last executing test programs: 11.720460695s ago: executing program 2 (id=48): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) r1 = epoll_create$auto(0x1) fremovexattr$auto(r1, &(0x7f0000000000)='&\x00') read$auto_v4l2_fops_v4l2_dev(r1, 0x0, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x6dea, 0x5, 0x9, 0x17, r0, 0x10001) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0xc798ee72cfbd85fc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec18\x00', 0x1c0, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='\x05deo1\x00', 0x100000a3d9) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x88) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 9.662359691s ago: executing program 2 (id=52): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) r1 = epoll_create$auto(0x1) fremovexattr$auto(r1, &(0x7f0000000000)='&\x00') read$auto_v4l2_fops_v4l2_dev(r1, 0x0, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x6dea, 0x5, 0x9, 0x17, r0, 0x10001) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0xc798ee72cfbd85fc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec18\x00', 0x1c0, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='\x05deo1\x00', 0x100000a3d9) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 9.503308271s ago: executing program 3 (id=53): r0 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) ioctl$auto_TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptya5\x00', 0x62c00, 0x0) close_range$auto(0x2, 0xa, 0x0) r2 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x109001, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptywc\x00', 0x2200, 0x0) listmount$auto(&(0x7f0000000100)={0x400, @inferred=r2, 0x9, 0x7f, 0x2a18}, &(0x7f0000000180)=0xfffffffffffffffb, 0x5, 0x3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xd28) socket(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) settimeofday$auto(&(0x7f0000000080)={0x9687, 0x2}, &(0x7f00000000c0)={0x0, 0x9}) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000000a3837146a2ab6e8ea919d4f349cf0842656098d930bdf737e530e9edb8cab51993c1746", @ANYRES16=r5, @ANYBLOB="01002dbd7000f9dbdf250100000008000a0008000000050007003b000000080009009c781e01060002000100000008001700", @ANYBLOB="ab0d1e47db613b3b167297272d79b838faf4e58b209af6010934b47aa2029364c9235ab478491c46d64334dfb49f22d4078d75c5d3f3076edda7cff037309f0acd514de820b89c0bb462048bf20c4693b142408b0b61ac2322b09694115b901069cd1d8fa4b1c8e34d1f4fbfa99a11df9d0a1bf559dc09edd747cdc62e4a1f3d10dabb4631a48433a1c3fa1f4f1aaf756ba73fb4322366917ebd18201bceb6ae7b6a4983ea284f8c08cd086e47358d3c39"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x5, 0xdf, 0x19, r0, 0x8000) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) ioctl$auto_BLKFLSBUF(r6, 0x1261, 0x200000000000000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) setsockopt$auto(r1, 0x8, 0x3, &(0x7f00000001c0)='\x00', 0x1) 8.596102482s ago: executing program 1 (id=55): openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x11, 0x3, 0x9) getdents64$auto(r0, &(0x7f0000000300)={0x0, 0xf9, 0x9, 0x5, "aad79101846375f447e710d0061cd4fa0de77460c7d538325849ba192447a12278829ce65ee2d63f1dc3ee6cc71fb793618f592c4cd7f5f2366256d1eb16355798ad19a9c7bc6bee5b2478bad51fae3270f5bd52a8f82d9ce45ee908bc63425d3bfaefb3db2606f4a16d25400ab639ef27a2445b860eaee39c53f6661560dfe4d093fc111ba9525b8119d78f5b8ec32c401263ec1564ff56d47a4612dfd686cd83733acffad5e346802d3b1388a26d0363d8be89f647039c4129c6f640da9684570fa9fa1719c2ee89463451ce2edbd42820bcd86e7ec22979cfacbf4a996eee106f9ac36f04efb367590aa81d80f4f4b6d7f34b8baf6703124c01f818161c127e41b9d0eca1916b05204329b57dab03974f1c7e26bd5ac6dbb6284fbe0e4717f11acedc9efd91e753e0badba05b8e643af3b783de2a6dac23d7e6401988e54e2c74f11cdac11a9209afd4fc18e49015b38788bb30b74808859a5491ca837ecf857280eaec76b211a24a0229ebac9c36fe4054d3accc79d3ac225a9428b762f61fd7236d20e89ca1be6c4a8e2910f6bad9ce4302811e4b69d69952d8a9883076ab4c084dc3ec38e7eeef46da6a88825b7d967374a818dfdde92058fe8e63e8b5438aacb69070b78bf79256ef2410fcf03da7de35945c337ed28d357b8b5f2b9bafc4159910155c0557b8f5810655226c2f6ecea3485d4a24ffd986e385f5decbc43f0e045044095bc4c8285b4269139bbffb9a179e8772fa9dd736e8603fe4a4c45b3442b2b42eb97ea4e98a7dbf701501e46cc071ad4e808f6511c426d27c114b69c1ffec21709afc9b0b2c9fa8c2b2bd17f1cd43f0ea9416125ffd49ffee3aed45880c1ea5ab8ff0956a5bae9e7e8cb7fad248c024a80b5a5c6327718cce14b99b26b2b6820b96979a8e21b3df4bc3857804704515dbd204153e35a45f688e68f2770abeed0da78d4f5428f757bba16c699fb145f0891c45d7f8023eade5be566c494f9baf0d804a0f6162b4c752105888e532c43e5454dfedf96b4f04f4cc8339b9f9dee7b7b497aa1d900a4f8c6bad12b12afe106b307f9ecbd4588c22a5df693ec8782ca4cb523aed0f86f2f841a482c9044c54e14a848bbf6935d9ed6bab68f5b2316176fb41d12805173b140cc58134a2c174dda8892b633323ebad80859ca8dbc56061b6d9990d2e451bc732e83eb54cae532583e6fd932443bcba41f377e8de6fd45bf0b5593c157bf503858a0ac4afc9796c874519e52969f5b66fa785d67146510cfbeb15370482fff10808701f05dd232f2f6e7ddba8aa992e77387695de3160a7e482d911561934751c16f0ada7c207f59241e1e11eab76274113ed538b27f8022b674801e3aedae4e4feaa3ff51b1482baa3a4a3891a16bd72e77bf5051b61e012c0297b237c45bece9bc63b3a182a508e4ee983c6193bc637b8b65f741636f75a1fc678365ddae89f3c53dee7e158098decaa387b736ea73bcc50385a7504dfd8ddda7ae37932c92b128a9e8a0e64df4989764db46543d6c3d1da1a45b71d7934617ead69884658dcee533ff0391084608f607d932423e68c72f6430590b7afe94c0e58d68e56577a3c8d8e8666e1cff8c8ec429c546099c8e1be4d7663f833eb2b2fa362e8da0ab7541346481e94d19c61fcd95ed7ff113d71c96f0b264dbe2bca7aaa7b506c4bec8e2a44d9ce1cf5bdf6e2d75b55086f62619efccc4d6d97e528ac3c8fbd2a02de3be63513b0d0035c88ca7072707def9d7f255cf67826ab1a5431c6566965d942ebebeb3b1bf633e527ff5f2082e4d426c012d1fa2725d1dedda2117a1ed4dc32a15767a565a0533d3218c9b6e342983e0b86a27997eed9549c4d0ded43c57effc3b183fc99c958bec6d646cae86eff4d64cc847c71c61876f3a6065704f1ae84d582041855234df8d32c5305f6abec38462d1cb81cdddbd79b7d7003851c658b0e3cfb9059710233740b778eaf7cc202e33240bfe7dcdd11c9f0f15ad7686d5e4916600eea41a1bc178f62c74e955a9054fcef0ba8804aab356f2b1e799e32f97c26161d5f4bd0a4285e9fed370bae3e637609b4ad2a0daa1733f75250598ef96d254dc546baf5dcff0dd5a6857399a96412577b65bccbef71c0cef3726286f80d9e2a3919a755199730da70ef98dd12b981ca1d9bc3dbb6be38557955f700ea176eba93011db813c0bec1bdf04516f01ff4e38f9d67ccba8633fc7891c72797e94b7cbd8e19a87cf840d628030038667bb9b79f5d79dc19e742fac210a73c9a14a0069ca7c2546660766d1f92ca29663a35f71b4f4d7d6dbf4b62b0e0df4a288c2415fd10256bc782d4f9e3712d5831dc46967194384adf0eefeff0c079a7d58c81bc4e23c725678717a5569dae2c3e38645b182b6475023bc5f9eb0da77249e393ed281b2de1da0cb2024f42602aa4f0c02ca6d50e341db281342d448f86eaccf1fd6f967d22d5965acf4bb2e9216fb7ba9cb1be79a6210ba270bd80902beebdaa5a761037582dec4b1ea5f2839ff8c27daa5087d7d3209442ac2add3a846c3cfd5a99399080d1989594aa81c45a6289133b08019903e0bffd4e7fe7f32352d65408935fa0c45585f7a56cf68164a6bc4641f4e43934fdaebf96408ddd43235266f4d295915f031846627da6e4cefdade59a2ec278a0320972f18bf46ffdcabea2da5cbca28aaf85880246f3791d56ae2f9eacece97908148fc13ca9f02d1be25f432f3bedf710b654b9d75ebfc60ba111fe2e143c3d190e8d6ea9484c3201c13d7db13b795d482f8ecaf097f9dfb876ff4b0a06f7047c587cb5886ca7eb39e0ec508618d842a9282a0fe4a90691691c0cb1e54b748eecc688b4a7b41f486b8518c887f25f36bdb16e69bf53db207febacb503f65ae38e9c176a9844247d1b1fd89b099c587cfb7e332fe3368b79e7e345b208c3473b98048fe8e4040fbdc787d6d982c2f67502ee94a3d3f3819c88642dd06e502b90361553eb18cf7c7a7245e6805b9c3a52cb2e882f86d86beffca51c84909570481d3c6dc0b875a7cee56c67799c4b7b8c60f1ca30e2d00b5f1cbfa13177c4885c10e28200940d1a1007a12aed2cc694667248ebb8c53de156a9d59afea1a91707de52b117c97e9b5adaaba8ada5f069a39e907bad017471b26d37b858ccfeb8e61c94923fabcfe2216cdd8bfd5c2f71be8650525f27b6c4d8c780775ee5be62b85198171acf5e51dc1eead95bd5ac71db16036bdf5255e05e81d0e130f4eb68617183ab5a7767c5240313d9d5d130d835ef419f67acf96fc96edc4b7f7018d1752f7db3607472bc7545d9e0b44886e61cd2f2d4db9bcd257f7582248897fc691781a45e5224631e705932bfa3e0a5a9587c8134f9dd9b6e743ceff03707336f5be70edbb20cc15cd72cfaffb6be201642e0b3d018417dcf0958f8a7707a354e5b4b5d3f4918d5f45d3671c735911888dde20888eef71672c1cc4de21fd165fa921431df2b46a38005a80fca6c9433081b1f25b52ebead4d9807c046d6701e909bac108106a270713c71101115146f88686ca497d83224ed38d09b7b37e946a97ad316128e0817e4e0bb27c4a799d2b6726fa551ef798f245c7d2fe9076f12ea8ae9a47215279e88e21fbe4d926b6d48b191004e9bf170467e9a035fe3dbc835548d6cf727d353e5a8aa5a2cd197495a7a9d598c980a7b042692528bc600bc14d2e25aa77b90bb1691048d4aab7af63227c9f00e1ea5ff839e5c06e8c29a3b8838f594eccd3e02198a94148afad45faf6bda1a3ebee9973a44ba71ac0779055baf47709cb41c513a97912ed12a3371ab5149e001123d99727cc264423585bca8bff335f3a1bd7390e407b3cd3ebb0cb8c6c19c616503b1927caac5935a02057c26578de66ea3657c32046f39e322ebaaf18c774063d7add08dfb124289d99dcc994aeea52be54d34f4dafa88a7fe7eac1cc2bfced7ccea6e8db656266650b0d994c520bd1b6e14e9ff0826dd8ff7d8b5881b645173899951f619d8171a9024546445233ff96bd492b35b2600bb134d87bba5dfcb1edd982cad2821b81190fa01ab13b5735cf65b5723116bad607272982bd64d3af9d171199761e6bd3f96e258a4aa744b85856b2387b235dbb9f37270777994fc98c6adcc8766e094fb12a5d5dee88e7bb231a60d801e9a26f48d60212da21b4c378242d0b019b5b768269c882df6a83226755b0accaf820822db2e142541272fd13c2ce8ccd4f7ebd4712b679fd49c4f6d266088bf77a97b517a19485cda28a527eb736ed42aacdfb4197147f64fcbc15839cc0b06ffc347d3a1627baea1d3dd9c41580f0141bd195a0cf810c04ea1ea147a4def179c80c2ba9959cbf9ba7b4e7bc9bbadf0c04ffc4ead887362999c6bf4e3fad6c2062bed2c8a188cc109ddfb721d580c624ed65eea02bdc75ad2b76ed436c178e8d4edc852e4466d705165a5edeb1bb8d553fa731d725dfc81cf4863619759533856af7829acde93e9a5f80f3df6cceabe8a1119b78228c7fde470bbcfecab5676e293b22c446d2073377526852d36cca0d3aa6126b1a23204884997dcf399d4d53d6460315f59c3521e04c7d826f9fa67d29744a25e63660ab92df46dd356b77ce15ff1bf34209641b9125b380561a5423023b1f557d6c88fcc76ddc278250aff03fcd71225c5c290d651ddfef2ab48ce6a41f9cd8f4a216ee494749b10d13d16b50efbd566c4bed25caf06eec50dca99dd30dac5c0167f2386a0e9f2e046edb25ff9331f3a587a00dada0042a2b487d1d549b4c7ca56b2d7b0af09e1c0524de75dd77e5c68aed98a1aa08f3abea54e2e3efb531903bddb32900e801302d41bc1fb30896bf528e618e621bbecfbe8506d106eca084d0143d90de5f27a11887f45e58bcd2c0409e46dddaf8f996819597f989ba4422646183328abd11de1855add0b800bd39849cd0951c243684d0c3135bbfba3f614b8fe6ec6698a4c444a80ac9cae513815cedbe09eb5c6bb1ba0dd1d5d755b046509fe7fcf34c58ddf13e2c4dd56183e5578046aab19ae5f0548d624b4ba65feafaef3b8390977535afd77f8507264d4fca46f62961465b1c8f89e120ea0e36c00cd63926eab1d2d4f4ecc4143588255de08725a4b2cc8d4654f1b185f3fad4c90814fc9cb9c33390eadbb87951c1c5629450553aa8d4b4a39cf548ea477318a54796e282b04b50987adbcebaf01b6ed72ceb796aedf8a49cfafc5db10f87f37f3698a7fb451159fe6d1ab5799fe9b5421d9c24cb608580fd31eebce1c4375cfe9cc64b6244b84c65be0022e6c61ed888994b66a98ce98bd39995aadd77f9d7d3095cb9c51b524dac2a14588e4332550d5a8a2a366d5a780192e090abeb665d360ddccbf515985b3677217bfb00fa2a071867d36f4f6baf2c3abb3b56e3e7dc9e1887c8cb443f5a1f9d91e138815ecc457720011bd00e29e4d5464498f9515c23862ae29908b8239087f7580710060178d970f1da5c9e4238ff490fd64f44ed92ca7973fd128ef41fa704e1e143652d3115312261ba99a26e5577b26c88eeaaca14bb4e9e81f295c1c77e6099da04c974f134bcad732f37b175147991c89c77603f2f23d3797d26a8fbd6225d54317b9906e69655ab594b7546ea380a04ec565abd4b072fbc0e91862200548a59ba0dd7dc3567e57b486436baa0f4029bf7bf04665c7477918e19b91555a56de61ea93a617adb1bd0da120c3120f56f6ae3c72511881af885850b8099874ee958be26add444aa96fe1f3edccc0f1b05b"}, 0x1ff) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x5, 0x0) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/oom_score\x00', 0x0, 0x0) close_range$auto(r0, r1, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) futex$auto(0x0, 0x8, 0x8243, 0x0, 0x0, 0x4) getsockopt$auto(0x3, 0x200000000001, 0x3b, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/block/nbd10/queue/zone_append_max_bytes\x00', 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/image_size\x00', 0x181002, 0x0) read$auto_proc_single_file_operations_base(r2, &(0x7f0000000000)=""/48, 0x30) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x8800, 0x0) r3 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/saved_cmdlines\x00', 0x202200, 0x0) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(r3, 0x3, 0x34, &(0x7f0000000280)='/dev/vhci\x00', 0x8) socket(0xa, 0x2, 0x1ff) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg1\x00', 0x400002, 0x0) r4 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001340)='/sys/kernel/debug/tracing/set_event\x00', 0x48c240, 0x0) close_range$auto(0x2, 0x8, 0x0) r5 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x54, 0x0, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_RINGS_RX_PUSH={0x5, 0xe, 0x2}, @ETHTOOL_A_RINGS_RX_PUSH={0x5, 0xe, 0x5}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0x3}, @ETHTOOL_A_RINGS_HEADER={0x4}, @ETHTOOL_A_RINGS_TX_PUSH={0x5, 0xd, 0x2}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_RINGS_HDS_THRESH={0x8, 0x11, 0x9}, @ETHTOOL_A_RINGS_RX_BUF_LEN={0x8, 0xa, 0xfffffffb}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES8=r0, @ANYRES8=r4], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x2000c082) write$auto(r5, &(0x7f0000000000)='-\x00', 0xfdef) 8.437458263s ago: executing program 2 (id=57): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4400000000df, 0xc157, 0x101000000000000, 0x7) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x1, 0x0) epoll_create$auto(0x4) mq_open$auto(0x0, 0x5, 0x3, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0xa, 0x3, 0x3, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0x8000]}, 0x0) sched_get_priority_min$auto(0x40) socket(0x1a, 0x2, 0xfffffffb) socket(0x2, 0xa, 0x0) mmap$auto(0x0, 0x7, 0x3, 0x9b72, 0x2, 0xb89f) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) unshare$auto(0x40000080) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video43\x00', 0x129900, 0x0) close_range$auto(0x2, 0x8, 0x0) write$auto(0xca, 0x0, 0x7f) 8.326913949s ago: executing program 3 (id=58): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0x1f, 0x1, 0x10) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x8001, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r1, r2, 0x0, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x120008, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x103840, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0xa, 0x801, 0x106) setsockopt$auto(r3, 0x6, 0x21, 0x0, 0x10) close_range$auto(0x0, 0x5, 0x0) process_mrelease$auto(0xffffffffffffffff, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) 8.287592333s ago: executing program 0 (id=59): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) mmap$auto(0x0, 0x400005, 0xffffffffffeffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0x202, 0x0) mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) preadv$auto(0x40000000000003, 0x0, 0x6, 0x3f, 0x5) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r3 = socket(0x10, 0x2, 0x0) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r0, &(0x7f00000056c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x244, r1, 0xbb484b3ccf0b22b, 0x70bd2b, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x22c, 0x3, 0x0, 0x1, [@nested={0x228, 0x17, 0x0, 0x1, [@generic="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", @nested={0x127, 0x14c, 0x0, 0x1, [@generic="cbfee5283baed3b17c44d2faaf7a55312c83c48b2dae9fbd42aa23d34544b53f1bc9d227ec9548e6a8dc0038578e35361556960837b11b7e24f5c63af67c16377c70485eb9f745fc1d19bbaf1d8fae7648", @typed={0x8, 0x17, 0x0, 0x0, @u32=0x6}, @nested={0x4, 0x102}, @nested={0x4, 0xbb}, @generic="47ee96488f8a2a7b918474b0c2f5bf98a86d544bdb0721e33e84ded2688a6d9a0fc52e94d362e1f7610dedd2083218a3f27fd0e2a9b961f4dac3bfcc8968d383e3c3fd3ec2a5f48739d2544d025959494a8b9bb8310bb2c8fa2a3314df4825a28485d54d8ea853bd5ef1547d81079cd34cc38f7d41d22a1ad02604c90fa5eaf235fc27041453a24e6332996b3d6675bc8fb9917a23c7f98f8123a19990748ef170c2a8f87bc21e0c23c35f0cb55a5cc0bf190a13e1a9aae6c60f252e96d8f2d9f264"]}]}]}, @MACSEC_ATTR_OFFLOAD={0x4}]}, 0x244}, 0x1, 0x0, 0x0, 0x20000050}, 0x40090) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00') process_madvise$auto(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0xc0b}, 0x2e5, 0x6, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/bus/pci/rescan\x00', 0x183501, 0x0) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) ioctl$auto(0x3, 0x4020940c, 0xffffffffffffffff) 7.687895955s ago: executing program 1 (id=60): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000000c0), 0x0) 7.055855115s ago: executing program 1 (id=61): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8400) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) socket(0x23, 0x1, 0x10) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000240)={0x7, &(0x7f00000001c0)={0x6, 0x87, 0xd, @inferred=r0}}) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) sendfile$auto(r2, r3, 0x0, 0x1) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0xc, 0x120008, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000180), 0x103840, 0x0) process_mrelease$auto(0xffffffffffffffff, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x12, &(0x7f0000000040)=@bpf_attr_1={0x84a5, 0x0, @next_key=0x8e66, 0x9}, 0x80) 5.933599936s ago: executing program 2 (id=62): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000000c0), 0x0) 5.322139628s ago: executing program 2 (id=63): r0 = socket(0x29, 0x5, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[], 0x1190}, 0x1, 0x0, 0x0, 0x2c095}, 0x4080) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89/s\x1cJ\x99\x00:\x00!\r?\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0xe, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x40242, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) writev$auto(r2, &(0x7f0000000200)={0x0, 0x10}, 0x3) unshare$auto(0x8) close_range$auto(0x2, 0x8, 0x0) setsockopt$auto_SO_CNX_ADVICE(r2, 0x1ff, 0x35, &(0x7f00000000c0)='^{:#*:\\-.{/\x00', 0x2) mseal$auto(0x0, 0x7dda, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card0/pcm0c/sub4/xrun_injection\x00', 0x400, 0x0) r5 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0x902, 0x0) ioctl$auto(r5, 0x80004d00, r4) read$auto(0xffffffffffffffff, 0x0, 0x20) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, 0x0, 0x3) r7 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0xfffffffffffffffc, 0x200007, 0x8) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendfile$auto(r7, r7, 0x0, 0x10000800000003) fcntl$auto_F_SETLK(r2, 0x6, 0x1) 5.159047609s ago: executing program 0 (id=64): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r0 = open(&(0x7f0000000280)='./cgroup\x00', 0x5d52c0, 0x0) r1 = socket(0xa, 0x2, 0x3a) r2 = open_by_handle_at$auto(r1, 0x0, 0xffffffff) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7) openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0) adjtimex$auto(&(0x7f00000004c0)={0x1ff, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10001, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x2, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=')\x00\x00\x00', @ANYRES16, @ANYBLOB="ffff2cbd7000fbdbdf2502000000040001"], 0x18}}, 0x4000010) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x34, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xf1}, @THERMAL_GENL_ATTR_CDEV_CUR_STATE={0x8, 0x10, 0xc}, @THERMAL_GENL_ATTR_TZ_NAME={0x10, 0xa, '/dev/audio1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=r4}, 0xa3) r5 = bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0x3, 0x0, 0x3}, 0x4) ioctl$auto_SCSI_IOCTL_GET_IDLUN(r0, 0x5382, &(0x7f00000005c0)="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") r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r7, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x14, 0x0, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x0) setuid$auto(0x800000000008) memfd_secret$auto(0x0) ioctl$auto__ctl_fops_dm_ioctl(r5, 0x1, 0x0) ioctl$auto_IMADDTIMER(r2, 0x80044940, 0x0) select$auto(0x1, &(0x7f0000000040)={[0xffffffff00000001, 0xfffffffffffffff7, 0x100, 0x7fff, 0x79, 0x3, 0x9, 0x6, 0xa80d, 0x8000000010000, 0x0, 0x7c43, 0x9, 0x0, 0x4, 0xd133]}, 0x0, &(0x7f00000001c0)={[0x800000000, 0x2, 0x80000012, 0x2, 0x4e4bcd3b, 0x8, 0x5, 0x4, 0x5, 0x12, 0xfffffffffffffffe, 0x1, 0xffffffff00000001, 0x800000000e25, 0x48, 0x4]}, &(0x7f0000000480)={0x100}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000002140), 0xa002, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/arp\x00', 0xc0a00, 0x0) 4.999211308s ago: executing program 3 (id=65): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0xc2082, 0x0) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) read$auto_force_wakeup_fops_hci_vhci(r0, 0x0, 0x0) set_mempolicy$auto(0x5, &(0x7f0000000000)=0x9, 0x21) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mlockall$auto(0x7) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0xfffffffffffffffd, 0xdf, 0xeb1, r1, 0x8000) epoll_wait$auto(0xffffffffffffffff, 0x0, 0x7, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/net/rpc/nfs4.nametoid/channel\x00', 0x8f3b7a51b80ebd01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)="205c2020027e0dc0023af10e9bfa1babfa203753ca9a20370a", 0x19) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x2, 0xfffffffffffffffb) r3 = set_tid_address$auto(&(0x7f0000000000)=0x1) r4 = getpgid(r3) ptrace$auto(0x8001002b1, r4, 0xffffffffffffff56, 0x868f) 4.088655411s ago: executing program 1 (id=66): mmap$auto(0x0, 0x2020009, 0x3, 0xb8, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto_PR_SET_SHADOW_STACK_STATUS(0x4b, 0x4f, 0x519, 0x5, 0x8000) syz_open_procfs$namespace(0x0, 0x0) socketpair$auto(0xc6, 0x9, 0xffb, &(0x7f00000000c0)=0x40000000) socket(0x11, 0x3, 0x9) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3) read$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) socketpair$auto(0x5, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x8, 0x3, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0x100082) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xeb, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x0, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, 0x0, 0xa00, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/time_for_children\x00') openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/040/001\x00', 0x470801, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004400)='/dev/dsp1\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETTRIGGER(r0, 0x80045010, &(0x7f0000004440)) 3.509802652s ago: executing program 0 (id=67): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') sendmsg$auto_ETHTOOL_MSG_FEC_GET(0xffffffffffffffff, 0x0, 0x800) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x101c82, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x204003, 0x0) pipe$auto(&(0x7f00000000c0)=r1) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) fadvise64$auto(r2, 0x7fff, 0x6, 0x1) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r1, &(0x7f0000000080)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) msync$auto(0x1ffff000, 0x180000000000000, 0x2) ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socket(0x1, 0x3, 0x0) r3 = socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r4 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x183681, 0x0) writev$auto(r4, &(0x7f0000000140)={&(0x7f00000000c0), 0x2}, 0xa) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) semctl$auto(0x7, 0x2, 0x13, 0x5) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/snd/pcmC0D0p\x00', 0x40, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0xc1004110, 0x0) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000100), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0x1000}, 0x9, 0x4200311) 3.380593829s ago: executing program 3 (id=68): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x5, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) getsockopt$auto(r0, 0x84, 0x1d, 0x0, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/swradio14\x00', 0x80, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000000)=""/194, 0x70800) 2.858202479s ago: executing program 1 (id=69): openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000040), 0xc0c2, 0x0) futex$auto(&(0x7f00000003c0)=0x58, 0x5, 0x3, 0x0, &(0x7f0000000440)=0x2, 0x2000005) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) open(&(0x7f0000000280)='./cgroup\x00', 0x5d52c0, 0x0) r0 = socket(0xa, 0x2, 0x3a) r1 = open_by_handle_at$auto(r0, 0x0, 0xffffffff) prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x9, 0x7) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_dev_fops_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) read$auto_dev_fops_plock(r2, &(0x7f00000001c0)=""/132, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x300, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/wireless\x00', 0x80, 0x0) pread64$auto(r3, 0x0, 0x1ff, 0xf4) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="9bff29bdffffff7fdfd576d03923"], 0x14}}, 0x0) setuid$auto(0x800000000008) memfd_secret$auto(0x0) ioctl$auto_IMADDTIMER(r1, 0x80044940, 0x0) select$auto(0x1, &(0x7f0000000040)={[0xffffffff00000001, 0xfffffffffffffff7, 0x100, 0x7fff, 0x79, 0x3, 0x9, 0x6, 0xa80d, 0x8000000010000, 0x0, 0x7c43, 0x9, 0x0, 0x4, 0xd133]}, 0x0, &(0x7f00000001c0)={[0x800000000, 0x2, 0x80000012, 0x2, 0x4e4bcd3b, 0x8, 0x5, 0x4, 0x5, 0x12, 0xfffffffffffffffe, 0x1, 0xffffffff00000001, 0xe25, 0x48, 0x8]}, &(0x7f00000000c0)={0x100}) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000002140), 0xa002, 0x0) acct$auto(&(0x7f00000000c0)='/dev/cachefiles\x00') r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_UNEXPECTED_FRAME(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="2c000000e6e5fa995b06629681a9efddc3f249aec8f10b88f1fea2177eb7779637b4dab589f96eba1104f6c0b782bbd5edd30cb0f49e7b0129c5b6508aa50704368d6eef49a787dfce343a0e7cf649bbd051d1223812b104856105ece77dec7bd84ab0a32c7054973111e8ef18eac03f83a2fdd9c93905698e41387cc03f2a412038f8fe0ffba244076f67538bb54fbf602c79447100691be3e6eb74a2d9c2a492d66556ca63b7b3a2a45b0f44ef949ad23828a9e934e45e8daecbced86dd84058bb", @ANYRES16=r6, @ANYBLOB="000429bd7000fbdbdf255300000005001e000400000006003600060000000600f70009090000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000800}, 0x4011) write$auto(0x3, 0x0, 0xfffffdef) 2.65599778s ago: executing program 0 (id=70): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/freezer.state\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, 0x0, 0x0) 2.369851052s ago: executing program 2 (id=71): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xffffffffffffffff, 0x10c9) r2 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x8, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x29f, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) r3 = syz_clone(0x7630e0c3684ca6b2, 0x0, 0x40, 0x0, 0x0, 0x0) io_uring_enter$auto(r2, 0x0, 0x5, 0x1, 0x0, 0x0) fanotify_init$auto(0x5, 0x2000000000002) r4 = socket$nl_generic(0x10, 0x3, 0x10) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000140)) socket(0x26, 0x80805, 0x0) socket(0xa, 0x3, 0x6) r6 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) prctl$auto(0x5, 0x7, r6, 0xd, 0x0) r7 = openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) write$auto(r7, 0x0, 0x9) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) r9 = open(0x0, 0x261c2, 0x84) ioctl$auto_SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f0000000300)={0x200aa, 0x5, 0x0, 0x400, 0x9a, "077c1315ff06c9cc9ff4956913870ef95ebcd43e985b110210346f7f05f8bd5d8b4458e71254da2aab17208e518d2a9b3c20bd53a710ce119b1b61b0"}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000010c0)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r9, @ANYRES32=r3, @ANYRES8=r6, @ANYRES8=r4, @ANYRES16=r8], 0x1ac}}, 0x40000) r10 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r10, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x880}, 0x7, 0x4008) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/tracing/trace_pipe\x00', 0x0, 0x0) read$auto(0x3, 0x0, 0x4) mkdir$auto(&(0x7f0000000080)='./file0\x00', 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x511081, 0x4) rmdir$auto(&(0x7f0000000280)='./file0\x00') unshare$auto(0x40000080) 2.180039536s ago: executing program 0 (id=72): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) r1 = epoll_create$auto(0x1) fremovexattr$auto(r1, &(0x7f0000000000)='&\x00') read$auto_v4l2_fops_v4l2_dev(r1, 0x0, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x6dea, 0x5, 0x9, 0x17, r0, 0x10001) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f00000089c0)='/sys/kernel/debug/netdevsim/netdevsim1/max_vfs\x00', 0xc798ee72cfbd85fc, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cec18\x00', 0x1c0, 0x0) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2164, 0x8000000000000000, 0x0) write$auto(r2, &(0x7f0000000400)='\x05deo1\x00', 0x100000a3d9) close_range$auto(0x2, 0xa, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) 1.915196084s ago: executing program 3 (id=73): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x18, r1, 0x1, 0x72bd1e, 0x25dbdbff, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x18}, 0x1, 0x60, 0x0, 0x41}, 0x4004040) 1.594698829s ago: executing program 1 (id=74): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r3, &(0x7f00000000c0), 0x0) 1.192280898s ago: executing program 3 (id=75): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x300, 0x0) read$auto(r0, 0x0, 0x1f40) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x8002, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000480)='/dev/video18\x00', 0x802, 0x0) write$auto_v4l2_fops_v4l2_dev(r2, &(0x7f00000000c0), 0x0) 0s ago: executing program 0 (id=76): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/loop1/queue/wbt_lat_usec\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x9) ioctl$auto(0xffffffffffffffff, 0x400454ca, 0x38) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r1, 0x1261, 0x0) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x80, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, 0xffffffffffffffff, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, 0xffffffffffffffff, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r1, 0x1276, 0x0) mmap$auto(0x8000000000002001, 0x20009, 0xdf, 0x15, r2, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r3, 0x5609, 0xffffffffffffffff) madvise$auto(0x0, 0x20499d, 0x9) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) ioctl$auto_NS_GET_PID_FROM_PIDNS(r2, 0x8004b706, &(0x7f0000000180)=0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r4, 0x29, 0x10, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. [ 91.353233][ T5824] cgroup: Unknown subsys name 'net' [ 91.522591][ T5824] cgroup: Unknown subsys name 'cpuset' [ 91.532109][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.314782][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.683670][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.692671][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.700523][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.708143][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.716860][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.725391][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.742185][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.759900][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.778041][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.778108][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.785597][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.794069][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.801111][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.813974][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.814032][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.821962][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.829814][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.836016][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.844003][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.859669][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.409148][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 96.563087][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 96.584795][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 96.672829][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.680605][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.687874][ T5836] bridge_slave_0: entered allmulticast mode [ 96.695854][ T5836] bridge_slave_0: entered promiscuous mode [ 96.704067][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 96.744870][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.752278][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.760080][ T5836] bridge_slave_1: entered allmulticast mode [ 96.767263][ T5836] bridge_slave_1: entered promiscuous mode [ 96.863501][ T24] cfg80211: failed to load regulatory.db [ 96.913638][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.920975][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.928152][ T5837] bridge_slave_0: entered allmulticast mode [ 96.936691][ T5837] bridge_slave_0: entered promiscuous mode [ 96.946250][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.955469][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.962733][ T5834] bridge_slave_0: entered allmulticast mode [ 96.971004][ T5834] bridge_slave_0: entered promiscuous mode [ 96.981275][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.994183][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.009373][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.016678][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.024593][ T5837] bridge_slave_1: entered allmulticast mode [ 97.031900][ T5837] bridge_slave_1: entered promiscuous mode [ 97.042009][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.049568][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.056754][ T5834] bridge_slave_1: entered allmulticast mode [ 97.065143][ T5834] bridge_slave_1: entered promiscuous mode [ 97.172069][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.187115][ T5836] team0: Port device team_slave_0 added [ 97.209942][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.222684][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.234502][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.245698][ T5836] team0: Port device team_slave_1 added [ 97.252409][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.259716][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.266892][ T5835] bridge_slave_0: entered allmulticast mode [ 97.275460][ T5835] bridge_slave_0: entered promiscuous mode [ 97.322065][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.329506][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.336665][ T5835] bridge_slave_1: entered allmulticast mode [ 97.345041][ T5835] bridge_slave_1: entered promiscuous mode [ 97.413681][ T5837] team0: Port device team_slave_0 added [ 97.422979][ T5834] team0: Port device team_slave_0 added [ 97.430726][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.437702][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.464769][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.492872][ T5837] team0: Port device team_slave_1 added [ 97.514691][ T5834] team0: Port device team_slave_1 added [ 97.523075][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.530373][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.556720][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.572244][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.615929][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.639777][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.646766][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.673247][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.698041][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.705270][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.731363][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.756384][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.763557][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.789627][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.815851][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.822944][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.849081][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.870223][ T5835] team0: Port device team_slave_0 added [ 97.888885][ T5852] Bluetooth: hci0: command tx timeout [ 97.888943][ T5842] Bluetooth: hci2: command tx timeout [ 97.894625][ T5852] Bluetooth: hci1: command tx timeout [ 97.900393][ T5842] Bluetooth: hci3: command tx timeout [ 97.923609][ T5836] hsr_slave_0: entered promiscuous mode [ 97.930522][ T5836] hsr_slave_1: entered promiscuous mode [ 97.955529][ T5835] team0: Port device team_slave_1 added [ 98.049645][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.056647][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.083066][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.129411][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.136393][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.164015][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.182269][ T5834] hsr_slave_0: entered promiscuous mode [ 98.188861][ T5834] hsr_slave_1: entered promiscuous mode [ 98.195035][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.203084][ T5834] Cannot create hsr debugfs directory [ 98.214003][ T5837] hsr_slave_0: entered promiscuous mode [ 98.221184][ T5837] hsr_slave_1: entered promiscuous mode [ 98.227971][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.235639][ T5837] Cannot create hsr debugfs directory [ 98.379596][ T5835] hsr_slave_0: entered promiscuous mode [ 98.386183][ T5835] hsr_slave_1: entered promiscuous mode [ 98.392843][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.401209][ T5835] Cannot create hsr debugfs directory [ 98.783993][ T5836] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 98.797306][ T5836] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 98.810342][ T5836] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.831271][ T5836] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.887101][ T5837] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.908036][ T5837] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.931735][ T5837] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.943706][ T5837] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.004165][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.015510][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.046964][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.064022][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.166661][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.189659][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.208071][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.230358][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 99.320400][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.371790][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.402262][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.409544][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.446482][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.453674][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.491628][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.516011][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.580152][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.591093][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.616189][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.623361][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.636000][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.643131][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.682064][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.689278][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.725305][ T3004] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.732453][ T3004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.827536][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.916350][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.955323][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.962562][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.970898][ T5842] Bluetooth: hci1: command tx timeout [ 99.972945][ T5852] Bluetooth: hci2: command tx timeout [ 99.976332][ T5842] Bluetooth: hci0: command tx timeout [ 99.984197][ T5852] Bluetooth: hci3: command tx timeout [ 100.034091][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.041405][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.305679][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.426360][ T5836] veth0_vlan: entered promiscuous mode [ 100.485935][ T5836] veth1_vlan: entered promiscuous mode [ 100.506121][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.542068][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.603547][ T5836] veth0_macvtap: entered promiscuous mode [ 100.636041][ T5836] veth1_macvtap: entered promiscuous mode [ 100.681100][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.696109][ T5834] veth0_vlan: entered promiscuous mode [ 100.736819][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.751861][ T5834] veth1_vlan: entered promiscuous mode [ 100.763324][ T5837] veth0_vlan: entered promiscuous mode [ 100.777558][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.796911][ T5837] veth1_vlan: entered promiscuous mode [ 100.807468][ T5836] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.816805][ T5836] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.826689][ T5836] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.835735][ T5836] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.911968][ T5835] veth0_vlan: entered promiscuous mode [ 100.942124][ T5834] veth0_macvtap: entered promiscuous mode [ 100.954791][ T5834] veth1_macvtap: entered promiscuous mode [ 100.974874][ T5835] veth1_vlan: entered promiscuous mode [ 101.021253][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.035976][ T5837] veth0_macvtap: entered promiscuous mode [ 101.069088][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.080538][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.091282][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.105008][ T5837] veth1_macvtap: entered promiscuous mode [ 101.126956][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.136605][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.145467][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.154315][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.207657][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.220898][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.227701][ T5835] veth0_macvtap: entered promiscuous mode [ 101.251698][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.280715][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.303643][ T5835] veth1_macvtap: entered promiscuous mode [ 101.335372][ T5837] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.347055][ T5837] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.357256][ T5837] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.366162][ T5837] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.397869][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.403752][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.440513][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.474360][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.483979][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.503427][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.512480][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.525526][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.535322][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.627655][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.643082][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.690554][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.701624][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.817519][ T2979] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.834380][ T2979] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.955163][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.973697][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.049280][ T5852] Bluetooth: hci3: command tx timeout [ 102.054751][ T5852] Bluetooth: hci1: command tx timeout [ 102.060669][ T51] Bluetooth: hci0: command tx timeout [ 102.060689][ T5842] Bluetooth: hci2: command tx timeout [ 102.113581][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.122393][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.359006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.392217][ T5936] ubi0: attaching mtd0 [ 102.436631][ T5936] ubi0: scanning is finished [ 102.449696][ T5936] ubi0: empty MTD device detected [ 102.508617][ T30] audit: type=1800 audit(1749441905.719:2): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="dbroot" dev="configfs" ino=6812 res=0 errno=0 [ 102.609030][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.649067][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.710442][ T5942] syz.2.3 (5942) used greatest stack depth: 19800 bytes left [ 102.740258][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.863949][ T5936] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 102.879773][ T5936] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 102.887363][ T5936] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 102.894995][ T5936] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 102.904363][ T5936] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 102.911531][ T5936] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 102.920205][ T5936] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 1742828393 [ 102.931041][ T5936] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 103.041874][ T5948] ubi0: background thread "ubi_bgt0d" started, PID 5948 [ 103.355508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.429231][ T5932] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 103.888207][ T5959] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7'. [ 104.131381][ T5842] Bluetooth: hci2: command tx timeout [ 104.131842][ T5852] Bluetooth: hci1: command tx timeout [ 104.136909][ T5842] Bluetooth: hci0: command tx timeout [ 104.142565][ T5852] Bluetooth: hci3: command tx timeout [ 104.263014][ T5959] Zero length message leads to an empty skb [ 104.408554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.417154][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.541485][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.562559][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.571244][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 104.748889][ T5968] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 104.957680][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 104.966838][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.977918][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.235187][ T5975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.261978][ T5975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.342056][ T5983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13'. [ 106.064691][ T5994] random: crng reseeded on system resumption [ 106.123993][ T5996] ovs_: entered promiscuous mode [ 106.461919][ T6002] process 'syz.1.17' launched '/dev/fd/3/./file0' with NULL argv: empty string added [ 106.962545][ T5991] syz.3.14 uses obsolete (PF_INET,SOCK_PACKET) [ 108.454795][ T6021] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.289708][ T6028] netlink: 'syz.2.23': attribute type 4 has an invalid length. [ 109.942853][ T6033] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 109.985418][ C0] unchecked MSR access error: WRMSR to 0x418 (tried to write 0x0000000000000322) at rIP: 0xffffffff8163e969 (__mcheck_cpu_init_clear_banks+0x109/0x1f0) [ 110.000857][ C0] Call Trace: [ 110.004166][ C0] [ 110.007035][ C0] ? __pfx_mce_cpu_restart+0x10/0x10 [ 110.012363][ C0] mce_cpu_restart+0x98/0xb0 [ 110.016985][ C0] __flush_smp_call_function_queue+0x27a/0x8c0 [ 110.023186][ C0] __sysvec_call_function_single+0x87/0x400 [ 110.029116][ C0] sysvec_call_function_single+0x9f/0xc0 [ 110.034804][ C0] [ 110.037766][ C0] [ 110.040718][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 110.046733][ C0] RIP: 0010:kasan_enable_current+0x13/0x20 [ 110.052583][ C0] Code: 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 48 8b 05 8c cb 8a 11 83 80 08 16 00 00 01 48 be 5d 09 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 [ 110.072219][ C0] RSP: 0018:ffffc90005207198 EFLAGS: 00000257 [ 110.078314][ C0] RAX: ffff888035f99e00 RBX: ffff88804a967000 RCX: 0000000000000000 [ 110.086313][ C0] RDX: fffffbfff1ba2a8a RSI: fffffbfff1ba2a88 RDI: ffff88804a968000 [ 110.094302][ C0] RBP: ffffea00012a5800 R08: 0000000000001000 R09: 0000000000000000 [ 110.102293][ C0] R10: ffffed100952c000 R11: dffffc0000000000 R12: 00000000000d20c0 [ 110.110289][ C0] R13: ffffea00012a5a00 R14: 0000000000000003 R15: ffffea00012a5a00 [ 110.118322][ C0] ? __kasan_unpoison_pages+0x2c/0x40 [ 110.123750][ C0] post_alloc_hook+0x143/0x230 [ 110.128557][ C0] get_page_from_freelist+0x1321/0x3890 [ 110.134153][ C0] ? prepare_alloc_pages+0x3c2/0x610 [ 110.139469][ C0] ? __kernel_text_address+0xd/0x40 [ 110.144706][ C0] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 110.150635][ C0] ? namecmp+0x49/0x60 [ 110.154734][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 110.161122][ C0] ? namecmp+0x49/0x60 [ 110.165225][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 110.171147][ C0] ? policy_nodemask+0xea/0x4e0 [ 110.176014][ C0] alloc_pages_mpol+0x1fb/0x550 [ 110.180888][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 110.186283][ C0] ? get_freelist+0x1a8/0x1e0 [ 110.190983][ C0] ? find_held_lock+0x2b/0x80 [ 110.195686][ C0] new_slab+0x23b/0x330 [ 110.199870][ C0] ___slab_alloc+0xd9c/0x1940 [ 110.204569][ C0] ? __addrconf_sysctl_register+0xbb/0x360 [ 110.210397][ C0] ? new_slab+0x2d1/0x330 [ 110.214777][ C0] ? __addrconf_sysctl_register+0xbb/0x360 [ 110.220608][ C0] ? __slab_alloc.constprop.0+0x56/0xb0 [ 110.226184][ C0] __slab_alloc.constprop.0+0x56/0xb0 [ 110.231584][ C0] __kmalloc_node_track_caller_noprof+0x2ee/0x510 [ 110.238030][ C0] ? __addrconf_sysctl_register+0xbb/0x360 [ 110.243863][ C0] kmemdup_noprof+0x29/0x60 [ 110.248436][ C0] __addrconf_sysctl_register+0xbb/0x360 [ 110.254096][ C0] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 110.260363][ C0] ? lockdep_init_map_type+0x5c/0x280 [ 110.265761][ C0] ? mld_in_v1_mode+0x2b2/0x3a0 [ 110.270642][ C0] addrconf_sysctl_register+0x15f/0x1f0 [ 110.276211][ C0] ipv6_add_dev+0xb39/0x15f0 [ 110.280823][ C0] addrconf_notify+0x53e/0x19e0 [ 110.285691][ C0] ? ip6mr_device_event+0x1bc/0x230 [ 110.290916][ C0] notifier_call_chain+0xbc/0x410 [ 110.295961][ C0] ? __pfx_addrconf_notify+0x10/0x10 [ 110.301294][ C0] call_netdevice_notifiers_info+0xbe/0x140 [ 110.307211][ C0] register_netdevice+0x182e/0x2270 [ 110.312430][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 110.318002][ C0] __ip_tunnel_create+0x540/0x6e0 [ 110.323060][ C0] ? __pfx___ip_tunnel_create+0x10/0x10 [ 110.328668][ C0] ip_tunnel_init_net+0x22f/0x7d0 [ 110.333747][ C0] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 110.339336][ C0] ? trace_kmalloc+0x2b/0xd0 [ 110.343960][ C0] ? __kmalloc_noprof+0x242/0x510 [ 110.349008][ C0] ? lockdep_init_map_type+0x5c/0x280 [ 110.354421][ C0] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 110.359987][ C0] ops_init+0x1df/0x5f0 [ 110.364168][ C0] setup_net+0x1ff/0x510 [ 110.368430][ C0] ? lockdep_init_map_type+0x5c/0x280 [ 110.373866][ C0] ? __pfx_setup_net+0x10/0x10 [ 110.378671][ C0] ? debug_mutex_init+0x37/0x70 [ 110.383546][ C0] copy_net_ns+0x2a6/0x5f0 [ 110.387978][ C0] create_new_namespaces+0x3ea/0xa90 [ 110.393290][ C0] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 110.398948][ C0] ksys_unshare+0x45b/0xa40 [ 110.403565][ C0] ? native_tss_update_io_bitmap+0x3e1/0x770 [ 110.409573][ C0] ? __pfx_ksys_unshare+0x10/0x10 [ 110.414649][ C0] ? xfd_validate_state+0x61/0x180 [ 110.419823][ C0] __x64_sys_unshare+0x31/0x40 [ 110.424646][ C0] do_syscall_64+0xcd/0x490 [ 110.429202][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.435147][ C0] RIP: 0033:0x7f10c9f8e929 [ 110.439602][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.459254][ C0] RSP: 002b:00007f10cae39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 110.467700][ C0] RAX: ffffffffffffffda RBX: 00007f10ca1b5fa0 RCX: 00007f10c9f8e929 [ 110.475695][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 110.483682][ C0] RBP: 00007f10ca010b39 R08: 0000000000000000 R09: 0000000000000000 [ 110.491701][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.499706][ C0] R13: 0000000000000000 R14: 00007f10ca1b5fa0 R15: 00007ffc1cb39478 [ 110.507707][ C0] [ 110.617934][ T6033] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 110.688661][ T6032] program syz.2.25 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 112.501774][ T6034] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.521993][ T6051] netlink: 504 bytes leftover after parsing attributes in process `syz.1.28'. [ 112.546307][ T6034] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.620818][ T6034] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 112.724198][ T6034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.779478][ T6034] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.882440][ T6034] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 112.933656][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.012477][ T6057] HfR: entered promiscuous mode [ 113.079872][ T6034] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.107456][ T6034] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.256281][ T6034] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 113.568995][ T6034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.575073][ T6034] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 113.702182][ T6034] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 114.683697][ T6073] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.784117][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 115.008458][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.095815][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.648806][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.400924][ T6084] syz.2.36 (6084): attempted to duplicate a private mapping with mremap. This is not supported. [ 116.580350][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz.2.36'. [ 116.848779][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 117.098465][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 117.168543][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 117.728509][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.254734][ T6109] FAULT_INJECTION: forcing a failure. [ 118.254734][ T6109] name failslab, interval 1, probability 0, space 0, times 1 [ 118.388776][ T6109] CPU: 0 UID: 0 PID: 6109 Comm: syz.1.42 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 118.388818][ T6109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 118.388835][ T6109] Call Trace: [ 118.388845][ T6109] [ 118.388856][ T6109] dump_stack_lvl+0x16c/0x1f0 [ 118.388910][ T6109] should_fail_ex+0x512/0x640 [ 118.388956][ T6109] ? __kmalloc_node_noprof+0xc5/0x500 [ 118.389018][ T6109] should_failslab+0xc2/0x120 [ 118.389049][ T6109] __kmalloc_node_noprof+0xd8/0x500 [ 118.389097][ T6109] ? alloc_slab_obj_exts+0x41/0xa0 [ 118.389140][ T6109] alloc_slab_obj_exts+0x41/0xa0 [ 118.389176][ T6109] __memcg_slab_post_alloc_hook+0x255/0x960 [ 118.389218][ T6109] ? kasan_save_track+0x14/0x30 [ 118.389265][ T6109] kmem_cache_alloc_noprof+0x307/0x3b0 [ 118.389311][ T6109] ? vma_merge_new_range+0x37f/0xa00 [ 118.389352][ T6109] ? vm_area_alloc+0x1f/0x160 [ 118.389399][ T6109] vm_area_alloc+0x1f/0x160 [ 118.389440][ T6109] __mmap_region+0xf0e/0x25e0 [ 118.389491][ T6109] ? __pfx___mmap_region+0x10/0x10 [ 118.389534][ T6109] ? find_held_lock+0x2b/0x80 [ 118.389573][ T6109] ? finish_task_switch.isra.0+0x221/0xc10 [ 118.389604][ T6109] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.389666][ T6109] ? finish_task_switch.isra.0+0x221/0xc10 [ 118.389697][ T6109] ? rcu_is_watching+0x12/0xc0 [ 118.389726][ T6109] ? trace_sched_exit_tp+0xde/0x130 [ 118.389760][ T6109] ? __schedule+0x1181/0x5de0 [ 118.389819][ T6109] ? kvm_sched_clock_read+0x11/0x20 [ 118.389934][ T6109] ? trace_cap_capable+0x18d/0x200 [ 118.389990][ T6109] mmap_region+0x1ab/0x3f0 [ 118.390042][ T6109] ? __get_unmapped_area+0x267/0x440 [ 118.390081][ T6109] do_mmap+0xa3e/0x1210 [ 118.390140][ T6109] ? __pfx_do_mmap+0x10/0x10 [ 118.390177][ T6109] ? __pfx_down_write_killable+0x10/0x10 [ 118.390218][ T6109] vm_mmap_pgoff+0x281/0x450 [ 118.390258][ T6109] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 118.390299][ T6109] ? __x64_sys_futex+0x1e0/0x4c0 [ 118.390335][ T6109] ? __x64_sys_futex+0x1e9/0x4c0 [ 118.390379][ T6109] ksys_mmap_pgoff+0x7d/0x5c0 [ 118.390411][ T6109] ? xfd_validate_state+0x61/0x180 [ 118.390457][ T6109] __x64_sys_mmap+0x125/0x190 [ 118.390504][ T6109] do_syscall_64+0xcd/0x490 [ 118.390535][ T6109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.390566][ T6109] RIP: 0033:0x7f10c9f8e929 [ 118.390599][ T6109] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.390629][ T6109] RSP: 002b:00007f10cae39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 118.390662][ T6109] RAX: ffffffffffffffda RBX: 00007f10ca1b5fa0 RCX: 00007f10c9f8e929 [ 118.390682][ T6109] RDX: 00000000000000df RSI: 000000000040000a RDI: 0000000000000000 [ 118.390700][ T6109] RBP: 00007f10ca010b39 R08: 0000000000000002 R09: 0000000000008000 [ 118.390717][ T6109] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 118.390735][ T6109] R13: 0000000000000000 R14: 00007f10ca1b5fa0 R15: 00007ffc1cb39478 [ 118.390773][ T6109] [ 118.410871][ T6116] mmap: syz.3.43 (6116) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 118.928526][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.258429][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.811096][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.127664][ T6150] can: request_module (can-proto-3) failed. [ 124.367002][ T6194] FAULT_INJECTION: forcing a failure. [ 124.367002][ T6194] name failslab, interval 1, probability 0, space 0, times 0 [ 124.382128][ T6194] CPU: 0 UID: 0 PID: 6194 Comm: syz.1.60 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 124.382169][ T6194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.382186][ T6194] Call Trace: [ 124.382196][ T6194] [ 124.382208][ T6194] dump_stack_lvl+0x16c/0x1f0 [ 124.382263][ T6194] should_fail_ex+0x512/0x640 [ 124.382307][ T6194] ? __kmalloc_noprof+0xbf/0x510 [ 124.382355][ T6194] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 124.382390][ T6194] should_failslab+0xc2/0x120 [ 124.382417][ T6194] __kmalloc_noprof+0xd2/0x510 [ 124.382485][ T6194] vb2_core_allocated_buffers_storage+0x184/0x220 [ 124.382523][ T6194] vb2_core_reqbufs+0x398/0xfe0 [ 124.382567][ T6194] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 124.382625][ T6194] __vb2_init_fileio+0x3f1/0x1100 [ 124.382659][ T6194] ? __mutex_lock+0x1ca/0xb90 [ 124.382689][ T6194] ? __pfx___futex_wait+0x10/0x10 [ 124.382731][ T6194] ? vb2_fop_write+0xe6/0x3f0 [ 124.382765][ T6194] __vb2_perform_fileio+0x9c2/0x1660 [ 124.382809][ T6194] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 124.382858][ T6194] vb2_fop_write+0x207/0x3f0 [ 124.382896][ T6194] v4l2_write+0x226/0x360 [ 124.382940][ T6194] ? __pfx_v4l2_write+0x10/0x10 [ 124.382980][ T6194] vfs_write+0x29d/0x1150 [ 124.383030][ T6194] ? __pfx_vfs_write+0x10/0x10 [ 124.383070][ T6194] ? find_held_lock+0x2b/0x80 [ 124.383101][ T6194] ? __fget_files+0x204/0x3c0 [ 124.383148][ T6194] ? __fget_files+0x20e/0x3c0 [ 124.383200][ T6194] ksys_write+0x12a/0x250 [ 124.383242][ T6194] ? __pfx_ksys_write+0x10/0x10 [ 124.383297][ T6194] do_syscall_64+0xcd/0x490 [ 124.383328][ T6194] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.383359][ T6194] RIP: 0033:0x7f10c9f8e929 [ 124.383383][ T6194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.383412][ T6194] RSP: 002b:00007f10cae39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.383444][ T6194] RAX: ffffffffffffffda RBX: 00007f10ca1b5fa0 RCX: 00007f10c9f8e929 [ 124.383464][ T6194] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 124.383481][ T6194] RBP: 00007f10ca010b39 R08: 0000000000000000 R09: 0000000000000000 [ 124.383498][ T6194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.383515][ T6194] R13: 0000000000000000 R14: 00007f10ca1b5fa0 R15: 00007ffc1cb39478 [ 124.383554][ T6194] [ 126.092956][ T6210] FAULT_INJECTION: forcing a failure. [ 126.092956][ T6210] name failslab, interval 1, probability 0, space 0, times 0 [ 126.106693][ T6210] CPU: 0 UID: 0 PID: 6210 Comm: syz.2.62 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 126.106729][ T6210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.106745][ T6210] Call Trace: [ 126.106754][ T6210] [ 126.106764][ T6210] dump_stack_lvl+0x16c/0x1f0 [ 126.106813][ T6210] should_fail_ex+0x512/0x640 [ 126.106853][ T6210] ? __kmalloc_noprof+0xbf/0x510 [ 126.106894][ T6210] ? __vb2_queue_alloc+0x23e/0x1280 [ 126.106923][ T6210] should_failslab+0xc2/0x120 [ 126.106949][ T6210] __kmalloc_noprof+0xd2/0x510 [ 126.106990][ T6210] ? bitmap_find_next_zero_area_off+0xb4/0xd0 [ 126.107031][ T6210] __vb2_queue_alloc+0x23e/0x1280 [ 126.107059][ T6210] ? __kmalloc_noprof+0x242/0x510 [ 126.107110][ T6210] vb2_core_reqbufs+0xa90/0xfe0 [ 126.107150][ T6210] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 126.107209][ T6210] __vb2_init_fileio+0x3f1/0x1100 [ 126.107245][ T6210] ? __mutex_lock+0x1ca/0xb90 [ 126.107276][ T6210] ? __pfx___futex_wait+0x10/0x10 [ 126.107318][ T6210] ? vb2_fop_write+0xe6/0x3f0 [ 126.107353][ T6210] __vb2_perform_fileio+0x9c2/0x1660 [ 126.107400][ T6210] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 126.107448][ T6210] vb2_fop_write+0x207/0x3f0 [ 126.107498][ T6210] v4l2_write+0x226/0x360 [ 126.107541][ T6210] ? __pfx_v4l2_write+0x10/0x10 [ 126.107588][ T6210] vfs_write+0x29d/0x1150 [ 126.107640][ T6210] ? __pfx_vfs_write+0x10/0x10 [ 126.107678][ T6210] ? find_held_lock+0x2b/0x80 [ 126.107708][ T6210] ? __fget_files+0x204/0x3c0 [ 126.107753][ T6210] ? __fget_files+0x20e/0x3c0 [ 126.107811][ T6210] ksys_write+0x12a/0x250 [ 126.107854][ T6210] ? __pfx_ksys_write+0x10/0x10 [ 126.107908][ T6210] do_syscall_64+0xcd/0x490 [ 126.107938][ T6210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.107968][ T6210] RIP: 0033:0x7f6665f8e929 [ 126.107990][ T6210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.108017][ T6210] RSP: 002b:00007f6666d3a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.108045][ T6210] RAX: ffffffffffffffda RBX: 00007f66661b5fa0 RCX: 00007f6665f8e929 [ 126.108064][ T6210] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 126.108081][ T6210] RBP: 00007f6666010b39 R08: 0000000000000000 R09: 0000000000000000 [ 126.108098][ T6210] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.108115][ T6210] R13: 0000000000000000 R14: 00007f66661b5fa0 R15: 00007ffe2ffbdfb8 [ 126.108153][ T6210] [ 128.547848][ T6233] FAULT_INJECTION: forcing a failure. [ 128.547848][ T6233] name failslab, interval 1, probability 0, space 0, times 0 [ 128.643060][ T6233] CPU: 0 UID: 0 PID: 6233 Comm: syz.0.67 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 128.643105][ T6233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 128.643124][ T6233] Call Trace: [ 128.643135][ T6233] [ 128.643148][ T6233] dump_stack_lvl+0x16c/0x1f0 [ 128.643207][ T6233] should_fail_ex+0x512/0x640 [ 128.643255][ T6233] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 128.643317][ T6233] should_failslab+0xc2/0x120 [ 128.643349][ T6233] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 128.643398][ T6233] ? alloc_inode+0xc3/0x240 [ 128.643434][ T6233] alloc_inode+0xc3/0x240 [ 128.643466][ T6233] path_from_stashed+0x2be/0xb00 [ 128.643521][ T6233] ? __pfx_path_from_stashed+0x10/0x10 [ 128.643580][ T6233] open_namespace+0x8d/0x190 [ 128.643621][ T6233] ? __pfx_open_namespace+0x10/0x10 [ 128.643663][ T6233] ? rcu_is_watching+0x12/0xc0 [ 128.643693][ T6233] ? irqentry_exit+0x3b/0x90 [ 128.643746][ T6233] ns_ioctl+0x496/0xe50 [ 128.643787][ T6233] ? __pfx_ns_ioctl+0x10/0x10 [ 128.643838][ T6233] ? __pfx_ns_ioctl+0x10/0x10 [ 128.643881][ T6233] __x64_sys_ioctl+0x18e/0x210 [ 128.643921][ T6233] do_syscall_64+0xcd/0x490 [ 128.643958][ T6233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.643991][ T6233] RIP: 0033:0x7fd3f4d8e929 [ 128.644017][ T6233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.644049][ T6233] RSP: 002b:00007fd3f5b14038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 128.644079][ T6233] RAX: ffffffffffffffda RBX: 00007fd3f4fb5fa0 RCX: 00007fd3f4d8e929 [ 128.644099][ T6233] RDX: 0000000000000000 RSI: 000000000000b701 RDI: 0000000000000003 [ 128.644117][ T6233] RBP: 00007fd3f4e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 128.644135][ T6233] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.644152][ T6233] R13: 0000000000000000 R14: 00007fd3f4fb5fa0 R15: 00007ffdf19f6608 [ 128.644191][ T6233] [ 129.013873][ T6242] warning: `syz.1.69' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 130.394411][ T6261] FAULT_INJECTION: forcing a failure. [ 130.394411][ T6261] name failslab, interval 1, probability 0, space 0, times 0 [ 130.410017][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.1.74 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 130.410058][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.410076][ T6261] Call Trace: [ 130.410085][ T6261] [ 130.410098][ T6261] dump_stack_lvl+0x16c/0x1f0 [ 130.410150][ T6261] should_fail_ex+0x512/0x640 [ 130.410192][ T6261] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 130.410241][ T6261] should_failslab+0xc2/0x120 [ 130.410268][ T6261] __kmalloc_cache_node_noprof+0x6d/0x420 [ 130.410311][ T6261] ? __vb2_queue_alloc+0x23e/0x1280 [ 130.410340][ T6261] ? __get_vm_area_node+0x101/0x330 [ 130.410381][ T6261] __get_vm_area_node+0x101/0x330 [ 130.410417][ T6261] ? __vb2_init_fileio+0x3f1/0x1100 [ 130.410454][ T6261] __vmalloc_node_range_noprof+0x271/0x14b0 [ 130.410490][ T6261] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 130.410536][ T6261] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 130.410580][ T6261] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.410632][ T6261] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 130.410667][ T6261] vmalloc_user_noprof+0x9e/0xe0 [ 130.410704][ T6261] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 130.410739][ T6261] vb2_vmalloc_alloc+0x135/0x3f0 [ 130.410776][ T6261] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 130.410811][ T6261] __vb2_queue_alloc+0x8c9/0x1280 [ 130.410865][ T6261] vb2_core_reqbufs+0xa90/0xfe0 [ 130.410916][ T6261] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 130.410973][ T6261] __vb2_init_fileio+0x3f1/0x1100 [ 130.411007][ T6261] ? __mutex_lock+0x1ca/0xb90 [ 130.411039][ T6261] ? vb2_fop_write+0xe6/0x3f0 [ 130.411072][ T6261] __vb2_perform_fileio+0x9c2/0x1660 [ 130.411118][ T6261] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 130.411167][ T6261] vb2_fop_write+0x207/0x3f0 [ 130.411204][ T6261] v4l2_write+0x226/0x360 [ 130.411248][ T6261] ? __pfx_v4l2_write+0x10/0x10 [ 130.411287][ T6261] vfs_write+0x29d/0x1150 [ 130.411337][ T6261] ? __pfx_vfs_write+0x10/0x10 [ 130.411375][ T6261] ? find_held_lock+0x2b/0x80 [ 130.411405][ T6261] ? __fget_files+0x204/0x3c0 [ 130.411451][ T6261] ? __fget_files+0x20e/0x3c0 [ 130.411502][ T6261] ksys_write+0x12a/0x250 [ 130.411542][ T6261] ? __pfx_ksys_write+0x10/0x10 [ 130.411595][ T6261] do_syscall_64+0xcd/0x490 [ 130.411624][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.411653][ T6261] RIP: 0033:0x7f10c9f8e929 [ 130.411676][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.411704][ T6261] RSP: 002b:00007f10cae18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.411730][ T6261] RAX: ffffffffffffffda RBX: 00007f10ca1b6080 RCX: 00007f10c9f8e929 [ 130.411749][ T6261] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 130.411766][ T6261] RBP: 00007f10ca010b39 R08: 0000000000000000 R09: 0000000000000000 [ 130.411782][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.411798][ T6261] R13: 0000000000000000 R14: 00007f10ca1b6080 R15: 00007ffc1cb39478 [ 130.411835][ T6261] [ 130.412033][ T6261] syz.1.74: vmalloc error: size 4096, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 130.734368][ T6261] CPU: 1 UID: 0 PID: 6261 Comm: syz.1.74 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 130.734406][ T6261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 130.734421][ T6261] Call Trace: [ 130.734429][ T6261] [ 130.734438][ T6261] dump_stack_lvl+0x16c/0x1f0 [ 130.734484][ T6261] warn_alloc+0x248/0x3a0 [ 130.734522][ T6261] ? __pfx_warn_alloc+0x10/0x10 [ 130.734558][ T6261] ? rcu_is_watching+0x12/0xc0 [ 130.734586][ T6261] ? trace_kmalloc+0x2b/0xd0 [ 130.734614][ T6261] ? __kmalloc_cache_node_noprof+0x272/0x420 [ 130.734662][ T6261] ? __kasan_kmalloc+0x8a/0xb0 [ 130.734705][ T6261] ? __get_vm_area_node+0x208/0x330 [ 130.734749][ T6261] __vmalloc_node_range_noprof+0xb2d/0x14b0 [ 130.734800][ T6261] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 130.734845][ T6261] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.734902][ T6261] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 130.734937][ T6261] vmalloc_user_noprof+0x9e/0xe0 [ 130.734975][ T6261] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 130.735011][ T6261] vb2_vmalloc_alloc+0x135/0x3f0 [ 130.735048][ T6261] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 130.735082][ T6261] __vb2_queue_alloc+0x8c9/0x1280 [ 130.735136][ T6261] vb2_core_reqbufs+0xa90/0xfe0 [ 130.735178][ T6261] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 130.735234][ T6261] __vb2_init_fileio+0x3f1/0x1100 [ 130.735267][ T6261] ? __mutex_lock+0x1ca/0xb90 [ 130.735298][ T6261] ? vb2_fop_write+0xe6/0x3f0 [ 130.735330][ T6261] __vb2_perform_fileio+0x9c2/0x1660 [ 130.735375][ T6261] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 130.735420][ T6261] vb2_fop_write+0x207/0x3f0 [ 130.735454][ T6261] v4l2_write+0x226/0x360 [ 130.735496][ T6261] ? __pfx_v4l2_write+0x10/0x10 [ 130.735533][ T6261] vfs_write+0x29d/0x1150 [ 130.735583][ T6261] ? __pfx_vfs_write+0x10/0x10 [ 130.735620][ T6261] ? find_held_lock+0x2b/0x80 [ 130.735647][ T6261] ? __fget_files+0x204/0x3c0 [ 130.735692][ T6261] ? __fget_files+0x20e/0x3c0 [ 130.735742][ T6261] ksys_write+0x12a/0x250 [ 130.735782][ T6261] ? __pfx_ksys_write+0x10/0x10 [ 130.735827][ T6261] do_syscall_64+0xcd/0x490 [ 130.735859][ T6261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.735884][ T6261] RIP: 0033:0x7f10c9f8e929 [ 130.735904][ T6261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.735927][ T6261] RSP: 002b:00007f10cae18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 130.735950][ T6261] RAX: ffffffffffffffda RBX: 00007f10ca1b6080 RCX: 00007f10c9f8e929 [ 130.735967][ T6261] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 130.735982][ T6261] RBP: 00007f10ca010b39 R08: 0000000000000000 R09: 0000000000000000 [ 130.735998][ T6261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.736012][ T6261] R13: 0000000000000000 R14: 00007f10ca1b6080 R15: 00007ffc1cb39478 [ 130.736044][ T6261] [ 130.736192][ T6261] Mem-Info: [ 131.109945][ T6261] active_anon:13183 inactive_anon:0 isolated_anon:0 [ 131.109945][ T6261] active_file:11663 inactive_file:39622 isolated_file:0 [ 131.109945][ T6261] unevictable:768 dirty:556 writeback:0 [ 131.109945][ T6261] slab_reclaimable:9974 slab_unreclaimable:93141 [ 131.109945][ T6261] mapped:26615 shmem:2754 pagetables:1119 [ 131.109945][ T6261] sec_pagetables:0 bounce:0 [ 131.109945][ T6261] kernel_misc_reclaimable:0 [ 131.109945][ T6261] free:1326568 free_pcp:13677 free_cma:0 [ 131.168422][ T6261] Node 0 active_anon:53132kB inactive_anon:0kB active_file:46652kB inactive_file:158652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:106460kB dirty:2224kB writeback:0kB shmem:9480kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11636kB pagetables:4336kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 131.201919][ C0] vkms_vblank_simulate: vblank timer overrun [ 131.479880][ T6261] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 131.520363][ T6261] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.549330][ T6261] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 131.555758][ T6261] Node 0 DMA32 free:1388176kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53828kB inactive_anon:0kB active_file:48240kB inactive_file:157280kB unevictable:1536kB writepending:2224kB present:3129332kB managed:2540900kB mlocked:0kB bounce:0kB free_pcp:32968kB local_pcp:15508kB free_cma:0kB [ 131.589388][ T6261] lowmem_reserve[]: 0 0 1 1 1 [ 131.594209][ T6261] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1560kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 131.626031][ T6261] lowmem_reserve[]: 0 0 0 0 0 [ 131.630981][ T6261] Node 1 Normal free:3898948kB boost:0kB min:55788kB low:69732kB high:83676kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:136kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22560kB local_pcp:12928kB free_cma:0kB [ 131.678281][ T6261] lowmem_reserve[]: 0 0 0 0 0 [ 131.683118][ T6261] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.766890][ T6261] Node 0 DMA32: 481*4kB (U) 158*8kB (UE) 378*16kB (UME) 633*32kB (UME) 408*64kB (UME) 155*128kB (UME) 94*256kB (M) 45*512kB (M) 22*1024kB (ME) 10*2048kB (UME) 298*4096kB (M) = 1386164kB [ 131.818271][ T6261] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 131.841533][ T6261] Node 1 Normal: 207*4kB (UME) 59*8kB (UME) 43*16kB (UME) 72*32kB (UME) 22*64kB (UME) 10*128kB (UME) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3898948kB [ 131.898376][ T6261] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.922546][ T6261] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.942543][ T6261] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.973409][ T6261] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.988527][ T6261] 56740 total pagecache pages [ 131.993266][ T6261] 0 pages in swap cache [ 132.007767][ T6261] Free swap = 124996kB [ 132.017867][ T6261] Total swap = 124996kB [ 132.024590][ T6261] 2097051 pages RAM [ 132.042225][ T6261] 0 pages HighMem/MovableOnly [ 132.046984][ T6261] 429784 pages reserved [ 132.079310][ T6261] 0 pages cma reserved [ 132.117979][ T6274] [ 132.120361][ T6274] ====================================================== [ 132.127390][ T6274] WARNING: possible circular locking dependency detected [ 132.134418][ T6274] 6.15.0-syzkaller-13804-g939f15e640f1 #0 Not tainted [ 132.141184][ T6274] ------------------------------------------------------ [ 132.148204][ T6274] syz.0.76/6274 is trying to acquire lock: [ 132.154018][ T6274] ffffffff8e52ea68 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 132.163628][ T6274] [ 132.163628][ T6274] but task is already holding lock: [ 132.170997][ T6274] ffff8881427aa7c8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 132.182272][ T6274] [ 132.182272][ T6274] which lock already depends on the new lock. [ 132.182272][ T6274] [ 132.192686][ T6274] [ 132.192686][ T6274] the existing dependency chain (in reverse order) is: [ 132.201737][ T6274] [ 132.201737][ T6274] -> #2 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 132.210374][ T6274] blk_alloc_queue+0x619/0x760 [ 132.215685][ T6274] blk_mq_alloc_queue+0x175/0x290 [ 132.221259][ T6274] __blk_mq_alloc_disk+0x29/0x120 [ 132.226833][ T6274] loop_add+0x49e/0xb70 [ 132.231525][ T6274] loop_init+0x164/0x270 [ 132.236309][ T6274] do_one_initcall+0x120/0x6e0 [ 132.241612][ T6274] kernel_init_freeable+0x5c2/0x900 [ 132.247357][ T6274] kernel_init+0x1c/0x2b0 [ 132.252233][ T6274] ret_from_fork+0x5d4/0x6f0 [ 132.257374][ T6274] ret_from_fork_asm+0x1a/0x30 [ 132.262680][ T6274] [ 132.262680][ T6274] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 132.269923][ T6274] fs_reclaim_acquire+0x102/0x150 [ 132.275493][ T6274] prepare_alloc_pages+0x162/0x610 [ 132.281154][ T6274] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 132.287597][ T6274] __alloc_pages_noprof+0xb/0x1b0 [ 132.293169][ T6274] pcpu_populate_chunk+0x110/0xb00 [ 132.301694][ T6274] pcpu_alloc_noprof+0x86a/0x1470 [ 132.307260][ T6274] xt_percpu_counter_alloc+0x13e/0x1b0 [ 132.313262][ T6274] find_check_entry.constprop.0+0xbf/0xa20 [ 132.319621][ T6274] translate_table+0xd0b/0x17b0 [ 132.325035][ T6274] ip6t_register_table+0x102/0x430 [ 132.330691][ T6274] ip6table_mangle_table_init+0x40/0x60 [ 132.336780][ T6274] xt_find_table_lock+0x2e1/0x520 [ 132.342358][ T6274] xt_request_find_table_lock+0x28/0xf0 [ 132.348452][ T6274] get_info+0x190/0x620 [ 132.353181][ T6274] do_ip6t_get_ctl+0x169/0xa50 [ 132.358491][ T6274] nf_getsockopt+0x7c/0xe0 [ 132.363465][ T6274] ipv6_getsockopt+0x1f7/0x280 [ 132.368769][ T6274] tcp_getsockopt+0xa1/0x100 [ 132.373905][ T6274] do_sock_getsockopt+0x3fc/0x800 [ 132.379472][ T6274] __sys_getsockopt+0x123/0x1b0 [ 132.384884][ T6274] __x64_sys_getsockopt+0xbd/0x160 [ 132.390547][ T6274] do_syscall_64+0xcd/0x490 [ 132.395586][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.402016][ T6274] [ 132.402016][ T6274] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 132.409763][ T6274] __lock_acquire+0x126f/0x1c90 [ 132.415150][ T6274] lock_acquire+0x179/0x350 [ 132.420215][ T6274] __mutex_lock+0x199/0xb90 [ 132.425256][ T6274] pcpu_alloc_noprof+0xb4c/0x1470 [ 132.430825][ T6274] blk_stat_alloc_callback+0xc8/0x280 [ 132.436729][ T6274] wbt_init+0xac/0x540 [ 132.441333][ T6274] queue_wb_lat_store+0x354/0x3d0 [ 132.446905][ T6274] queue_attr_store+0x279/0x320 [ 132.452305][ T6274] sysfs_kf_write+0xf2/0x150 [ 132.457435][ T6274] kernfs_fop_write_iter+0x351/0x510 [ 132.463266][ T6274] vfs_write+0x6c4/0x1150 [ 132.468134][ T6274] ksys_write+0x12a/0x250 [ 132.473012][ T6274] do_syscall_64+0xcd/0x490 [ 132.478050][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.484483][ T6274] [ 132.484483][ T6274] other info that might help us debug this: [ 132.484483][ T6274] [ 132.494714][ T6274] Chain exists of: [ 132.494714][ T6274] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 132.494714][ T6274] [ 132.508388][ T6274] Possible unsafe locking scenario: [ 132.508388][ T6274] [ 132.515852][ T6274] CPU0 CPU1 [ 132.521232][ T6274] ---- ---- [ 132.526598][ T6274] lock(&q->q_usage_counter(io)#18); [ 132.531995][ T6274] lock(fs_reclaim); [ 132.538531][ T6274] lock(&q->q_usage_counter(io)#18); [ 132.546470][ T6274] lock(pcpu_alloc_mutex); [ 132.550989][ T6274] [ 132.550989][ T6274] *** DEADLOCK *** [ 132.550989][ T6274] [ 132.559143][ T6274] 6 locks held by syz.0.76/6274: [ 132.564088][ T6274] #0: ffff888029b73b38 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 132.573178][ T6274] #1: ffff888034242428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 132.582206][ T6274] #2: ffff88805f2a6c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 132.591978][ T6274] #3: ffff88814278e698 (kn->active#79){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 132.602032][ T6274] #4: ffff8881427aa7c8 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 132.613733][ T6274] #5: ffff8881427aa800 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 132.625717][ T6274] [ 132.625717][ T6274] stack backtrace: [ 132.631610][ T6274] CPU: 1 UID: 0 PID: 6274 Comm: syz.0.76 Not tainted 6.15.0-syzkaller-13804-g939f15e640f1 #0 PREEMPT(full) [ 132.631639][ T6274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.631653][ T6274] Call Trace: [ 132.631664][ T6274] [ 132.631672][ T6274] dump_stack_lvl+0x116/0x1f0 [ 132.631710][ T6274] print_circular_bug+0x275/0x350 [ 132.631758][ T6274] check_noncircular+0x14c/0x170 [ 132.631791][ T6274] __lock_acquire+0x126f/0x1c90 [ 132.631828][ T6274] lock_acquire+0x179/0x350 [ 132.631858][ T6274] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 132.631893][ T6274] ? __pfx___might_resched+0x10/0x10 [ 132.631918][ T6274] ? ksys_write+0x12a/0x250 [ 132.631950][ T6274] ? do_syscall_64+0xcd/0x490 [ 132.631971][ T6274] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.631997][ T6274] __mutex_lock+0x199/0xb90 [ 132.632017][ T6274] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 132.632051][ T6274] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 132.632085][ T6274] ? __pfx___mutex_lock+0x10/0x10 [ 132.632115][ T6274] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 132.632157][ T6274] pcpu_alloc_noprof+0xb4c/0x1470 [ 132.632193][ T6274] ? __pfx_wbt_data_dir+0x10/0x10 [ 132.632226][ T6274] ? __pfx_wb_timer_fn+0x10/0x10 [ 132.632248][ T6274] blk_stat_alloc_callback+0xc8/0x280 [ 132.632270][ T6274] ? kasan_save_track+0x14/0x30 [ 132.632305][ T6274] wbt_init+0xac/0x540 [ 132.632328][ T6274] queue_wb_lat_store+0x354/0x3d0 [ 132.632365][ T6274] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 132.632402][ T6274] ? __mutex_trylock_common+0xe9/0x250 [ 132.632433][ T6274] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 132.632469][ T6274] queue_attr_store+0x279/0x320 [ 132.632505][ T6274] ? __pfx_queue_attr_store+0x10/0x10 [ 132.632539][ T6274] ? __lock_acquire+0x622/0x1c90 [ 132.632574][ T6274] ? find_held_lock+0x2b/0x80 [ 132.632595][ T6274] ? sysfs_file_kobj+0xe4/0x290 [ 132.632622][ T6274] ? __pfx_queue_attr_store+0x10/0x10 [ 132.632670][ T6274] sysfs_kf_write+0xf2/0x150 [ 132.632697][ T6274] kernfs_fop_write_iter+0x351/0x510 [ 132.632720][ T6274] ? __pfx_sysfs_kf_write+0x10/0x10 [ 132.632747][ T6274] vfs_write+0x6c4/0x1150 [ 132.632778][ T6274] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 132.632802][ T6274] ? __pfx___mutex_lock+0x10/0x10 [ 132.632822][ T6274] ? __pfx_vfs_write+0x10/0x10 [ 132.632862][ T6274] ksys_write+0x12a/0x250 [ 132.632893][ T6274] ? __pfx_ksys_write+0x10/0x10 [ 132.632930][ T6274] do_syscall_64+0xcd/0x490 [ 132.632968][ T6274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.633004][ T6274] RIP: 0033:0x7fd3f4d8e929 [ 132.633021][ T6274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.633043][ T6274] RSP: 002b:00007fd3f2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.633063][ T6274] RAX: ffffffffffffffda RBX: 00007fd3f4fb6080 RCX: 00007fd3f4d8e929 [ 132.633077][ T6274] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000003 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 132.633090][ T6274] RBP: 00007fd3f4e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 132.633104][ T6274] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.633116][ T6274] R13: 0000000000000000 R14: 00007fd3f4fb6080 R15: 00007ffdf19f6608 [ 132.633137][ T6274] [ 133.521319][ T5837] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 133.542127][ T3525] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.549627][ T5837] EXT4-fs error (device sda1) in ext4_free_inode:361: Filesystem failed CRC [ 133.580304][ T5837] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 133.613234][ T5836] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 133.634028][ T5836] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 133.652062][ T3525] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.722542][ T3525] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.772775][ T6275] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 133.801510][ T6275] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 133.811290][ T3525] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.897041][ T5835] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 133.908276][ T5835] EXT4-fs error (device sda1) in ext4_free_inode:361: Corrupt filesystem [ 133.923914][ T6275] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz.0.76: bg 1: bad block bitmap checksum [ 133.989261][ T3525] bridge_slave_1: left allmulticast mode [ 133.995062][ T3525] bridge_slave_1: left promiscuous mode [ 134.001392][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.010260][ T3525] bridge_slave_0: left allmulticast mode [ 134.015924][ T3525] bridge_slave_0: left promiscuous mode [ 134.021918][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.121194][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.132818][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.142353][ T3525] bond0 (unregistering): Released all slaves [ 134.222895][ T3525] ovs_: left promiscuous mode [ 134.406686][ T3525] hsr_slave_0: left promiscuous mode [ 134.412623][ T3525] hsr_slave_1: left promiscuous mode [ 134.424564][ T3525] veth1_macvtap: left promiscuous mode [ 134.430462][ T3525] veth0_macvtap: left promiscuous mode [ 134.436105][ T3525] veth1_vlan: left promiscuous mode [ 134.442801][ T3525] veth0_vlan: left promiscuous mode [ 134.585890][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 134.598146][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 134.926477][ T3525] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.985837][ T3525] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.051767][ T3525] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.106533][ T3525] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.220570][ T3525] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.273929][ T3525] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.343363][ T3525] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.384989][ T3525] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.471144][ T3525] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.513616][ T3525] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.574182][ T3525] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.614403][ T3525] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.731348][ T3525] bridge_slave_1: left allmulticast mode [ 135.737059][ T3525] bridge_slave_1: left promiscuous mode [ 135.749802][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.758960][ T3525] bridge_slave_0: left allmulticast mode [ 135.764620][ T3525] bridge_slave_0: left promiscuous mode [ 135.770590][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.780149][ T3525] bridge_slave_1: left allmulticast mode [ 135.785795][ T3525] bridge_slave_1: left promiscuous mode [ 135.791653][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.800063][ T3525] bridge_slave_0: left allmulticast mode [ 135.805713][ T3525] bridge_slave_0: left promiscuous mode [ 135.811572][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.821262][ T3525] bridge_slave_1: left allmulticast mode [ 135.826905][ T3525] bridge_slave_1: left promiscuous mode [ 135.832743][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.841143][ T3525] bridge_slave_0: left allmulticast mode [ 135.846793][ T3525] bridge_slave_0: left promiscuous mode [ 135.852932][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.985768][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.995645][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.005313][ T3525] bond0 (unregistering): Released all slaves [ 136.096248][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.106067][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.115634][ T3525] bond0 (unregistering): Released all slaves [ 136.193043][ T3525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.203411][ T3525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.213927][ T3525] bond0 (unregistering): Released all slaves [ 136.281143][ T3525] HfR: left promiscuous mode [ 136.661118][ T3525] hsr_slave_0: left promiscuous mode [ 136.671353][ T3525] hsr_slave_1: left promiscuous mode [ 136.677457][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.684989][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.694247][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.702345][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.714090][ T3525] hsr_slave_0: left promiscuous mode [ 136.720134][ T3525] hsr_slave_1: left promiscuous mode [ 136.725879][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.734557][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.743494][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.752457][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.763769][ T3525] hsr_slave_0: left promiscuous mode [ 136.770809][ T3525] hsr_slave_1: left promiscuous mode [ 136.776576][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.784343][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.793641][ T3525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.801352][ T3525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.820131][ T3525] veth1_macvtap: left promiscuous mode [ 136.825668][ T3525] veth0_macvtap: left promiscuous mode [ 136.832560][ T3525] veth1_vlan: left promiscuous mode [ 136.837882][ T3525] veth0_vlan: left promiscuous mode [ 136.844220][ T3525] veth1_macvtap: left promiscuous mode [ 136.852056][ T3525] veth0_macvtap: left promiscuous mode [ 136.857652][ T3525] veth1_vlan: left promiscuous mode [ 136.863971][ T3525] veth0_vlan: left promiscuous mode [ 136.871098][ T3525] veth1_macvtap: left promiscuous mode [ 136.876632][ T3525] veth0_macvtap: left promiscuous mode [ 136.882530][ T3525] veth1_vlan: left promiscuous mode [ 136.887831][ T3525] veth0_vlan: left promiscuous mode [ 137.157550][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 137.180856][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 137.329983][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 137.342628][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 137.494348][ T3525] team0 (unregistering): Port device team_slave_1 removed [ 137.515072][ T3525] team0 (unregistering): Port device team_slave_0 removed [ 137.811900][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.820024][ T1303] ieee802154 phy1 wpan1: encryption failed: -22