last executing test programs: 18m26.987631128s ago: executing program 1 (id=1482): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) mmap$auto(0x0, 0x4020009, 0x938, 0xeb1, r0, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x2, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x1) io_uring_setup$auto(0x9, &(0x7f0000000080)={0x80000003, 0x800009, 0x3, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x7, 0x6, 0xb, 0x637e, 0x100, 0x7f, 0x101, 0x4000006, 0x2000}, {0x7, 0x6, 0x40000052, 0x5, 0xa, 0x6cbdbd0, 0x104, 0x8, 0x8001}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x28}, 0x1, 0x0, 0x0, 0x30000881}, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000180), 0x1) prctl$auto(0x1000000003b, 0x8, 0x4, 0x5, 0x7) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) getsockopt$auto_SO_REUSEADDR(r0, 0x7f, 0x2, &(0x7f0000000080)='\x00', &(0x7f00000000c0)=0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000002c0)={0x62, 0x0, 0xfff000000, 0xa, 0x1, 0xfffffffffffffff9, 0x0, 0x2000000000000e8, 0x8000000000, 0x404, 0xf7ffffffffffffb9, 0x7fffffff}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0) r3 = socket(0xa, 0x5, 0x84) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x9, 0x0) setsockopt$auto(r3, 0x0, 0x4, 0x0, 0x9e) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000100)={0x3fd, 0x0, [{0x0, 0xffff5a9a, 0x7fffffff, 0x0, 0xf, 0x8, 0x6000}]}) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x2, 0x1, 0x106) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fcntl$auto(0x3, 0x4, 0xa553) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'netdevsim0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) 18m25.857200138s ago: executing program 1 (id=1484): r0 = socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x41a200, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x10b82, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xfa}, 0x8) ioctl$auto_SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000100)="000004") r2 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ram10\x00', 0x14be02, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0xc02, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f00000000c0)='./file0\x00', 0x22240, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x20, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptyr9\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0xfdef) ioctl$auto(r1, 0x5402, r3) write$auto(r2, &(0x7f0000000180)='k:\x1f\x8eF!D?B@\xa3\x86L\xd3=\x8e\xf9=y\xd7\tHB\xa9ngn\xa8\x86\xfcA.\xc4\x04\xd3\xe5J\xf9\xfasE\x85\xc3\x01\x11e\x90\x92\xcc\x82\xbb\x06\xe7Bg\x1b~\x9e\x05z\x10\xd7\"\xab\f\x1d\xcf\xa3\xee`M\xebhWp\xa4\xc5\x96\xd9\nD\x16X\f\x9e\xd4\x03z#\xef_G\xec\xba\r/\xc2\"A\x8e\x8fl\t\xc7_u\xed\xe6\xf0\x9bL\xc0L\xbb\xdd\x87\xb9W\xb5O}\xd3\xd3F\x0e\x9b\xc74\x13\xce1\xa5\x9fo\xdds\x90\xb5\xdc\x16\x02\xb1q\xc7\xee\x1b\x9d\xd5q\xa3&\xf7\xfb\xa1g\x10\xc6\xd2\x15', 0x60) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto(r0, &(0x7f0000000340)={&(0x7f0000000000)="64d88b8f99a0aa922430ad1db09889d20a0a1ba11a3bffb0aaf22a0a95bade3e29cd70488fb4d4aed5c283f930c28da80d5f5eb1e24d7a27b9828bf74e66d02e93aa8788f834cef9ae17a894308833d6697a3726848412243c9a83f98feb36c2e0d22be4c170f85d7d40ea421989a58b40abaa0e68247e524fc2f35f83f6afd7bd28d145011849f77c5f0f23ae6cb2f6a1620a6544aa25ee94be18909e09a864b6f3a19e8b38d7f708377a0bef4d6d370729795a", 0x74d, &(0x7f0000000240)={&(0x7f0000000400)="5165d39d846293c72f9b", 0x10}, 0xaf, &(0x7f0000000280)="1ce21ab17e46b8d353e1736d6498178e883c8644094ca5ea7d6aa9475c68f95d41bf5cbc62a7af2ac0181f19c2f6be14d68da97b6ae500692fb1b6967ad4527c8301cfd32ae0e4b8cc7a0ba0c6f46714715c4e22041b55e6549ee6e7f375d41cb0a1b32202a3291f57ad93d88a886d00883e6ded7590e527c83f019cd4f0a0d1f4354c73b842dcc5342e37118bb64b7044e3d06c6536c992fdb166fbec104db5c100794b2810d03cabfe3873c6f596b0729dc0ccfd", 0x1000, 0xfff}, 0xb7d) syz_genetlink_get_family_id$auto_ipvs(0x0, 0xffffffffffffffff) madvise$auto(0x8000, 0xffffffffffff0000, 0x17) madvise$auto(0x0, 0x5, 0x3) fcntl$auto_F_GET_RW_HINT(r0, 0x40b, 0x40) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x5, 0x1ff, 0x7fa, 0x22104, 0x9, 0x7, 0x7ff, 0x20010180, 0x4000000f}, 0x198) 18m24.348798258s ago: executing program 1 (id=1487): mmap$auto(0x0, 0xe, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x40000f, 0x1, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0xc0c1}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8000, 0x1, 0x8, 0xc, 0x5, 0xffffffffffffffff, 0x80000001, "787d26da4a620eab7f736e0000f61529", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="6a7ce949dfca3295c187995700f3ff322343eabbd7073395914d983f47917a05dbce8815e9cb4ff42b626d5f1682f25f73506789fdd07fd9ed179aada59a363c826f6f9de5e31791b3fe617c2f44d690cc7e7cc36325daf3aae33d1e947e96304107c58122c281fda0aaf76bdeaed78c08b53134351ce3d40657202fde7975fd5385e5a7e1e3e4f548b61dde797f4a61b7392279e2dff52e29768df2cabfb39405"], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) select$auto(0xd, &(0x7f0000000200)={[0x6, 0x400000b, 0x3, 0x5, 0x2, 0x0, 0x8, 0xd, 0x8000000000000001, 0xffffffffffffef72, 0x8401, 0xc0, 0xc, 0xc, 0x7, 0x7]}, 0x0, 0x0, 0x0) mmap$auto(0x7, 0x8008, 0x10000000000df, 0x13, 0x401, 0x100000000008000) futex$auto(&(0x7f00000001c0)=0x1, 0x8c, 0x1, 0x0, 0x0, 0x1) r1 = open(&(0x7f0000000800)='./file0\x00', 0xa2240, 0x153) writev$auto(0xffffffffffffffff, 0x0, 0x2) move_pages$auto(0x1, 0x5, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = timerfd_create$auto_CLOCK_MONOTONIC(0x1, 0x9) ioctl$auto_RNDADDENTROPY2(r2, 0x40085203, &(0x7f0000000080)=[0x6, 0x10001]) mmap$auto(0x0, 0x7, 0xdf, 0xeb1, 0x401, 0x7ffd) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto_MADV_GUARD_INSTALL(0x2000000003, 0x52, 0x66) madvise$auto(0x0, 0x200007, 0x19) readv$auto(0x3, 0x0, 0x1) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, &(0x7f0000000040)) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0x3) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) sendmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x4}, 0x1000000000028, 0x0, 0x1, 0x3e0}, 0x800}, 0x0, 0x4008) 18m21.72292426s ago: executing program 1 (id=1495): socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x0, 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0x4, 0x9b72, 0xffffffffffffffff, 0x8000) syz_clone(0x200011, 0x0, 0x0, 0x0, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0xe7a, 0x34f, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x0, 0x0) ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x6a) ioctl$auto_FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000080)) 18m20.29627558s ago: executing program 1 (id=1501): r0 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) r1 = prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) getsockopt$auto_SO_BSDCOMPAT(r1, 0x401, 0xe, &(0x7f0000000080)='[]\x00', &(0x7f0000000100)=0x6) mmap$auto(0x0, 0x440008, 0x5c, 0x9b70, 0x2, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/cmdline\x00', 0x60502, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_STATUS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x9eff, 0x0, 0x40}, 0x40) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000280)={0x9, &(0x7f0000000000)={0x28, 0xf3, 0x9, @inferred=r1}}) mprotect$auto(0x110c238000, 0x1, 0x3) ioctl$auto_SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000140)={0x6, 0x8, 0x3, 0x2, 0x1, "07a9e5a097304e8cdb22d7590356f89a91fbf406a8d0c13a6560afd062b7ee1c1a3dacfdd3812f9a6a137739b4544a9c6d400aa0c0f698ae7c958a50636a7e5b", "e1405cd9185c77ee7ea581c3e92987ad004b15705eef8508b416055bdf9c18e8ca61023b0e5012efa0af64eecfca3a3e405c4f8ba30347170f86244da2cc398046e44676dfb88b71458f727a57f4bb0b", "1baf123cd29f257bfbab4545d9562c37e5e2d8ff1a8915ebbb70ee225861d562", 0x5, 0x1ff, 0x2, "d5adc1fb69b160f00be4f5ac7a149129e82de0c62d68100c0a99cf1d95a5dcebd97d9170b672070040919ec0ee6d24f63ef49e4188201d6a5efacbed"}) madvise$auto(0x110c230000, 0x8031ca, 0x9) 18m19.582112289s ago: executing program 1 (id=1503): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) r1 = epoll_create$auto(0x7) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x183000, 0x0) shmctl$auto_SHM_UNLOCK(0x9, 0xc, &(0x7f0000000340)={{0x8, 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x9}, 0x7, 0x8000, 0x2, 0x79e, @raw=0x6e682e5, @inferred, 0x40, 0x0, &(0x7f00000003c0)="5f5a83ecf74333b727b56574db5cfe2df70dfbe13b6af4c61e1b7a1004387287fe73b01563b00cac8c5e5a553a3fc5b42481ea7255857882e9058a5b2ddd4dcf89b310e17c7fbe24407daedb98e5f391a8b3604a9e2ea188cb3d8cc55f4a46be8f935001691c6661054777176c21fba61b670fc2d9510d26a4c9cd3a82716ffda27a8ab3aa74bfb1b8af91d02e2304b404f9aa69f79656b5449e06b4b890de1fb8bcc2033fa81e5e4f1a07b8f7", &(0x7f0000000300)="b154cbd71191c7dd9b0409a13ab8dfedc385d02ddec671b9ec7a841ef03d4a5fe2fcbc8372a3894ce4cd6c5ae1116d0a"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100000000) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x8000005, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0xa) write$auto(0xffffffffffffffff, 0x0, 0x81) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x1) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x842, 0x0) write$auto(r4, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x7fffffff, 0x9, 0x8, 0xffffffff, 0xfffffffffffffffe, 0x7fff, 0xfc2, 0x27f, @inferred, @raw=0x9}) setresgid$auto(0x0, 0xffffffffffffffff, r5) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) getxattr$auto(0x0, 0x0, 0x0, 0x4f) fsconfig$auto_FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000000c0)='/dev/sequencer\x00', &(0x7f00000001c0)="b292bc734df870801ef5189ff5beea4639c7beca794250fa3c1b7fc1fca71c50d9ff70ecdaa0c20d4ddc0b306506e91ff5013841aefa8823b4f05cd5c825c2f69ce5f305fb7f678c79ab75c32bb302ad16e553c86baecf4b2db36df27c1b17f563fe88d333d1", r3) ioctl$auto_RTC_IRQP_READ(r6, 0x8008700b, &(0x7f00000002c0)=0x8000000000000) epoll_ctl$auto(r1, 0x1, r0, 0x0) setsockopt$auto_SO_TXREHASH(r0, 0x2, 0x4a, &(0x7f0000000040)='\'@$$\x00', 0x400) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000280), r0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xb1d}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1000}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x1) 18m4.45550632s ago: executing program 32 (id=1503): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x1, 0x0) r1 = epoll_create$auto(0x7) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x183000, 0x0) shmctl$auto_SHM_UNLOCK(0x9, 0xc, &(0x7f0000000340)={{0x8, 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5, 0x9}, 0x7, 0x8000, 0x2, 0x79e, @raw=0x6e682e5, @inferred, 0x40, 0x0, &(0x7f00000003c0)="5f5a83ecf74333b727b56574db5cfe2df70dfbe13b6af4c61e1b7a1004387287fe73b01563b00cac8c5e5a553a3fc5b42481ea7255857882e9058a5b2ddd4dcf89b310e17c7fbe24407daedb98e5f391a8b3604a9e2ea188cb3d8cc55f4a46be8f935001691c6661054777176c21fba61b670fc2d9510d26a4c9cd3a82716ffda27a8ab3aa74bfb1b8af91d02e2304b404f9aa69f79656b5449e06b4b890de1fb8bcc2033fa81e5e4f1a07b8f7", &(0x7f0000000300)="b154cbd71191c7dd9b0409a13ab8dfedc385d02ddec671b9ec7a841ef03d4a5fe2fcbc8372a3894ce4cd6c5ae1116d0a"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100000000) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x8000005, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0xa) write$auto(0xffffffffffffffff, 0x0, 0x81) io_uring_register$auto_IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x1) select$auto(0x7, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/fail-nth\x00', 0x842, 0x0) write$auto(r4, &(0x7f0000000440)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xe7k\xc9\xb7\x80T\xd0\xc2\xa0\a\xf6*:\xb7_\xf1\xb1yx\xc8\x00\xf1\xf9\x87\xa4D\xf4S\xda\xa9Y4*\x1a[\xcdv\x83q\xab\x1aK8 \xe9\xf7TU\xc6\xe3~\x92S\xef\x9c\xc0\xc9\x04/\x18\xf1\xe2\xe4_\xfa{\xe0DB\x1d\x83e\x12*\xa0K\xc0`\nt\xf5\xac$\x94\xf0>\xceXs\xb5\xd8dV\xc4lG\b~\x1cn\x80\xde?\xed~\xcfV\xcd\xdc\xdd\'\xc4^.=\xc4\x86\xce*\xba<\xbf\x19N\xc5~zFY\xc6\x90\xf6o>\xf7\x1a$\xfd\xc7\xf1[-9\xf5v/\x10\x87@\'1\xf3\xd7\xcd\xbf\xac\x84\xe2\x98\x96>\xff1\x8a\x1d\xdalWU\x1c\xc7N\xdf\xcbR\xf6\xea\x89\x01\x04\x00[\x1eP3\xec\x13\x1eh\xab#\x1do\xa1?s\n\xb6\xcc{\x9e\xbb\x06\xe4>J\xbew\xc2K\x1c\x97_=\xe6]\x06)`\xad*\x88k\x1d\x87&\n\xdf#?\x03\x06(\xef;\x7f\x1d\x7f\xb8\xd5\xe9\xfe`M\xe7\x95\xb2\xa6\v\x190\xce\xc4\x15`\xa5C\x9ar\ta\xec\x17\x16\xc6\xf0\x03\xc6\x85U).\xf5\xc5\a\x94\xc5\x86\xb6\xce\r,M\xd2]r\xe5m\x83X\xa82&\x01r3\x8dW\xb0\xf8/\xbf6\xee\x88\xf9LD\r\n\x17\x901\xa1\x10K\x85Yk\x99{\x88\x94\x13rp\xbb\xe18\xbdK\x92\xd8i\x89!l\xad\x1e\xf3M/W3E\xebZ\x92\x1c\xa34\xd2\x84vkf\n6z\x10!\x85\xd9(\xa17\xeb\x82\x97\xd2\x94Nu\x86\xac\x12a\xedp\xa3D\xf7_\x11\x96|V>\xbdj\xb6\x85/\xa6\x17\x11n%\xbe~\x15\x91\xe6\xa9z\xd4\x91\x8f\xac\xc5}\xe4\a\x9an\xa8\xf0\xda\xa1\xb2\xee\xef\xed+S\x1b&X\x82{\x8d\xe3m\xc7\xe8x\xe8V\xf7\xec\xcaH\tQ\xaehU+\x87@\x9b\xe3\xbc\x8e\x99\x8e\x8e\x06/\x0f\ax\xcc\xb0\x88*\xffsuV', 0x2) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000000280)={{0x9, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x287f, 0x2, 0x3}, 0x0, 0x0, 0x7fffffff, 0x9, 0x8, 0xffffffff, 0xfffffffffffffffe, 0x7fff, 0xfc2, 0x27f, @inferred, @raw=0x9}) setresgid$auto(0x0, 0xffffffffffffffff, r5) r6 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) getxattr$auto(0x0, 0x0, 0x0, 0x4f) fsconfig$auto_FSCONFIG_SET_PATH(r2, 0x3, &(0x7f00000000c0)='/dev/sequencer\x00', &(0x7f00000001c0)="b292bc734df870801ef5189ff5beea4639c7beca794250fa3c1b7fc1fca71c50d9ff70ecdaa0c20d4ddc0b306506e91ff5013841aefa8823b4f05cd5c825c2f69ce5f305fb7f678c79ab75c32bb302ad16e553c86baecf4b2db36df27c1b17f563fe88d333d1", r3) ioctl$auto_RTC_IRQP_READ(r6, 0x8008700b, &(0x7f00000002c0)=0x8000000000000) epoll_ctl$auto(r1, 0x1, r0, 0x0) setsockopt$auto_SO_TXREHASH(r0, 0x2, 0x4a, &(0x7f0000000040)='\'@$$\x00', 0x400) r7 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000280), r0) sendmsg$auto_L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x80, r7, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xb1d}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1000}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_to_bond\x00'}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x8}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @loopback}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'nicvf0\x00'}]}, 0x80}, 0x1, 0x0, 0x0, 0x1}, 0x1) 5m7.75878684s ago: executing program 0 (id=3993): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) sysfs$auto(0x2, 0x11, 0x0) r0 = fsopen$auto(0x0, 0x1000) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) 5m7.447391843s ago: executing program 0 (id=3995): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002a80)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x8, 0x7d, 0x0, 0x0, @pid}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x2}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4050}, 0x20008004) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x801, 0x84) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x11, 0x6, 0x7fff, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x2df, 0x500, 0x81, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x10001, 0x40, 0x76c5, 0x8, 0x7fffffffffffffff}}) (async) io_uring_enter$auto(0x3, 0x0, 0x82400001, 0xb, 0x0, 0x18) (async) unshare$auto(0x40000080) (async, rerun: 64) r2 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/tracing_on\x00', 0x8001, 0x0) (rerun: 64) write$auto(r2, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x0e\xfa{\x15\x1d\x11\x85o\xf1g\xb7\xb3\xdd\\\xfdG\xa9\x16R\xa4\xe9\xd1\xf4S\x94\xe1\x9c\x88\x1b\xe6.\x11\xa3\xe1\xddi\xb66\xaa\xa3\xc7iB\xc84\x11\xac\xfd\x1a*\xd4a\xfe\x05\x96\x0ec\x12\xea\xd5K\xea\xda\xa3\xfa\xc3\xedr\x17\xa5\x1c\x88{v\xb8\bj\x84\xd8g\x05r\xe7n\x7f^\x9d\xc7V\x92\xb9Z.Uc*K', 0x9) (async, rerun: 64) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) (rerun: 64) r3 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x20080, 0x0) poll$auto(&(0x7f0000000040)={r3, 0x1000, 0x1c9}, 0x2, 0x7) (async) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) (async) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200) (async) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x800, 0x0) mmap$auto(0x0, 0xe883, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) mmap$auto(0xfffffffffffffffc, 0x400006, 0x5, 0x100000009b72, r4, 0x8000) (rerun: 32) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x2, 0x3, 0x2) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x38}}, 0x54) (async) madvise$auto(0x110c230000, 0x8031ca, 0x10) madvise$auto(0x110d230000, 0x1, 0x9) (async) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) (async) sigaltstack$auto(&(0x7f00000000c0)={0x0, 0x0, 0x7fffffff}, 0x0) (async) sigaltstack$auto(0x0, &(0x7f0000000240)={0x0, 0x1, 0x1}) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/platform/dummy_hcd.0/usb1/1-0:1.0/usb1-port1/quirks\x00', 0x0, 0x0) sendfile$auto(r5, r6, 0x0, 0x3) 5m5.423681507s ago: executing program 0 (id=3998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), r0) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYBLOB="080001002e535200090002"], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) 5m5.041145652s ago: executing program 0 (id=4000): r0 = socket(0xa, 0x801, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0x3b, 0x405, 0x7fff) mmap$auto(0x0, 0xe, 0xdf, 0xeb1, r0, 0x3) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x10001, 0x20003, 0x6, 0xffff, 0xd, 0x400005, 0x4001003, 0x8000007, 0x8001, 0xe, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x54b9, 0x0, 0x78, 0x8, 0x5, [0xe, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x8001, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x2, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200000, 0xfffffffffffff19f, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2962, 0x20000000000, 0x2]}, 0x2001fb, 0x7f) syz_genetlink_get_family_id$auto_nbd(0x0, r1) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=' ', @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7", 0xffffffff}, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183941, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = memfd_create$auto(0x0, 0x4) statx$auto(r4, 0x0, 0x1000, 0xbdfc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x100) 5m4.699953135s ago: executing program 0 (id=4003): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "0000012c0000fe8000"}, 0x1f) mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0x401, 0x8000) 5m4.01699663s ago: executing program 0 (id=4005): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000003c0)={0x2200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) getcpu$auto(0x0, &(0x7f0000000040)=0xcdf, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:03/power/runtime_active_time\x00', 0x286a01, 0x0) close_range$auto(r3, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x2010, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x7, 0x6}, 0x10) fgetxattr$auto(r3, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x0) pread64$auto(r2, 0x0, 0xe, 0x100000000007) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyw4/dev\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(r0, 0x400454ca, 0x38) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) syz_clone3(&(0x7f00000003c0)={0x2200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) getcpu$auto(0x0, &(0x7f0000000040)=0xcdf, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:03/power/runtime_active_time\x00', 0x286a01, 0x0) (async) close_range$auto(r3, 0xfffffffffffff000, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x2010, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x7, 0x6}, 0x10) (async) fgetxattr$auto(r3, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x0) (async) pread64$auto(r2, 0x0, 0xe, 0x100000000007) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyw4/dev\x00', 0x80000, 0x0) (async) read$auto(r4, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0xfdef) (async) 4m48.944628473s ago: executing program 33 (id=4005): r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) syz_clone3(&(0x7f00000003c0)={0x2200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) getcpu$auto(0x0, &(0x7f0000000040)=0xcdf, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:03/power/runtime_active_time\x00', 0x286a01, 0x0) close_range$auto(r3, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x2010, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x7, 0x6}, 0x10) fgetxattr$auto(r3, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x0) pread64$auto(r2, 0x0, 0xe, 0x100000000007) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyw4/dev\x00', 0x80000, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(r0, 0x400454ca, 0x38) (async) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x126, 0xf8, 0xffffffffffffffff, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) syz_clone3(&(0x7f00000003c0)={0x2200, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) (async) getcpu$auto(0x0, &(0x7f0000000040)=0xcdf, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/ip6_mr_cache\x00', 0x1900, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:03/power/runtime_active_time\x00', 0x286a01, 0x0) (async) close_range$auto(r3, 0xfffffffffffff000, 0x0) (async) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x9, 0xb5, 0x2010, 0xb, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x1, 0x7, 0x6}, 0x10) (async) fgetxattr$auto(r3, &(0x7f00000004c0)='security.capability\x00\x06\xa1\xcd\xd3<\x81\a(\xa2f*\xaf\xc8\x02\xe9\x14\x8fE2k\x19{\xd4\xf2\xdf\x80\x9c\x87\x86\xde20\x8e\x1cN\xd40\xd3Z\xf3K\x98vW\x7f\x94Z\x0e>\x85S&\xe5\x96\xce\xf15\xb3v\xa8R\x05\x94\x8c\x1df\x11\xbd\xd0\x7fu\xc7{\xe1\xff\xff\xc4\xbb\x17\xd5\xee\xd8\x143\xed\xc4|\xd3\f\x05\f\x95\xce\xbf9\xc8\xf1m\x96\xa3\xc0\xf29\x8b\x02\x89\xed`\xb4\xcb\xb3O\x97X\xe3\xd0j\xa5\xd0\x9e*\xf9|\xd9\xc2\xf4X\xc9[\xfa\xcf\xa3\xeb\x05EOgaA\xb1@f\x93F0\x8cR\xc5\xb6\x16\xfa\xe7\x13\x00\x02\xf4\x80\xe3\xd2\xf4MP\x87vB\xefJ\xeb\xb3\\\x88\x18` \xca\x8faI\x89\xb6\x91\x1ae\xd2\xad\xbe\xb3\xe6\bX]\xd7\x81.\xd2\xed\xc4\x9f\xb5~\xb4\xc6^\x97\xc3\xa2\x16\x99\xfc\x00_\xe6\xb0G\xe9`\xb4+2\x93\n9 EU\x1e\xb4\xbeVt\x89\xf9\xc7\xe1`4O\x00\x00\x00\x00\xa5\xe0\xf5\xb2\x00\x00t\x10\"\x15\xbc\xdb\x92\xff\xa7\xe1Vv\xe5*\xc5\xe1r\xf5\xa4Cw\x1c/?\xbcn\xe3\x8aX\xfc\xe9,\xca,9\xda\xad\x87\xb1\xb2\xff#\xa1Yi\xd3\x17l6\xa0\xd8\x1b\xad8\a\xfc%\xa6(\xcb\x97(\x16\x81\xbf\xc6\xdbw\x13!\xc9\xc6\xc3\xfbc\xfe\x83\xcd\x16 e\xcd\x91y@\xe2\xd8{\xec\xbb\xbb\x1d5\t\xed>\xa9&\xce\xfc\xab[\xae\xa1\x94\b\xcc/-\x12\x8d\x84K\xf0\xd0\x0f\x13)\x17CI\xb7\xf35\xfc\xe8(\xfa\t2\xafQ8}\xd8\xbb\xe4nlR\xf8\xc9\xf2\xa3\xe5\x83\r\t\xb96d\xd6\x1e\xbd*\xa4\xc9\xcbE2\xe9\x81\xc3\xc3\x8a\x15\xcb\xf2\x8a\n\xe8\x1c\x88\xd4\xa5\x96!dJ+\xd2\x01#v\xd8BgB`\x8alP\r\x04\xce\x04$\xaag\xb6\xdb6-0>\xb3u\xd4\xdb\xd8~\xb0\f', 0x0, 0x0) (async) pread64$auto(r2, 0x0, 0xe, 0x100000000007) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/tty/ttyw4/dev\x00', 0x80000, 0x0) (async) read$auto(r4, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0xfdef) (async) 1m9.124945367s ago: executing program 2 (id=4758): r0 = socket(0xa, 0x801, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0x3b, 0x405, 0x7fff) mmap$auto(0x0, 0xe, 0xdf, 0x99, r0, 0x3) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x2, 0x8, 0xfffffffc) socket(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket(0x2b, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x10001, 0x20003, 0x0, 0xffff, 0xd, 0x400005, 0x4001003, 0x8000007, 0x8001, 0xe, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x54b9, 0x0, 0x5, 0x8, 0x5, [0xe, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x8001, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x2, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200000, 0xfffffffffffff19f, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2962, 0x20000000000, 0x2]}, 0x2001fb, 0x7f) r4 = syz_genetlink_get_family_id$auto_nbd(0x0, r1) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=' ', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(0x3, 0x81) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183941, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) socketpair$auto(0x1e, 0x4, 0xfffffffd, 0x0) r5 = memfd_create$auto(0x0, 0x4) statx$auto(r5, 0x0, 0x1000, 0xbdff, 0x0) 1m8.710003224s ago: executing program 2 (id=4761): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x40194585b1d137cf, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x24000010) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x22002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x808040, 0x0) shmctl$auto_IPC_RMID(0x10000, 0x0, &(0x7f0000001100)={{0x8, 0xffffffffffffffff, 0xee01, 0x767a, 0x4, 0x1, 0x7ff}, 0x0, 0x5, 0x1, 0x6, @inferred, @raw=0x3, 0x5, 0x0, 0x0, &(0x7f0000000100)="4b89bcabd7ab74161841c369b80d72d8e51b97f9964bccbdc0b0469a504d3973cd73f8e30ba6da8f55cd30e6600779254092c70f47dfd8febb823fa6f3efaaaa621ab01ed69007e950db5682c50dc3f65a0b266bf0bb8dc7c7604610d5a45f12fc629d6302274abad46bf05a94485635ab8150053f41cf3175c563e76b44a9c68164dd077edd94ba84245a447d4085cff96c75eb68b716250787eac638d894752ca04f"}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x50}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa506}, 0x800}, 0x7, 0x4008) 1m7.163170275s ago: executing program 2 (id=4765): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x208) close_range$auto(0x2, 0xa, 0x0) 1m5.870805323s ago: executing program 2 (id=4768): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/12u\x00', 0x68100, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) madvise$auto(0x0, 0x400053, 0x9) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) r1 = socketcall$auto(0x8000ffa, 0x0) close_range$auto(0x2, 0xa, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x4020ae76, r1) 1m4.762989909s ago: executing program 2 (id=4772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_ftrace_event_format_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/format\x00', 0x44080, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000003a80)={0x14, r1, 0x401, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x2400c001}, 0x8000) 1m4.4759059s ago: executing program 2 (id=4773): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6c) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x6, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x2001fffc) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) sendmsg$auto_IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000001}, 0x40081) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r1, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)={0x18, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, &(0x7f00000017c0)='/proc/thread-self/uid_map\x00', 0x400, 0x0) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f000000a240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1400000}, 0xc, &(0x7f000000a200)={&(0x7f000000a280)={0xd24, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_MAC_HINT={0xe, 0xc8, "9f62528f1003312e23cf"}, @NL80211_ATTR_MLO_LINKS={0xcf8, 0x138, 0x0, 0x1, [{0x8c, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x7d, 0xbe, "c4794f65f44c8e66cca81318e0445ccba06e59312255cf4423b95e59d61d2984c850e3a8f148775cc96e461cd7f7198e64286587e58146b5274901347c21ead666ead611ce44a7d9c2db49157e870edaa731520352b3619f524ff7a40a3aa3f46ed4a55cf0c484d332acc5b41da71210c808f3f3c8d90e1988"}, @NL80211_ATTR_MLO_RECONF_REM_LINKS={0x6, 0x14f, 0x5}]}, {0x274, 0x0, 0x0, 0x1, [@NL80211_ATTR_RECEIVE_MULTICAST={0x4}, @NL80211_ATTR_HANDLE_DFS={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6}, @NL80211_ATTR_FILS_ERP_USERNAME={0x7, 0xf9, "c34ca1"}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x4e23}, @NL80211_ATTR_EMA_RNR_ELEMS={0x24b, 0x145, 0x0, 0x1, [@typed={0x4, 0xb4}, @generic="3c144559e4f50bf47f371eba39b5cefe53a708056cd1104bb25ae398e53ba78d2664017bbaeca743d5528f58dd55f97f7ae71b223fe0ebbbb568d014fc68dc06d1b470565077406e5ab29248142a7a9077c5e0f11f05f98a02c44eec9f69bf66dd580a816902409a5357f6", @nested={0xd9, 0x11, 0x0, 0x1, [@nested={0x4, 0xba}, @nested={0x4, 0x14f}, @typed={0x8, 0x84, 0x0, 0x0, @pid}, @generic="ac7e80680ddb3a21dd756140fa8209a2a96365f1dfbddd7cb88cd534f215de15030e8804325d9baee25d93e49b7cbd941c28da25d4004e2b0742d72e394ebe855f6e4aefebac12c0c0b308ce596419b2fd4ac4d196911b7d3c2eaebeb96e3e642eab5d60fd0ac66b65fc7aefde80f557d3a49b0e5fe57ae5ca95391a7e46cf6b49a83c752baba6762dc306c9a034b61b8e36274913b576cb4f2aae994e55dbb94f753f1ea5750ee63b40e1d95956e26f8cddfba936ef95c35d014d9523910d46a621420de4"]}, @nested={0xf9, 0x56, 0x0, 0x1, [@generic="9866f83c82e08983d2cb7e0d6ed417d314fc1fe2814ea914a99341da903942f0556c93c74a856d52509e3eadf871a9ad79769832ba7a967be5bbddb7dedd6df4", @generic="013e7a9a8fe36d6e20ed476aab76a16bd702534d8f4bba1ec75a2a3923e0ad18db7cd2e08b685fa646305b379b9233a341", @nested={0x4, 0x2e}, @nested={0x4, 0x84}, @typed={0x8, 0xcc, 0x0, 0x0, @pid}, @typed={0x64, 0x24, 0x0, 0x0, @binary="6101edd5190539fb373c5da5a452317d5ae684147d0a0f8f69add74b52c3a42c3cac4149b492d957a0083b14a9dd0b5266f0bda9e31af4aa3965ed5906b0721c7c1f2a62103d40148849e5d3e2bf4c6326e8e335cfb99c866b1b5d8154b567ac"}, @nested={0x4, 0xb9}, @nested={0x4, 0x98}, @nested={0x4, 0x2e}, @nested={0x4, 0x105}]}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, {0x3b0, 0x0, 0x0, 0x1, [@NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0xca}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_IE_ASSOC_RESP={0x399, 0x80, "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"}]}, {0x28c, 0x0, 0x0, 0x1, [@NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x10}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, "5cb5034c024abde6661081a869e4515d2108eac2058412849b27"}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, "869527164f3966c8c3"}, @NL80211_ATTR_IE_PROBE_RESP={0x24e, 0x7f, "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"}]}, {0x3b8, 0x0, 0x0, 0x1, [@NL80211_ATTR_HT_CAPABILITY={0x3ab, 0x1f, "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"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}]}]}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x7}]}, 0xd24}, 0x1, 0x0, 0x0, 0x800d808}, 0x20040871) write$auto(0x3, 0x0, 0x100000000) 51.442734798s ago: executing program 3 (id=4808): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000ff8000"}, 0x1f) mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0x401, 0x8000) 50.933539629s ago: executing program 3 (id=4811): r0 = socket(0xa, 0x801, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xe2, 0x3b, 0x405, 0x7fff) mmap$auto(0x0, 0xe, 0xdf, 0x99, r0, 0x3) fanotify_init$auto(0x5, 0x2000000000002) close_range$auto(0x2, 0x8, 0xfffffffc) socket(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r2 = socket(0x2b, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3, 0xfd}, 0x6a) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xe, 0x9, 0x1, 0x14, 0x944, 0x10001, 0x20003, 0x0, 0xffff, 0xd, 0x400005, 0x4001003, 0x8000007, 0x8001, 0xe, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x3, 0x54b9, 0x0, 0x5, 0x8, 0x5, [0xe, 0x4, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffbffffffffffff, 0x8001, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x4, 0x800000000002, 0x9, 0x2, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x1, 0x0, 0x200000, 0xfffffffffffff19f, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x8000000000000000, 0x0, 0x0, 0x2962, 0x20000000000, 0x2]}, 0x2001fb, 0x7f) r4 = syz_genetlink_get_family_id$auto_nbd(0x0, r1) sendmsg$auto_NBD_CMD_RECONFIGURE(r1, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB=' ', @ANYRES16=r4, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x90) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x1, 0xf, 0x0, 0x9) listen$auto(0x3, 0x81) process_vm_readv$auto(0x0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="58e7", 0xffffffff}, 0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183941, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x0) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x200, 0x0) socketpair$auto(0x1e, 0x4, 0xfffffffd, 0x0) r5 = memfd_create$auto(0x0, 0x4) statx$auto(r5, 0x0, 0x1000, 0xbdff, 0x0) 50.153629805s ago: executing program 3 (id=4812): r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0xa3) mmap$auto(0x0, 0x2020006, 0xffffffffff7fffff, 0xeb1, 0xffffffffffffffff, 0x1008000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x8720}, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101c40, 0x0) r1 = socketcall$auto(0x1, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x2) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_fake_panic_fops_(0xffffffffffffff9c, &(0x7f00000000c0), 0xa000, 0x0) getsockopt$auto_SO_TIMESTAMP_NEW(r2, 0x7, 0x3f, &(0x7f0000000100)=',\x00', &(0x7f0000000140)=0x1) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) write$auto(r3, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020003, 0x1, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r4 = fanotify_init$auto(0x3, 0x3) ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE(r4, 0x4112, 0x0) madvise$auto(0x0, 0x200007, 0x19) socket(0xa, 0x800, 0x92) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 48.83113144s ago: executing program 3 (id=4813): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) shutdown$auto(0x200000003, 0x2) socket(0xa, 0x1, 0x84) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x66) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) uname$auto(0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0x90) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7112}, 0x208) close_range$auto(0x2, 0xa, 0x0) 48.662513157s ago: executing program 3 (id=4814): setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) 48.542288975s ago: executing program 3 (id=4815): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x30, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x2, 0xffffffff) 33.450185337s ago: executing program 34 (id=4815): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x30, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x2, 0xffffffff) 31.620744233s ago: executing program 5 (id=4857): mmap$auto(0x0, 0xf6, 0xdf, 0xeb1, 0x401, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24000010) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x22002, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x808040, 0x0) shmctl$auto_IPC_RMID(0x10000, 0x0, &(0x7f0000001100)={{0x8, 0xffffffffffffffff, 0xee01, 0x767a, 0x4, 0x1, 0x7ff}, 0x0, 0x5, 0x1, 0x6, @inferred, @raw=0x3, 0x5, 0x0, 0x0, 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000400b70a0000060007000080000008000200", @ANYRES32, @ANYBLOB="0a0005000180c200000e00000a07000000000000000e00000a000100000000000000000008000200", @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000003b40)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x50}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa506}, 0x800}, 0x7, 0x4008) 31.317553143s ago: executing program 5 (id=4858): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000040), r0) capget$auto(0x0, 0xfffffffffffffffe) write$auto(0x3, 0x0, 0xfdef) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000881}, 0x0) r2 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r2, 0x2, &(0x7f00000000c0), 0x1) io_uring_register$auto(0x2, 0x3, 0x0, 0x0) 31.015806434s ago: executing program 5 (id=4860): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/media15/dev\x00', 0x488081, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vivid.0/media15/dev\x00', 0x488081, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) (async) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x82001, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="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", 0x238) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) (async) ioctl$auto_SNDCTL_SEQ_SYNC(r1, 0x5101, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/arp_tables_targets\x00', 0x0, 0x0) pread64$auto(r2, &(0x7f0000000100)='/proc/self/net/arp_tables_targets\x00', 0x8, 0x9) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto_IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000280)="5081f3aa5545f64971cd2dd061cf82def17fda99d164814e7b52e2b402836e492f4fdc9119b0e0ce3f0929ee2a347518232e3a93916722498d421abc234dffd4449373409079f2539771f373f4635e4f3b982484c961888c61a8fad9d14f1f09f4525247ff8a8725", 0x3) (async) io_uring_register$auto_IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000000280)="5081f3aa5545f64971cd2dd061cf82def17fda99d164814e7b52e2b402836e492f4fdc9119b0e0ce3f0929ee2a347518232e3a93916722498d421abc234dffd4449373409079f2539771f373f4635e4f3b982484c961888c61a8fad9d14f1f09f4525247ff8a8725", 0x3) r3 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x0, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) write$auto(0x3, 0x0, 0xfdef) bpf$auto_BPF_PROG_QUERY(0x10, &(0x7f00000001c0)=@query={@target_fd=r2, 0x89e3, 0x0, 0x3, 0xe, @prog_cnt=0x8, 0x0, 0x3, 0x401, 0x1, 0x5cd}, 0x7) r4 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x4e0041, 0x0) ioctl$auto_UI_SET_PROPBIT(r4, 0x4004556e, &(0x7f00000000c0)=0x9) (async) ioctl$auto_UI_SET_PROPBIT(r4, 0x4004556e, &(0x7f00000000c0)=0x9) socket(0x1, 0xffffffffffffffff, 0x7) mmap$auto(0x8, 0x10400008, 0xdf, 0x10, r3, 0x7fff) mprotect$auto(0x200000000000, 0x806124, 0x8) (async) mprotect$auto(0x200000000000, 0x806124, 0x8) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) splice$auto(r5, 0x0, r5, &(0x7f0000000100)=0x8, 0x100, 0x2) socket(0x10, 0x2, 0x0) (async) socket(0x10, 0x2, 0x0) socket(0x2, 0x5, 0x0) pipe$auto(0x0) 29.199574432s ago: executing program 5 (id=4864): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x4000000008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x400000003) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) pipe$auto(0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000100)={{0x0, 0x8, 0x0, 0x8, 0x0, 0x81, 0x9}, 0xfffffffb}, 0x5, 0x6586, 0x0) 27.786140347s ago: executing program 5 (id=4865): mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(0x0, 0x20, 0x0, 0x8000006) timerfd_settime$auto(0xffffffffffffffff, 0x0, &(0x7f0000000000)={{0x10, 0x3ff}, {0x10, 0x9}}, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000103fe8000"}, 0x1f) mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0x401, 0x8000) 27.384338354s ago: executing program 5 (id=4866): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x7fff) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0) r1 = socket(0x23, 0x80805, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x82}, 0x1, 0x0, 0x0, 0x623d) listen$auto(r1, 0x4) poll$auto(&(0x7f0000000000)={r1, 0x1963, 0x81}, 0x5, 0x10001) r3 = socket(0x25, 0x1, 0x2) setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004) setsockopt$auto(r2, 0x113, 0x3, 0x0, 0x79ad226b) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/bus/netdevsim/new_device\x00', 0x792fe55c) writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7) r5 = socket(0xa, 0x1, 0x84) ioperm$auto(0x7, 0x6, 0x80) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket(0x2a, 0x2, 0x6) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r6) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000300)={0x894, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x7}, @NL80211_ATTR_IE_PROBE_RESP={0x5c4, 0x7f, "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"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_PMKID={0xb9, 0x55, "48272d532d03577226ba08501c8598aa7acc668b6ea32a374f25f7891e93cca387317050081d8d56f3a24981db9e2fb25281cf9be8ae997d81b8aec63eb0feecd1ad19725d78758950146c17727d5edffe9b498ba11e998e98e858371a48bceac3d3172c4c013c2ad14855da80c1aebe32eb2eef2b48d0277a8245f1ecc688898776956b3e248c43b471219ff379f7e6b2c12cdfd2a97164dba8096015e072857aa1d7b0ea047e72ff0be202bc454516beb7c27b2b"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfff}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x1e0, 0x131, 0x0, 0x1, [@NL80211_ATTR_CSA_IES={0x1d1, 0xb9, 0x0, 0x1, [@generic="db673af93bf2ece6b1036150102c8156018ceb8306471d01627af5cc2ca5dd94394fabab33c7e0b524a38b81725eb289b61e2a0c45f92983263b43022f1eff2927f33e75d4f3e50bc44c736802efa07a9165fa83bae35b774433cdd26cbdf8e9e80940728cdc565d3eb403ef50309a3a4d63037275d64f63a4f41e0568cc7ea4f2659613658747dfc2139cf63150c58dc0c95fbcf038ea1aa2a38d8e7a037e238cd94086fbbffe2b9428c3e93d84176834eab65fba1f2f7c62e7a25ca04bc49107b614d41240fcec4df551f88e858e4dcb4a6dd9f1d9633740f16ab062", @typed={0x4, 0x12}, @nested={0x94, 0x8e, 0x0, 0x1, [@generic="04e841be1d5c3758bf7908da9ac5747e30fd345d92bcb64051bcd4b57e84bf0b6590097510a10aa05c97f283aa05311236083123cac3102a7f877e171e2d88fbf600e5fa394fa337cd66b31170544108c756c01ad029b0e5f957eaf6c2ab44c57209875ff27bcbe47eac1ebe5d8a29ece4dafcade5e1fa2647bb7bd7ed75e0f3f2cd5ca2bb25eaf572014f9d5994cc09"]}, @nested={0x4, 0x12f}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}, @generic="cdf4c5d3fe11a906bf52ca6d17d6a3b9e2bdea37d1d7ff80cb928949f12cc3a488e1f6e4f4da238888d7d1f3a7f500180f2edb4036005c2e3ca1d8d5"]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x3}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x894}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044014) bind$auto(r6, &(0x7f0000000200)=@l2={0x1f, 0xa2d0, @none, 0x1, 0x2}, 0x4) sendto$auto(r6, &(0x7f0000000180)="eb43d1a7c50c95d59e8bdd617e674feac5c91f21d780f51889b790e7358ca55a0f", 0x99, 0x0, &(0x7f0000000240)=@in={0x2, 0x4e22, @loopback}, 0x1000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x1) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) 18.456939115s ago: executing program 4 (id=4882): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/usb/usbmon/12u\x00', 0x6a300, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) unshare$auto(0x40000080) unshare$auto(0xffff) mmap$auto(0x0, 0x5, 0xc, 0x15, 0x7, 0x28000) r1 = openat$auto_hsr_node_table_fops_(0xffffffffffffff9c, 0x0, 0x119301, 0x0) preadv$auto(r1, &(0x7f0000000300)={0x0, 0x8}, 0x5, 0xf, 0x5) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/overcommit_memory\x00', 0xf22437c730143eb6, 0x0) ioctl$auto(0xffffffffffffffff, 0x0, r1) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv6/conf/default/ignore_routes_with_linkdown\x00', 0x42a81, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002bc0)=""/66, 0x42) pwrite64$auto(r3, &(0x7f0000000000)='/proc/sys/net/ipv6/coX\t/all/for\xdf0x0}) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000000d80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000100)={0xc38, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_MASK={0x36b, 0x7, 0x0, 0x1, [@generic="97ebbef92560afef72891cb19c9fa786eeb9052abbc7455a5d03e672f0a5ef44055a5f4be5efe0ac514003549de193f22b92bae38ef71665411fdf2fd4b32aa9489a7155b66b940b96247efc47a16e110a7288fec6150106d5e87da2d79d5783322c14897aec658d435591c02ff22454c1e576b20ab66ed20fc3a9ac8c3128f03df3d97532a7377b8c212ca4b8698301dca5ff29353fabf24f43dbd65cb7831297d037ed391d16b46a2a71590b8db0", @typed={0xc, 0x13d, 0x0, 0x0, @u64=0x9}, @generic="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", @generic="09c3532c84f5debcfa57b06ebf27633f50c045f14ede30c1783f4cbc009b77e5a54c47605e389e6758bbe902ac02cd771dffabf3ad6359b4958925ce7636fa188b55a7f508616b84b111378c7b041b4828c0eecd765256929f0794e1aaf3a6025dc63765dfa9e90183a87fff6dd3e9f67d09966469cf178d20edf3d6265e26ca32dc96d07ebd2d6ae3052e6415e47aaee3691323cb8b8a9622645a91b964a8eab14817151cee054e7b7ddb3c80ae1f126942b49225d5b232f45e044035ab22a26e5f889c04b05a4f47b01f7510", @generic="8fa3ee77560c0645b483ef57fa0c79be9b13fab6f63d6840476a70886778d02d1bc8ebcf528a6a31d0ef090cac817e0726543cf73244585b8fa4b850c72ebf92b27f755ee3f2c8ee80a3033d9fe818a13329367799855abde3a4e40426849c548ba4767d9f0a2beeaa339246b93014654755ece510c317c4de06e2305b266923c8e15d1b71761d4c88504b61fb1113175334479d953cac9e882e5f272131fc60fd27b65819722edf58d7f06610fd5f7d1307328517de58c779836d19db35afcb6fbeeb4bb7262977b9111dec7208defedd8599c9510c4037f34be4a3b8e20075acce8a"]}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x80000001}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_MASK={0x7c6, 0x7, 0x0, 0x1, [@generic="95a80041b320bd1fcceff51ad47c3ddc139ddff7544c8287c48c8b25e0dda5e5514dd104dc8acf39ccd22fc86ae64b76208a270cb7f2267b27277be2c3", @generic="ea49957e44de690ca6314a052667d320e87f2ca89d9bdd6cffe7886cae03ebe50d15e8b94634b5dfd443a84631246aeec4482ddc4093e1ffe1fbf29d54df42bb418e2a5417c59bcbb028fe2abcffdbec9b2df472e71c0ee1104f3317a439be0b895f5163d89825957cc5fd24ded4eb5fc39917a2ad44881591b8da879a41d99d68dd757d7cbffae0e87192ed509e52e34fd64e3a2116b3f4ac22abdb88f09e98f08d5007bfcc53101ca79edf3e872d8e975fe55d3ce4336904e09be2b558f35445f5ce63c4", @generic="ca7fba744eac70359bbb72331d49f13cddf959d82002e153c08d4bc36167704d134e22ad8a3a6f5e49fa37834cf4a0ec27d221ab454522cb243f9c914f6c844c50da596f40c760b4710ceb04ddcc7a6dbd008091b646dce31c7362bc4b8b123379052d3cef9e5be5f286d383cd41eaac1d3d84efb1a1acd166947548a52c62338a4c2cc38c5decef3dc09650a854bcce1008848dcf744fa21b5bc0a6f15d7af1d3d83db3bba8765ef3a100858d0e10bf1bd683e0c9c2d911e360eda24623c22820bda684bb2c8793cd7d42bdd269a40ba4003571f433cfae0ab9f9", @nested={0x28, 0xcc, 0x0, 0x1, [@typed={0x14, 0x133, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x13}, @typed={0x8, 0x80, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @nested={0x4, 0xbb}]}, @nested={0x79, 0xfa, 0x0, 0x1, [@typed={0x8, 0x4c, 0x0, 0x0, @pid=r2}, @typed={0x8, 0x8, 0x0, 0x0, @fd}, @generic="9f259bec475db21b540ef422ef81fc6ab708cd13d6c0042b0d1a9583ac33c48aaf0e9c7bb77e4d05eed5fd18cc5c8ea12d3bcca78a5b062eefe30b23d639d23eda2e116062ff5b0eabf4a29538", @nested={0x4, 0xa9}, @typed={0x5, 0x69, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xe9}, @nested={0x4, 0x7b}, @typed={0x4, 0x70}]}, @nested={0x2d1, 0x12d, 0x0, 0x1, [@typed={0x8, 0x162, 0x0, 0x0, @pid=r3}, @generic="26a8acc885415477216895529381fc23736dbe7a359c326b331989bd7985a0b1cea56be817d8c941b68b3b57ef48e37cccbfcb1f791a2724e3b2b54889f3cda66b47d7a4ae88a3899ff84b34f8c93c0cf91ff099bf19f864b4756fb743bf94e324d71ca7a97f1e6380ecc5f2d185b1ab84044ee9550343800698348a118c800b475f2888a4ee0b", @generic="ce56b1051731d05ae25a985caeef50d5e65950ed2589b8487aad3e3d455db830f966c0733bc69ba41d3eae1b331ab1519ebce448d27cf981f48d4d20b8bc312bb7e7d40be1d3d57a7d90e936288bac3b7687bd2611a52283f45846717ba841be05caa1f9a9ce1bd1a1272ac9690c3b410cce54227fe48751e2525f845816b01e42624d75bd0948082e9f04d21e873615223b1197d2a09555d8b53ad05656b167124582c5f0eb38b096747dbf3acfb2c9757947", @generic="09f608c7503b737baaf9ac2426b23517164f98aff3460e2969999878ec266d470639d0b001ab929d9fc67fbfbc391b0630c3fdb893f1dcd07ed5fbb914c006ae153c0c1cfc2bc348ab13b2c90dbec04496f76ec5045c6c59287689cb6e7e61a5d2fd95af0222b7b41e40b9f27c2726f8c793778c0ea13ca06c64249bfbf89583caf9e7", @generic="f58e5f9c08444a68bcaed7403b367b32237cd9e630eb987165f20f03afa5b48d593be5a7a0746f86", @typed={0x4, 0x128}, @generic="a7f9fd05cb866c3c07ee4faef6ad2f1b7c4b058e43ef4532a304d51a3c5fc15c9440b5303ba7d3d7d442914bb67f397899c285f73e8ce2dda26649395de497e7aa71e1a83a72bf8b48b0adcdfe4e2726512954eba4d39ea46baf6e97d2219c3a5bc0c2171ef047bd3092feec2bf9e84ae0b4c5b4054d3416c6b72983f9445debeaac9bac14905c33935cba2deb02f83dd36de15c85362450a6fa605c3cbddb642b8b6d9b1d4ea7e50c5173aa8195ab8a5bc5c39655c8fa866c298ef7fcb1100a4bd0e33a210c2d05bd8d3156f521ada31a8719e2", @typed={0x8, 0xec, 0x0, 0x0, @ipv4=@loopback}]}, @generic="aa2fa83de1f1b0a3354cf25e4802627caa11cc00f161940f0151f22a449fd2f85e4ecc99ef4826d3704c173bb4e7ba87ed588c0b923f7fab15fd3f92db64a70264cebcbdee474094320fbd461a72d05e8410b81808", @nested={0x1ab, 0x60, 0x0, 0x1, [@generic="14da568d65027b1208d304dbccc68abd7b2121ce0bada20ba64b282bb5558af1d0e547dea68264ee621cf10ecef446b53afdc3cc89df368d7aefd6a38ac82dc96f06be3449239a42102ad4cb2be65dd134742fa77b46c976a8adc1aa9ffba0a68483eef2f37b7b241c8e635c", @generic="eaec96a802f29194957398005b982632a94db436cd173b0fcd9bce13e8fe849288eb6bb6275bb9569435df68b494540fd95d34d7910e09fa7dc5cd3c91e07d20b874ab5f53567632e2a1606aba169aeacabf7d18888dd694c97f39e6dc7264c2726795e8ddaa9e6a330444dddc49e78a60d156fbfb2e835639750e0e8723dc4bfea85660ac32a436be63faa7cb0c442bb12c878e2499571723186bd955265d528f41ffe72b35", @generic="dd8f4040e2ba1639b428513d4a56b3304f95915bcfba2aa42d30a6a473e637942a09f0c9e31186916bb9373b664b652ecb07d1b345f1126626539ea5dfba04437d82ea5f13dc932ad0829b55f8a59ab51b7b4b65164e693879a51f284db33d93430dd5218d634d9215e67ff2e3a756499bc1cc17214f4fb6a2911122b8c3d6bce1", @typed={0x14, 0xbe, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @local}}]}, @generic="151a103cbd9a77959a1474229d32f0cb3a0956eaae1b39c9376a5af1264029e1c7708d23d45dbacfeb8b66eb99ff96196889428cf732b74c6ff59086d8707ab17aa3206ffe3c841f199a956332538588e0990603e27f969407655c23761d112ca28e1c9e26eb4a4268b83dd1"]}, @OVS_FLOW_ATTR_ACTIONS={0x4, 0x2, 0x0, 0x1, [@generic]}, @OVS_FLOW_ATTR_ACTIONS={0xdb, 0x2, 0x0, 0x1, [@generic="2e3b4722ccf3a7fd524896460cb33d94bf9e76e79375703bd782a47eae9cda4e4df3c99e99474a17d68302426c7b0f5cd2a65d26417de104a85bcd0d16815db6269d9a0e4cf151a6039ab1410044a701baa1403a1ec184c5aab1a29fb0341ba416d3188790d8b208d21934d138726456e04f18bebd61c65b455306e7e7b6f7562cd92c7234a495e03ac43f445fdb17a3b4fb353aef030d03b739bf9424fe714571441cdd61e30c497b43b0ad6237c5f21758e97695fe3ea55ee42a569dfe74646f2c8881841fb0", @nested={0x10, 0x8, 0x0, 0x1, [@nested={0x4, 0xbf}, @typed={0x8, 0x129, 0x0, 0x0, @ipv4=@empty}]}]}]}, 0xc38}, 0x1, 0x0, 0x0, 0x400c484}, 0x20008030) setsockopt$auto(r0, 0x1, 0x4, &(0x7f0000000dc0)=',})$}\x00', 0x0) ioctl$auto_USB_RAW_IOCTL_CONFIGURE(r0, 0x5509, 0x0) madvise$auto(0x7, 0x10001, 0x8) dup3$auto(r0, r0, 0x8000) ioctl$auto_XFS_IOC_ALLOCSP(r0, 0x4030580a, &(0x7f0000000e00)={0x6, 0x6, 0xffffffff80000000, 0x3, 0x4, r3}) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, r4) r5 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000e40), 0x400, 0x0) r6 = ioctl$auto_TUNGETVNETLE2(r0, 0x800454dd, &(0x7f0000000e80)=0x8) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000f00), r0) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r6, &(0x7f0000001680)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f0000000f40)={0x700, r7, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_TX_RATES={0xbf, 0x5a, 0x0, 0x1, [@typed={0x7, 0x15a, 0x0, 0x0, @str='*-\x00'}, @generic="e742af4137deeb062f8aa056e23a2eafcd90501ac3f55f021152256f10987902296b17bc9836ee1304c89ca6ea7f6cb4f6927cb844f7032375a2486dd679de04a5a5478442c692cfb9300fd3eb1784aae310b6294be54397dae41170e51ef07bb95fa342de9b80e593fcd7b414265f1531cddae3da003d7a5060f56984ef4af37f3afecb8bdfea9c577ab47ce867f851a518f7bcf35faf01e357ad05c7883ca8cdce50ed4776fd2737167a9f68acfccf325851"]}, @NL80211_ATTR_HIDDEN_SSID={0x8, 0x7e, 0x10001}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xe}, @NL80211_ATTR_HE_BSS_COLOR={0x8, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x76}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x6}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x5e1, 0x75, 0x0, 0x1, [@generic="d24500e8c94363fffa472b8985b352cfa6ea0dc5af7f2910d4a5df286040d068437a9e9d5ed8ae80dd3ccf3186289ecb47aa5b384f156fcb613badc9fe7efd193572614c015269f1c8afe7cd4eb4f2d16060bfc0f0c6bca6a1711885ae97ba8d49383fec754f029beb3b4d8483ac5e689b", @nested={0x23d, 0x9f, 0x0, 0x1, [@generic="78cdaa18d2d76a31b51c29679f51f2ee75", @generic="500bcd057edf4abb57d94bd26b82c398756026376f4ed9447227fa4d1e201e87443e206409c358de8ef404c708f979801c05ee1be474b4f238ed0c3edf67e116a0c216d55c80b853273f1d33bd54d23644882f1f8f3ee051267cd0e47ccd21ec9a3727f47518b0e0f38659d8855231cfe717f19b924f22ea03e60cfd9fc4633397a9518f5ab23df88c28ad72cd4ea8e4f87261ffffc5786c74ce6f1f4f85e1ad29667fce774671703d09f1e3bc06584835bf", @nested={0x4, 0xb3}, @typed={0x5, 0x88, 0x0, 0x0, @str='\x00'}, @generic="9b0a32dd06f351e6421924f71e50e71dd3fd1f819cb786e086f26bd824d98f99964b1b8be28f5414f01e509c72c575bc8b7bf7152f8f70a11fc821f104463b725b298cfc2e0950c509a154ed03c5afc4b16f2768dff9a2edca3f070a53461312d1c9042e3e6d8906a8a19e", @generic="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"]}, @nested={0x26b, 0x2a, 0x0, 0x1, [@nested={0x4, 0xb}, @typed={0xc, 0x2c, 0x0, 0x0, @u64}, @nested={0x4, 0xa2}, @nested={0x4, 0x129}, @generic="00ef8257fb55b77804bb354bfc558bfd91c056db8eae3c040ef043dc4dadbe2771e02e21db86977e9cdd6aa61dbb331293f7a39f7bd654777b23788a885a119701171ec271727a3ea10aab9be5a1aa1451d809638556d8915a715616f3d1742b1c64694636516a764a9d4ef67c08a94fd8e64a0afe8ec854be2f03eb048db654a70e", @generic="20c4e4d918aeab8ec661fcf1a761dc9c3ab92a9fd4d2806e4c92a7c9fdfc9432a273edb09165ccf27eb71dbb63b3a605f8f07015d2f10a5c1944536cdb25f61c72f7543fc21b8095f0e865464b44f97d593d081572eec4958e60b917d19ccde778cb15212faf61c7b836ee3d2f37a15604d5f30a8493bd4a", @generic="a259149fb8aa2842104912c364eec44e9513c14b5b2a9424020a64d7ea39458ad7b479da8e67d19ae8988d0de4fe77ab29a47e23ba8b761c1bb3f040763604c4d7a1755473890b648c8a2ea420e260b4fc38f4ec34ab55d16a29af2297ee2fa26233ed37838576adf0c20a109d2d36177ad55ed93df2d771847003b6034f7e6c35238fea1aeedacb3d09d80cd620bfe9f59c5e8f907f9ada1a5c4d6f611cbf618002fbe8ce17a38fee67a5b9f2b35cf8704bd01a66fe9a82e1f4d175e919a92b9977b95c76e75520753b5e134ce152330c977397909acc428ca3df71a487f1ac0a1c8f367de8fa8e63ccc28cac", @typed={0x14, 0x3f, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x24}}, @typed={0x51, 0x5, 0x0, 0x0, @binary="cf533f9b5605fa556209d79e722a86f0a577fc43758fa6d4eaf123a84f56c6dedb5a9b29a5dc7613185f2a813e533f8c003486a16e86c9a54635a638a94ed19f2998280631b79cbcf666ac10e7"}]}, @typed={0x14, 0xf4, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}}, @nested={0xa9, 0xe5, 0x0, 0x1, [@nested={0x4, 0xb}, @typed={0x8, 0x122, 0x0, 0x0, @uid=0xffffffffffffffff}, @typed={0xc, 0xbc, 0x0, 0x0, @u64=0x3be}, @generic="3ea6a8fe01447d998b67de795cda91076cd075e52030eb4e7e92688112e481b7ea3e3b1350782763a10236fa421648ecb7547fa65a3b4e6d380583e3536bf92c7036129963354c31d83e8b72cd9557332c08ce91f5fb267235ad541a90b980074a7a44de93950618cf29a13c2f65917377f2aaa1ccf21f081b6f55ebc3413df2e8", @nested={0x4, 0xa1}, @typed={0x8, 0x14d, 0x0, 0x0, @fd=r0}]}]}, @NL80211_ATTR_HE_BSS_COLOR={0x18, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x22}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0xd}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}]}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x700}, 0x1, 0x0, 0x0, 0x48884}, 0x0) write$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f00000016c0)="b343c79db4f9f400937a57dc296594e78f2140ae944428c0e806b55499c10b551ac6c17e594ebab3cffa4342f95523e7ef9efdff9ea5a2ce9ca5c409791c2885fe8460ec2b96a0a5d86c522f9902a7aab08af76703e54e54c743", 0x5a) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000001740), r0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001780)={'netpci0\x00'}) mmap$auto(0x40000000000, 0x8, 0xaa4, 0xd41f, r5, 0x6) fcntl$auto_F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x5) r8 = socket(0x8, 0x3, 0xb2) r9 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000001800), r6) sendmsg$auto_ILA_CMD_ADD(r8, &(0x7f00000018c0)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x8080}, 0xc, &(0x7f0000001880)={&(0x7f0000001840)={0x20, r9, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0xfffffffffffffff9}]}, 0x20}, 0x1, 0x0, 0x0, 0x48088}, 0x24040000) write$auto(r5, &(0x7f0000001900)='\x00', 0x8) socketpair$auto(0x152e, 0x4, 0x6, &(0x7f0000001940)=0x3ff) setsockopt$auto_SO_RXQ_OVFL(r5, 0x4, 0x28, &(0x7f0000001980)='\x00', 0x455) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000001a00), r8) sendmsg$auto_SMC_PNETID_FLUSH(r10, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x3c, r11, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_NAME={0xc, 0x1, '*-\xee-{}^^'}, @SMC_PNETID_ETHNAME={0xc, 0x2, '-/,}\xc8-[\x00'}, @SMC_PNETID_ETHNAME={0x5, 0x2, '\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000004) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000001b00)='/dev/swradio10\x00', 0x200500, 0x0) 15.375349587s ago: executing program 4 (id=4886): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/stat_refresh\x00', 0x101382, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xf15a}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) open(0x0, 0x22240, 0x154) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb5f0, 0x7352, 0x39, 0x65f, 0x8, 0x7, 0x3, 0x2, 0x7, 0x7, 0x0, 0x4, 0xb4, 0x3, 0x9, 0x10003, 0x80, 0x8, 0x0, 0x7, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0xc, 0x200000000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}, 0x1fe, 0x5) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_DISCONNECT(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x2004c890) mremap$auto(0x6, 0x6, 0x2, 0x3, 0xffffffffffffffab) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/acpi/wakeup\x00', 0x48041, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000001e00), 0x8000, 0x0) read$auto_vhost_vsock_fops_vsock(r2, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) socket(0xa, 0x3, 0x3a) setsockopt$auto_SO_DETACH_FILTER(r3, 0xe2, 0x1b, &(0x7f0000000500)='\x00', 0x6) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, 0x0, 0x4000050) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/cards\x00', 0x2, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f00000000c0)=""/147, 0x93) bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_1={0x3, 0xca96, @next_key=0xfffffffffffffffb, 0x6}, 0x1) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r5, 0xc0606610, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) 15.093266387s ago: executing program 4 (id=4887): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x30, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="00009e00"]}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x2, 0xffffffff) 11.545890276s ago: executing program 35 (id=4866): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8001) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) semctl$auto_IPC_INFO(0x3, 0x3, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x0, 0xeb1, 0xfffffffffffffffa, 0x7fff) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x250800, 0x0) r1 = socket(0x23, 0x80805, 0x0) prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) futex_waitv$auto(&(0x7f0000000000)={0xb, 0x7ffffffff000, 0x82}, 0x1, 0x0, 0x0, 0x623d) listen$auto(r1, 0x4) poll$auto(&(0x7f0000000000)={r1, 0x1963, 0x81}, 0x5, 0x10001) r3 = socket(0x25, 0x1, 0x2) setsockopt$auto(r3, 0x119, 0x80, 0xfffffffffffffffd, 0x10004) setsockopt$auto(r2, 0x113, 0x3, 0x0, 0x79ad226b) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/bus/netdevsim/new_device\x00', 0x149b01, 0x0) write$auto(r0, &(0x7f0000000000)='/sys/bus/netdevsim/new_device\x00', 0x792fe55c) writev$auto(r4, &(0x7f0000000200)={0x0, 0x9}, 0x7) r5 = socket(0xa, 0x1, 0x84) ioperm$auto(0x7, 0x6, 0x80) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = socket(0x2a, 0x2, 0x6) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r6) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r5, &(0x7f0000000c00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000300)={0x894, r7, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0x7}, @NL80211_ATTR_IE_PROBE_RESP={0x5c4, 0x7f, "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"}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_PMKID={0xb9, 0x55, "48272d532d03577226ba08501c8598aa7acc668b6ea32a374f25f7891e93cca387317050081d8d56f3a24981db9e2fb25281cf9be8ae997d81b8aec63eb0feecd1ad19725d78758950146c17727d5edffe9b498ba11e998e98e858371a48bceac3d3172c4c013c2ad14855da80c1aebe32eb2eef2b48d0277a8245f1ecc688898776956b3e248c43b471219ff379f7e6b2c12cdfd2a97164dba8096015e072857aa1d7b0ea047e72ff0be202bc454516beb7c27b2b"}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xfff}, @NL80211_ATTR_COLOR_CHANGE_ELEMS={0x1e0, 0x131, 0x0, 0x1, [@NL80211_ATTR_CSA_IES={0x1d1, 0xb9, 0x0, 0x1, [@generic="db673af93bf2ece6b1036150102c8156018ceb8306471d01627af5cc2ca5dd94394fabab33c7e0b524a38b81725eb289b61e2a0c45f92983263b43022f1eff2927f33e75d4f3e50bc44c736802efa07a9165fa83bae35b774433cdd26cbdf8e9e80940728cdc565d3eb403ef50309a3a4d63037275d64f63a4f41e0568cc7ea4f2659613658747dfc2139cf63150c58dc0c95fbcf038ea1aa2a38d8e7a037e238cd94086fbbffe2b9428c3e93d84176834eab65fba1f2f7c62e7a25ca04bc49107b614d41240fcec4df551f88e858e4dcb4a6dd9f1d9633740f16ab062", @typed={0x4, 0x12}, @nested={0x94, 0x8e, 0x0, 0x1, [@generic="04e841be1d5c3758bf7908da9ac5747e30fd345d92bcb64051bcd4b57e84bf0b6590097510a10aa05c97f283aa05311236083123cac3102a7f877e171e2d88fbf600e5fa394fa337cd66b31170544108c756c01ad029b0e5f957eaf6c2ab44c57209875ff27bcbe47eac1ebe5d8a29ece4dafcade5e1fa2647bb7bd7ed75e0f3f2cd5ca2bb25eaf572014f9d5994cc09"]}, @nested={0x4, 0x12f}, @typed={0x8, 0x114, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x73, 0x0, 0x0, @fd=r5}, @typed={0x8, 0xf9, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x43}}, @generic="cdf4c5d3fe11a906bf52ca6d17d6a3b9e2bdea37d1d7ff80cb928949f12cc3a488e1f6e4f4da238888d7d1f3a7f500180f2edb4036005c2e3ca1d8d5"]}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5, 0xe4, 0x3}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x894}, 0x1, 0x0, 0x0, 0x20000000}, 0x24044014) bind$auto(r6, &(0x7f0000000200)=@l2={0x1f, 0xa2d0, @none, 0x1, 0x2}, 0x4) sendto$auto(r6, &(0x7f0000000180)="eb43d1a7c50c95d59e8bdd617e674feac5c91f21d780f51889b790e7358ca55a0f", 0x99, 0x0, &(0x7f0000000240)=@in={0x2, 0x4e22, @loopback}, 0x1000) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) lsm_get_self_attr$auto(0x65, 0x0, &(0x7f0000002440)=0x203, 0x1) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) 0s ago: executing program 36 (id=4887): close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x30, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="00009e00"]}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xf, 0x2, 0xffffffff) kernel console output (not intermixed with test programs): 96175][T25292] veth1_vlan (unregistering): left allmulticast mode [ 1562.009970][T25294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4559'. [ 1562.041072][T25296] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1562.379740][T25299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4561'. [ 1562.555755][T25299] veth1_vlan (unregistering): left allmulticast mode [ 1562.867969][T25307] netlink: 'syz.3.4563': attribute type 2 has an invalid length. [ 1562.943520][T25307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4563'. [ 1563.383238][T25315] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4565'. [ 1563.868388][T25327] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4568'. [ 1564.043785][T25330] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4570'. [ 1564.728374][T25347] netlink: 'syz.4.4574': attribute type 2 has an invalid length. [ 1564.809579][T25347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4574'. [ 1565.190146][T25358] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4577'. [ 1565.490341][ T29] audit: type=1800 audit(1843104532.540:260): pid=25364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4579" name="version" dev="configfs" ino=114472 res=0 errno=0 [ 1565.704403][T25368] FAULT_INJECTION: forcing a failure. [ 1565.704403][T25368] name failslab, interval 1, probability 0, space 0, times 0 [ 1565.754269][T25369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4581'. [ 1565.794767][T25368] CPU: 0 UID: 0 PID: 25368 Comm: syz.5.4580 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1565.794811][T25368] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1565.794821][T25368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1565.794838][T25368] Call Trace: [ 1565.794847][T25368] [ 1565.794857][T25368] dump_stack_lvl+0x100/0x190 [ 1565.794907][T25368] should_fail_ex.cold+0x5/0xa [ 1565.794939][T25368] should_failslab+0xc2/0x120 [ 1565.794971][T25368] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1565.795018][T25368] ? __kernfs_new_node+0xd2/0x9f0 [ 1565.795053][T25368] __kernfs_new_node+0xd2/0x9f0 [ 1565.795086][T25368] ? __pfx___kernfs_new_node+0x10/0x10 [ 1565.795122][T25368] ? find_held_lock+0x2b/0x80 [ 1565.795153][T25368] ? kernfs_root+0xee/0x2a0 [ 1565.795180][T25368] ? kernfs_root+0xee/0x2a0 [ 1565.795215][T25368] kernfs_new_node+0x11b/0x1a0 [ 1565.795252][T25368] __kernfs_create_file+0x53/0x350 [ 1565.795296][T25368] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1565.795329][T25368] sysfs_merge_group+0x194/0x340 [ 1565.795360][T25368] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1565.795390][T25368] ? bus_add_device+0x368/0x6b0 [ 1565.795429][T25368] ? __pfx_bus_add_device+0x10/0x10 [ 1565.795463][T25368] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1565.795499][T25368] dpm_sysfs_add+0x237/0x280 [ 1565.795529][T25368] device_add+0x9ef/0x1950 [ 1565.795559][T25368] ? __pfx_device_add+0x10/0x10 [ 1565.795586][T25368] ? lockdep_init_map_type+0x5c/0x250 [ 1565.795629][T25368] ? __init_waitqueue_head+0xca/0x150 [ 1565.795665][T25368] rfkill_register+0x1ad/0xb30 [ 1565.795699][T25368] nfc_register_device+0x11f/0x3e0 [ 1565.795738][T25368] nci_register_device+0x7f1/0xb80 [ 1565.795769][T25368] ? __pfx_nci_register_device+0x10/0x10 [ 1565.795802][T25368] ? lockdep_init_map_type+0x5c/0x250 [ 1565.795850][T25368] virtual_ncidev_open+0x141/0x220 [ 1565.795884][T25368] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1565.795911][T25368] misc_open+0x26d/0x450 [ 1565.795938][T25368] ? __pfx_misc_open+0x10/0x10 [ 1565.795964][T25368] chrdev_open+0x234/0x6a0 [ 1565.796000][T25368] ? __pfx_apparmor_file_open+0x10/0x10 [ 1565.796030][T25368] ? __pfx_chrdev_open+0x10/0x10 [ 1565.796065][T25368] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1565.796106][T25368] do_dentry_open+0x6ab/0x14d0 [ 1565.796138][T25368] ? __pfx_chrdev_open+0x10/0x10 [ 1565.796177][T25368] vfs_open+0x82/0x3f0 [ 1565.796223][T25368] path_openat+0x208c/0x31a0 [ 1565.796266][T25368] ? __pfx_path_openat+0x10/0x10 [ 1565.796310][T25368] do_file_open+0x20e/0x430 [ 1565.796352][T25368] ? __pfx_do_file_open+0x10/0x10 [ 1565.796410][T25368] ? alloc_fd+0x476/0x790 [ 1565.796444][T25368] ? do_getname+0x191/0x390 [ 1565.796486][T25368] do_sys_openat2+0x10d/0x1e0 [ 1565.796526][T25368] ? __pfx_do_sys_openat2+0x10/0x10 [ 1565.796570][T25368] ? __fget_files+0x21f/0x3d0 [ 1565.796606][T25368] __x64_sys_openat+0x12d/0x210 [ 1565.796648][T25368] ? __pfx___x64_sys_openat+0x10/0x10 [ 1565.796694][T25368] ? rcu_is_watching+0x12/0xc0 [ 1565.796727][T25368] do_syscall_64+0x115/0x840 [ 1565.796764][T25368] ? clear_bhb_loop+0x40/0x90 [ 1565.796796][T25368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.796822][T25368] RIP: 0033:0x7f145279ce59 [ 1565.796843][T25368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1565.796868][T25368] RSP: 002b:00007f1453717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1565.796893][T25368] RAX: ffffffffffffffda RBX: 00007f1452a15fa0 RCX: 00007f145279ce59 [ 1565.796910][T25368] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1565.796927][T25368] RBP: 00007f1452832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1565.796943][T25368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1565.796959][T25368] R13: 00007f1452a16038 R14: 00007f1452a15fa0 R15: 00007fff45b9d228 [ 1565.796992][T25368] [ 1567.260647][T25383] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 4000000200000 [ 1567.964876][T25387] __nla_validate_parse: 1 callbacks suppressed [ 1567.964897][T25387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4584'. [ 1568.444682][T25395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4587'. [ 1568.805720][T25405] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4591'. [ 1569.048101][T25408] FAULT_INJECTION: forcing a failure. [ 1569.048101][T25408] name failslab, interval 1, probability 0, space 0, times 0 [ 1569.184870][T25408] CPU: 0 UID: 0 PID: 25408 Comm: syz.5.4592 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1569.184915][T25408] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1569.184925][T25408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1569.184944][T25408] Call Trace: [ 1569.184952][T25408] [ 1569.184962][T25408] dump_stack_lvl+0x100/0x190 [ 1569.185012][T25408] should_fail_ex.cold+0x5/0xa [ 1569.185043][T25408] ? kobject_get_path+0xcf/0x2c0 [ 1569.185184][T25408] should_failslab+0xc2/0x120 [ 1569.185216][T25408] __kmalloc_noprof+0xe0/0x850 [ 1569.185264][T25408] kobject_get_path+0xcf/0x2c0 [ 1569.185311][T25408] kobject_uevent_env+0x287/0x18b0 [ 1569.185344][T25408] ? bus_to_subsys+0x114/0x150 [ 1569.185380][T25408] device_add+0x116e/0x1950 [ 1569.185411][T25408] ? __pfx_device_add+0x10/0x10 [ 1569.185438][T25408] ? lockdep_init_map_type+0x5c/0x250 [ 1569.185482][T25408] ? __init_waitqueue_head+0xca/0x150 [ 1569.185518][T25408] rfkill_register+0x1ad/0xb30 [ 1569.185551][T25408] nfc_register_device+0x11f/0x3e0 [ 1569.185590][T25408] nci_register_device+0x7f1/0xb80 [ 1569.185620][T25408] ? __pfx_nci_register_device+0x10/0x10 [ 1569.185652][T25408] ? lockdep_init_map_type+0x5c/0x250 [ 1569.185700][T25408] virtual_ncidev_open+0x141/0x220 [ 1569.185728][T25408] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1569.185756][T25408] misc_open+0x26d/0x450 [ 1569.185782][T25408] ? __pfx_misc_open+0x10/0x10 [ 1569.185814][T25408] chrdev_open+0x234/0x6a0 [ 1569.185846][T25408] ? __pfx_apparmor_file_open+0x10/0x10 [ 1569.185876][T25408] ? __pfx_chrdev_open+0x10/0x10 [ 1569.185911][T25408] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1569.185952][T25408] do_dentry_open+0x6ab/0x14d0 [ 1569.185984][T25408] ? __pfx_chrdev_open+0x10/0x10 [ 1569.186023][T25408] vfs_open+0x82/0x3f0 [ 1569.186065][T25408] path_openat+0x208c/0x31a0 [ 1569.186108][T25408] ? __pfx_path_openat+0x10/0x10 [ 1569.186160][T25408] do_file_open+0x20e/0x430 [ 1569.186196][T25408] ? __pfx_do_file_open+0x10/0x10 [ 1569.186251][T25408] ? alloc_fd+0x476/0x790 [ 1569.186286][T25408] ? do_getname+0x191/0x390 [ 1569.186328][T25408] do_sys_openat2+0x10d/0x1e0 [ 1569.186369][T25408] ? __pfx_do_sys_openat2+0x10/0x10 [ 1569.186412][T25408] ? __fget_files+0x21f/0x3d0 [ 1569.186448][T25408] __x64_sys_openat+0x12d/0x210 [ 1569.186490][T25408] ? __pfx___x64_sys_openat+0x10/0x10 [ 1569.186537][T25408] ? rcu_is_watching+0x12/0xc0 [ 1569.186570][T25408] do_syscall_64+0x115/0x840 [ 1569.186606][T25408] ? clear_bhb_loop+0x40/0x90 [ 1569.186638][T25408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1569.186664][T25408] RIP: 0033:0x7f145279ce59 [ 1569.186685][T25408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1569.186711][T25408] RSP: 002b:00007f1453717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1569.186735][T25408] RAX: ffffffffffffffda RBX: 00007f1452a15fa0 RCX: 00007f145279ce59 [ 1569.186752][T25408] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1569.186769][T25408] RBP: 00007f1452832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1569.186785][T25408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1569.186801][T25408] R13: 00007f1452a16038 R14: 00007f1452a15fa0 R15: 00007fff45b9d228 [ 1569.186841][T25408] [ 1571.974310][T25453] deleting an unspecified loop device is not supported. [ 1572.014749][T25449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4599'. [ 1572.386657][T25456] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 1572.759974][T25468] futex_wake_op: syz.5.4605 tries to shift op by -2048; fix this program [ 1572.795630][T25471] vivid-007: ================= START STATUS ================= [ 1572.828779][T25468] 0x000000000001-0x000000020000 : "" [ 1572.843190][T25471] vivid-007: Generate PTS: true [ 1572.872398][T25471] vivid-007: Generate SCR: true [ 1572.900575][T25468] ftl_cs: FTL header corrupt! [ 1572.920288][T25471] tpg source WxH: 320x240 (Y'CbCr) [ 1572.957364][T25471] tpg field: 1 [ 1572.989612][T25471] tpg crop: (0,0)/320x240 [ 1573.038260][T25471] tpg compose: (0,0)/320x240 [ 1573.102277][T25471] tpg colorspace: 8 [ 1573.154293][T25471] tpg transfer function: 0/0 [ 1573.224357][T25471] tpg Y'CbCr encoding: 0/0 [ 1573.288757][T25471] tpg quantization: 0/0 [ 1573.353836][T25471] tpg RGB range: 0/2 [ 1573.406456][T25471] vivid-007: ================== END STATUS ================== [ 1573.550567][T25456] Process accounting paused [ 1573.709084][T25485] FAULT_INJECTION: forcing a failure. [ 1573.709084][T25485] name failslab, interval 1, probability 0, space 0, times 0 [ 1573.801030][T25485] CPU: 0 UID: 0 PID: 25485 Comm: syz.4.4608 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1573.801073][T25485] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1573.801083][T25485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1573.801100][T25485] Call Trace: [ 1573.801109][T25485] [ 1573.801118][T25485] dump_stack_lvl+0x100/0x190 [ 1573.801169][T25485] should_fail_ex.cold+0x5/0xa [ 1573.801203][T25485] ? constrain_params_by_rules+0x175/0xcc0 [ 1573.801248][T25485] should_failslab+0xc2/0x120 [ 1573.801279][T25485] __kmalloc_noprof+0xe0/0x850 [ 1573.801320][T25485] ? unwind_get_return_address+0x59/0xa0 [ 1573.801360][T25485] constrain_params_by_rules+0x175/0xcc0 [ 1573.801409][T25485] ? stack_trace_save+0x8e/0xc0 [ 1573.801452][T25485] ? __pfx_constrain_params_by_rules+0x10/0x10 [ 1573.801493][T25485] ? clockevents_program_event+0x23e/0x820 [ 1573.801528][T25485] ? __kasan_kmalloc+0xaa/0xb0 [ 1573.801552][T25485] ? snd_pcm_oss_change_params_locked+0x247/0x39f0 [ 1573.801591][T25485] ? snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1573.801626][T25485] ? snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 1573.801671][T25485] ? rcu_is_watching+0x12/0xc0 [ 1573.801700][T25485] ? snd_interval_refine+0x2d0/0x580 [ 1573.801732][T25485] snd_pcm_hw_refine+0x7e7/0xad0 [ 1573.801778][T25485] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 1573.801828][T25485] ? __asan_memset+0x23/0x50 [ 1573.801868][T25485] ? _snd_pcm_hw_param_min+0x1ea/0x670 [ 1573.801907][T25485] snd_pcm_oss_change_params_locked+0x2594/0x39f0 [ 1573.801956][T25485] ? trace_contention_end+0x122/0x170 [ 1573.801982][T25485] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1573.802020][T25485] ? __pfx___mutex_lock+0x10/0x10 [ 1573.802058][T25485] ? __mutex_lock+0x26d/0x1b10 [ 1573.802095][T25485] ? find_held_lock+0x2b/0x80 [ 1573.802126][T25485] ? snd_pcm_oss_poll+0x3ba/0xb00 [ 1573.802161][T25485] ? snd_pcm_oss_poll+0x3ba/0xb00 [ 1573.802213][T25485] snd_pcm_oss_make_ready+0xeb/0x1b0 [ 1573.802253][T25485] snd_pcm_oss_set_trigger.isra.0+0x331/0x6c0 [ 1573.802297][T25485] snd_pcm_oss_poll+0x417/0xb00 [ 1573.802332][T25485] ? __pfx___pollwait+0x10/0x10 [ 1573.802362][T25485] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1573.802397][T25485] ? __fget_files+0x21f/0x3d0 [ 1573.802438][T25485] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 1573.802476][T25485] do_select+0xd54/0x1850 [ 1573.802533][T25485] ? __pfx_do_select+0x10/0x10 [ 1573.802563][T25485] ? hrtimer_start_range_ns+0x860/0x1a50 [ 1573.802596][T25485] ? __pfx___pollwait+0x10/0x10 [ 1573.802628][T25485] ? __pfx_pollwake+0x10/0x10 [ 1573.802658][T25485] ? __pfx_pollwake+0x10/0x10 [ 1573.802724][T25485] ? find_held_lock+0x2b/0x80 [ 1573.802755][T25485] ? __might_fault+0xc5/0x140 [ 1573.802794][T25485] ? __might_fault+0xc5/0x140 [ 1573.802844][T25485] ? core_sys_select+0x55b/0xbb0 [ 1573.802872][T25485] core_sys_select+0x55b/0xbb0 [ 1573.802908][T25485] ? __pfx_core_sys_select+0x10/0x10 [ 1573.802968][T25485] ? do_futex+0x192/0x350 [ 1573.802995][T25485] ? __pfx_do_futex+0x10/0x10 [ 1573.803026][T25485] kern_select+0x1d0/0x280 [ 1573.803058][T25485] ? __pfx_kern_select+0x10/0x10 [ 1573.803088][T25485] ? xfd_validate_state+0x129/0x190 [ 1573.803121][T25485] __x64_sys_select+0xbd/0x160 [ 1573.803150][T25485] ? do_syscall_64+0x90/0x840 [ 1573.803185][T25485] ? lockdep_hardirqs_on+0x78/0x100 [ 1573.803221][T25485] do_syscall_64+0x115/0x840 [ 1573.803257][T25485] ? clear_bhb_loop+0x40/0x90 [ 1573.803288][T25485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.803314][T25485] RIP: 0033:0x7f9c5fb9ce59 [ 1573.803335][T25485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1573.803364][T25485] RSP: 002b:00007f9c60a02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 1573.803389][T25485] RAX: ffffffffffffffda RBX: 00007f9c5fe16090 RCX: 00007f9c5fb9ce59 [ 1573.803407][T25485] RDX: 0000200000000080 RSI: 0000000000000000 RDI: 0000000000000007 [ 1573.803423][T25485] RBP: 00007f9c5fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1573.803444][T25485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1573.803483][T25485] R13: 00007f9c5fe16128 R14: 00007f9c5fe16090 R15: 00007ffc8272ef08 [ 1573.803516][T25485] [ 1576.874405][T25507] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4612'. [ 1577.156652][T25516] netlink: 'syz.3.4615': attribute type 2 has an invalid length. [ 1577.202107][T25516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4615'. [ 1577.374156][T25516] Process accounting paused [ 1579.885382][T25541] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1580.370408][T25575] FAULT_INJECTION: forcing a failure. [ 1580.370408][T25575] name failslab, interval 1, probability 0, space 0, times 0 [ 1580.434524][T25575] CPU: 0 UID: 0 PID: 25575 Comm: syz.4.4630 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1580.434567][T25575] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1580.434578][T25575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1580.434594][T25575] Call Trace: [ 1580.434604][T25575] [ 1580.434613][T25575] dump_stack_lvl+0x100/0x190 [ 1580.434663][T25575] should_fail_ex.cold+0x5/0xa [ 1580.434696][T25575] should_failslab+0xc2/0x120 [ 1580.434737][T25575] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1580.434779][T25575] ? __kernfs_new_node+0xd2/0x9f0 [ 1580.434813][T25575] __kernfs_new_node+0xd2/0x9f0 [ 1580.434843][T25575] ? wake_up_q+0xae/0x130 [ 1580.434874][T25575] ? __pfx___kernfs_new_node+0x10/0x10 [ 1580.434911][T25575] ? find_held_lock+0x2b/0x80 [ 1580.434942][T25575] ? kernfs_root+0xee/0x2a0 [ 1580.434969][T25575] ? kernfs_root+0xee/0x2a0 [ 1580.435004][T25575] kernfs_new_node+0x11b/0x1a0 [ 1580.435042][T25575] __kernfs_create_file+0x53/0x350 [ 1580.435085][T25575] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1580.435119][T25575] sysfs_merge_group+0x194/0x340 [ 1580.435150][T25575] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1580.435183][T25575] ? bus_add_device+0x368/0x6b0 [ 1580.435222][T25575] ? __pfx_bus_add_device+0x10/0x10 [ 1580.435256][T25575] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1580.435293][T25575] dpm_sysfs_add+0x237/0x280 [ 1580.435322][T25575] device_add+0x9ef/0x1950 [ 1580.435353][T25575] ? __pfx_device_add+0x10/0x10 [ 1580.435380][T25575] ? lockdep_init_map_type+0x5c/0x250 [ 1580.435422][T25575] ? __init_waitqueue_head+0xca/0x150 [ 1580.435459][T25575] rfkill_register+0x1ad/0xb30 [ 1580.435492][T25575] nfc_register_device+0x11f/0x3e0 [ 1580.435531][T25575] nci_register_device+0x7f1/0xb80 [ 1580.435561][T25575] ? __pfx_nci_register_device+0x10/0x10 [ 1580.435593][T25575] ? lockdep_init_map_type+0x5c/0x250 [ 1580.435641][T25575] virtual_ncidev_open+0x141/0x220 [ 1580.435670][T25575] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1580.435697][T25575] misc_open+0x26d/0x450 [ 1580.435729][T25575] ? __pfx_misc_open+0x10/0x10 [ 1580.435755][T25575] chrdev_open+0x234/0x6a0 [ 1580.435787][T25575] ? __pfx_apparmor_file_open+0x10/0x10 [ 1580.435817][T25575] ? __pfx_chrdev_open+0x10/0x10 [ 1580.435852][T25575] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1580.435893][T25575] do_dentry_open+0x6ab/0x14d0 [ 1580.435925][T25575] ? __pfx_chrdev_open+0x10/0x10 [ 1580.435964][T25575] vfs_open+0x82/0x3f0 [ 1580.436006][T25575] path_openat+0x208c/0x31a0 [ 1580.436050][T25575] ? __pfx_path_openat+0x10/0x10 [ 1580.436094][T25575] do_file_open+0x20e/0x430 [ 1580.436129][T25575] ? __pfx_do_file_open+0x10/0x10 [ 1580.436183][T25575] ? alloc_fd+0x476/0x790 [ 1580.436218][T25575] ? do_getname+0x191/0x390 [ 1580.436265][T25575] do_sys_openat2+0x10d/0x1e0 [ 1580.436306][T25575] ? __pfx_do_sys_openat2+0x10/0x10 [ 1580.436348][T25575] ? __fget_files+0x21f/0x3d0 [ 1580.436385][T25575] __x64_sys_openat+0x12d/0x210 [ 1580.436427][T25575] ? __pfx___x64_sys_openat+0x10/0x10 [ 1580.436475][T25575] ? rcu_is_watching+0x12/0xc0 [ 1580.436508][T25575] do_syscall_64+0x115/0x840 [ 1580.436545][T25575] ? clear_bhb_loop+0x40/0x90 [ 1580.436576][T25575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.436603][T25575] RIP: 0033:0x7f9c5fb9ce59 [ 1580.436623][T25575] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1580.436648][T25575] RSP: 002b:00007f9c60a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1580.436673][T25575] RAX: ffffffffffffffda RBX: 00007f9c5fe15fa0 RCX: 00007f9c5fb9ce59 [ 1580.436690][T25575] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1580.436707][T25575] RBP: 00007f9c5fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1580.436730][T25575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1580.436746][T25575] R13: 00007f9c5fe16038 R14: 00007f9c5fe15fa0 R15: 00007ffc8272ef08 [ 1580.436779][T25575] [ 1582.315875][T25587] bond0: invalid ARP target specified [ 1582.356925][ T29] audit: type=1800 audit(1843104549.400:261): pid=25591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4633" name="version" dev="configfs" ino=115959 res=0 errno=0 [ 1583.256672][T25614] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4638'. [ 1584.034835][T25627] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1584.192028][T25627] kexec: Could not allocate control_code_buffer [ 1585.197759][T25620] Process accounting paused [ 1586.116458][T25665] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4650'. [ 1586.558804][T25673] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4659'. [ 1586.601315][T25676] nvme_fabrics: unknown parameter or missing value '@' in ctrl creation request [ 1587.608843][T25675] Process accounting paused [ 1589.264883][T25720] ubi0: attaching mtd0 [ 1589.311269][T25720] ubi0: scanning is finished [ 1589.342208][T25720] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1589.895090][T25720] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1590.017443][T25731] snd_virmidi snd_virmidi.0: control 53842:9:2:y:0 is already present [ 1590.425978][ T29] audit: type=1800 audit(1843104557.470:262): pid=25736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4662" name="version" dev="configfs" ino=116637 res=0 errno=0 [ 1591.675755][T25748] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1593.095387][T25772] bond0: invalid ARP target specified [ 1595.501762][T25800] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1595.765750][T25805] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1596.332726][T25813] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4681'. [ 1598.104913][ T29] audit: type=1800 audit(1843104565.160:263): pid=25838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4688" name="version" dev="configfs" ino=117298 res=0 errno=0 [ 1598.642374][T25846] netlink: 'syz.3.4691': attribute type 2 has an invalid length. [ 1598.710394][T25846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4691'. [ 1599.144777][T25854] FAULT_INJECTION: forcing a failure. [ 1599.144777][T25854] name failslab, interval 1, probability 0, space 0, times 0 [ 1599.234664][T25854] CPU: 0 UID: 0 PID: 25854 Comm: syz.3.4692 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1599.234708][T25854] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1599.234719][T25854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1599.234741][T25854] Call Trace: [ 1599.234750][T25854] [ 1599.234760][T25854] dump_stack_lvl+0x100/0x190 [ 1599.234811][T25854] should_fail_ex.cold+0x5/0xa [ 1599.234844][T25854] should_failslab+0xc2/0x120 [ 1599.234876][T25854] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1599.234918][T25854] ? __kernfs_new_node+0xd2/0x9f0 [ 1599.234953][T25854] __kernfs_new_node+0xd2/0x9f0 [ 1599.234985][T25854] ? __pfx___kernfs_new_node+0x10/0x10 [ 1599.235021][T25854] ? find_held_lock+0x2b/0x80 [ 1599.235060][T25854] ? kernfs_root+0xee/0x2a0 [ 1599.235087][T25854] ? kernfs_root+0xee/0x2a0 [ 1599.235121][T25854] kernfs_new_node+0x11b/0x1a0 [ 1599.235159][T25854] __kernfs_create_file+0x53/0x350 [ 1599.235204][T25854] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1599.235238][T25854] sysfs_merge_group+0x194/0x340 [ 1599.235269][T25854] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1599.235299][T25854] ? bus_add_device+0x368/0x6b0 [ 1599.235337][T25854] ? __pfx_bus_add_device+0x10/0x10 [ 1599.235372][T25854] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1599.235408][T25854] dpm_sysfs_add+0x237/0x280 [ 1599.235438][T25854] device_add+0x9ef/0x1950 [ 1599.235469][T25854] ? __pfx_device_add+0x10/0x10 [ 1599.235496][T25854] ? lockdep_init_map_type+0x5c/0x250 [ 1599.235539][T25854] ? __init_waitqueue_head+0xca/0x150 [ 1599.235576][T25854] rfkill_register+0x1ad/0xb30 [ 1599.235610][T25854] nfc_register_device+0x11f/0x3e0 [ 1599.235649][T25854] nci_register_device+0x7f1/0xb80 [ 1599.235680][T25854] ? __pfx_nci_register_device+0x10/0x10 [ 1599.235720][T25854] ? lockdep_init_map_type+0x5c/0x250 [ 1599.235774][T25854] virtual_ncidev_open+0x141/0x220 [ 1599.235803][T25854] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1599.235830][T25854] misc_open+0x26d/0x450 [ 1599.235856][T25854] ? __pfx_misc_open+0x10/0x10 [ 1599.235885][T25854] chrdev_open+0x234/0x6a0 [ 1599.235917][T25854] ? __pfx_apparmor_file_open+0x10/0x10 [ 1599.235947][T25854] ? __pfx_chrdev_open+0x10/0x10 [ 1599.235981][T25854] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1599.236023][T25854] do_dentry_open+0x6ab/0x14d0 [ 1599.236054][T25854] ? __pfx_chrdev_open+0x10/0x10 [ 1599.236093][T25854] vfs_open+0x82/0x3f0 [ 1599.236134][T25854] path_openat+0x208c/0x31a0 [ 1599.236177][T25854] ? __pfx_path_openat+0x10/0x10 [ 1599.236221][T25854] do_file_open+0x20e/0x430 [ 1599.236256][T25854] ? __pfx_do_file_open+0x10/0x10 [ 1599.236310][T25854] ? alloc_fd+0x476/0x790 [ 1599.236344][T25854] ? do_getname+0x191/0x390 [ 1599.236385][T25854] do_sys_openat2+0x10d/0x1e0 [ 1599.236426][T25854] ? __pfx_do_sys_openat2+0x10/0x10 [ 1599.236468][T25854] ? __fget_files+0x21f/0x3d0 [ 1599.236504][T25854] __x64_sys_openat+0x12d/0x210 [ 1599.236545][T25854] ? __pfx___x64_sys_openat+0x10/0x10 [ 1599.236592][T25854] ? rcu_is_watching+0x12/0xc0 [ 1599.236625][T25854] do_syscall_64+0x115/0x840 [ 1599.236662][T25854] ? clear_bhb_loop+0x40/0x90 [ 1599.236693][T25854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1599.236720][T25854] RIP: 0033:0x7ff35419ce59 [ 1599.236765][T25854] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1599.236790][T25854] RSP: 002b:00007ff355123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1599.236815][T25854] RAX: ffffffffffffffda RBX: 00007ff354415fa0 RCX: 00007ff35419ce59 [ 1599.236832][T25854] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1599.236849][T25854] RBP: 00007ff354232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1599.236865][T25854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1599.236881][T25854] R13: 00007ff354416038 R14: 00007ff354415fa0 R15: 00007ffe39cdea88 [ 1599.236914][T25854] [ 1600.786584][T25875] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4694'. [ 1601.290219][ T29] audit: type=1800 audit(1843104568.340:264): pid=25884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4696" name="version" dev="configfs" ino=117452 res=0 errno=0 [ 1602.059366][T25894] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4699'. [ 1602.950343][T25908] FAULT_INJECTION: forcing a failure. [ 1602.950343][T25908] name failslab, interval 1, probability 0, space 0, times 0 [ 1602.950385][T25908] CPU: 0 UID: 0 PID: 25908 Comm: syz.2.4703 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1602.950420][T25908] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1602.950430][T25908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1602.950445][T25908] Call Trace: [ 1602.950476][T25908] [ 1602.950486][T25908] dump_stack_lvl+0x100/0x190 [ 1602.950532][T25908] should_fail_ex.cold+0x5/0xa [ 1602.950562][T25908] should_failslab+0xc2/0x120 [ 1602.950592][T25908] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 1602.950637][T25908] ? __alloc_skb+0x140/0x710 [ 1602.950659][T25908] ? __alloc_skb+0x5b7/0x710 [ 1602.950685][T25908] __alloc_skb+0x140/0x710 [ 1602.950712][T25908] ? __alloc_skb+0x5b7/0x710 [ 1602.950734][T25908] ? __pfx___alloc_skb+0x10/0x10 [ 1602.950764][T25908] netlink_alloc_large_skb+0x69/0x150 [ 1602.950802][T25908] netlink_sendmsg+0x680/0xda0 [ 1602.950838][T25908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1602.950869][T25908] ? __import_iovec+0x1d2/0x640 [ 1602.950908][T25908] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1602.950938][T25908] ____sys_sendmsg+0x9e1/0xb70 [ 1602.950969][T25908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1602.951003][T25908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1602.951048][T25908] ___sys_sendmsg+0x190/0x1e0 [ 1602.951082][T25908] ? __pfx____sys_sendmsg+0x10/0x10 [ 1602.951171][T25908] __sys_sendmsg+0x170/0x220 [ 1602.951198][T25908] ? __pfx___sys_sendmsg+0x10/0x10 [ 1602.951242][T25908] ? rcu_is_watching+0x12/0xc0 [ 1602.951273][T25908] do_syscall_64+0x115/0x840 [ 1602.951313][T25908] ? clear_bhb_loop+0x40/0x90 [ 1602.951343][T25908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1602.951367][T25908] RIP: 0033:0x7f9e5a39ce59 [ 1602.951386][T25908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1602.951410][T25908] RSP: 002b:00007f9e5b24f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1602.951432][T25908] RAX: ffffffffffffffda RBX: 00007f9e5a615fa0 RCX: 00007f9e5a39ce59 [ 1602.951448][T25908] RDX: 000000002004c890 RSI: 0000200000000040 RDI: 0000000000000002 [ 1602.951464][T25908] RBP: 00007f9e5b24f090 R08: 0000000000000000 R09: 0000000000000000 [ 1602.951478][T25908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1602.951493][T25908] R13: 00007f9e5a616038 R14: 00007f9e5a615fa0 R15: 00007fff3d9d2838 [ 1602.951522][T25908] [ 1603.668804][T25917] Process accounting resumed [ 1604.013812][T25921] netlink: 'syz.2.4707': attribute type 2 has an invalid length. [ 1604.013837][T25921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4707'. [ 1604.630788][T25931] netlink: 'syz.5.4718': attribute type 2 has an invalid length. [ 1604.630814][T25931] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4718'. [ 1605.089935][T25938] FAULT_INJECTION: forcing a failure. [ 1605.089935][T25938] name failslab, interval 1, probability 0, space 0, times 0 [ 1605.090003][T25938] CPU: 0 UID: 0 PID: 25938 Comm: syz.5.4711 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1605.090041][T25938] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1605.090052][T25938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1605.090068][T25938] Call Trace: [ 1605.090076][T25938] [ 1605.090086][T25938] dump_stack_lvl+0x100/0x190 [ 1605.090134][T25938] should_fail_ex.cold+0x5/0xa [ 1605.090166][T25938] should_failslab+0xc2/0x120 [ 1605.090198][T25938] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1605.090240][T25938] ? __kernfs_new_node+0xd2/0x9f0 [ 1605.090292][T25938] __kernfs_new_node+0xd2/0x9f0 [ 1605.090324][T25938] ? __pfx___kernfs_new_node+0x10/0x10 [ 1605.090360][T25938] ? find_held_lock+0x2b/0x80 [ 1605.090393][T25938] ? kernfs_root+0xee/0x2a0 [ 1605.090419][T25938] ? kernfs_root+0xee/0x2a0 [ 1605.090454][T25938] kernfs_new_node+0x11b/0x1a0 [ 1605.090492][T25938] __kernfs_create_file+0x53/0x350 [ 1605.090534][T25938] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1605.090573][T25938] sysfs_merge_group+0x194/0x340 [ 1605.090605][T25938] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1605.090634][T25938] ? bus_add_device+0x368/0x6b0 [ 1605.090678][T25938] ? __pfx_bus_add_device+0x10/0x10 [ 1605.090712][T25938] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1605.090749][T25938] dpm_sysfs_add+0x237/0x280 [ 1605.090779][T25938] device_add+0x9ef/0x1950 [ 1605.090810][T25938] ? __pfx_device_add+0x10/0x10 [ 1605.090837][T25938] ? lockdep_init_map_type+0x5c/0x250 [ 1605.090880][T25938] ? __init_waitqueue_head+0xca/0x150 [ 1605.090916][T25938] rfkill_register+0x1ad/0xb30 [ 1605.090949][T25938] nfc_register_device+0x11f/0x3e0 [ 1605.090988][T25938] nci_register_device+0x7f1/0xb80 [ 1605.091018][T25938] ? __pfx_nci_register_device+0x10/0x10 [ 1605.091051][T25938] ? lockdep_init_map_type+0x5c/0x250 [ 1605.091098][T25938] virtual_ncidev_open+0x141/0x220 [ 1605.091126][T25938] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1605.091153][T25938] misc_open+0x26d/0x450 [ 1605.091184][T25938] ? __pfx_misc_open+0x10/0x10 [ 1605.091210][T25938] chrdev_open+0x234/0x6a0 [ 1605.091242][T25938] ? __pfx_apparmor_file_open+0x10/0x10 [ 1605.091271][T25938] ? __pfx_chrdev_open+0x10/0x10 [ 1605.091305][T25938] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1605.091347][T25938] do_dentry_open+0x6ab/0x14d0 [ 1605.091378][T25938] ? __pfx_chrdev_open+0x10/0x10 [ 1605.091418][T25938] vfs_open+0x82/0x3f0 [ 1605.091460][T25938] path_openat+0x208c/0x31a0 [ 1605.091503][T25938] ? __pfx_path_openat+0x10/0x10 [ 1605.091547][T25938] do_file_open+0x20e/0x430 [ 1605.091623][T25938] ? __pfx_do_file_open+0x10/0x10 [ 1605.091677][T25938] ? alloc_fd+0x476/0x790 [ 1605.091712][T25938] ? do_getname+0x191/0x390 [ 1605.091753][T25938] do_sys_openat2+0x10d/0x1e0 [ 1605.091794][T25938] ? __pfx_do_sys_openat2+0x10/0x10 [ 1605.091837][T25938] ? __fget_files+0x21f/0x3d0 [ 1605.091874][T25938] __x64_sys_openat+0x12d/0x210 [ 1605.091915][T25938] ? __pfx___x64_sys_openat+0x10/0x10 [ 1605.091962][T25938] ? rcu_is_watching+0x12/0xc0 [ 1605.091995][T25938] do_syscall_64+0x115/0x840 [ 1605.092032][T25938] ? clear_bhb_loop+0x40/0x90 [ 1605.092063][T25938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1605.092090][T25938] RIP: 0033:0x7f145279ce59 [ 1605.092111][T25938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1605.092138][T25938] RSP: 002b:00007f1453717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1605.092163][T25938] RAX: ffffffffffffffda RBX: 00007f1452a15fa0 RCX: 00007f145279ce59 [ 1605.092180][T25938] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1605.092197][T25938] RBP: 00007f1452832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1605.092213][T25938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1605.092230][T25938] R13: 00007f1452a16038 R14: 00007f1452a15fa0 R15: 00007fff45b9d228 [ 1605.092263][T25938] [ 1605.179267][T25940] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4712'. [ 1606.235060][T25954] FAULT_INJECTION: forcing a failure. [ 1606.235060][T25954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1606.235100][T25954] CPU: 0 UID: 0 PID: 25954 Comm: syz.2.4723 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1606.235136][T25954] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1606.235145][T25954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1606.235159][T25954] Call Trace: [ 1606.235167][T25954] [ 1606.235176][T25954] dump_stack_lvl+0x100/0x190 [ 1606.235222][T25954] should_fail_ex.cold+0x5/0xa [ 1606.235253][T25954] _copy_from_iter+0x1f4/0x1690 [ 1606.235292][T25954] ? __asan_memset+0x23/0x50 [ 1606.235330][T25954] ? __pfx__copy_from_iter+0x10/0x10 [ 1606.235364][T25954] ? __pfx___alloc_skb+0x10/0x10 [ 1606.235401][T25954] netlink_sendmsg+0x808/0xda0 [ 1606.235446][T25954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1606.235477][T25954] ? __import_iovec+0x1d2/0x640 [ 1606.235514][T25954] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1606.235543][T25954] ____sys_sendmsg+0x9e1/0xb70 [ 1606.235598][T25954] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1606.235633][T25954] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1606.235677][T25954] ___sys_sendmsg+0x190/0x1e0 [ 1606.235712][T25954] ? __pfx____sys_sendmsg+0x10/0x10 [ 1606.235778][T25954] __sys_sendmsg+0x170/0x220 [ 1606.235804][T25954] ? __pfx___sys_sendmsg+0x10/0x10 [ 1606.235840][T25954] ? rcu_is_watching+0x12/0xc0 [ 1606.235872][T25954] do_syscall_64+0x115/0x840 [ 1606.235907][T25954] ? clear_bhb_loop+0x40/0x90 [ 1606.235936][T25954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.235961][T25954] RIP: 0033:0x7f9e5a39ce59 [ 1606.235979][T25954] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.236002][T25954] RSP: 002b:00007f9e5b24f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1606.236024][T25954] RAX: ffffffffffffffda RBX: 00007f9e5a615fa0 RCX: 00007f9e5a39ce59 [ 1606.236040][T25954] RDX: 000000002004c890 RSI: 0000200000000040 RDI: 0000000000000002 [ 1606.236055][T25954] RBP: 00007f9e5b24f090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.236069][T25954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1606.236083][T25954] R13: 00007f9e5a616038 R14: 00007f9e5a615fa0 R15: 00007fff3d9d2838 [ 1606.236113][T25954] [ 1607.264493][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.264549][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.419289][T25956] Process accounting resumed [ 1609.464509][T25999] netlink: 'syz.5.4724': attribute type 33 has an invalid length. [ 1609.464536][T25999] netlink: 322 bytes leftover after parsing attributes in process `syz.5.4724'. [ 1609.625891][ T29] audit: type=1800 audit(1843104576.680:265): pid=26001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4726" name="version" dev="configfs" ino=118181 res=0 errno=0 [ 1609.730518][T26003] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1610.559086][T26010] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4728'. [ 1610.718633][T26015] hub 1-0:1.0: USB hub found [ 1610.767328][T26015] hub 1-0:1.0: 1 port detected [ 1611.198875][T26019] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1612.377909][T26038] FAULT_INJECTION: forcing a failure. [ 1612.377909][T26038] name failslab, interval 1, probability 0, space 0, times 0 [ 1612.483619][T26038] CPU: 0 UID: 0 PID: 26038 Comm: syz.2.4737 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1612.483660][T26038] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1612.483670][T26038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1612.483686][T26038] Call Trace: [ 1612.483695][T26038] [ 1612.483704][T26038] dump_stack_lvl+0x100/0x190 [ 1612.483754][T26038] should_fail_ex.cold+0x5/0xa [ 1612.483785][T26038] ? genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1612.483827][T26038] should_failslab+0xc2/0x120 [ 1612.483858][T26038] __kmalloc_noprof+0xe0/0x850 [ 1612.483912][T26038] genl_family_rcv_msg_attrs_parse.isra.0+0x100/0x2f0 [ 1612.483957][T26038] genl_family_rcv_msg_doit+0xc7/0x300 [ 1612.483996][T26038] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1612.484059][T26038] ? genl_get_cmd+0x3e7/0x760 [ 1612.484103][T26038] ? __dev_queue_xmit+0xa10/0x4950 [ 1612.484140][T26038] ? __radix_tree_lookup+0x217/0x2b0 [ 1612.484178][T26038] genl_rcv_msg+0x560/0x800 [ 1612.484218][T26038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1612.484255][T26038] ? __pfx_nbd_genl_disconnect+0x10/0x10 [ 1612.484294][T26038] netlink_rcv_skb+0x159/0x420 [ 1612.484327][T26038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1612.484364][T26038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1612.484408][T26038] ? netlink_deliver_tap+0x1ae/0xcc0 [ 1612.484443][T26038] genl_rcv+0x28/0x40 [ 1612.484475][T26038] netlink_unicast+0x585/0x850 [ 1612.484511][T26038] ? __pfx_netlink_unicast+0x10/0x10 [ 1612.484551][T26038] netlink_sendmsg+0x8b0/0xda0 [ 1612.484588][T26038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1612.484619][T26038] ? __import_iovec+0x1d2/0x640 [ 1612.484659][T26038] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1612.484690][T26038] ____sys_sendmsg+0x9e1/0xb70 [ 1612.484721][T26038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1612.484756][T26038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1612.484801][T26038] ___sys_sendmsg+0x190/0x1e0 [ 1612.484836][T26038] ? __pfx____sys_sendmsg+0x10/0x10 [ 1612.484910][T26038] __sys_sendmsg+0x170/0x220 [ 1612.484936][T26038] ? __pfx___sys_sendmsg+0x10/0x10 [ 1612.484974][T26038] ? rcu_is_watching+0x12/0xc0 [ 1612.485007][T26038] do_syscall_64+0x115/0x840 [ 1612.485040][T26038] ? clear_bhb_loop+0x40/0x90 [ 1612.485069][T26038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1612.485095][T26038] RIP: 0033:0x7f9e5a39ce59 [ 1612.485114][T26038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1612.485138][T26038] RSP: 002b:00007f9e5b24f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1612.485161][T26038] RAX: ffffffffffffffda RBX: 00007f9e5a615fa0 RCX: 00007f9e5a39ce59 [ 1612.485178][T26038] RDX: 000000002004c890 RSI: 0000200000000040 RDI: 0000000000000002 [ 1612.485194][T26038] RBP: 00007f9e5b24f090 R08: 0000000000000000 R09: 0000000000000000 [ 1612.485209][T26038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1612.485223][T26038] R13: 00007f9e5a616038 R14: 00007f9e5a615fa0 R15: 00007fff3d9d2838 [ 1612.485254][T26038] [ 1613.237280][ T29] audit: type=1800 audit(1843104579.860:266): pid=26045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4738" name="version" dev="configfs" ino=118379 res=0 errno=0 [ 1613.881549][T26050] bond0: invalid ARP target specified [ 1614.623968][T26066] netlink: 342 bytes leftover after parsing attributes in process `syz.4.4743'. [ 1615.460723][T26082] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1615.804975][T26087] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4750'. [ 1615.959879][T26060] Process accounting resumed [ 1616.507189][T26106] serio: Serial port pty37 [ 1616.918557][ T9355] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 1617.706383][T26118] Process accounting resumed [ 1617.926244][T26128] bond0: invalid ARP target specified [ 1617.956827][T26131] netlink: 334 bytes leftover after parsing attributes in process `syz.2.4761'. [ 1617.977812][T26134] FAULT_INJECTION: forcing a failure. [ 1617.977812][T26134] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1618.044342][T26134] CPU: 0 UID: 0 PID: 26134 Comm: syz.5.4762 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1618.044382][T26134] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1618.044392][T26134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1618.044413][T26134] Call Trace: [ 1618.044422][T26134] [ 1618.044432][T26134] dump_stack_lvl+0x100/0x190 [ 1618.044479][T26134] should_fail_ex.cold+0x5/0xa [ 1618.044509][T26134] _copy_from_iter+0x1f4/0x1690 [ 1618.044547][T26134] ? __asan_memset+0x23/0x50 [ 1618.044586][T26134] ? __pfx__copy_from_iter+0x10/0x10 [ 1618.044620][T26134] ? __pfx___alloc_skb+0x10/0x10 [ 1618.044657][T26134] netlink_sendmsg+0x808/0xda0 [ 1618.044695][T26134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1618.044725][T26134] ? __import_iovec+0x1d2/0x640 [ 1618.044762][T26134] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 1618.044792][T26134] ____sys_sendmsg+0x9e1/0xb70 [ 1618.044822][T26134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1618.044857][T26134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1618.044901][T26134] ___sys_sendmsg+0x190/0x1e0 [ 1618.044936][T26134] ? __pfx____sys_sendmsg+0x10/0x10 [ 1618.045003][T26134] __sys_sendmsg+0x170/0x220 [ 1618.045028][T26134] ? __pfx___sys_sendmsg+0x10/0x10 [ 1618.045065][T26134] ? rcu_is_watching+0x12/0xc0 [ 1618.045097][T26134] do_syscall_64+0x115/0x840 [ 1618.045131][T26134] ? clear_bhb_loop+0x40/0x90 [ 1618.045162][T26134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.045187][T26134] RIP: 0033:0x7f145279ce59 [ 1618.045206][T26134] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.045230][T26134] RSP: 002b:00007f1453717028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1618.045253][T26134] RAX: ffffffffffffffda RBX: 00007f1452a15fa0 RCX: 00007f145279ce59 [ 1618.045269][T26134] RDX: 0000000000008000 RSI: 0000200000002740 RDI: 0000000000000003 [ 1618.045284][T26134] RBP: 00007f1453717090 R08: 0000000000000000 R09: 0000000000000000 [ 1618.045298][T26134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.045312][T26134] R13: 00007f1452a16038 R14: 00007f1452a15fa0 R15: 00007fff45b9d228 [ 1618.045343][T26134] [ 1618.991350][ T9355] Bluetooth: hci4: command 0x0c1a tx timeout [ 1619.453530][T26140] FAULT_INJECTION: forcing a failure. [ 1619.453530][T26140] name failslab, interval 1, probability 0, space 0, times 0 [ 1619.553698][T26140] CPU: 0 UID: 0 PID: 26140 Comm: syz.5.4764 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1619.553742][T26140] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1619.553752][T26140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1619.553768][T26140] Call Trace: [ 1619.553778][T26140] [ 1619.553788][T26140] dump_stack_lvl+0x100/0x190 [ 1619.553838][T26140] should_fail_ex.cold+0x5/0xa [ 1619.553871][T26140] should_failslab+0xc2/0x120 [ 1619.553902][T26140] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1619.553944][T26140] ? __kernfs_new_node+0xd2/0x9f0 [ 1619.553979][T26140] __kernfs_new_node+0xd2/0x9f0 [ 1619.554011][T26140] ? __pfx___kernfs_new_node+0x10/0x10 [ 1619.554048][T26140] ? find_held_lock+0x2b/0x80 [ 1619.554079][T26140] ? kernfs_root+0xee/0x2a0 [ 1619.554105][T26140] ? kernfs_root+0xee/0x2a0 [ 1619.554142][T26140] kernfs_new_node+0x11b/0x1a0 [ 1619.554180][T26140] __kernfs_create_file+0x53/0x350 [ 1619.554223][T26140] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1619.554257][T26140] sysfs_merge_group+0x194/0x340 [ 1619.554289][T26140] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1619.554326][T26140] ? bus_add_device+0x368/0x6b0 [ 1619.554367][T26140] ? __pfx_bus_add_device+0x10/0x10 [ 1619.554402][T26140] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1619.554439][T26140] dpm_sysfs_add+0x237/0x280 [ 1619.554469][T26140] device_add+0x9ef/0x1950 [ 1619.554499][T26140] ? __pfx_device_add+0x10/0x10 [ 1619.554526][T26140] ? lockdep_init_map_type+0x5c/0x250 [ 1619.554568][T26140] ? __init_waitqueue_head+0xca/0x150 [ 1619.554605][T26140] rfkill_register+0x1ad/0xb30 [ 1619.554639][T26140] nfc_register_device+0x11f/0x3e0 [ 1619.554679][T26140] nci_register_device+0x7f1/0xb80 [ 1619.554709][T26140] ? __pfx_nci_register_device+0x10/0x10 [ 1619.554742][T26140] ? lockdep_init_map_type+0x5c/0x250 [ 1619.554790][T26140] virtual_ncidev_open+0x141/0x220 [ 1619.554818][T26140] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1619.554845][T26140] misc_open+0x26d/0x450 [ 1619.554872][T26140] ? __pfx_misc_open+0x10/0x10 [ 1619.554897][T26140] chrdev_open+0x234/0x6a0 [ 1619.554930][T26140] ? __pfx_apparmor_file_open+0x10/0x10 [ 1619.554959][T26140] ? __pfx_chrdev_open+0x10/0x10 [ 1619.554993][T26140] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1619.555034][T26140] do_dentry_open+0x6ab/0x14d0 [ 1619.555065][T26140] ? __pfx_chrdev_open+0x10/0x10 [ 1619.555105][T26140] vfs_open+0x82/0x3f0 [ 1619.555148][T26140] path_openat+0x208c/0x31a0 [ 1619.555190][T26140] ? __pfx_path_openat+0x10/0x10 [ 1619.555235][T26140] do_file_open+0x20e/0x430 [ 1619.555269][T26140] ? __pfx_do_file_open+0x10/0x10 [ 1619.555329][T26140] ? alloc_fd+0x476/0x790 [ 1619.555364][T26140] ? do_getname+0x191/0x390 [ 1619.555406][T26140] do_sys_openat2+0x10d/0x1e0 [ 1619.555447][T26140] ? __pfx_do_sys_openat2+0x10/0x10 [ 1619.555490][T26140] ? __fget_files+0x21f/0x3d0 [ 1619.555528][T26140] __x64_sys_openat+0x12d/0x210 [ 1619.555569][T26140] ? __pfx___x64_sys_openat+0x10/0x10 [ 1619.555616][T26140] ? rcu_is_watching+0x12/0xc0 [ 1619.555650][T26140] do_syscall_64+0x115/0x840 [ 1619.555686][T26140] ? clear_bhb_loop+0x40/0x90 [ 1619.555717][T26140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1619.555744][T26140] RIP: 0033:0x7f145279ce59 [ 1619.555765][T26140] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1619.555791][T26140] RSP: 002b:00007f1453717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1619.555816][T26140] RAX: ffffffffffffffda RBX: 00007f1452a15fa0 RCX: 00007f145279ce59 [ 1619.555834][T26140] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1619.555851][T26140] RBP: 00007f1452832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1619.555867][T26140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1619.555883][T26140] R13: 00007f1452a16038 R14: 00007f1452a15fa0 R15: 00007fff45b9d228 [ 1619.555916][T26140] [ 1621.088722][T26115] Bluetooth: hci4: command 0x0c1a tx timeout [ 1621.590098][T26169] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1624.038228][T26115] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1624.058478][T26115] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1624.075758][T26115] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1624.093776][T26115] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1624.103909][T26115] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1625.419063][ T29] audit: type=1800 audit(1843104592.470:267): pid=26228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4785" name="version" dev="configfs" ino=119327 res=0 errno=0 [ 1626.141365][T26115] Bluetooth: hci2: command tx timeout [ 1627.205211][T26249] FAULT_INJECTION: forcing a failure. [ 1627.205211][T26249] name failslab, interval 1, probability 0, space 0, times 0 [ 1627.283433][T26249] CPU: 0 UID: 0 PID: 26249 Comm: syz.4.4789 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1627.283476][T26249] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1627.283487][T26249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1627.283503][T26249] Call Trace: [ 1627.283511][T26249] [ 1627.283521][T26249] dump_stack_lvl+0x100/0x190 [ 1627.283570][T26249] should_fail_ex.cold+0x5/0xa [ 1627.283603][T26249] should_failslab+0xc2/0x120 [ 1627.283635][T26249] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1627.283676][T26249] ? __kernfs_new_node+0xd2/0x9f0 [ 1627.283718][T26249] __kernfs_new_node+0xd2/0x9f0 [ 1627.283751][T26249] ? __pfx___kernfs_new_node+0x10/0x10 [ 1627.283787][T26249] ? find_held_lock+0x2b/0x80 [ 1627.283819][T26249] ? kernfs_root+0xee/0x2a0 [ 1627.283846][T26249] ? kernfs_root+0xee/0x2a0 [ 1627.283881][T26249] kernfs_new_node+0x11b/0x1a0 [ 1627.283918][T26249] __kernfs_create_file+0x53/0x350 [ 1627.283962][T26249] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1627.283996][T26249] sysfs_merge_group+0x194/0x340 [ 1627.284028][T26249] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1627.284057][T26249] ? bus_add_device+0x368/0x6b0 [ 1627.284096][T26249] ? __pfx_bus_add_device+0x10/0x10 [ 1627.284130][T26249] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1627.284166][T26249] dpm_sysfs_add+0x237/0x280 [ 1627.284196][T26249] device_add+0x9ef/0x1950 [ 1627.284227][T26249] ? __pfx_device_add+0x10/0x10 [ 1627.284254][T26249] ? lockdep_init_map_type+0x5c/0x250 [ 1627.284297][T26249] ? __init_waitqueue_head+0xca/0x150 [ 1627.284334][T26249] rfkill_register+0x1ad/0xb30 [ 1627.284367][T26249] nfc_register_device+0x11f/0x3e0 [ 1627.284407][T26249] nci_register_device+0x7f1/0xb80 [ 1627.284437][T26249] ? __pfx_nci_register_device+0x10/0x10 [ 1627.284470][T26249] ? lockdep_init_map_type+0x5c/0x250 [ 1627.284519][T26249] virtual_ncidev_open+0x141/0x220 [ 1627.284547][T26249] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1627.284574][T26249] misc_open+0x26d/0x450 [ 1627.284600][T26249] ? __pfx_misc_open+0x10/0x10 [ 1627.284626][T26249] chrdev_open+0x234/0x6a0 [ 1627.284659][T26249] ? __pfx_apparmor_file_open+0x10/0x10 [ 1627.284688][T26249] ? __pfx_chrdev_open+0x10/0x10 [ 1627.284730][T26249] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1627.284772][T26249] do_dentry_open+0x6ab/0x14d0 [ 1627.284804][T26249] ? __pfx_chrdev_open+0x10/0x10 [ 1627.284844][T26249] vfs_open+0x82/0x3f0 [ 1627.284888][T26249] path_openat+0x208c/0x31a0 [ 1627.284931][T26249] ? __pfx_path_openat+0x10/0x10 [ 1627.284975][T26249] do_file_open+0x20e/0x430 [ 1627.285011][T26249] ? __pfx_do_file_open+0x10/0x10 [ 1627.285065][T26249] ? alloc_fd+0x476/0x790 [ 1627.285100][T26249] ? do_getname+0x191/0x390 [ 1627.285141][T26249] do_sys_openat2+0x10d/0x1e0 [ 1627.285182][T26249] ? __pfx_do_sys_openat2+0x10/0x10 [ 1627.285224][T26249] ? __fget_files+0x21f/0x3d0 [ 1627.285260][T26249] __x64_sys_openat+0x12d/0x210 [ 1627.285301][T26249] ? __pfx___x64_sys_openat+0x10/0x10 [ 1627.285348][T26249] ? rcu_is_watching+0x12/0xc0 [ 1627.285381][T26249] do_syscall_64+0x115/0x840 [ 1627.285417][T26249] ? clear_bhb_loop+0x40/0x90 [ 1627.285449][T26249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.285475][T26249] RIP: 0033:0x7f9c5fb9ce59 [ 1627.285496][T26249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1627.285521][T26249] RSP: 002b:00007f9c60a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1627.285546][T26249] RAX: ffffffffffffffda RBX: 00007f9c5fe15fa0 RCX: 00007f9c5fb9ce59 [ 1627.285563][T26249] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1627.285580][T26249] RBP: 00007f9c5fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1627.285596][T26249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1627.285611][T26249] R13: 00007f9c5fe16038 R14: 00007f9c5fe15fa0 R15: 00007ffc8272ef08 [ 1627.285644][T26249] [ 1628.364235][T26115] Bluetooth: hci2: command tx timeout [ 1629.691351][T26280] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1629.858484][T26206] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.888139][T26206] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.923149][T26206] bridge_slave_0: entered allmulticast mode [ 1629.968724][T26206] bridge_slave_0: entered promiscuous mode [ 1630.009799][T26206] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.040843][T26206] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.082244][T26206] bridge_slave_1: entered allmulticast mode [ 1630.118672][T26206] bridge_slave_1: entered promiscuous mode [ 1630.382629][T26115] Bluetooth: hci2: command tx timeout [ 1630.606881][T26206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1630.746450][T26206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1630.790499][T26293] netlink: 334 bytes leftover after parsing attributes in process `syz.3.4797'. [ 1630.972326][T26295] FAULT_INJECTION: forcing a failure. [ 1630.972326][T26295] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.002719][T26206] team0: Port device team_slave_0 added [ 1631.045476][T26206] team0: Port device team_slave_1 added [ 1631.066685][T26295] CPU: 0 UID: 0 PID: 26295 Comm: syz.5.4798 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1631.066733][T26295] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1631.066743][T26295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1631.066759][T26295] Call Trace: [ 1631.066768][T26295] [ 1631.066778][T26295] dump_stack_lvl+0x100/0x190 [ 1631.066828][T26295] should_fail_ex.cold+0x5/0xa [ 1631.066861][T26295] should_failslab+0xc2/0x120 [ 1631.066892][T26295] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1631.066934][T26295] ? __kernfs_new_node+0xd2/0x9f0 [ 1631.066968][T26295] __kernfs_new_node+0xd2/0x9f0 [ 1631.067001][T26295] ? __pfx___kernfs_new_node+0x10/0x10 [ 1631.067038][T26295] ? find_held_lock+0x2b/0x80 [ 1631.067069][T26295] ? kernfs_root+0xee/0x2a0 [ 1631.067095][T26295] ? kernfs_root+0xee/0x2a0 [ 1631.067130][T26295] kernfs_new_node+0x11b/0x1a0 [ 1631.067168][T26295] __kernfs_create_file+0x53/0x350 [ 1631.067217][T26295] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1631.067251][T26295] sysfs_merge_group+0x194/0x340 [ 1631.067296][T26295] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1631.067326][T26295] ? bus_add_device+0x368/0x6b0 [ 1631.067365][T26295] ? __pfx_bus_add_device+0x10/0x10 [ 1631.067400][T26295] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1631.067436][T26295] dpm_sysfs_add+0x237/0x280 [ 1631.067466][T26295] device_add+0x9ef/0x1950 [ 1631.067497][T26295] ? __pfx_device_add+0x10/0x10 [ 1631.067524][T26295] ? lockdep_init_map_type+0x5c/0x250 [ 1631.067568][T26295] ? __init_waitqueue_head+0xca/0x150 [ 1631.067604][T26295] rfkill_register+0x1ad/0xb30 [ 1631.067638][T26295] nfc_register_device+0x11f/0x3e0 [ 1631.067676][T26295] nci_register_device+0x7f1/0xb80 [ 1631.067706][T26295] ? __pfx_nci_register_device+0x10/0x10 [ 1631.067739][T26295] ? lockdep_init_map_type+0x5c/0x250 [ 1631.067786][T26295] virtual_ncidev_open+0x141/0x220 [ 1631.067814][T26295] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1631.067841][T26295] misc_open+0x26d/0x450 [ 1631.067868][T26295] ? __pfx_misc_open+0x10/0x10 [ 1631.067893][T26295] chrdev_open+0x234/0x6a0 [ 1631.067925][T26295] ? __pfx_apparmor_file_open+0x10/0x10 [ 1631.067954][T26295] ? __pfx_chrdev_open+0x10/0x10 [ 1631.068007][T26295] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1631.068049][T26295] do_dentry_open+0x6ab/0x14d0 [ 1631.068081][T26295] ? __pfx_chrdev_open+0x10/0x10 [ 1631.068120][T26295] vfs_open+0x82/0x3f0 [ 1631.068162][T26295] path_openat+0x208c/0x31a0 [ 1631.068205][T26295] ? __pfx_path_openat+0x10/0x10 [ 1631.068249][T26295] do_file_open+0x20e/0x430 [ 1631.068291][T26295] ? __pfx_do_file_open+0x10/0x10 [ 1631.068345][T26295] ? alloc_fd+0x476/0x790 [ 1631.068379][T26295] ? do_getname+0x191/0x390 [ 1631.068421][T26295] do_sys_openat2+0x10d/0x1e0 [ 1631.068461][T26295] ? __pfx_do_sys_openat2+0x10/0x10 [ 1631.068504][T26295] ? __fget_files+0x21f/0x3d0 [ 1631.068540][T26295] __x64_sys_openat+0x12d/0x210 [ 1631.068582][T26295] ? __pfx___x64_sys_openat+0x10/0x10 [ 1631.068628][T26295] ? rcu_is_watching+0x12/0xc0 [ 1631.068668][T26295] do_syscall_64+0x115/0x840 [ 1631.068704][T26295] ? clear_bhb_loop+0x40/0x90 [ 1631.068736][T26295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.068762][T26295] RIP: 0033:0x7f145279ce59 [ 1631.068784][T26295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.068809][T26295] RSP: 002b:00007f1453717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1631.068834][T26295] RAX: ffffffffffffffda RBX: 00007f1452a15fa0 RCX: 00007f145279ce59 [ 1631.068852][T26295] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1631.068868][T26295] RBP: 00007f1452832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1631.068885][T26295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1631.068900][T26295] R13: 00007f1452a16038 R14: 00007f1452a15fa0 R15: 00007fff45b9d228 [ 1631.068933][T26295] [ 1632.612752][T26206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1632.623745][T26206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.653198][T26115] Bluetooth: hci2: command tx timeout [ 1632.746903][T26206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1632.883560][T26206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1632.908272][T26206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1632.986995][T26206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1633.522921][T26206] hsr_slave_0: entered promiscuous mode [ 1633.547267][T26206] hsr_slave_1: entered promiscuous mode [ 1633.568860][T26206] debugfs: 'hsr0' already exists in 'hsr' [ 1633.598089][T26206] Cannot create hsr debugfs directory [ 1635.365085][T26206] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1635.556342][T26342] FAULT_INJECTION: forcing a failure. [ 1635.556342][T26342] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.679059][T26342] CPU: 0 UID: 0 PID: 26342 Comm: syz.5.4809 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1635.679104][T26342] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1635.679114][T26342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1635.679130][T26342] Call Trace: [ 1635.679139][T26342] [ 1635.679148][T26342] dump_stack_lvl+0x100/0x190 [ 1635.679199][T26342] should_fail_ex.cold+0x5/0xa [ 1635.679230][T26342] ? __pfx_cgroup_show_path+0x10/0x10 [ 1635.679270][T26342] should_failslab+0xc2/0x120 [ 1635.679303][T26342] ? __pfx_cgroup_show_path+0x10/0x10 [ 1635.679342][T26342] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1635.679379][T26342] ? cgroup_show_path+0xb2/0x730 [ 1635.679417][T26342] ? find_held_lock+0x2b/0x80 [ 1635.679452][T26342] ? __pfx_cgroup_show_path+0x10/0x10 [ 1635.679490][T26342] cgroup_show_path+0xb2/0x730 [ 1635.679532][T26342] ? __pfx_cgroup_show_path+0x10/0x10 [ 1635.679570][T26342] kernfs_sop_show_path+0xe9/0x160 [ 1635.679595][T26342] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 1635.679620][T26342] show_path+0x9e/0x100 [ 1635.679659][T26342] show_mountinfo+0x1d8/0x820 [ 1635.679691][T26342] ? __pfx_show_mountinfo+0x10/0x10 [ 1635.679742][T26342] ? __kvmalloc_node_noprof+0x37b/0xa00 [ 1635.679777][T26342] seq_read_iter+0xbce/0x1270 [ 1635.679815][T26342] ? __pfx_seq_read_iter+0x10/0x10 [ 1635.679844][T26342] vfs_read+0x825/0xb30 [ 1635.679877][T26342] ? __pfx_vfs_read+0x10/0x10 [ 1635.679931][T26342] ksys_read+0x12a/0x250 [ 1635.679959][T26342] ? __pfx_ksys_read+0x10/0x10 [ 1635.679991][T26342] ? rcu_is_watching+0x12/0xc0 [ 1635.680025][T26342] do_syscall_64+0x115/0x840 [ 1635.680061][T26342] ? clear_bhb_loop+0x40/0x90 [ 1635.680092][T26342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.680119][T26342] RIP: 0033:0x7f145279ce59 [ 1635.680139][T26342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1635.680165][T26342] RSP: 002b:00007f1453717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1635.680189][T26342] RAX: ffffffffffffffda RBX: 00007f1452a15fa0 RCX: 00007f145279ce59 [ 1635.680206][T26342] RDX: 0000000000001036 RSI: 0000200000000040 RDI: 0000000000000004 [ 1635.680223][T26342] RBP: 00007f1452832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1635.680240][T26342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1635.680256][T26342] R13: 00007f1452a16038 R14: 00007f1452a15fa0 R15: 00007fff45b9d228 [ 1635.680288][T26342] [ 1636.390186][T26356] FAULT_INJECTION: forcing a failure. [ 1636.390186][T26356] name failslab, interval 1, probability 0, space 0, times 0 [ 1636.431293][T26356] CPU: 0 UID: 0 PID: 26356 Comm: syz.3.4812 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1636.431337][T26356] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1636.431347][T26356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1636.431363][T26356] Call Trace: [ 1636.431372][T26356] [ 1636.431382][T26356] dump_stack_lvl+0x100/0x190 [ 1636.431432][T26356] should_fail_ex.cold+0x5/0xa [ 1636.431465][T26356] should_failslab+0xc2/0x120 [ 1636.431497][T26356] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1636.431538][T26356] ? security_inode_alloc+0x3b/0x2c0 [ 1636.431568][T26356] ? lockdep_init_map_type+0x5c/0x250 [ 1636.431615][T26356] security_inode_alloc+0x3b/0x2c0 [ 1636.431645][T26356] inode_init_always_gfp+0xc77/0xfb0 [ 1636.431682][T26356] alloc_inode+0x8e/0x250 [ 1636.431723][T26356] new_inode+0x22/0x1c0 [ 1636.431761][T26356] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1636.431795][T26356] shmem_get_inode+0x1e3/0xfb0 [ 1636.431834][T26356] ? __pfx_shmem_get_inode+0x10/0x10 [ 1636.431877][T26356] __shmem_file_setup+0x382/0x460 [ 1636.431915][T26356] ? __pfx___shmem_file_setup+0x10/0x10 [ 1636.431957][T26356] ? vm_area_alloc+0x1f/0x160 [ 1636.432005][T26356] shmem_zero_setup+0x96/0x1b0 [ 1636.432034][T26356] __mmap_region+0x2509/0x2dd0 [ 1636.432081][T26356] ? __pfx___mmap_region+0x10/0x10 [ 1636.432119][T26356] ? __lock_acquire+0x4a5/0x2630 [ 1636.432175][T26356] ? clockevents_program_event+0x23e/0x820 [ 1636.432204][T26356] ? clockevents_program_event+0x23e/0x820 [ 1636.432239][T26356] ? ktime_get+0x1a4/0x320 [ 1636.432278][T26356] ? lapic_next_event+0x10/0x20 [ 1636.432317][T26356] ? __pfx_debug_object_activate+0x10/0x10 [ 1636.432352][T26356] ? do_raw_spin_lock+0x128/0x260 [ 1636.432392][T26356] ? hrtimer_start_range_ns+0x860/0x1a50 [ 1636.432423][T26356] ? find_held_lock+0x2b/0x80 [ 1636.432454][T26356] ? finish_task_switch.isra.0+0x2c6/0x1010 [ 1636.432533][T26356] mmap_region+0x35d/0x620 [ 1636.432557][T26356] ? rcu_is_watching+0x12/0xc0 [ 1636.432587][T26356] ? __pfx_mmap_region+0x10/0x10 [ 1636.432614][T26356] ? cap_mmap_addr+0x4b/0x120 [ 1636.432637][T26356] ? bpf_lsm_mmap_addr+0x9/0x30 [ 1636.432661][T26356] ? security_mmap_addr+0x71/0x1e0 [ 1636.432695][T26356] ? __get_unmapped_area+0x255/0x3e0 [ 1636.432731][T26356] do_mmap+0xc63/0x12f0 [ 1636.432768][T26356] ? __pfx_do_mmap+0x10/0x10 [ 1636.432799][T26356] ? __pfx_down_write_killable+0x10/0x10 [ 1636.432848][T26356] vm_mmap_pgoff+0x29e/0x470 [ 1636.432886][T26356] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1636.432920][T26356] ? do_futex+0x192/0x350 [ 1636.432948][T26356] ? __pfx_do_futex+0x10/0x10 [ 1636.432980][T26356] ? __pfx_do_sys_openat2+0x10/0x10 [ 1636.433026][T26356] ksys_mmap_pgoff+0xe4/0x610 [ 1636.433058][T26356] ? __x64_sys_futex+0x358/0x4d0 [ 1636.433085][T26356] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 1636.433116][T26356] ? xfd_validate_state+0x129/0x190 [ 1636.433141][T26356] ? ksys_write+0x1ac/0x250 [ 1636.433175][T26356] __x64_sys_mmap+0x125/0x190 [ 1636.433205][T26356] do_syscall_64+0x115/0x840 [ 1636.433241][T26356] ? clear_bhb_loop+0x40/0x90 [ 1636.433272][T26356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1636.433298][T26356] RIP: 0033:0x7ff35419ce59 [ 1636.433319][T26356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1636.433346][T26356] RSP: 002b:00007ff355102028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1636.433372][T26356] RAX: ffffffffffffffda RBX: 00007ff354416090 RCX: 00007ff35419ce59 [ 1636.433389][T26356] RDX: 0000000000000001 RSI: 0000000002020003 RDI: 0000000000000000 [ 1636.433406][T26356] RBP: 00007ff354232d6f R08: fffffffffffffffa R09: 0000000000008000 [ 1636.433423][T26356] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 1636.433439][T26356] R13: 00007ff354416128 R14: 00007ff354416090 R15: 00007ffe39cdea88 [ 1636.433470][T26356] [ 1637.868832][T26366] bond0: invalid ARP target specified [ 1638.460815][T26372] netlink: 'syz.4.4816': attribute type 2 has an invalid length. [ 1638.516252][T26372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4816'. [ 1638.683442][T26115] block nbd9: Receive control failed (result -32) [ 1638.768392][T26206] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1638.916654][ T29] audit: type=1800 audit(1843104605.970:268): pid=26378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4818" name="version" dev="configfs" ino=120263 res=0 errno=0 [ 1639.284808][T26382] cifs: Unknown parameter ') Up̢{V ]762']Ψ!gʮ79fM<*ysEh' [ 1639.304813][T26206] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.404183][T26380] FAULT_INJECTION: forcing a failure. [ 1639.404183][T26380] name failslab, interval 1, probability 0, space 0, times 0 [ 1639.492319][T26380] CPU: 0 UID: 0 PID: 26380 Comm: syz.4.4819 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1639.492362][T26380] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1639.492373][T26380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1639.492389][T26380] Call Trace: [ 1639.492399][T26380] [ 1639.492408][T26380] dump_stack_lvl+0x100/0x190 [ 1639.492460][T26380] should_fail_ex.cold+0x5/0xa [ 1639.492493][T26380] should_failslab+0xc2/0x120 [ 1639.492531][T26380] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1639.492574][T26380] ? security_file_alloc+0x34/0x2c0 [ 1639.492609][T26380] ? trace_kmem_cache_alloc+0xd5/0x100 [ 1639.492646][T26380] security_file_alloc+0x34/0x2c0 [ 1639.492681][T26380] init_file+0x95/0x480 [ 1639.492719][T26380] alloc_empty_file+0x79/0x1c0 [ 1639.492758][T26380] alloc_file_pseudo+0x13a/0x230 [ 1639.492802][T26380] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1639.492842][T26380] ? alloc_fd+0x476/0x790 [ 1639.492878][T26380] sock_alloc_file+0x50/0x210 [ 1639.492908][T26380] __sys_socket+0x1c0/0x260 [ 1639.492945][T26380] ? __pfx___sys_socket+0x10/0x10 [ 1639.492990][T26380] __x64_sys_socket+0x72/0xb0 [ 1639.493025][T26380] ? lockdep_hardirqs_on+0x78/0x100 [ 1639.493062][T26380] do_syscall_64+0x115/0x840 [ 1639.493098][T26380] ? clear_bhb_loop+0x40/0x90 [ 1639.493129][T26380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1639.493156][T26380] RIP: 0033:0x7f9c5fb9ce59 [ 1639.493178][T26380] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1639.493203][T26380] RSP: 002b:00007f9c60a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1639.493227][T26380] RAX: ffffffffffffffda RBX: 00007f9c5fe15fa0 RCX: 00007f9c5fb9ce59 [ 1639.493244][T26380] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000010 [ 1639.493260][T26380] RBP: 00007f9c5fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1639.493275][T26380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1639.493291][T26380] R13: 00007f9c5fe16038 R14: 00007f9c5fe15fa0 R15: 00007ffc8272ef08 [ 1639.493322][T26380] [ 1640.390125][T26206] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.627766][T26206] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1641.062780][T26386] FAULT_INJECTION: forcing a failure. [ 1641.062780][T26386] name failslab, interval 1, probability 0, space 0, times 0 [ 1641.115287][T26391] vmstat_refresh: nr_hugetlb -2048 [ 1641.123330][T26386] CPU: 0 UID: 0 PID: 26386 Comm: syz.5.4821 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1641.123374][T26386] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1641.123384][T26386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1641.123401][T26386] Call Trace: [ 1641.123410][T26386] [ 1641.123419][T26386] dump_stack_lvl+0x100/0x190 [ 1641.123470][T26386] should_fail_ex.cold+0x5/0xa [ 1641.123502][T26386] should_failslab+0xc2/0x120 [ 1641.123534][T26386] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1641.123576][T26386] ? __kernfs_new_node+0xd2/0x9f0 [ 1641.123622][T26386] __kernfs_new_node+0xd2/0x9f0 [ 1641.123655][T26386] ? __pfx___kernfs_new_node+0x10/0x10 [ 1641.123692][T26386] ? find_held_lock+0x2b/0x80 [ 1641.123724][T26386] ? kernfs_root+0xee/0x2a0 [ 1641.123753][T26386] ? kernfs_root+0xee/0x2a0 [ 1641.123788][T26386] kernfs_new_node+0x11b/0x1a0 [ 1641.123825][T26386] __kernfs_create_file+0x53/0x350 [ 1641.123869][T26386] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1641.123903][T26386] sysfs_merge_group+0x194/0x340 [ 1641.123935][T26386] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1641.123964][T26386] ? bus_add_device+0x368/0x6b0 [ 1641.124003][T26386] ? __pfx_bus_add_device+0x10/0x10 [ 1641.124038][T26386] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1641.124074][T26386] dpm_sysfs_add+0x237/0x280 [ 1641.124104][T26386] device_add+0x9ef/0x1950 [ 1641.124134][T26386] ? __pfx_device_add+0x10/0x10 [ 1641.124161][T26386] ? lockdep_init_map_type+0x5c/0x250 [ 1641.124205][T26386] ? __init_waitqueue_head+0xca/0x150 [ 1641.124241][T26386] rfkill_register+0x1ad/0xb30 [ 1641.124274][T26386] nfc_register_device+0x11f/0x3e0 [ 1641.124314][T26386] nci_register_device+0x7f1/0xb80 [ 1641.124346][T26386] ? __pfx_nci_register_device+0x10/0x10 [ 1641.124379][T26386] ? lockdep_init_map_type+0x5c/0x250 [ 1641.124426][T26386] virtual_ncidev_open+0x141/0x220 [ 1641.124453][T26386] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1641.124480][T26386] misc_open+0x26d/0x450 [ 1641.124506][T26386] ? __pfx_misc_open+0x10/0x10 [ 1641.124531][T26386] chrdev_open+0x234/0x6a0 [ 1641.124563][T26386] ? __pfx_apparmor_file_open+0x10/0x10 [ 1641.124599][T26386] ? __pfx_chrdev_open+0x10/0x10 [ 1641.124634][T26386] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1641.124675][T26386] do_dentry_open+0x6ab/0x14d0 [ 1641.124707][T26386] ? __pfx_chrdev_open+0x10/0x10 [ 1641.124746][T26386] vfs_open+0x82/0x3f0 [ 1641.124788][T26386] path_openat+0x208c/0x31a0 [ 1641.124831][T26386] ? __pfx_path_openat+0x10/0x10 [ 1641.124878][T26386] do_file_open+0x20e/0x430 [ 1641.124913][T26386] ? __pfx_do_file_open+0x10/0x10 [ 1641.124968][T26386] ? alloc_fd+0x476/0x790 [ 1641.125002][T26386] ? do_getname+0x191/0x390 [ 1641.125043][T26386] do_sys_openat2+0x10d/0x1e0 [ 1641.125084][T26386] ? __pfx_do_sys_openat2+0x10/0x10 [ 1641.125126][T26386] ? __fget_files+0x21f/0x3d0 [ 1641.125162][T26386] __x64_sys_openat+0x12d/0x210 [ 1641.125203][T26386] ? __pfx___x64_sys_openat+0x10/0x10 [ 1641.125250][T26386] ? rcu_is_watching+0x12/0xc0 [ 1641.125283][T26386] do_syscall_64+0x115/0x840 [ 1641.125319][T26386] ? clear_bhb_loop+0x40/0x90 [ 1641.125351][T26386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.125377][T26386] RIP: 0033:0x7f145279ce59 [ 1641.125397][T26386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.125424][T26386] RSP: 002b:00007f1453717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1641.125449][T26386] RAX: ffffffffffffffda RBX: 00007f1452a15fa0 RCX: 00007f145279ce59 [ 1641.125466][T26386] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1641.125483][T26386] RBP: 00007f1452832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1641.125499][T26386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1641.125515][T26386] R13: 00007f1452a16038 R14: 00007f1452a15fa0 R15: 00007fff45b9d228 [ 1641.125548][T26386] [ 1642.088369][T26393] vmstat_refresh: nr_hugetlb -2048 [ 1643.490655][T26405] FAULT_INJECTION: forcing a failure. [ 1643.490655][T26405] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.563439][T26405] CPU: 0 UID: 0 PID: 26405 Comm: syz.5.4825 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1643.563483][T26405] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1643.563493][T26405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1643.563509][T26405] Call Trace: [ 1643.563517][T26405] [ 1643.563527][T26405] dump_stack_lvl+0x100/0x190 [ 1643.563585][T26405] should_fail_ex.cold+0x5/0xa [ 1643.563618][T26405] should_failslab+0xc2/0x120 [ 1643.563650][T26405] __kmalloc_cache_noprof+0x7a/0x6f0 [ 1643.563688][T26405] ? kobject_uevent_env+0x263/0x18b0 [ 1643.563716][T26405] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1643.563762][T26405] kobject_uevent_env+0x263/0x18b0 [ 1643.563796][T26405] ? bus_to_subsys+0x114/0x150 [ 1643.563833][T26405] device_add+0x116e/0x1950 [ 1643.563863][T26405] ? __pfx_device_add+0x10/0x10 [ 1643.563891][T26405] ? lockdep_init_map_type+0x5c/0x250 [ 1643.563934][T26405] ? __init_waitqueue_head+0xca/0x150 [ 1643.563971][T26405] rfkill_register+0x1ad/0xb30 [ 1643.564005][T26405] nfc_register_device+0x11f/0x3e0 [ 1643.564044][T26405] nci_register_device+0x7f1/0xb80 [ 1643.564074][T26405] ? __pfx_nci_register_device+0x10/0x10 [ 1643.564107][T26405] ? lockdep_init_map_type+0x5c/0x250 [ 1643.564155][T26405] virtual_ncidev_open+0x141/0x220 [ 1643.564183][T26405] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1643.564216][T26405] misc_open+0x26d/0x450 [ 1643.564243][T26405] ? __pfx_misc_open+0x10/0x10 [ 1643.564269][T26405] chrdev_open+0x234/0x6a0 [ 1643.564302][T26405] ? __pfx_apparmor_file_open+0x10/0x10 [ 1643.564331][T26405] ? __pfx_chrdev_open+0x10/0x10 [ 1643.564366][T26405] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1643.564406][T26405] do_dentry_open+0x6ab/0x14d0 [ 1643.564438][T26405] ? __pfx_chrdev_open+0x10/0x10 [ 1643.564477][T26405] vfs_open+0x82/0x3f0 [ 1643.564519][T26405] path_openat+0x208c/0x31a0 [ 1643.564562][T26405] ? __pfx_path_openat+0x10/0x10 [ 1643.564606][T26405] do_file_open+0x20e/0x430 [ 1643.564641][T26405] ? __pfx_do_file_open+0x10/0x10 [ 1643.564695][T26405] ? alloc_fd+0x476/0x790 [ 1643.564729][T26405] ? do_getname+0x191/0x390 [ 1643.564770][T26405] do_sys_openat2+0x10d/0x1e0 [ 1643.564810][T26405] ? __pfx_do_sys_openat2+0x10/0x10 [ 1643.564853][T26405] ? __fget_files+0x21f/0x3d0 [ 1643.564889][T26405] __x64_sys_openat+0x12d/0x210 [ 1643.564934][T26405] ? __pfx___x64_sys_openat+0x10/0x10 [ 1643.564981][T26405] ? rcu_is_watching+0x12/0xc0 [ 1643.565014][T26405] do_syscall_64+0x115/0x840 [ 1643.565051][T26405] ? clear_bhb_loop+0x40/0x90 [ 1643.565082][T26405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.565108][T26405] RIP: 0033:0x7f145279ce59 [ 1643.565130][T26405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1643.565155][T26405] RSP: 002b:00007f1453717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1643.565180][T26405] RAX: ffffffffffffffda RBX: 00007f1452a15fa0 RCX: 00007f145279ce59 [ 1643.565197][T26405] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1643.565265][T26405] RBP: 00007f1452832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1643.565281][T26405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1643.565297][T26405] R13: 00007f1452a16038 R14: 00007f1452a15fa0 R15: 00007fff45b9d228 [ 1643.565330][T26405] [ 1644.416791][T26415] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1644.455990][ T29] audit: type=1800 audit(1843104611.480:269): pid=26417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4827" name="version" dev="configfs" ino=120493 res=0 errno=0 [ 1644.485070][T26415] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1644.922621][T26427] FAULT_INJECTION: forcing a failure. [ 1644.922621][T26427] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.922663][T26427] CPU: 0 UID: 0 PID: 26427 Comm: syz.4.4831 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1644.922704][T26427] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1644.922715][T26427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1644.922731][T26427] Call Trace: [ 1644.922740][T26427] [ 1644.922749][T26427] dump_stack_lvl+0x100/0x190 [ 1644.922799][T26427] should_fail_ex.cold+0x5/0xa [ 1644.922832][T26427] should_failslab+0xc2/0x120 [ 1644.922863][T26427] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1644.922905][T26427] ? __kernfs_new_node+0xd2/0x9f0 [ 1644.922940][T26427] __kernfs_new_node+0xd2/0x9f0 [ 1644.922972][T26427] ? __pfx___kernfs_new_node+0x10/0x10 [ 1644.923008][T26427] ? find_held_lock+0x2b/0x80 [ 1644.923040][T26427] ? kernfs_root+0xee/0x2a0 [ 1644.923067][T26427] ? kernfs_root+0xee/0x2a0 [ 1644.923101][T26427] kernfs_new_node+0x11b/0x1a0 [ 1644.923139][T26427] __kernfs_create_file+0x53/0x350 [ 1644.923188][T26427] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1644.923221][T26427] sysfs_merge_group+0x194/0x340 [ 1644.923252][T26427] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1644.923281][T26427] ? bus_add_device+0x368/0x6b0 [ 1644.923319][T26427] ? __pfx_bus_add_device+0x10/0x10 [ 1644.923354][T26427] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1644.923389][T26427] dpm_sysfs_add+0x237/0x280 [ 1644.923419][T26427] device_add+0x9ef/0x1950 [ 1644.923449][T26427] ? __pfx_device_add+0x10/0x10 [ 1644.923476][T26427] ? lockdep_init_map_type+0x5c/0x250 [ 1644.923519][T26427] ? __init_waitqueue_head+0xca/0x150 [ 1644.923555][T26427] rfkill_register+0x1ad/0xb30 [ 1644.923589][T26427] nfc_register_device+0x11f/0x3e0 [ 1644.923626][T26427] nci_register_device+0x7f1/0xb80 [ 1644.923657][T26427] ? __pfx_nci_register_device+0x10/0x10 [ 1644.923689][T26427] ? lockdep_init_map_type+0x5c/0x250 [ 1644.923737][T26427] virtual_ncidev_open+0x141/0x220 [ 1644.923765][T26427] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1644.923792][T26427] misc_open+0x26d/0x450 [ 1644.923817][T26427] ? __pfx_misc_open+0x10/0x10 [ 1644.923843][T26427] chrdev_open+0x234/0x6a0 [ 1644.923874][T26427] ? __pfx_apparmor_file_open+0x10/0x10 [ 1644.923903][T26427] ? __pfx_chrdev_open+0x10/0x10 [ 1644.923938][T26427] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1644.923979][T26427] do_dentry_open+0x6ab/0x14d0 [ 1644.924010][T26427] ? __pfx_chrdev_open+0x10/0x10 [ 1644.924049][T26427] vfs_open+0x82/0x3f0 [ 1644.924091][T26427] path_openat+0x208c/0x31a0 [ 1644.924133][T26427] ? __pfx_path_openat+0x10/0x10 [ 1644.924184][T26427] do_file_open+0x20e/0x430 [ 1644.924219][T26427] ? __pfx_do_file_open+0x10/0x10 [ 1644.924274][T26427] ? alloc_fd+0x476/0x790 [ 1644.924308][T26427] ? do_getname+0x191/0x390 [ 1644.924350][T26427] do_sys_openat2+0x10d/0x1e0 [ 1644.924390][T26427] ? __pfx_do_sys_openat2+0x10/0x10 [ 1644.924433][T26427] ? __fget_files+0x21f/0x3d0 [ 1644.924469][T26427] __x64_sys_openat+0x12d/0x210 [ 1644.924510][T26427] ? __pfx___x64_sys_openat+0x10/0x10 [ 1644.924556][T26427] ? rcu_is_watching+0x12/0xc0 [ 1644.924589][T26427] do_syscall_64+0x115/0x840 [ 1644.924626][T26427] ? clear_bhb_loop+0x40/0x90 [ 1644.924657][T26427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.924682][T26427] RIP: 0033:0x7f9c5fb9ce59 [ 1644.924704][T26427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.924729][T26427] RSP: 002b:00007f9c60a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1644.924754][T26427] RAX: ffffffffffffffda RBX: 00007f9c5fe15fa0 RCX: 00007f9c5fb9ce59 [ 1644.924771][T26427] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1644.924788][T26427] RBP: 00007f9c5fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1644.924804][T26427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1644.924821][T26427] R13: 00007f9c5fe16038 R14: 00007f9c5fe15fa0 R15: 00007ffc8272ef08 [ 1644.924854][T26427] [ 1646.378729][T26438] Process accounting paused [ 1647.030508][T26445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4834'. [ 1647.032376][T26445] netlink: 25 bytes leftover after parsing attributes in process `syz.4.4834'. [ 1647.253284][T26448] FAULT_INJECTION: forcing a failure. [ 1647.253284][T26448] name failslab, interval 1, probability 0, space 0, times 0 [ 1647.320794][T26448] CPU: 0 UID: 0 PID: 26448 Comm: syz.4.4835 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1647.320838][T26448] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1647.320848][T26448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1647.320864][T26448] Call Trace: [ 1647.320879][T26448] [ 1647.320889][T26448] dump_stack_lvl+0x100/0x190 [ 1647.320938][T26448] should_fail_ex.cold+0x5/0xa [ 1647.320971][T26448] should_failslab+0xc2/0x120 [ 1647.321002][T26448] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1647.321043][T26448] ? __kernfs_new_node+0xd2/0x9f0 [ 1647.321078][T26448] __kernfs_new_node+0xd2/0x9f0 [ 1647.321110][T26448] ? __pfx___kernfs_new_node+0x10/0x10 [ 1647.321146][T26448] ? find_held_lock+0x2b/0x80 [ 1647.321180][T26448] ? kernfs_root+0xee/0x2a0 [ 1647.321207][T26448] ? kernfs_root+0xee/0x2a0 [ 1647.321241][T26448] kernfs_new_node+0x11b/0x1a0 [ 1647.321279][T26448] __kernfs_create_file+0x53/0x350 [ 1647.321322][T26448] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1647.321356][T26448] sysfs_merge_group+0x194/0x340 [ 1647.321387][T26448] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1647.321417][T26448] ? bus_add_device+0x368/0x6b0 [ 1647.321456][T26448] ? __pfx_bus_add_device+0x10/0x10 [ 1647.321491][T26448] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1647.321527][T26448] dpm_sysfs_add+0x237/0x280 [ 1647.321556][T26448] device_add+0x9ef/0x1950 [ 1647.321587][T26448] ? __pfx_device_add+0x10/0x10 [ 1647.321614][T26448] ? lockdep_init_map_type+0x5c/0x250 [ 1647.321657][T26448] ? __init_waitqueue_head+0xca/0x150 [ 1647.321693][T26448] rfkill_register+0x1ad/0xb30 [ 1647.321727][T26448] nfc_register_device+0x11f/0x3e0 [ 1647.321766][T26448] nci_register_device+0x7f1/0xb80 [ 1647.321797][T26448] ? __pfx_nci_register_device+0x10/0x10 [ 1647.321830][T26448] ? lockdep_init_map_type+0x5c/0x250 [ 1647.321887][T26448] virtual_ncidev_open+0x141/0x220 [ 1647.321915][T26448] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1647.321942][T26448] misc_open+0x26d/0x450 [ 1647.321969][T26448] ? __pfx_misc_open+0x10/0x10 [ 1647.322019][T26448] chrdev_open+0x234/0x6a0 [ 1647.322052][T26448] ? __pfx_apparmor_file_open+0x10/0x10 [ 1647.322082][T26448] ? __pfx_chrdev_open+0x10/0x10 [ 1647.322116][T26448] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1647.322158][T26448] do_dentry_open+0x6ab/0x14d0 [ 1647.322189][T26448] ? __pfx_chrdev_open+0x10/0x10 [ 1647.322228][T26448] vfs_open+0x82/0x3f0 [ 1647.322270][T26448] path_openat+0x208c/0x31a0 [ 1647.322313][T26448] ? __pfx_path_openat+0x10/0x10 [ 1647.322356][T26448] do_file_open+0x20e/0x430 [ 1647.322391][T26448] ? __pfx_do_file_open+0x10/0x10 [ 1647.322445][T26448] ? alloc_fd+0x476/0x790 [ 1647.322479][T26448] ? do_getname+0x191/0x390 [ 1647.322520][T26448] do_sys_openat2+0x10d/0x1e0 [ 1647.322561][T26448] ? __pfx_do_sys_openat2+0x10/0x10 [ 1647.322603][T26448] ? __fget_files+0x21f/0x3d0 [ 1647.322640][T26448] __x64_sys_openat+0x12d/0x210 [ 1647.322681][T26448] ? __pfx___x64_sys_openat+0x10/0x10 [ 1647.322728][T26448] ? rcu_is_watching+0x12/0xc0 [ 1647.322761][T26448] do_syscall_64+0x115/0x840 [ 1647.322798][T26448] ? clear_bhb_loop+0x40/0x90 [ 1647.322829][T26448] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1647.322856][T26448] RIP: 0033:0x7f9c5fb9ce59 [ 1647.322883][T26448] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1647.322909][T26448] RSP: 002b:00007f9c60a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1647.322935][T26448] RAX: ffffffffffffffda RBX: 00007f9c5fe15fa0 RCX: 00007f9c5fb9ce59 [ 1647.322953][T26448] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1647.322970][T26448] RBP: 00007f9c5fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1647.322986][T26448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1647.323002][T26448] R13: 00007f9c5fe16038 R14: 00007f9c5fe15fa0 R15: 00007ffc8272ef08 [ 1647.323034][T26448] [ 1648.535337][T26453] Process accounting paused [ 1649.211084][ T29] audit: type=1800 audit(1843104616.260:270): pid=26462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4837" name="version" dev="configfs" ino=120705 res=0 errno=0 [ 1649.319481][T26464] vmstat_refresh: nr_hugetlb -2048 [ 1649.468425][T26465] vmstat_refresh: nr_hugetlb -2048 [ 1649.498507][T26468] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input16 [ 1649.873927][T26472] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1649.918139][T26472] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1650.439769][ T29] audit: type=1800 audit(1843104617.490:271): pid=26480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4843" name="version" dev="configfs" ino=120804 res=0 errno=0 [ 1650.788187][T26482] FAULT_INJECTION: forcing a failure. [ 1650.788187][T26482] name failslab, interval 1, probability 0, space 0, times 0 [ 1650.888176][T26482] CPU: 0 UID: 0 PID: 26482 Comm: syz.4.4845 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1650.888219][T26482] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1650.888237][T26482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1650.888253][T26482] Call Trace: [ 1650.888262][T26482] [ 1650.888271][T26482] dump_stack_lvl+0x100/0x190 [ 1650.888322][T26482] should_fail_ex.cold+0x5/0xa [ 1650.888355][T26482] should_failslab+0xc2/0x120 [ 1650.888387][T26482] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1650.888428][T26482] ? __kernfs_new_node+0xd2/0x9f0 [ 1650.888463][T26482] __kernfs_new_node+0xd2/0x9f0 [ 1650.888495][T26482] ? __pfx___kernfs_new_node+0x10/0x10 [ 1650.888531][T26482] ? find_held_lock+0x2b/0x80 [ 1650.888563][T26482] ? kernfs_root+0xee/0x2a0 [ 1650.888589][T26482] ? kernfs_root+0xee/0x2a0 [ 1650.888624][T26482] kernfs_new_node+0x11b/0x1a0 [ 1650.888662][T26482] __kernfs_create_file+0x53/0x350 [ 1650.888705][T26482] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1650.888738][T26482] sysfs_merge_group+0x194/0x340 [ 1650.888769][T26482] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1650.888799][T26482] ? bus_add_device+0x368/0x6b0 [ 1650.888841][T26482] ? __pfx_bus_add_device+0x10/0x10 [ 1650.888876][T26482] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1650.888913][T26482] dpm_sysfs_add+0x237/0x280 [ 1650.888943][T26482] device_add+0x9ef/0x1950 [ 1650.888973][T26482] ? __pfx_device_add+0x10/0x10 [ 1650.889000][T26482] ? lockdep_init_map_type+0x5c/0x250 [ 1650.889043][T26482] ? __init_waitqueue_head+0xca/0x150 [ 1650.889079][T26482] rfkill_register+0x1ad/0xb30 [ 1650.889113][T26482] nfc_register_device+0x11f/0x3e0 [ 1650.889152][T26482] nci_register_device+0x7f1/0xb80 [ 1650.889182][T26482] ? __pfx_nci_register_device+0x10/0x10 [ 1650.889215][T26482] ? lockdep_init_map_type+0x5c/0x250 [ 1650.889269][T26482] virtual_ncidev_open+0x141/0x220 [ 1650.889298][T26482] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1650.889325][T26482] misc_open+0x26d/0x450 [ 1650.889353][T26482] ? __pfx_misc_open+0x10/0x10 [ 1650.889378][T26482] chrdev_open+0x234/0x6a0 [ 1650.889410][T26482] ? __pfx_apparmor_file_open+0x10/0x10 [ 1650.889439][T26482] ? __pfx_chrdev_open+0x10/0x10 [ 1650.889474][T26482] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1650.889515][T26482] do_dentry_open+0x6ab/0x14d0 [ 1650.889547][T26482] ? __pfx_chrdev_open+0x10/0x10 [ 1650.889587][T26482] vfs_open+0x82/0x3f0 [ 1650.889629][T26482] path_openat+0x208c/0x31a0 [ 1650.889672][T26482] ? __pfx_path_openat+0x10/0x10 [ 1650.889716][T26482] do_file_open+0x20e/0x430 [ 1650.889751][T26482] ? __pfx_do_file_open+0x10/0x10 [ 1650.889805][T26482] ? alloc_fd+0x476/0x790 [ 1650.889839][T26482] ? do_getname+0x191/0x390 [ 1650.889880][T26482] do_sys_openat2+0x10d/0x1e0 [ 1650.889920][T26482] ? __pfx_do_sys_openat2+0x10/0x10 [ 1650.889962][T26482] ? __fget_files+0x21f/0x3d0 [ 1650.889999][T26482] __x64_sys_openat+0x12d/0x210 [ 1650.890040][T26482] ? __pfx___x64_sys_openat+0x10/0x10 [ 1650.890087][T26482] ? rcu_is_watching+0x12/0xc0 [ 1650.890120][T26482] do_syscall_64+0x115/0x840 [ 1650.890157][T26482] ? clear_bhb_loop+0x40/0x90 [ 1650.890188][T26482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1650.890215][T26482] RIP: 0033:0x7f9c5fb9ce59 [ 1650.890243][T26482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1650.890269][T26482] RSP: 002b:00007f9c60a23028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1650.890293][T26482] RAX: ffffffffffffffda RBX: 00007f9c5fe15fa0 RCX: 00007f9c5fb9ce59 [ 1650.890310][T26482] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1650.890326][T26482] RBP: 00007f9c5fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1650.890342][T26482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1650.890357][T26482] R13: 00007f9c5fe16038 R14: 00007f9c5fe15fa0 R15: 00007ffc8272ef08 [ 1650.890390][T26482] [ 1653.008317][T16699] Process accounting paused [ 1653.043677][ T29] audit: type=1800 audit(1843104620.090:272): pid=26503 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4850" name="version" dev="configfs" ino=120881 res=0 errno=0 [ 1653.556411][ T9355] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1653.576177][ T9355] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1653.590298][ T9355] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1653.598639][ T9355] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1653.606623][ T9355] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1653.807610][T26505] block nbd9: NBD_DISCONNECT [ 1653.857446][T26505] block nbd9: Send disconnect failed -32 [ 1653.884106][T26505] block nbd9: shutting down sockets [ 1653.958100][T26517] netlink: 'syz.5.4854': attribute type 2 has an invalid length. [ 1654.003367][T26517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4854'. [ 1654.924512][T26532] netlink: 334 bytes leftover after parsing attributes in process `syz.5.4857'. [ 1655.741533][ T9355] Bluetooth: hci1: command tx timeout [ 1656.799771][T26508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1656.840049][T26508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1656.877221][T26508] bridge_slave_0: entered allmulticast mode [ 1656.908144][T26508] bridge_slave_0: entered promiscuous mode [ 1656.950508][T26508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1656.984977][T26508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1656.997076][ T9355] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 1657.026958][T26508] bridge_slave_1: entered allmulticast mode [ 1657.045867][T26508] bridge_slave_1: entered promiscuous mode [ 1657.249990][T26508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1657.288162][T26566] FAULT_INJECTION: forcing a failure. [ 1657.288162][T26566] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.315193][T26508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1657.345619][T26566] CPU: 0 UID: 0 PID: 26566 Comm: syz.5.4864 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1657.345662][T26566] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1657.345672][T26566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1657.345689][T26566] Call Trace: [ 1657.345710][T26566] [ 1657.345720][T26566] dump_stack_lvl+0x100/0x190 [ 1657.345770][T26566] should_fail_ex.cold+0x5/0xa [ 1657.345802][T26566] should_failslab+0xc2/0x120 [ 1657.345834][T26566] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1657.345875][T26566] ? __kernfs_new_node+0xd2/0x9f0 [ 1657.345910][T26566] __kernfs_new_node+0xd2/0x9f0 [ 1657.345942][T26566] ? __pfx___kernfs_new_node+0x10/0x10 [ 1657.345978][T26566] ? find_held_lock+0x2b/0x80 [ 1657.346017][T26566] ? kernfs_root+0xee/0x2a0 [ 1657.346044][T26566] ? kernfs_root+0xee/0x2a0 [ 1657.346078][T26566] kernfs_new_node+0x11b/0x1a0 [ 1657.346116][T26566] __kernfs_create_file+0x53/0x350 [ 1657.346158][T26566] sysfs_add_file_mode_ns+0x207/0x3c0 [ 1657.346192][T26566] sysfs_merge_group+0x194/0x340 [ 1657.346224][T26566] ? __pfx_sysfs_merge_group+0x10/0x10 [ 1657.346253][T26566] ? bus_add_device+0x368/0x6b0 [ 1657.346291][T26566] ? __pfx_bus_add_device+0x10/0x10 [ 1657.346326][T26566] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1657.346362][T26566] dpm_sysfs_add+0x237/0x280 [ 1657.346392][T26566] device_add+0x9ef/0x1950 [ 1657.346422][T26566] ? __pfx_device_add+0x10/0x10 [ 1657.346453][T26566] ? lockdep_init_map_type+0x5c/0x250 [ 1657.346496][T26566] ? __init_waitqueue_head+0xca/0x150 [ 1657.346533][T26566] rfkill_register+0x1ad/0xb30 [ 1657.346567][T26566] nfc_register_device+0x11f/0x3e0 [ 1657.346605][T26566] nci_register_device+0x7f1/0xb80 [ 1657.346636][T26566] ? __pfx_nci_register_device+0x10/0x10 [ 1657.346669][T26566] ? lockdep_init_map_type+0x5c/0x250 [ 1657.346721][T26566] virtual_ncidev_open+0x141/0x220 [ 1657.346749][T26566] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1657.346776][T26566] misc_open+0x26d/0x450 [ 1657.346802][T26566] ? __pfx_misc_open+0x10/0x10 [ 1657.346828][T26566] chrdev_open+0x234/0x6a0 [ 1657.346861][T26566] ? __pfx_apparmor_file_open+0x10/0x10 [ 1657.346889][T26566] ? __pfx_chrdev_open+0x10/0x10 [ 1657.346924][T26566] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 1657.346965][T26566] do_dentry_open+0x6ab/0x14d0 [ 1657.346996][T26566] ? __pfx_chrdev_open+0x10/0x10 [ 1657.347042][T26566] vfs_open+0x82/0x3f0 [ 1657.347085][T26566] path_openat+0x208c/0x31a0 [ 1657.347128][T26566] ? __pfx_path_openat+0x10/0x10 [ 1657.347173][T26566] do_file_open+0x20e/0x430 [ 1657.347208][T26566] ? __pfx_do_file_open+0x10/0x10 [ 1657.347265][T26566] ? alloc_fd+0x476/0x790 [ 1657.347299][T26566] ? do_getname+0x191/0x390 [ 1657.347340][T26566] do_sys_openat2+0x10d/0x1e0 [ 1657.347387][T26566] ? __pfx_do_sys_openat2+0x10/0x10 [ 1657.347430][T26566] ? __fget_files+0x21f/0x3d0 [ 1657.347466][T26566] __x64_sys_openat+0x12d/0x210 [ 1657.347508][T26566] ? __pfx___x64_sys_openat+0x10/0x10 [ 1657.347554][T26566] ? rcu_is_watching+0x12/0xc0 [ 1657.347587][T26566] do_syscall_64+0x115/0x840 [ 1657.347623][T26566] ? clear_bhb_loop+0x40/0x90 [ 1657.347654][T26566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1657.347681][T26566] RIP: 0033:0x7f145279ce59 [ 1657.347702][T26566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1657.347727][T26566] RSP: 002b:00007f1453717028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1657.347752][T26566] RAX: ffffffffffffffda RBX: 00007f1452a15fa0 RCX: 00007f145279ce59 [ 1657.347769][T26566] RDX: 0000000000000002 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 1657.347786][T26566] RBP: 00007f1452832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1657.347802][T26566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1657.347817][T26566] R13: 00007f1452a16038 R14: 00007f1452a15fa0 R15: 00007fff45b9d228 [ 1657.347850][T26566] [ 1658.256249][ T9355] Bluetooth: hci1: command tx timeout [ 1659.025104][T26115] Bluetooth: hci0: command 0x0c1a tx timeout [ 1659.649184][T26508] team0: Port device team_slave_0 added [ 1659.674959][T26508] team0: Port device team_slave_1 added [ 1659.757938][T26508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1659.780291][T26508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1659.844682][T26508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1659.912495][T26508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1659.939291][T26508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1660.035754][T26508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1660.303060][T26115] Bluetooth: hci1: command tx timeout [ 1660.720112][T26508] hsr_slave_0: entered promiscuous mode [ 1660.744376][T26508] hsr_slave_1: entered promiscuous mode [ 1660.769407][T26508] debugfs: 'hsr0' already exists in 'hsr' [ 1660.797105][T26508] Cannot create hsr debugfs directory [ 1661.109783][T26115] Bluetooth: hci0: command 0x0c1a tx timeout [ 1661.709423][T26588] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 1662.024186][T26592] FAULT_INJECTION: forcing a failure. [ 1662.024186][T26592] name failslab, interval 1, probability 0, space 0, times 0 [ 1662.059335][T26592] CPU: 0 UID: 0 PID: 26592 Comm: syz.4.4871 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1662.059378][T26592] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1662.059388][T26592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1662.059403][T26592] Call Trace: [ 1662.059412][T26592] [ 1662.059422][T26592] dump_stack_lvl+0x100/0x190 [ 1662.059472][T26592] should_fail_ex.cold+0x5/0xa [ 1662.059505][T26592] should_failslab+0xc2/0x120 [ 1662.059536][T26592] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1662.059578][T26592] ? vm_area_dup+0x27/0x8e0 [ 1662.059614][T26592] ? __vma_start_write+0x17f/0x280 [ 1662.059656][T26592] vm_area_dup+0x27/0x8e0 [ 1662.059702][T26592] dup_mmap+0x6f6/0x21b0 [ 1662.059748][T26592] ? __pfx_dup_mmap+0x10/0x10 [ 1662.059781][T26592] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1662.059823][T26592] ? __lock_acquire+0x4a5/0x2630 [ 1662.059865][T26592] ? find_held_lock+0x2b/0x80 [ 1662.059896][T26592] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1662.060020][T26592] copy_process+0x6c78/0x7ed0 [ 1662.060072][T26592] ? __pfx_copy_process+0x10/0x10 [ 1662.060108][T26592] ? find_held_lock+0x2b/0x80 [ 1662.060144][T26592] ? futex_private_hash_put+0x107/0x1c0 [ 1662.060192][T26592] kernel_clone+0x176/0x9e0 [ 1662.060229][T26592] ? __pfx_kernel_clone+0x10/0x10 [ 1662.060280][T26592] __do_sys_clone+0xd9/0x120 [ 1662.060316][T26592] ? __pfx___do_sys_clone+0x10/0x10 [ 1662.060351][T26592] ? __fget_files+0x21f/0x3d0 [ 1662.060398][T26592] ? rcu_is_watching+0x12/0xc0 [ 1662.060431][T26592] do_syscall_64+0x115/0x840 [ 1662.060467][T26592] ? clear_bhb_loop+0x40/0x90 [ 1662.060498][T26592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1662.060527][T26592] RIP: 0033:0x7f9c5fb9ce59 [ 1662.060548][T26592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1662.060572][T26592] RSP: 002b:00007f9c60a22fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1662.060597][T26592] RAX: ffffffffffffffda RBX: 00007f9c5fe15fa0 RCX: 00007f9c5fb9ce59 [ 1662.060614][T26592] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1662.060630][T26592] RBP: 00007f9c5fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1662.060646][T26592] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1662.060661][T26592] R13: 00007f9c5fe16038 R14: 00007f9c5fe15fa0 R15: 00007ffc8272ef08 [ 1662.060700][T26592] [ 1662.661524][T21708] Bluetooth: hci1: command tx timeout [ 1664.894875][T26616] FAULT_INJECTION: forcing a failure. [ 1664.894875][T26616] name failslab, interval 1, probability 0, space 0, times 0 [ 1664.923554][T26616] CPU: 0 UID: 0 PID: 26616 Comm: syz.4.4878 Tainted: G U L syzkaller #0 PREEMPT(full) [ 1664.923598][T26616] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1664.923608][T26616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1664.923623][T26616] Call Trace: [ 1664.923632][T26616] [ 1664.923642][T26616] dump_stack_lvl+0x100/0x190 [ 1664.923691][T26616] should_fail_ex.cold+0x5/0xa [ 1664.923723][T26616] should_failslab+0xc2/0x120 [ 1664.923754][T26616] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 1664.923796][T26616] ? vm_area_dup+0x27/0x8e0 [ 1664.923831][T26616] ? __vma_start_write+0x17f/0x280 [ 1664.923873][T26616] vm_area_dup+0x27/0x8e0 [ 1664.923913][T26616] dup_mmap+0x6f6/0x21b0 [ 1664.923959][T26616] ? __pfx_dup_mmap+0x10/0x10 [ 1664.923992][T26616] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1664.924033][T26616] ? __lock_acquire+0x4a5/0x2630 [ 1664.924076][T26616] ? find_held_lock+0x2b/0x80 [ 1664.924107][T26616] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 1664.924169][T26616] copy_process+0x6c78/0x7ed0 [ 1664.924203][T26616] ? __futex_wait+0x256/0x300 [ 1664.924253][T26616] ? __pfx_copy_process+0x10/0x10 [ 1664.924304][T26616] ? futex_hash+0x141/0x370 [ 1664.924376][T26616] kernel_clone+0x176/0x9e0 [ 1664.924409][T26616] ? __pfx_futex_wait+0x10/0x10 [ 1664.924444][T26616] ? __pfx_kernel_clone+0x10/0x10 [ 1664.924495][T26616] __do_sys_clone+0xd9/0x120 [ 1664.924531][T26616] ? __pfx___do_sys_clone+0x10/0x10 [ 1664.924567][T26616] ? __fget_files+0x21f/0x3d0 [ 1664.924616][T26616] ? rcu_is_watching+0x12/0xc0 [ 1664.924650][T26616] do_syscall_64+0x115/0x840 [ 1664.924686][T26616] ? clear_bhb_loop+0x40/0x90 [ 1664.924717][T26616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.924744][T26616] RIP: 0033:0x7f9c5fb9ce59 [ 1664.924765][T26616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1664.924791][T26616] RSP: 002b:00007f9c60a22fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1664.924815][T26616] RAX: ffffffffffffffda RBX: 00007f9c5fe15fa0 RCX: 00007f9c5fb9ce59 [ 1664.924832][T26616] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1664.924848][T26616] RBP: 00007f9c5fc32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1664.924864][T26616] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1664.924880][T26616] R13: 00007f9c5fe16038 R14: 00007f9c5fe15fa0 R15: 00007ffc8272ef08 [ 1664.924913][T26616] [ 1666.098802][ T29] audit: type=1800 audit(1843104633.150:273): pid=26624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.4880" name="version" dev="configfs" ino=121576 res=0 errno=0 [ 1666.289720][T21708] Bluetooth: hci0: unexpected event for opcode 0x7c89 [ 1668.704552][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.721845][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1671.510960][T26655] bond0: invalid ARP target specified [ 1675.115327][ T9355] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1675.136838][ T9355] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1675.145320][ T9355] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1675.157657][ T9355] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1675.168466][ T9355] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1677.034761][T26657] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.059096][T26657] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.091456][T26657] bridge_slave_0: entered allmulticast mode [ 1677.114521][T26657] bridge_slave_0: entered promiscuous mode [ 1677.144382][T26657] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.173919][T26657] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.197649][T26657] bridge_slave_1: entered allmulticast mode [ 1677.224348][T26657] bridge_slave_1: entered promiscuous mode [ 1677.264504][ T9355] Bluetooth: hci5: command tx timeout [ 1677.339973][T26657] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1677.374635][T26657] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1677.458785][T26657] team0: Port device team_slave_0 added [ 1677.477857][T26657] team0: Port device team_slave_1 added [ 1677.546046][T26657] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1677.563201][T26657] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.621377][T26657] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1677.655520][T26657] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1677.671248][T26657] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1677.732846][T26657] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.857110][T26657] hsr_slave_0: entered promiscuous mode [ 1677.873033][T26657] hsr_slave_1: entered promiscuous mode [ 1677.892594][T26657] debugfs: 'hsr0' already exists in 'hsr' [ 1677.911742][T26657] Cannot create hsr debugfs directory [ 1679.341572][ T9355] Bluetooth: hci5: command tx timeout [ 1681.421661][ T9355] Bluetooth: hci5: command tx timeout [ 1683.501521][ T9355] Bluetooth: hci5: command tx timeout [ 1684.104747][T21708] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1684.127779][T21708] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1684.137511][T21708] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1684.152146][T21708] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1684.161784][T21708] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1685.728372][T26676] bridge0: port 1(bridge_slave_0) entered blocking state [ 1685.754656][T26676] bridge0: port 1(bridge_slave_0) entered disabled state [ 1685.774627][T26676] bridge_slave_0: entered allmulticast mode [ 1685.795743][T26676] bridge_slave_0: entered promiscuous mode [ 1685.813784][T26676] bridge0: port 2(bridge_slave_1) entered blocking state [ 1685.835204][T26676] bridge0: port 2(bridge_slave_1) entered disabled state [ 1685.852476][T26676] bridge_slave_1: entered allmulticast mode [ 1685.873045][T26676] bridge_slave_1: entered promiscuous mode [ 1685.955650][T26676] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1685.996294][T26676] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1686.075692][T26676] team0: Port device team_slave_0 added [ 1686.094497][T26676] team0: Port device team_slave_1 added [ 1686.163742][T26676] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1686.181325][T26676] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.227409][T21708] Bluetooth: hci6: command tx timeout [ 1686.263467][T26676] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1686.294589][T26676] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1686.310242][T26676] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1686.424462][T26676] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1686.440674][T22707] Process accounting resumed [ 1686.640251][T26676] hsr_slave_0: entered promiscuous mode [ 1686.665653][T26676] hsr_slave_1: entered promiscuous mode [ 1686.694444][T26676] debugfs: 'hsr0' already exists in 'hsr' [ 1686.717845][T26676] Cannot create hsr debugfs directory [ 1686.895852][ T9355] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1686.918634][ T9355] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1686.929117][ T9355] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1686.948628][ T9355] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1686.956355][ T9355] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1688.301819][ T9355] Bluetooth: hci6: command tx timeout [ 1688.378370][T26694] bridge0: port 1(bridge_slave_0) entered blocking state [ 1688.396983][T26694] bridge0: port 1(bridge_slave_0) entered disabled state [ 1688.421542][T26694] bridge_slave_0: entered allmulticast mode [ 1688.429109][T26694] bridge_slave_0: entered promiscuous mode [ 1688.447093][T26694] bridge0: port 2(bridge_slave_1) entered blocking state [ 1688.472792][T26694] bridge0: port 2(bridge_slave_1) entered disabled state [ 1688.491514][T26694] bridge_slave_1: entered allmulticast mode [ 1688.507877][T26694] bridge_slave_1: entered promiscuous mode [ 1688.611771][T26694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1688.634580][T26694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1688.718492][T26694] team0: Port device team_slave_0 added [ 1688.737264][T26694] team0: Port device team_slave_1 added [ 1688.825881][T26694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1688.841321][T26694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1688.913967][T26694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1688.950564][T26694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1688.971584][T26694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1689.023517][ T9355] Bluetooth: hci7: command tx timeout [ 1689.042769][T26694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1689.208771][T26694] hsr_slave_0: entered promiscuous mode [ 1689.233321][T26694] hsr_slave_1: entered promiscuous mode [ 1689.245123][T26694] debugfs: 'hsr0' already exists in 'hsr' [ 1689.262695][T26694] Cannot create hsr debugfs directory [ 1690.381501][ T9355] Bluetooth: hci6: command tx timeout [ 1691.101931][ T9355] Bluetooth: hci7: command tx timeout [ 1692.461485][ T9355] Bluetooth: hci6: command tx timeout [ 1693.181512][ T9355] Bluetooth: hci7: command tx timeout [ 1695.261651][ T9355] Bluetooth: hci7: command tx timeout [ 1714.186232][T21708] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1714.207222][T21708] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1714.215613][T21708] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1714.227134][T21708] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1714.235572][T21708] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1715.516627][T26715] bridge0: port 1(bridge_slave_0) entered blocking state [ 1715.534507][T26715] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.552058][T26715] bridge_slave_0: entered allmulticast mode [ 1715.566489][T26715] bridge_slave_0: entered promiscuous mode [ 1715.594394][T26715] bridge0: port 2(bridge_slave_1) entered blocking state [ 1715.614629][T26715] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.632173][T26715] bridge_slave_1: entered allmulticast mode [ 1715.653557][T26715] bridge_slave_1: entered promiscuous mode [ 1715.730230][T26715] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1715.765501][T26715] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1715.856047][T26715] team0: Port device team_slave_0 added [ 1715.875527][T26715] team0: Port device team_slave_1 added [ 1715.954487][T26715] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1715.971374][T26715] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.042324][T26715] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1716.073653][T26715] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1716.080634][T26715] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1716.161722][T26715] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1716.279016][T26715] hsr_slave_0: entered promiscuous mode [ 1716.294582][T26715] hsr_slave_1: entered promiscuous mode [ 1716.302144][T21708] Bluetooth: hci8: command tx timeout [ 1716.322486][T26715] debugfs: 'hsr0' already exists in 'hsr' [ 1716.333438][T26715] Cannot create hsr debugfs directory [ 1718.381512][T21708] Bluetooth: hci8: command tx timeout [ 1720.461520][T21708] Bluetooth: hci8: command tx timeout [ 1722.541670][T21708] Bluetooth: hci8: command tx timeout [ 1730.144705][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.151041][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1735.668382][ T9355] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1735.681609][ T9355] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1735.698192][ T9355] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1735.711018][ T9355] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1735.724943][ T9355] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1736.987115][T26739] bridge0: port 1(bridge_slave_0) entered blocking state [ 1737.011314][T26739] bridge0: port 1(bridge_slave_0) entered disabled state [ 1737.025395][T26739] bridge_slave_0: entered allmulticast mode [ 1737.045030][T26739] bridge_slave_0: entered promiscuous mode [ 1737.066617][T26739] bridge0: port 2(bridge_slave_1) entered blocking state [ 1737.092126][T26739] bridge0: port 2(bridge_slave_1) entered disabled state [ 1737.100845][T26739] bridge_slave_1: entered allmulticast mode [ 1737.121697][T26739] bridge_slave_1: entered promiscuous mode [ 1737.202575][T26739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1737.235693][T26739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1737.315937][T26739] team0: Port device team_slave_0 added [ 1737.335836][T26739] team0: Port device team_slave_1 added [ 1737.407737][T26739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1737.425899][T26739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.495877][T26739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1737.525016][T26739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1737.541470][T26739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1737.613070][T26739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1737.740006][T26739] hsr_slave_0: entered promiscuous mode [ 1737.762735][T26739] hsr_slave_1: entered promiscuous mode [ 1737.783157][T26739] debugfs: 'hsr0' already exists in 'hsr' [ 1737.789055][T26739] Cannot create hsr debugfs directory [ 1737.823020][ T9355] Bluetooth: hci9: command tx timeout [ 1739.901467][ T9355] Bluetooth: hci9: command tx timeout [ 1741.981612][ T9355] Bluetooth: hci9: command tx timeout [ 1744.061472][ T9355] Bluetooth: hci9: command tx timeout [ 1744.684619][T21708] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1744.707709][T21708] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1744.729791][T21708] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1744.738303][T21708] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1744.746300][T21708] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1746.326208][T26758] bridge0: port 1(bridge_slave_0) entered blocking state [ 1746.356752][T26758] bridge0: port 1(bridge_slave_0) entered disabled state [ 1746.385734][T26758] bridge_slave_0: entered allmulticast mode [ 1746.410793][T26758] bridge_slave_0: entered promiscuous mode [ 1746.429478][T26758] bridge0: port 2(bridge_slave_1) entered blocking state [ 1746.454842][T26758] bridge0: port 2(bridge_slave_1) entered disabled state [ 1746.471604][T26758] bridge_slave_1: entered allmulticast mode [ 1746.487482][T26758] bridge_slave_1: entered promiscuous mode [ 1746.575348][T26758] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1746.604643][T26758] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1746.688257][T26758] team0: Port device team_slave_0 added [ 1746.709196][T26758] team0: Port device team_slave_1 added [ 1746.777284][T26758] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1746.799470][T26758] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1746.867946][ T9355] Bluetooth: hci10: command tx timeout [ 1746.887031][T26758] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1746.939104][T26758] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1746.973555][T26758] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1747.074748][T26758] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1747.243613][T26758] hsr_slave_0: entered promiscuous mode [ 1747.273570][T26758] hsr_slave_1: entered promiscuous mode [ 1747.296664][T26758] debugfs: 'hsr0' already exists in 'hsr' [ 1747.327057][T26758] Cannot create hsr debugfs directory [ 1747.346645][T26777] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1747.365181][T26777] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1747.377437][T26777] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1747.388709][T26777] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1747.396513][T26777] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1747.595675][T26777] Bluetooth: hci2: command 0x0406 tx timeout [ 1748.902398][T26776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1748.921761][T26776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1748.941427][T21708] Bluetooth: hci10: command tx timeout [ 1748.950542][T26776] bridge_slave_0: entered allmulticast mode [ 1748.965966][T26776] bridge_slave_0: entered promiscuous mode [ 1748.984117][T26776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1749.004461][T26776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1749.027496][T26776] bridge_slave_1: entered allmulticast mode [ 1749.045056][T26776] bridge_slave_1: entered promiscuous mode [ 1749.130520][T26776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1749.166315][T26776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1749.248559][T26776] team0: Port device team_slave_0 added [ 1749.276528][T26776] team0: Port device team_slave_1 added [ 1749.351982][T26776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1749.373384][T26776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.441579][T26776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1749.464854][T26776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1749.483185][T26776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1749.525640][T21708] Bluetooth: hci11: command tx timeout [ 1749.565212][T26776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1749.673436][T26776] hsr_slave_0: entered promiscuous mode [ 1749.692607][T26776] hsr_slave_1: entered promiscuous mode [ 1749.700311][T26776] debugfs: 'hsr0' already exists in 'hsr' [ 1749.721715][T26776] Cannot create hsr debugfs directory [ 1751.021374][T21708] Bluetooth: hci10: command tx timeout [ 1751.581473][T21708] Bluetooth: hci11: command tx timeout [ 1753.101344][T21708] Bluetooth: hci10: command tx timeout [ 1753.661468][T21708] Bluetooth: hci11: command tx timeout [ 1755.743169][T21708] Bluetooth: hci11: command tx timeout [ 1774.214739][T21708] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1774.237192][T21708] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1774.250179][T21708] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1774.261354][T21708] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1774.274427][T21708] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1775.605169][T26797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.622754][T26797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1775.642608][T26797] bridge_slave_0: entered allmulticast mode [ 1775.663033][T26797] bridge_slave_0: entered promiscuous mode [ 1775.675662][T26797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1775.693129][T26797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1775.715538][T26797] bridge_slave_1: entered allmulticast mode [ 1775.735971][T26797] bridge_slave_1: entered promiscuous mode [ 1775.812590][T26797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1775.853043][T26797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1775.936304][T26797] team0: Port device team_slave_0 added [ 1775.958922][T26797] team0: Port device team_slave_1 added [ 1776.031663][T26797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1776.051046][T26797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.112105][T26797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1776.150194][T26797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1776.173088][T26797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1776.260489][T26797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1776.374287][T26797] hsr_slave_0: entered promiscuous mode [ 1776.383423][T26777] Bluetooth: hci12: command tx timeout [ 1776.397403][T26797] hsr_slave_1: entered promiscuous mode [ 1776.413835][T26797] debugfs: 'hsr0' already exists in 'hsr' [ 1776.431943][T26797] Cannot create hsr debugfs directory [ 1778.302406][T26777] Bluetooth: hci1: command 0x0406 tx timeout [ 1778.461528][T21708] Bluetooth: hci12: command tx timeout [ 1780.541369][T21708] Bluetooth: hci12: command tx timeout [ 1782.621849][T26777] Bluetooth: hci12: command tx timeout [ 1788.381748][ T30] INFO: task syz-executor:26206 blocked for more than 143 seconds. [ 1788.390277][ T30] Tainted: G U L syzkaller #0 [ 1788.406436][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1788.431559][ T30] task:syz-executor state:D stack:24200 pid:26206 tgid:26206 ppid:1 task_flags:0x480140 flags:0x00080003 [ 1788.468276][ T30] Call Trace: [ 1788.479267][ T30] [ 1788.488938][ T30] __schedule+0x1295/0x67a0 [ 1788.504542][ T30] ? __pfx___schedule+0x10/0x10 [ 1788.527527][ T30] ? find_held_lock+0x2b/0x80 [ 1788.547305][ T30] ? schedule+0x2bf/0x390 [ 1788.562410][ T30] schedule+0xdd/0x390 [ 1788.573226][ T30] schedule_timeout+0x1b2/0x280 [ 1788.587554][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1788.604149][ T30] ? mark_held_locks+0x40/0x70 [ 1788.639060][ T30] __wait_for_common+0x2e7/0x4c0 [ 1788.651692][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1788.666011][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1788.684464][ T30] remove_one+0x312/0x420 [ 1788.706428][ T30] ? find_next_child+0x18f/0x280 [ 1788.721222][ T30] __simple_recursive_removal+0x148/0x5c0 [ 1788.738120][ T30] ? __pfx_remove_one+0x10/0x10 [ 1788.754910][ T30] debugfs_remove+0x5d/0x80 [ 1788.772013][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 1788.801299][ T30] nsim_dev_reload_destroy+0x144/0x4a0 [ 1788.814837][ T30] nsim_drv_remove+0x52/0x1e0 [ 1788.827422][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 1788.847540][ T30] device_remove+0xcb/0x180 [ 1788.867200][ T30] device_release_driver_internal+0x44e/0x620 [ 1788.901318][ T30] bus_remove_device+0x2bc/0x560 [ 1788.906396][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 1788.923027][ T30] ? __pfx_device_remove_attrs+0x10/0x10 [ 1788.942761][ T30] device_del+0x376/0x9b0 [ 1788.958299][ T30] ? __pfx_device_del+0x10/0x10 [ 1788.976221][ T30] ? __lock_acquire+0x4a5/0x2630 [ 1788.992517][ T30] device_unregister+0x1d/0xe0 [ 1789.012687][ T30] del_device_store+0x346/0x480 [ 1789.032975][ T30] ? __pfx_del_device_store+0x10/0x10 [ 1789.052086][ T30] ? find_held_lock+0x2b/0x80 [ 1789.072488][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 1789.089966][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 1789.111257][ T30] ? __pfx_del_device_store+0x10/0x10 [ 1789.135352][ T30] bus_attr_store+0x74/0xb0 [ 1789.171305][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 1789.185879][ T30] sysfs_kf_write+0xf2/0x150 [ 1789.213159][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 1789.231611][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1789.243527][ T30] vfs_write+0x6ac/0x1070 [ 1789.273623][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 1789.279517][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1789.292487][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1789.321212][ T30] ksys_write+0x12a/0x250 [ 1789.331282][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1789.339419][ T30] ? rcu_is_watching+0x12/0xc0 [ 1789.358735][ T30] do_syscall_64+0x115/0x840 [ 1789.375667][ T30] ? clear_bhb_loop+0x40/0x90 [ 1789.394273][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1789.422514][ T30] RIP: 0033:0x7f580315d68e [ 1789.431496][ T30] RSP: 002b:00007ffe4addde28 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1789.461211][ T30] RAX: ffffffffffffffda RBX: 000055557eb71500 RCX: 00007f580315d68e [ 1789.492977][ T30] RDX: 0000000000000001 RSI: 00007ffe4adddeb0 RDI: 0000000000000005 [ 1789.515537][ T30] RBP: 00007f58032335f2 R08: 0000000000000000 R09: 0000000000000000 [ 1789.539846][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1789.568842][ T30] R13: 00007ffe4adddeb0 R14: 00007f5803f44620 R15: 0000000000000003 [ 1789.600215][ T30] [ 1789.611633][ T30] INFO: task syz.3.4815:26366 blocked for more than 144 seconds. [ 1789.712961][ T30] Tainted: G U L syzkaller #0 [ 1789.736565][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1789.782641][ T30] task:syz.3.4815 state:D stack:26952 pid:26366 tgid:26365 ppid:16699 task_flags:0x400140 flags:0x00080002 [ 1789.812739][ T30] Call Trace: [ 1789.829998][ T30] [ 1789.839311][ T30] __schedule+0x1295/0x67a0 [ 1789.859203][ T30] ? __pfx___schedule+0x10/0x10 [ 1789.878564][ T30] ? find_held_lock+0x2b/0x80 [ 1789.901370][ T30] ? schedule+0x2bf/0x390 [ 1789.911387][ T30] schedule+0xdd/0x390 [ 1789.923085][ T30] schedule_preempt_disabled+0x13/0x30 [ 1789.940971][ T30] __mutex_lock+0xced/0x1b10 [ 1789.967434][ T30] ? devlink_health_report+0x66c/0xb20 [ 1789.988207][ T30] ? __pfx_devlink_nl_notify_filter+0x10/0x10 [ 1790.011273][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1790.024534][ T30] ? devlink_recover_notify.constprop.0+0x443/0x550 [ 1790.045627][ T30] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 1790.116919][ T30] ? devlink_health_report+0x66c/0xb20 [ 1790.176399][ T30] devlink_health_report+0x66c/0xb20 [ 1790.206362][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 1790.223104][ T30] ? _copy_from_user+0x59/0xd0 [ 1790.230520][ T30] nsim_dev_health_break_write+0x166/0x210 [ 1790.251230][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1790.257700][ T30] full_proxy_write+0x135/0x1a0 [ 1790.272768][ T30] vfs_write+0x2aa/0x1070 [ 1790.279097][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 1790.292901][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1790.306530][ T30] ? __fget_files+0x215/0x3d0 [ 1790.321435][ T30] ? __fget_files+0x21f/0x3d0 [ 1790.326289][ T30] ksys_write+0x12a/0x250 [ 1790.341226][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1790.346169][ T30] ? rcu_is_watching+0x12/0xc0 [ 1790.351005][ T30] do_syscall_64+0x115/0x840 [ 1790.368059][ T30] ? clear_bhb_loop+0x40/0x90 [ 1790.384458][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1790.401241][ T30] RIP: 0033:0x7ff35419ce59 [ 1790.405836][ T30] RSP: 002b:00007ff355123028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1790.431224][ T30] RAX: ffffffffffffffda RBX: 00007ff354415fa0 RCX: 00007ff35419ce59 [ 1790.442133][ T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000005 [ 1790.462243][ T30] RBP: 00007ff354232d6f R08: 0000000000000000 R09: 0000000000000000 [ 1790.482829][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1790.501357][ T30] R13: 00007ff354416038 R14: 00007ff354415fa0 R15: 00007ffe39cdea88 [ 1790.522743][ T30] [ 1790.525944][ T30] [ 1790.525944][ T30] Showing all locks held in the system: [ 1790.612005][ T30] 1 lock held by khungtaskd/30: [ 1790.628661][ T30] #0: ffffffff8e7e5360 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 1790.651272][ T30] 1 lock held by udevd/5001: [ 1790.661550][ T30] 7 locks held by syz-executor/26206: [ 1790.671417][ T30] #0: ffff8880352f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1790.694312][ T30] #1: ffff888065858480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1790.721339][ T30] #2: ffff8880275c1f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1790.741587][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1790.771187][ T30] #4: ffff888057682128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 1790.801294][ T30] #5: ffff888057681258 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 1790.825639][ T30] #6: ffff88803690b160 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 1790.851392][ T30] 3 locks held by syz.3.4815/26366: [ 1790.867987][ T30] #0: ffff888075b2e470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1790.895262][ T30] #1: ffff8880202d8410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1790.921183][ T30] #2: ffff888057681258 (&devlink->lock_key#7){+.+.}-{4:4}, at: devlink_health_report+0x66c/0xb20 [ 1790.946027][ T30] 4 locks held by syz-executor/26508: [ 1790.961196][ T30] #0: ffff8880352f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1790.980744][ T30] #1: ffff8880338fc480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1791.001586][ T30] #2: ffff8880275c1f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1791.022542][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1791.043935][ T30] 5 locks held by syz.5.4866/26578: [ 1791.061239][ T30] #0: ffff888033453970 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 1791.081268][ T30] #1: ffff8880352f6410 (sb_writers#7){.+.+}-{0:0}, at: do_writev+0x13e/0x340 [ 1791.102426][ T30] #2: ffff888081e19c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1791.121183][ T30] #3: ffff8880275c0008 (kn->active#53){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1791.141569][ T30] #4: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: new_device_store+0xfe/0x700 [ 1791.169757][ T30] 2 locks held by syz.4.4887/26654: [ 1791.179676][ T30] #0: ffff8880202d8410 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 1791.203910][ T30] #1: ffff88803690b160 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 1791.231194][ T30] 4 locks held by syz-executor/26657: [ 1791.241504][ T30] #0: ffff8880352f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1791.264632][ T30] #1: ffff88801c7a3480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1791.282746][ T30] #2: ffff8880275c1f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1791.308873][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1791.331208][ T30] 4 locks held by syz-executor/26676: [ 1791.341993][ T30] #0: ffff8880352f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1791.361464][ T30] #1: ffff88805c710880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1791.390663][ T30] #2: ffff8880275c1f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1791.411350][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1791.441255][ T30] 4 locks held by syz-executor/26694: [ 1791.446698][ T30] #0: ffff8880352f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1791.471182][ T30] #1: ffff8880ac14ec80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1791.492979][ T30] #2: ffff8880275c1f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1791.511175][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1791.541330][ T30] 4 locks held by syz-executor/26715: [ 1791.546792][ T30] #0: ffff8880352f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1791.571200][ T30] #1: ffff88805ac48480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1791.590243][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.598990][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1791.611237][ T30] #2: ffff8880275c1f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1791.642551][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1791.666780][ T30] 4 locks held by syz-executor/26739: [ 1791.673775][ T30] #0: ffff8880352f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1791.692996][ T30] #1: ffff88803befec80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1791.719863][ T30] #2: ffff8880275c1f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1791.745356][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1791.771549][ T30] 4 locks held by syz-executor/26758: [ 1791.778434][ T30] #0: ffff8880352f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1791.800078][ T30] #1: ffff8880ac9b0c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1791.820939][ T30] #2: ffff8880275c1f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1791.851489][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1791.871283][ T30] 4 locks held by syz-executor/26776: [ 1791.881405][ T30] #0: ffff8880352f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1791.908057][ T30] #1: ffff88802630c880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1791.931275][ T30] #2: ffff8880275c1f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1791.952922][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1791.982098][ T30] 4 locks held by syz-executor/26797: [ 1791.987550][ T30] #0: ffff8880352f6410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 1792.011481][ T30] #1: ffff888088951080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 1792.031373][ T30] #2: ffff8880275c1f08 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 1792.054262][ T30] #3: ffffffff8fb87a80 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 1792.082672][ T30] [ 1792.086545][ T30] ============================================= [ 1792.086545][ T30] [ 1792.234973][ T30] NMI backtrace for cpu 0 [ 1792.234998][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1792.235034][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1792.235044][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1792.235059][ T30] Call Trace: [ 1792.235067][ T30] [ 1792.235076][ T30] dump_stack_lvl+0x100/0x190 [ 1792.235123][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 1792.235152][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1792.235178][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 1792.235210][ T30] sys_info+0x141/0x190 [ 1792.235231][ T30] watchdog+0xcb1/0x1030 [ 1792.235271][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1792.235305][ T30] ? __pfx_watchdog+0x10/0x10 [ 1792.235344][ T30] ? __kthread_parkme+0x18c/0x230 [ 1792.235380][ T30] ? kthread+0x13a/0x450 [ 1792.235414][ T30] ? __pfx_watchdog+0x10/0x10 [ 1792.235445][ T30] kthread+0x370/0x450 [ 1792.235479][ T30] ? __pfx_kthread+0x10/0x10 [ 1792.235517][ T30] ret_from_fork+0x72b/0xd50 [ 1792.235544][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1792.235570][ T30] ? __switch_to+0x800/0x1100 [ 1792.235601][ T30] ? __switch_to_asm+0x39/0x70 [ 1792.235631][ T30] ? __pfx_kthread+0x10/0x10 [ 1792.235668][ T30] ret_from_fork_asm+0x1a/0x30 [ 1792.235713][ T30] [ 1792.552760][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1792.559667][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Tainted: G U L syzkaller #0 PREEMPT(full) [ 1792.570387][ T30] Tainted: [U]=USER, [L]=SOFTLOCKUP [ 1792.575586][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1792.585662][ T30] Call Trace: [ 1792.588968][ T30] [ 1792.591919][ T30] dump_stack_lvl+0x100/0x190 [ 1792.596725][ T30] vpanic+0x552/0x970 [ 1792.600728][ T30] ? __pfx_vpanic+0x10/0x10 [ 1792.605247][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1792.611424][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 1792.617634][ T30] panic+0xd1/0xe0 [ 1792.621391][ T30] ? __pfx_panic+0x10/0x10 [ 1792.625852][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 1792.632023][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 1792.638198][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 1792.644373][ T30] ? watchdog.cold+0x1ec/0x234 [ 1792.649157][ T30] ? watchdog+0xcc1/0x1030 [ 1792.653602][ T30] watchdog.cold+0x1fd/0x234 [ 1792.658215][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1792.664047][ T30] ? __pfx_watchdog+0x10/0x10 [ 1792.668752][ T30] ? __kthread_parkme+0x18c/0x230 [ 1792.673803][ T30] ? kthread+0x13a/0x450 [ 1792.678077][ T30] ? __pfx_watchdog+0x10/0x10 [ 1792.682782][ T30] kthread+0x370/0x450 [ 1792.686877][ T30] ? __pfx_kthread+0x10/0x10 [ 1792.691494][ T30] ret_from_fork+0x72b/0xd50 [ 1792.696101][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1792.701263][ T30] ? __switch_to+0x800/0x1100 [ 1792.705989][ T30] ? __switch_to_asm+0x39/0x70 [ 1792.710801][ T30] ? __pfx_kthread+0x10/0x10 [ 1792.715425][ T30] ret_from_fork_asm+0x1a/0x30 [ 1792.720224][ T30] [ 1792.723330][ T30] Kernel Offset: disabled [ 1792.727681][ T30] Rebooting in 86400 seconds..