x1}) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x22002, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000200)='/dev/input/mice\x00', 0x181502, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x302, 0x0) r5 = pipe$auto(0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/4096, 0x1000) 57.465594582s ago: executing program 2 (id=2272): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x20, 0x0, 0x8000006) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd70001fdcdf250100000008000900", @ANYRES32=r2, @ANYBLOB="0800050006000000110001006f76735f0000000000000000feff000008000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) read$auto(r3, 0x0, 0x4) unshare$auto(0x6c000000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setfsuid$auto(0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(r4, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7f) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x10802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/lp_interval\x00', 0x1e2142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone3(0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ptyw5/power/runtime_active_time\x00', 0x80200, 0x0) read$auto(r5, 0x0, 0x20) 56.755090838s ago: executing program 2 (id=2277): mmap$auto(0x0, 0x2000c, 0x10000000000df, 0x4eb2, 0x401, 0x8000) socket(0x2, 0x802, 0x1) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/freezer.state\x00', 0x10b342, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}, 0x1, 0x0, 0x0, 0xa00}, 0x40000) sendfile$auto(r0, r0, 0x0, 0x9) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) socket(0x28, 0x1, 0x100) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsu1\x00', 0x2000, 0x0) getpgrp(0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(0xffffffffffffffff, 0x0, 0x4) sendto$auto(0xffffffffffffffff, 0x0, 0x4, 0xfffffffe, 0x0, 0x1c) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) write$auto(r3, 0x0, 0x4) read$auto(r2, 0x0, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x9, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x8, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 55.870916954s ago: executing program 2 (id=2279): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x4ee02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) open_tree$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) 55.565044255s ago: executing program 1 (id=2281): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/v4l-subdev3\x00', 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) ioctl$auto(r0, 0xc0585605, r0) getsockopt$auto_SO_PEERCRED(r0, 0x1, 0x11, &(0x7f0000000000)='/&\x00', &(0x7f0000000040)=0x5e) 55.439126559s ago: executing program 1 (id=2282): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x5393, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0xa, 0x2, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000013c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r3, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000240)={0x28, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r3}, @NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r6}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x10) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xfdef}, 0x1, 0x0, 0x6, 0xdf0}, 0xb}, 0x200, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/gspca_m5602/parameters/dump_sensor\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000001700)=""/4082, 0xff2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) 54.94037021s ago: executing program 2 (id=2284): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x2b, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r0, 0x2, &(0x7f0000000200)="e1c5f89052689592721dc645816f2502709e7281d01095a612b34bc2c03633c1bd5c825ad91ec679e5e098d57765d16a143b9f560e8e0f90bf81d8a5ade69b807a40bc605805b41729109e6d40fffc570c006d9eeb8119caf0a24f51963ec182874d46b8", 0x1) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) socket(0x12, 0x6, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0xffffffff80000001) mmap$auto(0x0, 0x400004, 0xdf, 0x11, 0xffffffffffffffff, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) write$auto(0xffffffffffffffff, &(0x7f0000000180)='1\x00\\\xa0\x04|\x9d$\xdcM)\xb9\xdd\xd6', 0x5) syz_genetlink_get_family_id$auto_nl80211(0x0, r3) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) mmap$auto(0x2000, 0x400003, 0x8, 0x9b72, r1, 0x8000) mbind$auto(0x0, 0x7, 0x4, 0x0, 0x6, 0x2) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000400)={0x60, 0x10, 0xfffffffffffffff6, 0x7ffffffff001, 0xfffffffffffffffe, 0x5, 0x8, 0xbff, 0x29, 0x2c, 0x3, 0x2}) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D2\x00', 0x8001, 0x0) msgctl$auto(0x2, 0x1, 0x0) keyctl$auto(0x1f, 0x1, 0x6, 0x0, 0x403) mlockall$auto(0x800000000000005) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r0) sendmsg$auto_WG_CMD_SET_DEVICE(r4, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f00000000c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100f1f1f233eee54be1afe0477828bd7000eadd2b156737fe0c280051cb66e90e5ccb31bbde52c0747f0880a835b706d6890000140002007767"], 0x34}, 0x1, 0x0, 0x0, 0x8041}, 0xc0) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, &(0x7f0000000100)={&(0x7f00000003c0)="4a67d23edb317545d9bc87452a055975210d2de48606", 0x49}, 0x5, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) 54.184564954s ago: executing program 2 (id=2286): bind$auto(0xffffffffffffffff, 0x0, 0x6a) r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x50, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x7}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x40}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x2000000}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048081}, 0x0) write$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffffff, &(0x7f0000000040), 0x0) madvise$auto_MADV_GUARD_INSTALL(0x8, 0xc3, 0x66) mlockall$auto(0x3) mlockall$auto(0x5) r2 = socket(0x11, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) r5 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x1, &(0x7f0000000000)=@link_create={@prog_fd=r2, @target_ifindex=r3, 0x0, 0x3f, @netfilter={0xffffffff, 0x1, 0x3, 0x6}}, 0x7) r7 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/netdevsim/netdevsim1/take_snapshot\x00', 0x200000, 0x0) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r6, &(0x7f0000003340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003300)={&(0x7f0000003380)={0x311c, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NODE={0x3108, 0x6, 0x0, 0x1, [@typed={0x8, 0xb9, 0x0, 0x0, @pid}, @typed={0x8, 0xe1, 0x0, 0x0, @u32=0xa}, @nested={0xc, 0x10a, 0x0, 0x1, [@typed={0x8, 0x100, 0x0, 0x0, @pid}]}, @nested={0x10a8, 0x51, 0x0, 0x1, [@nested={0x4, 0x6}, @generic="e7d31e4158530f1774f87f8e9671cec78d", @typed={0x5f, 0x125, 0x0, 0x0, @binary="f15838239c8a05b7594c55608905afcf9319f39c88f7cb5674b6d20d981bf133513957b4b31519c5819afa17918a74d64d1d8b846f870dfe61ac688488082ee9385d479400f506b702b9487bc11aff99674716112a7631ac17ec3f"}, @nested={0x4, 0x10d}, @generic="6be5e021a21644a2667bca7249e3df88f6a65459214ad415a38154a00250d0b3a69e456184eee6776547b4e39c3357a374994fce52305506198efc676239a7bfb137e0", @typed={0x8, 0xa3, 0x0, 0x0, @uid}, @generic="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"]}, @typed={0xb, 0x6d, 0x0, 0x0, @str='netdev\x00'}, @typed={0x8, 0x14c, 0x0, 0x0, @fd=r7}, @nested={0x202a, 0x166, 0x0, 0x1, [@generic="b5a18f371f764d83a318cce2fc010e27805f91885ddf8943164278b7dec8", @generic="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", @typed={0x4, 0x101}, @nested={0x4, 0xe7}, @generic="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"]}]}]}, 0x311c}, 0x1, 0x0, 0x0, 0x40000d0}, 0x84) sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000000), 0x5aa, &(0x7f00000000c0)={&(0x7f0000000040)='f', 0x49}, 0x1, &(0x7f0000000200), 0x5, 0x3}, 0x4}, 0x2, 0x100) write$auto(0x3, 0x0, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r8 = socket(0x2, 0x1, 0x106) bind$auto(r8, 0x0, 0x6a) close_range$auto(0xffffffffffffffff, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvmmsg$auto(0x3, 0x0, 0x10000, 0x4ff, 0x0) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x2021000, 0x66) mmap$auto(0x0, 0x4007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) 54.126082711s ago: executing program 1 (id=2287): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/cgroup\x00', 0x0, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x9}, 0x7) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/video4linux/vbi26/dev\x00', 0x5bb600, 0x0) mmap$auto(0x0, 0x2020009, 0x4, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x23, 0x80805, 0x0) getsockopt$auto(r1, 0x40000000113, 0x9, 0xfffffffffffffffc, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty19\x00', 0x800, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/user\x00') syz_open_procfs$namespace(0x0, &(0x7f00000000c0)) mmap$auto(0x80000000000000, 0x1, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r3 = socket(0xa, 0x3, 0x3b) connect$auto(r2, &(0x7f0000000040)=@generic={0x8, "00010100"}, 0x5c) syz_genetlink_get_family_id$auto_batadv(0x0, r3) r4 = openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/options/fields\x00', 0x80000, 0x0) io_uring_register$auto_IORING_UNREGISTER_EVENTFD(r4, 0x5, &(0x7f0000000380)="6c02239be74d78608cb24ce845ace355977c8ae906837b094c095286297e23bdfb10c97de3f4ae41192a03005dba261fc470357f9d7d96c73164dd2adaaf1e46b084d1836951f2a47b20c5da5910886367b19f238fdc2dec5386066df3a3fcc98786c73f0e99029d938bfcbdbb03cd8be3dee24b92e226faab5dad6f029bbfc2acc72d8b50be540975603b25744318320a4e703172b90e613b2de186616af01850ae7d874e41768efef830517a7d7d7f0c3b514f35ebbe9b1e0bab2ddcd8022ef9dc0a385657b47b452161484a9c47309078cc7861505e6d838286bc8775bddb", 0x400) statmount$auto(0x0, &(0x7f0000000180)={0x3, 0x1, 0x9, 0x3, 0x1a, 0x940, 0x1ffe0, 0x7f, 0x6, 0x2, 0x7f, 0x5, 0xfff, 0x7, 0xb0, 0x9, 0x5, 0x3, 0x5, 0x7, 0x20, 0x0, 0x0, 0x202, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, [0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x478, 0x0, 0x5, 0xff, 0x0, 0x1, 0x3, 0x80000001, 0xfffffffffffffe01, 0x1, 0x0, 0x7ffd, 0x0, 0x6, 0xffffffffffffffff, 0x0, 0xb, 0x0, 0x0, 0x100000000400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xff]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8044}, 0x44004) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 53.030457201s ago: executing program 1 (id=2292): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r0 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$auto_BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000080)=[{0x4, 0x1, 0x2}, {0x7fffffff, 0x9, 0x9}, {0x5}]) mmap$auto(0x1fffffffe000, 0x400005, 0x0, 0x3132, 0x9, 0x0) time$auto(&(0x7f0000000000)=0x101) openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/timestamp_mode\x00', 0x200, 0x0) setrlimit$auto(0x8, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="ddffff", @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf2503000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d4) sendmsg$auto_OVS_DP_CMD_DEL(0xffffffffffffffff, 0x0, 0x4001090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x8) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x8, 0x80001ff, 0x7c9, 0x8, 0x7fffffffffffffff, 0x1ffe0, 0x8, 0x3, 0x2000000c, 0x9, 0x3, 0x4, 0xffffffffffffffff, 0x68d, 0x9, 0x8000, 0x7fffffff, 0x80, 0x3, 0xb5d, 0xa, 0x22000, 0x200, 0xffffff28, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x24, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff7fffffffffffe, 0xffffffffffffffff, 0x6, 0xfffffffffffffff5, 0x0, 0x0, 0x80000, 0x20000000000002, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x40090, 0x6, 0xbdcc, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x20000044}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r2 = socket(0xa, 0x1, 0x84) r3 = open(0x0, 0x22240, 0x154) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_prog_fd=r2}, 0xa3) read$auto_kmsg_fops_printk(r3, &(0x7f0000000380)=""/127, 0x7f) socket(0xa, 0x801, 0x84) readv$auto(0x3, 0x0, 0x9) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYBLOB='V'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) io_uring_setup$auto(0x59, 0x0) 52.597928673s ago: executing program 1 (id=2293): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x1, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x40004) read$auto(r0, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x140082, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7f, 0x10}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8000) sysinfo$auto(0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create$auto(0x4) ioctl$auto(0x3, 0xffffffff40088a01, 0x1) r3 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r3, 0x29, 0x10, 0x0, 0x0) mmap$auto(0x1, 0x9eb, 0xdf, 0x40000009b7d, 0xffffffffffffffff, 0x2) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="00a981c9c4c1000700", @ANYRESOCT=r4, @ANYBLOB="20002cbd7000fbdbdf250200000008000300800040000800030009"], 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x400d0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x200104, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x141000, 0x0) fsconfig$auto(0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0) futex$auto(0x0, 0x85, 0x38, 0x0, 0x0, 0x80800005) 52.222504563s ago: executing program 1 (id=2295): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) write$auto(r1, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x100003ff, 0x9, 0x5, 0x10, 0x80000001, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x6, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x8, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x104000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x200000000002, 0x0, 0x10, 0xfffffffffffffffe, 0x3563, 0x7fffffff, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) r5 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r5, &(0x7f00000000c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000003c0)='\a', 0x401}, 0x5, 0x0, 0x0, 0xfffffffe}, 0x5}, 0x2, 0x100) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x2000000000000000, 0x1, 0x4}}, 0x92) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 44.671358305s ago: executing program 4 (id=2320): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x2001}, 0x4040044) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f00000000c0)={{0x0, 0x5, 0x0, 0x3, 0x0, 0x200002, 0x13}, 0x6}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x89fb, 0x24) 43.837507221s ago: executing program 4 (id=2322): sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c4}, 0x440c5) unshare$auto(0x40000080) rseq$auto(&(0x7f0000000280)={0xe, 0x403, 0x7, 0x80b, 0x10001, 0x2}, 0x20, 0x0, 0x8000006) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x8000, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/user\x00') socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002bbd70001fdcdf250100000008000900", @ANYRES32=r2, @ANYBLOB="0800050006000000110001006f76735f00000000000000000000000308000200", @ANYRES32=0x0, @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/oom_adj\x00', 0x980, 0x0) read$auto(r3, 0x0, 0x4) unshare$auto(0x6c000000) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) setfsuid$auto(0x0) r4 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fcntl$auto(r4, 0x400, 0x1) truncate$auto(&(0x7f0000000080)='./file0\x00', 0x7f) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x10802, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x8a801, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/bonding/lp_interval\x00', 0x1e2142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_clone3(0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/scsi\x00', 0x40d81, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ptyw5/power/runtime_active_time\x00', 0x80200, 0x0) read$auto(r5, 0x0, 0x20) 43.409812422s ago: executing program 4 (id=2324): set_mempolicy$auto(0x3c, &(0x7f0000000080)=0x2, 0x0) mmap$auto(0x0, 0x4, 0x1ff, 0x40eb1, 0x401, 0x300000000001) bind$auto(0xffffffffffffffff, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x3, 0x4001}, 0x4006b) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000240), 0x2000, 0x0) r0 = ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r1 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0xc0042, 0x0) read$auto(r1, 0x0, 0x3) mmap$auto(0x0, 0x30009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/system/memory/memory0/valid_zones\x00', 0x20200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000280)=""/57, 0x39) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x103e81, 0x0) ioctl$auto_TCSBRKP2(r3, 0x5425, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) semctl$auto(0xa, 0x2, 0x13, 0xde) r4 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) ioctl$auto_I2C_SMBUS(r4, 0x720, &(0x7f0000000080)) recvmmsg$auto(0x3, 0x0, 0x80000401, 0x4000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x5) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) listen$auto(0x3, 0x81) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x16, 0x8}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0x3ff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kpagecount\x00', 0x0, 0x0) 43.073525647s ago: executing program 4 (id=2326): openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/tracing/dynamic_events\x00', 0x201, 0x0) r0 = io_uring_setup$auto(0xc, 0x0) r1 = socket$nl_generic(0x11, 0x3, 0x10) bind$auto(r1, &(0x7f0000000080)=@generic={0x11, "00030f00"}, 0x80) write$auto(r1, &(0x7f0000000100)='-&\x00', 0x36) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram6/queue/max_hw_sectors_kb\x00', 0x80000, 0x0) sendmmsg$auto(r0, &(0x7f0000000380)={{0x0, 0x0, &(0x7f0000000240)={0x0, 0x1}, 0x8, 0x0}, 0xfffffffe}, 0xe, 0x87e2) r3 = syz_clone3(0x0, 0x0) mmap$auto(0x0, 0x7, 0xdf, 0x400000000000001a, 0xffffffffffffffff, 0x8000) read$auto(r2, 0x0, 0x20) r4 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x80001, 0x0) writev$auto(r4, &(0x7f0000000340)={0x0, 0x2}, 0x7) recvfrom$auto(r0, &(0x7f0000000040)="a3584616", 0xffffffffffffa75e, 0x8, &(0x7f0000000080)=@in={0x2, 0x4e23, @private=0xa010101}, &(0x7f00000000c0)=0x6) mmap$auto(0x59, 0x2, 0x10001, 0x411, r0, 0x8) r5 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/3/spurious\x00', 0x42c41, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001d80)='/sys/devices/virtual/sound/ctl-led/speaker/card0/attach\x00', 0x1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000000)='16', 0x2) capget$auto(&(0x7f0000000140)={0xff, r3}, &(0x7f0000000180)={0x8, 0x8, 0x80000000}) pread64$auto(r5, 0x0, 0xf42f, 0x7f) mmap$auto(0x0, 0x400007, 0x0, 0x9b72, 0xffffffffffffffff, 0x7) r7 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2c00, 0x0) ioctl$auto_EVIOCSMASK(r7, 0x40104593, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r8 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r8, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) 43.003909892s ago: executing program 4 (id=2328): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x123801, 0x0) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000002880), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_INFO(r3, &(0x7f0000002a00)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000028c0)=ANY=[@ANYBLOB="1400003e", @ANYRES16=r4, @ANYBLOB="000829bd7000fcdbdf250f000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) sendmsg$auto_IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000800)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000340)={0x3c4, r4, 0xf5f78a544bf8dd00, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@typed={0x4, 0x2f}, @typed={0xc, 0x6, 0x0, 0x0, @u64=0x100}]}, @IPVS_CMD_ATTR_SERVICE={0x32f, 0x1, 0x0, 0x1, [@nested={0x10, 0x88, 0x0, 0x1, [@typed={0x8, 0xca, 0x0, 0x0, @u32=0x1}, @typed={0x4, 0x96}]}, @nested={0x115, 0x14f, 0x0, 0x1, [@generic="f0a94303de21379d34d16f1c7a9a800ed0aafd521e890981bc3b088106294ec1bae2d0b576eba4a27e9e71284cdba40479", @generic="809a12e0648ed847e0e74968375dccef78863661e43019afe576318469d0a44588494a7014db93e061f3f88fb02474d5e984e019ee0e23c2a4bacfdbc150600e0f24206f5acf5d267977f3592a17f1f2a558fc", @nested={0x4, 0x51}, @generic="2f42da09433d5aae2883b57dc99af4e552f33c2ec7c9240cdd3a431ed55f4d6eef54e5252acb515ea7cafc7872df8879a7c5b9ef458d2e6aea6d12faa3a6483489da54b2ae3cf16305f49aa6ebae02d4548fa4a31273db42095b9a2e032e5181a851811c6201bac36cc69caf5ea6e7d6b00ae26e488edfad5ac3e8ac8dba62299f03d45ac93744abcd"]}, @generic="ec0655ac", @generic="77b2a2f818a4abe820083f0c06f5bb6bcf8b35060727d6316f67a8c6af86e52dcc20c0b6a8ce1523af52029ae1da1314339f8c76fbc2f2e00721ff22cbaa8166f23d83785eb2870c015a23f6cd6bf0010bff2417c42f7ee91cadf136b3c6a75beffcc6a86f1e11aed0192e7fb98f1cc1de522c6735e69b8c2bc680094eb34f16190531791b829e68643b3cd7f190e808da0ab1921fae59d767af4e543acb2d6383705337555f930a1d9bb78db157f9e3d587982615367cce2a751268febf9831587825cae8fbb63a8148c0ddf89947d642f92859db30be2d3fbdd5852304296eebacf4c1df83ce62a6902813107b07", @nested={0x10e, 0x43, 0x0, 0x1, [@typed={0x16, 0x7, 0x0, 0x0, @str='/dev/snd/midiC2D0\x00'}, @typed={0x3e, 0x168, 0x0, 0x0, @str='/sys/kernel/tracing/events/vmalloc/alloc_vmap_area/inject\x00'}, @generic="46fd83b45e6d51d19c57d5519594a89637785af7229bc76c20b036e7987758268d733a3816ab8331ae3a0c85cb6def3326ab08a387e689e7f966d239189557c27746c7984b0a622957dac91b3d09383d9c470316175580a3d0e41011a67bdd9d489f65e19dbf3571c4c85eeb9fb740d1b30fcb79638ee3f77af82a09cca6133e4ec01df1df9f0bcb7ec4806de0febae677d36ec3959b8a89fce746907f7684fdc3f3b3c10b9ad49160e03acfcdf8d2575ab7"]}]}, @IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, 0x0, 0x1, [@typed={0x8, 0x163, 0x0, 0x0, @uid=r5}, @nested={0x60, 0x161, 0x0, 0x1, [@typed={0x4, 0x84}, @typed={0x43, 0xd5, 0x0, 0x0, @binary="1005baf4e160379369373074dbcf88911fbc7b1a9525444115797ff0d56cc2e036f23afd4f1650fdf53ac98bc62539b85337d38c88754dd4d85b1b374f53eb"}, @typed={0x4, 0xa9}, @nested={0x4, 0x160}, @nested={0x4, 0xd3}, @typed={0x7, 0x75, 0x0, 0x0, @str='*\'\x00'}]}]}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x4051}, 0x810) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/pid\x00') sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000a00)={&(0x7f00000004c0)={0x520, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_COORDINATOR={0x175, 0x1e, 0x0, 0x1, [@typed={0x8, 0x37, 0x0, 0x0, @uid=r5}, @typed={0xce, 0xf8, 0x0, 0x0, @binary="8bc5c2da50c56810d21a5dfe79127642c05182ea9662a43b95f075e4a039a35266bfd38744ddc04cd6560ed1692648cdbfd8685402bb06f2d92e6bfbb11da02799f4b9d33a6d8e8cdee488ec66d706f08f54a9ec5b70157308b74d4c58058e4231163bcc68425745dc9e206bb7e5fa4365e2725247f37f8d1c903ad98d294921828931f533d07a203b0924bf1969c2e89f0d734d26f8b9d2d6898e7cb5ef84ba4ab3e0a79c1438f4e477c35959b928b1ade3922b47e8a48bbe9bbc2b95930bf223c7397cfe31d7f2d769"}, @typed={0x8, 0x48, 0x0, 0x0, @u32=0x9}, @generic="64862a3d3dff9a514d04f9e9f51e08c3a01376747de5cdf3b965d04210c43e492951a45b65c39ba78cfc8829ef", @nested={0x61, 0x77, 0x0, 0x1, [@typed={0xc, 0x69, 0x0, 0x0, @u64=0xaf}, @typed={0x8, 0x27, 0x0, 0x0, @fd=r0}, @generic="c6f4c9eb80d760fc335ae7029ea2a1291f1eb9b39f3a3a166b1bafbfa5bc8f09387b8045f3d106f5098ceb9adcd9f1734eef796427", @typed={0x14, 0x28, 0x0, 0x0, @ipv6=@mcast1}]}]}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0xc}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r7}, @NL802154_ATTR_SEC_LEVEL={0x372, 0x2d, 0x0, 0x1, [@generic="02a7e15666d731df51d0af0e6377d1f26ec0feca29601be1734a5d2f5a4a9d3845119dc0d4168985333362b2df73235284b9bcb7b6bbabb767f09a0d2c278dee6f70ecfa0b15b232ae43a11f1dbe3b65fef308fb152eb80b64b1ed51890724308fcc51e31faf16bfb3e66164c4edd03ca6a0efc18eca9e87bfea5474fe84198996b526fc20886bef7a189e1406c6ef637777bb20983d984296c3152824fa829426c977dfea8055f21456a243855e4eb854685483d0b2d6fe20d2fb42f069c5ffd9456c7427b58eaa6736f493bb35", @typed={0x8, 0xa8, 0x0, 0x0, @u32=0xfffffffd}, @nested={0xd8, 0x11a, 0x0, 0x1, [@nested={0x4, 0x7c}, @generic="a63266c8ca093ff3322f7f4fdbe01ab55648e22f7c0b5b77ee02516cd9e0e82d9d28b59ca5a8e72d3b2941216f3db902df0142299daf80aa97589140613219bf", @generic="fc01f5ac837aec8d31d6f7b4dc260a04d015c69a62bd97e4b3deeb3cc02af891a3d708ee46a58f1d340a1230cfbd0aa67a3ab407c3ba143987aa6eb17cde7bf56fb7109875229e209980a207721e43524bb60778998358f3049928a4cdd5ec49416b4c1aa0b5775672e542912c8be11decc50ef808a3ae45d2a4e62634241be18daeb0f214b92cef2a5cae5f", @nested={0x4, 0x123}]}, @generic="75788b9a7a3ea6abb8b9ff3738559fdf562df379d5f7171755ff7b0eefcef658e31261ad8ef2e6b9b80c93bf1ff09b", @generic="5ad2a002e1755ba3f1d43bdfe51996369c3bb4367214e86388df2b5d4d2ed7a7014fc442809c58eb6b9efcbaaae17d92291e08af5aed9e6ce0d7c85236dd9a083463fc483b54a1953c3b8f67046096e74f9680d7e3c8424313fdbce4be3d0c70385b0874c977af4570b97e4fec857a2ced65f01772fa19607ae950102fa1e4df915b68920a955131d954dc443809f70d2c6f79d9a576e9857e6408b7ccd6e76ef509077cd14a0ea9b18d842af1a74319dd6b2510f59dc55a86cdf4e964990c9688dfce5dea5692047bbabac8e46e497c847b3d919bf4fb3a48b1d4a6643d48148c92606aa21e2374da9775d09835a26b561774578c3de1cdde", @typed={0xf, 0xbd, 0x0, 0x0, @binary="dcab3a220c906471f6eebb"}, @typed={0x8, 0x65, 0x0, 0x0, @uid=0xee00}, @generic="468eea080bb1c6f79a3f3660685a09c939a82e160c865b5f8ea8f356aa49bc088e0d807ebfe92e48d7937684cd6efd2d06882f87d0148b177082bab7deca7f128b335bb744957fd79ccdebda3525d500b15cf7b3d8869229bb09ee657c6f1703a0981d9272f2bb4a8329eeaea56b8e5c5d", @generic="3ebe0b2bd4f914300112fc85407407"]}]}, 0x520}, 0x1, 0x0, 0x0, 0x20040011}, 0x800) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000380)={{@raw=0x7000, 0xd252, 0x9, 0x2, "790eaa00ffff8eac2cdafc1f64010043eeb0b053030001ffff000e00"}, 0x3, 0x2000963, 0x2, @raw=0x404, @reserved="b20200a3077300f2c167afeb0a9902da3d58908ea1a8475fbd3a75d4690e48fc922df5fdffffffffffffffdbb68aec3f51e29bc18b59d74badbdcc1ba97a2004117190c9a050186fa73f5a197762a94460d134b357b8b4d0caaf1ca142917779cef3673ee57f2f5fde573fa4d4328a8ea0be7eccec0adb4f64290e53d4faa89d", "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1cb04b435b3fcd0c7c61c329794e5311121c760cb9611c78e6947a99806bcc100"}) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) setsockopt$auto_SO_PROTOCOL(0xffffffffffffffff, 0xc, 0x26, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x9) statfs$auto(0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x4040, 0x0) mmap$auto(0x0, 0x400008, 0x60, 0x9b72, 0x2, 0xd732) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) r8 = getpid() process_vm_readv$auto(r8, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={0x0, 0x40000000001243}, 0xa, 0x0) 42.94055237s ago: executing program 4 (id=2329): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) write$auto(r1, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x100003ff, 0x9, 0x5, 0x10, 0x80000001, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x6, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x8, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x104000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x200000000002, 0x0, 0x10, 0xfffffffffffffffe, 0x3563, 0x7fffffff, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) r5 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r5, &(0x7f00000000c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000003c0)='\a', 0x401}, 0x5, 0x0, 0x0, 0xfffffffe}, 0x5}, 0x2, 0x100) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x2000000000000000, 0x1, 0x4}}, 0x92) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 37.189566445s ago: executing program 33 (id=2295): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) write$auto(r1, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x100003ff, 0x9, 0x5, 0x10, 0x80000001, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x6, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x8, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x104000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x200000000002, 0x0, 0x10, 0xfffffffffffffffe, 0x3563, 0x7fffffff, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) r5 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r5, &(0x7f00000000c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000003c0)='\a', 0x401}, 0x5, 0x0, 0x0, 0xfffffffe}, 0x5}, 0x2, 0x100) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x2000000000000000, 0x1, 0x4}}, 0x92) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 27.908309523s ago: executing program 34 (id=2329): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) write$auto(r1, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x100003ff, 0x9, 0x5, 0x10, 0x80000001, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x6, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x8, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x104000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x200000000002, 0x0, 0x10, 0xfffffffffffffffe, 0x3563, 0x7fffffff, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) r5 = socket(0x11, 0x3, 0x6) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(r5, &(0x7f00000000c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000003c0)='\a', 0x401}, 0x5, 0x0, 0x0, 0xfffffffe}, 0x5}, 0x2, 0x100) close_range$auto(0x0, 0x5, 0x0) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x2000000000000000, 0x1, 0x4}}, 0x92) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 18.278336557s ago: executing program 3 (id=2379): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x80, 0x0) poll$auto(0x0, 0x1, 0x2) write$auto(0x4, 0x0, 0x100082) mmap$auto(0x0, 0x6, 0x4000002, 0x40eb2, 0xffffffffffffffff, 0x308000000000) mmap$auto(0x0, 0x2020009, 0xffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r0, 0x29, 0x1d, 0x0, 0x1ff) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0201, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0x9) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer2\x00', 0x20100, 0x0) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/tracing/trace_options\x00', 0x2, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) pread64$auto(r2, 0x0, 0xc, 0xffff) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/tcp\x00', 0x40, 0x0) pread64$auto(r3, 0x0, 0x10001, 0x830) setresuid$auto(0xee01, 0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram9\x00', 0xe6e43, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) getpgid$auto(0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) 18.080871095s ago: executing program 3 (id=2380): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_ETHTOOL_MSG_MM_SET(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x24000055}, 0x200408c1) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x804) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/1u\x00', 0x10000, 0x0) ioctl$auto(0xffffffffffffffff, 0x800064bd, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$auto_SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) fallocate$auto(0xffffffffffffffff, 0x0, 0x9, 0x4cbd5d) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x8, 0x4, 0x8000, 0x16, 0x2000000001001, 0xfffffffffffffffd, 0xf, 0x9, 0x59f, 0x1, 0x5, 0x2e3, 0x1, 0x0, 0x2000000000000001, 0xc]}, 0x0, 0x0) r2 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statx$auto(r2, 0x0, 0x401006, 0x4015, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x2) socket(0xa, 0x2, 0x0) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x8a101, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_INFO(r3, 0xc1105511, &(0x7f0000000040)={{@raw=0x6, 0x7, 0x400005, 0x4, "3c70d528a4a70ef32de672c630142efc2c9963564ed0a722ed226e7254dd431c9712cc3b67a2203555dc9710"}, 0x7, 0x6, 0x4, @raw=0x3, @enumerated={0x2, 0xd, "7e84e6c428a94d86f1da07124ae3fe2e694832d7218694764444d9dfa511d5246626da11e26b6b267e1a2cb6e1d41331d12d9e78470cd1d0b56d0cd2145340fc", 0x4040000000000, 0x7cd04bb4}, "71bc01bc5686085ca15f095a841b25d66c148f52a1ad31a489e59be291336905d64a8f7dbd9775e74d1ee3d57ca9b9ac2d9c4c00fb687b7327a575257b3c0deb"}) socket(0xa, 0x801, 0x106) connect$auto(0x3, 0x0, 0x55) mmap$auto(0xffffffffffffffda, 0x3000000000000, 0x3, 0x2000000eb1, 0xffffffffffffffff, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x1, 0x0, 0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) 17.005284416s ago: executing program 3 (id=2381): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x4ee02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x0) openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x9, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x2000c001}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x40, 0x0) open(0x0, 0x62240, 0x170) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) socket(0x1e, 0x4, 0x0) r0 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/hid_steam/parameters/lizard_mode\x00', 0xc0481, 0x0) open_tree$auto(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x1) 16.881453129s ago: executing program 3 (id=2382): mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = open(&(0x7f0000000100)='.\x00', 0x595002, 0x408) r1 = socket(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_STATUS(r2, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0456ed"], 0x14}, 0x1, 0x0, 0x0, 0x4854}, 0x40) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xe9ef) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r2) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r2) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xa8, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_RSS_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff92a6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x9}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x401}, @ETHTOOL_A_RSS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x2}, @ETHTOOL_A_RSS_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x40000}, 0x20040801) write$auto(r0, 0x0, 0xfffffdf1) utimes$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x3}) prctl$auto_PR_GET_UNALIGN(0x5, 0x29, 0x8000, 0x3, 0x7fff) socket(0xa, 0x801, 0x84) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0xfffffffd, 0x40, 0x942, 0x1fee1, 0x3, 0x6, 0xfffffffffffffffe, 0x1ff, 0x5, 0x6, 0x7, 0xb0, 0x9, 0x5, 0x2000003, 0x7, 0x4, 0x10, 0xb65, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffd, 0x800, 0xf7d4, 0x0, [0x4, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x0, 0x2d24, 0x9, 0x0, 0x101, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffffffff, 0x9, 0x0, 0x0, 0x10, 0x4, 0x0, 0x6, 0x0, 0x0, 0x8, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x5]}, 0x17e, 0x82) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) prctl$auto(0x35, 0x0, 0x8, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x2000000, &(0x7f0000000080)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) r5 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/make-it-fail\x00', 0x40002, 0x0) setreuid$auto(0x4, 0x8) write$auto_proc_fault_inject_operations_base(r5, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x169000, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) mprotect$auto(0x0, 0x8000000000000001, 0x8) 16.075168836s ago: executing program 3 (id=2383): mmap$auto(0x0, 0xe983, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto_BLKTRACESETUP2(0xffffffffffffffff, 0xc0481273, &(0x7f0000000300)={"3cbaef38c2291a07e381cefc27c8884a0095257b09753199fe0c58e183b8a795", 0x7f, 0x5, 0x3ff, 0x1, 0x40}) sigaltstack$auto(0x0, &(0x7f00000003c0)={&(0x7f0000000180)="69cc8d0de6b41511259c289f8eba5cd9efe7b46018e5bfce1b542499858929869392667f4a67831f37b948cef0c793b831f019cb998179b02af53526d479eaa474255b4bad7cce70b58305c3c789dddea82c3a78568db57899f6372003e4f0fe7c68c3e6b59956bfca", 0x9, 0x8}) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x5}, 0x8) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs\x00\x00', 0x200, &(0x7f00000001c0)) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000200) socket(0x11, 0x3, 0x300) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r0, 0x80605414, &(0x7f0000000100)={0x6, 0x3, 0x200, 0xba44, 0x2, 0xb, "e00026e8fdffdbcd2c02d3c293faa80c2f5336d79fc5b8202cb37f6b6d22c42432352deb58e78afdbae70400"}) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) syz_clone3(0x0, 0x0) r1 = prctl$auto(0x23, 0x20000000000000b, 0x7fffffffefff, 0x0, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b39", 0xfdef) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x2480, 0x0) r3 = openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x2641, 0x0) write$auto(r3, &(0x7f00000005c0)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85\x00 /zm\x7f\x8fg,p81\xb6\xbb\xd8D\xde\x0eR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~\b\x00\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xcf\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xf6n\x82\xd4\xd6\xcc\xc19\x95+\x94\xb0f\xbb\x85\xf9\x98\xf8\x85Z\x19\xc0\x8a:(\xf6\x7fR^&cU\xfc\xae\x87\xf2\\\x02\xd3\xe9\x9f\xeb&l\x86D\x98\xa0\xc0 \xcec\xa3\x13\xf7\x02\a\x9d\x9d\x8e\x81\x8eu\xc73\x9f\x02\xe7 \x03\x9c\xab\xbe\x85-\a\"H\x87\x12A\xdc\xedF\xa3t\x91\x9f!\x8c\xd1A\xe7\x95\xa7\"\x8c\xb5\x1b\x80\x12u\x90AI\xc2\xbao3Ob\x94\xfa\'\x8d\x0f\xc6&\x94C\xa6|~\xebn-\x17\x1e+-\xdc\xe6f0cm\xf2\t\xb4:\x93g}/%\xc2\xe5\x8c\xd8\xc1+T\xe9@ys\xa8\xf0\xf3\xd3\x1e\x93\xe5\xbe\xb5\xee\xbf\xb2\xbb\x1dP\xbb\xa2$\xd5`\x01\xf0G\xa8\xf2`\x9e\x98\xa6+xX6M>\x8fq\xab\xaa\xe4\x87\xa1\xaa\x1d\xee\xb1[\x9e\x03\xdd\x11\x1dTg\x1b\x91\x86\x05\xf6\xa5 1\xbeSL\x19\x80\x9f.\n\xa4\xa80\xd8\xeb\x86\xf1s\xea\x17\xb4\x1a@\xa3\x15\xd9\x8fE\xc5\x00\x00\x00\x00', 0x1) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sr0\x00', 0x8ee46, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r4, 0x28000) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) getpid() mount$auto(0x0, 0x0, 0x0, 0xf, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb9, 0xf, 0x7, 0x400004, 0xffffffffffffffff, 0xe7b, "00000000000000e3ffffffffffffff00", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(r1, 0x4, 0x5c8d) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x0) 15.207917386s ago: executing program 3 (id=2384): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) write$auto(r1, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x100003ff, 0x9, 0x5, 0x10, 0x80000001, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x6, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x8, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x104000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x200000000002, 0x0, 0x10, 0xfffffffffffffffe, 0x3563, 0x7fffffff, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000003c0)='\a', 0x401}, 0x5, 0x0, 0x0, 0xfffffffe}, 0x5}, 0x2, 0x100) close_range$auto(0x0, 0x5, 0x0) r5 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x2000000000000000, 0x1, 0x4}}, 0x92) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) 0s ago: executing program 35 (id=2384): socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) write$auto(r1, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x1) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x100003ff, 0x9, 0x5, 0x10, 0x80000001, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x6, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x8, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x104000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x200000000002, 0x0, 0x10, 0xfffffffffffffffe, 0x3563, 0x7fffffff, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x47, 0x4a}) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000200)={&(0x7f00000003c0)='\a', 0x401}, 0x5, 0x0, 0x0, 0xfffffffe}, 0x5}, 0x2, 0x100) close_range$auto(0x0, 0x5, 0x0) r5 = bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x7, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r5, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x2000000000000000, 0x1, 0x4}}, 0x92) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r6 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) kernel console output (not intermixed with test programs): a tx timeout [ 481.676747][T13734] openvswitch: ovs_: Dropping previously announced user features [ 482.271688][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 482.474990][T13752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1562'. [ 482.898754][T13690] Process accounting resumed [ 483.634064][T13768] bridge0: port 3(vlan1) entered blocking state [ 483.640902][T13768] bridge0: port 3(vlan1) entered disabled state [ 483.647472][T13768] vlan1: entered allmulticast mode [ 483.653303][T13768] veth0_vlan: entered allmulticast mode [ 483.665659][T13768] vlan1: entered promiscuous mode [ 483.688168][T13768] bridge0: port 3(vlan1) entered blocking state [ 483.694652][T13768] bridge0: port 3(vlan1) entered forwarding state [ 483.844567][T13755] Process accounting paused [ 484.245824][T13785] binder: 13776:13785 ioctl c00c620f 200000000c40 returned -22 [ 484.722217][T13793] ima: policy update failed [ 484.731606][ T29] audit: type=1802 audit(2147483732.582:13): pid=13793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1568" res=0 errno=0 [ 484.831432][T13797] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1568'. [ 486.239701][T13732] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 487.211332][T13839] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1577'. [ 487.370708][T13713] Bluetooth: hci4: unexpected event 0x1d length: 82 > 5 [ 487.561781][T13839] bond0: (slave bond_slave_0): Releasing backup interface [ 487.803528][T13854] binder: 13853:13854 ioctl c00c620f 200000000c40 returned -22 [ 488.085341][T13866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1581'. [ 488.316616][T13732] Bluetooth: hci0: command 0x0c1a tx timeout [ 488.348501][T13869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 488.399013][T13859] ima: policy update failed [ 488.415165][T13869] openvswitch: ovs_?: Dropping previously announced user features [ 488.425813][ T29] audit: type=1802 audit(2147483736.291:14): pid=13859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1580" res=0 errno=0 [ 488.839068][T13732] Bluetooth: hci0: unexpected event 0x10 length: 124 > 1 [ 489.115224][T13889] kexec: Could not allocate control_code_buffer [ 489.393320][T13898] blktrace: Concurrent blktraces are not allowed on sg0 [ 489.683907][T13818] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 490.386255][T13732] Bluetooth: hci0: command 0x0c1a tx timeout [ 490.408155][T13713] Bluetooth: hci0: hardware error 0x00 [ 491.473252][T13930] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1595'. [ 491.595057][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1597'. [ 491.605907][T13935] openvswitch: ovs_?: Dropping previously announced user features [ 491.901880][T13942] openvswitch: ovs_: Dropping previously announced user features [ 492.454786][T13713] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 492.552712][T13963] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1603'. [ 493.044497][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1608'. [ 493.225666][T13983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1610'. [ 493.267031][T13983] openvswitch: ovs_?: Dropping previously announced user features [ 494.075665][T14005] binder: 14000:14005 ioctl c00c620f 200000000c40 returned -22 [ 494.619055][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1618'. [ 495.217032][T14036] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1621: iget: checksum invalid [ 495.243194][T14036] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 495.283075][T14036] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1621: iget: checksum invalid [ 495.310275][T14036] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 495.328381][T14036] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1621: iget: checksum invalid [ 495.356858][T14036] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 495.385543][T14036] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.3.1621: iget: checksum invalid [ 495.417473][T14036] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 495.447585][T14036] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 495.458650][T14036] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 495.509034][T14034] FAULT_INJECTION: forcing a failure. [ 495.509034][T14034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.529262][T14034] CPU: 1 UID: 0 PID: 14034 Comm: syz.3.1621 Tainted: G L syzkaller #0 PREEMPT(full) [ 495.529303][T14034] Tainted: [L]=SOFTLOCKUP [ 495.529311][T14034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 495.529326][T14034] Call Trace: [ 495.529334][T14034] [ 495.529344][T14034] dump_stack_lvl+0x100/0x190 [ 495.529379][T14034] should_fail_ex.cold+0x5/0xa [ 495.529409][T14034] _copy_from_user+0x2e/0xd0 [ 495.529447][T14034] get_timespec64+0x8b/0x1b0 [ 495.529482][T14034] ? __pfx_get_timespec64+0x10/0x10 [ 495.529521][T14034] ? common_nsleep+0xa1/0xd0 [ 495.529561][T14034] __x64_sys_clock_nanosleep+0x1ce/0x480 [ 495.529599][T14034] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 495.529645][T14034] do_syscall_64+0x115/0x840 [ 495.529669][T14034] ? clear_bhb_loop+0x40/0x90 [ 495.529702][T14034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.529729][T14034] RIP: 0033:0x7ff2db35e68e [ 495.529751][T14034] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 495.529776][T14034] RSP: 002b:00007ffc9708f158 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 495.529802][T14034] RAX: ffffffffffffffda RBX: 000055558e211500 RCX: 00007ff2db35e68e [ 495.529820][T14034] RDX: 00007ffc9708f1b0 RSI: 0000000000000000 RDI: 0000000000000000 [ 495.529840][T14034] RBP: 00007ff2db627da0 R08: 0000000000000000 R09: 0000000000000000 [ 495.529856][T14034] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000794ec [ 495.529872][T14034] R13: 00007ff2db62618c R14: 0000000000079283 R15: 00007ff2db626180 [ 495.529908][T14034] [ 495.872458][T14049] block2mtd: parameter too long [ 495.880889][T14049] binder: 14048:14049 ioctl c00c620f 200000000c40 returned -22 [ 496.195596][T14063] openvswitch: ovs_: Dropping previously announced user features [ 496.422537][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1630'. [ 496.610689][T14077] FAULT_INJECTION: forcing a failure. [ 496.610689][T14077] name failslab, interval 1, probability 0, space 0, times 0 [ 496.623830][T14077] CPU: 1 UID: 0 PID: 14077 Comm: syz.2.1631 Tainted: G L syzkaller #0 PREEMPT(full) [ 496.623877][T14077] Tainted: [L]=SOFTLOCKUP [ 496.623887][T14077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 496.623905][T14077] Call Trace: [ 496.623915][T14077] [ 496.623925][T14077] dump_stack_lvl+0x100/0x190 [ 496.623965][T14077] should_fail_ex.cold+0x5/0xa [ 496.623997][T14077] should_failslab+0xc2/0x120 [ 496.624035][T14077] __kmalloc_noprof+0xfc/0x820 [ 496.624066][T14077] ? rcu_is_watching+0x12/0xc0 [ 496.624097][T14077] ? tomoyo_realpath_from_path+0xb6/0x690 [ 496.624143][T14077] tomoyo_realpath_from_path+0xb6/0x690 [ 496.624189][T14077] tomoyo_check_open_permission+0x2af/0x3c0 [ 496.624224][T14077] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 496.624256][T14077] ? __lock_acquire+0x49f/0x1a40 [ 496.624308][T14077] ? hook_file_open+0x24f/0x8f0 [ 496.624462][T14077] ? path_get+0x61/0x80 [ 496.624504][T14077] tomoyo_file_open+0x6b/0x90 [ 496.624548][T14077] security_file_open+0xb5/0x1e0 [ 496.624583][T14077] do_dentry_open+0x588/0x14d0 [ 496.624635][T14077] vfs_open+0x82/0x3f0 [ 496.624671][T14077] path_openat+0x2873/0x4280 [ 496.624729][T14077] ? __pfx_path_openat+0x10/0x10 [ 496.624782][T14077] do_file_open+0x20e/0x430 [ 496.624826][T14077] ? __pfx_do_file_open+0x10/0x10 [ 496.624896][T14077] ? alloc_fd+0x471/0x7a0 [ 496.624939][T14077] ? do_getname+0x191/0x390 [ 496.624970][T14077] do_sys_openat2+0x10f/0x1e0 [ 496.625001][T14077] ? __pfx_do_sys_openat2+0x10/0x10 [ 496.625047][T14077] __x64_sys_openat+0x12d/0x210 [ 496.625076][T14077] ? __pfx___x64_sys_openat+0x10/0x10 [ 496.625120][T14077] do_syscall_64+0x115/0x840 [ 496.625145][T14077] ? clear_bhb_loop+0x40/0x90 [ 496.625179][T14077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.625208][T14077] RIP: 0033:0x7f40ccf9de59 [ 496.625231][T14077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.625257][T14077] RSP: 002b:00007f40cdf03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 496.625285][T14077] RAX: ffffffffffffffda RBX: 00007f40cd225fa0 RCX: 00007f40ccf9de59 [ 496.625303][T14077] RDX: 0000000000000000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 496.625321][T14077] RBP: 00007f40cd033e6f R08: 0000000000000000 R09: 0000000000000000 [ 496.625337][T14077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 496.625353][T14077] R13: 00007f40cd226038 R14: 00007f40cd225fa0 R15: 00007ffd8423ac18 [ 496.625391][T14077] [ 496.626099][T14077] ERROR: Out of memory at tomoyo_realpath_from_path. [ 497.739979][T14103] binder: 14102:14103 ioctl c00c620f 200000000c40 returned -22 [ 498.014177][ T29] audit: type=1800 audit(2147483745.931:15): pid=14112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1637" name="members" dev="configfs" ino=50354 res=0 errno=0 [ 498.738180][T14114] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 499.212310][T14151] FAULT_INJECTION: forcing a failure. [ 499.212310][T14151] name failslab, interval 1, probability 0, space 0, times 0 [ 499.331676][T14151] CPU: 1 UID: 0 PID: 14151 Comm: syz.1.1644 Tainted: G L syzkaller #0 PREEMPT(full) [ 499.331720][T14151] Tainted: [L]=SOFTLOCKUP [ 499.331729][T14151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 499.331745][T14151] Call Trace: [ 499.331752][T14151] [ 499.331761][T14151] dump_stack_lvl+0x100/0x190 [ 499.331793][T14151] should_fail_ex.cold+0x5/0xa [ 499.331824][T14151] should_failslab+0xc2/0x120 [ 499.331859][T14151] kmem_cache_alloc_noprof+0x91/0x6a0 [ 499.331890][T14151] ? ep_ptable_queue_proc+0x5b/0x280 [ 499.332024][T14151] ep_ptable_queue_proc+0x5b/0x280 [ 499.332058][T14151] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 499.332092][T14151] snd_timer_user_poll+0x80/0x140 [ 499.332170][T14151] ? __pfx_snd_timer_user_poll+0x10/0x10 [ 499.332197][T14151] ep_item_poll+0x141/0x1f0 [ 499.332233][T14151] do_epoll_ctl_file+0x1e6b/0x3640 [ 499.332267][T14151] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 499.332295][T14151] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 499.332330][T14151] ? __fget_files+0x215/0x3d0 [ 499.332367][T14151] ? __fget_files+0x21f/0x3d0 [ 499.332405][T14151] ? do_epoll_ctl+0xfd/0x1a0 [ 499.332426][T14151] do_epoll_ctl+0xfd/0x1a0 [ 499.332450][T14151] ? __pfx_do_epoll_ctl+0x10/0x10 [ 499.332483][T14151] __x64_sys_epoll_ctl+0x15c/0x1e0 [ 499.332508][T14151] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 499.332541][T14151] do_syscall_64+0x115/0x840 [ 499.332562][T14151] ? clear_bhb_loop+0x40/0x90 [ 499.332590][T14151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.332613][T14151] RIP: 0033:0x7fe01dd9de59 [ 499.332632][T14151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.332654][T14151] RSP: 002b:00007fe01bfd5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 499.332677][T14151] RAX: ffffffffffffffda RBX: 00007fe01e026090 RCX: 00007fe01dd9de59 [ 499.332693][T14151] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 499.332707][T14151] RBP: 00007fe01bfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 499.332720][T14151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.332734][T14151] R13: 00007fe01e026128 R14: 00007fe01e026090 R15: 00007ffed2dd58a8 [ 499.332765][T14151] [ 499.599793][T14146] binder: 14143:14146 ioctl c00c620f 200000000c40 returned -22 [ 500.107992][T14170] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1648'. [ 500.178254][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1649'. [ 500.196567][T14172] openvswitch: ovs_?: Dropping previously announced user features [ 500.301942][T14175] ubi0: attaching mtd0 [ 500.320974][T14175] ubi0: scanning is finished [ 500.331055][T14175] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 500.504663][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.511085][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.696886][T14175] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 500.826709][T14192] FAULT_INJECTION: forcing a failure. [ 500.826709][T14192] name failslab, interval 1, probability 0, space 0, times 0 [ 500.851131][T14192] CPU: 1 UID: 0 PID: 14192 Comm: syz.3.1652 Tainted: G L syzkaller #0 PREEMPT(full) [ 500.851178][T14192] Tainted: [L]=SOFTLOCKUP [ 500.851188][T14192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 500.851205][T14192] Call Trace: [ 500.851214][T14192] [ 500.851225][T14192] dump_stack_lvl+0x100/0x190 [ 500.851262][T14192] should_fail_ex.cold+0x5/0xa [ 500.851295][T14192] should_failslab+0xc2/0x120 [ 500.851333][T14192] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 500.851368][T14192] ? __d_alloc+0x35/0xa50 [ 500.851401][T14192] __d_alloc+0x35/0xa50 [ 500.851432][T14192] d_alloc_pseudo+0x1c/0xc0 [ 500.851468][T14192] alloc_file_pseudo+0x118/0x290 [ 500.851513][T14192] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 500.851548][T14192] ? alloc_fd+0x471/0x7a0 [ 500.851597][T14192] sock_alloc_file+0x50/0x210 [ 500.851634][T14192] __sys_socket+0x1c0/0x260 [ 500.851677][T14192] ? __pfx___sys_socket+0x10/0x10 [ 500.851730][T14192] __x64_sys_socket+0x72/0xb0 [ 500.851773][T14192] do_syscall_64+0x115/0x840 [ 500.851799][T14192] ? clear_bhb_loop+0x40/0x90 [ 500.851833][T14192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.851862][T14192] RIP: 0033:0x7ff2db39de59 [ 500.851886][T14192] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.851913][T14192] RSP: 002b:00007ff2dc316028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 500.851939][T14192] RAX: ffffffffffffffda RBX: 00007ff2db626090 RCX: 00007ff2db39de59 [ 500.851959][T14192] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 500.851977][T14192] RBP: 00007ff2db433e6f R08: 0000000000000000 R09: 0000000000000000 [ 500.851993][T14192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.852010][T14192] R13: 00007ff2db626128 R14: 00007ff2db626090 R15: 00007ffc9708f078 [ 500.852047][T14192] [ 502.046221][T14214] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1658'. [ 502.090476][T14214] openvswitch: ovs_?: Dropping previously announced user features [ 502.098783][T14215] FAULT_INJECTION: forcing a failure. [ 502.098783][T14215] name failslab, interval 1, probability 0, space 0, times 0 [ 502.136867][T14215] CPU: 1 UID: 0 PID: 14215 Comm: syz.3.1657 Tainted: G L syzkaller #0 PREEMPT(full) [ 502.136913][T14215] Tainted: [L]=SOFTLOCKUP [ 502.136923][T14215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 502.136939][T14215] Call Trace: [ 502.136948][T14215] [ 502.136959][T14215] dump_stack_lvl+0x100/0x190 [ 502.136998][T14215] should_fail_ex.cold+0x5/0xa [ 502.137029][T14215] ? __pfx_rescuer_thread+0x10/0x10 [ 502.137067][T14215] should_failslab+0xc2/0x120 [ 502.137104][T14215] __kmalloc_cache_noprof+0x91/0x6c0 [ 502.137149][T14215] ? __kthread_create_on_node+0xce/0x3f0 [ 502.137186][T14215] ? __pfx_rescuer_thread+0x10/0x10 [ 502.137221][T14215] __kthread_create_on_node+0xce/0x3f0 [ 502.137254][T14215] ? __pfx___kthread_create_on_node+0x10/0x10 [ 502.137295][T14215] ? __pfx_vsnprintf+0x10/0x10 [ 502.137344][T14215] ? __pfx_rescuer_thread+0x10/0x10 [ 502.137382][T14215] kthread_create_on_node+0xc7/0x100 [ 502.137413][T14215] ? __pfx_kthread_create_on_node+0x10/0x10 [ 502.137442][T14215] ? __pfx_scnprintf+0x10/0x10 [ 502.137488][T14215] ? __kmalloc_cache_node_noprof+0x2fe/0x6c0 [ 502.137524][T14215] ? init_rescuer+0x19f/0x550 [ 502.137563][T14215] init_rescuer+0x321/0x550 [ 502.137597][T14215] ? __pfx_init_rescuer+0x10/0x10 [ 502.137632][T14215] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 502.137683][T14215] ? wq_adjust_max_active+0x352/0x4a0 [ 502.137726][T14215] __alloc_workqueue+0xe4e/0x1940 [ 502.137768][T14215] alloc_workqueue_noprof+0xc7/0x130 [ 502.137800][T14215] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 502.137847][T14215] ? __pfx___debug_object_init+0x10/0x10 [ 502.137896][T14215] nci_register_device+0x394/0xb80 [ 502.138020][T14215] ? __pfx_nci_register_device+0x10/0x10 [ 502.138065][T14215] ? lockdep_init_map_type+0x5c/0x250 [ 502.138114][T14215] virtual_ncidev_open+0x141/0x220 [ 502.138208][T14215] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 502.138248][T14215] misc_open+0x26d/0x450 [ 502.138346][T14215] ? __pfx_misc_open+0x10/0x10 [ 502.138389][T14215] chrdev_open+0x234/0x6a0 [ 502.138414][T14215] ? __pfx_apparmor_file_open+0x10/0x10 [ 502.138472][T14215] ? __pfx_chrdev_open+0x10/0x10 [ 502.138519][T14215] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 502.138557][T14215] do_dentry_open+0x6ab/0x14d0 [ 502.138600][T14215] ? __pfx_chrdev_open+0x10/0x10 [ 502.138651][T14215] vfs_open+0x82/0x3f0 [ 502.138688][T14215] path_openat+0x2873/0x4280 [ 502.138748][T14215] ? __pfx_path_openat+0x10/0x10 [ 502.138802][T14215] do_file_open+0x20e/0x430 [ 502.138855][T14215] ? __pfx_do_file_open+0x10/0x10 [ 502.138928][T14215] ? alloc_fd+0x471/0x7a0 [ 502.138970][T14215] ? do_getname+0x191/0x390 [ 502.139000][T14215] do_sys_openat2+0x10f/0x1e0 [ 502.139028][T14215] ? __pfx_do_sys_openat2+0x10/0x10 [ 502.139074][T14215] __x64_sys_openat+0x12d/0x210 [ 502.139108][T14215] ? __pfx___x64_sys_openat+0x10/0x10 [ 502.139157][T14215] do_syscall_64+0x115/0x840 [ 502.139182][T14215] ? clear_bhb_loop+0x40/0x90 [ 502.139218][T14215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.139247][T14215] RIP: 0033:0x7ff2db39de59 [ 502.139270][T14215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.139293][T14215] RSP: 002b:00007ff2dc337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 502.139319][T14215] RAX: ffffffffffffffda RBX: 00007ff2db625fa0 RCX: 00007ff2db39de59 [ 502.139337][T14215] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 502.139356][T14215] RBP: 00007ff2db433e6f R08: 0000000000000000 R09: 0000000000000000 [ 502.139372][T14215] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 502.139389][T14215] R13: 00007ff2db626038 R14: 00007ff2db625fa0 R15: 00007ffc9708f078 [ 502.139427][T14215] [ 502.533117][T14215] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -ENOMEM [ 502.795742][T14225] bond0: invalid ARP target specified [ 503.014831][T14225] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1660'. [ 503.098147][T14225] team0 (unregistering): Port device team_slave_0 removed [ 503.139601][T14225] team0 (unregistering): Port device team_slave_1 removed [ 503.437597][T14235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1663'. [ 503.787047][T14241] vivid-007: ================= START STATUS ================= [ 503.809250][T14241] vivid-007: Generate PTS: true [ 503.820276][T14241] vivid-007: Generate SCR: true [ 503.836981][T14241] tpg source WxH: 320x240 (Y'CbCr) [ 503.842826][T14241] tpg field: 1 [ 503.868823][T14241] tpg crop: (0,0)/320x240 [ 503.874941][T14241] tpg compose: (0,0)/320x240 [ 503.900007][T14241] tpg colorspace: 8 [ 503.925104][T14241] tpg transfer function: 0/0 [ 503.934953][T14241] tpg Y'CbCr encoding: 0/0 [ 503.950033][T14241] tpg quantization: 0/0 [ 503.960851][T14241] tpg RGB range: 0/2 [ 503.966395][T14241] vivid-007: ================== END STATUS ================== [ 505.259370][T14267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1667'. [ 506.015747][T14291] netlink: 'syz.4.1671': attribute type 1 has an invalid length. [ 506.124332][T14281] Process accounting paused [ 506.266130][T14297] FAULT_INJECTION: forcing a failure. [ 506.266130][T14297] name fail_futex, interval 1, probability 0, space 0, times 0 [ 506.293782][T14297] CPU: 1 UID: 8 PID: 14297 Comm: syz.1.1674 Tainted: G L syzkaller #0 PREEMPT(full) [ 506.293830][T14297] Tainted: [L]=SOFTLOCKUP [ 506.293840][T14297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 506.293855][T14297] Call Trace: [ 506.293863][T14297] [ 506.293872][T14297] dump_stack_lvl+0x100/0x190 [ 506.293906][T14297] should_fail_ex.cold+0x5/0xa [ 506.293934][T14297] get_futex_key+0x1d2/0x14f0 [ 506.293978][T14297] ? __pfx_get_futex_key+0x10/0x10 [ 506.294023][T14297] futex_wait_setup+0x91/0x540 [ 506.294064][T14297] __futex_wait+0x19f/0x300 [ 506.294095][T14297] ? __pfx___futex_wait+0x10/0x10 [ 506.294123][T14297] ? futex_hash+0x311/0x400 [ 506.294159][T14297] ? __pfx_futex_wake_mark+0x10/0x10 [ 506.294192][T14297] ? __pfx_futex_hash+0x10/0x10 [ 506.294226][T14297] ? register_lock_class+0x40/0x560 [ 506.294267][T14297] futex_wait+0xe6/0x370 [ 506.294294][T14297] ? __pfx_futex_wait+0x10/0x10 [ 506.294332][T14297] ? do_raw_spin_lock+0x128/0x260 [ 506.294357][T14297] do_futex+0x265/0x440 [ 506.294381][T14297] ? __pfx_do_futex+0x10/0x10 [ 506.294402][T14297] ? _raw_spin_unlock+0x28/0x50 [ 506.294433][T14297] ? do_set_mempolicy+0x217/0x3d0 [ 506.294463][T14297] ? __pfx_do_set_mempolicy+0x10/0x10 [ 506.294497][T14297] __x64_sys_futex+0x34f/0x4d0 [ 506.294524][T14297] ? __pfx___x64_sys_futex+0x10/0x10 [ 506.294549][T14297] ? __pfx_kernel_set_mempolicy+0x10/0x10 [ 506.294589][T14297] do_syscall_64+0x115/0x840 [ 506.294609][T14297] ? clear_bhb_loop+0x40/0x90 [ 506.294644][T14297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.294669][T14297] RIP: 0033:0x7fe01dd9de59 [ 506.294688][T14297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.294711][T14297] RSP: 002b:00007fe01bff60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 506.294734][T14297] RAX: ffffffffffffffda RBX: 00007fe01e025fa8 RCX: 00007fe01dd9de59 [ 506.294750][T14297] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe01e025fa8 [ 506.294763][T14297] RBP: 00007fe01e025fa0 R08: 0000000000000000 R09: 0000000000000000 [ 506.294777][T14297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 506.294791][T14297] R13: 00007fe01e026038 R14: 00007ffed2dd57c0 R15: 00007ffed2dd58a8 [ 506.294820][T14297] [ 507.919598][T14327] openvswitch: ovs_: Dropping previously announced user features [ 507.941922][T13713] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 509.127541][T14355] binder: 14350:14355 ioctl c00c620f 200000000c40 returned -22 [ 509.658056][T14363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1688'. [ 509.706763][T14363] openvswitch: ovs_?: Dropping previously announced user features [ 510.394941][T14378] zero sized request [ 510.400664][T14380] zero sized request [ 510.987153][T14390] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 511.016173][T14390] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 511.034821][T14395] openvswitch: ovs_: Dropping previously announced user features [ 511.056030][T14390] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 511.130254][T14390] page_type: f5(slab) [ 511.141324][T14390] raw: 00fff00000000040 ffff88813fe1edc0 dead000000000100 dead000000000122 [ 511.169164][T14390] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 511.202892][T14390] head: 00fff00000000040 ffff88813fe1edc0 dead000000000100 dead000000000122 [ 511.237985][T14390] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 511.279317][T14390] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 511.310773][T14390] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 511.320340][T14390] page dumped because: unmovable page [ 511.326699][T14390] page_owner tracks the page as allocated [ 511.371466][T14390] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 23, tgid 23 (ksoftirqd/1), ts 153116703467, free_ts 152997869825 [ 511.444037][T14390] post_alloc_hook+0xfd/0x120 [ 511.460751][T14390] get_page_from_freelist+0xf48/0x3530 [ 511.543138][T14390] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 511.648452][T14390] new_slab+0xa2/0x650 [ 511.661612][T14390] refill_objects+0xe3/0x410 [ 511.668344][T14390] __pcs_replace_empty_main+0x376/0x680 [ 511.676460][T14390] __kmalloc_noprof+0x66d/0x820 [ 511.701018][T14390] ieee802_11_parse_elems_full+0x17c/0x3dd0 [ 511.711918][T14390] ieee80211_inform_bss+0x159/0x1170 [ 511.744355][T14390] cfg80211_inform_single_bss_data+0x898/0x1dc0 [ 511.824044][T14390] cfg80211_inform_bss_data+0x230/0x39d0 [ 511.908791][T14390] cfg80211_inform_bss_frame_data+0x247/0x760 [ 511.923521][T14390] ieee80211_bss_info_update+0x310/0xab0 [ 511.956980][T14390] ieee80211_scan_rx+0x4e6/0xb60 [ 511.978760][T14390] __ieee80211_rx_handle_packet+0x7da/0xe20 [ 512.054878][T14390] ieee80211_rx_list+0xf19/0x2160 [ 512.073864][T14390] page last free pid 42 tgid 42 stack trace: [ 512.082081][T14390] free_pages_prepare+0x586/0xd80 [ 512.088228][T14390] __free_contig_range_common+0x14f/0x250 [ 512.272519][T14390] free_pages_bulk+0x12a/0x200 [ 512.345263][T14390] vm_area_free_pages+0xad/0x2b0 [ 512.384289][T14390] vfree+0x107/0x750 [ 512.398127][T14390] delayed_vfree_work+0x56/0x80 [ 512.405405][T14390] process_one_work+0xa23/0x1940 [ 512.460442][T14390] worker_thread+0x5ef/0xe50 [ 512.475253][T14390] kthread+0x370/0x450 [ 512.489841][T14390] ret_from_fork+0x72b/0xd50 [ 512.499371][T14390] ret_from_fork_asm+0x1a/0x30 [ 514.120379][T14432] Process accounting resumed [ 514.487043][T14441] FAULT_INJECTION: forcing a failure. [ 514.487043][T14441] name failslab, interval 1, probability 0, space 0, times 0 [ 514.562354][T14441] CPU: 1 UID: 0 PID: 14441 Comm: syz.2.1701 Tainted: G L syzkaller #0 PREEMPT(full) [ 514.562381][T14441] Tainted: [L]=SOFTLOCKUP [ 514.562387][T14441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 514.562396][T14441] Call Trace: [ 514.562401][T14441] [ 514.562407][T14441] dump_stack_lvl+0x100/0x190 [ 514.562428][T14441] should_fail_ex.cold+0x5/0xa [ 514.562447][T14441] should_failslab+0xc2/0x120 [ 514.562465][T14441] kmem_cache_alloc_noprof+0x91/0x6a0 [ 514.562483][T14441] ? vm_area_alloc+0x1f/0x160 [ 514.562509][T14441] vm_area_alloc+0x1f/0x160 [ 514.562530][T14441] __mmap_region+0x1033/0x2db0 [ 514.562556][T14441] ? __pfx___mmap_region+0x10/0x10 [ 514.562580][T14441] ? find_held_lock+0x2b/0x80 [ 514.562596][T14441] ? debug_object_activate+0x343/0x4b0 [ 514.562616][T14441] ? debug_object_activate+0x343/0x4b0 [ 514.562639][T14441] ? debug_object_activate+0x343/0x4b0 [ 514.562660][T14441] ? __lock_acquire+0x49f/0x1a40 [ 514.562681][T14441] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 514.562720][T14441] ? lockdep_hardirqs_on+0x78/0x100 [ 514.562741][T14441] ? finish_task_switch.isra.0+0x2c5/0x10c0 [ 514.562783][T14441] ? preempt_schedule_common+0x42/0xc0 [ 514.562810][T14441] mmap_region+0x35d/0x620 [ 514.562824][T14441] ? rcu_is_watching+0x12/0xc0 [ 514.562840][T14441] ? __pfx_mmap_region+0x10/0x10 [ 514.562856][T14441] ? cap_mmap_addr+0x4b/0x120 [ 514.562877][T14441] ? bpf_lsm_mmap_addr+0x9/0x30 [ 514.562897][T14441] ? security_mmap_addr+0x71/0x1e0 [ 514.562915][T14441] ? __get_unmapped_area+0x255/0x3e0 [ 514.562935][T14441] do_mmap+0xc63/0x12f0 [ 514.562957][T14441] ? __pfx_do_mmap+0x10/0x10 [ 514.562974][T14441] ? __pfx_down_write_killable+0x10/0x10 [ 514.562997][T14441] vm_mmap_pgoff+0x29e/0x470 [ 514.563019][T14441] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 514.563041][T14441] ? __pfx_do_futex+0x10/0x10 [ 514.563060][T14441] ksys_mmap_pgoff+0xe4/0x610 [ 514.563079][T14441] ? __x64_sys_futex+0x358/0x4d0 [ 514.563093][T14441] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 514.563111][T14441] ? xfd_validate_state+0x129/0x190 [ 514.563130][T14441] __x64_sys_mmap+0x125/0x190 [ 514.563148][T14441] do_syscall_64+0x115/0x840 [ 514.563161][T14441] ? clear_bhb_loop+0x40/0x90 [ 514.563178][T14441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.563193][T14441] RIP: 0033:0x7f40ccf9de59 [ 514.563206][T14441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.563220][T14441] RSP: 002b:00007f40cdf03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 514.563235][T14441] RAX: ffffffffffffffda RBX: 00007f40cd225fa0 RCX: 00007f40ccf9de59 [ 514.563245][T14441] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 514.563254][T14441] RBP: 00007f40cd033e6f R08: 0000000000000003 R09: 0000040000008000 [ 514.563269][T14441] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 514.563278][T14441] R13: 00007f40cd226038 R14: 00007f40cd225fa0 R15: 00007ffd8423ac18 [ 514.563298][T14441] [ 514.568241][T14442] FAULT_INJECTION: forcing a failure. [ 514.568241][T14442] name fail_futex, interval 1, probability 0, space 0, times 0 [ 514.950978][T14415] Process accounting paused [ 515.067538][T14442] CPU: 0 UID: 0 PID: 14442 Comm: syz.2.1701 Tainted: G L syzkaller #0 PREEMPT(full) [ 515.067586][T14442] Tainted: [L]=SOFTLOCKUP [ 515.067596][T14442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 515.067613][T14442] Call Trace: [ 515.067621][T14442] [ 515.067631][T14442] dump_stack_lvl+0x100/0x190 [ 515.067667][T14442] should_fail_ex.cold+0x5/0xa [ 515.067700][T14442] get_futex_key+0x1d2/0x14f0 [ 515.067748][T14442] ? __pfx_get_futex_key+0x10/0x10 [ 515.067788][T14442] ? wakeup_preempt_fair+0x640/0x1060 [ 515.067839][T14442] futex_wait_setup+0x91/0x540 [ 515.067892][T14442] __futex_wait+0x19f/0x300 [ 515.067929][T14442] ? __pfx___futex_wait+0x10/0x10 [ 515.067962][T14442] ? __pfx_try_to_wake_up+0x10/0x10 [ 515.067988][T14442] ? futex_hash+0x311/0x400 [ 515.068032][T14442] ? __pfx_futex_wake_mark+0x10/0x10 [ 515.068071][T14442] ? find_held_lock+0x2b/0x80 [ 515.068101][T14442] ? futex_wake+0x4ea/0x5e0 [ 515.068201][T14442] futex_wait+0xe6/0x370 [ 515.068236][T14442] ? __pfx_futex_wait+0x10/0x10 [ 515.068278][T14442] ? rcu_read_lock_any_held+0x6a/0xa0 [ 515.068310][T14442] ? find_held_lock+0x2b/0x80 [ 515.068340][T14442] ? ksys_write+0x190/0x250 [ 515.068377][T14442] ? ksys_write+0x190/0x250 [ 515.068414][T14442] do_futex+0x265/0x440 [ 515.068440][T14442] ? __pfx_do_futex+0x10/0x10 [ 515.068456][T14442] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 515.068488][T14442] __x64_sys_futex+0x34f/0x4d0 [ 515.068506][T14442] ? __pfx___x64_sys_futex+0x10/0x10 [ 515.068527][T14442] do_syscall_64+0x115/0x840 [ 515.068539][T14442] ? clear_bhb_loop+0x40/0x90 [ 515.068557][T14442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.068571][T14442] RIP: 0033:0x7f40ccf9de59 [ 515.068585][T14442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.068599][T14442] RSP: 002b:00007f40cdee20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 515.068617][T14442] RAX: ffffffffffffffda RBX: 00007f40cd226098 RCX: 00007f40ccf9de59 [ 515.068629][T14442] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f40cd226098 [ 515.068640][T14442] RBP: 00007f40cd226090 R08: 0000000000000000 R09: 0000000000000000 [ 515.068649][T14442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 515.068657][T14442] R13: 00007f40cd226128 R14: 00007ffd8423ab30 R15: 00007ffd8423ac18 [ 515.068676][T14442] [ 518.406807][T14511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1717'. [ 518.443446][T14511] openvswitch: ovs_?: Dropping previously announced user features [ 518.614362][T14516] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1719'. [ 518.775605][T14520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1720'. [ 520.893042][T14553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1724'. [ 520.916756][T14550] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1724'. [ 521.069831][T14553] team0: Port device team_slave_1 removed [ 521.429274][T14565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1729'. [ 525.624040][T14616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1740'. [ 525.863492][T14621] FAULT_INJECTION: forcing a failure. [ 525.863492][T14621] name failslab, interval 1, probability 0, space 0, times 0 [ 525.895370][T14621] CPU: 0 UID: 0 PID: 14621 Comm: syz.3.1743 Tainted: G L syzkaller #0 PREEMPT(full) [ 525.895413][T14621] Tainted: [L]=SOFTLOCKUP [ 525.895422][T14621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 525.895438][T14621] Call Trace: [ 525.895446][T14621] [ 525.895456][T14621] dump_stack_lvl+0x100/0x190 [ 525.895491][T14621] should_fail_ex.cold+0x5/0xa [ 525.895528][T14621] should_failslab+0xc2/0x120 [ 525.895564][T14621] __kmalloc_cache_noprof+0x91/0x6c0 [ 525.895605][T14621] ? ktime_get_coarse_real_ts64_mg+0x249/0x300 [ 525.895650][T14621] ? resv_map_alloc+0x7e/0x400 [ 525.895685][T14621] resv_map_alloc+0x7e/0x400 [ 525.895719][T14621] hugetlb_reserve_pages+0x63c/0x1490 [ 525.895761][T14621] ? __pfx___might_resched+0x10/0x10 [ 525.895800][T14621] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 525.895839][T14621] ? atime_needs_update+0x8b/0x6b0 [ 525.895878][T14621] ? touch_atime+0xa5/0x760 [ 525.895909][T14621] ? mas_preallocate+0x521/0x14a0 [ 525.895949][T14621] hugetlbfs_file_mmap+0x51a/0x780 [ 525.896086][T14621] ? __pfx_hugetlbfs_file_mmap+0x10/0x10 [ 525.896122][T14621] ? lockdep_init_map_type+0x5c/0x250 [ 525.896169][T14621] __mmap_region+0x13c7/0x2db0 [ 525.896220][T14621] ? __pfx___mmap_region+0x10/0x10 [ 525.896270][T14621] ? do_raw_spin_lock+0x128/0x260 [ 525.896307][T14621] ? __lock_acquire+0x49f/0x1a40 [ 525.896361][T14621] ? is_bpf_text_address+0x8a/0x1a0 [ 525.896408][T14621] ? is_bpf_text_address+0x8a/0x1a0 [ 525.896459][T14621] ? unwind_get_return_address+0x59/0xa0 [ 525.896499][T14621] ? arch_stack_walk+0xa6/0xf0 [ 525.896585][T14621] mmap_region+0x35d/0x620 [ 525.896613][T14621] ? __pfx_mmap_region+0x10/0x10 [ 525.896646][T14621] ? cap_mmap_addr+0x4b/0x120 [ 525.896684][T14621] ? bpf_lsm_mmap_addr+0x9/0x30 [ 525.896720][T14621] ? security_mmap_addr+0x71/0x1e0 [ 525.896752][T14621] ? __get_unmapped_area+0x255/0x3e0 [ 525.896789][T14621] do_mmap+0xc63/0x12f0 [ 525.896832][T14621] ? __pfx_do_mmap+0x10/0x10 [ 525.896864][T14621] ? __pfx_down_write_killable+0x10/0x10 [ 525.896910][T14621] vm_mmap_pgoff+0x29e/0x470 [ 525.896952][T14621] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 525.896984][T14621] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 525.897037][T14621] ksys_mmap_pgoff+0x285/0x610 [ 525.897073][T14621] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 525.897108][T14621] ? xfd_validate_state+0x129/0x190 [ 525.897141][T14621] __x64_sys_mmap+0x125/0x190 [ 525.897175][T14621] do_syscall_64+0x115/0x840 [ 525.897198][T14621] ? clear_bhb_loop+0x40/0x90 [ 525.897232][T14621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.897261][T14621] RIP: 0033:0x7ff2db39de59 [ 525.897285][T14621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.897311][T14621] RSP: 002b:00007ff2dc337028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 525.897337][T14621] RAX: ffffffffffffffda RBX: 00007ff2db625fa0 RCX: 00007ff2db39de59 [ 525.897356][T14621] RDX: 00004000000000e3 RSI: 0000000000200004 RDI: 0000000000000000 [ 525.897373][T14621] RBP: 00007ff2db433e6f R08: 000000000000000d R09: 0000300000000000 [ 525.897391][T14621] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 525.897407][T14621] R13: 00007ff2db626038 R14: 00007ff2db625fa0 R15: 00007ffc9708f078 [ 525.897446][T14621] [ 528.943961][T14665] syz.1.1753: vm.laptop_mode is deprecated. Ignoring setting. [ 529.294998][T14672] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 530.760650][T14695] zswap: compressor Zºu¾å~“ÍÎ^´§8·¯î”¯a®Þcu0ÙóÏ|” ,a’âú¢RrðqP“þø˜¸÷'¹À)Œ¤Þ±`Ù*ë]¿­T]èXãžé؃(Û‚ŽTN>Ñ_áËr$º“º¾¾ñzúÙ&[+x[DPx¥e?–ôm¢µ3QÂz not available [ 531.254053][T14704] openvswitch: ovs_: Dropping previously announced user features [ 533.252419][T14743] FAULT_INJECTION: forcing a failure. [ 533.252419][T14743] name failslab, interval 1, probability 0, space 0, times 0 [ 533.283511][T14743] CPU: 0 UID: 0 PID: 14743 Comm: syz.4.1768 Tainted: G L syzkaller #0 PREEMPT(full) [ 533.283556][T14743] Tainted: [L]=SOFTLOCKUP [ 533.283565][T14743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 533.283582][T14743] Call Trace: [ 533.283591][T14743] [ 533.283602][T14743] dump_stack_lvl+0x100/0x190 [ 533.283642][T14743] should_fail_ex.cold+0x5/0xa [ 533.283672][T14743] should_failslab+0xc2/0x120 [ 533.283708][T14743] kmem_cache_alloc_noprof+0x91/0x6a0 [ 533.283741][T14743] ? sk_prot_alloc+0x60/0x2a0 [ 533.283784][T14743] sk_prot_alloc+0x60/0x2a0 [ 533.283831][T14743] sk_alloc+0x36/0xe80 [ 533.283861][T14743] inet6_create+0x385/0x12b0 [ 533.284010][T14743] ? inet6_create+0x7f/0x12b0 [ 533.284053][T14743] __sock_create+0x339/0x860 [ 533.284098][T14743] __sys_socket+0x14d/0x260 [ 533.284138][T14743] ? __pfx___sys_socket+0x10/0x10 [ 533.284191][T14743] __x64_sys_socket+0x72/0xb0 [ 533.284232][T14743] ? lockdep_hardirqs_on+0x78/0x100 [ 533.284276][T14743] do_syscall_64+0x115/0x840 [ 533.284299][T14743] ? clear_bhb_loop+0x40/0x90 [ 533.284343][T14743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.284373][T14743] RIP: 0033:0x7f7757d9de59 [ 533.284396][T14743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.284422][T14743] RSP: 002b:00007f7758c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 533.284447][T14743] RAX: ffffffffffffffda RBX: 00007f7758025fa0 RCX: 00007f7757d9de59 [ 533.284465][T14743] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 533.284481][T14743] RBP: 00007f7757e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 533.284504][T14743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.284520][T14743] R13: 00007f7758026038 R14: 00007f7758025fa0 R15: 00007fff59a5ac28 [ 533.284557][T14743] [ 533.497107][T14753] futex_wake_op: syz.3.1770 tries to shift op by -2048; fix this program [ 533.506137][T14753] futex_wake_op: syz.3.1770 tries to shift op by -2048; fix this program [ 534.252613][T14773] openvswitch: ovs_: Dropping previously announced user features [ 534.267145][T14765] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 534.332118][T14765] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 536.307420][T13713] Bluetooth: hci2: command 0x0c1a tx timeout [ 536.386028][T13713] Bluetooth: hci4: command 0x0c1a tx timeout [ 536.898512][T14823] futex_wake_op: syz.4.1783 tries to shift op by -2048; fix this program [ 536.924339][T14823] futex_wake_op: syz.4.1783 tries to shift op by -2048; fix this program [ 537.436162][T14809] Process accounting resumed [ 537.993329][T14852] binder: 14849:14852 ioctl c00c620f 200000000c40 returned -22 [ 539.925805][T14871] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1794'. [ 541.433442][T14892] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 543.066154][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1802'. [ 543.142232][T14912] openvswitch: ovs_?: Dropping previously announced user features [ 543.304612][ T29] audit: type=1800 audit(2147483791.457:16): pid=14916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1803" name="dbroot" dev="configfs" ino=53084 res=0 errno=0 [ 543.538569][T14916] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 544.053323][T14935] openvswitch: ovs_: Dropping previously announced user features [ 544.442760][T14938] openvswitch: netlink: Missing valid actions attribute. [ 544.530729][T14923] Process accounting paused [ 544.673782][T14948] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 544.849975][T14931] Process accounting resumed [ 544.862113][T14953] blktrace: Concurrent blktraces are not allowed on ram11 [ 544.899187][T14953] blktrace: Concurrent blktraces are not allowed on ram11 [ 546.283672][T14975] binder: 14974:14975 ioctl c00c620f 200000000c40 returned -22 [ 546.744405][T14984] i2c i2c-0: new_device: Can't parse I2C address [ 547.588975][T15011] binder: 15007:15011 ioctl c00c620f 200000000c40 returned -22 [ 548.032872][T15020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1827'. [ 548.586354][T15031] random: crng reseeded on system resumption [ 550.337010][T15070] binder: 15066:15070 ioctl c00c620f 200000000c40 returned -22 [ 550.509680][T15073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1838'. [ 552.893156][T13713] block nbd1: Receive control failed (result -32) [ 554.120100][T15133] binder: 15128:15133 ioctl c00c620f 200000000c40 returned -22 [ 555.026090][T15146] random: crng reseeded on system resumption [ 555.083480][T15152] openvswitch: ovs_: Dropping previously announced user features [ 555.649631][T15167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1858'. [ 556.923283][T15196] can: request_module (can-proto-0) failed. [ 556.923570][T15198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1867'. [ 557.359328][T15208] openvswitch: ovs_: Dropping previously announced user features [ 557.448388][T15213] openvswitch: ovs_: Dropping previously announced user features [ 558.385598][T15234] openvswitch: ovs_: Dropping previously announced user features [ 559.190418][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1876'. [ 561.275280][T15292] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1887'. [ 561.293495][T15292] openvswitch: ovs_?: Dropping previously announced user features [ 561.402911][T15296] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 561.628142][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 561.635260][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.533722][T15318] openvswitch: ovs_: Dropping previously announced user features [ 564.159882][T15343] binder: 15333:15343 ioctl c00c620f 200000000c40 returned -22 [ 564.695283][T15361] netlink: 314 bytes leftover after parsing attributes in process `syz.2.1902'. [ 564.830193][T15364] openvswitch: ovs_: Dropping previously announced user features [ 565.119932][T15382] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1906'. [ 565.152377][T15382] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1906'. [ 566.127815][T15395] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1908'. [ 566.320930][T15400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1910'. [ 566.339648][T15400] openvswitch: ovs_?: Dropping previously announced user features [ 567.370116][T15435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1918'. [ 567.662175][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1921'. [ 568.370658][T15462] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1924'. [ 568.592049][T15434] Process accounting paused [ 569.516352][T15489] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1930'. [ 570.035887][T15501] blktrace: Concurrent blktraces are not allowed on sg0 [ 570.059091][T15494] FAULT_INJECTION: forcing a failure. [ 570.059091][T15494] name failslab, interval 1, probability 0, space 0, times 0 [ 570.154207][T15494] CPU: 1 UID: 0 PID: 15494 Comm: syz.2.1932 Tainted: G L syzkaller #0 PREEMPT(full) [ 570.154252][T15494] Tainted: [L]=SOFTLOCKUP [ 570.154262][T15494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 570.154280][T15494] Call Trace: [ 570.154289][T15494] [ 570.154299][T15494] dump_stack_lvl+0x100/0x190 [ 570.154337][T15494] should_fail_ex.cold+0x5/0xa [ 570.154369][T15494] should_failslab+0xc2/0x120 [ 570.154405][T15494] kmem_cache_alloc_noprof+0x91/0x6a0 [ 570.154439][T15494] ? lock_acquire+0x1b9/0x370 [ 570.154477][T15494] ? do_getname+0x35/0x390 [ 570.154515][T15494] do_getname+0x35/0x390 [ 570.154548][T15494] do_sys_openat2+0xc7/0x1e0 [ 570.154582][T15494] ? __pfx_do_sys_openat2+0x10/0x10 [ 570.154613][T15494] ? lapic_next_event+0x10/0x20 [ 570.154686][T15494] __x64_sys_openat+0x12d/0x210 [ 570.154728][T15494] ? __pfx___x64_sys_openat+0x10/0x10 [ 570.154766][T15494] ? do_raw_spin_unlock+0x145/0x1e0 [ 570.154804][T15494] do_syscall_64+0x115/0x840 [ 570.154829][T15494] ? clear_bhb_loop+0x40/0x90 [ 570.154863][T15494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.154891][T15494] RIP: 0033:0x7f40ccf9de59 [ 570.154917][T15494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.154944][T15494] RSP: 002b:00007f40cdee2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 570.154970][T15494] RAX: ffffffffffffffda RBX: 00007f40cd226090 RCX: 00007f40ccf9de59 [ 570.154993][T15494] RDX: 0000000000000002 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 570.155010][T15494] RBP: 00007f40cd033e6f R08: 0000000000000000 R09: 0000000000000000 [ 570.155027][T15494] R10: 000000000000003e R11: 0000000000000246 R12: 0000000000000000 [ 570.155043][T15494] R13: 00007f40cd226128 R14: 00007f40cd226090 R15: 00007ffd8423ac18 [ 570.155079][T15494] [ 570.421901][T15502] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1933'. [ 570.447639][T15502] sd 0:0:1:0: PR command failed: 1026 [ 570.465316][T15502] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 570.482725][T15502] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 571.006531][T15522] FAULT_INJECTION: forcing a failure. [ 571.006531][T15522] name failslab, interval 1, probability 0, space 0, times 0 [ 571.045913][T15522] CPU: 0 UID: 0 PID: 15522 Comm: syz.1.1936 Tainted: G L syzkaller #0 PREEMPT(full) [ 571.045960][T15522] Tainted: [L]=SOFTLOCKUP [ 571.045969][T15522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 571.045986][T15522] Call Trace: [ 571.045995][T15522] [ 571.046005][T15522] dump_stack_lvl+0x100/0x190 [ 571.046041][T15522] should_fail_ex.cold+0x5/0xa [ 571.046073][T15522] should_failslab+0xc2/0x120 [ 571.046109][T15522] __kmalloc_cache_noprof+0x91/0x6c0 [ 571.046153][T15522] ? down_write_killable+0x152/0x250 [ 571.046182][T15522] ? alloc_ldt_struct+0x5d/0x1b0 [ 571.046224][T15522] alloc_ldt_struct+0x5d/0x1b0 [ 571.046259][T15522] write_ldt+0x62b/0xd40 [ 571.046300][T15522] ? __pfx_write_ldt+0x10/0x10 [ 571.046337][T15522] ? xfd_validate_state+0x129/0x190 [ 571.046377][T15522] __x64_sys_modify_ldt+0xb1/0x170 [ 571.046415][T15522] do_syscall_64+0x115/0x840 [ 571.046439][T15522] ? clear_bhb_loop+0x40/0x90 [ 571.046472][T15522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.046500][T15522] RIP: 0033:0x7fe01dd9de59 [ 571.046521][T15522] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.046546][T15522] RSP: 002b:00007fe01bfb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 571.046571][T15522] RAX: ffffffffffffffda RBX: 00007fe01e026180 RCX: 00007fe01dd9de59 [ 571.046589][T15522] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 571.046606][T15522] RBP: 00007fe01de33e6f R08: 0000000000000000 R09: 0000000000000000 [ 571.046632][T15522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 571.046648][T15522] R13: 00007fe01e026218 R14: 00007fe01e026180 R15: 00007ffed2dd58a8 [ 571.046686][T15522] [ 573.001951][T15552] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 573.667495][T15566] usbip-vudc usbip-vudc.0: gadget not bound [ 574.813868][T15594] Process accounting paused [ 575.174814][T15585] Process accounting resumed [ 575.962324][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 575.996753][T15620] openvswitch: ovs_?: Dropping previously announced user features [ 576.340013][T15605] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 576.350605][T15605] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 576.530571][ T29] audit: type=1326 audit(2147520512.864:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15634 comm="syz.4.1961" exe="/root/ci-qemu-gce-upstream-auto/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7757d9de59 code=0x0 [ 576.654243][T15637] openvswitch: ovs_: Dropping previously announced user features [ 577.242574][T15649] bond0: invalid ARP target specified [ 577.360379][T15649] nbd: socks must be embedded in a SOCK_ITEM attr [ 577.414435][T15649] block nbd2: shutting down sockets [ 577.440093][T15651] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1962'. [ 577.591173][T15651] team0 (unregistering): Port device team_slave_0 removed [ 577.612202][T13713] Bluetooth: hci2: command 0x0c1a tx timeout [ 577.634945][T15651] team0 (unregistering): Port device team_slave_1 removed [ 578.255739][T15674] random: crng reseeded on system resumption [ 578.409139][T13713] Bluetooth: hci4: command 0x0c1a tx timeout [ 578.483904][T15684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1972'. [ 579.266151][T15708] bond0: invalid ARP target specified [ 579.961567][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1984'. [ 580.744739][T15745] bond0: invalid ARP target specified [ 580.808800][T15745] nbd: socks must be embedded in a SOCK_ITEM attr [ 580.819200][T15745] block nbd2: shutting down sockets [ 580.901979][T15722] Process accounting resumed [ 581.012595][T15756] kafs: addr_prefs: Invalid Command [ 581.038661][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1990'. [ 581.070310][T15758] openvswitch: ovs_?: Dropping previously announced user features [ 581.410102][T15767] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1992'. [ 582.250651][T15789] FAULT_INJECTION: forcing a failure. [ 582.250651][T15789] name failslab, interval 1, probability 0, space 0, times 0 [ 582.271540][T15789] CPU: 0 UID: 0 PID: 15789 Comm: syz.2.1997 Tainted: G L syzkaller #0 PREEMPT(full) [ 582.271587][T15789] Tainted: [L]=SOFTLOCKUP [ 582.271598][T15789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 582.271614][T15789] Call Trace: [ 582.271623][T15789] [ 582.271635][T15789] dump_stack_lvl+0x100/0x190 [ 582.271674][T15789] should_fail_ex.cold+0x5/0xa [ 582.271708][T15789] should_failslab+0xc2/0x120 [ 582.271744][T15789] __kmalloc_cache_noprof+0x91/0x6c0 [ 582.271790][T15789] ? down_write_killable+0x152/0x250 [ 582.271824][T15789] ? alloc_ldt_struct+0x5d/0x1b0 [ 582.271866][T15789] alloc_ldt_struct+0x5d/0x1b0 [ 582.271902][T15789] write_ldt+0x62b/0xd40 [ 582.271945][T15789] ? __pfx_write_ldt+0x10/0x10 [ 582.271985][T15789] ? xfd_validate_state+0x129/0x190 [ 582.272034][T15789] __x64_sys_modify_ldt+0xb1/0x170 [ 582.272074][T15789] do_syscall_64+0x115/0x840 [ 582.272100][T15789] ? clear_bhb_loop+0x40/0x90 [ 582.272135][T15789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.272168][T15789] RIP: 0033:0x7f40ccf9de59 [ 582.272192][T15789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.272220][T15789] RSP: 002b:00007f40cdee2028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 582.272248][T15789] RAX: ffffffffffffffda RBX: 00007f40cd226090 RCX: 00007f40ccf9de59 [ 582.272268][T15789] RDX: 0000000000000010 RSI: 0000200000000140 RDI: 0000000000000001 [ 582.272285][T15789] RBP: 00007f40cd033e6f R08: 0000000000000000 R09: 0000000000000000 [ 582.272303][T15789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 582.272320][T15789] R13: 00007f40cd226128 R14: 00007f40cd226090 R15: 00007ffd8423ac18 [ 582.272359][T15789] [ 583.082005][T15804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2001'. [ 583.128443][T15804] openvswitch: ovs_?: Dropping previously announced user features [ 583.312276][T15813] random: crng reseeded on system resumption [ 585.017715][T15847] FAULT_INJECTION: forcing a failure. [ 585.017715][T15847] name failslab, interval 1, probability 0, space 0, times 0 [ 585.033223][T15847] CPU: 1 UID: 0 PID: 15847 Comm: syz.2.2011 Tainted: G L syzkaller #0 PREEMPT(full) [ 585.033264][T15847] Tainted: [L]=SOFTLOCKUP [ 585.033273][T15847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 585.033296][T15847] Call Trace: [ 585.033304][T15847] [ 585.033313][T15847] dump_stack_lvl+0x100/0x190 [ 585.033345][T15847] should_fail_ex.cold+0x5/0xa [ 585.033372][T15847] should_failslab+0xc2/0x120 [ 585.033402][T15847] kmem_cache_alloc_noprof+0x91/0x6a0 [ 585.033430][T15847] ? stack_trace_save+0x8e/0xc0 [ 585.033460][T15847] ? alloc_empty_file+0x5b/0x1c0 [ 585.033494][T15847] alloc_empty_file+0x5b/0x1c0 [ 585.033524][T15847] path_openat+0xe7/0x4280 [ 585.033558][T15847] ? kasan_save_track+0x14/0x30 [ 585.033585][T15847] ? __kasan_slab_alloc+0x89/0x90 [ 585.033614][T15847] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 585.033641][T15847] ? do_getname+0x35/0x390 [ 585.033666][T15847] ? do_sys_openat2+0xc7/0x1e0 [ 585.033694][T15847] ? __x64_sys_open+0xfe/0x1d0 [ 585.033720][T15847] ? do_syscall_64+0x115/0x840 [ 585.033751][T15847] ? __pfx_path_openat+0x10/0x10 [ 585.033798][T15847] do_file_open+0x20e/0x430 [ 585.033835][T15847] ? __lock_acquire+0x49f/0x1a40 [ 585.033874][T15847] ? __pfx_do_file_open+0x10/0x10 [ 585.033934][T15847] ? _raw_spin_unlock+0x28/0x50 [ 585.033970][T15847] ? alloc_fd+0x471/0x7a0 [ 585.034015][T15847] do_sys_openat2+0x10f/0x1e0 [ 585.034042][T15847] ? __pfx_do_sys_openat2+0x10/0x10 [ 585.034075][T15847] ? __fget_files+0x21f/0x3d0 [ 585.034116][T15847] __x64_sys_open+0xfe/0x1d0 [ 585.034156][T15847] ? __pfx___x64_sys_open+0x10/0x10 [ 585.034186][T15847] ? ksys_write+0x1ac/0x250 [ 585.034235][T15847] do_syscall_64+0x115/0x840 [ 585.034257][T15847] ? clear_bhb_loop+0x40/0x90 [ 585.034296][T15847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 585.034323][T15847] RIP: 0033:0x7f40ccf9de59 [ 585.034345][T15847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 585.034369][T15847] RSP: 002b:00007f40cdea0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 585.034392][T15847] RAX: ffffffffffffffda RBX: 00007f40cd226270 RCX: 00007f40ccf9de59 [ 585.034409][T15847] RDX: 0000000000000031 RSI: 0000000000040000 RDI: 00002000000000c0 [ 585.034424][T15847] RBP: 00007f40cdea0090 R08: 0000000000000000 R09: 0000000000000000 [ 585.034438][T15847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 585.034452][T15847] R13: 00007f40cd226308 R14: 00007f40cd226270 R15: 00007ffd8423ac18 [ 585.034484][T15847] [ 587.763202][T15894] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2022'. [ 587.807570][T15894] openvswitch: ovs_?: Dropping previously announced user features [ 587.984257][T13735] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm kworker/u11:3: bg 2: bad block bitmap checksum [ 588.017830][T13735] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 5 with max blocks 3 with error 74 [ 588.037567][T13735] EXT4-fs (sda1): This should not happen!! Data will be lost [ 588.037567][T13735] [ 588.934574][T15922] FAULT_INJECTION: forcing a failure. [ 588.934574][T15922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 588.982635][T15922] CPU: 1 UID: 0 PID: 15922 Comm: syz.1.2027 Tainted: G L syzkaller #0 PREEMPT(full) [ 588.982680][T15922] Tainted: [L]=SOFTLOCKUP [ 588.982689][T15922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 588.982705][T15922] Call Trace: [ 588.982713][T15922] [ 588.982723][T15922] dump_stack_lvl+0x100/0x190 [ 588.982762][T15922] should_fail_ex.cold+0x5/0xa [ 588.982793][T15922] _copy_from_user+0x2e/0xd0 [ 588.982832][T15922] copy_msghdr_from_user+0x9f/0x4c0 [ 588.982877][T15922] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 588.982934][T15922] ___sys_sendmsg+0x106/0x1e0 [ 588.982975][T15922] ? __pfx____sys_sendmsg+0x10/0x10 [ 588.983018][T15922] ? __lock_acquire+0x49f/0x1a40 [ 588.983059][T15922] ? get_pid_task+0x106/0x250 [ 588.983129][T15922] __sys_sendmsg+0x160/0x210 [ 588.983162][T15922] ? __pfx___sys_sendmsg+0x10/0x10 [ 588.983212][T15922] do_syscall_64+0x115/0x840 [ 588.983236][T15922] ? clear_bhb_loop+0x40/0x90 [ 588.983270][T15922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.983297][T15922] RIP: 0033:0x7fe01dd9de59 [ 588.983319][T15922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 588.983344][T15922] RSP: 002b:00007fe01bff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 588.983370][T15922] RAX: ffffffffffffffda RBX: 00007fe01e025fa0 RCX: 00007fe01dd9de59 [ 588.983389][T15922] RDX: 0000000000004002 RSI: 00002000000079c0 RDI: 0000000000000003 [ 588.983405][T15922] RBP: 00007fe01bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 588.983422][T15922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.983438][T15922] R13: 00007fe01e026038 R14: 00007fe01e025fa0 R15: 00007ffed2dd58a8 [ 588.983475][T15922] [ 590.235088][T15947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2033'. [ 590.388472][T15943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'. [ 590.880894][T13713] Bluetooth: hci4: unexpected event for opcode 0x7c89 [ 591.324771][ T29] audit: type=1800 audit(1843104531.665:18): pid=15984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2040" name="features" dev="configfs" ino=58298 res=0 errno=0 [ 591.561684][T15962] Process accounting resumed [ 592.603305][T16009] FAULT_INJECTION: forcing a failure. [ 592.603305][T16009] name fail_futex, interval 1, probability 0, space 0, times 0 [ 592.620658][T16009] CPU: 1 UID: 0 PID: 16009 Comm: syz.2.2045 Tainted: G L syzkaller #0 PREEMPT(full) [ 592.620702][T16009] Tainted: [L]=SOFTLOCKUP [ 592.620711][T16009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 592.620727][T16009] Call Trace: [ 592.620735][T16009] [ 592.620744][T16009] dump_stack_lvl+0x100/0x190 [ 592.620780][T16009] should_fail_ex.cold+0x5/0xa [ 592.620811][T16009] get_futex_key+0x1d2/0x14f0 [ 592.620861][T16009] ? __pfx_get_futex_key+0x10/0x10 [ 592.620905][T16009] ? tomoyo_path_number_perm+0x28f/0x580 [ 592.620949][T16009] futex_wake+0xf4/0x5e0 [ 592.620979][T16009] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 592.621015][T16009] ? __pfx_futex_wake+0x10/0x10 [ 592.621046][T16009] ? __pfx_sock_do_ioctl+0x10/0x10 [ 592.621095][T16009] do_futex+0x2b2/0x440 [ 592.621122][T16009] ? __pfx_do_futex+0x10/0x10 [ 592.621148][T16009] ? sock_ioctl+0x2dc/0x6b0 [ 592.621193][T16009] __x64_sys_futex+0x34f/0x4d0 [ 592.621224][T16009] ? __fget_files+0x21f/0x3d0 [ 592.621281][T16009] ? __pfx___x64_sys_futex+0x10/0x10 [ 592.621322][T16009] do_syscall_64+0x115/0x840 [ 592.621347][T16009] ? clear_bhb_loop+0x40/0x90 [ 592.621375][T16009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.621396][T16009] RIP: 0033:0x7f40ccf9de59 [ 592.621419][T16009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.621445][T16009] RSP: 002b:00007f40cdf030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 592.621472][T16009] RAX: ffffffffffffffda RBX: 00007f40cd225fa8 RCX: 00007f40ccf9de59 [ 592.621490][T16009] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f40cd225fac [ 592.621507][T16009] RBP: 00007f40cd225fa0 R08: 0000000000000001 R09: 0000000000000000 [ 592.621521][T16009] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 592.621538][T16009] R13: 00007f40cd226038 R14: 00007ffd8423ab30 R15: 00007ffd8423ac18 [ 592.621570][T16009] [ 592.905987][T16009] netlink: 'syz.2.2045': attribute type 1 has an invalid length. [ 592.954642][T16013] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2047'. [ 594.052639][T16023] FAULT_INJECTION: forcing a failure. [ 594.052639][T16023] name fail_futex, interval 1, probability 0, space 0, times 0 [ 594.076166][T16023] CPU: 1 UID: 0 PID: 16023 Comm: syz.1.2052 Tainted: G L syzkaller #0 PREEMPT(full) [ 594.076191][T16023] Tainted: [L]=SOFTLOCKUP [ 594.076196][T16023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 594.076204][T16023] Call Trace: [ 594.076210][T16023] [ 594.076215][T16023] dump_stack_lvl+0x100/0x190 [ 594.076236][T16023] should_fail_ex.cold+0x5/0xa [ 594.076252][T16023] get_futex_key+0x1d2/0x14f0 [ 594.076277][T16023] ? __pfx_get_futex_key+0x10/0x10 [ 594.076299][T16023] ? lock_acquire+0x1b9/0x370 [ 594.076325][T16023] futex_wake+0xf4/0x5e0 [ 594.076343][T16023] ? __pfx_futex_wake+0x10/0x10 [ 594.076360][T16023] ? find_held_lock+0x2b/0x80 [ 594.076375][T16023] ? exit_mm_release+0x19/0x30 [ 594.076396][T16023] do_futex+0x2b2/0x440 [ 594.076411][T16023] ? __pfx_do_futex+0x10/0x10 [ 594.076423][T16023] ? __might_fault+0xc5/0x140 [ 594.076441][T16023] mm_release+0x24a/0x2f0 [ 594.076456][T16023] do_exit+0x707/0x2ae0 [ 594.076473][T16023] ? anon_pipe_read+0xc1c/0x1200 [ 594.076499][T16023] ? __pfx_do_exit+0x10/0x10 [ 594.076516][T16023] ? do_raw_spin_lock+0x128/0x260 [ 594.076529][T16023] ? find_held_lock+0x2b/0x80 [ 594.076551][T16023] ? get_signal+0x7e0/0x21e0 [ 594.076579][T16023] do_group_exit+0xd5/0x2a0 [ 594.076615][T16023] get_signal+0x1ec7/0x21e0 [ 594.076644][T16023] ? security_file_permission+0x76/0x210 [ 594.076673][T16023] ? rw_verify_area+0xce/0x6d0 [ 594.076695][T16023] ? __pfx_get_signal+0x10/0x10 [ 594.076711][T16023] ? __pfx_vfs_read+0x10/0x10 [ 594.076729][T16023] ? find_held_lock+0x2b/0x80 [ 594.076746][T16023] arch_do_signal_or_restart+0x91/0x7a0 [ 594.076771][T16023] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 594.076797][T16023] ? fput+0x79/0x100 [ 594.076815][T16023] exit_to_user_mode_loop+0x139/0x6f0 [ 594.076837][T16023] ? rcu_is_watching+0x12/0xc0 [ 594.076854][T16023] do_syscall_64+0x652/0x840 [ 594.076868][T16023] ? clear_bhb_loop+0x40/0x90 [ 594.076886][T16023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.076901][T16023] RIP: 0033:0x7fe01dd9de59 [ 594.076914][T16023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.076928][T16023] RSP: 002b:00007fe01bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 594.076943][T16023] RAX: fffffffffffffe00 RBX: 00007fe01e025fa0 RCX: 00007fe01dd9de59 [ 594.076952][T16023] RDX: 0000000000001000 RSI: 0000200000000040 RDI: 0000000000000000 [ 594.076961][T16023] RBP: 00007fe01bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 594.076970][T16023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 594.076978][T16023] R13: 00007fe01e026038 R14: 00007fe01e025fa0 R15: 00007ffed2dd58a8 [ 594.077002][T16023] [ 594.570555][T16051] openvswitch: ovs_: Dropping previously announced user features [ 595.153964][ T29] audit: type=1800 audit(1843105558.504:19): pid=16068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2064" name="lu_gp_id" dev="configfs" ino=60570 res=0 errno=0 [ 595.882611][T16083] kafs: addr_prefs: Invalid Command [ 596.487065][T16094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2070'. [ 596.517071][T16094] openvswitch: ovs_?: Dropping previously announced user features [ 596.517391][T16096] FAULT_INJECTION: forcing a failure. [ 596.517391][T16096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 596.538374][T16096] CPU: 0 UID: 0 PID: 16096 Comm: syz.1.2069 Tainted: G L syzkaller #0 PREEMPT(full) [ 596.538423][T16096] Tainted: [L]=SOFTLOCKUP [ 596.538431][T16096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 596.538447][T16096] Call Trace: [ 596.538455][T16096] [ 596.538463][T16096] dump_stack_lvl+0x100/0x190 [ 596.538495][T16096] should_fail_ex.cold+0x5/0xa [ 596.538521][T16096] _copy_from_iter+0x1f4/0x1690 [ 596.538558][T16096] ? __asan_memset+0x23/0x50 [ 596.538583][T16096] ? __pfx__copy_from_iter+0x10/0x10 [ 596.538617][T16096] ? __pfx___alloc_skb+0x10/0x10 [ 596.538731][T16096] netlink_sendmsg+0x808/0xda0 [ 596.538779][T16096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.538822][T16096] ? apparmor_socket_sendmsg+0x15b/0x270 [ 596.538871][T16096] ____sys_sendmsg+0xa4d/0xbe0 [ 596.538906][T16096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.538947][T16096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 596.539001][T16096] ___sys_sendmsg+0x190/0x1e0 [ 596.539042][T16096] ? __pfx____sys_sendmsg+0x10/0x10 [ 596.539079][T16096] ? __lock_acquire+0x49f/0x1a40 [ 596.539117][T16096] ? get_pid_task+0x106/0x250 [ 596.539261][T16096] __sys_sendmsg+0x160/0x210 [ 596.539291][T16096] ? __pfx___sys_sendmsg+0x10/0x10 [ 596.539335][T16096] do_syscall_64+0x115/0x840 [ 596.539357][T16096] ? clear_bhb_loop+0x40/0x90 [ 596.539385][T16096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.539408][T16096] RIP: 0033:0x7fe01dd9de59 [ 596.539426][T16096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 596.539447][T16096] RSP: 002b:00007fe01bff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.539469][T16096] RAX: ffffffffffffffda RBX: 00007fe01e025fa0 RCX: 00007fe01dd9de59 [ 596.539485][T16096] RDX: 0000000000004002 RSI: 00002000000079c0 RDI: 0000000000000003 [ 596.539499][T16096] RBP: 00007fe01bff6090 R08: 0000000000000000 R09: 0000000000000000 [ 596.539513][T16096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.539526][T16096] R13: 00007fe01e026038 R14: 00007fe01e025fa0 R15: 00007ffed2dd58a8 [ 596.539555][T16096] [ 596.873822][T16104] ubi0: attaching mtd0 [ 596.879943][T16104] ubi0: scanning is finished [ 596.885708][T16104] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 597.050120][T16115] syz.3.2073 (16115): /proc/16109/oom_adj is deprecated, please use /proc/16109/oom_score_adj instead. [ 597.139350][T16104] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 597.497588][T16128] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2075'. [ 597.508172][T16128] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2075'. [ 598.408073][T16152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2080'. [ 598.425225][T16152] openvswitch: ovs_?: Dropping previously announced user features [ 598.560915][T16156] FAULT_INJECTION: forcing a failure. [ 598.560915][T16156] name failslab, interval 1, probability 0, space 0, times 0 [ 598.611330][T16156] CPU: 0 UID: 0 PID: 16156 Comm: syz.2.2081 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.611373][T16156] Tainted: [L]=SOFTLOCKUP [ 598.611381][T16156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 598.611396][T16156] Call Trace: [ 598.611406][T16156] [ 598.611415][T16156] dump_stack_lvl+0x100/0x190 [ 598.611460][T16156] should_fail_ex.cold+0x5/0xa [ 598.611485][T16156] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 598.611528][T16156] should_failslab+0xc2/0x120 [ 598.611564][T16156] kmem_cache_alloc_noprof+0x91/0x6a0 [ 598.611596][T16156] ? skb_clone+0x190/0x400 [ 598.611632][T16156] skb_clone+0x190/0x400 [ 598.611663][T16156] netlink_deliver_tap+0xaed/0xcc0 [ 598.611708][T16156] netlink_unicast+0x62b/0x850 [ 598.611751][T16156] ? __pfx_netlink_unicast+0x10/0x10 [ 598.611799][T16156] netlink_sendmsg+0x8b0/0xda0 [ 598.611844][T16156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.611888][T16156] ? apparmor_socket_sendmsg+0x15b/0x270 [ 598.611935][T16156] ____sys_sendmsg+0xa4d/0xbe0 [ 598.611969][T16156] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.612011][T16156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.612064][T16156] ___sys_sendmsg+0x190/0x1e0 [ 598.612108][T16156] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.612145][T16156] ? __lock_acquire+0x49f/0x1a40 [ 598.612183][T16156] ? get_pid_task+0x106/0x250 [ 598.612253][T16156] __sys_sendmsg+0x160/0x210 [ 598.612285][T16156] ? __pfx___sys_sendmsg+0x10/0x10 [ 598.612335][T16156] do_syscall_64+0x115/0x840 [ 598.612358][T16156] ? clear_bhb_loop+0x40/0x90 [ 598.612388][T16156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.612415][T16156] RIP: 0033:0x7f40ccf9de59 [ 598.612436][T16156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.612466][T16156] RSP: 002b:00007f40cdf03028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.612490][T16156] RAX: ffffffffffffffda RBX: 00007f40cd225fa0 RCX: 00007f40ccf9de59 [ 598.612508][T16156] RDX: 0000000000004002 RSI: 00002000000079c0 RDI: 0000000000000003 [ 598.612523][T16156] RBP: 00007f40cdf03090 R08: 0000000000000000 R09: 0000000000000000 [ 598.612566][T16156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.612581][T16156] R13: 00007f40cd226038 R14: 00007f40cd225fa0 R15: 00007ffd8423ac18 [ 598.612613][T16156] [ 601.277411][T16199] FAULT_INJECTION: forcing a failure. [ 601.277411][T16199] name failslab, interval 1, probability 0, space 0, times 0 [ 601.314128][T16199] CPU: 0 UID: 0 PID: 16199 Comm: syz.4.2092 Tainted: G L syzkaller #0 PREEMPT(full) [ 601.314177][T16199] Tainted: [L]=SOFTLOCKUP [ 601.314186][T16199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 601.314202][T16199] Call Trace: [ 601.314211][T16199] [ 601.314221][T16199] dump_stack_lvl+0x100/0x190 [ 601.314257][T16199] should_fail_ex.cold+0x5/0xa [ 601.314288][T16199] should_failslab+0xc2/0x120 [ 601.314322][T16199] __kmalloc_noprof+0xfc/0x820 [ 601.314354][T16199] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 601.314393][T16199] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 601.314431][T16199] genl_family_rcv_msg_doit+0xc7/0x300 [ 601.314462][T16199] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 601.314489][T16199] ? genl_get_cmd+0x3e7/0x760 [ 601.314538][T16199] ? bpf_lsm_capable+0x9/0x10 [ 601.314565][T16199] ? security_capable+0x80/0x260 [ 601.314607][T16199] ? ns_capable+0xd2/0xf0 [ 601.314635][T16199] genl_rcv_msg+0x560/0x800 [ 601.314666][T16199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.314694][T16199] ? __pfx_tipc_nl_net_set+0x10/0x10 [ 601.314859][T16199] netlink_rcv_skb+0x159/0x420 [ 601.314899][T16199] ? __pfx_genl_rcv_msg+0x10/0x10 [ 601.314928][T16199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 601.314966][T16199] ? rcu_is_watching+0x12/0xc0 [ 601.315007][T16199] ? __rcu_read_unlock+0x26a/0x5e0 [ 601.315045][T16199] ? rcu_is_watching+0x12/0xc0 [ 601.315081][T16199] genl_rcv+0x28/0x40 [ 601.315103][T16199] netlink_unicast+0x585/0x850 [ 601.315155][T16199] ? __pfx_netlink_unicast+0x10/0x10 [ 601.315204][T16199] netlink_sendmsg+0x8b0/0xda0 [ 601.315249][T16199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.315294][T16199] ? apparmor_socket_sendmsg+0x15b/0x270 [ 601.315342][T16199] ____sys_sendmsg+0xa4d/0xbe0 [ 601.315378][T16199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 601.315420][T16199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 601.315475][T16199] ___sys_sendmsg+0x190/0x1e0 [ 601.315517][T16199] ? __pfx____sys_sendmsg+0x10/0x10 [ 601.315554][T16199] ? __lock_acquire+0x49f/0x1a40 [ 601.315597][T16199] ? get_pid_task+0x106/0x250 [ 601.315666][T16199] __sys_sendmsg+0x160/0x210 [ 601.315699][T16199] ? __pfx___sys_sendmsg+0x10/0x10 [ 601.315749][T16199] do_syscall_64+0x115/0x840 [ 601.315774][T16199] ? clear_bhb_loop+0x40/0x90 [ 601.315807][T16199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.315835][T16199] RIP: 0033:0x7f7757d9de59 [ 601.315858][T16199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.315884][T16199] RSP: 002b:00007f7758c2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 601.315909][T16199] RAX: ffffffffffffffda RBX: 00007f7758025fa0 RCX: 00007f7757d9de59 [ 601.315928][T16199] RDX: 0000000000004002 RSI: 00002000000079c0 RDI: 0000000000000003 [ 601.315944][T16199] RBP: 00007f7758c2e090 R08: 0000000000000000 R09: 0000000000000000 [ 601.315960][T16199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.315976][T16199] R13: 00007f7758026038 R14: 00007f7758025fa0 R15: 00007fff59a5ac28 [ 601.316012][T16199] [ 603.182460][T16222] random: crng reseeded on system resumption [ 603.266856][T16222] Unrecognized hibernate image header format! [ 603.287575][T16222] PM: hibernation: Image mismatch: architecture specific data [ 603.450289][T16222] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2095: iget: checksum invalid [ 603.461995][T16222] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 603.484696][T16222] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2095: iget: checksum invalid [ 603.510060][T16222] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 603.525992][T16222] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2095: iget: checksum invalid [ 603.550218][T16222] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 603.601991][T16222] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.2.2095: iget: checksum invalid [ 603.647662][T16222] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 603.679810][T16222] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 603.712844][T16222] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 605.130528][T16241] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2098'. [ 605.511119][T16239] Process accounting paused [ 605.665516][T16252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2101'. [ 605.866795][T16255] netlink: 'syz.2.2102': attribute type 10 has an invalid length. [ 605.880440][T16255] netlink: 'syz.2.2102': attribute type 13 has an invalid length. [ 605.901343][T16255] netlink: 'syz.2.2102': attribute type 10 has an invalid length. [ 605.914776][T16255] netlink: 'syz.2.2102': attribute type 13 has an invalid length. [ 606.135192][T16261] input: f¬ as /devices/virtual/input/input9 [ 608.015995][T16279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'. [ 608.050833][T16279] openvswitch: ovs_?: Dropping previously announced user features [ 608.863485][T16294] random: crng reseeded on system resumption [ 608.914231][T16294] Unrecognized hibernate image header format! [ 608.929115][T16294] PM: hibernation: Image mismatch: architecture specific data [ 609.204803][T16281] rcu: RCU calculated value of scheduler-enlistment delay is 10 jiffies. [ 609.262327][T16300] bond0: invalid ARP target specified [ 609.315388][T16300] nbd: socks must be embedded in a SOCK_ITEM attr [ 609.323823][T16300] block nbd2: shutting down sockets [ 609.738348][T16309] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2118'. [ 609.758893][T16309] openvswitch: ovs_?: Dropping previously announced user features [ 610.089106][T16318] vivid-007: ================= START STATUS ================= [ 610.098173][T16318] vivid-007: Generate PTS: true [ 610.105734][T16318] vivid-007: Generate SCR: true [ 610.112034][T16318] tpg source WxH: 320x240 (Y'CbCr) [ 610.118776][T16318] tpg field: 1 [ 610.122924][T16318] tpg crop: (0,0)/320x240 [ 610.127362][T16318] tpg compose: (0,0)/320x240 [ 610.132878][T16318] tpg colorspace: 8 [ 610.136917][T16318] tpg transfer function: 0/0 [ 610.142082][T16318] tpg Y'CbCr encoding: 0/0 [ 610.146780][T16318] tpg quantization: 0/0 [ 610.157734][T16318] tpg RGB range: 0/2 [ 610.162165][T16318] vivid-007: ================== END STATUS ================== [ 611.686954][T16329] Process accounting paused [ 611.943025][T16340] nbd: socks must be embedded in a SOCK_ITEM attr [ 611.974548][T16340] block nbd2: shutting down sockets [ 612.128994][T16339] bond0: invalid ARP target specified [ 612.840537][T16358] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2129'. [ 612.916386][T16358] openvswitch: ovs_?: Dropping previously announced user features [ 613.143199][T16363] FAULT_INJECTION: forcing a failure. [ 613.143199][T16363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.160835][T16363] CPU: 0 UID: 0 PID: 16363 Comm: syz.1.2131 Tainted: G L syzkaller #0 PREEMPT(full) [ 613.160880][T16363] Tainted: [L]=SOFTLOCKUP [ 613.160889][T16363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 613.160905][T16363] Call Trace: [ 613.160914][T16363] [ 613.160925][T16363] dump_stack_lvl+0x100/0x190 [ 613.160963][T16363] should_fail_ex.cold+0x5/0xa [ 613.160995][T16363] copy_fpstate_to_sigframe+0x82d/0xae0 [ 613.161043][T16363] ? kmem_cache_free+0x127/0x6b0 [ 613.161087][T16363] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 613.161140][T16363] ? collect_signal+0x271/0x550 [ 613.161172][T16363] ? x86_task_fpu+0x5f/0x90 [ 613.161204][T16363] get_sigframe+0x3fb/0x940 [ 613.161250][T16363] ? __pfx_get_sigframe+0x10/0x10 [ 613.161289][T16363] ? rcu_is_watching+0x12/0xc0 [ 613.161318][T16363] ? siginfo_layout+0x1b1/0x290 [ 613.161364][T16363] x64_setup_rt_frame+0x12f/0xce0 [ 613.161413][T16363] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 613.161456][T16363] ? do_send_specific+0x15c/0x360 [ 613.161487][T16363] ? __pfx_do_send_specific+0x10/0x10 [ 613.161534][T16363] arch_do_signal_or_restart+0x6b6/0x7a0 [ 613.161579][T16363] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 613.161633][T16363] ? __pfx___x64_sys_rt_tgsigqueueinfo+0x10/0x10 [ 613.161681][T16363] exit_to_user_mode_loop+0x139/0x6f0 [ 613.161724][T16363] ? rcu_is_watching+0x12/0xc0 [ 613.161757][T16363] do_syscall_64+0x652/0x840 [ 613.161783][T16363] ? clear_bhb_loop+0x40/0x90 [ 613.161817][T16363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.161845][T16363] RIP: 0033:0x7fe01dd9de59 [ 613.161868][T16363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.161894][T16363] RSP: 002b:00007fe01bff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000129 [ 613.161922][T16363] RAX: 0000000000000000 RBX: 00007fe01e025fa0 RCX: 00007fe01dd9de59 [ 613.161940][T16363] RDX: 0000000000000021 RSI: 0000000000000928 RDI: 0000000000000927 [ 613.161955][T16363] RBP: 00007fe01de33e6f R08: 0000000000000000 R09: 0000000000000000 [ 613.161970][T16363] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000000 [ 613.161987][T16363] R13: 00007fe01e026038 R14: 00007fe01e025fa0 R15: 00007ffed2dd58a8 [ 613.162023][T16363] [ 614.439805][T16382] openvswitch: ovs_: Dropping previously announced user features [ 615.689958][T16419] openvswitch: netlink: Missing valid actions attribute. [ 616.299538][T16434] bond0: invalid ARP target specified [ 616.372771][T16434] nbd: socks must be embedded in a SOCK_ITEM attr [ 616.391261][T16434] block nbd2: shutting down sockets [ 617.110357][T16454] random: crng reseeded on system resumption [ 618.664688][T16493] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2162'. [ 621.373056][T16543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2175'. [ 621.563522][T16546] Process accounting paused [ 622.195106][T16563] bond0: invalid ARP target specified [ 622.226563][T16563] nbd: socks must be embedded in a SOCK_ITEM attr [ 622.233290][T16563] block nbd2: shutting down sockets [ 622.290485][T16565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2181'. [ 622.301962][T16565] openvswitch: ovs_?: Dropping previously announced user features [ 622.346698][T16567] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2182'. [ 622.732084][T16578] openvswitch: ovs_: Dropping previously announced user features [ 622.759970][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 622.768010][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.126454][T16582] openvswitch: netlink: Missing valid actions attribute. [ 623.740374][T16607] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2191'. [ 623.755531][T16607] openvswitch: ovs_?: Dropping previously announced user features [ 623.860670][T16609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2192'. [ 624.203234][T16620] vivid-011: ================= START STATUS ================= [ 624.232506][T16620] vivid-011: Radio HW Seek Mode: Bounded [ 624.275680][T16620] vivid-011: Radio Programmable HW Seek: false [ 624.313737][T16620] vivid-011: RDS Rx I/O Mode: Block I/O [ 624.335435][T16620] vivid-011: Generate RBDS Instead of RDS: false [ 624.359890][T16620] vivid-011: RDS Reception: true [ 624.380550][T16620] vivid-011: RDS Program Type: 0 inactive [ 624.433201][T16620] vivid-011: RDS PS Name: inactive [ 624.452470][T16620] vivid-011: RDS Radio Text: inactive [ 624.524129][T16620] vivid-011: RDS Traffic Announcement: false inactive [ 624.559653][T16620] vivid-011: RDS Traffic Program: false inactive [ 624.601221][T16620] vivid-011: RDS Music: false inactive [ 624.634867][T16639] openvswitch: ovs_: Dropping previously announced user features [ 624.657320][T16620] vivid-011: ================== END STATUS ================== [ 627.229384][T16688] input: f¬ as /devices/virtual/input/input10 [ 627.312029][T16691] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2208'. [ 627.681592][T16702] openvswitch: netlink: Missing valid actions attribute. [ 627.962949][T16706] bond0: invalid ARP target specified [ 628.027154][T16706] nbd: socks must be embedded in a SOCK_ITEM attr [ 628.049604][T16706] block nbd2: shutting down sockets [ 628.126548][T16706] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2211'. [ 628.208971][T16706] team0 (unregistering): Port device team_slave_0 removed [ 628.247254][T16706] team0 (unregistering): Port device team_slave_1 removed [ 628.873001][T16735] netlink: 186 bytes leftover after parsing attributes in process `syz.4.2219'. [ 629.098574][T16738] sock: sock_timestamping_bind_phc: sock not bind to device [ 629.203594][T16744] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 629.276578][T16744] openvswitch: ovs_?: Dropping previously announced user features [ 629.436086][T16747] openvswitch: netlink: Missing valid actions attribute. [ 629.475405][T16752] openvswitch: ovs_: Dropping previously announced user features [ 629.935605][T16759] FAULT_INJECTION: forcing a failure. [ 629.935605][T16759] name failslab, interval 1, probability 0, space 0, times 0 [ 629.982609][T16759] CPU: 1 UID: 0 PID: 16759 Comm: syz.2.2224 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.982649][T16759] Tainted: [L]=SOFTLOCKUP [ 629.982657][T16759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 629.982671][T16759] Call Trace: [ 629.982680][T16759] [ 629.982689][T16759] dump_stack_lvl+0x100/0x190 [ 629.982722][T16759] should_fail_ex.cold+0x5/0xa [ 629.982749][T16759] should_failslab+0xc2/0x120 [ 629.982779][T16759] __kmalloc_cache_noprof+0x91/0x6c0 [ 629.982816][T16759] ? trace_pid_list_alloc+0x232/0x480 [ 629.982853][T16759] trace_pid_list_alloc+0x232/0x480 [ 629.982887][T16759] trace_pid_write+0x110/0x460 [ 629.982919][T16759] ? __pfx_trace_pid_write+0x10/0x10 [ 629.982970][T16759] event_pid_write.isra.0+0x1e4/0x7d0 [ 629.983005][T16759] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 629.983047][T16759] vfs_write+0x2aa/0x1050 [ 629.983082][T16759] ? __pfx_ftrace_event_npid_write+0x10/0x10 [ 629.983117][T16759] ? __pfx_vfs_write+0x10/0x10 [ 629.983151][T16759] ? __pfx_do_futex+0x10/0x10 [ 629.983173][T16759] ? __pfx_do_sys_openat2+0x10/0x10 [ 629.983209][T16759] ? __x64_sys_futex+0x34f/0x4d0 [ 629.983231][T16759] ? __x64_sys_futex+0x358/0x4d0 [ 629.983258][T16759] ksys_write+0x12a/0x250 [ 629.983291][T16759] ? __pfx_ksys_write+0x10/0x10 [ 629.983338][T16759] do_syscall_64+0x115/0x840 [ 629.983360][T16759] ? clear_bhb_loop+0x40/0x90 [ 629.983390][T16759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.983414][T16759] RIP: 0033:0x7f40ccf9de59 [ 629.983434][T16759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.983454][T16759] RSP: 002b:00007f40cdee2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 629.983478][T16759] RAX: ffffffffffffffda RBX: 00007f40cd226090 RCX: 00007f40ccf9de59 [ 629.983493][T16759] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 629.983507][T16759] RBP: 00007f40cd033e6f R08: 0000000000000000 R09: 0000000000000000 [ 629.983530][T16759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 629.983543][T16759] R13: 00007f40cd226128 R14: 00007f40cd226090 R15: 00007ffd8423ac18 [ 629.983577][T16759] [ 630.266243][T16765] bond0: invalid ARP target specified [ 630.306605][T16765] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2226'. [ 630.383779][T16768] nbd: socks must be embedded in a SOCK_ITEM attr [ 630.417456][T16768] block nbd2: shutting down sockets [ 631.365400][T16813] openvswitch: netlink: Missing valid actions attribute. [ 632.157515][T16829] NFSD: Failed to start, no listeners configured. [ 634.104228][T16863] random: crng reseeded on system resumption [ 634.720879][T16873] vivid-007: ================= START STATUS ================= [ 634.742644][T16873] vivid-007: Generate PTS: true [ 634.753817][T16873] vivid-007: Generate SCR: true [ 634.764815][T16873] tpg source WxH: 320x240 (Y'CbCr) [ 634.775875][T16873] tpg field: 1 [ 634.785716][T16873] tpg crop: (0,0)/320x240 [ 634.811467][T16873] tpg compose: (0,0)/320x240 [ 634.832281][T16873] tpg colorspace: 8 [ 634.847993][T16873] tpg transfer function: 0/0 [ 634.861884][T16873] tpg Y'CbCr encoding: 0/0 [ 634.869846][T16873] tpg quantization: 0/0 [ 634.878082][T16873] tpg RGB range: 0/2 [ 634.885935][T16873] vivid-007: ================== END STATUS ================== [ 635.026611][T16877] random: crng reseeded on system resumption [ 635.166328][T16877] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2249: iget: checksum invalid [ 635.214227][T16877] faux_driver regulatory: loading /lib/firmware/updates/syzkaller/regulatory.db failed with error -74 [ 635.246242][T16877] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2249: iget: checksum invalid [ 635.266204][T16877] faux_driver regulatory: loading /lib/firmware/updates/regulatory.db failed with error -74 [ 635.297478][T16877] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2249: iget: checksum invalid [ 635.316295][T16877] faux_driver regulatory: loading /lib/firmware/syzkaller/regulatory.db failed with error -74 [ 635.372083][T16877] EXT4-fs error (device sda1): ext4_lookup:1785: inode #274: comm syz.4.2249: iget: checksum invalid [ 635.383844][T16877] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -74 [ 635.395043][T16877] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -74 [ 635.405131][T16877] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 636.672372][T16847] Process accounting resumed [ 636.985673][T16924] nbd: socks must be embedded in a SOCK_ITEM attr [ 636.998103][T16925] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2254'. [ 637.018689][T16924] block nbd2: shutting down sockets [ 637.043884][T16923] bond0: invalid ARP target specified [ 637.321434][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2252'. [ 637.348110][T16930] kvm: kvm [16929]: vcpu5, guest rIP: 0xfff0 Unhandled WRMSR(0x4000007d) = 0x1000 [ 637.455699][T16895] macsec0: entered promiscuous mode [ 637.461673][T16895] macsec0: entered allmulticast mode [ 637.467189][T16895] veth1_macvtap: entered allmulticast mode [ 638.404533][T16945] blktrace: Concurrent blktraces are not allowed on sg0 [ 639.755185][T16950] openvswitch: ovs_: Dropping previously announced user features [ 640.018189][T16958] random: crng reseeded on system resumption [ 640.048975][T16958] Unrecognized hibernate image header format! [ 640.088127][T16958] PM: hibernation: Image mismatch: architecture specific data [ 642.294353][T17009] openvswitch: netlink: Missing valid actions attribute. [ 642.438595][T17018] openvswitch: ovs_: Dropping previously announced user features [ 642.586312][T17011] Process accounting resumed [ 643.049328][T17032] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2277'. [ 643.850066][T17040] openvswitch: netlink: Missing valid actions attribute. [ 645.932526][T17085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2287'. [ 646.103110][T17088] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 646.133680][T17088] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:106: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 646.183206][T17088] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 646.273709][T17094] phram: not enough arguments [ 646.379986][T17091] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 1: bad block bitmap checksum [ 646.477637][T16915] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.824574][T13732] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 646.838847][T13732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 646.856087][T13732] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 646.875788][T13732] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 646.893101][T13732] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 647.321669][T17111] futex_wake_op: syz.1.2293 tries to shift op by -2048; fix this program [ 647.341876][T17111] futex_wake_op: syz.1.2293 tries to shift op by -2048; fix this program [ 647.363080][T17116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2294'. [ 647.388505][T17116] openvswitch: ovs_?: Dropping previously announced user features [ 647.654223][T17123] nbd: socks must be embedded in a SOCK_ITEM attr [ 647.684505][T17123] block nbd2: shutting down sockets [ 647.717400][T13717] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 647.771252][T17123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2295'. [ 647.795443][T17120] bond0: invalid ARP target specified [ 647.989679][T13717] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.149016][T13717] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.255797][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2297'. [ 648.305240][T13717] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.431515][T13717] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.880593][T16915] EXT4-fs (sda1): Delayed block allocation failed for inode 2027 at logical offset 5 with max blocks 2 with error 117 [ 648.930438][T16915] EXT4-fs (sda1): This should not happen!! Data will be lost [ 648.930438][T16915] [ 648.990676][T17102] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.008390][T17102] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.021160][T17102] bridge_slave_0: entered allmulticast mode [ 649.027672][T13732] Bluetooth: hci1: command tx timeout [ 649.034935][T17102] bridge_slave_0: entered promiscuous mode [ 649.044312][T17102] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.067623][T17102] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.075415][T17102] bridge_slave_1: entered allmulticast mode [ 649.088475][T17102] bridge_slave_1: entered promiscuous mode [ 649.169952][T17102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.194950][T17102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.270796][T17102] team0: Port device team_slave_0 added [ 649.291157][T17102] team0: Port device team_slave_1 added [ 649.330543][T17102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.337994][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.367626][T17102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.388895][T17102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.395962][T17102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.422450][T17102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 649.494650][T17102] hsr_slave_0: entered promiscuous mode [ 649.503880][T17102] hsr_slave_1: entered promiscuous mode [ 650.191522][T17172] openvswitch: netlink: Missing valid actions attribute. [ 650.724277][T13732] Bluetooth: hci2: unexpected event for opcode 0x7c89 [ 651.098175][T13732] Bluetooth: hci1: command tx timeout [ 653.168136][T13732] Bluetooth: hci1: command tx timeout [ 655.238327][T13732] Bluetooth: hci1: command tx timeout [ 655.966874][T17254] openvswitch: ovs_: Dropping previously announced user features [ 656.341161][T17261] openvswitch: ovs_: Dropping previously announced user features [ 656.604756][T17269] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2325'. [ 656.615028][T17269] openvswitch: ovs_?: Dropping previously announced user features [ 656.821216][T17279] bond0: invalid ARP target specified [ 656.880781][T17279] nbd: socks must be embedded in a SOCK_ITEM attr [ 656.889773][T17279] block nbd2: shutting down sockets [ 656.917300][T17279] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2329'. [ 657.979143][T17289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2331'. [ 659.308513][T17300] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2334'. [ 659.322191][T17300] openvswitch: ovs_?: Dropping previously announced user features [ 661.773688][T17311] cgroup: fork rejected by pids controller in /syz3 [ 662.660408][T13713] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 662.672058][T13713] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 662.680834][T13713] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 662.696082][T13713] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 662.705846][T13713] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 663.326024][T17353] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.333289][T17353] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.340959][T17353] bridge_slave_0: entered allmulticast mode [ 663.348089][T17353] bridge_slave_0: entered promiscuous mode [ 663.356214][T17353] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.370263][T17353] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.390212][T17353] bridge_slave_1: entered allmulticast mode [ 663.397309][T17353] bridge_slave_1: entered promiscuous mode [ 663.471359][T17353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 663.485218][T17353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.534993][T17353] team0: Port device team_slave_0 added [ 663.547689][T17353] team0: Port device team_slave_1 added [ 663.576973][T17353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 663.584904][T17353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.611297][T17353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 663.631854][T17353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 663.632827][T17375] openvswitch: ovs_: Dropping previously announced user features [ 663.639244][T17353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 663.678977][T17353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 663.780220][T17353] hsr_slave_0: entered promiscuous mode [ 663.786576][T17353] hsr_slave_1: entered promiscuous mode [ 663.793598][T17353] debugfs: 'hsr0' already exists in 'hsr' [ 663.802424][T17353] Cannot create hsr debugfs directory [ 664.793505][T13713] Bluetooth: hci3: command tx timeout [ 666.863790][T13713] Bluetooth: hci3: command tx timeout [ 668.321111][T17408] netlink: 93 bytes leftover after parsing attributes in process `syz.3.2349'. [ 668.943962][T13713] Bluetooth: hci3: command tx timeout [ 670.651122][T17421] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2353'. [ 670.863224][T17423] netlink: 198 bytes leftover after parsing attributes in process `syz.3.2354'. [ 671.004348][T13713] Bluetooth: hci3: command tx timeout [ 671.915630][T13732] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 671.932200][T13732] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 671.940425][T13732] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 671.954486][T13732] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 671.964839][T13732] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 672.315256][T17445] netlink: 'syz.3.2358': attribute type 2 has an invalid length. [ 672.876056][T17431] bridge0: port 1(bridge_slave_0) entered blocking state [ 672.883291][T17431] bridge0: port 1(bridge_slave_0) entered disabled state [ 672.895709][T17431] bridge_slave_0: entered allmulticast mode [ 672.910353][T17431] bridge_slave_0: entered promiscuous mode [ 672.927736][T17431] bridge0: port 2(bridge_slave_1) entered blocking state [ 672.945187][T17431] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.952691][T17431] bridge_slave_1: entered allmulticast mode [ 672.968550][T17431] bridge_slave_1: entered promiscuous mode [ 673.032350][T17431] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.042099][T17463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2360'. [ 673.046173][T17431] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 673.096770][T17431] team0: Port device team_slave_0 added [ 673.108269][T17431] team0: Port device team_slave_1 added [ 673.153221][T17431] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 673.160568][T17431] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.187795][T17431] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 673.200788][T17431] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 673.209365][T17431] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 673.241025][T17431] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 673.330254][T17431] hsr_slave_0: entered promiscuous mode [ 673.354599][T17431] hsr_slave_1: entered promiscuous mode [ 673.365757][T17431] debugfs: 'hsr0' already exists in 'hsr' [ 673.371637][T17431] Cannot create hsr debugfs directory [ 674.030483][T13732] Bluetooth: hci5: command tx timeout [ 676.100531][T13732] Bluetooth: hci5: command tx timeout [ 678.170871][T13732] Bluetooth: hci5: command tx timeout [ 679.443537][T17522] futex_wake_op: syz.3.2376 tries to shift op by -2048; fix this program [ 679.453914][T17522] 0x004100000001-0x004500000004 : "" [ 679.459896][T17522] mtd: partition "" is out of reach -- disabled [ 679.483304][T17522] ftl_cs: FTL header not found. [ 680.251246][T13732] Bluetooth: hci5: command tx timeout [ 682.937565][T17552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2382'. [ 682.979392][T16915] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.991619][T16915] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.001737][T16915] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.012793][T16915] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.797464][ T29] audit: type=1800 audit(1843106670.579:20): pid=17557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2383" name="sr0" dev="devtmpfs" ino=2876 res=0 errno=0 [ 683.905659][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 683.915411][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 684.548114][T17561] bond0: invalid ARP target specified [ 684.601475][T17561] nbd: socks must be embedded in a SOCK_ITEM attr [ 684.609120][T17561] block nbd2: shutting down sockets [ 684.636029][T17561] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2384'. [ 699.846861][T13713] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 699.866438][T13713] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 699.875796][T13713] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 699.883742][T13713] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 699.891615][T13713] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 700.330802][T17569] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.339568][T17569] bridge0: port 1(bridge_slave_0) entered disabled state [ 700.347740][T17569] bridge_slave_0: entered allmulticast mode [ 700.355399][T17569] bridge_slave_0: entered promiscuous mode [ 700.363615][T17569] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.370934][T17569] bridge0: port 2(bridge_slave_1) entered disabled state [ 700.378371][T17569] bridge_slave_1: entered allmulticast mode [ 700.385566][T17569] bridge_slave_1: entered promiscuous mode [ 700.415961][T17569] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 700.428545][T17569] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 700.458556][T17569] team0: Port device team_slave_0 added [ 700.467408][T17569] team0: Port device team_slave_1 added [ 700.491775][T17569] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 700.499213][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.525870][T17569] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 700.539092][T17569] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 700.546473][T17569] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 700.572848][T17569] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.613546][T17569] hsr_slave_0: entered promiscuous mode [ 700.620270][T17569] hsr_slave_1: entered promiscuous mode [ 700.627316][T17569] debugfs: 'hsr0' already exists in 'hsr' [ 700.633131][T17569] Cannot create hsr debugfs directory [ 701.980901][T13713] Bluetooth: hci6: command tx timeout [ 704.049088][T13713] Bluetooth: hci6: command tx timeout [ 706.119310][T13713] Bluetooth: hci6: command tx timeout [ 706.765044][T13732] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 706.780125][T13732] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 706.793545][T13732] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 706.801901][T13732] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 706.809760][T13732] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 707.254103][T17588] bridge0: port 1(bridge_slave_0) entered blocking state [ 707.261291][T17588] bridge0: port 1(bridge_slave_0) entered disabled state [ 707.268730][T17588] bridge_slave_0: entered allmulticast mode [ 707.276006][T17588] bridge_slave_0: entered promiscuous mode [ 707.284421][T17588] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.291635][T17588] bridge0: port 2(bridge_slave_1) entered disabled state [ 707.299383][T17588] bridge_slave_1: entered allmulticast mode [ 707.306941][T17588] bridge_slave_1: entered promiscuous mode [ 707.336908][T17588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 707.349814][T17588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 707.377810][T17588] team0: Port device team_slave_0 added [ 707.385815][T17588] team0: Port device team_slave_1 added [ 707.411144][T17588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 707.418332][T17588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.444467][T17588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 707.457453][T17588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 707.464595][T17588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 707.491392][T17588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.535146][T17588] hsr_slave_0: entered promiscuous mode [ 707.541554][T17588] hsr_slave_1: entered promiscuous mode [ 707.548263][T17588] debugfs: 'hsr0' already exists in 'hsr' [ 707.554589][T17588] Cannot create hsr debugfs directory [ 708.189612][T13713] Bluetooth: hci6: command tx timeout [ 708.906551][T13713] Bluetooth: hci7: command tx timeout [ 710.976574][T13713] Bluetooth: hci7: command tx timeout [ 713.056916][T13713] Bluetooth: hci7: command tx timeout [ 715.119222][T13713] Bluetooth: hci7: command tx timeout [ 722.785782][T13732] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 722.800072][T13732] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 722.812145][T13732] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 722.820081][T13732] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 722.827913][T13732] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 723.266085][T17607] bridge0: port 1(bridge_slave_0) entered blocking state [ 723.273452][T17607] bridge0: port 1(bridge_slave_0) entered disabled state [ 723.280860][T17607] bridge_slave_0: entered allmulticast mode [ 723.288005][T17607] bridge_slave_0: entered promiscuous mode [ 723.298724][T17607] bridge0: port 2(bridge_slave_1) entered blocking state [ 723.305907][T17607] bridge0: port 2(bridge_slave_1) entered disabled state [ 723.313477][T17607] bridge_slave_1: entered allmulticast mode [ 723.321028][T17607] bridge_slave_1: entered promiscuous mode [ 723.352093][T17607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 723.363993][T17607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 723.392447][T17607] team0: Port device team_slave_0 added [ 723.401009][T17607] team0: Port device team_slave_1 added [ 723.426122][T17607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 723.433300][T17607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.459792][T17607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 723.472850][T17607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 723.480484][T17607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 723.506683][T17607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.549866][T17607] hsr_slave_0: entered promiscuous mode [ 723.556681][T17607] hsr_slave_1: entered promiscuous mode [ 723.563297][T17607] debugfs: 'hsr0' already exists in 'hsr' [ 723.569186][T17607] Cannot create hsr debugfs directory [ 724.910987][T13732] Bluetooth: hci8: command tx timeout [ 726.991187][T13732] Bluetooth: hci8: command tx timeout [ 729.051471][T13732] Bluetooth: hci8: command tx timeout [ 731.121715][T13732] Bluetooth: hci8: command tx timeout [ 731.792964][T13713] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 731.810427][T13713] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 731.821228][T13713] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 731.829829][T13713] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 731.837571][T13713] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 732.270265][T17626] bridge0: port 1(bridge_slave_0) entered blocking state [ 732.277659][T17626] bridge0: port 1(bridge_slave_0) entered disabled state [ 732.284903][T17626] bridge_slave_0: entered allmulticast mode [ 732.292520][T17626] bridge_slave_0: entered promiscuous mode [ 732.303057][T17626] bridge0: port 2(bridge_slave_1) entered blocking state [ 732.310442][T17626] bridge0: port 2(bridge_slave_1) entered disabled state [ 732.318264][T17626] bridge_slave_1: entered allmulticast mode [ 732.327525][T17626] bridge_slave_1: entered promiscuous mode [ 732.354266][T17626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 732.366890][T17626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 732.394901][T17626] team0: Port device team_slave_0 added [ 732.403188][T17626] team0: Port device team_slave_1 added [ 732.430223][T17626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 732.437320][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.463465][T17626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 732.477331][T17626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 732.484384][T17626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 732.510622][T17626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 732.556504][T17626] hsr_slave_0: entered promiscuous mode [ 732.563471][T17626] hsr_slave_1: entered promiscuous mode [ 732.570436][T17626] debugfs: 'hsr0' already exists in 'hsr' [ 732.576293][T17626] Cannot create hsr debugfs directory [ 733.908788][T13732] Bluetooth: hci9: command tx timeout [ 735.979101][T13732] Bluetooth: hci9: command tx timeout [ 738.049595][T13732] Bluetooth: hci9: command tx timeout [ 740.119500][T13732] Bluetooth: hci9: command tx timeout [ 745.057773][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 745.064717][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 760.340745][T13713] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 760.363013][T13713] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 760.372171][T13713] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 760.383872][T13713] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 760.395145][T13713] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 760.942814][T17650] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.950024][T17650] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.958110][T17650] bridge_slave_0: entered allmulticast mode [ 760.969577][T17650] bridge_slave_0: entered promiscuous mode [ 760.977840][T17650] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.985565][T17650] bridge0: port 2(bridge_slave_1) entered disabled state [ 760.993273][T17650] bridge_slave_1: entered allmulticast mode [ 761.000450][T17650] bridge_slave_1: entered promiscuous mode [ 761.027380][T17650] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 761.039735][T17650] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 761.069571][T17650] team0: Port device team_slave_0 added [ 761.077607][T17650] team0: Port device team_slave_1 added [ 761.104885][T17650] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 761.112067][T17650] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.138425][T17650] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 761.151053][T17650] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 761.158062][T17650] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 761.184616][T17650] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 761.232779][T17650] hsr_slave_0: entered promiscuous mode [ 761.240557][T17650] hsr_slave_1: entered promiscuous mode [ 761.246841][T17650] debugfs: 'hsr0' already exists in 'hsr' [ 761.252785][T17650] Cannot create hsr debugfs directory [ 762.504315][T13713] Bluetooth: hci10: command tx timeout [ 764.564700][T13713] Bluetooth: hci10: command tx timeout [ 766.634947][T13713] Bluetooth: hci10: command tx timeout [ 767.238574][T13732] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 767.254856][T13732] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 767.263280][T13732] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 767.276370][T13732] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 767.284979][T13732] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 767.714076][T17669] bridge0: port 1(bridge_slave_0) entered blocking state [ 767.721396][T17669] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.728657][T17669] bridge_slave_0: entered allmulticast mode [ 767.736272][T17669] bridge_slave_0: entered promiscuous mode [ 767.744655][T17669] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.752077][T17669] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.759617][T17669] bridge_slave_1: entered allmulticast mode [ 767.766909][T17669] bridge_slave_1: entered promiscuous mode [ 767.796546][T17669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.810278][T17669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.839519][T17669] team0: Port device team_slave_0 added [ 767.847358][T17669] team0: Port device team_slave_1 added [ 767.871456][T17669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 767.878416][T17669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.904941][T17669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 767.919850][T17669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 767.926843][T17669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 767.953225][T17669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 767.998384][T17669] hsr_slave_0: entered promiscuous mode [ 768.005051][T17669] hsr_slave_1: entered promiscuous mode [ 768.011610][T17669] debugfs: 'hsr0' already exists in 'hsr' [ 768.017360][T17669] Cannot create hsr debugfs directory [ 768.705461][T13732] Bluetooth: hci10: command tx timeout [ 769.342123][T13732] Bluetooth: hci11: command tx timeout [ 771.412385][T13732] Bluetooth: hci11: command tx timeout [ 772.616877][T13732] Bluetooth: hci1: command 0x0406 tx timeout [ 773.482714][T13713] Bluetooth: hci11: command tx timeout [ 775.562995][T13713] Bluetooth: hci11: command tx timeout [ 782.884934][T17691] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 782.901228][T17691] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 782.909747][T17691] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 782.920383][T17691] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 782.931354][T17691] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 783.373095][T17689] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.380436][T17689] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.389523][T17689] bridge_slave_0: entered allmulticast mode [ 783.396989][T17689] bridge_slave_0: entered promiscuous mode [ 783.405146][T17689] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.412553][T17689] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.420130][T17689] bridge_slave_1: entered allmulticast mode [ 783.429356][T17689] bridge_slave_1: entered promiscuous mode [ 783.457239][T17689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.469855][T17689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.499123][T17689] team0: Port device team_slave_0 added [ 783.507249][T17689] team0: Port device team_slave_1 added [ 783.537139][T17689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.544118][T17689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.570221][T17689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.582320][T17689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.589821][T17689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.616095][T17689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.659340][T17689] hsr_slave_0: entered promiscuous mode [ 783.665986][T17689] hsr_slave_1: entered promiscuous mode [ 783.672211][T17689] debugfs: 'hsr0' already exists in 'hsr' [ 783.678363][T17689] Cannot create hsr debugfs directory [ 785.028528][T17691] Bluetooth: hci12: command tx timeout [ 787.108734][T17691] Bluetooth: hci12: command tx timeout [ 787.898152][T17691] Bluetooth: hci3: command 0x0406 tx timeout [ 789.178903][T13713] Bluetooth: hci12: command tx timeout [ 791.239245][T13713] Bluetooth: hci12: command tx timeout [ 792.382281][T17691] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 792.398895][T17691] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 792.407898][T17691] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 792.418501][T17691] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 792.429479][T17691] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 792.869513][T17711] bridge0: port 1(bridge_slave_0) entered blocking state [ 792.876850][T17711] bridge0: port 1(bridge_slave_0) entered disabled state [ 792.884624][T17711] bridge_slave_0: entered allmulticast mode [ 792.892843][T17711] bridge_slave_0: entered promiscuous mode [ 792.901025][T17711] bridge0: port 2(bridge_slave_1) entered blocking state [ 792.908469][T17711] bridge0: port 2(bridge_slave_1) entered disabled state [ 792.916186][T17711] bridge_slave_1: entered allmulticast mode [ 792.924585][T17711] bridge_slave_1: entered promiscuous mode [ 792.957101][T17711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 792.972947][T17711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 793.003478][T17711] team0: Port device team_slave_0 added [ 793.012034][T17711] team0: Port device team_slave_1 added [ 793.037684][T17711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 793.045026][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.071625][T17711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 793.086768][T17711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 793.093882][T17711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 793.120257][T17711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 793.162984][T17711] hsr_slave_0: entered promiscuous mode [ 793.170835][T17711] hsr_slave_1: entered promiscuous mode [ 793.177232][T17711] debugfs: 'hsr0' already exists in 'hsr' [ 793.183271][T17711] Cannot create hsr debugfs directory [ 794.504017][T17691] Bluetooth: hci13: command tx timeout [ 796.584089][T17691] Bluetooth: hci13: command tx timeout [ 798.097679][T17691] Bluetooth: hci5: command 0x0406 tx timeout [ 798.644500][T13713] Bluetooth: hci13: command tx timeout [ 800.714640][T13713] Bluetooth: hci13: command tx timeout [ 806.210358][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 806.217124][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.393996][ T30] INFO: task kworker/u11:1:13717 blocked for more than 143 seconds. [ 809.403708][ T30] Tainted: G L syzkaller #0 [ 809.410275][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 809.420650][ T30] task:kworker/u11:1 state:D stack:24464 pid:13717 tgid:13717 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 809.432944][ T30] Workqueue: netns cleanup_net [ 809.437888][ T30] Call Trace: [ 809.441188][ T30] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 809.444307][ T30] __schedule+0x125c/0x6730 [ 809.449334][ T30] ? trace_sched_exit_tp+0x120/0x160 [ 809.455075][ T30] ? __pfx___schedule+0x10/0x10 [ 809.460306][ T30] ? find_held_lock+0x2b/0x80 [ 809.465457][ T30] ? schedule+0x225/0x2c0 [ 809.469876][ T30] schedule+0xdd/0x2c0 [ 809.475482][ T30] schedule_timeout+0x1b2/0x280 [ 809.480436][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 809.486427][ T30] ? preempt_schedule_thunk+0x16/0x40 [ 809.491932][ T30] __wait_for_common+0x2e7/0x4c0 [ 809.497886][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 809.503747][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 809.509333][ T30] remove_one+0x312/0x420 [ 809.514274][ T30] ? up_write+0x2e5/0x5c0 [ 809.518672][ T30] __simple_recursive_removal+0x148/0x5c0 [ 809.524999][ T30] ? __pfx_remove_one+0x10/0x10 [ 809.529930][ T30] debugfs_remove+0x5d/0x80 [ 809.535047][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 809.540300][ T30] nsim_dev_reload_destroy+0x144/0x4a0 [ 809.546394][ T30] nsim_dev_reload_down+0x66/0xd0 [ 809.551485][ T30] devlink_reload+0x1ae/0x7a0 [ 809.556990][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 809.562283][ T30] devlink_pernet_pre_exit+0x247/0x370 [ 809.568344][ T30] ? iput.part.0+0x1a0/0x1050 [ 809.573519][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 809.580082][ T30] ? iput+0x3a/0x40 [ 809.584621][ T30] ? sock_release+0x14d/0x1c0 [ 809.589720][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 809.596164][ T30] ops_undo_list+0x187/0xab0 [ 809.601096][ T30] ? __pfx_ops_undo_list+0x10/0x10 [ 809.606928][ T30] ? cleanup_net+0x332/0x920 [ 809.611635][ T30] ? cleanup_net+0x332/0x920 [ 809.616849][ T30] ? idr_destroy+0x62/0x2e0 [ 809.621437][ T30] cleanup_net+0x499/0x920 [ 809.626477][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 809.631785][ T30] ? rcu_is_watching+0x12/0xc0 [ 809.637347][ T30] process_one_work+0xa23/0x1940 [ 809.642783][ T30] ? __pfx_process_one_work+0x10/0x10 [ 809.648249][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 809.653717][ T30] worker_thread+0x5ef/0xe50 [ 809.658657][ T30] ? kthread+0x13a/0x450 [ 809.663321][ T30] ? __pfx_worker_thread+0x10/0x10 [ 809.668499][ T30] kthread+0x370/0x450 [ 809.673148][ T30] ? __pfx_kthread+0x10/0x10 [ 809.678303][ T30] ret_from_fork+0x72b/0xd50 [ 809.683501][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 809.688682][ T30] ? __switch_to+0x800/0x10f0 [ 809.693921][ T30] ? __switch_to_asm+0x39/0x70 [ 809.698752][ T30] ? __pfx_kthread+0x10/0x10 [ 809.703932][ T30] ret_from_fork_asm+0x1a/0x30 [ 809.708776][ T30] [ 809.711817][ T30] INFO: task syz-executor:17102 blocked for more than 143 seconds. [ 809.720729][ T30] Tainted: G L syzkaller #0 [ 809.727760][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 809.736887][ T30] task:syz-executor state:D stack:23720 pid:17102 tgid:17102 ppid:1 task_flags:0x400140 flags:0x00080002 [ 809.749313][ T30] Call Trace: [ 809.753099][ T30] [ 809.756083][ T30] __schedule+0x125c/0x6730 [ 809.760633][ T30] ? do_raw_spin_lock+0x128/0x260 [ 809.766345][ T30] ? __pfx___schedule+0x10/0x10 [ 809.771280][ T30] ? find_held_lock+0x2b/0x80 [ 809.776450][ T30] ? schedule+0x225/0x2c0 [ 809.781842][ T30] schedule+0xdd/0x2c0 [ 809.786067][ T30] schedule_preempt_disabled+0x13/0x30 [ 809.791562][ T30] __mutex_lock+0xccc/0x1bd0 [ 809.796855][ T30] ? device_del+0xa0/0x9b0 [ 809.801435][ T30] ? xas_create+0x1f4/0x14e0 [ 809.806475][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 809.812039][ T30] ? mark_held_locks+0x40/0x70 [ 809.816888][ T30] ? device_del+0xa0/0x9b0 [ 809.821326][ T30] device_del+0xa0/0x9b0 [ 809.826605][ T30] ? __pfx_ida_free+0x10/0x10 [ 809.831355][ T30] ? __pfx_device_del+0x10/0x10 [ 809.836773][ T30] device_unregister+0x1d/0xe0 [ 809.841935][ T30] del_device_store+0x346/0x480 [ 809.846866][ T30] ? __pfx_del_device_store+0x10/0x10 [ 809.852873][ T30] ? find_held_lock+0x2b/0x80 [ 809.857625][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 809.863147][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 809.868060][ T30] ? __pfx_del_device_store+0x10/0x10 [ 809.874758][ T30] bus_attr_store+0x74/0xb0 [ 809.879415][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 809.885834][ T30] sysfs_kf_write+0xf2/0x150 [ 809.890512][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 809.896383][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 809.903140][ T30] vfs_write+0x6ac/0x1050 [ 809.916951][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 809.941154][ T30] ? __pfx_vfs_write+0x10/0x10 [ 809.959624][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 809.974331][ T30] ksys_write+0x12a/0x250 [ 809.978739][ T30] ? __pfx_ksys_write+0x10/0x10 [ 809.985651][ T30] do_syscall_64+0x115/0x840 [ 809.990302][ T30] ? clear_bhb_loop+0x40/0x90 [ 809.995168][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.001174][ T30] RIP: 0033:0x7fdc7035e68e [ 810.005630][ T30] RSP: 002b:00007ffc5dd51158 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 810.014520][ T30] RAX: ffffffffffffffda RBX: 000055558837b500 RCX: 00007fdc7035e68e [ 810.022758][ T30] RDX: 0000000000000001 RSI: 00007ffc5dd511e0 RDI: 0000000000000005 [ 810.030975][ T30] RBP: 00007fdc704346f2 R08: 0000000000000000 R09: 0000000000000000 [ 810.038993][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.047431][ T30] R13: 00007ffc5dd511e0 R14: 00007fdc71154620 R15: 0000000000000003 [ 810.055819][ T30] [ 810.058901][ T30] INFO: task syz.1.2295:17124 blocked for more than 144 seconds. [ 810.066807][ T30] Tainted: G L syzkaller #0 [ 810.073488][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.082571][ T30] task:syz.1.2295 state:D stack:25176 pid:17124 tgid:17119 ppid:5623 task_flags:0x400140 flags:0x00080002 [ 810.095383][ T30] Call Trace: [ 810.098705][ T30] [ 810.101955][ T30] __schedule+0x125c/0x6730 [ 810.106552][ T30] ? do_raw_spin_lock+0x128/0x260 [ 810.111929][ T30] ? __pfx___schedule+0x10/0x10 [ 810.116840][ T30] ? find_held_lock+0x2b/0x80 [ 810.121677][ T30] ? schedule+0x225/0x2c0 [ 810.126113][ T30] schedule+0xdd/0x2c0 [ 810.130331][ T30] schedule_preempt_disabled+0x13/0x30 [ 810.135846][ T30] __mutex_lock+0xccc/0x1bd0 [ 810.140627][ T30] ? devlink_health_report+0x656/0xb00 [ 810.146213][ T30] ? __pfx_devlink_nl_notify_filter+0x10/0x10 [ 810.152553][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 810.157656][ T30] ? devlink_recover_notify.constprop.0+0x443/0x550 [ 810.164407][ T30] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 810.171216][ T30] ? devlink_health_report+0x656/0xb00 [ 810.176718][ T30] devlink_health_report+0x656/0xb00 [ 810.182147][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 810.188300][ T30] ? _copy_from_user+0x59/0xd0 [ 810.193283][ T30] nsim_dev_health_break_write+0x166/0x210 [ 810.199150][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 810.205761][ T30] full_proxy_write+0x135/0x1a0 [ 810.210810][ T30] vfs_write+0x2aa/0x1050 [ 810.215223][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 810.220753][ T30] ? __pfx_vfs_write+0x10/0x10 [ 810.225601][ T30] ? __fget_files+0x215/0x3d0 [ 810.230498][ T30] ? __fget_files+0x21f/0x3d0 [ 810.235257][ T30] ksys_write+0x12a/0x250 [ 810.239804][ T30] ? __pfx_ksys_write+0x10/0x10 [ 810.244721][ T30] do_syscall_64+0x115/0x840 [ 810.249308][ T30] ? clear_bhb_loop+0x40/0x90 [ 810.254146][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.260257][ T30] RIP: 0033:0x7fe01dd9de59 [ 810.264681][ T30] RSP: 002b:00007fe01bfb4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 810.273359][ T30] RAX: ffffffffffffffda RBX: 00007fe01e026180 RCX: 00007fe01dd9de59 [ 810.281489][ T30] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000005 [ 810.290119][ T30] RBP: 00007fe01de33e6f R08: 0000000000000000 R09: 0000000000000000 [ 810.298140][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.306384][ T30] R13: 00007fe01e026218 R14: 00007fe01e026180 R15: 00007ffed2dd58a8 [ 810.314515][ T30] [ 810.317599][ T30] INFO: task syz.4.2329:17278 blocked for more than 144 seconds. [ 810.325572][ T30] Tainted: G L syzkaller #0 [ 810.332208][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.341033][ T30] task:syz.4.2329 state:D stack:27864 pid:17278 tgid:17277 ppid:11730 task_flags:0x400140 flags:0x00080002 [ 810.353350][ T30] Call Trace: [ 810.356652][ T30] [ 810.359740][ T30] __schedule+0x125c/0x6730 [ 810.364328][ T30] ? __pfx___schedule+0x10/0x10 [ 810.369434][ T30] ? find_held_lock+0x2b/0x80 [ 810.374149][ T30] ? schedule+0x225/0x2c0 [ 810.378489][ T30] schedule+0xdd/0x2c0 [ 810.382743][ T30] schedule_preempt_disabled+0x13/0x30 [ 810.388259][ T30] rwsem_down_read_slowpath+0x5af/0xb40 [ 810.394388][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 810.400707][ T30] ? __pfx___might_resched+0x10/0x10 [ 810.406051][ T30] down_read+0xed/0x4c0 [ 810.410387][ T30] ? __pfx_down_read+0x10/0x10 [ 810.415222][ T30] ? mnt_get_write_access+0x1e9/0x2f0 [ 810.420795][ T30] path_openat+0xb3c/0x4280 [ 810.425406][ T30] ? __pfx_path_openat+0x10/0x10 [ 810.430685][ T30] do_file_open+0x20e/0x430 [ 810.435269][ T30] ? __pfx_do_file_open+0x10/0x10 [ 810.440551][ T30] ? alloc_fd+0x471/0x7a0 [ 810.444963][ T30] ? do_getname+0x191/0x390 [ 810.449740][ T30] do_sys_openat2+0x10f/0x1e0 [ 810.454477][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 810.459880][ T30] __x64_sys_openat+0x12d/0x210 [ 810.464817][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 810.470510][ T30] ? ksys_write+0x1ac/0x250 [ 810.475112][ T30] ? kcov_ioctl+0x17a/0x750 [ 810.479905][ T30] do_syscall_64+0x115/0x840 [ 810.484561][ T30] ? clear_bhb_loop+0x40/0x90 [ 810.489435][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.495833][ T30] RIP: 0033:0x7f7757d9de59 [ 810.500469][ T30] RSP: 002b:00007f7758c2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 810.509341][ T30] RAX: ffffffffffffffda RBX: 00007f7758025fa0 RCX: 00007f7757d9de59 [ 810.517397][ T30] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 810.525566][ T30] RBP: 00007f7757e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 810.533668][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 810.541805][ T30] R13: 00007f7758026038 R14: 00007f7758025fa0 R15: 00007fff59a5ac28 [ 810.549942][ T30] [ 810.553001][ T30] INFO: task syz-executor:17353 blocked for more than 144 seconds. [ 810.563446][ T30] Tainted: G L syzkaller #0 [ 810.570148][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 810.578916][ T30] task:syz-executor state:D stack:24360 pid:17353 tgid:17353 ppid:1 task_flags:0x400140 flags:0x00080002 [ 810.591228][ T30] Call Trace: [ 810.595014][ T30] [ 810.598145][ T30] __schedule+0x125c/0x6730 [ 810.602709][ T30] ? do_raw_spin_lock+0x128/0x260 [ 810.607735][ T30] ? __pfx___schedule+0x10/0x10 [ 810.612757][ T30] ? find_held_lock+0x2b/0x80 [ 810.617491][ T30] ? schedule+0x225/0x2c0 [ 810.622025][ T30] schedule+0xdd/0x2c0 [ 810.626179][ T30] schedule_preempt_disabled+0x13/0x30 [ 810.631839][ T30] __mutex_lock+0xccc/0x1bd0 [ 810.636480][ T30] ? del_device_store+0xd1/0x480 [ 810.641605][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 810.646680][ T30] ? sscanf+0xc7/0x100 [ 810.650925][ T30] ? __pfx_sscanf+0x10/0x10 [ 810.655526][ T30] ? __lock_acquire+0x49f/0x1a40 [ 810.660653][ T30] ? del_device_store+0xd1/0x480 [ 810.665648][ T30] del_device_store+0xd1/0x480 [ 810.670708][ T30] ? __pfx_del_device_store+0x10/0x10 [ 810.676233][ T30] ? find_held_lock+0x2b/0x80 [ 810.681125][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 810.686084][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 810.691149][ T30] ? __pfx_del_device_store+0x10/0x10 [ 810.697075][ T30] bus_attr_store+0x74/0xb0 [ 810.701955][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 810.707238][ T30] sysfs_kf_write+0xf2/0x150 [ 810.712127][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 810.717582][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 810.722817][ T30] vfs_write+0x6ac/0x1050 [ 810.727149][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 810.733107][ T30] ? __pfx_vfs_write+0x10/0x10 [ 810.738068][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 810.743338][ T30] ksys_write+0x12a/0x250 [ 810.747954][ T30] ? __pfx_ksys_write+0x10/0x10 [ 810.752895][ T30] do_syscall_64+0x115/0x840 [ 810.757688][ T30] ? clear_bhb_loop+0x40/0x90 [ 810.762429][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 810.768484][ T30] RIP: 0033:0x7f74ccb5e68e [ 810.772936][ T30] RSP: 002b:00007ffc7bcad0f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 810.781592][ T30] RAX: ffffffffffffffda RBX: 000055557609e500 RCX: 00007f74ccb5e68e [ 810.789684][ T30] RDX: 0000000000000001 RSI: 00007ffc7bcad180 RDI: 0000000000000005 [ 810.798394][ T30] RBP: 00007f74ccc346f2 R08: 0000000000000000 R09: 0000000000000000 [ 810.806426][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 810.814714][ T30] R13: 00007ffc7bcad180 R14: 00007f74cd954620 R15: 0000000000000003 [ 810.822846][ T30] [ 810.825961][ T30] [ 810.825961][ T30] Showing all locks held in the system: [ 810.833890][ T30] 1 lock held by khungtaskd/30: [ 810.838898][ T30] #0: ffffffff8ebe5f80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 810.848972][ T30] 3 locks held by klogd/4981: [ 810.853677][ T30] #0: ffff8880b843b660 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2c/0x140 [ 810.863778][ T30] #1: ffff8880244a5c98 (&si->socket.wq.wait){..-.}-{3:3}, at: trace_ignore_this_task+0x56/0x100 [ 810.874561][ T30] #2: ffff88807f752990 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0xbd/0x1c90 [ 810.884011][ T30] 2 locks held by getty/5385: [ 810.888864][ T30] #0: ffff888032a990a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 810.898908][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14e0 [ 810.910472][ T30] 6 locks held by kworker/u11:1/13717: [ 810.916078][ T30] #0: ffff88801caf6140 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x12b1/0x1940 [ 810.926945][ T30] #1: ffffc9000545fd08 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x988/0x1940 [ 810.937150][ T30] #2: ffffffff90a86148 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xb8/0x920 [ 810.946679][ T30] #3: ffff88807f35d128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x19e/0x370 [ 810.956895][ T30] #4: ffff8880213e0258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x1b4/0x370 [ 810.967883][ T30] #5: ffff888077363630 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 810.979746][ T30] 5 locks held by syz-executor/17102: [ 810.985204][ T30] #0: ffff88807fd42450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 810.994773][ T30] #1: ffff888056ce3080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 811.005175][ T30] #2: ffff88802a3615a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 811.015488][ T30] #3: ffffffff9000cb60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 811.026102][ T30] #4: ffff88807f35d128 (&dev->mutex){....}-{4:4}, at: device_del+0xa0/0x9b0 [ 811.034980][ T30] 3 locks held by syz.1.2295/17124: [ 811.040362][ T30] #0: ffff88807ab8d430 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 811.049580][ T30] #1: ffff888020aca450 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 811.058776][ T30] #2: ffff8880213e0258 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_health_report+0x656/0xb00 [ 811.069778][ T30] 2 locks held by syz.4.2329/17278: [ 811.075047][ T30] #0: ffff888020aca450 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 811.084664][ T30] #1: ffff888077363630 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xb3c/0x4280 [ 811.095402][ T30] 4 locks held by syz-executor/17353: [ 811.100889][ T30] #0: ffff88807fd42450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 811.110518][ T30] #1: ffff8880561f0480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 811.120504][ T30] #2: ffff88802a3615a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 811.130712][ T30] #3: ffffffff9000cb60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 811.141253][ T30] 4 locks held by syz-executor/17431: [ 811.146854][ T30] #0: ffff88807fd42450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 811.156015][ T30] #1: ffff888088cdc480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 811.166074][ T30] #2: ffff88802a3615a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 811.176328][ T30] #3: ffffffff9000cb60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 811.186796][ T30] 2 locks held by syz.3.2384/17560: [ 811.192030][ T30] #0: ffff888020aca450 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0xad9/0x4280 [ 811.201424][ T30] #1: ffff888077363630 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xb3c/0x4280 [ 811.212415][ T30] 4 locks held by syz-executor/17569: [ 811.217981][ T30] #0: ffff88807fd42450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 811.227187][ T30] #1: ffff88802bd47880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 811.237119][ T30] #2: ffff88802a3615a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 811.247389][ T30] #3: ffffffff9000cb60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 811.257819][ T30] 4 locks held by syz-executor/17588: [ 811.263241][ T30] #0: ffff88807fd42450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 811.272405][ T30] #1: ffff88806094ec80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 811.282378][ T30] #2: ffff88802a3615a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 811.292596][ T30] #3: ffffffff9000cb60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 811.303033][ T30] 4 locks held by syz-executor/17607: [ 811.309103][ T30] #0: ffff88807fd42450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 811.318333][ T30] #1: ffff888060a7fc80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 811.328443][ T30] #2: ffff88802a3615a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 811.338704][ T30] #3: ffffffff9000cb60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 811.349161][ T30] 4 locks held by syz-executor/17626: [ 811.354742][ T30] #0: ffff88807fd42450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 811.363764][ T30] #1: ffff88808932d880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 811.373653][ T30] #2: ffff88802a3615a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 811.383876][ T30] #3: ffffffff9000cb60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 811.394504][ T30] 4 locks held by syz-executor/17650: [ 811.399930][ T30] #0: ffff88807fd42450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 811.409993][ T30] #1: ffff888077782080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 811.420055][ T30] #2: ffff88802a3615a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 811.430236][ T30] #3: ffffffff9000cb60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 811.440718][ T30] 4 locks held by syz-executor/17669: [ 811.446264][ T30] #0: ffff88807fd42450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 811.455436][ T30] #1: ffff88807afc4880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 811.465646][ T30] #2: ffff88802a3615a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 811.475841][ T30] #3: ffffffff9000cb60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 811.486313][ T30] 4 locks held by syz-executor/17689: [ 811.491699][ T30] #0: ffff88807fd42450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 811.500850][ T30] #1: ffff8880890ff480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 811.510756][ T30] #2: ffff88802a3615a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 811.521336][ T30] #3: ffffffff9000cb60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 811.531856][ T30] 4 locks held by syz-executor/17711: [ 811.537364][ T30] #0: ffff88807fd42450 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 811.546867][ T30] #1: ffff88801ceba080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 811.556794][ T30] #2: ffff88802a3615a8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 811.566976][ T30] #3: ffffffff9000cb60 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 811.577515][ T30] [ 811.579879][ T30] ============================================= [ 811.579879][ T30] [ 811.588500][ T30] NMI backtrace for cpu 1 [ 811.588522][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 811.588555][ T30] Tainted: [L]=SOFTLOCKUP [ 811.588563][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 811.588577][ T30] Call Trace: [ 811.588585][ T30] [ 811.588595][ T30] dump_stack_lvl+0x100/0x190 [ 811.588625][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 811.588655][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 811.588686][ T30] nmi_trigger_cpumask_backtrace+0x21c/0x2a0 [ 811.588726][ T30] sys_info+0x141/0x190 [ 811.588753][ T30] watchdog+0xcb1/0x1030 [ 811.588792][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 811.588830][ T30] ? __pfx_watchdog+0x10/0x10 [ 811.588863][ T30] ? __kthread_parkme+0x18c/0x230 [ 811.588894][ T30] ? kthread+0x13a/0x450 [ 811.588921][ T30] ? __pfx_watchdog+0x10/0x10 [ 811.588953][ T30] kthread+0x370/0x450 [ 811.588984][ T30] ? __pfx_kthread+0x10/0x10 [ 811.589019][ T30] ret_from_fork+0x72b/0xd50 [ 811.589051][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 811.589083][ T30] ? __switch_to+0x800/0x10f0 [ 811.589119][ T30] ? __switch_to_asm+0x39/0x70 [ 811.589151][ T30] ? __pfx_kthread+0x10/0x10 [ 811.589184][ T30] ret_from_fork_asm+0x1a/0x30 [ 811.589233][ T30] [ 811.589242][ T30] Sending NMI from CPU 1 to CPUs 0: [ 811.726694][ C0] NMI backtrace for cpu 0 [ 811.726716][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 811.726756][ C0] Tainted: [L]=SOFTLOCKUP [ 811.726764][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 811.726778][ C0] RIP: 0010:llist_reverse_order+0x37/0x70 [ 811.726819][ C0] Code: 6a ef fc 48 85 db 74 32 49 bc 00 00 00 00 00 fc ff df 31 ed eb 03 48 89 c3 e8 f5 69 ef fc 48 89 d8 48 c1 e8 03 42 80 3c 20 00 <75> 1f 48 8b 03 48 89 2b 48 89 dd 48 85 c0 75 dc e8 d4 69 ef fc 48 [ 811.726841][ C0] RSP: 0018:ffffc90000007f68 EFLAGS: 00000046 [ 811.726861][ C0] RAX: 1ffff11005d6f3e7 RBX: ffff88802eb79f38 RCX: ffffffff81fc8e8b [ 811.726877][ C0] RDX: ffffffff8e891480 RSI: ffffffff8519becb RDI: ffff88802eb79f38 [ 811.726893][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1017087930 [ 811.726908][ C0] R10: ffff8880b843c987 R11: ffffc90000007ff8 R12: dffffc0000000000 [ 811.726923][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 811.726937][ C0] FS: 0000000000000000(0000) GS:ffff888123df1000(0000) knlGS:0000000000000000 [ 811.726958][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 811.726973][ C0] CR2: 000055e5e48ffee8 CR3: 000000000e992000 CR4: 00000000003526f0 [ 811.726988][ C0] Call Trace: [ 811.726995][ C0] [ 811.727004][ C0] __flush_smp_call_function_queue+0x155/0x960 [ 811.727042][ C0] __sysvec_call_function_single+0x81/0x420 [ 811.727079][ C0] sysvec_call_function_single+0x9e/0xc0 [ 811.727114][ C0] [ 811.727121][ C0] [ 811.727129][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 811.727154][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 811.727189][ C0] Code: 16 90 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 e8 14 00 fb f4 bc 48 03 00 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 811.727211][ C0] RSP: 0018:ffffffff8e807e10 EFLAGS: 00000242 [ 811.727227][ C0] RAX: 000000000043de61 RBX: ffffffff8e891480 RCX: ffffffff8bb6b2d5 [ 811.727242][ C0] RDX: 0000000000000000 RSI: ffffffff8e1a68d2 RDI: ffffffff8c400580 [ 811.727257][ C0] RBP: fffffbfff1d12290 R08: 0000000000000001 R09: ffffed101708678d [ 811.727272][ C0] R10: ffff8880b8433c6b R11: 0000000000000000 R12: 0000000000000000 [ 811.727286][ C0] R13: 0000000000000000 R14: 1ffffffff1d00fc6 R15: dffffc0000000000 [ 811.727305][ C0] ? ct_kernel_exit+0x125/0x180 [ 811.727329][ C0] default_idle+0x9/0x10 [ 811.727350][ C0] default_idle_call+0x6c/0xb0 [ 811.727373][ C0] do_idle+0x3a7/0x5b0 [ 811.727395][ C0] ? __pfx_do_idle+0x10/0x10 [ 811.727416][ C0] ? finish_task_switch.isra.0+0x14c/0x10c0 [ 811.727444][ C0] cpu_startup_entry+0x4f/0x60 [ 811.727467][ C0] rest_init+0x251/0x260 [ 811.727491][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 811.727613][ C0] start_kernel+0x48e/0x490 [ 811.727654][ C0] x86_64_start_reservations+0x24/0x30 [ 811.727677][ C0] x86_64_start_kernel+0x12b/0x130 [ 811.727700][ C0] common_startup_64+0x13e/0x158 [ 811.727744][ C0] [ 812.028148][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 812.035023][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 812.045689][ T30] Tainted: [L]=SOFTLOCKUP [ 812.049997][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 812.060040][ T30] Call Trace: [ 812.063314][ T30] [ 812.066232][ T30] dump_stack_lvl+0x100/0x190 [ 812.070904][ T30] vpanic+0x552/0x970 [ 812.074893][ T30] ? __pfx_vpanic+0x10/0x10 [ 812.079389][ T30] ? nmi_trigger_cpumask_backtrace+0x1c7/0x2a0 [ 812.085537][ T30] panic+0xd1/0xe0 [ 812.089247][ T30] ? __pfx_panic+0x10/0x10 [ 812.093653][ T30] ? nmi_trigger_cpumask_backtrace+0x1fa/0x2a0 [ 812.099798][ T30] ? nmi_trigger_cpumask_backtrace+0x260/0x2a0 [ 812.105956][ T30] ? nmi_trigger_cpumask_backtrace+0x26a/0x2a0 [ 812.112109][ T30] ? watchdog.cold+0x1ec/0x234 [ 812.116867][ T30] ? watchdog+0xcc1/0x1030 [ 812.121293][ T30] watchdog.cold+0x1fd/0x234 [ 812.125902][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 812.131709][ T30] ? __pfx_watchdog+0x10/0x10 [ 812.136384][ T30] ? __kthread_parkme+0x18c/0x230 [ 812.141421][ T30] ? kthread+0x13a/0x450 [ 812.145652][ T30] ? __pfx_watchdog+0x10/0x10 [ 812.150328][ T30] kthread+0x370/0x450 [ 812.154389][ T30] ? __pfx_kthread+0x10/0x10 [ 812.158984][ T30] ret_from_fork+0x72b/0xd50 [ 812.163566][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 812.168672][ T30] ? __switch_to+0x800/0x10f0 [ 812.173342][ T30] ? __switch_to_asm+0x39/0x70 [ 812.178119][ T30] ? __pfx_kthread+0x10/0x10 [ 812.182702][ T30] ret_from_fork_asm+0x1a/0x30 [ 812.187468][ T30] [ 812.190747][ T30] Kernel Offset: disabled [ 812.195067][ T30] Rebooting in 86400 seconds..