last executing test programs: 9.993493555s ago: executing program 3 (id=241): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_ucma_fops_ucma(0xffffffffffffffff, &(0x7f0000000200)="77b8fa73cfe072855c8a987b836875ff9ec92e12e42aa2d2836e845bba01da39f5167f466f947c46e2fa74eed0f5345c8e1d50fb15d9b6e105de4a407be8112d3e0be4bf1854ad63cc470c011fa223cc35f2a3f9263e5ecec1a111bebc464703b4", 0x61) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x20000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000180)="bcb9c371f46d0d9bdb06c4837f6392975c3dce07fe23702dd7346a3e7774e8881be6660ef6514d314dc7c2a7b07582635940668ee4020f9bb4b577322dbddb1dcc92fbad285a54e448c0423f71bef721ac0eacdf0e2184faac074151ca1655bf5e8814d73eeff0e81576aad5aced36", 0x8000, 0x1}, 0x8}, 0x1, 0x100) sendmmsg$auto(r0, &(0x7f0000000080)={{0x0, 0xffffffff, 0x0, 0xff, 0x0, 0x1, 0x4000007}, 0x7}, 0x21ea9eca, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) write$auto(0xffffffffffffffff, &(0x7f0000000100)='/dev/nullb0\x00', 0xa070) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/team_slave_0/forwarding\x00', 0xa60c0, 0x0) read$auto(r1, &(0x7f0000000100)='batadv\x00', 0xcb) mmap$auto(0x0, 0x2020009, 0x2, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) sysinfo$auto(0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/o2cb/logmask/ERROR\x00', 0x183042, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 9.045502393s ago: executing program 2 (id=247): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x28802, 0x0) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/ports/3/pp_hold\x00', 0xc0b02, 0x0) ioctl$auto(r1, 0x1000, r0) write$auto(r1, 0x0, 0xc70) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x7) r3 = socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x40009, 0xdd, 0x9b72, 0x7, 0x28000) r4 = socket(0x15, 0x5, 0x0) setsockopt$auto(r4, 0x114, 0x8, 0x0, 0x4) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x6b) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) bpf$auto(0x9, &(0x7f0000000000)=@bpf_attr_7={@start_id=0x17, 0x6820, 0x7}, 0x81) setrlimit$auto(0x9, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) open(&(0x7f00000001c0)='./file0\x00', 0x286c0, 0x16c) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000000)=&(0x7f0000000200)=' ') r5 = socket(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r6, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa6344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e8", @ANYRES32=r3, @ANYRESDEC=r3], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto(r2, 0x5646, r2) 8.918822855s ago: executing program 3 (id=248): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r0, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.6/usb7/tx_lanes\x00', 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000500)=""/4096, 0x1000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/current\x00', 0x151001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa6344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e8", @ANYRES32=r2, @ANYRESDEC=r2], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 8.429878877s ago: executing program 2 (id=249): mmap$auto(0x0, 0x5, 0xdf, 0x1a, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x15, 0x0, 0x28) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d) madvise$auto(0x0, 0xffffffffffff0001, 0x15) newfstatat$auto(r1, 0x0, 0x0, 0x1000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) write$auto(r2, &(0x7f0000000040)='\xce*+#\x00', 0x80) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x100000001) io_uring_setup$auto(0x5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa200, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r3, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), r4) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x885}, 0x40) 7.763534591s ago: executing program 3 (id=253): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/gro_flush_timeout\x00', 0x88282, 0x0) write$auto(r0, &(0x7f0000000000)='\x00', 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x200000000000404, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x389803, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r2, 0x550c, 0x5f) rt_sigaction$auto(0x7, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r3 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioperm$auto(0x4000000000080, 0xfffffffffffffffb, 0x5) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) connect$auto(r3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x25, 0x0, 0x90) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xa00c0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) eventfd$auto(0x5d5d) mq_timedsend$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) mq_getsetattr$auto(r4, 0x0, 0x0) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) 7.74784455s ago: executing program 2 (id=254): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/mtd0\x00', 0x0, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r0, 0x80044d07, &(0x7f0000000700)=0x2) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) r1 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3da) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\t@\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fcdbdf25090000000400018004000f80c3fc0e003264650101000000000000636572320014001300766c616e3000"/62], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) socket(0x2, 0x1, 0x0) socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffffff, &(0x7f0000000200)=""/238, 0xee) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0) ioctl$auto_RTC_ALM_SET(r4, 0x40247007, &(0x7f00000000c0)={0xe, 0x5, 0x2, 0x0, 0x5, 0x2003, 0x74f, 0x1fb, 0xf}) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) unshare$auto(0x40000080) socket(0x1d, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 6.454473181s ago: executing program 1 (id=257): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = fcntl$auto(0x3, 0x4, 0xa553) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x101, 0x0, 0x5, 0x9ad}, 0x5}, 0x5, 0x20000000) socketpair$auto(0x1, 0x5, 0xfffefffc, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) semctl$auto(0x9, 0xc1b8, 0x4, 0x1) mmap$auto(0x7ffffffd, 0x400004, 0x7, 0x9b72, r0, 0x5) r2 = socket(0x29, 0x5, 0x0) dup2$auto(r2, r2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(r2, 0x0, 0x40) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) pwrite64$auto(r3, 0x0, 0x1, 0x2) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r4, r4, 0x0, 0x3) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x6) fcntl$auto(0x3, 0x4, 0xa553) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x3ec0) unshare$auto(0x40000080) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), r5) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r5, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x880) 6.08288183s ago: executing program 2 (id=258): mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x28, 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/asound/card0/pcm0c/sub4/xrun_injection\x00', 0x400, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES32=r0], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x0, 0x5, 0x2]}, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) r2 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) r3 = openat$auto_tap_fops_tap(0xffffffffffffff9c, 0x0, 0x40802, 0x0) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x505000, 0x0) ioctl$auto(r4, 0x800064bc, 0x1e6) mmap$auto(0x0, 0x400e981, 0x28f, 0xeb1, r2, 0x7fff) ioctl$auto_SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000480)="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") unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) socket(0x2b, 0x1, 0x1) 5.993090305s ago: executing program 3 (id=259): openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) madvise$auto(0x0, 0x8000000000000000, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r0, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000280), 0xffffffffffffffff) signalfd$auto(0xffffffff, 0x0, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/bConfigurationValue\x00', 0x101142, 0x0) write$auto(r1, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) mincore$auto(0x9, 0xcc, &(0x7f0000000080)='\\&-\'\x00') socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/buffer_size_kb\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000200), 0xa000, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/icmp6\x00', 0x40101, 0x0) unshare$auto(0x40000080) socket(0x2, 0x6, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xf6a01, 0x0) 5.906823819s ago: executing program 0 (id=260): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r0, 0x0, 0x81) acct$auto(&(0x7f0000000000)='/dev/fb0\x00') recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.6/usb7/tx_lanes\x00', 0x141000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000500)=""/4096, 0x1000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/apparmor/current\x00', 0x151001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) write$auto_console_fops_tty_io(0xffffffffffffffff, 0x0, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0x4) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r4, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa6344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e8", @ANYRES32=r2, @ANYRESDEC=r2], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.071971042s ago: executing program 1 (id=261): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0xa, 0x2, 0x0) r1 = socket(0xa, 0x3, 0xff) connect$auto(r1, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x1000008000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) statmount$auto(0x0, &(0x7f0000000080)={0xd24c, 0x7, 0x1ff, 0x7, 0x5180, 0x4909b6f8, 0x5, 0xa, 0x8, 0x7, 0xa121, 0x3, 0x0, 0x271, 0xb4, 0xa, 0x6, 0x10001, 0xffffffff, 0x100000000, 0xe, 0x7, 0x2100, 0x200, 0x0, 0x8, [0x4000000000, 0x0, 0x0, 0x50100000000000, 0x6, 0xc318, 0x0, 0x80000000000006, 0x70624ce7, 0xff, 0x6, 0xaf1, 0x0, 0x80000, 0x5, 0x7fe, 0xffffffffffffbfff, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x800000000000007, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xe, 0x0, 0x0, 0x5, 0x6, 0xfffffffffffffffc, 0x88e, 0x8000000000008, 0x1, 0x9, 0xa38, 0xa68, 0x3, 0xfffffffffffffffd, 0x8, 0x7, 0x7, 0x1]}, 0x1ff, 0xf) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) write$auto(r2, &(0x7f0000000000)='/dev/input/event0\x00', 0x7fe) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r0) getpgid$auto(0x0) getpgid$auto(0x0) futex$auto(&(0x7f0000000100)=0xbb2, 0x9b13, 0x6f94, &(0x7f0000000140)={0x7, 0x6}, &(0x7f0000000180)=0xfb, 0x4) sendmsg$auto_IPVS_CMD_SET_CONFIG(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4c0a4) shmctl$auto(0x0, 0xb00, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8000, 0x2) mlock$auto(0xfbe8, 0x4) 4.294077469s ago: executing program 0 (id=262): mmap$auto(0x0, 0x5, 0xdf, 0x1a, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x15, 0x0, 0x28) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0x8000000d, 0x2cbd5d) madvise$auto(0x0, 0xffffffffffff0001, 0x15) newfstatat$auto(r1, 0x0, 0x0, 0x1000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/graphics/fbcon/rotate\x00', 0x10b842, 0x0) write$auto(r2, &(0x7f0000000040)='\xce*+#\x00', 0x80) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) unshare$auto(0x100000001) io_uring_setup$auto(0x5, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0xa200, 0x0) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r3, 0x0, 0x9) close_range$auto(0x2, 0xa, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000003c0), r4) sendmsg$auto_ETHTOOL_MSG_PLCA_GET_CFG(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_PLCA_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x885}, 0x40) 3.485651601s ago: executing program 0 (id=263): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x20100, 0x0) ioctl$auto(r0, 0x64c9, 0x1e2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = prctl$auto(0x35, 0x8001, 0x0, 0x1, 0x3) mmap$auto(0x401, 0x4, 0xdf, 0xeb1, r1, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) ioctl$auto_USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000001040)={0x80, 0x6, 0x400, 0x1, 0x101, 0x0, &(0x7f0000000040)}) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) write$auto(r3, 0x0, 0x81) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000280)=@raw_tracepoint={0x9, 0xffffffffffffffff, 0x0, 0x1}, 0x6f3) socket(0x10, 0x2, 0xa) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x4, 0x0, 0x408000007, 0x18000}, 0x47177fc5}, 0x9, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x4, 0x1, 0x7f, 0x0) eventfd$auto(0x1) r4 = socket(0xa, 0x2, 0x88) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001a40), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_GET_RADIO(r6, &(0x7f0000003300)={0x0, 0x0, &(0x7f00000032c0)={&(0x7f0000000180)={0x1c, r5, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_ID={0x8, 0xa, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0xc) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd}, 0xa3) acct$auto(&(0x7f0000000100)='\x83\x9f\xe0\x88G\xc1\xb3\xa5\xd0E\x89\xb0\xed\\\xa1\xef\x876\x02\'\xf9\xd6N\xfb\xaa\xb8Fb+\"K\x05\x00\x89\x13\x91\xe5\xd4H\x14\x81\xd4\xa0\x11\x81\xb4(\xa8\xae\t\x00\x00\x00\x00\x00\x00\x00') 3.297446125s ago: executing program 0 (id=264): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) open(0x0, 0x4163c0, 0x84) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r1 = socket(0x18, 0x2, 0x0) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) r2 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vbi10\x00', 0x2, 0x0) write$auto(r3, 0x0, 0x1000) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_LINK_GET(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000051c0)={&(0x7f0000000440)={0x14, r5, 0x301, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24000055}, 0x4) r7 = syz_genetlink_get_family_id$auto_thermal(0x0, r2) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="18023dbd70008767f8bf7752c5006db602cc4f4e00"/35], 0x1c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)={0xb4, r7, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ={0x4}, @THERMAL_GENL_ATTR_CDEV={0x73, 0xf, 0x0, 0x1, [@nested={0x8, 0xff, 0x0, 0x1, [@typed={0x4, 0x5a}]}, @generic="85923f768a4c57afc6037f323fb06b53439601981c65ea5ac15e19ecb902a08bf124d6079e8d89fef91bee7d734b45392fb55d5124f125c3583f5e86a3c8e42192443acfe611e76f39210e02b78e804aaf26dacb7909ddc533e8b9dd1d0404", @typed={0x8, 0x142, 0x0, 0x0, @u32=0x6}]}, @THERMAL_GENL_ATTR_TZ_GOV_NAME={0x14, 0xe, '/dev/sequencer2\x00'}, @THERMAL_GENL_ATTR_CDEV_NAME={0x14, 0x13, 'geneve0\x00'}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8004}, 0x4) r8 = socket(0x15, 0x5, 0x0) r9 = timerfd_create$auto(0x8, 0x800) read$auto_ppp_device_fops_ppp_generic(r9, &(0x7f0000000100)=""/51, 0x33) ustat$auto(0x801, 0x0) sendmsg$auto(r8, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r10 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TCFLSH2(r10, 0x5411, 0x0) read$auto(r0, 0x0, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000"], 0x1ac}}, 0x40000) 2.455414208s ago: executing program 3 (id=265): adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffa, 0xd4, 0x1, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000001, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1007ffd, 0x0, 0x8000000c, 0x81, 0x10000, 0x80000000a747, 0xdeb2, 0x804}) r0 = socket(0xa, 0x1, 0x84) adjtimex$auto(&(0x7f0000000180)={0x0, 0x0, 0x60a, 0x6, 0xff, 0x0, 0x5, 0x0, 0xfffffffffffffffd, 0x1, 0x3, {0x2d5, 0x9c00}, 0xfffffffffffffff8, 0x9, 0x9, 0x61c, 0x0, 0x9, 0x9, 0x1, 0xb, 0x2, 0x6}) r1 = getsockopt$auto(r0, 0x84, 0x7d, 0x0, 0x0) close_range$auto(r1, r0, 0x3) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000002bc0)=ANY=[@ANYBLOB="44130000", @ANYRES16=r2, @ANYBLOB="000329bd7000fcdbdf250b00000008000600060000002813028014005400282a5b5c6c2e247b5d2d2d5b29a97b005b01f48004003e800c008b00050000000000000004004580c5e05789086247d49a1054445dfa85b4d3826790a7e25c941f5b3e4869f56d45b158dc23e3a0d37d77bcf6a2e1a2b85dc4abe1c43924ad6b875e53e31c889f4f0a0faaf2130712f4e23fb98d97917327618ae20e10bb3212c20db91810d3191113cf61777c7795610cf2b5eac32b3c4508f97d046f815e54dd15de294f0925a9f63ef6202036071c834e7c77f081c6706699fc6a269b23cde9249a7484c434258fc9d4b806137224413c45d4b41cb232510c517a6fea4241b752fc10aabf6553960dfe933b27b1f03877537ec9727dfaf3a9a13f9aa39bf7906f0885fde64ad49ee405e2f01a6d64ed5feb11f9be9294ed005c1d831e1042d7aa3ebf0374d4942f1d1ebb2af62d37c1ba421685c44ea1054429204d56e7a4e5bd6434f873429543840642f81e6943a775944b6458cd04ca020f5e3bddbba183057c0f46d39b6eadd04800b31174800400288004101e00b043cd19e7aa505bd5d89f46d8890fe91a66002155a35c1cb7bc629d275cbcf00ebf49629456bec7cb71678c599ef867757edbe902d14b351bef4da0fafb5dab21520324a5e192e46a22c6f213a40a7bde73ed239fa8b70419854cf293d52f9dfd288a41e86a0cc6cab6c88c145a1685e5f062fa4aa62a0596ffda03a2715225068d222c82bc1b1432b3244c94d61bb4fa4620bd130e98136af79874fa777faa60ffc8dfd6e849daa3362e402940a6058ae7ba85748811bc46515649e98aeb17d6096ae66ac93e8899c7026bdb776c511bd869bfbe7a8286a6c9eafefc1e5918055ca9a2056e0c63c5e8490589631313c7eca61780f26c7ae2cfe9897d5860ce2a5f5f93a98383b7f8bf0ef85a906fd80d86ee5d25f0f55f742bf4777a7182736e30f0c465076bb19de5781c15357dd9c0f9247dc44e8744216071937480f079136dead7af359ebb0cc530131f483de2c418a3c6c18e969b425b3e74d9956dca039996d81b1874fc70472577eec06b5a20af28f6dae669deccafc12507fa448f07e1b086af575592c357a6f57c961a0d481fd1beccd0b871fde5a65e737f3d94e2a25e44a167f5a40c53cd21ef02ae5c0161895f0496edbf82b23378b298a99b986d35185f67ac537143a4db6f672ad84c4201fb55724f3c6fe39ca150e1595d6c893c571eaa8b7c44385ed8ff593bdc37159f804c442e0fd7997c7823a81e3e0af52467d2c309f23e3170eecea778ae25120444510db77b2b3a55527c61d367f676c995d3ba3c5ab84230bf7a89cfbd502ad273cae117b285385325ec5efeca8ffc0411172dddde51dd0793cfacb6b8380bfdfadddbc3f596e4a05bdf72aaee2692318b7112e96b73e2a216fee97f883103bbeb7b77352bb9d3e54dd4abb07a196912bc4d99ad3550343c1bc40061ba0ee2cab257fb8d718211f8a1f0d9413c604b4477a05fb52294c4d8b9037efa1b08d0c5fdec586b0f2a594660f71e9fac848ba272ca115cb7754a3e47d2c91d8e8cfa677fbf8a6d42524c47464cc28d30666f6f84b7718781f0933030786c9553a48d465065b4bdf673ddad584f7f039cdbfff57668961ed14606d9a6b9c9aea825c47a99efe4804f43957a5a78babf4fb78ff86e0e909650422da630c9e9b3ee3f6036870f5640e323a2412cddd4a2d41af9ccd8e2d644dc9bce3edd890072c6b73614850384a7c0ae3a6785eb2f7be117979fa77d6093bcb5a4dcfbec4e4ab77414ef577b66715d97685a1d88805ceeb921c720f3e729d21031effa82518471743ee7d60bd5ddcf96c1c7b09bb47a7527f8ba7ae8f5b69a36b22417e92dbc06540312060536faf77ed239b24f7148fdb59ea8e1166155dc5650d035216378bf5cac827d5933ef2967377046421758256f3c8117d7151d319af841c3dc67cfd650382d3b5470e2846797f2a4afb50178f602d1e8b75b5bca4941ff9c5afedb04fd655ef90c5655a083797e8c3f626546165bddd9009c37f193e770e9c2a2920b92b98a4ee15dcc0534dfcff71123461f777cb755329ad3841c827a408519b1d9eaba79191c10e61c7517476185a73e7cbbdb9ee6480c76e6f11f29362c64dda0f31bdcf0b535dbbef70af7595cbfb6402e3da9c311b8c0299fc727d4a7573dad188b9492020a9aae0b6457db59811c146d7950fe03e9b42ead9d55975d516db28124f29856abeb4d7ed70d0489941be398868e8318eea26dd921e9379bcff97a01708924584c8d0faf3b9da4e0d2de92296e69cf160669405da3523546a4d267083aefd91265869f429299319d1ea4302294b0cd9a099377494051f522aad10948bbffbe41226a86238fa2f6baf9ab6090a0d8280b690dcbebc2c151565df1f2417ddb9c636edf893dda2ebdab50d3f97a023d42bf68dfbc98650f4763a777eaacbecd1d0cef904661c9dac9bf88b58dd8df30e2af3ae12c224ebe002b334f644136748ecbc85cba7b6c79a2f0ebb4952fec8aea804b861eec9d3bc0420fadf6a165c5b919519be4cce0f304a94a2c58a6e563766847e6357d4a41e0dccb48d34b82fe5483aba96269142240c6d833844920cc70f9e967a1f25bd2fa53d34c90f788dd0aea8a4c3ad6333e71b8f8bdb29bc8917c0c821f9e409e3620f6654352d1104475a5f4d6ff022553edeac01af95fc3b5d7cfc9ffbc5167a9835f5a24f933349ab5049401114982f2a0666ba886a7f09c162097ffc1d6f3c4c35a33b9070d121d315cfa9274025c090368af82612fc395b2b1809f79817e9e0a257b262332a73d92b2a2ec47548b09bffc641f6ded7ea7847867bada88616535c89b8db2f237d93d3804db65a5a0dbfe63917a65bf1e0f752a02baf0a1ec553c4583f6474eba3a6b484d50bbfebb944ce3892e257358baf853ecd6b8664621781d5a24161220fe7f874e635b4dc5abc7871b4704aee9694761f9929b81934b4fa5a47826a0251181a5d5a75eabe9b42fb909147bcda14beec3aab4eb01fd08e6c9f6a5d53d305a9487a6302b02987a8fa11279b1cb210e485e5922839d57bcb13e57729b1e525b0b83ba167e945f6b32177b3dbd7fc2b8b3a4a702da3233b98e6f5fe5a9f73115f562ada6aefc7398a59539c6e27676e23438c53bf01854914fa83b168b9c1e9ca817381fe10c1bb03b28c9ab48b8e275d89b45193687a5812b69ce6d6828ec3ce8a7e2eddd6a2a58202f73fc1d53cb60e4a646cfc72866f2315b5583bce39bbb73e4098cf8cbd0aa018c187d71498cfcfad4280ae9200d02f8f45b74dbe44075c6e7e43338814110e101d3e7fdf64303aeba687a86aa0cc6d7fad77f893a23773410beb30e07fb353b3a5a3aa8132b1091cc2cf394fce6aaf73e67ffb5e0935a65405f8f80ccf502b130f54e4cbba1a6c3db6ddcae754479565ae9e5c534ca7591f408bb8c98c098838971dbbcbbeac254f4eb5b08d96659be06640b34455ccda33df0e1d90e71a572872d12807288ae2177814ce74d33938e0bd98b97f2bbeb87280ec53d156c417b10c234754e51f56b7117f57149b59e0f954dc2df7d5297796d9d5763b87a46e79612541559c5025c7fa6a3c4d12feeb254e87a093071fdbcdf39bad223316a5ae1deb6b37f794d6df483830e7769dacf7db33baf18861eaf9cc16f5e752accff5c13c861598bc4ee2ea2bebc99e777d87c8f85da34cf803bb396ce2026850a2a68753d3fa74a99a237caae55fa5d377bbf31a189634e9759df1de8f14f91338e806d8c730e9b8bae521617f6c6ee6d200c540b606cba202e123fc92a73200b0172a2ee94ae9d12d68b86a33c20e30f3e2802987ce2cc6c68299c4a07f18d9612c71ae0d9d6914b914ef1dce2d716576e682c024fb0cd1c35c8a8ac4e7fc7c235a1848b57b901044ae04b916295d21d80d2835d53c8a95c7926889589d0b4e8b68ad20a42a236063c20707789967208b6477cbb4b466eba650a2655a03869d484eb1acbf18012a635811b2ad226b5811295f76952d11c2165a514658f2927a4039928fbf4918d5fbaf4b6f7f603f65536cdca7bf04e96746cd01b7f29e7f107a64b78add9a694b42781835ef78719b7667fec3120da63be7dacc3c37a26a55fc4933ca2ea1560496b81e90708ff528927e9f54971b384617393864e9937d6cf6ff3f35102a46f68db978cc573363af706d8f22b28b826d122953f95ab37551e499862abaca7f35e39951d3046ee9b84d479c7d0c16c31f68bf0dd72a9d7d9c88863b778bdf15790f8a2a4562193f91e1d1f874abf212e93f8529bd829222d55a7f1ae3f193e8afe516482906ef02a73ef1a95074f9e70d9442d014986fb3ce48fe359fc2dd4f48f32e7560da3d3cbf8df5e77b1beac6c99cf4346593f3e673091d5ca6db7a4c787927c9b85ae45c7363a515c0879472907cc574b19af7049ddec4822dfd5b651f3f31274e05058d5a35b8fc582dd4aa35194613c558228f2739945369fb19928d0b20130d23ae30074dc77cfebbb71340fe52cf0477c33cc52e53bb156a3fc78728f155242e780aeae4cff79ce86d125ab1b7265adecf94164607c1631d37351c908ed43958f096fd1de7b3aeb0efa3e4c3d567d0f80d8222a0542063bdf5cf8e049a108d3399745fad4dc6f18e5781185a2376cceca429ffa90bf0d1bf85d33051f7ff6d8f80d316b7daa8a2a22e6aaf327eeae8982fb863c3b0afb6fdee1e901273509e3209c53aa4dbce5a9acfbf02958da93a58d6a96019a64eace6abfb0b67a1ad5a9ee125ce70314321e35610140ad1b122456622d7dc10c5b9eaaaf4d65273ccfd5b02179ff2568046d264370b6fd19681518ba2c5a8f765bb702eff0d8d2af8b0f7b37aa050990ae8870cdbb8e76c666bffb6188040e0573c37c49d1ee049c23e74a72880320b0b7a2a43971e443ab957b29d98855fac5ac52741b864c2d9fd05c3505b1a8e34cae360c3631cf75ccb0bebb356833641a1d24016e43aace275d860ed3614913fa8c78ee64bd6b73cfefa10b0f67b5eec82e71bc55e0ed1c2ffddf05043aa5d382eb36d41f2e569a5e14a2104e2c7b04e05537d21544e488451ff5781e805bb602dabcdb0fd774f104a8b3bbfa65db0e0435a39a048be8ccfc31b5398689b42021aea9f09953a90915f3ffcb1b6703d9b1544c5cc05f52a42fab801580d61c985714ab3c1b889192298555d1ec0609e27f6532421ad3a29d54270be8e4b30cb8062719636e89bf1c1908cb4ee3683bdad4fe662c38554e0b114c1404c398c2566a0dec0ba5509d4550b6d3579450754c428f8c58f62d64f7b88be6d3ff7de3e5bf478a9d176c1aae6af4528527794aed19ec5fd03506e4d0a59eeaa1bca944aa3405d896357e29d7bf6ed9b9db264784c4502f7567d74d81c511d722babeb4b46796b543e101fc5f82dde9d947689a21e9b4bea925e83743def4a4ab7f1f0af73ecb63311162823a0554a0cd9a48859ebd3eba18d4ef2016fad8e14b00f439b87d1c1b1bac892e1f38cbfbf8d8811a742e3da707239f7229ffeeeb0dfd87e5ad64dc773207b3874152b92e7c9bbd112793c6f28c261cafc79c0da6f2249753c5c828122d32442b7d31fab4767fe54e71a2d592d9142503daf2c2f6ddaaca6b500df333c82d7802691d36a277324159cfb108b89b580a78d9142666f5d19375de50b0b6cfc9ac2a7e60cda4a000590c5a40764a798ef03fca39796f8a2f2c83db9ca25d2d8bc37dab36659a4c29c1b74a1df88222672382c6fba6b94c42de46f73c66f569e64b1af816403bb0aa0fb87961ba0ad1ca2e2e9b30de12ef8bef4ce7cf20c1f5dbf55e03f49cafd913b284241463cdd275bb30a9988b63732ee35b7f2a352c1ed63f62ef069be3f1b3b6e302e7efd870fc9aa65e1c18d100327e549d5f6511c735793ad13da1fe3a39798bc5039bae8d76ec3ccc6048314cfdf77314014fa201649b0eb46f4fc8a057ffa558fb6cc316b91a1128aee6333b0033066f1f4cc52c2cbd2e19cef28e1245aea31ca5594ff427801d32149e4b234d4fd9b0e35d45d323e99da15f6af753fbda76f54383f2d0a36c4a7fa66bb688540c1113815adab9034e0d59d305c852f26b0758d902cf9582dace8ef74b6a5de4ec1722570a0327720569d37ccefe4d9cb72b8987c8beeb964b43d384fc143a2d8ef578c1eb58213de5dc989083643968d5dc66d32ff1f6fcbfc504a2df3e6c83585db929edfa02509f92ef1872453e99766820d059aa94f523c02801ddbd9daf676a4a989c32ba71f8fa283b06f21869cd9f3e521e0e37d1002600bfeff92641200015cc9582953152bb6876f185b1088c519bc99591b82374168770a0e73a49f3aade0bbc1aa735adc753e8cc9ee62e07baff8c9a2b5c08f81c8c57a8aec170eb421ae7e05e766d77d5ea6bf0d3b139ae055c1cea4fa03e1e55b02514cee97b795ae2356ea27db3e81433eede0629ff1ccae2731d5dbb144b0dcafc0d8543ecc49ac39d9f3ebbc92a10a55b32ebdf7ef9e3c4cfe112957c393d988798c0caa3a0289d14943ae836ef0b65e6127daf1512000d9366ecb17808305d7dba796afc6a3c2b682d3ba27b000000658d96d1be871de06da486c6c290e0101bd7693d8e67ad68e0cc05a26dfce8a0942a074df57d07b6b46f5e1313ea2d0e71b2b675bc6030de68852d5e39437b20a3bfcd837443b0f002c0667eda3eb65475b7a36f424e7f78939f124d87840a46455762c5ab118911b7079abf8e8862067024cf05f4380626f05fa3a7a90343e47a22b81d8f17de537278bd19d74f06fe87218977a6b31b90a79babe16b6a4026f69862ac95e26975129d00ad415fac0d1ff7f1abdc2822c179606e9b01f27d2ab8588a10bd10ed79ef9e276fe4c945cf8c3fe800"], 0x1344}, 0x1, 0x0, 0x0, 0x4001}, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x80080, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec2\x00', 0x40, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0x2, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid\x00') syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(0x0, 0x6) syz_open_procfs$namespace(0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptyec\x00', 0x101500, 0x0) r4 = socket(0x10, 0x2, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) 2.384347154s ago: executing program 1 (id=266): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb4, 0xffffffffffffffff, 0x5) close_range$auto(0x2, 0x8, 0x0) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto_v4l2_fops_v4l2_dev(r1, 0x80085617, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) bpf$auto(0x2, 0x0, 0xc) bpf$auto(0x4, 0x0, 0xf) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0) pread64$auto(r3, 0x0, 0x10000000000b, 0x2) getsockopt$auto(r2, 0x84, 0x10, 0x0, &(0x7f0000000240)=0x10009b) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/net/rose14/tx_queue_len\x00', 0xe3102, 0x0) sendfile$auto(r4, r4, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x40c00, 0x0) ioctl$auto_RTC_AIE_OFF(r5, 0x7002, 0x5) r6 = socket(0xa, 0x801, 0x84) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) listen$auto(0x3, 0x81) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), r6) r7 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/config/target/dbroot\x00', 0x2001, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7ffffffff000}, 0x7) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f00000029c0)=ANY=[], 0x13ac}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) accept$auto(0x3, 0x0, 0x0) 2.192920344s ago: executing program 0 (id=267): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/mtd0\x00', 0x0, 0x0) ioctl$auto_MEMGETREGIONCOUNT(r0, 0x80044d07, &(0x7f0000000700)=0x2) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) r1 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3da) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_THERMAL_GENL_CMD_THRESHOLD_DELETE(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB='\t@\x00\x00', @ANYRES16, @ANYBLOB="000126bd7000fcdbdf25090000000400018004000f80c3fc0e003264650101000000000000636572320014001300766c616e3000"/62], 0x44}, 0x1, 0x0, 0x0, 0x8004}, 0x40) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/scsi/sg/allow_dio\x00', 0x101181, 0x0) socket(0x2, 0x1, 0x0) socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) unshare$auto(0x40000080) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) read$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffffff, &(0x7f0000000200)=""/238, 0xee) r4 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0) ioctl$auto_RTC_ALM_SET(r4, 0x40247007, &(0x7f00000000c0)={0xe, 0x5, 0x2, 0x0, 0x5, 0x2003, 0x74f, 0x1fb, 0xf}) ioctl$auto_SNDCTL_DSP_SYNC(r3, 0x5001, 0xfffffffffffffffc) unshare$auto(0x40000080) socket(0x1d, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 1.803089448s ago: executing program 1 (id=268): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x941683, 0x0) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_TCFLSH2(r1, 0x8926, 0x0) ioctl$auto_SG_SET_DEBUG(r0, 0x227e, &(0x7f00000000c0)) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x540, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vkms/graphics/fb0/stride\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = io_uring_setup$auto(0x4, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) modify_ldt$auto(0x1, 0x0, 0x10) modify_ldt$auto(0x807ff0000000000, 0x0, 0x40100000000aa) close_range$auto(0x2, r4, 0x0) ioctl$auto_SG_GET_REQUEST_TABLE(r4, 0x2286, &(0x7f0000000240)) r5 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$auto_vdpa(&(0x7f00000000c0), r3) sendmsg$auto_VDPA_CMD_DEV_CONFIG_GET(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@VDPA_ATTR_DEV_FEATURES={0xc, 0x14, 0x7}]}, 0x20}}, 0x4044000) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010026bd7000fddbdf250100000008000900040000000800020004000000060003002a00000004000500080001"], 0x38}, 0x1, 0x0, 0x0, 0x40810}, 0x800) 1.409618326s ago: executing program 3 (id=269): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x80100, 0x0) r1 = semctl$auto(0x0, 0x6, 0x3, 0x3) prctl$auto_PR_GET_TSC(0x19, 0x780e, r1, 0x9, 0x8) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x3ff) r2 = socket(0x23, 0x2, 0x0) ioctl$auto(r2, 0x89a0, 0x8) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x0, 0x4, 0xeb2, 0x401, 0x7ffc) close_range$auto(0x2, 0x8, 0x0) socket(0x2c, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) io_uring_setup$auto(0x0, &(0x7f0000000140)={0x4, 0x2, 0x6, 0x6, 0x5, 0xef, 0xffffffffffffffff, [0x3, 0x10000, 0x101], {0x7ff, 0x3, 0xc, 0x6, 0x0, 0x0, 0xfc2, 0x6}, {0x7, 0x5, 0x6, 0x8b83, 0xc, 0x8000, 0x9, 0xc4e, 0x7}}) prctl$auto_PR_SET_MM_START_CODE(0x6, 0x1, r1, 0x7, 0xfffffffffffffffd) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x8002, 0x0) socket(0x15, 0x5, 0x0) socket(0xa, 0x2, 0x88) madvise$auto(0x0, 0x2000040080000004, 0xe) mlockall$auto(0x8000000000000001) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) ioperm$auto(0x7, 0x6, 0x2) flock$auto(0x6, 0x1) 1.031377675s ago: executing program 2 (id=270): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb4, 0xffffffffffffffff, 0x5) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0) pread64$auto(r0, 0x0, 0x10000000000b, 0x2) 949.712047ms ago: executing program 2 (id=271): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/loop6\x00', 0x8080, 0x0) r1 = accept$auto(0x3, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r3, 0xb01, 0x70bd27, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000084) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f00000005c0)={0x904, r3, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MLO_LINKS={0x8e0, 0x138, 0x0, 0x1, [{0x284, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_HE_CAPABILITY={0x3a, 0x10d, "029afe6127f3305c177f94e1dbab44fbe80eb539e7b1fbcc5bac01d1c25dabbed075433fa6a7c3f72a47f903b1f92693b70465664a65"}, @NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x2}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}, @NL80211_ATTR_MAC_ADDRS={0x214, 0xa6, 0x0, 0x1, [@typed={0x14, 0xe6, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x76, 0x0, 0x0, @fd=r0}, @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@loopback}, @typed={0xdc, 0xee, 0x0, 0x0, @binary="7dd8ad5a5193335ebd8aa0f07b62301024df0899fb1ed3f649bd6ed5a2dd803b0590d094b5b808bb6634dc12d0310b151e801acf22597ecf556a3c844a86228b8cc675a8f5c275ce9616e62510cd63e0561ce967b3a452408e1f21a6fd39419174e9ece39b6544b5f62e65b982d751e423168d3eff3d12e06e4883319841152b59abcf3e426e0e97110afa0641e814c17f89a7376bb6bac33faf9a1b2dab37b72e83d201853220047f34a226e05c16d5d58e7b4e0ddafb38bdecf413e7aea51a17f220475b1b50de4481591b0d6aba48c50cec26f7535081"}, @typed={0xc, 0x66, 0x0, 0x0, @u64=0x7}, @nested={0xf5, 0xa9, 0x0, 0x1, [@nested={0x4, 0x78}, @typed={0x55, 0x142, 0x0, 0x0, @binary="95f6ea6e266e1fbd2caf6989cfcfe3e5474bf7c93bbe5e3e36f82ffb18d7c8616d38b92e0801c90cc5d7edfc6845b7343a02343d2fde857a8f9b98cfa292e803d91c600abc1a6da5a27fba4ef76ba100b3"}, @nested={0x4, 0x76}, @nested={0x4, 0xff}, @generic="468cc027a234e662295d20f35699c4b011e9c4e7251b490abaa2821470ceefa2af7a1cc7f86fda67f122931ece89767b93a84c18bd0319af49a4efb7a4cb8b63c61fa111aa2823db56415dcb349086df3057ff015f261bf1c749f61ab10637b1b5338cff9c247051e70e06098a6821536551e21192ad8a0d32fd09", @generic="037d026afafb52aa6b6b3c9e80b45193cb8a"]}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x4}, @NL80211_ATTR_COLOR_CHANGE_COLOR={0x5, 0x130, 0xdd}, @NL80211_ATTR_PMKR0_NAME={0x5, 0x102, "b7"}]}, {0x420, 0x0, 0x0, 0x1, [@NL80211_ATTR_PROBE_RESP={0x41a, 0x91, "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"}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0x1b, 0xe8, "331cc491d66d7df138753d1f408a48a54820c613ec4ad1"}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "3b89323eb2033e0c5f593a"}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0xa}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0xf, 0xba, "1e5f2550217c1231caec8d"}]}, {0x1e4, 0x0, 0x0, 0x1, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0xe3f}, @NL80211_ATTR_MAC_ADDRS={0x1bd, 0xa6, 0x0, 0x1, [@nested={0xe3, 0x43, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x1}, @typed={0x7, 0x63, 0x0, 0x0, @str='%$\x00'}, @generic="73f8d57b36001c8ba1618a75defdc7a2efe11864a404a05fd9d68193474b8c4523ffb2b026a96665c5b0e4c22fbe33ba07cb70c92e3527bb49a45264e5ebe89412c6aae6f4ac8174429d725dba424d947b748052ec064d93b6f4b27d67649860a241fe5f4fb0bd0a0c8ccf839e78434616fbc6d0cae7edd7a6ee7c8f0c6199e44595eb6f48c3fad300b08e64e9d4948dd662dc4cb9d8fa27ce791cadd597530d7e627cd85614ed70c69e6d3354dfb3", @typed={0xc, 0x5a, 0x0, 0x0, @u64=0x1000}, @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @typed={0xc, 0x138, 0x0, 0x0, @u64=0x10}]}, @generic="cc772284f37478cb780b334bb9300ead4bb5fab4b4be924d6f2ccb4588a9d6dc5d8b88f494864506ab81eaac22ee5393076dfa12e78bf5b0a9305ecdaed9b4211baa695c0b0be1aa30fb214436958214b02723ce17abe255db31220d43002a8a3ccff8ea7a42a73ea6e28ba3a82ca595b6df4193e54bc160a4e71c28ec915981bc16ad7932503ba4a17fbe08598346453c8c374146299a3887c07684738f1b15cd10911da0da59569d852ab618a4ac42ab8e7be68b3d611015", @generic="d65e51e5b1bcc90b4c2a4048956469e4", @typed={0xc, 0x4b, 0x0, 0x0, @u64=0x10000}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_FILS_ERP_USERNAME={0xf, 0xf9, "b7151d2ea9c6fa4524935a"}]}]}, @NL80211_ATTR_SAE_PWE={0x5, 0x12a, 0xf}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}]}, 0x904}, 0x1, 0x0, 0x0, 0x4041}, 0x1) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x12, 0x3, 0x180000000) mmap$auto(0x0, 0x9, 0xc00000072, 0x8b72, 0x1000000002, 0x8000) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/net/ip_vs_conn\x00', 0xf00, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dri/card1\x00', 0x6082, 0x0) r5 = socket(0xa, 0x2, 0x0) r6 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000180), 0x80080, 0x0) ioctl$auto_LOOP_CTL_ADD(r6, 0x4c80, &(0x7f00000001c0)) setsockopt$auto(r5, 0x29, 0xb, 0x0, 0xca6) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r7, &(0x7f0000000440)='Y\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) r8 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r9 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf2504"], 0x1c}}, 0x4044820) readv$auto(0x3, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) openat$auto_fault_around_bytes_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2282, 0x0) close_range$auto(0x2, 0x8, 0x0) r10 = bpf$auto(0x20, &(0x7f0000000140)=@bpf_attr_11={0xffff, 0x6, 0x7, 0x800, 0x4000ffff, 0x3c09, 0xffffffff, 0xffffffffffffffff}, 0x81) madvise$auto(0x0, 0x20000a, 0x4) pread64$auto(r4, 0x0, 0x594c, 0x7) ioctl$auto_FS_IOC_FSSETXATTR(r11, 0x401c5820, r10) unshare$auto(0x40000080) 640.490633ms ago: executing program 0 (id=272): mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mbind$auto(0x2001, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r1, 0x0, 0x39b8) capset$auto(0x0, 0x0) capget$auto(0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1a9901, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x101000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = syz_open_procfs$namespace(0x0, 0x0) ioctl$auto_MON_IOCX_GETX(r3, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000080)={0xfff, 0x9d, 0x0, 0xd, 0xc6, 0x8, 0x2, 0x5, 0x100000001, 0x4, 0x4d, 0x9, 0x2, @iso={0x3ff, 0x7f}, 0x9, 0xffffff81, 0x2, 0x6}, &(0x7f0000000180)="af6137feb4a816345b588822f37a151cf2b1671d8887b101d406f68c08a49cebe7649be3b0f38922bfde099a4b3069184210ac9d966abc4e690cf57500000000000000000000000000000000c7b38966301e51bf9e75fdd8249713b58523e280d91420774fa7edb9ed8e3ecb4bd56b8942d3b061f997ca8ac807f6e9661080740cfe582de7dc109b90af9d1ddbd2cf7875582dbf11e8495b3a96a61bf7e56baa980ed5f7f1091dc19050df6299326981f05d5df0a455c21fe8a0271b83ae2bc7f01a336d7afe1540d7737b1e7b5e3d5879e78c8b60fed546e63c9c8bc59dea23aa53657dc017abae1fb67bf9", 0xfff}) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, 0x0, 0x40001, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/29, 0x1d) socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r5 = socket(0x10, 0x2, 0x6) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, r6, 0x1, 0x70bd28, 0x25dfdbfd, {0x11, 0x0, 0xfc}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0x3, 0x0, 0x100082) link$auto(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)='./file2\x00') 528.095167ms ago: executing program 1 (id=273): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/usbip-vudc.0/usbip_status\x00', 0x20440, 0x0) r0 = epoll_create$auto(0x4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video37\x00', 0x80800, 0x0) alarm$auto(0x0) keyctl$auto(0x14, 0x72510000000, 0x69c6, 0x0, 0x0) madvise$auto(0x7fff, 0xfffffffffffffffc, 0x67) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0xfff, 0x1ffc0000000, 0xe0, 0x16, 0xffffffffffffffff, 0x28000) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto(0x3, 0x4018bc13, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/031/001\x00', 0x50d000, 0x0) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) semtimedop$auto(0x40, &(0x7f0000000140)={0x0, 0x81, 0x33}, 0xb5b, &(0x7f0000000180)={0x1ff, 0x9}) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) flistxattr$auto(r1, &(0x7f0000000040)='#}!#\x00', 0x2) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD2(r0, 0xc1004110, &(0x7f0000000280)={0x8, [0x4, 0x2, 0x5], [{0xe6, 0x9, 0x1, 0x1, 0x1, 0x1}, {0x59c0, 0x3, 0x1, 0x0, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x0, 0x1}, {0x0, 0xffff0001, 0x1, 0x1, 0x0, 0x1}, {0x7ff, 0xfffffe22, 0x1, 0x1, 0x1}, {0x9, 0x4, 0x1, 0x0, 0x1, 0x1}, {0xc9, 0x1, 0x0, 0x0, 0x1, 0x1}, {0x8, 0x5}, {0x0, 0x8, 0x1, 0x0, 0x1, 0x1}, {0x7, 0x7, 0x0, 0x0, 0x1, 0x1}, {0x3, 0x7}, {0xe, 0xb, 0x0, 0x0, 0x0, 0x1}], 0xfffffff8, 0x5, 0x6e, 0xd13, 0x5, 0x0, 0x401, "ce2880070d82c1f9bc008ba8ef2ea962ad94510829713e2caeb7f8fed6fdb2261f726ee4bbeb9d31f0fea257abcbf852b28ad7576e50df293d0fed29c560d03f"}) newfstatat$auto(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x1000) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="468e4bce", @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf252100000008009f0007000000050060000d0000000700fe005b2b77000500590007000000050088000f000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) socket(0xa, 0x801, 0x84) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto(r4, &(0x7f0000000000), 0xef) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) 0s ago: executing program 1 (id=274): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000080), 0x101400, 0x0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="bfd8001e8a8acb120e775acb0809aff51a00", @ANYRES16=0x0, @ANYBLOB="251729bd7000fcdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x41000}, 0x64810) socket$nl_generic(0x10, 0x3, 0x10) rseq$auto(&(0x7f0000000300)={0xb, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8) mmap$auto(0x80000000000, 0x400008, 0xe0, 0x9b72, 0x2, 0x8000) r0 = epoll_create$auto(0x2) epoll_pwait2$auto(r0, 0x0, 0x8, &(0x7f0000002780)={0x0, 0x6}, 0x0, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop12/queue/nr_requests\x00', 0x80302, 0x0) clock_nanosleep$auto(0x4, 0xfff, &(0x7f0000000240)={0x1, 0xfffffffffffffbff}, &(0x7f0000000280)={0x78f4, 0x1}) sendfile$auto(r1, r1, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) mmap$auto(0x0, 0x7, 0x72, 0x8b72, 0x8f1, 0x2000) io_uring_setup$auto(0x3ff, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendto$auto(0x3, 0x0, 0xfffffffffffffdef, 0x101, 0x0, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.219' (ED25519) to the list of known hosts. [ 77.816634][ T5820] cgroup: Unknown subsys name 'net' [ 77.949762][ T5820] cgroup: Unknown subsys name 'cpuset' [ 77.959548][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 79.633305][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.589072][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 80.595738][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.508304][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.516445][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.525644][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.533660][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.554679][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.564174][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.572226][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.575217][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.579588][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.594911][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.603759][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.612446][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.615215][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.620106][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.628397][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.641480][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.648822][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.657754][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.665192][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.675485][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.997220][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 82.016557][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 82.067351][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 82.193477][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 82.208117][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.215887][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.223291][ T5840] bridge_slave_0: entered allmulticast mode [ 82.230916][ T5840] bridge_slave_0: entered promiscuous mode [ 82.239328][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.247015][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.254605][ T5830] bridge_slave_0: entered allmulticast mode [ 82.262413][ T5830] bridge_slave_0: entered promiscuous mode [ 82.270454][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.277790][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.285098][ T5830] bridge_slave_1: entered allmulticast mode [ 82.291939][ T5830] bridge_slave_1: entered promiscuous mode [ 82.318443][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.325617][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.332940][ T5840] bridge_slave_1: entered allmulticast mode [ 82.340200][ T5840] bridge_slave_1: entered promiscuous mode [ 82.364784][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.372039][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.380267][ T5829] bridge_slave_0: entered allmulticast mode [ 82.387239][ T5829] bridge_slave_0: entered promiscuous mode [ 82.394562][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.401762][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.409004][ T5829] bridge_slave_1: entered allmulticast mode [ 82.416055][ T5829] bridge_slave_1: entered promiscuous mode [ 82.451152][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.479231][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.517008][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.534086][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.552016][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.564180][ T5830] team0: Port device team_slave_0 added [ 82.572410][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.589771][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.598764][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.606763][ T5831] bridge_slave_0: entered allmulticast mode [ 82.613557][ T5831] bridge_slave_0: entered promiscuous mode [ 82.623013][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.630485][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.639639][ T5831] bridge_slave_1: entered allmulticast mode [ 82.646947][ T5831] bridge_slave_1: entered promiscuous mode [ 82.662802][ T5830] team0: Port device team_slave_1 added [ 82.698178][ T5829] team0: Port device team_slave_0 added [ 82.713758][ T5840] team0: Port device team_slave_0 added [ 82.727307][ T5829] team0: Port device team_slave_1 added [ 82.734363][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.741588][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.768104][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.782124][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.793018][ T5840] team0: Port device team_slave_1 added [ 82.813263][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.820656][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.847199][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.860202][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.893217][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.902361][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.930251][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.942118][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.949486][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.975882][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.990188][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.997638][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.023716][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.053540][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.060662][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.087163][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.115364][ T5831] team0: Port device team_slave_0 added [ 83.145666][ T5831] team0: Port device team_slave_1 added [ 83.166714][ T5840] hsr_slave_0: entered promiscuous mode [ 83.172938][ T5840] hsr_slave_1: entered promiscuous mode [ 83.185139][ T5830] hsr_slave_0: entered promiscuous mode [ 83.191445][ T5830] hsr_slave_1: entered promiscuous mode [ 83.197683][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.205581][ T5830] Cannot create hsr debugfs directory [ 83.232078][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.239835][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.266107][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.289057][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.296783][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.323202][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.338096][ T5829] hsr_slave_0: entered promiscuous mode [ 83.344241][ T5829] hsr_slave_1: entered promiscuous mode [ 83.350592][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.358259][ T5829] Cannot create hsr debugfs directory [ 83.426912][ T5831] hsr_slave_0: entered promiscuous mode [ 83.433433][ T5831] hsr_slave_1: entered promiscuous mode [ 83.440291][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.448269][ T5831] Cannot create hsr debugfs directory [ 83.668761][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.680855][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.691844][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.707069][ T5842] Bluetooth: hci1: command tx timeout [ 83.707115][ T5836] Bluetooth: hci3: command tx timeout [ 83.712991][ T5839] Bluetooth: hci2: command tx timeout [ 83.726621][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.774250][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.787467][ T5839] Bluetooth: hci0: command tx timeout [ 83.809092][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.819796][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.831975][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.870930][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.883255][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.893588][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.910318][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.976868][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.995479][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.011496][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.024847][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.035116][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.084672][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.108709][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.116115][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.165606][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.172795][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.199518][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.224375][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.265714][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.286742][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.294461][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.317607][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.329352][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.343943][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.351193][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.391479][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.398626][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.417638][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.435008][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.442267][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.458507][ T3509] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.465661][ T3509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.503492][ T3509] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.510690][ T3509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.597506][ T5831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.641657][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.729869][ T5830] veth0_vlan: entered promiscuous mode [ 84.774293][ T5830] veth1_vlan: entered promiscuous mode [ 84.840118][ T5830] veth0_macvtap: entered promiscuous mode [ 84.869419][ T5830] veth1_macvtap: entered promiscuous mode [ 84.930388][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.947853][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.981906][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.001662][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.025940][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.043314][ T5840] veth0_vlan: entered promiscuous mode [ 85.058229][ T5840] veth1_vlan: entered promiscuous mode [ 85.069645][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.079750][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.089296][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.098809][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.190759][ T5831] veth0_vlan: entered promiscuous mode [ 85.205351][ T5829] veth0_vlan: entered promiscuous mode [ 85.220444][ T5840] veth0_macvtap: entered promiscuous mode [ 85.251052][ T5831] veth1_vlan: entered promiscuous mode [ 85.260102][ T5840] veth1_macvtap: entered promiscuous mode [ 85.275519][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.277573][ T5829] veth1_vlan: entered promiscuous mode [ 85.302193][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.326804][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.340281][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.351695][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.374868][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.386880][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.399580][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.409648][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.410551][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.427397][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.427671][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.445531][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.454474][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.509099][ T5829] veth0_macvtap: entered promiscuous mode [ 85.530322][ T5829] veth1_macvtap: entered promiscuous mode [ 85.565389][ T5831] veth0_macvtap: entered promiscuous mode [ 85.606865][ T5830] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.607992][ T5831] veth1_macvtap: entered promiscuous mode [ 85.648901][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.660489][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.673059][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.684553][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.696985][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.723620][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.753222][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.768140][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.781022][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.791472][ T5839] Bluetooth: hci3: command tx timeout [ 85.794456][ T5836] Bluetooth: hci2: command tx timeout [ 85.797088][ T5842] Bluetooth: hci1: command tx timeout [ 85.809344][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.821240][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.866579][ T5836] Bluetooth: hci0: command tx timeout [ 86.058714][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.073457][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.084832][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.102603][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.113636][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.123721][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.136851][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.148641][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.179972][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.189482][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.193349][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.213845][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.224786][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.237823][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.248174][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.259147][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.274967][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.283311][ T5829] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.292256][ T5829] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.301704][ T5829] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.310494][ T5829] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.364645][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.374479][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.383634][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.392626][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.577326][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.585631][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.707541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 86.784710][ T3491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.822777][ T3491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.974605][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.974636][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.040458][ T5907] netlink: 452 bytes leftover after parsing attributes in process `syz.0.1'. [ 87.059606][ T3491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.059635][ T3491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.062494][ T5907] Zero length message leads to an empty skb [ 87.867507][ T5836] Bluetooth: hci2: command tx timeout [ 87.867556][ T5842] Bluetooth: hci1: command tx timeout [ 87.873099][ T5836] Bluetooth: hci3: command tx timeout [ 87.946542][ T5842] Bluetooth: hci0: command tx timeout [ 88.716125][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.724813][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.733648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.742316][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.751091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.762957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 88.820752][ T5957] netlink: 452 bytes leftover after parsing attributes in process `syz.0.9'. [ 88.827468][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 88.838735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 89.164993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.948521][ T5839] Bluetooth: hci1: command tx timeout [ 89.948553][ T5836] Bluetooth: hci2: command tx timeout [ 89.948598][ T5842] Bluetooth: hci3: command tx timeout [ 90.026862][ T5842] Bluetooth: hci0: command tx timeout [ 90.232040][ T5979] netlink: 452 bytes leftover after parsing attributes in process `syz.0.13'. [ 92.275191][ T6009] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.023181][ T6020] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.069285][ T6025] netlink: 452 bytes leftover after parsing attributes in process `syz.3.21'. [ 95.213618][ T6068] capability: warning: `syz.0.31' uses 32-bit capabilities (legacy support in use) [ 95.421226][ T6074] db_root: cannot open: 00000000000000 T srso_alias_untrain_ret [ 95.421226][ T6074] 0000000000000000 T _stext [ 95.421226][ T6074] 0000000000000000 T _text [ 95.421226][ T6074] 0000000000000000 T __entry_text_start [ 95.421226][ T6074] 0000000000000000 T mds_verw_sel [ 95.421226][ T6074] 0000000000000000 T entry_SYSCALL_64 [ 95.421226][ T6074] 0000000000000000 T entry_SYSCALL_64_safe_stack [ 95.421226][ T6074] 0000000000000000 T entry_SYSCALL_64_after_hwframe [ 95.421226][ T6074] 0000000000000000 t syscall_return_via_sysret [ 95.421226][ T6074] 0000000000000000 T entry_SYSRETQ_unsafe_stack [ 95.421226][ T6074] 0000000000000000 T entry_SYSRETQ_end [ 95.421226][ T6074] 0000000000000000 T xen_error_entry [ 95.421226][ T6074] 0000000000000000 T irq_entries_start [ 95.421226][ T6074] 0000000000000000 T __irqentry_text_start [ 95.421226][ T6074] 0000000000000000 T spurious_entries_start [ 95.421226][ T6074] 0000000000000000 T asm_exc_divide_error [ 95.421226][ T6074] 0000000000000000 T asm_exc_overflow [ 95.421226][ T6074] 0000000000000000 T asm_exc_bounds [ 95.421226][ T6074] 0000000000000000 T asm_exc_device_not_available [ 95.421226][ T6074] 0000000000000000 T asm_exc_coproc_segment_overrun [ 95.421226][ T6074] 0000000000000000 T asm_exc_spurious_interrupt_bug [ 95.421226][ T6074] 0000000000000000 T asm_exc_coprocessor_error [ 95.421226][ T6074] 0000000000000000 T asm_exc_simd_coprocessor_error [ 95.421226][ T6074] 0000000000000000 T asm_exc_invalid_tss [ 95.421226][ T6074] 0000000000000000 T asm_exc_seg [ 95.964617][ T6091] netlink: 452 bytes leftover after parsing attributes in process `syz.2.34'. [ 96.140818][ T918] cfg80211: failed to load regulatory.db [ 97.308037][ T6122] db_root: cannot open: 00000000000000 T srso_alias_untrain_ret [ 97.308037][ T6122] 0000000000000000 T _stext [ 97.308037][ T6122] 0000000000000000 T _text [ 97.308037][ T6122] 0000000000000000 T __entry_text_start [ 97.308037][ T6122] 0000000000000000 T mds_verw_sel [ 97.308037][ T6122] 0000000000000000 T entry_SYSCALL_64 [ 97.308037][ T6122] 0000000000000000 T entry_SYSCALL_64_safe_stack [ 97.308037][ T6122] 0000000000000000 T entry_SYSCALL_64_after_hwframe [ 97.308037][ T6122] 0000000000000000 t syscall_return_via_sysret [ 97.308037][ T6122] 0000000000000000 T entry_SYSRETQ_unsafe_stack [ 97.308037][ T6122] 0000000000000000 T entry_SYSRETQ_end [ 97.308037][ T6122] 0000000000000000 T xen_error_entry [ 97.308037][ T6122] 0000000000000000 T irq_entries_start [ 97.308037][ T6122] 0000000000000000 T __irqentry_text_start [ 97.308037][ T6122] 0000000000000000 T spurious_entries_start [ 97.308037][ T6122] 0000000000000000 T asm_exc_divide_error [ 97.308037][ T6122] 0000000000000000 T asm_exc_overflow [ 97.308037][ T6122] 0000000000000000 T asm_exc_bounds [ 97.308037][ T6122] 0000000000000000 T asm_exc_device_not_available [ 97.308037][ T6122] 0000000000000000 T asm_exc_coproc_segment_overrun [ 97.308037][ T6122] 0000000000000000 T asm_exc_spurious_interrupt_bug [ 97.308037][ T6122] 0000000000000000 T asm_exc_coprocessor_error [ 97.308037][ T6122] 0000000000000000 T asm_exc_simd_coprocessor_error [ 97.308037][ T6122] 0000000000000000 T asm_exc_invalid_tss [ 97.308037][ T6122] 0000000000000000 T asm_exc_seg [ 98.488135][ T6152] netlink: 452 bytes leftover after parsing attributes in process `syz.1.48'. [ 98.632269][ C0] vkms_vblank_simulate: vblank timer overrun [ 99.322473][ T6173] netlink: 452 bytes leftover after parsing attributes in process `syz.2.50'. [ 99.415483][ T6175] syz.1.53 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 99.755487][ T6178] netlink: 452 bytes leftover after parsing attributes in process `syz.3.52'. [ 102.309257][ T6237] netlink: 452 bytes leftover after parsing attributes in process `syz.3.62'. [ 103.635465][ T6250] netlink: 452 bytes leftover after parsing attributes in process `syz.0.66'. [ 104.397117][ T6289] random: crng reseeded on system resumption [ 108.167421][ T6343] netlink: 452 bytes leftover after parsing attributes in process `syz.3.80'. [ 109.391360][ T6354] netlink: 452 bytes leftover after parsing attributes in process `syz.3.83'. [ 110.782733][ T6396] netlink: 452 bytes leftover after parsing attributes in process `syz.3.88'. [ 111.958447][ T6437] netlink: 452 bytes leftover after parsing attributes in process `syz.2.92'. [ 112.735910][ T6435] netlink: 452 bytes leftover after parsing attributes in process `syz.0.94'. [ 115.095662][ T6497] netlink: 452 bytes leftover after parsing attributes in process `syz.1.101'. [ 115.920200][ T6506] netlink: 452 bytes leftover after parsing attributes in process `syz.0.113'. [ 117.134792][ T6543] netlink: 452 bytes leftover after parsing attributes in process `syz.1.107'. [ 117.309115][ T6547] netlink: 452 bytes leftover after parsing attributes in process `syz.3.108'. [ 118.119703][ T6567] netlink: 452 bytes leftover after parsing attributes in process `syz.0.119'. [ 119.968950][ T6593] netlink: 452 bytes leftover after parsing attributes in process `syz.3.116'. [ 120.996670][ T6564] mmap: syz.2.110 (6564) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 122.068815][ T6653] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 122.439866][ T6649] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 122.449284][ T5842] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 122.558435][ T30] audit: type=1800 audit(6038056568.740:2): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.124" name="dbroot" dev="configfs" ino=11088 res=0 errno=0 [ 124.332437][ T6680] FAULT_INJECTION: forcing a failure. [ 124.332437][ T6680] name failslab, interval 1, probability 0, space 0, times 1 [ 124.346186][ T6680] CPU: 0 UID: 0 PID: 6680 Comm: syz.1.125 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 124.346223][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.346244][ T6680] Call Trace: [ 124.346265][ T6680] [ 124.346279][ T6680] dump_stack_lvl+0x16c/0x1f0 [ 124.346320][ T6680] should_fail_ex+0x512/0x640 [ 124.346403][ T6680] ? __kvmalloc_node_noprof+0x122/0x600 [ 124.346467][ T6680] should_failslab+0xc2/0x120 [ 124.346519][ T6680] __kvmalloc_node_noprof+0x135/0x600 [ 124.346557][ T6680] ? lockdep_hardirqs_on+0x7c/0x110 [ 124.346594][ T6680] ? alloc_netdev_mqs+0xd2/0x1570 [ 124.346638][ T6680] ? __pfx_ipgre_tap_setup+0x10/0x10 [ 124.346673][ T6680] ? alloc_netdev_mqs+0xd2/0x1570 [ 124.346708][ T6680] alloc_netdev_mqs+0xd2/0x1570 [ 124.346749][ T6680] __ip_tunnel_create+0x31d/0x680 [ 124.346787][ T6680] ? __pfx___ip_tunnel_create+0x10/0x10 [ 124.346837][ T6680] ? read_word_at_a_time+0xe/0x20 [ 124.346876][ T6680] ip_tunnel_init_net+0x22f/0x7d0 [ 124.346917][ T6680] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 124.346961][ T6680] ? trace_kmalloc+0x2b/0xd0 [ 124.346988][ T6680] ? lockdep_init_map_type+0x5c/0x280 [ 124.347049][ T6680] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 124.347084][ T6680] ops_init+0x1df/0x5f0 [ 124.347127][ T6680] setup_net+0x21e/0x850 [ 124.347169][ T6680] ? __pfx_setup_net+0x10/0x10 [ 124.347205][ T6680] ? lockdep_init_map_type+0x5c/0x280 [ 124.347239][ T6680] ? __pfx_down_read_killable+0x10/0x10 [ 124.347275][ T6680] ? debug_mutex_init+0x37/0x70 [ 124.347306][ T6680] copy_net_ns+0x2a6/0x5f0 [ 124.347352][ T6680] create_new_namespaces+0x3ea/0xad0 [ 124.347405][ T6680] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 124.347442][ T6680] ksys_unshare+0x45b/0xa40 [ 124.347475][ T6680] ? __pfx_ksys_unshare+0x10/0x10 [ 124.347508][ T6680] ? xfd_validate_state+0x5d/0x180 [ 124.347534][ T6680] ? rcu_is_watching+0x12/0xc0 [ 124.347572][ T6680] __x64_sys_unshare+0x31/0x40 [ 124.347603][ T6680] do_syscall_64+0xcd/0x260 [ 124.347631][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.347664][ T6680] RIP: 0033:0x7f049c98d169 [ 124.347687][ T6680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.347723][ T6680] RSP: 002b:00007f049d84b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 124.347763][ T6680] RAX: ffffffffffffffda RBX: 00007f049cba6080 RCX: 00007f049c98d169 [ 124.347782][ T6680] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 124.347799][ T6680] RBP: 00007f049ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 124.347825][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.347842][ T6680] R13: 0000000000000000 R14: 00007f049cba6080 R15: 00007fffee659398 [ 124.347873][ T6680] [ 124.631903][ C0] vkms_vblank_simulate: vblank timer overrun [ 125.294895][ T6685] bond0: option all_slaves_active: invalid value () [ 125.460020][ T6683] aoe: invalid device specification [ 126.453828][ T6682] kexec: Could not allocate control_code_buffer [ 126.632624][ T6700] FAULT_INJECTION: forcing a failure. [ 126.632624][ T6700] name failslab, interval 1, probability 0, space 0, times 0 [ 126.632849][ T6699] FAULT_INJECTION: forcing a failure. [ 126.632849][ T6699] name failslab, interval 1, probability 0, space 0, times 0 [ 126.691548][ T6699] CPU: 0 UID: 0 PID: 6699 Comm: syz.3.130 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 126.691593][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.691611][ T6699] Call Trace: [ 126.691620][ T6699] [ 126.691631][ T6699] dump_stack_lvl+0x16c/0x1f0 [ 126.691666][ T6699] should_fail_ex+0x512/0x640 [ 126.691702][ T6699] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 126.691741][ T6699] should_failslab+0xc2/0x120 [ 126.691786][ T6699] __kmalloc_cache_noprof+0x6a/0x3e0 [ 126.691822][ T6699] ? proc_create_net_data+0x147/0x1b0 [ 126.691858][ T6699] ? netdev_create_hash+0x3c/0xc0 [ 126.691888][ T6699] ? __pfx_netdev_init+0x10/0x10 [ 126.691915][ T6699] netdev_create_hash+0x3c/0xc0 [ 126.691943][ T6699] ? __pfx_netdev_init+0x10/0x10 [ 126.691967][ T6699] netdev_init+0x70/0x230 [ 126.691992][ T6699] ops_init+0x1df/0x5f0 [ 126.692035][ T6699] setup_net+0x21e/0x850 [ 126.692078][ T6699] ? __pfx_setup_net+0x10/0x10 [ 126.692117][ T6699] ? lockdep_init_map_type+0x5c/0x280 [ 126.692158][ T6699] ? __pfx_down_read_killable+0x10/0x10 [ 126.692194][ T6699] ? debug_mutex_init+0x37/0x70 [ 126.692226][ T6699] copy_net_ns+0x2a6/0x5f0 [ 126.692272][ T6699] create_new_namespaces+0x3ea/0xad0 [ 126.692315][ T6699] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 126.692354][ T6699] ksys_unshare+0x45b/0xa40 [ 126.692393][ T6699] ? __pfx_ksys_unshare+0x10/0x10 [ 126.692430][ T6699] ? xfd_validate_state+0x5d/0x180 [ 126.692471][ T6699] ? rcu_is_watching+0x12/0xc0 [ 126.692506][ T6699] __x64_sys_unshare+0x31/0x40 [ 126.692544][ T6699] do_syscall_64+0xcd/0x260 [ 126.692575][ T6699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.692605][ T6699] RIP: 0033:0x7ff38118d169 [ 126.692629][ T6699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.692656][ T6699] RSP: 002b:00007ff381f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 126.692684][ T6699] RAX: ffffffffffffffda RBX: 00007ff3813a5fa0 RCX: 00007ff38118d169 [ 126.692703][ T6699] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 126.692720][ T6699] RBP: 00007ff38120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.692737][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.692754][ T6699] R13: 0000000000000000 R14: 00007ff3813a5fa0 R15: 00007ffd6d6474e8 [ 126.692785][ T6699] [ 126.696189][ T6700] CPU: 1 UID: 0 PID: 6700 Comm: syz.1.137 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 126.696225][ T6700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.696239][ T6700] Call Trace: [ 126.696248][ T6700] [ 126.696257][ T6700] dump_stack_lvl+0x16c/0x1f0 [ 126.696287][ T6700] should_fail_ex+0x512/0x640 [ 126.696363][ T6700] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 126.696399][ T6700] should_failslab+0xc2/0x120 [ 126.696438][ T6700] __kmalloc_cache_noprof+0x6a/0x3e0 [ 126.696470][ T6700] ? drm_edid_alloc+0x93/0x130 [ 126.696524][ T6700] drm_edid_alloc+0x93/0x130 [ 126.696551][ T6700] drm_edid_override_set+0x25/0x340 [ 126.696586][ T6700] edid_write+0xe3/0x180 [ 126.696623][ T6700] full_proxy_write+0x13c/0x200 [ 126.696666][ T6700] vfs_write+0x25c/0x1180 [ 126.696709][ T6700] ? __pfx_full_proxy_write+0x10/0x10 [ 126.696749][ T6700] ? __pfx___mutex_lock+0x10/0x10 [ 126.696773][ T6700] ? __pfx_vfs_write+0x10/0x10 [ 126.696810][ T6700] ? __fget_files+0x20e/0x3c0 [ 126.696852][ T6700] ksys_write+0x12a/0x240 [ 126.696884][ T6700] ? __pfx_ksys_write+0x10/0x10 [ 126.696915][ T6700] ? rcu_is_watching+0x12/0xc0 [ 126.696946][ T6700] do_syscall_64+0xcd/0x260 [ 126.696973][ T6700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.696997][ T6700] RIP: 0033:0x7f049c98d169 [ 126.697018][ T6700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.697041][ T6700] RSP: 002b:00007f049d86c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 126.697064][ T6700] RAX: ffffffffffffffda RBX: 00007f049cba5fa0 RCX: 00007f049c98d169 [ 126.697080][ T6700] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 126.697095][ T6700] RBP: 00007f049ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 126.697110][ T6700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.697124][ T6700] R13: 0000000000000000 R14: 00007f049cba5fa0 R15: 00007fffee659398 [ 126.697152][ T6700] [ 127.136613][ C0] vkms_vblank_simulate: vblank timer overrun [ 127.312232][ T6699] FAULT_INJECTION: forcing a failure. [ 127.312232][ T6699] name fail_futex, interval 1, probability 0, space 0, times 1 [ 127.325358][ T6699] CPU: 0 UID: 0 PID: 6699 Comm: syz.3.130 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 127.325396][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.325412][ T6699] Call Trace: [ 127.325443][ T6699] [ 127.325455][ T6699] dump_stack_lvl+0x16c/0x1f0 [ 127.325496][ T6699] should_fail_ex+0x512/0x640 [ 127.325535][ T6699] get_futex_key+0x49e/0x1000 [ 127.325589][ T6699] ? __pfx_get_futex_key+0x10/0x10 [ 127.325617][ T6699] ? kfree+0x252/0x4d0 [ 127.325658][ T6699] futex_wake+0xe7/0x4e0 [ 127.325702][ T6699] ? __pfx_futex_wake+0x10/0x10 [ 127.325740][ T6699] ? __pfx_vfs_writev+0x10/0x10 [ 127.325773][ T6699] ? do_writev+0x218/0x330 [ 127.325807][ T6699] do_futex+0x1e3/0x350 [ 127.325834][ T6699] ? __pfx_do_futex+0x10/0x10 [ 127.325862][ T6699] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 127.325895][ T6699] __x64_sys_futex+0x1e0/0x4c0 [ 127.325924][ T6699] ? fput+0x70/0xf0 [ 127.325983][ T6699] ? __pfx___x64_sys_futex+0x10/0x10 [ 127.326015][ T6699] ? __pfx_do_writev+0x10/0x10 [ 127.326048][ T6699] ? rcu_is_watching+0x12/0xc0 [ 127.326082][ T6699] do_syscall_64+0xcd/0x260 [ 127.326111][ T6699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.326140][ T6699] RIP: 0033:0x7ff38118d169 [ 127.326164][ T6699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.326188][ T6699] RSP: 002b:00007ff381f890e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.326212][ T6699] RAX: ffffffffffffffda RBX: 00007ff3813a5fa8 RCX: 00007ff38118d169 [ 127.326228][ T6699] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff3813a5fac [ 127.326243][ T6699] RBP: 00007ff3813a5fa0 R08: 00007ff381f8a000 R09: 0000000000000000 [ 127.326258][ T6699] R10: 0000000000000007 R11: 0000000000000246 R12: 00007ff3813a5fac [ 127.326272][ T6699] R13: 0000000000000000 R14: 00007ffd6d647400 R15: 00007ffd6d6474e8 [ 127.326295][ T6699] [ 127.521939][ C0] vkms_vblank_simulate: vblank timer overrun [ 128.527856][ T6713] FAULT_INJECTION: forcing a failure. [ 128.527856][ T6713] name failslab, interval 1, probability 0, space 0, times 0 [ 128.559546][ T6713] CPU: 1 UID: 0 PID: 6713 Comm: syz.3.132 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 128.559589][ T6713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.559605][ T6713] Call Trace: [ 128.559614][ T6713] [ 128.559625][ T6713] dump_stack_lvl+0x16c/0x1f0 [ 128.559660][ T6713] should_fail_ex+0x512/0x640 [ 128.559693][ T6713] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 128.559743][ T6713] should_failslab+0xc2/0x120 [ 128.559783][ T6713] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 128.559820][ T6713] ? sock_alloc_inode+0x25/0x1c0 [ 128.559864][ T6713] ? __pfx_sock_alloc_inode+0x10/0x10 [ 128.559902][ T6713] sock_alloc_inode+0x25/0x1c0 [ 128.559939][ T6713] alloc_inode+0x61/0x240 [ 128.559967][ T6713] sock_alloc+0x40/0x280 [ 128.560059][ T6713] __sock_create+0xc1/0x8d0 [ 128.560085][ T6713] ? lockdep_init_map_type+0x5c/0x280 [ 128.560125][ T6713] smc_create+0x15d/0x2a0 [ 128.560159][ T6713] __sock_create+0x335/0x8d0 [ 128.560189][ T6713] __sys_socket+0x14d/0x260 [ 128.560214][ T6713] ? __pfx___sys_socket+0x10/0x10 [ 128.560240][ T6713] ? rcu_is_watching+0x12/0xc0 [ 128.560269][ T6713] __x64_sys_socket+0x72/0xb0 [ 128.560293][ T6713] ? lockdep_hardirqs_on+0x7c/0x110 [ 128.560331][ T6713] do_syscall_64+0xcd/0x260 [ 128.560356][ T6713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.560383][ T6713] RIP: 0033:0x7ff38118d169 [ 128.560405][ T6713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.560429][ T6713] RSP: 002b:00007ff381f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 128.560456][ T6713] RAX: ffffffffffffffda RBX: 00007ff3813a5fa0 RCX: 00007ff38118d169 [ 128.560472][ T6713] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 128.560588][ T6713] RBP: 00007ff38120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 128.560606][ T6713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 128.560622][ T6713] R13: 0000000000000000 R14: 00007ff3813a5fa0 R15: 00007ffd6d6474e8 [ 128.560656][ T6713] [ 128.560865][ T6713] socket: no more sockets [ 129.391365][ T6730] FAULT_INJECTION: forcing a failure. [ 129.391365][ T6730] name failslab, interval 1, probability 0, space 0, times 0 [ 129.436012][ T6730] CPU: 0 UID: 0 PID: 6730 Comm: syz.0.133 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 129.436051][ T6730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.436066][ T6730] Call Trace: [ 129.436074][ T6730] [ 129.436085][ T6730] dump_stack_lvl+0x16c/0x1f0 [ 129.436116][ T6730] should_fail_ex+0x512/0x640 [ 129.436149][ T6730] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 129.436185][ T6730] should_failslab+0xc2/0x120 [ 129.436224][ T6730] __kmalloc_cache_noprof+0x6a/0x3e0 [ 129.436257][ T6730] ? rxrpc_lookup_local+0x331/0x1220 [ 129.436296][ T6730] rxrpc_lookup_local+0x331/0x1220 [ 129.436333][ T6730] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 129.436367][ T6730] ? __local_bh_enable_ip+0xa4/0x120 [ 129.436426][ T6730] rxrpc_sendmsg+0x375/0x5f0 [ 129.436469][ T6730] ____sys_sendmsg+0xa8d/0xc60 [ 129.436511][ T6730] ? copy_msghdr_from_user+0x10a/0x160 [ 129.436549][ T6730] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.436590][ T6730] ___sys_sendmsg+0x134/0x1d0 [ 129.436629][ T6730] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.436689][ T6730] __sys_sendmsg+0x16d/0x220 [ 129.436720][ T6730] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.436751][ T6730] ? __x64_sys_futex+0x1e0/0x4c0 [ 129.436784][ T6730] ? rcu_is_watching+0x12/0xc0 [ 129.436817][ T6730] do_syscall_64+0xcd/0x260 [ 129.436843][ T6730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.436867][ T6730] RIP: 0033:0x7fcf67b8d169 [ 129.436890][ T6730] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.436916][ T6730] RSP: 002b:00007fcf689d4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.436943][ T6730] RAX: ffffffffffffffda RBX: 00007fcf67da6080 RCX: 00007fcf67b8d169 [ 129.436960][ T6730] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 129.436976][ T6730] RBP: 00007fcf67c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 129.436992][ T6730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.437007][ T6730] R13: 0000000000000000 R14: 00007fcf67da6080 R15: 00007ffda09c8428 [ 129.437035][ T6730] [ 129.655993][ C0] vkms_vblank_simulate: vblank timer overrun [ 130.003897][ T6737] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 130.277232][ T6746] Invalid ELF header magic: != ELF [ 131.090734][ T6761] syz.2.142 (6761): /proc/6760/oom_adj is deprecated, please use /proc/6760/oom_score_adj instead. [ 133.689276][ T6803] zero sized request [ 134.887870][ T5842] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 135.307136][ T6836] FAULT_INJECTION: forcing a failure. [ 135.307136][ T6836] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.720297][ T6836] CPU: 0 UID: 0 PID: 6836 Comm: syz.3.156 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 135.720326][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 135.720376][ T6836] Call Trace: [ 135.720383][ T6836] [ 135.720391][ T6836] dump_stack_lvl+0x16c/0x1f0 [ 135.720420][ T6836] should_fail_ex+0x512/0x640 [ 135.720444][ T6836] _copy_from_user+0x2e/0xd0 [ 135.720469][ T6836] memdup_user+0x7d/0xe0 [ 135.720496][ T6836] edid_write+0x6f/0x180 [ 135.720518][ T6836] full_proxy_write+0x13c/0x200 [ 135.720546][ T6836] vfs_write+0x25c/0x1180 [ 135.720567][ T6836] ? __pfx_full_proxy_write+0x10/0x10 [ 135.720594][ T6836] ? __pfx___mutex_lock+0x10/0x10 [ 135.720610][ T6836] ? __pfx_vfs_write+0x10/0x10 [ 135.720635][ T6836] ? __fget_files+0x20e/0x3c0 [ 135.720662][ T6836] ksys_write+0x12a/0x240 [ 135.720683][ T6836] ? __pfx_ksys_write+0x10/0x10 [ 135.720703][ T6836] ? rcu_is_watching+0x12/0xc0 [ 135.720723][ T6836] do_syscall_64+0xcd/0x260 [ 135.720740][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.720756][ T6836] RIP: 0033:0x7ff38118d169 [ 135.720771][ T6836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.720785][ T6836] RSP: 002b:00007ff381f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 135.720802][ T6836] RAX: ffffffffffffffda RBX: 00007ff3813a5fa0 RCX: 00007ff38118d169 [ 135.720812][ T6836] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000005 [ 135.720821][ T6836] RBP: 00007ff38120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 135.720831][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.720840][ T6836] R13: 0000000000000000 R14: 00007ff3813a5fa0 R15: 00007ffd6d6474e8 [ 135.720856][ T6836] [ 135.906034][ C0] vkms_vblank_simulate: vblank timer overrun [ 137.300555][ T6861] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 138.179066][ T6868] netlink: 452 bytes leftover after parsing attributes in process `syz.0.164'. [ 139.496372][ T6901] FAULT_INJECTION: forcing a failure. [ 139.496372][ T6901] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 139.527798][ T6901] CPU: 0 UID: 0 PID: 6901 Comm: syz.0.176 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 139.527840][ T6901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.527856][ T6901] Call Trace: [ 139.527865][ T6901] [ 139.527876][ T6901] dump_stack_lvl+0x16c/0x1f0 [ 139.527925][ T6901] should_fail_ex+0x512/0x640 [ 139.527966][ T6901] should_fail_alloc_page+0xe7/0x130 [ 139.528026][ T6901] prepare_alloc_pages.constprop.0+0x172/0x570 [ 139.528071][ T6901] ? stack_trace_save+0x8e/0xc0 [ 139.528117][ T6901] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 139.528159][ T6901] ? cgroup_rstat_updated+0x2a/0xb20 [ 139.528196][ T6901] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.528236][ T6901] ? __lock_acquire+0x5ca/0x1ba0 [ 139.528348][ T6901] ? lock_acquire+0x179/0x350 [ 139.528381][ T6901] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 139.528422][ T6901] ? policy_nodemask+0xea/0x4e0 [ 139.528468][ T6901] alloc_pages_mpol+0x1fb/0x540 [ 139.528511][ T6901] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 139.528549][ T6901] ? __lock_acquire+0x5ca/0x1ba0 [ 139.528585][ T6901] folio_alloc_mpol_noprof+0x36/0x2f0 [ 139.528612][ T6901] vma_alloc_folio_noprof+0xed/0x1e0 [ 139.528640][ T6901] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 139.528672][ T6901] do_pte_missing+0x2049/0x3ea0 [ 139.528721][ T6901] __handle_mm_fault+0x1043/0x2a50 [ 139.528761][ T6901] ? __pfx___handle_mm_fault+0x10/0x10 [ 139.528795][ T6901] ? __pte_offset_map_lock+0x155/0x2f0 [ 139.528825][ T6901] ? find_held_lock+0x2b/0x80 [ 139.528849][ T6901] ? find_held_lock+0x2b/0x80 [ 139.528888][ T6901] handle_mm_fault+0x3fa/0xaa0 [ 139.528928][ T6901] __get_user_pages+0x771/0x36f0 [ 139.528968][ T6901] ? __pfx_mt_find+0x10/0x10 [ 139.528996][ T6901] ? __pfx___get_user_pages+0x10/0x10 [ 139.529039][ T6901] populate_vma_page_range+0x278/0x3a0 [ 139.529080][ T6901] ? __pfx_populate_vma_page_range+0x10/0x10 [ 139.529115][ T6901] ? __pfx_find_vma_intersection+0x10/0x10 [ 139.529149][ T6901] ? do_mmap+0x69c/0x11b0 [ 139.529182][ T6901] __mm_populate+0x1d8/0x380 [ 139.529215][ T6901] ? __pfx___mm_populate+0x10/0x10 [ 139.529249][ T6901] ? up_write+0x1b2/0x520 [ 139.529295][ T6901] vm_mmap_pgoff+0x362/0x450 [ 139.529347][ T6901] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 139.529385][ T6901] ? __x64_sys_futex+0x1e0/0x4c0 [ 139.529413][ T6901] ? __x64_sys_futex+0x1e9/0x4c0 [ 139.529446][ T6901] ksys_mmap_pgoff+0x7d/0x5c0 [ 139.529478][ T6901] ? rcu_is_watching+0x12/0xc0 [ 139.529510][ T6901] __x64_sys_mmap+0x125/0x190 [ 139.529542][ T6901] do_syscall_64+0xcd/0x260 [ 139.529569][ T6901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.529595][ T6901] RIP: 0033:0x7fcf67b8d169 [ 139.529647][ T6901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.529681][ T6901] RSP: 002b:00007fcf689f5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 139.529711][ T6901] RAX: ffffffffffffffda RBX: 00007fcf67da5fa0 RCX: 00007fcf67b8d169 [ 139.529736][ T6901] RDX: 000000000000000a RSI: 0000000000040009 RDI: 0000000000000000 [ 139.529752][ T6901] RBP: 00007fcf67c0e2a0 R08: 0000000000000002 R09: 0000000000028000 [ 139.529768][ T6901] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 139.529784][ T6901] R13: 0000000000000000 R14: 00007fcf67da5fa0 R15: 00007ffda09c8428 [ 139.529813][ T6901] [ 139.871132][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.344493][ T6909] netlink: 'syz.0.170': attribute type 1 has an invalid length. [ 140.404263][ T6909] netlink: 8 bytes leftover after parsing attributes in process `syz.0.170'. [ 141.805354][ T6917] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.814160][ T6917] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.934682][ T6917] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 141.973666][ T6917] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.984945][ T6917] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.035128][ T6917] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 142.044696][ T6938] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.052798][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.067036][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.081319][ T6917] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 142.102227][ T6917] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.118464][ T6917] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 142.127220][ T6917] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.134200][ T6917] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.143986][ T6917] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 142.401666][ T6949] syz.3.178: vmalloc error: size 86016, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 142.431913][ T6949] CPU: 0 UID: 0 PID: 6949 Comm: syz.3.178 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 142.431958][ T6949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.431975][ T6949] Call Trace: [ 142.431984][ T6949] [ 142.431995][ T6949] dump_stack_lvl+0x16c/0x1f0 [ 142.432030][ T6949] warn_alloc+0x248/0x3a0 [ 142.432073][ T6949] ? __pfx_warn_alloc+0x10/0x10 [ 142.432110][ T6949] ? alloc_pages_mpol+0x25a/0x540 [ 142.432151][ T6949] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 142.432200][ T6949] __vmalloc_node_range_noprof+0x12d2/0x1540 [ 142.432246][ T6949] ? vidtv_mux_init+0x1fa/0xbe0 [ 142.432377][ T6949] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 142.432420][ T6949] ? vidtv_mux_init+0x1fa/0xbe0 [ 142.432452][ T6949] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 142.432480][ T6949] vzalloc_noprof+0x6b/0x90 [ 142.432512][ T6949] ? vidtv_mux_init+0x1fa/0xbe0 [ 142.432552][ T6949] vidtv_mux_init+0x1fa/0xbe0 [ 142.432589][ T6949] vidtv_start_feed+0x33e/0x4d0 [ 142.432614][ T6949] ? __pfx_vidtv_start_feed+0x10/0x10 [ 142.432638][ T6949] ? __pfx_vidtv_bridge_on_new_pkts_avail+0x10/0x10 [ 142.432679][ T6949] dmx_section_feed_start_filtering+0x3a5/0x660 [ 142.432745][ T6949] dvb_dmxdev_filter_start+0x782/0xe10 [ 142.432788][ T6949] dvb_demux_do_ioctl+0xfc3/0x12f0 [ 142.432828][ T6949] dvb_usercopy+0x164/0x330 [ 142.432859][ T6949] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 142.432890][ T6949] ? __pfx_dvb_usercopy+0x10/0x10 [ 142.432926][ T6949] ? __fget_files+0x20e/0x3c0 [ 142.432970][ T6949] dvb_demux_ioctl+0x29/0x40 [ 142.432996][ T6949] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 142.433024][ T6949] __x64_sys_ioctl+0x190/0x200 [ 142.433107][ T6949] do_syscall_64+0xcd/0x260 [ 142.433136][ T6949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.433160][ T6949] RIP: 0033:0x7ff38118d169 [ 142.433191][ T6949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.433221][ T6949] RSP: 002b:00007ff381f89038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.433248][ T6949] RAX: ffffffffffffffda RBX: 00007ff3813a5fa0 RCX: 00007ff38118d169 [ 142.433265][ T6949] RDX: 0000000000000000 RSI: 00000000403c6f2b RDI: 0000000000000008 [ 142.433453][ T6949] RBP: 00007ff38120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 142.433469][ T6949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.433485][ T6949] R13: 0000000000000000 R14: 00007ff3813a5fa0 R15: 00007ffd6d6474e8 [ 142.433518][ T6949] [ 142.433685][ T6949] Mem-Info: [ 142.699410][ T6949] active_anon:8261 inactive_anon:0 isolated_anon:0 [ 142.699410][ T6949] active_file:9781 inactive_file:38168 isolated_file:0 [ 142.699410][ T6949] unevictable:1582 dirty:1208 writeback:0 [ 142.699410][ T6949] slab_reclaimable:9791 slab_unreclaimable:94510 [ 142.699410][ T6949] mapped:24287 shmem:1436 pagetables:817 [ 142.699410][ T6949] sec_pagetables:0 bounce:0 [ 142.699410][ T6949] kernel_misc_reclaimable:0 [ 142.699410][ T6949] free:1337586 free_pcp:3020 free_cma:0 [ 142.745320][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.781330][ T6949] Node 0 active_anon:33144kB inactive_anon:0kB active_file:39024kB inactive_file:152600kB unevictable:4792kB isolated(anon):0kB isolated(file):0kB mapped:97148kB dirty:4828kB writeback:0kB shmem:4208kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10788kB pagetables:3268kB sec_pagetables:0kB all_unreclaimable? no [ 142.787473][ T6950] sp0: Synchronizing with TNC [ 142.814121][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.845703][ T6949] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 142.932508][ T6949] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 142.961008][ T6949] lowmem_reserve[]: 0 2485 2487 2487 2487 [ 142.967424][ T6949] Node 0 DMA32 free:1433356kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:33192kB inactive_anon:0kB active_file:39024kB inactive_file:150680kB unevictable:4868kB writepending:4880kB present:3129332kB managed:2544812kB mlocked:3376kB bounce:0kB free_pcp:7108kB local_pcp:752kB free_cma:0kB [ 143.067899][ T6949] lowmem_reserve[]: 0 0 1 1 1 [ 143.078037][ T6949] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 143.155816][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.169157][ T6949] lowmem_reserve[]: 0 0 0 0 0 [ 143.179325][ T6949] Node 1 Normal free:3901848kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4208kB local_pcp:0kB free_cma:0kB [ 143.293747][ T6950] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 143.307009][ T6949] lowmem_reserve[]: 0 0 0 0 0 [ 143.355853][ T6949] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 143.403315][ T6949] Node 0 DMA32: 759*4kB (UE) 364*8kB (UME) 604*16kB (UME) 314*32kB (UM) 274*64kB (UM) 148*128kB (UM) 70*256kB (UM) 48*512kB (UME) 26*1024kB (UME) 15*2048kB (UME) 312*4096kB (UM) = 1439932kB [ 143.449672][ T6949] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 143.469068][ T6949] Node 1 Normal: 182*4kB (UE) 58*8kB (UME) 43*16kB (UME) 202*32kB (UME) 96*64kB (UME) 32*128kB (UE) 11*256kB (UM) 11*512kB (U) 4*1024kB (UM) 2*2048kB (UM) 944*4096kB (M) = 3901848kB [ 143.522370][ T6949] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.541091][ T6949] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=2 hugepages_size=2048kB [ 143.552579][ T6949] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 143.564469][ T6949] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 143.577949][ T6949] 49895 total pagecache pages [ 143.600457][ T6949] 0 pages in swap cache [ 143.604702][ T6949] Free swap = 124712kB [ 143.619477][ T6949] Total swap = 124996kB [ 143.623718][ T6949] 2097051 pages RAM [ 143.657303][ T6949] 0 pages HighMem/MovableOnly [ 143.662103][ T6949] 428742 pages reserved [ 143.673919][ T6949] 0 pages cma reserved [ 143.807809][ T6970] syz.0.184 uses obsolete (PF_INET,SOCK_PACKET) [ 144.027014][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.106331][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.174050][ T6966] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 144.184882][ T5842] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 144.189018][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 145.226738][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 145.890123][ T6991] process 'syz.0.194' launched './file0' with NULL argv: empty string added [ 145.890123][ T6987] process 'syz.0.194' launched './file0' with NULL argv: empty string added [ 146.106774][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.186070][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.265921][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout syzkaller syzkaller login: [ 147.267643][ T7029] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 147.310608][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 147.624288][ T7034] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 147.686970][ T7038] netlink: 'syz.2.197': attribute type 1 has an invalid length. [ 147.713051][ T7038] netlink: 13 bytes leftover after parsing attributes in process `syz.2.197'. [ 147.801653][ T7040] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 148.186160][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 148.267859][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 148.346754][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 148.753750][ T7052] netlink: 452 bytes leftover after parsing attributes in process `syz.2.198'. [ 149.133578][ T7055] netlink: 452 bytes leftover after parsing attributes in process `syz.1.200'. [ 149.307800][ T7062] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 149.448654][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.1.203'. [ 150.088045][ T7074] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 150.391745][ T7080] Invalid ELF header magic: != ELF [ 151.173092][ T7097] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 151.173092][ T7097] The task syz.3.207 (7097) triggered the difference, watch for misbehavior. [ 151.174545][ T7097] snd_aloop snd_aloop.0: control 16781581:65535:6:ι'x?F’ι/θμzFΛ·fCͺαͺ:8 is already present [ 153.396117][ T7124] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 154.350815][ T5842] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 155.154302][ T7147] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 155.595180][ T7156] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 155.851662][ T7157] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input10 [ 155.904710][ T5842] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 156.904492][ T7164] db_root: cannot open: 00000000000000 T srso_alias_untrain_ret [ 156.904492][ T7164] 0000000000000000 T _stext [ 156.904492][ T7164] 0000000000000000 T _text [ 156.904492][ T7164] 0000000000000000 T __entry_text_start [ 156.904492][ T7164] 0000000000000000 T mds_verw_sel [ 156.904492][ T7164] 0000000000000000 T entry_SYSCALL_64 [ 156.904492][ T7164] 0000000000000000 T entry_SYSCALL_64_safe_stack [ 156.904492][ T7164] 0000000000000000 T entry_SYSCALL_64_after_hwframe [ 156.904492][ T7164] 0000000000000000 t syscall_return_via_sysret [ 156.904492][ T7164] 0000000000000000 T entry_SYSRETQ_unsafe_stack [ 156.904492][ T7164] 0000000000000000 T entry_SYSRETQ_end [ 156.904492][ T7164] 0000000000000000 T xen_error_entry [ 156.904492][ T7164] 0000000000000000 T irq_entries_start [ 156.904492][ T7164] 0000000000000000 T __irqentry_text_start [ 156.904492][ T7164] 0000000000000000 T spurious_entries_start [ 156.904492][ T7164] 0000000000000000 T asm_exc_divide_error [ 156.904492][ T7164] 0000000000000000 T asm_exc_overflow [ 156.904492][ T7164] 0000000000000000 T asm_exc_bounds [ 156.904492][ T7164] 0000000000000000 T asm_exc_device_not_available [ 156.904492][ T7164] 0000000000000000 T asm_exc_coproc_segment_overrun [ 156.904492][ T7164] 0000000000000000 T asm_exc_spurious_interrupt_bug [ 156.904492][ T7164] 0000000000000000 T asm_exc_coprocessor_error [ 156.904492][ T7164] 0000000000000000 T asm_exc_simd_coprocessor_error [ 156.904492][ T7164] 0000000000000000 T asm_exc_invalid_tss [ 156.904492][ T7164] 0000000000000000 T asm_exc_seg [ 157.148898][ T7173] FAULT_INJECTION: forcing a failure. [ 157.148898][ T7173] name failslab, interval 1, probability 0, space 0, times 0 [ 157.354015][ T7178] FAULT_INJECTION: forcing a failure. [ 157.354015][ T7178] name fail_futex, interval 1, probability 0, space 0, times 0 [ 157.385791][ T7173] CPU: 0 UID: 0 PID: 7173 Comm: syz.2.225 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 157.385829][ T7173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.385845][ T7173] Call Trace: [ 157.385853][ T7173] [ 157.385864][ T7173] dump_stack_lvl+0x16c/0x1f0 [ 157.385897][ T7173] should_fail_ex+0x512/0x640 [ 157.385933][ T7173] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 157.385977][ T7173] should_failslab+0xc2/0x120 [ 157.386018][ T7173] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 157.386050][ T7173] ? __proc_create+0xc3/0x8c0 [ 157.386133][ T7173] ? __proc_create+0x2ce/0x8c0 [ 157.386164][ T7173] __proc_create+0x2ce/0x8c0 [ 157.386194][ T7173] ? __pfx___proc_create+0x10/0x10 [ 157.386227][ T7173] ? proc_register+0x314/0x5f0 [ 157.386259][ T7173] proc_create_reg+0x7d/0x180 [ 157.386290][ T7173] proc_create_net_data+0x8e/0x1b0 [ 157.386319][ T7173] ? __pfx_proc_create_net_data+0x10/0x10 [ 157.386345][ T7173] ? __pfx_uevent_net_rcv+0x10/0x10 [ 157.386379][ T7173] ? __pfx_dev_mc_net_init+0x10/0x10 [ 157.386418][ T7173] dev_mc_net_init+0x50/0x70 [ 157.386443][ T7173] ops_init+0x1df/0x5f0 [ 157.386480][ T7173] setup_net+0x21e/0x850 [ 157.386516][ T7173] ? __pfx_setup_net+0x10/0x10 [ 157.386546][ T7173] ? lockdep_init_map_type+0x5c/0x280 [ 157.386581][ T7173] ? __pfx_down_read_killable+0x10/0x10 [ 157.386613][ T7173] ? debug_mutex_init+0x37/0x70 [ 157.386641][ T7173] copy_net_ns+0x2a6/0x5f0 [ 157.386682][ T7173] create_new_namespaces+0x3ea/0xad0 [ 157.386721][ T7173] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 157.386752][ T7173] ksys_unshare+0x45b/0xa40 [ 157.386784][ T7173] ? __pfx_ksys_unshare+0x10/0x10 [ 157.386814][ T7173] ? xfd_validate_state+0x5d/0x180 [ 157.386841][ T7173] ? rcu_is_watching+0x12/0xc0 [ 157.386875][ T7173] __x64_sys_unshare+0x31/0x40 [ 157.386912][ T7173] do_syscall_64+0xcd/0x260 [ 157.386942][ T7173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.386971][ T7173] RIP: 0033:0x7f10d8b8d169 [ 157.386995][ T7173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.387023][ T7173] RSP: 002b:00007f10d996e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 157.387052][ T7173] RAX: ffffffffffffffda RBX: 00007f10d8da5fa0 RCX: 00007f10d8b8d169 [ 157.387071][ T7173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 157.387087][ T7173] RBP: 00007f10d8c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 157.387104][ T7173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 157.387119][ T7173] R13: 0000000000000000 R14: 00007f10d8da5fa0 R15: 00007ffc19f67ec8 [ 157.387148][ T7173] [ 157.473959][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: syz.2.225 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 157.474004][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.474019][ T7178] Call Trace: [ 157.474029][ T7178] [ 157.474038][ T7178] dump_stack_lvl+0x16c/0x1f0 [ 157.474081][ T7178] should_fail_ex+0x512/0x640 [ 157.474116][ T7178] get_futex_key+0x49e/0x1000 [ 157.474147][ T7178] ? __pfx_get_futex_key+0x10/0x10 [ 157.474171][ T7178] ? kfree+0x252/0x4d0 [ 157.474208][ T7178] futex_wake+0xe7/0x4e0 [ 157.474241][ T7178] ? __pfx_futex_wake+0x10/0x10 [ 157.474273][ T7178] ? __pfx_vfs_writev+0x10/0x10 [ 157.474358][ T7178] ? do_writev+0x218/0x330 [ 157.474393][ T7178] do_futex+0x1e3/0x350 [ 157.474421][ T7178] ? __pfx_do_futex+0x10/0x10 [ 157.474447][ T7178] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 157.474479][ T7178] __x64_sys_futex+0x1e0/0x4c0 [ 157.474509][ T7178] ? fput+0x70/0xf0 [ 157.474531][ T7178] ? __pfx___x64_sys_futex+0x10/0x10 [ 157.474570][ T7178] ? __pfx_do_writev+0x10/0x10 [ 157.474599][ T7178] ? rcu_is_watching+0x12/0xc0 [ 157.474630][ T7178] do_syscall_64+0xcd/0x260 [ 157.474656][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.474683][ T7178] RIP: 0033:0x7f10d8b8d169 [ 157.474704][ T7178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.474727][ T7178] RSP: 002b:00007f10d994d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 157.474752][ T7178] RAX: ffffffffffffffda RBX: 00007f10d8da6088 RCX: 00007f10d8b8d169 [ 157.474788][ T7178] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10d8da608c [ 157.474804][ T7178] RBP: 00007f10d8da6080 R08: 00007f10d996f000 R09: 0000000000000000 [ 157.474820][ T7178] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f10d8da608c [ 157.474836][ T7178] R13: 0000000000000000 R14: 00007ffc19f67de0 R15: 00007ffc19f67ec8 [ 157.474863][ T7178] [ 157.857892][ C0] vkms_vblank_simulate: vblank timer overrun [ 158.638773][ T7196] FAULT_INJECTION: forcing a failure. [ 158.638773][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 158.764189][ T7196] CPU: 0 UID: 0 PID: 7196 Comm: syz.0.229 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 158.764235][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 158.764253][ T7196] Call Trace: [ 158.764262][ T7196] [ 158.764274][ T7196] dump_stack_lvl+0x16c/0x1f0 [ 158.764311][ T7196] should_fail_ex+0x512/0x640 [ 158.764355][ T7196] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 158.764403][ T7196] should_failslab+0xc2/0x120 [ 158.764449][ T7196] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 158.764493][ T7196] ? alloc_inode+0xc3/0x240 [ 158.764528][ T7196] alloc_inode+0xc3/0x240 [ 158.764559][ T7196] iget_locked+0x2e4/0x830 [ 158.764600][ T7196] ? __pfx_iget_locked+0x10/0x10 [ 158.764636][ T7196] ? down_read+0x13d/0x480 [ 158.764674][ T7196] kernfs_get_inode+0x48/0x460 [ 158.764717][ T7196] kernfs_iop_lookup+0x1ec/0x330 [ 158.764763][ T7196] ? __pfx_kernfs_iop_lookup+0x10/0x10 [ 158.764807][ T7196] lookup_open.isra.0+0x4d7/0x1580 [ 158.764852][ T7196] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 158.764904][ T7196] ? mnt_get_write_access+0x20c/0x300 [ 158.764941][ T7196] path_openat+0x905/0x2d40 [ 158.764991][ T7196] ? __pfx_path_openat+0x10/0x10 [ 158.765040][ T7196] do_filp_open+0x20b/0x470 [ 158.765101][ T7196] ? __pfx_do_filp_open+0x10/0x10 [ 158.765181][ T7196] ? find_held_lock+0x2b/0x80 [ 158.765747][ T7196] ? alloc_fd+0x420/0x760 [ 158.765939][ T7196] do_sys_openat2+0x11b/0x1d0 [ 158.765966][ T7196] ? __pfx_do_sys_openat2+0x10/0x10 [ 158.766000][ T7196] __x64_sys_openat+0x174/0x210 [ 158.766119][ T7196] ? __pfx___x64_sys_openat+0x10/0x10 [ 158.766348][ T7196] ? rcu_is_watching+0x12/0xc0 [ 158.766638][ T7196] do_syscall_64+0xcd/0x260 [ 158.766854][ T7196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.767025][ T7196] RIP: 0033:0x7fcf67b8d169 [ 158.767151][ T7196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.767259][ T7196] RSP: 002b:00007fcf689d4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 158.767436][ T7196] RAX: ffffffffffffffda RBX: 00007fcf67da6080 RCX: 00007fcf67b8d169 [ 158.767578][ T7196] RDX: 0000000000124001 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 158.767718][ T7196] RBP: 00007fcf67c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 158.767869][ T7196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 158.767980][ T7196] R13: 0000000000000000 R14: 00007fcf67da6080 R15: 00007ffda09c8428 [ 158.768198][ T7196] [ 159.677581][ T7208] netlink: 452 bytes leftover after parsing attributes in process `syz.2.230'. [ 160.215921][ T7193] Console: switching to colour VGA+ 80x25 [ 161.029261][ T7225] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 161.299810][ T7231] ======================================================= [ 161.299810][ T7231] WARNING: The mand mount option has been deprecated and [ 161.299810][ T7231] and is ignored by this kernel. Remove the mand [ 161.299810][ T7231] option from the mount to silence this warning. [ 161.299810][ T7231] ======================================================= [ 161.334873][ C1] vkms_vblank_simulate: vblank timer overrun [ 161.401406][ T7231] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 161.649519][ T7233] netlink: 452 bytes leftover after parsing attributes in process `syz.3.235'. [ 162.044014][ T7246] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.897704][ T7271] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 164.670754][ T7308] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 165.198006][ T7318] netlink: 452 bytes leftover after parsing attributes in process `syz.2.247'. [ 165.551431][ T7319] netlink: 452 bytes leftover after parsing attributes in process `syz.3.248'. [ 165.822439][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.0.250'. [ 165.893982][ T7337] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 166.058929][ T7338] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 166.979836][ T7357] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 168.728019][ T7386] netlink: 452 bytes leftover after parsing attributes in process `syz.0.260'. [ 170.192172][ T7403] snd_aloop snd_aloop.0: Parsing timer source 'Ι†' failed with -22 [ 171.198415][ T7391] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.232262][ T7391] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.268053][ T7391] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.303876][ T7391] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.710689][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 171.847159][ T7423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 173.021663][ T7439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 173.309078][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.309113][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.315148][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.444698][ T7446] FAULT_INJECTION: forcing a failure. [ 173.444698][ T7446] name failslab, interval 1, probability 0, space 0, times 0 [ 173.488045][ T7446] CPU: 1 UID: 0 PID: 7446 Comm: syz.1.273 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 173.488088][ T7446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.488106][ T7446] Call Trace: [ 173.488115][ T7446] [ 173.488126][ T7446] dump_stack_lvl+0x16c/0x1f0 [ 173.488163][ T7446] should_fail_ex+0x512/0x640 [ 173.488199][ T7446] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 173.488251][ T7446] should_failslab+0xc2/0x120 [ 173.488292][ T7446] __kmalloc_cache_noprof+0x6a/0x3e0 [ 173.488320][ T7446] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 173.488369][ T7446] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 173.488407][ T7446] devlink_fmsg_u8_pair_put+0x270/0x2f0 [ 173.488448][ T7446] ? __pfx_devlink_fmsg_u8_pair_put+0x10/0x10 [ 173.488487][ T7446] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 173.488527][ T7446] nsim_dev_dummy_fmsg_put+0x39/0x1e0 [ 173.488597][ T7446] devlink_health_do_dump+0x240/0x620 [ 173.488637][ T7446] devlink_health_report+0x3c9/0x9c0 [ 173.488680][ T7446] ? __pfx_devlink_health_report+0x10/0x10 [ 173.488726][ T7446] nsim_dev_health_break_write+0x166/0x210 [ 173.488771][ T7446] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 173.488826][ T7446] full_proxy_write+0x13c/0x200 [ 173.488875][ T7446] vfs_write+0x25c/0x1180 [ 173.488910][ T7446] ? __pfx_full_proxy_write+0x10/0x10 [ 173.488958][ T7446] ? __pfx___mutex_lock+0x10/0x10 [ 173.488986][ T7446] ? __pfx_vfs_write+0x10/0x10 [ 173.489027][ T7446] ? __fget_files+0x20e/0x3c0 [ 173.489074][ T7446] ksys_write+0x12a/0x240 [ 173.489110][ T7446] ? __pfx_ksys_write+0x10/0x10 [ 173.489146][ T7446] ? rcu_is_watching+0x12/0xc0 [ 173.489183][ T7446] do_syscall_64+0xcd/0x260 [ 173.489215][ T7446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.489253][ T7446] RIP: 0033:0x7f049c98d169 [ 173.489281][ T7446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.489308][ T7446] RSP: 002b:00007f049d86c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 173.489337][ T7446] RAX: ffffffffffffffda RBX: 00007f049cba5fa0 RCX: 00007f049c98d169 [ 173.489357][ T7446] RDX: 00000000000000ef RSI: 0000200000000000 RDI: 0000000000000004 [ 173.489374][ T7446] RBP: 00007f049ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 173.489391][ T7446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.489408][ T7446] R13: 0000000000000000 R14: 00007f049cba5fa0 R15: 00007fffee659398 [ 173.489440][ T7446] [ 173.981290][ T7451] [ 173.983695][ T7451] ====================================================== [ 173.990786][ T7451] WARNING: possible circular locking dependency detected [ 173.997921][ T7451] 6.14.0-syzkaller-05877-g1a9239bb4253 #0 Not tainted [ 174.004719][ T7451] ------------------------------------------------------ [ 174.011874][ T7451] syz.1.274/7451 is trying to acquire lock: [ 174.017942][ T7451] ffff8880259b1958 (&q->elevator_lock){+.+.}-{4:4}, at: queue_requests_store+0x1c7/0x310 [ 174.027947][ T7451] [ 174.027947][ T7451] but task is already holding lock: [ 174.035356][ T7451] ffff8880259b1428 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 174.046808][ T7451] [ 174.046808][ T7451] which lock already depends on the new lock. [ 174.046808][ T7451] [ 174.057252][ T7451] [ 174.057252][ T7451] the existing dependency chain (in reverse order) is: [ 174.066472][ T7451] [ 174.066472][ T7451] -> #2 (&q->q_usage_counter(io)#29){++++}-{0:0}: [ 174.075148][ T7451] blk_alloc_queue+0x619/0x760 [ 174.080486][ T7451] blk_mq_alloc_queue+0x179/0x290 [ 174.086172][ T7451] __blk_mq_alloc_disk+0x29/0x120 [ 174.091852][ T7451] loop_add+0x496/0xb70 [ 174.096669][ T7451] loop_init+0x164/0x270 [ 174.101567][ T7451] do_one_initcall+0x120/0x6e0 [ 174.107000][ T7451] kernel_init_freeable+0x5c2/0x900 [ 174.112778][ T7451] kernel_init+0x1c/0x2b0 [ 174.117830][ T7451] ret_from_fork+0x45/0x80 [ 174.122847][ T7451] ret_from_fork_asm+0x1a/0x30 [ 174.128276][ T7451] [ 174.128276][ T7451] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 174.135806][ T7451] fs_reclaim_acquire+0x102/0x150 [ 174.141749][ T7451] blk_mq_alloc_and_init_hctx+0x503/0x11c0 [ 174.148140][ T7451] blk_mq_realloc_hw_ctxs+0x8f6/0xc00 [ 174.154154][ T7451] blk_mq_init_allocated_queue+0x3af/0x1230 [ 174.160896][ T7451] blk_mq_alloc_queue+0x1c2/0x290 [ 174.166585][ T7451] __blk_mq_alloc_disk+0x29/0x120 [ 174.172198][ T7451] loop_add+0x496/0xb70 [ 174.176922][ T7451] loop_init+0x164/0x270 [ 174.181732][ T7451] do_one_initcall+0x120/0x6e0 [ 174.187153][ T7451] kernel_init_freeable+0x5c2/0x900 [ 174.192932][ T7451] kernel_init+0x1c/0x2b0 [ 174.197829][ T7451] ret_from_fork+0x45/0x80 [ 174.202989][ T7451] ret_from_fork_asm+0x1a/0x30 [ 174.208319][ T7451] [ 174.208319][ T7451] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 174.216202][ T7451] __lock_acquire+0x1173/0x1ba0 [ 174.221805][ T7451] lock_acquire+0x179/0x350 [ 174.226976][ T7451] __mutex_lock+0x19a/0xb00 [ 174.232120][ T7451] queue_requests_store+0x1c7/0x310 [ 174.237905][ T7451] queue_attr_store+0x270/0x310 [ 174.243324][ T7451] sysfs_kf_write+0x117/0x170 [ 174.248566][ T7451] kernfs_fop_write_iter+0x349/0x510 [ 174.254409][ T7451] iter_file_splice_write+0x91c/0x1150 [ 174.256727][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 174.260429][ T7451] direct_splice_actor+0x18f/0x6c0 [ 174.260471][ T7451] splice_direct_to_actor+0x342/0xa30 [ 174.260504][ T7451] do_splice_direct+0x174/0x240 [ 174.260535][ T7451] do_sendfile+0xafd/0xe50 [ 174.260566][ T7451] __x64_sys_sendfile64+0x1d8/0x220 [ 174.260590][ T7451] do_syscall_64+0xcd/0x260 [ 174.260674][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.260702][ T7451] [ 174.260702][ T7451] other info that might help us debug this: [ 174.260702][ T7451] [ 174.260712][ T7451] Chain exists of: [ 174.260712][ T7451] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#29 [ 174.260712][ T7451] [ 174.333296][ T7451] Possible unsafe locking scenario: [ 174.333296][ T7451] [ 174.340784][ T7451] CPU0 CPU1 [ 174.346463][ T7451] ---- ---- [ 174.351867][ T7451] lock(&q->q_usage_counter(io)#29); [ 174.357298][ T7451] lock(fs_reclaim); [ 174.363850][ T7451] lock(&q->q_usage_counter(io)#29); [ 174.371801][ T7451] lock(&q->elevator_lock); [ 174.376622][ T7451] [ 174.376622][ T7451] *** DEADLOCK *** [ 174.376622][ T7451] [ 174.384975][ T7451] 5 locks held by syz.1.274/7451: [ 174.390018][ T7451] #0: ffff888035c4a420 (sb_writers#7){.+.+}-{0:0}, at: splice_direct_to_actor+0x342/0xa30 [ 174.400170][ T7451] #1: ffff888064207488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x287/0x510 [ 174.409974][ T7451] #2: ffff88814174b5a8 (kn->active#105){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2aa/0x510 [ 174.420217][ T7451] #3: ffff8880259b1428 (&q->q_usage_counter(io)#29){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 174.432084][ T7451] #4: ffff8880259b1460 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 174.444331][ T7451] [ 174.444331][ T7451] stack backtrace: [ 174.450332][ T7451] CPU: 0 UID: 0 PID: 7451 Comm: syz.1.274 Not tainted 6.14.0-syzkaller-05877-g1a9239bb4253 #0 PREEMPT(full) [ 174.450370][ T7451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.450383][ T7451] Call Trace: [ 174.450390][ T7451] [ 174.450399][ T7451] dump_stack_lvl+0x116/0x1f0 [ 174.450423][ T7451] print_circular_bug+0x275/0x350 [ 174.450452][ T7451] check_noncircular+0x14c/0x170 [ 174.450480][ T7451] __lock_acquire+0x1173/0x1ba0 [ 174.450509][ T7451] ? __lock_acquire+0xaa4/0x1ba0 [ 174.450537][ T7451] lock_acquire+0x179/0x350 [ 174.450563][ T7451] ? queue_requests_store+0x1c7/0x310 [ 174.450584][ T7451] ? __pfx___might_resched+0x10/0x10 [ 174.450664][ T7451] __mutex_lock+0x19a/0xb00 [ 174.450685][ T7451] ? queue_requests_store+0x1c7/0x310 [ 174.450704][ T7451] ? mark_held_locks+0x49/0x80 [ 174.450731][ T7451] ? queue_requests_store+0x1c7/0x310 [ 174.450749][ T7451] ? lockdep_hardirqs_on+0x7c/0x110 [ 174.450781][ T7451] ? __pfx___mutex_lock+0x10/0x10 [ 174.450801][ T7451] ? blk_mq_freeze_queue_wait+0xad/0x1b0 [ 174.450834][ T7451] ? __pfx_autoremove_wake_function+0x10/0x10 [ 174.450867][ T7451] ? queue_requests_store+0x1c7/0x310 [ 174.450887][ T7451] queue_requests_store+0x1c7/0x310 [ 174.450907][ T7451] ? __pfx_queue_requests_store+0x10/0x10 [ 174.450928][ T7451] ? __mutex_trylock_common+0xe9/0x250 [ 174.450957][ T7451] ? __pfx_queue_requests_store+0x10/0x10 [ 174.450983][ T7451] queue_attr_store+0x270/0x310 [ 174.451016][ T7451] ? __pfx_queue_attr_store+0x10/0x10 [ 174.451047][ T7451] ? __lock_acquire+0x5ca/0x1ba0 [ 174.451075][ T7451] ? kernfs_fop_write_iter+0x287/0x510 [ 174.451120][ T7451] ? __pfx_queue_attr_store+0x10/0x10 [ 174.451152][ T7451] sysfs_kf_write+0x117/0x170 [ 174.451178][ T7451] kernfs_fop_write_iter+0x349/0x510 [ 174.451201][ T7451] ? __pfx_sysfs_kf_write+0x10/0x10 [ 174.451229][ T7451] iter_file_splice_write+0x91c/0x1150 [ 174.451264][ T7451] ? __pfx_iter_file_splice_write+0x10/0x10 [ 174.451295][ T7451] ? __pfx_copy_splice_read+0x10/0x10 [ 174.451326][ T7451] ? __pfx_iter_file_splice_write+0x10/0x10 [ 174.451355][ T7451] direct_splice_actor+0x18f/0x6c0 [ 174.451384][ T7451] splice_direct_to_actor+0x342/0xa30 [ 174.451413][ T7451] ? __pfx_direct_splice_actor+0x10/0x10 [ 174.451443][ T7451] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 174.451473][ T7451] do_splice_direct+0x174/0x240 [ 174.451500][ T7451] ? __pfx_do_splice_direct+0x10/0x10 [ 174.451528][ T7451] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 174.451556][ T7451] ? rw_verify_area+0xcf/0x680 [ 174.451581][ T7451] do_sendfile+0xafd/0xe50 [ 174.451608][ T7451] ? __pfx_do_sendfile+0x10/0x10 [ 174.451633][ T7451] ? __rseq_handle_notify_resume+0x69a/0x10c0 [ 174.451666][ T7451] __x64_sys_sendfile64+0x1d8/0x220 [ 174.451685][ T7451] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 174.451704][ T7451] ? rcu_is_watching+0x12/0xc0 [ 174.451726][ T7451] do_syscall_64+0xcd/0x260 [ 174.451747][ T7451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.451769][ T7451] RIP: 0033:0x7f049c98d169 [ 174.451788][ T7451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.451808][ T7451] RSP: 002b:00007f049d86c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 174.451829][ T7451] RAX: ffffffffffffffda RBX: 00007f049cba5fa0 RCX: 00007f049c98d169 [ 174.451843][ T7451] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 174.451855][ T7451] RBP: 00007f049ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.451868][ T7451] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 174.451880][ T7451] R13: 0000000000000000 R14: 00007f049cba5fa0 R15: 00007fffee659398 [ 174.451897][ T7451]