last executing test programs: 23.999285648s ago: executing program 3 (id=260): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000080), 0xa902, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103841, 0x0) socket(0x11, 0x80003, 0x300) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, 0x0, 0x802, 0x7) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/devices\x00', 0x2000, 0x0) pread64$auto(r1, 0x0, 0x11, 0x80000000000b) 23.695321935s ago: executing program 3 (id=262): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) r1 = socket(0x2, 0x1, 0x0) fcntl$auto_F_SETOWN(r1, 0x8, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x2, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x29e, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40008815}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x38) 23.435544216s ago: executing program 3 (id=264): prctl$auto(0x4b, 0x8, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/Stats\x00', 0x28102, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000336bd7000fedbdf250200001808003c0002000009050019"], 0x24}, 0x1, 0x0, 0x0, 0xc005}, 0x4) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000326bd7000fedbde250a"], 0x14}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r2 = open(&(0x7f0000000180)='./cgroup.cpu/cgroup.procs\x00', 0x40442, 0x7) read$auto(r2, 0x0, 0x0) write$auto(0x3, 0x0, 0x1) 23.188559504s ago: executing program 3 (id=265): openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, 0x0, 0x841, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, 0x0) close_range$auto(0xffffffffffffffff, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x8, 0x10001, 0x7, 0x0) ioctl$auto(0x1, 0x8983, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x101802, 0x0) syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 22.631564082s ago: executing program 3 (id=268): r0 = socket(0x10, 0x2, 0x0) ioctl$auto(0xffffffffffffffff, 0x800464ff, 0x1ed) mmap$auto(0x0, 0x400008, 0xe, 0x9b72, 0x2, 0x8000) rt_sigaction$auto(0x1, &(0x7f00000001c0)={&(0x7f0000000080)=0x0, 0x7fffffffffffffff, 0x0, {0x5}}, 0x0, 0x8) rt_sigaction$auto(0x5, &(0x7f0000000140)={&(0x7f0000000040)=0x0, 0x9, 0x0, {0x81}}, 0x0, 0x8) bind$auto(r0, &(0x7f0000000080)=@generic={0x0, "cc00000008f0ffffff000100"}, 0x2ef2) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r1, &(0x7f0000000240)=""/177, 0xb1) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r2 = gettid() setsockopt$auto(r0, 0x8d3e, 0x6, &(0x7f0000000940)='&\xf82\x98~~\x89\x85r\xe7\xc9\x0e\x8f\xa6K$(\xad%\xafH{j.(\xae\xd8?\xf0\xe1$\xdcaX\x97\x13\x87w\x9b\xaa\x95t \x99_\x9e<\x93\x11y@;m/\xd4\x8c\x9dD\x15T\x18\xa0\xf9\x00:\xcc.\x1b\xa1\xdd\xaa\xbe\xcf>\x97r\x9ad\xe9\xb7\xc9\x04\a\x96\xcc\x1eg\xc9g\xa2 \xc4\xccD}q', 0x8) r3 = getpid() rt_tgsigqueueinfo$auto(r3, r2, 0x1, 0x0) rt_sigsuspend$auto(0x0, 0x8) 21.623664572s ago: executing program 3 (id=273): openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) creat$auto(0x0, 0x81) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0xfffffffffffffffd, 0x8, 0x6, 0x0, 0xfffffffffffffffc, 0x24, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10]}, 0x1fe, 0x81) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 6.721344649s ago: executing program 0 (id=333): unshare$auto(0x40000080) openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x841, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto(0x40000006, 0x0, 0xf71, 0x80000000) ptrace$auto_PTRACE_SETOPTIONS(0x4200, r0, 0x7fffffffffffffff, 0x17a0000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000400)={{@inferred=r0, 0x4, 0xa, 0x1, "1d3595a43f1c2860ac2f94cbd613e6ff9d705dff1957960b695944959e5b8d21a8ef97942c15e495fd388053", @raw=0x5}, 0x0, @enumerated=@item_ptr=&(0x7f0000000000)=0x3, "735493c37d9eda7bac3a9f0de127dcafe00831f5577a3efa97e8d2b2a4248244c2a1f7deec53abbf9c6ca9b16e61a5dec6600b9a7fce0bb560d3036499ef66b6518fe0d5a0c68b17f5b7cacb2cc52f5a418d3ce92593b05abf02b041ad25d23f32c2f5ecfcd129d1e221d909ee14de5a414400df61636ce034bac72f37039a11"}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) socket(0x2, 0x5, 0x580b) socketpair$auto(0x8, 0x10001, 0x7, 0x0) ioctl$auto(0x1, 0x8983, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) openat$auto_ecryptfs_dir_fops_ecryptfs_kernel(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/bluetooth/hci4\x00', 0x1, 0x0) fanotify_init$auto(0x5, 0x2000000000002) 6.397311495s ago: executing program 0 (id=334): socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000280), 0x180, 0x0) socket(0xa, 0x5, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x141302, 0x0) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x4, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x1, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socketpair$auto(0x4004, 0xf, 0x5, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TCFLSH2(r0, 0x400455c8, 0x0) 6.12601562s ago: executing program 32 (id=273): openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x201, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0xeb1, 0x0, 0x8000) write$auto(0x3, 0x0, 0xfdef) socket$nl_generic(0x10, 0x3, 0x10) creat$auto(0x0, 0x81) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x2, 0x200000, 0x0, 0xfffffffffffffffd, 0x8, 0x6, 0x0, 0xfffffffffffffffc, 0x24, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10]}, 0x1fe, 0x81) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 5.676934826s ago: executing program 2 (id=337): socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/user\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) open(0x0, 0x149443, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socketpair$auto(0x1e, 0x5, 0x3, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 4.786809351s ago: executing program 1 (id=338): mmap$auto(0x0, 0x400008, 0x400000df, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002240)='/dev/cec17\x00', 0x181680, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/mount_params\x00', 0x2, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count\x00', 0xc0082, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0x200, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0x14) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xffffffffffffff14, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES8=r0], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x200440c0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x8001c01, &(0x7f00000002c0)={0x0, 0xc3}, 0x1, 0x0, 0x3, 0x1}, 0x7}, 0x3d55, 0x0) 3.999168615s ago: executing program 1 (id=339): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x2, 0x1a525c0f) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x883, 0x0) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) connect$auto(0x3, 0x0, 0x54) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa00040, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team_slave_0/rpl_seg_enabled\x00', 0x20202, 0x0) sendfile$auto(r1, r2, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x9) mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb1, 0xffffffffffffffff, 0x10000) r3 = open(0x0, 0x0, 0x408) adjtimex$auto(&(0x7f0000000240)={0x10000, 0x0, 0x7, 0x1, 0xffffffff, 0x5, 0x4, 0x0, 0x5, 0x0, 0xfffffffffffffffe, {0x24f, 0x8}, 0x0, 0x3, 0x4, 0x2, 0x0, 0xeca, 0x3, 0x7, 0x0, 0x12e, 0x5bbda88c}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) 3.844358822s ago: executing program 2 (id=340): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x2121c2, 0x0) bpf$auto(0xd, 0x0, 0x6f5) init_module$auto(0x0, 0xffff9, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x2, 0xeb1, 0x401, 0x8000) getsockopt$auto(0x100000006, 0x0, 0x3, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) shutdown$auto(r0, 0x2) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x200000000000000, 0x400006, 0xdf, 0x12, 0x2, 0x8001) madvise$auto(0x0, 0xffffffffffff0002, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 3.502905961s ago: executing program 0 (id=341): openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x0, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3db) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001ec0)='/sys/power/mem_sleep\x00', 0x1a9402, 0x0) socket(0x18, 0x80802, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000280), 0x400000, 0x0) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto(r1, 0x0, 0xc3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) 2.587985833s ago: executing program 2 (id=342): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, &(0x7f0000000000)="10b1ab0c01e2eab37703c87b05de28e861e2d04b4579a46225") r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x1, 0x0) prctl$auto(0xfffffff7, 0x80000, r2, 0x6, 0x2) getrandom$auto(0x0, 0x6, 0x3) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_SETLK(r5, 0x6, r4) setpgid$auto(r3, r4) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x23, 0x0, 0x568) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x8841}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000840}, 0x40855) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) msgctl$auto_IPC_INFO(0xd, 0x3, &(0x7f0000000180)={{0x1, r6, r7, 0x1725, 0x6, 0x7, 0x8}, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x1, 0x3ff, 0x6, 0x40008000, 0xffffffff, 0x0, 0x3, 0x81, 0x5, @raw=0x5, @inferred=0xffffffffffffffff}) 2.263576391s ago: executing program 1 (id=343): unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, 0x0) r0 = memfd_secret$auto(0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) r2 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) read$auto_proc_environ_operations_base(r2, &(0x7f0000000240)=""/80, 0x50) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_NL80211_CMD_ADD_LINK_STA(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="11010000423698bb797f784b7d32d3cb0a1404298eb1e7b028d7c7cb3510825eb1658fb1be4029134edd6a96da20617ec1f2a4e48dc7579f206e2c506d1d5180ed387b2784663e5c037e454fb94d2746e9959084c727e1a43e0cdb8a1fef63ff950686ee92d015e0f713d9a8da86d121608b982a6d5b33173f69501d9c2f73a54284e069aa2c8eb1d1b29291cbc6b96a8483d89211aaff2c8a33d9b36bb9c7d63e4bf561d3a172a13e0fa4b03597b252ddee968272f187ee7761881275bb83b44ad98efffb58bea3dc00ab9198c0d27b062f28483604b765c26425edb8fb6057271330ca3488df1ee927a8968d66376ba37da839", @ANYRES16, @ANYBLOB="010025bd7000fbdbdf2596000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$auto(r1, 0x5646, r1) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000080)=""/27, 0x1b) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = socket(0x11, 0x3, 0x2) getsockopt$auto(r4, 0x107, 0x3, 0x0, 0x0) gettid() setsockopt$auto(r4, 0x4, 0x8, &(0x7f0000000040)='\x00', 0x7) ioctl$auto__ctl_fops_dm_ioctl(0xffffffffffffffff, 0x400050000, &(0x7f0000000000)="02c9a305bc8f") openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/platform/dummy_hcd.1/usb2/avoid_reset_quirk\x00', 0x5a9881, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/pci0000:00/0000:00:01.1/ata2/host1/target1:0:0/1:0:0:0/evt_mode_parameter_change_reported\x00', 0xe8b43, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)="de91b83a075c", 0x6) mmap$auto(0x0, 0x20009, 0xfffffffffffffffe, 0xeb2, 0x401, 0x8000008000) unshare$auto(0x2) r6 = fcntl$auto_F_UNLCK(r0, 0x8, 0x2) ioctl$auto_FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x401c5820, r6) setsockopt$auto(0xffffffffffffffff, 0x1, 0x2, 0x0, 0x4) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) 2.196998421s ago: executing program 2 (id=344): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/sound/ctl-led/speaker/card0/list\x00', 0x80400, 0x0) socket(0x15, 0x5, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r1 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 2.014837967s ago: executing program 0 (id=345): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi29\x00', 0xa0a01, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/bridge/bridge-nf-filter-vlan-tagged\x00', 0x80000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x200, 0x0) capset$auto(0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, 0xf000000) r3 = openat$auto_proc_sessionid_operations_base(0xffffffffffffff9c, &(0x7f0000001080)='/proc/thread-self/sessionid\x00', 0x0, 0x0) read$auto_proc_sessionid_operations_base(r3, 0x0, 0x0) read$auto(r1, &(0x7f0000001080)='.&(]\x00', 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r4 = socket(0xa, 0x1, 0x84) semctl$auto(0x8, 0x806, 0x13, 0x46) setsockopt$auto(r4, 0x29, 0x40, 0x0, 0x10000) r5 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r5, 0x80605414, &(0x7f0000000000)={0x8, 0x3, 0x4, 0xba44, 0x2, 0x0, "e014265b728af441ecb9fb5793abc8fdffdbcd2c02d3c293fa98882f5336d79fc5b8202cb37fca80bc0f7019608d9e926b6d22c42432352d6ba627fafdbae669"}) poll$auto(&(0x7f0000000040)={r0, 0xfffa, 0x6}, 0x1, 0x80000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000003040), 0xffffffffffffffff) r9 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r6) mmap$auto(0x0, 0x40009, 0x20000000df, 0x9b72, 0x7, 0x28000) r10 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r10, 0x65, 0x4, 0xffffffffffffffff, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_JOIN_IBSS(r6, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0c010000", @ANYRES16=r3, @ANYRES16=r9, @ANYRES32=r6], 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x4004800) sendmsg$auto_OVS_METER_CMD_SET(r7, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={&(0x7f00000018c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5da926bd7004fbdbdf25020000000400020014000480040048800c00dd0003000000000000000800030005000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c0}, 0x40) 1.861900898s ago: executing program 2 (id=346): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x2, 0x1a525c0f) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x883, 0x0) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) connect$auto(0x3, 0x0, 0x54) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa00040, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team_slave_0/rpl_seg_enabled\x00', 0x20202, 0x0) sendfile$auto(r1, r2, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x9) mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb1, 0xffffffffffffffff, 0x10000) r3 = open(0x0, 0x0, 0x408) timer_create$auto(0xfffffffa, 0x0, 0x0) adjtimex$auto(&(0x7f0000000240)={0x10000, 0x0, 0x7, 0x1, 0xffffffff, 0x5, 0x4, 0x0, 0x5, 0x0, 0xfffffffffffffffe, {0x24f, 0x8}, 0x0, 0x3, 0x4, 0x2, 0x0, 0xeca, 0x3, 0x7, 0x0, 0x12e, 0x5bbda88c}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x6}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x2}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xe090}, @NL80211_ATTR_BSS_DUMP_INCLUDE_USE_DATA={0x4}]}, 0x30}}, 0x1) 1.599956564s ago: executing program 1 (id=347): memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/card1/pcm0c/sub3/xrun_injection\x00', 0x100, 0x0) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(0x3, 0x0, 0x1f40) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x8080, 0x0) getsockopt$auto(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f00000000c0)={0x0, 0x7}, 0x3) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD_OLD(r2, 0x40045402, 0x0) 1.455658031s ago: executing program 0 (id=348): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) socket(0x26, 0x2, 0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/projid_map\x00', 0x100000, 0x0) r0 = open(0x0, 0x80842, 0x91) read$auto(r0, 0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) select$auto(0xfffffffb, 0x0, &(0x7f0000000500)={[0x1, 0x101, 0x9, 0x4a, 0x0, 0x7, 0x0, 0x3, 0x3, 0xf, 0x51c7, 0x7, 0x8, 0x9, 0x1, 0x3]}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) ioctl$auto(0xffffffffffffffff, 0x540c, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0xd5b, 0x9, 0x37, 0x9489, 0xfffffffffffffcfb, 0x15f4da0b, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x5, 0x6d3a, 0x8, 0x9, 0xfffffffffffffffc]}, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0xffffffffffffffff, 0x8000, 0x0) 601.398819ms ago: executing program 1 (id=349): unshare$auto(0x40000080) openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim0/hwstats/l3/enable_ifindex\x00', 0x841, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r0, 0x4, 0x7ff) ptrace$auto(0x40000006, 0x0, 0xf71, 0x80000000) ptrace$auto_PTRACE_SETOPTIONS(0x4200, r0, 0x7fffffffffffffff, 0x17a0000) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000400)={{@inferred=r0, 0x4, 0xa, 0x1, "1d3595a43f1c2860ac2f94cbd613e6ff9d705dff1957960b695944959e5b8d21a8ef97942c15e495fd388053", @raw=0x5}, 0x0, @enumerated=@item_ptr=&(0x7f0000000000)=0x3, "735493c37d9eda7bac3a9f0de127dcafe00831f5577a3efa97e8d2b2a4248244c2a1f7deec53abbf9c6ca9b16e61a5dec6600b9a7fce0bb560d3036499ef66b6518fe0d5a0c68b17f5b7cacb2cc52f5a418d3ce92593b05abf02b041ad25d23f32c2f5ecfcd129d1e221d909ee14de5a414400df61636ce034bac72f37039a11"}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x580b) socketpair$auto(0x8, 0x10001, 0x7, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0}, 0x58) 443.639477ms ago: executing program 0 (id=350): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) munmap$auto(0x2, 0x1a525c0f) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x883, 0x0) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) connect$auto(0x3, 0x0, 0x54) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0xa00040, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team_slave_0/rpl_seg_enabled\x00', 0x20202, 0x0) sendfile$auto(r1, r2, 0x0, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto_USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f00000000c0)=0x9) mmap$auto(0x0, 0x4, 0x4000000000e2, 0x40eb1, 0xffffffffffffffff, 0x10000) r3 = open(0x0, 0x0, 0x408) adjtimex$auto(&(0x7f0000000240)={0x10000, 0x0, 0x7, 0x1, 0xffffffff, 0x5, 0x4, 0x0, 0x5, 0x0, 0xfffffffffffffffe, {0x24f, 0x8}, 0x0, 0x3, 0x4, 0x2, 0x0, 0xeca, 0x3, 0x7, 0x0, 0x12e, 0x5bbda88c}) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x40, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xffff, 0x3, 0x3) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r3) 201.682769ms ago: executing program 2 (id=351): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f0000001940)={0x14, r2, 0x186f202170196f7b, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) r3 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000cc0), 0x60080, 0x0) ioctl$auto_I2C_FUNCS(r3, 0x705, 0x0) ioctl$auto(r0, 0x4b3a, 0x1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/block/nbd9/queue/scheduler\x00', 0x12aa02, 0x0) r5 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptyy7\x00', 0x2, 0x0) ioctl$auto_TIOCSWINSZ(r5, 0x5414, &(0x7f00000000c0)="05") r6 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000002f80)='/sys/kernel/debug/ieee80211/phy0/aql_enable\x00', 0x802, 0x0) write$auto(r6, 0x0, 0x0) ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0x7, r4}) r7 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/block/loop8/state\x00', 0x161100, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(r7, 0x0, 0x6) sendfile$auto(r4, r4, 0x0, 0x7ff) 0s ago: executing program 1 (id=352): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x1e, 0x0) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto(r0, 0x8, 0x0, 0x0, 0x0) ioctl$auto_SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, &(0x7f0000000000)="10b1ab0c01e2eab37703c87b05de28e861e2d04b4579a46225") r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = gettid() rt_sigqueueinfo$auto(r2, 0x1, 0x0) prctl$auto(0xfffffff7, 0x80000, r2, 0x6, 0x2) getrandom$auto(0x0, 0x6, 0x3) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r3, 0x4, 0x7ff) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_SETLK(r5, 0x6, r4) setpgid$auto(r3, r4) socket(0xa, 0x2, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x23, 0x0, 0x568) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r4, @ANYRESOCT=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x8841}, 0x40000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000840}, 0x40855) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x5, 0x80000001, 0x0, 0x100, 0xee01, 0x0, 0x0, 0xffffffffffffff91, 0xfd3, 0x2, 0xec, 0x4, 0x80000000081, 0x8, 0x2, 0xfffffffffffffff8}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) msgctl$auto_IPC_INFO(0xd, 0x3, &(0x7f0000000180)={{0x1, r6, r7, 0x1725, 0x6, 0x7, 0x8}, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x1, 0x3ff, 0x6, 0x40008000, 0xffffffff, 0x0, 0x3, 0x81, 0x5, @raw=0x5, @inferred=0xffffffffffffffff}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. [ 75.176665][ T5824] cgroup: Unknown subsys name 'net' [ 75.311595][ T5824] cgroup: Unknown subsys name 'cpuset' [ 75.320340][ T5824] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.571459][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.578110][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.957524][ T5824] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.899298][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.907272][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.915761][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.923982][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.932310][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.940009][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.950525][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.954919][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.962991][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.968205][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.974805][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.979692][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.986527][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.993931][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.012462][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.014728][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.020348][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.027608][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.047296][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.066399][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.372527][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 79.471929][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 79.522346][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 79.556752][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 79.649975][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.657880][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.665220][ T5837] bridge_slave_0: entered allmulticast mode [ 79.672397][ T5837] bridge_slave_0: entered promiscuous mode [ 79.684881][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.692172][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.699705][ T5833] bridge_slave_0: entered allmulticast mode [ 79.706418][ T5833] bridge_slave_0: entered promiscuous mode [ 79.714091][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.721499][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.728821][ T5833] bridge_slave_1: entered allmulticast mode [ 79.735703][ T5833] bridge_slave_1: entered promiscuous mode [ 79.746954][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.754297][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.761877][ T5837] bridge_slave_1: entered allmulticast mode [ 79.768634][ T5837] bridge_slave_1: entered promiscuous mode [ 79.850321][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.857529][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.864826][ T5834] bridge_slave_0: entered allmulticast mode [ 79.872532][ T5834] bridge_slave_0: entered promiscuous mode [ 79.883479][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.901501][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.908660][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.916477][ T5835] bridge_slave_0: entered allmulticast mode [ 79.923820][ T5835] bridge_slave_0: entered promiscuous mode [ 79.933692][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.943803][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.951262][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.958608][ T5834] bridge_slave_1: entered allmulticast mode [ 79.965388][ T5834] bridge_slave_1: entered promiscuous mode [ 79.973629][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.982901][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.990151][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.997341][ T5835] bridge_slave_1: entered allmulticast mode [ 80.004182][ T5835] bridge_slave_1: entered promiscuous mode [ 80.013368][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.071209][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.083318][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.095644][ T5833] team0: Port device team_slave_0 added [ 80.128826][ T5833] team0: Port device team_slave_1 added [ 80.136389][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.149611][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.161055][ T5837] team0: Port device team_slave_0 added [ 80.190753][ T5837] team0: Port device team_slave_1 added [ 80.208000][ T5834] team0: Port device team_slave_0 added [ 80.231945][ T5835] team0: Port device team_slave_0 added [ 80.241314][ T5835] team0: Port device team_slave_1 added [ 80.248685][ T5834] team0: Port device team_slave_1 added [ 80.255133][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.262284][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.288386][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.301799][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.308873][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.334911][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.392955][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.400212][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.426310][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.446643][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.453747][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.479836][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.492821][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.500053][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.526095][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.537698][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.544813][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.571537][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.585177][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.592504][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.618808][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.630589][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.637564][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.663562][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.705741][ T5833] hsr_slave_0: entered promiscuous mode [ 80.712661][ T5833] hsr_slave_1: entered promiscuous mode [ 80.766038][ T5834] hsr_slave_0: entered promiscuous mode [ 80.774688][ T5834] hsr_slave_1: entered promiscuous mode [ 80.780999][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.788852][ T5834] Cannot create hsr debugfs directory [ 80.826698][ T5835] hsr_slave_0: entered promiscuous mode [ 80.835283][ T5835] hsr_slave_1: entered promiscuous mode [ 80.841724][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.850112][ T5835] Cannot create hsr debugfs directory [ 80.864825][ T5837] hsr_slave_0: entered promiscuous mode [ 80.871805][ T5837] hsr_slave_1: entered promiscuous mode [ 80.877728][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.885373][ T5837] Cannot create hsr debugfs directory [ 81.048777][ T5147] Bluetooth: hci3: command tx timeout [ 81.048780][ T5848] Bluetooth: hci1: command tx timeout [ 81.135778][ T5848] Bluetooth: hci0: command tx timeout [ 81.135819][ T5147] Bluetooth: hci2: command tx timeout [ 81.175295][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.186805][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.198880][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.217745][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.257511][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.268773][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.287331][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.306046][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.347377][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.376520][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.400521][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.413049][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.455942][ T5835] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.466038][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.481699][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.500396][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.578844][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.646032][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.666221][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.673493][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.691018][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.707428][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.719094][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.726177][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.761015][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.771885][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.796908][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.804045][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.814815][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.821970][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.833577][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.846899][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.861005][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.868154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.882965][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.890135][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.915603][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.922778][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.933513][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.940651][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.047295][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.058163][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.095034][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.341633][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.432669][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.445167][ T5833] veth0_vlan: entered promiscuous mode [ 82.475925][ T5833] veth1_vlan: entered promiscuous mode [ 82.502734][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.551061][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.561317][ T5835] veth0_vlan: entered promiscuous mode [ 82.567382][ T5833] veth0_macvtap: entered promiscuous mode [ 82.607327][ T5835] veth1_vlan: entered promiscuous mode [ 82.620424][ T5833] veth1_macvtap: entered promiscuous mode [ 82.645793][ T5837] veth0_vlan: entered promiscuous mode [ 82.666493][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.675879][ T5834] veth0_vlan: entered promiscuous mode [ 82.687028][ T5837] veth1_vlan: entered promiscuous mode [ 82.701932][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.717038][ T5833] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.726731][ T5833] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.737630][ T5833] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.747046][ T5833] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.763114][ T5834] veth1_vlan: entered promiscuous mode [ 82.789104][ T5835] veth0_macvtap: entered promiscuous mode [ 82.831133][ T5835] veth1_macvtap: entered promiscuous mode [ 82.845814][ T5837] veth0_macvtap: entered promiscuous mode [ 82.891724][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.902482][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.914179][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.924505][ T5837] veth1_macvtap: entered promiscuous mode [ 82.950944][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.961533][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.976105][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.987400][ T5834] veth0_macvtap: entered promiscuous mode [ 82.999613][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.008587][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.017305][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.027029][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.045302][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.051297][ T5834] veth1_macvtap: entered promiscuous mode [ 83.055438][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.080668][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.091489][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.102353][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.113048][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.123916][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.131839][ T5147] Bluetooth: hci1: command tx timeout [ 83.143762][ T5147] Bluetooth: hci3: command tx timeout [ 83.163527][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.174280][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.184475][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.195304][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.206324][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.213950][ T5147] Bluetooth: hci0: command tx timeout [ 83.219685][ T5147] Bluetooth: hci2: command tx timeout [ 83.226732][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.238198][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.248129][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.260279][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.270288][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.280948][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.292669][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.315760][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.326362][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.336925][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.349031][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.358921][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.370089][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.381215][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.401094][ T5837] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.412307][ T5837] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.421392][ T5837] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.430827][ T5837] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.449086][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.456951][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.459816][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.475217][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.484008][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.493105][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.554740][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.576494][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.633947][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.703969][ T3006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.713254][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.733286][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.741643][ T3006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.778042][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.786078][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.823862][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.860094][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.896205][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.920390][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.505670][ T5922] syz.2.7 (5922): /proc/5921/oom_adj is deprecated, please use /proc/5921/oom_score_adj instead. [ 85.058284][ T5935] process 'syz.3.12' launched ':,' with NULL argv: empty string added [ 85.184836][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 85.208659][ T5848] Bluetooth: hci3: command tx timeout [ 85.210754][ T5147] Bluetooth: hci1: command tx timeout [ 85.288358][ T5147] Bluetooth: hci2: command tx timeout [ 85.288388][ T5848] Bluetooth: hci0: command tx timeout [ 85.726868][ T5947] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.801094][ T5949] netlink: 342 bytes leftover after parsing attributes in process `syz.0.15'. [ 85.837673][ T5949] FAULT_INJECTION: forcing a failure. [ 85.837673][ T5949] name failslab, interval 1, probability 0, space 0, times 1 [ 86.018831][ T5949] CPU: 1 UID: 0 PID: 5949 Comm: syz.0.15 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 86.018878][ T5949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 86.018901][ T5949] Call Trace: [ 86.018911][ T5949] [ 86.018928][ T5949] dump_stack_lvl+0x16c/0x1f0 [ 86.018971][ T5949] should_fail_ex+0x512/0x640 [ 86.019011][ T5949] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 86.019063][ T5949] should_failslab+0xc2/0x120 [ 86.019114][ T5949] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 86.019162][ T5949] ? lockdep_rtnl_is_held+0x26/0x40 [ 86.019197][ T5949] ? fib_trie_unmerge+0x281/0xcb0 [ 86.019244][ T5949] fib_trie_unmerge+0x281/0xcb0 [ 86.019293][ T5949] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 86.019338][ T5949] ? __pfx___mutex_lock+0x10/0x10 [ 86.019382][ T5949] fib_unmerge+0xf8/0x520 [ 86.019427][ T5949] ? __pfx_fib_nl2rule.constprop.0+0x10/0x10 [ 86.019477][ T5949] fib4_rule_configure+0x383/0x10c0 [ 86.019520][ T5949] fib_newrule+0x34c/0x1e60 [ 86.019575][ T5949] ? __pfx_fib_newrule+0x10/0x10 [ 86.019623][ T5949] ? kmem_cache_free+0x2d4/0x4d0 [ 86.019664][ T5949] ? __pfx_skb_network_protocol+0x10/0x10 [ 86.019723][ T5949] ? find_held_lock+0x2b/0x80 [ 86.019754][ T5949] ? __pfx_fib_nl_newrule+0x10/0x10 [ 86.019798][ T5949] ? __pfx_fib_nl_newrule+0x10/0x10 [ 86.019842][ T5949] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 86.019890][ T5949] ? __pfx_fib_nl_newrule+0x10/0x10 [ 86.019937][ T5949] rtnetlink_rcv_msg+0x95b/0xe90 [ 86.019984][ T5949] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.020046][ T5949] netlink_rcv_skb+0x16a/0x440 [ 86.020095][ T5949] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.020145][ T5949] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.020209][ T5949] ? netlink_deliver_tap+0x1ae/0xd30 [ 86.020261][ T5949] netlink_unicast+0x53a/0x7f0 [ 86.020312][ T5949] ? __pfx_netlink_unicast+0x10/0x10 [ 86.020361][ T5949] ? __phys_addr_symbol+0x30/0x80 [ 86.020409][ T5949] ? __check_object_size+0x4c7/0x710 [ 86.020466][ T5949] netlink_sendmsg+0x8da/0xd70 [ 86.020519][ T5949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.020577][ T5949] ____sys_sendmsg+0xa8d/0xc60 [ 86.020609][ T5949] ? copy_msghdr_from_user+0x10a/0x160 [ 86.020652][ T5949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.020697][ T5949] ___sys_sendmsg+0x134/0x1d0 [ 86.020742][ T5949] ? __pfx____sys_sendmsg+0x10/0x10 [ 86.020820][ T5949] __sys_sendmsg+0x16d/0x220 [ 86.020863][ T5949] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.020907][ T5949] ? __x64_sys_futex+0x1e0/0x4c0 [ 86.020953][ T5949] ? rcu_is_watching+0x12/0xc0 [ 86.020992][ T5949] do_syscall_64+0xcd/0x260 [ 86.021026][ T5949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.021058][ T5949] RIP: 0033:0x7f466cf8d169 [ 86.021083][ T5949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.021121][ T5949] RSP: 002b:00007f466dddc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.021151][ T5949] RAX: ffffffffffffffda RBX: 00007f466d1a5fa0 RCX: 00007f466cf8d169 [ 86.021171][ T5949] RDX: 0000000000040000 RSI: 0000200000000240 RDI: 0000000000000009 [ 86.021190][ T5949] RBP: 00007f466d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 86.021208][ T5949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.021225][ T5949] R13: 0000000000000000 R14: 00007f466d1a5fa0 R15: 00007ffd20ac5ea8 [ 86.021259][ T5949] [ 87.288883][ T5848] Bluetooth: hci1: command tx timeout [ 87.294395][ T5147] Bluetooth: hci3: command tx timeout [ 87.368047][ T5848] Bluetooth: hci0: command tx timeout [ 87.373558][ T5147] Bluetooth: hci2: command tx timeout [ 87.476875][ T5980] hub 2-0:1.0: USB hub found [ 87.516273][ T5980] hub 2-0:1.0: 1 port detected [ 88.387575][ T5999] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input5 [ 88.765435][ T6001] FAULT_INJECTION: forcing a failure. [ 88.765435][ T6001] name fail_futex, interval 1, probability 0, space 0, times 1 [ 88.779825][ T6001] CPU: 1 UID: 0 PID: 6001 Comm: syz.2.33 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 88.779868][ T6001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.779893][ T6001] Call Trace: [ 88.779902][ T6001] [ 88.779914][ T6001] dump_stack_lvl+0x16c/0x1f0 [ 88.779983][ T6001] should_fail_ex+0x512/0x640 [ 88.780029][ T6001] get_futex_key+0x49e/0x1000 [ 88.780068][ T6001] ? __pfx_get_futex_key+0x10/0x10 [ 88.780113][ T6001] futex_wake+0xe7/0x4e0 [ 88.780158][ T6001] ? __pfx_futex_wake+0x10/0x10 [ 88.780206][ T6001] ? percpu_counter_add_batch+0xb8/0x1f0 [ 88.780240][ T6001] ? errseq_sample+0x53/0x70 [ 88.780281][ T6001] ? file_init_path+0x4fe/0x760 [ 88.780318][ T6001] do_futex+0x1e3/0x350 [ 88.780354][ T6001] ? __pfx_do_futex+0x10/0x10 [ 88.780390][ T6001] ? fd_install+0x1db/0x670 [ 88.780440][ T6001] __x64_sys_futex+0x1e0/0x4c0 [ 88.780478][ T6001] ? __sys_socket+0xac/0x260 [ 88.780511][ T6001] ? __pfx___x64_sys_futex+0x10/0x10 [ 88.780551][ T6001] ? rcu_is_watching+0x12/0xc0 [ 88.780589][ T6001] do_syscall_64+0xcd/0x260 [ 88.780622][ T6001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.780654][ T6001] RIP: 0033:0x7f14a0d8d169 [ 88.780678][ T6001] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.780707][ T6001] RSP: 002b:00007f14a1bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 88.780737][ T6001] RAX: ffffffffffffffda RBX: 00007f14a0fa5fa8 RCX: 00007f14a0d8d169 [ 88.780758][ T6001] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f14a0fa5fac [ 88.780784][ T6001] RBP: 00007f14a0fa5fa0 R08: 00007f14a1bf7000 R09: 0000000000000000 [ 88.780804][ T6001] R10: 0000000000000002 R11: 0000000000000246 R12: 00007f14a0fa5fac [ 88.780824][ T6001] R13: 0000000000000000 R14: 00007ffe7f5f4340 R15: 00007ffe7f5f4428 [ 88.780858][ T6001] [ 89.976913][ T6013] zswap: compressor not available [ 90.581982][ T6035] mmap: syz.0.42 (6035) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 92.956497][ T6072] vivid-003: ================= START STATUS ================= [ 92.988145][ T6072] vivid-003: Radio HW Seek Mode: Bounded [ 92.994040][ T6072] vivid-003: Radio Programmable HW Seek: false [ 93.011207][ T6072] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.016970][ T6072] vivid-003: Generate RBDS Instead of RDS: false [ 93.024457][ T6072] vivid-003: RDS Reception: true [ 93.030867][ T6072] vivid-003: RDS Program Type: 0 inactive [ 93.065601][ T6072] vivid-003: RDS PS Name: inactive [ 93.096077][ T6072] vivid-003: RDS Radio Text: inactive [ 93.194462][ T6072] vivid-003: RDS Traffic Announcement: false inactive [ 93.241147][ T6072] vivid-003: RDS Traffic Program: false inactive [ 93.294489][ T6072] vivid-003: RDS Music: false inactive [ 93.329225][ T6072] vivid-003: ================== END STATUS ================== [ 93.358568][ T6073] vivid-003: ================= START STATUS ================= [ 93.381184][ T6073] vivid-003: Radio HW Seek Mode: Bounded [ 93.387041][ T6073] vivid-003: Radio Programmable HW Seek: false [ 93.395748][ T6073] vivid-003: RDS Rx I/O Mode: Block I/O [ 93.409226][ T6073] vivid-003: Generate RBDS Instead of RDS: false [ 93.422727][ T6073] vivid-003: RDS Reception: true [ 93.430389][ T6073] vivid-003: RDS Program Type: 0 inactive [ 93.444165][ T6073] vivid-003: RDS PS Name: inactive [ 93.455817][ T6073] vivid-003: RDS Radio Text: inactive [ 93.469317][ T6073] vivid-003: RDS Traffic Announcement: false inactive [ 93.485134][ T6073] vivid-003: RDS Traffic Program: false inactive [ 93.495110][ T6073] vivid-003: RDS Music: false inactive [ 93.507998][ T6073] vivid-003: ================== END STATUS ================== [ 95.399458][ T6105] netlink: 342 bytes leftover after parsing attributes in process `syz.1.67'. [ 95.987244][ T6123] vivid-003: ================= START STATUS ================= [ 95.995412][ T6123] vivid-003: Radio HW Seek Mode: Bounded [ 96.004435][ T6123] vivid-003: Radio Programmable HW Seek: false [ 96.019684][ T6123] vivid-003: RDS Rx I/O Mode: Block I/O [ 96.067227][ T6123] vivid-003: Generate RBDS Instead of RDS: false [ 96.136419][ T6123] vivid-003: RDS Reception: true [ 96.160300][ T6123] vivid-003: RDS Program Type: 0 inactive [ 96.190183][ T6123] vivid-003: RDS PS Name: inactive [ 96.274011][ T6123] vivid-003: RDS Radio Text: inactive [ 96.284965][ T6123] vivid-003: RDS Traffic Announcement: false inactive [ 96.294550][ T6123] vivid-003: RDS Traffic Program: false inactive [ 96.307909][ T6123] vivid-003: RDS Music: false inactive [ 96.308154][ T6122] zswap: compressor not available [ 96.313460][ T6123] vivid-003: ================== END STATUS ================== [ 96.699795][ T6139] vivid-003: ================= START STATUS ================= [ 96.743739][ T6139] vivid-003: Radio HW Seek Mode: Bounded [ 96.762427][ T6139] vivid-003: Radio Programmable HW Seek: false [ 96.789934][ T6139] vivid-003: RDS Rx I/O Mode: Block I/O [ 96.825173][ T6139] vivid-003: Generate RBDS Instead of RDS: false [ 96.860161][ T6139] vivid-003: RDS Reception: true [ 96.865222][ T6139] vivid-003: RDS Program Type: 0 inactive [ 96.917871][ T6139] vivid-003: RDS PS Name: inactive [ 96.923298][ T6139] vivid-003: RDS Radio Text: inactive [ 96.929626][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.949170][ T6139] vivid-003: RDS Traffic Announcement: false inactive [ 96.998091][ T6139] vivid-003: RDS Traffic Program: false inactive [ 97.014945][ T6139] vivid-003: RDS Music: false inactive [ 97.025177][ T6139] vivid-003: ================== END STATUS ================== [ 97.051440][ T6145] vivid-003: ================= START STATUS ================= [ 97.081188][ T10] cfg80211: failed to load regulatory.db [ 97.088726][ T6145] vivid-003: Radio HW Seek Mode: Bounded [ 97.095034][ T6145] vivid-003: Radio Programmable HW Seek: false [ 97.104714][ T6145] vivid-003: RDS Rx I/O Mode: Block I/O [ 97.110999][ T6145] vivid-003: Generate RBDS Instead of RDS: false [ 97.117414][ T6145] vivid-003: RDS Reception: true [ 97.122505][ T6145] vivid-003: RDS Program Type: 0 inactive [ 97.128998][ T6145] vivid-003: RDS PS Name: inactive [ 97.134294][ T6145] vivid-003: RDS Radio Text: inactive [ 97.140759][ T6145] vivid-003: RDS Traffic Announcement: false inactive [ 97.147610][ T6145] vivid-003: RDS Traffic Program: false inactive [ 97.154598][ T6145] vivid-003: RDS Music: false inactive [ 97.160542][ T6145] vivid-003: ================== END STATUS ================== [ 97.734051][ T6165] vivid-003: ================= START STATUS ================= [ 97.778047][ T6165] vivid-003: Radio HW Seek Mode: Bounded [ 97.802952][ T6165] vivid-003: Radio Programmable HW Seek: false [ 97.819018][ T6163] Zero length message leads to an empty skb [ 97.826758][ T6165] vivid-003: RDS Rx I/O Mode: Block I/O [ 97.844288][ T6165] vivid-003: Generate RBDS Instead of RDS: false [ 97.879268][ T6165] vivid-003: RDS Reception: true [ 97.891343][ T6165] vivid-003: RDS Program Type: 0 inactive [ 97.897740][ T6165] vivid-003: RDS PS Name: inactive [ 97.903276][ T6165] vivid-003: RDS Radio Text: inactive [ 97.912203][ T6165] vivid-003: RDS Traffic Announcement: false inactive [ 97.942192][ T6165] vivid-003: RDS Traffic Program: false inactive [ 97.962117][ T6165] vivid-003: RDS Music: false inactive [ 97.967727][ T6165] vivid-003: ================== END STATUS ================== [ 98.812666][ T6193] vivid-003: ================= START STATUS ================= [ 98.827932][ T6193] vivid-003: Radio HW Seek Mode: Bounded [ 98.833764][ T6193] vivid-003: Radio Programmable HW Seek: false [ 98.844563][ T6193] vivid-003: RDS Rx I/O Mode: Block I/O [ 98.894167][ T6193] vivid-003: Generate RBDS Instead of RDS: false [ 98.915024][ T6193] vivid-003: RDS Reception: true [ 98.940594][ T6193] vivid-003: RDS Program Type: 0 inactive [ 98.995254][ T6193] vivid-003: RDS PS Name: inactive [ 99.018220][ T6193] vivid-003: RDS Radio Text: inactive [ 99.023929][ T6193] vivid-003: RDS Traffic Announcement: false inactive [ 99.031226][ T6193] vivid-003: RDS Traffic Program: false inactive [ 99.058017][ T6193] vivid-003: RDS Music: false inactive [ 99.077988][ T6193] vivid-003: ================== END STATUS ================== [ 99.304220][ T6206] vivid-003: ================= START STATUS ================= [ 99.352738][ T6206] vivid-003: Radio HW Seek Mode: Bounded [ 99.359543][ T6206] vivid-003: Radio Programmable HW Seek: false [ 99.388192][ T6206] vivid-003: RDS Rx I/O Mode: Block I/O [ 99.407976][ T6206] vivid-003: Generate RBDS Instead of RDS: false [ 99.414442][ T6206] vivid-003: RDS Reception: true [ 99.452940][ T6206] vivid-003: RDS Program Type: 0 inactive [ 99.462173][ T6206] vivid-003: RDS PS Name: inactive [ 99.488198][ T6206] vivid-003: RDS Radio Text: inactive [ 99.493864][ T6206] vivid-003: RDS Traffic Announcement: false inactive [ 99.504727][ T6206] vivid-003: RDS Traffic Program: false inactive [ 99.550907][ T6206] vivid-003: RDS Music: false inactive [ 99.563100][ T6206] vivid-003: ================== END STATUS ================== [ 100.957491][ T6254] vivid-003: ================= START STATUS ================= [ 100.994943][ T6254] vivid-003: Radio HW Seek Mode: Bounded [ 101.017188][ T6254] vivid-003: Radio Programmable HW Seek: false [ 101.025308][ T6254] vivid-003: RDS Rx I/O Mode: Block I/O [ 101.035622][ T6254] vivid-003: Generate RBDS Instead of RDS: false [ 101.067111][ T6254] vivid-003: RDS Reception: true [ 101.112842][ T6254] vivid-003: RDS Program Type: 0 inactive [ 101.119753][ T6254] vivid-003: RDS PS Name: inactive [ 101.125057][ T6254] vivid-003: RDS Radio Text: inactive [ 101.130921][ T6254] vivid-003: RDS Traffic Announcement: false inactive [ 101.138909][ T6254] vivid-003: RDS Traffic Program: false inactive [ 101.145508][ T6254] vivid-003: RDS Music: false inactive [ 101.152750][ T6254] vivid-003: ================== END STATUS ================== [ 101.196931][ T6251] zswap: compressor not available [ 101.443621][ T6272] vivid-003: ================= START STATUS ================= [ 101.488836][ T6272] vivid-003: Radio HW Seek Mode: Bounded [ 101.518734][ T6272] vivid-003: Radio Programmable HW Seek: false [ 101.525098][ T6272] vivid-003: RDS Rx I/O Mode: Block I/O [ 101.531167][ T6272] vivid-003: Generate RBDS Instead of RDS: false [ 101.537689][ T6272] vivid-003: RDS Reception: true [ 101.544095][ T6272] vivid-003: RDS Program Type: 0 inactive [ 101.549972][ T6272] vivid-003: RDS PS Name: inactive [ 101.555331][ T6272] vivid-003: RDS Radio Text: inactive [ 101.560946][ T6272] vivid-003: RDS Traffic Announcement: false inactive [ 101.568307][ T6272] vivid-003: RDS Traffic Program: false inactive [ 101.574728][ T6272] vivid-003: RDS Music: false inactive [ 101.685088][ T6272] vivid-003: ================== END STATUS ================== [ 101.703137][ T6271] snd_virmidi snd_virmidi.0: control 3:51768:4:IAJ:0 is already present [ 102.056414][ T6283] hub 2-0:1.0: USB hub found [ 102.061396][ T6283] hub 2-0:1.0: 1 port detected [ 102.575722][ T6304] vivid-003: ================= START STATUS ================= [ 102.592387][ T6304] vivid-003: Radio HW Seek Mode: Bounded [ 102.617950][ T6304] vivid-003: Radio Programmable HW Seek: false [ 102.624228][ T6304] vivid-003: RDS Rx I/O Mode: Block I/O [ 102.675480][ T6304] vivid-003: Generate RBDS Instead of RDS: false [ 102.685406][ T6304] vivid-003: RDS Reception: true [ 102.703085][ T6304] vivid-003: RDS Program Type: 0 inactive [ 102.727695][ T6304] vivid-003: RDS PS Name: inactive [ 102.735756][ T6304] vivid-003: RDS Radio Text: inactive [ 102.743712][ T6304] vivid-003: RDS Traffic Announcement: false inactive [ 102.752640][ T6304] vivid-003: RDS Traffic Program: false inactive [ 102.759393][ T6304] vivid-003: RDS Music: false inactive [ 102.765140][ T6304] vivid-003: ================== END STATUS ================== [ 102.973139][ T6315] snd_virmidi snd_virmidi.0: control 3:51768:4:IAJ:0 is already present [ 103.115491][ T6321] vivid-003: ================= START STATUS ================= [ 103.124242][ T6321] vivid-003: Radio HW Seek Mode: Bounded [ 103.130595][ T6321] vivid-003: Radio Programmable HW Seek: false [ 103.137209][ T6321] vivid-003: RDS Rx I/O Mode: Block I/O [ 103.144471][ T6321] vivid-003: Generate RBDS Instead of RDS: false [ 103.167917][ T6321] vivid-003: RDS Reception: true [ 103.173034][ T6321] vivid-003: RDS Program Type: 0 inactive [ 103.192276][ T6321] vivid-003: RDS PS Name: inactive [ 103.197656][ T6321] vivid-003: RDS Radio Text: inactive [ 103.232295][ T6321] vivid-003: RDS Traffic Announcement: false inactive [ 103.285035][ T6321] vivid-003: RDS Traffic Program: false inactive [ 103.342108][ T6321] vivid-003: RDS Music: false inactive [ 103.347694][ T6321] vivid-003: ================== END STATUS ================== [ 104.640652][ T5848] Bluetooth: hci1: SCO packet for unknown connection handle 0 [ 105.595177][ T6366] vivid-003: ================= START STATUS ================= [ 105.798260][ T6366] vivid-003: Radio HW Seek Mode: Bounded [ 105.865186][ T6366] vivid-003: Radio Programmable HW Seek: false [ 105.911169][ T6366] vivid-003: RDS Rx I/O Mode: Block I/O [ 105.927677][ T6366] vivid-003: Generate RBDS Instead of RDS: false [ 105.995153][ T6366] vivid-003: RDS Reception: true [ 106.050932][ T6366] vivid-003: RDS Program Type: 0 inactive [ 106.077559][ T6366] vivid-003: RDS PS Name: inactive [ 106.103292][ T6366] vivid-003: RDS Radio Text: inactive [ 106.136871][ T6366] vivid-003: RDS Traffic Announcement: false inactive [ 106.163151][ T6366] vivid-003: RDS Traffic Program: false inactive [ 106.169995][ T6366] vivid-003: RDS Music: false inactive [ 106.175558][ T6366] vivid-003: ================== END STATUS ================== [ 107.111995][ T6397] snd_virmidi snd_virmidi.0: control 3:51768:4:IAJ:0 is already present [ 107.430260][ T6409] vivid-003: ================= START STATUS ================= [ 107.467538][ T6409] vivid-003: Radio HW Seek Mode: Bounded [ 107.486538][ T6409] vivid-003: Radio Programmable HW Seek: false [ 107.497173][ T6409] vivid-003: RDS Rx I/O Mode: Block I/O [ 107.504304][ T6409] vivid-003: Generate RBDS Instead of RDS: false [ 107.575520][ T6409] vivid-003: RDS Reception: true [ 107.600862][ T6409] vivid-003: RDS Program Type: 0 inactive [ 107.606806][ T6409] vivid-003: RDS PS Name: inactive [ 107.612514][ T6409] vivid-003: RDS Radio Text: inactive [ 107.618240][ T6409] vivid-003: RDS Traffic Announcement: false inactive [ 107.625090][ T6409] vivid-003: RDS Traffic Program: false inactive [ 107.631876][ T6409] vivid-003: RDS Music: false inactive [ 107.637436][ T6409] vivid-003: ================== END STATUS ================== [ 109.715394][ T6465] vivid-003: ================= START STATUS ================= [ 109.738392][ T6465] vivid-003: Radio HW Seek Mode: Bounded [ 109.758389][ T6465] vivid-003: Radio Programmable HW Seek: false [ 109.764654][ T6465] vivid-003: RDS Rx I/O Mode: Block I/O [ 109.803232][ T6465] vivid-003: Generate RBDS Instead of RDS: false [ 109.827885][ T6465] vivid-003: RDS Reception: true [ 109.839757][ T6465] vivid-003: RDS Program Type: 0 inactive [ 109.846365][ T6465] vivid-003: RDS PS Name: inactive [ 109.852753][ T6472] FAULT_INJECTION: forcing a failure. [ 109.852753][ T6472] name failslab, interval 1, probability 0, space 0, times 0 [ 109.852795][ T6472] CPU: 0 UID: 0 PID: 6472 Comm: syz.1.142 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 109.852834][ T6472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 109.852852][ T6472] Call Trace: [ 109.852861][ T6472] [ 109.852871][ T6472] dump_stack_lvl+0x16c/0x1f0 [ 109.852907][ T6472] should_fail_ex+0x512/0x640 [ 109.852946][ T6472] ? __kvmalloc_node_noprof+0x122/0x600 [ 109.852994][ T6472] should_failslab+0xc2/0x120 [ 109.853045][ T6472] __kvmalloc_node_noprof+0x135/0x600 [ 109.853089][ T6472] ? alloc_fdtable+0x158/0x2b0 [ 109.853135][ T6472] ? alloc_fdtable+0x158/0x2b0 [ 109.853176][ T6472] alloc_fdtable+0x158/0x2b0 [ 109.853218][ T6472] dup_fd+0x83b/0xb90 [ 109.853272][ T6472] __do_sys_close_range+0x4ca/0x730 [ 109.853319][ T6472] ? xfd_validate_state+0x5d/0x180 [ 109.853350][ T6472] ? __pfx___do_sys_close_range+0x10/0x10 [ 109.853396][ T6472] ? rcu_is_watching+0x12/0xc0 [ 109.853434][ T6472] do_syscall_64+0xcd/0x260 [ 109.853466][ T6472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.853498][ T6472] RIP: 0033:0x7f490358d169 [ 109.853520][ T6472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.853550][ T6472] RSP: 002b:00007f4904469038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 109.853579][ T6472] RAX: ffffffffffffffda RBX: 00007f49037a5fa0 RCX: 00007f490358d169 [ 109.853599][ T6472] RDX: 0000000000000002 RSI: 0000000000000008 RDI: 0000000000000002 [ 109.853617][ T6472] RBP: 00007f490360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 109.853636][ T6472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.853654][ T6472] R13: 0000000000000000 R14: 00007f49037a5fa0 R15: 00007ffff235f9f8 [ 109.853695][ T6472] [ 110.156855][ T6465] vivid-003: RDS Radio Text: inactive [ 110.163005][ T6465] vivid-003: RDS Traffic Announcement: false inactive [ 110.172333][ T6465] vivid-003: RDS Traffic Program: false inactive [ 110.179797][ T6465] vivid-003: RDS Music: false inactive [ 110.204244][ T6465] vivid-003: ================== END STATUS ================== [ 112.074904][ T6530] vivid-003: ================= START STATUS ================= [ 112.108125][ T6530] vivid-003: Radio HW Seek Mode: Bounded [ 112.113876][ T6530] vivid-003: Radio Programmable HW Seek: false [ 112.155448][ T6530] vivid-003: RDS Rx I/O Mode: Block I/O [ 112.188292][ T6530] vivid-003: Generate RBDS Instead of RDS: false [ 112.195351][ T6530] vivid-003: RDS Reception: true [ 112.225335][ T6530] vivid-003: RDS Program Type: 0 inactive [ 112.266203][ T6530] vivid-003: RDS PS Name: inactive [ 112.354243][ T6530] vivid-003: RDS Radio Text: inactive [ 112.435276][ T6530] vivid-003: RDS Traffic Announcement: false inactive [ 112.444157][ T6530] vivid-003: RDS Traffic Program: false inactive [ 112.467929][ T6530] vivid-003: RDS Music: false inactive [ 112.482219][ T6530] vivid-003: ================== END STATUS ================== [ 112.905976][ T6550] FAULT_INJECTION: forcing a failure. [ 112.905976][ T6550] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 112.993816][ T6550] CPU: 0 UID: 0 PID: 6550 Comm: syz.1.159 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 112.993864][ T6550] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.993884][ T6550] Call Trace: [ 112.993893][ T6550] [ 112.993906][ T6550] dump_stack_lvl+0x16c/0x1f0 [ 112.993943][ T6550] should_fail_ex+0x512/0x640 [ 112.993989][ T6550] should_fail_alloc_page+0xe7/0x130 [ 112.994044][ T6550] prepare_alloc_pages.constprop.0+0x172/0x570 [ 112.994090][ T6550] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 112.994145][ T6550] ? kasan_save_stack+0x33/0x60 [ 112.994188][ T6550] ? __kasan_kmalloc+0xaa/0xb0 [ 112.994231][ T6550] ? __kmalloc_noprof+0x223/0x510 [ 112.994276][ T6550] ? bio_kmalloc+0x41/0x70 [ 112.994322][ T6550] ? blk_rq_map_kern+0x39a/0x710 [ 112.994359][ T6550] ? scsi_execute_cmd+0xc14/0xf40 [ 112.994391][ T6550] ? sd_pr_out_command.isra.0+0x26e/0x3d0 [ 112.994430][ T6550] ? blkdev_pr_preempt+0x2a9/0x310 [ 112.994465][ T6550] ? blkdev_common_ioctl+0x8d1/0x2250 [ 112.994501][ T6550] ? blkdev_ioctl+0x1cb/0x6d0 [ 112.994535][ T6550] ? __x64_sys_ioctl+0x190/0x200 [ 112.994577][ T6550] ? do_syscall_64+0xcd/0x260 [ 112.994606][ T6550] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.994643][ T6550] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.994710][ T6550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.994760][ T6550] ? policy_nodemask+0xea/0x4e0 [ 112.994813][ T6550] alloc_pages_mpol+0x1fb/0x540 [ 112.994865][ T6550] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 112.994917][ T6550] ? __kmalloc_noprof+0x242/0x510 [ 112.994962][ T6550] ? __pfx___debug_object_init+0x10/0x10 [ 112.995012][ T6550] ? is_bpf_text_address+0x94/0x1a0 [ 112.995058][ T6550] alloc_pages_noprof+0x131/0x390 [ 112.995110][ T6550] blk_rq_map_kern+0x3f5/0x710 [ 112.995153][ T6550] scsi_execute_cmd+0xc14/0xf40 [ 112.995189][ T6550] ? stack_trace_save+0x8e/0xc0 [ 112.995223][ T6550] ? __pfx_stack_trace_save+0x10/0x10 [ 112.995257][ T6550] ? stack_depot_save_flags+0x29/0x9c0 [ 112.995301][ T6550] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 112.995337][ T6550] ? kasan_save_stack+0x42/0x60 [ 112.995381][ T6550] ? kasan_save_stack+0x33/0x60 [ 112.995424][ T6550] ? kasan_save_track+0x14/0x30 [ 112.995466][ T6550] ? kasan_save_free_info+0x3b/0x60 [ 112.995506][ T6550] sd_pr_out_command.isra.0+0x26e/0x3d0 [ 112.995550][ T6550] ? __pfx_sd_pr_out_command.isra.0+0x10/0x10 [ 112.995596][ T6550] ? __lock_acquire+0xaa4/0x1ba0 [ 112.995654][ T6550] ? find_held_lock+0x2b/0x80 [ 112.995685][ T6550] ? __might_fault+0xe3/0x190 [ 112.995714][ T6550] ? __might_fault+0x13b/0x190 [ 112.995747][ T6550] ? block_pr_type_to_scsi+0x62/0x80 [ 112.995781][ T6550] blkdev_pr_preempt+0x2a9/0x310 [ 112.995820][ T6550] ? __pfx_blkdev_pr_preempt+0x10/0x10 [ 112.995869][ T6550] blkdev_common_ioctl+0x8d1/0x2250 [ 112.995905][ T6550] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 112.995951][ T6550] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.996000][ T6550] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 112.996040][ T6550] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 112.996097][ T6550] ? find_held_lock+0x2b/0x80 [ 112.996133][ T6550] blkdev_ioctl+0x1cb/0x6d0 [ 112.996170][ T6550] ? __pfx_blkdev_ioctl+0x10/0x10 [ 112.996210][ T6550] ? __pfx_blkdev_ioctl+0x10/0x10 [ 112.996249][ T6550] __x64_sys_ioctl+0x190/0x200 [ 112.996289][ T6550] do_syscall_64+0xcd/0x260 [ 112.996323][ T6550] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.996355][ T6550] RIP: 0033:0x7f490358d169 [ 112.996379][ T6550] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.996410][ T6550] RSP: 002b:00007f4904469038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.996440][ T6550] RAX: ffffffffffffffda RBX: 00007f49037a5fa0 RCX: 00007f490358d169 [ 112.996461][ T6550] RDX: 0000000000000005 RSI: 00000000401870cb RDI: 0000000000000005 [ 112.996481][ T6550] RBP: 00007f490360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 112.996500][ T6550] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.996519][ T6550] R13: 0000000000000000 R14: 00007f49037a5fa0 R15: 00007ffff235f9f8 [ 112.996553][ T6550] [ 114.059835][ T6565] vivid-003: ================= START STATUS ================= [ 114.067545][ T6565] vivid-003: Radio HW Seek Mode: Bounded [ 114.103009][ T6565] vivid-003: Radio Programmable HW Seek: false [ 114.133714][ T6565] vivid-003: RDS Rx I/O Mode: Block I/O [ 114.179428][ T6565] vivid-003: Generate RBDS Instead of RDS: false [ 114.202208][ T6565] vivid-003: RDS Reception: true [ 114.256942][ T6565] vivid-003: RDS Program Type: 0 inactive [ 114.263301][ T6565] vivid-003: RDS PS Name: inactive [ 114.268815][ T6565] vivid-003: RDS Radio Text: inactive [ 114.274431][ T6565] vivid-003: RDS Traffic Announcement: false inactive [ 114.286794][ T6565] vivid-003: RDS Traffic Program: false inactive [ 114.295609][ T6565] vivid-003: RDS Music: false inactive [ 114.307263][ T6565] vivid-003: ================== END STATUS ================== [ 114.771315][ T6584] vivid-003: ================= START STATUS ================= [ 114.779203][ T6584] vivid-003: Radio HW Seek Mode: Bounded [ 114.785059][ T6584] vivid-003: Radio Programmable HW Seek: false [ 114.838752][ T6584] vivid-003: RDS Rx I/O Mode: Block I/O [ 114.844408][ T6584] vivid-003: Generate RBDS Instead of RDS: false [ 114.868026][ T6584] vivid-003: RDS Reception: true [ 114.873088][ T6584] vivid-003: RDS Program Type: 0 inactive [ 114.940615][ T6584] vivid-003: RDS PS Name: inactive [ 114.945930][ T6584] vivid-003: RDS Radio Text: inactive [ 114.990263][ T6584] vivid-003: RDS Traffic Announcement: false inactive [ 115.033593][ T6584] vivid-003: RDS Traffic Program: false inactive [ 115.053405][ T6584] vivid-003: RDS Music: false inactive [ 115.060877][ T6594] FAULT_INJECTION: forcing a failure. [ 115.060877][ T6594] name failslab, interval 1, probability 0, space 0, times 0 [ 115.082790][ T6584] vivid-003: ================== END STATUS ================== [ 115.093789][ T6594] CPU: 1 UID: 0 PID: 6594 Comm: syz.0.171 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 115.093836][ T6594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.093857][ T6594] Call Trace: [ 115.093867][ T6594] [ 115.093880][ T6594] dump_stack_lvl+0x16c/0x1f0 [ 115.093917][ T6594] should_fail_ex+0x512/0x640 [ 115.093957][ T6594] ? __kmalloc_noprof+0xbf/0x510 [ 115.094006][ T6594] ? lsm_blob_alloc+0x68/0x90 [ 115.094037][ T6594] should_failslab+0xc2/0x120 [ 115.094089][ T6594] __kmalloc_noprof+0xd2/0x510 [ 115.094141][ T6594] lsm_blob_alloc+0x68/0x90 [ 115.094175][ T6594] security_sk_alloc+0x30/0x270 [ 115.094217][ T6594] sk_prot_alloc+0x1c7/0x2a0 [ 115.094271][ T6594] sk_alloc+0x36/0xc20 [ 115.094311][ T6594] __netlink_create+0x5e/0x2c0 [ 115.094349][ T6594] ? __wake_up+0x3f/0x60 [ 115.094399][ T6594] netlink_create+0x39e/0x620 [ 115.094442][ T6594] ? __pfx_genl_bind+0x10/0x10 [ 115.094491][ T6594] ? __pfx_genl_unbind+0x10/0x10 [ 115.094545][ T6594] ? __pfx_genl_release+0x10/0x10 [ 115.094577][ T6594] __sock_create+0x335/0x8d0 [ 115.094614][ T6594] __sys_socket+0x14d/0x260 [ 115.094646][ T6594] ? __pfx___sys_socket+0x10/0x10 [ 115.094681][ T6594] ? rcu_is_watching+0x12/0xc0 [ 115.094717][ T6594] __x64_sys_socket+0x72/0xb0 [ 115.094748][ T6594] ? lockdep_hardirqs_on+0x7c/0x110 [ 115.094800][ T6594] do_syscall_64+0xcd/0x260 [ 115.094833][ T6594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.094865][ T6594] RIP: 0033:0x7f466cf8d169 [ 115.094890][ T6594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.094921][ T6594] RSP: 002b:00007f466dddc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 115.094951][ T6594] RAX: ffffffffffffffda RBX: 00007f466d1a5fa0 RCX: 00007f466cf8d169 [ 115.094972][ T6594] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 115.094992][ T6594] RBP: 00007f466d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.095011][ T6594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.095030][ T6594] R13: 0000000000000000 R14: 00007f466d1a5fa0 R15: 00007ffd20ac5ea8 [ 115.095065][ T6594] [ 115.476319][ T6600] FAULT_INJECTION: forcing a failure. [ 115.476319][ T6600] name failslab, interval 1, probability 0, space 0, times 0 [ 115.515395][ T6600] CPU: 0 UID: 0 PID: 6600 Comm: syz.3.172 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 115.515440][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 115.515458][ T6600] Call Trace: [ 115.515468][ T6600] [ 115.515480][ T6600] dump_stack_lvl+0x16c/0x1f0 [ 115.515516][ T6600] should_fail_ex+0x512/0x640 [ 115.515556][ T6600] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 115.515607][ T6600] should_failslab+0xc2/0x120 [ 115.515657][ T6600] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 115.515703][ T6600] ? __proc_create+0xc3/0x8c0 [ 115.515735][ T6600] ? __proc_create+0x2ce/0x8c0 [ 115.515772][ T6600] __proc_create+0x2ce/0x8c0 [ 115.515806][ T6600] ? __pfx___proc_create+0x10/0x10 [ 115.515839][ T6600] ? _raw_spin_unlock+0x28/0x50 [ 115.515895][ T6600] proc_create_reg+0x7d/0x180 [ 115.515932][ T6600] proc_create_net_data+0x8e/0x1b0 [ 115.515967][ T6600] ? __pfx_proc_create_net_data+0x10/0x10 [ 115.516000][ T6600] ? mptcp_net_init+0x4d0/0x620 [ 115.516042][ T6600] ? udp_pernet_init+0x61a/0x830 [ 115.516082][ T6600] ? __pfx_udplite4_proc_init_net+0x10/0x10 [ 115.516134][ T6600] udplite4_proc_init_net+0x57/0x80 [ 115.516184][ T6600] ops_init+0x1df/0x5f0 [ 115.516232][ T6600] setup_net+0x21e/0x850 [ 115.516280][ T6600] ? __pfx_setup_net+0x10/0x10 [ 115.516324][ T6600] ? lockdep_init_map_type+0x5c/0x280 [ 115.516370][ T6600] ? __pfx_down_read_killable+0x10/0x10 [ 115.516414][ T6600] ? debug_mutex_init+0x37/0x70 [ 115.516449][ T6600] copy_net_ns+0x2a6/0x5f0 [ 115.516503][ T6600] create_new_namespaces+0x3ea/0xad0 [ 115.516549][ T6600] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 115.516593][ T6600] ksys_unshare+0x45b/0xa40 [ 115.516638][ T6600] ? __pfx_ksys_unshare+0x10/0x10 [ 115.516679][ T6600] ? xfd_validate_state+0x5d/0x180 [ 115.516710][ T6600] ? rcu_is_watching+0x12/0xc0 [ 115.516747][ T6600] __x64_sys_unshare+0x31/0x40 [ 115.516789][ T6600] do_syscall_64+0xcd/0x260 [ 115.516821][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.516852][ T6600] RIP: 0033:0x7f924878d169 [ 115.516876][ T6600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.516906][ T6600] RSP: 002b:00007f92495ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 115.516935][ T6600] RAX: ffffffffffffffda RBX: 00007f92489a5fa0 RCX: 00007f924878d169 [ 115.516956][ T6600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 115.516974][ T6600] RBP: 00007f924880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.516994][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.517013][ T6600] R13: 0000000000000000 R14: 00007f92489a5fa0 R15: 00007ffea1632cc8 [ 115.517053][ T6600] [ 116.055729][ T6607] vivid-003: ================= START STATUS ================= [ 116.065145][ T6607] vivid-003: Radio HW Seek Mode: Bounded [ 116.072195][ T6607] vivid-003: Radio Programmable HW Seek: false [ 116.078584][ T6607] vivid-003: RDS Rx I/O Mode: Block I/O [ 116.085215][ T6607] vivid-003: Generate RBDS Instead of RDS: false [ 116.116979][ T6607] vivid-003: RDS Reception: true [ 116.131603][ T6607] vivid-003: RDS Program Type: 0 inactive [ 116.137439][ T6607] vivid-003: RDS PS Name: inactive [ 116.151135][ T6607] vivid-003: RDS Radio Text: inactive [ 116.156796][ T6607] vivid-003: RDS Traffic Announcement: false inactive [ 116.167453][ T6607] vivid-003: RDS Traffic Program: false inactive [ 116.175843][ T6607] vivid-003: RDS Music: false inactive [ 116.184546][ T6607] vivid-003: ================== END STATUS ================== [ 116.300519][ T6611] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[6611] [ 116.375030][ T6615] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 117.098886][ T6640] FAULT_INJECTION: forcing a failure. [ 117.098886][ T6640] name failslab, interval 1, probability 0, space 0, times 0 [ 117.128412][ T6640] CPU: 1 UID: 0 PID: 6640 Comm: syz.1.187 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 117.128456][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.128474][ T6640] Call Trace: [ 117.128484][ T6640] [ 117.128495][ T6640] dump_stack_lvl+0x16c/0x1f0 [ 117.128531][ T6640] should_fail_ex+0x512/0x640 [ 117.128570][ T6640] ? __kvmalloc_node_noprof+0x122/0x600 [ 117.128617][ T6640] should_failslab+0xc2/0x120 [ 117.128666][ T6640] __kvmalloc_node_noprof+0x135/0x600 [ 117.128713][ T6640] ? io_alloc_cache_init+0x33/0x170 [ 117.128748][ T6640] ? io_alloc_cache_init+0x33/0x170 [ 117.128776][ T6640] io_alloc_cache_init+0x33/0x170 [ 117.128807][ T6640] io_uring_setup+0x61d/0x2080 [ 117.128850][ T6640] ? __pfx_io_uring_setup+0x10/0x10 [ 117.128890][ T6640] ? do_futex+0x122/0x350 [ 117.128926][ T6640] ? __pfx_do_futex+0x10/0x10 [ 117.128960][ T6640] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 117.129007][ T6640] ? rcu_is_watching+0x12/0xc0 [ 117.129040][ T6640] __x64_sys_io_uring_setup+0xc2/0x170 [ 117.129079][ T6640] do_syscall_64+0xcd/0x260 [ 117.129106][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.129132][ T6640] RIP: 0033:0x7f490358d169 [ 117.129158][ T6640] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.129185][ T6640] RSP: 002b:00007f4904469038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 117.129211][ T6640] RAX: ffffffffffffffda RBX: 00007f49037a5fa0 RCX: 00007f490358d169 [ 117.129229][ T6640] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000059 [ 117.129244][ T6640] RBP: 00007f490360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 117.129260][ T6640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.129275][ T6640] R13: 0000000000000000 R14: 00007f49037a5fa0 R15: 00007ffff235f9f8 [ 117.129303][ T6640] [ 118.209376][ T6666] FAULT_INJECTION: forcing a failure. [ 118.209376][ T6666] name fail_futex, interval 1, probability 0, space 0, times 0 [ 118.226460][ T6666] CPU: 0 UID: 0 PID: 6666 Comm: syz.2.195 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 118.226506][ T6666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.226525][ T6666] Call Trace: [ 118.226535][ T6666] [ 118.226547][ T6666] dump_stack_lvl+0x16c/0x1f0 [ 118.226584][ T6666] should_fail_ex+0x512/0x640 [ 118.226623][ T6666] ? irqentry_exit+0x3b/0x90 [ 118.226654][ T6666] get_futex_key+0x49e/0x1000 [ 118.226692][ T6666] ? __pfx_get_futex_key+0x10/0x10 [ 118.226724][ T6666] ? find_held_lock+0x2b/0x80 [ 118.226757][ T6666] ? get_pid_task+0xfc/0x250 [ 118.226819][ T6666] futex_wake+0xe7/0x4e0 [ 118.226864][ T6666] ? __pfx_futex_wake+0x10/0x10 [ 118.226912][ T6666] ? ksys_write+0x190/0x240 [ 118.226960][ T6666] do_futex+0x1e3/0x350 [ 118.226996][ T6666] ? __pfx_do_futex+0x10/0x10 [ 118.227039][ T6666] __x64_sys_futex+0x1e0/0x4c0 [ 118.227077][ T6666] ? fput+0x70/0xf0 [ 118.227106][ T6666] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.227143][ T6666] ? ksys_write+0x1b9/0x240 [ 118.227185][ T6666] ? __pfx_ksys_write+0x10/0x10 [ 118.227238][ T6666] ? rcu_is_watching+0x12/0xc0 [ 118.227277][ T6666] do_syscall_64+0xcd/0x260 [ 118.227310][ T6666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.227342][ T6666] RIP: 0033:0x7f14a0d8d169 [ 118.227366][ T6666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.227397][ T6666] RSP: 002b:00007f14a1bf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.227427][ T6666] RAX: ffffffffffffffda RBX: 00007f14a0fa5fa8 RCX: 00007f14a0d8d169 [ 118.227447][ T6666] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f14a0fa5fac [ 118.227466][ T6666] RBP: 00007f14a0fa5fa0 R08: 00007f14a1bf7000 R09: 0000000000000000 [ 118.227486][ T6666] R10: 000000000002fdef R11: 0000000000000246 R12: 00007f14a0fa5fac [ 118.227506][ T6666] R13: 0000000000000000 R14: 00007ffe7f5f4340 R15: 00007ffe7f5f4428 [ 118.227540][ T6666] [ 118.742467][ T6675] vivid-003: ================= START STATUS ================= [ 118.778059][ T6675] vivid-003: Radio HW Seek Mode: Bounded [ 118.793591][ T6675] vivid-003: Radio Programmable HW Seek: false [ 118.854130][ T6675] vivid-003: RDS Rx I/O Mode: Block I/O [ 118.859987][ T6675] vivid-003: Generate RBDS Instead of RDS: false [ 118.866437][ T6675] vivid-003: RDS Reception: true [ 118.898854][ T6675] vivid-003: RDS Program Type: 0 inactive [ 118.910008][ T6675] vivid-003: RDS PS Name: inactive [ 118.915332][ T6675] vivid-003: RDS Radio Text: inactive [ 118.921543][ T6675] vivid-003: RDS Traffic Announcement: false inactive [ 118.928737][ T6675] vivid-003: RDS Traffic Program: false inactive [ 118.935387][ T6675] vivid-003: RDS Music: false inactive [ 118.944608][ T6675] vivid-003: ================== END STATUS ================== [ 119.826576][ T6700] FAULT_INJECTION: forcing a failure. [ 119.826576][ T6700] name failslab, interval 1, probability 0, space 0, times 0 [ 119.846038][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.3.206 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 119.846087][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.846111][ T6700] Call Trace: [ 119.846121][ T6700] [ 119.846133][ T6700] dump_stack_lvl+0x16c/0x1f0 [ 119.846183][ T6700] should_fail_ex+0x512/0x640 [ 119.846222][ T6700] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 119.846273][ T6700] should_failslab+0xc2/0x120 [ 119.846324][ T6700] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 119.846370][ T6700] ? do_timer_create+0x18a/0x14e0 [ 119.846418][ T6700] do_timer_create+0x18a/0x14e0 [ 119.846463][ T6700] ? do_futex+0x122/0x350 [ 119.846498][ T6700] ? __pfx_do_timer_create+0x10/0x10 [ 119.846540][ T6700] ? __pfx_do_futex+0x10/0x10 [ 119.846585][ T6700] __x64_sys_timer_create+0x199/0x1d0 [ 119.846630][ T6700] ? __pfx___x64_sys_timer_create+0x10/0x10 [ 119.846677][ T6700] ? xfd_validate_state+0x5d/0x180 [ 119.846709][ T6700] ? rcu_is_watching+0x12/0xc0 [ 119.846746][ T6700] do_syscall_64+0xcd/0x260 [ 119.846778][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.846809][ T6700] RIP: 0033:0x7f924878d169 [ 119.846838][ T6700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.846869][ T6700] RSP: 002b:00007f92495ec038 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 119.846913][ T6700] RAX: ffffffffffffffda RBX: 00007f92489a5fa0 RCX: 00007f924878d169 [ 119.846934][ T6700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 119.846953][ T6700] RBP: 00007f924880e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 119.846972][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.846991][ T6700] R13: 0000000000000000 R14: 00007f92489a5fa0 R15: 00007ffea1632cc8 [ 119.847026][ T6700] [ 120.286000][ T6711] sctp: [Deprecated]: syz.1.208 (pid 6711) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.286000][ T6711] Use struct sctp_sack_info instead [ 121.698988][ T6726] FAULT_INJECTION: forcing a failure. [ 121.698988][ T6726] name failslab, interval 1, probability 0, space 0, times 0 [ 121.713426][ T6726] CPU: 0 UID: 0 PID: 6726 Comm: syz.1.215 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 121.713470][ T6726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 121.713489][ T6726] Call Trace: [ 121.713499][ T6726] [ 121.713510][ T6726] dump_stack_lvl+0x16c/0x1f0 [ 121.713547][ T6726] should_fail_ex+0x512/0x640 [ 121.713588][ T6726] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 121.713638][ T6726] should_failslab+0xc2/0x120 [ 121.713703][ T6726] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 121.713750][ T6726] ? mark_held_locks+0x49/0x80 [ 121.713791][ T6726] ? key_alloc+0x3e0/0x1390 [ 121.713842][ T6726] key_alloc+0x3e0/0x1390 [ 121.713897][ T6726] ? __pfx_key_alloc+0x10/0x10 [ 121.713943][ T6726] ? __pfx_key_default_cmp+0x10/0x10 [ 121.713995][ T6726] ? __pfx_keyring_search_iterator+0x10/0x10 [ 121.714030][ T6726] keyring_alloc+0x44/0xc0 [ 121.714081][ T6726] look_up_user_keyrings+0x46d/0x760 [ 121.714128][ T6726] ? __pfx_look_up_user_keyrings+0x10/0x10 [ 121.714174][ T6726] ? __pfx_futex_wake+0x10/0x10 [ 121.714218][ T6726] lookup_user_key+0xdf6/0x1300 [ 121.714259][ T6726] ? find_held_lock+0x2b/0x80 [ 121.714291][ T6726] ? __pfx_lookup_user_key+0x10/0x10 [ 121.714341][ T6726] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 121.714389][ T6726] ? __x64_sys_futex+0x1e0/0x4c0 [ 121.714426][ T6726] ? __x64_sys_futex+0x1e9/0x4c0 [ 121.714467][ T6726] keyctl_session_to_parent+0x28/0xaf0 [ 121.714507][ T6726] ? rcu_is_watching+0x12/0xc0 [ 121.714540][ T6726] __do_sys_keyctl+0x25c/0x590 [ 121.714580][ T6726] do_syscall_64+0xcd/0x260 [ 121.714614][ T6726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.714646][ T6726] RIP: 0033:0x7f490358d169 [ 121.714676][ T6726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.714706][ T6726] RSP: 002b:00007f4904469038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 121.714736][ T6726] RAX: ffffffffffffffda RBX: 00007f49037a5fa0 RCX: 00007f490358d169 [ 121.714756][ T6726] RDX: 0000000000004000 RSI: 0000000000000000 RDI: 0000000000000012 [ 121.714773][ T6726] RBP: 00007f490360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 121.714791][ T6726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.714808][ T6726] R13: 0000000000000000 R14: 00007f49037a5fa0 R15: 00007ffff235f9f8 [ 121.714839][ T6726] [ 122.485711][ T6745] FAULT_INJECTION: forcing a failure. [ 122.485711][ T6745] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.502769][ T6745] CPU: 1 UID: 0 PID: 6745 Comm: syz.0.220 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 122.502813][ T6745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.502831][ T6745] Call Trace: [ 122.502841][ T6745] [ 122.502852][ T6745] dump_stack_lvl+0x16c/0x1f0 [ 122.502888][ T6745] should_fail_ex+0x512/0x640 [ 122.502934][ T6745] should_fail_alloc_page+0xe7/0x130 [ 122.502982][ T6745] prepare_alloc_pages.constprop.0+0x172/0x570 [ 122.503022][ T6745] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 122.503065][ T6745] ? __alloc_frozen_pages_noprof+0x400/0x24d0 [ 122.503125][ T6745] ? find_held_lock+0x2b/0x80 [ 122.503158][ T6745] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 122.503208][ T6745] ? find_held_lock+0x2b/0x80 [ 122.503251][ T6745] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.503302][ T6745] ? policy_nodemask+0xea/0x4e0 [ 122.503355][ T6745] alloc_pages_mpol+0x1fb/0x540 [ 122.503407][ T6745] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 122.503457][ T6745] ? do_raw_spin_lock+0x12c/0x2b0 [ 122.503506][ T6745] ? find_held_lock+0x2b/0x80 [ 122.503541][ T6745] alloc_pages_noprof+0x131/0x390 [ 122.503591][ T6745] __pmd_alloc+0x3f/0x870 [ 122.503642][ T6745] copy_page_range+0x3de1/0x5790 [ 122.503696][ T6745] ? mas_wr_store_entry+0xa17/0x2550 [ 122.503741][ T6745] ? __pfx_copy_page_range+0x10/0x10 [ 122.503781][ T6745] ? mas_store+0x93a/0x10c0 [ 122.503822][ T6745] ? __pfx_mas_store+0x10/0x10 [ 122.503856][ T6745] ? down_write+0x14d/0x200 [ 122.503897][ T6745] ? up_write+0x1b2/0x520 [ 122.503946][ T6745] copy_process+0x8651/0x9130 [ 122.504006][ T6745] ? __pfx_copy_process+0x10/0x10 [ 122.504043][ T6745] ? __pfx___futex_wait+0x10/0x10 [ 122.504112][ T6745] kernel_clone+0xfc/0x960 [ 122.504156][ T6745] ? __pfx_kernel_clone+0x10/0x10 [ 122.504213][ T6745] __do_sys_clone+0xce/0x120 [ 122.504254][ T6745] ? __pfx___do_sys_clone+0x10/0x10 [ 122.504308][ T6745] ? __pfx___might_resched+0x10/0x10 [ 122.504362][ T6745] ? rcu_is_watching+0x12/0xc0 [ 122.504400][ T6745] do_syscall_64+0xcd/0x260 [ 122.504434][ T6745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.504465][ T6745] RIP: 0033:0x7f466cf8d169 [ 122.504490][ T6745] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.504520][ T6745] RSP: 002b:00007f466dddbfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 122.504549][ T6745] RAX: ffffffffffffffda RBX: 00007f466d1a5fa0 RCX: 00007f466cf8d169 [ 122.504569][ T6745] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 122.504588][ T6745] RBP: 00007f466d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.504607][ T6745] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 122.504632][ T6745] R13: 0000000000000000 R14: 00007f466d1a5fa0 R15: 00007ffd20ac5ea8 [ 122.504668][ T6745] [ 122.960762][ T6753] FAULT_INJECTION: forcing a failure. [ 122.960762][ T6753] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 122.974189][ T6753] CPU: 1 UID: 0 PID: 6753 Comm: syz.0.223 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 122.974230][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.974248][ T6753] Call Trace: [ 122.974257][ T6753] [ 122.974268][ T6753] dump_stack_lvl+0x16c/0x1f0 [ 122.974304][ T6753] should_fail_ex+0x512/0x640 [ 122.974348][ T6753] _copy_from_user+0x2e/0xd0 [ 122.974391][ T6753] memdup_user+0x7d/0xe0 [ 122.974429][ T6753] strndup_user+0x78/0xe0 [ 122.974468][ T6753] __x64_sys_fsopen+0x9c/0x240 [ 122.974502][ T6753] do_syscall_64+0xcd/0x260 [ 122.974535][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.974567][ T6753] RIP: 0033:0x7f466cf8d169 [ 122.974601][ T6753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.974632][ T6753] RSP: 002b:00007f466dddc038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 122.974662][ T6753] RAX: ffffffffffffffda RBX: 00007f466d1a5fa0 RCX: 00007f466cf8d169 [ 122.974683][ T6753] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 122.974701][ T6753] RBP: 00007f466d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.974720][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.974738][ T6753] R13: 0000000000000000 R14: 00007f466d1a5fa0 R15: 00007ffd20ac5ea8 [ 122.974772][ T6753] [ 123.175492][ T6754] FAULT_INJECTION: forcing a failure. [ 123.175492][ T6754] name fail_futex, interval 1, probability 0, space 0, times 0 [ 123.234798][ T6754] CPU: 0 UID: 0 PID: 6754 Comm: syz.1.222 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 123.234842][ T6754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.234861][ T6754] Call Trace: [ 123.234870][ T6754] [ 123.234882][ T6754] dump_stack_lvl+0x16c/0x1f0 [ 123.234918][ T6754] should_fail_ex+0x512/0x640 [ 123.234962][ T6754] get_futex_key+0x49e/0x1000 [ 123.235001][ T6754] ? __pfx_get_futex_key+0x10/0x10 [ 123.235033][ T6754] ? find_held_lock+0x2b/0x80 [ 123.235066][ T6754] ? get_pid_task+0xfc/0x250 [ 123.235120][ T6754] futex_wake+0xe7/0x4e0 [ 123.235165][ T6754] ? __pfx_futex_wake+0x10/0x10 [ 123.235214][ T6754] ? ksys_write+0x190/0x240 [ 123.235261][ T6754] do_futex+0x1e3/0x350 [ 123.235298][ T6754] ? __pfx_do_futex+0x10/0x10 [ 123.235351][ T6754] __x64_sys_futex+0x1e0/0x4c0 [ 123.235391][ T6754] ? fput+0x70/0xf0 [ 123.235418][ T6754] ? __pfx___x64_sys_futex+0x10/0x10 [ 123.235455][ T6754] ? ksys_write+0x1b9/0x240 [ 123.235498][ T6754] ? __pfx_ksys_write+0x10/0x10 [ 123.235538][ T6754] ? rcu_is_watching+0x12/0xc0 [ 123.235575][ T6754] do_syscall_64+0xcd/0x260 [ 123.235608][ T6754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.235639][ T6754] RIP: 0033:0x7f490358d169 [ 123.235663][ T6754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.235693][ T6754] RSP: 002b:00007f49044690e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.235722][ T6754] RAX: ffffffffffffffda RBX: 00007f49037a5fa8 RCX: 00007f490358d169 [ 123.235742][ T6754] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f49037a5fac [ 123.235762][ T6754] RBP: 00007f49037a5fa0 R08: 00007f490446a000 R09: 0000000000000000 [ 123.235786][ T6754] R10: 000000000002fdef R11: 0000000000000246 R12: 00007f49037a5fac [ 123.235806][ T6754] R13: 0000000000000000 R14: 00007ffff235f910 R15: 00007ffff235f9f8 [ 123.235839][ T6754] [ 124.785339][ T6783] netlink: 4 bytes leftover after parsing attributes in process `syz.0.231'. [ 125.477830][ T6795] nbd0: detected capacity change from 0 to 68719476736 [ 125.543561][ T6387] block nbd0: Send control failed (result -22) [ 125.586599][ T6387] block nbd0: Request send failed, requeueing [ 125.651308][ T5848] block nbd0: Receive control failed (result -32) [ 125.663641][ T99] block nbd0: Dead connection, failed to find a fallback [ 125.671760][ T99] block nbd0: shutting down sockets [ 125.677398][ T99] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.687523][ T99] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.696139][ T6387] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.862026][ T6387] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.870462][ T6387] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.880000][ T6387] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.888265][ T6387] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.897484][ T6387] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.909326][ T6387] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.925425][ T6387] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.934265][ T6387] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.943925][ T6387] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.952259][ T6387] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.961740][ T6387] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.970672][ T6387] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 125.980193][ T6387] Buffer I/O error on dev nbd0, logical block 0, async page read [ 125.988525][ T6387] ldm_validate_partition_table(): Disk read failed. [ 125.995600][ T6387] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.005108][ T6387] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.049087][ T6387] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 126.338131][ T6387] Buffer I/O error on dev nbd0, logical block 0, async page read [ 126.346594][ T6387] Dev nbd0: unable to read RDB block 0 [ 126.353973][ T6387] nbd0: unable to read partition table [ 126.363922][ T6387] ldm_validate_partition_table(): Disk read failed. [ 126.372521][ T6387] Dev nbd0: unable to read RDB block 0 [ 126.379661][ T6387] nbd0: unable to read partition table [ 126.390693][ T6811] vivid-003: ================= START STATUS ================= [ 126.444100][ T6811] vivid-003: Radio HW Seek Mode: Bounded [ 126.458174][ T6811] vivid-003: Radio Programmable HW Seek: false [ 126.464427][ T6811] vivid-003: RDS Rx I/O Mode: Block I/O [ 126.483857][ T6811] vivid-003: Generate RBDS Instead of RDS: false [ 126.490651][ T6811] vivid-003: RDS Reception: true [ 126.496529][ T6811] vivid-003: RDS Program Type: 0 inactive [ 126.504703][ T6811] vivid-003: RDS PS Name: inactive [ 126.527236][ T6811] vivid-003: RDS Radio Text: inactive [ 126.534725][ T6811] vivid-003: RDS Traffic Announcement: false inactive [ 126.541736][ T6811] vivid-003: RDS Traffic Program: false inactive [ 126.551044][ T6811] vivid-003: RDS Music: false inactive [ 126.556609][ T6811] vivid-003: ================== END STATUS ================== [ 126.992307][ T6819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.240'. [ 127.144232][ T6821] syz.0.241 uses obsolete (PF_INET,SOCK_PACKET) [ 127.526734][ T6836] FAULT_INJECTION: forcing a failure. [ 127.526734][ T6836] name failslab, interval 1, probability 0, space 0, times 0 [ 127.573930][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.3.246 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 127.573975][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.573994][ T6836] Call Trace: [ 127.574004][ T6836] [ 127.574016][ T6836] dump_stack_lvl+0x16c/0x1f0 [ 127.574063][ T6836] should_fail_ex+0x512/0x640 [ 127.574097][ T6836] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 127.574137][ T6836] should_failslab+0xc2/0x120 [ 127.574179][ T6836] __kmalloc_cache_noprof+0x6a/0x3e0 [ 127.574214][ T6836] ? ktime_get_coarse_real_ts64_mg+0x26c/0x320 [ 127.574251][ T6836] ? ktime_get_coarse_real_ts64_mg+0x200/0x320 [ 127.574285][ T6836] ? hugetlb_vma_lock_alloc+0xc2/0x1f0 [ 127.574327][ T6836] hugetlb_vma_lock_alloc+0xc2/0x1f0 [ 127.574365][ T6836] hugetlb_reserve_pages+0x149/0x1080 [ 127.574402][ T6836] ? __pfx_hugetlb_reserve_pages+0x10/0x10 [ 127.574436][ T6836] ? atime_needs_update+0x8b/0x710 [ 127.574474][ T6836] hugetlbfs_file_mmap+0x52c/0x7f0 [ 127.574504][ T6836] __mmap_region+0x1596/0x27c0 [ 127.574547][ T6836] ? __pfx___mmap_region+0x10/0x10 [ 127.574587][ T6836] ? kernel_text_address+0x8d/0x100 [ 127.574629][ T6836] ? __pfx_stack_trace_save+0x10/0x10 [ 127.574657][ T6836] ? stack_depot_save_flags+0x29/0x9c0 [ 127.574721][ T6836] ? trace_cap_capable+0x18d/0x200 [ 127.574754][ T6836] ? cap_capable+0xb3/0x250 [ 127.574787][ T6836] mmap_region+0x32b/0x3f0 [ 127.574833][ T6836] do_mmap+0xd8e/0x11b0 [ 127.574869][ T6836] ? __pfx_do_mmap+0x10/0x10 [ 127.574901][ T6836] ? __pfx_down_write_killable+0x10/0x10 [ 127.574936][ T6836] vm_mmap_pgoff+0x281/0x450 [ 127.574975][ T6836] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 127.575009][ T6836] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 127.575044][ T6836] ? hugetlbfs_get_inode+0x31f/0x730 [ 127.575080][ T6836] ksys_mmap_pgoff+0x1c8/0x5c0 [ 127.575112][ T6836] ? rcu_is_watching+0x12/0xc0 [ 127.575140][ T6836] __x64_sys_mmap+0x125/0x190 [ 127.575170][ T6836] do_syscall_64+0xcd/0x260 [ 127.575197][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.575223][ T6836] RIP: 0033:0x7f924878d169 [ 127.575245][ T6836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.575270][ T6836] RSP: 002b:00007f92495ec038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 127.575295][ T6836] RAX: ffffffffffffffda RBX: 00007f92489a5fa0 RCX: 00007f924878d169 [ 127.575313][ T6836] RDX: 0000000000000002 RSI: 0000000000a00006 RDI: 0000000000000000 [ 127.575329][ T6836] RBP: 00007f924880e2a0 R08: 0000000000000602 R09: 0000300000000000 [ 127.575346][ T6836] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 127.575362][ T6836] R13: 0000000000000000 R14: 00007f92489a5fa0 R15: 00007ffea1632cc8 [ 127.575390][ T6836] [ 127.575407][ T6836] HugeTLB: unable to allocate vma specific lock [ 128.277323][ T6851] FAULT_INJECTION: forcing a failure. [ 128.277323][ T6851] name failslab, interval 1, probability 0, space 0, times 0 [ 128.291591][ T6851] CPU: 1 UID: 0 PID: 6851 Comm: syz.0.249 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 128.291634][ T6851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.291653][ T6851] Call Trace: [ 128.291661][ T6851] [ 128.291672][ T6851] dump_stack_lvl+0x16c/0x1f0 [ 128.291707][ T6851] should_fail_ex+0x512/0x640 [ 128.291745][ T6851] ? __kmalloc_noprof+0xbf/0x510 [ 128.291794][ T6851] ? realloc_user_queue+0x270/0x310 [ 128.291825][ T6851] should_failslab+0xc2/0x120 [ 128.291875][ T6851] __kmalloc_noprof+0xd2/0x510 [ 128.291926][ T6851] realloc_user_queue+0x270/0x310 [ 128.291960][ T6851] ? __pfx_snd_timer_user_open+0x10/0x10 [ 128.291992][ T6851] snd_timer_user_open+0xfc/0x180 [ 128.292024][ T6851] snd_open+0x1fe/0x450 [ 128.292084][ T6851] ? __pfx_snd_open+0x10/0x10 [ 128.292131][ T6851] chrdev_open+0x231/0x6a0 [ 128.292176][ T6851] ? __pfx_apparmor_file_open+0x10/0x10 [ 128.292237][ T6851] ? __pfx_chrdev_open+0x10/0x10 [ 128.292289][ T6851] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 128.292346][ T6851] do_dentry_open+0x741/0x1c10 [ 128.292391][ T6851] ? __pfx_chrdev_open+0x10/0x10 [ 128.292440][ T6851] ? inode_permission+0xdd/0x5f0 [ 128.292476][ T6851] vfs_open+0x82/0x3f0 [ 128.292508][ T6851] ? may_open+0x1f2/0x400 [ 128.292545][ T6851] path_openat+0x1e5e/0x2d40 [ 128.292601][ T6851] ? __pfx_path_openat+0x10/0x10 [ 128.292652][ T6851] do_filp_open+0x20b/0x470 [ 128.292697][ T6851] ? __pfx_do_filp_open+0x10/0x10 [ 128.292743][ T6851] ? find_held_lock+0x2b/0x80 [ 128.292791][ T6851] ? alloc_fd+0x420/0x760 [ 128.292841][ T6851] do_sys_openat2+0x11b/0x1d0 [ 128.292873][ T6851] ? __pfx_do_sys_openat2+0x10/0x10 [ 128.292917][ T6851] __x64_sys_openat+0x174/0x210 [ 128.292956][ T6851] ? __pfx___x64_sys_openat+0x10/0x10 [ 128.292991][ T6851] ? rcu_is_watching+0x12/0xc0 [ 128.293034][ T6851] do_syscall_64+0xcd/0x260 [ 128.293068][ T6851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.293102][ T6851] RIP: 0033:0x7f466cf8d169 [ 128.293127][ T6851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.293158][ T6851] RSP: 002b:00007f466ddbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 128.293186][ T6851] RAX: ffffffffffffffda RBX: 00007f466d1a6080 RCX: 00007f466cf8d169 [ 128.293206][ T6851] RDX: 0000000000000100 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 128.293226][ T6851] RBP: 00007f466d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 128.293244][ T6851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.293262][ T6851] R13: 0000000000000000 R14: 00007f466d1a6080 R15: 00007ffd20ac5ea8 [ 128.293293][ T6851] [ 130.366128][ T6880] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input6 [ 130.991518][ T6890] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 131.015302][ T6890] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 131.048904][ T6899] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 131.065817][ T6899] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 131.096370][ T6898] netlink: 306 bytes leftover after parsing attributes in process `syz.3.262'. [ 131.398866][ T6905] netlink: 334 bytes leftover after parsing attributes in process `syz.3.264'. [ 133.245900][ T6942] netlink: 28 bytes leftover after parsing attributes in process `syz.3.273'. [ 133.273855][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.282345][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.292783][ T6942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.304641][ T6942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.010861][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.025515][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.436225][ T7093] vivid-003: ================= START STATUS ================= [ 139.456800][ T7093] vivid-003: Radio HW Seek Mode: Bounded [ 139.471534][ T7093] vivid-003: Radio Programmable HW Seek: false [ 139.482893][ T7093] vivid-003: RDS Rx I/O Mode: Block I/O [ 139.501361][ T7093] vivid-003: Generate RBDS Instead of RDS: false [ 139.508168][ T7093] vivid-003: RDS Reception: true [ 139.514336][ T7093] vivid-003: RDS Program Type: 0 inactive [ 139.526331][ T7093] vivid-003: RDS PS Name: inactive [ 139.532039][ T7093] vivid-003: RDS Radio Text: inactive [ 139.542755][ T7093] vivid-003: RDS Traffic Announcement: false inactive [ 139.550012][ T7093] vivid-003: RDS Traffic Program: false inactive [ 139.556520][ T7093] vivid-003: RDS Music: false inactive [ 139.592858][ T7093] vivid-003: ================== END STATUS ================== [ 141.247527][ T7149] FAULT_INJECTION: forcing a failure. [ 141.247527][ T7149] name failslab, interval 1, probability 0, space 0, times 0 [ 141.273109][ T7149] CPU: 1 UID: 0 PID: 7149 Comm: syz.0.311 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 141.273156][ T7149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.273175][ T7149] Call Trace: [ 141.273184][ T7149] [ 141.273195][ T7149] dump_stack_lvl+0x16c/0x1f0 [ 141.273232][ T7149] should_fail_ex+0x512/0x640 [ 141.273273][ T7149] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 141.273321][ T7149] should_failslab+0xc2/0x120 [ 141.273375][ T7149] __kmalloc_cache_noprof+0x6a/0x3e0 [ 141.273436][ T7149] ? mark_held_locks+0x49/0x80 [ 141.273480][ T7149] ? kobject_create_and_add+0x4a/0xf0 [ 141.273516][ T7149] ? lockdep_hardirqs_on+0x7c/0x110 [ 141.273570][ T7149] kobject_create_and_add+0x4a/0xf0 [ 141.273608][ T7149] add_disk_fwnode+0x83b/0x13a0 [ 141.273660][ T7149] zram_add+0x494/0x6c0 [ 141.273697][ T7149] ? __pfx_zram_add+0x10/0x10 [ 141.273760][ T7149] ? __pfx_hot_add_show+0x10/0x10 [ 141.273797][ T7149] hot_add_show+0x21/0x80 [ 141.273832][ T7149] class_attr_show+0x6f/0xa0 [ 141.273865][ T7149] ? __pfx_class_attr_show+0x10/0x10 [ 141.273895][ T7149] sysfs_kf_seq_show+0x23e/0x410 [ 141.273941][ T7149] seq_read_iter+0x506/0x12b0 [ 141.273996][ T7149] kernfs_fop_read_iter+0x422/0x5a0 [ 141.274032][ T7149] ? rw_verify_area+0xcf/0x680 [ 141.274072][ T7149] vfs_read+0x8c8/0xc70 [ 141.274117][ T7149] ? __pfx___mutex_lock+0x10/0x10 [ 141.274148][ T7149] ? __pfx_vfs_read+0x10/0x10 [ 141.274208][ T7149] ksys_read+0x12a/0x240 [ 141.274250][ T7149] ? __pfx_ksys_read+0x10/0x10 [ 141.274290][ T7149] ? rcu_is_watching+0x12/0xc0 [ 141.274330][ T7149] do_syscall_64+0xcd/0x260 [ 141.274362][ T7149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.274404][ T7149] RIP: 0033:0x7f466cf8d169 [ 141.274430][ T7149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.274460][ T7149] RSP: 002b:00007f466dddc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.274490][ T7149] RAX: ffffffffffffffda RBX: 00007f466d1a5fa0 RCX: 00007f466cf8d169 [ 141.274510][ T7149] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000006 [ 141.274530][ T7149] RBP: 00007f466d00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 141.274549][ T7149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.274567][ T7149] R13: 0000000000000000 R14: 00007f466d1a5fa0 R15: 00007ffd20ac5ea8 [ 141.274602][ T7149] [ 141.584996][ T7160] vivid-003: ================= START STATUS ================= [ 141.605488][ T7160] vivid-003: Radio HW Seek Mode: Bounded [ 141.651935][ T7160] vivid-003: Radio Programmable HW Seek: false [ 141.658518][ T7160] vivid-003: RDS Rx I/O Mode: Block I/O [ 141.664216][ T7160] vivid-003: Generate RBDS Instead of RDS: false [ 141.674258][ T7160] vivid-003: RDS Reception: true [ 141.679653][ T7160] vivid-003: RDS Program Type: 0 inactive [ 141.686209][ T7160] vivid-003: RDS PS Name: inactive [ 141.695069][ T7160] vivid-003: RDS Radio Text: inactive [ 141.702758][ T7160] vivid-003: RDS Traffic Announcement: false inactive [ 141.710023][ T7160] vivid-003: RDS Traffic Program: false inactive [ 141.716446][ T7160] vivid-003: RDS Music: false inactive [ 141.722524][ T7160] vivid-003: ================== END STATUS ================== [ 142.093282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 142.746076][ T7182] FAULT_INJECTION: forcing a failure. [ 142.746076][ T7182] name failslab, interval 1, probability 0, space 0, times 0 [ 142.804847][ T7182] CPU: 1 UID: 0 PID: 7182 Comm: syz.1.317 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 142.804894][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.804913][ T7182] Call Trace: [ 142.804923][ T7182] [ 142.804935][ T7182] dump_stack_lvl+0x16c/0x1f0 [ 142.804973][ T7182] should_fail_ex+0x512/0x640 [ 142.805019][ T7182] should_failslab+0xc2/0x120 [ 142.805070][ T7182] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 142.805119][ T7182] ? __alloc_skb+0x2b2/0x380 [ 142.805164][ T7182] __alloc_skb+0x2b2/0x380 [ 142.805204][ T7182] ? __pfx___alloc_skb+0x10/0x10 [ 142.805244][ T7182] ? find_held_lock+0x2b/0x80 [ 142.805285][ T7182] ? net_generic+0xea/0x2a0 [ 142.805324][ T7182] tipc_buf_acquire+0x26/0xe0 [ 142.805360][ T7182] tipc_msg_create+0x39/0x1d0 [ 142.805398][ T7182] __tipc_shutdown+0xb9d/0xee0 [ 142.805437][ T7182] ? __pfx___tipc_shutdown+0x10/0x10 [ 142.805469][ T7182] ? do_raw_spin_lock+0x12c/0x2b0 [ 142.805520][ T7182] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 142.805574][ T7182] ? __pfx_woken_wake_function+0x10/0x10 [ 142.805615][ T7182] ? tipc_sk_filtering+0x420/0x520 [ 142.805649][ T7182] tipc_release+0xe2/0x1640 [ 142.805678][ T7182] ? down_write+0x14d/0x200 [ 142.805711][ T7182] ? __pfx_down_write+0x10/0x10 [ 142.805746][ T7182] ? __pfx_locks_remove_file+0x10/0x10 [ 142.805791][ T7182] __sock_release+0xb0/0x270 [ 142.805839][ T7182] ? __pfx_sock_close+0x10/0x10 [ 142.805882][ T7182] sock_close+0x1c/0x30 [ 142.805926][ T7182] __fput+0x3ff/0xb70 [ 142.805958][ T7182] ? _raw_spin_unlock_irq+0x23/0x50 [ 142.806009][ T7182] task_work_run+0x14d/0x240 [ 142.806041][ T7182] ? __pfx_task_work_run+0x10/0x10 [ 142.806073][ T7182] ? __pfx___do_sys_close_range+0x10/0x10 [ 142.806121][ T7182] ? rcu_is_watching+0x12/0xc0 [ 142.806157][ T7182] syscall_exit_to_user_mode+0x27b/0x2a0 [ 142.806190][ T7182] do_syscall_64+0xda/0x260 [ 142.806222][ T7182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.806254][ T7182] RIP: 0033:0x7f490358d169 [ 142.806284][ T7182] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.806316][ T7182] RSP: 002b:00007f4904448038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 142.806347][ T7182] RAX: 0000000000000000 RBX: 00007f49037a6080 RCX: 00007f490358d169 [ 142.806367][ T7182] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 142.806386][ T7182] RBP: 00007f490360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.806406][ T7182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.806425][ T7182] R13: 0000000000000000 R14: 00007f49037a6080 R15: 00007ffff235f9f8 [ 142.806460][ T7182] [ 143.090774][ T7181] mkiss: ax0: crc mode is auto. [ 143.129481][ T0] NOHZ tick-stop error: local softirq work is pending, handler #48!!! [ 144.310187][ T7200] netlink: 186 bytes leftover after parsing attributes in process `syz.1.320'. [ 149.019356][ T7265] FAULT_INJECTION: forcing a failure. [ 149.019356][ T7265] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 149.033692][ T7265] CPU: 0 UID: 0 PID: 7265 Comm: syz.1.336 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 149.033733][ T7265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 149.033750][ T7265] Call Trace: [ 149.033759][ T7265] [ 149.033771][ T7265] dump_stack_lvl+0x16c/0x1f0 [ 149.033806][ T7265] should_fail_ex+0x512/0x640 [ 149.033859][ T7265] should_fail_alloc_page+0xe7/0x130 [ 149.033912][ T7265] prepare_alloc_pages.constprop.0+0x172/0x570 [ 149.033958][ T7265] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 149.034022][ T7265] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 149.034069][ T7265] ? __pfx_stack_trace_save+0x10/0x10 [ 149.034108][ T7265] ? check_path.constprop.0+0x24/0x50 [ 149.034149][ T7265] ? add_lock_to_list+0x9d/0x130 [ 149.034188][ T7265] ? __lock_acquire+0xaa4/0x1ba0 [ 149.034227][ T7265] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 149.034275][ T7265] ? policy_nodemask+0xea/0x4e0 [ 149.034327][ T7265] alloc_pages_mpol+0x1fb/0x540 [ 149.034378][ T7265] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 149.034424][ T7265] ? __page_table_check_ptes_set+0x16a/0x3e0 [ 149.034473][ T7265] ? do_raw_spin_lock+0x12c/0x2b0 [ 149.034522][ T7265] ? find_held_lock+0x2b/0x80 [ 149.034557][ T7265] alloc_pages_noprof+0x131/0x390 [ 149.034606][ T7265] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 149.034649][ T7265] get_free_pages_noprof+0xc/0x40 [ 149.034680][ T7265] kasan_populate_vmalloc_pte+0x2d/0x160 [ 149.034723][ T7265] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 149.034766][ T7265] __apply_to_page_range+0x5f9/0xd30 [ 149.034807][ T7265] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 149.034867][ T7265] ? __pfx___apply_to_page_range+0x10/0x10 [ 149.034911][ T7265] ? alloc_vmap_area+0x872/0x2970 [ 149.034951][ T7265] alloc_vmap_area+0x919/0x2970 [ 149.034998][ T7265] ? __pfx_alloc_vmap_area+0x10/0x10 [ 149.035041][ T7265] __get_vm_area_node+0x1a7/0x300 [ 149.035084][ T7265] vmap+0x159/0x350 [ 149.035119][ T7265] ? relay_open_buf.part.0+0x445/0xb90 [ 149.035160][ T7265] ? __pfx_vmap+0x10/0x10 [ 149.035194][ T7265] ? trace_kmalloc+0x2b/0xd0 [ 149.035224][ T7265] ? relay_open_buf.part.0+0x194/0xb90 [ 149.035267][ T7265] relay_open_buf.part.0+0x445/0xb90 [ 149.035314][ T7265] relay_open+0x653/0xad0 [ 149.035351][ T7265] ? debugfs_create_file_full+0x41/0x60 [ 149.035393][ T7265] do_blk_trace_setup+0x503/0xb50 [ 149.035452][ T7265] blk_trace_setup+0xed/0x1b0 [ 149.035482][ T7265] ? __pfx_blk_trace_setup+0x10/0x10 [ 149.035512][ T7265] ? __pfx_snprintf+0x10/0x10 [ 149.035576][ T7265] blk_trace_ioctl+0x146/0x280 [ 149.035611][ T7265] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 149.035647][ T7265] ? find_held_lock+0x2b/0x80 [ 149.035682][ T7265] blkdev_ioctl+0x108/0x6d0 [ 149.035719][ T7265] ? __pfx_blkdev_ioctl+0x10/0x10 [ 149.035760][ T7265] ? __pfx_blkdev_ioctl+0x10/0x10 [ 149.035797][ T7265] __x64_sys_ioctl+0x190/0x200 [ 149.035847][ T7265] do_syscall_64+0xcd/0x260 [ 149.035883][ T7265] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.035916][ T7265] RIP: 0033:0x7f490358d169 [ 149.035941][ T7265] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.035972][ T7265] RSP: 002b:00007f4904469038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.036002][ T7265] RAX: ffffffffffffffda RBX: 00007f49037a5fa0 RCX: 00007f490358d169 [ 149.036022][ T7265] RDX: 0000200000000180 RSI: 00000000c0481273 RDI: 0000000000000007 [ 149.036041][ T7265] RBP: 00007f490360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 149.036060][ T7265] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.036077][ T7265] R13: 0000000000000000 R14: 00007f49037a5fa0 R15: 00007ffff235f9f8 [ 149.036110][ T7265] [ 149.614640][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 149.630273][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 149.641209][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 149.650542][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 149.658900][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 150.371378][ T7268] chnl_net:caif_netlink_parms(): no params data found [ 150.405205][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 150.422661][ T7275] netlink: 354 bytes leftover after parsing attributes in process `syz.1.338'. [ 150.618121][ T7268] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.638748][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.646482][ T7268] bridge_slave_0: entered allmulticast mode [ 150.683510][ T7268] bridge_slave_0: entered promiscuous mode [ 150.697684][ T7268] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.714600][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.723536][ T7268] bridge_slave_1: entered allmulticast mode [ 150.735091][ T7268] bridge_slave_1: entered promiscuous mode [ 150.780577][ T7268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.826662][ T7268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.869969][ T7268] team0: Port device team_slave_0 added [ 150.884181][ T7268] team0: Port device team_slave_1 added [ 150.954264][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.968096][ T5848] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 150.968102][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.968166][ T7268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.124678][ T7268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.147860][ T7268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.173824][ C1] vkms_vblank_simulate: vblank timer overrun [ 151.234480][ T7268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.332476][ T7268] hsr_slave_0: entered promiscuous mode [ 151.358622][ T7268] hsr_slave_1: entered promiscuous mode [ 151.388757][ T7268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.417244][ T7268] Cannot create hsr debugfs directory [ 151.768293][ T5848] Bluetooth: hci5: command tx timeout [ 152.107353][ T7268] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 152.303879][ T7268] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 152.347799][ T7268] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 152.366426][ T7268] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 152.544122][ T7300] vivid-003: ================= START STATUS ================= [ 152.577193][ T7300] vivid-003: Radio HW Seek Mode: Bounded [ 152.583785][ T7300] vivid-003: Radio Programmable HW Seek: false [ 152.609662][ T7300] vivid-003: RDS Rx I/O Mode: Block I/O [ 152.615321][ T7300] vivid-003: Generate RBDS Instead of RDS: false [ 152.645855][ T7300] vivid-003: RDS Reception: true [ 152.707410][ T7300] vivid-003: RDS Program Type: 0 inactive [ 152.722284][ T7300] vivid-003: RDS PS Name: inactive [ 152.736487][ T7300] vivid-003: RDS Radio Text: inactive [ 152.769710][ T7300] vivid-003: RDS Traffic Announcement: false inactive [ 152.776602][ T7300] vivid-003: RDS Traffic Program: false inactive [ 152.790095][ T7268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.816415][ T7300] vivid-003: RDS Music: false inactive [ 152.827185][ T7268] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.854892][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.862086][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.878305][ T7300] vivid-003: ================== END STATUS ================== [ 152.904113][ T3006] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.911322][ T3006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.245201][ T7318] FAULT_INJECTION: forcing a failure. [ 153.245201][ T7318] name failslab, interval 1, probability 0, space 0, times 0 [ 153.295239][ T7318] CPU: 0 UID: 0 PID: 7318 Comm: syz.1.347 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 153.295285][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.295304][ T7318] Call Trace: [ 153.295314][ T7318] [ 153.295326][ T7318] dump_stack_lvl+0x16c/0x1f0 [ 153.295363][ T7318] should_fail_ex+0x512/0x640 [ 153.295400][ T7318] ? __kmalloc_noprof+0xbf/0x510 [ 153.295457][ T7318] ? realloc_user_queue+0x94/0x310 [ 153.295486][ T7318] should_failslab+0xc2/0x120 [ 153.295535][ T7318] __kmalloc_noprof+0xd2/0x510 [ 153.295578][ T7318] ? find_held_lock+0x2b/0x80 [ 153.295615][ T7318] ? __might_fault+0xe3/0x190 [ 153.295649][ T7318] realloc_user_queue+0x94/0x310 [ 153.295688][ T7318] __snd_timer_user_ioctl.isra.0+0x18cd/0x2680 [ 153.295726][ T7318] ? __pfx___snd_timer_user_ioctl.isra.0+0x10/0x10 [ 153.295761][ T7318] ? __mutex_trylock_common+0xe9/0x250 [ 153.295806][ T7318] ? __pfx___mutex_trylock_common+0x10/0x10 [ 153.295854][ T7318] ? __pfx___might_resched+0x10/0x10 [ 153.295892][ T7318] ? rcu_is_watching+0x12/0xc0 [ 153.295921][ T7318] ? trace_contention_end+0xdd/0x130 [ 153.295963][ T7318] ? __mutex_lock+0x1cb/0xb00 [ 153.295996][ T7318] ? snd_timer_user_ioctl+0x4a/0xb0 [ 153.296029][ T7318] ? __pfx___mutex_lock+0x10/0x10 [ 153.296061][ T7318] ? find_held_lock+0x2b/0x80 [ 153.296106][ T7318] snd_timer_user_ioctl+0x72/0xb0 [ 153.296137][ T7318] ? __pfx_snd_timer_user_ioctl+0x10/0x10 [ 153.296171][ T7318] __x64_sys_ioctl+0x190/0x200 [ 153.296212][ T7318] do_syscall_64+0xcd/0x260 [ 153.296244][ T7318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.296276][ T7318] RIP: 0033:0x7f490358d169 [ 153.296301][ T7318] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.296332][ T7318] RSP: 002b:00007f4904448038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 153.296361][ T7318] RAX: ffffffffffffffda RBX: 00007f49037a6080 RCX: 00007f490358d169 [ 153.296381][ T7318] RDX: 0000000000000000 RSI: 0000000040045402 RDI: 0000000000000007 [ 153.296399][ T7318] RBP: 00007f490360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 153.296425][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.296443][ T7318] R13: 0000000000000000 R14: 00007f49037a6080 R15: 00007ffff235f9f8 [ 153.296477][ T7318] [ 153.755325][ T7268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.853207][ T5848] Bluetooth: hci5: command tx timeout [ 154.649835][ T7339] [ 154.652321][ T7339] ====================================================== [ 154.659365][ T7339] WARNING: possible circular locking dependency detected [ 154.666406][ T7339] 6.14.0-syzkaller-05877-g1a9239bb4253 #0 Not tainted [ 154.673179][ T7339] ------------------------------------------------------ [ 154.680201][ T7339] syz.2.351/7339 is trying to acquire lock: [ 154.686103][ T7339] ffff88814339dd98 (&q->elevator_lock){+.+.}-{4:4}, at: elv_iosched_store+0x201/0x5f0 [ 154.695729][ T7339] [ 154.695729][ T7339] but task is already holding lock: [ 154.703109][ T7339] ffff88814339d868 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 154.714405][ T7339] [ 154.714405][ T7339] which lock already depends on the new lock. [ 154.714405][ T7339] [ 154.724916][ T7339] [ 154.724916][ T7339] the existing dependency chain (in reverse order) is: [ 154.733946][ T7339] [ 154.733946][ T7339] -> #2 (&q->q_usage_counter(io)#58){++++}-{0:0}: [ 154.742609][ T7339] blk_alloc_queue+0x619/0x760 [ 154.747962][ T7339] blk_mq_alloc_queue+0x179/0x290 [ 154.753538][ T7339] __blk_mq_alloc_disk+0x29/0x120 [ 154.759125][ T7339] nbd_dev_add+0x49d/0xbb0 [ 154.764095][ T7339] nbd_init+0x181/0x320 [ 154.768799][ T7339] do_one_initcall+0x120/0x6e0 [ 154.774123][ T7339] kernel_init_freeable+0x5c2/0x900 [ 154.779886][ T7339] kernel_init+0x1c/0x2b0 [ 154.784773][ T7339] ret_from_fork+0x45/0x80 [ 154.789737][ T7339] ret_from_fork_asm+0x1a/0x30 [ 154.795056][ T7339] [ 154.795056][ T7339] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 154.802310][ T7339] fs_reclaim_acquire+0x102/0x150 [ 154.807889][ T7339] blk_mq_alloc_and_init_hctx+0x503/0x11c0 [ 154.814249][ T7339] blk_mq_realloc_hw_ctxs+0x8f6/0xc00 [ 154.820199][ T7339] blk_mq_init_allocated_queue+0x3af/0x1230 [ 154.826653][ T7339] blk_mq_alloc_queue+0x1c2/0x290 [ 154.832234][ T7339] __blk_mq_alloc_disk+0x29/0x120 [ 154.837818][ T7339] loop_add+0x496/0xb70 [ 154.842516][ T7339] loop_init+0x164/0x270 [ 154.847308][ T7339] do_one_initcall+0x120/0x6e0 [ 154.852629][ T7339] kernel_init_freeable+0x5c2/0x900 [ 154.858388][ T7339] kernel_init+0x1c/0x2b0 [ 154.863269][ T7339] ret_from_fork+0x45/0x80 [ 154.868233][ T7339] ret_from_fork_asm+0x1a/0x30 [ 154.873555][ T7339] [ 154.873555][ T7339] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 154.881403][ T7339] __lock_acquire+0x1173/0x1ba0 [ 154.886809][ T7339] lock_acquire+0x179/0x350 [ 154.891862][ T7339] __mutex_lock+0x19a/0xb00 [ 154.896920][ T7339] elv_iosched_store+0x201/0x5f0 [ 154.902407][ T7339] queue_attr_store+0x270/0x310 [ 154.907826][ T7339] sysfs_kf_write+0x117/0x170 [ 154.913059][ T7339] kernfs_fop_write_iter+0x349/0x510 [ 154.918886][ T7339] iter_file_splice_write+0x91c/0x1150 [ 154.924932][ T7339] direct_splice_actor+0x18f/0x6c0 [ 154.930604][ T7339] splice_direct_to_actor+0x342/0xa30 [ 154.936532][ T7339] do_splice_direct+0x174/0x240 [ 154.941933][ T7339] do_sendfile+0xafd/0xe50 [ 154.946897][ T7339] __x64_sys_sendfile64+0x1d8/0x220 [ 154.952637][ T7339] do_syscall_64+0xcd/0x260 [ 154.957679][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.964117][ T7339] [ 154.964117][ T7339] other info that might help us debug this: [ 154.964117][ T7339] [ 154.974353][ T7339] Chain exists of: [ 154.974353][ T7339] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#58 [ 154.974353][ T7339] [ 154.988317][ T7339] Possible unsafe locking scenario: [ 154.988317][ T7339] [ 154.995868][ T7339] CPU0 CPU1 [ 155.001248][ T7339] ---- ---- [ 155.006628][ T7339] lock(&q->q_usage_counter(io)#58); [ 155.012036][ T7339] lock(fs_reclaim); [ 155.018558][ T7339] lock(&q->q_usage_counter(io)#58); [ 155.026481][ T7339] lock(&q->elevator_lock); [ 155.031089][ T7339] [ 155.031089][ T7339] *** DEADLOCK *** [ 155.031089][ T7339] [ 155.039240][ T7339] 5 locks held by syz.2.351/7339: [ 155.044290][ T7339] #0: ffff888036410420 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 155.054380][ T7339] #1: ffff88803442a488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510 [ 155.064192][ T7339] #2: ffff888026390788 (kn->active#91){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510 [ 155.074275][ T7339] #3: ffff88814339d868 (&q->q_usage_counter(io)#58){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 155.085997][ T7339] #4: ffff88814339d8a0 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 155.097976][ T7339] [ 155.097976][ T7339] stack backtrace: [ 155.103876][ T7339] CPU: 1 UID: 0 PID: 7339 Comm: syz.2.351 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 155.103908][ T7339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.103923][ T7339] Call Trace: [ 155.103931][ T7339] [ 155.103940][ T7339] dump_stack_lvl+0x116/0x1f0 [ 155.103967][ T7339] print_circular_bug+0x275/0x350 [ 155.104003][ T7339] check_noncircular+0x14c/0x170 [ 155.104039][ T7339] __lock_acquire+0x1173/0x1ba0 [ 155.104076][ T7339] ? __lock_acquire+0xaa4/0x1ba0 [ 155.104112][ T7339] lock_acquire+0x179/0x350 [ 155.104146][ T7339] ? elv_iosched_store+0x201/0x5f0 [ 155.104181][ T7339] ? __pfx___might_resched+0x10/0x10 [ 155.104214][ T7339] __mutex_lock+0x19a/0xb00 [ 155.104238][ T7339] ? elv_iosched_store+0x201/0x5f0 [ 155.104277][ T7339] ? mark_held_locks+0x49/0x80 [ 155.104311][ T7339] ? elv_iosched_store+0x201/0x5f0 [ 155.104343][ T7339] ? lockdep_hardirqs_on+0x7c/0x110 [ 155.104385][ T7339] ? __pfx___mutex_lock+0x10/0x10 [ 155.104410][ T7339] ? blk_mq_freeze_queue_wait+0xad/0x1b0 [ 155.104451][ T7339] ? __pfx_autoremove_wake_function+0x10/0x10 [ 155.104488][ T7339] ? elv_iosched_store+0x201/0x5f0 [ 155.104520][ T7339] elv_iosched_store+0x201/0x5f0 [ 155.104552][ T7339] ? do_syscall_64+0xcd/0x260 [ 155.104576][ T7339] ? __pfx_elv_iosched_store+0x10/0x10 [ 155.104611][ T7339] ? __mutex_trylock_common+0xe9/0x250 [ 155.104649][ T7339] ? __pfx_elv_iosched_store+0x10/0x10 [ 155.104681][ T7339] queue_attr_store+0x270/0x310 [ 155.104723][ T7339] ? __pfx_queue_attr_store+0x10/0x10 [ 155.104764][ T7339] ? __lock_acquire+0x5ca/0x1ba0 [ 155.104800][ T7339] ? kernfs_fop_write_iter+0x287/0x510 [ 155.104838][ T7339] ? __pfx_queue_attr_store+0x10/0x10 [ 155.104879][ T7339] sysfs_kf_write+0x117/0x170 [ 155.104911][ T7339] kernfs_fop_write_iter+0x349/0x510 [ 155.104941][ T7339] ? __pfx_sysfs_kf_write+0x10/0x10 [ 155.104974][ T7339] iter_file_splice_write+0x91c/0x1150 [ 155.105020][ T7339] ? __pfx_iter_file_splice_write+0x10/0x10 [ 155.105060][ T7339] ? __pfx_copy_splice_read+0x10/0x10 [ 155.105100][ T7339] ? __pfx_iter_file_splice_write+0x10/0x10 [ 155.105139][ T7339] direct_splice_actor+0x18f/0x6c0 [ 155.105176][ T7339] splice_direct_to_actor+0x342/0xa30 [ 155.105211][ T7339] ? __pfx_direct_splice_actor+0x10/0x10 [ 155.105254][ T7339] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 155.105294][ T7339] do_splice_direct+0x174/0x240 [ 155.105329][ T7339] ? __pfx_do_splice_direct+0x10/0x10 [ 155.105364][ T7339] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 155.105400][ T7339] ? rw_verify_area+0xcf/0x680 [ 155.105431][ T7339] do_sendfile+0xafd/0xe50 [ 155.105466][ T7339] ? __pfx_do_sendfile+0x10/0x10 [ 155.105500][ T7339] ? __x64_sys_futex+0x1e0/0x4c0 [ 155.105530][ T7339] ? __x64_sys_futex+0x1e9/0x4c0 [ 155.105561][ T7339] __x64_sys_sendfile64+0x1d8/0x220 [ 155.105585][ T7339] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 155.105608][ T7339] ? rcu_is_watching+0x12/0xc0 [ 155.105636][ T7339] do_syscall_64+0xcd/0x260 [ 155.105661][ T7339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.105687][ T7339] RIP: 0033:0x7f14a0d8d169 [ 155.105707][ T7339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.105732][ T7339] RSP: 002b:00007f14a1bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 155.105755][ T7339] RAX: ffffffffffffffda RBX: 00007f14a0fa5fa0 RCX: 00007f14a0d8d169 [ 155.105772][ T7339] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 155.105787][ T7339] RBP: 00007f14a0e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.105803][ T7339] R10: 00000000000007ff R11: 0000000000000246 R12: 0000000000000000 [ 155.105818][ T7339] R13: 0000000000000000 R14: 00007f14a0fa5fa0 R15: 00007ffe7f5f4428 [ 155.105840][ T7339] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 155.929802][ T5848] Bluetooth: hci5: command tx timeout [ 156.289123][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.344186][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.412820][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.492506][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.580361][ T63] bridge_slave_1: left allmulticast mode [ 156.586054][ T63] bridge_slave_1: left promiscuous mode [ 156.592277][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.600990][ T63] bridge_slave_0: left allmulticast mode [ 156.606675][ T63] bridge_slave_0: left promiscuous mode [ 156.612858][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.764238][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.775392][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.785091][ T63] bond0 (unregistering): Released all slaves [ 157.031573][ T63] hsr_slave_0: left promiscuous mode [ 157.037383][ T63] hsr_slave_1: left promiscuous mode [ 157.045089][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.052669][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.062285][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.069747][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.079175][ T63] veth1_macvtap: left promiscuous mode [ 157.084701][ T63] veth0_macvtap: left promiscuous mode [ 157.090401][ T63] veth1_vlan: left promiscuous mode [ 157.095721][ T63] veth0_vlan: left promiscuous mode [ 157.223353][ T63] team0 (unregistering): Port device team_slave_1 removed [ 157.242432][ T63] team0 (unregistering): Port device team_slave_0 removed