last executing test programs: 7.924005592s ago: executing program 1 (id=440): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nvmet_tcp/parameters/idle_poll_period_usecs\x00', 0x9801, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4119, 0x1017) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r1) msgctl$auto_MSG_STAT_ANY(0x5, 0xd, &(0x7f0000000200)={{0xf, 0xffffffffffffffff, 0x0, 0x276, 0x74ad0000, 0x7}, &(0x7f0000000180)=0x1, &(0x7f00000001c0), 0x7, 0xe, 0x80, 0x0, 0x3ff, 0x739, 0x7, 0x0, @raw=0x5}) sendmsg$auto_NL80211_CMD_SET_POWER_SAVE(r1, &(0x7f00000016c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001680)={&(0x7f0000000280)={0x13e0, r2, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x1163, 0x75, 0x0, 0x1, [@generic="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", @generic="db78521ab82b63b37a762b91f40d6d9f1b754f", @generic="3a96c51267429827e0699cdc244b19ba9c1723182c247ba918f619dc9ac1eac066cef3960473e9d8ee46f04d7ba4b412afa61308ec26a682ea0589c4f4df05022f4fdadc024d380469facb5df6ff262a4af920ecfaeaa32090d2e694777d909079ea22f527cdb4e0b0e7688aa4fb86b2f4cf3d3f64a6b85900a4b802b7497527ef77eddc6315a9ad5050b0e2958f29932939af16235d287aebbcbd2f5deb621fd6c4519bea6ab27f204de145b352", @generic="c16983a0a85a9aaa10cdbfaf27608d9e869ef969e98fd011400b35f337b0c1030dc60fc1297d308f3bb7bae81c761ef556fd87c0c2695c0490e97e4d88457419890b1f4f141a2253415d45be1555d13acbaa59da513f70d8a2ec43ecd2b4b072510f1cb5f547e60206d4f3754cce79de595d179a2e25b19483b7f86e16b551529351ab6a35a385c522d58e13e385448ae03a8fd3b556ecd94c5b394b8d42"]}, @NL80211_ATTR_SCAN_FREQUENCIES={0x256, 0x2c, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @u32=0x3ff}, @generic="f8e96c6fd42defcd646de18fbcd4c897c9f6770e593116734bc6dd597d5964c2f1e686aa74f21d35cbee6d29ba78f7ae052baf6d63c31be89d0e97b8363d0fb3f5419a2811e2f947c9d9c3e1071c6925ac2acea48dcddc45fb825ab9dd4690c608f5855725c79dffe785894a79d670e1480e86ad8ebaf04f709d5ec1874763d235fa6b72dd2221b75c11", @generic="e24a7262ce5255fc538f8b8633f031b87c019a5c571eb88f0abbf0c1c56fd8741eb0634a1ca58c398f8d0c3575626232512f139a3d15bd69a94de7f0bdfede6f69c3001cb543a0bc", @nested={0xdd, 0x12, 0x0, 0x1, [@typed={0x8, 0x103, 0x0, 0x0, @uid=r3}, @generic="af51255557819d1a8560281212deea48c8bf3efa7f153e8bdc4a9b33f7c92620c3dd9db040b8f49f6693fb873b7303200193e5cd91b4e77253467c3355692f2bb71521ce769a14f90f26db4acc638ccf590b7f7f452d915ae92aaeffa9865ebc983e53564d3d9c541bf79fdf93c18de6ce83598cdc5e004b6fb080683b73f9ac7f6a3d8914d6f417cf80c208194de9f6e5593dfe9e49b4a25e32b760389b657838ae7ed9fbaece401e1fd0ea5a726a46fa715a0f58ce1379ea4cad2cb45033567cd5a960a982cf4d8ece9e84502cceef48"]}, @nested={0x14, 0x30, 0x0, 0x1, [@typed={0x8, 0xd6, 0x0, 0x0, @u32=0xe}, @nested={0x4, 0x94}, @nested={0x4, 0x64}]}, @typed={0xc, 0x114, 0x0, 0x0, @u64=0xa7}, @typed={0x6e, 0xdb, 0x0, 0x0, @binary="b2ec9c4b0a79497355abef782c4b734a01735ca091aefd4c31c44a26f9619bbbf7af8bfbb14c1628844fbf8edc5586b9ae9c52e00f7b6ae0b9915c2994c4df62a447e32d78df737528d51967a7ca1febe1103d8d0df279b82627f693c3e039f537aefd165c5cf086c84a"}, @typed={0x8, 0x102, 0x0, 0x0, @ipv4=@remote}]}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x2}, @NL80211_ATTR_FILS_ERP_USERNAME={0x8, 0xf9, "2c7ee8ff"}]}, 0x13e0}}, 0x24008000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x200, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r4, 0x4c0a, 0x0) setsockopt$auto_SO_ATTACH_REUSEPORT_CBPF(r0, 0x9, 0x33, &(0x7f0000000080)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8000) 7.316312364s ago: executing program 1 (id=443): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x1a9402, 0x0) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, 0x0, 0x800) timer_create$auto(0x9, 0x0, 0x0) read$auto(0x3, 0x0, 0x8080) r1 = socket(0xa, 0x1, 0x100) write$auto(0x3, 0x0, 0xffd8) unshare$auto(0x40000080) shmctl$auto_IPC_SET(0x4, 0x1, &(0x7f0000000280)={{0x84, 0xee00, 0xee00, 0x4, 0x9, 0x4bd6, 0x4}, 0xd21, 0x5, 0x8, 0x0, @inferred=0xffffffffffffffff, @raw=0x7, 0x9, 0x0, &(0x7f0000000140)="4f0d6995e943b6bc1919e836e1a6e889b4881e233d3b51e066bb0a054c9e474be535fd29da", &(0x7f0000000440)="e3ac9b01ee8d985b677531eeeee5cb5b7774d2df4d9ae6dccbc98ded20214708a4ade77c6faa2f2889ca3e7989f326ce79e5afb400862995c06dfa0945dd597a3ae1b46e8d8c7e03ae6b8aaa49f6bf64cc5fa98e25cce11a23e340ff359dd14136cf468f42d53b9d05f389241247bb52791863942bfc7991cdd2fd90b13b0f6f9b8e20a59cb38b736f733b41e7aac06651e11b71a6f5c5252d07c73d54e2c281442997c8a2f88fee6bc1ed2305113a0cc77516c1722d77b6c1cd97f71a5fc776b5b000"/209}) process_mrelease$auto(0xffffffffffffffff, 0xa) mmap$auto(0x0, 0x40000b, 0xde, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sendmsg$auto_VDPA_CMD_MGMTDEV_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="5cfa37d1b3a1b955b6c40c7f313435a834f39ae4e978f888835de6a0db95fdd134dea08c2007ec36a93bd41a7bebc2479a54c514ba7e32e40c8f5618f8ef870b6b40904d2079fe652d86a277070000000000000079cbdb1ead8ace0def7b06d16eaa7faff3b6dba2fa0e07e1c19fa6040cce441c805a4a7c2101d98366fc88839dfffee9be9063732eb7452a57b609dd5ca88eb5559c9780e767e5646fed", @ANYRES16, @ANYBLOB="08002cbd7000fbdbdf2502000000140002006e723000"/34], 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x24000400) sendmsg$auto_VDPA_CMD_DEV_DEL(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000100", @ANYRES16=0x0, @ANYBLOB="00042bbd7000fedbdf250400000006000c0005000000"], 0x1c}}, 0x40000) r3 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f0000000180)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8\xa6\xb6\xaa\x96/OX\xba\x02\xc5\xc6B\x1d}Y\xbc@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf\xd6f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8', 0x100000a3d4) sendmsg$auto_NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000165c0)={0x0, 0x0, &(0x7f0000016580)={&(0x7f0000000280)={0x18, 0x0, 0xd3ac6c422733a379, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_BEACON_TAIL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2404c000}, 0x0) sendmsg$auto_NL80211_CMD_SET_PMK(r3, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x58, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_ERP_RRK={0x36, 0xfc, "e0ed53cd41e81ae86b96d4705f02dc7c0ff41bc2ca3d328a8b3963ee9bb9f0696b648de3f8aae611f346fd44ef6856922744"}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xfe}]}, 0x58}, 0x1, 0x0, 0x0, 0x8044}, 0xc0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x60042, 0x0) mkdir$auto(&(0x7f0000000100)='./file0\x00', 0xff) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20342, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0x802, 0x0) socket(0x21, 0x1, 0x106) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/amidi2\x00', 0x4000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000000000001ff, 0x7, 0xd3e, 0x20, 0x9687, 0x100000000000003, 0x3c2a19d5, 0x6, 0x3, 0x62, 0x9, 0x7, 0x6d3f, 0x6, 0xa, 0xfffffffffffffffe]}, 0x0) select$auto(0x3, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xfffffffffffffffb, 0x1, 0x4, 0x3, 0x3, 0x3, 0xffffffffffffffff, 0x3, 0x8000000000400000, 0x2, 0x6d3c, 0x3, 0x2, 0x8000000000000006]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 7.057705296s ago: executing program 3 (id=444): bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x400, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x6, 0x10000000000, 0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, 0x0, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x800, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop7\x00', 0x109040, 0x0) ioctl$auto(r0, 0x4b45, r0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 6.65408866s ago: executing program 3 (id=446): r0 = eventfd$auto(0x7f) read$auto_vhci_fops_hci_vhci(r0, &(0x7f0000000200)=""/36, 0x24) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x8, 0x1ff, 0x7c9, 0x27, 0x4909b6f5, 0x1ffe0, 0x7, 0xffffffff, 0x20000009, 0x9, 0x0, 0x4, 0x1, 0x68d, 0x8, 0x8, 0x10003, 0x80, 0x3, 0x0, 0x3, 0x22000, 0x200, 0xffffff28, 0x1, 0x0, 0xffffffff, 0x0, 0x0, 0x0, [0x8000000000000000, 0x101, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffe, 0x3, 0x6, 0xfffffffffffffffc, 0x3, 0x0, 0x80000, 0x0, 0xffff, 0x10, 0x0, 0x8, 0x10000, 0x0, 0x8, 0x90, 0x6, 0xbdcf, 0x10000, 0xfffffffffffffffe, 0x0, 0x100]}, 0x1fe, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20000008}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x1892, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000140), 0xb, 0xa505}, 0x800}, 0x7, 0x4008) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(r3, 0x0, &(0x7f0000000380)={@_si_pad}, 0x2) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbf9, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 6.091995793s ago: executing program 1 (id=448): ioctl$auto_TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x523000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) io_uring_register$auto_IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000000840), 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1f, 0x1, 0x6, 0x3, 0x3ff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) r4 = socket$nl_generic(0x10, 0x3, 0x10) semctl$auto_SETVAL(0x80000000, 0x1, 0x10, 0x6) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x38, r5, 0x1, 0x2070bd26, 0x25dfdb78, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x11, 0x1, '\xc2\x00\x00\x00\x00\x00\x00\x00\n9\xac\xce\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x80) sendmsg$auto_SMC_NETLINK_GET_FBACK_STATS(r1, 0x0, 0x8004) futex_waitv$auto(0x0, 0x800, 0x7fffffff, 0x0, 0x3) sendmsg$auto_OVS_DP_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x1c, r5, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbfc, {0x3, 0x0, 0xf000}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000008) ioctl$auto(r0, 0x92106402, r0) 5.780003592s ago: executing program 3 (id=449): sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0x8000, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) ustat$auto(0x801, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-reset-wq/cpumask\x00', 0x9c2342, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x1, 0x0, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_hugepages_mempolicy\x00', 0xa001, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/block/loop1/queue/zone_append_max_bytes\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x6) write$auto(r1, 0x0, 0x1) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) madvise$auto(0x0, 0x2003f0, 0x15) lsm_list_modules$auto(0x0, 0x0, 0x0) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) bpf$auto_BPF_PROG_LOAD(0x5, &(0x7f0000000440)=@bpf_attr_0={0x9a, 0x4, 0x2, 0x3, 0x7eb, 0xffffffffffffffff, 0x5, "e03f43000b26d5ea743998fb57339a75", 0x0, 0xffffffffffffffff, 0x9, 0x3, 0x6, 0xfffffffffffffff3}, 0x7ff) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x40000403c6f2b, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x6f29, 0x0) 4.787790616s ago: executing program 3 (id=451): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nvmet_tcp/parameters/idle_poll_period_usecs\x00', 0x9801, 0x0) landlock_restrict_self$auto(0xffffffffffffffff, 0x7) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x240641, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x4802, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x6d7, 0x80000008, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x112, 0x80006) mlockall$auto(0x800000000000005) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/queues/tx-0/xps_rxqs\x00', 0x22b42, 0x0) sendfile$auto(r1, r1, 0x0, 0x4f64a1d2) mmap$auto(0x0, 0x2020006, 0x3, 0x1b, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000002140)=""/4119, 0x1017) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/netdevsim/netdevsim3/fib/nexthop_bucket_activity\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x200, 0x0) 4.228674714s ago: executing program 1 (id=453): syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x0, 0x0, 0x0, 0x3) r1 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000140), 0x180b03, 0x0) sendfile$auto(r1, r1, &(0x7f00000001c0)=0x8, 0x6) mmap$auto(0x20000, 0x400008, 0x3, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) fallocate$auto(r1, 0x1, 0x2, 0x6657) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0x1, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x5, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x9, 0x9, 0x80000001, 0x7, 0x1, 0x9, 0x1000000000000001, 0x1]}, 0x0) socket(0xa, 0x4, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "00800000ffefffffff0200000001"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) write$auto(r2, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/hugepages/hugepages-1048576kB/demote_size\x00', 0x102, 0x0) sendfile$auto(r3, r3, 0x0, 0x7) msync$auto(0x1ffff000, 0x1800000000000fe, 0x400000004) ioctl$auto(0x3, 0x2287, 0xffffffffffffffff) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, 0x0, 0x401, 0x0) msync$auto(0x1, 0x9, 0xfffffff7) madvise$auto(0x0, 0x20200, 0x15) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00'}) 4.223162075s ago: executing program 0 (id=454): madvise$auto(0x0, 0x2000040080000004, 0xe) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) r0 = semctl$auto(0xa, 0x2, 0x13, 0x21) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async) r1 = getpgid$auto(r0) r2 = prctl$auto(0x3, 0x3ff, r1, 0x200, 0x4) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/clocksource/clocksource0/unbind_clocksource\x00', 0x8041, 0x0) write$auto(r3, &(0x7f0000000500)='%[.[`T\n&\xc1\x1e\xae\xb8\xd7\x95\x17\xa3\x7f\xa3\xa7\xf2M\xd1(h\xa51T\x9fQG0\xe8\xd1\xd7m\xafF\x04\"h\xe6\x10\f\xf8\xff\xff\xff\xff\xff\xff\xff\f\xe7\xe6\xb1I\x03\x9a\xca\x8f\x8c\xbb\xe1*\x9d\x11\x9a\x04F9\"\xe3\xc2\x0f\xc5\xcf\x0f\xb1,w\xfe\x06h\xff\x03\x00\x00E\x8b}\xa2\xb9g\xa3\xbe|l3\xda\x9bzl\x8c\x8b\xce\x12*=`\x11\xef2\xf3 \xec\xbe:h\x9e\xc8\xf1\x15\xfa\x90\x9d\xeec\xbf\xf9\xf2\xcc\xf5\xa3F\xc2', 0x400) (async) msgctl$auto_IPC_INFO(0x5, 0x3, &(0x7f0000000140)={{0x4, 0x0, 0x0, 0x1, 0x4, 0x2}, &(0x7f00000000c0)=0x2, &(0x7f0000000100)=0xc9, 0x8000, 0x6, 0x7fff, 0x101, 0x2, 0x7f, 0x1000, 0xc2, @raw=0x2, @inferred=r0}) msgctl$auto(0x5, 0x4, &(0x7f0000000240)={{0x2, 0xffffffffffffffff, 0xee00, 0x9, 0x9, 0x101, 0x3}, &(0x7f00000001c0)=0xde, &(0x7f0000000200)=0x7, 0x7ff, 0xf, 0x9, 0x5, 0x3ffc0000000000, 0x4, 0x8, 0x4, @inferred=r0, @raw=0x6}) newfstatat$auto(r2, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0)={0x8175, 0x9, 0x9, 0xe20, r4, r5, 0x0, 0xee8, 0x100, 0x5, 0x799, 0x7fffffff, 0x2, 0x0, 0x1, 0xf, 0x4}, 0xffffff7f) unshare$auto(0x40000080) (async) write$auto(r3, &(0x7f0000000080)='1\xc6\xac\xd3\xb7\'\xd8\xac%lR\xd7q\xcb\xf5Q~\xd9\x920U\xd9\t\x00\x00\x00\x00\x00\x00\x00\xd9L\xc3\xa7@\xe5\x94\x01', 0x86b7) 3.902980515s ago: executing program 0 (id=455): syslog$auto(0x3, 0x0, 0xffffffb9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) semctl$auto_GETNCNT(0x5, 0x6, 0xe, 0xf) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) r1 = openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000000040), 0x28080, 0x0) read$auto_fops_blob_file(r1, 0x0, 0x0) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x50}, 0x4000001) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) bind$auto(0x3, 0x0, 0x8000006a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video40\x00', 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) removexattrat$auto(0xffffffffffffffff, 0x0, 0x1000, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x7c, 0x0, 0x8) 2.94898056s ago: executing program 3 (id=457): mmap$auto(0x0, 0xff00, 0x2, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xffffeffe, 0x2) pipe$auto(0x0) pipe$auto(0x0) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r0, 0x4008af00, 0x0) r1 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="9bff29bd7000f9d3df2501000000498fc1fe442a9e911d64"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) write$auto_cachefiles_daemon_fops_internal(r3, &(0x7f0000000300)="a04f", 0x2) unshare$auto(0x40000080) r4 = ioctl$auto_NS_GET_TGID_IN_PIDNS(0xffffffffffffffff, 0x8004b709, &(0x7f0000000040)=0x5) unshare$auto(0x40000080) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event\x00', 0x101901, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r6 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/\x98@dio1\x00', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80802, 0x0) r7 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, 0x6a) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ff) sendto$auto(0x3, 0x0, 0x2000f, 0x101, 0x0, 0x1c) ioctl$auto(0xffffffffffffffff, 0x541b, 0x24) recvmmsg$auto(0x3, 0x0, 0xfffe, 0x6, 0x0) process_vm_readv$auto(r4, &(0x7f0000000100)={&(0x7f0000000080)="f855c8d9176cb2485ddb4476ce43284bb7972322440c326f8191693f75e78cddb42429185a8849ea625b789293bf515245df8258b76c79171861dc2ee1f17e812e60244bb71a3b0ca6b41a00d0589a4e92206b8f", 0x7ff}, 0x7, &(0x7f0000000240)={&(0x7f0000000140)="59f8acd951dc1b45ba87cde4ee6df06fc5ac38560e15dc4aa49b4563a3c00909a75e19f1c121d7925d1ffa1b6ac60d70d9a85e82e154c9062c9c9e513351f62ab9989111bfb4e70b43db972505295c69b5c48db09ef5d810c568ce621db94376f871150d5a0797ff183ce902cfced8f23ae576c7bfd017232dc329109e0ef957348a780e2c1fb53de30acdb7ef4d83599feec93e23bf0f708eff57190c83840eefcc205c76e9faea9764e92d8f675a60c99cd3f0da86fb1d69dd9eb5aec81f16262e352671dce1581e9651a5a6d088dc566660e876826c6ca03afa7d1086453d93ae08a4c53a", 0x1}, 0x7e4, 0x2) 2.863113793s ago: executing program 1 (id=458): mmap$auto(0x1, 0x20009, 0x2000006b9, 0xeb1, 0x401, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/oom_adj\x00', 0x347b02, 0x0) unshare$auto(0x40000080) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x40001, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) write$auto(r0, 0x0, 0x100000a3d9) socket(0x2b, 0x1, 0x0) listen$auto(0x3, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0x52fb, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x2003f2, 0x15) r1 = syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000980)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010031bd7000e4dbdf250c00c9bc"], 0x14}}, 0x24048084) madvise$auto(0x0, 0x200007, 0x19) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/pagemap\x00', 0x103003, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101001, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f0000000240)='\x03W\x96l\x15\x00'/21, 0x100000002, 0x100000001) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x9, 0xffffffffffff0001, 0x14) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x8001, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) socket(0x2, 0x5, 0x84) semctl$auto(0x2, 0x5, 0x13, 0x9) setsockopt$auto(0x3, 0x10000000084, 0xa, 0x0, 0x20) 2.733442098s ago: executing program 0 (id=459): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@generic={0xa, "0000e100"}, 0x58) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x2, 0x0) madvise$auto(0x0, 0x6, 0x66) madvise$auto(0x0, 0xffffffffffff0005, 0x19) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0xa00006, 0x400002, 0x40ebe, 0xffffffffffffffff, 0x300000000000) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/sunrpc/parameters/auth_hashtable_size\x00', 0x2ab42, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) mmap$auto(0xe779, 0x400000000007, 0xdf, 0x13, 0xffffffffffffffff, 0x0) unshare$auto(0x40000080) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x24048004) futex$auto(0x0, 0x9, 0x3e, 0x0, 0x0, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$auto_UI_DEV_SETUP(r1, 0x405c5503, &(0x7f00000000c0)={{0x9, 0xf2cf, 0x8, 0x80}, "6a034a07c7b82d90b69a39e32576f893fb4a3836d61c9100fefbbabea6ef9368c7996e841f3f1561d4992f726b0a6c36b0b2fd1678e816201cf562367fe6596824588a2e3d84ba165f00", 0xa}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x182b02, 0x0) write$auto(r2, &(0x7f0000000340)=',02.15.4 ]\x98\x0f76Rl\xf2AC\x04\xecQ=\xa2\xce\nO}\x1d\xd7\xb5\x92\xf7\xb2\xc2\xddm\xfbR\xfb\x92x\xd8\xb2\x8a&\xda\\\xa1}&^\x03\x02\xf28\xfd|\xed~\a\xaf\x14\xb5.\x92\"-6.\xb2$\x88\xeb\xdc\x0f\xba$?c\x8b\xcb\xf4q\r\xf5>}4\x99(\xb8D\x15\xb8\xc9U\x14\xd6r\xc9\x81\xbbI\xc9+^\x00\xf6\xb5\xd9\x1e\x89G?/\xc5\x86\xd0\xab\xb3\xfd\xc9?\xa7B\x1b\xdc\xff\xab\xb6~\x96\xd6\x9f\x1d\xfb\xa1dg\x9d\x8d]\xdek\x9c0\xea\xb3\nV\x1d\x10g\xaa\xf9\xf0\xc9\n\x8c\xf25G\x9c\x19\xe5\xd8\xa3\xee\x11\x12f\xd5o\x00\xeaY\n\xe0\x9f\r\xd4\x8e9G\x01\x04\xb2j\xbfYX\x9a)OQ\xedk\xb9\x85\x03c\xf3\x80\x10eG(\x94m81PL\x8d\xa47\x1a\x16\x89\x80\xed\xb3\x02\xe5tx\x90\xbe\x12\x85V\xeb\x8d\x97\xf0\x9c!\x86:\xe8\x8b\xa7@l', 0x3) ioctl$auto_UI_DEV_CREATE(r1, 0x5501, 0x0) writev$auto(r2, &(0x7f0000000080)={0x0, 0xf0}, 0x210400000000004) socket(0xa, 0x1, 0x84) 2.41104429s ago: executing program 2 (id=460): close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x200, 0x3, 0x8, 0xc, 0x2e, 0x0, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2a, 0x2, 0x1) connect$auto(r1, &(0x7f00000000c0)=@qipcrtr={0x2a, 0x1, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x10002}, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_uhid_fops_uhid(r2, 0x0, 0xfccd) mmap$auto(0x0, 0x8, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'bridge0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01022abd7000fedbdf2503000000100002800c0001000a0000000000000008000100", @ANYRES32=r6, @ANYBLOB="b00edac08338f1975a3a8b56a9150baacac7ce09a0512842180fb2b4c224b77cdc49a43fc50b2f9b6b64070636eeca8ad7bfca81bbf32cab957b920d4d57cd8a08a65288b49b29ece918104152baeb630038951a3ca57bdfacb12874199569a4aa9ac70ffa680416cbc79b8c1711febe2b23539df2ad6e4f30e63060d33789c3054baa0c83d2847be7325d3780c7fcb260a98e5c020506bd02725143eebd5a8bc7fbe099c781d73cab4a7f77dc78066b921e7072b147a300ffc326f72112e65f0578268633e5372195f9972be22a349435abc6f36d0c558c"], 0x2c}, 0x1, 0x0, 0x0, 0x20004054}, 0x480b0) pidfd_open$auto(0x1, 0x20000) socket(0x2, 0x3, 0x100) bpf$auto(0x2, &(0x7f00000001c0)=@batch={0x8000000000009, 0x80000001, 0x10008, 0x8250, 0xa6d5, 0xffffffffffffffff, 0x7, 0x6}, 0x103) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYRESDEC=0x0, @ANYRES16, @ANYBLOB="01002dbd7000fcdbdf25010000000c0002000500000000000000c5000700c1007cf7c27c120e3984130834a73f9221887ac28e443c4a1a7da8d2ddcf2890cce5822826764f3f410e53f43f300d2e04700395778e7935c99f6a38f6f3e56e7d8a18d15791b3b4f9378d743a8f0cbbe1c604a782030626ead26826f4790233f19c29fbaf1da77e1b84522d05ca0f4237b24aead87b47d41805fa9967d02ad2deba1895652b8d630c30213ed8f72c1066f1bb9fb1b242d08a55d32398d8d3c635008f2c61049c8abf600a98d1d2d0b0027aecaf27d20b6ff4129883e111e1c858000000dc00090069fccb38f57447a8af8c40a03b92af7adc0c48af4308483b99aa587ed8711b4a79a383c263698842365af6807d1be1800fd492770983a6df345fb472e9fa41b667af43bc36d7063b6b93ab7661925e8d71452acd95b788c31a32ae903b96b9ed9a5e3542c625105e8f21a5b41ff3d17f8704581f4b8b75ae741d0fba8cab2e187c93eeea89f6cf6ab7cc496e0bd9759cc0b408bbe0c6eae2aa29c2d97d48a55fc0ff937c90173d61cf652f97cb301e4d7e3bac0026732e22eadd3a6c5ffa4faed6855a86814c920a650a61936305d2713db1c92a238e265c080001007f0e00000c0002", @ANYRES64=r0], 0x1d8}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) r7 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000900), 0x8040, 0x0) ioctl$auto_UI_DEV_DESTROY(r7, 0x5502, 0x0) r8 = socket(0x10, 0x6, 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x1e62a14e64d5cd38) 2.107459263s ago: executing program 2 (id=461): r0 = pipe$auto(&(0x7f0000000040)=0xffffffffffffffff) tee$auto(r1, r0, 0x5, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) write$auto_proc_mem_operations_base(0xffffffffffffffff, &(0x7f0000000000)="351ff6218163cce8505bf40fca856149f185354f86f6766b73aeb066b2a65290e689cb5a9cd45a63766508ae821ea42a555887244ce3a5676c4a8f62c1dadfd6efc8b8dd0eae0c03292f536b2b5042c923", 0x51) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x1, 0x401, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x3) close_range$auto(0x2, 0x8, 0x0) 2.029340685s ago: executing program 2 (id=462): r0 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0x0) r1 = socket(0xa, 0x801, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) r4 = waitid$auto_P_ALL(0x0, 0x1, &(0x7f00000001c0)={@_si_pad}, 0xff, &(0x7f0000000240)={{0x971, 0x2}, {0x5, 0x9}, 0x5, 0x1, 0x1, 0x4, 0x0, 0x8, 0x9, 0x5, 0x8, 0x8d, 0x100, 0x755, 0x2, 0x1}) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) r7 = getegid() setregid$auto(r7, r7) msgctl$auto(0x2, 0xa5, &(0x7f0000000280)={{0x0, r6, r7, 0x1, 0x7fff, 0x1, 0x8}, 0x0, &(0x7f0000000240)=0x7f, 0xfffe0, 0x8e, 0x7, 0x6, 0x8000000000000000, 0x7, 0x7, 0xe5e, @raw=0x4}) sendmsg$auto_TIPC_NL_MON_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000780)=ANY=[@ANYBLOB="f4030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="710012007844d878563ad400453759d245ae91927f8fbc9771bcc79772cbe2812fda26cb08da210a00338013bc0d83d4d08907bba19ed8adab5d9c1fcb0e183ea1e3f1b5aabfbee135fa28077995ef266e2e8dc96f7b9823a9a667233f580460e02bc8fd6404bcec8d272d2443ae96dd91000000000008001f00", @ANYRES32=r4, @ANYBLOB="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"], 0x3f4}, 0x1, 0x0, 0x0, 0x4000010}, 0xc050) bind$auto(r1, &(0x7f0000000040)=@generic={0x1a, "9c8780000b00000000e4030800"}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xff}}, 0x54) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x7d4c56873391682, 0x70bd2b, 0x25dfdbfc, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x26}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4048840) 1.948409568s ago: executing program 1 (id=463): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x4a0480, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x1, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x40901, 0x0) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = setfsuid$auto(0xee00) r3 = setfsuid$auto(0xee01) setresuid$auto(r2, r3, 0x0) r4 = pidfd_open$auto(0x1, 0x0) setns(r4, 0x60020000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x37}}, 0x6e) mmap$auto(0x0, 0x20005, 0x6, 0x17, 0x401, 0x8000) r5 = epoll_create$auto(0x20009) sendmsg$auto_NFC_CMD_DEACTIVATE_TARGET(r5, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xc0000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="0c0026bd7a5afe0a005f000001000000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x24040000) r6 = epoll_create$auto(0x3e) epoll_ctl$auto(r6, 0x1, r5, 0x0) r7 = socket(0x2b, 0x1, 0x1) ioctl$auto(r7, 0x89a0, 0x4) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(r1, 0x0, 0x8) unshare$auto(0x40000080) sendto$auto(0x3, 0x0, 0x100000000, 0x40000008, 0x0, 0x19) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.767339968s ago: executing program 2 (id=464): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:03.0/resource0\x00', 0x103000, 0x0) readv$auto(0x3, &(0x7f0000003080)={&(0x7f0000003040), 0x4}, 0x9) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/ksm/max_page_sharing\x00', 0x12b141, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto(0xffffffffffffffff, 0x8b, 0x7fc, 0x0, 0x0) mmap$auto(0x0, 0x8, 0x3, 0xa2fc, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0xd, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x7) bind$auto(0x3, &(0x7f0000000040)=@isdn={0x22, 0x0, 0x5, 0x3, 0x6}, 0x9) r1 = fsopen$auto(0x0, 0x800003) execve$auto(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=&(0x7f00000000c0)='{$%..&\x00', &(0x7f0000000480)=&(0x7f00000002c0)='--\x00') fsconfig$auto(r1, 0x8, 0x0, 0x0, 0x0) r2 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) fsconfig$auto_FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000300)='\v\'\bn\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x1e7\xbb\xedO#\x14mC\x97\x06\xd9bZ\xddL\'\x03\x00\xff\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\xc6\xc0\x8b\xc0CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xed<\x86[c4%\xa3\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6\b\xe5\xaaJ+\x02\x9b#\xa9\x9b\x17\x82\xd7\xee\xd1\xbf2\x03\x00\x00\x00\x00\x00\x00\x00B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\x00\x00\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\xb2\x1d\xb3\xef#\xcb}b\x90\xafR\xf5\x8cg\x95A\x89\x8d\x9a\xfcV\x9bm\xd4\x82\x7f9\x12\x98\x1c\x8e\x1f\xdc\xe5Y\x7f\xe8\xe1g%\xb8\xf9b!\xc8\xa0\xf7\x06\xbb\xdf\x1d\xfb\x00\x979\x8e\xd0AP\xbf\x1fM\x1fd~\xeeS^8v\x80\x1b\xb1I\xb1\xa4\x89\xc7\x9d\xf2P\x04\x99N{\x9a\xfa\xf3\xcb\xc3Bx\xb5\xb8*\xa0-\xda\x84\xc5S\xe2\xc6\x92/\xed\xc2\xceK\xad\x00\x00*)Hh\x8d\x06cQ\xf1\x9d\xad\r}\x15e\x18\x06\xe3\xd2\xe4Q', &(0x7f0000000280), 0x5) read$auto_udf_dir_operations_udfdecl(r1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = clone$auto(0x20003b4a, 0xecc, 0x0, 0x0, 0x2) pidfd_open$auto(r3, 0x0) r4 = gettid() kill$auto(r4, 0x11) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000180)={{@inferred=0xffffffffffffffff, 0xc, 0xf, 0x3, "40d0e9210f1357fa36c4ec1d8808409090383d894a3fbe72239c6a0a1c277a9531e39b7bf0ef8e44f714f946", @inferred=r3}, 0x8, 0x6, 0x27, @inferred=r4, @integer={0x1, 0xd9fc, 0x4}, "4380fde44f8f63bda8357ad39e50327a84df1d338eaa329dd0e9257a121a390acfbaf2a916533a0a1381384b2d821867def106317dbb403ab7adfbf96d2c254f"}) write$auto(r0, &(0x7f0000000140)='-\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 1.59624035s ago: executing program 2 (id=465): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nvmet_tcp/parameters/idle_poll_period_usecs\x00', 0x9801, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(r0, 0xffffffffffffffff, 0x8) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(0xffffffffffffffff, 0x0, 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000002140)=""/4119, 0x1017) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) wait4$auto(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000140)={{0x4c923e90}, {0x6, 0x9}, 0x4, 0x2, 0x83b9, 0xfffffffffffffffb, 0x23d6, 0x7, 0xfffffffffffff000, 0x6, 0x5, 0x7f, 0xffffffffffffffff, 0x8, 0x8, 0x8}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr14/proto_down\x00', 0x82942, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0xc0000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x189401, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_GET_MSRS(r2, 0x4140aecd, &(0x7f00000000c0)={0xdd}) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) unshare$auto(0x40000080) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000580)={{@raw=0x7fffffff, 0xf0ee, 0x20009, 0x3, "790eaa833e6fc65b6b3cf705001900ffff8eac2cdafc1f64010043eeb0b0530300000000000e00", @raw=0x1}, 0x4, 0x966, 0x3, @raw=0x404, @integer={0x800000000000400e, 0x2000000b752, 0x1}, "6cc1294d63a4f1b4285854c5368de438f8cc142ef6df12bf3373a1183bedbd31b642b4051b078fa1c1c61c329794e5311121c760cb9611c78e6947a99807bcc1"}) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x200, 0x0) 1.585101952s ago: executing program 0 (id=466): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(r0, &(0x7f0000000040)='//\xf2\x00', 0x80000000) (async) write$auto(r0, 0x0, 0x2) (async) getrlimit$auto(0x3, 0x0) (async) fdatasync$auto(r0) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) ioctl$auto_BLKZEROOUT(r1, 0x127f, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000380)='/dev/snd/controlC2\x00', 0x400, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/035/001\x00', 0x1102, 0x0) (async) write$auto(0xffffffffffffffff, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xc8d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\xc6\x00\x89\te\x8d\a\xfb\\n\x89C:\x84D\x10u\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k', 0x100000a3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8ea182, 0x0) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) init_module$auto(0x0, 0xffff9, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) madvise$auto(0x0, 0x8000000000000000, 0x15) (async) madvise$auto(0x0, 0x2000000080000001, 0x3) (async) linkat$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x400) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$auto_dma_heap_fops_dma_heap(r2, 0xffffffffffdffe00, &(0x7f0000000140)=';') (async) pselect6$auto(0x9, &(0x7f0000000300)={[0x9, 0x4, 0x9, 0x6, 0x8001, 0x4000000000002bc8, 0xffd, 0x9, 0x3, 0xffffffff, 0x8000000000000001, 0x0, 0x2f, 0x2, 0x8, 0xfffffffffffffffe]}, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) 727.753834ms ago: executing program 2 (id=467): syslog$auto(0x3, 0x0, 0xffffffb9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) ioctl$auto_SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a5, 0x47ffff7a) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xfffffffd}, 0x10001}, 0x5, 0x20000000) semctl$auto_GETNCNT(0x5, 0x6, 0xe, 0xf) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fadvise64$auto_POSIX_FADV_NORMAL(0xffffffffffffffff, 0x7, 0xd, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_LEAVE_IBSS(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[], 0xf8}, 0x1, 0x0, 0x0, 0x50}, 0x4000001) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) bind$auto(0x3, 0x0, 0x8000006a) recvmmsg$auto(0x3, 0x0, 0x10000, 0x5, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video40\x00', 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x20004, 0xa0, 0xeb1, 0x8000000000000024, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x102, 0x0) 227.3547ms ago: executing program 0 (id=468): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="000429bd7000fbdbdf250200140008000300", @ANYRES32=r1, @ANYBLOB="93ea2d739f0c60364c031f57f28f002705fa896fe8d8df7cf527807c47473c00dc9d03b3978aae0c7c87e16a47f4"], 0x1c}, 0x1, 0x1400, 0x0, 0x40884}, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_GTP_CMD_DELPDP(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$auto_GTP_CMD_GETPDP(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400001a", @ANYRES16=r3, @ANYBLOB="00042bbd7000fedbdf250200000008000200c6a400000c000300000000000000000008000400ac1e010114000c00fc010000000000000000000000000001"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2aeb8e1ecc15b2bc) r4 = socket(0xa, 0x5, 0x84) sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "000000000000fe8000"}, 0x1f) 101.81717ms ago: executing program 0 (id=469): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) r2 = socketcall$auto_SYS_ACCEPT(0x5, 0x0) quotactl_fd$auto(r2, 0xfffb, 0x0, 0x0) r3 = socket(0x2b, 0x1, 0x0) getsockopt$auto_SO_PEEK_OFF(r3, 0x6, 0x2a, 0x0, &(0x7f0000000240)=0x71cd) fchmod$auto(r1, 0x7439) fchown$auto(r1, 0x0, 0x400) r4 = creat$auto(0x0, 0xcc38) mprotect$auto(0x200000000000, 0x806121, 0x8) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r5, 0x800, 0x70bd2f, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x804) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSCOMPRESS(r0, 0x4010744d, &(0x7f0000000040)={0x0, 0xffff8000, 0x84}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x40000008000) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) (async) socketcall$auto_SYS_ACCEPT(0x5, 0x0) (async) quotactl_fd$auto(r2, 0xfffb, 0x0, 0x0) (async) socket(0x2b, 0x1, 0x0) (async) getsockopt$auto_SO_PEEK_OFF(r3, 0x6, 0x2a, 0x0, &(0x7f0000000240)=0x71cd) (async) fchmod$auto(r1, 0x7439) (async) fchown$auto(r1, 0x0, 0x400) (async) creat$auto(0x0, 0xcc38) (async) mprotect$auto(0x200000000000, 0x806121, 0x8) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r4) (async) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, r5, 0x800, 0x70bd2f, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x804) (async) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) ioctl$auto_PPPIOCSCOMPRESS(r0, 0x4010744d, &(0x7f0000000040)={0x0, 0xffff8000, 0x84}) (async) 0s ago: executing program 3 (id=470): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x800000000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nvmet_tcp/parameters/idle_poll_period_usecs\x00', 0x9801, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/cpu/crash_hotplug\x00', 0x8a080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000002140)=""/4119, 0x1017) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop6\x00', 0x200, 0x0) ioctl$auto_SG_GET_RESERVED_SIZE(r1, 0x4c06, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. [ 85.536959][ T5811] cgroup: Unknown subsys name 'net' [ 85.714836][ T5811] cgroup: Unknown subsys name 'cpuset' [ 85.726295][ T5811] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 87.447067][ T5811] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.243594][ T5825] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.255076][ T5825] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.265210][ T5825] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.289589][ T5825] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.298121][ T5825] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.418227][ T5830] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.439548][ T5830] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.448789][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.459905][ T5830] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.469386][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.471569][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.478766][ T5830] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.494085][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.501601][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.510622][ T5830] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.519700][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.528116][ T5830] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.536557][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.546212][ T5830] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.555499][ T5830] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.752372][ T5822] chnl_net:caif_netlink_parms(): no params data found [ 89.991623][ T5822] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.999843][ T5822] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.007270][ T5822] bridge_slave_0: entered allmulticast mode [ 90.014784][ T5822] bridge_slave_0: entered promiscuous mode [ 90.038291][ T5822] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.045972][ T5822] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.053578][ T5822] bridge_slave_1: entered allmulticast mode [ 90.061863][ T5822] bridge_slave_1: entered promiscuous mode [ 90.134897][ T5822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.169714][ T5822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.180100][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 90.255486][ T5822] team0: Port device team_slave_0 added [ 90.272685][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.292708][ T5822] team0: Port device team_slave_1 added [ 90.376450][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.383715][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.410875][ T5822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.450321][ T5822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.457438][ T5822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.485495][ T5822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.545368][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 90.564349][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.572140][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.579846][ T5828] bridge_slave_0: entered allmulticast mode [ 90.587076][ T5828] bridge_slave_0: entered promiscuous mode [ 90.616848][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.624332][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.631810][ T5828] bridge_slave_1: entered allmulticast mode [ 90.639329][ T5828] bridge_slave_1: entered promiscuous mode [ 90.712228][ T5822] hsr_slave_0: entered promiscuous mode [ 90.719638][ T5822] hsr_slave_1: entered promiscuous mode [ 90.747855][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.755234][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.762913][ T5829] bridge_slave_0: entered allmulticast mode [ 90.770434][ T5829] bridge_slave_0: entered promiscuous mode [ 90.785073][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.808657][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.816003][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.824725][ T5829] bridge_slave_1: entered allmulticast mode [ 90.832847][ T5829] bridge_slave_1: entered promiscuous mode [ 90.857474][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.935632][ T5828] team0: Port device team_slave_0 added [ 90.942229][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.955180][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.963637][ T5827] bridge_slave_0: entered allmulticast mode [ 90.972048][ T5827] bridge_slave_0: entered promiscuous mode [ 90.993215][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.006458][ T5828] team0: Port device team_slave_1 added [ 91.013285][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.021595][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.030092][ T5827] bridge_slave_1: entered allmulticast mode [ 91.037612][ T5827] bridge_slave_1: entered promiscuous mode [ 91.057722][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.144034][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.151383][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.180230][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.195663][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.215820][ T5829] team0: Port device team_slave_0 added [ 91.223929][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.232256][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.262721][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.280102][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.297981][ T5829] team0: Port device team_slave_1 added [ 91.350035][ T5830] Bluetooth: hci0: command tx timeout [ 91.379725][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.387594][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.423839][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.443239][ T5827] team0: Port device team_slave_0 added [ 91.456560][ T5827] team0: Port device team_slave_1 added [ 91.486885][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.497038][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.528466][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.579806][ T5830] Bluetooth: hci3: command tx timeout [ 91.579809][ T52] Bluetooth: hci1: command tx timeout [ 91.626453][ T5828] hsr_slave_0: entered promiscuous mode [ 91.634610][ T5828] hsr_slave_1: entered promiscuous mode [ 91.642237][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 91.651706][ T5828] Cannot create hsr debugfs directory [ 91.658802][ T52] Bluetooth: hci2: command tx timeout [ 91.681080][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.690278][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.720445][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.757844][ T5829] hsr_slave_0: entered promiscuous mode [ 91.766078][ T5829] hsr_slave_1: entered promiscuous mode [ 91.774988][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 91.782677][ T5829] Cannot create hsr debugfs directory [ 91.790835][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.799782][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.828487][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.058573][ T5827] hsr_slave_0: entered promiscuous mode [ 92.066838][ T5827] hsr_slave_1: entered promiscuous mode [ 92.074667][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 92.081671][ T5827] Cannot create hsr debugfs directory [ 92.213909][ T5822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.235495][ T5822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.265422][ T5822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.283849][ T5822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.538070][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.563317][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.582622][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.633333][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.736289][ T5829] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.755682][ T5829] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.785809][ T5829] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.802932][ T5829] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.919942][ T5827] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.935264][ T5827] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.946836][ T5827] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.961953][ T5827] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.978037][ T5822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.044081][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.067865][ T5822] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.122723][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.130111][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.155862][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.165253][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.172584][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.213948][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.221141][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.253198][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.260425][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.292619][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.395011][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.405045][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.419532][ T52] Bluetooth: hci0: command tx timeout [ 93.457166][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.464692][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.477492][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.484885][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.556705][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.604457][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.612210][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.636955][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.644381][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.661976][ T52] Bluetooth: hci3: command tx timeout [ 93.667597][ T52] Bluetooth: hci1: command tx timeout [ 93.741476][ T52] Bluetooth: hci2: command tx timeout [ 93.863926][ T5822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.951622][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.066822][ T5822] veth0_vlan: entered promiscuous mode [ 94.112457][ T5822] veth1_vlan: entered promiscuous mode [ 94.232277][ T5828] veth0_vlan: entered promiscuous mode [ 94.266567][ T5828] veth1_vlan: entered promiscuous mode [ 94.281915][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.302718][ T5822] veth0_macvtap: entered promiscuous mode [ 94.333887][ T5822] veth1_macvtap: entered promiscuous mode [ 94.385575][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.401801][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.423979][ T5828] veth0_macvtap: entered promiscuous mode [ 94.443021][ T5822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.455629][ T5828] veth1_macvtap: entered promiscuous mode [ 94.504018][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.512774][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.523954][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.548578][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.559791][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.587852][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.651743][ T5829] veth0_vlan: entered promiscuous mode [ 94.674279][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.691597][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.704227][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.732529][ T5827] veth0_vlan: entered promiscuous mode [ 94.741908][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.770396][ T5829] veth1_vlan: entered promiscuous mode [ 94.802658][ T5827] veth1_vlan: entered promiscuous mode [ 94.814780][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.833154][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.919836][ T5827] veth0_macvtap: entered promiscuous mode [ 94.928123][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.939759][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.966747][ T5827] veth1_macvtap: entered promiscuous mode [ 94.975916][ T5829] veth0_macvtap: entered promiscuous mode [ 95.001492][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.001669][ T5829] veth1_macvtap: entered promiscuous mode [ 95.013957][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.041238][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.084517][ T5822] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.105213][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.132209][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.150051][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.162590][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.186259][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.201309][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.212814][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.238535][ T2950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.274402][ T2950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.324571][ T2950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.367624][ T2950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.389859][ T2950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.434607][ T2950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.499499][ T52] Bluetooth: hci0: command tx timeout [ 95.652959][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.672054][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.740655][ T52] Bluetooth: hci1: command tx timeout [ 95.748907][ T52] Bluetooth: hci3: command tx timeout [ 95.758755][ T5920] futex_wake_op: syz.1.2 tries to shift op by -1; fix this program [ 95.818771][ T52] Bluetooth: hci2: command tx timeout [ 95.903670][ T5923] mmap: syz.0.1 (5923) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.932954][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.957167][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.069268][ T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.080706][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.091988][ T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.104226][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.368956][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 96.758873][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.768364][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.779970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 96.844913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.907012][ T5938] bridge0: port 3(bond0) entered blocking state [ 96.915070][ T5938] bridge0: port 3(bond0) entered disabled state [ 96.923112][ T5938] bond0: entered allmulticast mode [ 96.929363][ T5938] bond_slave_0: entered allmulticast mode [ 96.977538][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.982997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 97.024179][ T5938] bond_slave_1: entered allmulticast mode [ 97.045942][ T5938] bond0: entered promiscuous mode [ 97.120120][ T5938] bond_slave_0: entered promiscuous mode [ 97.139757][ T5938] bond_slave_1: entered promiscuous mode [ 97.161784][ T5938] bridge0: port 3(bond0) entered blocking state [ 97.169525][ T5938] bridge0: port 3(bond0) entered forwarding state [ 97.294844][ T5917] Process accounting resumed [ 97.471177][ T798] cfg80211: failed to load regulatory.db [ 97.506504][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.585304][ T52] Bluetooth: hci0: command tx timeout [ 97.619168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.709148][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.718584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 97.829161][ T5830] Bluetooth: hci3: command tx timeout [ 97.829187][ T52] Bluetooth: hci1: command tx timeout [ 97.899074][ T52] Bluetooth: hci2: command tx timeout [ 102.734611][ T6002] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.688755][ T6046] Zero length message leads to an empty skb [ 107.237069][ T6063] Invalid ELF header magic: != ELF [ 107.253489][ T6066] netlink: 'syz.3.27': attribute type 1 has an invalid length. [ 109.985386][ T6100] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 110.543324][ T6112] random: crng reseeded on system resumption [ 111.205518][ T6112] hub 1-0:1.0: USB hub found [ 111.270751][ T6112] hub 1-0:1.0: 1 port detected [ 111.882024][ T6124] loop6: detected capacity change from 0 to 8 [ 112.767687][ T6135] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 113.964894][ T52] Bluetooth: hci1: Malformed LE Event: 0x0b [ 115.164623][ T6169] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 115.582683][ T30] audit: type=1326 audit(1770251916.333:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6165 comm="syz.1.47" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd4acf9aeb9 code=0x0 [ 115.806230][ T6169] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 115.806230][ T6169] The task syz.1.47 (6169) triggered the difference, watch for misbehavior. [ 120.565756][ T6246] futex_wake_op: syz.1.64 tries to shift op by -2048; fix this program [ 120.581897][ T6246] 0x000000000000-0x000000020000 : "" [ 120.583371][ T6243] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 120.599243][ T6246] ftl_cs: FTL header not found. [ 121.362697][ T6257] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.585518][ T6264] netlink: 28 bytes leftover after parsing attributes in process `syz.2.67'. [ 121.861718][ T6267] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input5 [ 122.255313][ T6277] block nbd7: not configured, cannot reconfigure [ 122.397493][ T6274] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 122.958841][ T6288] input: f as /devices/virtual/input/input7 [ 123.282858][ T6289] zram: Removed device: zram0 [ 123.650533][ T6298] futex_wake_op: syz.2.75 tries to shift op by -2048; fix this program [ 123.665406][ T6298] 0x000000000000-0x000000020000 : "" [ 123.697154][ T6298] ftl_cs: FTL header not found. [ 125.892973][ T6341] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input8 [ 126.351687][ T6347] block nbd7: not configured, cannot reconfigure [ 126.454917][ T6342] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input9 [ 127.552911][ T6350] Process accounting paused [ 127.695175][ T6361] netlink: 28 bytes leftover after parsing attributes in process `syz.0.86'. [ 127.903897][ T6364] input: f as /devices/virtual/input/input10 [ 136.214174][ T52] Bluetooth: hci3: Malformed LE Event: 0x0b [ 138.037606][ T6469] netlink: 8 bytes leftover after parsing attributes in process `syz.0.102'. [ 138.181538][ T6469] FAULT_INJECTION: forcing a failure. [ 138.181538][ T6469] name failslab, interval 1, probability 0, space 0, times 1 [ 138.271600][ T6469] CPU: 0 UID: 0 PID: 6469 Comm: syz.0.102 Not tainted syzkaller #0 PREEMPT(full) [ 138.271634][ T6469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 138.271650][ T6469] Call Trace: [ 138.271657][ T6469] [ 138.271665][ T6469] dump_stack_lvl+0x100/0x190 [ 138.271702][ T6469] should_fail_ex.cold+0x5/0xa [ 138.271746][ T6469] should_failslab+0xc2/0x120 [ 138.271768][ T6469] ? ring_buffer_read_start+0x1b9/0x460 [ 138.271793][ T6469] __kmalloc_noprof+0xf6/0x9c0 [ 138.271815][ T6469] ? ring_buffer_read_start+0x1b9/0x460 [ 138.271842][ T6469] ring_buffer_read_start+0x1b9/0x460 [ 138.271866][ T6469] ? __pfx_ring_buffer_read_start+0x10/0x10 [ 138.271888][ T6469] ? lockdep_init_map_type+0x5c/0x250 [ 138.271911][ T6469] ? ring_buffer_overruns+0x14e/0x1a0 [ 138.271932][ T6469] tracing_open+0x986/0xe00 [ 138.271962][ T6469] do_dentry_open+0x73e/0x1570 [ 138.272106][ T6469] ? __pfx_tracing_open+0x10/0x10 [ 138.272155][ T6469] ? security_inode_permission+0xbf/0x250 [ 138.272204][ T6469] vfs_open+0x82/0x3f0 [ 138.272246][ T6469] path_openat+0x21dc/0x3120 [ 138.272290][ T6469] ? __pfx_path_openat+0x10/0x10 [ 138.272339][ T6469] do_filp_open+0x1f7/0x420 [ 138.272376][ T6469] ? __pfx_do_filp_open+0x10/0x10 [ 138.272438][ T6469] ? _raw_spin_unlock+0x28/0x50 [ 138.272468][ T6469] ? alloc_fd+0x476/0x790 [ 138.272515][ T6469] do_sys_openat2+0x12e/0x220 [ 138.272561][ T6469] ? __pfx_do_sys_openat2+0x10/0x10 [ 138.272608][ T6469] ? __fget_files+0x21f/0x3d0 [ 138.272649][ T6469] __x64_sys_openat+0x12d/0x210 [ 138.272703][ T6469] ? __pfx___x64_sys_openat+0x10/0x10 [ 138.272821][ T6469] ? xfd_validate_state+0x129/0x190 [ 138.272880][ T6469] do_syscall_64+0xc9/0xf80 [ 138.272920][ T6469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.272958][ T6469] RIP: 0033:0x7f489079aeb9 [ 138.272999][ T6469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.273033][ T6469] RSP: 002b:00007f489164e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 138.273068][ T6469] RAX: ffffffffffffffda RBX: 00007f4890a15fa0 RCX: 00007f489079aeb9 [ 138.273088][ T6469] RDX: 1a6b75d638828712 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 138.273110][ T6469] RBP: 00007f4890808c1f R08: 0000000000000000 R09: 0000000000000000 [ 138.273128][ T6469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 138.273145][ T6469] R13: 00007f4890a16038 R14: 00007f4890a15fa0 R15: 00007ffeb4d92d98 [ 138.273184][ T6469] [ 138.629536][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.636183][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.058429][ T6486] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 140.010948][ T6508] netlink: 'syz.0.111': attribute type 1 has an invalid length. [ 148.730805][ T6647] netlink: 'syz.0.139': attribute type 2 has an invalid length. [ 149.144806][ T6653] ptp ptp0: new virtual clock ptp1 [ 149.179305][ T6653] ptp ptp0: guarantee physical clock free running [ 149.270681][ T6655] ptp ptp0: delete virtual clock ptp1 [ 149.335814][ T6655] ptp ptp0: only physical clock in use now [ 150.598484][ T6692] netlink: 2468 bytes leftover after parsing attributes in process `syz.0.150'. [ 151.153059][ T6693] syz.1.147 uses obsolete (PF_INET,SOCK_PACKET) [ 153.213325][ T6739] tipc: Started in network mode [ 153.218424][ T6739] tipc: Node identity ee00, cluster identity 4711 [ 153.232386][ T6739] tipc: Node number set to 60928 [ 155.010548][ T6781] sock: sock_set_timeout: `syz.2.168' (pid 6781) tries to set negative timeout [ 155.177963][ T6783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.169'. [ 155.550071][ T6809] netlink: 9 bytes leftover after parsing attributes in process `syz.0.175'. [ 155.575577][ T6805] netlink: 338 bytes leftover after parsing attributes in process `syz.1.173'. [ 155.745722][ T6805] veth1_macvtap: left promiscuous mode [ 155.753904][ T6805] macsec0: entered allmulticast mode [ 157.804992][ T6847] netlink: 342 bytes leftover after parsing attributes in process `syz.2.184'. [ 157.834508][ T6842] Process accounting resumed [ 161.865827][ T6946] netlink: 62 bytes leftover after parsing attributes in process `syz.3.199'. [ 162.247995][ T6962] FAULT_INJECTION: forcing a failure. [ 162.247995][ T6962] name failslab, interval 1, probability 0, space 0, times 0 [ 162.269133][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.3.202 Not tainted syzkaller #0 PREEMPT(full) [ 162.269155][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 162.269165][ T6962] Call Trace: [ 162.269170][ T6962] [ 162.269176][ T6962] dump_stack_lvl+0x100/0x190 [ 162.269203][ T6962] should_fail_ex.cold+0x5/0xa [ 162.269233][ T6962] should_failslab+0xc2/0x120 [ 162.269262][ T6962] kmem_cache_alloc_noprof+0x83/0x780 [ 162.269283][ T6962] ? mas_alloc_nodes+0x280/0x390 [ 162.269302][ T6962] ? mas_alloc_nodes+0x280/0x390 [ 162.269315][ T6962] mas_alloc_nodes+0x280/0x390 [ 162.269332][ T6962] mas_preallocate+0x39c/0xf10 [ 162.269355][ T6962] ? __pfx_mas_preallocate+0x10/0x10 [ 162.269379][ T6962] ? anon_vma_name+0x81/0x2c0 [ 162.269403][ T6962] __split_vma+0x33d/0xe30 [ 162.269422][ T6962] ? __pfx___split_vma+0x10/0x10 [ 162.269448][ T6962] vms_gather_munmap_vmas+0x3aa/0x1320 [ 162.269468][ T6962] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 162.269488][ T6962] ? mas_walk+0x6ef/0x9b0 [ 162.269509][ T6962] __mmap_region+0x46e/0x2820 [ 162.269533][ T6962] ? __pfx___mmap_region+0x10/0x10 [ 162.269557][ T6962] ? lock_acquire+0x17c/0x330 [ 162.269576][ T6962] ? find_held_lock+0x2b/0x80 [ 162.269590][ T6962] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 162.269606][ T6962] ? finish_task_switch.isra.0+0x1ff/0xb70 [ 162.269624][ T6962] ? rcu_is_watching+0x12/0xc0 [ 162.269638][ T6962] ? finish_task_switch.isra.0+0x204/0xb70 [ 162.269653][ T6962] ? lockdep_hardirqs_on+0x78/0x100 [ 162.269671][ T6962] ? finish_task_switch.isra.0+0x204/0xb70 [ 162.269721][ T6962] ? rcu_is_watching+0x12/0xc0 [ 162.269740][ T6962] mmap_region+0x180/0x3e0 [ 162.269761][ T6962] do_mmap+0xc63/0x12f0 [ 162.269785][ T6962] ? __pfx_do_mmap+0x10/0x10 [ 162.269806][ T6962] ? __pfx_down_write_killable+0x10/0x10 [ 162.269830][ T6962] vm_mmap_pgoff+0x29e/0x470 [ 162.269855][ T6962] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 162.269880][ T6962] ? __x64_sys_futex+0x34f/0x4d0 [ 162.269900][ T6962] ? __x64_sys_futex+0x358/0x4d0 [ 162.269922][ T6962] ksys_mmap_pgoff+0x7d/0x5b0 [ 162.269945][ T6962] __x64_sys_mmap+0x125/0x190 [ 162.269962][ T6962] do_syscall_64+0xc9/0xf80 [ 162.269981][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.269996][ T6962] RIP: 0033:0x7f7c8659aeb9 [ 162.270013][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 162.270027][ T6962] RSP: 002b:00007f7c8737a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 162.270042][ T6962] RAX: ffffffffffffffda RBX: 00007f7c86816090 RCX: 00007f7c8659aeb9 [ 162.270052][ T6962] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 162.270061][ T6962] RBP: 00007f7c86608c1f R08: 0000000000000002 R09: 0000000000008000 [ 162.270070][ T6962] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 162.270078][ T6962] R13: 00007f7c86816128 R14: 00007f7c86816090 R15: 00007fff6c3684b8 [ 162.270098][ T6962] [ 163.237910][ T6969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.205'. [ 163.313165][ T6970] netlink: 28 bytes leftover after parsing attributes in process `syz.3.205'. [ 164.189800][ T6997] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 164.650691][ T52] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 164.675947][ T52] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 164.683506][ T52] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 165.640110][ T7021] vhci_hcd vhci_hcd.2: invalid port number 194 [ 165.647491][ T7025] process 'syz.2.216' launched ':,' with NULL argv: empty string added [ 165.668739][ T7021] vhci_hcd vhci_hcd.2: invalid port number 194 [ 168.582749][ T7101] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 169.059610][ T7101] FAULT_INJECTION: forcing a failure. [ 169.059610][ T7101] name fail_futex, interval 1, probability 0, space 0, times 1 [ 169.187677][ T7101] CPU: 0 UID: 0 PID: 7101 Comm: syz.1.232 Not tainted syzkaller #0 PREEMPT(full) [ 169.187721][ T7101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 169.187740][ T7101] Call Trace: [ 169.187749][ T7101] [ 169.187758][ T7101] dump_stack_lvl+0x100/0x190 [ 169.187801][ T7101] should_fail_ex.cold+0x5/0xa [ 169.187848][ T7101] get_futex_key+0x1d2/0x1620 [ 169.187889][ T7101] ? __pfx_get_futex_key+0x10/0x10 [ 169.187943][ T7101] futex_wake+0xea/0x530 [ 169.187990][ T7101] ? __lock_acquire+0x4a5/0x2630 [ 169.188031][ T7101] ? __pfx_futex_wake+0x10/0x10 [ 169.188091][ T7101] do_futex+0x32b/0x350 [ 169.188131][ T7101] ? __pfx_do_futex+0x10/0x10 [ 169.188179][ T7101] __x64_sys_futex+0x34f/0x4d0 [ 169.188220][ T7101] ? fdget+0x18b/0x210 [ 169.188251][ T7101] ? __pfx___x64_sys_futex+0x10/0x10 [ 169.188304][ T7101] do_syscall_64+0xc9/0xf80 [ 169.188343][ T7101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.188375][ T7101] RIP: 0033:0x7fd4acf9aeb9 [ 169.188398][ T7101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 169.188423][ T7101] RSP: 002b:00007fd4ade650e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 169.188451][ T7101] RAX: ffffffffffffffda RBX: 00007fd4ad216098 RCX: 00007fd4acf9aeb9 [ 169.188472][ T7101] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd4ad21609c [ 169.188490][ T7101] RBP: 00007fd4ad216090 R08: 0000000000000000 R09: 0000000000000000 [ 169.188507][ T7101] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 169.188524][ T7101] R13: 00007fd4ad216128 R14: 00007ffd28c957f0 R15: 00007ffd28c958d8 [ 169.188561][ T7101] [ 169.693000][ T7115] input: 9%vJ,6 as /devices/virtual/input/input11 [ 173.980488][ T7167] FAULT_INJECTION: forcing a failure. [ 173.980488][ T7167] name failslab, interval 1, probability 0, space 0, times 0 [ 173.994763][ T7167] CPU: 0 UID: 0 PID: 7167 Comm: syz.0.244 Not tainted syzkaller #0 PREEMPT(full) [ 173.994789][ T7167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 173.994799][ T7167] Call Trace: [ 173.994805][ T7167] [ 173.994811][ T7167] dump_stack_lvl+0x100/0x190 [ 173.994839][ T7167] should_fail_ex.cold+0x5/0xa [ 173.994867][ T7167] should_failslab+0xc2/0x120 [ 173.994891][ T7167] __kmalloc_cache_noprof+0x80/0x810 [ 173.994907][ T7167] ? apparmor_file_open+0x1a6/0xbd0 [ 173.994926][ T7167] ? __configfs_open_file+0xcb/0x9c0 [ 173.994953][ T7167] ? __configfs_open_file+0xcb/0x9c0 [ 173.994977][ T7167] __configfs_open_file+0xcb/0x9c0 [ 173.995002][ T7167] do_dentry_open+0x73e/0x1570 [ 173.995020][ T7167] ? __pfx_configfs_open_file+0x10/0x10 [ 173.995042][ T7167] ? security_inode_permission+0xbf/0x250 [ 173.995067][ T7167] vfs_open+0x82/0x3f0 [ 173.995090][ T7167] path_openat+0x21dc/0x3120 [ 173.995114][ T7167] ? __pfx_path_openat+0x10/0x10 [ 173.995138][ T7167] do_filp_open+0x1f7/0x420 [ 173.995156][ T7167] ? __pfx_do_filp_open+0x10/0x10 [ 173.995186][ T7167] ? _raw_spin_unlock+0x28/0x50 [ 173.995202][ T7167] ? alloc_fd+0x476/0x790 [ 173.995231][ T7167] do_sys_openat2+0x12e/0x220 [ 173.995255][ T7167] ? __pfx_do_sys_openat2+0x10/0x10 [ 173.995281][ T7167] ? __fget_files+0x21f/0x3d0 [ 173.995303][ T7167] __x64_sys_openat+0x12d/0x210 [ 173.995328][ T7167] ? __pfx___x64_sys_openat+0x10/0x10 [ 173.995352][ T7167] ? xfd_validate_state+0x129/0x190 [ 173.995382][ T7167] do_syscall_64+0xc9/0xf80 [ 173.995402][ T7167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.995417][ T7167] RIP: 0033:0x7f489079aeb9 [ 173.995430][ T7167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.995443][ T7167] RSP: 002b:00007f489164e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 173.995459][ T7167] RAX: ffffffffffffffda RBX: 00007f4890a15fa0 RCX: 00007f489079aeb9 [ 173.995469][ T7167] RDX: 0000000000040240 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 173.995479][ T7167] RBP: 00007f4890808c1f R08: 0000000000000000 R09: 0000000000000000 [ 173.995489][ T7167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.995498][ T7167] R13: 00007f4890a16038 R14: 00007f4890a15fa0 R15: 00007ffeb4d92d98 [ 173.995519][ T7167] [ 174.664107][ T5145] Bluetooth: hci3: unexpected event 0x2f length: 435 > 260 [ 174.664163][ T5145] Bluetooth: hci3: Malformed Event: 0x2f [ 176.351230][ T7224] FAULT_INJECTION: forcing a failure. [ 176.351230][ T7224] name failslab, interval 1, probability 0, space 0, times 0 [ 176.364072][ T7224] CPU: 0 UID: 0 PID: 7224 Comm: syz.3.257 Not tainted syzkaller #0 PREEMPT(full) [ 176.364094][ T7224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 176.364103][ T7224] Call Trace: [ 176.364110][ T7224] [ 176.364116][ T7224] dump_stack_lvl+0x100/0x190 [ 176.364142][ T7224] should_fail_ex.cold+0x5/0xa [ 176.364169][ T7224] should_failslab+0xc2/0x120 [ 176.364191][ T7224] kmem_cache_alloc_noprof+0x83/0x780 [ 176.364211][ T7224] ? __send_signal_locked+0x155/0x12d0 [ 176.364229][ T7224] ? __send_signal_locked+0x155/0x12d0 [ 176.364242][ T7224] __send_signal_locked+0x155/0x12d0 [ 176.364260][ T7224] group_send_sig_info+0x2a4/0x300 [ 176.364280][ T7224] ? __pfx_group_send_sig_info+0x10/0x10 [ 176.364302][ T7224] ? kill_pid_info_type+0x1a/0x290 [ 176.364319][ T7224] kill_pid_info_type+0x92/0x290 [ 176.364339][ T7224] kill_proc_info+0x6f/0x1b0 [ 176.364358][ T7224] kill_something_info+0x2a0/0x310 [ 176.364379][ T7224] __x64_sys_kill+0x1c4/0x250 [ 176.364398][ T7224] ? __pfx___x64_sys_kill+0x10/0x10 [ 176.364426][ T7224] do_syscall_64+0xc9/0xf80 [ 176.364446][ T7224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.364461][ T7224] RIP: 0033:0x7f7c8659aeb9 [ 176.364476][ T7224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.364489][ T7224] RSP: 002b:00007f7c8739b028 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 176.364504][ T7224] RAX: ffffffffffffffda RBX: 00007f7c86815fa0 RCX: 00007f7c8659aeb9 [ 176.364514][ T7224] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 0000000000000120 [ 176.364523][ T7224] RBP: 00007f7c86608c1f R08: 0000000000000000 R09: 0000000000000000 [ 176.364537][ T7224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 176.364547][ T7224] R13: 00007f7c86816038 R14: 00007f7c86815fa0 R15: 00007fff6c3684b8 [ 176.364567][ T7224] [ 177.464197][ T7248] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 178.766349][ T7319] Console: switching to colour VGA+ 80x25 [ 178.803045][ T7259] cgroup: fork rejected by pids controller in /syz1 [ 182.368421][ T7441] sd 0:0:1:0: PR command failed: 1026 [ 182.387301][ T7441] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 182.441050][ T7441] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 182.591843][ T30] audit: type=1800 audit(1770251983.353:3): pid=7445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.281" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 183.490189][ T7472] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input12 [ 187.700647][ T7585] nfs: Unknown parameter 'BlY 7wEɮHs[ؐu`]e6zcޕ[$(uҞ%EtO2*p[OugrtsQZ׀z' [ 188.576192][ T7607] Format for adding new device is "id port_count num_queues" (uint uint unit). [ 188.595041][ T7602] Process accounting paused [ 189.441921][ T7700] FAULT_INJECTION: forcing a failure. [ 189.441921][ T7700] name fail_futex, interval 1, probability 0, space 0, times 0 [ 189.492832][ T7700] CPU: 1 UID: 0 PID: 7700 Comm: syz.1.306 Not tainted syzkaller #0 PREEMPT(full) [ 189.492875][ T7700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 189.492891][ T7700] Call Trace: [ 189.492901][ T7700] [ 189.492911][ T7700] dump_stack_lvl+0x100/0x190 [ 189.492955][ T7700] should_fail_ex.cold+0x5/0xa [ 189.493004][ T7700] get_futex_key+0x1d2/0x1620 [ 189.493047][ T7700] ? __pfx_get_futex_key+0x10/0x10 [ 189.493080][ T7700] ? kfree+0x2a9/0x690 [ 189.493121][ T7700] ? bpf_lsm_file_permission+0x9/0x10 [ 189.493161][ T7700] ? security_file_permission+0x76/0x210 [ 189.493220][ T7700] futex_wake+0xea/0x530 [ 189.493266][ T7700] ? __pfx_futex_wake+0x10/0x10 [ 189.493326][ T7700] do_futex+0x32b/0x350 [ 189.493365][ T7700] ? __pfx_do_futex+0x10/0x10 [ 189.493404][ T7700] ? __fget_files+0x21f/0x3d0 [ 189.493439][ T7700] __x64_sys_futex+0x34f/0x4d0 [ 189.493478][ T7700] ? __pfx___x64_sys_futex+0x10/0x10 [ 189.493520][ T7700] ? __pfx_do_writev+0x10/0x10 [ 189.493553][ T7700] do_syscall_64+0xc9/0xf80 [ 189.493590][ T7700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.493618][ T7700] RIP: 0033:0x7fd4acf9aeb9 [ 189.493636][ T7700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 189.493672][ T7700] RSP: 002b:00007fd4ade860e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 189.493700][ T7700] RAX: ffffffffffffffda RBX: 00007fd4ad215fa8 RCX: 00007fd4acf9aeb9 [ 189.493718][ T7700] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd4ad215fac [ 189.493734][ T7700] RBP: 00007fd4ad215fa0 R08: 0000000000000000 R09: 0000000000000000 [ 189.493752][ T7700] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 189.493768][ T7700] R13: 00007fd4ad216038 R14: 00007ffd28c957f0 R15: 00007ffd28c958d8 [ 189.493800][ T7700] [ 193.057553][ T7790] FAULT_INJECTION: forcing a failure. [ 193.057553][ T7790] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 193.070828][ T7790] CPU: 1 UID: 0 PID: 7790 Comm: syz.0.322 Not tainted syzkaller #0 PREEMPT(full) [ 193.070865][ T7790] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 193.070887][ T7790] Call Trace: [ 193.070896][ T7790] [ 193.070906][ T7790] dump_stack_lvl+0x100/0x190 [ 193.070948][ T7790] should_fail_ex.cold+0x5/0xa [ 193.070995][ T7790] _copy_from_user+0x2e/0xd0 [ 193.071037][ T7790] copy_msghdr_from_user+0x9f/0x4f0 [ 193.071072][ T7790] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 193.071120][ T7790] ? __lock_acquire+0x4a5/0x2630 [ 193.071157][ T7790] ___sys_recvmsg+0xdd/0x1a0 [ 193.071189][ T7790] ? __pfx____sys_recvmsg+0x10/0x10 [ 193.071250][ T7790] do_recvmmsg+0x301/0x760 [ 193.071287][ T7790] ? __pfx_do_recvmmsg+0x10/0x10 [ 193.071315][ T7790] ? ksys_write+0x190/0x250 [ 193.071345][ T7790] ? ksys_write+0x190/0x250 [ 193.071381][ T7790] ? __mutex_unlock_slowpath+0x15c/0x790 [ 193.071426][ T7790] ? __fget_files+0x21f/0x3d0 [ 193.071465][ T7790] __x64_sys_recvmmsg+0x22a/0x280 [ 193.071508][ T7790] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 193.071558][ T7790] do_syscall_64+0xc9/0xf80 [ 193.071594][ T7790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.071622][ T7790] RIP: 0033:0x7f489079aeb9 [ 193.071644][ T7790] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.071669][ T7790] RSP: 002b:00007f489164e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 193.071696][ T7790] RAX: ffffffffffffffda RBX: 00007f4890a15fa0 RCX: 00007f489079aeb9 [ 193.071714][ T7790] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 193.071730][ T7790] RBP: 00007f489164e090 R08: 0000000000000000 R09: 0000000000000000 [ 193.071747][ T7790] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 193.071763][ T7790] R13: 00007f4890a16038 R14: 00007f4890a15fa0 R15: 00007ffeb4d92d98 [ 193.071800][ T7790] [ 196.881160][ T7870] netlink: 'syz.3.337': attribute type 11 has an invalid length. [ 196.994433][ T7877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'. [ 196.994433][ T7876] netlink: 28 bytes leftover after parsing attributes in process `syz.3.337'. [ 196.999688][ T7876] bridge0: port 3(bond0) entered disabled state [ 197.180349][ T7881] FAULT_INJECTION: forcing a failure. [ 197.180349][ T7881] name fail_futex, interval 1, probability 0, space 0, times 0 [ 197.207166][ T7881] CPU: 1 UID: 0 PID: 7881 Comm: syz.0.338 Not tainted syzkaller #0 PREEMPT(full) [ 197.207209][ T7881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 197.207226][ T7881] Call Trace: [ 197.207236][ T7881] [ 197.207247][ T7881] dump_stack_lvl+0x100/0x190 [ 197.207291][ T7881] should_fail_ex.cold+0x5/0xa [ 197.207342][ T7881] get_futex_key+0x1d2/0x1620 [ 197.207386][ T7881] ? __pfx_get_futex_key+0x10/0x10 [ 197.207436][ T7881] futex_wait_setup+0x81/0x500 [ 197.207476][ T7881] __futex_wait+0x19f/0x300 [ 197.207509][ T7881] ? __pfx___futex_wait+0x10/0x10 [ 197.207535][ T7881] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 197.207568][ T7881] ? lockdep_hardirqs_on+0x78/0x100 [ 197.207607][ T7881] ? __pfx_futex_wake_mark+0x10/0x10 [ 197.207658][ T7881] ? futex_hash+0x2c5/0x380 [ 197.207709][ T7881] futex_wait+0xed/0x380 [ 197.207737][ T7881] ? __pfx_futex_wait+0x10/0x10 [ 197.207773][ T7881] ? ksys_write+0x190/0x250 [ 197.207809][ T7881] ? ksys_write+0x190/0x250 [ 197.207846][ T7881] do_futex+0x1ef/0x350 [ 197.207885][ T7881] ? __pfx_do_futex+0x10/0x10 [ 197.207922][ T7881] ? cap_task_prctl+0x104/0xa50 [ 197.207963][ T7881] ? __pfx_sched_core_share_pid+0x10/0x10 [ 197.208005][ T7881] __x64_sys_futex+0x34f/0x4d0 [ 197.208047][ T7881] ? __pfx___x64_sys_futex+0x10/0x10 [ 197.208087][ T7881] ? xfd_validate_state+0x129/0x190 [ 197.208148][ T7881] do_syscall_64+0xc9/0xf80 [ 197.208187][ T7881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.208217][ T7881] RIP: 0033:0x7f489079aeb9 [ 197.208241][ T7881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 197.208270][ T7881] RSP: 002b:00007f489162d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 197.208300][ T7881] RAX: ffffffffffffffda RBX: 00007f4890a16098 RCX: 00007f489079aeb9 [ 197.208320][ T7881] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4890a16098 [ 197.208338][ T7881] RBP: 00007f4890a16090 R08: 0000000000000000 R09: 0000000000000000 [ 197.208356][ T7881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.208374][ T7881] R13: 00007f4890a16128 R14: 00007ffeb4d92cb0 R15: 00007ffeb4d92d98 [ 197.208408][ T7881] [ 197.443283][ T7876] bond0 (unregistering): left allmulticast mode [ 197.449933][ T7876] bond_slave_0: left allmulticast mode [ 197.459155][ T7876] bond_slave_1: left allmulticast mode [ 197.464846][ T7876] bond0 (unregistering): left promiscuous mode [ 197.478803][ T7876] bond_slave_0: left promiscuous mode [ 197.484764][ T7876] bond_slave_1: left promiscuous mode [ 197.510248][ T7876] bridge0: port 3(bond0) entered disabled state [ 197.523573][ T7876] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.641375][ T7876] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.691116][ T7876] bond0 (unregistering): Released all slaves [ 199.822710][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.830467][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.133863][ T7950] bridge0: port 3(veth0_to_bridge) entered blocking state [ 201.144860][ T7950] bridge0: port 3(veth0_to_bridge) entered disabled state [ 201.152834][ T7950] veth0_to_bridge: entered allmulticast mode [ 201.164788][ T7950] veth0_to_bridge: entered promiscuous mode [ 201.171170][ T7950] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 201.186542][ T7950] bridge0: port 3(veth0_to_bridge) entered blocking state [ 201.193967][ T7950] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 201.964041][ T7971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.356'. [ 203.149869][ T7989] zswap: compressor not available [ 203.444195][ T7995] zero sized request [ 205.233242][ T8071] block nbd2: not configured, cannot reconfigure [ 206.881342][ T8115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.382'. [ 206.911130][ T8112] HfR: entered promiscuous mode [ 206.928150][ T8115] HfR: left promiscuous mode [ 207.807132][ T8150] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 209.329192][ T8187] binder: 8186:8187 ioctl c0306201 2000000000c0 returned -14 [ 209.704175][ T8204] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input14 [ 209.892731][ T8214] Invalid ELF header magic: != ELF [ 210.083558][ T8214] netlink: 354 bytes leftover after parsing attributes in process `syz.3.399'. [ 210.145263][ T8219] openvswitch: netlink: Duplicate key (type 15). [ 210.877513][ T8243] nbd: couldn't find device at index 33904 [ 210.897757][ T8243] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 210.913543][ T8238] zswap: compressor not available [ 212.149872][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 212.155985][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 212.162950][ T5825] Bluetooth: hci1: command 0x0406 tx timeout [ 212.169214][ T5825] Bluetooth: hci2: command 0x0406 tx timeout [ 214.311193][ T8315] vhci_hcd vhci_hcd.3: USB_PORT_FEAT_SUSPEND req not supported for USB 3.0 roothub [ 215.059795][ T8340] FAULT_INJECTION: forcing a failure. [ 215.059795][ T8340] name fail_futex, interval 1, probability 0, space 0, times 0 [ 215.109840][ T8340] CPU: 1 UID: 0 PID: 8340 Comm: syz.0.426 Not tainted syzkaller #0 PREEMPT(full) [ 215.109879][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 215.109894][ T8340] Call Trace: [ 215.109902][ T8340] [ 215.109913][ T8340] dump_stack_lvl+0x100/0x190 [ 215.109955][ T8340] should_fail_ex.cold+0x5/0xa [ 215.110002][ T8340] get_futex_key+0x1d2/0x1620 [ 215.110044][ T8340] ? __pfx_get_futex_key+0x10/0x10 [ 215.110091][ T8340] futex_wake+0xea/0x530 [ 215.110131][ T8340] ? trace_kmem_cache_alloc+0x80/0xb0 [ 215.110173][ T8340] ? __pfx_futex_wake+0x10/0x10 [ 215.110223][ T8340] ? errseq_sample+0x51/0x70 [ 215.110264][ T8340] ? file_init_path+0x48e/0x670 [ 215.110308][ T8340] do_futex+0x32b/0x350 [ 215.110346][ T8340] ? __pfx_do_futex+0x10/0x10 [ 215.110382][ T8340] ? fd_install+0x223/0x580 [ 215.110434][ T8340] __x64_sys_futex+0x34f/0x4d0 [ 215.110475][ T8340] ? __pfx___x64_sys_futex+0x10/0x10 [ 215.110511][ T8340] ? xfd_validate_state+0x129/0x190 [ 215.110565][ T8340] do_syscall_64+0xc9/0xf80 [ 215.110602][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.110630][ T8340] RIP: 0033:0x7f489079aeb9 [ 215.110652][ T8340] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.110678][ T8340] RSP: 002b:00007f489162d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 215.110704][ T8340] RAX: ffffffffffffffda RBX: 00007f4890a16098 RCX: 00007f489079aeb9 [ 215.110722][ T8340] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f4890a1609c [ 215.110739][ T8340] RBP: 00007f4890a16090 R08: 0000000000000000 R09: 0000000000000000 [ 215.110755][ T8340] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 215.110770][ T8340] R13: 00007f4890a16128 R14: 00007ffeb4d92cb0 R15: 00007ffeb4d92d98 [ 215.110813][ T8340] [ 215.801978][ T8357] netlink: 338 bytes leftover after parsing attributes in process `syz.2.431'. [ 215.820963][ T8359] netlink: 338 bytes leftover after parsing attributes in process `syz.2.431'. [ 215.842792][ T8360] netlink: 314 bytes leftover after parsing attributes in process `syz.2.431'. [ 215.858989][ T8357] netlink: 338 bytes leftover after parsing attributes in process `syz.2.431'. [ 215.878275][ T8357] netlink: 338 bytes leftover after parsing attributes in process `syz.2.431'. [ 215.927410][ T8357] netlink: 338 bytes leftover after parsing attributes in process `syz.2.431'. [ 215.981825][ T8357] netlink: 338 bytes leftover after parsing attributes in process `syz.2.431'. [ 216.034127][ T8357] netlink: 338 bytes leftover after parsing attributes in process `syz.2.431'. [ 216.050218][ T8357] netlink: 338 bytes leftover after parsing attributes in process `syz.2.431'. [ 216.211427][ T8357] netlink: 338 bytes leftover after parsing attributes in process `syz.2.431'. [ 216.414237][ T8345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 216.457586][ T8345] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 216.620776][ T8345] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 216.639203][ T8345] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 216.684146][ T8345] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 216.741762][ T8345] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 216.806285][ T8345] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 216.831194][ T8345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 216.845052][ T8345] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 218.389081][ T8401] loop6: detected capacity change from 0 to 8 [ 218.459640][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 218.700781][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 218.706842][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 218.858738][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 219.434336][ T8419] Process accounting resumed [ 219.499822][ T8426] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 219.567060][ T8424] team0: Port device team_slave_1 removed [ 220.538885][ T5830] Bluetooth: hci0: command 0x0406 tx timeout [ 220.780907][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 220.780916][ T5145] Bluetooth: hci2: command 0x0406 tx timeout [ 220.939767][ T5830] Bluetooth: hci3: command 0x0406 tx timeout [ 221.837423][ T8466] random: crng reseeded on system resumption [ 222.859162][ T5830] Bluetooth: hci1: command 0x0406 tx timeout [ 223.666371][ T8502] input: jJǸ-9%vJ86 as /devices/virtual/input/input15 [ 224.694858][ T8528] Invalid ELF header magic: != ELF [ 226.113679][ T8544] [ 226.116047][ T8544] ====================================================== [ 226.123059][ T8544] WARNING: possible circular locking dependency detected [ 226.130093][ T8544] syzkaller #0 Not tainted [ 226.134487][ T8544] ------------------------------------------------------ [ 226.141486][ T8544] syz.3.470/8544 is trying to acquire lock: [ 226.147372][ T8544] ffff888140460220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 226.157546][ T8544] [ 226.157546][ T8544] but task is already holding lock: [ 226.164904][ T8544] ffff888141bcd628 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 226.176125][ T8544] [ 226.176125][ T8544] which lock already depends on the new lock. [ 226.176125][ T8544] [ 226.186549][ T8544] [ 226.186549][ T8544] the existing dependency chain (in reverse order) is: [ 226.195548][ T8544] [ 226.195548][ T8544] -> #2 (&q->q_usage_counter(io)#23){++++}-{0:0}: [ 226.204151][ T8544] blk_alloc_queue+0x610/0x750 [ 226.209518][ T8544] blk_mq_alloc_queue+0x174/0x290 [ 226.215152][ T8544] __blk_mq_alloc_disk+0x29/0x120 [ 226.220694][ T8544] loop_add+0x498/0xb60 [ 226.225366][ T8544] loop_init+0x1d3/0x200 [ 226.230126][ T8544] do_one_initcall+0x11d/0x690 [ 226.235408][ T8544] kernel_init_freeable+0x6e5/0x790 [ 226.241115][ T8544] kernel_init+0x1f/0x1e0 [ 226.245958][ T8544] ret_from_fork+0x754/0xaf0 [ 226.251067][ T8544] ret_from_fork_asm+0x1a/0x30 [ 226.256458][ T8544] [ 226.256458][ T8544] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 226.264004][ T8544] fs_reclaim_acquire+0xc4/0x100 [ 226.269550][ T8544] kmem_cache_alloc_noprof+0x5b/0x780 [ 226.275479][ T8544] __kernfs_iattrs+0x126/0x400 [ 226.280790][ T8544] __kernfs_setattr+0x4d/0x3c0 [ 226.286185][ T8544] kernfs_iop_setattr+0xda/0x130 [ 226.291667][ T8544] notify_change+0xb25/0x12d0 [ 226.296901][ T8544] do_truncate+0x1df/0x240 [ 226.301953][ T8544] path_openat+0x29da/0x3120 [ 226.307084][ T8544] do_filp_open+0x1f7/0x420 [ 226.312131][ T8544] do_sys_openat2+0x12e/0x220 [ 226.317366][ T8544] __x64_sys_openat+0x12d/0x210 [ 226.322767][ T8544] do_syscall_64+0xc9/0xf80 [ 226.327831][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.334272][ T8544] [ 226.334272][ T8544] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 226.342806][ T8544] __lock_acquire+0x14b8/0x2630 [ 226.348173][ T8544] lock_acquire+0x17c/0x330 [ 226.353187][ T8544] down_read+0x99/0x460 [ 226.357852][ T8544] kernfs_iop_getattr+0x9c/0xf0 [ 226.363210][ T8544] vfs_getattr_nosec+0x2d4/0x430 [ 226.368665][ T8544] vfs_getattr+0x4a/0x60 [ 226.373440][ T8544] loop_query_min_dio_size.isra.0+0x117/0x250 [ 226.380019][ T8544] lo_ioctl+0x13c0/0x1be0 [ 226.384860][ T8544] blkdev_ioctl+0x5ad/0x6f0 [ 226.389891][ T8544] __x64_sys_ioctl+0x18e/0x210 [ 226.395274][ T8544] do_syscall_64+0xc9/0xf80 [ 226.400374][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.406770][ T8544] [ 226.406770][ T8544] other info that might help us debug this: [ 226.406770][ T8544] [ 226.416983][ T8544] Chain exists of: [ 226.416983][ T8544] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#23 [ 226.416983][ T8544] [ 226.431433][ T8544] Possible unsafe locking scenario: [ 226.431433][ T8544] [ 226.438978][ T8544] CPU0 CPU1 [ 226.444330][ T8544] ---- ---- [ 226.449682][ T8544] lock(&q->q_usage_counter(io)#23); [ 226.455057][ T8544] lock(fs_reclaim); [ 226.461554][ T8544] lock(&q->q_usage_counter(io)#23); [ 226.469453][ T8544] rlock(&root->kernfs_iattr_rwsem); [ 226.474835][ T8544] [ 226.474835][ T8544] *** DEADLOCK *** [ 226.474835][ T8544] [ 226.482972][ T8544] 3 locks held by syz.3.470/8544: [ 226.487994][ T8544] #0: ffff888025ea4448 (&lo->lo_mutex){+.+.}-{4:4}, at: loop_global_lock_killable+0x30/0xb0 [ 226.498230][ T8544] #1: ffff888141bcd628 (&q->q_usage_counter(io)#23){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 226.509931][ T8544] #2: ffff888141bcd660 (&q->q_usage_counter(queue)#7){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 226.521891][ T8544] [ 226.521891][ T8544] stack backtrace: [ 226.527787][ T8544] CPU: 0 UID: 0 PID: 8544 Comm: syz.3.470 Not tainted syzkaller #0 PREEMPT(full) [ 226.527820][ T8544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 226.527834][ T8544] Call Trace: [ 226.527842][ T8544] [ 226.527852][ T8544] dump_stack_lvl+0x100/0x190 [ 226.527888][ T8544] print_circular_bug.cold+0x178/0x1c7 [ 226.527929][ T8544] check_noncircular+0x146/0x160 [ 226.527965][ T8544] __lock_acquire+0x14b8/0x2630 [ 226.528003][ T8544] lock_acquire+0x17c/0x330 [ 226.528034][ T8544] ? kernfs_iop_getattr+0x9c/0xf0 [ 226.528068][ T8544] ? __pfx___might_resched+0x10/0x10 [ 226.528110][ T8544] down_read+0x99/0x460 [ 226.528144][ T8544] ? kernfs_iop_getattr+0x9c/0xf0 [ 226.528175][ T8544] ? find_held_lock+0x2b/0x80 [ 226.528199][ T8544] ? __pfx_down_read+0x10/0x10 [ 226.528230][ T8544] ? kernfs_root+0xee/0x2a0 [ 226.528269][ T8544] kernfs_iop_getattr+0x9c/0xf0 [ 226.528302][ T8544] vfs_getattr_nosec+0x2d4/0x430 [ 226.528335][ T8544] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 226.528369][ T8544] vfs_getattr+0x4a/0x60 [ 226.528401][ T8544] loop_query_min_dio_size.isra.0+0x117/0x250 [ 226.528443][ T8544] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 226.528496][ T8544] lo_ioctl+0x13c0/0x1be0 [ 226.528521][ T8544] ? __pfx_lo_ioctl+0x10/0x10 [ 226.528544][ T8544] ? kasan_quarantine_put+0x104/0x240 [ 226.528575][ T8544] ? lockdep_hardirqs_on+0x78/0x100 [ 226.528605][ T8544] ? blk_get_meta_cap+0xd4/0x6c0 [ 226.528634][ T8544] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 226.528663][ T8544] ? tomoyo_path_number_perm+0x28f/0x580 [ 226.528707][ T8544] ? blkdev_common_ioctl+0x515/0x2ba0 [ 226.528739][ T8544] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 226.528772][ T8544] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 226.528800][ T8544] ? do_vfs_ioctl+0x226/0x13e0 [ 226.528839][ T8544] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 226.528882][ T8544] ? hook_file_ioctl_common+0x146/0x410 [ 226.528920][ T8544] ? __pfx_lo_ioctl+0x10/0x10 [ 226.528943][ T8544] blkdev_ioctl+0x5ad/0x6f0 [ 226.528971][ T8544] ? __pfx_blkdev_ioctl+0x10/0x10 [ 226.529001][ T8544] ? __pfx_blkdev_ioctl+0x10/0x10 [ 226.529030][ T8544] __x64_sys_ioctl+0x18e/0x210 [ 226.529070][ T8544] do_syscall_64+0xc9/0xf80 [ 226.529101][ T8544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.529127][ T8544] RIP: 0033:0x7f7c8659aeb9 [ 226.529149][ T8544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.529173][ T8544] RSP: 002b:00007f7c8739b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.529209][ T8544] RAX: ffffffffffffffda RBX: 00007f7c86815fa0 RCX: 00007f7c8659aeb9 [ 226.529227][ T8544] RDX: 0000000000000000 RSI: 0000000000004c06 RDI: 0000000000000005 [ 226.529247][ T8544] RBP: 00007f7c86608c1f R08: 0000000000000000 R09: 0000000000000000 [ 226.529263][ T8544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.529278][ T8544] R13: 00007f7c86816038 R14: 00007f7c86815fa0 R15: 00007fff6c3684b8 [ 226.529303][ T8544]