last executing test programs: 13.752374813s ago: executing program 0 (id=448): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x88) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x4040aea0, 0x0) rseq$auto(&(0x7f0000000040)={0x10, 0x1, 0x800000000, 0x6, 0x80, 0x2}, 0x8000, 0x1, 0xa) r2 = openat$auto_event_inject_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/inject\x00', 0x101000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r2, 0x0) madvise$auto(0x0, 0x200007, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x1, 0x84) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="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"], 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) r3 = fanotify_init$auto(0x4000, 0x2000000000002) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) io_uring_register$auto_IORING_UNREGISTER_PERSONALITY(r3, 0xa, &(0x7f0000000080), 0x3ff) madvise$auto(0x0, 0x2003f0, 0x15) 12.711246484s ago: executing program 0 (id=453): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r2 = socket(0x2, 0x3, 0xa) connect$auto(r2, 0x0, 0x55) ioperm$auto(0x7fb, 0x1, 0x4000007) setresgid$auto(0x0, 0x6, 0x0) read$auto(r1, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x400800}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x10000686, 0x0) mmap$auto(0xfffffffffffffff4, 0x20009, 0xe2, 0xeb1, 0x405, 0x7) r4 = socket(0x15, 0x5, 0x0) getsockopt$auto(r4, 0x114, 0x2718, 0xfffffffffffffffc, 0x0) socket(0x2c, 0x5, 0xe18) syz_genetlink_get_family_id$auto_nfc(0x0, r0) sendmsg$auto_NFC_CMD_LLC_SET_PARAMS(r4, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x2000080}, 0x10) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) fchdir$auto(r0) mkdir$auto(&(0x7f0000000480)='./cgroup\x00', 0x6) 11.749610565s ago: executing program 0 (id=456): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r1, 0x0, 0xfff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/block/loop15/queue/discard_granularity\x00', 0x8000, 0x0) unshare$auto(0x40000080) madvise$auto(0x0, 0xffffffffffff0009, 0x13) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r2, 0x43403d05, 0x0) madvise$auto(0x0, 0x53, 0x9) 7.410910889s ago: executing program 1 (id=462): r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f0000000140)={0x0, 0xe4b8, 0x1, [0xfd]}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ifb0/statistics/tx_fifo_errors\x00', 0x0, 0x0) r2 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0xfffffffb) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) setsockopt$auto(r2, 0x6, 0x12, 0x0, 0xa1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/cpu/isolated\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/58, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) madvise$auto(0x0, 0x2003ed, 0x19) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/58, 0x3a) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=&(0x7f00000000c0)='/sys/devices/system/cpu/isolated\x00', &(0x7f0000000200)=&(0x7f00000001c0)='^\x00') close_range$auto(r1, r1, 0x1) 7.410284378s ago: executing program 0 (id=470): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) io_uring_enter$auto(r0, 0x8001, 0x80, 0xf, &(0x7f0000000040)="6f6fdfc624482b6feebecf0c6f9b95dfda4c61249e97790decc0a3b8885108e61e06e4de584eb953737116e751be9b06447d68ceb2fbe4cab38f1f351737e8a1acfa09e4ad456d9b26a7f85a39540a7cb4f7adedabc87237db4dc316f7f529c11804c2db4dbf598c1ea68248f57e56", 0x5) read$auto(r0, 0x0, 0xb4d3) 6.466272815s ago: executing program 1 (id=465): open(0x0, 0xd02, 0xc3) unshare$auto(0x40000080) unshare$auto(0x3) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x100000000021, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/memory15/online\x00', 0xa001, 0x0) write$auto(r0, &(0x7f0000000140)='0[.[\x00', 0xcd04) r1 = socket(0x10, 0x2, 0x14) sendmsg$auto_NLBL_MGMT_C_REMOVE(r1, 0x0, 0x400000c) sysfs$auto(0x2, 0x101000000000007, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0xffffffffffffffff, 0x0, 0x4) io_setup$auto(0x80002, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(0xffffffffffffffff, 0x40084149, 0x0) mmap$auto(0x0, 0x400008, 0x5f, 0x1b5e, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x0, 0x0) mmap$auto(0x0, 0x0, 0x36, 0x9b72, r2, 0x28000) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) 6.246616991s ago: executing program 3 (id=466): r0 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000440)='/proc/thread-self/mountinfo\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x400, 0x0) unshare$auto(0x40000080) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000140)) bpf$auto(0x4c2a, &(0x7f00000001c0)=@bpf_attr_11={0x0, 0x3ff, 0x8, 0x76, 0x18cf, 0x8, 0xfd, r1}, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0xd, &(0x7f0000000000)={0x30, 0xf1, 0xb0}}) socketpair$auto(0x1000, 0xe233, 0xf7b5, 0x0) read$auto_usbfs_devices_fops_usb(0xffffffffffffffff, &(0x7f0000000580)=""/215, 0xd7) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8080, 0x0) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40) mmap$auto(0x0, 0x40000a, 0x400004df, 0x9b52, 0xffffffffffffffff, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) fcntl$auto_F_SET_RW_HINT(r3, 0x40c, 0x0) msgctl$auto(0x3d3e, 0xc3, &(0x7f0000000880)={{0x1fc0, 0x0, 0x0, 0x3, 0x20000040, 0x5, 0xd6c}, &(0x7f0000000800)=0x7, &(0x7f0000000840)=0x8, 0x7eb, 0x6, 0x3, 0x3, 0x4, 0x0, 0x6, 0x1, @raw=0x7, @raw=0xd}) timer_create$auto_CLOCK_BOOTTIME(0x7, &(0x7f0000000480)={@sival_int=0x9, @raw=0x400, 0xe4a, @_sigev_thread={&(0x7f0000000280)=&(0x7f0000000080)=0x9, &(0x7f0000000340)="a49b6dda48d6b28bd2e3a18f3ad0e5bc92544cddbd18e0bc8d3315f84fb53f773490d99ff5c20c9ff4a1110422c8cb5bac055e1aefc49ecf6e8f9503ff13b040591b761c99ce9989fa42d2808e19b19dd387b83ea68915533d19b36f9a35e41b0be9bfbeee22023f2c323471024546365c5e367b3dfef58db03cd6ac71b9c9ea2bab39fb57256fc22b86d20de0dac3fd15357f75019491d1d75e36399a0c175d0085ac85a5c14fb039f3e171e1"}}, &(0x7f00000004c0)=0x6) read$auto_proc_mountinfo_operations_mnt_namespace(r0, &(0x7f0000001100)=""/4096, 0x1000) 6.168690577s ago: executing program 2 (id=467): close_range$auto(0x2, 0x8, 0x0) socket(0x11, 0x3, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000080), r0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000001140)={&(0x7f0000000040), 0xc, &(0x7f0000001100)={&(0x7f00000000c0)={0x1014, r1, 0x400, 0x70bd28, 0x25dfdbff, {}, "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"}, 0x1014}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000014) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, &(0x7f0000001180), 0x410000, 0x0) socket(0x2, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r2) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, r3, 0x95bda67d863ba7af, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, r4) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x83, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) 5.534522539s ago: executing program 2 (id=468): mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket(0x1e, 0x5, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) sysfs$auto(0x2, 0x100000000000027, 0x0) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x8, 0xd, 0x3, 0x81, 0xffffffff, 0x2000000000000002, 0x0, 0x9, 0x1, 0x4, 0x5, 0xb0, 0x9, 0x20000800001, 0xffffffff, 0x5, 0x7, 0x6, 0x7, 0x0, 0xffffffee, 0x2a17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x9, 0x81) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0xffffffff, 0x0) write$auto(0x3, 0x0, 0xfffffdef) getsockopt$auto_SO_ZEROCOPY(r0, 0x4, 0x3c, &(0x7f0000000040)='$\x00', &(0x7f00000000c0)=0xa4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) userfaultfd$auto(0x1) close_range$auto(0x2, 0xa, 0x0) 5.527044158s ago: executing program 3 (id=469): syz_clone(0x25342080, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video3\x00', 0x10b000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x9, 0xeb3, 0xfffefffffffffffa, 0x8000) fcntl$auto(0xffffffffffffffff, 0x409, 0x40003f) r0 = prctl$auto_PR_SET_VMA_ANON_NAME(0x4, 0x0, 0x0, 0x7a, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xc18, 0x8000) r1 = socket(0x2, 0x1, 0x0) getsockopt$auto(r1, 0x0, 0x43, 0x0, &(0x7f00000000c0)=0x1e) writev$auto(r0, &(0x7f0000000140)={0x0, 0x3}, 0x8) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fe, 0x104, 0x80000001, 0x7, 0x1, 0x3, 0x15f4da0a, 0x6, 0x3, 0x62, 0x1, 0x7, 0x6d3f, 0x2, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x40000080) init_module$auto(0x0, 0xffff9, 0x0) 4.534214012s ago: executing program 1 (id=471): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snd/pcmC0D0c\x00', 0x1f3c41, 0x0) r0 = socket(0x2, 0x1, 0x0) r1 = getsockopt$auto(r0, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x200039) mmap$auto(0x200000000, 0x4, 0x80, 0x40eb6, r1, 0x6ba) madvise$auto(0x0, 0x20499d, 0x9) cachestat$auto(0x0, 0x0, 0x0, 0x0) r2 = prctl$auto(0x2f, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl802154(0x0, r0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8ea002, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x1d, 0x0, 0x0) r3 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, 0x0, 0x7ffffffff000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x9, 0x20000000) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x40002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mincore$auto(0x40001000, 0x12000000000001, 0x0) ioctl$auto_FIFREEZE(r2, 0xc0045878, 0x20000000fa) 4.3249245s ago: executing program 3 (id=472): mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0xffffffffffffffff, 0x8000) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0xc0603d0f, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_fd=r1, 0x3, 0x81, @kprobe_multi={0x4, 0x3, 0xfffffffffffffe01, 0x6, 0x4}}, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x80044943, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='wg0\x00', 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r4 = socket(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r7, r6, 0x4, 0x10401, r4, @relative_fd=r5, 0xe600}, 0xf) bpf$auto(0x4, &(0x7f00000001c0)=@bpf_attr_11={0x5, 0x8000000000000005, 0x9, 0x5, 0xf870e9f, 0xa4ea, 0x8}, 0x2) 4.285862539s ago: executing program 2 (id=473): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0x8, 0x1, 0x2, 0x4, 0x15f4da0e, 0x3, 0xd08, 0xc, 0x8, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2c, 0x1, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000080)=""/19, 0x13) bind$auto(0x3, 0x0, 0x6a) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) close_range$auto(0x2, 0xa, 0x0) io_uring_setup$auto(0x6, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) 4.176271151s ago: executing program 0 (id=474): mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0xd) sendmmsg$auto(r0, 0x0, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) 3.154611546s ago: executing program 2 (id=475): r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, &(0x7f0000000140)={0x0, 0xe4b8, 0x1, [0xfd]}) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ifb0/statistics/tx_fifo_errors\x00', 0x0, 0x0) r2 = socket(0x2, 0x801, 0x106) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0xfffffffb) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) timerfd_create$auto(0x9, 0x0) setsockopt$auto(r2, 0x6, 0x12, 0x0, 0xa1) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/system/cpu/isolated\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000080)=""/58, 0x3a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) madvise$auto(0x0, 0x2003ed, 0x19) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/58, 0x3a) execve$auto(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=&(0x7f00000000c0)='/sys/devices/system/cpu/isolated\x00', &(0x7f0000000200)=&(0x7f00000001c0)='^\x00') close_range$auto(r1, r1, 0x1) 2.93476928s ago: executing program 3 (id=476): openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto_proc_single_file_operations_base(0xffffffffffffffff, 0x0, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x7, 0x40009, 0x6, 0x9b72, 0x7, 0x28000) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, 0x0) ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f0000000100)={0x0, 0x2000004, 0x7}) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/010/001\x00', 0x20000, 0x0) open(0x0, 0x161342, 0x100) rseq$auto(0x0, 0x7ffd, 0xfffffff4, 0x8) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = socket(0x23, 0x2, 0x0) getsockname$auto(r0, &(0x7f00000001c0), &(0x7f0000000040)=0xcf) open(0x0, 0xeca301, 0x29) write$auto(0x3, 0x0, 0x100082) r1 = open(0x0, 0x161342, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x4, 0x1, 0x9, 0x9b72, 0x2, 0x8000) 2.711296127s ago: executing program 1 (id=477): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rseq$auto(&(0x7f0000000340)={0x10, 0x401, 0x0, 0x803, 0x7, 0x2}, 0x8000, 0x0, 0x8000006) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020005, 0x5, 0xeb1, 0xfffffffffffffffa, 0x200000000008000) gettid() waitid$auto_P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040)={@siginfo_0_0={0x1, 0x7fff, 0x1d77, @_sigpoll={0x3}}}, 0x64, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x28641, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb4, 0xfffffffffffffffa, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) dup2$auto(0x5, 0x4) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, 0x0, 0x40091) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051a940806ec05be276cfc83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0xe5, 0x3}, 0x10) r1 = socket(0x10, 0x80002, 0x8) ioctl$auto_VHOST_SET_LOG_FD2(r0, 0x4004af07, &(0x7f0000000000)=r1) close_range$auto(r1, r1, 0x0) write$auto(0x6, 0x0, 0x100000001) 2.531335367s ago: executing program 2 (id=478): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r0, 0x1261, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x3c) pwrite64$auto(0xc8, &(0x7f0000000600)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\r\xaa\x1c\x03\x00\xe0\x00c\x14M>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xdd\xac\x00\x00\x00\x00\x00\x00\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x15\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\xff\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x8bc) mmap$auto(0xff, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x80040, 0x0) openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/environ\x00', 0x88f80, 0x0) openat$auto_fops_u64_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim6/psample/latency_max\x00', 0x18c000, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000180)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x8000}, 0x80) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x109001, 0x0) 1.73974269s ago: executing program 1 (id=479): getpid() mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) semctl$auto_SETVAL(0x6, 0x4, 0x10, 0x8) prctl$auto_PR_SET_MM_START_DATA(0x80000001, 0x3, 0x0, 0x9, 0xd) ioctl$auto(0xffffffffffffffff, 0xfffff369, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) uname$auto(0x0) ioctl$auto(0x3, 0x5404, 0x38) mmap$auto(0x0, 0x440009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x2, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) 1.005793077s ago: executing program 2 (id=480): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80802, 0x0) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) r2 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:/\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8eX\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xde 1 [ 86.263026][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.270884][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.279013][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.284900][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.287659][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.300984][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.301462][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.316461][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.317239][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.332448][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.340812][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.349529][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.357107][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.365461][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.370096][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.396927][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.404872][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.405411][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.433915][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.049585][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 87.193535][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 87.216276][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 87.240937][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 87.423906][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.431812][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.439728][ T5827] bridge_slave_0: entered allmulticast mode [ 87.447738][ T5827] bridge_slave_0: entered promiscuous mode [ 87.501787][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.509287][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.516714][ T5827] bridge_slave_1: entered allmulticast mode [ 87.523659][ T5827] bridge_slave_1: entered promiscuous mode [ 87.530804][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.538003][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.545267][ T5833] bridge_slave_0: entered allmulticast mode [ 87.552236][ T5833] bridge_slave_0: entered promiscuous mode [ 87.594136][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.602616][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.610333][ T5833] bridge_slave_1: entered allmulticast mode [ 87.618071][ T5833] bridge_slave_1: entered promiscuous mode [ 87.625822][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.632950][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.640195][ T5839] bridge_slave_0: entered allmulticast mode [ 87.647366][ T5839] bridge_slave_0: entered promiscuous mode [ 87.655286][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.662427][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.670081][ T5828] bridge_slave_0: entered allmulticast mode [ 87.677248][ T5828] bridge_slave_0: entered promiscuous mode [ 87.710943][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.718985][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.726324][ T5839] bridge_slave_1: entered allmulticast mode [ 87.733324][ T5839] bridge_slave_1: entered promiscuous mode [ 87.740298][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.748164][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.756971][ T5828] bridge_slave_1: entered allmulticast mode [ 87.764723][ T5828] bridge_slave_1: entered promiscuous mode [ 87.774778][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.824602][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.848637][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.896058][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.909454][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.923493][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.936016][ T5827] team0: Port device team_slave_0 added [ 87.956236][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.980567][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.992399][ T5827] team0: Port device team_slave_1 added [ 88.013851][ T5833] team0: Port device team_slave_0 added [ 88.056494][ T5833] team0: Port device team_slave_1 added [ 88.066157][ T5839] team0: Port device team_slave_0 added [ 88.098730][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.105775][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.132691][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.158492][ T5839] team0: Port device team_slave_1 added [ 88.181642][ T5828] team0: Port device team_slave_0 added [ 88.191044][ T5828] team0: Port device team_slave_1 added [ 88.198136][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.205416][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.232017][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.266463][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.273441][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.301029][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.314093][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.321265][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.347273][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.379105][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.386714][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.412707][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.436015][ T5836] Bluetooth: hci2: command tx timeout [ 88.441818][ T5836] Bluetooth: hci1: command tx timeout [ 88.446094][ T5842] Bluetooth: hci0: command tx timeout [ 88.455912][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.462891][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.489180][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.510192][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.517311][ T5842] Bluetooth: hci3: command tx timeout [ 88.522823][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.548793][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.561521][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.568559][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.594559][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.647714][ T5827] hsr_slave_0: entered promiscuous mode [ 88.654108][ T5827] hsr_slave_1: entered promiscuous mode [ 88.747732][ T5833] hsr_slave_0: entered promiscuous mode [ 88.753936][ T5833] hsr_slave_1: entered promiscuous mode [ 88.760895][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.769249][ T5833] Cannot create hsr debugfs directory [ 88.791450][ T5839] hsr_slave_0: entered promiscuous mode [ 88.799471][ T5839] hsr_slave_1: entered promiscuous mode [ 88.805909][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.813485][ T5839] Cannot create hsr debugfs directory [ 88.824848][ T5828] hsr_slave_0: entered promiscuous mode [ 88.831179][ T5828] hsr_slave_1: entered promiscuous mode [ 88.838392][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.846034][ T5828] Cannot create hsr debugfs directory [ 89.309177][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.324711][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.339556][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.359641][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.418262][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.439191][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.451914][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.479181][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.547586][ T5839] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.559520][ T5839] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.586254][ T5839] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.599543][ T5839] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.695855][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.707950][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.718882][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.748940][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.849356][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.880763][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.907771][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.941151][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.959735][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.967066][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.997739][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.004838][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.028479][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.035616][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.044876][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.052058][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.073958][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.124958][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.138869][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.160704][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.167923][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.204956][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.212139][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.253651][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.283104][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.290249][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.350000][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.357241][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.515795][ T5842] Bluetooth: hci0: command tx timeout [ 90.518095][ T5150] Bluetooth: hci2: command tx timeout [ 90.527030][ T5836] Bluetooth: hci1: command tx timeout [ 90.595579][ T5836] Bluetooth: hci3: command tx timeout [ 90.764940][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.786892][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.927825][ T5833] veth0_vlan: entered promiscuous mode [ 90.950644][ T5827] veth0_vlan: entered promiscuous mode [ 90.973299][ T5833] veth1_vlan: entered promiscuous mode [ 91.006592][ T5827] veth1_vlan: entered promiscuous mode [ 91.063506][ T5833] veth0_macvtap: entered promiscuous mode [ 91.076481][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.091687][ T5833] veth1_macvtap: entered promiscuous mode [ 91.135956][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.157370][ T5827] veth0_macvtap: entered promiscuous mode [ 91.171047][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.188242][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.208822][ T5827] veth1_macvtap: entered promiscuous mode [ 91.219816][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.229177][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.239892][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.248914][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.302296][ T5839] veth0_vlan: entered promiscuous mode [ 91.314634][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.347516][ T5839] veth1_vlan: entered promiscuous mode [ 91.362039][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.390788][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.411724][ T5827] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.420842][ T5827] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.429809][ T5827] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.521222][ T5828] veth0_vlan: entered promiscuous mode [ 91.533102][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.540161][ T5839] veth0_macvtap: entered promiscuous mode [ 91.545755][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.566490][ T5839] veth1_macvtap: entered promiscuous mode [ 91.589613][ T5828] veth1_vlan: entered promiscuous mode [ 91.644426][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.662213][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.680810][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.725426][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.754339][ T5839] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.768216][ T5839] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.772665][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.777075][ T5839] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.777128][ T5839] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.781976][ T5828] veth0_macvtap: entered promiscuous mode [ 91.822387][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.834644][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.947752][ T5828] veth1_macvtap: entered promiscuous mode [ 91.962354][ T3688] cfg80211: failed to load regulatory.db [ 91.971756][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.981218][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.066436][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.079984][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.108134][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.133618][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.230762][ T5828] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.239838][ T5828] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.254957][ T5828] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.268199][ T5828] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.386724][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.395202][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.595741][ T5836] Bluetooth: hci0: command tx timeout [ 92.601203][ T5836] Bluetooth: hci1: command tx timeout [ 92.607799][ T5150] Bluetooth: hci2: command tx timeout [ 92.676824][ T5842] Bluetooth: hci3: command tx timeout [ 92.943118][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.967096][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.194127][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.264519][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.545877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.689622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.779667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.788410][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.827547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.836348][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.944789][ T5908] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 93.951368][ T5908] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 93.987541][ T5908] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 94.020299][ T5908] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 94.049276][ T5908] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.065732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.105752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.123268][ T5908] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 94.145469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.155281][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 94.223032][ T5908] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 94.242063][ T5908] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.271234][ T5908] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 94.489073][ T5929] Invalid ELF header magic: != ELF [ 94.963215][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.155904][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 95.184188][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.313987][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.521889][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.809429][ T5945] Zero length message leads to an empty skb [ 95.846674][ T5946] syz.0.14 uses obsolete (PF_INET,SOCK_PACKET) [ 96.037564][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 96.275811][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 96.542505][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 96.564434][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 96.577665][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 96.588516][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 96.615892][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.786690][ T36] bridge_slave_1: left allmulticast mode [ 96.792591][ T36] bridge_slave_1: left promiscuous mode [ 96.818328][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.876739][ T36] bridge_slave_0: left allmulticast mode [ 96.894184][ T36] bridge_slave_0: left promiscuous mode [ 96.900931][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.236045][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 97.679625][ T5975] FAULT_INJECTION: forcing a failure. [ 97.679625][ T5975] name failslab, interval 1, probability 0, space 0, times 1 [ 97.694804][ T5975] CPU: 1 UID: 0 PID: 5975 Comm: syz.3.18 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 97.694840][ T5975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.694855][ T5975] Call Trace: [ 97.694864][ T5975] [ 97.694873][ T5975] dump_stack_lvl+0x16c/0x1f0 [ 97.694909][ T5975] should_fail_ex+0x512/0x640 [ 97.694936][ T5975] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 97.694968][ T5975] should_failslab+0xc2/0x120 [ 97.695000][ T5975] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 97.695027][ T5975] ? tracefs_alloc_inode+0x2c/0x140 [ 97.695059][ T5975] ? __pfx_tracefs_alloc_inode+0x10/0x10 [ 97.695084][ T5975] tracefs_alloc_inode+0x2c/0x140 [ 97.695111][ T5975] ? __pfx_tracefs_alloc_inode+0x10/0x10 [ 97.695140][ T5975] alloc_inode+0x64/0x240 [ 97.695171][ T5975] new_inode+0x22/0x1c0 [ 97.695205][ T5975] tracefs_get_inode+0x19/0x80 [ 97.695233][ T5975] eventfs_get_inode+0x53/0x520 [ 97.695268][ T5975] eventfs_root_lookup+0x23c/0xa50 [ 97.695299][ T5975] ? __pfx_eventfs_root_lookup+0x10/0x10 [ 97.695336][ T5975] ? lockdep_init_map_type+0x5c/0x280 [ 97.695372][ T5975] ? lockdep_init_map_type+0x5c/0x280 [ 97.695417][ T5975] __lookup_slow+0x24e/0x460 [ 97.695454][ T5975] ? __pfx___lookup_slow+0x10/0x10 [ 97.695519][ T5975] ? lookup_fast+0x156/0x610 [ 97.695561][ T5975] walk_component+0x353/0x5b0 [ 97.695601][ T5975] link_path_walk+0x627/0xe20 [ 97.695649][ T5975] path_openat+0x1b0/0x2cb0 [ 97.695673][ T5975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.695707][ T5975] ? __pfx_path_openat+0x10/0x10 [ 97.695734][ T5975] ? __lock_acquire+0xb8a/0x1c90 [ 97.695767][ T5975] do_filp_open+0x20b/0x470 [ 97.695794][ T5975] ? __pfx_do_filp_open+0x10/0x10 [ 97.695847][ T5975] ? alloc_fd+0x471/0x7d0 [ 97.695882][ T5975] do_sys_openat2+0x11b/0x1d0 [ 97.695916][ T5975] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.695965][ T5975] __x64_sys_openat+0x174/0x210 [ 97.695998][ T5975] ? __pfx___x64_sys_openat+0x10/0x10 [ 97.696048][ T5975] do_syscall_64+0xcd/0x490 [ 97.696078][ T5975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.696103][ T5975] RIP: 0033:0x7fd92598e969 [ 97.696132][ T5975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 97.696157][ T5975] RSP: 002b:00007fd926772038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.696182][ T5975] RAX: ffffffffffffffda RBX: 00007fd925bb6080 RCX: 00007fd92598e969 [ 97.696199][ T5975] RDX: 0000000000109041 RSI: 0000200000007380 RDI: ffffffffffffff9c [ 97.696215][ T5975] RBP: 00007fd925a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 97.696230][ T5975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.696243][ T5975] R13: 0000000000000000 R14: 00007fd925bb6080 R15: 00007ffe8cb50b18 [ 97.696278][ T5975] [ 98.018055][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.053835][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.099807][ T36] bond0 (unregistering): Released all slaves [ 98.125971][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 98.356592][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 98.620579][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 98.694382][ T5842] Bluetooth: hci2: command tx timeout [ 98.922591][ T36] hsr_slave_0: left promiscuous mode [ 98.934146][ T36] hsr_slave_1: left promiscuous mode [ 98.940251][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.964168][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.973508][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.004924][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.049474][ T36] veth1_macvtap: left promiscuous mode [ 99.075107][ T36] veth0_macvtap: left promiscuous mode [ 99.081347][ T36] veth1_vlan: left promiscuous mode [ 99.108959][ T36] veth0_vlan: left promiscuous mode [ 99.323370][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.866419][ T36] team0 (unregistering): Port device team_slave_1 removed [ 99.946973][ T36] team0 (unregistering): Port device team_slave_0 removed [ 100.197122][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 100.217785][ T6000] process 'syz.3.20' launched ':,' with NULL argv: empty string added [ 100.434469][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 100.699272][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.754233][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.759108][ T5842] Bluetooth: hci2: command tx timeout [ 100.761483][ T5949] bridge_slave_0: entered allmulticast mode [ 100.803693][ T5949] bridge_slave_0: entered promiscuous mode [ 100.818863][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.827476][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.835877][ T5949] bridge_slave_1: entered allmulticast mode [ 100.855057][ T5949] bridge_slave_1: entered promiscuous mode [ 100.950170][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.989737][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.169732][ T5949] team0: Port device team_slave_0 added [ 101.215007][ T5949] team0: Port device team_slave_1 added [ 101.382174][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.407413][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.442928][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.464053][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.512462][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.565785][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.857630][ T5949] hsr_slave_0: entered promiscuous mode [ 101.873726][ T5949] hsr_slave_1: entered promiscuous mode [ 101.880079][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.909870][ T5949] Cannot create hsr debugfs directory [ 102.802589][ T6044] Invalid ELF header magic: != ELF [ 102.846120][ T5842] Bluetooth: hci2: command tx timeout [ 104.506425][ T5949] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.557315][ T5949] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.647904][ T5949] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.784149][ T5949] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.911818][ T5842] Bluetooth: hci2: command tx timeout [ 105.170654][ T6088] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.210779][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.388198][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.522108][ T5050] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.529322][ T5050] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.565578][ T5050] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.572802][ T5050] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.621274][ T6094] FAULT_INJECTION: forcing a failure. [ 105.621274][ T6094] name failslab, interval 1, probability 0, space 0, times 0 [ 105.692747][ T6094] CPU: 1 UID: 0 PID: 6094 Comm: syz.0.31 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 105.692784][ T6094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 105.692799][ T6094] Call Trace: [ 105.692808][ T6094] [ 105.692818][ T6094] dump_stack_lvl+0x16c/0x1f0 [ 105.692849][ T6094] should_fail_ex+0x512/0x640 [ 105.692875][ T6094] ? __kmalloc_noprof+0xbf/0x510 [ 105.692908][ T6094] ? slhc_init+0x1ad/0x570 [ 105.692943][ T6094] should_failslab+0xc2/0x120 [ 105.692975][ T6094] __kmalloc_noprof+0xd2/0x510 [ 105.693012][ T6094] slhc_init+0x1ad/0x570 [ 105.693046][ T6094] ? kasan_save_track+0x14/0x30 [ 105.693078][ T6094] slip_open+0x8ee/0x1150 [ 105.693117][ T6094] ? __pfx_n_tty_close+0x10/0x10 [ 105.693161][ T6094] ? __pfx_slip_open+0x10/0x10 [ 105.693198][ T6094] ? down_write+0x14d/0x200 [ 105.693231][ T6094] ? __pfx_slip_open+0x10/0x10 [ 105.693268][ T6094] tty_ldisc_open+0x9f/0x120 [ 105.693309][ T6094] tty_set_ldisc+0x32b/0x780 [ 105.693346][ T6094] tty_ioctl+0xc42/0x1610 [ 105.693384][ T6094] ? __pfx_tty_ioctl+0x10/0x10 [ 105.693426][ T6094] ? __sys_sendmsg+0x18c/0x220 [ 105.693463][ T6094] ? hook_file_ioctl_common+0x145/0x410 [ 105.693504][ T6094] ? find_held_lock+0x2b/0x80 [ 105.693546][ T6094] ? __pfx_tty_ioctl+0x10/0x10 [ 105.693574][ T6094] __x64_sys_ioctl+0x18b/0x210 [ 105.693613][ T6094] do_syscall_64+0xcd/0x490 [ 105.693642][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.693668][ T6094] RIP: 0033:0x7fa9c778e969 [ 105.693688][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.693712][ T6094] RSP: 002b:00007fa9c866a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 105.693735][ T6094] RAX: ffffffffffffffda RBX: 00007fa9c79b5fa0 RCX: 00007fa9c778e969 [ 105.693750][ T6094] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000001 [ 105.693763][ T6094] RBP: 00007fa9c7810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 105.693776][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.693788][ T6094] R13: 0000000000000000 R14: 00007fa9c79b5fa0 R15: 00007ffe347cfeb8 [ 105.693821][ T6094] [ 106.235954][ T5949] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 106.246485][ T5949] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 106.896652][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.958181][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 107.046622][ T5949] veth0_vlan: entered promiscuous mode [ 107.105127][ T5949] veth1_vlan: entered promiscuous mode [ 107.188261][ T5949] veth0_macvtap: entered promiscuous mode [ 107.217314][ T5949] veth1_macvtap: entered promiscuous mode [ 107.361494][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.436264][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.452821][ T6121] can: request_module (can-proto-4) failed. [ 107.479348][ T5949] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.502477][ T5949] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.520009][ T5949] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.551621][ T5949] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.833032][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.854829][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.031051][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.038919][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.552448][ T6145] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 112.266378][ T6212] capability: warning: `syz.1.46' uses 32-bit capabilities (legacy support in use) [ 112.368484][ T6212] FAULT_INJECTION: forcing a failure. [ 112.368484][ T6212] name failslab, interval 1, probability 0, space 0, times 0 [ 112.383796][ T6212] CPU: 1 UID: 0 PID: 6212 Comm: syz.1.46 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 112.383834][ T6212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 112.383849][ T6212] Call Trace: [ 112.383858][ T6212] [ 112.383868][ T6212] dump_stack_lvl+0x16c/0x1f0 [ 112.383902][ T6212] should_fail_ex+0x512/0x640 [ 112.383929][ T6212] ? fs_reclaim_acquire+0xae/0x150 [ 112.383972][ T6212] should_failslab+0xc2/0x120 [ 112.384004][ T6212] __kmalloc_cache_noprof+0x6a/0x3e0 [ 112.384032][ T6212] ? tomoyo_find_next_domain+0x145/0x20b0 [ 112.384064][ T6212] ? kasan_save_track+0x14/0x30 [ 112.384095][ T6212] tomoyo_find_next_domain+0x145/0x20b0 [ 112.384142][ T6212] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 112.384188][ T6212] tomoyo_bprm_check_security+0x12e/0x1d0 [ 112.384217][ T6212] ? tomoyo_bprm_check_security+0x120/0x1d0 [ 112.384266][ T6212] security_bprm_check+0x1b9/0x1e0 [ 112.384299][ T6212] bprm_execve+0x810/0x1650 [ 112.384348][ T6212] ? __pfx_bprm_execve+0x10/0x10 [ 112.384385][ T6212] ? copy_string_kernel+0x444/0x510 [ 112.384432][ T6212] do_execveat_common.isra.0+0x4a5/0x610 [ 112.384473][ T6212] __x64_sys_execve+0x8e/0xb0 [ 112.384501][ T6212] do_syscall_64+0xcd/0x490 [ 112.384531][ T6212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.384557][ T6212] RIP: 0033:0x7f30b3f8e969 [ 112.384579][ T6212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.384603][ T6212] RSP: 002b:00007f30b4d79038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 112.384627][ T6212] RAX: ffffffffffffffda RBX: 00007f30b41b6080 RCX: 00007f30b3f8e969 [ 112.384645][ T6212] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 112.384660][ T6212] RBP: 00007f30b4010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 112.384675][ T6212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.384690][ T6212] R13: 0000000000000000 R14: 00007f30b41b6080 R15: 00007fffed544e88 [ 112.384726][ T6212] [ 112.958439][ T6223] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 116.694772][ T6239] mmap: syz.1.51 (6239) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 117.542921][ T6286] netlink: 186 bytes leftover after parsing attributes in process `syz.0.54'. [ 119.733301][ T6315] netlink: 186 bytes leftover after parsing attributes in process `syz.0.59'. [ 120.383719][ T6324] bridge0: port 3(team0) entered blocking state [ 120.390506][ T6324] bridge0: port 3(team0) entered disabled state [ 120.398343][ T6324] team0: entered allmulticast mode [ 120.443515][ T6324] team_slave_0: entered allmulticast mode [ 120.449315][ T6324] team_slave_1: entered allmulticast mode [ 120.500545][ T6324] team0: entered promiscuous mode [ 120.523476][ T6324] team_slave_0: entered promiscuous mode [ 120.543533][ T6324] team_slave_1: entered promiscuous mode [ 120.627223][ T6324] bridge0: port 3(team0) entered blocking state [ 120.633864][ T6324] bridge0: port 3(team0) entered forwarding state [ 121.073306][ T6334] tc_dump_action: action bad kind [ 123.176912][ T6341] kexec: Could not allocate control_code_buffer [ 123.556537][ T6354] sysfs_service_op_show: Client not running :-5: [ 123.673346][ T6360] netlink: zone id is out of range [ 123.699033][ T6360] netlink: zone id is out of range [ 123.724501][ T6364] program syz.3.69 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 123.728870][ T6360] netlink: zone id is out of range [ 123.778566][ T6360] netlink: zone id is out of range [ 123.824128][ T6360] netlink: zone id is out of range [ 123.862000][ T6360] netlink: zone id is out of range [ 123.892502][ T6360] netlink: zone id is out of range [ 123.918801][ T6360] netlink: zone id is out of range [ 123.965246][ T6360] netlink: zone id is out of range [ 124.027237][ T6360] netlink: zone id is out of range [ 126.315764][ T6391] netlink: 'syz.0.74': attribute type 1 has an invalid length. [ 129.105315][ T6403] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 129.758465][ T6422] program syz.2.80 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.092970][ T6426] [U]  [ 131.095926][ T6426] [U] [ 131.098602][ T6426] [U] [ 131.101276][ T6426] [U] [ 131.118354][ T6426] [U] [ 131.121127][ T6426] [U] [ 131.123852][ T6426] [U] [ 131.126574][ T6426] [U] [ 131.201823][ T6426] [U] [ 131.204575][ T6426] [U] [ 131.207289][ T6426] [U] [ 131.209996][ T6426] [U] [ 131.250114][ T6426] [U] [ 131.252820][ T6426] [U] [ 131.255498][ T6426] [U] [ 131.258292][ T6426] [U] [ 131.268248][ T6426] [U] [ 131.270952][ T6426] [U] [ 131.273627][ T6426] [U] [ 131.276301][ T6426] [U] [ 131.296889][ T6426] [U] [ 131.299689][ T6426] [U] [ 131.302365][ T6426] [U] [ 131.305038][ T6426] [U] [ 131.378614][ T6426] [U] [ 131.381372][ T6426] [U] [ 131.384094][ T6426] [U] [ 131.386810][ T6426] [U] [ 131.503196][ T6426] [U] [ 131.505932][ T6426] [U] [ 131.508613][ T6426] [U] [ 131.511287][ T6426] [U] [ 131.718159][ T6426] [U] [ 131.720926][ T6426] [U] [ 131.723737][ T6426] [U] [ 131.726459][ T6426] [U] [ 131.863061][ T6430] [U] [ 132.084462][ T6446] FAULT_INJECTION: forcing a failure. [ 132.084462][ T6446] name failslab, interval 1, probability 0, space 0, times 0 [ 132.134966][ T6446] CPU: 1 UID: 0 PID: 6446 Comm: syz.0.86 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 132.135005][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.135020][ T6446] Call Trace: [ 132.135029][ T6446] [ 132.135040][ T6446] dump_stack_lvl+0x16c/0x1f0 [ 132.135073][ T6446] should_fail_ex+0x512/0x640 [ 132.135102][ T6446] ? __kvmalloc_node_noprof+0x122/0x620 [ 132.135133][ T6446] should_failslab+0xc2/0x120 [ 132.135164][ T6446] __kvmalloc_node_noprof+0x135/0x620 [ 132.135195][ T6446] ? fib4_semantics_init+0x25/0x100 [ 132.135237][ T6446] ? fib4_semantics_init+0x25/0x100 [ 132.135264][ T6446] ? fib4_rules_init+0x151/0x1c0 [ 132.135291][ T6446] fib4_semantics_init+0x25/0x100 [ 132.135321][ T6446] fib_net_init+0x1fc/0x3f0 [ 132.135354][ T6446] ? __pfx___register_sysctl_table+0x10/0x10 [ 132.135386][ T6446] ? __pfx_fib_net_init+0x10/0x10 [ 132.135420][ T6446] ? lockdep_init_map_type+0x5c/0x280 [ 132.135451][ T6446] ? do_init_timer+0xc9/0x110 [ 132.135491][ T6446] ? devinet_init_net+0x5c2/0x910 [ 132.135533][ T6446] ? __pfx_fib_net_init+0x10/0x10 [ 132.135566][ T6446] ops_init+0x1df/0x5f0 [ 132.135607][ T6446] setup_net+0x21e/0x850 [ 132.135646][ T6446] ? __pfx_setup_net+0x10/0x10 [ 132.135680][ T6446] ? lockdep_init_map_type+0x5c/0x280 [ 132.135709][ T6446] ? __pfx_down_read_killable+0x10/0x10 [ 132.135742][ T6446] ? debug_mutex_init+0x37/0x70 [ 132.135781][ T6446] copy_net_ns+0x2a6/0x5f0 [ 132.135810][ T6446] create_new_namespaces+0x3ea/0xa90 [ 132.135857][ T6446] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 132.135899][ T6446] ksys_unshare+0x45b/0xa40 [ 132.135926][ T6446] ? native_tss_update_io_bitmap+0x3ca/0x720 [ 132.135957][ T6446] ? __pfx_ksys_unshare+0x10/0x10 [ 132.135987][ T6446] ? xfd_validate_state+0x61/0x180 [ 132.136025][ T6446] __x64_sys_unshare+0x31/0x40 [ 132.136055][ T6446] do_syscall_64+0xcd/0x490 [ 132.136083][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.136108][ T6446] RIP: 0033:0x7fa9c778e969 [ 132.136130][ T6446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.136153][ T6446] RSP: 002b:00007fa9c866a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 132.136178][ T6446] RAX: ffffffffffffffda RBX: 00007fa9c79b5fa0 RCX: 00007fa9c778e969 [ 132.136195][ T6446] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 132.136210][ T6446] RBP: 00007fa9c7810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 132.136225][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.136247][ T6446] R13: 0000000000000000 R14: 00007fa9c79b5fa0 R15: 00007ffe347cfeb8 [ 132.136282][ T6446] [ 132.904022][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.917158][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.337866][ T6448] zswap: compressor not available [ 133.658326][ T6470] ima: policy update failed [ 133.671183][ T30] audit: type=1802 audit(4294967336.758:2): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.91" res=0 errno=0                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                              syzkaller syzkaller login: [ 171.470410][ T7002] netlink: 338 bytes leftover after parsing attributes in process `syz.0.197'. [ 171.742254][ T7005] FAULT_INJECTION: forcing a failure. [ 171.742254][ T7005] name failslab, interval 1, probability 0, space 0, times 0 [ 171.876670][ T7005] CPU: 0 UID: 0 PID: 7005 Comm: syz.3.198 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 171.876707][ T7005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.876722][ T7005] Call Trace: [ 171.876730][ T7005] [ 171.876740][ T7005] dump_stack_lvl+0x16c/0x1f0 [ 171.876771][ T7005] should_fail_ex+0x512/0x640 [ 171.876800][ T7005] ? fs_reclaim_acquire+0xae/0x150 [ 171.876840][ T7005] should_failslab+0xc2/0x120 [ 171.876872][ T7005] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 171.876903][ T7005] ? security_inode_alloc+0x3b/0x2b0 [ 171.876941][ T7005] security_inode_alloc+0x3b/0x2b0 [ 171.876974][ T7005] inode_init_always_gfp+0xce4/0x1030 [ 171.877006][ T7005] alloc_inode+0x86/0x240 [ 171.877037][ T7005] new_inode+0x22/0x1c0 [ 171.877080][ T7005] __rpc_create_common+0x57/0x2f0 [ 171.877112][ T7005] rpc_populate.constprop.0+0x20a/0x5d0 [ 171.877149][ T7005] rpc_fill_super+0x485/0x840 [ 171.877174][ T7005] ? sget_fc+0x808/0xc20 [ 171.877204][ T7005] ? __pfx_rpc_fill_super+0x10/0x10 [ 171.877231][ T7005] get_tree_keyed+0x10b/0x1d0 [ 171.877258][ T7005] vfs_get_tree+0x8e/0x340 [ 171.877293][ T7005] vfs_cmd_create+0xd7/0x2a0 [ 171.877323][ T7005] __do_sys_fsconfig+0x7b8/0xbe0 [ 171.877357][ T7005] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 171.877406][ T7005] do_syscall_64+0xcd/0x490 [ 171.877434][ T7005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.877459][ T7005] RIP: 0033:0x7fd92598e969 [ 171.877479][ T7005] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.877502][ T7005] RSP: 002b:00007fd926772038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 171.877526][ T7005] RAX: ffffffffffffffda RBX: 00007fd925bb6080 RCX: 00007fd92598e969 [ 171.877542][ T7005] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 171.877556][ T7005] RBP: 00007fd925a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 171.877573][ T7005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.877585][ T7005] R13: 0000000000000000 R14: 00007fd925bb6080 R15: 00007ffe8cb50b18 [ 171.877618][ T7005] [ 172.218932][ T7005] net/sunrpc/rpc_pipe.c: __rpc_create_common failed to allocate inode for dentry info [ 172.258729][ T7005] net/sunrpc/rpc_pipe.c: rpc_populate failed to populate directory clntXX [ 175.321624][ T7043] random: crng reseeded on system resumption [ 175.940052][ T7047] zswap: compressor not available                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                          syzkaller syzkaller login: [ 260.359923][ T8219] random: crng reseeded on system resumption [ 261.447516][ T8227] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 263.238125][ T8257] netlink: 'syz.0.437': attribute type 11 has an invalid length. [ 263.275949][ T8257] netlink: 'syz.0.437': attribute type 11 has an invalid length. [ 263.283778][ T8257] netlink: 'syz.0.437': attribute type 11 has an invalid length. [ 264.720467][ T8276] netlink: 342 bytes leftover after parsing attributes in process `syz.2.441'. [ 266.721645][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.449'. [ 266.751534][ T8308] netlink: 'syz.2.449': attribute type 1 has an invalid length. [ 266.807054][ T8308] netlink: 'syz.2.449': attribute type 6 has an invalid length. [ 267.564130][ T8309] ima: policy update failed [ 267.582420][ T30] audit: type=1802 audit(4294967433.640:5): pid=8309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.450" res=0 errno=0 [ 267.618343][ T8322] FAULT_INJECTION: forcing a failure. [ 267.618343][ T8322] name failslab, interval 1, probability 0, space 0, times 0 [ 267.664958][ T8322] CPU: 1 UID: 0 PID: 8322 Comm: syz.0.453 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 267.664999][ T8322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 267.665013][ T8322] Call Trace: [ 267.665022][ T8322] [ 267.665032][ T8322] dump_stack_lvl+0x16c/0x1f0 [ 267.665062][ T8322] should_fail_ex+0x512/0x640 [ 267.665087][ T8322] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 267.665125][ T8322] should_failslab+0xc2/0x120 [ 267.665158][ T8322] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 267.665192][ T8322] ? kstrdup_const+0x63/0x80 [ 267.665226][ T8322] kstrdup+0x53/0x100 [ 267.665257][ T8322] kstrdup_const+0x63/0x80 [ 267.665286][ T8322] __kernfs_new_node+0x9b/0x8a0 [ 267.665316][ T8322] ? __pfx___kernfs_new_node+0x10/0x10 [ 267.665352][ T8322] ? find_held_lock+0x2b/0x80 [ 267.665389][ T8322] ? kernfs_root+0xee/0x2a0 [ 267.665423][ T8322] kernfs_new_node+0x13c/0x1e0 [ 267.665453][ T8322] ? do_raw_spin_lock+0x12c/0x2b0 [ 267.665489][ T8322] __kernfs_create_file+0x53/0x350 [ 267.665528][ T8322] cgroup_addrm_files+0x546/0xc20 [ 267.665575][ T8322] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 267.665619][ T8322] ? css_next_child+0xcf/0x2d0 [ 267.665649][ T8322] ? css_next_descendant_pre+0x58/0x1a0 [ 267.665683][ T8322] css_populate_dir+0x469/0x580 [ 267.665726][ T8322] cgroup_mkdir+0x5cb/0x11f0 [ 267.665764][ T8322] ? __pfx_cgroup_mkdir+0x10/0x10 [ 267.665799][ T8322] kernfs_iop_mkdir+0x10b/0x190 [ 267.665830][ T8322] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 267.665862][ T8322] vfs_mkdir+0x590/0x8c0 [ 267.665900][ T8322] do_mkdirat+0x304/0x3e0 [ 267.665928][ T8322] ? __pfx_do_mkdirat+0x10/0x10 [ 267.665955][ T8322] ? getname_flags.part.0+0x1c5/0x550 [ 267.666006][ T8322] __x64_sys_mkdir+0xef/0x140 [ 267.666035][ T8322] do_syscall_64+0xcd/0x490 [ 267.666064][ T8322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.666090][ T8322] RIP: 0033:0x7fa9c778e969 [ 267.666112][ T8322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.666135][ T8322] RSP: 002b:00007fa9c866a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 267.666159][ T8322] RAX: ffffffffffffffda RBX: 00007fa9c79b5fa0 RCX: 00007fa9c778e969 [ 267.666176][ T8322] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000200000000480 [ 267.666192][ T8322] RBP: 00007fa9c7810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 267.666207][ T8322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.666221][ T8322] R13: 0000000000000000 R14: 00007fa9c79b5fa0 R15: 00007ffe347cfeb8 [ 267.666254][ T8322] [ 267.922218][ C1] vkms_vblank_simulate: vblank timer overrun [ 267.966088][ T8322] cgroup: cgroup_addrm_files: failed to add cpu.pressure, err=-12 [ 268.086182][ T30] audit: type=1800 audit(4294967434.140:6): pid=8325 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.452" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 269.421179][ T30] audit: type=1800 audit(4294967435.490:7): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.455" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 271.247211][ T8367] FAULT_INJECTION: forcing a failure. [ 271.247211][ T8367] name failslab, interval 1, probability 0, space 0, times 0 [ 271.305051][ T8367] CPU: 1 UID: 0 PID: 8367 Comm: syz.1.461 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 271.305090][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.305105][ T8367] Call Trace: [ 271.305118][ T8367] [ 271.305128][ T8367] dump_stack_lvl+0x16c/0x1f0 [ 271.305160][ T8367] should_fail_ex+0x512/0x640 [ 271.305187][ T8367] ? fs_reclaim_acquire+0xae/0x150 [ 271.305227][ T8367] should_failslab+0xc2/0x120 [ 271.305260][ T8367] __kmalloc_cache_noprof+0x6a/0x3e0 [ 271.305287][ T8367] ? tomoyo_find_next_domain+0xfd/0x20b0 [ 271.305325][ T8367] tomoyo_find_next_domain+0xfd/0x20b0 [ 271.305372][ T8367] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 271.305420][ T8367] tomoyo_bprm_check_security+0x12e/0x1d0 [ 271.305448][ T8367] ? tomoyo_bprm_check_security+0x120/0x1d0 [ 271.305480][ T8367] security_bprm_check+0x1b9/0x1e0 [ 271.305511][ T8367] bprm_execve+0x810/0x1650 [ 271.305558][ T8367] ? __pfx_bprm_execve+0x10/0x10 [ 271.305595][ T8367] ? copy_string_kernel+0x444/0x510 [ 271.305642][ T8367] do_execveat_common.isra.0+0x4a5/0x610 [ 271.305675][ T8367] __x64_sys_execve+0x8e/0xb0 [ 271.305707][ T8367] do_syscall_64+0xcd/0x490 [ 271.305738][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.305764][ T8367] RIP: 0033:0x7f30b3f8e969 [ 271.305785][ T8367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.305809][ T8367] RSP: 002b:00007f30b4d79038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 271.305832][ T8367] RAX: ffffffffffffffda RBX: 00007f30b41b6080 RCX: 00007f30b3f8e969 [ 271.305846][ T8367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 271.305859][ T8367] RBP: 00007f30b4010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 271.305872][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.305883][ T8367] R13: 0000000000000000 R14: 00007f30b41b6080 R15: 00007fffed544e88 [ 271.305915][ T8367] [ 271.830853][ T5842] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 271.838376][ T5842] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 272.710896][ T8376] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 273.908836][ T8390] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888078006000 pfn:0x78000 [ 273.941692][ T8390] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 273.989804][ T8390] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 274.008127][ T8390] raw: ffff888078006000 0000000000000000 00000001ffffffff 0000000000000000 [ 274.106255][ T8390] page dumped because: unmovable page [ 274.172319][ T8390] page_owner tracks the page as allocated [ 274.229442][ T8390] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x92cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC), pid 5833, tgid 5833 (syz-executor), ts 89263802899, free_ts 89205612455 [ 274.293518][ T8390] post_alloc_hook+0x1c0/0x230 [ 274.344940][ T8390] get_page_from_freelist+0x135c/0x3950 [ 274.489960][ T8390] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 274.556012][ T8390] alloc_pages_mpol+0x1fb/0x550 [ 274.560977][ T8390] alloc_pages_noprof+0x131/0x390 [ 274.643659][ T8390] stack_depot_save_flags+0x933/0xa40 [ 274.652770][ T8390] kasan_save_stack+0x42/0x60 [ 274.693807][ T8390] kasan_save_track+0x14/0x30 [ 274.710720][ T8390] __kasan_slab_alloc+0x89/0x90 [ 274.734841][ T8390] kmem_cache_alloc_lru_noprof+0x1d0/0x3b0 [ 274.761946][ T8390] __d_alloc+0x31/0xaa0 [ 274.774204][ T8390] d_alloc+0x4a/0x1e0 [ 274.819862][ T8390] d_alloc_parallel+0xe3/0x12e0 [ 274.824803][ T8390] __lookup_slow+0x193/0x460 [ 274.849949][ T8390] lookup_noperm+0xe1/0x110 [ 274.854798][ T8390] start_creating.part.0+0x15a/0x3e0 [ 274.862834][ T8390] page last free pid 5839 tgid 5839 stack trace: [ 274.872781][ T8390] __free_frozen_pages+0x7f8/0x1180 [ 274.878570][ T8390] qlist_free_all+0x4d/0x120 [ 274.884461][ T8390] kasan_quarantine_reduce+0x195/0x1e0 [ 274.893500][ T8390] __kasan_slab_alloc+0x69/0x90 [ 274.936184][ T8390] __kmalloc_cache_noprof+0x1f1/0x3e0 [ 274.956303][ T8390] kset_create_and_add+0x4d/0x190 [ 274.961418][ T8390] netdev_register_kobject+0x1c8/0x3a0 [ 275.055910][ T8390] register_netdevice+0x13dc/0x2270 [ 275.061202][ T8390] macvlan_common_newlink+0x10e7/0x1a20 [ 275.066925][ T8390] macvtap_newlink+0x17a/0x240 [ 275.086024][ T8390] rtnl_newlink+0xc42/0x2000 [ 275.100916][ T8390] rtnetlink_rcv_msg+0x95e/0xe90 [ 275.127660][ T8390] netlink_rcv_skb+0x16d/0x440 [ 275.160375][ T8412] Invalid ELF header magic: != ELF [ 275.182473][ T8390] netlink_unicast+0x53a/0x7f0 [ 275.193854][ T8390] netlink_sendmsg+0x8d1/0xdd0 [ 275.205487][ T8390] __sys_sendto+0x4a3/0x520 [ 275.962717][ T8429] Invalid ELF header magic: != ELF [ 276.946910][ T8436] bcachefs: bch2_ioctl_fsck_offline() ret EFAULT [ 277.212191][ T8440] random: crng reseeded on system resumption [ 278.117739][ T8442] Unrecognized hibernate image header format! [ 278.117770][ T8442] PM: hibernation: Image mismatch: architecture specific data [ 278.433195][ T8455] syz.1.479: vmalloc error: size 1818624, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 278.433546][ T8455] CPU: 0 UID: 0 PID: 8455 Comm: syz.1.479 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 278.433580][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 278.433594][ T8455] Call Trace: [ 278.433603][ T8455] [ 278.433613][ T8455] dump_stack_lvl+0x16c/0x1f0 [ 278.433646][ T8455] warn_alloc+0x248/0x3a0 [ 278.433678][ T8455] ? __pfx_warn_alloc+0x10/0x10 [ 278.433711][ T8455] ? alloc_pages_mpol+0x25a/0x550 [ 278.433746][ T8455] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 278.433794][ T8455] __vmalloc_node_range_noprof+0x12b6/0x1520 [ 278.433850][ T8455] ? __snd_dma_alloc_pages+0x53/0x90 [ 278.433888][ T8455] ? find_held_lock+0x2b/0x80 [ 278.433925][ T8455] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 278.433971][ T8455] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 278.433998][ T8455] ? __snd_dma_alloc_pages+0x53/0x90 [ 278.434025][ T8455] __vmalloc_node_noprof+0xad/0xf0 [ 278.434057][ T8455] ? __snd_dma_alloc_pages+0x53/0x90 [ 278.434084][ T8455] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 278.434117][ T8455] __snd_dma_alloc_pages+0x53/0x90 [ 278.434149][ T8455] snd_dma_alloc_dir_pages+0x151/0x240 [ 278.434183][ T8455] do_alloc_pages+0x115/0x280 [ 278.434218][ T8455] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 278.434256][ T8455] snd_pcm_hw_params+0x15e1/0x1b40 [ 278.434293][ T8455] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 278.434325][ T8455] ? snd_pcm_hw_param_near.constprop.0+0x734/0x8e0 [ 278.434358][ T8455] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 278.434386][ T8455] ? __asan_memset+0x23/0x50 [ 278.434414][ T8455] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 278.434455][ T8455] snd_pcm_oss_change_params_locked+0x1432/0x3a30 [ 278.434502][ T8455] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 278.434533][ T8455] ? snd_pcm_oss_sync+0x30c/0x840 [ 278.434587][ T8455] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 278.434618][ T8455] snd_pcm_oss_sync+0x32e/0x840 [ 278.434651][ T8455] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 278.434678][ T8455] snd_pcm_oss_release+0x28b/0x310 [ 278.434708][ T8455] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 278.434734][ T8455] __fput+0x402/0xb70 [ 278.434774][ T8455] task_work_run+0x14d/0x240 [ 278.434809][ T8455] ? __pfx_task_work_run+0x10/0x10 [ 278.434843][ T8455] ? __pfx___do_sys_close_range+0x10/0x10 [ 278.434879][ T8455] exit_to_user_mode_loop+0xeb/0x110 [ 278.434914][ T8455] do_syscall_64+0x3f6/0x490 [ 278.434943][ T8455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.434969][ T8455] RIP: 0033:0x7f30b3f8e969 [ 278.434990][ T8455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.435014][ T8455] RSP: 002b:00007f30b4d9a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 278.435037][ T8455] RAX: 0000000000000000 RBX: 00007f30b41b5fa0 RCX: 00007f30b3f8e969 [ 278.435054][ T8455] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 278.435069][ T8455] RBP: 00007f30b4010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 278.435084][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.435097][ T8455] R13: 0000000000000000 R14: 00007f30b41b5fa0 R15: 00007fffed544e88 [ 278.435128][ T8455] [ 278.435137][ T8455] Mem-Info: [ 278.435155][ T8455] active_anon:19162 inactive_anon:1 isolated_anon:0 [ 278.435155][ T8455] active_file:19980 inactive_file:45047 isolated_file:0 [ 278.435155][ T8455] unevictable:768 dirty:525 writeback:23 [ 278.435155][ T8455] slab_reclaimable:10626 slab_unreclaimable:95596 [ 278.435155][ T8455] mapped:28799 shmem:4101 pagetables:930 [ 278.435155][ T8455] sec_pagetables:0 bounce:0 [ 278.435155][ T8455] kernel_misc_reclaimable:0 [ 278.435155][ T8455] free:1295905 free_pcp:12267 free_cma:0 [ 278.435219][ T8455] Node 0 active_anon:76648kB inactive_anon:4kB active_file:79920kB inactive_file:179976kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115196kB dirty:2100kB writeback:92kB shmem:14868kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10924kB pagetables:3720kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 278.891371][ T8455] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 279.011760][ T8455] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 279.171874][ T8455] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 279.255432][ T8455] Node 0 DMA32 free:1278300kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0KB active_anon:90312kB inactive_anon:8kB active_file:79920kB inactive_file:178408kB unevictable:1536kB writepending:2164kB present:3129332kB managed:2541596kB mlocked:0kB bounce:0kB free_pcp:6540kB local_pcp:2408kB free_cma:0kB [ 279.304921][ T8455] lowmem_reserve[]: 0 0 1 1 1 [ 279.320012][ T8455] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1568kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 279.463357][ T8455] lowmem_reserve[]: 0 0 0 0 0 [ 279.471506][ T8455] Node 1 Normal free:3877508kB boost:0kB min:55788kB low:69732kB high:83676kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:42344kB local_pcp:25116kB free_cma:0kB [ 279.562824][ T8455] lowmem_reserve[]: 0 0 0 0 0 [ 279.575934][ T8455] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 279.622248][ T8455] Node 0 DMA32: 6*4kB (E) 10*8kB (ME) 508*16kB (UME) 1200*32kB (UME) 686*64kB (UME) 290*128kB (UM) 107*256kB (UME) 52*512kB (UME) 13*1024kB (ME) 2*2048kB (ME) 260*4096kB (UM) = 1264040kB [ 279.666935][ T8455] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 279.769123][ T8455] Node 1 Normal: 25*4kB (UME) 14*8kB (UME) 17*16kB (UE) 11*32kB (U) 67*64kB (UE) 33*128kB (UME) 12*256kB (UME) 7*512kB (UE) 9*1024kB (UE) 9*2048kB (UME) 936*4096kB (UM) = 3877508kB [ 279.795042][ T8455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.825495][ T8455] Node 0 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 279.858051][ T8455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 279.895197][ T8455] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 279.908302][ T8455] 66407 total pagecache pages [ 279.913031][ T8455] 4 pages in swap cache [ 279.924509][ T8455] Free swap = 124996kB [ 279.929027][ T8455] Total swap = 124996kB [ 279.934874][ T8455] 2097051 pages RAM [ 279.944004][ T8455] 0 pages HighMem/MovableOnly [ 279.953730][ T8455] 429610 pages reserved [ 279.961775][ T8455] 0 pages cma reserved [ 280.197613][ T8478] [ 280.200001][ T8478] ====================================================== [ 280.207031][ T8478] WARNING: possible circular locking dependency detected [ 280.214055][ T8478] 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 Not tainted [ 280.220827][ T8478] ------------------------------------------------------ [ 280.227842][ T8478] syz.3.483/8478 is trying to acquire lock: [ 280.233729][ T8478] ffff888142bc7b40 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x103/0x400 [ 280.243151][ T8478] [ 280.243151][ T8478] but task is already holding lock: [ 280.250517][ T8478] ffff888142bc7608 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 280.261768][ T8478] [ 280.261768][ T8478] which lock already depends on the new lock. [ 280.261768][ T8478] [ 280.272161][ T8478] [ 280.272161][ T8478] the existing dependency chain (in reverse order) is: [ 280.281164][ T8478] [ 280.281164][ T8478] -> #3 (&q->q_usage_counter(io)#55){++++}-{0:0}: [ 280.289775][ T8478] blk_alloc_queue+0x619/0x760 [ 280.295068][ T8478] blk_mq_alloc_queue+0x175/0x290 [ 280.300616][ T8478] __blk_mq_alloc_disk+0x29/0x120 [ 280.306161][ T8478] nbd_dev_add+0x4a0/0xbc0 [ 280.311098][ T8478] nbd_init+0x181/0x320 [ 280.315779][ T8478] do_one_initcall+0x120/0x6e0 [ 280.321061][ T8478] kernel_init_freeable+0x5c2/0x900 [ 280.326796][ T8478] kernel_init+0x1c/0x2b0 [ 280.331661][ T8478] ret_from_fork+0x5d7/0x6f0 [ 280.336783][ T8478] ret_from_fork_asm+0x1a/0x30 [ 280.342078][ T8478] [ 280.342078][ T8478] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 280.349303][ T8478] fs_reclaim_acquire+0x102/0x150 [ 280.354881][ T8478] prepare_alloc_pages+0x162/0x610 [ 280.360516][ T8478] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 280.366939][ T8478] __alloc_pages_noprof+0xb/0x1b0 [ 280.372482][ T8478] pcpu_populate_chunk+0x110/0xb00 [ 280.378113][ T8478] pcpu_alloc_noprof+0x86a/0x1470 [ 280.383654][ T8478] xt_percpu_counter_alloc+0x13e/0x1b0 [ 280.389631][ T8478] find_check_entry.constprop.0+0xbc/0x9b0 [ 280.395965][ T8478] translate_table+0xc98/0x1720 [ 280.401343][ T8478] ipt_register_table+0x102/0x430 [ 280.406889][ T8478] iptable_nat_table_init+0x4b/0x250 [ 280.412700][ T8478] xt_find_table_lock+0x2e4/0x520 [ 280.418240][ T8478] xt_request_find_table_lock+0x28/0xf0 [ 280.424309][ T8478] get_info+0x190/0x610 [ 280.428999][ T8478] do_ipt_get_ctl+0x169/0xa10 [ 280.434192][ T8478] nf_getsockopt+0x79/0xe0 [ 280.439134][ T8478] ip_getsockopt+0x18c/0x1e0 [ 280.444242][ T8478] tcp_getsockopt+0xa1/0x100 [ 280.449353][ T8478] do_sock_getsockopt+0x3fc/0x800 [ 280.454897][ T8478] __sys_getsockopt+0x123/0x1b0 [ 280.460269][ T8478] __x64_sys_getsockopt+0xbd/0x160 [ 280.465907][ T8478] do_syscall_64+0xcd/0x490 [ 280.470930][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.477337][ T8478] [ 280.477337][ T8478] -> #1 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 280.485068][ T8478] __mutex_lock+0x199/0xb90 [ 280.490089][ T8478] pcpu_alloc_noprof+0xb4a/0x1470 [ 280.495629][ T8478] sbitmap_init_node+0x2fd/0x770 [ 280.501092][ T8478] sbitmap_queue_init_node+0x41/0x560 [ 280.506988][ T8478] blk_mq_init_tags+0x12d/0x2b0 [ 280.512359][ T8478] blk_mq_alloc_map_and_rqs+0x237/0xf60 [ 280.518424][ T8478] blk_mq_init_sched+0x30c/0x610 [ 280.523882][ T8478] elevator_switch+0x1e1/0x7f0 [ 280.529168][ T8478] elevator_change+0x2ac/0x400 [ 280.534455][ T8478] elevator_set_default+0x292/0x320 [ 280.540186][ T8478] blk_register_queue+0x393/0x4f0 [ 280.545728][ T8478] __add_disk+0x74a/0xf00 [ 280.550571][ T8478] add_disk_fwnode+0x13f/0x5d0 [ 280.555854][ T8478] nbd_dev_add+0x791/0xbc0 [ 280.560795][ T8478] nbd_init+0x181/0x320 [ 280.565475][ T8478] do_one_initcall+0x120/0x6e0 [ 280.570751][ T8478] kernel_init_freeable+0x5c2/0x900 [ 280.576475][ T8478] kernel_init+0x1c/0x2b0 [ 280.581330][ T8478] ret_from_fork+0x5d7/0x6f0 [ 280.586443][ T8478] ret_from_fork_asm+0x1a/0x30 [ 280.591720][ T8478] [ 280.591720][ T8478] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 280.599540][ T8478] __lock_acquire+0x126f/0x1c90 [ 280.604911][ T8478] lock_acquire+0x179/0x350 [ 280.609933][ T8478] __mutex_lock+0x199/0xb90 [ 280.614956][ T8478] elevator_change+0x103/0x400 [ 280.620244][ T8478] elv_iosched_store+0x2eb/0x3a0 [ 280.625709][ T8478] queue_attr_store+0x279/0x320 [ 280.631075][ T8478] sysfs_kf_write+0xf2/0x150 [ 280.636190][ T8478] kernfs_fop_write_iter+0x351/0x510 [ 280.641999][ T8478] iter_file_splice_write+0x91c/0x1150 [ 280.647991][ T8478] direct_splice_actor+0x18f/0x6c0 [ 280.653630][ T8478] splice_direct_to_actor+0x345/0xa30 [ 280.659531][ T8478] do_splice_direct+0x174/0x240 [ 280.664906][ T8478] do_sendfile+0xb06/0xe50 [ 280.669838][ T8478] __x64_sys_sendfile64+0x1d8/0x220 [ 280.675555][ T8478] do_syscall_64+0xcd/0x490 [ 280.680578][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.686987][ T8478] [ 280.686987][ T8478] other info that might help us debug this: [ 280.686987][ T8478] [ 280.697202][ T8478] Chain exists of: [ 280.697202][ T8478] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#55 [ 280.697202][ T8478] [ 280.710943][ T8478] Possible unsafe locking scenario: [ 280.710943][ T8478] [ 280.718384][ T8478] CPU0 CPU1 [ 280.723740][ T8478] ---- ---- [ 280.729096][ T8478] lock(&q->q_usage_counter(io)#55); [ 280.734471][ T8478] lock(fs_reclaim); [ 280.740970][ T8478] lock(&q->q_usage_counter(io)#55); [ 280.748863][ T8478] lock(&q->elevator_lock); [ 280.753452][ T8478] [ 280.753452][ T8478] *** DEADLOCK *** [ 280.753452][ T8478] [ 280.761584][ T8478] 6 locks held by syz.3.483/8478: [ 280.766600][ T8478] #0: ffff888036640428 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x345/0xa30 [ 280.776633][ T8478] #1: ffff8880774cd888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 280.786391][ T8478] #2: ffff888026407b48 (kn->active#116){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 280.796543][ T8478] #3: ffff8880264c4188 (&set->update_nr_hwq_lock){.+.+}-{4:4}, at: elv_iosched_store+0x337/0x3a0 [ 280.807173][ T8478] #4: ffff888142bc7608 (&q->q_usage_counter(io)#55){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 280.818852][ T8478] #5: ffff888142bc7640 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 280.830711][ T8478] [ 280.830711][ T8478] stack backtrace: [ 280.836591][ T8478] CPU: 1 UID: 0 PID: 8478 Comm: syz.3.483 Not tainted 6.15.0-syzkaller-03589-gfeacb1774bd5 #0 PREEMPT(full) [ 280.836615][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 280.836627][ T8478] Call Trace: [ 280.836635][ T8478] [ 280.836643][ T8478] dump_stack_lvl+0x116/0x1f0 [ 280.836665][ T8478] print_circular_bug+0x275/0x350 [ 280.836685][ T8478] check_noncircular+0x14c/0x170 [ 280.836707][ T8478] __lock_acquire+0x126f/0x1c90 [ 280.836732][ T8478] lock_acquire+0x179/0x350 [ 280.836751][ T8478] ? elevator_change+0x103/0x400 [ 280.836777][ T8478] ? __pfx___might_resched+0x10/0x10 [ 280.836808][ T8478] __mutex_lock+0x199/0xb90 [ 280.836827][ T8478] ? elevator_change+0x103/0x400 [ 280.836853][ T8478] ? elevator_change+0x103/0x400 [ 280.836878][ T8478] ? __pfx___mutex_lock+0x10/0x10 [ 280.836899][ T8478] ? blk_mq_cancel_work_sync+0xd8/0x110 [ 280.836918][ T8478] ? __pfx_blk_mq_cancel_work_sync+0x10/0x10 [ 280.836939][ T8478] ? elevator_change+0x103/0x400 [ 280.836963][ T8478] elevator_change+0x103/0x400 [ 280.836989][ T8478] elv_iosched_store+0x2eb/0x3a0 [ 280.837016][ T8478] ? __pfx_elv_iosched_store+0x10/0x10 [ 280.837043][ T8478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.837066][ T8478] ? __mutex_trylock_common+0xe9/0x250 [ 280.837090][ T8478] ? __pfx_elv_iosched_store+0x10/0x10 [ 280.837116][ T8478] queue_attr_store+0x279/0x320 [ 280.837138][ T8478] ? __pfx_queue_attr_store+0x10/0x10 [ 280.837157][ T8478] ? __lock_acquire+0x622/0x1c90 [ 280.837181][ T8478] ? find_held_lock+0x2b/0x80 [ 280.837207][ T8478] ? sysfs_file_kobj+0xe4/0x290 [ 280.837236][ T8478] ? __pfx_queue_attr_store+0x10/0x10 [ 280.837255][ T8478] sysfs_kf_write+0xf2/0x150 [ 280.837289][ T8478] kernfs_fop_write_iter+0x351/0x510 [ 280.837313][ T8478] ? __pfx_sysfs_kf_write+0x10/0x10 [ 280.837340][ T8478] iter_file_splice_write+0x91c/0x1150 [ 280.837376][ T8478] ? __pfx_iter_file_splice_write+0x10/0x10 [ 280.837407][ T8478] ? __pfx_copy_splice_read+0x10/0x10 [ 280.837439][ T8478] ? __pfx_iter_file_splice_write+0x10/0x10 [ 280.837468][ T8478] direct_splice_actor+0x18f/0x6c0 [ 280.837497][ T8478] splice_direct_to_actor+0x345/0xa30 [ 280.837525][ T8478] ? __pfx_direct_splice_actor+0x10/0x10 [ 280.837554][ T8478] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 280.837585][ T8478] do_splice_direct+0x174/0x240 [ 280.837612][ T8478] ? __pfx_do_splice_direct+0x10/0x10 [ 280.837639][ T8478] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 280.837667][ T8478] ? rw_verify_area+0xcf/0x680 [ 280.837695][ T8478] do_sendfile+0xb06/0xe50 [ 280.837714][ T8478] ? __pfx_do_sendfile+0x10/0x10 [ 280.837732][ T8478] ? __x64_sys_futex+0x1e0/0x4c0 [ 280.837750][ T8478] ? __x64_sys_futex+0x1e9/0x4c0 [ 280.837769][ T8478] __x64_sys_sendfile64+0x1d8/0x220 [ 280.837791][ T8478] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 280.837813][ T8478] ? syscall_user_dispatch+0x78/0x140 [ 280.837840][ T8478] do_syscall_64+0xcd/0x490 [ 280.837860][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.837878][ T8478] RIP: 0033:0x7fd92598e969 [ 280.837894][ T8478] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 280.837912][ T8478] RSP: 002b:00007fd926793038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 280.837930][ T8478] RAX: ffffffffffffffda RBX: 00007fd925bb5fa0 RCX: 00007fd92598e969 [ 280.837942][ T8478] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 280.837953][ T8478] RBP: 00007fd925a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 280.837965][ T8478] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 280.837976][ T8478] R13: 0000000000000000 R14: 00007fd925bb5fa0 R15: 00007ffe8cb50b18 [ 280.837994][ T8478] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 281.334742][ T8473] ima: policy update failed [ 281.383984][ T30] audit: type=1802 audit(4294967447.450:8): pid=8473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.482" res=0 errno=0 [ 282.033703][ T5050] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.170980][ T5050] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.230556][ T5050] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.310239][ T5050] bridge_slave_1: left allmulticast mode [ 282.316085][ T5050] bridge_slave_1: left promiscuous mode [ 282.321754][ T5050] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.330306][ T5050] bridge_slave_0: left allmulticast mode [ 282.336571][ T5050] bridge_slave_0: left promiscuous mode [ 282.342236][ T5050] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.424904][ T5050] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.436863][ T5050] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.446399][ T5050] bond0 (unregistering): Released all slaves [ 282.550518][ T5050] hsr_slave_0: left promiscuous mode [ 282.559850][ T5050] hsr_slave_1: left promiscuous mode [ 282.565650][ T5050] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.574397][ T5050] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.587521][ T5050] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.595014][ T5050] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.606325][ T5050] veth1_macvtap: left promiscuous mode [ 282.611877][ T5050] veth0_macvtap: left promiscuous mode [ 282.617597][ T5050] veth1_vlan: left promiscuous mode [ 282.622995][ T5050] veth0_vlan: left promiscuous mode [ 282.827450][ T5050] team0 (unregistering): Port device team_slave_1 removed [ 282.854044][ T5050] team0 (unregistering): Port device team_slave_0 removed