last executing test programs: 8.452209956s ago: executing program 1 (id=112): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop7\x00', 0xc0441, 0x0) mmap$auto(0x5, 0x20009, 0x7fff, 0xeb7, 0x401, 0x1) semctl$auto(0x1ff, 0x2, 0x13, 0x1) socket(0x2, 0x5, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x82, 0x0, 0x8) preadv2$auto(r0, &(0x7f0000000080)={0x0, 0x80000000}, 0x6, 0xffffffffffffffff, 0x4, 0x2e) r1 = ioctl$auto_TUNSETOFFLOAD2(0xffffffffffffffff, 0x400454d0, &(0x7f00000001c0)=0x6) close_range$auto(0x2, r1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000180), 0x161201, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xaea2, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b66, 0x1) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0x2c4802, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000340)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccW\x1c\x94t\x98\xc6\xd7\x9dh\xdf\x91\xd9\x1ew\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5,\xcc\xfa`\xfa\x90\xf0C\xdc\xbebBW\x8a\x95\xf4\x14\xc7\x90V\xe7a\xfb*\xcc6\xba\x9ef\x19R\xff\xd2\xd8\x98\xa8\x17\xcb\x84\xe8\xfb\x00`\xc2\xce~U\xca\\\xc1\xb7\xf1\n\xb9\xbfk\x1e\xdb\xed\x81{\x1f\x18j\x16\rk\x0eO\xe3\xa78&Z\x9e\xbf\x84\xd6\x1f\xe8\x88\x1f\xbc\x1eT\xa6{9hb\xbc\x1a\\\xb3\x846&\x1a\xbb\x9c:e\x9c\x18\x11\xf0\x8eQ\xd8\x8a3^?\x13\x00\xcbx\xb2\x18e\x95$\x9d\x804', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x4000000000000, 0x400006, 0x9, 0x9b72, 0x2, 0xbfffffff9) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x0) socket(0x1e, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0xa) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 7.835377645s ago: executing program 1 (id=115): select$auto(0x3, 0x0, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0xd, 0x8, 0xdf, 0xeb1, 0xffffffffffffffff, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) r1 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x4002, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0xa, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2000}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) open(0x0, 0x22240, 0x154) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = clone3$auto(&(0x7f00000002c0)={0x4, 0x9, 0x1, 0x2, 0x8000, 0xfffffffffffffffe, 0x7, 0x3, 0xffffffffffffffea, 0x8, 0x200}, 0x7) ptrace$auto_PTRACE_GETSIGMASK(0x420a, r3, 0x6e3, 0x1) ioctl$auto_IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_MACSEC_CMD_UPD_TXSA(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x2, 0x8071bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4844}, 0x11) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) io_setup$auto(0x7ffe, 0x0) io_setup$auto(0x7ffe, &(0x7f0000000000)) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) clone$auto(0x9001, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x5b88) mmap$auto(0x0, 0x2000000400007, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20342, 0x0) 7.568242655s ago: executing program 3 (id=116): mmap$auto(0x6, 0x7, 0xdf, 0x2000000009b72, 0x2, 0x7ffe) r0 = clone$auto(0x6, 0x5, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000200)='ns/pid\x00') r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/mm/transparent_hugepage/hugepages-2048kB/enabled\x00', 0x22b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x6) fcntl$getown(r1, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socket(0x18, 0x2, 0x3) madvise$auto(0x0, 0x2000040080000004, 0xe) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/mtdblock0\x00', 0x4100, 0x0) write$auto(r2, &(0x7f0000000040)='//\xf2\x00', 0x80000000) getsockopt$auto_SO_RCVPRIORITY(0xffffffffffffffff, 0x2, 0x52, 0x0, &(0x7f0000000240)=0x7) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/admmidi2\x00', 0x4a0142, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) syz_clone(0x52c0600, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, 0x0, 0x1) mmap$auto(0x800000000006, 0x0, 0xff, 0x10, r3, 0x0) r4 = socket(0x1f, 0xa, 0x2003) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw\x00', 0x11080, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xd551) recvmmsg$auto(r4, &(0x7f0000000280)={{0x0, 0x7, 0x0, 0x0, 0x0, 0x400, 0x50}}, 0x3, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 6.795690815s ago: executing program 2 (id=117): socket(0x2b, 0x1, 0x1) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x80045439, 0x0) ioctl$auto(0xffffffffffffffff, 0x89f3, 0xffffffffffffffff) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000140)='/dev/input/mice\x00', 0x22002, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) write$auto_mousedev_fops_mousedev(r0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8008000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_GET_MSRS(r1, 0x4008ae89, &(0x7f0000000040)={0x2, 0x0, [{0x8b, 0x400, 0x2}]}) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r3) syz_clone(0xac000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x80800, 0x0) prctl$auto(0x23, 0x6, 0x2009, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/maps\x00', 0x1a1000, 0x0) ioctl$auto_PROCMAP_QUERY(r5, 0xc0686611, &(0x7f0000000080)={0x67, 0x0, 0x7fff, 0x5, 0x80000000007, 0x1, 0x80000001, 0xff, 0x5, 0x7f, 0xfbfffffe, 0x5, 0x7fb, 0x4, 0x9}) pread64$auto(r4, 0x0, 0x100000009, 0xa4000000000002) 5.640719496s ago: executing program 3 (id=118): r0 = openat$auto_fops_u16_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/psample/out_tc\x00', 0x109202, 0x0) write$auto(r0, &(0x7f0000000140)='7\x00\\\xa0\x04|\x03\xcb\x03\x00\x00\x00\xc7\xd9\x88t?$\xe4W\x88Q\xe6e\xb2\xa5\xbbZ$\xc9\xa4@\xfb\xca|I\xb9\xdf\xb9\x81K\x02\xcb\t\x9f\x80\x187\xab\b\xd22\x14\xacj\x11\xd0\xa5E\x14\xc4n\xb7\xa4C\xb2C\x02\xb5L!\xc9_8\xe0r\xa8\a\x1d\x03/\xb0x\x83\xd8\x1d\xd3\x1e\xd0\xdd\x131\xca\x98\x96\xbc`\x06\a,\x88\x9dhT\xc6\x88\xa1\xd7\xe0\xb7\n\xbc\xbc\xf3\xd6\xf4g&\xed\xc2n\xee\x89\xfc\xf7F@\xf2\xddW;/%@\x185\x1ab\xf4*\xb8\x9a`D\xa3\xd0\xc3\x10\xff>\x87(\xba\xb4\xa0\x84\x89n9\x85\xa1\x8a\xce\x00'/176, 0x100081) 5.38704496s ago: executing program 0 (id=119): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x200000008000) execveat$auto(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=&(0x7f0000000080)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', &(0x7f0000000140)=&(0x7f0000000100)=':\xa1:\xa7\x00', 0x1) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003a40)={&(0x7f0000003ac0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x5, 0x7}, 0x8}, 0x3, 0xb00) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) kill$auto(0x0, 0x12) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x101100, 0x0) memfd_create$auto(0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) fallocate$auto(0x3, 0x0, 0xe, 0x8ec8) 5.033337696s ago: executing program 0 (id=120): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) r1 = socket(0x10, 0x2, 0x4) r2 = openat$auto_sync_info_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x20c2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4000400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0xb, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6b) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0xc, 0x20000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/ptp/ptp0/n_external_timestamps\x00', 0x8a684, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(r1, 0x5, 0x3e, 0x0, 0x9) r4 = syz_genetlink_get_family_id$auto_nl80211(0x0, r3) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8) connect$auto(0x3, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) write$auto(0x0, &(0x7f00000000c0)='vlan1\x00', 0x10001) mmap$auto(0x0, 0x6e, 0xdf, 0x10, 0x2, 0xffffffffffff3071) sysfs$auto(0x2, 0x100000000000028, 0x0) fsopen$auto(0x0, 0x1) unshare$auto(0x40000080) sendmsg$auto_MACSEC_CMD_ADD_RXSA(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x2cb8}, 0x1, 0x0, 0x0, 0x40}, 0x2404c084) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x3fd, 0x8000) 4.920922838s ago: executing program 3 (id=121): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/suspend_stats/success\x00', 0x200, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92\x90|l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00'/507, 0x1098c7) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/025/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000001040)={0x6, 0xa, 0x400, 0x1, 0x9, 0x0, &(0x7f0000000180)="6efd46d5f3ffd3a325cd3b0562ca52de6475fcf77203a18657c1f529d995769de7703f8d038e98f3cf27dd4e0bafa7cd347f3cf86e44ebdbee0983a176ad34c8f5e5beffa3b3cc2fc572595566cf3481f4b6067b1a1f4a8c35552f240f1d2a60ddf7ce98acc324cdcc1204baa6ad25bab1cef6fb1371e3cd3e6ba58bd5b760063e0b2e9c8a738192cba27cd9f9a1f966557c6e4d887ffa4d3545b278302431aba40617cd15224f23070a76c7a8cef2e8d64c024e06de69cf30dff4fc3ce50d8bc9a14baaa5e12bcf7126aa00"/216}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) mremap$auto(0x1ff000, 0xff, 0x843, 0x3, 0xfffff000) mmap$auto(0x0, 0x3, 0x3, 0x392, 0x602, 0x300000000000) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/transparent_hugepage/hugepages-8kB/shmem_enabled\x00', 0x1a1842, 0x0) sendfile$auto(r3, r3, 0x0, 0x6) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) statx$auto(r2, 0x0, 0x1003, 0x3, 0x0) bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex, r2, 0x0, 0x8, r1, @relative_fd=r2, 0x4}, 0x6) r4 = ioctl$auto_TUNSETLINK(r2, 0x400454cd, &(0x7f0000000000)=0x8001) setsockopt$auto(r4, 0xfffffd, 0xfffffffb, 0x0, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x0, 0xb, 0x0, 0x17) mremap$auto(0xfffff000, 0x4, 0x4, 0x7, 0x1ff000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) 4.684394438s ago: executing program 1 (id=122): r0 = io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x401, 0x8, 0xfe, 0x6fb3, 0x8a, 0x40000009, 0xffffffffffffffff, [0x100, 0x9, 0x7f], {0x6, 0x7, 0x3032, 0xe, 0xf, 0x5, 0x5, 0xfffffff9, 0x5}, {0x0, 0xfc, 0x6, 0x1, 0x0, 0xf89, 0x9, 0x7fffffff, 0x8}}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nullb0/queue/fua\x00', 0x0, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x26, 0xa, 0x100) socket(0x2, 0x2, 0x1) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000001}, 0x3, 0x10000, 0x10) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) socket(0x2, 0x5, 0x0) socket(0x25, 0x1, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) pidfd_open$auto(0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd3e, 0x1, 0x9489, 0xe4, 0x95f4da0a, 0xfffffffffff7ffff, 0x3, 0x0, 0x80000001, 0xa, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x80000000000001, 0x948d, 0x3, 0x15f4da0a, 0x4, 0xffffffffffffff3f, 0x100, 0x8000001f, 0x29, 0x0, 0x6, 0x2, 0x6]}, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) modify_ldt$auto(0x0, 0x0, 0xfffffffffffffffb) socket(0x10, 0x2, 0x0) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r0, 0xc038586c, &(0x7f0000000200)={r1, 0x0, 0x0, &(0x7f00000003c0)="b6bb2047d977bc1830e9564060f7257ab2dcf769cdd573aa501e947267ae735d5e2e73f0ca81d3b2a37e0706ea9509dff5b80eb463a2acd9b2c77ccc51de70bea0aae57500d33e3e15047eabd851352ee4b003ac72788631d0c1e4886895be505f6d743ec0affb84e04b060a166a26a648875e514b52b52ae5e54300adec0b959fb81a4fa5e8b5d84d8b7f4cfdde38b94d1db0a28e5d5e46786828a33f2cee62d635aa8e9c752fd12f54abd57ed781f913b0b6aea7c2e2a6be37caff48a174b754e2a3390de23ee866267bc0ef73fdf51ec7ea5a59c3ea508708ce10eabee43bbf04e688273122430b722d52f3a2e7bbb366b3ceb2", 0x2, &(0x7f00000000c0), &(0x7f00000001c0)=0x2}) r3 = geteuid() ioctl$auto_KVM_GET_DEVICE_ATTR(0xffffffffffffffff, 0x4018aee2, &(0x7f0000000080)={0x9, 0xffffffffffffffff, 0x0, 0x1}) statx$auto(r0, &(0x7f0000000040)='./file0\x00', 0xf5, 0xfffffffb, &(0x7f00000000c0)={0x80000000, 0x7a, 0x1c000, 0x3, r3, r4, 0x53cb, 0x5, 0x7, 0xde0, 0xc1, 0x6, {0x7fff, 0x6}, {0x8121, 0x7}, {0x40, 0x7}, {0x7, 0x2}, 0xe2, 0xfff, 0x2, 0xfffffa57, 0x6, 0x80000001, 0x1, 0x9, 0x1, 0x2e, 0x2, 0x6, [0x200, 0x9, 0x2, 0x7, 0x40, 0x0, 0x6, 0xcbb, 0x4]}) r5 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) ioctl$auto_BLKFLSBUF(r5, 0x1261, 0x0) mmap$auto(0x0, 0x10105, 0xfb9, 0xeb1, r5, 0xfffffffffffffff2) futex$auto(0x0, 0x6, 0x7f, 0x0, 0x0, 0xdd) futex$auto(0x0, 0x7, 0x8, 0x0, 0x0, 0x0) 4.417898365s ago: executing program 2 (id=123): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001980)=ANY=[], 0x1288}}, 0x4000000) syz_genetlink_get_family_id$auto_macsec(0x0, r0) sendfile$auto(r0, r0, &(0x7f0000000340)=0x7, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x9, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/pcm\x00', 0x88002, 0x0) pread64$auto(r5, 0x0, 0x594c, 0x9fffffffd) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) fdatasync$auto(r2) r8 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/sit0/flags\x00', 0x143262, 0x0) write$auto(r8, &(0x7f00000000c0)='1\x00\xc7k\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00j(=\xd1<\xf9\x96\x10>\xb9\x05\xbe\xc8v\x81-ILplM\x98\x88J\xfd\x17\xc8K\xdd\x89;T@d\xa3_\xfcb8\x7fA\x11\xba\xefL\xe1L\x8aE}\xa7\x05\b\xd7\xe2\xae\xfek\xbbw\x8c\x88\x1emW-\xf5\x94\xdak\x81\xe4\x1e\x1dS\xf2~>\xb1\xc6\xd1\xee\xc8\x19e\xc1w\xf05%\xd76]\x0f\v\x01\xa4(\xec\xd3\xca\a\x15&nv\xc1}\xfcD', 0x81) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x68, 0x0, 0x4000000}, 0x0) sendmsg$auto_NL80211_CMD_GET_SURVEY(0xffffffffffffffff, 0x0, 0x14) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r9 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r9, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r10 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r10, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0x8, 0xc00, 0x2c, 0x2c, 0x3, 0x2}) 3.831921611s ago: executing program 0 (id=124): r0 = ioctl$auto_TUNSETLINK(0xffffffffffffffff, 0x400454cd, &(0x7f0000000000)=0x8) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) gettid() sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r1, 0xa01, 0x70bd26, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x2400c8d4) 3.616065319s ago: executing program 3 (id=125): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd70941214f9274fcdb10000000000000002ff070004"], 0x30}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="db002cbd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' '], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x4, 0x80) setsockopt$auto(r1, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xf2, 0xdf, 0xeb1, 0xf6f6, 0x8000) socket(0x80000000000000a, 0x2, 0x0) r2 = socket(0x2, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) getsockopt$auto(r2, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0xe, 0x0) socket(0x2, 0x2, 0x1) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socketcall$auto_SYS_SOCKET(0x1, &(0x7f0000000140)=0x7) sendto$auto(0x3, 0x0, 0xffeb, 0xe, &(0x7f0000000100)=@in={0x2, 0x4e22, @multicast2}, 0x19) 3.478957288s ago: executing program 1 (id=126): pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11\x89\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r0, 0x8000) ioctl$auto_BLKRRPART(r0, 0x125f, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000020, 0x0, 0x1000, 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) bpf$auto_BPF_TOKEN_CREATE(0x24, &(0x7f0000000240)=@bpf_attr_3={0xe1, 0x61e, 0x4, 0x0, 0x6a2, 0x8004, 0x2, 0xe3c, 0x1, "98c99d8b51e3f76e893d999d87fd95be", 0x0, 0x6, 0xffffffffffffffff, 0xffff, 0x1, 0x5, 0x5, 0x8e, 0x7f, 0xffffff81, @attach_btf_obj_fd, 0x8, 0x6, 0x3, 0x2, 0x3}, 0x5) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x80000, 0x80000001) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, 0x55) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x0) 3.408965844s ago: executing program 0 (id=127): mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) io_submit$auto(0x0, 0x400000000000007f, &(0x7f0000000040)=&(0x7f0000000000)={0x6fffffffffffff, 0xb, 0x81, 0x3, 0x2, 0xffffffffffffffff, 0xfffffffffffffbfe, 0x2, 0x8, 0x0, 0x6}) writev$auto(0xc8, &(0x7f00000028c0)={&(0x7f0000000000), 0x200}, 0x9) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_ADD(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000001}, 0x4014080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop10/queue/add_random\x00', 0x80302, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_getevents$auto(0x2, 0xd, 0x7, &(0x7f0000000080)={0x0, 0x7f, 0x4, 0x7}, &(0x7f00000000c0)={0x1000, 0xed}) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xd0, 0x0, 0x4) 3.113427618s ago: executing program 2 (id=128): mmap$auto(0x8, 0x20009, 0x3, 0xeb5, 0xffffffffffffffff, 0x8000) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000240)="e327262d36408e1c0cf4d9ac8a51616d", 0x1}, 0x3) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) bind$auto(0xffffffffffffffff, 0x0, 0xe) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x800) bpf$auto(0x6, &(0x7f00000001c0)=@test={r0, 0x10004, 0x0, 0x1000, 0x106, 0x0, 0x0, 0xfff, 0x10000, 0x9, 0x0, 0x4, 0x7, 0x2, 0xfffeffff}, 0x1) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mount$auto(0x0, &(0x7f00000001c0)='}[,&*}\x00', 0x0, 0x7fff, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2.785016318s ago: executing program 2 (id=129): ioctl$auto(0xffffffffffffffff, 0xc0045401, 0xffffffffffffffff) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, 0x0, 0x400, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sethostname$auto(0x0, 0x7) (async) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x8a001, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) ioctl$auto(0x3, 0x541b, 0x38) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x200, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) r2 = open(&(0x7f0000000140)='./file0\x00', 0x10677d, 0x0) pwrite64$auto(r2, &(0x7f0000000040)='-{@:\x00', 0x7, 0x8) (async) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/fs/cifs/LookupCacheEnabled\x00', 0x48041, 0x0) (async) mmap$auto(0x0, 0x1000000004, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) io_uring_setup$auto(0x5, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) unshare$auto(0x40000080) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2.693092328s ago: executing program 3 (id=130): r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/enabled\x00', 0xb02, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r1, 0x0, 0x20000000001, 0x7fff) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000740)='/dev/binderfs/binder0\x00', 0x143041, 0x0) readv$auto(r0, &(0x7f00000002c0)={&(0x7f0000000240)="da849701c98ff06f3f8288f80e73ff6aaa129b0edb811c60ca1c1e8ead6d6bd6727149bc62e5361796f3102e99a49c1ec2a481e89da3ff4912308a1ee113d14279e641be09c6beda627ad03a3b6dafd19c57cac7a535c96ef3877819cd0d390035", 0x1ff}, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/i8042/serio1/resetafter\x00', 0x129102, 0x0) write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2) r3 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000180)='/dev/binderfs/binder0\x00', 0x102, 0x0) ioctl$auto_BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x0, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x4102, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r0, &(0x7f00000000c0)="6524c7aac083b05c1173a1174f81a4851dbd3a6813535ef463c71da469d8d9debe8516b36f5953b4d3947d348e40dec92c8478e79afa5059dccfe30a39963315d43fe78e91216d2a136f1ebf2e1ef6caa88e0cd71c1aecadb26d28a405cb352837a0fa92236e272a8c75fd7091864dda0d48eb082a02579de29fe7fe10f61550678cf36a1d35458126df3954ba6d1489e5", 0x91) mmap$auto(0x4, 0xffffffff00000001, 0x4, 0x1d, r0, 0x6) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2.478140875s ago: executing program 0 (id=131): sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) r0 = socket(0x15, 0x5, 0x0) getsockopt$auto(r0, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) unshare$auto(0x40000080) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x4ea06, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1, 0x7356, 0x33, 0x65f, 0x1ffde, 0x7, 0xffffffffffffffff, 0x20000009, 0x4, 0x3, 0x6, 0x2091, 0xb4, 0x9, 0x6, 0x6, 0x83, 0x4, 0x7ff, 0x400, 0x2000, 0x203, 0x0, 0x84}, 0x1fe, 0xd) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/bond0/bonding/miimon\x00', 0x143b42, 0x0) sendfile$auto(r2, r2, 0x0, 0x200) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r3 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec16\x00', 0xb82, 0x0) ioctl$auto_CEC_RECEIVE(r3, 0xc0386106, &(0x7f0000000040)={0x8, 0xfffffffffffffff4, 0x0, 0xb7ac, 0x5, 0x72873cba, "5853d02119c1ef7154a6c0138c050ece", 0x1, 0x1, 0x92, 0x8, 0x6, 0x3, 0xf}) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = signalfd4$auto(0xffffffff, &(0x7f0000000080)={0x8000}, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) semtimedop$auto(0x0, &(0x7f0000000000)={0x7, 0x9, 0x36ec}, 0x1f4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf251f0000001e009400cce45d9423593d816d98311986c97cdb8af228f319cef2d900000800050003000000"], 0x3c}, 0x1, 0x0, 0x0, 0x8011}, 0x4044004) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_DEL(r6, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002e80)={&(0x7f0000002e00)={0x20, r7, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x40}, 0x4, 0x0, 0x7, 0xa509}, 0x800}, 0x1000, 0x4008) r8 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r8, 0x0, 0x80, 0x0, 0x0) r9 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r4, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="20000000f89f8db02ba360ecb3758f62a197b990f2d7be4c12b09fc29c89e21b0100c8c90fcbe2707c98f6f1f7b1deba3ea95c55a244702df84f5c7b23835893470c9f1e23359b98da41c387f841ec", @ANYRES16=0x0, @ANYBLOB="00062abd7000fddbdf25050000000c0001000f00000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x400c044}, 0x40000) write$auto_console_fops_tty_io(r9, &(0x7f0000000380)="c8051b2335689829568faa19ba0ef0c31316fb9b37445e", 0x17) 1.721172283s ago: executing program 3 (id=132): socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) prctl$auto(0x41, 0x3, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/fs/ext4/sda1/last_trim_minblks\x00', 0x2540, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/7, 0x7) socket$nl_generic(0x10, 0x3, 0x10) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2711}, 0x51) socket(0xf, 0x3, 0x2) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14d27e, 0x70) socket(0x2, 0x1, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/video37\x00', 0x8a240, 0x0) ioctl$auto(r3, 0x5646, r3) read$auto_v4l2_fops_v4l2_dev(r3, 0x0, 0x0) socket(0x1e, 0x1, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x9) copy_file_range$auto(r2, 0x0, r2, 0x0, 0x2, 0x0) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0xffffffff, 0x3, 0xfff, 0x1, 0x948b, 0x7, 0x95f4da2d, 0x7fffffffffffffff, 0x6, 0xc, 0x5, 0x7, 0x6d3f, 0x9, 0x4, 0x5]}, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000100)={[0x1ff, 0x6, 0x1, 0xfffffffffffffff8, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000021, 0x7, 0x6d3e, 0x7fff, 0x2, 0x9]}, 0x0) ioctl$auto_PROCMAP_QUERY(r2, 0xc0686611, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x80002, 0x0) sendmsg$auto_TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x183c}}, 0x4000000) madvise$auto(0x110c230000, 0x8031ca, 0x9) write$auto(0x3, 0x0, 0x100082) getcwd$auto(0x0, 0xffffffffffffffff) 1.626962127s ago: executing program 2 (id=133): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram0\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) mlockall$auto(0x7) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/clear_refs\x00', 0x20001, 0x0) ioctl$auto_FIDEDUPERANGE(r0, 0xc0189436, 0x8000000000000001) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x24008870) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) 1.626618072s ago: executing program 1 (id=134): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$auto_IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x400, 0x70bd25, 0x3, {}, [@IEEE802154_ATTR_SRC_PAN_ID={0x6, 0xd, 0x2}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x7}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0xad}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xd1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) futex$auto(&(0x7f0000000080)=0x1, 0x9, 0x1, 0x0, 0x0, 0xfffffffa) futex$auto(&(0x7f0000000000)=0x2, 0xa, 0x0, 0x0, 0x0, 0x440a48d2) 861.768222ms ago: executing program 2 (id=135): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/default/disable_policy\x00', 0x80401, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio1\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)="7b08561eba010263dfdec1aa77759f8726bdbf992c1c5c159e529f453f6a52d2173b8c897af41054da55034a6a75493ce03443342bf8d91d8984611e7e5e900510adf95a3cf8131d5c440d") r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r1, 0x0, 0xc) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video44\x00', 0x8a240, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x2, 0xb0, 0x9, 0x8, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, 0x1fe, 0x81) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3fc, 0x4}, 0xf3, 0x0, 0x0, 0x8) ioctl$auto(r2, 0x5646, 0x7) unshare$auto(0x40000080) setfsgid$auto(0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r5 = socket(0x11, 0x3, 0x2) getsockopt$auto(r5, 0x107, 0x7, 0x0, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010025bd7000fddbdf2503000000040007800c00020005000000000000000800010007"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0xffffff6c, 0x4, 0x8000000, 0x0) r6 = socket(0xa, 0x1, 0x84) getsockopt$auto(r6, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x3) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r7 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r7, 0x8955, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ext4/sda1/inode_readahead_blks\x00', 0xe0801, 0x0) 643.168518ms ago: executing program 1 (id=136): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8842, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x20000, 0x0) read$auto(r1, 0x0, 0x20) openat$auto_drm_connector_fops_drm_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/dri/vkms/Writeback-1/force\x00', 0x210080, 0x0) writev$auto(r0, &(0x7f0000000200)={0x0, 0x3}, 0x3) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) 0s ago: executing program 0 (id=137): openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x22d02, 0x0) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC0D0p\x00', 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/008/001\x00', 0x2101, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x129200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x240009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x1) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x5b, 0x1, 0x420000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS2\x00', 0x101f81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7ffffffc, 0x8, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x80, 0x104, 0x6, 0x20000000003}, {0x100, 0x1, 0x101, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r3 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000d00), 0xec902, 0x0) read$auto_vhci_fops_hci_vhci(r3, &(0x7f0000000d40)=""/16, 0x10) mmap$auto(0x0, 0x8000000000020006, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fsconfig$auto_SHMEM_HUGE_WITHIN_SIZE(r2, 0xffffffff, &(0x7f0000000040)='\x00', &(0x7f0000000100)="3d70aa42ea72d62d7d2fe39f29603dff8f97c1b1b50e7e992be3959f9d7ee99631dcfa2436c0c16d6b7ce4ee4ec8cf2014a1b7042667e1556a1e592d73cb9181caa36be823fa68b77e63ca01d8a165e47bc429172f0e53852fb397d6dcaa0527abb4ca74db06a015a927aef31bc4804bb0595644acb2b83cbe1a201edd1befdc2cd21c360f43fbfbde7672c5485582b3b5e1f57505c660d153201f663f086f8d37a45d457285063c7ab32e0a0ccec8488beacb7556197bb94b0d63ae87ff5c7af0509687", 0x2) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r4 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/swradio12\x00', 0x0, 0x0) poll$auto(&(0x7f0000000480)={r4, 0xffff, 0x29}, 0x3, 0x8) unshare$auto(0x40000080) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.82' (ED25519) to the list of known hosts. [ 96.525023][ T5834] cgroup: Unknown subsys name 'net' [ 96.680737][ T5834] cgroup: Unknown subsys name 'cpuset' [ 96.690596][ T5834] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 98.797804][ T5834] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.144692][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.157179][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.171446][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.181873][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.193528][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.209110][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.217822][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 102.266398][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.275914][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.279504][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.284114][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.293469][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.308241][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.317950][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.327284][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.336266][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.344306][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.354067][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.361778][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.370276][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.496284][ T10] cfg80211: failed to load regulatory.db [ 102.842079][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 103.066878][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 103.159016][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 103.172581][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.180901][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.189107][ T5848] bridge_slave_0: entered allmulticast mode [ 103.197514][ T5848] bridge_slave_0: entered promiscuous mode [ 103.238346][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.246132][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.254105][ T5848] bridge_slave_1: entered allmulticast mode [ 103.261976][ T5848] bridge_slave_1: entered promiscuous mode [ 103.310510][ T5855] chnl_net:caif_netlink_parms(): no params data found [ 103.370992][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.384677][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.492433][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.499913][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.507402][ T5844] bridge_slave_0: entered allmulticast mode [ 103.515103][ T5844] bridge_slave_0: entered promiscuous mode [ 103.546490][ T5848] team0: Port device team_slave_0 added [ 103.553704][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.561585][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.569055][ T5844] bridge_slave_1: entered allmulticast mode [ 103.577324][ T5844] bridge_slave_1: entered promiscuous mode [ 103.632352][ T5848] team0: Port device team_slave_1 added [ 103.666988][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.674270][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.682481][ T5850] bridge_slave_0: entered allmulticast mode [ 103.691335][ T5850] bridge_slave_0: entered promiscuous mode [ 103.732960][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.750027][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.757668][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.764985][ T5850] bridge_slave_1: entered allmulticast mode [ 103.774386][ T5850] bridge_slave_1: entered promiscuous mode [ 103.813038][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.837172][ T5855] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.844424][ T5855] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.851841][ T5855] bridge_slave_0: entered allmulticast mode [ 103.859899][ T5855] bridge_slave_0: entered promiscuous mode [ 103.869119][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.876279][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.902686][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.949601][ T5855] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.957203][ T5855] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.964571][ T5855] bridge_slave_1: entered allmulticast mode [ 103.973652][ T5855] bridge_slave_1: entered promiscuous mode [ 103.981174][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.989289][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.016702][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.067578][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.113248][ T5855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.126406][ T5844] team0: Port device team_slave_0 added [ 104.135946][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.154272][ T5855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.185769][ T5844] team0: Port device team_slave_1 added [ 104.256415][ T5856] Bluetooth: hci1: command tx timeout [ 104.311123][ T5855] team0: Port device team_slave_0 added [ 104.318609][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.326421][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.353140][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.368928][ T5850] team0: Port device team_slave_0 added [ 104.381401][ T5848] hsr_slave_0: entered promiscuous mode [ 104.388923][ T5848] hsr_slave_1: entered promiscuous mode [ 104.398330][ T5855] team0: Port device team_slave_1 added [ 104.405083][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.413074][ T5856] Bluetooth: hci0: command tx timeout [ 104.416050][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.446067][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.460452][ T5850] team0: Port device team_slave_1 added [ 104.485513][ T5847] Bluetooth: hci2: command tx timeout [ 104.491372][ T5856] Bluetooth: hci3: command tx timeout [ 104.550861][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.558097][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.586265][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.621112][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.628690][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.655142][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.668327][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.675537][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.701677][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.714710][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.721815][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.748104][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.840776][ T5844] hsr_slave_0: entered promiscuous mode [ 104.847715][ T5844] hsr_slave_1: entered promiscuous mode [ 104.854005][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.862942][ T5844] Cannot create hsr debugfs directory [ 104.948387][ T5850] hsr_slave_0: entered promiscuous mode [ 104.955257][ T5850] hsr_slave_1: entered promiscuous mode [ 104.961868][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 104.970098][ T5850] Cannot create hsr debugfs directory [ 105.048863][ T5855] hsr_slave_0: entered promiscuous mode [ 105.056385][ T5855] hsr_slave_1: entered promiscuous mode [ 105.062964][ T5855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.071000][ T5855] Cannot create hsr debugfs directory [ 105.494969][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.519371][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.552213][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.592555][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.646466][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.683603][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.699548][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.713188][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.819760][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.833158][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.850495][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.862949][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.993148][ T5855] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.013205][ T5855] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.024609][ T5855] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.040427][ T5855] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.074172][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.179276][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.220269][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.227949][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.262111][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.269444][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.325941][ T5856] Bluetooth: hci1: command tx timeout [ 106.390379][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.437513][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.477185][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.486684][ T5856] Bluetooth: hci0: command tx timeout [ 106.521596][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.544836][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.562102][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.566615][ T5856] Bluetooth: hci3: command tx timeout [ 106.569659][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.575207][ T5856] Bluetooth: hci2: command tx timeout [ 106.621994][ T721] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.629256][ T721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.640528][ T721] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.647856][ T721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.689826][ T721] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.697688][ T721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.774364][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.828954][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.837067][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.871928][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.879442][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.174398][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.303204][ T5848] veth0_vlan: entered promiscuous mode [ 107.357422][ T5848] veth1_vlan: entered promiscuous mode [ 107.497447][ T5848] veth0_macvtap: entered promiscuous mode [ 107.552324][ T5848] veth1_macvtap: entered promiscuous mode [ 107.643877][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.673132][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.689189][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.703861][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.713582][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.722866][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.732190][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.828276][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.872856][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.959412][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.968827][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.996229][ T5850] veth0_vlan: entered promiscuous mode [ 108.052618][ T5850] veth1_vlan: entered promiscuous mode [ 108.064611][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.074079][ T5844] veth0_vlan: entered promiscuous mode [ 108.099092][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.152133][ T5844] veth1_vlan: entered promiscuous mode [ 108.182883][ T5855] veth0_vlan: entered promiscuous mode [ 108.209647][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.233105][ T5855] veth1_vlan: entered promiscuous mode [ 108.278934][ T5850] veth0_macvtap: entered promiscuous mode [ 108.360999][ T5850] veth1_macvtap: entered promiscuous mode [ 108.380515][ T5844] veth0_macvtap: entered promiscuous mode [ 108.409264][ T5856] Bluetooth: hci1: command tx timeout [ 108.412416][ T5844] veth1_macvtap: entered promiscuous mode [ 108.473792][ T5855] veth0_macvtap: entered promiscuous mode [ 108.504520][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.533309][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.548041][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.567053][ T5856] Bluetooth: hci0: command tx timeout [ 108.578716][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.589162][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.604203][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.615104][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.637635][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 108.646916][ T5856] Bluetooth: hci2: command tx timeout [ 108.655576][ T5856] Bluetooth: hci3: command tx timeout [ 108.668422][ T5855] veth1_macvtap: entered promiscuous mode [ 108.692063][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.774283][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.793712][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.803118][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.818399][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.863064][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.939298][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.964056][ T5855] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.991642][ T5855] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.002721][ T5855] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.013108][ T5855] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.233918][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.268914][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.394250][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.416880][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.441601][ T5941] random: crng reseeded on system resumption [ 109.457219][ T3483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.465668][ T3483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.618798][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.629893][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.713655][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.769370][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.822500][ T3466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.889997][ T3466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.490757][ T5856] Bluetooth: hci1: command tx timeout [ 110.562837][ T5952] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 110.646502][ T5856] Bluetooth: hci0: command tx timeout [ 110.710028][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 110.725504][ T5856] Bluetooth: hci3: command tx timeout [ 110.726110][ T5847] Bluetooth: hci2: command tx timeout [ 111.061374][ T5967] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 112.296539][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.305649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 112.314760][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.438518][ T5976] random: crng reseeded on system resumption [ 113.212914][ T5983] FAULT_INJECTION: forcing a failure. [ 113.212914][ T5983] name failslab, interval 1, probability 0, space 0, times 1 [ 113.246085][ T5983] CPU: 1 UID: 0 PID: 5983 Comm: syz.1.11 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 113.246139][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 113.246162][ T5983] Call Trace: [ 113.246172][ T5983] [ 113.246187][ T5983] dump_stack_lvl+0x16c/0x1f0 [ 113.246229][ T5983] should_fail_ex+0x512/0x640 [ 113.246259][ T5983] ? __kmalloc_noprof+0xbf/0x510 [ 113.246292][ T5983] ? devlink_fmsg_put_value+0xaa/0x2d0 [ 113.246338][ T5983] should_failslab+0xc2/0x120 [ 113.246374][ T5983] __kmalloc_noprof+0xd2/0x510 [ 113.246413][ T5983] devlink_fmsg_put_value+0xaa/0x2d0 [ 113.246458][ T5983] devlink_fmsg_u32_pair_put+0x19c/0x2f0 [ 113.246500][ T5983] ? __pfx_devlink_fmsg_u32_pair_put+0x10/0x10 [ 113.246544][ T5983] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 113.246590][ T5983] nsim_dev_dummy_fmsg_put+0x4d/0x1e0 [ 113.246634][ T5983] devlink_health_do_dump+0x240/0x620 [ 113.246681][ T5983] devlink_health_report+0x3c9/0x9c0 [ 113.246734][ T5983] ? __pfx_devlink_health_report+0x10/0x10 [ 113.246777][ T5983] ? _copy_from_user+0x59/0xd0 [ 113.246814][ T5983] nsim_dev_health_break_write+0x166/0x210 [ 113.246865][ T5983] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 113.246920][ T5983] full_proxy_write+0x13c/0x200 [ 113.246961][ T5983] ? __pfx_full_proxy_write+0x10/0x10 [ 113.246996][ T5983] vfs_write+0x29d/0x1150 [ 113.247035][ T5983] ? __pfx___mutex_lock+0x10/0x10 [ 113.247065][ T5983] ? __pfx_vfs_write+0x10/0x10 [ 113.247115][ T5983] ? __fget_files+0x20e/0x3c0 [ 113.247183][ T5983] ksys_write+0x12a/0x250 [ 113.247216][ T5983] ? __pfx_ksys_write+0x10/0x10 [ 113.247255][ T5983] do_syscall_64+0xcd/0x490 [ 113.247290][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.247319][ T5983] RIP: 0033:0x7f86ff18e9a9 [ 113.247349][ T5983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.247380][ T5983] RSP: 002b:00007f86fff4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.247409][ T5983] RAX: ffffffffffffffda RBX: 00007f86ff3b5fa0 RCX: 00007f86ff18e9a9 [ 113.247430][ T5983] RDX: 00000000000001ff RSI: 0000000000000000 RDI: 0000000000000009 [ 113.247448][ T5983] RBP: 00007f86ff210d69 R08: 0000000000000000 R09: 0000000000000000 [ 113.247467][ T5983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.247486][ T5983] R13: 0000000000000000 R14: 00007f86ff3b5fa0 R15: 00007ffd0008f9c8 [ 113.247527][ T5983]                                                                                      [ 117.219749][ T6036] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 117.689131][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.28'. syzkaller syzkaller login: [ 118.758655][ T6062] input: f0?\hՐJL'$d)KLo1oN0ø.m)$cj@qwR=X as /devices/virtual/input/input7 [ 119.598537][ T6080] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 120.925683][ T6066] syz.0.35 uses obsolete (PF_INET,SOCK_PACKET) [ 122.158803][ T6087] syz.3.39 (6087) used greatest stack depth: 19704 bytes left [ 123.039148][ T6097] FAULT_INJECTION: forcing a failure. [ 123.039148][ T6097] name fail_futex, interval 1, probability 0, space 0, times 1 [ 123.104059][ T6105] input: jJǸ-9%vJ86 as /devices/virtual/input/input8 [ 123.125102][ T6097] CPU: 0 UID: 0 PID: 6097 Comm: syz.1.40 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 123.125145][ T6097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 123.125164][ T6097] Call Trace: [ 123.125175][ T6097] [ 123.125187][ T6097] dump_stack_lvl+0x16c/0x1f0 [ 123.125226][ T6097] should_fail_ex+0x512/0x640 [ 123.125273][ T6097] get_futex_key+0x1d0/0x1540 [ 123.125314][ T6097] ? __call_rcu_common.constprop.0+0xa5/0xa10 [ 123.125376][ T6097] ? __pfx_get_futex_key+0x10/0x10 [ 123.125411][ T6097] ? __sock_release+0x20b/0x270 [ 123.125448][ T6097] ? __sys_socket+0x14d/0x260 [ 123.125491][ T6097] ? __x64_sys_socket+0x72/0xb0 [ 123.125537][ T6097] ? do_syscall_64+0xcd/0x490 [ 123.125569][ T6097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.125614][ T6097] futex_wait_setup+0x84/0x510 [ 123.125673][ T6097] __futex_wait+0x194/0x2f0 [ 123.125722][ T6097] ? __pfx___futex_wait+0x10/0x10 [ 123.125778][ T6097] ? __pfx_futex_wake_mark+0x10/0x10 [ 123.125849][ T6097] ? __destroy_inode+0x2e4/0x730 [ 123.125891][ T6097] ? __futex_hash.constprop.0+0x1e9/0x440 [ 123.125934][ T6097] futex_wait+0xe8/0x380 [ 123.125981][ T6097] ? __pfx_futex_wait+0x10/0x10 [ 123.126026][ T6097] ? __pfx_evict+0x10/0x10 [ 123.126071][ T6097] ? iput+0x519/0x880 [ 123.126118][ T6097] do_futex+0x229/0x350 [ 123.126159][ T6097] ? __pfx_do_futex+0x10/0x10 [ 123.126198][ T6097] ? __sock_release+0x20b/0x270 [ 123.126243][ T6097] __x64_sys_futex+0x1e0/0x4c0 [ 123.126286][ T6097] ? __sys_socket+0xac/0x260 [ 123.126340][ T6097] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.126381][ T6097] ? xfd_validate_state+0x61/0x180 [ 123.126423][ T6097] ? __pfx_do_writev+0x10/0x10 [ 123.126488][ T6097] do_syscall_64+0xcd/0x490 [ 123.126526][ T6097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.126559][ T6097] RIP: 0033:0x7f86ff18e9a9 [ 123.126585][ T6097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.126617][ T6097] RSP: 002b:00007f86fff2c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.126650][ T6097] RAX: ffffffffffffffda RBX: 00007f86ff3b6088 RCX: 00007f86ff18e9a9 [ 123.126673][ T6097] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f86ff3b6088 [ 123.126693][ T6097] RBP: 00007f86ff3b6080 R08: 0000000000000000 R09: 0000000000000000 [ 123.126714][ T6097] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f86ff3b608c [ 123.126734][ T6097] R13: 0000000000000000 R14: 00007ffd0008f8e0 R15: 00007ffd0008f9c8 [ 123.126776][ T6097] [ 123.957627][ T6117] input: f0?\hՐJL'$d)KLo1oN0ø.m)$cj@qwR=X as /devices/virtual/input/input9 [ 126.018983][ T6143] FAULT_INJECTION: forcing a failure. [ 126.018983][ T6143] name failslab, interval 1, probability 0, space 0, times 0 [ 126.040579][ T6143] CPU: 1 UID: 0 PID: 6143 Comm: syz.1.49 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 126.040612][ T6143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 126.040626][ T6143] Call Trace: [ 126.040635][ T6143] [ 126.040644][ T6143] dump_stack_lvl+0x16c/0x1f0 [ 126.040673][ T6143] should_fail_ex+0x512/0x640 [ 126.040697][ T6143] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 126.040727][ T6143] should_failslab+0xc2/0x120 [ 126.040754][ T6143] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 126.040780][ T6143] ? __d_alloc+0x31/0xaa0 [ 126.040810][ T6143] __d_alloc+0x31/0xaa0 [ 126.040840][ T6143] d_alloc+0x4a/0x1e0 [ 126.040867][ T6143] d_alloc_parallel+0xe3/0x12e0 [ 126.040908][ T6143] ? find_held_lock+0x2b/0x80 [ 126.040934][ T6143] ? __pfx_d_alloc_parallel+0x10/0x10 [ 126.040971][ T6143] ? __d_lookup+0x266/0x4a0 [ 126.041010][ T6143] lookup_open.isra.0+0x665/0x1580 [ 126.041052][ T6143] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 126.041112][ T6143] ? mnt_get_write_access+0x20c/0x300 [ 126.041148][ T6143] path_openat+0x893/0x2cb0 [ 126.041181][ T6143] ? __pfx_path_openat+0x10/0x10 [ 126.041206][ T6143] ? __lock_acquire+0xb8a/0x1c90 [ 126.041243][ T6143] do_filp_open+0x20b/0x470 [ 126.041267][ T6143] ? __pfx_do_filp_open+0x10/0x10 [ 126.041312][ T6143] ? alloc_fd+0x471/0x7d0 [ 126.041358][ T6143] do_sys_openat2+0x11b/0x1d0 [ 126.041390][ T6143] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.041424][ T6143] ? __fget_files+0x20e/0x3c0 [ 126.041469][ T6143] __x64_sys_openat+0x174/0x210 [ 126.041502][ T6143] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.041547][ T6143] do_syscall_64+0xcd/0x490 [ 126.041575][ T6143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.041599][ T6143] RIP: 0033:0x7f86ff18e9a9 [ 126.041618][ T6143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.041640][ T6143] RSP: 002b:00007f86fff4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.041662][ T6143] RAX: ffffffffffffffda RBX: 00007f86ff3b5fa0 RCX: 00007f86ff18e9a9 [ 126.041677][ T6143] RDX: 00000000000c2481 RSI: 00002000000002c0 RDI: ffffffffffffff9c [ 126.041692][ T6143] RBP: 00007f86ff210d69 R08: 0000000000000000 R09: 0000000000000000 [ 126.041706][ T6143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.041720][ T6143] R13: 0000000000000000 R14: 00007f86ff3b5fa0 R15: 00007ffd0008f9c8 [ 126.041749][ T6143] [ 126.769299][ T6151] random: crng reseeded on system resumption [ 127.786285][ T6132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.799446][ T6132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.980393][ T6160] binder: BINDER_SET_CONTEXT_MGR already set [ 128.000988][ T6160] binder: 6159:6160 ioctl 40046207 0 returned -16 [ 128.268173][ T6163] input: f0?\hՐJL'$d)KLo1oN0ø.m)$cj@qwR=X as /devices/virtual/input/input10 [ 129.707819][ T6177] binder: BINDER_SET_CONTEXT_MGR already set [ 129.713904][ T6177] binder: 6174:6177 ioctl 40046207 0 returned -16 [ 130.140704][ T6184] process 'syz.3.59' launched '/dev/fd/11' with NULL argv: empty string added [ 130.167684][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880605e2800: rx timeout, send abort [ 130.177627][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880605e2800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 130.552654][ T6194] random: crng reseeded on system resumption [ 130.913262][ T6190] binder: BINDER_SET_CONTEXT_MGR already set [ 130.919480][ T6190] binder: 6189:6190 ioctl 40046207 0 returned -16 [ 132.134713][ T6209] random: crng reseeded on system resumption [ 134.417027][ T6244] random: crng reseeded on system resumption [ 135.471308][ T6234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.482410][ T6234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.951859][ T6255] input: f0?\hՐJL'$d)KLo1oN0ø.m)$cj@qwR=X as /devices/virtual/input/input11 [ 136.715095][ T6262] binder: BINDER_SET_CONTEXT_MGR already set [ 136.767161][ T6262] binder: 6261:6262 ioctl 40046207 0 returned -16 [ 137.007340][ T6270] binder: 6269:6270 ioctl 541b ffffffffffffffff returned -22 [ 137.893864][ T6268] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 138.029818][ T6269] ALSA: mixer_oss: invalid OSS volume '' [ 140.858859][ T6320] sctp: [Deprecated]: syz.1.89 (pid 6320) Use of struct sctp_assoc_value in delayed_ack socket option. [ 140.858859][ T6320] Use struct sctp_sack_info instead [ 141.013946][ T6323] netlink: 504 bytes leftover after parsing attributes in process `syz.3.90'. [ 141.750653][ T6336] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 141.787404][ T6334] ======================================================= [ 141.787404][ T6334] WARNING: The mand mount option has been deprecated and [ 141.787404][ T6334] and is ignored by this kernel. Remove the mand [ 141.787404][ T6334] option from the mount to silence this warning. [ 141.787404][ T6334] ======================================================= [ 141.846149][ T6337] input: f as /devices/virtual/input/input13 [ 141.897449][ T6328] binder: BINDER_SET_CONTEXT_MGR already set [ 141.951252][ T6328] binder: 6327:6328 ioctl 40046207 0 returned -16 [ 143.418155][ T6364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 143.461811][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 143.471560][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.810806][ T6369] input: f0?\hՐJL'$d)KLo1oN0ø.m)$cj@qwR=X as /devices/virtual/input/input14 [ 144.201167][ T6376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.104'. [ 144.441798][ T6373] vhci_hcd: invalid port number 16 [ 144.488055][ T6373] vhci_hcd: USB_PORT_FEAT_U1/2_TIMEOUT req not supported for USB 2.0 roothub [ 145.669232][ T6359] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 146.510125][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.114'. [ 151.366409][ T6469] netlink: 'syz.3.125': attribute type 4 has an invalid length. [ 152.677457][ T6494] netlink: 28 bytes leftover after parsing attributes in process `syz.0.131'. [ 153.229219][ T6506] vivid-007: ================= START STATUS ================= [ 153.277087][ T6506] vivid-007: Generate PTS: true [ 153.283161][ T6506] vivid-007: Generate SCR: true [ 153.318649][ T6506] tpg source WxH: 320x240 (Y'CbCr) [ 153.332464][ T6509] FAULT_INJECTION: forcing a failure. [ 153.332464][ T6509] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 153.333471][ T6506] tpg field: 1 [ 153.349332][ T6506] tpg crop: (0,0)/320x240 [ 153.357064][ T6506] tpg compose: (0,0)/320x240 [ 153.367158][ T6506] tpg colorspace: 8 [ 153.379310][ T6506] tpg transfer function: 0/0 [ 153.387877][ T6509] CPU: 0 UID: 0 PID: 6509 Comm: syz.2.133 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 153.387922][ T6509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 153.387943][ T6509] Call Trace: [ 153.387954][ T6509] [ 153.387968][ T6509] dump_stack_lvl+0x16c/0x1f0 [ 153.388010][ T6509] should_fail_ex+0x512/0x640 [ 153.388052][ T6509] should_fail_alloc_page+0xe7/0x130 [ 153.388097][ T6509] prepare_alloc_pages+0x3c2/0x610 [ 153.388146][ T6509] ? rcu_is_watching+0x12/0xc0 [ 153.388187][ T6509] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 153.388225][ T6509] ? kmem_cache_alloc_lru_noprof+0x223/0x3b0 [ 153.388261][ T6509] ? sanity_check_pinned_pages+0x3bf/0x1200 [ 153.388306][ T6509] ? xas_alloc+0x34f/0x460 [ 153.388352][ T6509] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 153.388393][ T6509] ? __lock_acquire+0x622/0x1c90 [ 153.388459][ T6509] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 153.388515][ T6509] ? policy_nodemask+0xea/0x4e0 [ 153.388558][ T6509] alloc_pages_mpol+0x1fb/0x550 [ 153.388600][ T6509] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 153.388642][ T6509] ? find_held_lock+0x2b/0x80 [ 153.388683][ T6509] alloc_pages_noprof+0x131/0x390 [ 153.388723][ T6509] ? brd_submit_bio+0x92c/0x1180 [ 153.388765][ T6509] brd_submit_bio+0x942/0x1180 [ 153.388836][ T6509] __submit_bio+0x304/0x690 [ 153.388890][ T6509] ? __pfx___submit_bio+0x10/0x10 [ 153.388951][ T6509] ? rcu_is_watching+0x12/0xc0 [ 153.388985][ T6509] ? ktime_get+0x200/0x310 [ 153.389024][ T6509] ? lockdep_hardirqs_on+0x7c/0x110 [ 153.389063][ T6509] ? submit_bio_noacct_nocheck+0x852/0xd30 [ 153.389116][ T6509] submit_bio_noacct_nocheck+0x852/0xd30 [ 153.389174][ T6509] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 153.389233][ T6509] ? __pfx___might_resched+0x10/0x10 [ 153.389279][ T6509] submit_bio_noacct+0x50d/0x1eb0 [ 153.389341][ T6509] blkdev_direct_IO+0x16f4/0x1ff0 [ 153.389395][ T6509] ? __pfx_blkdev_direct_IO+0x10/0x10 [ 153.389436][ T6509] ? filemap_check_errors+0xa9/0x160 [ 153.389497][ T6509] blkdev_write_iter+0x6fd/0xdf0 [ 153.389540][ T6509] vfs_write+0x6c4/0x1150 [ 153.389575][ T6509] ? __pfx_blkdev_write_iter+0x10/0x10 [ 153.389613][ T6509] ? __pfx_vfs_write+0x10/0x10 [ 153.389641][ T6509] ? find_held_lock+0x2b/0x80 [ 153.389701][ T6509] ksys_write+0x12a/0x250 [ 153.389720][ T6506] tpg Y'CbCr encoding: 0/0 [ 153.389732][ T6509] ? __pfx_ksys_write+0x10/0x10 [ 153.389773][ T6509] do_syscall_64+0xcd/0x490 [ 153.389836][ T6509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.389875][ T6509] RIP: 0033:0x7f20cc18e9a9 [ 153.389906][ T6509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.389941][ T6509] RSP: 002b:00007f20ccf78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.389975][ T6509] RAX: ffffffffffffffda RBX: 00007f20cc3b6080 RCX: 00007f20cc18e9a9 [ 153.389999][ T6509] RDX: 00000000fffffdef RSI: 0000000000000000 RDI: 0000000000000003 [ 153.390020][ T6509] RBP: 00007f20cc210d69 R08: 0000000000000000 R09: 0000000000000000 [ 153.390043][ T6509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.390064][ T6509] R13: 0000000000000000 R14: 00007f20cc3b6080 R15: 00007ffc449a1d18 [ 153.390109][ T6509] [ 153.722625][ T6504] netlink: 222 bytes leftover after parsing attributes in process `syz.2.133'. [ 153.731895][ T6506] tpg quantization: 0/0 [ 153.930916][ T6506] tpg RGB range: 0/2 [ 153.934975][ T6506] vivid-007: ================== END STATUS ================== [ 154.128837][ T6513] vivid-009: ================= START STATUS ================= [ 154.146235][ T6513] vivid-009: Enable Output Cropping: true [ 154.169036][ T6513] vivid-009: Enable Output Composing: true [ 154.183100][ T6513] vivid-009: Enable Output Scaler: true [ 154.243224][ T6513] vivid-009: Tx RGB Quantization Range: Automatic [ 154.315617][ T6513] vivid-009: Transmit Mode: HDMI [ 154.328921][ T6513] vivid-009: Hotplug Present: 0x00000000 [ 154.347854][ T6513] vivid-009: RxSense Present: 0x00000000 [ 154.353716][ T6513] vivid-009: EDID Present: 0x00000000 [ 154.422191][ T6513] vivid-009: ================== END STATUS ================== [ 154.662478][ T6516] random: crng reseeded on system resumption [ 154.669293][ T6516] FAULT_INJECTION: forcing a failure. [ 154.669293][ T6516] name failslab, interval 1, probability 0, space 0, times 0 [ 154.695730][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.1.136 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 154.695763][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 154.695777][ T6516] Call Trace: [ 154.695786][ T6516] [ 154.695795][ T6516] dump_stack_lvl+0x16c/0x1f0 [ 154.695824][ T6516] should_fail_ex+0x512/0x640 [ 154.695854][ T6516] should_failslab+0xc2/0x120 [ 154.695882][ T6516] __kmalloc_cache_noprof+0x6a/0x3e0 [ 154.695918][ T6516] ? do_raw_spin_lock+0x12c/0x2b0 [ 154.695956][ T6516] ? find_held_lock+0x2b/0x80 [ 154.695978][ T6516] ? async_schedule_node_domain+0x54/0x120 [ 154.696010][ T6516] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 154.696036][ T6516] async_schedule_node_domain+0x54/0x120 [ 154.696071][ T6516] dev_cache_fw_image+0x38e/0x490 [ 154.696111][ T6516] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 154.696155][ T6516] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 154.696193][ T6516] dpm_for_each_dev+0x5d/0xb0 [ 154.696230][ T6516] fw_pm_notify+0x81/0x150 [ 154.696264][ T6516] notifier_call_chain+0xb9/0x410 [ 154.696291][ T6516] ? __pfx_fw_pm_notify+0x10/0x10 [ 154.696332][ T6516] blocking_notifier_call_chain_robust+0xc8/0x160 [ 154.696366][ T6516] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 154.696417][ T6516] pm_notifier_call_chain_robust+0x27/0x60 [ 154.696453][ T6516] snapshot_open+0x218/0x2b0 [ 154.696483][ T6516] ? __pfx_snapshot_open+0x10/0x10 [ 154.696514][ T6516] misc_open+0x35d/0x420 [ 154.696551][ T6516] ? __pfx_misc_open+0x10/0x10 [ 154.696587][ T6516] chrdev_open+0x231/0x6a0 [ 154.696612][ T6516] ? __pfx_apparmor_file_open+0x10/0x10 [ 154.696650][ T6516] ? __pfx_chrdev_open+0x10/0x10 [ 154.696678][ T6516] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 154.696722][ T6516] do_dentry_open+0x744/0x1c10 [ 154.696747][ T6516] ? __pfx_chrdev_open+0x10/0x10 [ 154.696779][ T6516] vfs_open+0x82/0x3f0 [ 154.696813][ T6516] path_openat+0x1de4/0x2cb0 [ 154.696847][ T6516] ? __pfx_path_openat+0x10/0x10 [ 154.696870][ T6516] ? rcu_is_watching+0x12/0xc0 [ 154.696901][ T6516] do_filp_open+0x20b/0x470 [ 154.696925][ T6516] ? __pfx_do_filp_open+0x10/0x10 [ 154.696945][ T6516] ? __might_fault+0xe3/0x190 [ 154.697005][ T6516] ? alloc_fd+0x471/0x7d0 [ 154.697052][ T6516] do_sys_openat2+0x11b/0x1d0 [ 154.697084][ T6516] ? __pfx_do_sys_openat2+0x10/0x10 [ 154.697129][ T6516] __x64_sys_openat+0x174/0x210 [ 154.697166][ T6516] ? __pfx___x64_sys_openat+0x10/0x10 [ 154.697212][ T6516] do_syscall_64+0xcd/0x490 [ 154.697240][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.697264][ T6516] RIP: 0033:0x7f86ff18e9a9 [ 154.697293][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.697319][ T6516] RSP: 002b:00007f86fff4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 154.697342][ T6516] RAX: ffffffffffffffda RBX: 00007f86ff3b5fa0 RCX: 00007f86ff18e9a9 [ 154.697357][ T6516] RDX: 0000000000180b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 154.697372][ T6516] RBP: 00007f86ff210d69 R08: 0000000000000000 R09: 0000000000000000 [ 154.697386][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.697399][ T6516] R13: 0000000000000000 R14: 00007f86ff3b5fa0 R15: 00007ffd0008f9c8 [ 154.697437][ T6516] [ 154.699460][ T6516] [ 155.026103][ T6516] ============================================ [ 155.032365][ T6516] WARNING: possible recursive locking detected [ 155.038542][ T6516] 6.16.0-syzkaller #0 Not tainted [ 155.043594][ T6516] -------------------------------------------- [ 155.049861][ T6516] syz.1.136/6516 is trying to acquire lock: [ 155.055792][ T6516] ffffffff8f512b68 (fw_lock){+.+.}-{4:4}, at: assign_fw+0x4e/0x640 [ 155.064024][ T6516] [ 155.064024][ T6516] but task is already holding lock: [ 155.072118][ T6516] ffffffff8f512b68 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 155.081527][ T6516] [ 155.081527][ T6516] other info that might help us debug this: [ 155.090158][ T6516] Possible unsafe locking scenario: [ 155.090158][ T6516] [ 155.097732][ T6516] CPU0 [ 155.101026][ T6516] ---- [ 155.104350][ T6516] lock(fw_lock); [ 155.108114][ T6516] lock(fw_lock); [ 155.112060][ T6516] [ 155.112060][ T6516] *** DEADLOCK *** [ 155.112060][ T6516] [ 155.120230][ T6516] May be due to missing lock nesting notation [ 155.120230][ T6516] [ 155.128580][ T6516] 5 locks held by syz.1.136/6516: [ 155.133665][ T6516] #0: ffffffff8f3002a8 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x63/0x420 [ 155.142277][ T6516] #1: ffffffff8e488228 (system_transition_mutex){+.+.}-{4:4}, at: lock_system_sleep+0x87/0xa0 [ 155.152888][ T6516] #2: ffffffff8e4c8910 ((pm_chain_head).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain_robust+0xa8/0x160 [ 155.164807][ T6516] #3: ffffffff8f512b68 (fw_lock){+.+.}-{4:4}, at: fw_pm_notify+0x69/0x150 [ 155.173592][ T6516] #4: ffffffff8f50d568 (dpm_list_mtx){+.+.}-{4:4}, at: dpm_for_each_dev+0x2d/0xb0 [ 155.182977][ T6516] [ 155.182977][ T6516] stack backtrace: [ 155.188885][ T6516] CPU: 1 UID: 0 PID: 6516 Comm: syz.1.136 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 155.188914][ T6516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 155.188928][ T6516] Call Trace: [ 155.188937][ T6516] [ 155.188946][ T6516] dump_stack_lvl+0x116/0x1f0 [ 155.188973][ T6516] print_deadlock_bug+0x1e9/0x240 [ 155.189005][ T6516] __lock_acquire+0x1106/0x1c90 [ 155.189039][ T6516] ? __kasan_slab_free+0x51/0x70 [ 155.189065][ T6516] lock_acquire+0x179/0x350 [ 155.189096][ T6516] ? assign_fw+0x4e/0x640 [ 155.189133][ T6516] ? __pfx___might_resched+0x10/0x10 [ 155.189158][ T6516] ? do_sys_openat2+0x11b/0x1d0 [ 155.189189][ T6516] ? __x64_sys_openat+0x174/0x210 [ 155.189220][ T6516] ? do_syscall_64+0xcd/0x490 [ 155.189245][ T6516] __mutex_lock+0x199/0xb90 [ 155.189268][ T6516] ? assign_fw+0x4e/0x640 [ 155.189304][ T6516] ? assign_fw+0x4e/0x640 [ 155.189339][ T6516] ? __pfx___mutex_lock+0x10/0x10 [ 155.189367][ T6516] ? kasan_quarantine_put+0x10a/0x240 [ 155.189389][ T6516] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.189413][ T6516] ? assign_fw+0x4e/0x640 [ 155.189447][ T6516] assign_fw+0x4e/0x640 [ 155.189481][ T6516] ? _request_firmware+0x957/0x1470 [ 155.189520][ T6516] _request_firmware+0x988/0x1470 [ 155.189562][ T6516] ? __pfx__request_firmware+0x10/0x10 [ 155.189600][ T6516] ? dump_stack_lvl+0x185/0x1f0 [ 155.189626][ T6516] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.189649][ T6516] __async_dev_cache_fw_image+0xb1/0x340 [ 155.189672][ T6516] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 155.189696][ T6516] ? mark_held_locks+0x49/0x80 [ 155.189726][ T6516] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 155.189763][ T6516] ? __pfx___async_dev_cache_fw_image+0x10/0x10 [ 155.189787][ T6516] async_schedule_node_domain+0xd1/0x120 [ 155.189818][ T6516] dev_cache_fw_image+0x38e/0x490 [ 155.189854][ T6516] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 155.189892][ T6516] ? __pfx_dev_cache_fw_image+0x10/0x10 [ 155.189928][ T6516] dpm_for_each_dev+0x5d/0xb0 [ 155.189962][ T6516] fw_pm_notify+0x81/0x150 [ 155.189995][ T6516] notifier_call_chain+0xb9/0x410 [ 155.190023][ T6516] ? __pfx_fw_pm_notify+0x10/0x10 [ 155.190059][ T6516] blocking_notifier_call_chain_robust+0xc8/0x160 [ 155.190091][ T6516] ? __pfx_blocking_notifier_call_chain_robust+0x10/0x10 [ 155.190127][ T6516] pm_notifier_call_chain_robust+0x27/0x60 [ 155.190161][ T6516] snapshot_open+0x218/0x2b0 [ 155.190190][ T6516] ? __pfx_snapshot_open+0x10/0x10 [ 155.190219][ T6516] misc_open+0x35d/0x420 [ 155.190255][ T6516] ? __pfx_misc_open+0x10/0x10 [ 155.190289][ T6516] chrdev_open+0x231/0x6a0 [ 155.190314][ T6516] ? __pfx_apparmor_file_open+0x10/0x10 [ 155.190350][ T6516] ? __pfx_chrdev_open+0x10/0x10 [ 155.190376][ T6516] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 155.190416][ T6516] do_dentry_open+0x744/0x1c10 [ 155.190440][ T6516] ? __pfx_chrdev_open+0x10/0x10 [ 155.190467][ T6516] vfs_open+0x82/0x3f0 [ 155.190497][ T6516] path_openat+0x1de4/0x2cb0 [ 155.190523][ T6516] ? __pfx_path_openat+0x10/0x10 [ 155.190545][ T6516] ? rcu_is_watching+0x12/0xc0 [ 155.190572][ T6516] do_filp_open+0x20b/0x470 [ 155.190593][ T6516] ? __pfx_do_filp_open+0x10/0x10 [ 155.190614][ T6516] ? __might_fault+0xe3/0x190 [ 155.190651][ T6516] ? alloc_fd+0x471/0x7d0 [ 155.190691][ T6516] do_sys_openat2+0x11b/0x1d0 [ 155.190721][ T6516] ? __pfx_do_sys_openat2+0x10/0x10 [ 155.190757][ T6516] __x64_sys_openat+0x174/0x210 [ 155.190789][ T6516] ? __pfx___x64_sys_openat+0x10/0x10 [ 155.190827][ T6516] do_syscall_64+0xcd/0x490 [ 155.190851][ T6516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.190875][ T6516] RIP: 0033:0x7f86ff18e9a9 [ 155.190893][ T6516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.190915][ T6516] RSP: 002b:00007f86fff4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 155.190935][ T6516] RAX: ffffffffffffffda RBX: 00007f86ff3b5fa0 RCX: 00007f86ff18e9a9 [ 155.190951][ T6516] RDX: 0000000000180b01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 155.190966][ T6516] RBP: 00007f86ff210d69 R08: 0000000000000000 R09: 0000000000000000 [ 155.190980][ T6516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.190993][ T6516] R13: 0000000000000000 R14: 00007f86ff3b5fa0 R15: 00007ffd0008f9c8 [ 155.191015][ T6516] [ 155.757377][ T6513] block nbd7: not configured, cannot reconfigure