last executing test programs: 7.936430009s ago: executing program 0 (id=138): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x68080, 0x0) (async) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/pagemap\x00', 0x68080, 0x0) connect$auto(r0, &(0x7f0000000080)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x54) (async) connect$auto(r0, &(0x7f0000000080)=@ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x54) mknod$auto(0x0, 0x1001, 0x4) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000140)="3318cb") write$auto(0x3, 0x0, 0x7fffffff) 7.182184078s ago: executing program 0 (id=143): timer_create$auto(0xfffffffc, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0x1b10, 0xffffffffffffffbf}, {0x9, 0x3}}, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x1000000000000001, 0x810004, 0x400, 0x8000000008011, 0x3, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x34000003, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x2, 0x7, 0x7, 0x16, r1, 0x10) ioctl$auto_RTC_RD_TIME(0xffffffffffffffff, 0x80247009, 0x0) socket(0x11, 0xa, 0x300) sendmmsg$auto(0x4, 0x0, 0x9a6, 0xa) close_range$auto(r0, 0x8, 0x8) unshare$auto(0x40000080) write$auto(0xffffffffffffffff, 0x0, 0x56ec) openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket(0xf, 0x3, 0x8) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f0000000180)=""/210, 0xd2) timerfd_settime$auto(0xffffffffffffffff, 0x6, &(0x7f0000000080)={{0x3, 0x4}, {0xc, 0x4}}, &(0x7f0000000100)={{0x3, 0x5}, {0x101, 0x8}}) socket(0xa, 0x2, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000001b40)='/dev/cuse\x00', 0x8640, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) preadv$auto(0x3, 0x0, 0x3, 0x2, 0x13) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x582, 0x0) 6.479834133s ago: executing program 0 (id=148): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/graphics/fbcon/rotate_all\x00', 0xa001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="00ffdbdf2501004b50060001baeee929bb1daf08ae7fd99490c4dd00040800"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4008000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth0/accept_ra_pinfo\x00', 0x2000, 0x0) openat$auto_nvmf_dev_fops_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x402001, 0x0) read$auto(r3, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) r4 = dup$auto(r0) mincore$auto(0x1000, 0xfffffffffffffffe, 0x0) ioctl$auto_USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000040)={0xfa, 0xd, 0x9, 0xbff, 0xfd6f, 0xff5, &(0x7f00000002c0)="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"}) 5.731253332s ago: executing program 0 (id=157): openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC0\x00', 0x0, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x5) madvise$auto(0x0, 0x2003f2, 0x15) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x1) madvise$auto(0x0, 0x200007, 0x19) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) mmap$auto(0x20000000000, 0x1000000020009, 0x40, 0xeb1, r2, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x4000000000009b72, 0x2, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_available_congestion_control\x00', 0x0, 0x0) bpf$auto(0x0, 0x0, 0x4f4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x1, 0x0) getsockopt$auto(r3, 0x0, 0x63, 0x0, &(0x7f00000000c0)=0x1e) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/class/devcoredump/disabled\x00', 0xe3102, 0x0) sendfile$auto(r4, r1, 0x0, 0x400) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/pagemap\x00', 0x201, 0x0) write$auto(r5, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0x10, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x4, 0x3f, 0x5, 0x2000000000948b, 0x3, 0x800295f4da0a, 0x2, 0x3, 0x62, 0x80000001, 0x50a7, 0x6d3f, 0x9, 0x3, 0xfffffffffffffffe]}, 0x0) 5.56838321s ago: executing program 1 (id=150): r0 = syz_open_procfs$namespace(0x0, 0x0) fcntl$auto(r0, 0x402, 0xffffffffffffffff) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) getpid() r1 = openat$auto_vhci_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000000), 0x8c80, 0x0) read$auto_vhci_fops_hci_vhci(r1, &(0x7f0000000100)=""/237, 0xed) mmap$auto(0x1, 0x2020009, 0x80000000, 0x9000000eb1, r1, 0xfffffffffffffffd) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x5, 0x6) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400005, 0x40df, 0x9b72, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) r3 = socket(0x2c, 0x3, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ram9\x00', 0x220081, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sysfs$auto(0x2, 0xf, 0x0) fsopen$auto(0x0, 0x7) fsconfig$auto(r2, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) getsockopt$auto_SO_DEBUG(r3, 0x4, 0x1, 0x0, 0x0) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x3, 0x3}, 0x18, 0x0) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, 0x0, 0x2140, 0x0) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f00000002c0), 0x8040, 0x0) r4 = epoll_create$auto(0x8) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) 5.247396981s ago: executing program 2 (id=151): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) socket(0x10, 0x2, 0x0) (async) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fb1\x00', 0x200100, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffc0000000}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r2, 0x400, 0x5, 0x25dfdbfd, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4890) (async) ioctl$auto_FBIOPAN_DISPLAY(r0, 0x4606, &(0x7f00000001c0)="ed92") (async) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c0001"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) (async) name_to_handle_at$auto(0xffffffffffffffff, &(0x7f00000000c0)='/\x00R\xa6\x00\xc8\xda\xdc\xb1\xb4#\xe4\xeb\xe1c_\x1b/\xb9L\xc6P\x82\xba\x90@\xb8\xb5\xb1\xe8\"\x88s\xdf\x15\xaa\x18\xa9\x86\xc7\x87g>8\xae\x99\xd4~\xc6\xa7\\\xcc\xfeV\x83\f\xdc\xdc~\x8e\xd5\x18\x13\x16\xc5\x93E\x10\xcb\x1c\x02\x00\xd2\xa4_\xa3\xdcS\xe2\xe2\xc6\x85p\xfa\xc3/G\x86\xea\x9f\xb0\x9a\xcc6\x1a\x06\x91\x9f\xcfC\xedU\x00f`\x02\x04\xef\xfe\x10\xec\x17\x83%K\x04\xd5s\x86\xe4\x9d\x15\f\x8c\xd9wj\xe5t\x82o7\xc05ul\xacU\xbf\xc0\xee\xb4\xd7\t\xe0s]\xcd\xac\x87\xa5\xa6.t\xa9\xe8\xa6>\xf2\xd0\xb1\x83\x83\x91\a\xdc\xe9\xaa\x1dx\x06\xa77\xd6\xe1\xe9\x94\xb9Xi\xbbv_\x9a_bv%\xcb\xc7\xdd\xa3\xb4\tpr%\xdf\xc9\x06\xa2\xe7\xe1\xde\x16\xf7\x03x\xf8\v\v\x1a\xfcm\x87r\xc1\b\xca\x97\xb0\xeb\xd6F\x8f^\x94\xdf\x9ax\xf4\x03e[l\xa5', &(0x7f0000000240)={0x81, 0x6, "c1b57301b9869adab1fdd6c995cff9eae7b39be1606e9cd8700875d4795a3db70e9ecfe6623d35bfeda2d7a5fc5728403e88a528bbd781a412be76a28e712d7036bc9b3ff2e2a292e0466d46c0f21fd755fa547193bc8e8ddd6dec206fd170cda4da3bd4dcff826699398f8f684d13f05f5e26732ef41d7a44f3e166724933b201"}, 0x0, 0x1001) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) (async, rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) (async, rerun: 32) r3 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000100), 0x2081, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x1}, 0x15a) r4 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0) write$auto_i2cdev_fops_i2c_dev(r4, &(0x7f0000000340)="b45713b6b660733d6f6e5152e22f246f261840482f474a9fda96bafee398876af640ada1b0009c8034a7978fa45b33f8f82cd19083991360d28fe72580c3971ada2b5f27e72d49871efc8441c2b81429b65f2597e83d1c14bd38d917b6f6dd78cdef4ccfa66d3d5249808b4d415f713fcf23135fecc6944f7794cfbaf54774b35386355a38275f7acdcb1742114f98cc418e8e131df46edcac63c3df68a81ee539b629042a232d600ed86d155ab471f953af00843e31be55be225087523457d8bbb2f4f92040dbcc73ea3aae398297122056c151200ced9c9d11682ca54e6c594c6e", 0xe2) (async, rerun: 32) r5 = ioctl$auto_TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000040)=0x101) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_DEL(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, r7, 0x401, 0x70bd29, 0x25dfdbfc, {}, [@TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @broadcast}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @empty}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x840) (async) sendmsg$auto_TCP_METRICS_CMD_DEL(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r7, 0x4, 0x70bd27, 0x25dfdbff, {}, [@TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @private2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) (async, rerun: 32) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) (rerun: 32) setreuid$auto(0x3, 0x7) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) setsockopt$auto(r8, 0x104000000000010e, 0x8, 0x0, 0x20003fe) (async) fcntl$auto_F_ADD_SEALS(r5, 0x409, 0x7) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.014592605s ago: executing program 2 (id=152): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event0\x00', 0x2c00, 0x0) ioctl$auto_EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x6, 0x80000000, 0x9}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x3, 0xfff, 0x9b72, 0xffffffffffffffff, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x840, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) madvise$auto(0x0, 0x3, 0x15) madvise$auto(0x108000, 0x800032, 0x4) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) madvise$auto(0x7fffffff, 0xfffffffffffffffa, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') socket(0x2, 0xa, 0xe) ioctl$auto(0x1, 0x890b, 0x8) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2d01, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) close_range$auto(0x2, 0x8, 0x0) 4.501104243s ago: executing program 1 (id=154): r0 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001380), 0xffffffffffffffff) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/misc/rdma_cm/abi_version\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000340)=""/4096, 0x1000) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x50, r3, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x3}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x1}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x4}, @NETDEV_A_PAGE_POOL_ID={0xc, 0x1, 0x73}]}, 0x50}, 0x1, 0x0, 0x0, 0x44048020}, 0x4000000) r4 = socket(0xa, 0x1, 0x0) setsockopt$auto(r4, 0x29, 0x3c, &(0x7f0000000080)='\x15!\xa8^J/\xddCx4!\x00\xd3\x8f\x1e\x1b\xc3 \xe2\xa8\xd6\xd9\xc0\xa2\x0f\x88\xb1e\x8a\xd8?\xfe\xda\xc4\xef\xff(i\xc6@\x91[\vBj\x0eQ\xce\x16\'C\x8cYA\x92u\xd5\xb8\\\x82,\xe2=y\x9bR\xbcn\xa0c\x16~\x86\"t\xde\x14\xe4\xa5\xfe\xb5', 0x110) r5 = openat$auto_ext4_dir_operations_ext4(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/virtual/bluetooth/hci4/power\x00', 0x20680, 0x0) r6 = prctl$auto_PR_SET_MM_BRK(0x5, 0x7, 0xffffffffffffffff, 0x40, 0x2) r7 = fcntl$auto_F_DUPFD(0xffffffffffffffff, 0x0, 0xffffffffffffffff) sendmsg$auto_CGROUPSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r2}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r4}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r5}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r6}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r7}]}, 0x44}}, 0x8000) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$auto_SO_TYPE(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000140)='/proc?consoles\x00', 0x2) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r10 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event0\x00', 0x3496c2, 0x0) r11 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r10, 0x8, 0x0) r12 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$auto_KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r12) ioctl$auto_KVM_GET_MSRS(r11, 0x4140aecd, &(0x7f0000000040)={0x7}) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(r2, &(0x7f0000001440)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)={0x40, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_MODULE_EEPROM_PAGE={0x5, 0x4, 0x8a}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x4}, @ETHTOOL_A_MODULE_EEPROM_BANK={0x5, 0x5, 0x46}, @ETHTOOL_A_MODULE_EEPROM_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x4000010) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000000020000", @ANYRES16=r9, @ANYBLOB="010729bd7000fddbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x400000000008003) r13 = socket(0x10, 0x2, 0xf) r14 = bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r13, 0xffffffff}, 0xd) bpf$auto(0x2, &(0x7f0000000080)=@iter_create={r14, 0x98}, 0x5) 4.177623395s ago: executing program 3 (id=155): mmap$auto(0x0, 0x9d90, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x6, 0x1ff) r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) sendfile$auto(r2, r2, 0x0, 0x71) bind$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x3, @broadcast}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x56) setsockopt$auto(r1, 0x8000000000000006, 0x19, 0x0, 0x7ffffc) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/tracing/tracing_on\x00', 0x2002, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vivid.0/video4linux/radio29/dev_debug\x00', 0x80002, 0x0) close_range$auto(r2, r0, 0xf4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010027bd7000fddb3b25996fa915c6000300", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4080) open(0x0, 0x22240, 0xd1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r7) 4.177267908s ago: executing program 1 (id=156): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000100)="0a1b9a2f5c7b0f8262cd0a", 0xb) (async) mmap$auto(0x3, 0x20009, 0x8000000000df, 0xfffffffd, 0x401, 0x6) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) r1 = socket(0x25, 0x3, 0x3b) (async, rerun: 32) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) (async, rerun: 32) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 32) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async, rerun: 32) pwrite64$auto(r1, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88\xa8s\x1c\b\x06\x8a>)\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) (rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x80302, 0x0) (async) preadv$auto(0x3, &(0x7f0000000040)={0x0, 0xffffffffffffffff}, 0x0, 0xf8, 0xffffefffffffffff) (async) mmap$auto(0x0, 0x7069, 0x8, 0x19, 0x401, 0x8ffd) (async) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, r2, 0x7) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) (async, rerun: 32) ioctl$auto(0x3, 0xae41, r3) (async, rerun: 32) ioctl$auto_KVM_CREATE_VM(r2, 0xae80, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xfffffeff, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x2, 0x83, 0x101, 0x17f, 0x2}, {0xff, 0x1, 0x52, 0x5, 0x1, 0x40, 0x4, 0x8, 0x100000004}}) (async, rerun: 64) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mremap$auto(0xffffffffffffffff, 0x7, 0x3fd6, 0x3, 0x200000) mremap$auto(0x1, 0x4, 0x3, 0x50a, 0x6) socket(0x2c, 0x1, 0x1) (async) clone$auto(0x80, 0x2, 0x0, 0x0, 0x8000000000000000) 3.819468777s ago: executing program 3 (id=158): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) socket(0x2, 0x2, 0x0) (async) r0 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x50) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x700, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) (async) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x801, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(0x3, 0xc1485544, 0xb551) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0xe8, 0x9, 0x2, 0x1, 0x5, 0x4, 0x15f4da0e, 0x8, 0x9, 0x100000000000000c, 0x8, 0x1, 0xfca, 0x9, 0x2, 0x4000000000000d]}, 0x0) pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00,\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t,\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) bind$auto(r0, &(0x7f0000000240)=@sco, 0xfffffffb) (async) bind$auto(r0, &(0x7f0000000240)=@sco, 0xfffffffb) getsockopt$auto_SO_RCVMARK(r2, 0x0, 0x4b, &(0x7f0000000000)='}\'.^\x00', &(0x7f00000000c0)=0x7) socket(0x2c, 0x1, 0x3) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video17\x00', 0x80800, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000000)=""/194, 0xc2) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) (async) select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x3, 0x1ffe000, 0xcad, 0x2, 0x9, 0xf, 0xa657, 0x202, 0xd3, 0x1]}, 0x0, 0x0, 0x0) sysinfo$auto(0x0) (async) sysinfo$auto(0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xfb3) (async) setsockopt$auto(0xffffffffffffffff, 0x6, 0x2, 0x0, 0xfb3) mmap$auto(0x0, 0x2, 0x5, 0xeb1, 0xffffffffffffffff, 0x0) setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000) ioctl$auto_NS_GET_OWNER_UID(r1, 0xb704, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) 3.503367898s ago: executing program 3 (id=159): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async, rerun: 32) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x40001, 0x0) fcntl$auto(0x3, 0x4, 0xa553) (async, rerun: 64) swapon$auto(0x0, 0x0) (async, rerun: 64) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim6/take_snapshot\x00', 0x210000, 0x0) mmap$auto(0x1, 0xe983, 0xdd, 0xeb1, r2, 0x8000) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x129102, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x24) close_range$auto(0x2, 0x8, 0x0) fremovexattr$auto(0xc8, &(0x7f00000001c0)=',%{}\x00') (async, rerun: 64) r3 = socketcall$auto(0x8000, 0x0) (async, rerun: 64) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x60980, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae60, 0x10000000000402) ioctl$auto(0x3, 0xae41, r3) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000005840), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r5, &(0x7f0000005900)={0x0, 0x0, &(0x7f00000058c0)={&(0x7f0000005880)={0x34, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xce}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8040) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto(0x3, 0xae41, r7) setgroups$auto(0xe32, 0x0) ioctl$auto_BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x7) 2.750179308s ago: executing program 1 (id=160): unlink$auto(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00') (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0xa, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x3) (async) mmap$auto(0x7a6e, 0xa, 0xdb, 0x12, 0x5, 0x21) (async) mmap$auto(0x0, 0x4000002020009, 0x9, 0xeb1, 0xfffffffffffffffa, 0x8004) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) open(&(0x7f0000000240)='./file0\x00', 0x171342, 0x181) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) (async) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x28, 0x80000, 0x0) (async, rerun: 32) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x55) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r0 = socket(0x1e, 0x5, 0x0) sendto$auto(r0, 0x0, 0x7ff, 0x2, &(0x7f0000000440)=@tipc=@id={0x1e, 0x3, 0x0, {0x4e24}}, 0x20) listen$auto(0x3, 0x81) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/bpq2/statistics/rx_missed_errors\x00', 0x48500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000010c0)=""/4090, 0xffa) socket(0x2, 0x1, 0x106) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/block/nbd11/hctx0/busy\x00', 0x60000, 0x0) (async) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 64) select$auto(0x9, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0xffffffffffffffff, 0x15f4da07, 0x6, 0x10, 0x64, 0x80000020, 0x1000, 0xb, 0x9, 0x4f4, 0x8]}, 0x0) (async, rerun: 64) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8000000000001fd, 0x20000000007, 0x1, 0xbc3, 0x800, 0x3, 0x2a, 0xc, 0x400000000003, 0x3, 0x0, 0xfffffffffffffffe, 0x6, 0x9, 0xffffffffffffff81, 0x4]}, 0x0) 2.712979553s ago: executing program 2 (id=161): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000040)='//\xf2\x00', 0x80000000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x8000000000000003, 0x40000000000eb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) unshare$auto(0x40000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2, 0x0) epoll_create$auto(0x8800001) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(r0, &(0x7f0000000440)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x80002, 0x73) connect$auto(0x3, 0x0, 0x54) open(&(0x7f0000000800)='./file1\x00', 0x163ac1, 0x82) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) sysfs$auto(0x2, 0x23, 0x0) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) 2.425202929s ago: executing program 0 (id=162): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) write$auto(0xffffffffffffffff, 0x0, 0x8000000000000001) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) getpid() openat$auto_drm_debugfs_entry_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x503083, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, 0x0, 0x40800) (async) unshare$auto(0x40000080) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="05082dbd7000fbdbdf257e0000000800db00ab29dc931f0e02b7745be74fb8e8255f614f85f94bc5ef8facda4b1cb3e135ef23203752a9a06f5adc02fe10fd6059eb5ec860fbb39453d7ba92bd5a73e0e45ce2d585cccf203901d41ed36536bffcadc5fa27dbe72d209b4c922ee03aba35fb65731b21d405c9def0a3765c9b0ff8fbbff63336633bec215ead541e5766cb7e6a546c58ddbc3cbd84697b73ae550f26f7eb", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4004044}, 0x8000) (async) sendmsg$auto_NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001280)={&(0x7f0000000140)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x4008012) (async) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) (async) ioctl$auto_MON_IOCX_MFETCH(r1, 0xc0109207, 0x0) (async, rerun: 32) mlockall$auto(0x7) (async, rerun: 32) mprotect$auto(0x0, 0x806121, 0x6) (async, rerun: 32) bpf$auto(0x5, &(0x7f0000000080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) (rerun: 32) 2.374783783s ago: executing program 3 (id=163): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="7d3f30bd7000fddbdf250b00000008000300", @ANYRES32=r2, @ANYBLOB="aabf92877d5e6d06284b89865b1b63d361de667f9a1dca5b6e567b066ea3ca2534ba0f20b7ee0ed5404d9fa3da3cfa9d36023e56cb8eb830bd8de1e9ceee8f"], 0x1c}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x100003b, 0x1, 0x4, 0x5, 0x7) (async) prctl$auto(0x100003b, 0x1, 0x4, 0x5, 0x7) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) set_mempolicy_home_node$auto(0x400000000000, 0x5, 0x1ff, 0x4) r3 = socket(0x21, 0x2, 0x9) connect$auto(r3, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) ioctl$auto(0xffffffffffffffff, 0x8, 0x1) (async) ioctl$auto(0xffffffffffffffff, 0x8, 0x1) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x84) (async) socket(0xa, 0x801, 0x84) setsockopt$auto(r3, 0x89, 0x2, 0x0, 0x4) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x40000000c07) close_range$auto(0x2, 0x8, 0x0) socket(0x3, 0xa, 0x8000002) (async) socket(0x3, 0xa, 0x8000002) madvise$auto(0xffffffffffffefff, 0x1, 0x17) (async) madvise$auto(0xffffffffffffefff, 0x1, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x7) 1.083344022s ago: executing program 2 (id=164): r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000005340), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(0xffffffffffffffff, &(0x7f00000054c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)={0x20, r0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x4}]}, 0x20}}, 0x20008804) 1.053560199s ago: executing program 1 (id=165): unshare$auto(0x4000007d) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0) (rerun: 32) socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) ioprio_set$auto_IOPRIO_WHO_PGRP(0x2, 0x0, 0x80) r1 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0x0, 0x240007, 0x19) (async) madvise$auto(0x0, 0x2003f2, 0x15) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x24048084) (async) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001080)=""/98, 0x62) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/fs/ext4/sda1/first_error_errcode\x00', 0x400, 0x0) (async) mmap$auto(0x0, 0x10005, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socket(0x2, 0x801, 0x100) ioctl$auto(0x3, 0x5411, 0x38) (async, rerun: 64) read$auto(r2, 0x0, 0x20) (async, rerun: 64) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) (async) capset$auto(0x0, &(0x7f0000000100)={0x1ff, 0xfff, 0x1000}) (async, rerun: 32) socket(0x2, 0x3, 0x104) (async, rerun: 32) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/net/dummy0/flags\x00', 0x2c62, 0x0) write$auto(r3, 0x0, 0x9) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 874.178428ms ago: executing program 2 (id=166): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x8000) (async) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) clock_nanosleep$auto(0xfffffff2, 0x5, 0x0, 0x0) (async) ioctl$auto_FICLONE(r0, 0x40049409, r0) (async) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mmap$auto(0x4, 0x40000a, 0x400000000df, 0x75, 0xffffffffffffffff, 0x8001) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$auto_NL802154_CMD_NEW_SEC_DEV(r0, 0x0, 0x20004800) arch_prctl$auto(0x3, 0x1) (async) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x8) setitimer$auto_ITIMER_VIRTUAL(0x1, 0x0, 0xffffffffffffffff) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec27\x00', 0x80200, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/002/001\x00', 0x29202, 0x0) (async) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x8f3b7a51b8106c60, 0x0) (async) statmount$auto(0x0, &(0x7f00000010c0)={0x4c247389, 0x3c8e, 0xc2, 0x7fffffff, 0x6, 0x0, 0x2d, 0x801, 0x1, 0x6, 0x200, 0xfffffff9, 0x0, 0x5, 0xfffffffffffffffe, 0x6986, 0x4, 0x0, 0x9, 0x0, 0x10000, 0x8, 0xe9, 0x6, 0xffff8400, 0x5c0, 0x75de, 0xfffffff9, 0x7ff0000, 0x7, 0x3ff, [0xfffffffffffffffe, 0x9, 0x4c0, 0x100000001, 0x7, 0x0, 0x5, 0xf91, 0xfff, 0xffffffffffffffff, 0x7fffffffffffffff, 0x8000000000000000, 0x0, 0xe, 0x8000000, 0x8, 0x3, 0x800, 0x7, 0x30df, 0x2f78c236, 0x8, 0x7, 0x1, 0xffffffffffffffff, 0x1, 0x2, 0x54d6, 0x1d76, 0xe3, 0xd, 0x400, 0x2, 0xb5c6, 0x80000000, 0xfffffffffffff801, 0x200, 0x7, 0x0, 0xf, 0x8cc6, 0x0, 0xf9f4], "c8b2e86e56fde682bf981f37c6b2259ff30f3139a29a949feb538baee3643b8000000082c97d8e56a8c7aa07b5f8147c30edfdcc6aa8a456472db85e38a35faa8c88523817bf93856fe63428c5018d8f20bd1eeee954156832096ebe4eecd983a158d45a9a3799add6fc876cba63bd00000000000048807096290fed7bb287578c878b657d9795580bb0045304a47592bd868775a3f50b06be3329c54b7057"}, 0x9, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(r2, 0x8, 0x0) (async) mmap$auto(0x8001, 0x20009, 0xfffffffffffffff7, 0x12, r0, 0x20008002) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/ieee80211/phy2/address_mask\x00', 0x88100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000000c0)=""/4096, 0x1000) set_mempolicy$auto(0x6, 0x0, 0x4) move_pages$auto(0x0, 0x1001, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 347.544682ms ago: executing program 3 (id=167): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x40, 0x0) (async, rerun: 32) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/037/001\x00', 0x2ab01, 0x0) (rerun: 32) ioctl$auto_USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, &(0x7f00000000c0)=0x7) (async) r2 = socket(0x28, 0x1, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x0) getsockopt$auto(r2, 0x0, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) ioctl$auto_USBDEVFS_IOCTL32(r1, 0xc00c5512, 0x0) (async) ioctl$auto_SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) 236.009792ms ago: executing program 0 (id=168): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/vidtv.0/i2c-0/delete_device\x00', 0x1, 0x0) openat$auto_debugfs_full_proxy_file_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/txpower\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x7, 0x0) close_range$auto(0x2, 0x8, 0x0) wait4$auto(0x0, 0x0, 0x2, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/fs/cifs/SecurityFlags\x00', 0x48041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) r0 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/dirty_writeback_centisecs\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x11, 0x3, 0x80000000) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x8) fcntl$auto_F_OFD_SETLKW(r0, 0x26, 0x2) r3 = io_uring_setup$auto(0x2, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyt2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) socketpair$auto(0x5b, 0x2, 0x420000, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) 26.12785ms ago: executing program 1 (id=169): unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D1\x00', 0x555101, 0x0) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, &(0x7f0000000500)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/mtd/mtd0/mtdblock0/queue/write_cache\x00', 0x182b02, 0x0) sendfile$auto(r2, r2, 0x0, 0xffc) socket(0x2c, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) madvise$auto(0xffffffffffffffff, 0x9, 0x1a) ioctl$auto_XFS_IOC_ALLOCSP(r1, 0x4030580a, &(0x7f0000000040)={0x3ff, 0x0, 0x2, 0x0, 0x8, 0x0}) get_robust_list$auto(r3, &(0x7f0000000380)=&(0x7f0000000300)={{&(0x7f0000000200)={&(0x7f00000001c0)}}, 0x6fc, &(0x7f00000002c0)={&(0x7f0000000240)}}, &(0x7f00000003c0)=0x4) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x1a}}, 0x24048084) socket(0x25, 0x1, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001080)=""/98, 0x62) madvise$auto(0x0, 0x200007, 0x19) close_range$auto(0x2, 0x8, 0x20) userfaultfd$auto(0x1) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video42\x00', 0xc0400, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) madvise$auto(0x3, 0x3, 0x31) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x13, 0x3, 0x80000000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x2f9c66f2970d57ba, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x4ab00, 0x0) 20.128756ms ago: executing program 3 (id=170): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x62, 0x0) write$auto(r0, &(0x7f00000002c0)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef`\xd8\x9c\xf7?:\x1a\xc62\x911e\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\b};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xff\x7f\xd0UV\x11\xcb\xdd\x81\xbe\xde\f/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7\x00\x85Z\x06?\x12\x98\x0f)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1;\xe4pd$\xd7\x1b\v\x82\r\f\xd0Hq\xd9\r\x88#\x89\x8d\xcd\x1e\x87N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8HR+\a\xb7R\t\n+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb\xc8^\xa4\xe2\x05\x91|\x123\xc3:\xfd\xee\x04a\xc8\x12\xce\xa2\x12\xcb\x8c\x87f\xebGQ\xe9\x96\xd5E\x13a\xb7\x057<&\xe0\x94\xa7\xfb\x9d;\xfa\xb1\x1b4a,\'\xb2Ym\xe1:\xbf\x8cs\x06\xa3u\x8d!\n\x80-\x9a\xbb;\xf4\xf3\xe1\x97\xfc8\xff\xa7\\\x8b\xf9\x95\x10$\xef\x1a #b\xfb\xfe\xe9\x06fK0\xdd\x84T,\xfa\xb5\x00\x83d\xbba\xd7\n\x92l\xdfAN\x9d\xcb\x96\xc7\xe8\xe6\x8bC\xeb\xc7EZ\xc8\x1a\x81nf\tZ-sZ\x13n\xec\xa9\xbf\xd0$\xb9\xd8\x00\x00\x00\x00\x00\x00\x00', 0x5) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x48402, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0) writev$auto(0xca, &(0x7f0000000500)={&(0x7f0000000800)="86d9b0bf291e5e5e8ec53c06000000fe69f6414866bfbe23c315161d44c858285ce900000000000000000000e4cbc079d847d343534f33cb11052d9a64e340584ac5a1a69922566dbe974278ee90575dd977215fb0fa0099144c0b0f61141ab10e39e14017d6b2704e27c54b2599842e214463ceb23217c464375466b80311f58e05c77ecd6c92aea5df645b0a84f51a5fb7b53914632059f161b818c25a8eca6c2025aff2f18730bf3e2830a22bfa37", 0x1}, 0x5) read$auto(r1, 0x0, 0x1f40) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team_slave_1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_net_shaper(&(0x7f00000005c0), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00'}) sendmsg$auto_NET_SHAPER_CMD_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40004}, 0x4051) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000540)={'virt_wifi0\x00'}) r5 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000780)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_SET_MESH(r6, &(0x7f0000000100)={0x0, 0x2e, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0028bd7000fbdbdf25917f00000800030000", @ANYRESHEX, @ANYRES8=r2], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x140080e4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'netpci0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'ip6gre0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'rose0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'xfrm0\x00'}) sendmsg$auto_ETHTOOL_MSG_MODULE_GET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f00000005c0)=ANY=[], 0x114}, 0x1, 0x0, 0x0, 0x24004004}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 0s ago: executing program 2 (id=171): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/netdevsim/netdevsim5/ports/0/pp_hold\x00', 0x183880, 0x0) close_range$auto(r0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf250400ff0f00000000000034e6de69a1509e3e2906366733"], 0x2c}, 0x1, 0x0, 0x0, 0x44048058}, 0x4000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x3, 0x6) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) gettid() rt_sigtimedwait$auto(&(0x7f0000000040)={0xfffffffffffffbff}, 0x0, 0x0, 0x8) read$auto(0x3, 0x0, 0x80) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop2\x00', 0x101080, 0x0) ioctl$auto_BLKSECTGET(r1, 0x1267, 0x20000000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0x9, &(0x7f00000000c0)={{0x400000000f, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) ioctl$auto(0x4000000000000c8, 0x400454d1, 0x6) close_range$auto(0x2, 0xa, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.236' (ED25519) to the list of known hosts. [ 81.718769][ T5812] cgroup: Unknown subsys name 'net' [ 81.870823][ T5812] cgroup: Unknown subsys name 'cpuset' [ 81.879816][ T5812] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.413970][ T5812] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.408661][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.417671][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.429703][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.439035][ T5831] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.440465][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.448853][ T5831] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.464009][ T5831] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.464919][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.474892][ T5831] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.481006][ T5837] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.492338][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.494279][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.502514][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.510218][ T5837] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.523926][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.532918][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.541050][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.543951][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.549759][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.557294][ T5831] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.128343][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 86.162249][ T5824] chnl_net:caif_netlink_parms(): no params data found [ 86.236041][ T5823] chnl_net:caif_netlink_parms(): no params data found [ 86.358677][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 86.438840][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.446819][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.454348][ T5825] bridge_slave_0: entered allmulticast mode [ 86.461735][ T5825] bridge_slave_0: entered promiscuous mode [ 86.481036][ T5824] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.488330][ T5824] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.495985][ T5824] bridge_slave_0: entered allmulticast mode [ 86.503300][ T5824] bridge_slave_0: entered promiscuous mode [ 86.521882][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.529379][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.537167][ T5825] bridge_slave_1: entered allmulticast mode [ 86.544375][ T5825] bridge_slave_1: entered promiscuous mode [ 86.562090][ T5824] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.569638][ T5824] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.577046][ T5824] bridge_slave_1: entered allmulticast mode [ 86.584452][ T5824] bridge_slave_1: entered promiscuous mode [ 86.609150][ T5823] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.616849][ T5823] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.624359][ T5823] bridge_slave_0: entered allmulticast mode [ 86.631671][ T5823] bridge_slave_0: entered promiscuous mode [ 86.664781][ T5823] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.672687][ T5823] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.680947][ T5823] bridge_slave_1: entered allmulticast mode [ 86.689279][ T5823] bridge_slave_1: entered promiscuous mode [ 86.717208][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.742404][ T5824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.757036][ T5824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.791165][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.844864][ T5823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.855479][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.863182][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.871284][ T5826] bridge_slave_0: entered allmulticast mode [ 86.879103][ T5826] bridge_slave_0: entered promiscuous mode [ 86.889847][ T5824] team0: Port device team_slave_0 added [ 86.898892][ T5824] team0: Port device team_slave_1 added [ 86.923591][ T5823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.933560][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.941340][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.948871][ T5826] bridge_slave_1: entered allmulticast mode [ 86.957347][ T5826] bridge_slave_1: entered promiscuous mode [ 87.003485][ T5825] team0: Port device team_slave_0 added [ 87.028380][ T5825] team0: Port device team_slave_1 added [ 87.072471][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.080851][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.108262][ T5824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.199194][ T5824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.207662][ T5824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.238104][ T5824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.252145][ T5823] team0: Port device team_slave_0 added [ 87.260303][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.268106][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.294431][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.309113][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.328941][ T5823] team0: Port device team_slave_1 added [ 87.336372][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.343734][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.370047][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.384348][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.422345][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.429455][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.457979][ T5823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.492972][ T5823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.500519][ T5823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.527072][ T5823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.546079][ T5831] Bluetooth: hci2: command tx timeout [ 87.554706][ T5826] team0: Port device team_slave_0 added [ 87.564245][ T5826] team0: Port device team_slave_1 added [ 87.625250][ T5831] Bluetooth: hci3: command tx timeout [ 87.625255][ T53] Bluetooth: hci0: command tx timeout [ 87.637811][ T5831] Bluetooth: hci1: command tx timeout [ 87.644759][ T5824] hsr_slave_0: entered promiscuous mode [ 87.651738][ T5824] hsr_slave_1: entered promiscuous mode [ 87.677477][ T5825] hsr_slave_0: entered promiscuous mode [ 87.684371][ T5825] hsr_slave_1: entered promiscuous mode [ 87.690916][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 87.697128][ T5825] Cannot create hsr debugfs directory [ 87.703737][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.710960][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.737724][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.751329][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.759319][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.787484][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.859783][ T5823] hsr_slave_0: entered promiscuous mode [ 87.866570][ T5823] hsr_slave_1: entered promiscuous mode [ 87.872930][ T5823] debugfs: 'hsr0' already exists in 'hsr' [ 87.878794][ T5823] Cannot create hsr debugfs directory [ 88.008417][ T5826] hsr_slave_0: entered promiscuous mode [ 88.016275][ T5826] hsr_slave_1: entered promiscuous mode [ 88.023195][ T5826] debugfs: 'hsr0' already exists in 'hsr' [ 88.030095][ T5826] Cannot create hsr debugfs directory [ 88.426323][ T5825] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.440841][ T5825] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.462576][ T5825] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.474801][ T5825] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.534466][ T5824] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.558145][ T5824] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.577885][ T5824] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.604568][ T5824] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.684872][ T5823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.696467][ T5823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.713956][ T5823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.725073][ T5823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.816049][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.831489][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.843364][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.861473][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.942651][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.040457][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.063408][ T5824] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.082105][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.089770][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.101297][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.109117][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.139589][ T5823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.199849][ T5823] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.212024][ T5824] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.234643][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.242275][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.264452][ T4523] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.271944][ T4523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.297585][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.305871][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.321865][ T4523] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.329254][ T4523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.400731][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.579759][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.626701][ T53] Bluetooth: hci2: command tx timeout [ 89.635707][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.642913][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.671148][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.678412][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.705816][ T53] Bluetooth: hci0: command tx timeout [ 89.706490][ T5834] Bluetooth: hci3: command tx timeout [ 89.718548][ T5831] Bluetooth: hci1: command tx timeout [ 89.791476][ T5826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.857901][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.109172][ T5823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.128207][ T5825] veth0_vlan: entered promiscuous mode [ 90.157500][ T5825] veth1_vlan: entered promiscuous mode [ 90.181549][ T5824] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.281301][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.294031][ T5823] veth0_vlan: entered promiscuous mode [ 90.318717][ T5823] veth1_vlan: entered promiscuous mode [ 90.339761][ T5825] veth0_macvtap: entered promiscuous mode [ 90.372671][ T5825] veth1_macvtap: entered promiscuous mode [ 90.393382][ T5824] veth0_vlan: entered promiscuous mode [ 90.450144][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.464512][ T5824] veth1_vlan: entered promiscuous mode [ 90.483764][ T5823] veth0_macvtap: entered promiscuous mode [ 90.497500][ T5823] veth1_macvtap: entered promiscuous mode [ 90.530326][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.549458][ T5826] veth0_vlan: entered promiscuous mode [ 90.577553][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.591846][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.610693][ T5826] veth1_vlan: entered promiscuous mode [ 90.620354][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.633925][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.660495][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.677006][ T5823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.695015][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.724788][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.738636][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.749647][ T5824] veth0_macvtap: entered promiscuous mode [ 90.769081][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.807271][ T5824] veth1_macvtap: entered promiscuous mode [ 90.887322][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.934641][ T5826] veth0_macvtap: entered promiscuous mode [ 90.950285][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.967247][ T5824] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.978168][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.019492][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.019877][ T5826] veth1_macvtap: entered promiscuous mode [ 91.032078][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.054284][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.066766][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.093217][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.107204][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.168758][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.180936][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.189514][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.273135][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.303575][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.327535][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.344158][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.356566][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.368192][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.390734][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.407029][ T5825] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.450084][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.463380][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.540974][ T4523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.567342][ T4523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.705404][ T5834] Bluetooth: hci2: command tx timeout [ 91.721084][ T4523] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.754108][ T4523] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.785805][ T5834] Bluetooth: hci3: command tx timeout [ 91.795214][ T5831] Bluetooth: hci1: command tx timeout [ 91.795358][ T53] Bluetooth: hci0: command tx timeout [ 91.860708][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.917070][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.031092][ T48] cfg80211: failed to load regulatory.db [ 92.363247][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 92.615752][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.689442][ T5935] openvswitch: netlink: Duplicate or invalid key (type 0). [ 92.736496][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.814692][ T5937] ubi0: attaching mtd0 [ 92.847735][ T5937] ubi0: scanning is finished [ 92.915850][ T5937] ubi0: empty MTD device detected [ 92.986480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 93.329449][ T5937] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 93.345383][ T5937] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 93.381952][ T5937] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 93.420662][ T5937] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 93.420835][ T5937] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 93.420860][ T5937] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 93.420884][ T5937] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3987735581 [ 93.420913][ T5937] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 93.423673][ T5946] ubi0: background thread "ubi_bgt0d" started, PID 5946 [ 93.455759][ T5939] ubi0: detaching mtd0 [ 93.473552][ T5939] ubi0: mtd0 is detached [ 93.686188][ T5952] netlink: 2468 bytes leftover after parsing attributes in process `syz.2.7'. [ 93.792133][ T53] Bluetooth: hci2: command tx timeout [ 93.866346][ T53] Bluetooth: hci0: command tx timeout [ 93.874786][ T5834] Bluetooth: hci3: command tx timeout [ 93.881432][ T5834] Bluetooth: hci1: command tx timeout [ 94.075555][ T5955] random: crng reseeded on system resumption [ 94.326480][ T5955] hub 1-0:1.0: USB hub found [ 94.333521][ T5957] syz.1.8 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 94.338466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.360853][ T5955] hub 1-0:1.0: 1 port detected [ 94.796618][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 94.808082][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 94.875645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.105816][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.460258][ T5974] FAULT_INJECTION: forcing a failure. [ 95.460258][ T5974] name failslab, interval 1, probability 0, space 0, times 1 [ 95.494546][ T5974] CPU: 1 UID: 0 PID: 5974 Comm: syz.2.12 Not tainted syzkaller #0 PREEMPT(full) [ 95.494578][ T5974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 95.494594][ T5974] Call Trace: [ 95.494600][ T5974] [ 95.494608][ T5974] dump_stack_lvl+0x100/0x190 [ 95.494637][ T5974] should_fail_ex.cold+0x5/0xa [ 95.494662][ T5974] should_failslab+0xc2/0x120 [ 95.494683][ T5974] __kmalloc_cache_noprof+0x80/0x810 [ 95.494699][ T5974] ? fib6_net_init+0x1dc/0xb20 [ 95.494722][ T5974] ? fib6_net_init+0x1dc/0xb20 [ 95.494741][ T5974] fib6_net_init+0x1dc/0xb20 [ 95.494762][ T5974] ? __pfx_fib6_net_init+0x10/0x10 [ 95.494782][ T5974] ops_init+0x1e2/0x5f0 [ 95.494807][ T5974] setup_net+0x118/0x3a0 [ 95.494829][ T5974] ? __pfx_setup_net+0x10/0x10 [ 95.494850][ T5974] ? lockdep_init_map_type+0x5c/0x250 [ 95.494870][ T5974] ? mutex_init_lockep+0x110/0x150 [ 95.494893][ T5974] copy_net_ns+0x46f/0x7c0 [ 95.494910][ T5974] create_new_namespaces+0x3ea/0xab0 [ 95.494931][ T5974] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 95.494949][ T5974] ksys_unshare+0x455/0xab0 [ 95.494970][ T5974] ? __pfx_ksys_unshare+0x10/0x10 [ 95.494990][ T5974] ? xfd_validate_state+0x129/0x190 [ 95.495018][ T5974] __x64_sys_unshare+0x31/0x40 [ 95.495038][ T5974] do_syscall_64+0xc9/0xf80 [ 95.495057][ T5974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.495072][ T5974] RIP: 0033:0x7f8b0a39acb9 [ 95.495107][ T5974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.495135][ T5974] RSP: 002b:00007f8b085f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 95.495160][ T5974] RAX: ffffffffffffffda RBX: 00007f8b0a615fa0 RCX: 00007f8b0a39acb9 [ 95.495176][ T5974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 95.495190][ T5974] RBP: 00007f8b0a408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 95.495205][ T5974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.495220][ T5974] R13: 00007f8b0a616038 R14: 00007f8b0a615fa0 R15: 00007ffd26cd9038 [ 95.495257][ T5974] [ 95.898983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.908128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.051115][ T5987] futex_wake_op: syz.1.13 tries to shift op by -2048; fix this program [ 96.076157][ T5987] futex_wake_op: syz.1.13 tries to shift op by -2048; fix this program [ 96.088436][ T5987] 0x000000000001-0x000000020000 : "" [ 96.161766][ T5987] ftl_cs: FTL header corrupt! [ 96.258803][ T5982] Zero length message leads to an empty skb [ 97.273696][ T6006] page: refcount:8 mapcount:0 mapping:0000000000000000 index:0xffff888078002200 pfn:0x78000 [ 97.359304][ T6006] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 97.453135][ T6006] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 97.540875][ T6006] raw: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 97.598111][ T6006] raw: ffff888078002200 0000000000000000 00000008ffffffff 0000000000000000 [ 97.683470][ T6006] head: 00fff00000000040 0000000000000000 dead000000000122 0000000000000000 [ 97.766525][ T6006] head: ffff888078002200 0000000000000000 00000008ffffffff 0000000000000000 [ 97.831108][ T6006] head: 00fff00000000003 ffffea0001e00001 00000000ffffffff 00000000ffffffff [ 97.927759][ T6006] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 98.015343][ T6006] page dumped because: unmovable page [ 98.056159][ T6006] page_owner tracks the page as allocated [ 98.132663][ T6006] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 15, tgid 15 (ksoftirqd/0), ts 85172349607, free_ts 65351352813 [ 98.293659][ T6006] post_alloc_hook+0x1e1/0x250 [ 98.333399][ T6006] get_page_from_freelist+0xe3d/0x2e10 [ 98.355636][ T6006] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 98.405456][ T6006] alloc_pages_mpol+0x1fb/0x550 [ 98.411705][ T6006] alloc_pages_noprof+0x131/0x390 [ 98.433047][ T6006] skb_page_frag_refill+0x365/0x5b0 [ 98.444225][ T6006] try_fill_recv+0x7f1/0x2950 [ 98.449510][ T6006] virtnet_poll+0x1502/0x3a70 [ 98.454965][ T6006] __napi_poll.constprop.0+0xaf/0x450 [ 98.460525][ T6006] net_rx_action+0xa40/0xf20 [ 98.465910][ T6006] handle_softirqs+0x1ea/0x910 [ 98.470842][ T6006] run_ksoftirqd+0x38/0x60 [ 98.475653][ T6006] smpboot_thread_fn+0x3d3/0xaa0 [ 98.481625][ T6006] kthread+0x3b3/0x730 [ 98.486010][ T6006] ret_from_fork+0x754/0xaf0 [ 98.495255][ T6006] ret_from_fork_asm+0x1a/0x30 [ 98.500621][ T6006] page last free pid 5647 tgid 5647 stack trace: [ 98.515247][ T6006] __free_frozen_pages+0x822/0x1130 [ 98.525494][ T6006] qlist_free_all+0x47/0xe0 [ 98.535221][ T6006] kasan_quarantine_reduce+0x1a0/0x1f0 [ 98.555341][ T6006] __kasan_slab_alloc+0x69/0x90 [ 98.560330][ T6006] __kmalloc_cache_noprof+0x2e1/0x810 [ 98.588362][ T6006] tomoyo_init_log+0xc4f/0x20c0 [ 98.608515][ T6006] tomoyo_supervisor+0x506/0x1340 [ 98.613592][ T6006] tomoyo_env_perm+0x191/0x200 [ 98.665680][ T6006] tomoyo_find_next_domain+0x13d7/0x2010 [ 98.702992][ T6006] tomoyo_bprm_check_security+0x12d/0x1d0 [ 98.735520][ T6006] security_bprm_check+0x87/0x1e0 [ 98.758245][ T6006] bprm_execve+0x84b/0x1620 [ 98.766907][ T6006] do_execveat_common.isra.0+0x4dc/0x5b0 [ 98.783746][ T6006] __x64_sys_execve+0x8e/0xb0 [ 98.808575][ T6006] do_syscall_64+0xc9/0xf80 [ 98.813331][ T6006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.686065][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.2.22'. [ 99.901625][ T6015] Bluetooth: hci3: unexpected event 0x23 length: 127 > 13 [ 100.088938][ T6042] process 'syz.2.22' launched './file0' with NULL argv: empty string added [ 100.239034][ T6039] bond0: (slave bond_slave_1): Releasing backup interface [ 100.274540][ T6042] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 102.597311][ T6080] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 104.137408][ T6103] mmap: syz.0.35 (6103) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 104.349072][ T6099] NFSD: Failed to start, no listeners configured. [ 107.071455][ T6157] netlink: 4 bytes leftover after parsing attributes in process `syz.1.46'. [ 107.285600][ T6154] FAULT_INJECTION: forcing a failure. [ 107.285600][ T6154] name failslab, interval 1, probability 0, space 0, times 0 [ 107.321968][ T6154] CPU: 0 UID: 0 PID: 6154 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT(full) [ 107.322022][ T6154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 107.322038][ T6154] Call Trace: [ 107.322047][ T6154] [ 107.322059][ T6154] dump_stack_lvl+0x100/0x190 [ 107.322101][ T6154] should_fail_ex.cold+0x5/0xa [ 107.322146][ T6154] should_failslab+0xc2/0x120 [ 107.322187][ T6154] __kmalloc_cache_noprof+0x80/0x810 [ 107.322215][ T6154] ? net_generic+0xea/0x2a0 [ 107.322250][ T6154] ? connmark_init_net+0x56/0x270 [ 107.322297][ T6154] ? connmark_init_net+0x56/0x270 [ 107.322327][ T6154] ? __pfx_connmark_init_net+0x10/0x10 [ 107.322346][ T6154] connmark_init_net+0x56/0x270 [ 107.322365][ T6154] ops_init+0x1e2/0x5f0 [ 107.322391][ T6154] setup_net+0x118/0x3a0 [ 107.322413][ T6154] ? __pfx_setup_net+0x10/0x10 [ 107.322433][ T6154] ? lockdep_init_map_type+0x5c/0x250 [ 107.322455][ T6154] ? mutex_init_lockep+0x110/0x150 [ 107.322481][ T6154] copy_net_ns+0x46f/0x7c0 [ 107.322497][ T6154] create_new_namespaces+0x3ea/0xab0 [ 107.322519][ T6154] unshare_nsproxy_namespaces+0xc3/0x1f0 [ 107.322537][ T6154] ksys_unshare+0x455/0xab0 [ 107.322559][ T6154] ? __pfx_ksys_unshare+0x10/0x10 [ 107.322579][ T6154] ? xfd_validate_state+0x129/0x190 [ 107.322607][ T6154] __x64_sys_unshare+0x31/0x40 [ 107.322627][ T6154] do_syscall_64+0xc9/0xf80 [ 107.322660][ T6154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.322687][ T6154] RIP: 0033:0x7fc47c19acb9 [ 107.322710][ T6154] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.322736][ T6154] RSP: 002b:00007fc47a3f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 107.322756][ T6154] RAX: ffffffffffffffda RBX: 00007fc47c415fa0 RCX: 00007fc47c19acb9 [ 107.322765][ T6154] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 107.322774][ T6154] RBP: 00007fc47c208bf7 R08: 0000000000000000 R09: 0000000000000000 [ 107.322782][ T6154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.322791][ T6154] R13: 00007fc47c416038 R14: 00007fc47c415fa0 R15: 00007ffcee9acd08 [ 107.322810][ T6154] [ 108.262117][ T6171] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 108.293828][ T6172] random: crng reseeded on system resumption [ 108.408009][ T6169] Restarting kernel threads ... [ 108.413910][ T6169] Done restarting kernel threads. [ 108.686071][ T6177] __vm_enough_memory: pid: 6177, comm: syz.0.51, bytes: 4398046511104 not enough memory for the allocation [ 109.754794][ T6185] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.421966][ T6204] netlink: 4 bytes leftover after parsing attributes in process `syz.3.57'. [ 110.639709][ T6207] MTRR 0 not used [ 113.035771][ T6228] random: crng reseeded on system resumption [ 115.878697][ T6283] kexec: Could not allocate control_code_buffer [ 118.632135][ T6328] syz.1.79 (6328) used greatest stack depth: 19688 bytes left [ 118.965773][ T6360] __vm_enough_memory: pid: 6360, comm: syz.3.84, bytes: 4398046511104 not enough memory for the allocation [ 119.237670][ T6368] busy [ 120.147446][ T6376] netlink: 334 bytes leftover after parsing attributes in process `syz.2.88'. [ 120.192164][ T6376] FAULT_INJECTION: forcing a failure. [ 120.192164][ T6376] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 120.260024][ T6376] CPU: 1 UID: 0 PID: 6376 Comm: syz.2.88 Not tainted syzkaller #0 PREEMPT(full) [ 120.260066][ T6376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 120.260082][ T6376] Call Trace: [ 120.260091][ T6376] [ 120.260101][ T6376] dump_stack_lvl+0x100/0x190 [ 120.260152][ T6376] should_fail_ex.cold+0x5/0xa [ 120.260192][ T6376] ? prepare_alloc_pages+0x16d/0x5f0 [ 120.260243][ T6376] should_fail_alloc_page+0xeb/0x140 [ 120.260285][ T6376] prepare_alloc_pages+0x1f0/0x5f0 [ 120.260332][ T6376] __alloc_frozen_pages_noprof+0x193/0x2410 [ 120.260373][ T6376] ? kasan_save_stack+0x3f/0x50 [ 120.260403][ T6376] ? kasan_save_stack+0x30/0x50 [ 120.260448][ T6376] ? kasan_save_track+0x14/0x30 [ 120.260477][ T6376] ? __kasan_kmalloc+0xaa/0xb0 [ 120.260505][ T6376] ? fuse_dev_alloc+0x8e/0x280 [ 120.260534][ T6376] ? fuse_dev_alloc_install+0x13/0x40 [ 120.260564][ T6376] ? cuse_channel_open+0x100/0x7f0 [ 120.260591][ T6376] ? misc_open+0x26d/0x450 [ 120.260620][ T6376] ? chrdev_open+0x234/0x6a0 [ 120.260653][ T6376] ? do_dentry_open+0x73e/0x1570 [ 120.260682][ T6376] ? vfs_open+0x82/0x3f0 [ 120.260714][ T6376] ? look_up_lock_class+0x55/0x120 [ 120.260744][ T6376] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 120.260785][ T6376] ? __lock_acquire+0x4a5/0x2630 [ 120.260825][ T6376] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 120.260855][ T6376] ? policy_nodemask+0xed/0x4f0 [ 120.260894][ T6376] alloc_pages_mpol+0x1fb/0x550 [ 120.260951][ T6376] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 120.260991][ T6376] ? find_held_lock+0x2b/0x80 [ 120.261016][ T6376] ? fuse_dev_alloc_install+0x2b/0x40 [ 120.261051][ T6376] ? fuse_dev_alloc_install+0x2b/0x40 [ 120.261092][ T6376] folio_alloc_noprof+0x22/0x330 [ 120.261135][ T6376] cuse_channel_open+0x198/0x7f0 [ 120.261164][ T6376] ? __pfx_cuse_channel_open+0x10/0x10 [ 120.261194][ T6376] misc_open+0x26d/0x450 [ 120.261229][ T6376] ? __pfx_misc_open+0x10/0x10 [ 120.261257][ T6376] chrdev_open+0x234/0x6a0 [ 120.261287][ T6376] ? __pfx_apparmor_file_open+0x10/0x10 [ 120.261322][ T6376] ? __pfx_chrdev_open+0x10/0x10 [ 120.261354][ T6376] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 120.261390][ T6376] do_dentry_open+0x73e/0x1570 [ 120.261419][ T6376] ? __pfx_chrdev_open+0x10/0x10 [ 120.261452][ T6376] ? security_inode_permission+0xbf/0x250 [ 120.261497][ T6376] vfs_open+0x82/0x3f0 [ 120.261537][ T6376] path_openat+0x21dc/0x3120 [ 120.261578][ T6376] ? __pfx_path_openat+0x10/0x10 [ 120.261619][ T6376] do_filp_open+0x1f7/0x420 [ 120.261651][ T6376] ? __pfx_do_filp_open+0x10/0x10 [ 120.261703][ T6376] ? _raw_spin_unlock+0x28/0x50 [ 120.261728][ T6376] ? alloc_fd+0x476/0x790 [ 120.261765][ T6376] do_sys_openat2+0x12e/0x220 [ 120.261803][ T6376] ? __pfx_do_sys_openat2+0x10/0x10 [ 120.261842][ T6376] ? find_held_lock+0x2b/0x80 [ 120.261874][ T6376] __x64_sys_openat+0x12d/0x210 [ 120.261913][ T6376] ? __pfx___x64_sys_openat+0x10/0x10 [ 120.261950][ T6376] ? xfd_validate_state+0x129/0x190 [ 120.262002][ T6376] do_syscall_64+0xc9/0xf80 [ 120.262035][ T6376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 120.262063][ T6376] RIP: 0033:0x7f8b0a39acb9 [ 120.262093][ T6376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.262120][ T6376] RSP: 002b:00007f8b085f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 120.262146][ T6376] RAX: ffffffffffffffda RBX: 00007f8b0a615fa0 RCX: 00007f8b0a39acb9 [ 120.262165][ T6376] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 120.262181][ T6376] RBP: 00007f8b0a408bf7 R08: 0000000000000000 R09: 0000000000000000 [ 120.262198][ T6376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 120.262218][ T6376] R13: 00007f8b0a616038 R14: 00007f8b0a615fa0 R15: 00007ffd26cd9038 [ 120.262252][ T6376] [ 122.155504][ T6404] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 123.965239][ T6432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.976018][ T6432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.387571][ T6461] block2mtd: error: cannot open device çinX‘©¼Ëò¨±ÂÚjFBçB>U»;߸³Ilk¬ [ 125.427716][ T6463] Console: switching to colour VGA+ 80x25 [ 125.819781][ T6465] zswap: compressor û not available [ 125.838630][ T6475] Setting dangerous option i915.mitigations - tainting kernel [ 126.058904][ T6477] mkiss: ax0: crc mode is auto. [ 126.658717][ T6492] binder: 6484:6492 ioctl 4018620d ffffffffffffffff returned -22 [ 126.827698][ T6495] input: f¬ as /devices/virtual/input/input5 [ 126.985478][ T6498] zram: Removed device: zram0 [ 127.017708][ T6497] FAULT_INJECTION: forcing a failure. [ 127.017708][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 127.035829][ T6497] CPU: 1 UID: 0 PID: 6497 Comm: syz.1.114 Tainted: G U syzkaller #0 PREEMPT(full) [ 127.035873][ T6497] Tainted: [U]=USER [ 127.035882][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 127.035895][ T6497] Call Trace: [ 127.035902][ T6497] [ 127.035909][ T6497] dump_stack_lvl+0x100/0x190 [ 127.035936][ T6497] should_fail_ex.cold+0x5/0xa [ 127.035961][ T6497] should_failslab+0xc2/0x120 [ 127.035982][ T6497] ? sk_prot_alloc+0x10b/0x2a0 [ 127.035998][ T6497] __kmalloc_noprof+0xf6/0x9c0 [ 127.036019][ T6497] ? sk_prot_alloc+0x10b/0x2a0 [ 127.036032][ T6497] ? __wake_up+0x3f/0x60 [ 127.036049][ T6497] sk_prot_alloc+0x10b/0x2a0 [ 127.036065][ T6497] sk_alloc+0x36/0xe80 [ 127.036086][ T6497] __netlink_create+0x5e/0x2c0 [ 127.036105][ T6497] ? __wake_up+0x3f/0x60 [ 127.036122][ T6497] netlink_create+0x293/0x610 [ 127.036142][ T6497] ? __pfx_genl_bind+0x10/0x10 [ 127.036155][ T6497] ? __pfx_genl_unbind+0x10/0x10 [ 127.036167][ T6497] ? __pfx_genl_release+0x10/0x10 [ 127.036195][ T6497] __sock_create+0x339/0x860 [ 127.036217][ T6497] __sys_socket+0x14d/0x260 [ 127.036232][ T6497] ? fput+0x79/0x100 [ 127.036252][ T6497] ? __pfx___sys_socket+0x10/0x10 [ 127.036267][ T6497] ? xfd_validate_state+0x129/0x190 [ 127.036296][ T6497] __x64_sys_socket+0x72/0xb0 [ 127.036312][ T6497] ? lockdep_hardirqs_on+0x78/0x100 [ 127.036331][ T6497] do_syscall_64+0xc9/0xf80 [ 127.036350][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.036366][ T6497] RIP: 0033:0x7fc75599acb9 [ 127.036383][ T6497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.036398][ T6497] RSP: 002b:00007fc756802028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 127.036413][ T6497] RAX: ffffffffffffffda RBX: 00007fc755c15fa0 RCX: 00007fc75599acb9 [ 127.036423][ T6497] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 127.036432][ T6497] RBP: 00007fc755a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 127.036440][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.036448][ T6497] R13: 00007fc755c16038 R14: 00007fc755c15fa0 R15: 00007fff0086ee78 [ 127.036467][ T6497] [ 129.669161][ T6546] bonding: no command found in bonding_masters - use +ifname or -ifname [ 130.459898][ T6558] netlink: 334 bytes leftover after parsing attributes in process `syz.1.126'. [ 130.521829][ T6559] FAULT_INJECTION: forcing a failure. [ 130.521829][ T6559] name failslab, interval 1, probability 0, space 0, times 0 [ 130.535518][ T6559] CPU: 1 UID: 0 PID: 6559 Comm: syz.1.126 Tainted: G U syzkaller #0 PREEMPT(full) [ 130.535566][ T6559] Tainted: [U]=USER [ 130.535575][ T6559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 130.535591][ T6559] Call Trace: [ 130.535600][ T6559] [ 130.535610][ T6559] dump_stack_lvl+0x100/0x190 [ 130.535651][ T6559] should_fail_ex.cold+0x5/0xa [ 130.535701][ T6559] should_failslab+0xc2/0x120 [ 130.535740][ T6559] ? tomoyo_encode2+0xfb/0x3c0 [ 130.535767][ T6559] __kmalloc_noprof+0xf6/0x9c0 [ 130.535807][ T6559] ? tomoyo_encode2+0xfb/0x3c0 [ 130.535832][ T6559] tomoyo_encode2+0xfb/0x3c0 [ 130.535866][ T6559] tomoyo_encode+0x29/0x50 [ 130.535891][ T6559] tomoyo_realpath_from_path+0x18c/0x690 [ 130.535928][ T6559] tomoyo_check_open_permission+0x2af/0x3c0 [ 130.535972][ T6559] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 130.536078][ T6559] ? do_raw_spin_lock+0x128/0x260 [ 130.536138][ T6559] ? path_get+0x61/0x80 [ 130.536180][ T6559] tomoyo_file_open+0x6b/0x90 [ 130.536222][ T6559] security_file_open+0xb5/0x1e0 [ 130.536249][ T6559] do_dentry_open+0x58c/0x1570 [ 130.536285][ T6559] ? security_inode_permission+0xbf/0x250 [ 130.536332][ T6559] vfs_open+0x82/0x3f0 [ 130.536384][ T6559] path_openat+0x21dc/0x3120 [ 130.536438][ T6559] ? __pfx_path_openat+0x10/0x10 [ 130.536486][ T6559] do_filp_open+0x1f7/0x420 [ 130.536523][ T6559] ? __pfx_do_filp_open+0x10/0x10 [ 130.536589][ T6559] ? _raw_spin_unlock+0x28/0x50 [ 130.536619][ T6559] ? alloc_fd+0x476/0x790 [ 130.536663][ T6559] do_sys_openat2+0x12e/0x220 [ 130.536706][ T6559] ? __pfx_do_sys_openat2+0x10/0x10 [ 130.536750][ T6559] ? find_held_lock+0x2b/0x80 [ 130.536787][ T6559] __x64_sys_openat+0x12d/0x210 [ 130.536829][ T6559] ? __pfx___x64_sys_openat+0x10/0x10 [ 130.536870][ T6559] ? xfd_validate_state+0x129/0x190 [ 130.536927][ T6559] do_syscall_64+0xc9/0xf80 [ 130.536963][ T6559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.536992][ T6559] RIP: 0033:0x7fc75599acb9 [ 130.537015][ T6559] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.537042][ T6559] RSP: 002b:00007fc7567e1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 130.537074][ T6559] RAX: ffffffffffffffda RBX: 00007fc755c16090 RCX: 00007fc75599acb9 [ 130.537093][ T6559] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 130.537112][ T6559] RBP: 00007fc755a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 130.537130][ T6559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.537147][ T6559] R13: 00007fc755c16128 R14: 00007fc755c16090 R15: 00007fff0086ee78 [ 130.537186][ T6559] [ 130.537217][ T6559] ERROR: Out of memory at tomoyo_realpath_from_path. [ 131.762286][ T6589] netlink: 28 bytes leftover after parsing attributes in process `syz.3.132'. [ 131.865646][ T6590] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 131.955809][ T6589] team0: Port device team_slave_1 removed [ 132.426665][ T6597] binder: BINDER_SET_CONTEXT_MGR already set [ 132.454180][ T6597] binder: 6595:6597 ioctl 4018620d 9 returned -16 [ 133.338261][ T6619] FAULT_INJECTION: forcing a failure. [ 133.338261][ T6619] name failslab, interval 1, probability 0, space 0, times 0 [ 133.379030][ T6619] CPU: 1 UID: 0 PID: 6619 Comm: syz.1.140 Tainted: G U syzkaller #0 PREEMPT(full) [ 133.379076][ T6619] Tainted: [U]=USER [ 133.379086][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 133.379102][ T6619] Call Trace: [ 133.379111][ T6619] [ 133.379122][ T6619] dump_stack_lvl+0x100/0x190 [ 133.379162][ T6619] should_fail_ex.cold+0x5/0xa [ 133.379209][ T6619] should_failslab+0xc2/0x120 [ 133.379248][ T6619] __kmalloc_cache_noprof+0x80/0x810 [ 133.379278][ T6619] ? refill_pi_state_cache+0x91/0x260 [ 133.379321][ T6619] ? __pfx___resched_curr+0x10/0x10 [ 133.379351][ T6619] ? refill_pi_state_cache+0x91/0x260 [ 133.379388][ T6619] refill_pi_state_cache+0x91/0x260 [ 133.379429][ T6619] futex_lock_pi+0x177/0x7b0 [ 133.379465][ T6619] ? __pfx___resched_curr+0x10/0x10 [ 133.379489][ T6619] ? preempt_schedule_thunk+0x16/0x30 [ 133.379513][ T6619] ? __pfx_futex_lock_pi+0x10/0x10 [ 133.379552][ T6619] ? preempt_schedule_common+0x42/0xc0 [ 133.379586][ T6619] ? preempt_schedule_thunk+0x16/0x30 [ 133.379624][ T6619] ? __pfx_try_to_wake_up+0x10/0x10 [ 133.379660][ T6619] ? futex_private_hash_put+0x107/0x1c0 [ 133.379696][ T6619] ? __pfx_futex_wake_mark+0x10/0x10 [ 133.379747][ T6619] ? __might_fault+0x111/0x140 [ 133.379779][ T6619] ? do_vfs_ioctl+0x226/0x13e0 [ 133.379849][ T6619] do_futex+0x18a/0x350 [ 133.379897][ T6619] ? __pfx_do_futex+0x10/0x10 [ 133.379939][ T6619] ? find_held_lock+0x2b/0x80 [ 133.379975][ T6619] __x64_sys_futex+0x34f/0x4d0 [ 133.380019][ T6619] ? __fget_files+0x21f/0x3d0 [ 133.380047][ T6619] ? __pfx___x64_sys_futex+0x10/0x10 [ 133.380086][ T6619] ? xfd_validate_state+0x129/0x190 [ 133.380139][ T6619] do_syscall_64+0xc9/0xf80 [ 133.380175][ T6619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.380204][ T6619] RIP: 0033:0x7fc75599acb9 [ 133.380226][ T6619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.380253][ T6619] RSP: 002b:00007fc756802028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 133.380281][ T6619] RAX: ffffffffffffffda RBX: 00007fc755c15fa0 RCX: 00007fc75599acb9 [ 133.380299][ T6619] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000000000000000 [ 133.380313][ T6619] RBP: 00007fc755a08bf7 R08: 0000000000000000 R09: 000000008000fff5 [ 133.380329][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.380343][ T6619] R13: 00007fc755c16038 R14: 00007fc755c15fa0 R15: 00007fff0086ee78 [ 133.380375][ T6619] [ 133.783736][ T30] audit: type=1800 audit(1769346540.853:2): pid=6644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.142" name="discovery_nqn" dev="configfs" ino=11059 res=0 errno=0 [ 134.215457][ T6659] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 136.568013][ T6702] syz.2.152 uses obsolete (PF_INET,SOCK_PACKET) [ 136.863739][ T6714] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 136.988666][ T6718] cgroup: fork rejected by pids controller in /syz1 [ 137.347998][ T6798] vivid-002: kernel_thread() failed [ 138.114421][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.122121][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.514559][ T6820] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 139.219787][ T6821] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input7 [ 141.105326][ T5893] smpboot: CPU 1 is now offline [ 141.244363][ T6879] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 141.299228][ T6870] ------------[ cut here ]------------ [ 141.299753][ T6870] [ 141.299760][ T6870] ====================================================== [ 141.299769][ T6870] WARNING: possible circular locking dependency detected [ 141.299782][ T6870] syzkaller #0 Tainted: G U [ 141.299813][ T6870] ------------------------------------------------------ [ 141.299821][ T6870] syz.1.169/6870 is trying to acquire lock: [ 141.299836][ T6870] ffffffff8e4eeee0 (console_owner){-...}-{0:0}, at: console_lock_spinning_enable+0x61/0x80 [ 141.299914][ T6870] [ 141.299914][ T6870] but task is already holding lock: [ 141.299921][ T6870] ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 141.299978][ T6870] [ 141.299978][ T6870] which lock already depends on the new lock. [ 141.299978][ T6870] [ 141.299986][ T6870] [ 141.299986][ T6870] the existing dependency chain (in reverse order) is: [ 141.299994][ T6870] [ 141.299994][ T6870] -> #5 (&rq->__lock){-.-.}-{2:2}: [ 141.300026][ T6870] _raw_spin_lock_nested+0x31/0x40 [ 141.300051][ T6870] raw_spin_rq_lock_nested+0x29/0x130 [ 141.300078][ T6870] task_rq_lock+0xcf/0x490 [ 141.300104][ T6870] cgroup_move_task+0x81/0x2a0 [ 141.300135][ T6870] css_set_move_task+0x285/0x600 [ 141.300162][ T6870] cgroup_post_fork+0x1fe/0x9b0 [ 141.300188][ T6870] copy_process+0x57b0/0x7890 [ 141.300221][ T6870] kernel_clone+0xfc/0x930 [ 141.300252][ T6870] user_mode_thread+0xcc/0x110 [ 141.300290][ T6870] rest_init+0x21/0x260 [ 141.300324][ T6870] start_kernel+0x47a/0x480 [ 141.300362][ T6870] x86_64_start_reservations+0x24/0x30 [ 141.300389][ T6870] x86_64_start_kernel+0x122/0x130 [ 141.300413][ T6870] common_startup_64+0x13e/0x148 [ 141.300443][ T6870] [ 141.300443][ T6870] -> #4 (&p->pi_lock){-.-.}-{2:2}: [ 141.300475][ T6870] _raw_spin_lock_irqsave+0x3a/0x60 [ 141.300500][ T6870] try_to_wake_up+0xb2/0x1a60 [ 141.300524][ T6870] create_worker+0x33a/0x740 [ 141.300557][ T6870] workqueue_init+0x768/0x930 [ 141.300591][ T6870] kernel_init_freeable+0x3d4/0x790 [ 141.300629][ T6870] kernel_init+0x1f/0x1e0 [ 141.300662][ T6870] ret_from_fork+0x754/0xaf0 [ 141.300684][ T6870] ret_from_fork_asm+0x1a/0x30 [ 141.300721][ T6870] [ 141.300721][ T6870] -> #3 (&pool->lock){-.-.}-{2:2}: [ 141.300753][ T6870] _raw_spin_lock+0x2e/0x40 [ 141.300775][ T6870] __queue_work+0x270/0x10f0 [ 141.300811][ T6870] queue_work_on+0x1a9/0x1e0 [ 141.300848][ T6870] rpm_suspend+0xe90/0x1160 [ 141.300876][ T6870] rpm_idle+0x5e8/0x760 [ 141.300902][ T6870] __pm_runtime_idle+0xba/0x1a0 [ 141.300930][ T6870] __device_attach+0x37e/0x4d0 [ 141.300959][ T6870] device_initial_probe+0xaf/0xd0 [ 141.300989][ T6870] bus_probe_device+0x64/0x160 [ 141.301013][ T6870] device_add+0x11d9/0x1950 [ 141.301047][ T6870] serial_base_port_add+0x227/0x2b0 [ 141.301072][ T6870] serial_core_register_port+0x13c/0x1720 [ 141.301095][ T6870] serial8250_register_8250_port+0x155a/0x2260 [ 141.301127][ T6870] serial_pnp_probe+0x436/0x930 [ 141.301157][ T6870] pnp_device_probe+0x2b3/0x4a0 [ 141.301182][ T6870] really_probe+0x241/0xa60 [ 141.301208][ T6870] __driver_probe_device+0x1de/0x400 [ 141.301237][ T6870] driver_probe_device+0x4c/0x1b0 [ 141.301272][ T6870] __driver_attach+0x217/0x5c0 [ 141.301300][ T6870] bus_for_each_dev+0x13e/0x1d0 [ 141.301337][ T6870] bus_add_driver+0x305/0x5b0 [ 141.301361][ T6870] driver_register+0x1e2/0x360 [ 141.301392][ T6870] serial8250_init+0xcc/0x1b0 [ 141.301423][ T6870] do_one_initcall+0x11d/0x690 [ 141.301457][ T6870] kernel_init_freeable+0x6e5/0x790 [ 141.301496][ T6870] kernel_init+0x1f/0x1e0 [ 141.301529][ T6870] ret_from_fork+0x754/0xaf0 [ 141.301552][ T6870] ret_from_fork_asm+0x1a/0x30 [ 141.301587][ T6870] [ 141.301587][ T6870] -> #2 (&dev->power.lock){-.-.}-{3:3}: [ 141.301620][ T6870] _raw_spin_lock_irqsave+0x3a/0x60 [ 141.301644][ T6870] __pm_runtime_resume+0xa9/0x170 [ 141.301673][ T6870] __uart_start+0x1b0/0x510 [ 141.301703][ T6870] uart_write+0x211/0xb20 [ 141.301739][ T6870] n_tty_write+0x44f/0x12d0 [ 141.301765][ T6870] file_tty_write.isra.0+0x4d2/0x890 [ 141.301802][ T6870] redirected_tty_write+0xd4/0x120 [ 141.301838][ T6870] vfs_write+0x6ac/0x1070 [ 141.301865][ T6870] ksys_write+0x12a/0x250 [ 141.301891][ T6870] do_syscall_64+0xc9/0xf80 [ 141.301919][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.301945][ T6870] [ 141.301945][ T6870] -> #1 (&port_lock_key){-...}-{3:3}: [ 141.301978][ T6870] _raw_spin_lock_irqsave+0x3a/0x60 [ 141.302002][ T6870] serial8250_console_write+0x17e/0x1900 [ 141.302030][ T6870] console_flush_one_record+0x790/0xe50 [ 141.302053][ T6870] console_unlock+0x103/0x260 [ 141.302075][ T6870] vprintk_emit+0x407/0x6b0 [ 141.302097][ T6870] _printk+0xcf/0x110 [ 141.302119][ T6870] register_console.cold+0xc0/0x248 [ 141.302143][ T6870] univ8250_console_init+0x6f/0x80 [ 141.302174][ T6870] console_init+0x371/0x520 [ 141.302203][ T6870] start_kernel+0x300/0x480 [ 141.302240][ T6870] x86_64_start_reservations+0x24/0x30 [ 141.302274][ T6870] x86_64_start_kernel+0x122/0x130 [ 141.302298][ T6870] common_startup_64+0x13e/0x148 [ 141.302327][ T6870] [ 141.302327][ T6870] -> #0 (console_owner){-...}-{0:0}: [ 141.302359][ T6870] __lock_acquire+0x14b8/0x2630 [ 141.302391][ T6870] lock_acquire+0x17c/0x330 [ 141.302422][ T6870] console_lock_spinning_enable+0x72/0x80 [ 141.302462][ T6870] console_flush_one_record+0x739/0xe50 [ 141.302485][ T6870] console_unlock+0x103/0x260 [ 141.302507][ T6870] vprintk_emit+0x407/0x6b0 [ 141.302529][ T6870] _printk+0xcf/0x110 [ 141.302550][ T6870] __report_bug.cold+0x15/0x137 [ 141.302576][ T6870] report_bug+0xb2/0x220 [ 141.302600][ T6870] handle_bug+0x166/0x2a0 [ 141.302630][ T6870] exc_invalid_op+0x17/0x50 [ 141.302662][ T6870] asm_exc_invalid_op+0x1a/0x20 [ 141.302686][ T6870] update_rq_clock+0x34a/0xd30 [ 141.302713][ T6870] __schedule+0x1b0d/0x5e10 [ 141.302737][ T6870] preempt_schedule_common+0x42/0xc0 [ 141.302763][ T6870] preempt_schedule_thunk+0x16/0x30 [ 141.302787][ T6870] try_to_wake_up+0x644/0x1a60 [ 141.302811][ T6870] wake_up_q+0xa1/0x130 [ 141.302835][ T6870] futex_wake+0x460/0x530 [ 141.302872][ T6870] do_futex+0x32b/0x350 [ 141.302904][ T6870] __x64_sys_futex+0x34f/0x4d0 [ 141.302938][ T6870] do_syscall_64+0xc9/0xf80 [ 141.302965][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.302990][ T6870] [ 141.302990][ T6870] other info that might help us debug this: [ 141.302990][ T6870] [ 141.302998][ T6870] Chain exists of: [ 141.302998][ T6870] console_owner --> &p->pi_lock --> &rq->__lock [ 141.302998][ T6870] [ 141.303035][ T6870] Possible unsafe locking scenario: [ 141.303035][ T6870] [ 141.303041][ T6870] CPU0 CPU1 [ 141.303048][ T6870] ---- ---- [ 141.303055][ T6870] lock(&rq->__lock); [ 141.303070][ T6870] lock(&p->pi_lock); [ 141.303087][ T6870] lock(&rq->__lock); [ 141.303103][ T6870] lock(console_owner); [ 141.303119][ T6870] [ 141.303119][ T6870] *** DEADLOCK *** [ 141.303119][ T6870] [ 141.303125][ T6870] 3 locks held by syz.1.169/6870: [ 141.303139][ T6870] #0: ffff8880b843add8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 141.303201][ T6870] #1: ffffffff8e5cf320 (console_lock){+.+.}-{0:0}, at: _printk+0xcf/0x110 [ 141.303262][ T6870] #2: ffffffff8e5cf398 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfd/0xe50 [ 141.303321][ T6870] [ 141.303321][ T6870] stack backtrace: [ 141.303337][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.1.169 Tainted: G U syzkaller #0 PREEMPT(full) [ 141.303375][ T6870] Tainted: [U]=USER [ 141.303383][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 141.303399][ T6870] Call Trace: [ 141.303409][ T6870] [ 141.303418][ T6870] dump_stack_lvl+0x100/0x190 [ 141.303448][ T6870] print_circular_bug.cold+0x178/0x1c7 [ 141.303490][ T6870] check_noncircular+0x146/0x160 [ 141.303525][ T6870] __lock_acquire+0x14b8/0x2630 [ 141.303566][ T6870] lock_acquire+0x17c/0x330 [ 141.303598][ T6870] ? console_lock_spinning_enable+0x61/0x80 [ 141.303640][ T6870] ? console_lock_spinning_enable+0x4a/0x80 [ 141.303685][ T6870] console_lock_spinning_enable+0x72/0x80 [ 141.303725][ T6870] ? console_lock_spinning_enable+0x61/0x80 [ 141.303766][ T6870] console_flush_one_record+0x739/0xe50 [ 141.303796][ T6870] ? __pfx_console_flush_one_record+0x10/0x10 [ 141.303828][ T6870] ? is_printk_cpu_sync_owner+0x32/0x40 [ 141.303859][ T6870] console_unlock+0x103/0x260 [ 141.303883][ T6870] ? __pfx_console_unlock+0x10/0x10 [ 141.303910][ T6870] ? do_raw_spin_unlock+0x145/0x1e0 [ 141.303950][ T6870] ? _printk+0xcf/0x110 [ 141.303975][ T6870] vprintk_emit+0x407/0x6b0 [ 141.304001][ T6870] ? __pfx_vprintk_emit+0x10/0x10 [ 141.304026][ T6870] ? asm_exc_page_fault+0x26/0x30 [ 141.304056][ T6870] _printk+0xcf/0x110 [ 141.304079][ T6870] ? __pfx__printk+0x10/0x10 [ 141.304107][ T6870] ? __report_bug.cold+0x5/0x137 [ 141.304135][ T6870] ? __report_bug+0x377/0x3d0 [ 141.304162][ T6870] __report_bug.cold+0x15/0x137 [ 141.304189][ T6870] ? update_rq_clock+0x34a/0xd30 [ 141.304219][ T6870] ? __pfx___report_bug+0x10/0x10 [ 141.304247][ T6870] ? rcu_is_watching+0x12/0xc0 [ 141.304280][ T6870] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 141.304315][ T6870] ? update_rq_clock+0x34a/0xd30 [ 141.304344][ T6870] report_bug+0xb2/0x220 [ 141.304369][ T6870] ? update_rq_clock+0x34a/0xd30 [ 141.304398][ T6870] handle_bug+0x166/0x2a0 [ 141.304431][ T6870] exc_invalid_op+0x17/0x50 [ 141.304466][ T6870] asm_exc_invalid_op+0x1a/0x20 [ 141.304491][ T6870] RIP: 0010:update_rq_clock+0x34a/0xd30 [ 141.304522][ T6870] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 eb a2 09 a8 04 0f 84 9e fd ff ff 90 0f 0b 90 e9 95 fd ff ff 90 <0f> 0b 90 e9 51 fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 141.304547][ T6870] RSP: 0018:ffffc90003d0f950 EFLAGS: 00010046 [ 141.304567][ T6870] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 141.304584][ T6870] RDX: 0000000000000046 RSI: ffffffff8dc1b3c0 RDI: ffffffff8bfa32a0 [ 141.304601][ T6870] RBP: ffffc90003d0faf8 R08: 0000000000000001 R09: 0000000000000001 [ 141.304617][ T6870] R10: ffffffff90b771d7 R11: 0000000000000000 R12: ffffffff90b7a254 [ 141.304635][ T6870] R13: ffff8880b853bbf0 R14: ffff88801dedbd00 R15: ffff8880b853adc0 [ 141.304664][ T6870] __schedule+0x1b0d/0x5e10 [ 141.304690][ T6870] ? __pfx_css_rstat_updated+0x10/0x10 [ 141.304720][ T6870] ? __lock_acquire+0x4a5/0x2630 [ 141.304762][ T6870] ? __pfx___schedule+0x10/0x10 [ 141.304788][ T6870] ? __resched_curr+0x316/0x3b0 [ 141.304813][ T6870] ? __pfx___resched_curr+0x10/0x10 [ 141.304840][ T6870] ? preempt_schedule_thunk+0x16/0x30 [ 141.304866][ T6870] preempt_schedule_common+0x42/0xc0 [ 141.304895][ T6870] preempt_schedule_thunk+0x16/0x30 [ 141.304923][ T6870] try_to_wake_up+0x644/0x1a60 [ 141.304952][ T6870] ? __pfx_try_to_wake_up+0x10/0x10 [ 141.304980][ T6870] ? find_held_lock+0x2b/0x80 [ 141.305005][ T6870] ? futex_wake+0x456/0x530 [ 141.305046][ T6870] wake_up_q+0xa1/0x130 [ 141.305073][ T6870] futex_wake+0x460/0x530 [ 141.305114][ T6870] ? __pfx_futex_wake+0x10/0x10 [ 141.305154][ T6870] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 141.305198][ T6870] do_futex+0x32b/0x350 [ 141.305233][ T6870] ? __pfx_do_futex+0x10/0x10 [ 141.305271][ T6870] ? rcu_is_watching+0x12/0xc0 [ 141.305296][ T6870] ? ktime_get+0x200/0x300 [ 141.305326][ T6870] ? lockdep_hardirqs_on+0x78/0x100 [ 141.305356][ T6870] ? read_tsc+0x9/0x20 [ 141.305390][ T6870] __x64_sys_futex+0x34f/0x4d0 [ 141.305428][ T6870] ? __pfx___x64_sys_futex+0x10/0x10 [ 141.305464][ T6870] ? xfd_validate_state+0x129/0x190 [ 141.305510][ T6870] do_syscall_64+0xc9/0xf80 [ 141.305541][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.305568][ T6870] RIP: 0033:0x7fc75599acb9 [ 141.305589][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.305614][ T6870] RSP: 002b:00007fff0086efd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 141.305638][ T6870] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc75599acb9 [ 141.305655][ T6870] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc755c15fa8 [ 141.305672][ T6870] RBP: 000000000000117c R08: 0000000000000000 R09: 0000000000000000 [ 141.305688][ T6870] R10: 00007fc755c15fa0 R11: 0000000000000246 R12: 0000000000000000 [ 141.305704][ T6870] R13: 00007fc755c15fac R14: 00007fc755c15fa8 R15: 00007fc755c15fa0 [ 141.305731][ T6870] [ 142.578668][ T6870] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 142.578698][ T6870] WARNING: kernel/sched/sched.h:1571 at update_rq_clock+0x34a/0xd30, CPU#0: syz.1.169/6870 [ 142.596574][ T6870] Modules linked in: [ 142.600483][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.1.169 Tainted: G U syzkaller #0 PREEMPT(full) [ 142.611261][ T6870] Tainted: [U]=USER [ 142.615150][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 142.625232][ T6870] RIP: 0010:update_rq_clock+0x34a/0xd30 [ 142.630821][ T6870] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 eb a2 09 a8 04 0f 84 9e fd ff ff 90 0f 0b 90 e9 95 fd ff ff 90 <0f> 0b 90 e9 51 fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 142.650635][ T6870] RSP: 0018:ffffc90003d0f950 EFLAGS: 00010046 [ 142.656808][ T6870] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 142.664781][ T6870] RDX: 0000000000000046 RSI: ffffffff8dc1b3c0 RDI: ffffffff8bfa32a0 [ 142.672758][ T6870] RBP: ffffc90003d0faf8 R08: 0000000000000001 R09: 0000000000000001 [ 142.680745][ T6870] R10: ffffffff90b771d7 R11: 0000000000000000 R12: ffffffff90b7a254 [ 142.688838][ T6870] R13: ffff8880b853bbf0 R14: ffff88801dedbd00 R15: ffff8880b853adc0 [ 142.697429][ T6870] FS: 00005555781ac500(0000) GS:ffff8881245e3000(0000) knlGS:0000000000000000 [ 142.706481][ T6870] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.713083][ T6870] CR2: 0000001b30824220 CR3: 000000002b232000 CR4: 00000000003526f0 [ 142.721068][ T6870] Call Trace: [ 142.724357][ T6870] [ 142.727311][ T6870] __schedule+0x1b0d/0x5e10 [ 142.731973][ T6870] ? __pfx_css_rstat_updated+0x10/0x10 [ 142.737550][ T6870] ? __lock_acquire+0x4a5/0x2630 [ 142.742525][ T6870] ? __pfx___schedule+0x10/0x10 [ 142.747392][ T6870] ? __resched_curr+0x316/0x3b0 [ 142.752274][ T6870] ? __pfx___resched_curr+0x10/0x10 [ 142.757580][ T6870] ? preempt_schedule_thunk+0x16/0x30 [ 142.763033][ T6870] preempt_schedule_common+0x42/0xc0 [ 142.768423][ T6870] preempt_schedule_thunk+0x16/0x30 [ 142.773729][ T6870] try_to_wake_up+0x644/0x1a60 [ 142.778514][ T6870] ? __pfx_try_to_wake_up+0x10/0x10 [ 142.783727][ T6870] ? find_held_lock+0x2b/0x80 [ 142.788420][ T6870] ? futex_wake+0x456/0x530 [ 142.792968][ T6870] wake_up_q+0xa1/0x130 [ 142.797138][ T6870] futex_wake+0x460/0x530 [ 142.801495][ T6870] ? __pfx_futex_wake+0x10/0x10 [ 142.806374][ T6870] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 142.811612][ T6870] do_futex+0x32b/0x350 [ 142.815791][ T6870] ? __pfx_do_futex+0x10/0x10 [ 142.820492][ T6870] ? rcu_is_watching+0x12/0xc0 [ 142.825441][ T6870] ? ktime_get+0x200/0x300 [ 142.829873][ T6870] ? lockdep_hardirqs_on+0x78/0x100 [ 142.835091][ T6870] ? read_tsc+0x9/0x20 [ 142.839188][ T6870] __x64_sys_futex+0x34f/0x4d0 [ 142.844001][ T6870] ? __pfx___x64_sys_futex+0x10/0x10 [ 142.849310][ T6870] ? xfd_validate_state+0x129/0x190 [ 142.854546][ T6870] do_syscall_64+0xc9/0xf80 [ 142.859140][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.865045][ T6870] RIP: 0033:0x7fc75599acb9 [ 142.869492][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.889637][ T6870] RSP: 002b:00007fff0086efd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 142.898171][ T6870] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc75599acb9 [ 142.906585][ T6870] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc755c15fa8 [ 142.914563][ T6870] RBP: 000000000000117c R08: 0000000000000000 R09: 0000000000000000 [ 142.922628][ T6870] R10: 00007fc755c15fa0 R11: 0000000000000246 R12: 0000000000000000 [ 142.930608][ T6870] R13: 00007fc755c15fac R14: 00007fc755c15fa8 R15: 00007fc755c15fa0 [ 142.938602][ T6870] [ 142.941641][ T6870] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 142.949291][ T6870] CPU: 0 UID: 0 PID: 6870 Comm: syz.1.169 Tainted: G U syzkaller #0 PREEMPT(full) [ 142.960165][ T6870] Tainted: [U]=USER [ 142.963967][ T6870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 142.974113][ T6870] Call Trace: [ 142.977400][ T6870] [ 142.980506][ T6870] dump_stack_lvl+0x100/0x190 [ 142.985201][ T6870] vpanic+0x20d/0x630 [ 142.989194][ T6870] panic+0xd1/0xd1 [ 142.992924][ T6870] ? __pfx_panic+0x10/0x10 [ 142.997353][ T6870] ? check_panic_on_warn+0x1f/0x90 [ 143.002493][ T6870] check_panic_on_warn.cold+0x19/0x34 [ 143.007880][ T6870] ? update_rq_clock+0x34a/0xd30 [ 143.012835][ T6870] __warn.cold+0x191/0x2f8 [ 143.017709][ T6870] __report_bug+0x296/0x3d0 [ 143.022224][ T6870] ? update_rq_clock+0x34a/0xd30 [ 143.027176][ T6870] ? __pfx___report_bug+0x10/0x10 [ 143.032215][ T6870] ? rcu_is_watching+0x12/0xc0 [ 143.036992][ T6870] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 143.043270][ T6870] ? update_rq_clock+0x34a/0xd30 [ 143.048225][ T6870] report_bug+0xb2/0x220 [ 143.052663][ T6870] ? update_rq_clock+0x34a/0xd30 [ 143.057616][ T6870] handle_bug+0x166/0x2a0 [ 143.062661][ T6870] exc_invalid_op+0x17/0x50 [ 143.067274][ T6870] asm_exc_invalid_op+0x1a/0x20 [ 143.072143][ T6870] RIP: 0010:update_rq_clock+0x34a/0xd30 [ 143.077708][ T6870] Code: ab 48 0b 00 00 48 83 c4 18 5b 5d 41 5c 41 5d 41 5e 41 5f e9 c8 eb a2 09 a8 04 0f 84 9e fd ff ff 90 0f 0b 90 e9 95 fd ff ff 90 <0f> 0b 90 e9 51 fd ff ff 48 8d bb 18 0e 00 00 48 b8 00 00 00 00 00 [ 143.098093][ T6870] RSP: 0018:ffffc90003d0f950 EFLAGS: 00010046 [ 143.104269][ T6870] RAX: 0000000000000000 RBX: ffff8880b853adc0 RCX: 0000000000000001 [ 143.112255][ T6870] RDX: 0000000000000046 RSI: ffffffff8dc1b3c0 RDI: ffffffff8bfa32a0 [ 143.120323][ T6870] RBP: ffffc90003d0faf8 R08: 0000000000000001 R09: 0000000000000001 [ 143.128320][ T6870] R10: ffffffff90b771d7 R11: 0000000000000000 R12: ffffffff90b7a254 [ 143.136306][ T6870] R13: ffff8880b853bbf0 R14: ffff88801dedbd00 R15: ffff8880b853adc0 [ 143.144569][ T6870] __schedule+0x1b0d/0x5e10 [ 143.149097][ T6870] ? __pfx_css_rstat_updated+0x10/0x10 [ 143.154581][ T6870] ? __lock_acquire+0x4a5/0x2630 [ 143.159547][ T6870] ? __pfx___schedule+0x10/0x10 [ 143.164498][ T6870] ? __resched_curr+0x316/0x3b0 [ 143.169363][ T6870] ? __pfx___resched_curr+0x10/0x10 [ 143.174837][ T6870] ? preempt_schedule_thunk+0x16/0x30 [ 143.181045][ T6870] preempt_schedule_common+0x42/0xc0 [ 143.186365][ T6870] preempt_schedule_thunk+0x16/0x30 [ 143.191590][ T6870] try_to_wake_up+0x644/0x1a60 [ 143.196634][ T6870] ? __pfx_try_to_wake_up+0x10/0x10 [ 143.201854][ T6870] ? find_held_lock+0x2b/0x80 [ 143.206718][ T6870] ? futex_wake+0x456/0x530 [ 143.211246][ T6870] wake_up_q+0xa1/0x130 [ 143.215429][ T6870] futex_wake+0x460/0x530 [ 143.220004][ T6870] ? __pfx_futex_wake+0x10/0x10 [ 143.224881][ T6870] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 143.230113][ T6870] do_futex+0x32b/0x350 [ 143.234316][ T6870] ? __pfx_do_futex+0x10/0x10 [ 143.239032][ T6870] ? rcu_is_watching+0x12/0xc0 [ 143.243813][ T6870] ? ktime_get+0x200/0x300 [ 143.248248][ T6870] ? lockdep_hardirqs_on+0x78/0x100 [ 143.253552][ T6870] ? read_tsc+0x9/0x20 [ 143.257642][ T6870] __x64_sys_futex+0x34f/0x4d0 [ 143.262481][ T6870] ? __pfx___x64_sys_futex+0x10/0x10 [ 143.267788][ T6870] ? xfd_validate_state+0x129/0x190 [ 143.273279][ T6870] do_syscall_64+0xc9/0xf80 [ 143.277927][ T6870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.283851][ T6870] RIP: 0033:0x7fc75599acb9 [ 143.288293][ T6870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 143.308230][ T6870] RSP: 002b:00007fff0086efd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 143.317184][ T6870] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc75599acb9 [ 143.325273][ T6870] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fc755c15fa8 [ 143.333350][ T6870] RBP: 000000000000117c R08: 0000000000000000 R09: 0000000000000000 [ 143.341548][ T6870] R10: 00007fc755c15fa0 R11: 0000000000000246 R12: 0000000000000000 [ 143.349637][ T6870] R13: 00007fc755c15fac R14: 00007fc755c15fa8 R15: 00007fc755c15fa0 [ 143.357735][ T6870] [ 143.361175][ T6870] Kernel Offset: disabled [ 143.365534][ T6870] Rebooting in 86400 seconds..