last executing test programs: 31.015235583s ago: executing program 0 (id=1066): mmap$auto(0xf, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) statx$auto(0x2, 0x0, 0x1000, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) sendmsg$auto_L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xd2}, 0x240040c4) r0 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x1a1f42, 0x0) openat2$auto(0xffffffffffffffff, 0x0, 0x0, 0x9) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/power/resume\x00', 0x189002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/pcrypt/pencrypt/parallel_cpumask\x00', 0x80302, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda1\x00', 0x2000, 0x0) socket(0x10, 0x2, 0x0) prctl$auto_PR_TIMER_CREATE_RESTORE_IDS_OFF(0x7, 0x0, 0x0, 0x9, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='*\x00%i'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x44) sendfile$auto(0x3, r2, 0x0, 0x100400000000006) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) sendfile$auto(r1, r1, 0x0, 0x1) write$auto_proc_mem_operations_base(r0, 0x0, 0x0) keyctl$auto(0x17, 0x4, 0x0, 0x400, 0x0) listen$auto(0x3, 0x83) r3 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000028c0), 0x100, 0x0) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000000)="c80d1b5d529b", 0x6) ioctl$auto_USB_RAW_IOCTL_EP_READ(r3, 0xc0085508, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) socket(0x23, 0x3, 0x80000300) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) 30.053884414s ago: executing program 0 (id=1071): mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x80d00, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x100000001, 0x4000000000df, 0x8010, 0x401, 0x8003) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x305782, 0x0) r0 = creat$auto(0x0, 0x0) ioctl$auto_SCSI_IOCTL_SEND_COMMAND(r0, 0x1, 0x0) socket(0x8, 0x3, 0x0) readv$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x3}, 0x85) getcpu$auto(0x0, &(0x7f0000000140)=0x80000000, &(0x7f0000000180)={[0x8, 0x835, 0x3, 0x7, 0x1, 0x8, 0x9, 0x8, 0x2, 0x6, 0x7fffffff, 0x81, 0x5, 0x401, 0x0, 0x7]}) r1 = syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) setfsuid$auto(0x0) sendmsg$auto_NL802154_CMD_SEND_BEACONS(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000840)={0x14, r1, 0x8, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r2, &(0x7f0000000000)="c80d1b5d399b4b", 0xfdef) 30.014860227s ago: executing program 1 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = fcntl$auto(0xffffffffffffffff, 0x3, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = pipe$auto(0x0) tee$auto(0xffffffffffffffff, r2, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) renameat2$auto(r2, &(0x7f0000000300)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', r2, &(0x7f0000000400)='./file0\x00', 0x0) prctl$auto(0x23, 0x20000040000000e, 0x7fffffffefff, 0x0, 0x0) read$auto(r3, 0x0, 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), r1) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r4, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400204}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r5, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0x5, 0x0) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 29.733316053s ago: executing program 1 (id=1074): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port8/power/runtime_status\x00', 0x2120c0, 0x0) mmap$auto(0x0, 0x4, 0xb84b, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x2000c}, 0x4, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x1, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x3, 0x8, 0x3, 0xb, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x5a7b7e00, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x2, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x2000000000, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e]}, 0x1ff, 0x2000000d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare$auto(0x40000080) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r3, 0x4004743d, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000040)=0x12fa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 28.996490428s ago: executing program 0 (id=1076): openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0201, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) set_mempolicy$auto(0x2, 0x0, 0x4) mmap$auto(0x0, 0xd561, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r2, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810006, 0xffb, 0x8000000008011, 0x3, 0x0) open(0x0, 0x22240, 0x154) socket(0x2, 0x3, 0x2) setsockopt$auto(0x3, 0x0, 0xd4, 0xfffffffffffffffc, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x1007181, 0x8a0d, 0x8, 0x7, 0x7ff, 0x89, 0x26, 0x4, 0x200000080001, 0x20384, 0xfffffffffffffff4, 0x8, 0x4, 0x30, 0x0, 0x864, 0xe, 0x22000, 0x9, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x4, 0x0, 0x3b232dd1, 0x0, 0x0, 0x0, 0x200000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}, 0x9, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000100)=0x296) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x7, 0x109, 0x7, "aab8e80600080043529f895cf5e8ec8f46cbb766439d070a00", @raw=0x9a1}, 0x6, 0x4, 0x6, @inferred, @integer64={0x442df60c, 0x81, 0x7}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) mkdir$auto(&(0x7f0000000000)='}[,&*}\x00', 0x2) getpid() mount$auto(0x0, &(0x7f0000000280)=':,\x00', &(0x7f0000000040)='nfsd\x00', 0x3, &(0x7f0000000200)) 28.856779759s ago: executing program 1 (id=1077): r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) setsockopt$auto(r0, 0x1, 0x21, 0x0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000040), r1) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r2, 0x1b, 0x70bd26, 0x25dfdbfd, {0x3, 0x0, 0x15}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x17}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 28.601937323s ago: executing program 1 (id=1079): mmap$auto(0x5, 0x400008, 0xe3, 0x15, 0xffffffffffffffff, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40a042, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0xa, 0x3, 0x3b) (async) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x4, &(0x7f0000000140)="9c15f5ea0f5a5acfc58eaac5c6e121d708d35be089844cae81003554aa44be0eef38373a50") (async, rerun: 32) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) (rerun: 32) read$auto(r0, 0x0, 0x10001) (async) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/fail-nth\x00', 0x2d41, 0x0) writev$auto(r1, &(0x7f0000000240)={0x0, 0x7}, 0x2) fcntl$auto_F_SETOWN(0xffffffffffffffff, 0x8, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x8000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) 27.717272784s ago: executing program 0 (id=1080): syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000100), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0x5f, 0x9b72, 0x2, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) fallocate$auto(r0, 0x0, 0x7, 0x4cbd5d) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cec26\x00', 0xc0000, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000180)={'\x00', 0x0, 0x5, 0x2, 0x9b7, 0x9, "fafffffc3924222ce18c1000", '\x00', "0001410c", '\x00', ["f5404de9641f0000000060c1", "6c6529a30418fffffffff300", "ef5ac4927aed9c5c00000080", ' \x00\x00\x00\x00\x00\t\x00']}) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, 0x0) write$auto(0x3, 0x0, 0x400000000000050) mmap$auto(0x0, 0x100000000, 0xe2, 0x9b72, 0x2, 0x8000) mlock2$auto(0x1, 0x8001, 0x0) r2 = socket(0xa, 0x1, 0x84) r3 = getsockopt$auto(r2, 0x0, 0x53, 0x0, 0x0) mmap$auto(0xea88, 0xb, 0xd, 0x10, 0x3, 0xffffffffffffffff) shmctl$auto_SHM_LOCK(0x6, 0xb, 0x0) madvise$auto(0x4, 0xffffffffffff0001, 0x15) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) socket(0x29, 0x2, 0x0) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400005, 0x9, 0xff, r3, 0x8000) process_vm_readv$auto(0x0, 0x0, 0x800000005, &(0x7f0000000500)={0x0, 0x1ffffffff}, 0x2, 0x0) setsockopt$auto(r1, 0x140400, 0x40000005, 0x0, 0x8000008) unshare$auto(0x40000080) mmap$auto(0x2, 0x2020009, 0x3, 0x400000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0x58602, 0x0) setfsuid$auto(0xee00) getsockopt$auto_SO_TXTIME(r2, 0x9, 0x3d, 0x0, 0x0) prctl$auto(0x23, 0x6, 0x0, 0x7e, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0003, 0x15) 27.51040986s ago: executing program 1 (id=1084): mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00', @ANYRES16, @ANYBLOB="010329bf700002dcdf2505000000feabb1471aa987110c00010005000000000000000c0001"], 0x38}, 0x1, 0x0, 0x0, 0x20008810}, 0x880) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a000500aaaaaaaaaabb00000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000f000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x6004000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) socket(0x10, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000280)=@can, 0x6a) r0 = ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002300)={'bridge0\x00'}) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x14, r2, 0x8ae36f82a2442f77, 0x70bd25, 0x25dfdbff, {0x5, 0x0, 0xf0}}, 0x14}, 0x1, 0x0, 0x0, 0x4048000}, 0x80) 27.364118525s ago: executing program 1 (id=1086): r0 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/projid_map\x00', 0x2, 0x0) mkdir$auto(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000840), 0xc0000, 0x0) ioctl$auto_RNDADDTOENTCNT2(r1, 0x40045201, &(0x7f0000000880)=0x80000001) mmap$auto(0x0, 0x9, 0xdf, 0x14, 0x401, 0x410000008000) sysfs$auto(0x2, 0x100000000000031, 0x0) fsopen$auto(0x0, 0x1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0p/sub1/xrun_injection\x00', 0xa402, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) mmap$auto(0xa, 0x20009, 0x4000000000df, 0xffffffffffffc27d, r0, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket(0x26, 0x5, 0x0) r3 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video46\x00', 0x20200, 0x0) ioctl$auto(r4, 0xc0285628, r4) write$auto(r3, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x40) getsockopt$auto(r3, 0x8, 0x270d, 0xfffffffffffffffc, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim4/ports/0/ipsec\x00', 0x30000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x4, 0x2020006, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) getxattr$auto(0x0, 0x0, 0x0, 0x4f) 26.545741751s ago: executing program 0 (id=1090): r0 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000200)="0887adaca782216e124fefe00e938c5a67c3739e56f8dd8fee31bb5198046e8ad6186d7947f6a4d7bb6106b3e470043fa4294efa331b335414cc6215d31003d4ff19940c0d066e5bc5ce4e56e52b93483dbc2875dbef28df8093ec716f2216a477ba4a3fdc81d67693bbac6977cb49ad45640bf022f30b83") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r1, 0x0, 0x40002) getdents64$auto(r1, 0x0, 0x400) r2 = prctl$auto_SECCOMP_MODE_FILTER(0x80000001, 0x2, 0xffffffffffffffff, 0x7fff, 0x3) creat$auto(&(0x7f00000002c0)='./file0\x00', 0x2) close_range$auto(r2, r0, 0x4) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) symlink$auto(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') r3 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x591001, 0x0) ioctl$auto_EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 26.327561918s ago: executing program 0 (id=1091): socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x14) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r5, r6, 0x8, 0x2, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x1) 23.985245438s ago: executing program 2 (id=1100): msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x1f, &(0x7f0000000100)={0x0, 0x5}, 0x2, 0x0, 0x7, 0xa505}, 0x2}, 0x7, 0x4008) msgrcv$auto(0xffffffff, &(0x7f0000000280)={0x9, 0x3}, 0x49db, 0xa, 0x5) shmctl$auto_SHM_LOCK(0x8001, 0xb, &(0x7f0000000200)={{0x40000, 0xee00, 0xffffffffffffffff, 0x4000, 0x57e, 0xfffff5f5, 0xd}, 0x0, 0x33c2, 0x2, 0x7, @inferred, @raw=0x7, 0x8, 0x0, &(0x7f0000000080)="2b768f55231786e491a26312db53af6b400cd6b46ba28f5eee3810a5bc57df3f8e12ed03d0fa8b6f78bac277c32bd801abc3b93b9d7049e774cf6c5298fd0b1eff753f04f7cbb960346daa636edc75fc73287386c0c4f6adc07399aa358c22a158d9d32d5811f4016f2203563cd9aed150efd36d5aa8de8848500e645871096a844db44964b03faca069875ea4c52671114c93bde07db6d7ba4074cbb609933fd8e402fa4ba27a528b46585abad644e8bad3bd", &(0x7f0000000140)="f3a030cfff56cc4e76316d6a4943b3d2f3b7fc57ea0bb6b2a7f48e7e4e72df601420bdf2228ea7f2cac1927c4941008915534a256599433c78ef95c048a187a64a25cda5f689140800fda6c07cd7438b87a86547a96c94baf56f2c93a699d16a47755c3bbc598ed3464b8280cb0f4bba9f3fe30357ee230b2b9ac7dfa92dbfae9cfb5075c4a7d6a008c00484a425a6d4d6bdb67b37"}) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000007c0)={0x139c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_MAC={0xc2, 0x6, "e376ceef4cb36fac24df7a234114235ed6572ab72ac16af8d2148a027405349d54a568b512656e43e89f1b1bd2abcc01c5064ced132845942c82f961ed98384d6d94c217956b8470d95d9355f7efdfc8a5a1415226a4d1a9c546c901d770863a0235de9b34127b57adacd017a26ade5931bb1702f35455d1bd4446fd7e55fdf03fa5538208a975ce9a450ee83e16e24a2446ba8baf87e289b50ccf77e8353a146abe9dee2422b0a6b36a8fa3c88b1088010f96f146ce07acead4fb55edc6"}, @NL80211_ATTR_STA_WME={0x1c, 0x81, 0x0, 0x1, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x10}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x38}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1e}]}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x7}, @NL80211_ATTR_NAN_FUNC={0x1278, 0xf0, 0x0, 0x1, [@typed={0x5, 0xdd, 0x0, 0x0, @str='\x00'}, @nested={0x125c, 0x99, 0x0, 0x1, [@nested={0x4, 0xf}, @typed={0x8, 0x129, 0x0, 0x0, @uid=r1}, @generic="93ca36f4d6935e0175c0d10740853a433d2a4bf647fff9e29f0ecdbdb0e3d04e29f17698376a25bc8625f7aa91aa6c1596ed51c257991d2d9cd2170dcd3fa4af9336f25f46fb64f25af536e6874edc7de0c47cf21b912096582f99ed67af47a96887ca855c2a7c6222389f28c1832fbcb629aa63886a1e9f91778c4c", @nested={0x11cf, 0xc0, 0x0, 0x1, [@nested={0x1050, 0x8a, 0x0, 0x1, [@generic="a057f86234f2643ff4dd5236c3d7f7e15af35ce26f392b915665ac342c69aa45201750f6be64cf1c0ffadb5e6c741ba787559ff1e38817fa5575a6617fc2bb44", @typed={0xc, 0xe9, 0x0, 0x0, @str='\\&(*-+}\x00'}, @generic="563111f32e1747a01b21c45c23062243a8690be1e6daec5e3d4f41c4039e3df9909eb3a1a8f302cdd4df87e5f916023fb7253fcefbc2b013d8cfb886e71d30ef625a87c943e1a30017a818818b156b7f058d9ab7f1aae56d7163283e1ddf585f8f1eb48ef5ad5936b32f7e6d66f92bf6291e81e03ceb5436abef715497078ed1a8c03344bceefb58d8d9bc7ae4537d67a036cb9ab1de8af83cd0859dcda75932b34f1200dc30d2e33161bef02ad4b7a1c0846078abc9051325d37d04e876622065de9242d2b0dfea373efb08f20c7ab4d64bb24c1cee85e02cd61e2c67b867d3305a107d07fe0817f67e824161725a1b5a74bbd27307bf76770d2d2e927c4f5ddde0f1c429e4732d159f376d225c057cc2925dd36451be2a809a1fac7fa7997874773b96a2f21af94bd73eacd81d8a7c127f36e05fc099319f719debf85499c444a88cc50fe58b03a709d21cacf7263910e0f068a5be403e9f7d218cfa62a83f9e94b01d0b33bb98dc1e59f83c72c064dc3d6661955e8fdec862420c21c9336f727c2629fe302dcbbf98e828d540c080d1a77eb9bd40a38138bb3c1163349b55d8adc4ed1500af5ca8eda1ee6efd3c789fea1b8973ebbc4c76b08beee8f23f8a5c0083e11199fdc68502560c789f225f1ad3921d4392ffaf0d9f17ee69bc5cbff2eb4ef0d362cf514b6ea69dd176779d41afe0b22c41bbf65896d57aa39564bf5b4f520e0837dfb757d201891002b57bef34469df9564d1d7236b78764e1c0d598d28d3932d0c6d9d108f0be9e622fb073c9ede2f722b4d53e1f74eb355b1cf34ff6a4c2e4b03741d631e0628e90ea60c473e5ea924ec837f549069231b6d87d6a22d41e80ed5e5b5f64d945931da551a8a97597f8f791f8e81de35c96796c51028fde0e54982b64be4f483b222308eb95b24a22ebae43069b781fcf46062f23db5970c29b6141bb2a503dc826cfb4a1e27365b698fa6d20bfd02bbfcec75dcb9754781037cd216f7bf41df1e713e868a8dee0bfcd66d0a9b5f757ee130671cb204e174e0b3febd888ca1afb41e724fdf5bd8500ce5e5b0b21d10b73442ba82aed53afbde2ff24ec581687004f5a362443bcc8fdd70d4a048ad4d6ea0073221b598176184ed840855c6e3fa993df9597204a1fa927b8b1f3b0ef3557760536600b8447f5e00039aa54c060d55d907776670ac817c9a426af4f046072dfdeeec741b6370ece057cded72cb729ef37329b10c8f538703e17dff57e1059ec2c951ac9e440188912f1ddd026cabc7a20f67ed139703ecfeecacad55c3a418fbce84c9422775a0777b1eb106d94cbc76c3f3f03ccc11680db9fe1384bdd372acf0e5236939070ea53934a3f19c868318e2b3909fdb50e6ec6abe9d2be013fba1b835be4cf07deeffb3190419e1f2c2ed48742729e07d58fafc12393c5db7d2fdc3cfcabbaab9b007eba03f8c3c07a7181a4481508dd23a89e4b9b9de3056ff28ee59224c69ed996d4d4d007e1e04e8923d33defeb9fbaaa4d884e24735ca865f09e87826f3bf20cf609fc61578d06ceeda37710ec3674369cf791412a3b046ac24fd3c6ba18d14ea85b7e81518d71759559ddfb875330651c23ef148eb41b0aaf0cca6d9d0128093618e9e7e63dafbb1cdd08e3b7c6373b3ee82ffd451100179613457575fb54ee0730a0fcb6bfc9d1791cadc0790c09a9d0aea7341600c6819feaaa61d7ea4103df36fe4512907054d021b7fcab2a88687b4c7b6723765ee19ee02ec9e80c0aa7992a6a391bf92462c306180d2ff2f38d3302cd08616d65335df7639ce361a236d06aeb73d08d024ce47e1f70107143956e9f7ad424828e42ce4c3b9c8e1814f0ca0ec790bbd4ec83dbf78e7105866b3f677d8ac85ecff455faeef38b073aabfa962510183e6e9d9089ed9345086f0a5167012bce6ccad132771890cbbfa919735b884fa7c92a8a5fa1e6938f8fb7efdf99ade652583b8ee498b0b25f729fa208a6a17f5d533848fb9f472c158d4628e0ba29c8d81d3db4b5f27de98d2baca73774e93df05e1a6f908f0d7b4f3e8dc4f915b680a55c289ea8c0415e63f787db0f25af86d4ec3feffdb43afa7357105b7f1bbf2c7d566b7d9ce9eaeb9b3cc4b49b59591da132dff07fd81cb1673926dcf9716400c6745c89e14b109a3a8489fa6a3f1e123a9d2c35d2739dfa2f5dfae27dd5b1a3365007b7d25b37b4b200815b9628b8df939d8cb41d6d085639529d86da9cb4e08592fa8f070636db5d78e3766771f7bf28e78bfec8dc3d619193dcc95abbb9b9d6f3bc9e7acd86994ef0a36f880b6af9ef8ee63c52d6bf2d98a9e352b8bff62632ad381d1944340b5a2d684ec4b36ab4c733a7c5b1b7d59f9eff2d4aef90f4c6f2bafc9e389927c99b5180521feab78b1f65240ca2586a8dd5c39fe2432f062a672b628531e062d335680fdc6d559437d133cd9e33019e3ce5b727edf83215c31488084a9f0a7fa89874801a919704a612ba05279a7af2cea26174fff283895662b332f786931d9227638e15e3291260b6853d2e03fef8d013478e33ca19e653293b63aed4bd1dffd21a9ffec1b4d3f7b5c7c15b88f3123360dd89ead7e2a3200209fc6e52fd9cd13e465c44200506edfb7fb65d530e1e430b506b71a9693eff20964dbe5cc03fd944f336129ac5a62d8963f50983f8ecf6a9bf3339dd28863f1e721d280b9f125bbbb1bdd41cc68787e10799bbf810d3a510e099a8b5413d32139727fcc09faa61a7d8aa27e015a10c0561578c27262d6cd20a5bd1b9201585f7ea375683bae9354d7edc123dcc7eaef392b6c2261873f162ed58ef761a3ce6900cc1b236e3b4fdaf8559309399b172164dd003e9e6369535de9d61d4bb60ddc4506fba1918637ff94f08ac74dbc17ab47c22c386930f6dd0b527872b9aa9b7bddf23e5ee445c5cc89b229d59799fbb40692a61620fb89057e3751f1980e0514d21455d4572dead6f2592244430004552e1f97b466faf040b652255b58405cc61580898a863a859c8954ad6b0c87c799c4ccb2031fabb6f373fd5b3e74c69dd7e911bc764baac9ff72b1bca6196071adcaa263a9613f64bad58379870d1a70d19db97a1c22fec311df456001aac00661a9e96f0d9fd003cf583a205e29ace7700c100d259aebf7b5d767ae3dd241a0414de268a2d42e881de31d194d234f2b15b2cafd0075a23ce1fcb3b1ca3e0cf041a37d272690b8352fddccf48c18760a42c12eb099d11b0d2e6b530bc4b8b478043e85c111384a5384399314bdb7a0628a5160153a3e96645d6df9295ddbfd17bea8b7d56e78c814213ef881bcf6e3db44348b3c96be2b85005d7fd07b61e27f20c5248e0d83840810ee42584a8cd8662f885d9800f6301d767997b067fc7e5bc529f860b96a134bca056c815f0971ba5b400fba0de4ff98e89d63d9667bb431ea53feda3bb76ed0c7c8015f2ad05b60924d818793833e535910a9d589d77bfa38cd038eab0e173f7818965006a59ab21fc675df2b019d7452f2b953ccb89c758dbf6ca83ca46a5693b91af580b63633976310732293f9ea4339c05ee5b59bbd3b8f5e8a8e0daff34aeb874f05de113e39b41339211146d2a2ba803b05e62946606849f1230ca7d82dd4187eadd60113e6b7a3ee0ccfcbaf3b71fac6f175928faba5cd9286b17dac9322ecf08b019a66188ab3db43a9b8a30c76c201cb480e15301144b9dafa277ee2ea238d2c317fbeb437b0d62f83bb83ad01790996069473adf1b4860131ed1d18c8f21a6a0297ea39c76857450f2fdfc57c3f3218f8f525b0edf615eb096df5071fef55717480d9040eb9d33169a235d310ea55922ad4b08eb1e545fe9e737f09ab46052dda34320fb9568e14e583a3b8ccb5f16c8e6d3486ec7888eec6c880e8404de7d88346646e9f7bd2f3d77e59c95565b10ee137e40e39d6c9e451f8a4cfd6a3576bf0266d4af5096aad7cc0b1d2905b98e9d5e472d8132320c90125162aecdade64a2dda94280656f9c1f046dbf85825640ef865261d92046c22b47e982488b47ea40a0a83266a2ce0828fe5fa956e4a72e9801dc0985a1da7c0beee880d97b5e1a415250e66ec1ee8ae5f745da45f5f835e0a983ed39f8c20e69e74fbd302636b146692ed51e06eec497a64a7b11e24fe6672a4682e1acd6d01d13410ece0dec28fcc4496a4c2a9cd4068e7e5286f06ac753f3a19e388cb766b571b324156934d27a910438dc49e63c2eabe9f8a15bae01ac36096c082a0fe828314db9154e04faee48c8748696866dde6fa11e5c29b4639cb530c85d69b79a52b84621dab490916a51ca218fc17a4d12b541c569ac3d2ed7ea5f2a5e83b468c4ac48ca68f0623e8497f4395de24e3256858818d4409796f1285b68af289213f6659826ca7b031c87231dc5825c42eabc158b13529760fd75fdec3780e130dba82c494b2095fa753fc63b902ccec2fbb2de9193011471343387b2b9206ff4eb32ce2519f2b4a3de46f4903b9127f581ca0922b1b7f727ac53c604d4a2b08da03244396d58127d4170cd42c146bce07098c02fc7c0cfc9343712046aaf05f586fb75716876041c9c4702b7e94f0ebc4b12491ec49d2f0f3b76fe3ef5fd624b18294bc4b2eabbc5b099866fd0c46f7f1f17f806c9f85766fdf01409b67aac718fdbd366c0fdb19b38e465c93f72309b113c989b671c2046bb661ae07c16c5b008c091cefd0b7eda076319fa1870dc98a9fc786505806a5ce09bb91ee0b1d6d114fad77dd856cc192add6586eae4822c7982403efd8c8b89f4446b2157ac4c30a4e360d551c6aa036123d348d130fb9eadac6a0ed9a6b97fc069a2ae5eb34d97d420d9098e7ddf791401ecda331e9ffc13efa07dba9c48f59354a966695bd7ea20d9b39b6b4d0fd1685d0c087b8770b8b6ae91ed80420f3105435cd6d8731138ec6f714109332eda0a9687f8733c8d90db8e414fb76e7e4a0d35cafff1d2111d263252064efac3e045a4a5c35cfcdc26d2ce63c6e6952aa22cdae019517d9b3f8c325906c4c7d47063c2497e45d10770780e4a25edc16878ef2c95f401cc29975082ffbca0d04102c14c6a53ccc5fd01eeb4aa8a6058b970763d7c76023280c4b0db4a217a5385654b39643da5773844bf74abf5c9f21b3fb5e01e2de4549c2c7f21d86209a22d1cf4561e9cb1191689535a35364f0df3d8db4b830d9754f5646359e52477ca08e7f4586debfc40f17ffe59a8e1edcf05767a4c6d55896bb0b3e27987c73825af557cc6627ee8c5aec2a64654c6fe02adfd47663933996cb84c60e2f7ed1e263c8460db8eecf397461cebcb0114521da4531d92493128d33178c399b36b326c024c9101c5f68119d7a2e73f5513ce461270341bb97a660d8a8c692707d11ef9127c22fa1db1501e6e1bc85c5210d7948118b775c6a42d5bd69e7bfd8fb2abf1edf4bfe1e47f43108874b9a9a1c459dfdf8c79bf8b60412f11152b3a796d652c1e6a0a0cad4d4a61a1afdcb8d20429d1ba83555f331aa841f8b81092eb6cf37b8d44241ba94d9024ffbd5917bd3f7e29f8d8830f369aa386d92f49f5192231bdd80b4be5459b8e73ed9f60dbcefaa4d226f983bd774eadc312167ac5c77138a9d83043dfc3483a1b882a4632a87553b3bfa3a9e7e7ca1b24f643a6072bb68d98061f112abf1a74950b65f8cae1c183c7a60cee1379dd90412f1a3dc4d48f823186c8650a7c8c5fb8cf455864176e078b6195a13a683f526904087c9adab050ce278add302434f1e6c6413afb04982"]}, @nested={0x162, 0xb1, 0x0, 0x1, [@nested={0xce, 0xa3, 0x0, 0x1, [@nested={0x4, 0x11}, @generic="11a3beb2a7ad1d651642daea70baff0bf2db025312f82e85d2d45f3e39ef160029fce3b34fa260ecad5a13dd235cfa6dbfe421e459edd88ebafb270c66ab8d92e5bf46c70ca1fab19c9bc504058c46e0fcf2cba24fd62f350a098c7d3f47f897afb2e5e48b86b47de1f38ae7aab0d494e3", @generic="2e7eb1cc5e607d18b16cb916353e99e10620db7acc638074c1ea4b22770d0a3f9b87", @generic="1be599ddb4d6ac48170d16a9428566f69f96ecfddff599b8cbf9a554c0f661e91c12d63d6a6b24e97a7f104c25005e8007cb1c"]}, @generic="0de5c13b940f5012baa4ed151c8c30ecb7ef10673bd91aa23272422e812be6fa29af34e5cc48d6a8e33158c6dff78f8598c3df870971d0223b04bd0187fa31366ccecf07152f0390704edfc2f6e36d19de440fa99e8e5e7b9bf1aeb601069150be13552bb861d28f1798a3456973", @nested={0x20, 0xec, 0x0, 0x1, [@nested={0x4, 0x115}, @nested={0x4, 0xe2}, @nested={0x4, 0x82}, @typed={0x7, 0x60, 0x0, 0x0, @str='*\'\x00'}, @nested={0x4, 0xfb}, @nested={0x4, 0x27}]}]}, @typed={0x8, 0x13f, 0x0, 0x0, @uid=r1}, @generic="84eb70d8f289c8cbcc6a03fb6ca5d0"]}, @generic]}, @nested={0x4, 0x14d}, @typed={0xc, 0x169, 0x0, 0x0, @u64=0x6}]}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_OBSS_COLOR_BITMAP={0xc, 0x12e, 0x7}, @NL80211_ATTR_IFINDEX={0x8}]}, 0x139c}, 0x1, 0x0, 0x0, 0x40}, 0x400c041) 23.929693428s ago: executing program 2 (id=1102): setrlimit$auto(0x7, &(0x7f0000000280)={0x0, 0x2}) r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000080)={'bond0\x00'}) timerfd_create$auto(0x9, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/11/smp_affinity\x00', 0xe0182, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x10000ffff}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_get_self_attr$auto(0x68, 0x0, &(0x7f0000002440)=0x8, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) listmount$auto(0xfffffffffffffffd, 0x0, 0x8, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) getsockopt$auto(r1, 0x84, 0x18, 0x0, 0x0) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r2 = fanotify_init$auto(0x2, 0x10000002) fanotify_mark$auto(r2, 0x1, 0x803a, r2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r3, 0x29, 0x20, 0x0, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) futex$auto(0x0, 0xc, 0xffffffff, 0x0, 0x0, 0x4) read$auto_proc_iter_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 22.789064815s ago: executing program 2 (id=1106): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r3 = fcntl$auto(r2, 0x3, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = pipe$auto(0x0) tee$auto(0xffffffffffffffff, r4, 0x5, 0x8) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) renameat2$auto(r4, &(0x7f0000000300)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', r4, &(0x7f0000000400)='./file0\x00', 0x0) prctl$auto(0x23, 0x20000040000000e, 0x7fffffffefff, 0x0, 0x0) read$auto(r5, 0x0, 0x1ff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), r3) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r6, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400204}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r8 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r8, &(0x7f0000000200)={0x0, 0x7}, 0x3) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r4, &(0x7f0000001680)={&(0x7f00000004c0), 0xc, &(0x7f0000001640)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r8, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000810}, 0x44004) close_range$auto(0x0, 0x5, 0x0) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 22.491191153s ago: executing program 2 (id=1107): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port8/power/runtime_status\x00', 0x2120c0, 0x0) mmap$auto(0x0, 0x4, 0xb84b, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x40000000001, &(0x7f0000000180)={&(0x7f0000000040)="8c9700089d1b208365d5b5d112dbab029ed13881d2f2c7ba2eb01c3db79f77fdc2bb50c64a925009dff4cd1aca925c57100112d88f73348a54396800ed598a0e5500d7c0cbb6b1e91d", 0x2000c}, 0x4, 0x0) ioctl$auto(r0, 0x400454ca, 0x38) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x1, 0x7, 0x48, 0x7ff, 0x5, 0x7, 0x4, 0x3, 0x8, 0x3, 0xb, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x5a7b7e00, 0x100000000, 0x800000, 0x7, 0x8, 0x200, 0xfffffffd, 0x84, 0x2, 0x6, 0x2, 0x0, 0x0, [0x0, 0x1ff, 0x1, 0x2000000000, 0x1000000000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8003, 0x4000000, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x20000000000, 0x2, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4000000000000, 0x0, 0xfffffffffffffffd, 0xec4e, 0x0, 0x8000000000000001, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e]}, 0x1ff, 0x2000000d) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040890) unshare$auto(0x40000080) mmap$auto(0x0, 0x402000d, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40e00, 0x0) socket(0x1d, 0x3, 0x1) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000300), 0x60081, 0x0) ioctl$auto_PPPIOCATTACH(r3, 0x4004743d, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto_PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000040)=0x12fa) io_uring_setup$auto(0x386, &(0x7f0000000000)={0x5, 0x1, 0x4c, 0x0, 0x1, 0x8, 0xffffffffffffffff, [0xfffffffa, 0x8, 0xa], {0x8, 0x8, 0x3fc000, 0x4, 0x751, 0x3, 0x3b, 0xec5, 0xffff}, {0xd5, 0x80000000, 0x1bee, 0x5d, 0x400, 0x9, 0x7, 0x8000, 0x7f}}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) fsconfig$auto(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 22.230042742s ago: executing program 2 (id=1108): r0 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000200)="0887adaca782216e124fefe00e938c5a67c3739e56f8dd8fee31bb5198046e8ad6186d7947f6a4d7bb6106b3e470043fa4294efa331b335414cc6215d31003d4ff19940c0d066e5bc5ce4e56e52b93483dbc2875dbef28df8093ec716f2216a477ba4a3fdc81d67693bbac6977cb49ad45640bf022f30b83") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r1, 0x0, 0x40002) getdents64$auto(r1, 0x0, 0x400) r2 = prctl$auto_SECCOMP_MODE_FILTER(0x80000001, 0x2, 0xffffffffffffffff, 0x7fff, 0x3) creat$auto(&(0x7f00000002c0)='./file0\x00', 0x2) close_range$auto(r2, r0, 0x4) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x109802, 0x0) symlink$auto(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') r3 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x591001, 0x0) ioctl$auto_EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 22.150299572s ago: executing program 2 (id=1109): socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x14) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r6, r7, 0x8, 0x2, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x1) 12.148552247s ago: executing program 32 (id=1086): r0 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/projid_map\x00', 0x2, 0x0) mkdir$auto(&(0x7f00000001c0)='./cgroup/../file0\x00', 0x2) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000840), 0xc0000, 0x0) ioctl$auto_RNDADDTOENTCNT2(r1, 0x40045201, &(0x7f0000000880)=0x80000001) mmap$auto(0x0, 0x9, 0xdf, 0x14, 0x401, 0x410000008000) sysfs$auto(0x2, 0x100000000000031, 0x0) fsopen$auto(0x0, 0x1) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0p/sub1/xrun_injection\x00', 0xa402, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) mmap$auto(0xa, 0x20009, 0x4000000000df, 0xffffffffffffc27d, r0, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x8100, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket(0x26, 0x5, 0x0) r3 = openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2401, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video46\x00', 0x20200, 0x0) ioctl$auto(r4, 0xc0285628, r4) write$auto(r3, &(0x7f0000000280)='9\x00d1L\xf0\x15\xba\xa17=(\x18\xdd\xff\xec\v\xb5^\xa1/[vv\x19\x00\x7f0\xa30\xc7\x9d\x1f]\xf8\xe04\xe7s\x9a\xd3H\xd3F\x819+\x90S\x10\xb2\b\xf8)\xe4IU\t\xb8\r\x9a\x8e\'Q\xfb\xb5I\x0f\x96;\xc7\\2V\x01g\xf8\xce\xbb\x9d\xa2c2\x00\x7f\xa1:\ax\xbc\x17\xde\x0e<\x00\x00\x00\x00\x00\x00\x00\x06\xc8\xf4\xdf\xcc\x9b\xd7D\xd7ARq', 0x40) getsockopt$auto(r3, 0x8, 0x270d, 0xfffffffffffffffc, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/netdevsim/del_device\x00', 0x501, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)="3290b800009c550d22350f737ca2dd0af0d849aec832ec49c034169af8fa9231c143b1a8dd292977588a83400445ddc508f3aef64488936413adba3a9cc99bdfd8e7000000", 0x45) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) mincore$auto(0x1000, 0x8001, 0x0) openat$auto_ipsec_dbg_fops_ipsec(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim4/ports/0/ipsec\x00', 0x30000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x4, 0x2020006, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) getxattr$auto(0x0, 0x0, 0x0, 0x4f) 11.150667732s ago: executing program 33 (id=1091): socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x14) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r3, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r5, r6, 0x8, 0x2, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x1) 6.643948685s ago: executing program 34 (id=1109): socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x200000000eb1, 0x401, 0x8000) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711, @host}, 0x14) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="f6e6812018deadf7e88f819e30236ce79200e01532f2ed0d", 0x18) r1 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/health/break_health\x00', 0x48081, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/virtual/net/bond0/bonding/arp_ip_target\x00', 0xa0002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) write$auto(r1, &(0x7f0000000080)=')@-!\x00', 0x1e1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000200)={0x34, r4, 0x1, 0x703d25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}, @nested={0x4, 0x89}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x8880) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/perf_event_max_contexts_per_stack\x00', 0x202, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3ff, 0x9, 0x5, 0x14, 0x944, 0x1ffe4, 0x3, 0x6, 0x4, 0x9, 0x400005, 0x4000fff, 0x8000007, 0x8001, 0xd, 0x5, 0x3, 0x4, 0x7, 0x20, 0x309, 0x8, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x78, 0x0, 0x0, [0x3, 0x0, 0x0, 0x200, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x4000000000000, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x800000000002, 0x9, 0x0, 0xbec, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0xfffffffffffffffe, 0xffffffffffffd059, 0x0, 0x0, 0x0, 0x2961, 0x0, 0x2]}, 0x2001fb, 0x7f) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x1f00, &(0x7f0000000100)={0x0, 0xfdef}, 0x2, 0x0, 0x7, 0xa505}, 0x700}, 0x7, 0x4008) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_fd=r6, r7, 0x8, 0x2, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x1) 977.908597ms ago: executing program 3 (id=1165): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) open(0x0, 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x10001, 0xfffffffffffffb23, 0xd) madvise$auto(0x0, 0x200007, 0x19) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/es_shrinker_info\x00', 0x8880, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000040)=""/27, 0x1b) close_range$auto(0x2, 0xa, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0) getrlimit$auto(0x3, 0x0) ioctl$auto(0x3, 0x400c4d06, r1) io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000040)="d77cb29a51dcde3c20af1eb0c9dfb7f116f20349b858d1d5b3746eb6be5d54477cd149023d8a426de7271cb900", 0x2) prctl$auto(0x35, 0x0, 0x2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 721.459224ms ago: executing program 3 (id=1166): r0 = ioctl$auto_SIOCSIFHWADDR2(0xffffffffffffffff, 0x8924, &(0x7f0000000200)="0887adaca782216e124fefe00e938c5a67c3739e56f8dd8fee31bb5198046e8ad6186d7947f6a4d7bb6106b3e470043fa4294efa331b335414cc6215d31003d4ff19940c0d066e5bc5ce4e56e52b93483dbc2875dbef28df8093ec716f2216a477ba4a3fdc81d67693bbac6977cb49ad45640bf022f30b83") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(r1, 0x0, 0x40002) getdents64$auto(r1, 0x0, 0x400) r2 = prctl$auto_SECCOMP_MODE_FILTER(0x80000001, 0x2, 0xffffffffffffffff, 0x7fff, 0x3) creat$auto(&(0x7f00000002c0)='./file0\x00', 0x2) close_range$auto(r2, r0, 0x4) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/event1\x00', 0x34d802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) symlink$auto(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0\x00') r3 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, 0x0, 0x591001, 0x0) ioctl$auto_EXT4_IOC_ALLOC_DA_BLKS(r3, 0x660c, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 640.908686ms ago: executing program 3 (id=1167): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/nbd1/partscan\x00', 0x240442, 0x0) mmap$auto(0x0, 0x20009, 0x6, 0x40000000000eb1, 0x401, 0x8000) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000005200)=ANY=[@ANYBLOB="a8410000", @ANYRES16=r1, @ANYBLOB="010326bd7000fedbdf250800000094410480301409802db7f29c531fea40eec793e5c9662c9bed0cbc6bb011947fe6c4cc8c03de5dda365d5056d3482fbd8f90e9addfca827d233a2b80a814782f9a0c3a3d2085d92977eaa77645f9323d2b8ecf9f2f1bc4dbe4cda414fd3f0268a1785e30b7fc6a3927ecc485bc6574d9e1ed1e327da4421859a36be73d1bfaaceadf85d2a7ab81f6bcf83826063eca08468758b4689e8ced1fc6c48ad6e86e6d2bc0454483570c7de80e26e83799a5da52980108a1bf6b9fcf5296f03a48027622d441ae9468758b2ecda179ac6964a6cbb4b2f408002c00", @ANYRES32=0x0, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0400228008004d002d2e26002bc754dd91e0bebf63afa53a110699c92d7ba78f59309c1cce2209bbaadd128c8283ebd1c425c50000182806"], 0x41a8}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x101002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x201, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) open(&(0x7f0000001bc0)='./file0\x00', 0x4142, 0x1) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty57\x00', 0x40741, 0x0) ioctl$auto(0x3, 0x402c542d, r3) pidfd_send_signal$auto_PIDFD_SELF_THREAD(0xffffffffffffd8f0, 0x2, &(0x7f0000000040)={@_si_pad}, 0x1) write$auto(r0, &(0x7f0000000200)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x9c\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xe9\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2\x96\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf0L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb\xe4\xe2\xf4(\x05\xf6g5\x1f\xa0\x8e\xeb\xc0\x84\x80^\xff\x99m\x99\x1b\xd0\xf3\x00Z\xf3}\xc4\xb0_\xde\f\xfeR=\x88\xbe\xeda\xfc\x17\x85\x107u\x00\x00\x00\x00\x00\x00\x00', 0x8001) 532.021173ms ago: executing program 3 (id=1168): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) unshare$auto(0x40000080) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x14000004) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dri/card0\x00', 0x40, 0x0) ioctl$auto(r0, 0x90006442, r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'team0\x00'}) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000400)={{&(0x7f0000000000), 0x5a7, &(0x7f0000000180)={&(0x7f0000000300)="669b0c0c4afa2f", 0x2c}, 0x1, 0x0, 0x5, 0x3}, 0x3}, 0x9c3, 0x8) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x8001, 0x0) write$auto(r2, &(0x7f0000000680)='d\n\x1e\x9f\xd0\x92l\x98\x92!Fc\x9c?\xado^\x9b\xf4\x9c\xa8\xd2gn\x1a\xd7\x1c\xe8)\xefA\x7f\xc2x\xd0\x18gS\x1c\xca\xb9\x84\x1ec\xd4>\xc2\xfej\t\x89u\xcb(\x95_3\xdfo\xdc\xa5;t\x05q$zmM\xae\xdb\x1f\xeb\xffe\x91\xd5\xd2[\xa5_F\xc4X\xec\xdb\xdc\x01\xc2d\xa1\x8b\xed=\xb0\x88\xa8tl2\x0e\x13mjH,\xcda\xcab.\x03\xe7\xa4z\xcaA\xe2\x99\xd5n\xa0\x8a\x91K_\xf0~\b\v\xd1W\x97\xd9\x8c}\xff4\xff\tAK\xc4\x16\x13,9}-_\x00\x80\xd2\xfc\x98?\'\xaf\xccyRou\xa1\x12\x9fwZ\x1c\f\xcck\xdb-\xd7;\xbf\xbf\xbe\x04*L\x1e\x9c\x8fVb\xb8\xb4\xa2|\x88\x1e\bX\xba_O\x87f.\xc2\xfa\x01R\xefB\xe9\xf4Xc\x98\xe7', 0x98) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) syz_clone3(&(0x7f00000017c0)={0x4004000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0), {0x1}, &(0x7f0000000100)=""/85, 0x55, &(0x7f0000000780)=""/4096, &(0x7f0000001780)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) process_madvise$auto_MADV_HUGEPAGE(r3, &(0x7f00000018c0)={&(0x7f0000001840)="3861531b246a22d40a1b0b919fe2d0a1b705dd9f676b962e4fc9c2f9202dca1ec7e563d9a99ed3572ca0ceebcfc8f017ccfa94711566d12c48e94f56e2261bcda6a02ca6a2dd5f5b13315662cb02a60306498e30b81a2aca5d6a108cb644c31404d72d735c", 0x4}, 0x10001, 0xe, 0x6) unshare$auto(0x40000080) r4 = prctl$auto(0x20003e, 0x80000000001, 0x0, 0x5, 0x0) fchdir$auto(0xffffffffffffffff) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/lru_gen\x00', 0x4c00, 0x0) socketpair$auto(0x939, 0x3, 0x0, &(0x7f0000000200)=0x6) listen$auto(0xffffffffffffffff, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE2(r4, 0x4140, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x20000a, 0x8) 318.461523ms ago: executing program 3 (id=1169): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) open(0x0, 0x0, 0xb5d1af1605322df2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x10001, 0xfffffffffffffb23, 0xd) madvise$auto(0x0, 0x200007, 0x19) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/ext4/sda1/es_shrinker_info\x00', 0x8880, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000040)=""/27, 0x1b) mmap$auto(0x0, 0x2000d, 0x5b, 0xeb1, 0x404, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mtrr\x00', 0xc0000, 0x0) getrlimit$auto(0x3, 0x0) ioctl$auto(0x3, 0x400c4d06, r1) io_uring_register$auto_IORING_UNREGISTER_PBUF_RING(r1, 0x17, &(0x7f0000000040)="d77cb29a51dcde3c20af1eb0c9dfb7f116f20349b858d1d5b3746eb6be5d54477cd149023d8a426de7271cb900", 0x2) prctl$auto(0x35, 0x0, 0x2, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x2c022000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 0s ago: executing program 3 (id=1170): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r2 = fcntl$auto(r1, 0x3, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = pipe$auto(0x0) tee$auto(0xffffffffffffffff, r3, 0x5, 0x8) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/vlan1/base_reachable_time\x00', 0x40400, 0x0) renameat2$auto(r3, &(0x7f0000000300)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', r3, &(0x7f0000000400)='./file0\x00', 0x0) prctl$auto(0x23, 0x20000040000000e, 0x7fffffffefff, 0x0, 0x0) read$auto(r4, 0x0, 0x1ff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000100), r2) sendmsg$auto_MAC802154_HWSIM_CMD_DEL_EDGE(r5, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400204}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x14, r6, 0x200, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0x5, 0x0) rename$auto(&(0x7f0000000180)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0x0) execve$auto(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): b/0x1a0 [ 216.832760][ T8389] __kernfs_create_file+0x53/0x350 [ 216.832804][ T8389] sysfs_add_file_mode_ns+0x207/0x3c0 [ 216.832841][ T8389] internal_create_group+0x593/0xf40 [ 216.832880][ T8389] ? __pfx_internal_create_group+0x10/0x10 [ 216.832929][ T8389] ? kernfs_create_link+0x1bd/0x240 [ 216.832979][ T8389] internal_create_groups+0x9d/0x150 [ 216.833014][ T8389] device_add+0x77a/0x1950 [ 216.833054][ T8389] ? __pfx_device_add+0x10/0x10 [ 216.833087][ T8389] ? __pfx___might_resched+0x10/0x10 [ 216.833117][ T8389] ? lockdep_hardirqs_on+0x78/0x100 [ 216.833173][ T8389] __add_disk+0x518/0xe40 [ 216.833225][ T8389] add_disk_fwnode+0x118/0x5c0 [ 216.833264][ T8389] loop_add+0x90b/0xb60 [ 216.833305][ T8389] ? __pfx_loop_add+0x10/0x10 [ 216.833367][ T8389] ? find_held_lock+0x2b/0x80 [ 216.833399][ T8389] ? __fget_files+0x215/0x3d0 [ 216.833434][ T8389] loop_control_ioctl+0xae/0x620 [ 216.833463][ T8389] ? __pfx_loop_control_ioctl+0x10/0x10 [ 216.833502][ T8389] ? __pfx_loop_control_ioctl+0x10/0x10 [ 216.833534][ T8389] __x64_sys_ioctl+0x18e/0x210 [ 216.833564][ T8389] do_syscall_64+0x10b/0xf80 [ 216.833588][ T8389] ? clear_bhb_loop+0x40/0x90 [ 216.833621][ T8389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.833648][ T8389] RIP: 0033:0x7ff3d6f9ce59 [ 216.833670][ T8389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.833695][ T8389] RSP: 002b:00007ff3d7e3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 216.833719][ T8389] RAX: ffffffffffffffda RBX: 00007ff3d7216090 RCX: 00007ff3d6f9ce59 [ 216.833737][ T8389] RDX: 000000000000022e RSI: 0000000000004c80 RDI: 000000000000000a [ 216.833753][ T8389] RBP: 00007ff3d7032d6f R08: 0000000000000000 R09: 0000000000000000 [ 216.833769][ T8389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.833783][ T8389] R13: 00007ff3d7216128 R14: 00007ff3d7216090 R15: 00007fff45023438 [ 216.833817][ T8389] [ 217.280837][ T8398] bond0: invalid ARP target specified [ 217.408738][ T8398] nbd: socks must be embedded in a SOCK_ITEM attr [ 217.423607][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.0.611'. [ 217.444268][ T8398] block nbd0: shutting down sockets [ 217.581856][ T8406] dlm: plock device version mismatch: kernel (1.2.0), user (1489226698.240317300.1121487582) [ 217.891728][ T8414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.615'. [ 219.516841][ T8460] FAULT_INJECTION: forcing a failure. [ 219.516841][ T8460] name failslab, interval 1, probability 0, space 0, times 0 [ 219.530659][ T8460] CPU: 1 UID: 0 PID: 8460 Comm: syz.1.627 Tainted: G L syzkaller #0 PREEMPT(full) [ 219.530692][ T8460] Tainted: [L]=SOFTLOCKUP [ 219.530697][ T8460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.530707][ T8460] Call Trace: [ 219.530713][ T8460] [ 219.530718][ T8460] dump_stack_lvl+0x100/0x190 [ 219.530741][ T8460] should_fail_ex.cold+0x5/0xa [ 219.530757][ T8460] ? pcpu_alloc_noprof+0x960/0x1cc0 [ 219.530775][ T8460] should_failslab+0xc2/0x120 [ 219.530792][ T8460] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 219.530815][ T8460] ? radix_tree_node_alloc.constprop.0+0x66/0x340 [ 219.530835][ T8460] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 219.530853][ T8460] radix_tree_node_alloc.constprop.0+0x66/0x340 [ 219.530876][ T8460] idr_get_free+0x52e/0xa00 [ 219.530903][ T8460] idr_alloc_u32+0x1ac/0x320 [ 219.530927][ T8460] ? __pfx_idr_alloc_u32+0x10/0x10 [ 219.530951][ T8460] ? lock_acquire+0x1b1/0x370 [ 219.530969][ T8460] idr_alloc_cyclic+0x10b/0x230 [ 219.530993][ T8460] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 219.531014][ T8460] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 219.531035][ T8460] map_create+0x14d8/0x2bc0 [ 219.531058][ T8460] ? preempt_schedule_thunk+0x16/0x30 [ 219.531085][ T8460] ? __pfx_map_create+0x10/0x10 [ 219.531106][ T8460] ? __might_fault+0xc5/0x140 [ 219.531127][ T8460] ? __might_fault+0xc5/0x140 [ 219.531156][ T8460] __sys_bpf+0x2091/0x4b90 [ 219.531174][ T8460] ? futex_private_hash_put+0x107/0x1c0 [ 219.531191][ T8460] ? __pfx___sys_bpf+0x10/0x10 [ 219.531208][ T8460] ? __pfx_futex_wake+0x10/0x10 [ 219.531229][ T8460] ? ksys_write+0x190/0x250 [ 219.531246][ T8460] ? ksys_write+0x190/0x250 [ 219.531267][ T8460] ? do_futex+0x192/0x350 [ 219.531293][ T8460] ? xfd_validate_state+0x129/0x190 [ 219.531308][ T8460] ? ksys_write+0x1ac/0x250 [ 219.531329][ T8460] __x64_sys_bpf+0x7b/0xc0 [ 219.531344][ T8460] ? lockdep_hardirqs_on+0x78/0x100 [ 219.531366][ T8460] do_syscall_64+0x10b/0xf80 [ 219.531379][ T8460] ? clear_bhb_loop+0x40/0x90 [ 219.531397][ T8460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.531412][ T8460] RIP: 0033:0x7fe13f79ce59 [ 219.531425][ T8460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.531440][ T8460] RSP: 002b:00007fe140727028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 219.531456][ T8460] RAX: ffffffffffffffda RBX: 00007fe13fa15fa0 RCX: 00007fe13f79ce59 [ 219.531466][ T8460] RDX: 000000000000000f RSI: 00002000000001c0 RDI: 0000000000000000 [ 219.531475][ T8460] RBP: 00007fe13f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 219.531483][ T8460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 219.531492][ T8460] R13: 00007fe13fa16038 R14: 00007fe13fa15fa0 R15: 00007ffd4a4dcaa8 [ 219.531512][ T8460] [ 219.912182][ T8449] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input9 [ 221.113221][ T8492] FAULT_INJECTION: forcing a failure. [ 221.113221][ T8492] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 221.127208][ T8492] CPU: 1 UID: 0 PID: 8492 Comm: syz.3.637 Tainted: G L syzkaller #0 PREEMPT(full) [ 221.127255][ T8492] Tainted: [L]=SOFTLOCKUP [ 221.127271][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 221.127289][ T8492] Call Trace: [ 221.127299][ T8492] [ 221.127309][ T8492] dump_stack_lvl+0x100/0x190 [ 221.127347][ T8492] should_fail_ex.cold+0x5/0xa [ 221.127378][ T8492] ? prepare_alloc_pages+0x16d/0x5f0 [ 221.127423][ T8492] should_fail_alloc_page+0xeb/0x140 [ 221.127458][ T8492] prepare_alloc_pages+0x1f0/0x5f0 [ 221.127495][ T8492] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 221.127543][ T8492] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 221.127593][ T8492] ? unwind_get_return_address+0x59/0xa0 [ 221.127633][ T8492] ? arch_stack_walk+0xa6/0xf0 [ 221.127685][ T8492] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 221.127731][ T8492] ? __pfx_stack_trace_save+0x10/0x10 [ 221.127769][ T8492] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 221.127816][ T8492] ? arch_stack_walk+0xa6/0xf0 [ 221.127861][ T8492] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 221.127901][ T8492] ? __pmd_alloc+0xbf/0x950 [ 221.127932][ T8492] ? __handle_mm_fault+0xa9c/0x2a00 [ 221.127970][ T8492] ? handle_mm_fault+0x36d/0xa20 [ 221.128008][ T8492] ? __get_user_pages+0x1178/0x32a0 [ 221.128041][ T8492] ? get_user_pages_remote+0x3d2/0xb10 [ 221.128079][ T8492] ? get_arg_page+0xf4/0x310 [ 221.128106][ T8492] ? copy_string_kernel+0x17d/0x3f0 [ 221.128134][ T8492] ? do_execveat_common.isra.0+0x2e6/0x580 [ 221.128168][ T8492] ? __x64_sys_execve+0x93/0xd0 [ 221.128198][ T8492] ? do_syscall_64+0x10b/0xf80 [ 221.128224][ T8492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.128254][ T8492] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 221.128297][ T8492] ? policy_nodemask+0xed/0x4f0 [ 221.128334][ T8492] alloc_pages_mpol+0x1fb/0x540 [ 221.128370][ T8492] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 221.128407][ T8492] ? __lock_acquire+0x4a5/0x2630 [ 221.128438][ T8492] alloc_pages_noprof+0x1a/0x160 [ 221.128478][ T8492] pte_alloc_one+0x1c/0x3d0 [ 221.128518][ T8492] __pte_alloc+0x6d/0x3e0 [ 221.128556][ T8492] ? __pfx___pte_alloc+0x10/0x10 [ 221.128591][ T8492] ? do_raw_spin_lock+0x128/0x260 [ 221.128625][ T8492] ? find_held_lock+0x2b/0x80 [ 221.128666][ T8492] do_anonymous_page+0x13c6/0x2050 [ 221.128716][ T8492] ? __pmd_alloc+0x3fb/0x950 [ 221.128772][ T8492] __handle_mm_fault+0x1d2c/0x2a00 [ 221.128823][ T8492] ? mt_find+0x45e/0x8e0 [ 221.128853][ T8492] ? __pfx___handle_mm_fault+0x10/0x10 [ 221.128894][ T8492] ? __pfx_mt_find+0x10/0x10 [ 221.128952][ T8492] handle_mm_fault+0x36d/0xa20 [ 221.129000][ T8492] __get_user_pages+0x1178/0x32a0 [ 221.129048][ T8492] ? __pfx___get_user_pages+0x10/0x10 [ 221.129090][ T8492] get_user_pages_remote+0x3d2/0xb10 [ 221.129148][ T8492] ? __pfx_get_user_pages_remote+0x10/0x10 [ 221.129188][ T8492] ? __pfx_create_init_stack_vma+0x10/0x10 [ 221.129231][ T8492] get_arg_page+0xf4/0x310 [ 221.129263][ T8492] ? __pfx_get_arg_page+0x10/0x10 [ 221.129294][ T8492] ? alloc_bprm+0x3da/0x710 [ 221.129322][ T8492] ? alloc_bprm+0x3da/0x710 [ 221.129356][ T8492] copy_string_kernel+0x17d/0x3f0 [ 221.129389][ T8492] ? alloc_bprm+0x420/0x710 [ 221.129422][ T8492] do_execveat_common.isra.0+0x2e6/0x580 [ 221.129463][ T8492] __x64_sys_execve+0x93/0xd0 [ 221.129497][ T8492] do_syscall_64+0x10b/0xf80 [ 221.129523][ T8492] ? clear_bhb_loop+0x40/0x90 [ 221.129565][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.129596][ T8492] RIP: 0033:0x7ff3d6f9ce59 [ 221.129621][ T8492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.129650][ T8492] RSP: 002b:00007ff3d7e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 221.129678][ T8492] RAX: ffffffffffffffda RBX: 00007ff3d7215fa0 RCX: 00007ff3d6f9ce59 [ 221.129698][ T8492] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 221.129716][ T8492] RBP: 00007ff3d7032d6f R08: 0000000000000000 R09: 0000000000000000 [ 221.129733][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.129750][ T8492] R13: 00007ff3d7216038 R14: 00007ff3d7215fa0 R15: 00007fff45023438 [ 221.129788][ T8492] [ 221.600075][ T8489] Process accounting resumed [ 222.539011][ T8520] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 222.545543][ T8520] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 222.707642][ T8523] FAULT_INJECTION: forcing a failure. [ 222.707642][ T8523] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 222.722613][ T8523] CPU: 1 UID: 0 PID: 8523 Comm: syz.2.644 Tainted: G L syzkaller #0 PREEMPT(full) [ 222.722655][ T8523] Tainted: [L]=SOFTLOCKUP [ 222.722665][ T8523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 222.722681][ T8523] Call Trace: [ 222.722690][ T8523] [ 222.722700][ T8523] dump_stack_lvl+0x100/0x190 [ 222.722733][ T8523] should_fail_ex.cold+0x5/0xa [ 222.722767][ T8523] _copy_to_user+0x32/0xd0 [ 222.722798][ T8523] simple_read_from_buffer+0xcb/0x170 [ 222.722833][ T8523] proc_fail_nth_read+0x1af/0x230 [ 222.722876][ T8523] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.722928][ T8523] ? rw_verify_area+0xce/0x6d0 [ 222.722959][ T8523] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 222.722999][ T8523] vfs_read+0x1e4/0xb30 [ 222.723032][ T8523] ? __pfx_vfs_read+0x10/0x10 [ 222.723061][ T8523] ? __fget_files+0x215/0x3d0 [ 222.723100][ T8523] ? __fget_files+0x21f/0x3d0 [ 222.723142][ T8523] ksys_read+0x12a/0x250 [ 222.723180][ T8523] ? __pfx_ksys_read+0x10/0x10 [ 222.723214][ T8523] ? rcu_is_watching+0x12/0xc0 [ 222.723252][ T8523] do_syscall_64+0x10b/0xf80 [ 222.723277][ T8523] ? clear_bhb_loop+0x40/0x90 [ 222.723311][ T8523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.723340][ T8523] RIP: 0033:0x7f297915d68e [ 222.723362][ T8523] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 222.723388][ T8523] RSP: 002b:00007f297a057fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 222.723414][ T8523] RAX: ffffffffffffffda RBX: 00007f297a0586c0 RCX: 00007f297915d68e [ 222.723432][ T8523] RDX: 000000000000000f RSI: 00007f297a0580a0 RDI: 0000000000000003 [ 222.723449][ T8523] RBP: 00007f297a058090 R08: 0000000000000000 R09: 0000000000000000 [ 222.723466][ T8523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.723482][ T8523] R13: 00007f2979416038 R14: 00007f2979415fa0 R15: 00007ffd8d61eb08 [ 222.723517][ T8523] [ 223.448205][ T8530] netlink: 330 bytes leftover after parsing attributes in process `syz.2.646'. [ 223.622319][ T8535] FAULT_INJECTION: forcing a failure. [ 223.622319][ T8535] name failslab, interval 1, probability 0, space 0, times 0 [ 223.655239][ T8535] CPU: 1 UID: 0 PID: 8535 Comm: syz.1.648 Tainted: G L syzkaller #0 PREEMPT(full) [ 223.655287][ T8535] Tainted: [L]=SOFTLOCKUP [ 223.655299][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.655324][ T8535] Call Trace: [ 223.655333][ T8535] [ 223.655344][ T8535] dump_stack_lvl+0x100/0x190 [ 223.655381][ T8535] should_fail_ex.cold+0x5/0xa [ 223.655419][ T8535] should_failslab+0xc2/0x120 [ 223.655453][ T8535] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 223.655499][ T8535] ? __pmd_alloc+0xbf/0x950 [ 223.655543][ T8535] __pmd_alloc+0xbf/0x950 [ 223.655580][ T8535] ? __pud_alloc+0x4fb/0x690 [ 223.655619][ T8535] __handle_mm_fault+0xa9c/0x2a00 [ 223.655669][ T8535] ? mt_find+0x45e/0x8e0 [ 223.655700][ T8535] ? __pfx___handle_mm_fault+0x10/0x10 [ 223.655740][ T8535] ? __pfx_mt_find+0x10/0x10 [ 223.655791][ T8535] handle_mm_fault+0x36d/0xa20 [ 223.655835][ T8535] __get_user_pages+0x1178/0x32a0 [ 223.655876][ T8535] ? __pfx___get_user_pages+0x10/0x10 [ 223.655918][ T8535] get_user_pages_remote+0x3d2/0xb10 [ 223.655954][ T8535] ? __pfx_get_user_pages_remote+0x10/0x10 [ 223.655991][ T8535] ? __pfx_create_init_stack_vma+0x10/0x10 [ 223.656023][ T8535] get_arg_page+0xf4/0x310 [ 223.656051][ T8535] ? __pfx_get_arg_page+0x10/0x10 [ 223.656082][ T8535] ? alloc_bprm+0x3da/0x710 [ 223.656105][ T8535] ? alloc_bprm+0x3da/0x710 [ 223.656134][ T8535] copy_string_kernel+0x17d/0x3f0 [ 223.656164][ T8535] ? alloc_bprm+0x420/0x710 [ 223.656195][ T8535] do_execveat_common.isra.0+0x2e6/0x580 [ 223.656235][ T8535] __x64_sys_execve+0x93/0xd0 [ 223.656269][ T8535] do_syscall_64+0x10b/0xf80 [ 223.656293][ T8535] ? clear_bhb_loop+0x40/0x90 [ 223.656335][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.656363][ T8535] RIP: 0033:0x7fe13f79ce59 [ 223.656386][ T8535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.656415][ T8535] RSP: 002b:00007fe140727028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 223.656440][ T8535] RAX: ffffffffffffffda RBX: 00007fe13fa15fa0 RCX: 00007fe13f79ce59 [ 223.656457][ T8535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 223.656479][ T8535] RBP: 00007fe13f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 223.656495][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.656512][ T8535] R13: 00007fe13fa16038 R14: 00007fe13fa15fa0 R15: 00007ffd4a4dcaa8 [ 223.656550][ T8535] [ 224.132987][ T8540] bond0: invalid ARP target specified [ 224.177559][ T8542] nbd: socks must be embedded in a SOCK_ITEM attr [ 224.187484][ T8542] block nbd0: shutting down sockets [ 224.205566][ T8540] netlink: 28 bytes leftover after parsing attributes in process `syz.1.650'. [ 224.498815][ T8548] bond0: invalid ARP target specified [ 224.556669][ T8548] nbd: socks must be embedded in a SOCK_ITEM attr [ 224.585349][ T8548] block nbd0: shutting down sockets [ 224.598735][ T8552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.653'. [ 225.151846][ T29] audit: type=1800 audit(4294967341.970:6): pid=8572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.658" name="file0" dev="tmpfs" ino=931 res=0 errno=0 [ 225.307826][ T8578] vivid-007: ================= START STATUS ================= [ 225.317938][ T8578] vivid-007: Generate PTS: true [ 225.324086][ T8578] vivid-007: Generate SCR: true [ 225.330451][ T8578] tpg source WxH: 320x240 (Y'CbCr) [ 225.335662][ T8578] tpg field: 1 [ 225.339607][ T8578] tpg crop: (0,0)/320x240 [ 225.344074][ T8578] tpg compose: (0,0)/320x240 [ 225.349421][ T8578] tpg colorspace: 8 [ 225.353272][ T8578] tpg transfer function: 0/0 [ 225.358362][ T8578] tpg Y'CbCr encoding: 0/0 [ 225.362882][ T8578] tpg quantization: 0/0 [ 225.369873][ T8578] tpg RGB range: 0/2 [ 225.373895][ T8578] vivid-007: ================== END STATUS ================== [ 225.527091][ T8576] bond0: invalid ARP target specified [ 225.534228][ T8582] nbd: socks must be embedded in a SOCK_ITEM attr [ 225.553852][ T8582] block nbd0: shutting down sockets [ 225.571405][ T8588] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 225.575616][ T8587] netlink: 28 bytes leftover after parsing attributes in process `syz.2.660'. [ 225.577922][ T8588] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 226.977195][ T8622] FAULT_INJECTION: forcing a failure. [ 226.977195][ T8622] name failslab, interval 1, probability 0, space 0, times 0 [ 227.012448][ T8622] CPU: 0 UID: 0 PID: 8622 Comm: syz.0.671 Tainted: G L syzkaller #0 PREEMPT(full) [ 227.012494][ T8622] Tainted: [L]=SOFTLOCKUP [ 227.012504][ T8622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.012521][ T8622] Call Trace: [ 227.012531][ T8622] [ 227.012542][ T8622] dump_stack_lvl+0x100/0x190 [ 227.012580][ T8622] should_fail_ex.cold+0x5/0xa [ 227.012618][ T8622] should_failslab+0xc2/0x120 [ 227.012652][ T8622] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 227.012697][ T8622] ? __pmd_alloc+0xbf/0x950 [ 227.012741][ T8622] __pmd_alloc+0xbf/0x950 [ 227.012775][ T8622] ? __pud_alloc+0x4fb/0x690 [ 227.012812][ T8622] __handle_mm_fault+0xa9c/0x2a00 [ 227.012863][ T8622] ? mt_find+0x45e/0x8e0 [ 227.012893][ T8622] ? __pfx___handle_mm_fault+0x10/0x10 [ 227.012935][ T8622] ? __pfx_mt_find+0x10/0x10 [ 227.012991][ T8622] handle_mm_fault+0x36d/0xa20 [ 227.013051][ T8622] __get_user_pages+0x1178/0x32a0 [ 227.013102][ T8622] ? __pfx___get_user_pages+0x10/0x10 [ 227.013150][ T8622] get_user_pages_remote+0x3d2/0xb10 [ 227.013192][ T8622] ? __pfx_get_user_pages_remote+0x10/0x10 [ 227.013230][ T8622] ? __pfx_create_init_stack_vma+0x10/0x10 [ 227.013271][ T8622] get_arg_page+0xf4/0x310 [ 227.013301][ T8622] ? __pfx_get_arg_page+0x10/0x10 [ 227.013332][ T8622] ? alloc_bprm+0x3da/0x710 [ 227.013361][ T8622] ? alloc_bprm+0x3da/0x710 [ 227.013394][ T8622] copy_string_kernel+0x17d/0x3f0 [ 227.013425][ T8622] ? alloc_bprm+0x420/0x710 [ 227.013458][ T8622] do_execveat_common.isra.0+0x2e6/0x580 [ 227.013499][ T8622] __x64_sys_execve+0x93/0xd0 [ 227.013534][ T8622] do_syscall_64+0x10b/0xf80 [ 227.013558][ T8622] ? clear_bhb_loop+0x40/0x90 [ 227.013593][ T8622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.013621][ T8622] RIP: 0033:0x7fdaf159ce59 [ 227.013645][ T8622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.013672][ T8622] RSP: 002b:00007fdaf24ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 227.013699][ T8622] RAX: ffffffffffffffda RBX: 00007fdaf1815fa0 RCX: 00007fdaf159ce59 [ 227.013720][ T8622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 227.013741][ T8622] RBP: 00007fdaf1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 227.013759][ T8622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 227.013775][ T8622] R13: 00007fdaf1816038 R14: 00007fdaf1815fa0 R15: 00007fff37ee7188 [ 227.013813][ T8622] [ 227.932532][ T8637] bond0: option slaves: interface -Âô]àæ©=,Dçon?ïI|›a CB does not exist! [ 227.977596][ T8639] bond0: invalid ARP target specified [ 227.986962][ T8637] netlink: 342 bytes leftover after parsing attributes in process `syz.1.675'. [ 228.076911][ T8639] nbd: socks must be embedded in a SOCK_ITEM attr [ 228.077495][ T29] audit: type=1800 audit(4294967344.890:7): pid=8640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.673" name="file0" dev="tmpfs" ino=864 res=0 errno=0 [ 228.091643][ T8647] netlink: 28 bytes leftover after parsing attributes in process `syz.2.674'. [ 228.118857][ T8639] block nbd0: shutting down sockets [ 228.353038][ T8654] sysfs_service_op_store: Client not running :-5: [ 228.729231][ T8662] bond0: invalid ARP target specified [ 228.810480][ T8662] nbd: socks must be embedded in a SOCK_ITEM attr [ 228.817765][ T8662] block nbd0: shutting down sockets [ 228.862131][ T8662] netlink: 28 bytes leftover after parsing attributes in process `syz.0.680'. [ 231.591266][ T5638] Bluetooth: hci0: Unexpected cc 0x7c89 with no status [ 233.172640][ T8736] FAULT_INJECTION: forcing a failure. [ 233.172640][ T8736] name failslab, interval 1, probability 0, space 0, times 0 [ 233.200759][ T8736] CPU: 1 UID: 0 PID: 8736 Comm: syz.0.697 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.200805][ T8736] Tainted: [L]=SOFTLOCKUP [ 233.200815][ T8736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 233.200833][ T8736] Call Trace: [ 233.200842][ T8736] [ 233.200853][ T8736] dump_stack_lvl+0x100/0x190 [ 233.200892][ T8736] should_fail_ex.cold+0x5/0xa [ 233.200929][ T8736] should_failslab+0xc2/0x120 [ 233.200966][ T8736] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 233.201013][ T8736] ? do_getname+0x35/0x390 [ 233.201052][ T8736] ? strncpy_from_user+0x19d/0x2d0 [ 233.201082][ T8736] do_getname+0x35/0x390 [ 233.201120][ T8736] __x64_sys_rename+0x66/0xb0 [ 233.201165][ T8736] do_syscall_64+0x10b/0xf80 [ 233.201191][ T8736] ? clear_bhb_loop+0x40/0x90 [ 233.201226][ T8736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.201266][ T8736] RIP: 0033:0x7fdaf159ce59 [ 233.201292][ T8736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.201319][ T8736] RSP: 002b:00007fdaf24ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 233.201348][ T8736] RAX: ffffffffffffffda RBX: 00007fdaf1815fa0 RCX: 00007fdaf159ce59 [ 233.201369][ T8736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 233.201387][ T8736] RBP: 00007fdaf1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 233.201404][ T8736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.201422][ T8736] R13: 00007fdaf1816038 R14: 00007fdaf1815fa0 R15: 00007fff37ee7188 [ 233.201458][ T8736] [ 235.300030][ T8786] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 235.306564][ T8786] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 236.328236][ T8811] nbd: socks must be embedded in a SOCK_ITEM attr [ 236.400439][ T8811] block nbd0: shutting down sockets [ 236.608401][ T8809] bond0: invalid ARP target specified [ 236.944214][ T8823] netlink: 16 bytes leftover after parsing attributes in process `syz.3.718'. [ 237.866753][ T8833] zswap: compressor not available [ 238.633989][ T8857] bond0: invalid ARP target specified [ 238.747588][ T8857] nbd: socks must be embedded in a SOCK_ITEM attr [ 238.787174][ T8857] block nbd0: shutting down sockets [ 239.321816][ T5638] Bluetooth: hci3: unexpected event for opcode 0x7c89 [ 239.637435][ T8873] FAULT_INJECTION: forcing a failure. [ 239.637435][ T8873] name failslab, interval 1, probability 0, space 0, times 0 [ 239.678607][ T8873] CPU: 0 UID: 0 PID: 8873 Comm: syz.3.729 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.678635][ T8873] Tainted: [L]=SOFTLOCKUP [ 239.678640][ T8873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.678650][ T8873] Call Trace: [ 239.678655][ T8873] [ 239.678662][ T8873] dump_stack_lvl+0x100/0x190 [ 239.678686][ T8873] should_fail_ex.cold+0x5/0xa [ 239.678709][ T8873] should_failslab+0xc2/0x120 [ 239.678728][ T8873] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 239.678751][ T8873] ? ptlock_alloc+0x1f/0x70 [ 239.678773][ T8873] ? __lock_acquire+0x4a5/0x2630 [ 239.678790][ T8873] ptlock_alloc+0x1f/0x70 [ 239.678814][ T8873] pte_alloc_one+0x82/0x3d0 [ 239.678834][ T8873] __pte_alloc+0x6d/0x3e0 [ 239.678851][ T8873] ? __pfx___pte_alloc+0x10/0x10 [ 239.678869][ T8873] ? do_raw_spin_lock+0x128/0x260 [ 239.678886][ T8873] ? find_held_lock+0x2b/0x80 [ 239.678906][ T8873] do_anonymous_page+0x13c6/0x2050 [ 239.678935][ T8873] ? __pmd_alloc+0x3fb/0x950 [ 239.678974][ T8873] __handle_mm_fault+0x1d2c/0x2a00 [ 239.679001][ T8873] ? mt_find+0x45e/0x8e0 [ 239.679017][ T8873] ? __pfx___handle_mm_fault+0x10/0x10 [ 239.679037][ T8873] ? __pfx_mt_find+0x10/0x10 [ 239.679066][ T8873] handle_mm_fault+0x36d/0xa20 [ 239.679092][ T8873] __get_user_pages+0x1178/0x32a0 [ 239.679118][ T8873] ? __pfx___get_user_pages+0x10/0x10 [ 239.679142][ T8873] get_user_pages_remote+0x3d2/0xb10 [ 239.679163][ T8873] ? __pfx_get_user_pages_remote+0x10/0x10 [ 239.679183][ T8873] ? __pfx_create_init_stack_vma+0x10/0x10 [ 239.679204][ T8873] get_arg_page+0xf4/0x310 [ 239.679220][ T8873] ? __pfx_get_arg_page+0x10/0x10 [ 239.679236][ T8873] ? alloc_bprm+0x3da/0x710 [ 239.679250][ T8873] ? alloc_bprm+0x3da/0x710 [ 239.679267][ T8873] copy_string_kernel+0x17d/0x3f0 [ 239.679284][ T8873] ? alloc_bprm+0x420/0x710 [ 239.679301][ T8873] do_execveat_common.isra.0+0x2e6/0x580 [ 239.679321][ T8873] __x64_sys_execve+0x93/0xd0 [ 239.679340][ T8873] do_syscall_64+0x10b/0xf80 [ 239.679353][ T8873] ? clear_bhb_loop+0x40/0x90 [ 239.679371][ T8873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.679386][ T8873] RIP: 0033:0x7ff3d6f9ce59 [ 239.679401][ T8873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.679415][ T8873] RSP: 002b:00007ff3d7e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 239.679430][ T8873] RAX: ffffffffffffffda RBX: 00007ff3d7215fa0 RCX: 00007ff3d6f9ce59 [ 239.679440][ T8873] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 239.679449][ T8873] RBP: 00007ff3d7032d6f R08: 0000000000000000 R09: 0000000000000000 [ 239.679458][ T8873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.679467][ T8873] R13: 00007ff3d7216038 R14: 00007ff3d7215fa0 R15: 00007fff45023438 [ 239.679487][ T8873] [ 240.787547][ T8895] netlink: 504 bytes leftover after parsing attributes in process `syz.3.734'. [ 242.207030][ T8935] nbd: socks must be embedded in a SOCK_ITEM attr [ 242.207820][ T8935] block nbd0: shutting down sockets [ 242.522384][ T8934] bond0: invalid ARP target specified [ 242.801723][ T8946] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 242.808209][ T8946] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 243.497951][ T8962] netlink: 'syz.2.750': attribute type 1 has an invalid length. [ 243.980932][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 244.561568][ T8951] Process accounting paused [ 246.223216][ T9016] bond0: invalid ARP target specified [ 246.286165][ T9016] nbd: socks must be embedded in a SOCK_ITEM attr [ 246.296230][ T9016] block nbd0: shutting down sockets [ 248.939878][ T9061] netlink: 350 bytes leftover after parsing attributes in process `syz.1.776'. [ 250.890129][ T9097] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 250.896649][ T9097] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 251.665974][ T9091] Process accounting paused [ 251.819357][ T9109] netlink: 350 bytes leftover after parsing attributes in process `syz.0.788'. [ 253.654565][ T9154] FAULT_INJECTION: forcing a failure. [ 253.654565][ T9154] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 253.696224][ T9154] CPU: 1 UID: 0 PID: 9154 Comm: syz.3.798 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.696270][ T9154] Tainted: [L]=SOFTLOCKUP [ 253.696279][ T9154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 253.696296][ T9154] Call Trace: [ 253.696305][ T9154] [ 253.696315][ T9154] dump_stack_lvl+0x100/0x190 [ 253.696353][ T9154] should_fail_ex.cold+0x5/0xa [ 253.696392][ T9154] ? prepare_alloc_pages+0x16d/0x5f0 [ 253.696431][ T9154] should_fail_alloc_page+0xeb/0x140 [ 253.696466][ T9154] prepare_alloc_pages+0x1f0/0x5f0 [ 253.696501][ T9154] ? rcu_is_watching+0x12/0xc0 [ 253.696539][ T9154] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 253.696586][ T9154] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 253.696629][ T9154] ? arch_stack_walk+0xa6/0xf0 [ 253.696675][ T9154] ? mas_next_node+0x29c/0x1020 [ 253.696717][ T9154] ? stack_trace_save+0x8e/0xc0 [ 253.696754][ T9154] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 253.696798][ T9154] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 253.696851][ T9154] ? mt_validate_nulls+0x1b3/0xa10 [ 253.696879][ T9154] ? look_up_lock_class+0x55/0x120 [ 253.696927][ T9154] ? __lock_acquire+0x4a5/0x2630 [ 253.696959][ T9154] ? __lock_acquire+0x4a5/0x2630 [ 253.696983][ T9154] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 253.697025][ T9154] ? policy_nodemask+0xed/0x4f0 [ 253.697058][ T9154] alloc_pages_mpol+0x1fb/0x540 [ 253.697091][ T9154] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 253.697123][ T9154] ? find_held_lock+0x2b/0x80 [ 253.697157][ T9154] ? __pud_alloc+0x4f6/0x690 [ 253.697192][ T9154] ? __pud_alloc+0x4f6/0x690 [ 253.697227][ T9154] alloc_pages_noprof+0x1a/0x160 [ 253.697267][ T9154] __pmd_alloc+0x3b/0x950 [ 253.697300][ T9154] ? __pud_alloc+0x4fb/0x690 [ 253.697336][ T9154] __handle_mm_fault+0xa9c/0x2a00 [ 253.697394][ T9154] ? mt_find+0x45e/0x8e0 [ 253.697425][ T9154] ? __pfx___handle_mm_fault+0x10/0x10 [ 253.697462][ T9154] ? __pfx_mt_find+0x10/0x10 [ 253.697520][ T9154] handle_mm_fault+0x36d/0xa20 [ 253.697570][ T9154] __get_user_pages+0x1178/0x32a0 [ 253.697619][ T9154] ? __pfx___get_user_pages+0x10/0x10 [ 253.697663][ T9154] get_user_pages_remote+0x3d2/0xb10 [ 253.697705][ T9154] ? __pfx_get_user_pages_remote+0x10/0x10 [ 253.697739][ T9154] ? __pfx_create_init_stack_vma+0x10/0x10 [ 253.697774][ T9154] get_arg_page+0xf4/0x310 [ 253.697804][ T9154] ? __pfx_get_arg_page+0x10/0x10 [ 253.697836][ T9154] ? alloc_bprm+0x3da/0x710 [ 253.697864][ T9154] ? alloc_bprm+0x3da/0x710 [ 253.697896][ T9154] copy_string_kernel+0x17d/0x3f0 [ 253.697929][ T9154] ? alloc_bprm+0x420/0x710 [ 253.697960][ T9154] do_execveat_common.isra.0+0x2e6/0x580 [ 253.698000][ T9154] __x64_sys_execve+0x93/0xd0 [ 253.698035][ T9154] do_syscall_64+0x10b/0xf80 [ 253.698060][ T9154] ? clear_bhb_loop+0x40/0x90 [ 253.698095][ T9154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.698125][ T9154] RIP: 0033:0x7ff3d6f9ce59 [ 253.698148][ T9154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.698176][ T9154] RSP: 002b:00007ff3d7e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 253.698204][ T9154] RAX: ffffffffffffffda RBX: 00007ff3d7215fa0 RCX: 00007ff3d6f9ce59 [ 253.698223][ T9154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 253.698241][ T9154] RBP: 00007ff3d7032d6f R08: 0000000000000000 R09: 0000000000000000 [ 253.698258][ T9154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.698274][ T9154] R13: 00007ff3d7216038 R14: 00007ff3d7215fa0 R15: 00007fff45023438 [ 253.698310][ T9154] [ 253.710802][ T9157] netlink: 350 bytes leftover after parsing attributes in process `syz.0.799'. [ 255.042039][ T9172] FAULT_INJECTION: forcing a failure. [ 255.042039][ T9172] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 255.084553][ T9172] CPU: 1 UID: 0 PID: 9172 Comm: syz.3.803 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.084600][ T9172] Tainted: [L]=SOFTLOCKUP [ 255.084610][ T9172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 255.084627][ T9172] Call Trace: [ 255.084635][ T9172] [ 255.084646][ T9172] dump_stack_lvl+0x100/0x190 [ 255.084683][ T9172] should_fail_ex.cold+0x5/0xa [ 255.084713][ T9172] ? prepare_alloc_pages+0x16d/0x5f0 [ 255.084754][ T9172] should_fail_alloc_page+0xeb/0x140 [ 255.084788][ T9172] prepare_alloc_pages+0x1f0/0x5f0 [ 255.084825][ T9172] ? rcu_is_watching+0x12/0xc0 [ 255.084865][ T9172] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 255.084911][ T9172] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 255.084957][ T9172] ? arch_stack_walk+0xa6/0xf0 [ 255.085005][ T9172] ? mas_next_node+0x29c/0x1020 [ 255.085047][ T9172] ? stack_trace_save+0x8e/0xc0 [ 255.085085][ T9172] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 255.085129][ T9172] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 255.085177][ T9172] ? mt_validate_nulls+0x1b3/0xa10 [ 255.085202][ T9172] ? look_up_lock_class+0x55/0x120 [ 255.085251][ T9172] ? __lock_acquire+0x4a5/0x2630 [ 255.085294][ T9172] ? __lock_acquire+0x4a5/0x2630 [ 255.085318][ T9172] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 255.085362][ T9172] ? policy_nodemask+0xed/0x4f0 [ 255.085397][ T9172] alloc_pages_mpol+0x1fb/0x540 [ 255.085432][ T9172] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 255.085464][ T9172] ? find_held_lock+0x2b/0x80 [ 255.085502][ T9172] ? __pud_alloc+0x4f6/0x690 [ 255.085537][ T9172] ? __pud_alloc+0x4f6/0x690 [ 255.085575][ T9172] alloc_pages_noprof+0x1a/0x160 [ 255.085613][ T9172] __pmd_alloc+0x3b/0x950 [ 255.085646][ T9172] ? __pud_alloc+0x4fb/0x690 [ 255.085681][ T9172] __handle_mm_fault+0xa9c/0x2a00 [ 255.085730][ T9172] ? mt_find+0x45e/0x8e0 [ 255.085762][ T9172] ? __pfx___handle_mm_fault+0x10/0x10 [ 255.085802][ T9172] ? __pfx_mt_find+0x10/0x10 [ 255.085862][ T9172] handle_mm_fault+0x36d/0xa20 [ 255.085911][ T9172] __get_user_pages+0x1178/0x32a0 [ 255.085962][ T9172] ? __pfx___get_user_pages+0x10/0x10 [ 255.086010][ T9172] get_user_pages_remote+0x3d2/0xb10 [ 255.086055][ T9172] ? __pfx_get_user_pages_remote+0x10/0x10 [ 255.086093][ T9172] ? __pfx_create_init_stack_vma+0x10/0x10 [ 255.086150][ T9172] get_arg_page+0xf4/0x310 [ 255.086181][ T9172] ? __pfx_get_arg_page+0x10/0x10 [ 255.086213][ T9172] ? alloc_bprm+0x3da/0x710 [ 255.086242][ T9172] ? alloc_bprm+0x3da/0x710 [ 255.086282][ T9172] copy_string_kernel+0x17d/0x3f0 [ 255.086315][ T9172] ? alloc_bprm+0x420/0x710 [ 255.086347][ T9172] do_execveat_common.isra.0+0x2e6/0x580 [ 255.086388][ T9172] __x64_sys_execve+0x93/0xd0 [ 255.086423][ T9172] do_syscall_64+0x10b/0xf80 [ 255.086449][ T9172] ? clear_bhb_loop+0x40/0x90 [ 255.086484][ T9172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.086512][ T9172] RIP: 0033:0x7ff3d6f9ce59 [ 255.086537][ T9172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.086566][ T9172] RSP: 002b:00007ff3d7e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 255.086593][ T9172] RAX: ffffffffffffffda RBX: 00007ff3d7215fa0 RCX: 00007ff3d6f9ce59 [ 255.086614][ T9172] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 255.086632][ T9172] RBP: 00007ff3d7032d6f R08: 0000000000000000 R09: 0000000000000000 [ 255.086649][ T9172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.086668][ T9172] R13: 00007ff3d7216038 R14: 00007ff3d7215fa0 R15: 00007fff45023438 [ 255.086708][ T9172] [ 255.773497][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.781107][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.984000][ T9181] bond0: invalid ARP target specified [ 256.058180][ T9181] nbd: socks must be embedded in a SOCK_ITEM attr [ 256.076191][ T9181] block nbd0: shutting down sockets [ 257.452564][ T9218] netlink: 16 bytes leftover after parsing attributes in process `syz.3.814'. [ 258.173580][ T9241] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 258.180113][ T9241] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 258.334741][ T9245] random: crng reseeded on system resumption [ 258.808374][ T9263] tipc: Started in network mode [ 258.822141][ T9263] tipc: Node identity ffffffff, cluster identity 4711 [ 258.835912][ T9263] tipc: Node number set to 4294967295 [ 258.959900][ T9269] netlink: 24 bytes leftover after parsing attributes in process `syz.0.827'. [ 259.718303][ T9289] netlink: 342 bytes leftover after parsing attributes in process `syz.0.833'. [ 260.338088][ T9291] Console: switching to colour VGA+ 80x25 [ 260.702875][ T9312] netlink: 350 bytes leftover after parsing attributes in process `syz.1.838'. [ 262.679432][ T9360] zswap: compressor not available [ 262.756136][ T9366] netlink: 350 bytes leftover after parsing attributes in process `syz.3.850'. [ 262.936497][ T9369] netlink: 24 bytes leftover after parsing attributes in process `syz.2.851'. [ 263.176294][ T9373] netlink: 334 bytes leftover after parsing attributes in process `syz.3.852'. [ 264.457673][ T9423] bond0: invalid ARP target specified [ 264.518048][ T9423] nbd: socks must be embedded in a SOCK_ITEM attr [ 264.550429][ T9423] block nbd0: shutting down sockets [ 264.603328][ T9423] netlink: 28 bytes leftover after parsing attributes in process `syz.1.862'. [ 266.378817][ T9458] netlink: 350 bytes leftover after parsing attributes in process `syz.0.871'. [ 266.708242][ T9467] netlink: 16 bytes leftover after parsing attributes in process `syz.2.874'. [ 266.815265][ T9464] x_tables: duplicate underflow at hook 4 [ 267.310519][ T9489] netlink: 350 bytes leftover after parsing attributes in process `syz.2.881'. [ 267.471342][ T9496] netlink: 16 bytes leftover after parsing attributes in process `syz.2.883'. [ 267.795349][ T9505] FAULT_INJECTION: forcing a failure. [ 267.795349][ T9505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.795413][ T9505] CPU: 0 UID: 0 PID: 9505 Comm: syz.2.885 Tainted: G L syzkaller #0 PREEMPT(full) [ 267.795452][ T9505] Tainted: [L]=SOFTLOCKUP [ 267.795461][ T9505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 267.795477][ T9505] Call Trace: [ 267.795485][ T9505] [ 267.795495][ T9505] dump_stack_lvl+0x100/0x190 [ 267.795530][ T9505] should_fail_ex.cold+0x5/0xa [ 267.795565][ T9505] _copy_from_iter+0x1f4/0x1690 [ 267.795600][ T9505] ? __asan_memset+0x23/0x50 [ 267.795642][ T9505] ? __pfx__copy_from_iter+0x10/0x10 [ 267.795670][ T9505] ? __pfx___alloc_skb+0x10/0x10 [ 267.795702][ T9505] ? __pfx___might_resched+0x10/0x10 [ 267.795733][ T9505] ? __lock_acquire+0x4a5/0x2630 [ 267.795769][ T9505] netlink_sendmsg+0x808/0xda0 [ 267.795817][ T9505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.795854][ T9505] ? __import_iovec+0x1d2/0x640 [ 267.795884][ T9505] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 267.795932][ T9505] ____sys_sendmsg+0x9e1/0xb70 [ 267.795970][ T9505] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.796014][ T9505] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.796058][ T9505] ? rcu_is_watching+0x12/0xc0 [ 267.796090][ T9505] ? ___sys_sendmsg+0x19d/0x1e0 [ 267.796129][ T9505] ? kfree+0x1dd/0x6c0 [ 267.796171][ T9505] ___sys_sendmsg+0x190/0x1e0 [ 267.796214][ T9505] ? __pfx____sys_sendmsg+0x10/0x10 [ 267.796285][ T9505] ? __pfx___might_resched+0x10/0x10 [ 267.796324][ T9505] __sys_sendmmsg+0x205/0x430 [ 267.796363][ T9505] ? __pfx___sys_sendmmsg+0x10/0x10 [ 267.796413][ T9505] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 267.796456][ T9505] ? fput+0x79/0x100 [ 267.796491][ T9505] ? ksys_write+0x1ac/0x250 [ 267.796521][ T9505] ? __pfx_ksys_write+0x10/0x10 [ 267.796558][ T9505] __x64_sys_sendmmsg+0x9c/0x100 [ 267.796591][ T9505] ? lockdep_hardirqs_on+0x78/0x100 [ 267.796633][ T9505] do_syscall_64+0x10b/0xf80 [ 267.796657][ T9505] ? clear_bhb_loop+0x40/0x90 [ 267.796690][ T9505] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.796718][ T9505] RIP: 0033:0x7f297919ce59 [ 267.796741][ T9505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.796767][ T9505] RSP: 002b:00007f297a058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 267.796794][ T9505] RAX: ffffffffffffffda RBX: 00007f2979415fa0 RCX: 00007f297919ce59 [ 267.796812][ T9505] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 267.796829][ T9505] RBP: 00007f297a058090 R08: 0000000000000000 R09: 0000000000000000 [ 267.796845][ T9505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 267.796862][ T9505] R13: 00007f2979416038 R14: 00007f2979415fa0 R15: 00007ffd8d61eb08 [ 267.796898][ T9505] [ 268.388321][ T9517] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 268.394839][ T9517] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 268.637806][ T9520] zswap: compressor Z(u not available [ 268.671752][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.890'. [ 268.875591][ T9533] netlink: 350 bytes leftover after parsing attributes in process `syz.1.892'. [ 268.961065][ T9536] netlink: 16 bytes leftover after parsing attributes in process `syz.3.893'. [ 270.039535][ T9561] bond0: invalid ARP target specified [ 270.116150][ T9561] nbd: socks must be embedded in a SOCK_ITEM attr [ 270.136726][ T9561] block nbd0: shutting down sockets [ 270.154234][ T9563] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'. [ 270.443581][ T9571] netlink: 350 bytes leftover after parsing attributes in process `syz.2.903'. [ 270.774497][ T9580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.905'. [ 271.483645][ T9598] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 271.490213][ T9598] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 272.008310][ T9606] netlink: 350 bytes leftover after parsing attributes in process `syz.2.912'. [ 273.360388][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.3.918'. [ 273.794182][ T9646] netlink: 350 bytes leftover after parsing attributes in process `syz.0.923'. [ 273.943158][ T9653] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 273.949673][ T9653] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 274.109665][ T9656] bond0: invalid ARP target specified [ 274.146647][ T9658] nbd: socks must be embedded in a SOCK_ITEM attr [ 274.160561][ T9658] block nbd0: shutting down sockets [ 274.183003][ T9656] netlink: 28 bytes leftover after parsing attributes in process `syz.0.927'. [ 274.825458][ T9684] FAULT_INJECTION: forcing a failure. [ 274.825458][ T9684] name failslab, interval 1, probability 0, space 0, times 0 [ 274.863192][ T9684] CPU: 1 UID: 0 PID: 9684 Comm: syz.3.932 Tainted: G L syzkaller #0 PREEMPT(full) [ 274.863237][ T9684] Tainted: [L]=SOFTLOCKUP [ 274.863247][ T9684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 274.863263][ T9684] Call Trace: [ 274.863272][ T9684] [ 274.863283][ T9684] dump_stack_lvl+0x100/0x190 [ 274.863319][ T9684] should_fail_ex.cold+0x5/0xa [ 274.863354][ T9684] should_failslab+0xc2/0x120 [ 274.863386][ T9684] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 274.863414][ T9684] ? __alloc_skb+0x140/0x710 [ 274.863443][ T9684] ? __alloc_skb+0x5b7/0x710 [ 274.863478][ T9684] __alloc_skb+0x140/0x710 [ 274.863507][ T9684] ? __alloc_skb+0x5b7/0x710 [ 274.863535][ T9684] ? __pfx___alloc_skb+0x10/0x10 [ 274.863576][ T9684] netlink_alloc_large_skb+0x69/0x150 [ 274.863620][ T9684] netlink_sendmsg+0x680/0xda0 [ 274.863665][ T9684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.863704][ T9684] ? __import_iovec+0x1d2/0x640 [ 274.863738][ T9684] ? aa_sock_msg_perm.isra.0+0x100/0x1b0 [ 274.863793][ T9684] ____sys_sendmsg+0x9e1/0xb70 [ 274.863831][ T9684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 274.863874][ T9684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 274.863931][ T9684] ___sys_sendmsg+0x190/0x1e0 [ 274.863975][ T9684] ? __pfx____sys_sendmsg+0x10/0x10 [ 274.864059][ T9684] __sys_sendmsg+0x170/0x220 [ 274.864095][ T9684] ? __pfx___sys_sendmsg+0x10/0x10 [ 274.864147][ T9684] ? rcu_is_watching+0x12/0xc0 [ 274.864184][ T9684] do_syscall_64+0x10b/0xf80 [ 274.864208][ T9684] ? clear_bhb_loop+0x40/0x90 [ 274.864242][ T9684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.864270][ T9684] RIP: 0033:0x7ff3d6f9ce59 [ 274.864292][ T9684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.864319][ T9684] RSP: 002b:00007ff3d7e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 274.864345][ T9684] RAX: ffffffffffffffda RBX: 00007ff3d7215fa0 RCX: 00007ff3d6f9ce59 [ 274.864383][ T9684] RDX: 000000000004c848 RSI: 0000200000006140 RDI: 0000000000000003 [ 274.864400][ T9684] RBP: 00007ff3d7e5e090 R08: 0000000000000000 R09: 0000000000000000 [ 274.864417][ T9684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 274.864434][ T9684] R13: 00007ff3d7216038 R14: 00007ff3d7215fa0 R15: 00007fff45023438 [ 274.864471][ T9684] [ 275.494225][ T9685] Process accounting resumed [ 275.962313][ T9709] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 275.968868][ T9709] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 277.402605][ T9733] FAULT_INJECTION: forcing a failure. [ 277.402605][ T9733] name fail_futex, interval 1, probability 0, space 0, times 0 [ 277.420553][ T9733] CPU: 0 UID: 0 PID: 9733 Comm: syz.2.945 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.420599][ T9733] Tainted: [L]=SOFTLOCKUP [ 277.420609][ T9733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 277.420626][ T9733] Call Trace: [ 277.420637][ T9733] [ 277.420648][ T9733] dump_stack_lvl+0x100/0x190 [ 277.420684][ T9733] should_fail_ex.cold+0x5/0xa [ 277.420721][ T9733] get_futex_key+0x1d2/0x1510 [ 277.420755][ T9733] ? __pfx_get_futex_key+0x10/0x10 [ 277.420782][ T9733] ? arch_get_unmapped_area_topdown+0x3e6/0x9b0 [ 277.420832][ T9733] futex_wait_setup+0x83/0x510 [ 277.420877][ T9733] __futex_wait+0x19f/0x300 [ 277.420916][ T9733] ? __pfx___futex_wait+0x10/0x10 [ 277.420960][ T9733] ? __pfx_futex_wake_mark+0x10/0x10 [ 277.421003][ T9733] ? futex_hash+0x2ad/0x370 [ 277.421034][ T9733] ? futex_hash+0x141/0x370 [ 277.421067][ T9733] futex_wait+0xe6/0x370 [ 277.421109][ T9733] ? __pfx_futex_wait+0x10/0x10 [ 277.421166][ T9733] do_futex+0x1ef/0x350 [ 277.421199][ T9733] ? __pfx_do_futex+0x10/0x10 [ 277.421227][ T9733] ? do_raw_spin_lock+0x128/0x260 [ 277.421267][ T9733] __x64_sys_futex+0x34f/0x4d0 [ 277.421306][ T9733] ? __pfx_ksys_mmap_pgoff+0x10/0x10 [ 277.421337][ T9733] ? __pfx___x64_sys_futex+0x10/0x10 [ 277.421374][ T9733] ? rcu_is_watching+0x12/0xc0 [ 277.421411][ T9733] do_syscall_64+0x10b/0xf80 [ 277.421436][ T9733] ? clear_bhb_loop+0x40/0x90 [ 277.421469][ T9733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.421498][ T9733] RIP: 0033:0x7f297919ce59 [ 277.421520][ T9733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.421548][ T9733] RSP: 002b:00007f297a0580e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 277.421575][ T9733] RAX: ffffffffffffffda RBX: 00007f2979415fa8 RCX: 00007f297919ce59 [ 277.421592][ T9733] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2979415fa8 [ 277.421606][ T9733] RBP: 00007f2979415fa0 R08: 0000000000000000 R09: 0000000000000000 [ 277.421621][ T9733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.421635][ T9733] R13: 00007f2979416038 R14: 00007ffd8d61ea20 R15: 00007ffd8d61eb08 [ 277.421669][ T9733] [ 277.735445][ T9737] netlink: 146 bytes leftover after parsing attributes in process `syz.0.944'. [ 278.033741][ T9745] netlink: 350 bytes leftover after parsing attributes in process `syz.1.948'. [ 278.042495][ T9747] netlink: 350 bytes leftover after parsing attributes in process `syz.0.949'. [ 278.270907][ T9752] bond0: invalid ARP target specified [ 278.307329][ T9752] nbd: socks must be embedded in a SOCK_ITEM attr [ 278.314988][ T9752] block nbd0: shutting down sockets [ 278.340832][ T9758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.951'. [ 278.582671][ T9762] FAULT_INJECTION: forcing a failure. [ 278.582671][ T9762] name failslab, interval 1, probability 0, space 0, times 0 [ 278.600358][ T9762] CPU: 1 UID: 0 PID: 9762 Comm: syz.0.954 Tainted: G L syzkaller #0 PREEMPT(full) [ 278.600404][ T9762] Tainted: [L]=SOFTLOCKUP [ 278.600414][ T9762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 278.600431][ T9762] Call Trace: [ 278.600440][ T9762] [ 278.600450][ T9762] dump_stack_lvl+0x100/0x190 [ 278.600488][ T9762] should_fail_ex.cold+0x5/0xa [ 278.600524][ T9762] should_failslab+0xc2/0x120 [ 278.600558][ T9762] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 278.600605][ T9762] ? ptlock_alloc+0x1f/0x70 [ 278.600648][ T9762] ? __lock_acquire+0x4a5/0x2630 [ 278.600682][ T9762] ptlock_alloc+0x1f/0x70 [ 278.600724][ T9762] pte_alloc_one+0x82/0x3d0 [ 278.600764][ T9762] __pte_alloc+0x6d/0x3e0 [ 278.600796][ T9762] ? __pfx___pte_alloc+0x10/0x10 [ 278.600831][ T9762] ? do_raw_spin_lock+0x128/0x260 [ 278.600864][ T9762] ? find_held_lock+0x2b/0x80 [ 278.600904][ T9762] do_anonymous_page+0x13c6/0x2050 [ 278.600953][ T9762] ? __pmd_alloc+0x3fb/0x950 [ 278.600990][ T9762] __handle_mm_fault+0x1d2c/0x2a00 [ 278.601034][ T9762] ? mt_find+0x45e/0x8e0 [ 278.601066][ T9762] ? __pfx___handle_mm_fault+0x10/0x10 [ 278.601107][ T9762] ? __pfx_mt_find+0x10/0x10 [ 278.601176][ T9762] handle_mm_fault+0x36d/0xa20 [ 278.601225][ T9762] __get_user_pages+0x1178/0x32a0 [ 278.601276][ T9762] ? __pfx___get_user_pages+0x10/0x10 [ 278.601328][ T9762] get_user_pages_remote+0x3d2/0xb10 [ 278.601372][ T9762] ? __pfx_get_user_pages_remote+0x10/0x10 [ 278.601411][ T9762] ? __pfx_create_init_stack_vma+0x10/0x10 [ 278.601452][ T9762] get_arg_page+0xf4/0x310 [ 278.601483][ T9762] ? __pfx_get_arg_page+0x10/0x10 [ 278.601514][ T9762] ? alloc_bprm+0x3da/0x710 [ 278.601539][ T9762] ? alloc_bprm+0x3da/0x710 [ 278.601572][ T9762] copy_string_kernel+0x17d/0x3f0 [ 278.601603][ T9762] ? alloc_bprm+0x420/0x710 [ 278.601635][ T9762] do_execveat_common.isra.0+0x2e6/0x580 [ 278.601675][ T9762] __x64_sys_execve+0x93/0xd0 [ 278.601709][ T9762] do_syscall_64+0x10b/0xf80 [ 278.601735][ T9762] ? clear_bhb_loop+0x40/0x90 [ 278.601770][ T9762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.601799][ T9762] RIP: 0033:0x7fdaf159ce59 [ 278.601822][ T9762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.601850][ T9762] RSP: 002b:00007fdaf24ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 278.601878][ T9762] RAX: ffffffffffffffda RBX: 00007fdaf1815fa0 RCX: 00007fdaf159ce59 [ 278.601896][ T9762] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 278.601913][ T9762] RBP: 00007fdaf1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 278.601931][ T9762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.601948][ T9762] R13: 00007fdaf1816038 R14: 00007fdaf1815fa0 R15: 00007fff37ee7188 [ 278.601986][ T9762] [ 279.121020][ T9775] FAULT_INJECTION: forcing a failure. [ 279.121020][ T9775] name failslab, interval 1, probability 0, space 0, times 0 [ 279.134167][ T9775] CPU: 1 UID: 0 PID: 9775 Comm: syz.0.957 Tainted: G L syzkaller #0 PREEMPT(full) [ 279.134211][ T9775] Tainted: [L]=SOFTLOCKUP [ 279.134220][ T9775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 279.134237][ T9775] Call Trace: [ 279.134246][ T9775] [ 279.134256][ T9775] dump_stack_lvl+0x100/0x190 [ 279.134292][ T9775] should_fail_ex.cold+0x5/0xa [ 279.134327][ T9775] ? tomoyo_realpath_from_path+0xb6/0x690 [ 279.134363][ T9775] should_failslab+0xc2/0x120 [ 279.134395][ T9775] __kmalloc_noprof+0xe0/0x850 [ 279.134419][ T9775] ? kfree+0x1dd/0x6c0 [ 279.134462][ T9775] tomoyo_realpath_from_path+0xb6/0x690 [ 279.134507][ T9775] tomoyo_path_number_perm+0x23c/0x580 [ 279.134537][ T9775] ? tomoyo_path_number_perm+0x22e/0x580 [ 279.134570][ T9775] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 279.134639][ T9775] ? find_held_lock+0x2b/0x80 [ 279.134674][ T9775] ? __fget_files+0x215/0x3d0 [ 279.134704][ T9775] ? hook_file_ioctl_common+0x149/0x410 [ 279.134735][ T9775] ? __fget_files+0x215/0x3d0 [ 279.134773][ T9775] ? __fget_files+0x21f/0x3d0 [ 279.134811][ T9775] security_file_ioctl+0xd3/0x230 [ 279.134844][ T9775] __x64_sys_ioctl+0xb7/0x210 [ 279.134875][ T9775] do_syscall_64+0x10b/0xf80 [ 279.134900][ T9775] ? clear_bhb_loop+0x40/0x90 [ 279.134934][ T9775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.134962][ T9775] RIP: 0033:0x7fdaf159ce59 [ 279.134985][ T9775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.135012][ T9775] RSP: 002b:00007fdaf24ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 279.135038][ T9775] RAX: ffffffffffffffda RBX: 00007fdaf1815fa0 RCX: 00007fdaf159ce59 [ 279.135057][ T9775] RDX: 0000000000000354 RSI: 0000000000004c80 RDI: 000000000000000b [ 279.135073][ T9775] RBP: 00007fdaf24ca090 R08: 0000000000000000 R09: 0000000000000000 [ 279.135089][ T9775] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.135104][ T9775] R13: 00007fdaf1816038 R14: 00007fdaf1815fa0 R15: 00007fff37ee7188 [ 279.135144][ T9775] [ 279.135222][ T9775] ERROR: Out of memory at tomoyo_realpath_from_path. [ 279.768165][ T9788] netlink: 12 bytes leftover after parsing attributes in process `syz.3.959'. [ 279.906993][ T9798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.959'. [ 280.238602][ T9811] bond0: invalid ARP target specified [ 280.279240][ T9811] netlink: 28 bytes leftover after parsing attributes in process `syz.3.963'. [ 281.512457][ T9847] netlink: 350 bytes leftover after parsing attributes in process `syz.3.971'. [ 281.716002][ T9849] netlink: 350 bytes leftover after parsing attributes in process `syz.3.972'. [ 282.352640][ T9861] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 282.404482][ T9835] Process accounting resumed [ 282.412816][ T9861] CIFS mount error: No usable UNC path provided in device string! [ 282.412816][ T9861] [ 282.427542][ T9861] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 282.573941][ T9864] input: jJǸ-¶š9ã%vø“ûJ86Ö‘ as /devices/virtual/input/input10 [ 283.758982][ T9900] FAULT_INJECTION: forcing a failure. [ 283.758982][ T9900] name failslab, interval 1, probability 0, space 0, times 0 [ 283.805950][ T9900] CPU: 0 UID: 0 PID: 9900 Comm: syz.1.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 283.805993][ T9900] Tainted: [L]=SOFTLOCKUP [ 283.806002][ T9900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 283.806018][ T9900] Call Trace: [ 283.806027][ T9900] [ 283.806037][ T9900] dump_stack_lvl+0x100/0x190 [ 283.806073][ T9900] should_fail_ex.cold+0x5/0xa [ 283.806107][ T9900] should_failslab+0xc2/0x120 [ 283.806140][ T9900] __kmalloc_cache_noprof+0x7a/0x6f0 [ 283.806177][ T9900] ? init_srcu_struct_fields+0xa69/0xfa0 [ 283.806212][ T9900] init_srcu_struct_fields+0xa69/0xfa0 [ 283.806244][ T9900] blk_mq_alloc_tag_set+0x3cc/0x1330 [ 283.806280][ T9900] ? idr_alloc+0xdd/0x130 [ 283.806305][ T9900] ? __pfx_idr_alloc+0x10/0x10 [ 283.806339][ T9900] loop_add+0x3b7/0xb60 [ 283.806378][ T9900] ? __pfx_loop_add+0x10/0x10 [ 283.806438][ T9900] ? find_held_lock+0x2b/0x80 [ 283.806471][ T9900] ? __fget_files+0x215/0x3d0 [ 283.806507][ T9900] loop_control_ioctl+0xae/0x620 [ 283.806536][ T9900] ? __pfx_loop_control_ioctl+0x10/0x10 [ 283.806570][ T9900] ? __pfx_loop_control_ioctl+0x10/0x10 [ 283.806604][ T9900] __x64_sys_ioctl+0x18e/0x210 [ 283.806636][ T9900] do_syscall_64+0x10b/0xf80 [ 283.806661][ T9900] ? clear_bhb_loop+0x40/0x90 [ 283.806694][ T9900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.806731][ T9900] RIP: 0033:0x7fe13f79ce59 [ 283.806755][ T9900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.806782][ T9900] RSP: 002b:00007fe140706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 283.806808][ T9900] RAX: ffffffffffffffda RBX: 00007fe13fa16090 RCX: 00007fe13f79ce59 [ 283.806827][ T9900] RDX: 0000000000000374 RSI: 0000000000004c80 RDI: 000000000000000a [ 283.806844][ T9900] RBP: 00007fe140706090 R08: 0000000000000000 R09: 0000000000000000 [ 283.806861][ T9900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.806878][ T9900] R13: 00007fe13fa16128 R14: 00007fe13fa16090 R15: 00007ffd4a4dcaa8 [ 283.806915][ T9900] [ 284.076902][ T9902] bond0: invalid ARP target specified [ 284.148968][ T9902] nbd: socks must be embedded in a SOCK_ITEM attr [ 284.205463][ T9902] block nbd0: shutting down sockets [ 284.232019][ T9904] netlink: 28 bytes leftover after parsing attributes in process `syz.2.986'. [ 286.351410][ T9947] bond0: invalid ARP target specified [ 286.374899][ T9947] netlink: 28 bytes leftover after parsing attributes in process `syz.0.997'. [ 286.851617][ T9955] hub 1-0:1.0: USB hub found [ 286.852048][ T9955] hub 1-0:1.0: 1 port detected [ 287.900569][ T9991] bond0: invalid ARP target specified [ 287.915396][ T9991] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1006'. [ 287.932915][ T9992] bond0: invalid ARP target specified [ 287.974323][ T9992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1005'. [ 288.615545][T10004] FAULT_INJECTION: forcing a failure. [ 288.615545][T10004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 288.653254][T10004] CPU: 0 UID: 0 PID: 10004 Comm: syz.0.1009 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.653294][T10004] Tainted: [L]=SOFTLOCKUP [ 288.653300][T10004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 288.653310][T10004] Call Trace: [ 288.653315][T10004] [ 288.653322][T10004] dump_stack_lvl+0x100/0x190 [ 288.653344][T10004] should_fail_ex.cold+0x5/0xa [ 288.653362][T10004] ? prepare_alloc_pages+0x16d/0x5f0 [ 288.653382][T10004] should_fail_alloc_page+0xeb/0x140 [ 288.653401][T10004] prepare_alloc_pages+0x1f0/0x5f0 [ 288.653420][T10004] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.653443][T10004] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 288.653468][T10004] ? unwind_get_return_address+0x59/0xa0 [ 288.653489][T10004] ? arch_stack_walk+0xa6/0xf0 [ 288.653515][T10004] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 288.653545][T10004] ? __pfx_stack_trace_save+0x10/0x10 [ 288.653566][T10004] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 288.653590][T10004] ? arch_stack_walk+0xa6/0xf0 [ 288.653613][T10004] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 288.653636][T10004] ? __pmd_alloc+0xbf/0x950 [ 288.653655][T10004] ? __handle_mm_fault+0xa9c/0x2a00 [ 288.653674][T10004] ? handle_mm_fault+0x36d/0xa20 [ 288.653694][T10004] ? __get_user_pages+0x1178/0x32a0 [ 288.653710][T10004] ? get_user_pages_remote+0x3d2/0xb10 [ 288.653727][T10004] ? get_arg_page+0xf4/0x310 [ 288.653741][T10004] ? copy_string_kernel+0x17d/0x3f0 [ 288.653755][T10004] ? do_execveat_common.isra.0+0x2e6/0x580 [ 288.653771][T10004] ? __x64_sys_execve+0x93/0xd0 [ 288.653785][T10004] ? do_syscall_64+0x10b/0xf80 [ 288.653798][T10004] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.653814][T10004] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 288.653837][T10004] ? policy_nodemask+0xed/0x4f0 [ 288.653856][T10004] alloc_pages_mpol+0x1fb/0x540 [ 288.653875][T10004] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 288.653895][T10004] ? __lock_acquire+0x4a5/0x2630 [ 288.653912][T10004] alloc_pages_noprof+0x1a/0x160 [ 288.653932][T10004] pte_alloc_one+0x1c/0x3d0 [ 288.653952][T10004] __pte_alloc+0x6d/0x3e0 [ 288.653969][T10004] ? __pfx___pte_alloc+0x10/0x10 [ 288.653986][T10004] ? do_raw_spin_lock+0x128/0x260 [ 288.654002][T10004] ? find_held_lock+0x2b/0x80 [ 288.654022][T10004] do_anonymous_page+0x13c6/0x2050 [ 288.654047][T10004] ? __pmd_alloc+0x3fb/0x950 [ 288.654067][T10004] __handle_mm_fault+0x1d2c/0x2a00 [ 288.654092][T10004] ? mt_find+0x45e/0x8e0 [ 288.654108][T10004] ? __pfx___handle_mm_fault+0x10/0x10 [ 288.654128][T10004] ? __pfx_mt_find+0x10/0x10 [ 288.654158][T10004] handle_mm_fault+0x36d/0xa20 [ 288.654183][T10004] __get_user_pages+0x1178/0x32a0 [ 288.654209][T10004] ? __pfx___get_user_pages+0x10/0x10 [ 288.654232][T10004] get_user_pages_remote+0x3d2/0xb10 [ 288.654254][T10004] ? __pfx_get_user_pages_remote+0x10/0x10 [ 288.654274][T10004] ? __pfx_create_init_stack_vma+0x10/0x10 [ 288.654313][T10004] get_arg_page+0xf4/0x310 [ 288.654342][T10004] ? __pfx_get_arg_page+0x10/0x10 [ 288.654374][T10004] ? alloc_bprm+0x3da/0x710 [ 288.654403][T10004] ? alloc_bprm+0x3da/0x710 [ 288.654422][T10004] copy_string_kernel+0x17d/0x3f0 [ 288.654440][T10004] ? alloc_bprm+0x420/0x710 [ 288.654458][T10004] do_execveat_common.isra.0+0x2e6/0x580 [ 288.654479][T10004] __x64_sys_execve+0x93/0xd0 [ 288.654497][T10004] do_syscall_64+0x10b/0xf80 [ 288.654510][T10004] ? clear_bhb_loop+0x40/0x90 [ 288.654538][T10004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.654554][T10004] RIP: 0033:0x7fdaf159ce59 [ 288.654568][T10004] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 288.654583][T10004] RSP: 002b:00007fdaf24ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 288.654598][T10004] RAX: ffffffffffffffda RBX: 00007fdaf1815fa0 RCX: 00007fdaf159ce59 [ 288.654608][T10004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 288.654617][T10004] RBP: 00007fdaf1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 288.654627][T10004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.654636][T10004] R13: 00007fdaf1816038 R14: 00007fdaf1815fa0 R15: 00007fff37ee7188 [ 288.654655][T10004] [ 289.413666][T10007] zero sized request [ 289.629977][T10023] bond0: invalid ARP target specified [ 289.687009][T10023] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1015'. [ 290.014792][T10031] netlink: 350 bytes leftover after parsing attributes in process `syz.1.1017'. [ 290.639871][T10039] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1019'. [ 291.575436][T10068] FAULT_INJECTION: forcing a failure. [ 291.575436][T10068] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 291.575561][T10068] CPU: 1 UID: 0 PID: 10068 Comm: syz.2.1025 Tainted: G L syzkaller #0 PREEMPT(full) [ 291.575601][T10068] Tainted: [L]=SOFTLOCKUP [ 291.575611][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 291.575629][T10068] Call Trace: [ 291.575638][T10068] [ 291.575649][T10068] dump_stack_lvl+0x100/0x190 [ 291.575687][T10068] should_fail_ex.cold+0x5/0xa [ 291.575718][T10068] ? prepare_alloc_pages+0x16d/0x5f0 [ 291.575758][T10068] should_fail_alloc_page+0xeb/0x140 [ 291.575796][T10068] prepare_alloc_pages+0x1f0/0x5f0 [ 291.575834][T10068] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 291.575878][T10068] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 291.575928][T10068] ? unwind_get_return_address+0x59/0xa0 [ 291.575966][T10068] ? arch_stack_walk+0xa6/0xf0 [ 291.576020][T10068] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 291.576065][T10068] ? __pfx_stack_trace_save+0x10/0x10 [ 291.576100][T10068] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 291.576144][T10068] ? arch_stack_walk+0xa6/0xf0 [ 291.576184][T10068] ? kmem_cache_alloc_noprof+0x241/0x6e0 [ 291.576225][T10068] ? __pmd_alloc+0xbf/0x950 [ 291.576256][T10068] ? __handle_mm_fault+0xa9c/0x2a00 [ 291.576292][T10068] ? handle_mm_fault+0x36d/0xa20 [ 291.576326][T10068] ? __get_user_pages+0x1178/0x32a0 [ 291.576356][T10068] ? get_user_pages_remote+0x3d2/0xb10 [ 291.576387][T10068] ? get_arg_page+0xf4/0x310 [ 291.576411][T10068] ? copy_string_kernel+0x17d/0x3f0 [ 291.576436][T10068] ? do_execveat_common.isra.0+0x2e6/0x580 [ 291.576464][T10068] ? __x64_sys_execve+0x93/0xd0 [ 291.576490][T10068] ? do_syscall_64+0x10b/0xf80 [ 291.576513][T10068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.576540][T10068] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 291.576580][T10068] ? policy_nodemask+0xed/0x4f0 [ 291.576613][T10068] alloc_pages_mpol+0x1fb/0x540 [ 291.576646][T10068] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 291.576680][T10068] ? __lock_acquire+0x4a5/0x2630 [ 291.576709][T10068] alloc_pages_noprof+0x1a/0x160 [ 291.576746][T10068] pte_alloc_one+0x1c/0x3d0 [ 291.576781][T10068] __pte_alloc+0x6d/0x3e0 [ 291.576809][T10068] ? __pfx___pte_alloc+0x10/0x10 [ 291.576840][T10068] ? do_raw_spin_lock+0x128/0x260 [ 291.576868][T10068] ? find_held_lock+0x2b/0x80 [ 291.576905][T10068] do_anonymous_page+0x13c6/0x2050 [ 291.576949][T10068] ? __pmd_alloc+0x3fb/0x950 [ 291.576984][T10068] __handle_mm_fault+0x1d2c/0x2a00 [ 291.577035][T10068] ? mt_find+0x45e/0x8e0 [ 291.577062][T10068] ? __pfx___handle_mm_fault+0x10/0x10 [ 291.577100][T10068] ? __pfx_mt_find+0x10/0x10 [ 291.577152][T10068] handle_mm_fault+0x36d/0xa20 [ 291.577197][T10068] __get_user_pages+0x1178/0x32a0 [ 291.577242][T10068] ? __pfx___get_user_pages+0x10/0x10 [ 291.577283][T10068] get_user_pages_remote+0x3d2/0xb10 [ 291.577322][T10068] ? __pfx_get_user_pages_remote+0x10/0x10 [ 291.577357][T10068] ? __pfx_create_init_stack_vma+0x10/0x10 [ 291.577394][T10068] get_arg_page+0xf4/0x310 [ 291.577420][T10068] ? __pfx_get_arg_page+0x10/0x10 [ 291.577448][T10068] ? alloc_bprm+0x3da/0x710 [ 291.577474][T10068] ? alloc_bprm+0x3da/0x710 [ 291.577503][T10068] copy_string_kernel+0x17d/0x3f0 [ 291.577532][T10068] ? alloc_bprm+0x420/0x710 [ 291.577561][T10068] do_execveat_common.isra.0+0x2e6/0x580 [ 291.577597][T10068] __x64_sys_execve+0x93/0xd0 [ 291.577627][T10068] do_syscall_64+0x10b/0xf80 [ 291.577650][T10068] ? clear_bhb_loop+0x40/0x90 [ 291.577682][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 291.577708][T10068] RIP: 0033:0x7f297919ce59 [ 291.577731][T10068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 291.577756][T10068] RSP: 002b:00007f297a058028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 291.577782][T10068] RAX: ffffffffffffffda RBX: 00007f2979415fa0 RCX: 00007f297919ce59 [ 291.577800][T10068] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 291.577816][T10068] RBP: 00007f2979232d6f R08: 0000000000000000 R09: 0000000000000000 [ 291.577833][T10068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 291.577849][T10068] R13: 00007f2979416038 R14: 00007f2979415fa0 R15: 00007ffd8d61eb08 [ 291.577884][T10068] [ 293.441288][T10107] FAULT_INJECTION: forcing a failure. [ 293.441288][T10107] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 293.458444][T10107] CPU: 0 UID: 0 PID: 10107 Comm: syz.0.1033 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.458471][T10107] Tainted: [L]=SOFTLOCKUP [ 293.458477][T10107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 293.458486][T10107] Call Trace: [ 293.458492][T10107] [ 293.458499][T10107] dump_stack_lvl+0x100/0x190 [ 293.458522][T10107] should_fail_ex.cold+0x5/0xa [ 293.458539][T10107] ? prepare_alloc_pages+0x16d/0x5f0 [ 293.458560][T10107] should_fail_alloc_page+0xeb/0x140 [ 293.458579][T10107] prepare_alloc_pages+0x1f0/0x5f0 [ 293.458597][T10107] ? rcu_is_watching+0x12/0xc0 [ 293.458619][T10107] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 293.458642][T10107] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 293.458666][T10107] ? arch_stack_walk+0xa6/0xf0 [ 293.458704][T10107] ? mas_next_node+0x29c/0x1020 [ 293.458745][T10107] ? stack_trace_save+0x8e/0xc0 [ 293.458782][T10107] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 293.458827][T10107] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 293.458874][T10107] ? mt_validate_nulls+0x1b3/0xa10 [ 293.458902][T10107] ? look_up_lock_class+0x55/0x120 [ 293.458951][T10107] ? __lock_acquire+0x4a5/0x2630 [ 293.458973][T10107] ? __lock_acquire+0x4a5/0x2630 [ 293.458986][T10107] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 293.459009][T10107] ? policy_nodemask+0xed/0x4f0 [ 293.459028][T10107] alloc_pages_mpol+0x1fb/0x540 [ 293.459046][T10107] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 293.459064][T10107] ? find_held_lock+0x2b/0x80 [ 293.459083][T10107] ? __pud_alloc+0x4f6/0x690 [ 293.459100][T10107] ? __pud_alloc+0x4f6/0x690 [ 293.459129][T10107] alloc_pages_noprof+0x1a/0x160 [ 293.459150][T10107] __pmd_alloc+0x3b/0x950 [ 293.459167][T10107] ? __pud_alloc+0x4fb/0x690 [ 293.459189][T10107] __handle_mm_fault+0xa9c/0x2a00 [ 293.459233][T10107] ? mt_find+0x45e/0x8e0 [ 293.459259][T10107] ? __pfx___handle_mm_fault+0x10/0x10 [ 293.459296][T10107] ? __pfx_mt_find+0x10/0x10 [ 293.459355][T10107] handle_mm_fault+0x36d/0xa20 [ 293.459404][T10107] __get_user_pages+0x1178/0x32a0 [ 293.459452][T10107] ? __pfx___get_user_pages+0x10/0x10 [ 293.459498][T10107] get_user_pages_remote+0x3d2/0xb10 [ 293.459542][T10107] ? __pfx_get_user_pages_remote+0x10/0x10 [ 293.459580][T10107] ? __pfx_create_init_stack_vma+0x10/0x10 [ 293.459620][T10107] get_arg_page+0xf4/0x310 [ 293.459650][T10107] ? __pfx_get_arg_page+0x10/0x10 [ 293.459679][T10107] ? alloc_bprm+0x3da/0x710 [ 293.459706][T10107] ? alloc_bprm+0x3da/0x710 [ 293.459738][T10107] copy_string_kernel+0x17d/0x3f0 [ 293.459762][T10107] ? alloc_bprm+0x420/0x710 [ 293.459779][T10107] do_execveat_common.isra.0+0x2e6/0x580 [ 293.459800][T10107] __x64_sys_execve+0x93/0xd0 [ 293.459817][T10107] do_syscall_64+0x10b/0xf80 [ 293.459831][T10107] ? clear_bhb_loop+0x40/0x90 [ 293.459849][T10107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.459866][T10107] RIP: 0033:0x7fdaf159ce59 [ 293.459883][T10107] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.459901][T10107] RSP: 002b:00007fdaf24ca028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 293.459917][T10107] RAX: ffffffffffffffda RBX: 00007fdaf1815fa0 RCX: 00007fdaf159ce59 [ 293.459927][T10107] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 293.459936][T10107] RBP: 00007fdaf1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 293.459946][T10107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.459954][T10107] R13: 00007fdaf1816038 R14: 00007fdaf1815fa0 R15: 00007fff37ee7188 [ 293.459975][T10107] [ 294.326710][T10126] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 294.333207][T10126] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 295.053684][T10138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1040'. [ 295.858372][T10149] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 295.864851][T10149] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 295.977717][T10152] FAULT_INJECTION: forcing a failure. [ 295.977717][T10152] name failslab, interval 1, probability 0, space 0, times 0 [ 296.002802][T10152] CPU: 0 UID: 0 PID: 10152 Comm: syz.1.1044 Tainted: G L syzkaller #0 PREEMPT(full) [ 296.002851][T10152] Tainted: [L]=SOFTLOCKUP [ 296.002861][T10152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 296.002877][T10152] Call Trace: [ 296.002885][T10152] [ 296.002896][T10152] dump_stack_lvl+0x100/0x190 [ 296.002940][T10152] should_fail_ex.cold+0x5/0xa [ 296.002978][T10152] should_failslab+0xc2/0x120 [ 296.003012][T10152] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 296.003057][T10152] ? __pmd_alloc+0xbf/0x950 [ 296.003101][T10152] __pmd_alloc+0xbf/0x950 [ 296.003134][T10152] ? __pud_alloc+0x4fb/0x690 [ 296.003174][T10152] __handle_mm_fault+0xa9c/0x2a00 [ 296.003224][T10152] ? mt_find+0x45e/0x8e0 [ 296.003255][T10152] ? __pfx___handle_mm_fault+0x10/0x10 [ 296.003296][T10152] ? __pfx_mt_find+0x10/0x10 [ 296.003355][T10152] handle_mm_fault+0x36d/0xa20 [ 296.003407][T10152] __get_user_pages+0x1178/0x32a0 [ 296.003458][T10152] ? __pfx___get_user_pages+0x10/0x10 [ 296.003506][T10152] get_user_pages_remote+0x3d2/0xb10 [ 296.003550][T10152] ? __pfx_get_user_pages_remote+0x10/0x10 [ 296.003590][T10152] ? __pfx_create_init_stack_vma+0x10/0x10 [ 296.003632][T10152] get_arg_page+0xf4/0x310 [ 296.003663][T10152] ? __pfx_get_arg_page+0x10/0x10 [ 296.003705][T10152] ? alloc_bprm+0x3da/0x710 [ 296.003735][T10152] ? alloc_bprm+0x3da/0x710 [ 296.003770][T10152] copy_string_kernel+0x17d/0x3f0 [ 296.003803][T10152] ? alloc_bprm+0x420/0x710 [ 296.003838][T10152] do_execveat_common.isra.0+0x2e6/0x580 [ 296.003879][T10152] __x64_sys_execve+0x93/0xd0 [ 296.003914][T10152] do_syscall_64+0x10b/0xf80 [ 296.003940][T10152] ? clear_bhb_loop+0x40/0x90 [ 296.003972][T10152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.004000][T10152] RIP: 0033:0x7fe13f79ce59 [ 296.004021][T10152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.004049][T10152] RSP: 002b:00007fe140727028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 296.004076][T10152] RAX: ffffffffffffffda RBX: 00007fe13fa15fa0 RCX: 00007fe13f79ce59 [ 296.004095][T10152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 296.004113][T10152] RBP: 00007fe13f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 296.004129][T10152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.004145][T10152] R13: 00007fe13fa16038 R14: 00007fe13fa15fa0 R15: 00007ffd4a4dcaa8 [ 296.004182][T10152] [ 298.146848][T10201] ubi0: attaching mtd0 [ 298.189483][T10201] ubi0: scanning is finished [ 298.214163][T10201] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 298.569083][T10201] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 298.765663][T10220] usb usb21: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 299.385660][T10242] ACPI: Can not change Invalid GPE/Fixed Event status [ 299.515581][T10244] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1062'. [ 300.228072][T10254] bond0: invalid ARP target specified [ 300.255605][T10254] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1065'. [ 301.103365][T10250] random: crng reseeded on system resumption [ 301.427180][T10294] FAULT_INJECTION: forcing a failure. [ 301.427180][T10294] name failslab, interval 1, probability 0, space 0, times 0 [ 301.447435][T10294] CPU: 0 UID: 0 PID: 10294 Comm: syz.1.1072 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.447477][T10294] Tainted: [L]=SOFTLOCKUP [ 301.447485][T10294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.447502][T10294] Call Trace: [ 301.447510][T10294] [ 301.447521][T10294] dump_stack_lvl+0x100/0x190 [ 301.447555][T10294] should_fail_ex.cold+0x5/0xa [ 301.447588][T10294] should_failslab+0xc2/0x120 [ 301.447620][T10294] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 301.447661][T10294] ? taskstats_exit+0x67b/0xc10 [ 301.447697][T10294] ? rcu_is_watching+0x12/0xc0 [ 301.447735][T10294] taskstats_exit+0x67b/0xc10 [ 301.447774][T10294] ? __pfx_acct_update_integrals+0x10/0x10 [ 301.447813][T10294] ? __pfx_taskstats_exit+0x10/0x10 [ 301.447850][T10294] ? rcu_read_lock_any_held+0x6a/0xa0 [ 301.447883][T10294] ? exit_signals+0x395/0xaf0 [ 301.447919][T10294] do_exit+0x65c/0x2af0 [ 301.447960][T10294] ? __pfx_do_exit+0x10/0x10 [ 301.447995][T10294] ? do_raw_spin_lock+0x128/0x260 [ 301.448022][T10294] ? find_held_lock+0x2b/0x80 [ 301.448056][T10294] ? get_signal+0x7e5/0x2210 [ 301.448091][T10294] do_group_exit+0xd5/0x2a0 [ 301.448131][T10294] get_signal+0x20ff/0x2210 [ 301.448186][T10294] ? __pfx_get_signal+0x10/0x10 [ 301.448221][T10294] ? do_futex+0x192/0x350 [ 301.448249][T10294] arch_do_signal_or_restart+0x91/0x7a0 [ 301.448287][T10294] ? find_held_lock+0x2b/0x80 [ 301.448320][T10294] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 301.448367][T10294] ? __x64_sys_close_range+0x30f/0x5d0 [ 301.448402][T10294] ? rcu_is_watching+0x12/0xc0 [ 301.448438][T10294] exit_to_user_mode_loop+0x8b/0x4f0 [ 301.448463][T10294] ? rcu_is_watching+0x12/0xc0 [ 301.448497][T10294] do_syscall_64+0x6f2/0xf80 [ 301.448522][T10294] ? clear_bhb_loop+0x40/0x90 [ 301.448555][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.448582][T10294] RIP: 0033:0x7fe13f79ce59 [ 301.448604][T10294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.448629][T10294] RSP: 002b:00007fe1407270e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 301.448654][T10294] RAX: fffffffffffffe00 RBX: 00007fe13fa15fa8 RCX: 00007fe13f79ce59 [ 301.448672][T10294] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe13fa15fa8 [ 301.448688][T10294] RBP: 00007fe13fa15fa0 R08: 0000000000000000 R09: 0000000000000000 [ 301.448704][T10294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.448720][T10294] R13: 00007fe13fa16038 R14: 00007ffd4a4dc9c0 R15: 00007ffd4a4dcaa8 [ 301.448758][T10294] [ 301.472956][T10297] FAULT_INJECTION: forcing a failure. [ 301.472956][T10297] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 301.739603][T10297] CPU: 1 UID: 0 PID: 10297 Comm: syz.3.1073 Tainted: G L syzkaller #0 PREEMPT(full) [ 301.739646][T10297] Tainted: [L]=SOFTLOCKUP [ 301.739656][T10297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 301.739671][T10297] Call Trace: [ 301.739680][T10297] [ 301.739690][T10297] dump_stack_lvl+0x100/0x190 [ 301.739725][T10297] should_fail_ex.cold+0x5/0xa [ 301.739755][T10297] ? prepare_alloc_pages+0x16d/0x5f0 [ 301.739795][T10297] should_fail_alloc_page+0xeb/0x140 [ 301.739832][T10297] prepare_alloc_pages+0x1f0/0x5f0 [ 301.739868][T10297] ? rcu_is_watching+0x12/0xc0 [ 301.739907][T10297] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 301.739954][T10297] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 301.740000][T10297] ? arch_stack_walk+0xa6/0xf0 [ 301.740051][T10297] ? mas_next_node+0x29c/0x1020 [ 301.740095][T10297] ? stack_trace_save+0x8e/0xc0 [ 301.740145][T10297] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.740192][T10297] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 301.740243][T10297] ? mt_validate_nulls+0x1b3/0xa10 [ 301.740272][T10297] ? look_up_lock_class+0x55/0x120 [ 301.740323][T10297] ? __lock_acquire+0x4a5/0x2630 [ 301.740357][T10297] ? __lock_acquire+0x4a5/0x2630 [ 301.740384][T10297] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 301.740434][T10297] ? policy_nodemask+0xed/0x4f0 [ 301.740473][T10297] alloc_pages_mpol+0x1fb/0x540 [ 301.740511][T10297] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 301.740546][T10297] ? find_held_lock+0x2b/0x80 [ 301.740583][T10297] ? __pud_alloc+0x4f6/0x690 [ 301.740618][T10297] ? __pud_alloc+0x4f6/0x690 [ 301.740657][T10297] alloc_pages_noprof+0x1a/0x160 [ 301.740695][T10297] __pmd_alloc+0x3b/0x950 [ 301.740728][T10297] ? __pud_alloc+0x4fb/0x690 [ 301.740768][T10297] __handle_mm_fault+0xa9c/0x2a00 [ 301.740819][T10297] ? mt_find+0x45e/0x8e0 [ 301.740849][T10297] ? __pfx___handle_mm_fault+0x10/0x10 [ 301.740891][T10297] ? __pfx_mt_find+0x10/0x10 [ 301.740953][T10297] handle_mm_fault+0x36d/0xa20 [ 301.741004][T10297] __get_user_pages+0x1178/0x32a0 [ 301.741057][T10297] ? __pfx___get_user_pages+0x10/0x10 [ 301.741112][T10297] get_user_pages_remote+0x3d2/0xb10 [ 301.741157][T10297] ? __pfx_get_user_pages_remote+0x10/0x10 [ 301.741198][T10297] ? __pfx_create_init_stack_vma+0x10/0x10 [ 301.741240][T10297] get_arg_page+0xf4/0x310 [ 301.741272][T10297] ? __pfx_get_arg_page+0x10/0x10 [ 301.741305][T10297] ? alloc_bprm+0x3da/0x710 [ 301.741335][T10297] ? alloc_bprm+0x3da/0x710 [ 301.741369][T10297] copy_string_kernel+0x17d/0x3f0 [ 301.741403][T10297] ? alloc_bprm+0x420/0x710 [ 301.741438][T10297] do_execveat_common.isra.0+0x2e6/0x580 [ 301.741480][T10297] __x64_sys_execve+0x93/0xd0 [ 301.741516][T10297] do_syscall_64+0x10b/0xf80 [ 301.741543][T10297] ? clear_bhb_loop+0x40/0x90 [ 301.741579][T10297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.741609][T10297] RIP: 0033:0x7ff3d6f9ce59 [ 301.741634][T10297] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.741663][T10297] RSP: 002b:00007ff3d7e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 301.741692][T10297] RAX: ffffffffffffffda RBX: 00007ff3d7215fa0 RCX: 00007ff3d6f9ce59 [ 301.741712][T10297] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 301.741731][T10297] RBP: 00007ff3d7032d6f R08: 0000000000000000 R09: 0000000000000000 [ 301.741749][T10297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.741767][T10297] R13: 00007ff3d7216038 R14: 00007ff3d7215fa0 R15: 00007fff45023438 [ 301.741804][T10297] [ 302.339959][T10313] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 302.346475][T10313] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 302.575442][T10324] openvswitch: netlink: Missing valid actions attribute. [ 302.982050][T10330] nfsd: Unknown parameter '' [ 304.401284][T10356] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.718529][T10369] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 304.719467][T10356] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.724997][T10369] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 304.904151][T10371] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1090'. [ 304.941716][T10356] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.070448][T10376] bond0: invalid ARP target specified [ 305.114702][T10356] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.163563][T10377] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1091'. [ 305.212860][T10356] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.709120][ T5638] Bluetooth: hci3: unexpected event 0x1c length: 725 > 5 [ 306.168494][T10393] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1096'. [ 306.185524][T10393] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 307.162428][ T5638] Bluetooth: hci1: unexpected subevent 0x03 length: 123 > 9 [ 307.846841][T10422] FAULT_INJECTION: forcing a failure. [ 307.846841][T10422] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 307.877910][T10422] CPU: 0 UID: 0 PID: 10422 Comm: syz.3.1103 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.877956][T10422] Tainted: [L]=SOFTLOCKUP [ 307.877966][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 307.877988][T10422] Call Trace: [ 307.877997][T10422] [ 307.878008][T10422] dump_stack_lvl+0x100/0x190 [ 307.878044][T10422] should_fail_ex.cold+0x5/0xa [ 307.878074][T10422] ? prepare_alloc_pages+0x16d/0x5f0 [ 307.878113][T10422] should_fail_alloc_page+0xeb/0x140 [ 307.878149][T10422] prepare_alloc_pages+0x1f0/0x5f0 [ 307.878182][T10422] ? rcu_is_watching+0x12/0xc0 [ 307.878222][T10422] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 307.878271][T10422] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 307.878318][T10422] ? arch_stack_walk+0xa6/0xf0 [ 307.878366][T10422] ? mas_next_node+0x29c/0x1020 [ 307.878410][T10422] ? stack_trace_save+0x8e/0xc0 [ 307.878451][T10422] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 307.878497][T10422] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 307.878550][T10422] ? mt_validate_nulls+0x1b3/0xa10 [ 307.878588][T10422] ? look_up_lock_class+0x55/0x120 [ 307.878633][T10422] ? __lock_acquire+0x4a5/0x2630 [ 307.878665][T10422] ? __lock_acquire+0x4a5/0x2630 [ 307.878689][T10422] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 307.878733][T10422] ? policy_nodemask+0xed/0x4f0 [ 307.878768][T10422] alloc_pages_mpol+0x1fb/0x540 [ 307.878802][T10422] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 307.878834][T10422] ? find_held_lock+0x2b/0x80 [ 307.878868][T10422] ? __pud_alloc+0x4f6/0x690 [ 307.878903][T10422] ? __pud_alloc+0x4f6/0x690 [ 307.878944][T10422] alloc_pages_noprof+0x1a/0x160 [ 307.878981][T10422] __pmd_alloc+0x3b/0x950 [ 307.879013][T10422] ? __pud_alloc+0x4fb/0x690 [ 307.879049][T10422] __handle_mm_fault+0xa9c/0x2a00 [ 307.879094][T10422] ? mt_find+0x45e/0x8e0 [ 307.879123][T10422] ? __pfx___handle_mm_fault+0x10/0x10 [ 307.879159][T10422] ? __pfx_mt_find+0x10/0x10 [ 307.879212][T10422] handle_mm_fault+0x36d/0xa20 [ 307.879254][T10422] __get_user_pages+0x1178/0x32a0 [ 307.879301][T10422] ? __pfx___get_user_pages+0x10/0x10 [ 307.879345][T10422] get_user_pages_remote+0x3d2/0xb10 [ 307.879383][T10422] ? __pfx_get_user_pages_remote+0x10/0x10 [ 307.879417][T10422] ? __pfx_create_init_stack_vma+0x10/0x10 [ 307.879457][T10422] get_arg_page+0xf4/0x310 [ 307.879486][T10422] ? __pfx_get_arg_page+0x10/0x10 [ 307.879516][T10422] ? alloc_bprm+0x3da/0x710 [ 307.879542][T10422] ? alloc_bprm+0x3da/0x710 [ 307.879583][T10422] copy_string_kernel+0x17d/0x3f0 [ 307.879615][T10422] ? alloc_bprm+0x420/0x710 [ 307.879646][T10422] do_execveat_common.isra.0+0x2e6/0x580 [ 307.879682][T10422] __x64_sys_execve+0x93/0xd0 [ 307.879715][T10422] do_syscall_64+0x10b/0xf80 [ 307.879739][T10422] ? clear_bhb_loop+0x40/0x90 [ 307.879774][T10422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.879803][T10422] RIP: 0033:0x7ff3d6f9ce59 [ 307.879828][T10422] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.879857][T10422] RSP: 002b:00007ff3d7e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 307.879892][T10422] RAX: ffffffffffffffda RBX: 00007ff3d7215fa0 RCX: 00007ff3d6f9ce59 [ 307.879912][T10422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 307.879929][T10422] RBP: 00007ff3d7032d6f R08: 0000000000000000 R09: 0000000000000000 [ 307.879946][T10422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.879962][T10422] R13: 00007ff3d7216038 R14: 00007ff3d7215fa0 R15: 00007fff45023438 [ 307.880002][T10422] [ 308.538950][T10429] FAULT_INJECTION: forcing a failure. [ 308.538950][T10429] name failslab, interval 1, probability 0, space 0, times 0 [ 308.551667][T10429] CPU: 1 UID: 0 PID: 10429 Comm: syz.2.1106 Tainted: G L syzkaller #0 PREEMPT(full) [ 308.551710][T10429] Tainted: [L]=SOFTLOCKUP [ 308.551720][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 308.551736][T10429] Call Trace: [ 308.551745][T10429] [ 308.551754][T10429] dump_stack_lvl+0x100/0x190 [ 308.551775][T10429] should_fail_ex.cold+0x5/0xa [ 308.551795][T10429] should_failslab+0xc2/0x120 [ 308.551820][T10429] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 308.551844][T10429] ? vm_area_alloc+0x1f/0x160 [ 308.551870][T10429] vm_area_alloc+0x1f/0x160 [ 308.551891][T10429] create_init_stack_vma+0x2ad/0xc10 [ 308.551910][T10429] ? __lock_acquire+0x4a5/0x2630 [ 308.551925][T10429] ? __pfx_create_init_stack_vma+0x10/0x10 [ 308.551940][T10429] ? __percpu_counter_init_many+0x2bc/0x3b0 [ 308.551957][T10429] ? rcu_is_watching+0x12/0xc0 [ 308.551976][T10429] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 308.552003][T10429] ? do_raw_spin_lock+0x128/0x260 [ 308.552019][T10429] ? find_held_lock+0x2b/0x80 [ 308.552038][T10429] ? alloc_bprm+0x3da/0x710 [ 308.552053][T10429] ? alloc_bprm+0x3da/0x710 [ 308.552072][T10429] alloc_bprm+0x405/0x710 [ 308.552089][T10429] do_execveat_common.isra.0+0x19c/0x580 [ 308.552106][T10429] ? do_getname+0x191/0x390 [ 308.552129][T10429] __x64_sys_execve+0x93/0xd0 [ 308.552146][T10429] do_syscall_64+0x10b/0xf80 [ 308.552159][T10429] ? clear_bhb_loop+0x40/0x90 [ 308.552177][T10429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.552192][T10429] RIP: 0033:0x7f297919ce59 [ 308.552206][T10429] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.552220][T10429] RSP: 002b:00007f297a058028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 308.552235][T10429] RAX: ffffffffffffffda RBX: 00007f2979415fa0 RCX: 00007f297919ce59 [ 308.552245][T10429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 308.552255][T10429] RBP: 00007f2979232d6f R08: 0000000000000000 R09: 0000000000000000 [ 308.552264][T10429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.552273][T10429] R13: 00007f2979416038 R14: 00007f2979415fa0 R15: 00007ffd8d61eb08 [ 308.552292][T10429] [ 309.112545][T10435] netlink: 350 bytes leftover after parsing attributes in process `syz.2.1108'. [ 309.240351][T10438] bond0: invalid ARP target specified [ 309.251391][T10438] block nbd0: Unsupported socket: should be TCP or UNIX. [ 309.278386][T10438] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1109'. [ 309.377276][T10440] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1110'. [ 310.534921][T10451] FAULT_INJECTION: forcing a failure. [ 310.534921][T10451] name failslab, interval 1, probability 0, space 0, times 0 [ 310.549522][T10451] CPU: 1 UID: 0 PID: 10451 Comm: syz.3.1113 Tainted: G L syzkaller #0 PREEMPT(full) [ 310.549567][T10451] Tainted: [L]=SOFTLOCKUP [ 310.549577][T10451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 310.549594][T10451] Call Trace: [ 310.549603][T10451] [ 310.549613][T10451] dump_stack_lvl+0x100/0x190 [ 310.549652][T10451] should_fail_ex.cold+0x5/0xa [ 310.549691][T10451] should_failslab+0xc2/0x120 [ 310.549724][T10451] kmem_cache_alloc_noprof+0x7b/0x6e0 [ 310.549771][T10451] ? __pmd_alloc+0xbf/0x950 [ 310.549816][T10451] __pmd_alloc+0xbf/0x950 [ 310.549850][T10451] ? __pud_alloc+0x4fb/0x690 [ 310.549888][T10451] __handle_mm_fault+0xa9c/0x2a00 [ 310.549936][T10451] ? mt_find+0x45e/0x8e0 [ 310.549966][T10451] ? __pfx___handle_mm_fault+0x10/0x10 [ 310.550006][T10451] ? __pfx_mt_find+0x10/0x10 [ 310.550066][T10451] handle_mm_fault+0x36d/0xa20 [ 310.550111][T10451] __get_user_pages+0x1178/0x32a0 [ 310.550160][T10451] ? __pfx___get_user_pages+0x10/0x10 [ 310.550206][T10451] get_user_pages_remote+0x3d2/0xb10 [ 310.550247][T10451] ? __pfx_get_user_pages_remote+0x10/0x10 [ 310.550285][T10451] ? __pfx_create_init_stack_vma+0x10/0x10 [ 310.550325][T10451] get_arg_page+0xf4/0x310 [ 310.550363][T10451] ? __pfx_get_arg_page+0x10/0x10 [ 310.550394][T10451] ? alloc_bprm+0x3da/0x710 [ 310.550421][T10451] ? alloc_bprm+0x3da/0x710 [ 310.550454][T10451] copy_string_kernel+0x17d/0x3f0 [ 310.550486][T10451] ? alloc_bprm+0x420/0x710 [ 310.550519][T10451] do_execveat_common.isra.0+0x2e6/0x580 [ 310.550559][T10451] __x64_sys_execve+0x93/0xd0 [ 310.550592][T10451] do_syscall_64+0x10b/0xf80 [ 310.550617][T10451] ? clear_bhb_loop+0x40/0x90 [ 310.550652][T10451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.550682][T10451] RIP: 0033:0x7ff3d6f9ce59 [ 310.550707][T10451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 310.550734][T10451] RSP: 002b:00007ff3d7e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 310.550759][T10451] RAX: ffffffffffffffda RBX: 00007ff3d7215fa0 RCX: 00007ff3d6f9ce59 [ 310.550781][T10451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 310.550799][T10451] RBP: 00007ff3d7032d6f R08: 0000000000000000 R09: 0000000000000000 [ 310.550816][T10451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 310.550834][T10451] R13: 00007ff3d7216038 R14: 00007ff3d7215fa0 R15: 00007fff45023438 [ 310.550872][T10451] [ 313.708266][T10468] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1118'. [ 317.118949][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.125353][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.164405][ T5623] Process accounting paused [ 319.263106][ T5628] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 319.266800][ T5628] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 319.281940][ T5628] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 319.292860][ T5628] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 319.304761][ T5628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 319.746148][T10519] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.753339][T10519] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.760585][T10519] bridge_slave_0: entered allmulticast mode [ 319.768354][T10519] bridge_slave_0: entered promiscuous mode [ 319.776149][T10519] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.783288][T10519] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.790759][T10519] bridge_slave_1: entered allmulticast mode [ 319.798674][T10519] bridge_slave_1: entered promiscuous mode [ 319.825045][T10519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 319.837487][T10519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 319.865270][T10519] team0: Port device team_slave_0 added [ 319.873026][T10519] team0: Port device team_slave_1 added [ 319.896369][T10519] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.904441][T10519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.930518][T10519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.942607][T10519] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.949768][T10519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 319.975703][T10519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.019911][T10519] hsr_slave_0: entered promiscuous mode [ 320.026313][T10519] hsr_slave_1: entered promiscuous mode [ 320.032367][T10519] debugfs: 'hsr0' already exists in 'hsr' [ 320.039012][T10519] Cannot create hsr debugfs directory [ 320.168916][ T5625] Process accounting paused [ 320.256858][T10541] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1135'. [ 320.304500][ T5638] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.320189][ T5638] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.329218][ T5638] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.338638][ T5638] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.350885][ T5638] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.855074][T10562] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 320.861577][T10562] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 321.319337][T10542] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.326742][T10542] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.335431][T10542] bridge_slave_0: entered allmulticast mode [ 321.344903][T10542] bridge_slave_0: entered promiscuous mode [ 321.355649][T10542] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.357257][ T5638] Bluetooth: hci4: command tx timeout [ 321.370024][T10542] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.381513][T10542] bridge_slave_1: entered allmulticast mode [ 321.389659][T10542] bridge_slave_1: entered promiscuous mode [ 321.430485][T10542] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.445081][T10542] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.488279][T10542] team0: Port device team_slave_0 added [ 321.496392][T10542] team0: Port device team_slave_1 added [ 321.544600][T10542] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.552193][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.586363][T10542] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.659957][T10542] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.667117][T10542] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 321.699292][T10542] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.808913][T10542] hsr_slave_0: entered promiscuous mode [ 321.809928][T10542] hsr_slave_1: entered promiscuous mode [ 321.822247][T10542] debugfs: 'hsr0' already exists in 'hsr' [ 321.837558][T10542] Cannot create hsr debugfs directory [ 322.396238][ T5638] Bluetooth: hci5: command tx timeout [ 322.759817][T10594] FAULT_INJECTION: forcing a failure. [ 322.759817][T10594] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 322.774795][T10594] CPU: 0 UID: 0 PID: 10594 Comm: syz.3.1144 Tainted: G L syzkaller #0 PREEMPT(full) [ 322.774840][T10594] Tainted: [L]=SOFTLOCKUP [ 322.774851][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.774868][T10594] Call Trace: [ 322.774877][T10594] [ 322.774888][T10594] dump_stack_lvl+0x100/0x190 [ 322.774925][T10594] should_fail_ex.cold+0x5/0xa [ 322.774955][T10594] ? prepare_alloc_pages+0x16d/0x5f0 [ 322.774993][T10594] should_fail_alloc_page+0xeb/0x140 [ 322.775029][T10594] prepare_alloc_pages+0x1f0/0x5f0 [ 322.775063][T10594] ? rcu_is_watching+0x12/0xc0 [ 322.775101][T10594] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 322.775148][T10594] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 322.775193][T10594] ? arch_stack_walk+0xa6/0xf0 [ 322.775242][T10594] ? mas_next_node+0x29c/0x1020 [ 322.775295][T10594] ? stack_trace_save+0x8e/0xc0 [ 322.775335][T10594] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 322.775383][T10594] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 322.775435][T10594] ? mt_validate_nulls+0x1b3/0xa10 [ 322.775463][T10594] ? look_up_lock_class+0x55/0x120 [ 322.775511][T10594] ? __lock_acquire+0x4a5/0x2630 [ 322.775544][T10594] ? __lock_acquire+0x4a5/0x2630 [ 322.775569][T10594] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 322.775613][T10594] ? policy_nodemask+0xed/0x4f0 [ 322.775649][T10594] alloc_pages_mpol+0x1fb/0x540 [ 322.775685][T10594] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 322.775717][T10594] ? find_held_lock+0x2b/0x80 [ 322.775752][T10594] ? __pud_alloc+0x4f6/0x690 [ 322.775784][T10594] ? __pud_alloc+0x4f6/0x690 [ 322.775818][T10594] alloc_pages_noprof+0x1a/0x160 [ 322.775854][T10594] __pmd_alloc+0x3b/0x950 [ 322.775883][T10594] ? __pud_alloc+0x4fb/0x690 [ 322.775917][T10594] __handle_mm_fault+0xa9c/0x2a00 [ 322.775959][T10594] ? mt_find+0x45e/0x8e0 [ 322.775989][T10594] ? __pfx___handle_mm_fault+0x10/0x10 [ 322.776030][T10594] ? __pfx_mt_find+0x10/0x10 [ 322.776086][T10594] handle_mm_fault+0x36d/0xa20 [ 322.776131][T10594] __get_user_pages+0x1178/0x32a0 [ 322.776182][T10594] ? __pfx___get_user_pages+0x10/0x10 [ 322.776227][T10594] get_user_pages_remote+0x3d2/0xb10 [ 322.776282][T10594] ? __pfx_get_user_pages_remote+0x10/0x10 [ 322.776320][T10594] ? __pfx_create_init_stack_vma+0x10/0x10 [ 322.776362][T10594] get_arg_page+0xf4/0x310 [ 322.776392][T10594] ? __pfx_get_arg_page+0x10/0x10 [ 322.776423][T10594] ? alloc_bprm+0x3da/0x710 [ 322.776449][T10594] ? alloc_bprm+0x3da/0x710 [ 322.776481][T10594] copy_string_kernel+0x17d/0x3f0 [ 322.776512][T10594] ? alloc_bprm+0x420/0x710 [ 322.776545][T10594] do_execveat_common.isra.0+0x2e6/0x580 [ 322.776585][T10594] __x64_sys_execve+0x93/0xd0 [ 322.776619][T10594] do_syscall_64+0x10b/0xf80 [ 322.776644][T10594] ? clear_bhb_loop+0x40/0x90 [ 322.776679][T10594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.776709][T10594] RIP: 0033:0x7ff3d6f9ce59 [ 322.776734][T10594] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.776762][T10594] RSP: 002b:00007ff3d7e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 322.776791][T10594] RAX: ffffffffffffffda RBX: 00007ff3d7215fa0 RCX: 00007ff3d6f9ce59 [ 322.776811][T10594] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 322.776829][T10594] RBP: 00007ff3d7032d6f R08: 0000000000000000 R09: 0000000000000000 [ 322.776846][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.776863][T10594] R13: 00007ff3d7216038 R14: 00007ff3d7215fa0 R15: 00007fff45023438 [ 322.776901][T10594] [ 323.169998][T10597] netlink: 'syz.3.1145': attribute type 1 has an invalid length. [ 323.436020][ T5638] Bluetooth: hci4: command tx timeout [ 324.476700][ T5638] Bluetooth: hci5: command tx timeout [ 324.754990][ T5628] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 324.767346][ T5628] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 324.777179][ T5628] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 324.785673][ T5628] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 324.795264][ T5628] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 325.511366][T10616] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.515912][ T5628] Bluetooth: hci4: command tx timeout [ 325.518707][T10616] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.532324][T10616] bridge_slave_0: entered allmulticast mode [ 325.539501][T10616] bridge_slave_0: entered promiscuous mode [ 325.548087][T10616] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.555221][T10616] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.562759][T10616] bridge_slave_1: entered allmulticast mode [ 325.569845][T10616] bridge_slave_1: entered promiscuous mode [ 325.598247][T10616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.609972][T10616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.639967][T10616] team0: Port device team_slave_0 added [ 325.648552][T10616] team0: Port device team_slave_1 added [ 325.672308][T10616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.680047][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.706285][T10616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.718513][T10616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.725459][T10616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 325.752726][T10616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.793250][T10616] hsr_slave_0: entered promiscuous mode [ 325.799590][T10616] hsr_slave_1: entered promiscuous mode [ 325.805615][T10616] debugfs: 'hsr0' already exists in 'hsr' [ 325.811389][T10616] Cannot create hsr debugfs directory [ 326.376111][T10651] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1155'. [ 326.557660][ T5628] Bluetooth: hci5: command tx timeout [ 326.825726][T10658] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 326.832249][T10658] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 326.878020][ T5628] Bluetooth: hci6: command tx timeout [ 327.395003][T10664] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 327.596028][ T5628] Bluetooth: hci4: command tx timeout [ 328.632240][T10683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1162'. [ 328.646187][ T5628] Bluetooth: hci5: command tx timeout [ 328.706006][T10684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1162'. [ 328.955938][ T5628] Bluetooth: hci6: command tx timeout [ 330.632997][T10703] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1166'. [ 330.677738][T10705] netlink: 'syz.3.1167': attribute type 9 has an invalid length. [ 330.688372][T10705] netlink: 11616 bytes leftover after parsing attributes in process `syz.3.1167'. [ 331.035912][ T5628] Bluetooth: hci6: command tx timeout [ 331.384500][T10715] FAULT_INJECTION: forcing a failure. [ 331.384500][T10715] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 331.402159][T10715] CPU: 0 UID: 0 PID: 10715 Comm: syz.3.1170 Tainted: G L syzkaller #0 PREEMPT(full) [ 331.402187][T10715] Tainted: [L]=SOFTLOCKUP [ 331.402193][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 331.402202][T10715] Call Trace: [ 331.402207][T10715] [ 331.402215][T10715] dump_stack_lvl+0x100/0x190 [ 331.402236][T10715] should_fail_ex.cold+0x5/0xa [ 331.402252][T10715] ? prepare_alloc_pages+0x16d/0x5f0 [ 331.402274][T10715] should_fail_alloc_page+0xeb/0x140 [ 331.402293][T10715] prepare_alloc_pages+0x1f0/0x5f0 [ 331.402311][T10715] ? rcu_is_watching+0x12/0xc0 [ 331.402331][T10715] __alloc_frozen_pages_noprof+0x19a/0x2bc0 [ 331.402355][T10715] ? __alloc_frozen_pages_noprof+0x2b1/0x2bc0 [ 331.402384][T10715] ? arch_stack_walk+0xa6/0xf0 [ 331.402411][T10715] ? mas_next_node+0x29c/0x1020 [ 331.402437][T10715] ? stack_trace_save+0x8e/0xc0 [ 331.402458][T10715] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 331.402481][T10715] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 331.402508][T10715] ? mt_validate_nulls+0x1b3/0xa10 [ 331.402523][T10715] ? look_up_lock_class+0x55/0x120 [ 331.402644][T10715] ? __lock_acquire+0x4a5/0x2630 [ 331.402663][T10715] ? __lock_acquire+0x4a5/0x2630 [ 331.402677][T10715] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 331.402701][T10715] ? policy_nodemask+0xed/0x4f0 [ 331.402721][T10715] alloc_pages_mpol+0x1fb/0x540 [ 331.402740][T10715] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 331.402757][T10715] ? find_held_lock+0x2b/0x80 [ 331.402776][T10715] ? __pud_alloc+0x4f6/0x690 [ 331.402794][T10715] ? __pud_alloc+0x4f6/0x690 [ 331.402814][T10715] alloc_pages_noprof+0x1a/0x160 [ 331.402834][T10715] __pmd_alloc+0x3b/0x950 [ 331.402852][T10715] ? __pud_alloc+0x4fb/0x690 [ 331.402871][T10715] __handle_mm_fault+0xa9c/0x2a00 [ 331.402896][T10715] ? mt_find+0x45e/0x8e0 [ 331.402916][T10715] ? __pfx___handle_mm_fault+0x10/0x10 [ 331.402939][T10715] ? __pfx_mt_find+0x10/0x10 [ 331.402970][T10715] handle_mm_fault+0x36d/0xa20 [ 331.402995][T10715] __get_user_pages+0x1178/0x32a0 [ 331.403022][T10715] ? __pfx___get_user_pages+0x10/0x10 [ 331.403045][T10715] get_user_pages_remote+0x3d2/0xb10 [ 331.403068][T10715] ? __pfx_get_user_pages_remote+0x10/0x10 [ 331.403088][T10715] ? __pfx_create_init_stack_vma+0x10/0x10 [ 331.403109][T10715] get_arg_page+0xf4/0x310 [ 331.403126][T10715] ? __pfx_get_arg_page+0x10/0x10 [ 331.403142][T10715] ? alloc_bprm+0x3da/0x710 [ 331.403156][T10715] ? alloc_bprm+0x3da/0x710 [ 331.403173][T10715] copy_string_kernel+0x17d/0x3f0 [ 331.403190][T10715] ? alloc_bprm+0x420/0x710 [ 331.403206][T10715] do_execveat_common.isra.0+0x2e6/0x580 [ 331.403227][T10715] __x64_sys_execve+0x93/0xd0 [ 331.403245][T10715] do_syscall_64+0x10b/0xf80 [ 331.403258][T10715] ? clear_bhb_loop+0x40/0x90 [ 331.403276][T10715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.403292][T10715] RIP: 0033:0x7ff3d6f9ce59 [ 331.403306][T10715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.403320][T10715] RSP: 002b:00007ff3d7e5e028 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 331.403335][T10715] RAX: ffffffffffffffda RBX: 00007ff3d7215fa0 RCX: 00007ff3d6f9ce59 [ 331.403346][T10715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 331.403355][T10715] RBP: 00007ff3d7032d6f R08: 0000000000000000 R09: 0000000000000000 [ 331.403364][T10715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.403373][T10715] R13: 00007ff3d7216038 R14: 00007ff3d7215fa0 R15: 00007fff45023438 [ 331.403393][T10715] [ 333.115912][ T5628] Bluetooth: hci6: command tx timeout [ 378.559615][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.566244][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.314877][ T5638] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 379.326794][ T5638] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 379.335411][ T5638] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 379.343942][ T5638] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 379.352266][ T5638] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 379.765678][T10723] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.772886][T10723] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.780197][T10723] bridge_slave_0: entered allmulticast mode [ 379.787657][T10723] bridge_slave_0: entered promiscuous mode [ 379.795291][T10723] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.803599][T10723] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.810973][T10723] bridge_slave_1: entered allmulticast mode [ 379.818222][T10723] bridge_slave_1: entered promiscuous mode [ 379.846814][T10723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.858791][T10723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.885399][T10723] team0: Port device team_slave_0 added [ 379.893216][T10723] team0: Port device team_slave_1 added [ 379.918523][T10723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.925514][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.951803][T10723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.963717][T10723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.971135][T10723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.997057][T10723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.036719][T10723] hsr_slave_0: entered promiscuous mode [ 380.042999][T10723] hsr_slave_1: entered promiscuous mode [ 380.049271][T10723] debugfs: 'hsr0' already exists in 'hsr' [ 380.055004][T10723] Cannot create hsr debugfs directory [ 380.315047][ T5638] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 380.323277][ T5638] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 380.332076][ T5638] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 380.340094][ T5638] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 380.350804][ T5638] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 380.766752][T10742] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.773934][T10742] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.781641][T10742] bridge_slave_0: entered allmulticast mode [ 380.788927][T10742] bridge_slave_0: entered promiscuous mode [ 380.796976][T10742] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.804160][T10742] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.811651][T10742] bridge_slave_1: entered allmulticast mode [ 380.819111][T10742] bridge_slave_1: entered promiscuous mode [ 380.846195][T10742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.858093][T10742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.886840][T10742] team0: Port device team_slave_0 added [ 380.894790][T10742] team0: Port device team_slave_1 added [ 380.918043][T10742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.925227][T10742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.951947][T10742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.965200][T10742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.972356][T10742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.998456][T10742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.038750][T10742] hsr_slave_0: entered promiscuous mode [ 381.044987][T10742] hsr_slave_1: entered promiscuous mode [ 381.051546][T10742] debugfs: 'hsr0' already exists in 'hsr' [ 381.057326][T10742] Cannot create hsr debugfs directory [ 381.435905][ T5628] Bluetooth: hci7: command tx timeout [ 382.396499][ T5628] Bluetooth: hci8: command tx timeout [ 383.515950][ T5628] Bluetooth: hci7: command tx timeout [ 384.486044][ T5628] Bluetooth: hci8: command tx timeout [ 385.316812][ T5638] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 385.328106][ T5638] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 385.338367][ T5638] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 385.346728][ T5638] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 385.354367][ T5638] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 385.596115][ T5638] Bluetooth: hci7: command tx timeout [ 385.777822][T10760] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.785016][T10760] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.792569][T10760] bridge_slave_0: entered allmulticast mode [ 385.800091][T10760] bridge_slave_0: entered promiscuous mode [ 385.807836][T10760] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.814977][T10760] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.822397][T10760] bridge_slave_1: entered allmulticast mode [ 385.829619][T10760] bridge_slave_1: entered promiscuous mode [ 385.864492][T10760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.876511][T10760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.904074][T10760] team0: Port device team_slave_0 added [ 385.913614][T10760] team0: Port device team_slave_1 added [ 385.936478][T10760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.943740][T10760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.970949][T10760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.982989][T10760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.990336][T10760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.016297][T10760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.057008][T10760] hsr_slave_0: entered promiscuous mode [ 386.063323][T10760] hsr_slave_1: entered promiscuous mode [ 386.069694][T10760] debugfs: 'hsr0' already exists in 'hsr' [ 386.075449][T10760] Cannot create hsr debugfs directory [ 386.556008][ T5638] Bluetooth: hci8: command tx timeout [ 387.435992][ T5638] Bluetooth: hci9: command tx timeout [ 387.676050][ T5638] Bluetooth: hci7: command tx timeout [ 388.636096][ T5638] Bluetooth: hci8: command tx timeout [ 389.515909][ T5638] Bluetooth: hci9: command tx timeout [ 391.595989][ T5638] Bluetooth: hci9: command tx timeout [ 393.685958][ T5638] Bluetooth: hci9: command tx timeout [ 439.414414][ T5628] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 439.430457][ T5628] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 439.438672][ T5628] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 439.446987][ T5628] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 439.456033][ T5628] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 439.874179][T10787] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.881537][T10787] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.888898][T10787] bridge_slave_0: entered allmulticast mode [ 439.896181][T10787] bridge_slave_0: entered promiscuous mode [ 439.904024][T10787] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.912420][T10787] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.920309][T10787] bridge_slave_1: entered allmulticast mode [ 439.928367][T10787] bridge_slave_1: entered promiscuous mode [ 439.957024][T10787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.968593][T10787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.996700][T10787] team0: Port device team_slave_0 added [ 440.000456][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.005257][T10787] team0: Port device team_slave_1 added [ 440.011358][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.042382][T10787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 440.049504][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.076153][T10787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 440.089366][T10787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.096578][T10787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 440.123299][T10787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.163191][T10787] hsr_slave_0: entered promiscuous mode [ 440.170311][T10787] hsr_slave_1: entered promiscuous mode [ 440.176702][T10787] debugfs: 'hsr0' already exists in 'hsr' [ 440.182431][T10787] Cannot create hsr debugfs directory [ 440.418824][ T4944] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 440.432805][ T4944] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 440.441049][ T4944] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 440.449130][ T4944] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 440.457033][ T4944] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 440.874452][T10806] bridge0: port 1(bridge_slave_0) entered blocking state [ 440.881836][T10806] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.889383][T10806] bridge_slave_0: entered allmulticast mode [ 440.896699][T10806] bridge_slave_0: entered promiscuous mode [ 440.904500][T10806] bridge0: port 2(bridge_slave_1) entered blocking state [ 440.911758][T10806] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.919007][T10806] bridge_slave_1: entered allmulticast mode [ 440.926256][T10806] bridge_slave_1: entered promiscuous mode [ 440.954815][T10806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 440.968188][T10806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 440.997364][T10806] team0: Port device team_slave_0 added [ 441.004976][T10806] team0: Port device team_slave_1 added [ 441.027782][T10806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.034991][T10806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.062170][T10806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.074603][T10806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.081682][T10806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 441.107641][T10806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.149333][T10806] hsr_slave_0: entered promiscuous mode [ 441.155593][T10806] hsr_slave_1: entered promiscuous mode [ 441.161861][T10806] debugfs: 'hsr0' already exists in 'hsr' [ 441.167634][T10806] Cannot create hsr debugfs directory [ 441.515923][ T4944] Bluetooth: hci10: command tx timeout [ 442.075998][ T4944] Bluetooth: hci4: command 0x0406 tx timeout [ 442.556090][ T5638] Bluetooth: hci11: command tx timeout [ 443.596430][ T5638] Bluetooth: hci10: command tx timeout [ 444.645870][ T5638] Bluetooth: hci11: command tx timeout [ 445.675899][ T4944] Bluetooth: hci10: command tx timeout [ 445.932805][ T5638] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 445.940922][ T5638] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 445.949965][ T5638] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 445.964238][ T5638] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 445.972442][ T5638] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 446.388872][T10824] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.396610][T10824] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.403923][T10824] bridge_slave_0: entered allmulticast mode [ 446.411735][T10824] bridge_slave_0: entered promiscuous mode [ 446.419661][T10824] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.427076][T10824] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.434312][T10824] bridge_slave_1: entered allmulticast mode [ 446.441575][T10824] bridge_slave_1: entered promiscuous mode [ 446.471199][T10824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.482984][T10824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.511786][T10824] team0: Port device team_slave_0 added [ 446.519742][T10824] team0: Port device team_slave_1 added [ 446.543370][T10824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.550508][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.578310][T10824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.590621][T10824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.597701][T10824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.623632][T10824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.662437][T10824] hsr_slave_0: entered promiscuous mode [ 446.670301][T10824] hsr_slave_1: entered promiscuous mode [ 446.676647][T10824] debugfs: 'hsr0' already exists in 'hsr' [ 446.682367][T10824] Cannot create hsr debugfs directory [ 446.716184][ T4944] Bluetooth: hci11: command tx timeout [ 447.196114][ T4944] Bluetooth: hci6: command 0x0406 tx timeout [ 447.196889][ T5638] Bluetooth: hci5: command 0x0406 tx timeout [ 447.755860][ T5628] Bluetooth: hci10: command tx timeout [ 447.995933][ T5628] Bluetooth: hci12: command tx timeout [ 448.796364][ T5628] Bluetooth: hci11: command tx timeout [ 450.075967][ T5628] Bluetooth: hci12: command tx timeout [ 452.156083][ T5628] Bluetooth: hci12: command tx timeout [ 454.235867][ T5628] Bluetooth: hci12: command tx timeout [ 461.126097][ T30] INFO: task syz.1.1086:10356 blocked for more than 143 seconds. [ 461.133898][ T30] Tainted: G L syzkaller #0 [ 461.140534][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.149282][ T30] task:syz.1.1086 state:D stack:25248 pid:10356 tgid:10353 ppid:5623 task_flags:0x480040 flags:0x00080002 [ 461.161286][ T30] Call Trace: [ 461.164575][ T30] [ 461.167627][ T30] __schedule+0x1295/0x67a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 461.172183][ T30] ? __pfx___schedule+0x10/0x10 [ 461.177106][ T30] ? find_held_lock+0x2b/0x80 [ 461.183012][ T30] ? schedule+0x2bf/0x390 [ 461.187864][ T30] schedule+0xdd/0x390 [ 461.192004][ T30] schedule_timeout+0x1b2/0x280 [ 461.199407][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 461.204859][ T30] ? mark_held_locks+0x40/0x70 [ 461.212361][ T30] __wait_for_common+0x2e7/0x4c0 [ 461.217654][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 461.223091][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 461.229403][ T30] remove_one+0x312/0x420 [ 461.233805][ T30] ? find_next_child+0x18f/0x280 [ 461.239206][ T30] __simple_recursive_removal+0x148/0x5c0 [ 461.244991][ T30] ? __pfx_remove_one+0x10/0x10 [ 461.250432][ T30] debugfs_remove+0x5d/0x80 [ 461.254993][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 461.262046][ T30] nsim_dev_reload_destroy+0x144/0x4a0 [ 461.267995][ T30] nsim_drv_remove+0x52/0x1e0 [ 461.272725][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 461.280104][ T30] device_remove+0xcb/0x180 [ 461.284677][ T30] device_release_driver_internal+0x44e/0x620 [ 461.291885][ T30] bus_remove_device+0x2bc/0x560 [ 461.297197][ T30] ? __pfx_bus_remove_device+0x10/0x10 [ 461.312610][ T30] ? __pfx_device_remove_attrs+0x10/0x10 [ 461.325940][ T30] device_del+0x376/0x9b0 [ 461.336059][ T30] ? __pfx_device_del+0x10/0x10 [ 461.346697][ T30] ? __lock_acquire+0x4a5/0x2630 [ 461.353638][ T30] device_unregister+0x1d/0xe0 [ 461.369732][ T30] del_device_store+0x346/0x480 [ 461.381631][ T30] ? __pfx_del_device_store+0x10/0x10 [ 461.396260][ T30] ? find_held_lock+0x2b/0x80 [ 461.405954][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 461.415448][ T30] ? sysfs_file_kobj+0xe4/0x290 [ 461.422565][ T30] ? __pfx_del_device_store+0x10/0x10 [ 461.428183][ T30] bus_attr_store+0x74/0xb0 [ 461.432756][ T30] ? __pfx_bus_attr_store+0x10/0x10 [ 461.438411][ T30] sysfs_kf_write+0xf2/0x150 [ 461.443051][ T30] kernfs_fop_write_iter+0x3e0/0x5f0 [ 461.448456][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 461.453682][ T30] vfs_write+0x6ac/0x1070 [ 461.458112][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 461.463978][ T30] ? __pfx_vfs_write+0x10/0x10 [ 461.468825][ T30] ksys_write+0x12a/0x250 [ 461.473179][ T30] ? __pfx_ksys_write+0x10/0x10 [ 461.478285][ T30] ? rcu_is_watching+0x12/0xc0 [ 461.483104][ T30] do_syscall_64+0x10b/0xf80 [ 461.487749][ T30] ? clear_bhb_loop+0x40/0x90 [ 461.492476][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.498525][ T30] RIP: 0033:0x7fe13f79ce59 [ 461.502976][ T30] RSP: 002b:00007fe140706028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 461.511441][ T30] RAX: ffffffffffffffda RBX: 00007fe13fa16090 RCX: 00007fe13f79ce59 [ 461.520377][ T30] RDX: 0000000000000045 RSI: 0000200000000040 RDI: 0000000000000009 [ 461.528506][ T30] RBP: 00007fe13f832d6f R08: 0000000000000000 R09: 0000000000000000 [ 461.536609][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.544633][ T30] R13: 00007fe13fa16128 R14: 00007fe13fa16090 R15: 00007ffd4a4dcaa8 [ 461.552708][ T30] [ 461.555790][ T30] INFO: task syz.0.1091:10376 blocked for more than 143 seconds. [ 461.563527][ T30] Tainted: G L syzkaller #0 [ 461.571202][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.579974][ T30] task:syz.0.1091 state:D stack:26184 pid:10376 tgid:10374 ppid:5625 task_flags:0x400140 flags:0x00080002 [ 461.592164][ T30] Call Trace: [ 461.595487][ T30] [ 461.598510][ T30] __schedule+0x1295/0x67a0 [ 461.603070][ T30] ? __pfx___schedule+0x10/0x10 [ 461.608026][ T30] ? find_held_lock+0x2b/0x80 [ 461.612736][ T30] ? schedule+0x2bf/0x390 [ 461.617161][ T30] schedule+0xdd/0x390 [ 461.622065][ T30] schedule_preempt_disabled+0x13/0x30 [ 461.627640][ T30] __mutex_lock+0xced/0x1b10 [ 461.632265][ T30] ? devlink_health_report+0x66c/0xb20 [ 461.637847][ T30] ? __pfx_devlink_nl_notify_filter+0x10/0x10 [ 461.643969][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 461.649285][ T30] ? devlink_recover_notify.constprop.0+0x443/0x550 [ 461.656399][ T30] ? devlink_recover_notify.constprop.0+0x1e3/0x550 [ 461.663086][ T30] ? devlink_health_report+0x66c/0xb20 [ 461.668712][ T30] devlink_health_report+0x66c/0xb20 [ 461.674067][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 461.680340][ T30] ? _copy_from_user+0x59/0xd0 [ 461.685162][ T30] nsim_dev_health_break_write+0x166/0x210 [ 461.691517][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 461.699194][ T30] full_proxy_write+0x135/0x1a0 [ 461.704118][ T30] vfs_write+0x2aa/0x1070 [ 461.709076][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 461.714524][ T30] ? __pfx_vfs_write+0x10/0x10 [ 461.722622][ T30] ? __fget_files+0x215/0x3d0 [ 461.727735][ T30] ? __fget_files+0x21f/0x3d0 [ 461.732503][ T30] ksys_write+0x12a/0x250 [ 461.737283][ T30] ? __pfx_ksys_write+0x10/0x10 [ 461.742206][ T30] ? rcu_is_watching+0x12/0xc0 [ 461.748456][ T30] do_syscall_64+0x10b/0xf80 [ 461.753106][ T30] ? clear_bhb_loop+0x40/0x90 [ 461.767095][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.773078][ T30] RIP: 0033:0x7fdaf159ce59 [ 461.779065][ T30] RSP: 002b:00007fdaf24ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 461.787874][ T30] RAX: ffffffffffffffda RBX: 00007fdaf1815fa0 RCX: 00007fdaf159ce59 [ 461.796236][ T30] RDX: 00000000000001e1 RSI: 0000200000000080 RDI: 0000000000000008 [ 461.804258][ T30] RBP: 00007fdaf1632d6f R08: 0000000000000000 R09: 0000000000000000 [ 461.813804][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.822290][ T30] R13: 00007fdaf1816038 R14: 00007fdaf1815fa0 R15: 00007fff37ee7188 [ 461.831242][ T30] [ 461.834326][ T30] INFO: task syz.2.1109:10437 blocked for more than 144 seconds. [ 461.842471][ T30] Tainted: G L syzkaller #0 [ 461.849044][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.857825][ T30] task:syz.2.1109 state:D stack:27416 pid:10437 tgid:10436 ppid:5626 task_flags:0x400140 flags:0x00080002 [ 461.869829][ T30] Call Trace: [ 461.873101][ T30] [ 461.876088][ T30] __schedule+0x1295/0x67a0 [ 461.880636][ T30] ? __pfx___schedule+0x10/0x10 [ 461.885488][ T30] ? find_held_lock+0x2b/0x80 [ 461.890248][ T30] ? schedule+0x2bf/0x390 [ 461.894616][ T30] schedule+0xdd/0x390 [ 461.898738][ T30] schedule_preempt_disabled+0x13/0x30 [ 461.904228][ T30] rwsem_down_read_slowpath+0x5af/0xb40 [ 461.909857][ T30] ? __pfx_rwsem_down_read_slowpath+0x10/0x10 [ 461.916139][ T30] ? __pfx___might_resched+0x10/0x10 [ 461.921498][ T30] down_read+0xed/0x450 [ 461.926487][ T30] ? __pfx_down_read+0x10/0x10 [ 461.931301][ T30] ? mnt_get_write_access+0x1e9/0x2f0 [ 461.936740][ T30] path_openat+0xa16/0x31a0 [ 461.941278][ T30] ? __pfx_path_openat+0x10/0x10 [ 461.946269][ T30] do_file_open+0x20e/0x430 [ 461.950797][ T30] ? __pfx_do_file_open+0x10/0x10 [ 461.955911][ T30] ? alloc_fd+0x476/0x790 [ 461.960269][ T30] ? do_getname+0x191/0x390 [ 461.964776][ T30] do_sys_openat2+0x10d/0x1e0 [ 461.969522][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 461.974758][ T30] __x64_sys_openat+0x12d/0x210 [ 461.979672][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 461.985086][ T30] ? ksys_write+0x1ac/0x250 [ 461.989648][ T30] ? rcu_is_watching+0x12/0xc0 [ 461.994438][ T30] do_syscall_64+0x10b/0xf80 [ 461.999167][ T30] ? clear_bhb_loop+0x40/0x90 [ 462.003893][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.009838][ T30] RIP: 0033:0x7f297919ce59 [ 462.014267][ T30] RSP: 002b:00007f297a058028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 462.022749][ T30] RAX: ffffffffffffffda RBX: 00007f2979415fa0 RCX: 00007f297919ce59 [ 462.031691][ T30] RDX: 0000000000048081 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 462.039759][ T30] RBP: 00007f2979232d6f R08: 0000000000000000 R09: 0000000000000000 [ 462.047812][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.055846][ T30] R13: 00007f2979416038 R14: 00007f2979415fa0 R15: 00007ffd8d61eb08 [ 462.063859][ T30] [ 462.066994][ T30] [ 462.066994][ T30] Showing all locks held in the system: [ 462.074745][ T30] 1 lock held by khungtaskd/30: [ 462.083583][ T30] #0: ffffffff8e7e5420 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x3d/0x184 [ 462.094983][ T30] 2 locks held by getty/5383: [ 462.099732][ T30] #0: ffff888033f790a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 462.109616][ T30] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x419/0x14f0 [ 462.132666][ T30] 2 locks held by syz.3.859/9401: [ 462.137918][ T30] #0: ffffffff90611160 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x220 [ 462.147225][ T30] #1: ffffffff8e7f0f68 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x27f/0x3c0 [ 462.157491][ T30] 8 locks held by syz.1.1086/10356: [ 462.162728][ T30] #0: ffff8880798309b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 462.171970][ T30] #1: ffff8880371d2410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 462.181087][ T30] #2: ffff88805b6c1080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 462.191024][ T30] #3: ffff88802a6cfe18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 462.201221][ T30] #4: ffffffff8fb81840 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 462.211620][ T30] #5: ffff888032b46128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb2/0x620 [ 462.222265][ T30] #6: ffff88802d5a0258 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_drv_remove+0x4a/0x1e0 [ 462.233710][ T30] #7: ffff888077eccfc8 (&sb->s_type->i_mutex_key#9/2){+.+.}-{4:4}, at: __simple_recursive_removal+0xe0/0x5c0 [ 462.245562][ T30] 3 locks held by syz.0.1091/10376: [ 462.250812][ T30] #0: ffff888023bcc0f0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 462.259951][ T30] #1: ffff88801fee2410 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 462.269015][ T30] #2: ffff88802d5a0258 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_health_report+0x66c/0xb20 [ 462.279738][ T30] 2 locks held by syz.2.1109/10437: [ 462.284950][ T30] #0: ffff88801fee2410 (sb_writers#8){.+.+}-{0:0}, at: path_openat+0x9b1/0x31a0 [ 462.294181][ T30] #1: ffff888077eccfc8 (&sb->s_type->i_mutex_key#17){++++}-{4:4}, at: path_openat+0xa16/0x31a0 [ 462.304726][ T30] 4 locks held by syz-executor/10519: [ 462.310214][ T30] #0: ffff8880371d2410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 462.319293][ T30] #1: ffff88802c7b6080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 462.329124][ T30] #2: ffff88802a6cfe18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 462.340164][ T30] #3: ffffffff8fb81840 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 462.350584][ T30] 4 locks held by syz-executor/10542: [ 462.356241][ T30] #0: ffff8880371d2410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 462.365311][ T30] #1: ffff88807b409480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 462.375119][ T30] #2: ffff88802a6cfe18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 462.385271][ T30] #3: ffffffff8fb81840 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 462.395653][ T30] 4 locks held by syz-executor/10616: [ 462.401172][ T30] #0: ffff8880371d2410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 462.410231][ T30] #1: ffff88805a740080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 462.420108][ T30] #2: ffff88802a6cfe18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 462.430260][ T30] #3: ffffffff8fb81840 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 462.441142][ T30] 4 locks held by syz-executor/10723: [ 462.446601][ T30] #0: ffff8880371d2410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 462.455631][ T30] #1: ffff88803475a480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 462.465523][ T30] #2: ffff88802a6cfe18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 462.475848][ T30] #3: ffffffff8fb81840 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 462.486247][ T30] 4 locks held by syz-executor/10742: [ 462.491612][ T30] #0: ffff8880371d2410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 462.500632][ T30] #1: ffff88805c281080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 462.510464][ T30] #2: ffff88802a6cfe18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 462.520546][ T30] #3: ffffffff8fb81840 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 462.530914][ T30] 4 locks held by syz-executor/10760: [ 462.536337][ T30] #0: ffff8880371d2410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 462.545937][ T30] #1: ffff888026128c80 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 462.555980][ T30] #2: ffff88802a6cfe18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 462.566284][ T30] #3: ffffffff8fb81840 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 462.576601][ T30] 4 locks held by syz-executor/10787: [ 462.581995][ T30] #0: ffff8880371d2410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 462.591155][ T30] #1: ffff88802c9a1880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 462.601000][ T30] #2: ffff88802a6cfe18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 462.611139][ T30] #3: ffffffff8fb81840 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 462.621538][ T30] 4 locks held by syz-executor/10806: [ 462.626973][ T30] #0: ffff8880371d2410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 462.636032][ T30] #1: ffff888058fbb480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 462.646424][ T30] #2: ffff88802a6cfe18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 462.656559][ T30] #3: ffffffff8fb81840 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 462.666979][ T30] 4 locks held by syz-executor/10824: [ 462.672357][ T30] #0: ffff8880371d2410 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 462.681378][ T30] #1: ffff88805be50880 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x2c2/0x5f0 [ 462.691209][ T30] #2: ffff88802a6cfe18 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x332/0x5f0 [ 462.701427][ T30] #3: ffffffff8fb81840 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x480 [ 462.711818][ T30] [ 462.714189][ T30] ============================================= [ 462.714189][ T30] [ 462.722720][ T30] NMI backtrace for cpu 1 [ 462.722754][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 462.722789][ T30] Tainted: [L]=SOFTLOCKUP [ 462.722797][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 462.722811][ T30] Call Trace: [ 462.722821][ T30] [ 462.722831][ T30] dump_stack_lvl+0x100/0x190 [ 462.722863][ T30] nmi_cpu_backtrace.cold+0x12d/0x151 [ 462.722893][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 462.722920][ T30] nmi_trigger_cpumask_backtrace+0x1d7/0x230 [ 462.722954][ T30] sys_info+0x141/0x190 [ 462.722979][ T30] watchdog+0xcb1/0x1030 [ 462.723019][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 462.723056][ T30] ? __pfx_watchdog+0x10/0x10 [ 462.723089][ T30] ? __kthread_parkme+0x18c/0x230 [ 462.723131][ T30] ? kthread+0x13a/0x450 [ 462.723151][ T30] ? __pfx_watchdog+0x10/0x10 [ 462.723182][ T30] kthread+0x370/0x450 [ 462.723203][ T30] ? __pfx_kthread+0x10/0x10 [ 462.723227][ T30] ret_from_fork+0x72b/0xd50 [ 462.723255][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 462.723283][ T30] ? __switch_to+0x800/0x1100 [ 462.723315][ T30] ? __switch_to_asm+0x39/0x70 [ 462.723345][ T30] ? __pfx_kthread+0x10/0x10 [ 462.723369][ T30] ret_from_fork_asm+0x1a/0x30 [ 462.723416][ T30] [ 462.723425][ T30] Sending NMI from CPU 1 to CPUs 0: [ 462.862195][ C0] NMI backtrace for cpu 0 [ 462.862217][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 462.862252][ C0] Tainted: [L]=SOFTLOCKUP [ 462.862261][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 462.862275][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 462.862316][ C0] Code: 76 94 02 e9 c3 42 03 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 03 e0 22 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 462.862339][ C0] RSP: 0018:ffffffff8e407e00 EFLAGS: 00000246 [ 462.862358][ C0] RAX: 00000000002a4093 RBX: ffffffff8e4955c0 RCX: ffffffff8b88b095 [ 462.862374][ C0] RDX: 0000000000000000 RSI: ffffffff8df20159 RDI: ffffffff8c1c4180 [ 462.862390][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed10170867b5 [ 462.862405][ C0] R10: ffff8880b8433dab R11: 0000000000000000 R12: 0000000000000000 [ 462.862420][ C0] R13: fffffbfff1c92ab8 R14: 0000000000000000 R15: ffffffff90d80f50 [ 462.862436][ C0] FS: 0000000000000000(0000) GS:ffff888124371000(0000) knlGS:0000000000000000 [ 462.862458][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 462.862474][ C0] CR2: 0000564d503ef768 CR3: 000000000e596000 CR4: 00000000003526f0 [ 462.862489][ C0] Call Trace: [ 462.862497][ C0] [ 462.862504][ C0] default_idle+0x9/0x10 [ 462.862528][ C0] default_idle_call+0x6c/0xb0 [ 462.862553][ C0] do_idle+0x464/0x590 [ 462.862584][ C0] ? __pfx_do_idle+0x10/0x10 [ 462.862611][ C0] ? finish_task_switch.isra.0+0x152/0x1010 [ 462.862646][ C0] cpu_startup_entry+0x4f/0x60 [ 462.862676][ C0] rest_init+0x251/0x260 [ 462.862702][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 462.862728][ C0] start_kernel+0x484/0x490 [ 462.862764][ C0] x86_64_start_reservations+0x24/0x30 [ 462.862801][ C0] x86_64_start_kernel+0x12b/0x130 [ 462.862824][ C0] common_startup_64+0x13e/0x148 [ 462.862863][ C0] [ 463.061981][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 463.068874][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 463.079547][ T30] Tainted: [L]=SOFTLOCKUP [ 463.083861][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 463.093910][ T30] Call Trace: [ 463.097197][ T30] [ 463.100133][ T30] dump_stack_lvl+0x100/0x190 [ 463.104841][ T30] vpanic+0x552/0x970 [ 463.108862][ T30] ? __pfx_vpanic+0x10/0x10 [ 463.113383][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 463.119567][ T30] ? nmi_trigger_cpumask_backtrace+0x182/0x230 [ 463.125748][ T30] panic+0xd1/0xe0 [ 463.129483][ T30] ? __pfx_panic+0x10/0x10 [ 463.133911][ T30] ? nmi_trigger_cpumask_backtrace+0x1b5/0x230 [ 463.140079][ T30] ? nmi_trigger_cpumask_backtrace+0x1f6/0x230 [ 463.146246][ T30] ? nmi_trigger_cpumask_backtrace+0x200/0x230 [ 463.152414][ T30] ? watchdog.cold+0x1ec/0x234 [ 463.157195][ T30] ? watchdog+0xcc1/0x1030 [ 463.161636][ T30] watchdog.cold+0x1fd/0x234 [ 463.166243][ T30] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 463.172068][ T30] ? __pfx_watchdog+0x10/0x10 [ 463.176766][ T30] ? __kthread_parkme+0x18c/0x230 [ 463.181808][ T30] ? kthread+0x13a/0x450 [ 463.186054][ T30] ? __pfx_watchdog+0x10/0x10 [ 463.190748][ T30] kthread+0x370/0x450 [ 463.194821][ T30] ? __pfx_kthread+0x10/0x10 [ 463.199423][ T30] ret_from_fork+0x72b/0xd50 [ 463.204023][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 463.209147][ T30] ? __switch_to+0x800/0x1100 [ 463.213840][ T30] ? __switch_to_asm+0x39/0x70 [ 463.218623][ T30] ? __pfx_kthread+0x10/0x10 [ 463.223222][ T30] ret_from_fork_asm+0x1a/0x30 [ 463.228021][ T30] [ 463.231647][ T30] Kernel Offset: disabled [ 463.235969][ T30] Rebooting in 86400 seconds..