last executing test programs: 7.317590015s ago: executing program 0 (id=26): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4002000}, 0x40010) sendmsg$auto_NFSD_CMD_POOL_MODE_GET(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)={0x14, r2, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) (fail_nth: 3) 7.102610903s ago: executing program 3 (id=29): prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) (fail_nth: 2) 6.499642871s ago: executing program 3 (id=31): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = bpf$auto(0x5, &(0x7f0000001540)=@bpf_attr_3={0x9, 0x4, 0x10000, 0x1, 0x9, 0x80000000, 0x3, 0x1000, 0x10000, "06dbde4e070000001b0000000800", 0x0, 0x6, 0x2, 0x100, 0x0, 0x81, 0x200, 0x1, 0x4, 0x5, @attach_prog_fd, 0x5, 0x1ff, 0x100000002, 0x101, 0xe4, 0x6}, 0x1000) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, r1, 0x7ffe) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) r4 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r4, &(0x7f0000000000)='\x03W\xd6l\x15\x88X\x1a\x9f\x9c{^\'\x00', 0x100000002, 0x100000001) ioctl$auto_TCFLSH2(r0, 0x5453, 0x0) socket(0x15, 0x800, 0x81) prctl$auto_PR_SET_MM_START_STACK(0x5, 0x5, 0xffffffffffffffff, 0x2, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) r5 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000004440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004540)={&(0x7f0000000140)={0x40, r7, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r8}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x6}, @OVS_DP_ATTR_NAME={0x11, 0x1, '\xf3|B-\xfc\t\x02\x18\x00\x00\x00\x00\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x2000000) write$auto_mousedev_fops_mousedev(r5, &(0x7f0000000340)="000000008f", 0x5) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) write$auto(0x3, 0x0, 0xfdef) prctl$auto_PR_SME_GET_VL(0x40, 0x3e71e943, 0x9, 0x62e7, 0x8) 5.918140312s ago: executing program 2 (id=34): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00082abd7000fbdbdf2502000000080002000300003d"], 0x1c}, 0x1, 0x0, 0x0, 0x24008011}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003180), r0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000080), 0x48180, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x20000, 0x0) ioctl$auto_ECCGETSTATS(r1, 0x80104d12, &(0x7f0000000100)={0x8001, 0x8, 0x7ff, 0x4}) r2 = epoll_create$auto(0x3e) epoll_ctl$auto(r2, 0x1, 0x8000000000000000, 0x0) socket(0x10, 0x3, 0x6) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x400008, 0x3, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) r3 = socket(0x10, 0x2, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) 5.678718311s ago: executing program 0 (id=35): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x3, 0x3a) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000bc0)='/sys/kernel/tracing/dynamic_events\x00', 0x1, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000300)="234751a0cc0bafad59f83847854e875d850a4d197ec4b029fba4d9ea9aee6b48844ea09e2bbf5fd0fd3bb02ffd2773db9383c7153478f9420e66317eed986a03b01f4e058639651a79481bb55990570866369eeccabb9dcc25ed8b92057516ae28b8cbbe6582f0e6e0b276407aaaa436ee10ac38c3afb7d5b517ae864eff15684ef3c720d504b99e878905e7e4b2bb6b5e01d0ce0cf498295599b79a7c028379dd", 0xbb) ioctl$auto(r0, 0x890c, 0x1) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) 5.285622424s ago: executing program 0 (id=36): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x501, 0x0) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/suspend_stats/failed_resume_early\x00', 0x181000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0xca, &(0x7f00000010c0)='\x04>\x00\x1d\xa4\xd2\xc3\xec&9\v\xbc\xdein\xe1G\xf68\x02\x18\x00\x00\xd3b\x01\xbd\x9b@\xb0\x00\x00\x00\x84\xa2\\\x15\xc4>\xa9\x82,\x95\xeeH\xf8}v\xb3\xcb(\xa90Abe\xc3\x8c\xcc\xe7\xb8\x00F\x89#\xb4\xf0F\xa1GH\xb5\x8f\x9dZ~\xea\xa3\x93\xc2\x04\xe1;b\x99\x97}Z\x7f\x0f\x90\xce\x85-e\xb6n\xbc\xc6=\xf8\xce\xe7\x1e]\x85|\xce\xd7L\x9b\xd3lb\xc5\xee\xdb\xcb\xbb\xd8\xd9\xd3\xf8 \xe9e\xe5\x80\x1c7B+]\\!\xcej}H\x03x\x83Z\x98\xb8\t\xde\xd4\xf5\xf32\xccR\xaa\xdd\x16\xab\xd8\x1d\"\xc7\xa5\xe1k\x1d\xd9k\xc6\xb2\xa7\x97\x9a\xf6\xfe\xef\x1a\xbd\xcb\xb8*\x8b9\x00R\xe9)?Em\xb2\xac\xd1\xf6\xff\xc1\xc7\xbdl\xa2+tI\xa3\xa8\xabVe\x87\xa9\xae9\x82\xd2.SCt\xcc\x8c7\x7f\xdc\xc3\xfb\x94\xfc\xdfc+\x04\xfb\xf5$\xecO1@\x99l;\xd3X\xd5\"\xec\x17hR\xc5\x99\x8b\x9f\xf3\xf48%\xfa\xf2\x1d\xc5\x10T\x83p0\xd7]\x83{\x81\xdei\xd2\xfc\xfd=3K\xc3\xfe\x12\x98\x8b\xbe\xd1+\xc4r\x7f\x8fQ\xcc\xa6\xd8>k\xcc\xee\xe0\x9bW\x0e\xc63\x84^\xde`\xd2\xe8\xfc\x02\xef\xa4\xdc\xd0A\xd5`?9D\x1c\x1b\x1b\xd5\xcb\xfb\x03I\xc9\x97\xac#\x0ee\xc8ltL\x88\x17m~aA%\xd3\xaf\xaa6hf\x9b\x83\x02A\xb0\xf6\x14\xb3\x18B\xfd\x9ai\xf8j \a\x1es\xa3U\x98sqq,\xd2A4?l\xa2\x9c\xc9\x9fa\xe8\x99qw\xf3\x18\x12R+(%x\xb6\xf8\xe9\xf2\x0e\xc8\x00\x00\x00\x00', 0x100) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) bpf$auto(0x0, 0x0, 0x6f3) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/time\x00') setns(r3, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x10f, 0x7f, 0x0, 0x14) (async) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r4, 0x0, 0x44) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0xa, 0x3, 0x6) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_WIPHY(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="810b25bd7000ffdbdf251100000008000300", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x0) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) 5.285460975s ago: executing program 1 (id=37): prctl$auto(0x4e, 0x1, 0x0, 0x1, 0x0) 5.046308251s ago: executing program 1 (id=38): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x2, 0x3, 0xffffffffffffffff, 0x80000001, 0xdfd) mmap$auto(0x0, 0x400008, 0x81, 0x9b72, r0, 0x8000) r1 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) (async) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r2 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, 0x0, 0x1a6b75d63882a712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r2, 0x28000) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r2, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) (async) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) (async) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x8) syz_genetlink_get_family_id$auto_netdev(&(0x7f00000000c0), r3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.498880597s ago: executing program 3 (id=39): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/net/ip6_tables_names\x00', 0xb00, 0x0) pread64$auto(r0, 0x0, 0xf469, 0xbc3ab41) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r2, 0x0, 0x1f40) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f00000000c0)={0x0, 0xffffffff}, 0x6) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1p\x00', 0x80, 0x0) mmap$auto(0x0, 0x9, 0xde, 0xeb5, 0x40000000000a5, 0x7ffe) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fremovexattr$auto(0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_IOAM6_CMD_DEL_NAMESPACE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x24, r1, 0x9, 0x70bd2c, 0x25dfdbfb, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0x8001}, @IOAM6_ATTR_NS_ID={0x6, 0x1, 0x108}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000140), r4) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x64, r5, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xe6e9}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x8}, @ETHTOOL_A_COALESCE_STATS_BLOCK_USECS={0x8, 0xa, 0x4}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5, 0xc, 0x2}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xdc5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0xfffffff9}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x1}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x78}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0x9}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008004}, 0x10) sendmsg$auto_ETHTOOL_MSG_PLCA_SET_CFG(r4, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x7c, r5, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_PLCA_ENABLED={0x5}, @ETHTOOL_A_PLCA_BURST_CNT={0x8, 0x8, 0xffffff81}, @ETHTOOL_A_PLCA_NODE_ID={0x8, 0x6, 0xe}, @ETHTOOL_A_PLCA_NODE_CNT={0x8, 0x5, 0x7ff}, @ETHTOOL_A_PLCA_TO_TMR={0x8, 0x7, 0x76}, @ETHTOOL_A_PLCA_NODE_ID={0x8, 0x6, 0x7}, @ETHTOOL_A_PLCA_TO_TMR={0x8, 0x7, 0x59a}, @ETHTOOL_A_PLCA_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x800}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x6}]}, @ETHTOOL_A_PLCA_ENABLED={0x5, 0x3, 0x1}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000091) 4.497037591s ago: executing program 2 (id=47): socket(0x29, 0x800, 0xfffffffd) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/take_snapshot\x00', 0x2001, 0x0) select$auto(0xe, 0xfffffffffffffffe, 0x0, 0x0, 0x0) fanotify_init$auto(0x200, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000640)='/dev/binderfs/binder0\x00', 0x22800, 0x0) ioctl$auto_BINDER_WRITE_READ(r0, 0xc0306201, 0x0) r1 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vhci_hcd.5/usb20/20-0:1.0/usb20-port5/power/runtime_status\x00', 0x422283, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x4000000001ff, 0x7, 0xd, 0x1, 0x948e, 0x3, 0x15f4da0a, 0x3, 0x100, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x4, 0xfffffffffffffffd]}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioperm$auto(0x7, 0x6, 0x80) r3 = getegid() prctl$auto_PR_GET_SPECULATION_CTRL(0x34, 0x10, 0xffffffffffffffff, 0x8000, 0x8acb) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r2, @ANYRES64=r3], 0x14}, 0x1, 0x0, 0x0, 0xa28c5f3dce471b2c}, 0x4000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x9, 0x1, 0x0, 0x20c5, 0x6) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) shmctl$auto_IPC_RMID(0x8, 0x0, &(0x7f0000000580)={{0x2, 0x0, 0x0, 0x1, 0x6, 0x6, 0x1}, 0x10, 0x8, 0xbce, 0x6, @inferred=0xffffffffffffffff, @raw=0x5, 0x6, 0x0, 0x0, &(0x7f00000016c0)="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"}) write$auto_proc_mem_operations_base(r4, &(0x7f0000001680)="a7", 0x80000) madvise$auto(0x0, 0x20200, 0x15) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 4.243541443s ago: executing program 0 (id=40): unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/mnt\x00') setns(r0, 0x0) r1 = syz_clone(0x98280000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = geteuid() r3 = setfsuid$auto(r2) msgctl$auto_MSG_STAT(0x7ff, 0xb, &(0x7f0000000080)={{0x1, r3, 0xee00, 0x7f, 0x98d, 0x0, 0x8}, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x2, 0x6f7, 0xf, 0x3e7, 0x9, 0x0, 0x401, 0x8, 0x88, @raw=0x3, @inferred=r1}) r4 = getuid() setpriority$auto(0x7, r4, 0x1edd) 3.734230702s ago: executing program 0 (id=41): socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) socket(0xa, 0x3, 0x73) socket(0x29, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth1_to_team/route_localnet\x00', 0x4ab81, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv6/conf/default/ioam6_id_wide\x00', 0x40100, 0x0) read$auto(r0, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) getsockopt$auto(0x6, 0x10f, 0x4, 0xfffffffffffffffe, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x28b42, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000340), 0x7111}, 0x8) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) 3.363362489s ago: executing program 1 (id=42): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x102, 0x0) writev$auto(r2, 0x0, 0x3) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0xffffffffffffffff) ioctl$auto(0x3, 0x4040ae77, 0x38) ioctl$auto(0x3, 0x4040ae77, 0x38) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010329bd7000fedbdf250c000000080004"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0xc000) 3.21961829s ago: executing program 2 (id=43): openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000000), 0x80201, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) r0 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0x7fffffff, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) fcntl$auto_F_DUPFD_QUERY(r0, 0x403, r0) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) socket(0x1, 0x1, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) shmctl$auto_IPC_INFO(0x9, 0x3, &(0x7f0000000180)={{0x4, 0xee01, 0xffffffffffffffff, 0x1ff, 0x5, 0x7, 0xc72c}, 0x9, 0x8, 0xb551, 0xfb6, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff, 0x800, 0x0, &(0x7f0000000000)="db590a08d67ededfd643b60072bf873532db6d5d5b499adbc4291ba6f793deca7b2380aa91e271817409bbc0c9f9bbf64f5412a0755854b9a3c74759ba10382a2dd51b4847c784366b0507a0940a9234f85c220c5a4efdd074d4da366853abffd89ed2c4acf71e25229bf30c019f0d7a1f6b2aab41586ce0785d1184d111ac12f3473aa94dc293f6fe65f6df51c1e257e800072f062e6cb06078b3ab2be11410bed0029f6e5b8586682bf988b375c60f4b6e5b0da492de5cb65870531fd2ff680f8ab3043b7a6eab5a2d16be7d3d8fcd2616053958a73ff2a27d", &(0x7f0000000100)="f871809acc0ff4ec73f8e204d8768770c1c7fed3e2d83922e37a448798eee55c53c6b08af48d80a84eabbd3ab1ae558ba6c14b0ca95ca058b83238a187e2d7a02e439353d798b7f8303754cdda531ec05cada9d145e284c4"}) ioctl$auto_BLKOPENZONE(r1, 0x40101286, &(0x7f0000000240)={0x7fffffff, 0x2b55}) quotactl_fd$auto(r1, 0x6, r2, &(0x7f0000000200)="2de5cab98ce7f4f6587725c1615afb0817d9ca62ae4270ddeb090ccdf6d60569e65ca6") epoll_pwait2$auto(r1, 0x0, 0x3, 0x0, 0x0, 0x8) iopl$auto(0x7ff) write$auto(0x3, 0x0, 0xfdef) 3.136713458s ago: executing program 3 (id=44): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mq_notify$auto(0xffffffffffffffff, 0x0) socket(0xa, 0x1, 0x84) r0 = io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r1, &(0x7f00000001c0)="239cb836edc0", 0x6) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty0\x00', 0x102, 0x0) writev$auto(r2, &(0x7f0000000040)={&(0x7f0000000000), 0xff}, 0x1) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x19, 0x0, 0x92) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) socket(0x2, 0xa, 0x106) writev$auto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x6}, 0x3) rseq$auto(&(0x7f0000000040)={0xe, 0x401, 0x80000001, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c234000, 0x1, 0x9) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x2000c, 0x204000000000df, 0x80eb0, 0x401, 0x8000) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x7) ioctl$auto_SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000100)='\x00') socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 2.849467909s ago: executing program 1 (id=45): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clone$auto(0x1f4, 0x8000000000000000, 0x0, 0x0, 0x1b0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0xae841, 0x1fb) (async) socket(0x840000000002, 0x3, 0xff) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0x1}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) (async) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) socket(0xa, 0x2, 0x73) (async) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x20b42, 0x0) (async) socket(0x28, 0x80000, 0x0) (async) write$auto(0x3, 0x0, 0x100082) write$auto(0x3, 0x0, 0x100082) (async, rerun: 64) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, 0x0) (async, rerun: 64) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async, rerun: 32) socket(0xa, 0x2, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) get_mempolicy$auto(0x0, 0x0, 0x3, 0x2607, 0xa) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) 2.713366791s ago: executing program 3 (id=46): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x106) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, &(0x7f0000000180)="35deb0179b6e3f854fd29eba4c314dd9a26fb4dcb0d10ced60b6fed9eafbd51097c657cfc086e75641f18776e5a469f1f45a484ec05958ed12890b6739fb17ae9984cd6bc521e7914b63d974ba1b6fbf7c61298208c22a9ac69d7a784f7abcfcbf8bfcb597a7d7d89dcbea241ce28bd2ad42d8a9275eeaf381180f40e70c5bb54f1a6cea631e6b60427010443c3dbd1edb4f") bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x3, @multicast2}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) r1 = socket(0x2d, 0x2, 0x0) sendmsg$auto_SMC_NETLINK_ENABLE_SEID(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x10}, 0xc, &(0x7f0000000100)={0x0, 0xa0}}, 0x20040804) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) setsockopt$auto(r0, 0xfffffffb, 0x23, 0x0, 0x4) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_ovs_vport(0x0, r0) 2.054638896s ago: executing program 3 (id=48): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/stat/rt_cache\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x8000, 0xfa9d, 0x2, &(0x7f0000000280)=0x20000000000000fb, 0x3, 0x1) set_mempolicy_home_node$auto(0x0, 0x2010000, 0x0, 0x2) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14abfd) prctl$auto(0x1, 0x5, 0x0, 0x400000000009, 0xbfffffffff) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/pagemap\x00', 0x0, 0x0) r3 = prctl$auto(0x5, 0x1, 0x0, 0x7ffefff80000001, 0x2) mmap$auto(0x4, 0x19, 0x1, 0x411, r2, 0x100000000a) r4 = socketpair$auto(0x1, 0x1000005, 0x40, 0x0) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, r5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) setgroups$auto(0xe32, 0x0) madvise$auto(0x0, 0x200007, 0x19) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x4c04, 0x0) mmap$auto(0x0, 0x128009, 0xdf, 0x410, r4, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r6 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/smaps_rollup\x00', 0x40840, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x1) read$auto_proc_pid_maps_operations_internal(r6, &(0x7f00000010c0)=""/4082, 0xff2) setreuid$auto(0x0, 0x5) r7 = socket(0x29, 0x2, 0x0) setsockopt$auto(r7, 0xdb, 0xfffffffe, 0x0, 0x8) fcntl$auto(r1, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x470b01, 0x41) close_range$auto(0x2, 0x8, 0x0) pread64$auto(r0, 0x0, 0x8100000001, 0x700) 2.004805105s ago: executing program 2 (id=49): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/pcm0p/sub3/sw_params\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0xc, 0x1000) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r1, 0x921064a4, 0x1000000000000003) mmap$auto(0x0, 0x2000c, 0xfffffffffffffff8, 0x20eb5, 0x40000000000a5, 0x8000) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, 0x0, 0x100000a3d9) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-subdev0\x00', 0x200, 0x0) ioctl$auto(0x3, 0xc040564a, 0x38) writev$auto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x8}, 0x3) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r3) r5 = socket(0x9, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000015c0)={'wg1\x00', 0x0}) bpf$auto(0x0, &(0x7f0000001500)=@bpf_attr_1={r3, 0x7fff, @value=0x1e, 0x401}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="b5d9491cba5cc055e9702107984000a947f55ea1e48f2aca4d10e88fb2f5324e9a63fcf9cc1dd6a5d00d3eb3137d5f4b6bcfdbd44a101cbe0902102964a697940afe9af0c2fc45eb8eedef5c941c90ed3a0cc20eb23e44d8433c2e64d85e4c4c552ddf38ca199e4fe7620bc30fa63f2ad2081e2cade372705940f16d899a92f6f96517d93a2d89133db66c15299bc6dd11719366d30e5a00004e000000001ef7a49a2dfe1fed2023a5e9ac5a993b26f3337deaf1065f5832136fd1f09277c9512e47ab49c21d68725c11cf404e7c6f2248b3c85dfb6fcc79343d0396e4", @ANYRES16=r8, @ANYRESOCT=r1, @ANYRES32=r9, @ANYBLOB="08001400010100000500190001000000"], 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x20004000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'veth0_to_batadv\x00', 0x0}) msgget$auto(0xc, 0x77d9) msgrcv$auto(0x0, 0x0, 0xff9, 0x1, 0xb4) msgsnd$auto(0x0, &(0x7f0000000000)={0x1, 0x5}, 0x8, 0x9) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00', @ANYRES16=r4, @ANYRES32=r6, @ANYBLOB, @ANYRES32=r10, @ANYBLOB="0800030001000000"], 0x5c}, 0x1, 0x0, 0x0, 0xc005}, 0x1) 1.320422845s ago: executing program 2 (id=50): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) getsockopt$auto(r0, 0x0, 0xce, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3b) connect$auto(r1, &(0x7f0000000000)=@llc={0x1a, 0x306, 0x6, 0xa, 0x0, 0x5, @random="a8133ff153f7"}, 0x58) r2 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x40000a, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) fstat$auto(r2, &(0x7f0000000100)={0xf2, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x9, 0x4, 0xc7, 0x0, 0x7, 0x3, 0xfffffffffffffff7, 0x4, 0x100000001, 0x7d5}) msgctl$auto_IPC_STAT(0x7, 0x2, &(0x7f0000000200)={{0x3, 0xee00, 0xffffffffffffffff, 0x2, 0x6, 0x3ff, 0xdd38}, &(0x7f0000000040)=0x3c, &(0x7f00000001c0)=0x10, 0x8000, 0x6f4b, 0x4, 0x8000000000000000, 0x3, 0x39, 0xff, 0x1, @inferred, @raw=0x5}) r5 = waitid$auto(0x42, 0xffffffffffffffff, 0x0, 0x2, 0x0) r6 = geteuid() pidfd_send_signal$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, 0x2, &(0x7f0000000380)={@siginfo_0_0={0x4, 0xfffffffa, 0x0, @_kill={r5, r6}}}, 0x0) setresuid$auto(r3, r4, r6) close_range$auto(0x2, 0xffffffffffffffff, 0x8) r7 = socket(0x22, 0x3, 0x1) connect$auto(r7, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x200, 0x400008, 0x200, 0x9b72, 0xffffffffffffffff, 0x6) write$auto_proc_mem_operations_base(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) 997.636808ms ago: executing program 1 (id=51): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000004700), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_KEY_FLUSH(r0, &(0x7f0000004800)={0x0, 0x0, &(0x7f00000047c0)={&(0x7f0000004740)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 580.267419ms ago: executing program 1 (id=52): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/virtual/block/loop1/queue/wbt_lat_usec\x00', 0x2062, 0x0) write$auto(r2, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x9) ioctl$auto(r1, 0x400454ca, 0x38) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda1\x00', 0x80900, 0x0) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, 0x0, 0x20a01, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) r4 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs1\x00', 0x410800, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) io_uring_setup$auto(0x3501, &(0x7f0000000080)={0x80, 0x1000, 0x8, 0x5, 0x3, 0xfffffff1, r0, [0xbc, 0xffff, 0x40], {0x81, 0x9, 0x0, 0x80000000, 0x3, 0x101, 0xffff, 0x0, 0x6}, {0x7, 0xa, 0xf, 0x7fff, 0x3, 0x0, 0x0, 0xfffffffa, 0xc}}) ioctl$auto_BLKTRACETEARDOWN(r3, 0x1276, 0x0) mmap$auto(0xf134, 0x20009, 0xffffffff7fffffff, 0x18, r5, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) close_range$auto(r4, r1, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) mmap$auto(0x400000005, 0x2020009, 0x9, 0xeb1, r1, 0x8004) r7 = socket(0xa, 0x3, 0x3c) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x880, 0x0) ioctl$auto(r8, 0x5609, r7) madvise$auto(0x0, 0x20499d, 0x9) open_tree$auto(0xffffffffffffffff, 0x0, 0x74ee) ioctl$auto_NS_GET_PID_FROM_PIDNS(r5, 0x8004b706, &(0x7f0000000180)=0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xfffffffffffffe7f, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="000229bd0080fbdbdf350a0000000800fbffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x20000050}, 0x400c0) 189.775183ms ago: executing program 2 (id=53): close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0xa040, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) select$auto(0x8, &(0x7f0000000240)={[0x8, 0x8, 0x3, 0x4, 0xffffffffffff7fff, 0x8002, 0x4, 0x5, 0x8, 0x400000000034, 0x5, 0x0, 0x5, 0x5, 0x3, 0x5]}, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004040}, 0x4010) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0xc0000, 0x0) write$auto(0x3, 0x0, 0x100082) unshare$auto(0x4) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x309042, 0x0) 0s ago: executing program 0 (id=54): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x22, 0x3, 0x5) getsockopt$auto(r0, 0x107, 0x8, 0x0, 0x0) (async) getsockopt$auto(r0, 0x107, 0x8, 0x0, 0x0) close_range$auto(0x0, r0, 0x81005) (async) close_range$auto(0x0, r0, 0x81005) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x15, 0x5, 0x0) setsockopt$auto(0x3, 0x114, 0x7, 0x0, 0x4) (async) setsockopt$auto(0x3, 0x114, 0x7, 0x0, 0x4) pselect6$auto(0x1, 0x0, &(0x7f0000000240)={[0xf, 0x5e9, 0x8, 0x8e, 0xd, 0xfffffffffffff801, 0x2d44b40f, 0x831f, 0x4, 0xb911, 0x2, 0x81, 0x4, 0x6, 0x1, 0x5]}, 0x0, &(0x7f00000000c0)={0x4, 0x7}, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) poll$auto(&(0x7f0000000040)={0x3, 0x500, 0x5}, 0x5, 0x80000000) syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000380), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010027bd7000bbdbdf25040000000800080000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40011}, 0x200c804) mmap$auto(0x1, 0x40000a, 0xdc, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x1, 0x40000a, 0xdc, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x26, 0xa, 0x0) (async) socket(0x26, 0xa, 0x0) semctl$auto(0x201, 0xfffffffffffffffa, 0x3, 0x0) bind$auto(0x3, 0x0, 0x6b) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000002440)='/sys/kernel/tracing/tracing_on\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfffffdef) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 78.929676][ T5501] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.960236][ T5501] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.11' (ED25519) to the list of known hosts. syzkaller login: [ 102.405084][ T981] cfg80211: failed to load regulatory.db [ 106.804148][ T5822] cgroup: Unknown subsys name 'net' [ 107.016914][ T5822] cgroup: Unknown subsys name 'cpuset' [ 107.027402][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 109.073221][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 111.590997][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.604104][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.613068][ T5834] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.622679][ T5834] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.632031][ T5834] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.641495][ T5834] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.652504][ T5834] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.683279][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 111.712619][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 111.730808][ T5156] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.738724][ T5156] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 111.756666][ T5156] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 111.764806][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.773549][ T5156] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.773678][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 111.813436][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 111.821837][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 111.830551][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 111.842844][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 111.851401][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 112.450594][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 112.619899][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 112.641542][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 112.703969][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 112.797749][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.805635][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.814771][ T5833] bridge_slave_0: entered allmulticast mode [ 112.823561][ T5833] bridge_slave_0: entered promiscuous mode [ 112.834417][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.842004][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.850019][ T5833] bridge_slave_1: entered allmulticast mode [ 112.857837][ T5833] bridge_slave_1: entered promiscuous mode [ 112.991837][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.033601][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.042020][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.049859][ T5839] bridge_slave_0: entered allmulticast mode [ 113.057458][ T5839] bridge_slave_0: entered promiscuous mode [ 113.079460][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.090107][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.098069][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.106117][ T5836] bridge_slave_0: entered allmulticast mode [ 113.115537][ T5836] bridge_slave_0: entered promiscuous mode [ 113.125694][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.133870][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.141234][ T5839] bridge_slave_1: entered allmulticast mode [ 113.150557][ T5839] bridge_slave_1: entered promiscuous mode [ 113.201850][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.209637][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.217399][ T5836] bridge_slave_1: entered allmulticast mode [ 113.225899][ T5836] bridge_slave_1: entered promiscuous mode [ 113.312948][ T5833] team0: Port device team_slave_0 added [ 113.340677][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.356224][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.382790][ T5833] team0: Port device team_slave_1 added [ 113.389179][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.397267][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.405348][ T5843] bridge_slave_0: entered allmulticast mode [ 113.413804][ T5843] bridge_slave_0: entered promiscuous mode [ 113.425175][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.439073][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.480135][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.487755][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.495669][ T5843] bridge_slave_1: entered allmulticast mode [ 113.503934][ T5843] bridge_slave_1: entered promiscuous mode [ 113.595688][ T5836] team0: Port device team_slave_0 added [ 113.605911][ T5839] team0: Port device team_slave_0 added [ 113.615295][ T5836] team0: Port device team_slave_1 added [ 113.623047][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.630138][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.658777][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.690769][ T5839] team0: Port device team_slave_1 added [ 113.738619][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.745763][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.776241][ T5840] Bluetooth: hci0: command tx timeout [ 113.782264][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.805055][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.819934][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.848259][ T5840] Bluetooth: hci1: command tx timeout [ 113.854670][ T5838] Bluetooth: hci2: command tx timeout [ 113.922853][ T5840] Bluetooth: hci3: command tx timeout [ 113.934081][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.941367][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 113.968364][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.980801][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.988443][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.014837][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.057620][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.065070][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.091789][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.111822][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.119977][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.147198][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.166550][ T5833] hsr_slave_0: entered promiscuous mode [ 114.173781][ T5833] hsr_slave_1: entered promiscuous mode [ 114.186336][ T5843] team0: Port device team_slave_0 added [ 114.196190][ T5843] team0: Port device team_slave_1 added [ 114.294191][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.301577][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.332002][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.347469][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.355035][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.382871][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.400005][ T5839] hsr_slave_0: entered promiscuous mode [ 114.407690][ T5839] hsr_slave_1: entered promiscuous mode [ 114.414587][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.423119][ T5839] Cannot create hsr debugfs directory [ 114.557650][ T5836] hsr_slave_0: entered promiscuous mode [ 114.564580][ T5836] hsr_slave_1: entered promiscuous mode [ 114.571083][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.579415][ T5836] Cannot create hsr debugfs directory [ 114.709120][ T5843] hsr_slave_0: entered promiscuous mode [ 114.718083][ T5843] hsr_slave_1: entered promiscuous mode [ 114.724972][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 114.733508][ T5843] Cannot create hsr debugfs directory [ 115.162758][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 115.181454][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 115.195116][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 115.209337][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 115.313100][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 115.355618][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 115.376405][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 115.402594][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 115.507107][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 115.519527][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 115.538800][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 115.550459][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 115.678095][ T5836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.690926][ T5836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.706674][ T5836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.717951][ T5836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.821290][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.842868][ T5840] Bluetooth: hci0: command tx timeout [ 115.916874][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.924180][ T5840] Bluetooth: hci1: command tx timeout [ 115.924257][ T5840] Bluetooth: hci2: command tx timeout [ 115.940308][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.992425][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.000217][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.013776][ T5838] Bluetooth: hci3: command tx timeout [ 116.025222][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.050612][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.065850][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.073562][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.095406][ T775] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.103060][ T775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.136708][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.144293][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.217356][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.276546][ T775] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.284054][ T775] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.315609][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.323206][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.429719][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.547962][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.627466][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.634980][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.698002][ T3562] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.705997][ T3562] bridge0: port 2(bridge_slave_1) entered forwarding state [ 116.839545][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.065048][ T5843] veth0_vlan: entered promiscuous mode [ 117.091343][ T5843] veth1_vlan: entered promiscuous mode [ 117.188486][ T5843] veth0_macvtap: entered promiscuous mode [ 117.222262][ T5843] veth1_macvtap: entered promiscuous mode [ 117.247732][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.304944][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.376006][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.456274][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.467237][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.477109][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.485927][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.521596][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.560597][ T5833] veth0_vlan: entered promiscuous mode [ 117.595030][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.626632][ T5833] veth1_vlan: entered promiscuous mode [ 117.750648][ T775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.770509][ T775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.805163][ T5839] veth0_vlan: entered promiscuous mode [ 117.857288][ T5833] veth0_macvtap: entered promiscuous mode [ 117.879956][ T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.885734][ T5836] veth0_vlan: entered promiscuous mode [ 117.896848][ T5833] veth1_macvtap: entered promiscuous mode [ 117.898745][ T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.923095][ T5838] Bluetooth: hci0: command tx timeout [ 117.945266][ T5839] veth1_vlan: entered promiscuous mode [ 117.967074][ T5836] veth1_vlan: entered promiscuous mode [ 118.003147][ T5838] Bluetooth: hci2: command tx timeout [ 118.009122][ T5838] Bluetooth: hci1: command tx timeout [ 118.019059][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.059483][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.064945][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 118.085111][ T5838] Bluetooth: hci3: command tx timeout [ 118.086885][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.105212][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.115524][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.125623][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.184493][ T5839] veth0_macvtap: entered promiscuous mode [ 118.195452][ T5836] veth0_macvtap: entered promiscuous mode [ 118.238628][ T5836] veth1_macvtap: entered promiscuous mode [ 118.260964][ T5839] veth1_macvtap: entered promiscuous mode [ 118.364171][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.385100][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.411759][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.424799][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.436281][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.455973][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.477049][ T5836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.487941][ T5836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.497523][ T5836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.507755][ T5836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.582081][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.596757][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.606713][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.619980][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.669383][ T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.687063][ T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.878334][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.919410][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.066739][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.077627][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.222126][ T3562] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.237066][ T3562] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.349839][ T775] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.381020][ T775] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.439539][ T5930] Zero length message leads to an empty skb [ 119.571962][ T5932] sp0: Synchronizing with TNC [ 120.003012][ T5838] Bluetooth: hci0: command tx timeout [ 120.083055][ T5838] Bluetooth: hci1: command tx timeout [ 120.088858][ T5840] Bluetooth: hci2: command tx timeout [ 120.163292][ T5840] Bluetooth: hci3: command tx timeout [ 120.861820][ T5957] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.947906][ T5955] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.246414][ T5963] FAULT_INJECTION: forcing a failure. [ 121.246414][ T5963] name failslab, interval 1, probability 0, space 0, times 1 [ 121.328727][ T5963] CPU: 1 UID: 0 PID: 5963 Comm: syz.3.13 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 121.328772][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 121.328795][ T5963] Call Trace: [ 121.328810][ T5963] [ 121.328825][ T5963] dump_stack_lvl+0x16c/0x1f0 [ 121.328867][ T5963] should_fail_ex+0x512/0x640 [ 121.328922][ T5963] should_failslab+0xc2/0x120 [ 121.328957][ T5963] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 121.329010][ T5963] ? skb_clone+0x190/0x3f0 [ 121.329049][ T5963] skb_clone+0x190/0x3f0 [ 121.329083][ T5963] netlink_deliver_tap+0xabd/0xd30 [ 121.329131][ T5963] netlink_unicast+0x5df/0x7f0 [ 121.329176][ T5963] ? __pfx_netlink_unicast+0x10/0x10 [ 121.329211][ T5963] ? __build_skb_around+0x278/0x3b0 [ 121.329256][ T5963] ? is_vmalloc_addr+0x86/0xa0 [ 121.329316][ T5963] netlink_sendmsg+0x8d1/0xdd0 [ 121.329364][ T5963] ? __pfx_netlink_sendmsg+0x10/0x10 [ 121.329417][ T5963] ____sys_sendmsg+0xa95/0xc70 [ 121.329465][ T5963] ? __pfx_____sys_sendmsg+0x10/0x10 [ 121.329514][ T5963] ? __pfx__kstrtoull+0x10/0x10 [ 121.329563][ T5963] ___sys_sendmsg+0x134/0x1d0 [ 121.329598][ T5963] ? __pfx____sys_sendmsg+0x10/0x10 [ 121.329650][ T5963] ? find_held_lock+0x2b/0x80 [ 121.329709][ T5963] __sys_sendmmsg+0x200/0x420 [ 121.329747][ T5963] ? __pfx___sys_sendmmsg+0x10/0x10 [ 121.329795][ T5963] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 121.329847][ T5963] ? fput+0x70/0xf0 [ 121.329880][ T5963] ? ksys_write+0x1ac/0x250 [ 121.329945][ T5963] ? __pfx_ksys_write+0x10/0x10 [ 121.330013][ T5963] __x64_sys_sendmmsg+0x9c/0x100 [ 121.330045][ T5963] ? lockdep_hardirqs_on+0x7c/0x110 [ 121.330095][ T5963] do_syscall_64+0xcd/0x490 [ 121.330129][ T5963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.330163][ T5963] RIP: 0033:0x7f82c018e929 [ 121.330195][ T5963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 121.330225][ T5963] RSP: 002b:00007f82c0f83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 121.330257][ T5963] RAX: ffffffffffffffda RBX: 00007f82c03b5fa0 RCX: 00007f82c018e929 [ 121.330277][ T5963] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 121.330294][ T5963] RBP: 00007f82c0f83090 R08: 0000000000000000 R09: 0000000000000000 [ 121.330319][ T5963] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 121.330337][ T5963] R13: 0000000000000000 R14: 00007f82c03b5fa0 R15: 00007ffecc22ad48 [ 121.330378][ T5963] [ 121.822606][ T5963] netlink: 198 bytes leftover after parsing attributes in process `syz.3.13'. [ 122.258242][ T5988] CIFS: VFS: Invalid SecurityFlags: [ 123.364358][ T6007] FAULT_INJECTION: forcing a failure. [ 123.364358][ T6007] name failslab, interval 1, probability 0, space 0, times 0 [ 123.388086][ T6007] CPU: 1 UID: 0 PID: 6007 Comm: syz.2.25 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 123.388134][ T6007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.388154][ T6007] Call Trace: [ 123.388165][ T6007] [ 123.388178][ T6007] dump_stack_lvl+0x16c/0x1f0 [ 123.388216][ T6007] should_fail_ex+0x512/0x640 [ 123.388268][ T6007] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 123.388330][ T6007] should_failslab+0xc2/0x120 [ 123.388363][ T6007] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 123.388417][ T6007] ? __split_page_owner+0x23b/0x3b0 [ 123.388465][ T6007] ? snd_pcm_hw_rule_add+0x414/0x5a0 [ 123.388507][ T6007] krealloc_noprof+0x1fc/0x370 [ 123.388565][ T6007] snd_pcm_hw_rule_add+0x414/0x5a0 [ 123.388601][ T6007] ? __pfx_snd_pcm_hw_rule_format+0x10/0x10 [ 123.388647][ T6007] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 123.388684][ T6007] ? lockdep_init_map_type+0x5c/0x280 [ 123.388733][ T6007] ? debug_mutex_init+0x37/0x70 [ 123.388766][ T6007] ? snd_pcm_attach_substream+0x89d/0xd60 [ 123.388828][ T6007] snd_pcm_open_substream+0x534/0x17f0 [ 123.388882][ T6007] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 123.388952][ T6007] ? rcu_is_watching+0x12/0xc0 [ 123.388993][ T6007] snd_pcm_open+0x29e/0x730 [ 123.389044][ T6007] ? __pfx_snd_pcm_open+0x10/0x10 [ 123.389097][ T6007] ? __pfx_default_wake_function+0x10/0x10 [ 123.389142][ T6007] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 123.389188][ T6007] snd_pcm_playback_open+0x86/0xe0 [ 123.389232][ T6007] snd_open+0x201/0x450 [ 123.389266][ T6007] ? __pfx_snd_open+0x10/0x10 [ 123.389301][ T6007] chrdev_open+0x231/0x6a0 [ 123.389333][ T6007] ? __pfx_chrdev_open+0x10/0x10 [ 123.389366][ T6007] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 123.389421][ T6007] do_dentry_open+0x744/0x1c10 [ 123.389472][ T6007] ? __pfx_chrdev_open+0x10/0x10 [ 123.389512][ T6007] vfs_open+0x82/0x3f0 [ 123.389555][ T6007] path_openat+0x1de4/0x2cb0 [ 123.389620][ T6007] ? __pfx_path_openat+0x10/0x10 [ 123.389670][ T6007] ? __lock_acquire+0xb8a/0x1c90 [ 123.389719][ T6007] do_filp_open+0x20b/0x470 [ 123.389769][ T6007] ? __pfx_do_filp_open+0x10/0x10 [ 123.389850][ T6007] ? alloc_fd+0x471/0x7d0 [ 123.390022][ T6007] do_sys_openat2+0x11b/0x1d0 [ 123.390072][ T6007] ? __pfx_do_sys_openat2+0x10/0x10 [ 123.390145][ T6007] __x64_sys_openat+0x174/0x210 [ 123.390213][ T6007] ? __pfx___x64_sys_openat+0x10/0x10 [ 123.390280][ T6007] do_syscall_64+0xcd/0x490 [ 123.390319][ T6007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.390354][ T6007] RIP: 0033:0x7fa2ed98e929 [ 123.390381][ T6007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.390412][ T6007] RSP: 002b:00007fa2ee784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 123.390444][ T6007] RAX: ffffffffffffffda RBX: 00007fa2edbb5fa0 RCX: 00007fa2ed98e929 [ 123.390465][ T6007] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 123.390486][ T6007] RBP: 00007fa2eda10b39 R08: 0000000000000000 R09: 0000000000000000 [ 123.390505][ T6007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 123.390523][ T6007] R13: 0000000000000000 R14: 00007fa2edbb5fa0 R15: 00007ffe08596428 [ 123.390566][ T6007] [ 123.473754][ T6010] svc: failed to register nfsdv3 RPC service (errno 111). [ 123.673615][ T6016] CIFS: VFS: Invalid SecurityFlags: [ 123.685871][ T6018] FAULT_INJECTION: forcing a failure. [ 123.685871][ T6018] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 123.767501][ T6010] svc: failed to register nfsaclv3 RPC service (errno 111). [ 123.775338][ T6018] CPU: 0 UID: 0 PID: 6018 Comm: syz.3.29 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 123.775390][ T6018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.775410][ T6018] Call Trace: [ 123.775420][ T6018] [ 123.775430][ T6018] dump_stack_lvl+0x16c/0x1f0 [ 123.775465][ T6018] should_fail_ex+0x512/0x640 [ 123.775518][ T6018] _copy_to_user+0x32/0xd0 [ 123.775557][ T6018] simple_read_from_buffer+0xcb/0x170 [ 123.775603][ T6018] proc_fail_nth_read+0x197/0x270 [ 123.775643][ T6018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.775698][ T6018] ? rw_verify_area+0xcf/0x680 [ 123.775741][ T6018] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 123.775781][ T6018] vfs_read+0x1e4/0xc60 [ 123.775834][ T6018] ? __pfx___mutex_lock+0x10/0x10 [ 123.775878][ T6018] ? __pfx_vfs_read+0x10/0x10 [ 123.775939][ T6018] ? __fget_files+0x20e/0x3c0 [ 123.775984][ T6018] ? static_key_count+0x40/0x70 [ 123.776040][ T6018] ksys_read+0x12a/0x250 [ 123.776088][ T6018] ? __pfx_ksys_read+0x10/0x10 [ 123.776153][ T6018] do_syscall_64+0xcd/0x490 [ 123.776195][ T6018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.776232][ T6018] RIP: 0033:0x7f82c018d33c [ 123.776262][ T6018] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 123.776297][ T6018] RSP: 002b:00007f82c0f83030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 123.776330][ T6018] RAX: ffffffffffffffda RBX: 00007f82c03b5fa0 RCX: 00007f82c018d33c [ 123.776354][ T6018] RDX: 000000000000000f RSI: 00007f82c0f830a0 RDI: 0000000000000003 [ 123.776375][ T6018] RBP: 00007f82c0f83090 R08: 0000000000000000 R09: 0000000000000000 [ 123.776398][ T6018] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 123.776419][ T6018] R13: 0000000000000001 R14: 00007f82c03b5fa0 R15: 00007ffecc22ad48 [ 123.776464][ T6018] [ 124.050643][ T6020] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 124.160588][ T6025] FAULT_INJECTION: forcing a failure. [ 124.160588][ T6025] name failslab, interval 1, probability 0, space 0, times 0 [ 124.175478][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: syz.2.32 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 124.175523][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.175542][ T6025] Call Trace: [ 124.175553][ T6025] [ 124.175566][ T6025] dump_stack_lvl+0x16c/0x1f0 [ 124.175607][ T6025] should_fail_ex+0x512/0x640 [ 124.175661][ T6025] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 124.175717][ T6025] should_failslab+0xc2/0x120 [ 124.175773][ T6025] __kmalloc_cache_noprof+0x6a/0x3e0 [ 124.175821][ T6025] ? handle_policy_update+0xd0/0x1230 [ 124.175879][ T6025] handle_policy_update+0xd0/0x1230 [ 124.175941][ T6025] ? __pfx_handle_policy_update+0x10/0x10 [ 124.175993][ T6025] ? apparmor_capable+0x114/0x1d0 [ 124.176035][ T6025] ? bpf_lsm_capable+0x9/0x10 [ 124.176082][ T6025] ? security_capable+0x7e/0x260 [ 124.176126][ T6025] safesetid_uid_file_write+0x84/0xc0 [ 124.176180][ T6025] ? __pfx_safesetid_uid_file_write+0x10/0x10 [ 124.176231][ T6025] vfs_write+0x29d/0x1150 [ 124.176290][ T6025] ? __pfx___mutex_lock+0x10/0x10 [ 124.176327][ T6025] ? __pfx_vfs_write+0x10/0x10 [ 124.176394][ T6025] ? __fget_files+0x20e/0x3c0 [ 124.176460][ T6025] ksys_write+0x12a/0x250 [ 124.176511][ T6025] ? __pfx_ksys_write+0x10/0x10 [ 124.176579][ T6025] do_syscall_64+0xcd/0x490 [ 124.176618][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.176654][ T6025] RIP: 0033:0x7fa2ed98e929 [ 124.176682][ T6025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.176716][ T6025] RSP: 002b:00007fa2ee784038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 124.176748][ T6025] RAX: ffffffffffffffda RBX: 00007fa2edbb5fa0 RCX: 00007fa2ed98e929 [ 124.176779][ T6025] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 124.176798][ T6025] RBP: 00007fa2ee784090 R08: 0000000000000000 R09: 0000000000000000 [ 124.176817][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.176836][ T6025] R13: 0000000000000000 R14: 00007fa2edbb5fa0 R15: 00007ffe08596428 [ 124.176882][ T6025] [ 124.661955][ T6030] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 124.682540][ T6030] hsr0: entered allmulticast mode [ 124.687763][ T6030] hsr_slave_0: entered allmulticast mode [ 124.772070][ T6030] hsr_slave_1: entered allmulticast mode [ 124.996376][ T6041] Line length is too long: Should be less than 4094 [ 125.103216][ T6032] netlink: 186 bytes leftover after parsing attributes in process `syz.2.34'. [ 125.359689][ T5840] Bluetooth: hci1: Malformed LE Event: 0x1d [ 125.454663][ T6047] FAULT_INJECTION: forcing a failure. [ 125.454663][ T6047] name failslab, interval 1, probability 0, space 0, times 0 [ 125.491088][ T6047] CPU: 0 UID: 0 PID: 6047 Comm: syz.0.36 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 125.491129][ T6047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 125.491145][ T6047] Call Trace: [ 125.491154][ T6047] [ 125.491165][ T6047] dump_stack_lvl+0x16c/0x1f0 [ 125.491199][ T6047] should_fail_ex+0x512/0x640 [ 125.491244][ T6047] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 125.491288][ T6047] should_failslab+0xc2/0x120 [ 125.491317][ T6047] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 125.491361][ T6047] ? vm_area_dup+0x27/0x8d0 [ 125.491405][ T6047] vm_area_dup+0x27/0x8d0 [ 125.491448][ T6047] __split_vma+0x18e/0x1070 [ 125.491497][ T6047] ? __pfx___split_vma+0x10/0x10 [ 125.491554][ T6047] vms_gather_munmap_vmas+0x392/0x1310 [ 125.491608][ T6047] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 125.491658][ T6047] ? mas_walk+0x6a6/0x910 [ 125.491720][ T6047] __mmap_region+0x3c7/0x25e0 [ 125.491773][ T6047] ? __pfx___mmap_region+0x10/0x10 [ 125.491821][ T6047] ? rcu_is_watching+0x12/0xc0 [ 125.491859][ T6047] ? rcu_is_watching+0x12/0xc0 [ 125.491892][ T6047] ? trace_sched_exit_tp+0xde/0x130 [ 125.491931][ T6047] ? __schedule+0x1181/0x5de0 [ 125.492007][ T6047] ? __lock_acquire+0x622/0x1c90 [ 125.492055][ T6047] ? __pfx___schedule+0x10/0x10 [ 125.492154][ T6047] ? trace_cap_capable+0x18d/0x200 [ 125.492208][ T6047] mmap_region+0x1ab/0x3f0 [ 125.492236][ T6047] ? __get_unmapped_area+0x267/0x440 [ 125.492280][ T6047] do_mmap+0xa3e/0x1210 [ 125.492324][ T6047] ? __pfx_do_mmap+0x10/0x10 [ 125.492361][ T6047] ? __pfx_down_write_killable+0x10/0x10 [ 125.492407][ T6047] vm_mmap_pgoff+0x281/0x450 [ 125.492449][ T6047] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 125.492494][ T6047] ? __x64_sys_futex+0x1e0/0x4c0 [ 125.492533][ T6047] ? __x64_sys_futex+0x1e9/0x4c0 [ 125.492580][ T6047] ksys_mmap_pgoff+0x7d/0x5c0 [ 125.492618][ T6047] ? syscall_user_dispatch+0x78/0x140 [ 125.492677][ T6047] __x64_sys_mmap+0x125/0x190 [ 125.492729][ T6047] do_syscall_64+0xcd/0x490 [ 125.492766][ T6047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.492799][ T6047] RIP: 0033:0x7fafc958e929 [ 125.492824][ T6047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.492855][ T6047] RSP: 002b:00007fafca443038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 125.492885][ T6047] RAX: ffffffffffffffda RBX: 00007fafc97b6080 RCX: 00007fafc958e929 [ 125.492905][ T6047] RDX: 00000000000000df RSI: 0000000000000008 RDI: 0000000000000000 [ 125.492923][ T6047] RBP: 00007fafc9610b39 R08: 0000000000000002 R09: 0000000000008000 [ 125.492941][ T6047] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 125.492968][ T6047] R13: 0000000000000000 R14: 00007fafc97b6080 R15: 00007ffdbbaba528 [ 125.493010][ T6047] [ 126.005826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 126.182467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 126.447821][ T6058] FAULT_INJECTION: forcing a failure. [ 126.447821][ T6058] name failslab, interval 1, probability 0, space 0, times 0 [ 126.461490][ T6058] CPU: 1 UID: 0 PID: 6058 Comm: syz.3.39 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 126.461543][ T6058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 126.461565][ T6058] Call Trace: [ 126.461579][ T6058] [ 126.461593][ T6058] dump_stack_lvl+0x16c/0x1f0 [ 126.461634][ T6058] should_fail_ex+0x512/0x640 [ 126.461690][ T6058] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 126.461757][ T6058] should_failslab+0xc2/0x120 [ 126.461794][ T6058] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 126.461865][ T6058] ? kfree+0x24f/0x4d0 [ 126.461909][ T6058] ? snd_pcm_hw_rule_add+0x414/0x5a0 [ 126.461957][ T6058] krealloc_noprof+0x156/0x370 [ 126.462012][ T6058] ? krealloc_noprof+0x1b1/0x370 [ 126.462073][ T6058] snd_pcm_hw_rule_add+0x414/0x5a0 [ 126.462111][ T6058] ? __pfx_snd_pcm_hw_rule_muldivk+0x10/0x10 [ 126.462152][ T6058] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 126.462193][ T6058] ? __pfx_snd_pcm_hw_rule_add+0x10/0x10 [ 126.462232][ T6058] ? lockdep_init_map_type+0x5c/0x280 [ 126.462282][ T6058] ? debug_mutex_init+0x37/0x70 [ 126.462315][ T6058] ? snd_pcm_attach_substream+0x89d/0xd60 [ 126.462375][ T6058] snd_pcm_open_substream+0x92c/0x17f0 [ 126.462433][ T6058] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 126.462488][ T6058] ? rcu_is_watching+0x12/0xc0 [ 126.462528][ T6058] snd_pcm_open+0x29e/0x730 [ 126.462579][ T6058] ? __pfx_snd_pcm_open+0x10/0x10 [ 126.462640][ T6058] ? __pfx_default_wake_function+0x10/0x10 [ 126.462691][ T6058] ? __pfx_snd_pcm_playback_open+0x10/0x10 [ 126.462746][ T6058] snd_pcm_playback_open+0x86/0xe0 [ 126.462800][ T6058] snd_open+0x201/0x450 [ 126.462840][ T6058] ? __pfx_snd_open+0x10/0x10 [ 126.462887][ T6058] chrdev_open+0x231/0x6a0 [ 126.462918][ T6058] ? __pfx_apparmor_file_open+0x10/0x10 [ 126.462967][ T6058] ? __pfx_chrdev_open+0x10/0x10 [ 126.463004][ T6058] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 126.463065][ T6058] do_dentry_open+0x744/0x1c10 [ 126.463124][ T6058] ? __pfx_chrdev_open+0x10/0x10 [ 126.463167][ T6058] vfs_open+0x82/0x3f0 [ 126.463215][ T6058] path_openat+0x1de4/0x2cb0 [ 126.463284][ T6058] ? __pfx_path_openat+0x10/0x10 [ 126.463339][ T6058] ? __lock_acquire+0xb8a/0x1c90 [ 126.463393][ T6058] do_filp_open+0x20b/0x470 [ 126.463450][ T6058] ? __pfx_do_filp_open+0x10/0x10 [ 126.463538][ T6058] ? alloc_fd+0x471/0x7d0 [ 126.463604][ T6058] do_sys_openat2+0x11b/0x1d0 [ 126.463646][ T6058] ? __pfx_do_sys_openat2+0x10/0x10 [ 126.463708][ T6058] __x64_sys_openat+0x174/0x210 [ 126.463754][ T6058] ? __pfx___x64_sys_openat+0x10/0x10 [ 126.463818][ T6058] do_syscall_64+0xcd/0x490 [ 126.463876][ T6058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.463915][ T6058] RIP: 0033:0x7f82c018e929 [ 126.463946][ T6058] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.463981][ T6058] RSP: 002b:00007f82c0f83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 126.464015][ T6058] RAX: ffffffffffffffda RBX: 00007f82c03b5fa0 RCX: 00007f82c018e929 [ 126.464039][ T6058] RDX: 0000000000000080 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 126.464062][ T6058] RBP: 00007f82c0210b39 R08: 0000000000000000 R09: 0000000000000000 [ 126.464084][ T6058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.464105][ T6058] R13: 0000000000000000 R14: 00007f82c03b5fa0 R15: 00007ffecc22ad48 [ 126.464151][ T6058] [ 127.522576][ T6081] ecryptfs_miscdev_write: Invalid packet size [192] [ 127.584018][ T6081] syz.3.44 uses obsolete (PF_INET,SOCK_PACKET) [ 129.593967][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.662773][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.732666][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.884001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.892993][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.901576][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.910817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 129.920036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 130.595647][ T6120] [ 130.598068][ T6120] ====================================================== [ 130.605168][ T6120] WARNING: possible circular locking dependency detected [ 130.612677][ T6120] 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 Not tainted [ 130.619515][ T6120] ------------------------------------------------------ [ 130.626604][ T6120] syz.1.52/6120 is trying to acquire lock: [ 130.632480][ T6120] ffffffff8e52f5c8 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0xb4c/0x1470 [ 130.642400][ T6120] [ 130.642400][ T6120] but task is already holding lock: [ 130.649990][ T6120] ffff888141fc7608 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 130.661776][ T6120] [ 130.661776][ T6120] which lock already depends on the new lock. [ 130.661776][ T6120] [ 130.672323][ T6120] [ 130.672323][ T6120] the existing dependency chain (in reverse order) is: [ 130.681628][ T6120] [ 130.681628][ T6120] -> #2 (&q->q_usage_counter(io)#18){++++}-{0:0}: [ 130.690404][ T6120] blk_alloc_queue+0x619/0x760 [ 130.695768][ T6120] blk_mq_alloc_queue+0x175/0x290 [ 130.701385][ T6120] __blk_mq_alloc_disk+0x29/0x120 [ 130.707192][ T6120] loop_add+0x49e/0xb70 [ 130.712145][ T6120] loop_init+0x164/0x270 [ 130.717194][ T6120] do_one_initcall+0x120/0x6e0 [ 130.722533][ T6120] kernel_init_freeable+0x5c2/0x900 [ 130.728567][ T6120] kernel_init+0x1c/0x2b0 [ 130.733643][ T6120] ret_from_fork+0x5d7/0x6f0 [ 130.738808][ T6120] ret_from_fork_asm+0x1a/0x30 [ 130.744251][ T6120] [ 130.744251][ T6120] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 130.751811][ T6120] fs_reclaim_acquire+0x102/0x150 [ 130.757895][ T6120] prepare_alloc_pages+0x162/0x610 [ 130.763774][ T6120] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 130.770582][ T6120] __alloc_pages_noprof+0xb/0x1b0 [ 130.776192][ T6120] pcpu_populate_chunk+0x110/0xb00 [ 130.781906][ T6120] pcpu_alloc_noprof+0x86a/0x1470 [ 130.787589][ T6120] bpf_map_alloc_percpu+0x9a/0x4b0 [ 130.793474][ T6120] htab_map_alloc+0x10ca/0x1570 [ 130.799119][ T6120] map_create+0x58f/0x1db0 [ 130.804356][ T6120] __sys_bpf+0x47cc/0x4d80 [ 130.809438][ T6120] __x64_sys_bpf+0x78/0xc0 [ 130.814415][ T6120] do_syscall_64+0xcd/0x490 [ 130.819475][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.825986][ T6120] [ 130.825986][ T6120] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 130.833877][ T6120] __lock_acquire+0x126f/0x1c90 [ 130.839352][ T6120] lock_acquire+0x179/0x350 [ 130.844423][ T6120] __mutex_lock+0x199/0xb90 [ 130.849489][ T6120] pcpu_alloc_noprof+0xb4c/0x1470 [ 130.855097][ T6120] blk_stat_alloc_callback+0xc8/0x280 [ 130.861132][ T6120] wbt_init+0xac/0x540 [ 130.865772][ T6120] queue_wb_lat_store+0x354/0x3d0 [ 130.871528][ T6120] queue_attr_store+0x279/0x320 [ 130.876960][ T6120] sysfs_kf_write+0xf2/0x150 [ 130.882303][ T6120] kernfs_fop_write_iter+0x351/0x510 [ 130.888244][ T6120] vfs_write+0x6c7/0x1150 [ 130.893143][ T6120] ksys_write+0x12a/0x250 [ 130.898152][ T6120] do_syscall_64+0xcd/0x490 [ 130.903310][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.910716][ T6120] [ 130.910716][ T6120] other info that might help us debug this: [ 130.910716][ T6120] [ 130.921530][ T6120] Chain exists of: [ 130.921530][ T6120] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#18 [ 130.921530][ T6120] [ 130.936053][ T6120] Possible unsafe locking scenario: [ 130.936053][ T6120] [ 130.943887][ T6120] CPU0 CPU1 [ 130.949824][ T6120] ---- ---- [ 130.955278][ T6120] lock(&q->q_usage_counter(io)#18); [ 130.960863][ T6120] lock(fs_reclaim); [ 130.967590][ T6120] lock(&q->q_usage_counter(io)#18); [ 130.975910][ T6120] lock(pcpu_alloc_mutex); [ 130.980568][ T6120] [ 130.980568][ T6120] *** DEADLOCK *** [ 130.980568][ T6120] [ 130.989168][ T6120] 6 locks held by syz.1.52/6120: [ 130.994132][ T6120] #0: ffff888031b7b0b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 131.003359][ T6120] #1: ffff8880361ba428 (sb_writers#7){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 131.012421][ T6120] #2: ffff88805b614088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x28f/0x510 [ 131.022236][ T6120] #3: ffff888142393968 (kn->active#70){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x2b2/0x510 [ 131.032349][ T6120] #4: ffff888141fc7608 (&q->q_usage_counter(io)#18){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 131.044186][ T6120] #5: ffff888141fc7640 (&q->q_usage_counter(queue)#19){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 131.056452][ T6120] [ 131.056452][ T6120] stack backtrace: [ 131.062373][ T6120] CPU: 1 UID: 0 PID: 6120 Comm: syz.1.52 Not tainted 6.15.0-syzkaller-13655-gbdc7f8c5adad #0 PREEMPT(full) [ 131.062422][ T6120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 131.062439][ T6120] Call Trace: [ 131.062447][ T6120] [ 131.062457][ T6120] dump_stack_lvl+0x116/0x1f0 [ 131.062485][ T6120] print_circular_bug+0x275/0x350 [ 131.062521][ T6120] check_noncircular+0x14c/0x170 [ 131.062559][ T6120] __lock_acquire+0x126f/0x1c90 [ 131.062600][ T6120] lock_acquire+0x179/0x350 [ 131.062634][ T6120] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 131.062674][ T6120] ? __pfx___might_resched+0x10/0x10 [ 131.062701][ T6120] ? ksys_write+0x12a/0x250 [ 131.062739][ T6120] ? do_syscall_64+0xcd/0x490 [ 131.062764][ T6120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.062793][ T6120] __mutex_lock+0x199/0xb90 [ 131.062818][ T6120] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 131.062857][ T6120] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 131.062895][ T6120] ? __pfx___mutex_lock+0x10/0x10 [ 131.062930][ T6120] ? pcpu_alloc_noprof+0xb4c/0x1470 [ 131.062966][ T6120] pcpu_alloc_noprof+0xb4c/0x1470 [ 131.063010][ T6120] ? __pfx_wbt_data_dir+0x10/0x10 [ 131.063051][ T6120] ? __pfx_wb_timer_fn+0x10/0x10 [ 131.063077][ T6120] blk_stat_alloc_callback+0xc8/0x280 [ 131.063168][ T6120] ? kasan_save_track+0x14/0x30 [ 131.063211][ T6120] wbt_init+0xac/0x540 [ 131.063241][ T6120] queue_wb_lat_store+0x354/0x3d0 [ 131.063267][ T6120] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 131.063293][ T6120] ? __mutex_trylock_common+0xe9/0x250 [ 131.063330][ T6120] ? __pfx_queue_wb_lat_store+0x10/0x10 [ 131.063355][ T6120] queue_attr_store+0x279/0x320 [ 131.063381][ T6120] ? __pfx_queue_attr_store+0x10/0x10 [ 131.063404][ T6120] ? __lock_acquire+0x622/0x1c90 [ 131.063446][ T6120] ? find_held_lock+0x2b/0x80 [ 131.063470][ T6120] ? sysfs_file_kobj+0xe4/0x290 [ 131.063504][ T6120] ? __pfx_queue_attr_store+0x10/0x10 [ 131.063529][ T6120] sysfs_kf_write+0xf2/0x150 [ 131.063562][ T6120] kernfs_fop_write_iter+0x351/0x510 [ 131.063590][ T6120] ? __pfx_sysfs_kf_write+0x10/0x10 [ 131.063624][ T6120] vfs_write+0x6c7/0x1150 [ 131.063662][ T6120] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 131.063692][ T6120] ? __pfx___mutex_lock+0x10/0x10 [ 131.063717][ T6120] ? __pfx_vfs_write+0x10/0x10 [ 131.063765][ T6120] ksys_write+0x12a/0x250 [ 131.063804][ T6120] ? __pfx_ksys_write+0x10/0x10 [ 131.063847][ T6120] do_syscall_64+0xcd/0x490 [ 131.063873][ T6120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.063899][ T6120] RIP: 0033:0x7f123098e929 [ 131.063920][ T6120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.063946][ T6120] RSP: 002b:00007f12318c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 131.063970][ T6120] RAX: ffffffffffffffda RBX: 00007f1230bb6080 RCX: 00007f123098e929 [ 131.063988][ T6120] RDX: 0000000000000009 RSI: 00002000000001c0 RDI: 0000000000000005 [ 131.064004][ T6120] RBP: 00007f1230a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 131.064020][ T6120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.064036][ T6120] R13: 0000000000000000 R14: 00007f1230bb6080 R15: 00007fff0b8df158 [ 131.064061][ T6120] [ 131.064128][ C1] vkms_vblank_simulate: vblank timer overrun [ 131.391981][ C1] vkms_vblank_simulate: vblank timer overrun