last executing test programs: 7.882912115s ago: executing program 0 (id=162): r0 = dup$auto(0xffffffffffffffff) r1 = ioctl$auto_TUNSETSNDBUF2(r0, 0x400454d4, &(0x7f0000000000)=0x5) pwritev$auto(r1, &(0x7f00000000c0)={&(0x7f0000000040)="92e0553ad8effff37bab7a211a425bf42c78d54babdcc2b74d49534abf06752831f2606527d4e1a2cb48482f72b0b1757bcb4c586db43548273e7ba5b1c5e8f93bed97fe5f9f286be7235bcdd093194b", 0x4}, 0xffff, 0x9, 0x48) (async) sendmsg$auto_NL80211_CMD_GET_STATION(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = socketpair$auto(0x2, 0x8, 0x0, &(0x7f0000000200)=0x3) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000280), r1) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r3, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10092108}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xa8, r4, 0x200, 0x70bd26, 0x25dfdbfe, {}, "35754890bdd8451a114f022eaaf1e81f236bce312be1eaa2f8a53fb025010cbc8827a492d2e329e26ee8c681cf77f6baa2841101f14940b3eebb41522c043fe0101b8b99ab95570bdd204775021254ce8b10829b9de18df200c9d6e1f0073f9c46d42b4e4c03b4f66a42bb00a3dc67d532570064f555168ebaa80a6816af7f58495c10d776372040a84d07e0bbe642a378"}, 0xa8}, 0x1, 0x0, 0x0, 0x4014}, 0x0) (async) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000440), r1) (async) msgctl$auto_MSG_STAT_ANY(0x40, 0xd, &(0x7f0000000500)={{0x10, 0xee00, 0xffffffffffffffff, 0x1, 0x0, 0x5, 0x8}, &(0x7f0000000480)=0x6, &(0x7f00000004c0)=0x4, 0x6, 0x5, 0x7f, 0x6, 0x1, 0x9, 0x0, 0x6, @inferred=0x0, @raw=0xd}) sendmsg$auto_NL802154_CMD_DISASSOCIATE(r0, &(0x7f0000001700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000016c0)={&(0x7f0000000580)={0x1138, r5, 0x28, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_KEY={0x1124, 0x30, 0x0, 0x1, [@generic="4c8863c1451279f04da14e8b73e78510070b37db238f05c6e343ad79c01eb069e6a36697ef1e9b7faac4abb2218b89756239d49a97d6d8dc8b92f21b46d16fb98d853f58d914080aa8444c9598c2789fb633d93095c0a847b63771b92c4ba95aff4648cc8f92a9d49f414e2180a4dc5b593d29587270a1da2b4d6182ee5351fd720b52e119c5c78f8b9cf2adb68d822b974292a92b1cc9f73e8fc280a67067460feb97ba914c4eb8298d80a154aeb45c8cb6ec9a6ace", @typed={0x8, 0x94, 0x0, 0x0, @uid=r6}, @nested={0xc, 0x75, 0x0, 0x1, [@nested={0x4, 0x48}, @nested={0x4, 0x20}]}, @typed={0x14, 0x147, 0x0, 0x0, @ipv6=@private0}, @nested={0x8, 0x146, 0x0, 0x1, [@nested={0x4, 0x88}]}, @generic="5a7b47d92d12320fa096f13fc6986b0fc10e808c0aaee6b3f76b24d9987725243c8243cf2d29857f663354538a9949b4f8b218890843", @generic="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", @typed={0x4, 0x4}]}]}, 0x1138}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r9 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000001740), 0x4b824af4f5fc5dc9, 0x0) r10 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000017c0), r2) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r3, &(0x7f0000002980)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002940)={&(0x7f0000001800)={0x1110, r10, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_MNTR_FLAGS={0x1004, 0x17, "397ac8b01425d7fca4679729de25021660bdd1dc9d3746ceef3f5439fc8404e628c85112f995187cd90e86610537e29180c343363c9d87c913d8e37eee92ed726a095bc0a86d5451bf1968bc15ca5511c3c7ddc7ec5d9fa10ec0ddcf4dea24a0a13a899747e7da7c4598deadfc032e15ceedd3cb72a6d7b209861d1bc9b074117bb46749fe0e42deb6f0ce432a789d2e8731c2caae9aa372700e9842b2812bf4b0163e8b5bf51a35ac2f51967fc61ba516f9bdeb3f634a8fd463d21d0b53b23010e2f3110d0a0b76a18cbee6f8931fcc4d1c002b3a51e838be6901a4d3063d8a0495b620552db6f7dab905a48abd5b738319d1f32bf73c6177393b6d8cba4caa0f47e6b5f656f55cdae554af4fba2b0834bf7657112246795a63fdd2febddc45a9f7783560330965b84460f8815bf25a961ce51e96cb0be44a6df2878b6184b22a33d0d4fdbd3091c112069cda89f65cb2070db61db06e98296b1455d2219aad01bb983b60a5ef7656508fb0b11536ab5c90da84bc276812b69e4ff02623964eb0b56e57e0ae3e3189f19b2229a5f5fab2eafc1b3678d9cf88ac293be95a3476e76bebdeaa80d04931536e3096ab40c1dc7a84af846e6bb1fd149f821e4be384f220f1845f738ad1fcd8fafe5bfba26fb5b1cf3b663597f1089ae133f9aee46b3f7c9c19fa224aa9d9cb416390a3c2f65e64ec770f48230f0c49dcf89cf3ca69822c42229a45834f07cd2ae1f7e31bdb5cde9ea467705453b93f2c5e8844efa522b5986b705ce0ea39ef85e19b983a47b780cb35bd6ec621a92bdb3e6b319704fa2726927499a89669a02e47fa9b1aa23395727ffa90093d0029352ba4391d30d67ab822dbf4ac1200c094f37bd537fb6ad3983573a674deb5aa8a8c34b6fc5e74aea2d319d5a441213d00542809b51712f4ecaaf4687752096c708ab5171760030daba5898bca99e9f1683e063f6cf83ec533d73c4922de0a0f22bc1bbb4be2fb6512cc975febb049dcc29b864c60b171c5ec632a3625935819f3c4afd00d1d231dfacd4aa9144de2d7dd0bab97dc6c9c02474ab39d95bab7720ef4e5bc98720c9def476c297ed03e5ddf5cbeb799e0633f188186e4d557b3daeb3635aa142cbe4fefacae72e6f6e0782625f1a7103dc122e1d2bd59959f543a9458e8d9233fdd6da120627366a0dbafcf66fcc6a51a1ecb1a5289b1fb20cfa50dbb0247462ae91a4a68d6f0ede32355d985e6cf4152ef4cd1ca44226e0775fe9293b0571ae0f3e308f8687c0c2d2316a20be72710927b59cc389e24b9efaf13c58bb6adbbdf4be2c9e96724f9396410094a13ac73c96811c4c856f724f304fd473b5fa1ec6db3d601947d2bbf782f99bfd4d15167a872d5e9cef4ff71a14f99cce9bf1d9b1167df1dcd126968af85f43c1d69a5cbc0082039314524799cf90b12c665e00dc4d787e0f1cb84e7c60e26a2a5a0257d74ec904d73b6d7db7be5dee0fea7a13b8b0154c477f510b6d230aed84732d719c9dd8d8b56e24563ef90c2ab20d3d61250b95e3bdcf407036e6b969e25fcabd081a4c9e4b069868372eab8a76c59c630274761edb5980d0102eefa86059f1d23a20888beb1d92b44a7234fb361c9d574640887b84226250da8f7fbe02e2ceb9fd161be18c6672f9eb658ff550e3d7e2b0ab9a2ec41d247ba238fdd5bc027d04fef75bd62c47a7161f9629a3cad8331dc49442033a0bd030925b399f1c210969c57404b0c743af10a7522b925f48aceafdb5614a802a3984192df4fedf4f27434ae055389113589bb711bf57ef1348005ceceb3c6c2bc10bd628e62491805d1d84c890b5f1d3aed62f1d630e2bd61ec0878daff5de4d2a1882457a87a664b0853ad51eeb8efae1ba40eeb237288183ff53de6d75ad5fff69245c66ecd57b7b042af5201a8ef7a8ac2bbe07a8a83e1951ddc1f931151dae857c1d0ca156523f2a693675fe373996e65b5dcd930bbafb349e1f2f8356d24bf22251f4974a509da123687e95a759bbbc461e38c54c908502b7c3f02df7b39cdd07965286651d5e2994ad6d4f576f2cd678ac89d985d076efa390abf2638b46755844f3b20227dc584cc9615ea77c22c0a7f24462da21a2a778f3b494475f1471e2e8bc5c50c1b9b602a35234c47275d88f0a6a5dba4a1ae548090ce3df1362fc22081253f929ea74a6de0927c1cb9e103c260d59ea9b9f23f8b228b9fdc49fa66918b9504b40fc8947a4ec3cd51e34443d7bd23913983e619bb8c6ebbca5816ca2a022740dc2de300fd5e1f09a0fa78938c50d9353338c4741a3633f274736151d0e1831f2ba95f090a6d6c07c728b5633ca0b0c8bc075f7ea8e72bd7d8844f409563b5216293c97d266e7d4e18b388afb2e7cb69487c1c2bcc94c3c64e7d9f2a30f781b15074d8d1cf4523b24902bc40ba320c94bf17050ae0abc3898d83f4cf55844fa2377a2a1003c1c971ff64f80e78d4039deaf8f1298c544e58119ccfd4027a0475598db9fcd84e5310aba490fd772de0d3038b47a61acc21641f8fe28018cd01650374f19dc93df292b762972825babed2c3c37af18e8d1333391fc206b75b5198ae3f564980d72fffdacd536f884bb18a8f82bea3eb8ef7c671ea24d62327ab1883aeb8941e0e1680f1541388e61f8119755d32b1ceb124e1c6b0b7db21ef9af23a051011fe2696502d62d6532701c3418117b1d7e30aca50da69b1dabbe41a1613c55a0ccf969f1a86f4295e2cb8d63d39a2880764fec9534d0e46ce7521b42320f8bfcb7dce3db240d83f5a0aaa820493e592b5f16356748d31597e10844771b8b2be9871408e3723fce8a9ac2fb40b52ebc40c03fbf73696bf861d2ec249a8a6c40a28b176aec4f4cd6130b88ecece7ea9b9363bda2ecf4979740a629f9332a8e525917cefc29857ecf66c48b5665e6d716f2aa889642b461fb71c7860dbe04f88474787a4788af5652a412afd89f3b3d9b7e685ca1ca4f122ec81fa4e11bea62ae3e9d90edb3eeece72157dc8024fb931033825ed4c07b62017330a0b5f13b71da79f91612d419ba7b37a3bf78d43ac2d459c3489c6729927c868dfbd06785049ac2b26a7d71b331ead8897df75549afade15993e526a729dbf536154f9b26b1ca286658408694dc6a2d31f4e56e85be56dda02b1c1b226a22a103c8ecaadadf2ef9d225d6a1e9d4295951fc04c0479173166809d1767bc733d7d0d6251179e1c69eb7a804a0fea1e6e3904f92b9125c3f0d7bd743cfd4193f791283a401f42577b897b5f8d77d106b92e3c6e345349adef063c40794f1c4bbc4cf197589ed9988273ec71fa63903f2d30f17bfec5d841b2d49bd6fd8927c53a2cbc2f73e3816cd68f35d8dac748811f63afdb221449edd0feb6fb72fbcdd04f8ae37e2e05c4aacfcc761880036a4e493ceec8de22d7320e362da59467605dad6ad68d903c830277c5746389a140ed9651b3904795fa0fed97ba1d6e490558f5d0af43f7f903538ffd24afbe44be8625a573e26d6f0f9dce71388a66ce1905a1c4c2b94091ee6bf66c009802ee14fcf6511100cf4bc55fcad3a7ecad44884e1c507a39d760c9d32401fd20b79e5be5d26936e3a08ab92723cde943d3981e30ece45ab91d4c8ae48e6ea5fb277dd581ee023caa3ed405d40c6cecd2d41aa92b85cab383e0ec0607466146cb789d4c04f5697ca6a3ab899da4856fe3a79022165c5cf23a24a58ae36a634a499bf15688f6f2bb8bfdf18c3ba2116a63a72340bd8c8203420dcaf96f7f4ced7893cae7c43c974049dc9b7734d57756db44c722226ac29dc9a92eab1f7996dba62f89cd8b9fd8685f8143163ae8fc8f90077bc32c6f919fc44eeebfdef8c6a5965c5c18786e7299b292b12a068cb5eb70b77565d5ba30b1d2f6258cb73d60d266cb0176cd7fddbb50fdecbe33082af5c70a9c16dd65d50e17781f95728af17a7e08e16335d7b42fef8e715aa8e9bd404f8a2a3b1a3933be30960ba75cae8851f2ac205ec0030b33b0a17832f7be901f66ad4d20ff912a900657ecc7f4712eca57f1715d3ec0a48aff885903376ec6fe5e323410898202cbcdbd41c7f2881e05b9f292af914f60561ecc49687abb27d78746dd854e191e2cfcaa3f4908c41e70f7db792afaecc8f137955778e975bc8d67c8af16a4102e2f98e7b533f9a7c1e8503ed40650525c3d9b8e826f5df3146cd82f564f07b85c07dc4203afecca1dd56a5750fde28f1e6dc1d998db8fdcafc118912a2c670351f0c8b8575bf9d302cd6b7422c3ae12a8f88ff5ce579bed6a0566cd2b5f2337556b4b8c80ef35f87c8e7f684a89ac2f186656ac732e8209450ee8c80e3a580687f727e892c5eaa50e6dfe9449b161c0ac162b9fa6a875cde713b7c0c6250084c6c574418fe42963bf292155c14a1651a22b5f511d4c92c7181b779c79c07a8f3bde6260512d28396be7b5fc8d1ae2f3b9e66b577769ebc07262d95110c29b75a91a736b572ef6e86122fe041c5e735055c86bd0b0135575b1f1441284a4afc49f4cd1239c5ebf4abc87050414b40b0d8cd4d2447153d87e16a490e161ea63ad459662401865dac03e5d08c986df45fa73e705cdcf3e52fe34817d8e980e896493607b8cd3075bdcca2855e379ef69fe439bcd642f8b30712ade123397442e70af72a2bda0eed031c81035f09ab7fefca0b4ec8ea3bbd832880c96fa2b77f83eceddb5446c512749afdb6b45e086a8caa0398ad81399519f907e2574f91e6b91717f0d502c5de5d59f4ddeb83693a5de4016c261ffc2ed53598634bd6b9fafec5fbaa37fe78fd68342972459ffaf982ebf2a6cd4bbf917e579bb71e037a85416b1ea7c76fed3187411640ffab0d1c6a7a959bbec9d4eed8707c8d04c241cf09ee05c205898a585843f09e2b66fc365534f9fd42b27d4cd86481aba39159e370ed95a91140c64dbf684d0972291f33ac4036463aca892210298c5a4e54ed5f964276f924416d803716f2b5cf6b893fa5255caf6d205bc7d186931f005f91e00972edc8283982832f2597b1ce63ae7978aae4a01242dfee2e59ea0408c3fa26f5a047cf7ef3e8f85f607f264e7f80e0716ab90b64e20fc2dd70bc76d96714789f9bb69f1e1330d6d536dfcf34737a830148a0175dca8c74b50db061b0a185acbfa498ca3435035bb69e2d9ee7e4618cec852b66716ae69981b922b5f329357b51f26e613ff99a59f2552784fba929968002cdd89231f74a1ff87c824d520b1558d6d1d9b4bd1c6b2acb1281d91963b6d93c940ae3ea42a6d9da0b7a55b77ea53a031b1ff26594f0d386dfe174754f892f1f444b1087ef7244d585e21a8e52c68e3de77d0bada9f7a822596cac043c2254e2d934042586c4db562b43ee09b67579a9e27ed9331c407399f6e3505ba042b8d6c0020f4d670a74997ea5c7ed19d95dd21108b198908be2043a66ac76b859ce242094ac62e918eba778480fcf581729a77261d89567bd9f7ff61aae685db46cd9489cd216d647e97327f2f8a8c6519e0872cbe15ca79f8146110f6b6c116576baf361a46ff2967447578d41af63f579da608fad467d6b348f7fe703fb93c225659b0be2798ea4430a478ec48d9fd2ada803a2eb680054a414d65815b69c58f96a3307e9b0ebe1a0c33e5e689314627cd4d6dbf95cd7badaf35c411a40b101812cb9e85ba20703486f4dfdf4ff0a80e43db71bbb0dc966b36b16858d17aacd4113d9a646e09c826824af5e3eedd336105ab4eebd8e7def08dbe456bada401bba63973531567fe4b505459"}, @NL80211_ATTR_HE_6GHZ_CAPABILITY={0x8, 0x125, "e7fd152c"}, @NL80211_ATTR_HE_CAPABILITY={0x18, 0x10d, "ed710b61984284bc33acaa0a57e6e78bb99c64e9"}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bond\x00'}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0x5}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_PREV_BSSID={0xad, 0x4f, "170d65499f56d8124e65697224efc72a8850ec13ac5e96b4a29d355930715be7a72559d6851f6f37da5fcc28fd56022e5d561ad095adbf106494e2874336debf4a92f234053eb22d97bf23f00a12b4dbf516d67dcc552547686f99b634c0d9224774cfd0ca28fde522642da1ff0f7a83b5836eff669740da94f7a4fcc02f3ef9df9e1f60c09587fe439a71e859a93b206594da247d95f3ffd63d7882d039412fd9e53534bc75d8ab68"}]}, 0x1110}, 0x1, 0x0, 0x0, 0x1}, 0x800) (async) close_range$auto(r3, r9, 0xb8) (async) r11 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002a00), r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000002a40)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000002b40)={&(0x7f00000029c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002b00)={&(0x7f0000002a80)={0x74, r11, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_RSS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x8001}]}, 0x74}, 0x1, 0x0, 0x0, 0x8034}, 0x2004c401) r13 = memfd_secret$auto(0x7fffffff) sendfile$auto(r13, r9, &(0x7f0000002b80)=0xff35, 0x80) (async) ioctl$auto_IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f0000002bc0)=0xa6) msgctl$auto_MSG_INFO(0x5, 0xc, &(0x7f0000002c80)={{0x4000, r6, r7, 0xfffffffc, 0x4, 0x0, 0xfff9}, &(0x7f0000002c00)=0x9, &(0x7f0000002c40)=0x6, 0x6, 0x8, 0x4, 0x9, 0xfffffffffffffffa, 0x2, 0xfffe, 0x8, @inferred=r8, @inferred=r8}) (async) sendfile$auto(r9, r3, &(0x7f0000002d00)=0x1000, 0x1) (async) read$auto_l2cap_debugfs_fops_(r1, &(0x7f0000002d40)=""/249, 0xf9) (async) r14 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000002e80), 0xffffffffffffffff) sendmsg$auto_IOAM6_CMD_DEL_SCHEMA(r13, &(0x7f0000002f80)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002f40)={&(0x7f0000002ec0)={0x54, r14, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xb}, @IOAM6_ATTR_SC_ID={0x8}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xfffffe00}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0xf3}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x81}, @IOAM6_ATTR_SC_ID={0x8, 0x4, 0x8}, @IOAM6_ATTR_SC_ID={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x40800}, 0x1) r15 = openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/kvm/insn_emulation_fail\x00', 0x10100, 0x0) close_range$auto(r15, r0, 0xffffff4c) (async) poll$auto(&(0x7f0000003000)={r9, 0x40, 0x9}, 0x7, 0x8) (async) sendmsg$auto_NET_SHAPER_CMD_SET(r1, &(0x7f0000003140)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000003100)={&(0x7f00000030c0)={0x40, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x7}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x5}, @NET_SHAPER_A_METRIC={0x8, 0x2, 0x4}, @NET_SHAPER_A_METRIC={0x8, 0x2, 0xb}, @NET_SHAPER_A_BW_MIN={0xc, 0x3, 0x9}]}, 0x40}}, 0x40011) 7.700042991s ago: executing program 3 (id=164): openat2$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x3, 0x1ff, 0x1001, 0x5, 0x717e, 0x1ffde, 0x7, 0x3, 0x1, 0x2, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0xfffffffffffffffe, 0x7, 0x10002, 0x7f, 0x2a2, 0x2, 0xa, 0x22000, 0x202, 0x4, 0x84, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x64, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x100000000000]}, 0x1fe, 0xd) r0 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r0, 0xfffffffffffffd03, &(0x7f00000001c0)) timer_create$auto(0xfffffffa, &(0x7f0000000100)={@sival_ptr=0x0, @inferred, 0x1, @_tid=0xffffffffffffffff}, &(0x7f0000000140)=0x6) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_ETHTOOL_MSG_FEC_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x10) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xe) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x1}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x20000000007) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x100000000002, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x200180, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x1, 0x0) rseq$auto(0x0, 0x2, 0x9, 0x6) ioctl$auto_SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, &(0x7f0000000380)="238674339ff9d38bbb0fb878e124d795bdd981a84835fcceb3e7d3a42ac3efc326940ed640f033caeb942d0bf8ea2e8dea4247eac5055726a3a9da719f1d8c14a9c47448328ec636c4dc9bf891caf3f0a7a0e31562491c54faf151ea4dede9d7688ece1e247a00d1d37ca284fd16a7c3c10ee6a90468b10b982309c0069628096d305855e660745bf1875497c88abb8eef432ca4684ff7ccb93266bda42cb7eb9e60f00579446ee296aa8800") madvise$auto(0x8, 0x10000000006, 0x1a) setgroups$auto(0xe32, 0x0) memfd_create$auto(0x0, 0xe) mbind$auto(0x2000, 0x100000004, 0x100002000, 0x0, 0x4, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_ovs_ct_limit(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 7.290807208s ago: executing program 0 (id=166): r0 = socket(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf254b000000080009000500000008000300", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40383d0c, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pipe2$auto(0x0, 0x80) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x2, 0x4) r6 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) write$auto(r5, &(0x7f0000000000)='-\x00', 0x2fb) fcntl$auto_F_RDLCK(r0, 0x13783470, 0x0) sendto$auto(r4, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0x0, "0000a80000000200000800000400"}, 0x1c) 3.783702702s ago: executing program 3 (id=181): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000240)='/dev/v4l-subdev7\x00', 0x0, 0x0) ioctl$auto(r0, 0xc0845657, r0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video8\x00', 0x802, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x1, 0x1, 0x400000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd11/integrity/tag_size\x00', 0x0, 0x0) read$auto(r1, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.7/usb23/23-0:1.0/ep_81/interval\x00', 0x3) socketcall$auto_SYS_RECVMMSG(0x13, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) sendmsg$auto_NL802154_CMD_SET_MAX_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) read$auto(r2, 0x0, 0x20) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/video59\x00', 0x0, 0x0) openat$auto_buffer_subbuf_size_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/buffer_subbuf_size_kb\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) close_range$auto(r0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x22, 0x2, 0x3) setsockopt$auto(0x4, 0x88, 0x1, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) 3.303823714s ago: executing program 2 (id=184): mmap$auto(0x0, 0x2020009, 0x2002, 0xf8, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB='-\x00', @ANYBLOB=']'], 0x1ac}}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3.091160603s ago: executing program 0 (id=185): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyc4\x00', 0x40000, 0x0) unshare$auto(0x40000080) mremap$auto(0x3, 0xb8, 0x6, 0x3, 0xfffff000) mmap$auto(0xffffffffffffffff, 0x400008, 0x0, 0x12, r0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/vkms/drm/card1/card1-Writeback-1/modes\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x24b7}, 0x8, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x6) r2 = socket(0x2, 0x6, 0x0) symlink$auto(&(0x7f0000000680)='./file0/../file0\x00', &(0x7f00000002c0)='./file0\x00') rename$auto(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000f890b1c4df4ebfbc3aa3726eb119a73067754e99d5decd1fd20dea97906389660edc5e7172479b45b957a46c158e6640194014da27f483cd4f9e8b9b4a32b747fa69b3d45c44e079b0f4705906dbfd1e27fe35cad03f15e10bb79749e42e64967859388f39e4446032c904c329bc16bc1c76dc4663227ac8c930151ba5a771e6e6b61253415d7f3bc1b971c293829d217dc1be2238fa2e6f209cf10a5a4ff67e", @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r2, 0x8914, 0x24) io_setup$auto(0x4, &(0x7f00000001c0)=0x200) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) lstat$auto(0x0, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0xb, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r4 = socket(0x29, 0x2, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4014}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r4, 0x89f1, 0x24) close_range$auto(0x2, 0x8, 0x0) newfstatat$auto(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9, 0x180000, 0xa, 0x5, 0xee00, 0x0, 0x0, 0x8001, 0x253, 0xd, 0x0, 0x100000001, 0xb2, 0x3, 0x12, 0x2, 0x2}, 0xf375) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6e2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2841, 0x0) 3.006172756s ago: executing program 2 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) msgctl$auto_IPC_INFO(0x40, 0x3, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(r1, 0x1, 0x12, 0x0, 0xeb66) r2 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001ac0), 0xffffffffffffffff) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.7/usb8/remove\x00', 0xa001, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vivid.0/video4linux/video32/power/control\x00', 0x701442, 0x0) r4 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) writev$auto(r4, &(0x7f0000000080)={&(0x7f0000000140)="61e35d7d", 0x4}, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) r5 = socket(0x28, 0x1, 0x0) getsockopt$auto(r5, 0x28, 0x0, 0x0, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x3, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r6, 0xae03, 0xc1) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x51b040, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r7, 0xc0305710, 0x0) write$auto(r3, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) setsockopt$auto_SO_OOBINLINE(0xffffffffffffffff, 0x7, 0xa, &(0x7f0000000180)='(&@-^6\xe7\x95&,\x00\x88\x8f\x1e\x92\x87\xeaM\xd47\x8aSg\x14\xcb\xd4 N\x15\xc2\xa3=2\xe4\x9f\xaf&w\xe6\xb8\xba\xcb8\x8b\x90KJq\xd1\x10\xb3B\"1m\xdf\xff\xe0\xa1g?~\xec\xd0D7m\xf1\x19?\x10s\x1a\xfck=&\xbe\x98+Q\xcb\x98Y\x91j\xfcs\xcf\x18j\xb6\x8b\x9d@\xafJA6\x1c{}\xb2\xa7\x14\x14\v\xc9\xdfn\xcfc7\xfa*Nk\xe44\x99u,\xab\x91\x90\xb4II\x1d\xa0\x819\vG/\xc4\xe7yr\xc4\x97\x10\x06;\xcfw \xa5(n\xaf\x918;\x83\n<\xed&\x1e~L\xd7\xa2{\xe3\x8de(\x84\x7f\x1ev\x1a\xafe\xd8\x80\x00\x00\x00\x00\x00\x00\x00', 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001b40)={'gretap0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000001b80)={0x1c, r2, 0x1301, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x20008800) 2.990949379s ago: executing program 3 (id=187): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x228b42, 0x0) ioctl$auto_UI_DEV_CREATE(0xffffffffffffffff, 0x5501, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) open(0x0, 0x163340, 0x2a) socket(0x2a, 0x2, 0x1) ioctl$auto(0x3, 0x5411, 0x10000000000402) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video35\x00', 0xa200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0d566b3dd008e4edd96502"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="18"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="01090000d75e6dbfb6fe06d83b40ff76fb0ca8a29500f148ed8b03a3a591ddd52a975b5310026aaf98465cd9e5075ab244e2bc2cf15b982b54ccd9199668b8b8da53d575619c0eccd62e52a1", @ANYRES16=r1, @ANYBLOB="83d72dbd7000fbdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x4040) sendmsg$auto_L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f00000015c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000001500)={0x14, r1, 0x800, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) close_range$auto(0x2, 0x8, 0x1000) fanotify_init$auto(0x65, 0x2) mmap$auto(0x5, 0x40009, 0xffffffffffffffff, 0x9b72, 0x7, 0x28000) mincore$auto(0x1000, 0x8001, 0x0) mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) io_uring_enter$auto(0x3, 0x1, 0x82400001, 0xb, 0x0, 0x100018) close_range$auto(r0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0x18, 0x2, 0x8) 2.850106433s ago: executing program 3 (id=188): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0xa42, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='/sys/devices/system/cpu/cpuidle/current_governor\x00', 0x9, 0x1000) mmap$auto(0x2000000000000, 0xfffffffffffffffe, 0x8, 0x10, r0, 0x5d63) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x1) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, 0x0, 0xa00, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/wchan\x00', 0xc8400, 0x0) read$auto_proc_single_file_operations_base(r1, &(0x7f0000000080)=""/112, 0x70) socket(0x10, 0x2, 0xc) getpeername$auto(0x3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000000), 0x90080, 0x0) ioctl$auto_I2C_RDWR(r2, 0x707, &(0x7f0000000240)="236f2c25da6ebc05d5c8fded67c15661d4b9d50c3a4d89dce310eb214f881ee22b6daa6dec7eb0a971c9a1b594558bf5fa60d10c2d2b864c02ba30e153f6f65b919e6bc8c53b3ce7c7369567fe620b16749c712567de48333c4041d507618b97711d1029459a9f2a6a04b5e3a79909c679e1b76656fdc6600e29fb939da257dee2d5733c4c08d3d7ff395ca316d8ae9216da5ce51e569e492d650eb93396eb02e6620e59bf8a1958a75db4fb267ca17da12d8434b2cdd63eb211bbd95d9c974543337286aa248c522926fc358f88296b6dd7a45b915d1b87298c945620abfc4c5e835b72dad5cd") 2.539258017s ago: executing program 2 (id=190): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@HSR_A_IF1_AGE={0x8, 0x3, 0x200}, @HSR_A_IF2_AGE={0x8, 0x4, 0x5}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IFINDEX={0x8}, @HSR_A_IFINDEX={0x8}, @HSR_A_IF1_AGE={0x8, 0x3, 0x400400}]}, 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x9c0a7fc06f585e63) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="12"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x8b72, 0x2, 0x8000) r0 = socket(0xa, 0x3, 0x3a) r1 = fsopen$auto(&(0x7f0000000000)='@\x00', 0x55cd) ioctl$auto_I2C_SLAVE(r1, 0x703, &(0x7f0000000040)="86100bbbe234e60702618140be21ede43d523be125d4177e894a157e5a1f49ce0f9a8f4d7215d8d3d72c59a2c178512e50bd4f2eb0ccc43aabb6051355f9260b5a121f75cc1922a166864998952203d6eae6d499c9a6ae18008165de2a0a60f6eb22b5a359a2486de11cdb186141a879389913a113ca4c857b9eef30aa1686f01e4a5e6e32ef31a728f9d22707025831cc") setsockopt$auto(0x400000000000003, 0x29, 0xcd, 0x0, 0x567) io_cancel$auto(0xe3, &(0x7f0000000100)={0x3, 0x7, 0x82, 0x2a, 0x9f, r1, 0x9, 0x3, 0x0, 0x0, 0x7fffffff, r0}, &(0x7f0000000140)={0x7, 0xfff, 0x0, 0x2d12400000000}) 2.456040982s ago: executing program 3 (id=191): close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi16\x00', 0x22802, 0x0) poll$auto(&(0x7f00000001c0)={r1, 0xffff, 0x29}, 0x6, 0x5) writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x6) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/netfs/requests\x00', 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(0x3, 0x545c, 0x38) 2.139535265s ago: executing program 2 (id=193): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000004f6fd7cbcc50df8c57d6c79e9d7227921364ef1b13b421f84013d55c65cdd66608c4883a7e8bdf98cebedd3cf08c5d2cdfbba4e6084e", @ANYRES16=r2, @ANYBLOB="1b0026bd7000fddbdf2503000000040008000c000380050014800900000012000100898771f1c19f1779048590828847000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20048810) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) write$auto(r1, 0x0, 0x10) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x20499d, 0x9) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r3 = socket(0x10, 0x2, 0x0) msgctl$auto_IPC_STAT(0x1, 0x2, &(0x7f0000000140)={{0x7, 0xee00, 0xee00, 0x3, 0x2, 0xfffe0000, 0x2}, &(0x7f00000000c0)=0x28, &(0x7f0000000100)=0x2, 0xfffffffffffffff9, 0x8, 0x4, 0xfa7, 0x6, 0x8000, 0x1, 0x4, @raw=0x3ff, @raw=0x7fffffff}) fsconfig$auto(r3, 0x4, &(0x7f0000000340)='\xeb\xe5\x1b\xadj\xa1\xaf\xde\x1c\xcf\x06\xb1\xcb\x86\xa2\xdd\xf3U?\xf9\xcf\xd1U\x11\xba\xd0[\xd8R\x04\xbc\xaa\xf0\xa2\x16\xd8\xf6I\xc3\xb5\xe9$\xb2\xdb\x97\xd8\x8a\xa5\x10\xefq\x03g\xb7\xf9\xd9T\xeaHu\x82\xf2\xd88\x92#\xf1\xd3w\x10.\xe1\xae\x96\x15;\xad\x9b\xe4\x03\x16W\xddq\xdf\xb1\xa7\xa01/\xe1\xe1lq8,\x92\x98\x01\xc1S\xf2M\x00\xed', &(0x7f0000000080)="ea77c25efabc89daf44e0500ac2f07", 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r6 = clone$auto(0xffffffff, 0x8, &(0x7f0000000240)=0x5, &(0x7f0000000280)=0xffffffff, 0x7fffffff) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r7, 0x4, 0x7ff) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c001b"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ptrace$auto(0x2, r7, 0x3, 0x4f) msgctl$auto_IPC_STAT(0x2, 0x2, &(0x7f00000002c0)={{0x3a90000, r4, r5, 0xfffffffc, 0x751, 0x7, 0x1}, &(0x7f00000001c0)=0x81, &(0x7f0000000200)=0xb, 0xb, 0x0, 0xfffffffffffffffd, 0x2, 0x2, 0x7, 0x101, 0x2, @inferred=r6, @inferred=r7}) io_uring_setup$auto(0x1, 0x0) socket(0x11, 0x80003, 0x300) 2.019082786s ago: executing program 3 (id=194): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x0, @empty}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4c084}, 0x51) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = openat$auto_ptdump_curusr_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) read$auto_ptdump_curusr_fops_(r1, &(0x7f0000000280)=""/4096, 0x1000) socket(0x2, 0x1, 0x0) r2 = socketpair$auto(0x1e, 0x3, 0xfffffffe, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000180), 0x26001, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x7}, 0x3, 0xcad7) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000180), r2) sendmsg$auto_OVS_VPORT_CMD_NEW(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002bbd7000fddbdf250100000004000a80080002295b0004000500080001000700"/46], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x80) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="27000900b9c610e8ce7c555a6243af74f697a2c5c089bf7689069d5f1957", @ANYRES16=0x0, @ANYRES64=r1], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0x100085) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r5, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c00, 0x0) 1.910394828s ago: executing program 1 (id=195): r0 = socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x8000, 0x9, 0xdf, 0xeb1, 0x401, 0x1) sendmsg$auto_TCP_METRICS_CMD_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="e2000000", @ANYBLOB="01002d"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x8}, 0x3, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r1 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) r2 = fanotify_init$auto(0x5, 0x2000000000002) r3 = open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) setns(r3, 0x28000080) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r5, 0x10f, 0x87, 0x0, 0x14) ioctl$auto(r4, 0x2, 0x4) setsockopt$auto(0x3, 0x10f, 0x87, 0x0, 0x14) dup2$auto(0x0, 0x3) fanotify_mark$auto(0x0, 0x451, 0xa, r3, 0x0) fanotify_mark$auto(r2, 0x451, 0x800000a, r1, 0x0) close_range$auto(0x2, 0x8, 0x0) bind$auto(r0, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x0, 0x2}}, 0x66) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r6) sendmsg$auto_TIPC_NL_NET_SET(r6, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) 1.73185911s ago: executing program 0 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000002c0)={0x0, 0xffffffffffffff4d, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fedbdf251600000018000180140002006e657464657673696d3000000000050005000308000000000500040040000000"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) r2 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r2, 0x0, 0x0) r3 = socketpair$auto(0xffff, 0x1, 0x100000, 0x0) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x288200, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HSR_C_GET_NODE_STATUS(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYBLOB="08002bbd7000fcdbdf25030000000a000100bbbbbbbbbbbbb46560b1f6dc7620d998ccfc2bd999000008000400030000000600060001000000080002002173c3bd4d1c0d824e6872645b3729d53aaf26bcd96a6c4b99660c4e49296b23cfe61e2095abebc54b7bba6931b8458b421d9c2888a5d266a5fbbcfb62eca3d5a8913ebc77439e9eb71065ec3bced88bddee284dc1bfe4adfb67cd5408f9", @ANYRES32=0x0, @ANYRES8=r3], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) socket(0x11, 0x80003, 0x300) socket(0x25, 0x1, 0x1) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x4a040, 0x0) socket(0xa, 0x2, 0x0) socket(0x29, 0xa, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fd, 0x8, 0xd, 0x8, 0x948b, 0x2, 0x100000000, 0x6, 0x80000000080, 0x1fffe000000000, 0x80000001, 0x5, 0x6d3c, 0x200000000000005, 0x2]}, 0x0) mbind$auto(0x7, 0x602, 0x3, &(0x7f0000000500)=0x10001, 0xa74, 0x5) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socket(0x1e, 0x1, 0x0) socketpair$auto(0xffffffff, 0xa, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) 1.640971047s ago: executing program 1 (id=197): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0xfd}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000084) sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3a0001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x20, r1, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x7}, @NL80211_ATTR_TIMED_OUT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004010}, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000080)={0x20, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x80802, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) r5 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r5, 0x40026f33, 0x0) 1.17118733s ago: executing program 1 (id=198): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x23, 0x80805, 0x0) socket(0x2, 0x6, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0100df"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=r0, @ANYRES8=r1], 0x18}, 0x1, 0x0, 0x1f00, 0x60008004}, 0x84) 795.021452ms ago: executing program 2 (id=199): socket(0x10, 0x2, 0x0) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r0, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r0, &(0x7f0000000200)='./file0\x00', r0, &(0x7f0000000240)='./file1\x00', 0x1) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x3) renameat2$auto(r1, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000240)='./file1\x00', 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/disksize\x00', 0x2202, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/o2cb/logmask/ERROR\x00', 0x183042, 0x0) openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(r3, r3, 0x0, 0x8000) read$auto_cachefiles_daemon_fops_internal(r2, &(0x7f0000000080)=""/232, 0xe8) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/module/nfs/parameters/nfs_mountpoint_expiry_timeout\x00', 0x80040, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cpu.max.burst\x00', 0x80302, 0x0) sendfile$auto(r5, r5, 0x0, 0x3) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f0000000000)=""/4118, 0x1016) 714.213021ms ago: executing program 1 (id=200): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) socket(0x10, 0x2, 0xc) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000005540)='/dev/input/event2\x00', 0xa481, 0x0) socket(0xa, 0x801, 0x84) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000000000)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c0001"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r3, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r3, 0x7b1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x560a, 0x7) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r0], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x10) write$auto(r1, &(0x7f0000000000)='-\x00', 0xfdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c66ff1ca234dbb710f0e491197567820000004189d452a5e3f2edfd3aab8aafab5c4fbe5cd19ba51f550ba39f94890d256f0cb8e2a4f186283cd5b9f7b233be4e6137b0a607174b1f47a0a20800000000000000745533dfc40000000000", @ANYRES16=0x0, @ANYRES16=r5], 0x1c}}, 0x20008890) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd4/queue/iosched/front_merges\x00', 0xe0281, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000000c0)='-7', 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyz2\x00', 0x311b80, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=':'], 0x1ac}}, 0x40000) 511.562764ms ago: executing program 0 (id=201): open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) chmod$auto(0x0, 0xf4ba) 508.516362ms ago: executing program 1 (id=202): close_range$auto(0x2, 0x8, 0x0) mknod$auto(&(0x7f0000000080)='}[,&*}\x00', 0xe6c, 0x17) llistxattr$auto(&(0x7f0000000040)='}[,&*}\x00', 0x0, 0x7) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001100)='/proc/bus/pci/00/03.0\x00', 0xa0581, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001140)="8cbdca", 0x3) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vbi16\x00', 0x22802, 0x0) poll$auto(&(0x7f00000001c0)={r1, 0xffff, 0x29}, 0x6, 0x5) writev$auto(r0, &(0x7f0000001d40)={0x0, 0x2}, 0x6) syz_clone3(&(0x7f0000000100)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/netfs/requests\x00', 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) ioctl$auto(0x3, 0x545c, 0x38) 402.928852ms ago: executing program 2 (id=203): r0 = socket(0x10, 0x4, 0x5) mmap$auto(0x0, 0xd, 0x3, 0xebf, r0, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) memfd_secret$auto(0xb) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), 0xffffffffffffffff) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigaction$auto(0x1, 0x0, 0x0, 0x8) r1 = io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r2, 0x0, 0x5, 0x7f) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x8000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) keyctl$auto(0x5, 0xffffeffffffffffe, 0x107, 0x803, 0x800000000000c) keyctl$auto(0x6, 0xfffffbfffffffffe, 0x2, 0x32, 0xfff) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) 214.657207ms ago: executing program 1 (id=204): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f00000001c0)="976f09bd689a850edbe36136c8535f593331280bb0b4ba0edd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf285e7a197166480ef899794cab4b61107cdae019c6139ce8761b5d50", 0x60) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/mm/transparent_hugepage/hpage_pmd_size\x00', 0x0, 0x0) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r2 = socket(0x18, 0x5, 0x1) connect$auto(r2, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) read$auto(r1, 0x0, 0x20) 0s ago: executing program 0 (id=205): ioctl$auto_VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000100)={0x3, 0xffffffffffffffff}) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x9}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0xbb80}]}, 0x2c}}, 0x4021) (async, rerun: 32) mmap$auto(0x0, 0x7, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async, rerun: 32) unshare$auto(0x7fff) r1 = socket(0xa, 0x1, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x80, 0x0, &(0x7f00000000c0)=0x97) (async) set_mempolicy$auto(0x1, &(0x7f0000000180)=0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200400, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff001, 0x2) (async) socket(0x2, 0x1, 0x0) (async) socket(0x1e, 0x1, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram5\x00', 0x2000, 0x0) ioctl$auto_BLKRASET(r3, 0x1262, 0x0) (async) socket(0x10, 0x2, 0x0) (async) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/configuration\x00', 0x10b800, 0x0) prctl$auto_PR_MCE_KILL_GET(0x22, 0x8, 0x0, 0xfff, 0x9) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fb0\x00', 0x100, 0x0) ioctl$auto_FBIOPUT_VSCREENINFO(r4, 0x4601, 0x0) (async, rerun: 32) socket(0xa, 0x2, 0x3a) (async, rerun: 32) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D1c\x00', 0x0, 0x0) (async, rerun: 32) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x0, 0x2, 0x20000000000000, 0x1, 0x8, 0x300000000000000, 0x80000001, 0x7, 0x4d40, 0x5, 0x2]}, 0x0) (async, rerun: 32) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000080)) (async) unshare$auto(0x40000080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 73.563563][ T5829] cgroup: Unknown subsys name 'net' [ 73.673786][ T5829] cgroup: Unknown subsys name 'cpuset' [ 73.682578][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.102827][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.056695][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.065140][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 77.079463][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.088709][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 77.097419][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.097519][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.109170][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 77.122121][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.127071][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 77.130202][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.137284][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 77.144459][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.152271][ T5854] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.159932][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 77.165559][ T5854] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.173405][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 77.180362][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.189551][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 77.193199][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.200305][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.655913][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 77.790869][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 77.854273][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 77.936435][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.944864][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.953364][ T5839] bridge_slave_0: entered allmulticast mode [ 77.960898][ T5839] bridge_slave_0: entered promiscuous mode [ 77.994877][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.002557][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.010289][ T5839] bridge_slave_1: entered allmulticast mode [ 78.017726][ T5839] bridge_slave_1: entered promiscuous mode [ 78.055822][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 78.115843][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.132896][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.140096][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.147242][ T5840] bridge_slave_0: entered allmulticast mode [ 78.154536][ T5840] bridge_slave_0: entered promiscuous mode [ 78.168541][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.193041][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.200460][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.207612][ T5840] bridge_slave_1: entered allmulticast mode [ 78.214947][ T5840] bridge_slave_1: entered promiscuous mode [ 78.288695][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.297859][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.305888][ T5838] bridge_slave_0: entered allmulticast mode [ 78.314615][ T5838] bridge_slave_0: entered promiscuous mode [ 78.336060][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.362220][ T5839] team0: Port device team_slave_0 added [ 78.368514][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.375942][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.383504][ T5838] bridge_slave_1: entered allmulticast mode [ 78.391900][ T5838] bridge_slave_1: entered promiscuous mode [ 78.402100][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.413110][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.420288][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.427436][ T5841] bridge_slave_0: entered allmulticast mode [ 78.434650][ T5841] bridge_slave_0: entered promiscuous mode [ 78.444045][ T5839] team0: Port device team_slave_1 added [ 78.473421][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.480952][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.488323][ T5841] bridge_slave_1: entered allmulticast mode [ 78.495579][ T5841] bridge_slave_1: entered promiscuous mode [ 78.561176][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.574225][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.586394][ T5840] team0: Port device team_slave_0 added [ 78.595598][ T5840] team0: Port device team_slave_1 added [ 78.614999][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.622211][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.648503][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.662660][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.669693][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.696274][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.734425][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.770421][ T5838] team0: Port device team_slave_0 added [ 78.788396][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.795755][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.821918][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.836196][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.866228][ T5838] team0: Port device team_slave_1 added [ 78.872882][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.880248][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.906336][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.975452][ T5841] team0: Port device team_slave_0 added [ 79.019012][ T5841] team0: Port device team_slave_1 added [ 79.031151][ T5839] hsr_slave_0: entered promiscuous mode [ 79.037758][ T5839] hsr_slave_1: entered promiscuous mode [ 79.045976][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.053111][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.079891][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.093180][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.100774][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.127600][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.142113][ T5840] hsr_slave_0: entered promiscuous mode [ 79.149421][ T5840] hsr_slave_1: entered promiscuous mode [ 79.155557][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.163339][ T5840] Cannot create hsr debugfs directory [ 79.221830][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.228906][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.255009][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.266089][ T5853] Bluetooth: hci0: command tx timeout [ 79.266374][ T5850] Bluetooth: hci1: command tx timeout [ 79.277546][ T5853] Bluetooth: hci2: command tx timeout [ 79.277555][ T5845] Bluetooth: hci3: command tx timeout [ 79.306109][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.313712][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.340112][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.461352][ T5838] hsr_slave_0: entered promiscuous mode [ 79.467632][ T5838] hsr_slave_1: entered promiscuous mode [ 79.474505][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.482204][ T5838] Cannot create hsr debugfs directory [ 79.568104][ T5841] hsr_slave_0: entered promiscuous mode [ 79.574643][ T5841] hsr_slave_1: entered promiscuous mode [ 79.581624][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.590035][ T5841] Cannot create hsr debugfs directory [ 79.857487][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.885402][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.920739][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.940220][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.977305][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.997822][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.010691][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.021036][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.106687][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.133652][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.143988][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.156142][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.244877][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.265005][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.277662][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.302717][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.409892][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.423810][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.460188][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.487095][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.494335][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.520293][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.535998][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.550032][ T3468] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.557317][ T3468] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.582478][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.611916][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.619103][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.629617][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.636761][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.647590][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.654758][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.671166][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.678351][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.747268][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.795810][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.855729][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.902871][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.973128][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.022265][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.029489][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.087282][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.094537][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.144076][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.262214][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.297544][ T5839] veth0_vlan: entered promiscuous mode [ 81.324439][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.339672][ T5853] Bluetooth: hci2: command tx timeout [ 81.345161][ T5853] Bluetooth: hci3: command tx timeout [ 81.350822][ T5850] Bluetooth: hci1: command tx timeout [ 81.356507][ T5850] Bluetooth: hci0: command tx timeout [ 81.373244][ T5839] veth1_vlan: entered promiscuous mode [ 81.511458][ T5840] veth0_vlan: entered promiscuous mode [ 81.533734][ T5839] veth0_macvtap: entered promiscuous mode [ 81.542418][ T5841] veth0_vlan: entered promiscuous mode [ 81.556405][ T5840] veth1_vlan: entered promiscuous mode [ 81.566039][ T5839] veth1_macvtap: entered promiscuous mode [ 81.584324][ T5841] veth1_vlan: entered promiscuous mode [ 81.601531][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.653483][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.675029][ T5841] veth0_macvtap: entered promiscuous mode [ 81.687883][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.707312][ T5841] veth1_macvtap: entered promiscuous mode [ 81.718738][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.731002][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.741779][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.750596][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.763073][ T5840] veth0_macvtap: entered promiscuous mode [ 81.777904][ T5840] veth1_macvtap: entered promiscuous mode [ 81.844136][ T5838] veth0_vlan: entered promiscuous mode [ 81.853359][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.864567][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.877232][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.891983][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.904389][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.914901][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.925843][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.937692][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.960022][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.971040][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.987417][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.001533][ T5841] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.010532][ T5841] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.019875][ T5841] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.028605][ T5841] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.043215][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.054087][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.066201][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.076805][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.088637][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.107718][ T5838] veth1_vlan: entered promiscuous mode [ 82.126527][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.135500][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.145976][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.154940][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.233450][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.259999][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.315600][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.323297][ T5838] veth0_macvtap: entered promiscuous mode [ 82.333861][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.361067][ T5838] veth1_macvtap: entered promiscuous mode [ 82.396419][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.408140][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.422177][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.433278][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.444695][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.455487][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.466116][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.478258][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.493109][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.554072][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.567897][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.582054][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.585398][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.594310][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.621878][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.633692][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.645398][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.682152][ T3010] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.693728][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.704714][ T3010] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.708972][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.725678][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.742948][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.796404][ T3010] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.809476][ T3010] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.845480][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.860410][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.072513][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.086200][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.211326][ T306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.240250][ T306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.319171][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.327759][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.337549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 83.347240][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.422050][ T5853] Bluetooth: hci1: command tx timeout [ 83.427485][ T5853] Bluetooth: hci2: command tx timeout [ 83.429351][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.436292][ T5853] Bluetooth: hci3: command tx timeout [ 83.447252][ T5850] Bluetooth: hci0: command tx timeout [ 84.030125][ T5926] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 84.072310][ T5926] CIFS mount error: No usable UNC path provided in device string! [ 84.072310][ T5926] [ 84.206396][ T5926] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 84.797095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.175360][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.499912][ T5850] Bluetooth: hci2: command tx timeout [ 85.505490][ T5853] Bluetooth: hci1: command tx timeout [ 85.505496][ T5845] Bluetooth: hci0: command tx timeout [ 85.505546][ T5845] Bluetooth: hci3: command tx timeout [ 85.572348][ T5944] Invalid ELF header magic: != ELF [ 85.657427][ T5946] Invalid ELF header magic: != ELF [ 85.942774][ T5967] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.838648][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 87.228063][ T5985] mmap: syz.1.15 (5985) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.419513][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 87.430644][ T5994] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15'. [ 87.580457][ T5994] openvswitch: netlink: IPv4 tunnel dst address is zero [ 88.675150][ T6002] GUP no longer grows the stack in syz.3.16 (6002): 14000-401000 (4000) [ 88.725203][ T6002] CPU: 0 UID: 0 PID: 6002 Comm: syz.3.16 Not tainted 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 88.725240][ T6002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.725255][ T6002] Call Trace: [ 88.725263][ T6002] [ 88.725278][ T6002] dump_stack_lvl+0x16c/0x1f0 [ 88.725324][ T6002] gup_vma_lookup+0x1d2/0x220 [ 88.725355][ T6002] __get_user_pages+0x234/0x36f0 [ 88.725397][ T6002] ? check_irq_usage+0xcb/0x920 [ 88.725434][ T6002] ? __pfx___get_user_pages+0x10/0x10 [ 88.725478][ T6002] __gup_longterm_locked+0x20d/0x1850 [ 88.725521][ T6002] ? __pfx___gup_longterm_locked+0x10/0x10 [ 88.725569][ T6002] pin_user_pages_remote+0xed/0x140 [ 88.725602][ T6002] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 88.725631][ T6002] ? mm_access+0x22d/0x2e0 [ 88.725676][ T6002] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 88.725705][ T6002] ? futex_wait_queue+0x14c/0x220 [ 88.725727][ T6002] ? futex_unqueue+0xba/0x140 [ 88.725763][ T6002] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 88.725790][ T6002] ? iovec_from_user+0xbb/0x140 [ 88.725835][ T6002] ? iovec_from_user+0xbb/0x140 [ 88.725868][ T6002] process_vm_rw+0x2ff/0x360 [ 88.725894][ T6002] ? __pfx_process_vm_rw+0x10/0x10 [ 88.725925][ T6002] ? up_write+0x1b2/0x520 [ 88.725962][ T6002] ? __pfx_task_mm_cid_work+0x10/0x10 [ 88.726005][ T6002] ? xfd_validate_state+0x5d/0x180 [ 88.726041][ T6002] __x64_sys_process_vm_readv+0xe2/0x1c0 [ 88.726065][ T6002] ? do_syscall_64+0x91/0x260 [ 88.726099][ T6002] ? lockdep_hardirqs_on+0x7c/0x110 [ 88.726131][ T6002] do_syscall_64+0xcd/0x260 [ 88.726177][ T6002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.726203][ T6002] RIP: 0033:0x7f8d8418d169 [ 88.726224][ T6002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.726255][ T6002] RSP: 002b:00007f8d84f50038 EFLAGS: 00000246 ORIG_RAX: 0000000000000136 [ 88.726280][ T6002] RAX: ffffffffffffffda RBX: 00007f8d843a5fa0 RCX: 00007f8d8418d169 [ 88.726296][ T6002] RDX: 0000000000000004 RSI: 0000200000000040 RDI: 0000000000000017 [ 88.726312][ T6002] RBP: 00007f8d8420e990 R08: 0000000000000003 R09: 0000000000000000 [ 88.726327][ T6002] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 88.726343][ T6002] R13: 0000000000000000 R14: 00007f8d843a5fa0 R15: 00007ffdfdc6a618 [ 88.726375][ T6002] [ 89.343024][ T6034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 89.406669][ T6035] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 89.417197][ T6035] netlink: 354 bytes leftover after parsing attributes in process `syz.0.22'. [ 89.436443][ T6035] Zero length message leads to an empty skb [ 89.578235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 89.660250][ T6046] Setting dangerous option i915.mitigations - tainting kernel [ 89.840266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.083077][ T6072] process 'syz.0.32' launched './file0' with NULL argv: empty string added [ 91.139720][ T6064] zswap: compressor not available [ 91.212798][ T6074] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 91.263757][ T6074] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 92.093780][ T975] cfg80211: failed to load regulatory.db [ 92.108919][ T30] audit: type=1800 audit(1744687905.226:2): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.35" name="file0" dev="tmpfs" ino=65 res=0 errno=0 [ 92.140405][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.2.38'. [ 92.175022][ T6092] netlink: 25 bytes leftover after parsing attributes in process `syz.2.38'. [ 93.111599][ T6115] netlink: 28 bytes leftover after parsing attributes in process `syz.1.43'. [ 93.124302][ T6115] ipvlan1: entered promiscuous mode [ 93.160034][ T6122] Line length is too long: Should be less than 4094 [ 94.628154][ T6149] sd 0:0:1:0: PR command failed: 1026 [ 94.729864][ T6149] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 94.762772][ T6149] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 96.836314][ T6193] netlink: 20 bytes leftover after parsing attributes in process `syz.0.61'. [ 97.389499][ T6195] netlink: 338 bytes leftover after parsing attributes in process `syz.0.61'. [ 97.958972][ T30] audit: type=1800 audit(1744687911.086:3): pid=6211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.64" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 98.456450][ T5845] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 99.923701][ T6261] nbd: socks must be embedded in a SOCK_ITEM attr [ 99.951755][ T6246] netlink: 330 bytes leftover after parsing attributes in process `syz.3.72'. [ 99.976055][ T6246] netlink: 330 bytes leftover after parsing attributes in process `syz.3.72'. [ 100.162981][ T6264] capability: warning: `syz.2.77' uses 32-bit capabilities (legacy support in use) [ 100.181085][ T6267] FAULT_INJECTION: forcing a failure. [ 100.181085][ T6267] name failslab, interval 1, probability 0, space 0, times 1 [ 100.259381][ T6267] CPU: 1 UID: 0 PID: 6267 Comm: syz.1.76 Tainted: G U 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 100.259424][ T6267] Tainted: [U]=USER [ 100.259433][ T6267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 100.259447][ T6267] Call Trace: [ 100.259455][ T6267] [ 100.259465][ T6267] dump_stack_lvl+0x16c/0x1f0 [ 100.259507][ T6267] should_fail_ex+0x512/0x640 [ 100.259534][ T6267] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 100.259573][ T6267] should_failslab+0xc2/0x120 [ 100.259597][ T6267] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 100.259630][ T6267] ? d_instantiate+0x77/0x90 [ 100.259652][ T6267] ? alloc_empty_file+0x55/0x1e0 [ 100.259679][ T6267] alloc_empty_file+0x55/0x1e0 [ 100.259705][ T6267] alloc_file_pseudo+0x13a/0x230 [ 100.259732][ T6267] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 100.259757][ T6267] ? alloc_fd+0x471/0x7d0 [ 100.259791][ T6267] sock_alloc_file+0x50/0x210 [ 100.259825][ T6267] __sys_socket+0x1c0/0x260 [ 100.259847][ T6267] ? __pfx___sys_socket+0x10/0x10 [ 100.259870][ T6267] ? rcu_is_watching+0x12/0xc0 [ 100.259903][ T6267] __x64_sys_socket+0x72/0xb0 [ 100.259923][ T6267] ? lockdep_hardirqs_on+0x7c/0x110 [ 100.259954][ T6267] do_syscall_64+0xcd/0x260 [ 100.259997][ T6267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 100.260022][ T6267] RIP: 0033:0x7f5e7bf8d169 [ 100.260041][ T6267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.260064][ T6267] RSP: 002b:00007f5e7cdea038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 100.260087][ T6267] RAX: ffffffffffffffda RBX: 00007f5e7c1a5fa0 RCX: 00007f5e7bf8d169 [ 100.260103][ T6267] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000026 [ 100.260115][ T6267] RBP: 00007f5e7c00e990 R08: 0000000000000000 R09: 0000000000000000 [ 100.260129][ T6267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.260143][ T6267] R13: 0000000000000000 R14: 00007f5e7c1a5fa0 R15: 00007fffd43654b8 [ 100.260176][ T6267] [ 100.471546][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.881995][ T6323] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 103.914693][ T6323] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 103.974074][ T6323] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 104.006342][ T6323] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 104.046148][ T6323] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.078135][ T6323] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 104.103250][ T6323] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 104.110349][ T6323] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.123247][ T6323] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 104.138347][ T6323] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 104.146482][ T6323] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.155546][ T6323] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 104.459144][ T5854] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.438140][ T5854] Bluetooth: hci3: unexpected event 0x06 length: 11 > 3 [ 105.943628][ T6412] device-mapper: ioctl: device name cannot contain '/' [ 106.062532][ T5854] Bluetooth: hci1: command 0x0c1a tx timeout [ 106.146767][ T5854] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.146784][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.539569][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.216260][ T6438] netlink: 342 bytes leftover after parsing attributes in process `syz.0.116'. [ 107.267932][ T6438] netlink: 342 bytes leftover after parsing attributes in process `syz.0.116'. [ 107.326784][ T6438] netlink: 342 bytes leftover after parsing attributes in process `syz.0.116'. [ 107.785537][ T6445] netlink: 'syz.2.118': attribute type 11 has an invalid length. [ 107.821355][ T6445] netlink: 330 bytes leftover after parsing attributes in process `syz.2.118'. [ 107.871571][ T6451] Line length is too long: Should be less than 4094 [ 108.138942][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 108.219139][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 108.225688][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.619220][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.889890][ T6479] netlink: zone id is out of range [ 110.070999][ T30] audit: type=1800 audit(6039655219.207:4): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.132" name="features" dev="configfs" ino=9083 res=0 errno=0 [ 110.219204][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.298926][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.299072][ T5854] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.849613][ T6507] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input6 [ 111.031115][ T6514] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 111.312753][ T6516] netlink: 338 bytes leftover after parsing attributes in process `syz.3.139'. [ 111.399948][ T6516] netlink: 338 bytes leftover after parsing attributes in process `syz.3.139'. [ 111.653596][ T6503] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 111.713910][ T6525] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.135387][ T6536] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 112.583395][ T6551] netlink: 186 bytes leftover after parsing attributes in process `syz.0.148'. [ 112.651751][ T6552] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 112.698893][ T6552] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 112.743359][ T6562] netlink: 342 bytes leftover after parsing attributes in process `syz.0.150'. [ 112.972171][ T30] audit: type=1326 audit(6039655231.081:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6566 comm="syz.2.151" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe36ff8d169 code=0x0 [ 113.309105][ T6580] netlink: 186 bytes leftover after parsing attributes in process `syz.3.154'. [ 114.713768][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.165'. [ 115.644101][ T6648] batman_adv: batadv0: adding TT local entry 00:00:03:00:00:00 to non-existent VLAN 6 [ 116.185340][ T6659] syz.1.174 uses obsolete (PF_INET,SOCK_PACKET) [ 119.525896][ T6714] netlink: 330 bytes leftover after parsing attributes in process `syz.2.190'. [ 120.174829][ T6727] tipc: Started in network mode [ 120.194626][ T6727] tipc: Node identity ee00, cluster identity 4711 [ 120.224977][ T6727] tipc: Node number set to 60928 [ 120.302354][ T6726] netlink: 'syz.3.194': attribute type 8 has an invalid length. [ 120.604210][ T6737] openvswitch: netlink: Flow key attr not present in new flow. [ 133.022091][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.028663][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.463419][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.470529][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.902037][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.908438][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 278.299073][ T31] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 278.308316][ T31] Tainted: G U 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 [ 278.317741][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.326568][ T31] task:kworker/u8:1 state:D stack:23000 pid:13 tgid:13 ppid:2 task_flags:0x4248160 flags:0x00004000 [ 278.338864][ T31] Workqueue: writeback wb_workfn (flush-8:0) [ 278.344943][ T31] Call Trace: [ 278.348231][ T31] [ 278.351623][ T31] __schedule+0x116f/0x5de0 [ 278.356170][ T31] ? blk_mq_flush_plug_list+0x75a/0x1c70 [ 278.361976][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 278.367056][ T31] ? __pfx___schedule+0x10/0x10 [ 278.372024][ T31] ? __blk_flush_plug+0x2f3/0x4b0 [ 278.377090][ T31] ? find_held_lock+0x2b/0x80 [ 278.382704][ T31] ? schedule+0x2d7/0x3a0 [ 278.387268][ T31] schedule+0xe7/0x3a0 [ 278.391438][ T31] io_schedule+0xbf/0x130 [ 278.395818][ T31] bit_wait_io+0x15/0xe0 [ 278.400344][ T31] __wait_on_bit+0x62/0x180 [ 278.406862][ T31] ? __pfx_bit_wait_io+0x10/0x10 [ 278.413892][ T31] out_of_line_wait_on_bit+0xd9/0x110 [ 278.420025][ T31] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 278.426060][ T31] ? __pfx_wake_bit_function+0x10/0x10 [ 278.433842][ T31] ? __pfx___might_resched+0x10/0x10 [ 278.440032][ T31] __wait_on_buffer+0x64/0x70 [ 278.444887][ T31] ext4_wait_block_bitmap+0x14e/0x1f0 [ 278.452588][ T31] ext4_read_block_bitmap+0x4e/0xa0 [ 278.457949][ T31] ext4_mb_mark_context+0x11b/0xd40 [ 278.464384][ T31] ? find_held_lock+0x2b/0x80 [ 278.472227][ T31] ? __pfx_ext4_mb_mark_context+0x10/0x10 [ 278.478032][ T31] ext4_mb_mark_diskspace_used+0x466/0x8c0 [ 278.484711][ T31] ? __pfx_ext4_mb_mark_diskspace_used+0x10/0x10 [ 278.493188][ T31] ? kmem_cache_free+0x2d4/0x4d0 [ 278.498190][ T31] ? ext4_ext_map_blocks+0x1b95/0x5d60 [ 278.504791][ T31] ? ext4_mb_new_blocks+0x3f60/0x4f00 [ 278.511624][ T31] ext4_mb_new_blocks+0xa5b/0x4f00 [ 278.516826][ T31] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 278.522635][ T31] ext4_new_meta_blocks+0x30d/0x370 [ 278.527966][ T31] ? __pfx_ext4_new_meta_blocks+0x10/0x10 [ 278.533870][ T31] ? rcu_is_watching+0x12/0xc0 [ 278.538665][ T31] ? ext4_mb_new_blocks+0x7ae/0x4f00 [ 278.544291][ T31] ext4_ext_insert_extent+0xd1d/0x4610 [ 278.552891][ T31] ? __pfx_ext4_mb_new_blocks+0x10/0x10 [ 278.558485][ T31] ? __pfx_ext4_ext_insert_extent+0x10/0x10 [ 278.564431][ T31] ? ext4_ext_search_right+0x2c2/0xb90 [ 278.570331][ T31] ext4_ext_map_blocks+0x205b/0x5d60 [ 278.575652][ T31] ? stack_trace_save+0x8e/0xc0 [ 278.580687][ T31] ? __pfx_stack_trace_save+0x10/0x10 [ 278.586089][ T31] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 278.592214][ T31] ? __kasan_slab_alloc+0x89/0x90 [ 278.597294][ T31] ? ext4_do_writepages+0x1432/0x3490 [ 278.602718][ T31] ? __pfx___might_resched+0x10/0x10 [ 278.609364][ T31] ? __pfx_down_write+0x10/0x10 [ 278.614242][ T31] ? ext4_es_lookup_extent+0xc7/0xc50 [ 278.619759][ T31] ext4_map_blocks+0x45b/0x1390 [ 278.624723][ T31] ? __pfx_ext4_map_blocks+0x10/0x10 [ 278.630073][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 278.635455][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 278.641136][ T31] ext4_do_writepages+0x1a2c/0x3490 [ 278.646374][ T31] ? __pfx_ext4_do_writepages+0x10/0x10 [ 278.652022][ T31] ? ext4_writepages+0x37a/0x7d0 [ 278.656994][ T31] ext4_writepages+0x37a/0x7d0 [ 278.661817][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 278.667139][ T31] ? do_writepages+0x6b6/0x820 [ 278.671994][ T31] ? __pfx_ext4_writepages+0x10/0x10 [ 278.677335][ T31] do_writepages+0x1b2/0x820 [ 278.682063][ T31] ? __pfx_do_writepages+0x10/0x10 [ 278.687204][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 278.692236][ T31] ? reacquire_held_locks+0xcd/0x1f0 [ 278.697556][ T31] __writeback_single_inode+0x160/0xfb0 [ 278.703512][ T31] ? __pfx___writeback_single_inode+0x10/0x10 [ 278.709670][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 278.716171][ T31] writeback_sb_inodes+0x601/0xf90 [ 278.721370][ T31] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 278.727046][ T31] ? _raw_spin_unlock+0x28/0x50 [ 278.732005][ T31] ? move_expired_inodes+0x5a0/0x850 [ 278.737310][ T31] __writeback_inodes_wb+0xf8/0x2d0 [ 278.742571][ T31] ? __pfx___writeback_inodes_wb+0x10/0x10 [ 278.748399][ T31] ? queue_io+0x3f6/0x520 [ 278.752779][ T31] wb_writeback+0x7f3/0xb70 [ 278.757307][ T31] ? __pfx_wb_writeback+0x10/0x10 [ 278.762428][ T31] ? get_nr_dirty_inodes+0x170/0x1e0 [ 278.767735][ T31] wb_workfn+0x8ca/0xbe0 [ 278.772073][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 278.777924][ T31] ? __pfx_wb_workfn+0x10/0x10 [ 278.782948][ T31] ? rcu_is_watching+0x12/0xc0 [ 278.787745][ T31] process_one_work+0x9cc/0x1b70 [ 278.792752][ T31] ? __pfx_process_one_work+0x10/0x10 [ 278.798162][ T31] ? assign_work+0x1a0/0x250 [ 278.802837][ T31] worker_thread+0x6c8/0xf10 [ 278.807459][ T31] ? __pfx_worker_thread+0x10/0x10 [ 278.814182][ T31] kthread+0x3c2/0x780 [ 278.818289][ T31] ? __pfx_kthread+0x10/0x10 [ 278.822947][ T31] ? __pfx_kthread+0x10/0x10 [ 278.827569][ T31] ? __pfx_kthread+0x10/0x10 [ 278.832227][ T31] ? __pfx_kthread+0x10/0x10 [ 278.836843][ T31] ? rcu_is_watching+0x12/0xc0 [ 278.841701][ T31] ? __pfx_kthread+0x10/0x10 [ 278.846326][ T31] ret_from_fork+0x45/0x80 [ 278.850819][ T31] ? __pfx_kthread+0x10/0x10 [ 278.855425][ T31] ret_from_fork_asm+0x1a/0x30 [ 278.860320][ T31] [ 278.863450][ T31] INFO: task jbd2/sda1-8:5173 blocked for more than 143 seconds. [ 278.871236][ T31] Tainted: G U 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 [ 278.880469][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 278.889180][ T31] task:jbd2/sda1-8 state:D stack:26360 pid:5173 tgid:5173 ppid:2 task_flags:0x240040 flags:0x00004000 [ 278.901168][ T31] Call Trace: [ 278.904471][ T31] [ 278.907402][ T31] __schedule+0x116f/0x5de0 [ 278.912174][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 278.918448][ T31] ? __pfx___schedule+0x10/0x10 [ 278.923576][ T31] ? find_held_lock+0x2b/0x80 [ 278.928330][ T31] ? schedule+0x2d7/0x3a0 [ 278.932764][ T31] schedule+0xe7/0x3a0 [ 278.936859][ T31] jbd2_journal_wait_updates+0x11e/0x240 [ 278.942583][ T31] ? __pfx_jbd2_journal_wait_updates+0x10/0x10 [ 278.948761][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 278.954929][ T31] ? __pfx_do_raw_write_lock+0x10/0x10 [ 278.960442][ T31] ? jbd2_journal_commit_transaction+0x4ec/0x6830 [ 278.966899][ T31] jbd2_journal_commit_transaction+0x828/0x6830 [ 278.973251][ T31] ? __lock_acquire+0xaa4/0x1ba0 [ 278.978231][ T31] ? lock_acquire+0x179/0x350 [ 278.982972][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 278.988027][ T31] ? __pfx_jbd2_journal_commit_transaction+0x10/0x10 [ 278.994761][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 279.000028][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 279.005854][ T31] ? debug_object_deactivate+0x1ec/0x3a0 [ 279.011545][ T31] ? __pfx_debug_object_deactivate+0x10/0x10 [ 279.018968][ T31] ? find_held_lock+0x2b/0x80 [ 279.023865][ T31] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 279.029887][ T31] ? rcu_is_watching+0x12/0xc0 [ 279.034805][ T31] kjournald2+0x1f4/0x760 [ 279.039240][ T31] ? __pfx_kjournald2+0x10/0x10 [ 279.044116][ T31] ? find_held_lock+0x2b/0x80 [ 279.048864][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 279.054978][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.060246][ T31] ? __kthread_parkme+0x19e/0x250 [ 279.065320][ T31] ? __pfx_kjournald2+0x10/0x10 [ 279.070255][ T31] kthread+0x3c2/0x780 [ 279.074426][ T31] ? __pfx_kthread+0x10/0x10 [ 279.079053][ T31] ? __pfx_kthread+0x10/0x10 [ 279.083662][ T31] ? __pfx_kthread+0x10/0x10 [ 279.088270][ T31] ? __pfx_kthread+0x10/0x10 [ 279.093030][ T31] ? rcu_is_watching+0x12/0xc0 [ 279.097839][ T31] ? __pfx_kthread+0x10/0x10 [ 279.102516][ T31] ret_from_fork+0x45/0x80 [ 279.106955][ T31] ? __pfx_kthread+0x10/0x10 [ 279.111606][ T31] ret_from_fork_asm+0x1a/0x30 [ 279.116404][ T31] [ 279.121054][ T31] INFO: task syz-executor:5829 blocked for more than 144 seconds. [ 279.128939][ T31] Tainted: G U 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 [ 279.138143][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.147038][ T31] task:syz-executor state:D stack:23112 pid:5829 tgid:5829 ppid:5827 task_flags:0x400100 flags:0x00000002 [ 279.159124][ T31] Call Trace: [ 279.162433][ T31] [ 279.165359][ T31] __schedule+0x116f/0x5de0 [ 279.169966][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 279.174938][ T31] ? __pfx___schedule+0x10/0x10 [ 279.179916][ T31] ? find_held_lock+0x2b/0x80 [ 279.184615][ T31] ? schedule+0x2d7/0x3a0 [ 279.189007][ T31] schedule+0xe7/0x3a0 [ 279.193095][ T31] ? wait_transaction_locked+0x17c/0x230 [ 279.198723][ T31] wait_transaction_locked+0x1a1/0x230 [ 279.204234][ T31] ? wait_transaction_locked+0x17c/0x230 [ 279.209942][ T31] ? __pfx_wait_transaction_locked+0x10/0x10 [ 279.215922][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 279.221489][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 279.229037][ T31] add_transaction_credits+0x110/0xe60 [ 279.234539][ T31] ? do_page_mkwrite+0x171/0x380 [ 279.239520][ T31] ? do_wp_page+0xb9e/0x59f0 [ 279.244128][ T31] ? __handle_mm_fault+0x1ada/0x2a40 [ 279.249645][ T31] ? handle_mm_fault+0x3fe/0xad0 [ 279.254606][ T31] ? do_user_addr_fault+0x60c/0x1370 [ 279.260010][ T31] ? __pfx_add_transaction_credits+0x10/0x10 [ 279.266034][ T31] ? lock_acquire+0x179/0x350 [ 279.270820][ T31] start_this_handle+0x3e7/0x1410 [ 279.275962][ T31] ? __pfx_start_this_handle+0x10/0x10 [ 279.281542][ T31] ? rcu_is_watching+0x12/0xc0 [ 279.286349][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 279.291817][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 279.297502][ T31] ? jbd2__journal_start+0x193/0x6a0 [ 279.302866][ T31] jbd2__journal_start+0x394/0x6a0 [ 279.308116][ T31] __ext4_journal_start_sb+0x195/0x690 [ 279.313640][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 279.318597][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 279.324029][ T31] ext4_dirty_inode+0xa1/0x130 [ 279.330498][ T31] ? rcu_is_watching+0x12/0xc0 [ 279.335334][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 279.340457][ T31] generic_update_time+0xcf/0xf0 [ 279.345430][ T31] file_update_time+0x17d/0x1c0 [ 279.350365][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 279.355672][ T31] ? anon_pipe_read+0xc85/0x1210 [ 279.360813][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 279.366387][ T31] ? vm_normal_page+0x13b/0x2b0 [ 279.371315][ T31] ? find_held_lock+0x2b/0x80 [ 279.376013][ T31] ? find_held_lock+0x2b/0x80 [ 279.380745][ T31] do_page_mkwrite+0x171/0x380 [ 279.385526][ T31] do_wp_page+0xb9e/0x59f0 [ 279.390054][ T31] ? __pfx_do_wp_page+0x10/0x10 [ 279.394933][ T31] ? do_raw_spin_lock+0x12c/0x2b0 [ 279.400016][ T31] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 279.405585][ T31] ? ___pte_offset_map+0x1bc/0x540 [ 279.410884][ T31] __handle_mm_fault+0x1ada/0x2a40 [ 279.416117][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 279.422302][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 279.428312][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 279.434251][ T31] handle_mm_fault+0x3fe/0xad0 [ 279.439158][ T31] do_user_addr_fault+0x60c/0x1370 [ 279.444304][ T31] exc_page_fault+0x5c/0xc0 [ 279.448918][ T31] asm_exc_page_fault+0x26/0x30 [ 279.453795][ T31] RIP: 0033:0x7fe3d44671e5 [ 279.458228][ T31] RSP: 002b:00007ffe053fe340 EFLAGS: 00010206 [ 279.464478][ T31] RAX: 00007fe3cdfde6c8 RBX: 00007ffe053fe440 RCX: 0000000000000000 [ 279.473634][ T31] RDX: 00007fe3cdfde6c4 RSI: 0000000000000008 RDI: 00007ffe053fe440 [ 279.481778][ T31] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 279.489838][ T31] R10: 00007ffe053fe420 R11: 0000000000000000 R12: 0000000000000000 [ 279.497814][ T31] R13: 0000000000021938 R14: fffffffffffde6c8 R15: 0000000000021938 [ 279.505975][ T31] [ 279.509144][ T31] INFO: task syz.2.203:6753 blocked for more than 144 seconds. [ 279.516708][ T31] Tainted: G U 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 [ 279.525992][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.534731][ T31] task:syz.2.203 state:D stack:26488 pid:6753 tgid:6753 ppid:5840 task_flags:0x400040 flags:0x00000004 [ 279.546845][ T31] Call Trace: [ 279.550175][ T31] [ 279.553102][ T31] __schedule+0x116f/0x5de0 [ 279.557624][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 279.562649][ T31] ? __pfx___schedule+0x10/0x10 [ 279.567526][ T31] ? find_held_lock+0x2b/0x80 [ 279.572264][ T31] ? schedule+0x2d7/0x3a0 [ 279.576611][ T31] schedule+0xe7/0x3a0 [ 279.584015][ T31] ? wait_transaction_locked+0x17c/0x230 [ 279.589975][ T31] wait_transaction_locked+0x1a1/0x230 [ 279.595586][ T31] ? wait_transaction_locked+0x17c/0x230 [ 279.601300][ T31] ? __pfx_wait_transaction_locked+0x10/0x10 [ 279.607296][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 279.612839][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 279.619015][ T31] add_transaction_credits+0x110/0xe60 [ 279.624524][ T31] ? do_page_mkwrite+0x171/0x380 [ 279.629522][ T31] ? do_pte_missing+0x29c/0x3fb0 [ 279.634518][ T31] ? __handle_mm_fault+0x103d/0x2a40 [ 279.639866][ T31] ? handle_mm_fault+0x3fe/0xad0 [ 279.644936][ T31] ? do_user_addr_fault+0x60c/0x1370 [ 279.650297][ T31] ? __pfx_add_transaction_credits+0x10/0x10 [ 279.656298][ T31] ? lock_acquire+0x179/0x350 [ 279.661147][ T31] start_this_handle+0x3e7/0x1410 [ 279.666201][ T31] ? __pfx_start_this_handle+0x10/0x10 [ 279.671741][ T31] ? rcu_is_watching+0x12/0xc0 [ 279.676541][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 279.681969][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 279.687628][ T31] ? jbd2__journal_start+0x193/0x6a0 [ 279.692986][ T31] jbd2__journal_start+0x394/0x6a0 [ 279.698120][ T31] __ext4_journal_start_sb+0x195/0x690 [ 279.704244][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 279.709245][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 279.714626][ T31] ext4_dirty_inode+0xa1/0x130 [ 279.719425][ T31] ? rcu_is_watching+0x12/0xc0 [ 279.724223][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 279.729320][ T31] generic_update_time+0xcf/0xf0 [ 279.734291][ T31] file_update_time+0x17d/0x1c0 [ 279.739228][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 279.744286][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 279.749818][ T31] do_page_mkwrite+0x171/0x380 [ 279.754606][ T31] do_pte_missing+0x29c/0x3fb0 [ 279.759441][ T31] ? __handle_mm_fault+0x1010/0x2a40 [ 279.764752][ T31] __handle_mm_fault+0x103d/0x2a40 [ 279.770044][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 279.775530][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 279.780773][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 279.786000][ T31] handle_mm_fault+0x3fe/0xad0 [ 279.790836][ T31] do_user_addr_fault+0x60c/0x1370 [ 279.795978][ T31] exc_page_fault+0x5c/0xc0 [ 279.800555][ T31] asm_exc_page_fault+0x26/0x30 [ 279.805422][ T31] RIP: 0033:0x7fe36fe6d2fa [ 279.809897][ T31] RSP: 002b:00007ffe3292cd60 EFLAGS: 00010202 [ 279.815993][ T31] RAX: 0000001b30c15000 RBX: 00007fe370cd5720 RCX: 0000001b30c14ff8 [ 279.824055][ T31] RDX: 0000001b30820220 RSI: 0000000000000008 RDI: 00007fe370cd5720 [ 279.832179][ T31] RBP: ffffffff81f93516 R08: 00007fe3701a6038 R09: 00007fe370192000 [ 279.840257][ T31] R10: 00007fe36f5ff008 R11: 0000000000000007 R12: 0000000000000007 [ 279.848247][ T31] R13: 000000000000036b R14: ffffffff81f9347d R15: 0000000000000c9c [ 279.856305][ T31] ? shrink_folio_list+0x76d/0x40e0 [ 279.861587][ T31] ? shrink_folio_list+0x806/0x40e0 [ 279.866858][ T31] [ 279.869993][ T31] INFO: task syz.1.204:6757 blocked for more than 144 seconds. [ 279.877549][ T31] Tainted: G U 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 [ 279.886918][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.896022][ T31] task:syz.1.204 state:D stack:28792 pid:6757 tgid:6757 ppid:5839 task_flags:0x400040 flags:0x00004004 [ 279.908357][ T31] Call Trace: [ 279.911954][ T31] [ 279.914925][ T31] __schedule+0x116f/0x5de0 [ 279.919514][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 279.924487][ T31] ? __pfx___schedule+0x10/0x10 [ 279.929413][ T31] ? find_held_lock+0x2b/0x80 [ 279.934121][ T31] ? schedule+0x2d7/0x3a0 [ 279.938452][ T31] schedule+0xe7/0x3a0 [ 279.942672][ T31] ? wait_transaction_locked+0x17c/0x230 [ 279.948408][ T31] wait_transaction_locked+0x1a1/0x230 [ 279.953938][ T31] ? wait_transaction_locked+0x17c/0x230 [ 279.959645][ T31] ? __pfx_wait_transaction_locked+0x10/0x10 [ 279.965669][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 279.971178][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 279.977276][ T31] add_transaction_credits+0x110/0xe60 [ 279.982802][ T31] ? do_page_mkwrite+0x171/0x380 [ 279.988034][ T31] ? do_pte_missing+0x29c/0x3fb0 [ 279.993170][ T31] ? __handle_mm_fault+0x103d/0x2a40 [ 279.998489][ T31] ? handle_mm_fault+0x3fe/0xad0 [ 280.003480][ T31] ? do_user_addr_fault+0x60c/0x1370 [ 280.008904][ T31] ? __pfx_add_transaction_credits+0x10/0x10 [ 280.014902][ T31] ? lock_acquire+0x179/0x350 [ 280.019666][ T31] start_this_handle+0x3e7/0x1410 [ 280.024715][ T31] ? __pfx_start_this_handle+0x10/0x10 [ 280.030224][ T31] ? rcu_is_watching+0x12/0xc0 [ 280.035005][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 280.040442][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 280.046104][ T31] ? jbd2__journal_start+0x193/0x6a0 [ 280.051452][ T31] jbd2__journal_start+0x394/0x6a0 [ 280.056583][ T31] __ext4_journal_start_sb+0x195/0x690 [ 280.062213][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 280.067179][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 280.072633][ T31] ext4_dirty_inode+0xa1/0x130 [ 280.077438][ T31] ? rcu_is_watching+0x12/0xc0 [ 280.082246][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 280.087318][ T31] generic_update_time+0xcf/0xf0 [ 280.092350][ T31] file_update_time+0x17d/0x1c0 [ 280.097263][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 280.102391][ T31] ? __mod_memcg_lruvec_state+0x533/0x760 [ 280.108160][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 280.113713][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 280.119328][ T31] ? pte_alloc_one+0x2b1/0x380 [ 280.124137][ T31] do_page_mkwrite+0x171/0x380 [ 280.129177][ T31] do_pte_missing+0x29c/0x3fb0 [ 280.134013][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 280.139550][ T31] ? __pmd_alloc+0x3c2/0x870 [ 280.144174][ T31] __handle_mm_fault+0x103d/0x2a40 [ 280.149379][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 280.154860][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 280.160112][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 280.165432][ T31] handle_mm_fault+0x3fe/0xad0 [ 280.170271][ T31] do_user_addr_fault+0x60c/0x1370 [ 280.175415][ T31] exc_page_fault+0x5c/0xc0 [ 280.180116][ T31] asm_exc_page_fault+0x26/0x30 [ 280.184991][ T31] RIP: 0033:0x7f5e7be63c9b [ 280.189520][ T31] RSP: 002b:00007fffd4365620 EFLAGS: 00010246 [ 280.195650][ T31] RAX: 00000000003ffde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 280.203979][ T31] RDX: 0000001b30720000 RSI: 0000000000400000 RDI: 00007f5e7c096410 [ 280.212045][ T31] RBP: 0000000000000000 R08: 0000000000000004 R09: 0000000000040000 [ 280.220153][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 280.228162][ T31] R13: 00000000000927c0 R14: 000000000001db1e R15: 00007fffd43658d0 [ 280.236368][ T31] [ 280.239448][ T31] INFO: task syz.0.205:6759 blocked for more than 145 seconds. [ 280.247015][ T31] Tainted: G U 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 [ 280.256326][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 280.265251][ T31] task:syz.0.205 state:D stack:28184 pid:6759 tgid:6759 ppid:5838 task_flags:0x400040 flags:0x00000004 [ 280.277405][ T31] Call Trace: [ 280.280744][ T31] [ 280.283681][ T31] __schedule+0x116f/0x5de0 [ 280.288215][ T31] ? __lock_acquire+0x5ca/0x1ba0 [ 280.293217][ T31] ? __pfx___schedule+0x10/0x10 [ 280.298099][ T31] ? find_held_lock+0x2b/0x80 [ 280.302841][ T31] ? schedule+0x2d7/0x3a0 [ 280.307193][ T31] schedule+0xe7/0x3a0 [ 280.311348][ T31] ? wait_transaction_locked+0x17c/0x230 [ 280.317018][ T31] wait_transaction_locked+0x1a1/0x230 [ 280.322535][ T31] ? wait_transaction_locked+0x17c/0x230 [ 280.328180][ T31] ? __pfx_wait_transaction_locked+0x10/0x10 [ 280.334261][ T31] ? stack_depot_save_flags+0x28/0xa50 [ 280.339969][ T31] ? __pfx_autoremove_wake_function+0x10/0x10 [ 280.346123][ T31] add_transaction_credits+0x110/0xe60 [ 280.351759][ T31] ? do_page_mkwrite+0x171/0x380 [ 280.356758][ T31] ? do_pte_missing+0x29c/0x3fb0 [ 280.361755][ T31] ? __handle_mm_fault+0x103d/0x2a40 [ 280.367063][ T31] ? handle_mm_fault+0x3fe/0xad0 [ 280.372095][ T31] ? do_user_addr_fault+0x60c/0x1370 [ 280.377410][ T31] ? __pfx_add_transaction_credits+0x10/0x10 [ 280.383503][ T31] ? lock_acquire+0x179/0x350 [ 280.388212][ T31] start_this_handle+0x3e7/0x1410 [ 280.393381][ T31] ? __pfx_start_this_handle+0x10/0x10 [ 280.398967][ T31] ? rcu_is_watching+0x12/0xc0 [ 280.403839][ T31] ? trace_kmem_cache_alloc+0x28/0xc0 [ 280.409316][ T31] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 280.415001][ T31] ? jbd2__journal_start+0x193/0x6a0 [ 280.420344][ T31] jbd2__journal_start+0x394/0x6a0 [ 280.425492][ T31] __ext4_journal_start_sb+0x195/0x690 [ 280.431052][ T31] ? ext4_dirty_inode+0xa1/0x130 [ 280.436026][ T31] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 280.441572][ T31] ext4_dirty_inode+0xa1/0x130 [ 280.446350][ T31] ? rcu_is_watching+0x12/0xc0 [ 280.451200][ T31] __mark_inode_dirty+0x1eb/0xe50 [ 280.456340][ T31] generic_update_time+0xcf/0xf0 [ 280.461543][ T31] file_update_time+0x17d/0x1c0 [ 280.466512][ T31] ext4_page_mkwrite+0x35e/0x1750 [ 280.471721][ T31] ? __mod_memcg_lruvec_state+0x533/0x760 [ 280.477627][ T31] ? __pfx_ext4_page_mkwrite+0x10/0x10 [ 280.483131][ T31] ? __pfx_filemap_map_pages+0x10/0x10 [ 280.488623][ T31] ? pte_alloc_one+0x2b1/0x380 [ 280.493477][ T31] do_page_mkwrite+0x171/0x380 [ 280.498296][ T31] do_pte_missing+0x29c/0x3fb0 [ 280.503128][ T31] ? do_raw_spin_unlock+0x172/0x230 [ 280.508344][ T31] ? __pmd_alloc+0x3c2/0x870 [ 280.513025][ T31] __handle_mm_fault+0x103d/0x2a40 [ 280.518173][ T31] ? __pfx___handle_mm_fault+0x10/0x10 [ 280.523739][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 280.529030][ T31] ? lock_vma_under_rcu+0x47d/0x970 [ 280.534284][ T31] handle_mm_fault+0x3fe/0xad0 [ 280.539111][ T31] do_user_addr_fault+0x60c/0x1370 [ 280.544273][ T31] exc_page_fault+0x5c/0xc0 [ 280.548868][ T31] asm_exc_page_fault+0x26/0x30 [ 280.553747][ T31] RIP: 0033:0x7f730ba63c9b [ 280.558170][ T31] RSP: 002b:00007ffd9a163a90 EFLAGS: 00010246 [ 280.564278][ T31] RAX: 000000000003fde8 RBX: 0000000000000000 RCX: 0000000000000000 [ 280.572317][ T31] RDX: 0000001b30620000 RSI: 0000000000040000 RDI: 00007f730bc96410 [ 280.580336][ T31] RBP: 0000000000000000 R08: 0000000000000009 R09: 00007ffd9a1637d5 [ 280.588319][ T31] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 280.596358][ T31] R13: 00000000000927c0 R14: 000000000001dbba R15: 00007ffd9a163d40 [ 280.604412][ T31] [ 280.607446][ T31] [ 280.607446][ T31] Showing all locks held in the system: [ 280.615416][ T31] 6 locks held by kworker/u8:1/13: [ 280.623323][ T31] #0: ffff8880216f9948 ((wq_completion)writeback){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 280.634385][ T31] #1: ffffc90000127d18 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 280.646418][ T31] #2: ffff888033c820e0 (&type->s_umount_key#32){++++}-{4:4}, at: super_trylock_shared+0x1e/0xf0 [ 280.657165][ T31] #3: ffff888033c84b98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: do_writepages+0x1b2/0x820 [ 280.667838][ T31] #4: ffff888033c86950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x5e4/0x1410 [ 280.677693][ T31] #5: ffff88807a98dbf0 (&ei->i_data_sem){++++}-{4:4}, at: ext4_map_blocks+0x355/0x1390 [ 280.687926][ T31] 1 lock held by khungtaskd/31: [ 280.692868][ T31] #0: ffffffff8e3c15c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x36/0x1c0 [ 280.703134][ T31] 2 locks held by getty/5589: [ 280.707830][ T31] #0: ffff88814d1eb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 280.717849][ T31] #1: ffffc9000332e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x41b/0x14f0 [ 280.728061][ T31] 2 locks held by syz-executor/5829: [ 280.733420][ T31] #0: ffff88803311dbc8 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 280.742819][ T31] #1: ffff888033c82518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 280.752397][ T31] 2 locks held by syz.2.203/6753: [ 280.757453][ T31] #0: ffff88807d992a88 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 280.766876][ T31] #1: ffff888033c82518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 280.776482][ T31] 2 locks held by syz.1.204/6757: [ 280.781558][ T31] #0: ffff88801f712448 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 280.791034][ T31] #1: ffff888033c82518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 280.800624][ T31] 2 locks held by syz.0.205/6759: [ 280.805671][ T31] #0: ffff88803432da88 (vm_lock){++++}-{0:0}, at: do_user_addr_fault+0x452/0x1370 [ 280.815169][ T31] #1: ffff888033c82518 (sb_pagefaults){.+.+}-{0:0}, at: do_page_mkwrite+0x171/0x380 [ 280.824777][ T31] [ 280.827093][ T31] ============================================= [ 280.827093][ T31] [ 280.835684][ T31] NMI backtrace for cpu 0 [ 280.835717][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 280.835745][ T31] Tainted: [U]=USER [ 280.835751][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.835762][ T31] Call Trace: [ 280.835770][ T31] [ 280.835777][ T31] dump_stack_lvl+0x116/0x1f0 [ 280.835810][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 280.835834][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 280.835858][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 280.835882][ T31] watchdog+0xf70/0x12c0 [ 280.835906][ T31] ? __pfx_watchdog+0x10/0x10 [ 280.835925][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 280.835953][ T31] ? __kthread_parkme+0x19e/0x250 [ 280.835983][ T31] ? __pfx_watchdog+0x10/0x10 [ 280.836003][ T31] kthread+0x3c2/0x780 [ 280.836025][ T31] ? __pfx_kthread+0x10/0x10 [ 280.836049][ T31] ? __pfx_kthread+0x10/0x10 [ 280.836070][ T31] ? __pfx_kthread+0x10/0x10 [ 280.836091][ T31] ? __pfx_kthread+0x10/0x10 [ 280.836112][ T31] ? rcu_is_watching+0x12/0xc0 [ 280.836145][ T31] ? __pfx_kthread+0x10/0x10 [ 280.836168][ T31] ret_from_fork+0x45/0x80 [ 280.836192][ T31] ? __pfx_kthread+0x10/0x10 [ 280.836214][ T31] ret_from_fork_asm+0x1a/0x30 [ 280.836262][ T31] [ 280.836271][ T31] Sending NMI from CPU 0 to CPUs 1: [ 280.973913][ C1] NMI backtrace for cpu 1 [ 280.973941][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Tainted: G U 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 280.973974][ C1] Tainted: [U]=USER [ 280.973981][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.973994][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 280.974029][ C1] Code: 55 5f 02 c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 bc 19 00 fb f4 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 [ 280.974050][ C1] RSP: 0018:ffffc90000197df8 EFLAGS: 000002c6 [ 280.974067][ C1] RAX: 00000000001380ef RBX: 0000000000000001 RCX: ffffffff8b703439 [ 280.974081][ C1] RDX: 0000000000000000 RSI: ffffffff8dbeb4ff RDI: ffffffff8bf45100 [ 280.974095][ C1] RBP: ffffed1003b59b40 R08: 0000000000000001 R09: ffffed10170a65bd [ 280.974109][ C1] R10: ffff8880b8532deb R11: 0000000000000000 R12: 0000000000000001 [ 280.974123][ C1] R13: ffff88801dacda00 R14: ffffffff90868010 R15: 0000000000000000 [ 280.974137][ C1] FS: 0000000000000000(0000) GS:ffff888124ab7000(0000) knlGS:0000000000000000 [ 280.974157][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 280.974171][ C1] CR2: 0000559bd6482680 CR3: 000000000e182000 CR4: 00000000003526f0 [ 280.974185][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 280.974198][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 280.974211][ C1] Call Trace: [ 280.974218][ C1] [ 280.974225][ C1] default_idle+0x13/0x20 [ 280.974245][ C1] default_idle_call+0x6d/0xb0 [ 280.974264][ C1] do_idle+0x391/0x510 [ 280.974295][ C1] ? __pfx_do_idle+0x10/0x10 [ 280.974322][ C1] ? trace_sched_exit_tp+0x31/0x130 [ 280.974357][ C1] cpu_startup_entry+0x4f/0x60 [ 280.974385][ C1] start_secondary+0x21d/0x2b0 [ 280.974407][ C1] ? __pfx_start_secondary+0x10/0x10 [ 280.974431][ C1] common_startup_64+0x13e/0x148 [ 280.974466][ C1] [ 280.975177][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 281.175566][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Tainted: G U 6.15.0-rc2-syzkaller-00037-g834a4a689699 #0 PREEMPT(full) [ 281.188949][ T31] Tainted: [U]=USER [ 281.192746][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 281.202810][ T31] Call Trace: [ 281.206094][ T31] [ 281.209024][ T31] dump_stack_lvl+0x3d/0x1f0 [ 281.213635][ T31] panic+0x71c/0x800 [ 281.217559][ T31] ? __pfx_panic+0x10/0x10 [ 281.221991][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 281.227377][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 281.233385][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 281.238809][ T31] ? watchdog+0xdda/0x12c0 [ 281.243247][ T31] ? watchdog+0xdcd/0x12c0 [ 281.247686][ T31] watchdog+0xdeb/0x12c0 [ 281.251957][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.256641][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 281.261947][ T31] ? __kthread_parkme+0x19e/0x250 [ 281.266984][ T31] ? __pfx_watchdog+0x10/0x10 [ 281.271665][ T31] kthread+0x3c2/0x780 [ 281.275744][ T31] ? __pfx_kthread+0x10/0x10 [ 281.280430][ T31] ? __pfx_kthread+0x10/0x10 [ 281.285027][ T31] ? __pfx_kthread+0x10/0x10 [ 281.289633][ T31] ? __pfx_kthread+0x10/0x10 [ 281.294234][ T31] ? rcu_is_watching+0x12/0xc0 [ 281.299010][ T31] ? __pfx_kthread+0x10/0x10 [ 281.303604][ T31] ret_from_fork+0x45/0x80 [ 281.308053][ T31] ? __pfx_kthread+0x10/0x10 [ 281.312668][ T31] ret_from_fork_asm+0x1a/0x30 [ 281.317476][ T31] [ 281.320756][ T31] Kernel Offset: disabled [ 281.325078][ T31] Rebooting in 86400 seconds..