last executing test programs: 6.12454236s ago: executing program 2 (id=113): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x22, 0x1, 0x5) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) 5.891622177s ago: executing program 2 (id=115): r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a00)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd7100f9db73216d5ee40008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x404c0c1}, 0x80) (fail_nth: 3) 5.76698809s ago: executing program 2 (id=116): socket(0xa, 0x1, 0x100) ioperm$auto(0x7, 0x5ad2, 0x8) modify_ldt$auto(0x1, 0x0, 0x10) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) pread64$auto(r0, &(0x7f0000000040)='\x00\x00\x00\x88\xde\x90\a\'\x9bM\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9e{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6', 0x7ff, 0x400) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x21, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/024/001\x00', 0x40001, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x400000000000948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x3, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r1, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x4, 0xfffffffffffffffe, 0xe, 0x6d3b, 0xe, 0x7, 0x6]}, 0x0) mmap$auto(0xc, 0x20009, 0x5, 0xeb1, 0x405, 0x8000) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) process_mrelease$auto(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x50b41, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mount$auto(0x0, &(0x7f0000001500)='./file0\x00', &(0x7f0000001540)='cifs\x00', 0x8002, 0x0) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 4.631559971s ago: executing program 1 (id=120): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffd, 0x401bf, 0x7, 0x3c, 0x65f, 0x1ffde, 0x5, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x80000000009, 0x6, 0xdec3, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x185c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25030000000600070008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060006004000000006000600070000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/irq/11/chip_name\x00', 0xa000, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7) 4.439781351s ago: executing program 1 (id=121): mmap$auto(0x0, 0x2020009, 0x8000000003, 0xeb1, 0xfffffffffffffffa, 0x8000) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) getdents$auto(r0, 0x0, 0xfff) (fail_nth: 1) 4.427977775s ago: executing program 3 (id=122): clock_nanosleep$auto(0x9, 0x0, &(0x7f0000000000)={0x0, 0x200}, 0x0) (async) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) (async) r1 = socket(0x10, 0x80000, 0x14) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000003000)={0x0, 0x0, &(0x7f0000002fc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000000a14af"], 0x14}, 0x1, 0x0, 0x0, 0x80c3}, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(r1, 0x0, 0x3d55, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0x7, 0x10, r0, 0xd) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) r3 = socket(0x2, 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x80000, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_NL80211_CMD_ASSOC_MLO_RECONF(r2, 0x0, 0x80) syz_genetlink_get_family_id$auto_batadv(0x0, r3) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x1, 0xfb, 0xdf, 0x9b72, 0x7, 0x8001) (async) io_uring_setup$auto(0x6, 0x0) socket(0x2b, 0x1, 0x1) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/17, 0x11) 3.87158524s ago: executing program 3 (id=123): r0 = socket(0x10, 0x3, 0x6) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c5", @ANYRES32], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) (fail_nth: 2) 3.106362582s ago: executing program 3 (id=124): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r1 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/pcmC1D1p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_STATUS_EXT32(r1, 0xc06c4124, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DELAY(r1, 0x80084121, &(0x7f0000000040)=0x42e) write$auto_sg_fops_sg(r0, &(0x7f00000004c0)="4a0200000000000000899edb615550fd8c7c924d87f0030047eb02eff5d2adc245a4e1eded0e91b86c61b6b42ede", 0x2e) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000000), 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129302, 0x0) ioctl$auto_IOCTL_VMCI_SET_NOTIFY(0xffffffffffffffff, 0x7cb, 0x0) r2 = bpf$auto_BPF_ITER_CREATE(0x21, &(0x7f00000000c0)=@test={0xffffffffffffffff, 0x8, 0x7ff, 0xbc, 0x2, 0x8000000000000001, 0x86b7, 0x7, 0x9, 0xf7, 0x4, 0x5, 0x0, 0xa, 0x8e7}, 0xffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'ipvlan1\x00'}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xfffff, 0x0) capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) pipe2$auto(0x0, 0x80) 2.93081297s ago: executing program 0 (id=125): mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000340), 0x108800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) 2.867553554s ago: executing program 1 (id=126): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x111800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000002c0)={0x7fe3, 0x6, "b908674cfda2f7f351c66f681b0cf4a6f675fcee96065fdca6f219ea386de55097e14dbb38e0462dd9d44d7c6c55e2a5937efe361800", "3b6e33d493a9c79b3387938d612ceab5a4a20e605cd0842aa149397ff8063b45d44f8ce95fa39df1e5e1fc5e51f00fa2dfcc38c9b1ef6596b9e746f5e48ac07048156ea6be1e1ca5d281c7bb11333d0f", 0x397, 0x3, "d3bc655e384df871894a5771758ff164f2cd8098ac193333046911421bc3f1a0cf5d0300000000000000a9001fa7efb0600cc93b5b84a000"}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0xfffffffffffffffc, 0xf, 0x9, 0xdf, r1, 0x5) write$auto(r1, 0x0, 0x41ec) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x80000001, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x3) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40)=0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000280)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\x00\x00\x00\x00\x04\x00\x00\x00*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xc3\xa2\x1a\xf1\xdf\x12\b?Q\xec*\b`\'\xfe\xcb\xe9\xc0\xf4\x119\xf6f\v\xf7\x13\xe6\xd8\xa2\xd3\xfd\xa7', 0xba) setsockopt$auto_SO_PROTOCOL(0xffffffffffffffff, 0x4, 0x26, &(0x7f0000000140)='%\x00', 0x7) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f00000003c0)={{0x4, 0x0, 0xee01, 0x18, 0x9, 0x21, 0x6}, 0xe, 0xc4, 0x1, 0x4, @inferred, @raw=0x4c000, 0x3, 0x0, 0x0, 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r2, 0x0, 0xb4d3) 2.707144486s ago: executing program 2 (id=127): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/exec\x00', 0x101000, 0x0) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000380)={{&(0x7f00000001c0)="a36d3fa58cc14c483eaeefbda25ed11e6584b0e06b6f7d2a0920bb3dac705aa384572b6a4be4e53907a7b258", 0x7fff, 0x0, 0x9, 0x0, 0x2, 0x9}, 0x2}, 0xfffffffd, 0x3, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) ppoll$auto(0x0, 0x7f, 0x0, &(0x7f00000001c0)={0x3}, 0x8) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfs\x00', 0x1, &(0x7f00000001c0)) write$auto_proc_pid_attr_operations_base(r0, &(0x7f0000000280)="e6eec9f1147ef5a4e8", 0x9) r1 = socket(0xa, 0x3, 0x2f) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40811}, 0x4000013) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000f80), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000fc0)={0x14, r3, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x44884) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6gre0\x00'}) sendmsg$auto_ILA_CMD_DEL(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r3, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x1) socket(0x10, 0x2, 0x0) 2.086695313s ago: executing program 1 (id=128): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) pread64$auto(r0, 0x0, 0x6, 0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa48c2, 0x4) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @random="c862a41180f6"}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @random="70b28a70c5dc"}, @HSR_A_IF2_AGE={0x8, 0x4, 0x3}, @HSR_A_IF2_SEQ={0x6, 0x7, 0xff}, @HSR_A_NODE_ADDR={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r1 = socket(0x28, 0x80000, 0x3) ppoll$auto(&(0x7f0000000000)={r1, 0x4, 0x5}, 0x7, 0x0, 0x0, 0x8) setsockopt$auto(r0, 0x9, 0x13, &(0x7f0000000300)='\x00@\x00n|\xaa\x1f\xc7\xe6\x8a\x9d\xc4\xffmqRm\xf1\x9b\x86\xc7\x91!\xf1,\xba\xc9\xe9\xd2\xbej\b\xe8L\xff\xec\xee\xec,{\x1bC9\xb4\xef=\x87S\x9d[i\x8b`\x9dN\b\vPN\x89\xd6Q:\xfb\xf9B#fk\n\x06\xcb\xf7\x9d$\xfc\xb7\x00\x8a\xd9\x9f]\x06\xd8\x19\xc3\"_\x96,\xd8\viM\x13\xbc\xb4pi\x8b\xce\xb5\x97\xbfj\xe3\'\xd8\x15Q1mZ\xe0\xa6\xd7,E\x91\xe2\xa6\xe0\xa4$\xb4\x8a|\x00\xe1\xcbn\x84\x17k,\x9d\x11\x12\x05\x00\x00\x00\x00\x00\x00\x00\x0e\xfb\xa8\xbfD\xa6Cq\xc0\x82g\xa5i\x13\x0e\x83V\x95\xe3E,t\x8e\xa1\xa5\xd9\f\x99\xaa\xe9\x9a\xeff$\x8b\xa48\x85:=\xe5\xf5A\xb8Fi<:\x8b\xe3\x7f\x03\xb2\x81\xa4\x81\r\x02\x82\xda\xf0\xeb\x96K\\`\x9f\xb9\xbe\xa3\xa7pL\xb4\xfc\x1a\xef&\xf3\xf0\xf1\xbfG)\x99\x05{\x8d\x93\x10\x81vFh\xf9\xed<\x15\x0f\x13\x10\xb3/\x1a\x85\xf8C\x96\x01\x95\x01!5\x86M\xfeM~AhO#d\xa4Vm0\xb1\xf9Y6&LYk\xeb\xf7\xbb\vd,\r\x96\x922dFy\xcc\x04', 0x9) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x801, 0x100) pipe$auto(&(0x7f0000000080)=0xffffffffffffffff) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D0c\x00', 0x20000, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r3, 0x4143, 0x0) read$auto_stat_fops_per_vm_kvm_main(r2, &(0x7f00000000c0)=""/211, 0xd3) sendfile$auto(0x6, 0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mq_open$auto(0x0, 0x0, 0x7d, &(0x7f0000000040)={0xfffffffffffffffd, 0x6, 0xffffffffffffffc0, 0x800000000000006}) r4 = eventfd$auto(0x7) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x1) read$auto_vhci_fops_hci_vhci(r4, &(0x7f0000000200)=""/36, 0x24) 1.876110837s ago: executing program 0 (id=129): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffd, 0x401bf, 0x7, 0x3c, 0x65f, 0x1ffde, 0x5, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x80000000009, 0x6, 0xdec3, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x185c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25030000000600070008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060006004000000006000600070000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/irq/11/chip_name\x00', 0xa000, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7) 1.695615187s ago: executing program 0 (id=130): socket(0x1, 0x2, 0x0) connect$auto(0x3, 0xfffffffffffffffe, 0x0) r0 = ioctl$auto_TUNDETACHFILTER(0xffffffffffffffff, 0x401054d6, &(0x7f0000000040)={0x7, &(0x7f0000000000)={0x5, 0x8, 0x2, @raw=0x17e80}}) ioctl$auto_SNDRV_CTL_IOCTL_POWER(r0, 0xc00455d0, &(0x7f0000000080)=0x1) 1.695434483s ago: executing program 3 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000100), r0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dmmidi2\x00', 0x8102, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x62001, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x27, 0x7881, 0x0, 0xeb1, r2, 0x8000) socket(0x29, 0x5, 0x0) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000002300)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002bbd701efddbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) read$auto(0x3, 0x0, 0xf34) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_smc_pnetid(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_SMC_PNETID_GET(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x5, 0x1, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200088c4}, 0x4000000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev3\x00', 0x169000, 0x0) ioctl$auto(r6, 0xc0445624, r5) close_range$auto(r3, r4, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240047f50000", @ANYRES16=r1, @ANYBLOB="010027bd7040f9dbdf250f00000008000300", @ANYRES32=r9, @ANYBLOB="0800310001000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x20044000) close_range$auto(r5, r6, 0x3) 1.6349568s ago: executing program 0 (id=132): socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) close_range$auto(0x2, 0xa, 0x0) (fail_nth: 1) 1.550008706s ago: executing program 3 (id=133): r0 = socket(0xf, 0x1, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) inotify_add_watch$auto(r0, &(0x7f0000000000)='./file0\x00', 0xfffffe00) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/net/rt_acct\x00', 0x51da01, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000400)=""/232, 0xe8) mmap$auto(0xffffffdfffffffff, 0x2020014, 0x1, 0x18, r0, 0x0) rseq$auto(0x0, 0x0, 0x3ff, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) mmap$auto(0x4, 0x410005, 0xdf, 0x9b7e, r0, 0x7ffd) r2 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @loopback}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(r2, 0x0, 0xfffffde9) recvfrom$auto(r0, 0x0, 0x6, 0xfffffffd, 0x0, 0xfffffffffffffffd) write$auto(0xffffffffffffffff, 0x0, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) mmap$auto(0x0, 0xaf, 0x3, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x2, 0x2) madvise$auto(0x0, 0xffffffff97fb20a5, 0x10002) r3 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon2\x00', 0x40080, 0x0) ioctl$auto_MON_IOCQ_URB_LEN(r3, 0x9201, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xb0141, 0x0) r4 = socket(0x1f, 0x800, 0xffffff01) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x68403, 0x0) ioctl$auto(r2, 0xc028562a, r2) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8440, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x6482, 0x0) signalfd$auto(r4, &(0x7f00000000c0)={0x4}, 0x0) 1.54382853s ago: executing program 2 (id=134): openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) (fail_nth: 2) 1.367508848s ago: executing program 0 (id=135): prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x65d2, 0xe97f, 0xdf, 0xeb0, 0x401, 0x5b3) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_meter(0x0, 0xffffffffffffffff) socket(0x15, 0x1, 0xfffffffc) sendto$auto(0x3, 0x0, 0x2000f, 0x0, 0x0, 0x1c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_CEC_G_MODE(0xffffffffffffffff, 0x80046108, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) setreuid$auto(0x2, 0x87) r0 = timerfd_create$auto(0x9, 0x0) futimesat$auto(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)={0x40, 0xffffffffffffffff}) connect$auto(0x3, 0x0, 0x54) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) socket(0xa, 0x3, 0x2c) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) write$auto(0xffffffffffffffff, 0x0, 0x2) ioctl$auto_PPPIOCSPASS(r1, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x1, 0xf1, 0xb0, @raw=0x68e8}}) 1.36715203s ago: executing program 2 (id=136): r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x111800, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x3, 0x1000, 0x1, 0x1, 0x8}, "654c6dbc7a4d30983899a7e1325b6a29ba1e184410ba9f74e82a3fa6c3ccf1bf"}) ioctl$auto_SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f00000002c0)={0x7fe3, 0x6, "b908674cfda2f7f351c66f681b0cf4a6f675fcee96065fdca6f219ea386de55097e14dbb38e0462dd9d44d7c6c55e2a5937efe361800", "3b6e33d493a9c79b3387938d612ceab5a4a20e605cd0842aa149397ff8063b45d44f8ce95fa39df1e5e1fc5e51f00fa2dfcc38c9b1ef6596b9e746f5e48ac07048156ea6be1e1ca5d281c7bb11333d0f", 0x397, 0x3, "d3bc655e384df871894a5771758ff164f2cd8098ac193333046911421bc3f1a0cf5d0300000000000000a9001fa7efb0600cc93b5b84a000"}) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) mmap$auto(0xfffffffffffffffc, 0xf, 0x9, 0xdf, r1, 0x5) write$auto(r1, 0x0, 0x41ec) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0xe0742, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) mmap$auto(0x80000001, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x3) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40)=0x2, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x40, 0x0) setsockopt$auto(r2, 0x1, 0x10, &(0x7f0000000280)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\x00\x00\x00\x00\x04\x00\x00\x00*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xc3\xa2\x1a\xf1\xdf\x12\b?Q\xec*\b`\'\xfe\xcb\xe9\xc0\xf4\x119\xf6f\v\xf7\x13\xe6\xd8\xa2\xd3\xfd\xa7', 0xba) setsockopt$auto_SO_PROTOCOL(0xffffffffffffffff, 0x4, 0x26, &(0x7f0000000140)='%\x00', 0x7) shmctl$auto_SHM_LOCK(0x1, 0xb, &(0x7f00000003c0)={{0x4, 0x0, 0xee01, 0x18, 0x9, 0x21, 0x6}, 0xe, 0xc4, 0x1, 0x4, @inferred, @raw=0x4c000, 0x3, 0x0, 0x0, 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) read$auto(r3, 0x0, 0xb4d3) 1.222790273s ago: executing program 3 (id=137): mmap$auto(0xfffffffffffffffb, 0x2, 0x100000021, 0x400009b75, 0xea8a, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffffffdffe00, &(0x7f0000000140)=';') r1 = openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$auto(0x3, 0xc0086202, r1) setsockopt$auto(0x3, 0x0, 0xc8, 0xfffffffffffffffc, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/irq/12/hwirq\x00', 0x2000, 0x0) read$auto(r2, 0x0, 0x20) syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x40010) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f00000005c0)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x4}, 0x3) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty26\x00', 0x40002, 0x300) 1.126177533s ago: executing program 1 (id=138): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffd, 0x401bf, 0x7, 0x3c, 0x65f, 0x1ffde, 0x5, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb2, 0x80000000009, 0x6, 0xdec3, 0xb, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x185c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x1fe, 0xd) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf25030000000600070008000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000060006004000000006000600070000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) socket(0x2, 0x801, 0x100) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/irq/11/chip_name\x00', 0xa000, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0xa, 0x2, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r1, @new_prog_fd=0x4, 0x4, @old_prog_fd=r0}, 0xa3) bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x4, 0x7, 0x9, 0x7f, @prog_cnt=0x4, 0x0, 0x0, 0xc, 0xb, 0x5}, 0x7) 639.511663ms ago: executing program 1 (id=139): move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x8, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000008000) setreuid$auto(0x40, 0xa) futimesat$auto(0xda, 0x0, 0x0) connect$auto(0x3, 0x0, 0x52) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1100af"], 0x1ac}, 0x1, 0x0, 0x0, 0x26004814}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r0 = epoll_create$auto(0x4) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) madvise$auto_MADV_WILLNEED(0x800, 0xec, 0x3) r1 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000100), r0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000880)=ANY=[@ANYBLOB="e0050000", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="6626e4f9a9a493672613821177c9c55f990332e10269abd575a9965a9e434ff28228d9"], 0x5e0}, 0x1, 0x0, 0x0, 0x8000}, 0x800) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x3ff, 0x0, 0x3, 0x5f, 0x0, 0x3}, 0x6f3) r3 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r3, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) setsockopt$auto_SO_OOBINLINE(r2, 0x3, 0xa, &(0x7f0000000080)='nlctrl\x00', 0x2) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 0s ago: executing program 0 (id=140): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop13/queue/wbt_lat_usec\x00', 0x206a1, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/softrepeat\x00', 0xc2481, 0x0) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, 0x0, 0x40081, 0x0) r1 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci4\x00', 0x20001, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.4/usb5/5-0:1.0/usb5-port1/power/pm_qos_no_power_off\x00', 0x20a42, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB], 0x14}}, 0x10040) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x211, 0xfffffffffffffffa, 0x80000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r4, 0x8955, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r2) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r4) shmctl$auto_IPC_INFO(0x6, 0x3, &(0x7f0000000440)={{0x0, 0xffffffffffffffff, 0xee00, 0x9, 0xc1e, 0x0, 0x7}, 0x7fff, 0xe9, 0x5, 0x100, @inferred=0xffffffffffffffff, @inferred, 0xfffc, 0x0, &(0x7f0000000240)="140ecc14221384adf3da1575e6f23f863c15d5b50c853fb945618b52aa938224086741359696e56e3d333a58808b2669e210d0b030a1f266e6be5685cf52e8b6997c35fc51d11183abdb3d74e4d3c0c70c780399eb6588d3356a69d7cfffe6bac6927ce0ea22f0ec0b5cb18de50e6518ae20afd6765fea1b41e9b286bc", &(0x7f0000000340)="f4a331fad52ae43ebc3440ce9d2d9e058714df2d86e3b81944195601692f2018cea2253265e4d1923f472041e568861fffbb64e4b58b875ae19017b6acbd5ad5a3210f2d2590b4c79f7aad6a382c5860e2c744cc1ee46cd16cb3e8870659f609b781e74ee1fac93bfdfec606bfcca6bc84d80f6641970b78ed344ed1233c6e84cd36b1e6efae9259a0b86029ad77d4f0d4074003e26a7bcc1a01faefeb56c74da48891cfb4b46750b2e1f8b279ebd27131ff9c7c7d1f835f2dd82c5cc202fff358a3529010619a53f732922ab38e59920f646e2fcd723fbec7e2d96e56ac4cd4ffb2b482394aa1c8"}) ioctl$auto_XFS_IOC_FREE_EOFBLOCKS(r1, 0x8080583a, &(0x7f00000004c0)={0x205, 0x1b59, 0x0, r5, 0x9, 0x0, 0x4}) r6 = socket(0x2, 0x5, 0x0) mmap$auto(0xfffffffffffffffd, 0x20009, 0xe2, 0xeb1, 0x405, 0x7) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x3, 0x0, 0x4) io_uring_register$auto_IORING_REGISTER_ZCRX_IFQ(r6, 0x20, &(0x7f0000000180)="0c8702781fde14ff273ef7b57147584ef09e97942ac9657e4c22d669a638acce7bfcd9af843661e2af2215ebed431e5ae9eb9b5db04aaf72d7278110eed8dcab67c2a3dfd975b3cad762498dcb4901341e5ea30dca44db96440ed10c198be3455a4b1884d54d4572a498dca27b09e480b9614d5344738b2bd7b29e2b56b7d9520804b6a15d20988cabb4f8c32c8ecca892758c486265ef04444d3619a757fa6d49add83ed8406dfe65d19ca01567", 0xd) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f00000002c0)="4f1be9d411b1a47c3207e121dd49cc897ebca3ca93ffd37fe8cbbf71b6564641b3d08eec248c7d300f4bbe487b2ae56aebe99b1162fc206138afdf72de5abbf5d8628839b5c65e7b36", 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0x8000b}, 0xfff}, 0x1, 0x311) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r7, 0x4, r7) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 97.128112][ T24] cfg80211: failed to load regulatory.db [ 98.797327][ T5818] cgroup: Unknown subsys name 'net' [ 98.911831][ T5818] cgroup: Unknown subsys name 'cpuset' [ 98.922797][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 100.719075][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 103.020362][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 103.030212][ T5834] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 103.038191][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 103.046888][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 103.055438][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 103.063642][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 103.077169][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 103.085162][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 103.092913][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 103.100333][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 103.102424][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 103.115988][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 103.122471][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 103.124449][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 103.131723][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 103.155319][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 103.163919][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 103.167240][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 103.172334][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.179653][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 103.725428][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 103.948443][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 104.000435][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 104.011782][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 104.071962][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.079607][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.088369][ T5842] bridge_slave_0: entered allmulticast mode [ 104.095862][ T5842] bridge_slave_0: entered promiscuous mode [ 104.105722][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.112987][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.120318][ T5842] bridge_slave_1: entered allmulticast mode [ 104.128100][ T5842] bridge_slave_1: entered promiscuous mode [ 104.276048][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.283878][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.291278][ T5836] bridge_slave_0: entered allmulticast mode [ 104.300110][ T5836] bridge_slave_0: entered promiscuous mode [ 104.311380][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.336008][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.343445][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.350818][ T5836] bridge_slave_1: entered allmulticast mode [ 104.358957][ T5836] bridge_slave_1: entered promiscuous mode [ 104.368630][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.447578][ T5842] team0: Port device team_slave_0 added [ 104.513537][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.525726][ T5842] team0: Port device team_slave_1 added [ 104.532410][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.540005][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.547517][ T5835] bridge_slave_0: entered allmulticast mode [ 104.554890][ T5835] bridge_slave_0: entered promiscuous mode [ 104.563624][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.571010][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.578618][ T5832] bridge_slave_0: entered allmulticast mode [ 104.585954][ T5832] bridge_slave_0: entered promiscuous mode [ 104.596098][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.635630][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.643125][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.650607][ T5835] bridge_slave_1: entered allmulticast mode [ 104.658514][ T5835] bridge_slave_1: entered promiscuous mode [ 104.681228][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.690248][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.698339][ T5832] bridge_slave_1: entered allmulticast mode [ 104.705882][ T5832] bridge_slave_1: entered promiscuous mode [ 104.730906][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.738317][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.764623][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.824172][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.831283][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.857830][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.872183][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.885480][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.911149][ T5836] team0: Port device team_slave_0 added [ 104.941105][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.954851][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.970326][ T5836] team0: Port device team_slave_1 added [ 105.039761][ T5835] team0: Port device team_slave_0 added [ 105.047132][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.054207][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.080941][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.122095][ T5835] team0: Port device team_slave_1 added [ 105.128921][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.135902][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.163005][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.177621][ T5832] team0: Port device team_slave_0 added [ 105.208033][ T5140] Bluetooth: hci0: command tx timeout [ 105.208041][ T5841] Bluetooth: hci2: command tx timeout [ 105.219088][ T55] Bluetooth: hci1: command tx timeout [ 105.240318][ T5832] team0: Port device team_slave_1 added [ 105.269028][ T5842] hsr_slave_0: entered promiscuous mode [ 105.275610][ T5842] hsr_slave_1: entered promiscuous mode [ 105.286443][ T5140] Bluetooth: hci3: command tx timeout [ 105.302842][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.310431][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.337163][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.365228][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.372417][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.398430][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.410777][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.418164][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.445071][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.479481][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.489102][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.516012][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.578082][ T5836] hsr_slave_0: entered promiscuous mode [ 105.584660][ T5836] hsr_slave_1: entered promiscuous mode [ 105.592321][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.600174][ T5836] Cannot create hsr debugfs directory [ 105.693356][ T5835] hsr_slave_0: entered promiscuous mode [ 105.700345][ T5835] hsr_slave_1: entered promiscuous mode [ 105.707946][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.715576][ T5835] Cannot create hsr debugfs directory [ 105.750619][ T5832] hsr_slave_0: entered promiscuous mode [ 105.757298][ T5832] hsr_slave_1: entered promiscuous mode [ 105.763486][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.771272][ T5832] Cannot create hsr debugfs directory [ 106.251488][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.267722][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.282749][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.294607][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.380782][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.392539][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.404693][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.418282][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.510774][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.525546][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.538499][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.555425][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.673963][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 106.693464][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 106.715228][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 106.730217][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 106.854272][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.880459][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.925790][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.961114][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.984754][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.997943][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.005281][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.035414][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.042608][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.056095][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.063264][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.081619][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.112988][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.141876][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.149201][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.159700][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.166990][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.202183][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.209402][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.262585][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.296997][ T5140] Bluetooth: hci0: command tx timeout [ 107.302486][ T5140] Bluetooth: hci1: command tx timeout [ 107.308242][ T55] Bluetooth: hci2: command tx timeout [ 107.341142][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.348354][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.362511][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.369701][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.377732][ T5140] Bluetooth: hci3: command tx timeout [ 107.414050][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.062344][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.112007][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.124123][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.152277][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.245117][ T5842] veth0_vlan: entered promiscuous mode [ 108.303382][ T5842] veth1_vlan: entered promiscuous mode [ 108.313272][ T5836] veth0_vlan: entered promiscuous mode [ 108.331932][ T5832] veth0_vlan: entered promiscuous mode [ 108.368437][ T5835] veth0_vlan: entered promiscuous mode [ 108.385695][ T5832] veth1_vlan: entered promiscuous mode [ 108.397725][ T5836] veth1_vlan: entered promiscuous mode [ 108.420184][ T5835] veth1_vlan: entered promiscuous mode [ 108.462921][ T5842] veth0_macvtap: entered promiscuous mode [ 108.482663][ T5842] veth1_macvtap: entered promiscuous mode [ 108.524339][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.537487][ T5832] veth0_macvtap: entered promiscuous mode [ 108.551006][ T5832] veth1_macvtap: entered promiscuous mode [ 108.562246][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.579250][ T5835] veth0_macvtap: entered promiscuous mode [ 108.601938][ T5835] veth1_macvtap: entered promiscuous mode [ 108.620364][ T5836] veth0_macvtap: entered promiscuous mode [ 108.630623][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.640252][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.650105][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.660406][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.698160][ T5836] veth1_macvtap: entered promiscuous mode [ 108.707256][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.718154][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.733473][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.742526][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.753375][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.763823][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.774404][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.785651][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.814297][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.824971][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.837071][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.856915][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.868572][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.879860][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.890704][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.902364][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.939539][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.950633][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.960205][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.969783][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.991953][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.002980][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.014100][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.024687][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.035554][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.046078][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.058826][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.078465][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.087826][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.100603][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.109464][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.153159][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.164050][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.175461][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.186379][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.196459][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.209169][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.221138][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.248640][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.257934][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.266790][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.275550][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.294747][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.303225][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.368242][ T5841] Bluetooth: hci2: command tx timeout [ 109.373751][ T55] Bluetooth: hci0: command tx timeout [ 109.380882][ T5140] Bluetooth: hci1: command tx timeout [ 109.410076][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.420582][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.447426][ T5140] Bluetooth: hci3: command tx timeout [ 109.522367][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.543869][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.578882][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.590892][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.616824][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.658671][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.673186][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.753100][ T5115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.809968][ T5115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.832271][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.866874][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.921071][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.956762][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.391311][ T5897] Invalid ELF header magic: != ELF [ 110.539778][ T5900] svc: failed to register nfsdv3 RPC service (errno 111). [ 110.565779][ T5900] svc: failed to register nfsaclv3 RPC service (errno 111). [ 111.133661][ T5909] afs: Bad value for 'source' [ 111.198404][ T5914] Zero length message leads to an empty skb [ 111.286124][ T5897] could not allocate digest TFM handle [ 111.309586][ T5905] could not allocate digest TFM handle [ 111.457284][ T5140] Bluetooth: hci1: command tx timeout [ 111.462778][ T5140] Bluetooth: hci2: command tx timeout [ 111.468371][ T5841] Bluetooth: hci0: command tx timeout [ 111.526987][ T5841] Bluetooth: hci3: command tx timeout [ 111.635836][ T5903] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 111.659553][ T5903] tc_dump_action: action bad kind [ 111.676175][ T5903] netlink: 330 bytes leftover after parsing attributes in process `syz.2.3'. [ 112.114066][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7'. [ 114.089516][ T5959] Invalid ELF header magic: != ELF [ 114.693886][ T5968] afs: Bad value for 'source' [ 114.829936][ T5959] could not allocate digest TFM handle [ 114.871284][ T5960] could not allocate digest TFM handle [ 117.584259][ T6011] bridge0: port 3(team0) entered blocking state [ 117.590829][ T6011] bridge0: port 3(team0) entered disabled state [ 117.597806][ T6011] team0: entered allmulticast mode [ 117.602994][ T6011] team_slave_0: entered allmulticast mode [ 117.626513][ T6011] team_slave_1: entered allmulticast mode [ 117.649736][ T6011] team0: entered promiscuous mode [ 117.654931][ T6011] team_slave_0: entered promiscuous mode [ 117.661474][ T6011] team_slave_1: entered promiscuous mode [ 117.668720][ T6011] bridge0: port 3(team0) entered blocking state [ 117.675325][ T6011] bridge0: port 3(team0) entered forwarding state [ 119.294108][ T6024] FAULT_INJECTION: forcing a failure. [ 119.294108][ T6024] name failslab, interval 1, probability 0, space 0, times 0 [ 119.348618][ T6024] CPU: 0 UID: 0 PID: 6024 Comm: syz.1.31 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 119.348663][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 119.348681][ T6024] Call Trace: [ 119.348691][ T6024] [ 119.348707][ T6024] dump_stack_lvl+0x16c/0x1f0 [ 119.348777][ T6024] should_fail_ex+0x512/0x640 [ 119.348825][ T6024] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 119.348865][ T6024] should_failslab+0xc2/0x120 [ 119.348905][ T6024] __kmalloc_cache_node_noprof+0x6d/0x420 [ 119.348940][ T6024] ? __get_vm_area_node+0x101/0x300 [ 119.348996][ T6024] __get_vm_area_node+0x101/0x300 [ 119.349052][ T6024] __vmalloc_node_range_noprof+0x277/0x1540 [ 119.349103][ T6024] ? n_tty_open+0x1a/0x170 [ 119.349159][ T6024] ? n_tty_open+0x1a/0x170 [ 119.349205][ T6024] ? __ldsem_down_write_nested+0x10e/0x850 [ 119.349254][ T6024] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 119.349320][ T6024] ? n_tty_open+0x1a/0x170 [ 119.349365][ T6024] vzalloc_noprof+0x6b/0x90 [ 119.349415][ T6024] ? n_tty_open+0x1a/0x170 [ 119.349470][ T6024] ? __pfx_n_tty_open+0x10/0x10 [ 119.349513][ T6024] n_tty_open+0x1a/0x170 [ 119.349556][ T6024] ? __pfx_n_tty_open+0x10/0x10 [ 119.349598][ T6024] tty_ldisc_open+0x9c/0x120 [ 119.349636][ T6024] tty_ldisc_setup+0x40/0x100 [ 119.349671][ T6024] tty_init_dev.part.0+0x1ec/0x500 [ 119.349717][ T6024] tty_open+0xa50/0xf90 [ 119.349766][ T6024] ? __pfx_tty_open+0x10/0x10 [ 119.349807][ T6024] ? chrdev_open+0x10b/0x6a0 [ 119.349847][ T6024] ? __pfx_tty_open+0x10/0x10 [ 119.349887][ T6024] chrdev_open+0x231/0x6a0 [ 119.349920][ T6024] ? __pfx_apparmor_file_open+0x10/0x10 [ 119.349962][ T6024] ? __pfx_chrdev_open+0x10/0x10 [ 119.349999][ T6024] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 119.350054][ T6024] do_dentry_open+0x741/0x1c10 [ 119.350088][ T6024] ? __pfx_chrdev_open+0x10/0x10 [ 119.350132][ T6024] vfs_open+0x82/0x3f0 [ 119.350179][ T6024] path_openat+0x1e5e/0x2d40 [ 119.350227][ T6024] ? __pfx_path_openat+0x10/0x10 [ 119.350268][ T6024] do_filp_open+0x20b/0x470 [ 119.350300][ T6024] ? __pfx_do_filp_open+0x10/0x10 [ 119.350364][ T6024] ? alloc_fd+0x471/0x7d0 [ 119.350427][ T6024] do_sys_openat2+0x11b/0x1d0 [ 119.350477][ T6024] ? __pfx_do_sys_openat2+0x10/0x10 [ 119.350537][ T6024] __x64_sys_openat+0x174/0x210 [ 119.350582][ T6024] ? __pfx___x64_sys_openat+0x10/0x10 [ 119.350629][ T6024] ? rcu_is_watching+0x12/0xc0 [ 119.350672][ T6024] do_syscall_64+0xcd/0x230 [ 119.350723][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.350757][ T6024] RIP: 0033:0x7f1edf58e969 [ 119.350790][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.350832][ T6024] RSP: 002b:00007f1ee03ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 119.350869][ T6024] RAX: ffffffffffffffda RBX: 00007f1edf7b5fa0 RCX: 00007f1edf58e969 [ 119.350890][ T6024] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 119.350910][ T6024] RBP: 00007f1edf610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 119.350930][ T6024] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 119.350949][ T6024] R13: 0000000000000000 R14: 00007f1edf7b5fa0 R15: 00007ffdc6a079b8 [ 119.350991][ T6024] [ 119.939215][ T6024] syz.1.31: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 120.079592][ T6024] CPU: 1 UID: 0 PID: 6024 Comm: syz.1.31 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 120.079641][ T6024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 120.079660][ T6024] Call Trace: [ 120.079677][ T6024] [ 120.079689][ T6024] dump_stack_lvl+0x16c/0x1f0 [ 120.079742][ T6024] warn_alloc+0x248/0x3a0 [ 120.079781][ T6024] ? __pfx_warn_alloc+0x10/0x10 [ 120.079812][ T6024] ? kasan_quarantine_reduce+0x1b9/0x1e0 [ 120.079861][ T6024] ? __kasan_kmalloc+0x8a/0xb0 [ 120.079895][ T6024] ? __get_vm_area_node+0x1e5/0x300 [ 120.079952][ T6024] __vmalloc_node_range_noprof+0xd31/0x1540 [ 120.080020][ T6024] ? n_tty_open+0x1a/0x170 [ 120.080068][ T6024] ? __ldsem_down_write_nested+0x10e/0x850 [ 120.080117][ T6024] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 120.080183][ T6024] ? n_tty_open+0x1a/0x170 [ 120.080228][ T6024] vzalloc_noprof+0x6b/0x90 [ 120.080277][ T6024] ? n_tty_open+0x1a/0x170 [ 120.080317][ T6024] ? __pfx_n_tty_open+0x10/0x10 [ 120.080358][ T6024] n_tty_open+0x1a/0x170 [ 120.080400][ T6024] ? __pfx_n_tty_open+0x10/0x10 [ 120.080443][ T6024] tty_ldisc_open+0x9c/0x120 [ 120.080476][ T6024] tty_ldisc_setup+0x40/0x100 [ 120.080512][ T6024] tty_init_dev.part.0+0x1ec/0x500 [ 120.080557][ T6024] tty_open+0xa50/0xf90 [ 120.080605][ T6024] ? __pfx_tty_open+0x10/0x10 [ 120.080646][ T6024] ? chrdev_open+0x10b/0x6a0 [ 120.080697][ T6024] ? __pfx_tty_open+0x10/0x10 [ 120.080737][ T6024] chrdev_open+0x231/0x6a0 [ 120.080770][ T6024] ? __pfx_apparmor_file_open+0x10/0x10 [ 120.080812][ T6024] ? __pfx_chrdev_open+0x10/0x10 [ 120.080850][ T6024] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 120.080897][ T6024] do_dentry_open+0x741/0x1c10 [ 120.080926][ T6024] ? __pfx_chrdev_open+0x10/0x10 [ 120.080960][ T6024] vfs_open+0x82/0x3f0 [ 120.080998][ T6024] path_openat+0x1e5e/0x2d40 [ 120.081037][ T6024] ? __pfx_path_openat+0x10/0x10 [ 120.081071][ T6024] do_filp_open+0x20b/0x470 [ 120.081097][ T6024] ? __pfx_do_filp_open+0x10/0x10 [ 120.081147][ T6024] ? alloc_fd+0x471/0x7d0 [ 120.081197][ T6024] do_sys_openat2+0x11b/0x1d0 [ 120.081232][ T6024] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.081280][ T6024] __x64_sys_openat+0x174/0x210 [ 120.081317][ T6024] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.081355][ T6024] ? rcu_is_watching+0x12/0xc0 [ 120.081390][ T6024] do_syscall_64+0xcd/0x230 [ 120.081432][ T6024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.081459][ T6024] RIP: 0033:0x7f1edf58e969 [ 120.081481][ T6024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 120.081506][ T6024] RSP: 002b:00007f1ee03ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.081532][ T6024] RAX: ffffffffffffffda RBX: 00007f1edf7b5fa0 RCX: 00007f1edf58e969 [ 120.081548][ T6024] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 120.081565][ T6024] RBP: 00007f1edf610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 120.081580][ T6024] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 120.081596][ T6024] R13: 0000000000000000 R14: 00007f1edf7b5fa0 R15: 00007ffdc6a079b8 [ 120.081628][ T6024] [ 120.081645][ T6024] Mem-Info: [ 120.450499][ T6024] active_anon:69680 inactive_anon:0 isolated_anon:0 [ 120.450499][ T6024] active_file:12276 inactive_file:40532 isolated_file:0 [ 120.450499][ T6024] unevictable:811 dirty:769 writeback:0 [ 120.450499][ T6024] slab_reclaimable:10011 slab_unreclaimable:93651 [ 120.450499][ T6024] mapped:45533 shmem:63668 pagetables:984 [ 120.450499][ T6024] sec_pagetables:0 bounce:0 [ 120.450499][ T6024] kernel_misc_reclaimable:0 [ 120.450499][ T6024] free:1286580 free_pcp:395 free_cma:0 [ 120.632843][ T6024] Node 0 active_anon:267220kB inactive_anon:0kB active_file:50004kB inactive_file:161928kB unevictable:1632kB isolated(anon):0kB isolated(file):0kB mapped:183832kB dirty:3072kB writeback:0kB shmem:241436kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10572kB pagetables:3836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.856375][ T6024] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1612kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 120.946449][ T6024] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 121.028937][ T6024] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 121.066577][ T6024] Node 0 DMA32 free:1234204kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:248676kB inactive_anon:0kB active_file:52680kB inactive_file:160220kB unevictable:1536kB writepending:1568kB present:3129332kB managed:2544176kB mlocked:0kB bounce:0kB free_pcp:10704kB local_pcp:1628kB free_cma:0kB [ 121.182000][ T6024] lowmem_reserve[]: 0 0 1 1 1 [ 121.276302][ T6024] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 121.416032][ T6024] lowmem_reserve[]: 0 0 0 0 0 [ 121.461492][ T6024] Node 1 Normal free:3910368kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:284kB local_pcp:32kB free_cma:0kB [ 121.540497][ T6024] lowmem_reserve[]: 0 0 0 0 0 [ 121.579212][ T6024] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 121.675538][ T6024] Node 0 DMA32: 710*4kB (UE) 678*8kB (UE) 320*16kB (UM) 10*32kB (UME) 26*64kB (UME) 52*128kB (ME) 26*256kB (M) 13*512kB (UME) 3*1024kB (M) 2*2048kB (UE) 289*4096kB (M) = 1226248kB [ 121.740983][ T6024] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 121.793759][ T6024] Node 1 Normal: 262*4kB (UE) 63*8kB (UE) 43*16kB (UE) 229*32kB (UE) 114*64kB (UME) 40*128kB (UE) 15*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 3*2048kB (UE) 945*4096kB (M) = 3910368kB [ 121.867722][ T6024] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.905243][ T6024] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 121.951919][ T6024] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 121.992541][ T6024] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.032299][ T6024] 115263 total pagecache pages [ 122.061772][ T6024] 33 pages in swap cache [ 122.075891][ T6024] Free swap = 118744kB [ 122.110802][ T6024] Total swap = 124996kB [ 122.125913][ T6024] 2097051 pages RAM [ 122.152707][ T6024] 0 pages HighMem/MovableOnly [ 122.183239][ T6024] 428901 pages reserved [ 122.197467][ T6024] 0 pages cma reserved [ 122.225982][ T6024] tty tty26: ldisc open failed (-12), clearing slot 25 [ 123.955542][ T6053] bridge0: port 3(team0) entered blocking state [ 123.962301][ T6053] bridge0: port 3(team0) entered disabled state [ 123.969032][ T6053] team0: entered allmulticast mode [ 123.979083][ T6053] team_slave_0: entered allmulticast mode [ 123.986056][ T6053] team_slave_1: entered allmulticast mode [ 124.014534][ T6053] team0: entered promiscuous mode [ 124.040489][ T6053] team_slave_0: entered promiscuous mode [ 124.055232][ T6053] team_slave_1: entered promiscuous mode [ 124.066170][ T6053] bridge0: port 3(team0) entered blocking state [ 124.072738][ T6053] bridge0: port 3(team0) entered forwarding state [ 124.806733][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 125.557495][ T6074] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 126.985579][ T6097] device-mapper: ioctl: only supply one of name or uuid, cmd(11) [ 127.006995][ T6099] syz.1.52 uses obsolete (PF_INET,SOCK_PACKET) [ 127.177009][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.318408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 127.865591][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 127.906718][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 131.100901][ T6144] program syz.2.63 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 132.696952][ T6170] FAULT_INJECTION: forcing a failure. [ 132.696952][ T6170] name failslab, interval 1, probability 0, space 0, times 0 [ 132.741122][ T6170] CPU: 1 UID: 0 PID: 6170 Comm: syz.3.71 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 132.741170][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 132.741189][ T6170] Call Trace: [ 132.741199][ T6170] [ 132.741225][ T6170] dump_stack_lvl+0x16c/0x1f0 [ 132.741279][ T6170] should_fail_ex+0x512/0x640 [ 132.741325][ T6170] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 132.741368][ T6170] should_failslab+0xc2/0x120 [ 132.741408][ T6170] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 132.741443][ T6170] ? __pfx___might_resched+0x10/0x10 [ 132.741477][ T6170] ? alloc_vmap_area+0x613/0x2970 [ 132.741531][ T6170] alloc_vmap_area+0x613/0x2970 [ 132.741597][ T6170] ? __pfx_alloc_vmap_area+0x10/0x10 [ 132.741657][ T6170] __get_vm_area_node+0x1a7/0x300 [ 132.741716][ T6170] __vmalloc_node_range_noprof+0x277/0x1540 [ 132.741769][ T6170] ? n_tty_open+0x1a/0x170 [ 132.741827][ T6170] ? n_tty_open+0x1a/0x170 [ 132.741873][ T6170] ? __ldsem_down_write_nested+0x10e/0x850 [ 132.741922][ T6170] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.741987][ T6170] ? n_tty_open+0x1a/0x170 [ 132.742032][ T6170] vzalloc_noprof+0x6b/0x90 [ 132.742083][ T6170] ? n_tty_open+0x1a/0x170 [ 132.742124][ T6170] ? __pfx_n_tty_open+0x10/0x10 [ 132.742166][ T6170] n_tty_open+0x1a/0x170 [ 132.742216][ T6170] ? __pfx_n_tty_open+0x10/0x10 [ 132.742261][ T6170] tty_ldisc_open+0x9c/0x120 [ 132.742295][ T6170] tty_ldisc_setup+0x40/0x100 [ 132.742332][ T6170] tty_init_dev.part.0+0x1ec/0x500 [ 132.742378][ T6170] tty_open+0xa50/0xf90 [ 132.742428][ T6170] ? __pfx_tty_open+0x10/0x10 [ 132.742469][ T6170] ? chrdev_open+0x10b/0x6a0 [ 132.742509][ T6170] ? __pfx_tty_open+0x10/0x10 [ 132.742549][ T6170] chrdev_open+0x231/0x6a0 [ 132.742582][ T6170] ? __pfx_apparmor_file_open+0x10/0x10 [ 132.742625][ T6170] ? __pfx_chrdev_open+0x10/0x10 [ 132.742663][ T6170] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 132.742720][ T6170] do_dentry_open+0x741/0x1c10 [ 132.742752][ T6170] ? __pfx_chrdev_open+0x10/0x10 [ 132.742796][ T6170] vfs_open+0x82/0x3f0 [ 132.742843][ T6170] path_openat+0x1e5e/0x2d40 [ 132.742891][ T6170] ? __pfx_path_openat+0x10/0x10 [ 132.742934][ T6170] do_filp_open+0x20b/0x470 [ 132.742966][ T6170] ? __pfx_do_filp_open+0x10/0x10 [ 132.743031][ T6170] ? alloc_fd+0x471/0x7d0 [ 132.743091][ T6170] do_sys_openat2+0x11b/0x1d0 [ 132.743132][ T6170] ? __pfx_do_sys_openat2+0x10/0x10 [ 132.743193][ T6170] __x64_sys_openat+0x174/0x210 [ 132.743243][ T6170] ? __pfx___x64_sys_openat+0x10/0x10 [ 132.743290][ T6170] ? rcu_is_watching+0x12/0xc0 [ 132.743330][ T6170] do_syscall_64+0xcd/0x230 [ 132.743380][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.743412][ T6170] RIP: 0033:0x7fe875f8e969 [ 132.743439][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.743471][ T6170] RSP: 002b:00007fe876e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 132.743501][ T6170] RAX: ffffffffffffffda RBX: 00007fe8761b5fa0 RCX: 00007fe875f8e969 [ 132.743522][ T6170] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 132.743542][ T6170] RBP: 00007fe876010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 132.743562][ T6170] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 132.743581][ T6170] R13: 0000000000000000 R14: 00007fe8761b5fa0 R15: 00007fffebc3c328 [ 132.743625][ T6170] [ 132.743667][ T6170] syz.3.71: vmalloc error: size 9128, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 133.294244][ T6170] CPU: 1 UID: 0 PID: 6170 Comm: syz.3.71 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 133.294302][ T6170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 133.294321][ T6170] Call Trace: [ 133.294331][ T6170] [ 133.294344][ T6170] dump_stack_lvl+0x16c/0x1f0 [ 133.294396][ T6170] warn_alloc+0x248/0x3a0 [ 133.294436][ T6170] ? __pfx_warn_alloc+0x10/0x10 [ 133.294475][ T6170] ? kfree+0x2b6/0x4d0 [ 133.294513][ T6170] ? __get_vm_area_node+0x1e5/0x300 [ 133.294571][ T6170] __vmalloc_node_range_noprof+0xd31/0x1540 [ 133.294640][ T6170] ? n_tty_open+0x1a/0x170 [ 133.294690][ T6170] ? __ldsem_down_write_nested+0x10e/0x850 [ 133.294736][ T6170] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 133.294803][ T6170] ? n_tty_open+0x1a/0x170 [ 133.294848][ T6170] vzalloc_noprof+0x6b/0x90 [ 133.294898][ T6170] ? n_tty_open+0x1a/0x170 [ 133.294940][ T6170] ? __pfx_n_tty_open+0x10/0x10 [ 133.294981][ T6170] n_tty_open+0x1a/0x170 [ 133.295021][ T6170] ? __pfx_n_tty_open+0x10/0x10 [ 133.295062][ T6170] tty_ldisc_open+0x9c/0x120 [ 133.295094][ T6170] tty_ldisc_setup+0x40/0x100 [ 133.295130][ T6170] tty_init_dev.part.0+0x1ec/0x500 [ 133.295176][ T6170] tty_open+0xa50/0xf90 [ 133.295223][ T6170] ? __pfx_tty_open+0x10/0x10 [ 133.295263][ T6170] ? chrdev_open+0x10b/0x6a0 [ 133.295311][ T6170] ? __pfx_tty_open+0x10/0x10 [ 133.295351][ T6170] chrdev_open+0x231/0x6a0 [ 133.295384][ T6170] ? __pfx_apparmor_file_open+0x10/0x10 [ 133.295427][ T6170] ? __pfx_chrdev_open+0x10/0x10 [ 133.295465][ T6170] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 133.295523][ T6170] do_dentry_open+0x741/0x1c10 [ 133.295558][ T6170] ? __pfx_chrdev_open+0x10/0x10 [ 133.295602][ T6170] vfs_open+0x82/0x3f0 [ 133.295649][ T6170] path_openat+0x1e5e/0x2d40 [ 133.295697][ T6170] ? __pfx_path_openat+0x10/0x10 [ 133.295740][ T6170] do_filp_open+0x20b/0x470 [ 133.295772][ T6170] ? __pfx_do_filp_open+0x10/0x10 [ 133.295835][ T6170] ? alloc_fd+0x471/0x7d0 [ 133.295898][ T6170] do_sys_openat2+0x11b/0x1d0 [ 133.295940][ T6170] ? __pfx_do_sys_openat2+0x10/0x10 [ 133.295999][ T6170] __x64_sys_openat+0x174/0x210 [ 133.296044][ T6170] ? __pfx___x64_sys_openat+0x10/0x10 [ 133.296091][ T6170] ? rcu_is_watching+0x12/0xc0 [ 133.296134][ T6170] do_syscall_64+0xcd/0x230 [ 133.296182][ T6170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.296219][ T6170] RIP: 0033:0x7fe875f8e969 [ 133.296243][ T6170] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.296278][ T6170] RSP: 002b:00007fe876e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 133.296308][ T6170] RAX: ffffffffffffffda RBX: 00007fe8761b5fa0 RCX: 00007fe875f8e969 [ 133.296328][ T6170] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 133.296348][ T6170] RBP: 00007fe876010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 133.296367][ T6170] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 133.296386][ T6170] R13: 0000000000000000 R14: 00007fe8761b5fa0 R15: 00007fffebc3c328 [ 133.296425][ T6170] [ 133.658668][ T6170] Mem-Info: [ 133.661862][ T6170] active_anon:36865 inactive_anon:0 isolated_anon:0 [ 133.661862][ T6170] active_file:15390 inactive_file:40505 isolated_file:0 [ 133.661862][ T6170] unevictable:768 dirty:368 writeback:0 [ 133.661862][ T6170] slab_reclaimable:10190 slab_unreclaimable:94033 [ 133.661862][ T6170] mapped:35758 shmem:32407 pagetables:893 [ 133.661862][ T6170] sec_pagetables:0 bounce:0 [ 133.661862][ T6170] kernel_misc_reclaimable:0 [ 133.661862][ T6170] free:1312491 free_pcp:818 free_cma:0 [ 134.006420][ T6170] Node 0 active_anon:161064kB inactive_anon:0kB active_file:61560kB inactive_file:161820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:152008kB dirty:1468kB writeback:0kB shmem:141576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10552kB pagetables:3596kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.113623][ T6170] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 134.163635][ T6185] program syz.0.73 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 134.186765][ T6170] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 134.284590][ T6170] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 134.326929][ T6170] Node 0 DMA32 free:1320788kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:153228kB inactive_anon:0kB active_file:61560kB inactive_file:160000kB unevictable:1536kB writepending:368kB present:3129332kB managed:2544176kB mlocked:0kB bounce:0kB free_pcp:2644kB local_pcp:0kB free_cma:0kB [ 134.472507][ T6170] lowmem_reserve[]: 0 0 1 1 1 [ 134.501869][ T6170] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 134.676264][ T6170] lowmem_reserve[]: 0 0 0 0 0 [ 134.703314][ T6170] Node 1 Normal free:3910444kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:384kB local_pcp:384kB free_cma:0kB [ 134.817142][ T6170] lowmem_reserve[]: 0 0 0 0 0 [ 134.822005][ T6170] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 134.916327][ T6170] Node 0 DMA32: 929*4kB (UME) 1317*8kB (UME) 1298*16kB (UME) 630*32kB (UM) 312*64kB (UME) 275*128kB (UME) 99*256kB (UM) 29*512kB (UME) 8*1024kB (UM) 3*2048kB (UME) 282*4096kB (M) = 1319948kB [ 135.016311][ T6170] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 135.096357][ T6170] Node 1 Normal: 263*4kB (UME) 64*8kB (UME) 43*16kB (UME) 229*32kB (UME) 113*64kB (UME) 39*128kB (UME) 13*256kB (UME) 7*512kB (UME) 3*1024kB (UM) 4*2048kB (UE) 945*4096kB (M) = 3910700kB [ 135.166459][ T6170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.206405][ T6170] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.236520][ T6170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.270427][ T6170] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 135.282078][ T6170] 88008 total pagecache pages [ 135.290897][ T6170] 8 pages in swap cache [ 135.295303][ T6170] Free swap = 124892kB [ 135.302386][ T6170] Total swap = 124996kB [ 135.309279][ T6170] 2097051 pages RAM [ 135.313281][ T6170] 0 pages HighMem/MovableOnly [ 135.319726][ T6170] 428901 pages reserved [ 135.324164][ T6170] 0 pages cma reserved [ 135.330994][ T6170] tty tty26: ldisc open failed (-12), clearing slot 25 [ 136.358266][ T6219] FAULT_INJECTION: forcing a failure. [ 136.358266][ T6219] name failslab, interval 1, probability 0, space 0, times 0 [ 136.406982][ T6219] CPU: 0 UID: 0 PID: 6219 Comm: syz.1.82 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 136.407030][ T6219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 136.407049][ T6219] Call Trace: [ 136.407059][ T6219] [ 136.407073][ T6219] dump_stack_lvl+0x16c/0x1f0 [ 136.407135][ T6219] should_fail_ex+0x512/0x640 [ 136.407182][ T6219] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 136.407224][ T6219] should_failslab+0xc2/0x120 [ 136.407264][ T6219] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 136.407300][ T6219] ? __pfx___might_resched+0x10/0x10 [ 136.407335][ T6219] ? alloc_vmap_area+0x613/0x2970 [ 136.407389][ T6219] alloc_vmap_area+0x613/0x2970 [ 136.407456][ T6219] ? __pfx_alloc_vmap_area+0x10/0x10 [ 136.407512][ T6219] __get_vm_area_node+0x1a7/0x300 [ 136.407569][ T6219] __vmalloc_node_range_noprof+0x277/0x1540 [ 136.407620][ T6219] ? n_tty_open+0x1a/0x170 [ 136.407679][ T6219] ? n_tty_open+0x1a/0x170 [ 136.407727][ T6219] ? __ldsem_down_write_nested+0x10e/0x850 [ 136.407777][ T6219] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 136.407843][ T6219] ? n_tty_open+0x1a/0x170 [ 136.407889][ T6219] vzalloc_noprof+0x6b/0x90 [ 136.407941][ T6219] ? n_tty_open+0x1a/0x170 [ 136.407983][ T6219] ? __pfx_n_tty_open+0x10/0x10 [ 136.408023][ T6219] n_tty_open+0x1a/0x170 [ 136.408066][ T6219] ? __pfx_n_tty_open+0x10/0x10 [ 136.408109][ T6219] tty_ldisc_open+0x9c/0x120 [ 136.408149][ T6219] tty_ldisc_setup+0x40/0x100 [ 136.408185][ T6219] tty_init_dev.part.0+0x1ec/0x500 [ 136.408229][ T6219] tty_open+0xa50/0xf90 [ 136.408278][ T6219] ? __pfx_tty_open+0x10/0x10 [ 136.408320][ T6219] ? chrdev_open+0x10b/0x6a0 [ 136.408360][ T6219] ? __pfx_tty_open+0x10/0x10 [ 136.408399][ T6219] chrdev_open+0x231/0x6a0 [ 136.408432][ T6219] ? __pfx_apparmor_file_open+0x10/0x10 [ 136.408472][ T6219] ? __pfx_chrdev_open+0x10/0x10 [ 136.408511][ T6219] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 136.408569][ T6219] do_dentry_open+0x741/0x1c10 [ 136.408603][ T6219] ? __pfx_chrdev_open+0x10/0x10 [ 136.408647][ T6219] vfs_open+0x82/0x3f0 [ 136.408694][ T6219] path_openat+0x1e5e/0x2d40 [ 136.408743][ T6219] ? __pfx_path_openat+0x10/0x10 [ 136.408786][ T6219] do_filp_open+0x20b/0x470 [ 136.408818][ T6219] ? __pfx_do_filp_open+0x10/0x10 [ 136.408883][ T6219] ? alloc_fd+0x471/0x7d0 [ 136.408947][ T6219] do_sys_openat2+0x11b/0x1d0 [ 136.408988][ T6219] ? __pfx_do_sys_openat2+0x10/0x10 [ 136.409050][ T6219] __x64_sys_openat+0x174/0x210 [ 136.409095][ T6219] ? __pfx___x64_sys_openat+0x10/0x10 [ 136.409147][ T6219] ? rcu_is_watching+0x12/0xc0 [ 136.409190][ T6219] do_syscall_64+0xcd/0x230 [ 136.409241][ T6219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.409275][ T6219] RIP: 0033:0x7f1edf58e969 [ 136.409302][ T6219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.409332][ T6219] RSP: 002b:00007f1ee03ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 136.409364][ T6219] RAX: ffffffffffffffda RBX: 00007f1edf7b5fa0 RCX: 00007f1edf58e969 [ 136.409385][ T6219] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 136.409406][ T6219] RBP: 00007f1edf610ab1 R08: 0000000000000000 R09: 0000000000000000 [ 136.409427][ T6219] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 136.409446][ T6219] R13: 0000000000000000 R14: 00007f1edf7b5fa0 R15: 00007ffdc6a079b8 [ 136.409490][ T6219] [ 136.409535][ T6219] tty tty26: ldisc open failed (-12), clearing slot 25 [ 138.094600][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.101567][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.246611][ T6242] bridge0: port 3(team0) entered blocking state [ 138.269186][ T6242] bridge0: port 3(team0) entered disabled state [ 138.306551][ T6242] team0: entered allmulticast mode [ 138.312507][ T6242] team_slave_0: entered allmulticast mode [ 138.336365][ T6242] team_slave_1: entered allmulticast mode [ 138.358520][ T6242] team0: entered promiscuous mode [ 138.376495][ T6242] team_slave_0: entered promiscuous mode [ 138.390200][ T6242] team_slave_1: entered promiscuous mode [ 138.414047][ T6242] bridge0: port 3(team0) entered blocking state [ 138.421189][ T6242] bridge0: port 3(team0) entered forwarding state [ 138.862117][ T6252] Invalid ELF header magic: != ELF [ 139.129150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 139.586704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 140.053275][ T6287] process 'syz.3.102' launched ':,' with NULL argv: empty string added [ 141.969641][ T6312] FAULT_INJECTION: forcing a failure. [ 141.969641][ T6312] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 142.073356][ T6312] CPU: 0 UID: 0 PID: 6312 Comm: syz.1.107 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 142.073401][ T6312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 142.073418][ T6312] Call Trace: [ 142.073428][ T6312] [ 142.073440][ T6312] dump_stack_lvl+0x16c/0x1f0 [ 142.073487][ T6312] should_fail_ex+0x512/0x640 [ 142.073537][ T6312] _copy_from_user+0x2e/0xd0 [ 142.073583][ T6312] move_addr_to_kernel+0x65/0x170 [ 142.073642][ T6312] __copy_msghdr+0x386/0x470 [ 142.073678][ T6312] copy_msghdr_from_user+0xc1/0x160 [ 142.073712][ T6312] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 142.073754][ T6312] ? __pfx__kstrtoull+0x10/0x10 [ 142.073798][ T6312] ___sys_sendmsg+0xfe/0x1d0 [ 142.073835][ T6312] ? __pfx____sys_sendmsg+0x10/0x10 [ 142.073890][ T6312] ? find_held_lock+0x2b/0x80 [ 142.073945][ T6312] __sys_sendmmsg+0x200/0x420 [ 142.073984][ T6312] ? __pfx___sys_sendmmsg+0x10/0x10 [ 142.074032][ T6312] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.074095][ T6312] ? fput+0x70/0xf0 [ 142.074131][ T6312] ? ksys_write+0x1b9/0x240 [ 142.074158][ T6312] ? __pfx_ksys_write+0x10/0x10 [ 142.074184][ T6312] ? rcu_is_watching+0x12/0xc0 [ 142.074219][ T6312] __x64_sys_sendmmsg+0x9c/0x100 [ 142.074252][ T6312] ? lockdep_hardirqs_on+0x7c/0x110 [ 142.074308][ T6312] do_syscall_64+0xcd/0x230 [ 142.074356][ T6312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.074388][ T6312] RIP: 0033:0x7f1edf58e969 [ 142.074412][ T6312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.074441][ T6312] RSP: 002b:00007f1ee03ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 142.074471][ T6312] RAX: ffffffffffffffda RBX: 00007f1edf7b5fa0 RCX: 00007f1edf58e969 [ 142.074491][ T6312] RDX: 0000000000000005 RSI: 0000200000000140 RDI: 0000000000000002 [ 142.074509][ T6312] RBP: 00007f1ee03ed090 R08: 0000000000000000 R09: 0000000000000000 [ 142.074527][ T6312] R10: 0000000000000311 R11: 0000000000000246 R12: 0000000000000001 [ 142.074545][ T6312] R13: 0000000000000000 R14: 00007f1edf7b5fa0 R15: 00007ffdc6a079b8 [ 142.074581][ T6312] [ 142.290114][ C0] vkms_vblank_simulate: vblank timer overrun [ 142.569029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 143.658474][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.118'. [ 143.964193][ T6347] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 144.077214][ T6347] CIFS mount error: No usable UNC path provided in device string! [ 144.077214][ T6347] [ 144.088687][ T6347] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 144.119565][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.687053][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.695531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 144.777870][ T6365] FAULT_INJECTION: forcing a failure. [ 144.777870][ T6365] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 144.957445][ T6365] CPU: 0 UID: 0 PID: 6365 Comm: syz.1.121 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 144.957491][ T6365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 144.957509][ T6365] Call Trace: [ 144.957519][ T6365] [ 144.957531][ T6365] dump_stack_lvl+0x16c/0x1f0 [ 144.957582][ T6365] should_fail_ex+0x512/0x640 [ 144.957634][ T6365] should_fail_alloc_page+0xe7/0x130 [ 144.957683][ T6365] prepare_alloc_pages+0x3c2/0x610 [ 144.957739][ T6365] __alloc_frozen_pages_noprof+0x18f/0x23a0 [ 144.957783][ T6365] ? __pfx___might_resched+0x10/0x10 [ 144.957821][ T6365] ? find_held_lock+0x2b/0x80 [ 144.957853][ T6365] ? process_measurement+0x4a6/0x23e0 [ 144.957898][ T6365] ? down_write+0x14d/0x200 [ 144.957947][ T6365] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 144.957986][ T6365] ? up_write+0x1b2/0x520 [ 144.958047][ T6365] ? __lock_acquire+0x5ca/0x1ba0 [ 144.958088][ T6365] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 144.958144][ T6365] ? policy_nodemask+0xea/0x4e0 [ 144.958186][ T6365] alloc_pages_mpol+0x1fb/0x550 [ 144.958228][ T6365] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 144.958280][ T6365] alloc_pages_noprof+0x131/0x390 [ 144.958322][ T6365] __pmd_alloc+0x3f/0x870 [ 144.958368][ T6365] ? find_held_lock+0x2b/0x80 [ 144.958401][ T6365] __handle_mm_fault+0x948/0x2a40 [ 144.958446][ T6365] ? __pfx___handle_mm_fault+0x10/0x10 [ 144.958504][ T6365] ? find_vma+0xbf/0x140 [ 144.958547][ T6365] ? __pfx_find_vma+0x10/0x10 [ 144.958597][ T6365] handle_mm_fault+0x3fe/0xad0 [ 144.958636][ T6365] do_user_addr_fault+0x7a6/0x1370 [ 144.958669][ T6365] ? rcu_is_watching+0x12/0xc0 [ 144.958703][ T6365] exc_page_fault+0x5c/0xc0 [ 144.958747][ T6365] asm_exc_page_fault+0x26/0x30 [ 144.958777][ T6365] RIP: 0010:filldir+0x29c/0x5f0 [ 144.958820][ T6365] Code: db e8 58 31 84 ff 89 d8 48 83 c4 50 5b 5d 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc e8 3e 31 84 ff 0f 01 cb 0f ae e8 48 8b 04 24 <49> 89 47 08 e8 2b 31 84 ff 4c 8b 7c 24 30 48 8b 44 24 10 49 89 07 [ 144.958850][ T6365] RSP: 0018:ffffc9000b2cfca8 EFLAGS: 00050293 [ 144.958875][ T6365] RAX: 0000000000000000 RBX: ffffc9000b2cfe80 RCX: ffffffff82366b4a [ 144.958894][ T6365] RDX: ffff888028348000 RSI: ffffffff82366ba2 RDI: 0000000000000006 [ 144.958914][ T6365] RBP: 0000000000000018 R08: 0000000000000006 R09: 0000000000000000 [ 144.958932][ T6365] R10: 0000000000000018 R11: 0000000000000000 R12: 0000000000000001 [ 144.958951][ T6365] R13: 0000000000000018 R14: ffffffff8ba26a00 R15: 0000000000000000 [ 144.958983][ T6365] ? filldir+0x23a/0x5f0 [ 144.959022][ T6365] ? filldir+0x292/0x5f0 [ 144.959069][ T6365] ? filldir+0x292/0x5f0 [ 144.959132][ T6365] ? __pfx_filldir+0x10/0x10 [ 144.959171][ T6365] proc_readdir_de+0x1ce/0x690 [ 144.959220][ T6365] proc_readdir+0xf7/0x140 [ 144.959261][ T6365] proc_root_readdir+0x5e/0xd0 [ 144.959305][ T6365] iterate_dir+0x293/0xb40 [ 144.959357][ T6365] __x64_sys_getdents+0x14d/0x2c0 [ 144.959405][ T6365] ? __pfx___x64_sys_getdents+0x10/0x10 [ 144.959450][ T6365] ? fput+0x70/0xf0 [ 144.959484][ T6365] ? __pfx_filldir+0x10/0x10 [ 144.959529][ T6365] ? rcu_is_watching+0x12/0xc0 [ 144.959571][ T6365] do_syscall_64+0xcd/0x230 [ 144.959620][ T6365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.959652][ T6365] RIP: 0033:0x7f1edf58e969 [ 144.959676][ T6365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.959704][ T6365] RSP: 002b:00007f1ee03cc038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e [ 144.959731][ T6365] RAX: ffffffffffffffda RBX: 00007f1edf7b6080 RCX: 00007f1edf58e969 [ 144.959751][ T6365] RDX: 0000000000000fff RSI: 0000000000000000 RDI: 0000000000000003 [ 144.959769][ T6365] RBP: 00007f1ee03cc090 R08: 0000000000000000 R09: 0000000000000000 [ 144.959787][ T6365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.959805][ T6365] R13: 0000000000000000 R14: 00007f1edf7b6080 R15: 00007ffdc6a079b8 [ 144.959847][ T6365] [ 145.352258][ C0] vkms_vblank_simulate: vblank timer overrun [ 145.451689][ T6368] FAULT_INJECTION: forcing a failure. [ 145.451689][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 145.472674][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.3.123 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 145.472716][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 145.472730][ T6368] Call Trace: [ 145.472737][ T6368] [ 145.472746][ T6368] dump_stack_lvl+0x16c/0x1f0 [ 145.472783][ T6368] should_fail_ex+0x512/0x640 [ 145.472815][ T6368] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 145.472844][ T6368] should_failslab+0xc2/0x120 [ 145.472873][ T6368] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 145.472899][ T6368] ? __alloc_skb+0x2b2/0x380 [ 145.472927][ T6368] __alloc_skb+0x2b2/0x380 [ 145.472950][ T6368] ? __pfx___alloc_skb+0x10/0x10 [ 145.472977][ T6368] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 145.473005][ T6368] ? __lock_acquire+0xaa4/0x1ba0 [ 145.473039][ T6368] netlink_alloc_large_skb+0x69/0x130 [ 145.473069][ T6368] netlink_sendmsg+0x6a1/0xdd0 [ 145.473103][ T6368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.473144][ T6368] ____sys_sendmsg+0xa95/0xc70 [ 145.473178][ T6368] ? copy_msghdr_from_user+0x10a/0x160 [ 145.473203][ T6368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.473249][ T6368] ___sys_sendmsg+0x134/0x1d0 [ 145.473276][ T6368] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.473334][ T6368] __sys_sendmsg+0x16d/0x220 [ 145.473360][ T6368] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.473401][ T6368] ? rcu_is_watching+0x12/0xc0 [ 145.473430][ T6368] do_syscall_64+0xcd/0x230 [ 145.473465][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.473488][ T6368] RIP: 0033:0x7fe875f8e969 [ 145.473506][ T6368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.473527][ T6368] RSP: 002b:00007fe876e7d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.473548][ T6368] RAX: ffffffffffffffda RBX: 00007fe8761b5fa0 RCX: 00007fe875f8e969 [ 145.473563][ T6368] RDX: 0000000000000050 RSI: 0000200000000240 RDI: 0000000000000003 [ 145.473576][ T6368] RBP: 00007fe876e7d090 R08: 0000000000000000 R09: 0000000000000000 [ 145.473589][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.473602][ T6368] R13: 0000000000000000 R14: 00007fe8761b5fa0 R15: 00007fffebc3c328 [ 145.473629][ T6368] [ 146.395179][ T6371] Invalid ELF header magic: != ELF [ 147.764488][ T6411] FAULT_INJECTION: forcing a failure. [ 147.764488][ T6411] name failslab, interval 1, probability 0, space 0, times 0 [ 147.811477][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz.3.137 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 147.811524][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.811543][ T6411] Call Trace: [ 147.811554][ T6411] [ 147.811567][ T6411] dump_stack_lvl+0x16c/0x1f0 [ 147.811620][ T6411] should_fail_ex+0x512/0x640 [ 147.811665][ T6411] ? __kmalloc_node_noprof+0xc5/0x500 [ 147.811709][ T6411] should_failslab+0xc2/0x120 [ 147.811750][ T6411] __kmalloc_node_noprof+0xd8/0x500 [ 147.811789][ T6411] ? __vmalloc_node_range_noprof+0x3eb/0x1540 [ 147.811851][ T6411] __vmalloc_node_range_noprof+0x3eb/0x1540 [ 147.811919][ T6411] ? n_tty_open+0x1a/0x170 [ 147.811969][ T6411] ? __ldsem_down_write_nested+0x10e/0x850 [ 147.812019][ T6411] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.812097][ T6411] ? n_tty_open+0x1a/0x170 [ 147.812145][ T6411] vzalloc_noprof+0x6b/0x90 [ 147.812196][ T6411] ? n_tty_open+0x1a/0x170 [ 147.812238][ T6411] ? __pfx_n_tty_open+0x10/0x10 [ 147.812280][ T6411] n_tty_open+0x1a/0x170 [ 147.812323][ T6411] ? __pfx_n_tty_open+0x10/0x10 [ 147.812366][ T6411] tty_ldisc_open+0x9c/0x120 [ 147.812399][ T6411] tty_ldisc_setup+0x40/0x100 [ 147.812435][ T6411] tty_init_dev.part.0+0x1ec/0x500 [ 147.812481][ T6411] tty_open+0xa50/0xf90 [ 147.812531][ T6411] ? __pfx_tty_open+0x10/0x10 [ 147.812573][ T6411] ? chrdev_open+0x10b/0x6a0 [ 147.812613][ T6411] ? __pfx_tty_open+0x10/0x10 [ 147.812652][ T6411] chrdev_open+0x231/0x6a0 [ 147.812686][ T6411] ? __pfx_apparmor_file_open+0x10/0x10 [ 147.812728][ T6411] ? __pfx_chrdev_open+0x10/0x10 [ 147.812765][ T6411] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 147.812820][ T6411] do_dentry_open+0x741/0x1c10 [ 147.812854][ T6411] ? __pfx_chrdev_open+0x10/0x10 [ 147.812898][ T6411] vfs_open+0x82/0x3f0 [ 147.812942][ T6411] path_openat+0x1e5e/0x2d40 [ 147.812986][ T6411] ? __pfx_path_openat+0x10/0x10 [ 147.813029][ T6411] do_filp_open+0x20b/0x470 [ 147.813059][ T6411] ? __pfx_do_filp_open+0x10/0x10 [ 147.813131][ T6411] ? alloc_fd+0x471/0x7d0 [ 147.813193][ T6411] do_sys_openat2+0x11b/0x1d0 [ 147.813236][ T6411] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.813294][ T6411] __x64_sys_openat+0x174/0x210 [ 147.813338][ T6411] ? __pfx___x64_sys_openat+0x10/0x10 [ 147.813384][ T6411] ? rcu_is_watching+0x12/0xc0 [ 147.813427][ T6411] do_syscall_64+0xcd/0x230 [ 147.813476][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.813510][ T6411] RIP: 0033:0x7fe875f8e969 [ 147.813548][ T6411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.813596][ T6411] RSP: 002b:00007fe876e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.813627][ T6411] RAX: ffffffffffffffda RBX: 00007fe8761b5fa0 RCX: 00007fe875f8e969 [ 147.813647][ T6411] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 147.813668][ T6411] RBP: 00007fe876010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 147.813687][ T6411] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 147.813707][ T6411] R13: 0000000000000000 R14: 00007fe8761b5fa0 R15: 00007fffebc3c328 [ 147.813750][ T6411] [ 147.815011][ T6411] warn_alloc: 1 callbacks suppressed [ 147.815030][ T6411] syz.3.137: vmalloc error: size 12288, failed to allocated page array size 24, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 148.195655][ T6411] CPU: 0 UID: 0 PID: 6411 Comm: syz.3.137 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 148.195700][ T6411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 148.195718][ T6411] Call Trace: [ 148.195728][ T6411] [ 148.195739][ T6411] dump_stack_lvl+0x16c/0x1f0 [ 148.195791][ T6411] warn_alloc+0x248/0x3a0 [ 148.195837][ T6411] ? __pfx_warn_alloc+0x10/0x10 [ 148.195868][ T6411] ? dump_stack_lvl+0x1a1/0x1f0 [ 148.195925][ T6411] ? rcu_is_watching+0x12/0xc0 [ 148.195956][ T6411] ? __kmalloc_node_noprof+0x23b/0x500 [ 148.196003][ T6411] __vmalloc_node_range_noprof+0x1110/0x1540 [ 148.196070][ T6411] ? n_tty_open+0x1a/0x170 [ 148.196120][ T6411] ? __ldsem_down_write_nested+0x10e/0x850 [ 148.196167][ T6411] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.196236][ T6411] ? n_tty_open+0x1a/0x170 [ 148.196280][ T6411] vzalloc_noprof+0x6b/0x90 [ 148.196331][ T6411] ? n_tty_open+0x1a/0x170 [ 148.196373][ T6411] ? __pfx_n_tty_open+0x10/0x10 [ 148.196413][ T6411] n_tty_open+0x1a/0x170 [ 148.196453][ T6411] ? __pfx_n_tty_open+0x10/0x10 [ 148.196484][ T6411] tty_ldisc_open+0x9c/0x120 [ 148.196507][ T6411] tty_ldisc_setup+0x40/0x100 [ 148.196532][ T6411] tty_init_dev.part.0+0x1ec/0x500 [ 148.196564][ T6411] tty_open+0xa50/0xf90 [ 148.196599][ T6411] ? __pfx_tty_open+0x10/0x10 [ 148.196628][ T6411] ? chrdev_open+0x10b/0x6a0 [ 148.196656][ T6411] ? __pfx_tty_open+0x10/0x10 [ 148.196684][ T6411] chrdev_open+0x231/0x6a0 [ 148.196708][ T6411] ? __pfx_apparmor_file_open+0x10/0x10 [ 148.196739][ T6411] ? __pfx_chrdev_open+0x10/0x10 [ 148.196765][ T6411] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 148.196813][ T6411] do_dentry_open+0x741/0x1c10 [ 148.196837][ T6411] ? __pfx_chrdev_open+0x10/0x10 [ 148.196868][ T6411] vfs_open+0x82/0x3f0 [ 148.196902][ T6411] path_openat+0x1e5e/0x2d40 [ 148.196935][ T6411] ? __pfx_path_openat+0x10/0x10 [ 148.196965][ T6411] do_filp_open+0x20b/0x470 [ 148.196988][ T6411] ? __pfx_do_filp_open+0x10/0x10 [ 148.197032][ T6411] ? alloc_fd+0x471/0x7d0 [ 148.197079][ T6411] do_sys_openat2+0x11b/0x1d0 [ 148.197109][ T6411] ? __pfx_do_sys_openat2+0x10/0x10 [ 148.197152][ T6411] __x64_sys_openat+0x174/0x210 [ 148.197184][ T6411] ? __pfx___x64_sys_openat+0x10/0x10 [ 148.197218][ T6411] ? rcu_is_watching+0x12/0xc0 [ 148.197247][ T6411] do_syscall_64+0xcd/0x230 [ 148.197284][ T6411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.197307][ T6411] RIP: 0033:0x7fe875f8e969 [ 148.197325][ T6411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.197354][ T6411] RSP: 002b:00007fe876e7d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 148.197384][ T6411] RAX: ffffffffffffffda RBX: 00007fe8761b5fa0 RCX: 00007fe875f8e969 [ 148.197404][ T6411] RDX: 0000000000040002 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 148.197426][ T6411] RBP: 00007fe876010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 148.197446][ T6411] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 148.197459][ T6411] R13: 0000000000000000 R14: 00007fe8761b5fa0 R15: 00007fffebc3c328 [ 148.197489][ T6411] [ 148.530228][ T6411] Mem-Info: [ 148.533420][ T6411] active_anon:6528 inactive_anon:0 isolated_anon:0 [ 148.533420][ T6411] active_file:16185 inactive_file:40519 isolated_file:0 [ 148.533420][ T6411] unevictable:768 dirty:956 writeback:0 [ 148.533420][ T6411] slab_reclaimable:10215 slab_unreclaimable:93871 [ 148.533420][ T6411] mapped:25121 shmem:1364 pagetables:836 [ 148.533420][ T6411] sec_pagetables:0 bounce:0 [ 148.533420][ T6411] kernel_misc_reclaimable:0 [ 148.533420][ T6411] free:1342884 free_pcp:577 free_cma:0 [ 148.614176][ T6411] Node 0 active_anon:26212kB inactive_anon:0kB active_file:64740kB inactive_file:161876kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100484kB dirty:3824kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10488kB pagetables:3344kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 148.648172][ T6411] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 148.658322][ T6415] netlink: 146 bytes leftover after parsing attributes in process `syz.1.139'. [ 148.681430][ T6411] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 148.720072][ T6411] lowmem_reserve[]: 0 2484 2486 2486 2486 [ 148.725896][ T6411] Node 0 DMA32 free:1444760kB boost:0kB min:34108kB low:42632kB high:51156kB reserved_highatomic:0KB active_anon:26084kB inactive_anon:0kB active_file:64740kB inactive_file:160056kB unevictable:1536kB writepending:3824kB present:3129332kB managed:2544176kB mlocked:0kB bounce:0kB free_pcp:3420kB local_pcp:1816kB free_cma:0kB [ 148.778185][ T6411] lowmem_reserve[]: 0 0 1 1 1 [ 148.782969][ T6411] Node 0 Normal free:16kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1820kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 148.810833][ T6411] lowmem_reserve[]: 0 0 0 0 0 [ 148.815588][ T6411] Node 1 Normal free:3910884kB boost:0kB min:55768kB low:69708kB high:83648kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 148.845912][ T6411] lowmem_reserve[]: 0 0 0 0 0 [ 148.850852][ T6411] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 148.864701][ T6411] Node 0 DMA32: 2056*4kB (UME) 1598*8kB (UME) 1226*16kB (UME) 966*32kB (UME) 760*64kB (UME) 367*128kB (UME) 180*256kB (UM) 77*512kB (ME) 24*1024kB (M) 6*2048kB (ME) 283*4096kB (UM) = 1448688kB [ 148.901744][ T6411] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 148.923070][ T6411] Node 1 Normal: 275*4kB (UME) 65*8kB (UME) 43*16kB (UME) 227*32kB (UME) 110*64kB (UME) 40*128kB (UME) 12*256kB (UME) 8*512kB (UME) 3*1024kB (UM) 4*2048kB (UE) 945*4096kB (M) = 3910884kB [ 148.971643][ T6419] [ 148.974011][ T6419] ====================================================== [ 148.981031][ T6419] WARNING: possible circular locking dependency detected [ 148.988051][ T6419] 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 Not tainted [ 148.995299][ T6419] ------------------------------------------------------ [ 149.002320][ T6419] syz.0.140/6419 is trying to acquire lock: [ 149.008253][ T6419] ffff888025cfa318 (&q->elevator_lock){+.+.}-{4:4}, at: queue_wb_lat_store+0x187/0x3d0 [ 149.018041][ T6419] [ 149.018041][ T6419] but task is already holding lock: [ 149.025406][ T6419] ffff888025cf9de8 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 149.036674][ T6419] [ 149.036674][ T6419] which lock already depends on the new lock. [ 149.036674][ T6419] [ 149.047078][ T6419] [ 149.047078][ T6419] the existing dependency chain (in reverse order) is: [ 149.056094][ T6419] [ 149.056094][ T6419] -> #2 (&q->q_usage_counter(io)#30){++++}-{0:0}: [ 149.064821][ T6419] blk_alloc_queue+0x619/0x760 [ 149.070128][ T6419] blk_mq_alloc_queue+0x179/0x290 [ 149.075693][ T6419] __blk_mq_alloc_disk+0x29/0x120 [ 149.081260][ T6419] loop_add+0x496/0xb70 [ 149.085973][ T6419] loop_init+0x164/0x270 [ 149.090844][ T6419] do_one_initcall+0x120/0x6e0 [ 149.096151][ T6419] kernel_init_freeable+0x5c2/0x900 [ 149.101898][ T6419] kernel_init+0x1c/0x2b0 [ 149.106761][ T6419] ret_from_fork+0x45/0x80 [ 149.111720][ T6419] ret_from_fork_asm+0x1a/0x30 [ 149.117028][ T6419] [ 149.117028][ T6419] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 149.124276][ T6419] fs_reclaim_acquire+0x102/0x150 [ 149.129892][ T6419] kmem_cache_alloc_noprof+0x53/0x3b0 [ 149.135816][ T6419] __kernfs_new_node+0xd2/0x8a0 [ 149.141226][ T6419] kernfs_new_node+0x13c/0x1e0 [ 149.146710][ T6419] kernfs_create_dir_ns+0x4c/0x1a0 [ 149.152373][ T6419] sysfs_create_dir_ns+0x13a/0x2b0 [ 149.158032][ T6419] kobject_add_internal+0x2c4/0x9b0 [ 149.163794][ T6419] kobject_add+0x16e/0x240 [ 149.168801][ T6419] elv_register_queue+0xd3/0x2a0 [ 149.174276][ T6419] blk_register_queue+0x3c4/0x560 [ 149.180270][ T6419] add_disk_fwnode+0x911/0x13a0 [ 149.185685][ T6419] nbd_dev_add+0x78e/0xbb0 [ 149.190654][ T6419] nbd_init+0x181/0x320 [ 149.195341][ T6419] do_one_initcall+0x120/0x6e0 [ 149.200643][ T6419] kernel_init_freeable+0x5c2/0x900 [ 149.206374][ T6419] kernel_init+0x1c/0x2b0 [ 149.211230][ T6419] ret_from_fork+0x45/0x80 [ 149.216186][ T6419] ret_from_fork_asm+0x1a/0x30 [ 149.221493][ T6419] [ 149.221493][ T6419] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 149.229325][ T6419] __lock_acquire+0x1173/0x1ba0 [ 149.234806][ T6419] lock_acquire+0x179/0x350 [ 149.239927][ T6419] __mutex_lock+0x199/0xb90 [ 149.244967][ T6419] queue_wb_lat_store+0x187/0x3d0 [ 149.250536][ T6419] queue_attr_store+0x270/0x310 [ 149.255936][ T6419] sysfs_kf_write+0xef/0x150 [ 149.261154][ T6419] kernfs_fop_write_iter+0x351/0x510 [ 149.267067][ T6419] vfs_write+0x5ba/0x1180 [ 149.271926][ T6419] ksys_write+0x12a/0x240 [ 149.276785][ T6419] do_syscall_64+0xcd/0x230 [ 149.281830][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.288252][ T6419] [ 149.288252][ T6419] other info that might help us debug this: [ 149.288252][ T6419] [ 149.298476][ T6419] Chain exists of: [ 149.298476][ T6419] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#30 [ 149.298476][ T6419] [ 149.312236][ T6419] Possible unsafe locking scenario: [ 149.312236][ T6419] [ 149.319681][ T6419] CPU0 CPU1 [ 149.325043][ T6419] ---- ---- [ 149.330408][ T6419] lock(&q->q_usage_counter(io)#30); [ 149.335799][ T6419] lock(fs_reclaim); [ 149.342309][ T6419] lock(&q->q_usage_counter(io)#30); [ 149.350221][ T6419] lock(&q->elevator_lock); [ 149.354819][ T6419] [ 149.354819][ T6419] *** DEADLOCK *** [ 149.354819][ T6419] [ 149.362963][ T6419] 6 locks held by syz.0.140/6419: [ 149.367988][ T6419] #0: ffff8880300eb438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 149.377073][ T6419] #1: ffff8880355be420 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x240 [ 149.386086][ T6419] #2: ffff888079286c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 149.395867][ T6419] #3: ffff888143f8f968 (kn->active#75){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 149.405918][ T6419] #4: ffff888025cf9de8 (&q->q_usage_counter(io)#30){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 149.417683][ T6419] #5: ffff888025cf9e20 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 149.429673][ T6419] [ 149.429673][ T6419] stack backtrace: [ 149.435573][ T6419] CPU: 1 UID: 0 PID: 6419 Comm: syz.0.140 Not tainted 6.15.0-rc5-syzkaller-00207-g1a33418a69cc #0 PREEMPT(full) [ 149.435603][ T6419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 149.435617][ T6419] Call Trace: [ 149.435625][ T6419] [ 149.435633][ T6419] dump_stack_lvl+0x116/0x1f0 [ 149.435668][ T6419] print_circular_bug+0x275/0x350 [ 149.435699][ T6419] check_noncircular+0x14c/0x170 [ 149.435731][ T6419] __lock_acquire+0x1173/0x1ba0 [ 149.435771][ T6419] lock_acquire+0x179/0x350 [ 149.435800][ T6419] ? queue_wb_lat_store+0x187/0x3d0 [ 149.435837][ T6419] ? __pfx___might_resched+0x10/0x10 [ 149.435862][ T6419] ? do_raw_spin_lock+0x12c/0x2b0 [ 149.435898][ T6419] __mutex_lock+0x199/0xb90 [ 149.435931][ T6419] ? queue_wb_lat_store+0x187/0x3d0 [ 149.435967][ T6419] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 149.435996][ T6419] ? queue_wb_lat_store+0x187/0x3d0 [ 149.436031][ T6419] ? lockdep_hardirqs_on+0x7c/0x110 [ 149.436062][ T6419] ? __pfx___mutex_lock+0x10/0x10 [ 149.436098][ T6419] ? __pfx_autoremove_wake_function+0x10/0x10 [ 149.436129][ T6419] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 149.436165][ T6419] ? queue_wb_lat_store+0x187/0x3d0 [ 149.436200][ T6419] queue_wb_lat_store+0x187/0x3d0 [ 149.436237][ T6419] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 149.436274][ T6419] ? __mutex_trylock_common+0xe9/0x250 [ 149.436306][ T6419] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 149.436342][ T6419] queue_attr_store+0x270/0x310 [ 149.436379][ T6419] ? __pfx_queue_attr_store+0x10/0x10 [ 149.436422][ T6419] ? find_held_lock+0x2b/0x80 [ 149.436443][ T6419] ? sysfs_file_kobj+0xe4/0x290 [ 149.436477][ T6419] ? __pfx_queue_attr_store+0x10/0x10 [ 149.436513][ T6419] sysfs_kf_write+0xef/0x150 [ 149.436546][ T6419] kernfs_fop_write_iter+0x351/0x510 [ 149.436575][ T6419] ? __pfx_sysfs_kf_write+0x10/0x10 [ 149.436609][ T6419] vfs_write+0x5ba/0x1180 [ 149.436631][ T6419] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 149.436661][ T6419] ? __pfx___mutex_lock+0x10/0x10 [ 149.436694][ T6419] ? __pfx_vfs_write+0x10/0x10 [ 149.436723][ T6419] ksys_write+0x12a/0x240 [ 149.436749][ T6419] ? __pfx_ksys_write+0x10/0x10 [ 149.436769][ T6419] ? rcu_is_watching+0x12/0xc0 [ 149.436794][ T6419] do_syscall_64+0xcd/0x230 [ 149.436828][ T6419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.436853][ T6419] RIP: 0033:0x7f2e0778e969 [ 149.436872][ T6419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.436894][ T6419] RSP: 002b:00007f2e085b8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.436915][ T6419] RAX: ffffffffffffffda RBX: 00007f2e079b5fa0 RCX: 00007f2e0778e969 [ 149.436930][ T6419] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 149.436944][ T6419] RBP: 00007f2e07810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 149.436958][ T6419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.436971][ T6419] R13: 0000000000000000 R14: 00007f2e079b5fa0 R15: 00007ffc43a56ec8 [ 149.436992][ T6419] [ 149.767202][ T6423] program syz.0.140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 149.780615][ T6411] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.791117][ T6411] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.813349][ T6411] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 149.837853][ T6411] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 149.854182][ T6411] 58067 total pagecache pages [ 149.859785][ T6411] 4 pages in swap cache [ 149.864185][ T6411] Free swap = 124996kB [ 149.908752][ T6411] Total swap = 124996kB [ 149.912986][ T6411] 2097051 pages RAM [ 149.916886][ T6411] 0 pages HighMem/MovableOnly [ 149.921630][ T6411] 428901 pages reserved [ 149.925837][ T6411] 0 pages cma reserved [ 149.930332][ T6411] tty tty26: ldisc open failed (-12), clearing slot 25