last executing test programs: 7.245707559s ago: executing program 1 (id=2): mmap$auto(0x0, 0x400, 0xdf, 0xeb1, 0x1272, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) r0 = socket(0x1d, 0x2, 0x7) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r2}, 0x6a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000018c0)=@can={0x1d, r3}, 0x18) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffcc}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) fremovexattr$auto(r4, &(0x7f0000000380)='system.posix_acl_access\x00') socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x1d, 0x2, 0x7) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r8 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r8, 0x0, 0x3f1) getdents$auto(r8, 0x0, 0x401) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7}, 0x6a) semctl$auto_IPC_STAT(0x5, 0x7, 0x2, 0x3faafc2f) sendto$auto(r5, 0x0, 0xc, 0xfffffff8, &(0x7f0000000440)=@can={0x1d, r9}, 0x36) 6.337903412s ago: executing program 0 (id=1): r0 = open(&(0x7f0000000800)='./file0\x00', 0x123000, 0x154) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x90c00, 0x0) msgctl$auto(0x10001, 0x3ff, &(0x7f00000001c0)={{0xe, 0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x7, 0x9}, &(0x7f0000000140)=0xf7, &(0x7f0000000180)=0x9, 0x971, 0x9, 0xb6, 0x6, 0x7, 0x81, 0x7, 0xfffc, @inferred=0xffffffffffffffff, @raw=0x7ff}) mmap$auto(0x0, 0x2000b, 0xe3, 0x2000000100000eb1, 0x40000000000a1, 0x8000) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r4 = openat$auto_sco_debugfs_fops_(0xffffffffffffff9c, 0x0, 0x242, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r5 = socket(0x28, 0x2, 0x8) setsockopt$auto(r5, 0x0, 0x30, 0x0, 0x568) r6 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x20c800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_TREAD64(r6, 0x400454a4, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pread64$auto(r3, &(0x7f0000000200)='/proc/self/net/ip6_tables_targets\x00', 0x34b, 0x10000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) unshare$auto(0x40000080) write$auto(0xca, &(0x7f00000000c0)='\x04>\x01\x01\x00J:\xdd\xfc\xb6\xc6\x0f\xaf\xe3\x0f\xd1V\xb1yz\\\xa6\xed\ag+\xa3p(\xe2\x1b\xdc7\x1b\xc4TM}\xce\x90\xfa9\x957\xec\xd8\xe0TC\x86\xad\xe1G\xc7\xd4\x96\x12h\x84;Y\xe2\x03i\xa1)`\n\xc3\xfeR\x06\x03\xf5/@\xf0\'\xb9\xdf\xe1\xef\v\x19B\xc0\xe2\xac\xa5^\x01D\xef\xaf#\xbc\xa5\xf9J\xdc\xc3),=1\b\x05\x9d\x82\xd4\'\xe8\xfe\xfd\x9a\x9f\x00\x00\x00\x00\x00\x00\x00\x00', 0x7f) fsconfig$auto(r1, 0x708, &(0x7f0000000080)='\x00', &(0x7f00000000c0)="59f3e4bd50653919eeaf08f6b280dc8ad5a4dcbfed91dca5346104e476bc41e89ef6a30ba36a829833609b82d5f74a26f01d8999cf3a7415cb403a1c474dcb23d75e92b25f7baba878b5a3f3d5783fb2ed16a02c8c6099ec0cbd16519ae3cb32dab8b20f27b5340c1397e16a97e93f18b102207ce94c096b007e34", r2) execveat$auto(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r4, 0x7ffd) r7 = socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r7, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto(0x3, 0x80108907, 0x38) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) dup3$auto(r3, r6, 0x20007de) io_uring_register$auto_IORING_UNREGISTER_NAPI(r4, 0x1c, &(0x7f0000000240)="1460ea95b5c90254f4cfef4e6701a4c44143901830b9f84eb2e3d3c0e49df26634b3e39f3c", 0x9) sysfs$auto(0x2, 0x12, 0x0) 6.129408887s ago: executing program 1 (id=5): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/lapb3/threaded\x00', 0x8a801, 0x0) write$auto(r0, &(0x7f0000000000)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) mmap$auto(0x0, 0x95, 0x4000000000e3, 0x40eb2, 0xffffffffffffffff, 0x300000000000) capget$auto(0x0, 0xfffffffffffffffe) clone3$auto(&(0x7f0000000400)={0x100008000, 0x980, 0x4, 0x6, 0x0, 0x2, 0x1, 0x8, 0x1, 0x0, 0x3}, 0x40) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x83, 0x0, 0x0) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x4000e6e) ioctl$auto_PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 5.766459468s ago: executing program 3 (id=4): r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) unshare$auto(0x0) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x149040, 0x0) sendfile$auto(r0, r1, &(0x7f0000000040)=0x5, 0xffffffff80000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) rmdir$auto(&(0x7f0000000080)='./cgroup/../file0\x00') mmap$auto(0x0, 0x40009, 0xe2, 0x8000000000009b72, 0x7, 0x28000) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) capset$auto(0x0, &(0x7f0000000000)={0x8, 0x7, 0x802}) sendmmsg$auto(r2, &(0x7f00000006c0)={{&(0x7f0000000000), 0x5ac, &(0x7f00000000c0)={0x0, 0x49}, 0x2, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x1ef) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') mmap$auto(0x0, 0x2020005, 0x3, 0x11, r3, 0x200000000000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r4 = syz_clone(0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x3, 0x3b) socket(0xa, 0x3, 0x3b) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x6, 0x8d, 0x7a, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x1000, 0x62, 0x4000008000001f, 0x7, 0x6d3e, 0x2000000008, 0x2, 0x6]}, 0x0) r5 = epoll_create$auto(0x4) r6 = socket(0x2, 0x5, 0x0) epoll_ctl$auto(r5, 0x1, r6, 0x0) r7 = epoll_create$auto(0x3e) epoll_ctl$auto(r7, 0x1, r5, 0x0) ioctl$auto_SNDCTL_DSP_NONBLOCK(r5, 0x500e, &(0x7f0000000000)="e389ca106b6a95dcaebf6f3bd1a7ad971eb68eafad4a0ba9458251c8bd5c480294c16ce46bffe458a32a12b2e2adb2abc4bc") wait4$auto(r4, 0x0, 0x80000001, 0x0) ioctl$NS_GET_PARENT(r3, 0xb701, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x801, 0x106) 5.596584104s ago: executing program 2 (id=3): select$auto(0x0, &(0x7f0000000040)={[0x9, 0x4, 0x34, 0x9, 0x1, 0x1, 0x0, 0x6, 0xf, 0x1, 0x0, 0xcf, 0x5, 0x213, 0x5, 0xb98]}, 0x0, 0x0, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000240)="e3", 0x1}, 0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/module/fuse/parameters/max_user_bgreq\x00', 0xc0481, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='%!\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326bd7000fbdbdf250300000009000200cacd2dff11000000040012"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0xb06af94f6e038a6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0x14) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x3f, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c0000001200c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) read$auto(0x3, 0x0, 0x7) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x62, 0x0, 0x10000, 0x7fffffff, 0xfffffffffffffffe, 0xfffffffffffffff7, 0x0, 0x2000000000000e8, 0x1000000000, 0x4, 0x0, 0x8}) r2 = socket(0xa, 0x801, 0x84) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) setsockopt$auto(r2, 0x10000000084, 0x9, 0x0, 0x9c) mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) setsockopt$auto(0x4, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x0) 5.289702913s ago: executing program 3 (id=6): mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/loop5\x00', 0x141000, 0x0) mmap$auto(0xfffffffffffffffe, 0x810002, 0xfdc2, 0x19, r0, 0x8000) mmap$auto(0x0, 0x2000b, 0x4da, 0xeb4, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x8500, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(r2, 0x4008af12, r1) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, 0x0, 0x80101, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x8002, 0x0) migrate_pages$auto(0x0, 0xa, &(0x7f0000000100)=0x5, &(0x7f0000000140)=0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x691, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r3) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000180), 0xc375111f31e0b3fc, 0x0) ioctl$auto_PPPIOCSNPMODE(r5, 0x4008744b, 0x0) readv$auto(0xffffffffffffffff, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) 4.63698944s ago: executing program 1 (id=7): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x54, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, "1bc6e7e10bc66696ea9b05d53fcb46cdea5e227f20ea27bbee943b059ee673eb196cbf758915ad0d31d27b34b0e98cd68af9d349f9047fced32270"}]}, 0x54}}, 0x4004010) socket(0x28, 0x1, 0x0) socket(0x2, 0x5, 0x0) r2 = epoll_create$auto(0x7) sysfs$auto(0x2, 0x0, 0x0) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r3, 0x0) epoll_wait$auto(r2, 0x0, 0xe007, 0x1) 4.138599109s ago: executing program 3 (id=8): mmap$auto(0x100000000000000, 0x20010, 0xe2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x8000) r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000004680)='/sys/kernel/debug/tracing/dynamic_events\x00', 0x502, 0x0) write$auto(r0, &(0x7f0000000100)='!}*[\\@:[\xd5\xe5\xc5/\xa5', 0xc) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2002, 0x0) socket(0x29, 0x2, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xaa03, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x29, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0xa, 0x801, 0x106) setsockopt$auto(r1, 0x6, 0x21, 0x0, 0x10) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) mmap$auto(0x0, 0x810004, 0x2000000efb, 0x8000000008011, r2, 0x8000) ioctl$auto_BLKRRPART(r2, 0x125f, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop13\x00', 0x8040, 0x0) ioctl$auto_BLKPBSZGET(r3, 0x127b, 0x0) madvise$auto(0x0, 0x40004f, 0xe) r4 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x2840, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r4, &(0x7f0000001100)=""/4096, 0x1000) openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto(0x3, 0x89e0, 0xfffffffffffff4e0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) 3.913016696s ago: executing program 2 (id=9): socket(0xa, 0x5, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop13\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) timer_create$auto(0x0, 0x0, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) io_uring_register$auto(0x2, 0x11, &(0x7f0000000180), 0x83) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, 0x0, 0x40000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x4, 0x4000000000e3, 0x40eb1, 0x401, 0x300000000000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/video42/power/control\x00', 0xc2902, 0x0) read$auto(r3, 0x0, 0x20) close_range$auto(0x2, 0xa, 0x0) socket(0x2, 0x1, 0x106) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/kvm/parameters/nx_huge_pages\x00', 0x80302, 0x0) write$auto(0x3, 0x0, 0xffd8) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010001, 0x0, 0x0) mmap$auto(0x0, 0x7f, 0xdb, 0x50, r1, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r6, &(0x7f0000000180)={{&(0x7f00000001c0)="dd2fe40a0900", 0x5ac, &(0x7f0000000100)={&(0x7f0000000340), 0x21}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r4, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000b23fb3aebb6c16ef99e6b81ef82131e39e1c16b343c988b8ca1cdb8c2932d80e4bbfc6093bae7d7aaf7e650985981a654834640f9c09d020b2b0ea8e8075497cae314b34f1a2145fe50d7348bee1a9c3a55f9a23a33c2355978b54961f759a6d73240f815d9c8bde1e8cedeb187be20977ee473934108110ac1d8fb54687aa27104270e8d9783fac5b53bf1e76f8074f58d3e6990ea368cf351397bea2a99b3137355b2637dc99a1fc1b5b1cbd1b4ff196540921be0f8485c2d7e49187988687aa1cd7172675ec518978c287c0f343be0579324b17e8e5b8c031fdea1c1bd1a192134a1298", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250500000008000a0002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000010) 3.567100286s ago: executing program 1 (id=10): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/tasks\x00', 0x63102, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80e80, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) r2 = socket(0x29, 0x5, 0x0) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) r4 = open_by_handle_at$auto(r3, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) sendfile$auto(r1, r1, 0x0, 0x2) memfd_create$auto(&(0x7f0000000140)='!\x00', 0x16) fallocate$auto(0x8000000000000003, 0x1, 0xd, 0x8001) bpf$auto_BPF_OBJ_GET(0x7, &(0x7f0000000000)=@prog_bind_map={r4, r2, 0x1}, 0x3) 3.451408943s ago: executing program 0 (id=11): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x2) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020005, 0x203, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0xe8) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0xffffffffffffffff, 0x8000) openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mixer1\x00', 0x200, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r3, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r3, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x2, 0x0, 0x20000000000000df, 0x1010, 0xffffffffffffffff, 0x7fffffff) socket(0xf, 0x3, 0x0) connect$auto(0x3, 0x0, 0x54) open(&(0x7f0000000800)='./file1\x00', 0x163ac1, 0x1) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) 3.002141213s ago: executing program 1 (id=12): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r0, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000080), 0x88000, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/pcmC1D1c\x00', 0x1, 0x0) ioctl$auto___SNDRV_PCM_IOCTL_SYNC_PTR642(r2, 0xc0884123, 0x0) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mtd0\x00', 0x48000, 0x0) ioctl$auto_MEMGETINFO(r3, 0x80204d01, &(0x7f0000000240)={0x40, 0xfffffff0, 0x4, 0x5, 0x3, 0x9}) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/security/tomoyo/query\x00', 0x684400, 0x0) rseq$auto(&(0x7f00000004c0)={0x12, 0x401, 0x3, 0x6, 0xfffffeff, 0x2}, 0x8002, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x10, 0x2, 0xc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xcb89e694718cb3c2, 0x0) unshare$auto(0x40000080) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty42\x00', 0x40741, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mknod$auto(0x0, 0xea3, 0x2) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/cable#0\x00', 0x8f3b7a51b80ebd01, 0x0) ioctl$auto(0x3, 0xae41, r1) r6 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000001080)='/proc/self/mountinfo\x00', 0x20202, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r6, &(0x7f0000000040)=""/4080, 0x1036) 2.426470532s ago: executing program 3 (id=13): openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = semctl$auto_GETPID(0x10001, 0x8ad, 0xb, 0x9) r1 = pidfd_open$auto(r0, 0xff) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x3, r2, 0x5, 0x4) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000240)={{@inferred=r2, 0x5, 0xffffff2b, 0xd, "ac230c755f137aaaad4c74419152f986c4cc41346786460d7fdd75efda492c53fd4b1413d4be46378668f490", @raw=0x9}, 0x0, @bytes=@data_ptr=&(0x7f0000000080)='/dev/vcs1\x00', "2275e048b6c0c64517a4421c35710da4e0b063f8ca6ce8bc5ac1ea80fdfca2a0e058ebbdce4f79b68fa0cf08490eb60edd28bafb2973755168fccfbb47da1c5880d0b9ba7bf2b1b3955b312a533a4a8aa71c40fc09b20231e2d037e71f944f0074a6fef5be557548bd998a603c7a2b380571dff1d8c2007f85663d8b7ee30582"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x402, 0x0) mmap$auto(0xffffffffffffffff, 0x20009, 0x4000000000df, 0x100000000000eb1, 0x401, 0x6) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0xc0100, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs1\x00', 0x20000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x8}, 0x1) 2.216145622s ago: executing program 0 (id=14): mmap$auto(0x0, 0x20009, 0xdf, 0xeb4, 0x401, 0xd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x4, 0x9, 0x8000000000000000, 0x0) socket(0x1, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) sendfile$auto(r2, r2, 0x0, 0x3) io_uring_setup$auto(0x23, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r3, 0x10e, 0x1, 0x0, 0xe) socket(0x15, 0x5, 0x0) socket(0x29, 0x1, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f00000010c0), 0x115400, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000001380), 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x4b40, 0x1) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_GTP_CMD_NEWPDP(r4, &(0x7f00000001c0)={0x0, 0xff94, &(0x7f0000000180)={0x0, 0x13}, 0x1, 0x0, 0x0, 0x44}, 0x0) unshare$auto(0x40000080) 895.151168ms ago: executing program 2 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40001, 0x0) ioctl$auto(r1, 0x540a, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000240), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'ip6_vti0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HSR_A_IFINDEX={0x8, 0x2, r4}, @HSR_A_NODE_ADDR={0xa, 0x1, @local}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x20000010) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) name_to_handle_at$auto(0x1010, &(0x7f00000001c0)='/\x00', &(0x7f0000000000)={0x0, 0x75c0237c}, 0x0, 0x200) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r6 = socket(0xa, 0x1, 0x84) r7 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={0x38, r7, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x20, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x14, 0xf, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x448c0) bind$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r9 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r9, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) sendmsg$auto_HSR_C_GET_NODE_STATUS(r6, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc, r3, 0x400, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x4044000) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r10 = syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(r5, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x28, r10, 0x929, 0x70bd28, 0x25dfdbff, {}, [@HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c5}, 0x4054) 721.15529ms ago: executing program 1 (id=16): mmap$auto(0x0, 0x20009, 0x4000000000e1, 0x13, 0x401, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x222040, 0x175) socket(0x840000000002, 0x3, 0xff) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f0000000100)={0x0, 0xfffffffffffffff8}, 0x1, 0x0, 0x3, 0x9}, 0x7}, 0x3, 0x2a771d3c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f00000002c0)=0x8) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) fsopen$auto(0x0, 0x1) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1, 0x8, 0xd, 0xe13, 0x81, 0xe, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0x8627, 0x40000000000009, 0x20000800001, 0x3, 0x5, 0x7, 0x6, 0x6, 0x0, 0x4, 0x2a17, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, [0x18, 0xfffffffffffffffc, 0x0, 0x0, 0x33e, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x2000000000000, 0x4, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x27, 0x0, 0x0, 0x0, 0x3, 0x7fffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x1000000000000, 0x0, 0x0, 0x2]}, 0x6, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0xc090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4000010}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) io_uring_setup$auto(0xffd, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0x8208ae63, 0x38) ioprio_set$auto(0x3, 0x0, 0x4b34) 126.756164ms ago: executing program 3 (id=17): mmap$auto(0x0, 0x2020029, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) get_robust_list$auto(0x0, 0x0, 0x0) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0xffffffffffffffff, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) write$auto(0xffffffffffffffff, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x6, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0xffffffffffffffff, r0, 0x8) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) openat$auto_full_fops_mem(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x40, 0x0) close_range$auto(r1, r1, 0x0) socket(0x1e, 0x4, 0x0) r2 = socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x7, 0x0, 0x4) clone$auto(0x7fff, 0xff, 0x0, 0x0, 0x7) mmap$auto(0x0, 0xf, 0xdf, 0xeb1, r0, 0x8000) capset$auto(&(0x7f0000000100)={0x20080522}, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) ioctl$auto(r3, 0x4b45, 0x0) syz_genetlink_get_family_id$auto_hsr(&(0x7f0000000000), r2) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x800000000007, 0xd3e, 0x1, 0x6, 0x2, 0xf1f, 0xc0, 0x3, 0x5f, 0x80, 0x7, 0x8, 0x9, 0x2, 0x2]}, 0x0) dup2$auto(0x5, 0x4) write$auto(0x6, 0x0, 0x100000001) splice$auto(0x4, 0x0, 0x2, 0x0, 0x10000, 0x9) getpid() io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) 0s ago: executing program 2 (id=18): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x4) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x3, 0x21) get_mempolicy$auto(0x0, 0x0, 0x9, 0x0, 0x1) r2 = prctl$auto_PR_SYS_DISPATCH_OFF(0xffffffff, 0x0, 0x0, 0x3fc00, 0x7fff) setns(r2, 0x10000000) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.192' (ED25519) to the list of known hosts. [ 98.555478][ T5818] cgroup: Unknown subsys name 'net' [ 98.710957][ T5818] cgroup: Unknown subsys name 'cpuset' [ 98.720537][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.640371][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.255609][ T796] cfg80211: failed to load regulatory.db [ 102.677281][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 102.687092][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.696616][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 102.698668][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.705416][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 102.715707][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.726079][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.734045][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.737477][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 102.744306][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.751267][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 102.757594][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 102.765175][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 102.784904][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.792160][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 102.800377][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.808164][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 102.816086][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.827089][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 102.842978][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.377019][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 103.538270][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 103.648747][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 103.678588][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 103.698970][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.706896][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.714261][ T5836] bridge_slave_0: entered allmulticast mode [ 103.722806][ T5836] bridge_slave_0: entered promiscuous mode [ 103.769849][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.777141][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.784350][ T5836] bridge_slave_1: entered allmulticast mode [ 103.792337][ T5836] bridge_slave_1: entered promiscuous mode [ 103.910041][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.919465][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.929041][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.936236][ T5837] bridge_slave_0: entered allmulticast mode [ 103.943736][ T5837] bridge_slave_0: entered promiscuous mode [ 103.982068][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.991806][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.999133][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.006330][ T5837] bridge_slave_1: entered allmulticast mode [ 104.013862][ T5837] bridge_slave_1: entered promiscuous mode [ 104.077967][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.085792][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.093605][ T5835] bridge_slave_0: entered allmulticast mode [ 104.101157][ T5835] bridge_slave_0: entered promiscuous mode [ 104.131642][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.139006][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.146184][ T5838] bridge_slave_0: entered allmulticast mode [ 104.153890][ T5838] bridge_slave_0: entered promiscuous mode [ 104.161775][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.169591][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.177069][ T5835] bridge_slave_1: entered allmulticast mode [ 104.184444][ T5835] bridge_slave_1: entered promiscuous mode [ 104.193862][ T5836] team0: Port device team_slave_0 added [ 104.203179][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.212504][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.219973][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.227548][ T5838] bridge_slave_1: entered allmulticast mode [ 104.234870][ T5838] bridge_slave_1: entered promiscuous mode [ 104.268364][ T5836] team0: Port device team_slave_1 added [ 104.276816][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.335394][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.347954][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.388505][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.400219][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.410615][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.418254][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.444669][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.458646][ T5837] team0: Port device team_slave_0 added [ 104.487366][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.494421][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.520870][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.534001][ T5837] team0: Port device team_slave_1 added [ 104.587592][ T5838] team0: Port device team_slave_0 added [ 104.595984][ T5835] team0: Port device team_slave_0 added [ 104.617453][ T5838] team0: Port device team_slave_1 added [ 104.625045][ T5835] team0: Port device team_slave_1 added [ 104.644092][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.651196][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.677395][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.723521][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.731169][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.757474][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.792659][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.799744][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.825876][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.845698][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.852787][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.879182][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.890346][ T5847] Bluetooth: hci3: command tx timeout [ 104.893223][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.897952][ T5847] Bluetooth: hci1: command tx timeout [ 104.903197][ T5839] Bluetooth: hci0: command tx timeout [ 104.909574][ T5844] Bluetooth: hci2: command tx timeout [ 104.915124][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 104.945459][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.964564][ T5836] hsr_slave_0: entered promiscuous mode [ 104.971441][ T5836] hsr_slave_1: entered promiscuous mode [ 104.988968][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.995949][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.022516][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.129281][ T5837] hsr_slave_0: entered promiscuous mode [ 105.135805][ T5837] hsr_slave_1: entered promiscuous mode [ 105.142249][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 105.148347][ T5837] Cannot create hsr debugfs directory [ 105.192539][ T5835] hsr_slave_0: entered promiscuous mode [ 105.199282][ T5835] hsr_slave_1: entered promiscuous mode [ 105.205562][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 105.211883][ T5835] Cannot create hsr debugfs directory [ 105.239452][ T5838] hsr_slave_0: entered promiscuous mode [ 105.245977][ T5838] hsr_slave_1: entered promiscuous mode [ 105.252735][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 105.258594][ T5838] Cannot create hsr debugfs directory [ 105.736715][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.752426][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.773205][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.785382][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.840722][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.867762][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.881304][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.903359][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.994989][ T5837] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.014546][ T5837] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.028574][ T5837] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.053335][ T5837] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.163591][ T5838] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.181759][ T5838] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.194988][ T5838] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.215211][ T5838] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.259989][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.330087][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.341093][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.369257][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.376618][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.406315][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.413526][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.440250][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.464500][ T1312] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.471737][ T1312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.501051][ T1312] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.508271][ T1312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.523180][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.592405][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.623649][ T1129] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.630865][ T1129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.684192][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.715521][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.722776][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.798895][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.815486][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.822733][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.879032][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.886250][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.967395][ T5844] Bluetooth: hci0: command tx timeout [ 106.968659][ T5839] Bluetooth: hci2: command tx timeout [ 106.973393][ T5847] Bluetooth: hci1: command tx timeout [ 106.979109][ T5839] Bluetooth: hci3: command tx timeout [ 107.137727][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.333504][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.353130][ T5836] veth0_vlan: entered promiscuous mode [ 107.394798][ T5836] veth1_vlan: entered promiscuous mode [ 107.504285][ T5835] veth0_vlan: entered promiscuous mode [ 107.533656][ T5836] veth0_macvtap: entered promiscuous mode [ 107.549451][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.564385][ T5835] veth1_vlan: entered promiscuous mode [ 107.578751][ T5836] veth1_macvtap: entered promiscuous mode [ 107.614282][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.629911][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.662543][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.699449][ T144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.716945][ T144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.726209][ T5835] veth0_macvtap: entered promiscuous mode [ 107.739666][ T144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.749405][ T144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.781990][ T5835] veth1_macvtap: entered promiscuous mode [ 107.797719][ T5837] veth0_vlan: entered promiscuous mode [ 107.852239][ T5837] veth1_vlan: entered promiscuous mode [ 107.913468][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.932679][ T5838] veth0_vlan: entered promiscuous mode [ 107.951362][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.953390][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.976041][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.985591][ T1129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.995895][ T1129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.015476][ T5838] veth1_vlan: entered promiscuous mode [ 108.028384][ T1129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.051290][ T1129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.080442][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.093642][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.145552][ T5837] veth0_macvtap: entered promiscuous mode [ 108.172861][ T5837] veth1_macvtap: entered promiscuous mode [ 108.224699][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 108.264364][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.280893][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.298108][ T5838] veth0_macvtap: entered promiscuous mode [ 108.324365][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.344349][ T5838] veth1_macvtap: entered promiscuous mode [ 108.392869][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.444435][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.452959][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.462174][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.481176][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.494633][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.504282][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.513766][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.624675][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.866740][ T1129] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.885072][ T1129] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.046657][ T5844] Bluetooth: hci0: command tx timeout [ 109.052302][ T5847] Bluetooth: hci1: command tx timeout [ 109.061269][ T5844] Bluetooth: hci2: command tx timeout [ 109.067223][ T5847] Bluetooth: hci3: command tx timeout [ 109.137938][ T1129] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.152174][ T1129] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.364343][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.387169][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.501654][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.534935][ T5933] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 109.546552][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.596000][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.620703][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.705378][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.725672][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.181110][ T5847] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 110.188951][ T5847] Bluetooth: hci1: Invalid handle: 0x3a4a > 0x0eff [ 110.509496][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e143800: rx timeout, send abort [ 110.606487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.614850][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 110.847716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.018540][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e143800: abort rx timeout. Force session deactivation [ 111.122069][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 111.134164][ T5844] Bluetooth: hci2: command tx timeout [ 111.134204][ T5839] Bluetooth: hci0: command tx timeout [ 111.139684][ T5847] Bluetooth: hci3: command tx timeout [ 111.162944][ T5841] Bluetooth: hci1: command tx timeout [ 111.567677][ T5967] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 111.700611][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.837047][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 112.040892][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 112.097309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 112.438267][ T5977] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 112.677013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.751724][ T5980] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 112.956942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 112.968034][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 114.145122][ T5988] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.156858][ T5988] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.211785][ T5984] FAULT_INJECTION: forcing a failure. [ 114.211785][ T5984] name failslab, interval 1, probability 0, space 0, times 1 [ 114.227649][ T5984] CPU: 0 UID: 0 PID: 5984 Comm: syz.1.12 Not tainted syzkaller #0 PREEMPT(full) [ 114.227690][ T5984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 114.227713][ T5984] Call Trace: [ 114.227723][ T5984] [ 114.227739][ T5984] dump_stack_lvl+0x16c/0x1f0 [ 114.227800][ T5984] should_fail_ex+0x512/0x640 [ 114.227838][ T5984] ? fs_reclaim_acquire+0xae/0x150 [ 114.227892][ T5984] should_failslab+0xc2/0x120 [ 114.227935][ T5984] kmem_cache_alloc_noprof+0x83/0x770 [ 114.227968][ T5984] ? __pfx_map_id_range_down+0x10/0x10 [ 114.228008][ T5984] ? security_inode_alloc+0x3b/0x2b0 [ 114.228047][ T5984] ? security_inode_alloc+0x3b/0x2b0 [ 114.228074][ T5984] security_inode_alloc+0x3b/0x2b0 [ 114.228105][ T5984] inode_init_always_gfp+0xced/0x1040 [ 114.228150][ T5984] alloc_inode+0x86/0x240 [ 114.228180][ T5984] new_inode+0x22/0x1c0 [ 114.228207][ T5984] ? proc_lookup_de+0x201/0x360 [ 114.228248][ T5984] proc_get_inode+0x1d/0x780 [ 114.228284][ T5984] proc_lookup_de+0x236/0x360 [ 114.228323][ T5984] ? __pfx_proc_lookup+0x10/0x10 [ 114.228358][ T5984] proc_lookup+0xcf/0x110 [ 114.228395][ T5984] lookup_open.isra.0+0x4e2/0x1780 [ 114.228437][ T5984] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 114.228497][ T5984] ? mnt_get_write_access+0x1e9/0x2f0 [ 114.228533][ T5984] path_openat+0x12bb/0x3140 [ 114.228601][ T5984] ? __pfx_path_openat+0x10/0x10 [ 114.228658][ T5984] do_filp_open+0x20b/0x470 [ 114.228699][ T5984] ? __pfx_do_filp_open+0x10/0x10 [ 114.228765][ T5984] ? alloc_fd+0x471/0x7d0 [ 114.228813][ T5984] do_sys_openat2+0x121/0x290 [ 114.228844][ T5984] ? __pfx_do_sys_openat2+0x10/0x10 [ 114.228886][ T5984] __x64_sys_openat+0x174/0x210 [ 114.228917][ T5984] ? __pfx___x64_sys_openat+0x10/0x10 [ 114.228962][ T5984] do_syscall_64+0xcd/0xf80 [ 114.228990][ T5984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.229016][ T5984] RIP: 0033:0x7fc9ea38f7c9 [ 114.229037][ T5984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.229062][ T5984] RSP: 002b:00007fc9eb15f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 114.229087][ T5984] RAX: ffffffffffffffda RBX: 00007fc9ea5e5fa0 RCX: 00007fc9ea38f7c9 [ 114.229104][ T5984] RDX: 8f3b7a51b80ebd01 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 114.229121][ T5984] RBP: 00007fc9ea413f91 R08: 0000000000000000 R09: 0000000000000000 [ 114.229137][ T5984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 114.229152][ T5984] R13: 00007fc9ea5e6038 R14: 00007fc9ea5e5fa0 R15: 00007fff2985cff8 [ 114.229188][ T5984] [ 114.529642][ T5988] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 114.699905][ T5988] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 114.755006][ T5988] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 114.818859][ T6005] openvswitch: netlink: Duplicate key (type 15). [ 114.922223][ T6006] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 114.980501][ T5988] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 115.082817][ T5988] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 115.114266][ T5988] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.149037][ T5988] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 115.167031][ T6009] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16'. [ 115.230616][ T5988] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 115.245697][ T6009] bridge_slave_1: left allmulticast mode [ 115.256902][ T5988] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.279411][ T6009] bridge_slave_1: left promiscuous mode [ 115.302712][ T5988] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 115.315356][ T6009] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.400608][ T6009] bridge_slave_0: left allmulticast mode [ 115.406348][ T6009] bridge_slave_0: left promiscuous mode [ 115.418511][ T6009] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.741167][ T5905] smpboot: CPU 1 is now offline [ 115.812883][ T6018] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 115.844927][ T5837] ------------[ cut here ]------------ [ 115.845364][ T5837] [ 115.845372][ T5837] ====================================================== [ 115.845380][ T5837] WARNING: possible circular locking dependency detected [ 115.845389][ T5837] syzkaller #0 Not tainted [ 115.845400][ T5837] ------------------------------------------------------ [ 115.845407][ T5837] syz-executor/5837 is trying to acquire lock: [ 115.845419][ T5837] ffffffff8e2d6a40 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 115.845482][ T5837] [ 115.845482][ T5837] but task is already holding lock: [ 115.845489][ T5837] ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 115.845547][ T5837] [ 115.845547][ T5837] which lock already depends on the new lock. [ 115.845547][ T5837] [ 115.845554][ T5837] [ 115.845554][ T5837] the existing dependency chain (in reverse order) is: [ 115.845562][ T5837] [ 115.845562][ T5837] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 115.845590][ T5837] _raw_spin_lock_nested+0x31/0x40 [ 115.845624][ T5837] raw_spin_rq_lock_nested+0x29/0x130 [ 115.845654][ T5837] task_rq_lock+0xcf/0x490 [ 115.845684][ T5837] cgroup_move_task+0x81/0x2a0 [ 115.845718][ T5837] css_set_move_task+0x288/0x5f0 [ 115.845754][ T5837] cgroup_post_fork+0x201/0x9e0 [ 115.845789][ T5837] copy_process+0x56b6/0x7430 [ 115.845823][ T5837] kernel_clone+0xfc/0x910 [ 115.845856][ T5837] user_mode_thread+0xc8/0x110 [ 115.845891][ T5837] rest_init+0x23/0x2b0 [ 115.845917][ T5837] start_kernel+0x3ef/0x4d0 [ 115.845942][ T5837] x86_64_start_reservations+0x18/0x30 [ 115.845970][ T5837] x86_64_start_kernel+0x130/0x190 [ 115.845997][ T5837] common_startup_64+0x13e/0x148 [ 115.846030][ T5837] [ 115.846030][ T5837] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 115.846058][ T5837] _raw_spin_lock_irqsave+0x3a/0x60 [ 115.846092][ T5837] try_to_wake_up+0xb7/0x1860 [ 115.846128][ T5837] create_worker+0x339/0x7e0 [ 115.846148][ T5837] workqueue_init+0x4e5/0xbe0 [ 115.846182][ T5837] kernel_init_freeable+0x332/0x920 [ 115.846213][ T5837] kernel_init+0x1c/0x2b0 [ 115.846240][ T5837] ret_from_fork+0x983/0xb10 [ 115.846262][ T5837] ret_from_fork_asm+0x1a/0x30 [ 115.846297][ T5837] [ 115.846297][ T5837] -> #3 (&pool->lock){-.-.}-{2:2}: [ 115.846328][ T5837] _raw_spin_lock+0x2e/0x40 [ 115.846360][ T5837] __queue_work+0x26b/0x10e0 [ 115.846388][ T5837] queue_work_on+0x15f/0x1f0 [ 115.846412][ T5837] rpm_suspend+0xe8f/0x11b0 [ 115.846441][ T5837] rpm_idle+0x5dc/0x760 [ 115.846468][ T5837] __pm_runtime_idle+0xba/0x1a0 [ 115.846497][ T5837] __device_attach+0x37e/0x4e0 [ 115.846526][ T5837] device_initial_probe+0xaa/0xc0 [ 115.846556][ T5837] bus_probe_device+0x64/0x150 [ 115.846580][ T5837] device_add+0x116e/0x1980 [ 115.846614][ T5837] serial_base_port_add+0x227/0x2b0 [ 115.846636][ T5837] serial_core_register_port+0x13c/0x25d0 [ 115.846657][ T5837] serial8250_register_8250_port+0x155a/0x2380 [ 115.846687][ T5837] serial_pnp_probe+0x431/0x930 [ 115.846714][ T5837] pnp_device_probe+0x2a8/0x4d0 [ 115.846736][ T5837] really_probe+0x241/0xb20 [ 115.846774][ T5837] __driver_probe_device+0x1de/0x470 [ 115.846800][ T5837] driver_probe_device+0x4c/0x1b0 [ 115.846826][ T5837] __driver_attach+0x283/0x5e0 [ 115.846852][ T5837] bus_for_each_dev+0x13e/0x1d0 [ 115.846871][ T5837] bus_add_driver+0x30f/0x6c0 [ 115.846892][ T5837] driver_register+0x15c/0x4b0 [ 115.846921][ T5837] serial8250_init+0xca/0x1e0 [ 115.846949][ T5837] do_one_initcall+0x123/0x680 [ 115.846978][ T5837] kernel_init_freeable+0x5c8/0x920 [ 115.847002][ T5837] kernel_init+0x1c/0x2b0 [ 115.847026][ T5837] ret_from_fork+0x983/0xb10 [ 115.847045][ T5837] ret_from_fork_asm+0x1a/0x30 [ 115.847075][ T5837] [ 115.847075][ T5837] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 115.847101][ T5837] _raw_spin_lock_irqsave+0x3a/0x60 [ 115.847137][ T5837] __pm_runtime_resume+0xa9/0x170 [ 115.847164][ T5837] __uart_start+0x1b0/0x500 [ 115.847190][ T5837] uart_write+0x218/0xb30 [ 115.847221][ T5837] n_tty_write+0x434/0x1280 [ 115.847241][ T5837] file_tty_write.constprop.0+0x503/0x9b0 [ 115.847273][ T5837] redirected_tty_write+0xd4/0x120 [ 115.847303][ T5837] vfs_write+0x7d3/0x11d0 [ 115.847333][ T5837] ksys_write+0x12a/0x250 [ 115.847362][ T5837] do_syscall_64+0xcd/0xf80 [ 115.847381][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.847403][ T5837] [ 115.847403][ T5837] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 115.847429][ T5837] _raw_spin_lock_irqsave+0x3a/0x60 [ 115.847460][ T5837] serial8250_console_write+0x181/0x1890 [ 115.847483][ T5837] console_flush_one_record+0x796/0xc60 [ 115.847511][ T5837] console_unlock+0xef/0x240 [ 115.847536][ T5837] vprintk_emit+0x407/0x6b0 [ 115.847563][ T5837] _printk+0xc7/0x100 [ 115.847583][ T5837] register_console+0x823/0x1210 [ 115.847611][ T5837] univ8250_console_init+0x5f/0x90 [ 115.847640][ T5837] console_init+0x152/0x600 [ 115.847666][ T5837] start_kernel+0x298/0x4d0 [ 115.847688][ T5837] x86_64_start_reservations+0x18/0x30 [ 115.847714][ T5837] x86_64_start_kernel+0x130/0x190 [ 115.847738][ T5837] common_startup_64+0x13e/0x148 [ 115.847763][ T5837] [ 115.847763][ T5837] -> #0 (console_owner){-.-.}-{0:0}: [ 115.847788][ T5837] __lock_acquire+0x1669/0x2890 [ 115.847806][ T5837] lock_acquire+0x179/0x330 [ 115.847824][ T5837] console_lock_spinning_enable+0x72/0x80 [ 115.847851][ T5837] console_flush_one_record+0x73f/0xc60 [ 115.847879][ T5837] console_unlock+0xef/0x240 [ 115.847904][ T5837] vprintk_emit+0x407/0x6b0 [ 115.847932][ T5837] _printk+0xc7/0x100 [ 115.847950][ T5837] __report_bug+0x3a6/0x520 [ 115.847980][ T5837] report_bug+0xb2/0x220 [ 115.848008][ T5837] handle_bug+0x127/0x260 [ 115.848029][ T5837] exc_invalid_op+0x17/0x50 [ 115.848051][ T5837] asm_exc_invalid_op+0x1a/0x20 [ 115.848070][ T5837] update_rq_clock+0x34a/0xc70 [ 115.848098][ T5837] __schedule+0x20fd/0x5ee0 [ 115.848134][ T5837] schedule+0xe7/0x3a0 [ 115.848163][ T5837] do_nanosleep+0x219/0x580 [ 115.848188][ T5837] hrtimer_nanosleep+0x155/0x380 [ 115.848218][ T5837] common_nsleep+0xa1/0xd0 [ 115.848239][ T5837] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 115.848270][ T5837] do_syscall_64+0xcd/0xf80 [ 115.848288][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.848308][ T5837] [ 115.848308][ T5837] other info that might help us debug this: [ 115.848308][ T5837] [ 115.848314][ T5837] Chain exists of: [ 115.848314][ T5837] console_owner --> &p->pi_lock --> &rq->__lock [ 115.848314][ T5837] [ 115.848343][ T5837] Possible unsafe locking scenario: [ 115.848343][ T5837] [ 115.848348][ T5837] CPU0 CPU1 [ 115.848354][ T5837] ---- ---- [ 115.848359][ T5837] lock(&rq->__lock); [ 115.848373][ T5837] lock(&p->pi_lock); [ 115.848386][ T5837] lock(&rq->__lock); [ 115.848400][ T5837] lock(console_owner); [ 115.848412][ T5837] [ 115.848412][ T5837] *** DEADLOCK *** [ 115.848412][ T5837] [ 115.848417][ T5837] 3 locks held by syz-executor/5837: [ 115.848429][ T5837] #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 115.848484][ T5837] #1: ffffffff8e3b6e80 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 115.848530][ T5837] #2: ffffffff8e3b6ef8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0x103/0xc60 [ 115.848585][ T5837] [ 115.848585][ T5837] stack backtrace: [ 115.848595][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 115.848620][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 115.848633][ T5837] Call Trace: [ 115.848640][ T5837] [ 115.848648][ T5837] dump_stack_lvl+0x116/0x1f0 [ 115.848683][ T5837] print_circular_bug+0x275/0x340 [ 115.848719][ T5837] check_noncircular+0x146/0x160 [ 115.848757][ T5837] __lock_acquire+0x1669/0x2890 [ 115.848788][ T5837] lock_acquire+0x179/0x330 [ 115.848807][ T5837] ? console_lock_spinning_enable+0x61/0x80 [ 115.848840][ T5837] ? console_lock_spinning_enable+0x4a/0x80 [ 115.848872][ T5837] console_lock_spinning_enable+0x72/0x80 [ 115.848900][ T5837] ? console_lock_spinning_enable+0x61/0x80 [ 115.848927][ T5837] console_flush_one_record+0x73f/0xc60 [ 115.848960][ T5837] ? __pfx_console_flush_one_record+0x10/0x10 [ 115.848990][ T5837] ? __lock_acquire+0x436/0x2890 [ 115.849012][ T5837] ? is_printk_cpu_sync_owner+0x32/0x40 [ 115.849046][ T5837] console_unlock+0xef/0x240 [ 115.849073][ T5837] ? __pfx_console_unlock+0x10/0x10 [ 115.849102][ T5837] ? do_raw_spin_unlock+0xb0/0x230 [ 115.849134][ T5837] ? _printk+0xc7/0x100 [ 115.849154][ T5837] ? __down_trylock_console_sem+0xb0/0x140 [ 115.849180][ T5837] vprintk_emit+0x407/0x6b0 [ 115.849210][ T5837] ? __pfx_vprintk_emit+0x10/0x10 [ 115.849239][ T5837] ? kernel_wait4+0x16b/0x280 [ 115.849261][ T5837] ? do_syscall_64+0xcd/0xf80 [ 115.849279][ T5837] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.849303][ T5837] _printk+0xc7/0x100 [ 115.849324][ T5837] ? __pfx__printk+0x10/0x10 [ 115.849346][ T5837] ? trace_pelt_se_tp+0xed/0x130 [ 115.849366][ T5837] ? __update_load_avg_se+0x3fb/0x940 [ 115.849402][ T5837] ? __report_bug+0x396/0x520 [ 115.849431][ T5837] ? __report_bug+0x385/0x520 [ 115.849462][ T5837] __report_bug+0x3a6/0x520 [ 115.849492][ T5837] ? update_rq_clock+0x34a/0xc70 [ 115.849522][ T5837] ? __pfx___report_bug+0x10/0x10 [ 115.849560][ T5837] ? update_rq_clock+0x34a/0xc70 [ 115.849589][ T5837] report_bug+0xb2/0x220 [ 115.849619][ T5837] ? update_rq_clock+0x34a/0xc70 [ 115.849649][ T5837] handle_bug+0x127/0x260 [ 115.849672][ T5837] exc_invalid_op+0x17/0x50 [ 115.849696][ T5837] asm_exc_invalid_op+0x1a/0x20 [ 115.849716][ T5837] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 115.849748][ T5837] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 115.849769][ T5837] RSP: 0018:ffffc9000421fa90 EFLAGS: 00010046 [ 115.849786][ T5837] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 115.849799][ T5837] RDX: 0000000000000000 RSI: ffffffff8daa5da7 RDI: ffffffff8bf2b400 [ 115.849813][ T5837] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff2111fda [ 115.849827][ T5837] R10: ffffffff9088fed7 R11: 0000000000000001 R12: ffffffff90892f54 [ 115.849840][ T5837] R13: ffffffff8dd66920 R14: ffff8880433bbd00 R15: ffff8880b853adc0 [ 115.849862][ T5837] ? pick_task_fair+0x85/0x350 [ 115.849892][ T5837] __schedule+0x20fd/0x5ee0 [ 115.849931][ T5837] ? __pfx___schedule+0x10/0x10 [ 115.849963][ T5837] ? find_held_lock+0x2b/0x80 [ 115.849991][ T5837] ? schedule+0x2d7/0x3a0 [ 115.850024][ T5837] schedule+0xe7/0x3a0 [ 115.850055][ T5837] do_nanosleep+0x219/0x580 [ 115.850085][ T5837] ? __pfx_do_nanosleep+0x10/0x10 [ 115.850113][ T5837] ? __asan_memset+0x23/0x50 [ 115.850144][ T5837] ? __hrtimer_setup+0x176/0x280 [ 115.850172][ T5837] hrtimer_nanosleep+0x155/0x380 [ 115.850203][ T5837] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 115.850237][ T5837] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 115.850266][ T5837] ? get_timespec64+0x136/0x1b0 [ 115.850286][ T5837] ? __pfx_get_timespec64+0x10/0x10 [ 115.850309][ T5837] common_nsleep+0xa1/0xd0 [ 115.850333][ T5837] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 115.850368][ T5837] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 115.850408][ T5837] do_syscall_64+0xcd/0xf80 [ 115.850428][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.850450][ T5837] RIP: 0033:0x7f8b1f5c2085 [ 115.850466][ T5837] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 115.850487][ T5837] RSP: 002b:00007ffee41a71d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 115.850505][ T5837] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f8b1f5c2085 [ 115.850519][ T5837] RDX: 00007ffee41a7210 RSI: 0000000000000000 RDI: 0000000000000000 [ 115.850532][ T5837] RBP: 00007ffee41a727c R08: 0000000000000000 R09: 0000000000000000 [ 115.850547][ T5837] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 115.850560][ T5837] R13: 00000000000927c0 R14: 000000000001c456 R15: 00007ffee41a72d0 [ 115.850581][ T5837] [ 117.059299][ T5837] WARNING: kernel/sched/sched.h:1571 at update_rq_clock+0x34a/0xc70, CPU#0: syz-executor/5837 [ 117.069588][ T5837] Modules linked in: [ 117.073488][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 117.082949][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.093040][ T5837] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 117.098612][ T5837] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 117.118241][ T5837] RSP: 0018:ffffc9000421fa90 EFLAGS: 00010046 [ 117.124314][ T5837] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 117.132287][ T5837] RDX: 0000000000000000 RSI: ffffffff8daa5da7 RDI: ffffffff8bf2b400 [ 117.140263][ T5837] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff2111fda [ 117.148238][ T5837] R10: ffffffff9088fed7 R11: 0000000000000001 R12: ffffffff90892f54 [ 117.156228][ T5837] R13: ffffffff8dd66920 R14: ffff8880433bbd00 R15: ffff8880b853adc0 [ 117.164206][ T5837] FS: 000055556466c500(0000) GS:ffff8881248f8000(0000) knlGS:0000000000000000 [ 117.173152][ T5837] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.179744][ T5837] CR2: 00007f8b20345f98 CR3: 0000000069068000 CR4: 00000000003526f0 [ 117.187721][ T5837] Call Trace: [ 117.191003][ T5837] [ 117.193958][ T5837] ? pick_task_fair+0x85/0x350 [ 117.198755][ T5837] __schedule+0x20fd/0x5ee0 [ 117.203287][ T5837] ? __pfx___schedule+0x10/0x10 [ 117.208155][ T5837] ? find_held_lock+0x2b/0x80 [ 117.212873][ T5837] ? schedule+0x2d7/0x3a0 [ 117.217222][ T5837] schedule+0xe7/0x3a0 [ 117.221310][ T5837] do_nanosleep+0x219/0x580 [ 117.225832][ T5837] ? __pfx_do_nanosleep+0x10/0x10 [ 117.230874][ T5837] ? __asan_memset+0x23/0x50 [ 117.235476][ T5837] ? __hrtimer_setup+0x176/0x280 [ 117.240425][ T5837] hrtimer_nanosleep+0x155/0x380 [ 117.245398][ T5837] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 117.250876][ T5837] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 117.256090][ T5837] ? get_timespec64+0x136/0x1b0 [ 117.260958][ T5837] ? __pfx_get_timespec64+0x10/0x10 [ 117.266169][ T5837] common_nsleep+0xa1/0xd0 [ 117.270594][ T5837] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 117.276247][ T5837] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 117.282420][ T5837] do_syscall_64+0xcd/0xf80 [ 117.286934][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.292918][ T5837] RIP: 0033:0x7f8b1f5c2085 [ 117.297424][ T5837] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 117.317160][ T5837] RSP: 002b:00007ffee41a71d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 117.325586][ T5837] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f8b1f5c2085 [ 117.333563][ T5837] RDX: 00007ffee41a7210 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.341544][ T5837] RBP: 00007ffee41a727c R08: 0000000000000000 R09: 0000000000000000 [ 117.349531][ T5837] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 117.357543][ T5837] R13: 00000000000927c0 R14: 000000000001c456 R15: 00007ffee41a72d0 [ 117.365626][ T5837] [ 117.368657][ T5837] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.375941][ T5837] CPU: 0 UID: 0 PID: 5837 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 117.385407][ T5837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.395465][ T5837] Call Trace: [ 117.398749][ T5837] [ 117.401682][ T5837] dump_stack_lvl+0x3d/0x1f0 [ 117.406301][ T5837] vpanic+0x640/0x6f0 [ 117.410294][ T5837] ? update_rq_clock+0x34a/0xc70 [ 117.415252][ T5837] panic+0xca/0xd0 [ 117.418989][ T5837] ? __pfx_panic+0x10/0x10 [ 117.423510][ T5837] ? check_panic_on_warn+0x1f/0xb0 [ 117.428721][ T5837] check_panic_on_warn+0xab/0xb0 [ 117.433672][ T5837] __warn+0x108/0x3c0 [ 117.437663][ T5837] __report_bug+0x2a0/0x520 [ 117.442188][ T5837] ? update_rq_clock+0x34a/0xc70 [ 117.447148][ T5837] ? __pfx___report_bug+0x10/0x10 [ 117.452202][ T5837] ? update_rq_clock+0x34a/0xc70 [ 117.457156][ T5837] report_bug+0xb2/0x220 [ 117.461438][ T5837] ? update_rq_clock+0x34a/0xc70 [ 117.466397][ T5837] handle_bug+0x127/0x260 [ 117.472072][ T5837] exc_invalid_op+0x17/0x50 [ 117.476701][ T5837] asm_exc_invalid_op+0x1a/0x20 [ 117.481570][ T5837] RIP: 0010:update_rq_clock+0x34a/0xc70 [ 117.487154][ T5837] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc a8 04 0f 84 9c fd ff ff 90 0f 0b 90 e9 93 fd ff ff 90 <0f> 0b 90 e9 4f fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 117.506877][ T5837] RSP: 0018:ffffc9000421fa90 EFLAGS: 00010046 [ 117.512988][ T5837] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 117.521156][ T5837] RDX: 0000000000000000 RSI: ffffffff8daa5da7 RDI: ffffffff8bf2b400 [ 117.529146][ T5837] RBP: 0000000000000001 R08: ffff8880b843b8c8 R09: fffffbfff2111fda [ 117.537221][ T5837] R10: ffffffff9088fed7 R11: 0000000000000001 R12: ffffffff90892f54 [ 117.545238][ T5837] R13: ffffffff8dd66920 R14: ffff8880433bbd00 R15: ffff8880b853adc0 [ 117.553320][ T5837] ? pick_task_fair+0x85/0x350 [ 117.558113][ T5837] __schedule+0x20fd/0x5ee0 [ 117.562671][ T5837] ? __pfx___schedule+0x10/0x10 [ 117.567543][ T5837] ? find_held_lock+0x2b/0x80 [ 117.572262][ T5837] ? schedule+0x2d7/0x3a0 [ 117.576616][ T5837] schedule+0xe7/0x3a0 [ 117.580706][ T5837] do_nanosleep+0x219/0x580 [ 117.585232][ T5837] ? __pfx_do_nanosleep+0x10/0x10 [ 117.590279][ T5837] ? __asan_memset+0x23/0x50 [ 117.594889][ T5837] ? __hrtimer_setup+0x176/0x280 [ 117.599851][ T5837] hrtimer_nanosleep+0x155/0x380 [ 117.604821][ T5837] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 117.610303][ T5837] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 117.615523][ T5837] ? get_timespec64+0x136/0x1b0 [ 117.620395][ T5837] ? __pfx_get_timespec64+0x10/0x10 [ 117.625622][ T5837] common_nsleep+0xa1/0xd0 [ 117.630071][ T5837] __x64_sys_clock_nanosleep+0x34d/0x4a0 [ 117.635733][ T5837] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 117.641925][ T5837] do_syscall_64+0xcd/0xf80 [ 117.646443][ T5837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.652345][ T5837] RIP: 0033:0x7f8b1f5c2085 [ 117.656765][ T5837] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 117.676380][ T5837] RSP: 002b:00007ffee41a71d0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 117.684811][ T5837] RAX: ffffffffffffffda RBX: 0000000000000014 RCX: 00007f8b1f5c2085 [ 117.692792][ T5837] RDX: 00007ffee41a7210 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.700767][ T5837] RBP: 00007ffee41a727c R08: 0000000000000000 R09: 0000000000000000 [ 117.708740][ T5837] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000001388 [ 117.716803][ T5837] R13: 00000000000927c0 R14: 000000000001c456 R15: 00007ffee41a72d0 [ 117.724788][ T5837] [ 117.728025][ T5837] Kernel Offset: disabled [ 117.732364][ T5837] Rebooting in 86400 seconds..